Import AITURK IDE 1.0.0-beta.1 from Hermes 63279301; preserve MIT license

apps/desktop/src/store/embed-consent.ts

@@ -0,0 +1,37 @@
+import { type Codec, Codecs, persistentAtom } from '@/lib/persisted'
+
+// Privacy gate for inline embeds. Loading an embed reaches out to a third party
+// (IP, referrer, cookies), so by default we render a placeholder until the user
+// consents — per embed ("Load once") or per service ("Always allow YouTube").
+// Mirrors the tool-approval model, but purely client-side (the renderer is what
+// makes the request) so it never touches the gateway/config.yaml.
+export type EmbedMode = 'always' | 'ask' | 'off'
+
+const MODE_KEY = 'hermes.desktop.embed-mode'
+const ALLOWED_KEY = 'hermes.desktop.embed-allowed'
+
+const modeCodec: Codec<EmbedMode> = {
+  decode: raw => (raw === 'always' || raw === 'off' ? raw : 'ask'),
+  encode: value => value
+}
+
+/** Global default: ask (placeholder), always (auto-load), off (plain link). */
+export const $embedMode = persistentAtom<EmbedMode>(MODE_KEY, 'ask', modeCodec)
+/** Providers granted a standing "always allow" (e.g. `youtube`, `twitter`). */
+export const $embedAllowed = persistentAtom<string[]>(ALLOWED_KEY, [], Codecs.stringArray)
+
+export function allowProvider(provider: string) {
+  const current = $embedAllowed.get()
+
+  if (!current.includes(provider)) {
+    $embedAllowed.set([...current, provider])
+  }
+}
+
+export function setEmbedMode(mode: EmbedMode) {
+  $embedMode.set(mode)
+}
+
+export function clearEmbedAllowed() {
+  $embedAllowed.set([])
+}