mirror of
https://github.com/NousResearch/hermes-agent.git
synced 2026-07-01 12:02:05 +00:00
db6ced4712
Embeds reach out to third parties on render, so default to a placeholder that mirrors the tool-approval UX: "Load <service>" (this embed) or "Always allow <service>" (persisted). A desktop-local store ($embedMode ask|always|off + per-service allowlist) gates the fetch with zero gateway round-trip; an Appearance setting controls the global default. Local renderers (mermaid, svg, alerts) are never gated. Addresses review feedback on outbound third-party requests.
37 lines
1.4 KiB
TypeScript
37 lines
1.4 KiB
TypeScript
import { type Codec, Codecs, persistentAtom } from '@/lib/persisted'
|
|
|
|
// Privacy gate for inline embeds. Loading an embed reaches out to a third party
|
|
// (IP, referrer, cookies), so by default we render a placeholder until the user
|
|
// consents — per embed ("Load once") or per service ("Always allow YouTube").
|
|
// Mirrors the tool-approval model, but purely client-side (the renderer is what
|
|
// makes the request) so it never touches the gateway/config.yaml.
|
|
export type EmbedMode = 'always' | 'ask' | 'off'
|
|
|
|
const MODE_KEY = 'hermes.desktop.embed-mode'
|
|
const ALLOWED_KEY = 'hermes.desktop.embed-allowed'
|
|
|
|
const modeCodec: Codec<EmbedMode> = {
|
|
decode: raw => (raw === 'always' || raw === 'off' ? raw : 'ask'),
|
|
encode: value => value
|
|
}
|
|
|
|
/** Global default: ask (placeholder), always (auto-load), off (plain link). */
|
|
export const $embedMode = persistentAtom<EmbedMode>(MODE_KEY, 'ask', modeCodec)
|
|
/** Providers granted a standing "always allow" (e.g. `youtube`, `twitter`). */
|
|
export const $embedAllowed = persistentAtom<string[]>(ALLOWED_KEY, [], Codecs.stringArray)
|
|
|
|
export function allowProvider(provider: string) {
|
|
const current = $embedAllowed.get()
|
|
|
|
if (!current.includes(provider)) {
|
|
$embedAllowed.set([...current, provider])
|
|
}
|
|
}
|
|
|
|
export function setEmbedMode(mode: EmbedMode) {
|
|
$embedMode.set(mode)
|
|
}
|
|
|
|
export function clearEmbedAllowed() {
|
|
$embedAllowed.set([])
|
|
}
|