@marimo-team/islands 0.23.15-dev37 → 0.23.15-dev39

package/dist/{chat-ui-Dv6Ox7Lu.js → chat-ui-C0z13gJB.js}

@@ -6,13 +6,13 @@ import { _ as Logger, c as Objects, g as cn, l as useEventListener, t as Button
 import { t as require_react } from "./react-DA-nE2FX.js";
 import { t as require_compiler_runtime } from "./compiler-runtime-CEbnTgxf.js";
 import { r as toast } from "./copy-COam1EG7.js";
-import { C as Accordion, Dn as atomWithStorage, Dt as createVariableInfoElement, E as AccordionTrigger, F as base64ToDataURL, Fn as Wrench, H as renderHTML, In as Trash2, Jt as allTablesAtom, Kn as ExternalLink, Lt as jotaiJsonStorage, O as ChatBubbleIcon, Pt as generateUUID, Q as notebookAtom, Qt as getRequestClient, Rt as variablesAtom, S as AIContextRegistry, T as AccordionItem, Un as Info, Ut as PluralWord, Vn as LoaderCircle, Wn as FileText, Xt as getTableType, Yn as CircleX, Yt as dataSourceConnectionsAtom, _n as CellOutputId, an as isMarimoErrorsMime, b as contextToXml, bt as displayCellName, c as Popover, d as PopoverTrigger, f as isOutputEmpty, fn as ZodLocalStorage, g as formatDatasourceContextForCell, h as DatasourceContextProvider, in as isErrorMime, jt as moveToEndOfEditor, kn as Anchor2, n as Spinner, on as isTracebackMime, r as MarkdownRenderer, sn as singleFacet, st as parseHtmlContent, t as toPng, u as PopoverContent, v as Boosts, w as AccordionContent, x as AIContextProvider, y as Sections } from "./html-to-image-F0RpWXNK.js";
+import { C as Accordion, Dn as atomWithStorage, Dt as createVariableInfoElement, E as AccordionTrigger, F as base64ToDataURL, Fn as Wrench, H as renderHTML, In as Trash2, Jt as allTablesAtom, Kn as ExternalLink, Lt as jotaiJsonStorage, O as ChatBubbleIcon, Pt as generateUUID, Q as notebookAtom, Qt as getRequestClient, Rt as variablesAtom, S as AIContextRegistry, T as AccordionItem, Un as Info, Ut as PluralWord, Vn as LoaderCircle, Wn as FileText, Xt as getTableType, Yn as CircleX, Yt as dataSourceConnectionsAtom, _n as CellOutputId, an as isMarimoErrorsMime, b as contextToXml, bt as displayCellName, c as Popover, d as PopoverTrigger, f as isOutputEmpty, fn as ZodLocalStorage, g as formatDatasourceContextForCell, h as DatasourceContextProvider, in as isErrorMime, jt as moveToEndOfEditor, kn as Anchor2, n as Spinner, on as isTracebackMime, r as MarkdownRenderer, sn as singleFacet, st as parseHtmlContent, t as toPng, u as PopoverContent, v as Boosts, w as AccordionContent, x as AIContextProvider, y as Sections } from "./html-to-image-CEo5pRYw.js";
 import "./chunk-5FQGJX7Z-BbqSm5gU.js";
 import { u as createLucideIcon } from "./dist--2Bqjvs0.js";
 import { C as logNever, I as X, R as ChevronDown, t as Strings } from "./strings-Dq_j3Rxw.js";
 import { C as DropdownMenuTrigger, a as NumberField, f as DropdownMenu, h as DropdownMenuItem, p as DropdownMenuContent, r as Input } from "./input-BGPrFH3g.js";
-import { p as isUrl, v as CircleQuestionMark } from "./toDate-CKpRx4TS.js";
-import { a as MarimoIncomingMessageEvent, d as Square, f as File$1, n as blobToString, t as processOutput, u as deserializeBlob } from "./process-output-C2tUYuG7.js";
+import { p as isUrl, v as CircleQuestionMark } from "./toDate-BRJgtOGm.js";
+import { a as MarimoIncomingMessageEvent, d as Square, f as File$1, n as blobToString, t as processOutput, u as deserializeBlob } from "./process-output-BOvvilRG.js";
 import "./react-dom-BTJzcVJ9.js";
 import { t as require_jsx_runtime } from "./jsx-runtime-DebpN0FN.js";
 import { A as looseObject, B as union, C as any, D as discriminatedUnion, E as custom, H as safeParseAsync, I as record, L as strictObject, M as never, N as number, O as lazy, P as object$1, R as string, S as _null, T as boolean, V as unknown, W as toJSONSchema, b as _enum, k as literal, w as array$1, x as _instanceof } from "./zod-CijjQh4u.js";

package/dist/{code-visibility-D-FHtSSL.js → code-visibility-DcoFoO9E.js}

@@ -6,14 +6,14 @@ import { _ as Logger, c as Objects, g as cn, h as Events, m as useComposedRefs,
 import { t as require_react } from "./react-DA-nE2FX.js";
 import { t as require_compiler_runtime } from "./compiler-runtime-CEbnTgxf.js";
 import { n as Copy, r as toast, t as copyToClipboard } from "./copy-COam1EG7.js";
-import { $n as import_lib, An as Close$1, At as toggleBreakpoint, B as isDataURLString, Bn as Minus, C as Accordion, Dn as atomWithStorage, E as AccordionTrigger, Fn as Wrench, Ft as useChromeActions, Gn as Eye, Gt as DATA_TYPE_ICON, H as renderHTML, In as Trash2, It as adaptForLocalStorage, J as getCellEditorView, Kn as ExternalLink, Kt as getDataTypeColor, L as base64ToUint8Array, Lt as jotaiJsonStorage, M as DotFilledIcon, Mt as goToCellLine, N as PinLeftIcon, P as PinRightIcon, Q as notebookAtom, Qn as esm_default, Qt as getRequestClient, T as AccordionItem, Tn as jsonToMarkdown, Un as Info, Ut as PluralWord, Vn as LoaderCircle, Wn as FileText, Yn as CircleX, Zn as Braces, _ as getDatasourceContext, _n as CellOutputId, _t as sanitizeHtml, bt as displayCellName, c as Popover, cn as elementContainsMarimoCellFile, ct as AnsiUp, d as PopoverTrigger, dt as kioskModeAtom, en as useRequestClient, ft as useInstallAllowed, it as useCellNames, j as ChevronRightIcon, k as CheckIcon, l as PopoverClose, ln as extractAllTracebackInfo, m as useExpandedOutput, mt as outputIsLoading, n as Spinner, nt as useCellActions, pn as filenameAtom, pt as viewStateAtom, r as MarkdownRenderer, rt as useCellIds, t as toPng, u as PopoverContent, un as getTracebackInfo, vn as HTMLCellId, vt as DATA_CELL_ID, w as AccordionContent, wn as jsonParseWithSpecialChar, wt as Checkbox, yn as SCRATCH_CELL_ID, yt as getCellDomProps, z as extractBase64FromDataURL, zn as NotebookPen, zt as getFeatureFlag, __tla as __tla_0 } from "./html-to-image-F0RpWXNK.js";
+import { $n as import_lib, An as Close$1, At as toggleBreakpoint, B as isDataURLString, Bn as Minus, C as Accordion, Dn as atomWithStorage, E as AccordionTrigger, Fn as Wrench, Ft as useChromeActions, Gn as Eye, Gt as DATA_TYPE_ICON, H as renderHTML, In as Trash2, It as adaptForLocalStorage, J as getCellEditorView, Kn as ExternalLink, Kt as getDataTypeColor, L as base64ToUint8Array, Lt as jotaiJsonStorage, M as DotFilledIcon, Mt as goToCellLine, N as PinLeftIcon, P as PinRightIcon, Q as notebookAtom, Qn as esm_default, Qt as getRequestClient, T as AccordionItem, Tn as jsonToMarkdown, Un as Info, Ut as PluralWord, Vn as LoaderCircle, Wn as FileText, Yn as CircleX, Zn as Braces, _ as getDatasourceContext, _n as CellOutputId, _t as sanitizeHtml, bt as displayCellName, c as Popover, cn as elementContainsMarimoCellFile, ct as AnsiUp, d as PopoverTrigger, dt as kioskModeAtom, en as useRequestClient, ft as useInstallAllowed, it as useCellNames, j as ChevronRightIcon, k as CheckIcon, l as PopoverClose, ln as extractAllTracebackInfo, m as useExpandedOutput, mt as outputIsLoading, n as Spinner, nt as useCellActions, pn as filenameAtom, pt as viewStateAtom, r as MarkdownRenderer, rt as useCellIds, t as toPng, u as PopoverContent, un as getTracebackInfo, vn as HTMLCellId, vt as DATA_CELL_ID, w as AccordionContent, wn as jsonParseWithSpecialChar, wt as Checkbox, yn as SCRATCH_CELL_ID, yt as getCellDomProps, z as extractBase64FromDataURL, zn as NotebookPen, zt as getFeatureFlag, __tla as __tla_0 } from "./html-to-image-CEo5pRYw.js";
 import { o as useSize, u as createLucideIcon } from "./dist--2Bqjvs0.js";
 import { c as Calendar, i as createReducerAndAtoms, r as Badge } from "./useLifecycle-C6wHjkhW.js";
 import { a as ListFilter, i as Table$1, n as $fb18d541ea1ad717$export$ad991b66133851cf, o as ChartPie, r as $5a387cc49350e6db$export$722debc0e56fea39, t as $896ba0a80a8f4d36$export$85fd5fdf27bacc79 } from "./useDateFormatter-CMnRuVmN.js";
 import { t as Check } from "./check-C9OoNtR4.js";
 import { C as logNever, E as $18f2051aff69b9bf$export$43bb16f9c6d9e3f7, I as X, N as usePrevious$1, O as $b5e257d569688ac6$export$535bd6ca7f90a273, P as useDirection, R as ChevronDown, S as assertNever, T as $488c6ddbf4ef74c2$export$cc77c4ff7e8673c5, _ as menuControlVariants, b as menuSeparatorVariants, f as selectStyles, g as menuControlCheckVariants, h as menuContentCommon, i as SelectContent, l as SelectTrigger, o as SelectItem, p as MENU_ITEM_DISABLED, r as Select, t as Strings, u as SelectValue, v as menuItemVariants, w as $a916eb452884faea$export$b7a616150fdb9f44, x as menuSubTriggerVariants, y as menuLabelVariants } from "./strings-Dq_j3Rxw.js";
 import { $ as $e93e671b31057976$export$b8473d3665f3a75a, $t as Item2$2, A as $ee014567cb39d3f0$export$ff05c3ac10437e03, At as $c87311424ea30a05$export$78551043582a6a98, B as $64fa3d84918910a7$export$4d86445c2cf5e3, Bt as $d4ee10de306f2510$export$e58f029f0fbfdb29, C as DropdownMenuTrigger, Ct as $b4b717babfbb907b$export$bebd5a1431fec25d, D as $a049562f99e7db0e$export$f9c6924e160136d1, Dt as $df56164dff5785e2$export$4338b53315abf666, E as $a049562f99e7db0e$export$eb2fcfdbd7ba97d4, Et as $8ae05eaa5c114e9c$export$7f54fc3180508a52, F as $01b77f81d0f07f68$export$75b6ee27786ba447, Ft as $65484d02dcb7eb3e$export$457c3d6518dd4c6f, G as $64fa3d84918910a7$export$ef03459518577ad4, Gt as $bdb11010cef70236$export$b4cc09c592e8fdb8, H as $64fa3d84918910a7$export$c245e6201fed2f75, Ht as $431fbd86ca7dc216$export$b204af158042fbac, I as $01b77f81d0f07f68$export$b04be29aa201d4f5, It as $3ef42575df84b30b$export$9d1611c77c2fe928, J as marked, Jt as Anchor2, K as $64fa3d84918910a7$export$fabf2dc03a41866e, Kt as $bdb11010cef70236$export$f680877a34711e37, L as $f39a9eba43920ace$export$b5d7cc18bb8d2b59, Lt as $d4ee10de306f2510$export$4282f70798064fe0, M as $514c0188e459b4c0$export$9afb8bc826b033ea, Mt as $c87311424ea30a05$export$a11b0059900ceec8, N as $d2b4bc8c273e7be6$export$24d547caef80ccd1, Nt as $c87311424ea30a05$export$fedb369cb70207f1, O as $d3e0e05bdfcf66bd$export$c24727297075ec6a, Ot as $313b98861ee5dd6c$export$d6875122194c7b44, P as $d2b4bc8c273e7be6$export$353f5b6fc5456de1, Pt as $7215afc6de606d6b$export$de79e2c695e052f3, Q as $2baaea4c71418dea$export$294aa081a6c6f55d, Qt as Group, R as $64fa3d84918910a7$export$2881499e37b75b9a, Rt as $d4ee10de306f2510$export$b4f377a2b6254582, S as DropdownMenuSubTrigger, St as $b4b717babfbb907b$export$4c063cf1350e6fed, T as $3985021b0ad6602f$export$f5b8910cec6cf069, Tt as $e9faafb641e167db$export$90fc3a17d93f704c, U as $64fa3d84918910a7$export$c62b8e45d58ddad9, Ut as $431fbd86ca7dc216$export$f21a1ffae260145a, V as $64fa3d84918910a7$export$9d4c57ee4c6ffdd8, Vt as $f4e2df6bd15f8569$export$98658e8c59125e6a, W as $64fa3d84918910a7$export$df3a06d6289f983e, Wt as $ff5963eb1fccf552$export$e08e3b67e392101e, Xt as CheckboxItem, Yt as Arrow2, Z as $d2e8511e6f209edf$export$e908e06f4b8e3402, Zt as Content2$1, _ as DropdownMenuPortal, _t as $f6c31cce2adf654f$export$45712eceda6fad21, a as NumberField, an as Root3, at as $319e236875307eab$export$a9b970dcc4ae71a9, b as DropdownMenuSub, bt as $9446cca9a3875146$export$7d15b64cf5a3a4c4, c as prettyEngineeringNumber, cn as SubContent, ct as $6c7bd7858deea686$export$cd11ab140839f11d, dn as Item, dt as $6db58dc88e78b024$export$2f817fcdc4b89ae0, en as ItemIndicator, et as $e5be200c675c3b3a$export$75ee7c75d68f5b0e, f as DropdownMenu, fn as Root$3, ft as $5b160d28a433310d$export$c17fa47878dc55b6, g as DropdownMenuLabel, gn as ChevronRight, gt as $507fabe10e71c6fb$export$630ff653c5ada6a9, h as DropdownMenuItem, hn as Circle, ht as $3ad3f6e1647bc98d$export$80f3e147d781571c, in as RadioItem, it as $e5be200c675c3b3a$export$fc1a364ae1f3ff10, j as $514c0188e459b4c0$export$5f1af8db9871e1d6, jt as $c87311424ea30a05$export$9ac100e40613ea10, k as $ee014567cb39d3f0$export$f551688fc98f2e09, kt as $c87311424ea30a05$export$6446a186d09e379e, l as prettyNumber, ln as SubTrigger, lt as $fca6afa0e843324b$export$87b761675e8eaa10, mn as Search, mt as $9ab94262bd0047c7$export$420e68273165f4ec, nn as Portal, nt as $e5be200c675c3b3a$export$aca958c65c314e6c, on as Separator$1, ot as $f7dceffc5ad7768b$export$4e328f61c538687f, p as DropdownMenuContent, pn as createRovingFocusGroupScope, pt as $6179b936705e76d3$export$ae780daf29e6d456, qt as $f0a04ccd8dbdd83b$export$e5c5a5f917a5871c, r as Input, rn as RadioGroup$2, rt as $e5be200c675c3b3a$export$dad6ae84456c676a, s as maxFractionalDigits, sn as Sub, tn as Label$1, tt as $e5be200c675c3b3a$export$a763b9476acd3eb, u as prettyScientificNumber, un as createMenuScope, ut as $fca6afa0e843324b$export$f12b703ca79dfbb1, v as DropdownMenuSeparator, vt as _class_private_field_init, w as $3985021b0ad6602f$export$37fb8590cf2c088c, wt as $99facab73266f662$export$5add1d006293d136, x as DropdownMenuSubContent, xt as $458b0a5536c1a7cf$export$40bfa8c7b0832715, yt as $ae1eeba8b9eafd08$export$5165eccb35aaadb5, z as $64fa3d84918910a7$export$29f1550f4b0d4415, zt as $d4ee10de306f2510$export$cd4e5573fbe2b576 } from "./input-BGPrFH3g.js";
-import { _ as isWasm, a as millisecondsInMinute, c as asRemoteURL, d as isStaticNotebook, i as millisecondsInHour, n as constructFrom, o as millisecondsInSecond, p as isUrl, r as millisecondsInDay, s as millisecondsInWeek, t as toDate } from "./toDate-CKpRx4TS.js";
+import { _ as isWasm, a as millisecondsInMinute, c as asRemoteURL, d as isStaticNotebook, i as millisecondsInHour, n as constructFrom, o as millisecondsInSecond, p as isUrl, r as millisecondsInDay, s as millisecondsInWeek, t as toDate } from "./toDate-BRJgtOGm.js";
 import { r as Plus, t as ErrorBoundary } from "./ErrorBoundary-B_CAG7_e.js";
 import { n as clsx_default } from "./clsx-CIWA5tNO.js";
 import { t as require_react_dom } from "./react-dom-BTJzcVJ9.js";
@@ -28,7 +28,7 @@ import { t as invariant } from "./invariant-wRzNXIsJ.js";
 import { c as uniqueBy, t as Arrays } from "./arrays-sEtDRoG4.js";
 import { n as once, t as memoizeLastValue } from "./once-DPuqGUeo.js";
 import { a as parser } from "./dist-C_Y3oV3C.js";
-import { a as isValid, i as AlertTitle, n as Alert, t as arrow } from "./formats-BX3uDQbB.js";
+import { a as isValid, i as AlertTitle, n as Alert, t as arrow } from "./formats-CitsMtUm.js";
 import { n as memoize$1, t as isPropValid } from "./emotion-is-prop-valid.esm-DzSb5hsH.js";
 import { n as formats } from "./vega-loader.browser-CZ-J8Py3.js";
 import { a as getContainerWidth, n as vegaLoadData, r as createBatchedLoader, s as tooltipHandler, t as parseCsvData } from "./loader-Boph2xIS.js";
@@ -36290,7 +36290,7 @@ ${d}`,
       return Logger.warn("Failed to get version from mount config"), null;
     }
   }
-  marimoVersionAtom = atom(getVersionFromMountConfig() || "0.23.15-dev37");
+  marimoVersionAtom = atom(getVersionFromMountConfig() || "0.23.15-dev39");
   showCodeInRunModeAtom = atom(true);
   atom(null);
   var import_compiler_runtime = require_compiler_runtime();

package/dist/{formats-BX3uDQbB.js → formats-CitsMtUm.js}

@@ -2,7 +2,7 @@ import { s as __toESM } from "./chunk-BNovOVIE.js";
 import { g as cn, r as cva } from "./button-BacYv-bE.js";
 import { t as require_react } from "./react-DA-nE2FX.js";
 import { t as require_compiler_runtime } from "./compiler-runtime-CEbnTgxf.js";
-import { t as toDate } from "./toDate-CKpRx4TS.js";
+import { t as toDate } from "./toDate-BRJgtOGm.js";
 import { t as require_jsx_runtime } from "./jsx-runtime-DebpN0FN.js";
 import { i as tableFromIPC } from "./loader-Boph2xIS.js";
 function isDate(e) {

package/dist/{html-to-image-F0RpWXNK.js → html-to-image-CEo5pRYw.js}

@@ -12,7 +12,7 @@ import { a as Type, c as Calendar, i as createReducerAndAtoms, o as ToggleLeft,
 import { t as Check } from "./check-C9OoNtR4.js";
 import { C as logNever, F as createCollection, I as X, N as usePrevious, P as useDirection, R as ChevronDown, S as assertNever, a as SelectGroup, c as SelectSeparator, i as SelectContent, l as SelectTrigger, o as SelectItem, r as Select, s as SelectLabel, t as Strings, u as SelectValue } from "./strings-Dq_j3Rxw.js";
 import { J as marked, X as useDebouncedCallback, _t as $f6c31cce2adf654f$export$45712eceda6fad21, q as useNonce } from "./input-BGPrFH3g.js";
-import { _ as isWasm, g as Deferred, h as waitForConnectionOpen, l as getRuntimeManager, t as toDate, v as CircleQuestionMark } from "./toDate-CKpRx4TS.js";
+import { _ as isWasm, g as Deferred, h as waitForConnectionOpen, l as getRuntimeManager, t as toDate, v as CircleQuestionMark } from "./toDate-BRJgtOGm.js";
 import { t as require_react_dom } from "./react-dom-BTJzcVJ9.js";
 import { t as require_jsx_runtime } from "./jsx-runtime-DebpN0FN.js";
 import { B as union, N as number, P as object, Q as withSmartCollisionBoundary, R as string, T as boolean, Y as MAX_HEIGHT_OFFSET, Z as withFullScreenAsRoot, _t as createContextScope, at as Portal, ct as DismissableLayer, dt as useId, et as StyleNamespace, ft as Presence, ht as composeEventHandlers, it as useFocusGuards, k as literal, lt as Root$1, mt as useLayoutEffect2, nt as Combination_default, ot as FocusScope, pt as useControllableState, st as Branch, tt as hideOthers, ut as useCallbackRef, vt as Primitive, w as array, yt as dispatchDiscreteCustomEvent } from "./zod-CijjQh4u.js";

package/dist/main.js

@@ -22,17 +22,17 @@ import { _ as Logger, c as Objects, g as cn, h as Events, i as NOT_SET, l as use
 import { t as require_react } from "./react-DA-nE2FX.js";
 import { t as require_compiler_runtime } from "./compiler-runtime-CEbnTgxf.js";
 import { n as Copy, r as toast, t as copyToClipboard } from "./copy-COam1EG7.js";
-import { $ as notebookOutline, $t as requestClientAtom, A as ChevronDownIcon, Bt as repl, C as Accordion, Cn as RANDOM_ID_ATTR, Ct as normalizeName, D as BorderAllIcon, Dn as atomWithStorage, E as AccordionTrigger, En as atomWithReducer, Et as MarkdownLanguageAdapter, G as hasRunAnyCellAtom, Gn as Eye, Gt as DATA_TYPE_ICON, H as renderHTML, Hn as Layers, Ht as MarkdownParser, I as base64ToDataView, In as Trash2, Jn as Columns2, K as cellIdsAtom, Ln as Table2, Lt as jotaiJsonStorage, Mn as Item$1, Nn as Root2$1, Nt as DeferredRequestRegistry, On as selectAtom, Ot as PathBuilder, Pn as Trigger2, Pt as generateUUID, Q as notebookAtom, Qt as getRequestClient, R as dataViewToBase64, Rn as PaintRoller, Sn as OBJECT_ID_ATTR, St as isInternalCellName, T as AccordionItem, Tt as customPythonLanguageSupport, U as getMarimoExportContext, Un as Info, V as safeExtractSetUIElementMessageBuffers, Vn as LoaderCircle, Vt as SQLParser, W as hasTrustedExportContext, Wn as FileText, Wt as PluralWords, X as hasOnlyOneCellAtom, Xn as CircleAlert, Y as getCellNames, Z as initialNotebookState, Zn as Braces, Zt as convertStatsName, a as useCellFocusActions, at as createCell, bn as UIElementId, dn as NotebookScopedLocalStorage, dt as kioskModeAtom, en as useRequestClient, et as numColumnsAtom, f as isOutputEmpty, gn as parseInitialValue, gt as headingToIdentifier, hn as parseDataset, ht as outputIsStale, i as LazyAnyLanguageCodeMirror, jn as Content2, kt as Paths, lt as getInitialAppMode, mn as parseAttrValue, mt as outputIsLoading, n as Spinner, nn as publishedCellClasses, nt as useCellActions, o as useLastFocusedCellId, p as useExpandedConsoleOutput, pt as viewStateAtom, q as createActions, qn as Database, qt as require_client, rn as shouldHidePublishedCell, rt as useCellIds, s as maybeAddAltairImport, tn as isUninstantiated, tt as reducer, ut as initialModeAtom, vn as HTMLCellId, w as AccordionContent, wn as jsonParseWithSpecialChar, wt as Checkbox, xn as findCellId, xt as getValidName, __tla as __tla_0 } from "./html-to-image-F0RpWXNK.js";
+import { $ as notebookOutline, $t as requestClientAtom, A as ChevronDownIcon, Bt as repl, C as Accordion, Cn as RANDOM_ID_ATTR, Ct as normalizeName, D as BorderAllIcon, Dn as atomWithStorage, E as AccordionTrigger, En as atomWithReducer, Et as MarkdownLanguageAdapter, G as hasRunAnyCellAtom, Gn as Eye, Gt as DATA_TYPE_ICON, H as renderHTML, Hn as Layers, Ht as MarkdownParser, I as base64ToDataView, In as Trash2, Jn as Columns2, K as cellIdsAtom, Ln as Table2, Lt as jotaiJsonStorage, Mn as Item$1, Nn as Root2$1, Nt as DeferredRequestRegistry, On as selectAtom, Ot as PathBuilder, Pn as Trigger2, Pt as generateUUID, Q as notebookAtom, Qt as getRequestClient, R as dataViewToBase64, Rn as PaintRoller, Sn as OBJECT_ID_ATTR, St as isInternalCellName, T as AccordionItem, Tt as customPythonLanguageSupport, U as getMarimoExportContext, Un as Info, V as safeExtractSetUIElementMessageBuffers, Vn as LoaderCircle, Vt as SQLParser, W as hasTrustedExportContext, Wn as FileText, Wt as PluralWords, X as hasOnlyOneCellAtom, Xn as CircleAlert, Y as getCellNames, Z as initialNotebookState, Zn as Braces, Zt as convertStatsName, a as useCellFocusActions, at as createCell, bn as UIElementId, dn as NotebookScopedLocalStorage, dt as kioskModeAtom, en as useRequestClient, et as numColumnsAtom, f as isOutputEmpty, gn as parseInitialValue, gt as headingToIdentifier, hn as parseDataset, ht as outputIsStale, i as LazyAnyLanguageCodeMirror, jn as Content2, kt as Paths, lt as getInitialAppMode, mn as parseAttrValue, mt as outputIsLoading, n as Spinner, nn as publishedCellClasses, nt as useCellActions, o as useLastFocusedCellId, p as useExpandedConsoleOutput, pt as viewStateAtom, q as createActions, qn as Database, qt as require_client, rn as shouldHidePublishedCell, rt as useCellIds, s as maybeAddAltairImport, tn as isUninstantiated, tt as reducer, ut as initialModeAtom, vn as HTMLCellId, w as AccordionContent, wn as jsonParseWithSpecialChar, wt as Checkbox, xn as findCellId, xt as getValidName, __tla as __tla_0 } from "./html-to-image-CEo5pRYw.js";
 import { __tla as __tla_1 } from "./chunk-5FQGJX7Z-BbqSm5gU.js";
 import { o as useSize, s as Root$1, u as createLucideIcon } from "./dist--2Bqjvs0.js";
 import { A as SquareFunction, C as DEFAULT_COLOR_SCHEME, D as SCALE_TYPE_DESCRIPTIONS, E as EMPTY_VALUE$1, O as TIME_UNIT_DESCRIPTIONS, S as DEFAULT_AGGREGATION, T as DEFAULT_TIME_UNIT, _ as AGGREGATION_TYPE_DESCRIPTIONS, a as AGGREGATION_FNS$1, b as COLOR_SCHEMES, c as COLOR_BY_FIELDS, d as NONE_VALUE, f as SELECTABLE_DATA_TYPES, g as TIME_UNITS, h as STRING_AGGREGATION_FNS, i as convertDataTypeToSelectable, j as ChartColumn, k as escapeFieldName, l as COMBINED_TIME_UNITS, m as SORT_TYPES, n as createSpecWithoutData, o as BIN_AGGREGATION, p as SINGLE_TIME_UNITS, r as isFieldSet, s as CHART_TYPES, t as augmentSpecWithData, u as ChartType, v as AGGREGATION_TYPE_ICON, w as DEFAULT_MAX_BINS_FACET, x as COUNT_FIELD, y as CHART_TYPE_ICON } from "./spec-DSs9v0xx.js";
-import { $ as ContextAwarePanelItem, $t as EmotionCacheProvider, A as prettifyRowColumnCount, At as loadTableData, B as useSelectList, Bt as dateToLocalISOTime, C as Filenames, Ct as ColumnChartContext, D as EmptyState, Dt as usePrevious$1, E as ColumnPreviewContainer, Et as useIntersectionObserver, F as ContextMenuContent, Ft as getMimeValues, G as ComboboxItem, Gt as ChartErrorState, H as DatePicker, Ht as TabsContent, I as ContextMenuItem, It as isNullishFilter, J as CommandInput, Jt as LazyVegaEmbed, K as Command, Kt as ChartInfoState, L as ContextMenuSeparator, Lt as Maps, M as getColumnCountForDisplay, Mt as SELECT_COLUMN_ID, N as getUserColumnVisibilityCounts, Nt as TOO_MANY_ROWS, O as ErrorState, Ot as getPageIndexForRow, P as ContextMenu, Pt as toFieldTypes, Q as smartMatch, Qt as HtmlOutput, R as ContextMenuTrigger, Rt as dateToLocalISODate, S as Progress, St as renderCellValue, T as ColumnName, Tt as DelayMount, U as DateRangePicker, Ut as TabsList, V as CompactChipRow, Vt as Tabs, W as Combobox, Wt as TabsTrigger, X as CommandList, Xt as RenderTextWithLinks, Y as CommandItem, Yt as useOverflowDetection, Z as CommandSeparator, Zt as Kbd, _ as InstallPackageButton, _n as ArrowDownWideNarrow, _t as TableHeader, an as GripHorizontal, at as SlotNames, b as downloadByURL, bt as generateColumns, d as RadioGroup, dn as Code, dt as Fill, en as hasFunctionProperty, et as PANEL_TYPES, f as RadioGroupItem, fn as ChevronsUpDown, ft as Provider$1, g as DataTable, gn as ChevronLeft, gt as TableHead, h as OutputRenderer, hn as ChevronsDownUp, ht as TableCell, in as TextWrap, it as isCellAwareAtom, j as prettifyRowCount, jt as INDEX_COLUMN_NAME, k as LoadingState, kt as loadTableAndRawData, l as Slide, ln as Ellipsis, m as OutputArea, mn as ChevronsLeft, mt as TableBody, n as marimoVersionAtom, nn as $fae977aafc393c5c$export$588937bcd60ade55, nt as contextAwarePanelOwner, on as Funnel, ot as slotsController, p as JsonOutput, pn as ChevronsRight, pt as Table, q as CommandEmpty, qt as ChartLoadingState, r as showCodeInRunModeAtom, rn as $fae977aafc393c5c$export$6b862160d295c8e, rt as contextAwarePanelType, s as SLIDE_TYPE_OPTIONS_BY_VALUE, sn as EyeOff, st as Toggle, t as useNotebookCodeAvailable, tn as isRecord, tt as contextAwarePanelOpen, u as Switch, un as Download, v as ADD_PRINTING_CLASS, vt as TableRow, w as downloadSizeLimitAtom, wt as ColumnChartSpecModel, x as downloadHTMLAsImage, xt as inferFieldTypes, y as downloadBlob, yt as NAMELESS_COLUMN_PREFIX, z as useInternalStateWithSync, zt as dateToLocalISODateTime, __tla as __tla_2 } from "./code-visibility-D-FHtSSL.js";
+import { $ as ContextAwarePanelItem, $t as EmotionCacheProvider, A as prettifyRowColumnCount, At as loadTableData, B as useSelectList, Bt as dateToLocalISOTime, C as Filenames, Ct as ColumnChartContext, D as EmptyState, Dt as usePrevious$1, E as ColumnPreviewContainer, Et as useIntersectionObserver, F as ContextMenuContent, Ft as getMimeValues, G as ComboboxItem, Gt as ChartErrorState, H as DatePicker, Ht as TabsContent, I as ContextMenuItem, It as isNullishFilter, J as CommandInput, Jt as LazyVegaEmbed, K as Command, Kt as ChartInfoState, L as ContextMenuSeparator, Lt as Maps, M as getColumnCountForDisplay, Mt as SELECT_COLUMN_ID, N as getUserColumnVisibilityCounts, Nt as TOO_MANY_ROWS, O as ErrorState, Ot as getPageIndexForRow, P as ContextMenu, Pt as toFieldTypes, Q as smartMatch, Qt as HtmlOutput, R as ContextMenuTrigger, Rt as dateToLocalISODate, S as Progress, St as renderCellValue, T as ColumnName, Tt as DelayMount, U as DateRangePicker, Ut as TabsList, V as CompactChipRow, Vt as Tabs, W as Combobox, Wt as TabsTrigger, X as CommandList, Xt as RenderTextWithLinks, Y as CommandItem, Yt as useOverflowDetection, Z as CommandSeparator, Zt as Kbd, _ as InstallPackageButton, _n as ArrowDownWideNarrow, _t as TableHeader, an as GripHorizontal, at as SlotNames, b as downloadByURL, bt as generateColumns, d as RadioGroup, dn as Code, dt as Fill, en as hasFunctionProperty, et as PANEL_TYPES, f as RadioGroupItem, fn as ChevronsUpDown, ft as Provider$1, g as DataTable, gn as ChevronLeft, gt as TableHead, h as OutputRenderer, hn as ChevronsDownUp, ht as TableCell, in as TextWrap, it as isCellAwareAtom, j as prettifyRowCount, jt as INDEX_COLUMN_NAME, k as LoadingState, kt as loadTableAndRawData, l as Slide, ln as Ellipsis, m as OutputArea, mn as ChevronsLeft, mt as TableBody, n as marimoVersionAtom, nn as $fae977aafc393c5c$export$588937bcd60ade55, nt as contextAwarePanelOwner, on as Funnel, ot as slotsController, p as JsonOutput, pn as ChevronsRight, pt as Table, q as CommandEmpty, qt as ChartLoadingState, r as showCodeInRunModeAtom, rn as $fae977aafc393c5c$export$6b862160d295c8e, rt as contextAwarePanelType, s as SLIDE_TYPE_OPTIONS_BY_VALUE, sn as EyeOff, st as Toggle, t as useNotebookCodeAvailable, tn as isRecord, tt as contextAwarePanelOpen, u as Switch, un as Download, v as ADD_PRINTING_CLASS, vt as TableRow, w as downloadSizeLimitAtom, wt as ColumnChartSpecModel, x as downloadHTMLAsImage, xt as inferFieldTypes, y as downloadBlob, yt as NAMELESS_COLUMN_PREFIX, z as useInternalStateWithSync, zt as dateToLocalISODateTime, __tla as __tla_2 } from "./code-visibility-DcoFoO9E.js";
 import { c as Calendar, i as createReducerAndAtoms, n as useOnUnmount, o as ToggleLeft, t as useOnMount } from "./useLifecycle-C6wHjkhW.js";
 import { t as Check } from "./check-C9OoNtR4.js";
 import { A as Icon, C as logNever, D as $18f2051aff69b9bf$export$a54013f0d02a8f82, E as $18f2051aff69b9bf$export$43bb16f9c6d9e3f7, F as createCollection, I as X, M as clamp$2, N as usePrevious$2, P as useDirection, R as ChevronDown, S as assertNever, a as SelectGroup, c as SelectSeparator, d as NativeSelect, i as SelectContent, j as Trigger$1, l as SelectTrigger, n as capitalize, o as SelectItem, r as Select, s as SelectLabel, t as Strings, u as SelectValue, w as $a916eb452884faea$export$b7a616150fdb9f44 } from "./strings-Dq_j3Rxw.js";
 import { B as $64fa3d84918910a7$export$4d86445c2cf5e3, C as DropdownMenuTrigger, Ft as $65484d02dcb7eb3e$export$457c3d6518dd4c6f, It as $3ef42575df84b30b$export$9d1611c77c2fe928, W as $64fa3d84918910a7$export$df3a06d6289f983e, Wt as $ff5963eb1fccf552$export$e08e3b67e392101e, X as useDebouncedCallback, Y as useDebounceControlledState, a as NumberField, d as roundToFractionDigits, f as DropdownMenu, g as DropdownMenuLabel, gn as ChevronRight, h as DropdownMenuItem, hn as Circle, i as OnBlurredInput, l as prettyNumber, m as DropdownMenuGroup, n as DebouncedNumberInput, o as maxFractionDigitsForSteps, ot as $f7dceffc5ad7768b$export$4e328f61c538687f, p as DropdownMenuContent, pt as $6179b936705e76d3$export$ae780daf29e6d456, r as Input, st as $701a24aa0da5b062$export$ea18c227d4417cc3, t as DebouncedInput, u as prettyScientificNumber, v as DropdownMenuSeparator, xt as $458b0a5536c1a7cf$export$40bfa8c7b0832715, y as DropdownMenuShortcut, z as $64fa3d84918910a7$export$29f1550f4b0d4415 } from "./input-BGPrFH3g.js";
-import { _ as isWasm, c as asRemoteURL, d as isStaticNotebook, f as appendQueryParams, g as Deferred, m as require_cuid2, u as getStaticVirtualFiles, v as CircleQuestionMark } from "./toDate-CKpRx4TS.js";
-import { a as MarimoIncomingMessageEvent, c as MarimoValueUpdateEvent, d as Square, f as File, i as PythonIcon, l as createInputEvent, n as blobToString, o as MarimoValueInputEvent, r as filesToBase64, s as MarimoValueReadyEvent, t as processOutput, u as deserializeBlob } from "./process-output-C2tUYuG7.js";
+import { _ as isWasm, c as asRemoteURL, d as isStaticNotebook, f as appendQueryParams, g as Deferred, m as require_cuid2, u as getStaticVirtualFiles, v as CircleQuestionMark } from "./toDate-BRJgtOGm.js";
+import { a as MarimoIncomingMessageEvent, c as MarimoValueUpdateEvent, d as Square, f as File, i as PythonIcon, l as createInputEvent, n as blobToString, o as MarimoValueInputEvent, r as filesToBase64, s as MarimoValueReadyEvent, t as processOutput, u as deserializeBlob } from "./process-output-BOvvilRG.js";
 import { n as Trash, r as Pencil, t as BulkEdit } from "./types-C2Ir191_.js";
 import { n as require_prop_types, r as Plus, t as ErrorBoundary } from "./ErrorBoundary-B_CAG7_e.js";
 import { t as require_react_dom } from "./react-dom-BTJzcVJ9.js";
@@ -59,7 +59,7 @@ import "./dist-M9Vag9Y0.js";
 import { r as python } from "./dist-C_Y3oV3C.js";
 import { n as minimalSetup, t as esm_default } from "./esm-M837UxV5.js";
 import "./purify.es-H92eMd9-.js";
-import { i as AlertTitle, n as Alert, r as AlertDescription } from "./formats-BX3uDQbB.js";
+import { i as AlertTitle, n as Alert, r as AlertDescription } from "./formats-CitsMtUm.js";
 import "./vega-loader.browser-CZ-J8Py3.js";
 import { a as getContainerWidth, n as vegaLoadData, o as getVegaFieldTypes, s as tooltipHandler } from "./loader-Boph2xIS.js";
 import "./defaultLocale-u-3osm0P.js";
@@ -8886,7 +8886,7 @@ let __tla = Promise.all([
       };
     }
   };
-  var LazyChatbot = import_react.lazy(() => import("./chat-ui-Dv6Ox7Lu.js").then((e) => ({
+  var LazyChatbot = import_react.lazy(() => import("./chat-ui-C0z13gJB.js").then((e) => ({
     default: e.Chatbot
   }))), messageSchema = array(object({
     id: string(),
@@ -28251,7 +28251,7 @@ ${c}
         return true;
     }
   }
-  var LazyVegaComponent = import_react.lazy(() => import("./vega-component-DNHEV0u0.js")), VegaPlugin = class {
+  var LazyVegaComponent = import_react.lazy(() => import("./vega-component-BAvmvTjO.js")), VegaPlugin = class {
     constructor() {
       __publicField(this, "tagName", "marimo-vega");
       __publicField(this, "validator", object({
@@ -38024,7 +38024,7 @@ ${c}
   function _temp2$2(e) {
     e.target === e.currentTarget && e.key === "Enter" && (e.preventDefault(), e.stopPropagation(), e.currentTarget.click());
   }
-  var LazySlidesComponent = import_react.lazy(() => import("./reveal-component-BcrECfho.js"));
+  var LazySlidesComponent = import_react.lazy(() => import("./reveal-component-D30RNPOZ.js"));
   const SlidesLayoutRenderer = ({ layout: e, setLayout: r, cells: c, mode: l }) => {
     var _a5;
     let u = useAtomValue(kioskModeAtom), d = l === "read" || u, f = useAtomValue(numColumnsAtom) > 1, [p, m] = (0, import_react.useState)(null), { slideCells: h, skippedIds: g, noOutputIds: _, slideTypes: v, startCellIndex: y } = (0, import_react.useMemo)(() => computeSlideCellsInfo(c, e), [

package/dist/{process-output-C2tUYuG7.js → process-output-BOvvilRG.js}

@@ -1,6 +1,6 @@
 import { s as __toESM } from "./chunk-BNovOVIE.js";
 import { t as require_compiler_runtime } from "./compiler-runtime-CEbnTgxf.js";
-import { ot as ansiToPlainText, st as parseHtmlContent } from "./html-to-image-F0RpWXNK.js";
+import { ot as ansiToPlainText, st as parseHtmlContent } from "./html-to-image-CEo5pRYw.js";
 import { u as createLucideIcon } from "./dist--2Bqjvs0.js";
 import { t as Strings } from "./strings-Dq_j3Rxw.js";
 import { t as require_jsx_runtime } from "./jsx-runtime-DebpN0FN.js";

package/dist/{reveal-component-BcrECfho.js → reveal-component-D30RNPOZ.js}

@@ -6,12 +6,12 @@ import { s as __toESM } from "./chunk-BNovOVIE.js";
 import { _ as Logger, g as cn, h as Events, l as useEventListener, t as Button } from "./button-BacYv-bE.js";
 import { t as require_react } from "./react-DA-nE2FX.js";
 import { t as require_compiler_runtime } from "./compiler-runtime-CEbnTgxf.js";
-import { dt as kioskModeAtom, ht as outputIsStale } from "./html-to-image-F0RpWXNK.js";
+import { dt as kioskModeAtom, ht as outputIsStale } from "./html-to-image-CEo5pRYw.js";
 import "./chunk-5FQGJX7Z-BbqSm5gU.js";
 import { u as createLucideIcon } from "./dist--2Bqjvs0.js";
-import { a as DEFAULT_DECK_VERTICAL_ALIGN, c as SlideSidebar, cn as Expand, ct as Panel, dn as Code, i as DEFAULT_DECK_TRANSITION, l as Slide, lt as PanelGroup, o as DEFAULT_SLIDE_TYPE, sn as EyeOff, t as useNotebookCodeAvailable, ut as PanelResizeHandle } from "./code-visibility-D-FHtSSL.js";
+import { a as DEFAULT_DECK_VERTICAL_ALIGN, c as SlideSidebar, cn as Expand, ct as Panel, dn as Code, i as DEFAULT_DECK_TRANSITION, l as Slide, lt as PanelGroup, o as DEFAULT_SLIDE_TYPE, sn as EyeOff, t as useNotebookCodeAvailable, ut as PanelResizeHandle } from "./code-visibility-DcoFoO9E.js";
 import { X as useDebouncedCallback } from "./input-BGPrFH3g.js";
-import "./toDate-CKpRx4TS.js";
+import "./toDate-BRJgtOGm.js";
 import "./react-dom-BTJzcVJ9.js";
 import { t as require_jsx_runtime } from "./jsx-runtime-DebpN0FN.js";
 import { X as useFullScreenElement } from "./zod-CijjQh4u.js";

package/dist/{toDate-CKpRx4TS.js → toDate-BRJgtOGm.js}

@@ -520,13 +520,23 @@ var RuntimeManager = class {
     for (let [e2, b2] of C.entries()) x && !Object.values(KnownQueryParams).includes(e2) || S.searchParams.set(e2, b2);
     return S.pathname = `${S.pathname.replace(/\/$/, "")}/${e.replace(/^\//, "")}`, S.hash = "", S;
   }
+  appendCrossOriginAuth(e) {
+    return !this.isSameOrigin && this.config.authToken && e.searchParams.set(KnownQueryParams.accessToken, this.config.authToken), e;
+  }
+  formatNavigableHttpURL(e, b) {
+    let x = this.formatHttpURL({
+      path: e,
+      searchParams: b
+    });
+    return x.searchParams.delete(KnownQueryParams.accessToken), this.appendCrossOriginAuth(x);
+  }
   formatWsURL(e, b) {
     let x = this.formatHttpURL({
       path: e,
       searchParams: b,
       restrictToKnownQueryParams: false
     });
-    return !this.isSameOrigin && this.config.authToken && x.searchParams.set(KnownQueryParams.accessToken, this.config.authToken), asWsUrl(x.toString());
+    return asWsUrl(this.appendCrossOriginAuth(x).toString());
   }
   getSessionSearchParams(e) {
     let b = new URL(this.config.url), x = new URLSearchParams(b.search);

package/dist/{vega-component-DNHEV0u0.js → vega-component-BAvmvTjO.js}

@@ -2,7 +2,7 @@ import { s as __toESM } from "./chunk-BNovOVIE.js";
 import { _ as Logger, c as Objects, g as cn, h as Events } from "./button-BacYv-bE.js";
 import { t as require_react } from "./react-DA-nE2FX.js";
 import { t as require_compiler_runtime } from "./compiler-runtime-CEbnTgxf.js";
-import { c as asRemoteURL, v as CircleQuestionMark } from "./toDate-CKpRx4TS.js";
+import { c as asRemoteURL, v as CircleQuestionMark } from "./toDate-BRJgtOGm.js";
 import "./react-dom-BTJzcVJ9.js";
 import { t as require_jsx_runtime } from "./jsx-runtime-DebpN0FN.js";
 import "./zod-CijjQh4u.js";
@@ -11,7 +11,7 @@ import { t as Tooltip } from "./tooltip-Czds6Qr8.js";
 import { t as debounce_default } from "./debounce-BOD3DbfP.js";
 import { A as useEvent_default, n as useTheme } from "./useTheme-Df_vGflw.js";
 import { s as uniq } from "./arrays-sEtDRoG4.js";
-import { a as isValid, i as AlertTitle, n as Alert, t as arrow } from "./formats-BX3uDQbB.js";
+import { a as isValid, i as AlertTitle, n as Alert, t as arrow } from "./formats-CitsMtUm.js";
 import { n as formats } from "./vega-loader.browser-CZ-J8Py3.js";
 import { a as getContainerWidth, n as vegaLoadData, s as tooltipHandler } from "./loader-Boph2xIS.js";
 import { t as j } from "./react-vega-B0sAlDTL.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@marimo-team/islands",
-  "version": "0.23.15-dev37",
+  "version": "0.23.15-dev39",
   "main": "dist/main.js",
   "types": "dist/index.d.ts",
   "type": "module",

package/src/components/editor/file-tree/download.ts

@@ -0,0 +1,46 @@
+/* Copyright 2026 Marimo. All rights reserved. */
+
+import { getRequestClient } from "@/core/network/requests";
+import { getRuntimeManager } from "@/core/runtime/config";
+import { isWasm } from "@/core/wasm/utils";
+import { deserializeBlob } from "@/utils/blob";
+import { downloadBlob, downloadByURL } from "@/utils/download";
+import { type Base64String, base64ToDataURL } from "@/utils/json/base64";
+
+/**
+ * Download a workspace file by path.
+ *
+ * Over HTTP this navigates to a streaming download endpoint, so the
+ * browser's download manager handles the transfer and no file contents
+ * are buffered in memory. In WASM there is no HTTP server to stream
+ * from; contents come over the pyodide bridge as base64 and are saved
+ * via a Blob.
+ */
+export async function downloadFile(path: string, name: string): Promise<void> {
+  if (!isWasm()) {
+    const url = getRuntimeManager().formatNavigableHttpURL(
+      "api/files/download",
+      new URLSearchParams({ path }),
+    );
+    downloadByURL(url.toString(), name);
+    return;
+  }
+
+  const details = await getRequestClient().sendFileDetails({ path });
+  if (details.isBase64 && details.contents) {
+    const blob = deserializeBlob(
+      base64ToDataURL(
+        details.contents as Base64String,
+        details.mimeType || "application/octet-stream",
+      ),
+    );
+    downloadBlob(blob, name);
+  } else {
+    downloadBlob(
+      new Blob([details.contents || ""], {
+        type: details.mimeType || "application/octet-stream",
+      }),
+      name,
+    );
+  }
+}

package/src/components/editor/file-tree/file-explorer.tsx

@@ -62,16 +62,14 @@ import type { FileInfo } from "@/core/network/types";
 import { isWasm } from "@/core/wasm/utils";
 import { useAsyncData } from "@/hooks/useAsyncData";
 import { ErrorBanner } from "@/plugins/impl/common/error-banner";
-import { deserializeBlob } from "@/utils/blob";
 import { cn } from "@/utils/cn";
 import { copyToClipboard } from "@/utils/copy";
-import { downloadBlob } from "@/utils/download";
-import { type Base64String, base64ToDataURL } from "@/utils/json/base64";
 import { openNotebook } from "@/utils/links";
 import type { FilePath } from "@/utils/paths";
 import { makeDuplicateName } from "@/utils/pathUtils";
 import { jotaiJsonStorage } from "@/utils/storage/jotai";
 import { useTreeDndManager } from "./dnd-wrapper";
+import { downloadFile } from "./download";
 import { FileViewer } from "./file-viewer";
 import type { RequestingTree } from "./requesting-tree";
 import { openStateAtom, treeAtom } from "./state";
@@ -393,7 +391,7 @@ const Show = ({
 };
 
 const Node = ({ node, style, dragHandle }: NodeRendererProps<FileInfo>) => {
-  const { openFile, sendFileDetails } = useRequestClient();
+  const { openFile } = useRequestClient();
   const disableFileDownloads = useAtomValue(disableFileDownloadsAtom);
 
   const fileType: FileIconType = node.data.isDirectory
@@ -645,23 +643,7 @@ const Node = ({ node, style, dragHandle }: NodeRendererProps<FileInfo>) => {
             <>
               <DropdownMenuItem
                 onSelect={async () => {
-                  const details = await sendFileDetails({
-                    path: node.data.path,
-                  });
-                  if (details.isBase64 && details.contents) {
-                    const blob = deserializeBlob(
-                      base64ToDataURL(
-                        details.contents as Base64String,
-                        details.mimeType || "application/octet-stream",
-                      ),
-                    );
-                    downloadBlob(blob, node.data.name);
-                  } else {
-                    downloadBlob(
-                      new Blob([details.contents || ""]),
-                      node.data.name,
-                    );
-                  }
+                  await downloadFile(node.data.path, node.data.name);
                 }}
                 data-testid="file-explorer-download-menu-item"
               >

package/src/components/editor/file-tree/file-viewer.tsx

@@ -21,10 +21,9 @@ import { filenameAtom } from "@/core/saving/file-state";
 import { isWasm } from "@/core/wasm/utils";
 import { useAsyncData } from "@/hooks/useAsyncData";
 import { ErrorBanner } from "@/plugins/impl/common/error-banner";
-import { deserializeBlob } from "@/utils/blob";
 import { copyToClipboard } from "@/utils/copy";
-import { downloadBlob, downloadByURL } from "@/utils/download";
-import { type Base64String, base64ToDataURL } from "@/utils/json/base64";
+import type { Base64String } from "@/utils/json/base64";
+import { downloadFile } from "./download";
 import { FilePreviewHeader } from "./file-header";
 import {
   FileContentRenderer,
@@ -121,30 +120,8 @@ export const FileViewer: React.FC<Props> = ({ file, onOpenNotebook }) => {
     );
   }
 
-  const handleDownload = () => {
-    if (data.isBase64 && data.contents) {
-      if (isMediaMime(mimeType)) {
-        const dataURL = base64ToDataURL(
-          data.contents as Base64String,
-          mimeType,
-        );
-        downloadByURL(dataURL, data.file.name);
-      } else {
-        const blob = deserializeBlob(
-          base64ToDataURL(
-            data.contents as Base64String,
-            data.mimeType || "application/octet-stream",
-          ),
-        );
-        downloadBlob(blob, data.file.name);
-      }
-      return;
-    }
-
-    downloadBlob(
-      new Blob([data.contents || internalValue], { type: mimeType }),
-      data.file.name,
-    );
+  const handleDownload = async () => {
+    await downloadFile(file.path, data.file.name);
   };
 
   const header = (

package/src/core/runtime/__tests__/runtime.test.ts

@@ -154,6 +154,70 @@ describe("RuntimeManager", () => {
     });
   });
 
+  describe("formatNavigableHttpURL", () => {
+    it("adds access_token when cross-origin with authToken", () => {
+      const runtime = new RuntimeManager(
+        {
+          url: "https://sandbox.example.com",
+          lazy: true,
+          authToken: "my-secret-token",
+        },
+        true,
+      );
+      const url = runtime.formatNavigableHttpURL(
+        "api/files/download",
+        new URLSearchParams({ path: "/tmp/data.csv" }),
+      );
+
+      expect(url.pathname).toBe("/api/files/download");
+      expect(url.searchParams.get("path")).toBe("/tmp/data.csv");
+      expect(url.searchParams.get("access_token")).toBe("my-secret-token");
+    });
+
+    it("omits access_token when same-origin", () => {
+      const runtime = new RuntimeManager(
+        {
+          url: window.location.origin,
+          lazy: true,
+          authToken: "my-secret-token",
+        },
+        true,
+      );
+      const url = runtime.formatNavigableHttpURL(
+        "api/files/download",
+        new URLSearchParams({ path: "/tmp/data.csv" }),
+      );
+
+      expect(url.searchParams.get("access_token")).toBeNull();
+      expect(url.searchParams.get("path")).toBe("/tmp/data.csv");
+    });
+
+    it("omits access_token when no authToken configured", () => {
+      const runtime = new RuntimeManager(
+        { url: "https://sandbox.example.com", lazy: true },
+        true,
+      );
+      const url = runtime.formatNavigableHttpURL("api/files/download");
+
+      expect(url.searchParams.get("access_token")).toBeNull();
+    });
+
+    it("does not forward a page-inherited access_token when same-origin", () => {
+      const runtime = new RuntimeManager(
+        { url: window.location.origin, lazy: true },
+        true,
+      );
+      const original = window.location.href;
+      window.history.replaceState({}, "", "/?access_token=page-token");
+      try {
+        const url = runtime.formatNavigableHttpURL("api/files/download");
+        expect(url.searchParams.get("access_token")).toBeNull();
+      } finally {
+        window.history.replaceState({}, "", original);
+      }
+    });
+  });
+
   describe("getSseURL", () => {
     it("should return an http(s) URL with the session ID", () => {
       const runtime = new RuntimeManager(mockConfig);

package/src/core/runtime/runtime.ts

@@ -86,6 +86,35 @@ export class RuntimeManager {
     return baseUrl;
   }
 
+  /**
+   * Channels that cannot send custom headers (WebSockets, and browser
+   * navigations such as file downloads) carry the auth token as a query
+   * param instead, but only when cross-origin. Same-origin requests
+   * authenticate via the session cookie, which keeps the token out of
+   * browser history and logs; cross-origin cookies are blocked by browsers,
+   * so the access_token query param is the only option there.
+   */
+  private appendCrossOriginAuth(url: URL): URL {
+    if (!this.isSameOrigin && this.config.authToken) {
+      url.searchParams.set(KnownQueryParams.accessToken, this.config.authToken);
+    }
+    return url;
+  }
+
+  /**
+   * An HTTP URL for requests made by browser navigation (e.g. anchor-click
+   * downloads), which cannot attach auth headers.
+   */
+  formatNavigableHttpURL(path: string, searchParams?: URLSearchParams): URL {
+    const url = this.formatHttpURL({ path, searchParams });
+    // Drop any token inherited from the current page's query params; re-add it
+    // only when cross-origin. Same-origin downloads authenticate via the
+    // session cookie, so a token in the URL would needlessly leak into
+    // proxy/server logs.
+    url.searchParams.delete(KnownQueryParams.accessToken);
+    return this.appendCrossOriginAuth(url);
+  }
+
   formatWsURL(path: string, searchParams?: URLSearchParams): URL {
     // We don't restrict to known query parameters, since mo.query_params()
     // can accept arbitrary parameters.
@@ -94,16 +123,7 @@ export class RuntimeManager {
       searchParams,
       restrictToKnownQueryParams: false,
     });
-
-    // For cross-origin runtimes, pass the auth token as a query parameter.
-    // WebSocket connections cannot send custom headers (no Authorization
-    // header), and cross-origin cookies are blocked by browsers, so the
-    // access_token query param is the only way to authenticate.
-    if (!this.isSameOrigin && this.config.authToken) {
-      url.searchParams.set(KnownQueryParams.accessToken, this.config.authToken);
-    }
-
-    return asWsUrl(url.toString());
+    return asWsUrl(this.appendCrossOriginAuth(url).toString());
   }
 
   /**