@marimo-team/islands 0.23.17-dev1 → 0.23.17-dev4

package/src/utils/__tests__/download.test.tsx

@@ -390,8 +390,9 @@ describe("downloadHTMLAsImage", () => {
   it("should download image without prepare function", async () => {
     vi.mocked(toPng).mockResolvedValue(mockDataUrl);
 
-    await downloadHTMLAsImage({ element: mockElement, filename: "test" });
-
+    expect(
+      await downloadHTMLAsImage({ element: mockElement, filename: "test" }),
+    ).toBe(true);
     expect(toPng).toHaveBeenCalledWith(
       mockElement,
       expect.objectContaining({
@@ -452,8 +453,9 @@ describe("downloadHTMLAsImage", () => {
   it("should show error toast on failure", async () => {
     vi.mocked(toPng).mockRejectedValue(new Error("Failed"));
 
-    await downloadHTMLAsImage({ element: mockElement, filename: "test" });
-
+    expect(
+      await downloadHTMLAsImage({ element: mockElement, filename: "test" }),
+    ).toBe(false);
     expect(toast).toHaveBeenCalledWith({
       title: "Failed to download as PNG",
       description: "Failed",

package/src/utils/download.ts

@@ -140,7 +140,7 @@ export async function downloadHTMLAsImage(opts: {
   element: HTMLElement;
   filename: string;
   prepare?: (element: HTMLElement) => () => void;
-}) {
+}): Promise<boolean> {
   const { element, filename, prepare } = opts;
 
   // Capture current scroll position
@@ -156,6 +156,7 @@ export async function downloadHTMLAsImage(opts: {
     // Get screenshot
     const dataUrl = await toPng(element);
     downloadByURL(dataUrl, Filenames.toPNG(filename));
+    return true;
   } catch (error) {
     Logger.error("Error downloading as PNG", error);
     toast({
@@ -163,6 +164,7 @@ export async function downloadHTMLAsImage(opts: {
       description: prettyError(error),
       variant: "danger",
     });
+    return false;
   } finally {
     cleanup?.();
     if (document.body.classList.contains("printing")) {

package/src/utils/shell.ts

@@ -0,0 +1,17 @@
+/* Copyright 2026 Marimo. All rights reserved. */
+
+/**
+ * Quote one argument for a POSIX shell command.
+ *
+ * Mirrors Python's `shlex.quote` so copied commands cannot interpret argument
+ * contents as shell syntax.
+ */
+export function shellQuote(value: string): string {
+  if (value === "") {
+    return "''";
+  }
+  if (/^[\w@%+=:,./-]+$/.test(value)) {
+    return value;
+  }
+  return `'${value.replaceAll("'", `'"'"'`)}'`;
+}