@marimo-team/islands 0.24.3-dev55 → 0.24.3-dev58

package/dist/main.js

@@ -7,7 +7,7 @@ import { C as T, F as E, G as D, I as O, J as k, K as A, L as j, P as M, R as N,
 import { a as se, f as ce, g as V, i as le, n as ue, o as de, p as fe, r as pe, t as me } from "./tooltip-qB8NlSqV.js";
 import { $ as he, $t as ge, At as _e, B as ve, C as ye, D as be, Dt as xe, F as Se, G as Ce, Gt as we, I as Te, J as Ee, L as De, Mt as Oe, Nt as ke, O as Ae, Ot as je, P as Me, Q as Ne, Qt as Pe, S as Fe, T as Ie, Tt as Le, U as Re, Ut as ze, W as Be, Wt as Ve, X as He, Xt as Ue, Y as We, Yt as Ge, Zt as Ke, _n as qe, _t as Je, an as Ye, bn as Xe, c as Ze, cn as Qe, ct as $e, d as et, dn as tt, dt as nt, f as rt, fn as it, ft as at, g as ot, gn as st, gt as ct, h as lt, in as ut, it as dt, jt as ft, k as pt, kt as mt, l as ht, m as gt, mn as _t, n as vt, o as yt, on as bt, p as xt, pn as St, pt as Ct, q as wt, qt as Tt, r as Et, rn as Dt, rt as Ot, u as kt, v as At, w as jt, xt as Mt, yn as Nt, zt as Pt } from "./cells-BSgNCBZ8.js";
 import { D as Ft, E as It, O as Lt, S as Rt, T as zt, _ as Bt, a as Vt, c as Ht, d as Ut, f as Wt, g as Gt, h as Kt, i as qt, l as Jt, m as Yt, n as Xt, o as Zt, p as Qt, r as $t, s as en, t as tn, u as nn, v as rn, w as an, x as on, y as sn } from "./spec-CAYwFeV6.js";
-import { $t as cn, A as ln, At as un, B as dn, Bt as fn, C as pn, Ct as mn, D as hn, Dt as gn, E as _n, Et as vn, F as yn, Ft as bn, G as xn, Gt as Sn, H as Cn, Ht as wn, I as Tn, It as En, J as Dn, Jt as On, K as kn, Kt as An, L as jn, Lt as Mn, M as Nn, Mt as Pn, N as Fn, Nt as In, O as Ln, Ot as Rn, P as zn, Pt as Bn, Qt as Vn, R as Hn, Rt as Un, S as Wn, St as Gn, T as Kn, Tt as qn, U as Jn, Ut as Yn, V as Xn, Vt as Zn, W as Qn, Wt as $n, X as er, Xt as tr, Y as nr, Yt as rr, Zt as ir, _ as ar, _t as or, an as sr, at as cr, b as lr, c as ur, cn as dr, ct as fr, d as pr, dn as mr, dt as hr, en as gr, et as _r, f as vr, fn as yr, ft as br, g as xr, gt as Sr, h as Cr, hn as wr, ht as Tr, in as Er, it as Dr, j as Or, jt as kr, k as Ar, kt as jr, ln as Mr, lt as Nr, m as Pr, mn as Fr, mt as Ir, nn as Lr, nt as Rr, ot as zr, p as Br, pn as Vr, pt as Hr, q as Ur, qt as Wr, r as Gr, rn as Kr, rt as qr, sn as Jr, st as Yr, t as Xr, tn as Zr, tt as Qr, u as $r, un as ei, ut as ti, v as ni, vt as ri, w as ii, wt as ai, x as oi, y as si, yt as ci, z as li, zt as ui } from "./common-DHIrhrev.js";
+import { $t as cn, A as ln, At as un, B as dn, Bt as fn, C as pn, Ct as mn, D as hn, Dt as gn, E as _n, Et as vn, F as yn, Ft as bn, G as xn, Gt as Sn, H as Cn, Ht as wn, I as Tn, It as En, J as Dn, Jt as On, K as kn, Kt as An, L as jn, Lt as Mn, M as Nn, Mt as Pn, N as Fn, Nt as In, O as Ln, Ot as Rn, P as zn, Pt as Bn, Qt as Vn, R as Hn, Rt as Un, S as Wn, St as Gn, T as Kn, Tt as qn, U as Jn, Ut as Yn, V as Xn, Vt as Zn, W as Qn, Wt as $n, X as er, Xt as tr, Y as nr, Yt as rr, Zt as ir, _ as ar, _t as or, an as sr, at as cr, b as lr, c as ur, cn as dr, ct as fr, d as pr, dn as mr, dt as hr, en as gr, et as _r, f as vr, fn as yr, ft as br, g as xr, gt as Sr, h as Cr, hn as wr, ht as Tr, in as Er, it as Dr, j as Or, jt as kr, k as Ar, kt as jr, ln as Mr, lt as Nr, m as Pr, mn as Fr, mt as Ir, nn as Lr, nt as Rr, ot as zr, p as Br, pn as Vr, pt as Hr, q as Ur, qt as Wr, r as Gr, rn as Kr, rt as qr, sn as Jr, st as Yr, t as Xr, tn as Zr, tt as Qr, u as $r, un as ei, ut as ti, v as ni, vt as ri, w as ii, wt as ai, x as oi, y as si, yt as ci, z as li, zt as ui } from "./common-B8x6sgCj.js";
 import { c as di, i as fi, n as pi, o as mi, t as hi } from "./useLifecycle-DPgiiwwU.js";
 import { t as gi } from "./check-B7cIK6gb.js";
 import { A as _i, C as vi, D as yi, E as bi, M as xi, O as Si, S as Ci, T as wi, a as Ti, b as Ei, c as Di, i as Oi, k as ki, l as Ai, n as ji, o as Mi, r as Ni, s as Pi, t as Fi, w as Ii, x as Li } from "./select-C6plhmZr.js";
@@ -15,8 +15,8 @@ import { B as Ri, C as zi, J as Bi, Mt as Vi, Nt as Hi, S as Ui, Vt as Wi, W as
 import { _ as ha, c as ga, d as _a, f as va, g as ya, h as ba, m as xa, u as Sa, v as Ca } from "./toDate-WXg1yLcI.js";
 import { a as wa, c as Ta, d as Ea, f as Da, i as Oa, l as ka, n as Aa, o as ja, r as Ma, s as Na, t as Pa } from "./process-output-DFe2tVIY.js";
 import { a as Fa, c as Ia, d as La, i as Ra, l as za, r as Ba, u as Va } from "./glide-utils-B3rUT5PI.js";
-import { n as Ha, t as Ua } from "./ErrorBoundary-uQMMsMtf.js";
-import { n as Wa, t as Ga } from "./globals-DIuJGoqK.js";
+import { n as Ha, t as Ua } from "./ErrorBoundary-D1_JTlgF.js";
+import { n as Wa, t as Ga } from "./globals-S6heT9pz.js";
 import { t as Ka } from "./react-dom-BUgJ-ab_.js";
 import { t as qa } from "./jsx-runtime-DgDPJV9S.js";
 import { B as Ja, C as H, Ct as Ya, D as Xa, E as Za, Et as Qa, F as U, G as $a, H as eo, I as to, L as no, M as W, N as ro, O as io, P as ao, Q as oo, R as so, S as G, St as co, Tt as lo, U as uo, W as fo, Y as po, Z as mo, _ as ho, a as go, b as _o, bt as vo, c as yo, d as bo, dt as xo, f as So, g as Co, gt as wo, h as To, i as Eo, j as K, k as Do, l as Oo, m as ko, n as Ao, o as jo, p as Mo, r as No, s as Po, u as Fo, v as Io, vt as Lo, w as Ro, wt as zo, x as Bo, xt as Vo, y as Ho, yt as Uo } from "./use-restore-focus-D5D9xEjZ.js";
@@ -40,7 +40,7 @@ import { t as Ns } from "./useAsyncData-BD6AStMt.js";
 import { i as Ps, n as Fs, r as Is } from "./formats-BR5iGb4s.js";
 import { M as Ls, N as Rs } from "./vega-loader.browser-D95WfUcj.js";
 import { a as zs, n as Bs } from "./loader-D2W4oM-3.js";
-import { c as Vs, d as Hs, i as Us, l as Ws, o as Gs, s as Ks, t as qs, u as Js } from "./code-visibility-DXFlGQTg.js";
+import { c as Vs, d as Hs, i as Us, l as Ws, o as Gs, s as Ks, t as qs, u as Js } from "./code-visibility-Ct164a9c.js";
 import { t as Ys } from "./useDeepCompareMemoize-D_HNdyvI.js";
 import { t as Xs } from "./esm-BElI3qKH.js";
 //#region ../node_modules/.pnpm/iconify-icon@2.3.0/node_modules/iconify-icon/dist/iconify-icon.mjs
@@ -10458,7 +10458,7 @@ function RC(e, t) {
 }
 //#endregion
 //#region src/plugins/impl/DataEditorPlugin.tsx
-var zC = J.lazy(() => import("./glide-data-editor-BeDrnFzb.js").then((e) => e.t)), BC = xS("marimo-data-editor", { cssStyles: [WS] }).withData(W({
+var zC = J.lazy(() => import("./glide-data-editor-BZeeQUSi.js").then((e) => e.t)), BC = xS("marimo-data-editor", { cssStyles: [WS] }).withData(W({
 	initialValue: W({ edits: G(W({
 		rowIdx: K(),
 		columnId: U(),
@@ -29922,7 +29922,7 @@ function bR(e) {
 }
 //#endregion
 //#region src/components/editor/renderers/slides-layout/slides-layout.tsx
-var xR = J.lazy(() => import("./reveal-component-sLNrYulm.js")), SR = (e) => {
+var xR = J.lazy(() => import("./reveal-component-CegCLPOh.js")), SR = (e) => {
 	let t = (0, X.c)(33), { layout: n, setLayout: r, cells: i, mode: a } = e, o = rs(Ce), s = a === "read" || o, c = rs(xt) > 1, [l, u] = (0, J.useState)(null), d;
 	t[0] !== i || t[1] !== n ? (d = vP(i, n), t[0] = i, t[1] = n, t[2] = d) : d = t[2];
 	let { slideCells: f, skippedIds: p, noOutputIds: m, slideTypes: h, startCellIndex: g } = d, _;
@@ -31916,31 +31916,43 @@ function DB(e) {
 	});
 }
 //#endregion
+//#region src/utils/worker.ts
+function OB(e, t) {
+	if (e.origin === globalThis.origin) return new Worker(e.href, {
+		...t,
+		type: "module"
+	});
+	let n = `import ${JSON.stringify(e.href)}`, r = globalThis.origin === "null" ? `data:application/javascript,${encodeURIComponent(n)}` : URL.createObjectURL(new Blob([n], { type: "application/javascript" }));
+	try {
+		return new Worker(r, {
+			...t,
+			type: "module"
+		});
+	} finally {
+		r.startsWith("blob:") && URL.revokeObjectURL(r);
+	}
+}
+//#endregion
 //#region src/core/islands/worker/worker.tsx?worker&url
-var OB = "/assets/worker-BemUy60C.js", kB = class {
+var kB = "/assets/worker-D7hWi02M.js", AB = class {
 	url;
 	name;
 	constructor(e = {}) {
 		this.url = e.workerUrl || this.getDefaultWorkerUrl(), this.name = e.workerName || Ga();
 	}
 	create() {
-		let e = `import ${JSON.stringify(new URL(this.url, import.meta.url))}`, t = new Blob([e], { type: "application/javascript" }), n = URL.createObjectURL(t), r = new Worker(n, {
-			type: "module",
-			/* @vite-ignore */
-			name: this.name
-		});
-		return URL.revokeObjectURL(n), r;
+		return OB(new URL(this.url, import.meta.url), { name: this.name });
 	}
 	getDefaultWorkerUrl() {
-		return AB(OB);
+		return jB(kB);
 	}
 };
-function AB(e) {
+function jB(e) {
 	return e.startsWith("./") ? e : e.startsWith("/") ? `.${e}` : `./${e}`;
 }
 //#endregion
 //#region src/core/islands/bridge.ts
-var jB = class {
+var MB = class {
 	rpc;
 	messageConsumer;
 	store;
@@ -31955,7 +31967,7 @@ var jB = class {
 	constructor(e = {}) {
 		this.store = e.store || os, this.root = e.root || document;
 		try {
-			let t = (e.workerFactory || new kB()).create();
+			let t = (e.workerFactory || new AB()).create();
 			this.rpc = DB(t), this.setupMessageListeners();
 		} catch (e) {
 			throw c.error("Failed to initialize IslandsPyodideBridge:", e), this.initialized.reject(e), e;
@@ -32132,30 +32144,30 @@ var jB = class {
 		return await e, t ?? n.promise;
 	}
 	destroy() {}
-}, MB = null;
-function NB() {
-	return MB ||= new jB(), MB;
+}, NB = null;
+function PB() {
+	return NB ||= new MB(), NB;
 }
 //#endregion
 //#region src/core/islands/main.ts
-var PB = NB(), FB;
-function IB() {
+var FB = PB(), IB;
+function LB() {
 	return document.querySelector(yu.ISLAND) ? Lz(document, { materialize: !1 }).length === 1 : !1;
 }
-async function LB() {
+async function RB() {
 	let e = document.querySelectorAll(yu.ISLAND);
 	if (e.length !== 0) {
 		for (let t of e) t.classList.add(Cu.NAMESPACE);
-		FB ??= mB({ bridge: PB }).catch((e) => {
-			throw FB = void 0, e;
-		}), await FB, await PB.initializeApps();
+		IB ??= mB({ bridge: FB }).catch((e) => {
+			throw IB = void 0, e;
+		}), await IB, await FB.initializeApps();
 	}
 }
-async function RB(e) {
-	await PB.stopSession(e);
+async function zB(e) {
+	await FB.stopSession(e);
 }
-LB().catch((e) => {
+RB().catch((e) => {
 	c.error("Failed to initialize islands:", e);
 });
 //#endregion
-export { IB as canReplaceApp, LB as initialize, RB as stopApp };
+export { LB as canReplaceApp, RB as initialize, zB as stopApp };

package/dist/{number-overlay-editor-CKgrZ6UJ.js → number-overlay-editor-DSBousWi.js}

@@ -1,6 +1,6 @@
 import { a as e } from "./rolldown-runtime-Cb76FRpK.js";
 import { t } from "./react-ofJbxM4x.js";
-import { a as n } from "./glide-data-editor-BeDrnFzb.js";
+import { a as n } from "./glide-data-editor-BZeeQUSi.js";
 //#region ../node_modules/.pnpm/@glideapps+glide-data-grid@6.0.4-alpha24_lodash@4.17.21_marked@15.0.12_react-dom@19.2.8_b9e6aec46d952f631ce71b0585d2a8e5/node_modules/@glideapps/glide-data-grid/dist/esm/internal/data-grid-overlay-editor/private/number-overlay-editor-style.js
 var r = /* @__PURE__ */ e(t()), i = /*#__PURE__*/ n("div")({
 	name: "NumberOverlayEditorStyle",

package/dist/{reveal-component-sLNrYulm.js → reveal-component-CegCLPOh.js}

@@ -4,13 +4,13 @@ import { t as o } from "./react-ofJbxM4x.js";
 import { t as s } from "./compiler-runtime-Cj8ZWiNS.js";
 import { g as c, t as l } from "./tooltip-qB8NlSqV.js";
 import { G as u, w as d } from "./cells-BSgNCBZ8.js";
-import { $ as f, Q as p, Z as m, an as h, i as g, l as _, ln as v, n as y, on as b, r as x, t as S, u as C } from "./common-DHIrhrev.js";
+import { $ as f, Q as p, Z as m, an as h, i as g, l as _, ln as v, n as y, on as b, r as x, t as S, u as C } from "./common-B8x6sgCj.js";
 import { M as w } from "./select-C6plhmZr.js";
 import { J as T } from "./dropdown-menu-CZgjYSAh.js";
 import { t as E } from "./jsx-runtime-DgDPJV9S.js";
 import { q as ee } from "./use-restore-focus-D5D9xEjZ.js";
 import { A as D, C as O, b as k } from "./useTheme-DzXmYZ5V.js";
-import { a as A, n as te, t as ne } from "./code-visibility-DXFlGQTg.js";
+import { a as A, n as te, t as ne } from "./code-visibility-Ct164a9c.js";
 /* empty css                */
 var j = c("sticky-note", [["path", {
 	d: "M21 9a2.4 2.4 0 0 0-.706-1.706l-3.588-3.588A2.4 2.4 0 0 0 15 3H5a2 2 0 0 0-2 2v14a2 2 0 0 0 2 2h14a2 2 0 0 0 2-2z",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@marimo-team/islands",
-  "version": "0.24.3-dev55",
+  "version": "0.24.3-dev58",
   "main": "dist/main.js",
   "types": "dist/index.d.ts",
   "type": "module",

package/src/core/islands/worker-factory.ts

@@ -1,5 +1,6 @@
 /* Copyright 2026 Marimo. All rights reserved. */
 
+import { createModuleWorker } from "@/utils/worker";
 import { getMarimoVersion } from "../meta/globals";
 import workerUrl from "./worker/worker.tsx?worker&url";
 
@@ -47,20 +48,9 @@ export class DefaultWorkerFactory implements WorkerFactory {
    * Creates a new Pyodide worker
    */
   create(): Worker {
-    const js = `import ${JSON.stringify(new URL(this.url, import.meta.url))}`;
-    const blob = new Blob([js], { type: "application/javascript" });
-    const objURL = URL.createObjectURL(blob);
-
-    const worker = new Worker(objURL, {
-      type: "module",
-      /* @vite-ignore */
+    return createModuleWorker(new URL(this.url, import.meta.url), {
       name: this.name,
     });
-
-    // Blob URL can be revoked once the worker has loaded the script
-    URL.revokeObjectURL(objURL);
-
-    return worker;
   }
 
   /**

package/src/core/wasm/__tests__/bootstrap.test.ts

@@ -0,0 +1,63 @@
+/* Copyright 2026 Marimo. All rights reserved. */
+
+import { loadPyodide } from "pyodide";
+import type { PyodideInterface } from "pyodide";
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import { DefaultWasmController } from "../worker/bootstrap";
+
+vi.mock("pyodide", () => ({ loadPyodide: vi.fn() }));
+vi.mock("../worker/getMarimoWheel", () => ({
+  getMarimoWheel: () => "marimo-base",
+}));
+
+const micropip = { set_index_urls: vi.fn(), destroy: vi.fn() };
+const pyodide = { pyimport: vi.fn(() => micropip) };
+
+beforeEach(() => {
+  vi.clearAllMocks();
+  vi.mocked(loadPyodide).mockResolvedValue(
+    pyodide as unknown as PyodideInterface,
+  );
+});
+
+describe("WASM runtime sources", () => {
+  it("preserves the default runtime sources", async () => {
+    await new DefaultWasmController().bootstrap({
+      version: "0.24.2",
+      pyodideVersion: "v314.0.0",
+    });
+    expect(loadPyodide).toHaveBeenCalledWith(
+      expect.objectContaining({
+        indexURL: "https://cdn.jsdelivr.net/pyodide/v314.0.0/full/",
+        packageBaseUrl: "https://cdn.jsdelivr.net/pyodide/v314.0.0/full/",
+        lockFileURL:
+          "https://wasm.marimo.app/pyodide-lock.json?v=0.24.2&pyodide=v314.0.0",
+      }),
+    );
+    expect(pyodide.pyimport).not.toHaveBeenCalled();
+  });
+
+  it("configures runtime and package sources before returning the interpreter", async () => {
+    const controller = new DefaultWasmController();
+    await controller.bootstrap({
+      version: "0.24.2",
+      pyodideVersion: "v314.0.0",
+      pyodideIndexUrl: "https://example.com/runtime/",
+      pyodideLockfileUrl: "https://example.com/lock.json",
+      pypiIndexUrl: "https://example.com/pypi/{package_name}/json",
+    });
+    expect(loadPyodide).toHaveBeenCalledWith(
+      expect.objectContaining({
+        indexURL: "https://example.com/runtime/",
+        packageBaseUrl: "https://example.com/runtime/",
+        lockFileURL: "https://example.com/lock.json",
+      }),
+    );
+    expect(pyodide.pyimport).toHaveBeenCalledWith("micropip");
+    expect(micropip.set_index_urls).toHaveBeenCalledWith(
+      "https://example.com/pypi/{package_name}/json",
+    );
+    expect(micropip.destroy).toHaveBeenCalledOnce();
+    expect(controller.requirePyodide).toBe(pyodide);
+  });
+});

package/src/core/wasm/__tests__/bridge.test.ts

@@ -9,12 +9,14 @@ const {
   mockNotebookReadFile,
   mockReadNotebook,
   mockSaveNotebook,
+  mockBootstrap,
   rpcListeners,
 } = vi.hoisted(() => ({
   mockBridge: vi.fn(),
   mockNotebookReadFile: vi.fn(),
   mockReadNotebook: vi.fn(),
   mockSaveNotebook: vi.fn(),
+  mockBootstrap: vi.fn(),
   rpcListeners: {} as Record<string, () => void>,
 }));
 
@@ -40,6 +42,7 @@ vi.stubGlobal("URL", MockURL);
 
 vi.mock("@/core/wasm/rpc", () => ({
   getWorkerRPC: () => ({
+    send: { bootstrap: mockBootstrap },
     proxy: {
       request: {
         bridge: mockBridge,
@@ -122,6 +125,11 @@ describe("PyodideBridge.readCode", () => {
 
     await PyodideBridge.INSTANCE.readCode();
 
+    expect(mockBootstrap).toHaveBeenCalledWith({
+      pyodideIndexUrl: undefined,
+      pyodideLockfileUrl: undefined,
+      pypiIndexUrl: undefined,
+    });
     expect(mockNotebookReadFile).not.toHaveBeenCalled();
   });
 });

package/src/core/wasm/__tests__/fs.test.ts

@@ -0,0 +1,22 @@
+/* Copyright 2026 Marimo. All rights reserved. */
+import type { PyodideInterface } from "pyodide";
+import { afterEach, expect, it, vi } from "vitest";
+import { WasmFileSystem } from "../worker/fs";
+
+afterEach(() => vi.unstubAllGlobals());
+
+it.each(["https://notebook.example", "null"])(
+  "mounts persistent storage only for a non-opaque origin: %s",
+  (origin) => {
+    vi.stubGlobal("origin", origin);
+    const mount = vi.fn();
+    const IDBFS = {};
+    const pyodide = {
+      FS: { mount, filesystems: { IDBFS } },
+    } as unknown as PyodideInterface;
+    WasmFileSystem.mountFS(pyodide);
+    expect(mount.mock.calls).toEqual(
+      origin === "null" ? [] : [[IDBFS, { root: "." }, "/marimo"]],
+    );
+  },
+);

package/src/core/wasm/__tests__/runtime-config.test.ts

@@ -0,0 +1,58 @@
+/* Copyright 2026 Marimo. All rights reserved. */
+
+import { afterEach, assert, describe, expect, it } from "vitest";
+import { getWasmRuntimeConfig } from "../runtime-config";
+
+afterEach(() => {
+  document.head.innerHTML = "";
+});
+
+describe("getWasmRuntimeConfig", () => {
+  it("uses runtime defaults when no URLs are configured", () => {
+    expect(getWasmRuntimeConfig()).toEqual({
+      pyodideIndexUrl: undefined,
+      pyodideLockfileUrl: undefined,
+      pypiIndexUrl: undefined,
+    });
+  });
+
+  it("resolves URLs against the page base and preserves micropip placeholders", () => {
+    document.head.innerHTML = `
+      <base href="https://example.com/blog/post/">
+      <marimo-wasm
+        data-pyodide-index-url="../runtime/"
+        data-pyodide-lockfile-url="/locks/pyodide.json?v=1&amp;x=2"
+        data-pypi-index-url="https://packages.example.com/{package_name}/json"
+      ></marimo-wasm>`;
+    expect(getWasmRuntimeConfig()).toEqual({
+      pyodideIndexUrl: "https://example.com/blog/runtime/",
+      pyodideLockfileUrl: "https://example.com/locks/pyodide.json?v=1&x=2",
+      pypiIndexUrl: "https://packages.example.com/{package_name}/json",
+    });
+  });
+
+  it.each(["pyodideIndexUrl", "pyodideLockfileUrl", "pypiIndexUrl"])(
+    "ignores malformed %s while preserving valid overrides",
+    (key) => {
+      document.head.innerHTML = `
+        <base href="https://example.com/notebook/">
+        <marimo-wasm
+          data-pyodide-index-url="./pyodide/"
+          data-pyodide-lockfile-url="./lockfile/pyodide.json"
+          data-pypi-index-url="./packages/{package_name}.json"
+        ></marimo-wasm>`;
+      const element = document.querySelector<HTMLElement>("marimo-wasm");
+      assert(element);
+      element.dataset[key] = "https://invalid host/";
+
+      expect(getWasmRuntimeConfig()).toEqual({
+        pyodideIndexUrl: "https://example.com/notebook/pyodide/",
+        pyodideLockfileUrl:
+          "https://example.com/notebook/lockfile/pyodide.json",
+        pypiIndexUrl:
+          "https://example.com/notebook/packages/{package_name}.json",
+        [key]: undefined,
+      });
+    },
+  );
+});

package/src/core/wasm/bridge.ts

@@ -9,6 +9,7 @@ import { throwNotImplemented } from "@/utils/functions";
 import { Logger } from "@/utils/Logger";
 import { reloadSafe } from "@/utils/reload-safe";
 import { generateUUID } from "@/utils/uuid";
+import { createModuleWorker } from "@/utils/worker";
 import { notebookIsRunningAtom } from "../cells/cells";
 import type { CommandMessage } from "../kernel/messages";
 import { getMarimoVersion } from "../meta/globals";
@@ -41,10 +42,13 @@ import { BasicTransport } from "../websocket/transports/basic";
 import type { IConnectionTransport } from "../websocket/transports/transport";
 import { PyodideRouter } from "./router";
 import { getWorkerRPC } from "./rpc";
+import { getWasmRuntimeConfig } from "./runtime-config";
 import { createShareableLink } from "./share";
 import { wasmInitStateAtom } from "./state";
 import { fallbackFileStore, notebookFileStore } from "./store";
 import { isWasm } from "./utils";
+import saveWorkerUrl from "./worker/save-worker.ts?worker&url";
+import workerUrl from "./worker/worker.ts?worker&url";
 import type { SaveWorkerSchema } from "./worker/save-worker";
 import type { WorkerSchema } from "./worker/worker";
 
@@ -81,19 +85,20 @@ export class PyodideBridge implements RunRequests, EditRequests {
       };
     }
 
+    const runtimeConfig = getWasmRuntimeConfig();
+
     // Create save worker
-    const saveWorker = new Worker(
-      // oxlint-disable-next-line unicorn/relative-url-style
-      new URL("./worker/save-worker.ts", import.meta.url),
+    const saveWorker = createModuleWorker(
+      new URL(saveWorkerUrl, import.meta.url),
       {
-        type: "module",
         // Pass the version (and optional capability suffix) to the worker
-        /* @vite-ignore */
         name: getWasmWorkerName(),
       },
     );
 
-    return getWorkerRPC<SaveWorkerSchema>(saveWorker).proxy.request;
+    const rpc = getWorkerRPC<SaveWorkerSchema>(saveWorker);
+    rpc.send.bootstrap(runtimeConfig);
+    return rpc.proxy.request;
   }
 
   private constructor() {
@@ -101,20 +106,17 @@ export class PyodideBridge implements RunRequests, EditRequests {
       return;
     }
 
+    const runtimeConfig = getWasmRuntimeConfig();
+
     // Create a worker
-    const worker = new Worker(
-      // oxlint-disable-next-line unicorn/relative-url-style
-      new URL("./worker/worker.ts", import.meta.url),
-      {
-        type: "module",
-        // Pass the version (and optional capability suffix) to the worker
-        /* @vite-ignore */
-        name: getWasmWorkerName(),
-      },
-    );
+    const worker = createModuleWorker(new URL(workerUrl, import.meta.url), {
+      // Pass the version (and optional capability suffix) to the worker
+      name: getWasmWorkerName(),
+    });
 
     // Create the RPC
     this.rpc = getWorkerRPC<WorkerSchema>(worker);
+    this.rpc.send.bootstrap(runtimeConfig);
 
     // Listeners
     this.rpc.addMessageListener("ready", () => {

package/src/core/wasm/rpc.ts

@@ -6,11 +6,13 @@ import {
   type RPCSchema,
 } from "rpc-anywhere";
 import { Logger } from "@/utils/Logger";
+import type { WasmRuntimeConfig } from "./runtime-config";
 import { TRANSPORT_ID } from "./worker/constants";
 
 export type ParentSchema = RPCSchema<{
   messages: {
     consumerReady: {};
+    bootstrap: WasmRuntimeConfig;
   };
 }>;
 

package/src/core/wasm/runtime-config.ts

@@ -0,0 +1,27 @@
+/* Copyright 2026 Marimo. All rights reserved. */
+
+export interface WasmRuntimeConfig {
+  pyodideIndexUrl?: string;
+  pyodideLockfileUrl?: string;
+  pypiIndexUrl?: string;
+}
+
+export function getWasmRuntimeConfig(): WasmRuntimeConfig {
+  const element = document.querySelector<HTMLElement>("marimo-wasm");
+  const resolve = (url: string | undefined) => {
+    try {
+      return url ? new URL(url, document.baseURI).href : undefined;
+    } catch {
+      return undefined;
+    }
+  };
+  return {
+    pyodideIndexUrl: resolve(element?.dataset.pyodideIndexUrl),
+    pyodideLockfileUrl: resolve(element?.dataset.pyodideLockfileUrl),
+    // URL serialization escapes the placeholder understood by micropip.
+    pypiIndexUrl: resolve(element?.dataset.pypiIndexUrl)?.replaceAll(
+      "%7Bpackage_name%7D",
+      "{package_name}",
+    ),
+  };
+}

package/src/core/wasm/worker/bootstrap.ts

@@ -41,10 +41,9 @@ export class DefaultWasmController implements WasmController {
     return this.pyodide;
   }
 
-  async bootstrap(opts: {
-    version: string;
-    pyodideVersion: string;
-  }): Promise<PyodideInterface> {
+  async bootstrap(
+    opts: Parameters<WasmController["bootstrap"]>[0],
+  ): Promise<PyodideInterface> {
     const pyodide = await this.loadPyodideAndPackages(opts);
 
     if (MAKE_SNAPSHOT) {
@@ -55,10 +54,9 @@ export class DefaultWasmController implements WasmController {
     return pyodide;
   }
 
-  private async loadPyodideAndPackages(opts: {
-    version: string;
-    pyodideVersion: string;
-  }): Promise<PyodideInterface> {
+  private async loadPyodideAndPackages(
+    opts: Parameters<WasmController["bootstrap"]>[0],
+  ): Promise<PyodideInterface> {
     if (!loadPyodide) {
       throw new Error("loadPyodide is not defined");
     }
@@ -68,7 +66,9 @@ export class DefaultWasmController implements WasmController {
       // Without this, this fails in Firefox with
       // `Could not extract indexURL path from pyodide module`
       // This fixes for Firefox and does not break Chrome/others
-      const indexURL = `https://cdn.jsdelivr.net/pyodide/${opts.pyodideVersion}/full/`;
+      const indexURL =
+        opts.pyodideIndexUrl ??
+        `https://cdn.jsdelivr.net/pyodide/${opts.pyodideVersion}/full/`;
       const pyodide = await loadPyodide({
         // Perf: These get loaded while pyodide is being bootstrapped
         packages: [
@@ -81,16 +81,26 @@ export class DefaultWasmController implements WasmController {
           "packaging",
         ],
         _makeSnapshot: MAKE_SNAPSHOT,
-        lockFileURL: `https://wasm.marimo.app/pyodide-lock.json?v=${opts.version}&pyodide=${opts.pyodideVersion}`,
+        lockFileURL:
+          opts.pyodideLockfileUrl ??
+          `https://wasm.marimo.app/pyodide-lock.json?v=${opts.version}&pyodide=${opts.pyodideVersion}`,
         indexURL,
         // Since Pyodide 0.28.0, when lockFileURL is set, the package base URL
         // defaults to the lockfile's URL (wasm.marimo.app) instead of indexURL.
         // Unlike Node, browsers get no CDN fallback on a failed fetch, so we
-        // should pin packageBaseUrl back to the jsDelivr CDN  to restore
+        // should pin packageBaseUrl to indexURL to restore
         // the resolution akin to pre-0.28.
         packageBaseUrl: indexURL,
         convertNullToNone: true,
       });
+      if (opts.pypiIndexUrl) {
+        const micropip = pyodide.pyimport("micropip");
+        try {
+          micropip.set_index_urls(opts.pypiIndexUrl);
+        } finally {
+          micropip.destroy();
+        }
+      }
       this.pyodide = pyodide;
       span.end("ok");
       return pyodide;

package/src/core/wasm/worker/fs.ts

@@ -20,6 +20,10 @@ export const WasmFileSystem = {
     FS.chdir(HOME_DIR);
   },
   mountFS: (pyodide: PyodideInterface) => {
+    // Opaque origins (single-file exports) use the in-memory filesystem.
+    if (globalThis.origin === "null") {
+      return;
+    }
     const FS = getFS(pyodide);
     // Mount the filesystem
     FS.mount(pyodide.FS.filesystems.IDBFS, { root: "." }, HOME_DIR);

package/src/core/wasm/worker/save-worker.ts

@@ -9,9 +9,11 @@ import {
 } from "rpc-anywhere";
 import type { SaveNotebookRequest } from "@/core/network/types";
 import { decodeUtf8 } from "@/utils/strings";
+import { Deferred } from "../../../utils/Deferred";
 import { prettyError } from "../../../utils/errors";
 import { Logger } from "../../../utils/Logger";
 import type { ParentSchema } from "../rpc";
+import type { WasmRuntimeConfig } from "../runtime-config";
 import { TRANSPORT_ID } from "./constants";
 import { WasmFileSystem } from "./fs";
 import { getController } from "./getController";
@@ -25,6 +27,8 @@ declare const self: Window & {
   pyodide: PyodideInterface;
 };
 
+const runtimeConfig = new Deferred<WasmRuntimeConfig>();
+
 // Initialize
 async function loadPyodideAndPackages() {
   try {
@@ -36,6 +40,7 @@ async function loadPyodideAndPackages() {
     const controller = await getController(marimoVersion);
     self.controller = controller;
     self.pyodide = await controller.bootstrap({
+      ...(await runtimeConfig.promise),
       version: marimoVersion,
       pyodideVersion: pyodideVersion,
     });
@@ -100,6 +105,8 @@ const rpc = createRPC<SaveWorkerSchema, ParentSchema>({
   requestHandler,
 });
 
+rpc.addMessageListener("bootstrap", (config) => runtimeConfig.resolve(config));
+
 rpc.send("ready", {});
 
 function getMarimoVersion() {