@marimo-team/islands 0.25.3-dev141 → 0.25.3-dev2

package/dist/{ErrorBoundary-Cg59O3xL.js → ErrorBoundary-DWEpirf3.js}

@@ -135,7 +135,7 @@ function F(e) {
 }
 //#endregion
 //#region src/components/editor/boundary/ErrorBoundary.tsx
-var I = (0, T.lazy)(() => import("./feedback-button-DaPwHIdM.js").then((e) => ({ default: e.FeedbackModal }))), L = (e) => {
+var I = (0, T.lazy)(() => import("./feedback-button-fND8YT59.js").then((e) => ({ default: e.FeedbackModal }))), L = (e) => {
 	let t = (0, w.c)(2), n;
 	return t[0] === e.children ? n = t[1] : (n = /* @__PURE__ */ (0, j.jsx)(O, {
 		FallbackComponent: R,

package/dist/{code-visibility-Da3iitn_.js → code-visibility-CLNfgCjd.js}

@@ -18,7 +18,7 @@ function x() {
 		return e.warn("Failed to get version from mount config"), null;
 	}
 }
-var S = x() || "0.25.3-dev141", C = u(S), w = u(!0);
+var S = x() || "0.25.3-dev2", C = u(S), w = u(!0);
 u(null);
 //#endregion
 //#region src/core/wasm/state.ts

package/dist/{common-C6FHcu5p.js → common-fyD_6mT2.js}

@@ -12,7 +12,7 @@ import { t as st } from "./check-EDwSwP89.js";
 import { A as ct, C as lt, M as ut, O as dt, S as ft, _ as pt, b as mt, c as ht, d as gt, g as _t, h as vt, i as yt, l as bt, m as xt, n as St, p as Ct, s as wt, t as Tt, u as Et, v as Dt, y as Ot } from "./select-BButFi-d.js";
 import { $ as kt, $t as At, A as jt, At as Mt, B as Nt, Bt as Pt, Ct as Ft, D as It, Dt as Lt, E as Rt, Et as zt, F as Bt, Ft as Vt, G as Ht, Gt as Ut, H as Wt, Ht as Gt, I as Kt, It as qt, J as Jt, Jt as Yt, Kt as Xt, L as Zt, Lt as Qt, M as $t, Mt as en, N as tn, Nt as nn, O as rn, Ot as an, P as on, Pt as sn, Q as cn, Qt as ln, R as un, Rt as dn, S as fn, St as pn, T as mn, Tt as hn, U as gn, Ut as _n, V as vn, Vt as yn, W as bn, Wt as xn, X as Sn, Xt as Cn, Y as wn, Yt as Tn, Z as En, Zt as Dn, _ as On, _n as kn, _t as An, a as jn, at as Mn, b as Nn, bt as Pn, cn as Fn, ct as In, d as Ln, dn as Rn, dt as zn, et as Bn, f as Vn, fn as Hn, ft as Un, gn as Wn, gt as Gn, h as Kn, hn as qn, ht as Jn, i as Yn, in as Xn, it as Zn, j as Qn, jt as $n, k as er, kt as tr, l as nr, lt as rr, mn as ir, mt as ar, n as or, nn as sr, nt as cr, o as lr, on as ur, ot as dr, pn as fr, pt as pr, qt as mr, rn as hr, rt as gr, s as _r, sn as vr, st as yr, t as br, tn as xr, tt as Sr, u as Cr, un as wr, vn as Tr, vt as Er, w as Dr, wt as Or, x as kr, xt as Ar, y as jr, yt as Mr, z as Nr, zt as Pr } from "./dropdown-menu-CP_qCYHC.js";
 import { _ as Fr, a as Ir, b as Lr, c as Rr, i as zr, n as Br, r as Vr, t as Hr, u as Ur, v as Wr } from "./toDate-BNJf01u1.js";
-import { n as Gr, t as Kr } from "./ErrorBoundary-Cg59O3xL.js";
+import { n as Gr, t as Kr } from "./ErrorBoundary-DWEpirf3.js";
 import { t as qr } from "./clsx-CoeGtWvn.js";
 import { t as Jr } from "./react-dom-DUmH0GXv.js";
 import { t as Yr } from "./jsx-runtime-3BD1kT0s.js";

package/dist/{data-grid-overlay-editor-mJt3Pg4S.js → data-grid-overlay-editor-BmqASKep.js}

@@ -2,7 +2,7 @@ import { a as e } from "./rolldown-runtime-Cb76FRpK.js";
 import { t } from "./react-sHtZdjeP.js";
 import { t as n } from "./react-dom-DUmH0GXv.js";
 import { c as r, l as i, u as a } from "./data-grid-types-BH_r7g7l.js";
-import { a as o, i as s, n as c, r as l } from "./glide-data-editor-Ctz2mH6k.js";
+import { a as o, i as s, n as c, r as l } from "./glide-data-editor-BkjP14aq.js";
 //#region ../node_modules/.pnpm/@glideapps+glide-data-grid@6.0.4-alpha24_lodash@4.17.21_marked@15.0.12_react-dom@19.3.0_aca11a353ce3b112922852200b9c160f/node_modules/@glideapps/glide-data-grid/dist/esm/internal/data-grid-overlay-editor/data-grid-overlay-editor-style.js
 var u = /* @__PURE__ */ e(t(), 1), d = /* @__PURE__ */ e(n(), 1), f = /*#__PURE__*/ o("div")({
 	name: "DataGridOverlayEditorStyle",

package/dist/{feedback-button-DaPwHIdM.js → feedback-button-fND8YT59.js}

@@ -5,12 +5,12 @@ import { t as i } from "./compiler-runtime-CldRdSsv.js";
 import { t as a } from "./copy-icon-Ft7t9bqz.js";
 import { Ct as o, Ft as s, H as c, L as l, Lt as u, V as d, d as f, un as p } from "./cells-C8iCYvLU.js";
 import { b as m } from "./select-BButFi-d.js";
-import { n as h, t as ee } from "./globals-EpFoRj_E.js";
+import { n as h, t as ee } from "./globals-BN2O0F8N.js";
 import { t as g } from "./jsx-runtime-3BD1kT0s.js";
 import { C as _, _ as te, i as v } from "./useTheme-CRnjkku0.js";
 import { a as ne, i as re, n as ie, r as ae } from "./dialog-CEBFZNyc.js";
 import { t as oe } from "./useAsyncData-Deh5kszT.js";
-import { t as se } from "./code-visibility-Da3iitn_.js";
+import { t as se } from "./code-visibility-CLNfgCjd.js";
 import { i as ce, n as le } from "./error-entries-CzoYkIQZ.js";
 //#region src/components/ui/skeleton.tsx
 var y = /* @__PURE__ */ e(r(), 1), b = i(), x = g(), ue = (e) => {

package/dist/{glide-data-editor-Ctz2mH6k.js → glide-data-editor-BkjP14aq.js}

@@ -6,7 +6,7 @@ import { i as s, n as c, r as l } from "./copy-icon-Ft7t9bqz.js";
 import { C as u, c as d, i as f, n as p, s as m, t as h, x as g } from "./select-BButFi-d.js";
 import { d as _, h as v, i as y, l as b, n as x, o as S, s as C, t as w, u as T } from "./dropdown-menu-CP_qCYHC.js";
 import { c as E, d as D, l as O, n as k, o as A, s as ee, t as j, u as te } from "./glide-utils-DJyqh0EM.js";
-import { n as ne, t as re } from "./ErrorBoundary-Cg59O3xL.js";
+import { n as ne, t as re } from "./ErrorBoundary-DWEpirf3.js";
 import { t as M } from "./react-dom-DUmH0GXv.js";
 import { t as N } from "./jsx-runtime-3BD1kT0s.js";
 import { t as ie } from "./label-BDKF3Afc.js";
@@ -7062,7 +7062,7 @@ function rs(e, t, n, r, i) {
 }
 //#endregion
 //#region ../node_modules/.pnpm/@glideapps+glide-data-grid@6.0.4-alpha24_lodash@4.17.21_marked@15.0.12_react-dom@19.3.0_aca11a353ce3b112922852200b9c160f/node_modules/@glideapps/glide-data-grid/dist/esm/data-editor/data-editor.js
-var is = /* @__PURE__ */ e(_r(), 1), as = /* @__PURE__ */ e(xr(), 1), os = K.lazy(async () => await import("./data-grid-overlay-editor-mJt3Pg4S.js")), ss = 0;
+var is = /* @__PURE__ */ e(_r(), 1), as = /* @__PURE__ */ e(xr(), 1), os = K.lazy(async () => await import("./data-grid-overlay-editor-BmqASKep.js")), ss = 0;
 function cs(e) {
 	return (0, is.default)((0, as.default)((0, as.default)(e).filter((e) => e.span !== void 0).map((e) => (0, Za.default)((e.span?.[0] ?? 0) + 1, (e.span?.[1] ?? 0) + 1))));
 }
@@ -9293,7 +9293,7 @@ function Vs(e, t, n, r, i) {
 }
 //#endregion
 //#region ../node_modules/.pnpm/@glideapps+glide-data-grid@6.0.4-alpha24_lodash@4.17.21_marked@15.0.12_react-dom@19.3.0_aca11a353ce3b112922852200b9c160f/node_modules/@glideapps/glide-data-grid/dist/esm/cells/number-cell.js
-var Hs = K.lazy(async () => await import("./number-overlay-editor-CtxrummL.js")), Us = {
+var Hs = K.lazy(async () => await import("./number-overlay-editor-BEBWJnbL.js")), Us = {
 	getAccessibilityString: (e) => e.data?.toString() ?? "",
 	kind: W.Number,
 	needsHover: (e) => e.hoverEffect === !0,

package/dist/{globals-EpFoRj_E.js → globals-BN2O0F8N.js}

@@ -1,6 +1,6 @@
 import { h as e } from "./tooltip-BO1REbqs.js";
 import { _ as t } from "./useTheme-CRnjkku0.js";
-import { r as n } from "./code-visibility-Da3iitn_.js";
+import { r as n } from "./code-visibility-CLNfgCjd.js";
 var r = e("triangle-alert", [
 	["path", {
 		d: "m21.73 18-8-14a2 2 0 0 0-3.48 0l-8 14A2 2 0 0 0 4 21h16a2 2 0 0 0 1.73-3",

package/dist/main.js

@@ -7,7 +7,7 @@ import { C as w, F as T, G as E, I as D, J as O, K as k, L as A, P as j, R as M,
 import { a as oe, d as se, f as ce, h as V, i as le, n as ue, o as de, r as fe, t as pe } from "./tooltip-BO1REbqs.js";
 import { $ as me, $t as he, B as ge, Bt as _e, C as ve, Ct as ye, D as be, Dt as xe, Et as Se, F as Ce, G as we, Gt as Te, Ht as Ee, I as De, J as Oe, Jt as ke, Kt as Ae, L as je, O as Me, Ot as Ne, P as Pe, Pt as Fe, Q as Ie, Qt as Le, Rt as Re, S as ze, St as Be, T as Ve, Tt as He, U as Ue, W as We, Wt as Ge, bt as Ke, c as qe, cn as Je, ct as Ye, d as Xe, dn as Ze, dt as Qe, en as $e, f as et, fn as tt, ft as nt, g as rt, gt as it, h as at, hn as ot, k as st, l as ct, ln as lt, m as ut, mn as dt, n as ft, o as pt, on as mt, ot as ht, p as gt, q as _t, qt as vt, r as yt, rn as bt, rt as xt, sn as St, st as Ct, tn as wt, u as Tt, v as Et, w as Dt, wt as Ot, zt as kt } from "./cells-C8iCYvLU.js";
 import { D as At, E as jt, O as Mt, S as Nt, T as Pt, _ as Ft, a as It, c as Lt, d as Rt, f as zt, g as Bt, h as Vt, i as Ht, l as Ut, m as Wt, n as Gt, o as Kt, p as qt, r as Jt, s as Yt, t as Xt, u as Zt, v as Qt, w as $t, x as en, y as tn } from "./spec-BwarBpUJ.js";
-import { $t as nn, A as rn, At as an, B as on, Bt as sn, C as cn, Ct as ln, D as un, Dt as dn, E as fn, Et as pn, F as mn, Ft as hn, G as gn, Gt as _n, H as vn, Ht as yn, I as bn, It as xn, J as Sn, Jt as Cn, K as wn, Kt as Tn, L as En, Lt as Dn, M as On, Mt as kn, N as An, Nt as jn, O as Mn, Ot as Nn, P as Pn, Pt as Fn, Qt as In, R as Ln, Rt as Rn, S as zn, St as Bn, T as Vn, Tt as Hn, U as Un, Ut as Wn, V as Gn, Vt as Kn, W as qn, Wt as Jn, X as Yn, Xt as Xn, Y as Zn, Yt as Qn, Zt as $n, _ as er, _t as tr, an as nr, at as rr, b as ir, c as ar, cn as or, ct as sr, d as cr, dn as lr, dt as ur, en as dr, et as fr, f as pr, fn as mr, ft as hr, g as gr, gt as _r, h as vr, hn as yr, ht as br, in as xr, it as Sr, j as Cr, jt as wr, k as Tr, kt as Er, ln as Dr, lt as Or, m as kr, mn as Ar, mt as jr, nn as Mr, nt as Nr, ot as Pr, p as Fr, pn as Ir, pt as Lr, q as Rr, qt as zr, r as Br, rn as Vr, rt as Hr, sn as Ur, st as Wr, t as Gr, tn as Kr, tt as qr, u as Jr, un as Yr, ut as Xr, v as Zr, vt as Qr, w as $r, wt as ei, x as ti, y as ni, yt as ri, z as ii, zt as ai } from "./common-C6FHcu5p.js";
+import { $t as nn, A as rn, At as an, B as on, Bt as sn, C as cn, Ct as ln, D as un, Dt as dn, E as fn, Et as pn, F as mn, Ft as hn, G as gn, Gt as _n, H as vn, Ht as yn, I as bn, It as xn, J as Sn, Jt as Cn, K as wn, Kt as Tn, L as En, Lt as Dn, M as On, Mt as kn, N as An, Nt as jn, O as Mn, Ot as Nn, P as Pn, Pt as Fn, Qt as In, R as Ln, Rt as Rn, S as zn, St as Bn, T as Vn, Tt as Hn, U as Un, Ut as Wn, V as Gn, Vt as Kn, W as qn, Wt as Jn, X as Yn, Xt as Xn, Y as Zn, Yt as Qn, Zt as $n, _ as er, _t as tr, an as nr, at as rr, b as ir, c as ar, cn as or, ct as sr, d as cr, dn as lr, dt as ur, en as dr, et as fr, f as pr, fn as mr, ft as hr, g as gr, gt as _r, h as vr, hn as yr, ht as br, in as xr, it as Sr, j as Cr, jt as wr, k as Tr, kt as Er, ln as Dr, lt as Or, m as kr, mn as Ar, mt as jr, nn as Mr, nt as Nr, ot as Pr, p as Fr, pn as Ir, pt as Lr, q as Rr, qt as zr, r as Br, rn as Vr, rt as Hr, sn as Ur, st as Wr, t as Gr, tn as Kr, tt as qr, u as Jr, un as Yr, ut as Xr, v as Zr, vt as Qr, w as $r, wt as ei, x as ti, y as ni, yt as ri, z as ii, zt as ai } from "./common-fyD_6mT2.js";
 import { c as oi, i as si, n as ci, o as li, t as ui } from "./useLifecycle-j7D9uD1o.js";
 import { t as di } from "./check-EDwSwP89.js";
 import { A as fi, C as pi, D as mi, E as hi, M as gi, O as _i, S as vi, T as yi, a as bi, b as xi, c as Si, i as Ci, k as wi, l as Ti, n as Ei, o as Di, r as Oi, s as ki, t as Ai, w as ji, x as Mi } from "./select-BButFi-d.js";
@@ -15,8 +15,8 @@ import { $ as Ni, C as Pi, Et as Fi, J as Ii, K as Li, R as Ri, S as zi, U as Bi
 import { S as ua, a as da, b as fa, c as pa, d as ma, f as ha, g as ga, l as _a, m as va, p as ya, s as ba, v as xa, y as Sa } from "./toDate-BNJf01u1.js";
 import { a as Ca, c as wa, d as Ta, f as Ea, i as Da, l as Oa, n as ka, o as Aa, r as ja, s as Ma, t as Na } from "./process-output-e4jj9Ijt.js";
 import { a as Pa, c as Fa, d as Ia, i as La, l as Ra, r as za, u as Ba } from "./glide-utils-DJyqh0EM.js";
-import { n as Va, t as Ha } from "./ErrorBoundary-Cg59O3xL.js";
-import { n as Ua, t as Wa } from "./globals-EpFoRj_E.js";
+import { n as Va, t as Ha } from "./ErrorBoundary-DWEpirf3.js";
+import { n as Ua, t as Wa } from "./globals-BN2O0F8N.js";
 import { t as Ga } from "./react-dom-DUmH0GXv.js";
 import { t as Ka } from "./jsx-runtime-3BD1kT0s.js";
 import { B as qa, C as H, Ct as Ja, D as Ya, E as Xa, F as U, G as Za, H as Qa, I as $a, L as eo, M as W, N as to, O as no, P as ro, Q as io, R as ao, S as G, St as oo, Tt as so, U as co, W as lo, Y as uo, Z as fo, _ as po, _t as mo, a as ho, b as go, bt as _o, c as vo, d as yo, f as bo, g as xo, h as So, ht as Co, i as wo, j as K, k as To, l as Eo, m as Do, n as Oo, o as ko, p as Ao, r as jo, s as Mo, u as No, ut as Po, v as Fo, vt as Io, w as Lo, wt as Ro, x as zo, xt as Bo, y as Vo, yt as Ho } from "./use-restore-focus-BEM7sFWl.js";
@@ -39,7 +39,7 @@ import { t as Ms } from "./useAsyncData-Deh5kszT.js";
 import { i as Ns, n as Ps, r as Fs } from "./formats-BGh2thRc.js";
 import { M as Is, N as Ls } from "./vega-loader.browser-DNST6uVf.js";
 import { a as Rs, n as zs } from "./loader-BQOfjTIJ.js";
-import { c as Bs, d as Vs, i as Hs, l as Us, o as Ws, s as Gs, t as Ks, u as qs } from "./code-visibility-Da3iitn_.js";
+import { c as Bs, d as Vs, i as Hs, l as Us, o as Ws, s as Gs, t as Ks, u as qs } from "./code-visibility-CLNfgCjd.js";
 import { t as Js } from "./useDeepCompareMemoize-DXwzRINI.js";
 import { t as Ys } from "./esm-D2gTsXEV.js";
 //#region ../node_modules/.pnpm/iconify-icon@2.3.0/node_modules/iconify-icon/dist/iconify-icon.mjs
@@ -10533,7 +10533,7 @@ function VC(e, t) {
 }
 //#endregion
 //#region src/plugins/impl/DataEditorPlugin.tsx
-var HC = J.lazy(() => import("./glide-data-editor-Ctz2mH6k.js").then((e) => e.t)), UC = wS("marimo-data-editor", { cssStyles: [qS] }).withData(W({
+var HC = J.lazy(() => import("./glide-data-editor-BkjP14aq.js").then((e) => e.t)), UC = wS("marimo-data-editor", { cssStyles: [qS] }).withData(W({
 	initialValue: W({ edits: G(W({
 		rowIdx: K(),
 		columnId: U(),
@@ -30107,7 +30107,7 @@ function OR(e) {
 }
 //#endregion
 //#region src/components/editor/renderers/slides-layout/slides-layout.tsx
-var kR = J.lazy(() => import("./reveal-component-DrIXvR_7.js")), AR = (e) => {
+var kR = J.lazy(() => import("./reveal-component-DK69bOki.js")), AR = (e) => {
 	let t = (0, X.c)(33), { layout: n, setLayout: r, cells: i, mode: a } = e, o = ns(ga), s = a === "read" || o, c = ns(gt) > 1, [l, u] = (0, J.useState)(null), d;
 	t[0] !== i || t[1] !== n ? (d = EP(i, n), t[0] = i, t[1] = n, t[2] = d) : d = t[2];
 	let { slideCells: f, skippedIds: p, noOutputIds: m, slideTypes: h, startCellIndex: g } = d, _;

package/dist/{number-overlay-editor-CtxrummL.js → number-overlay-editor-BEBWJnbL.js}

@@ -1,6 +1,6 @@
 import { a as e } from "./rolldown-runtime-Cb76FRpK.js";
 import { t } from "./react-sHtZdjeP.js";
-import { a as n } from "./glide-data-editor-Ctz2mH6k.js";
+import { a as n } from "./glide-data-editor-BkjP14aq.js";
 //#region ../node_modules/.pnpm/@glideapps+glide-data-grid@6.0.4-alpha24_lodash@4.17.21_marked@15.0.12_react-dom@19.3.0_aca11a353ce3b112922852200b9c160f/node_modules/@glideapps/glide-data-grid/dist/esm/internal/data-grid-overlay-editor/private/number-overlay-editor-style.js
 var r = /* @__PURE__ */ e(t()), i = /*#__PURE__*/ n("div")({
 	name: "NumberOverlayEditorStyle",

package/dist/{reveal-component-DrIXvR_7.js → reveal-component-DK69bOki.js}

@@ -4,14 +4,14 @@ import { t as o } from "./react-sHtZdjeP.js";
 import { t as s } from "./compiler-runtime-CldRdSsv.js";
 import { h as c, t as l } from "./tooltip-BO1REbqs.js";
 import { w as u } from "./cells-C8iCYvLU.js";
-import { $ as d, Q as f, Z as p, an as m, i as h, l as g, ln as _, n as v, on as y, r as b, t as x, u as S } from "./common-C6FHcu5p.js";
+import { $ as d, Q as f, Z as p, an as m, i as h, l as g, ln as _, n as v, on as y, r as b, t as x, u as S } from "./common-fyD_6mT2.js";
 import { M as C } from "./select-BButFi-d.js";
 import { q as ee } from "./dropdown-menu-CP_qCYHC.js";
 import { g as w } from "./toDate-BNJf01u1.js";
 import { t as T } from "./jsx-runtime-3BD1kT0s.js";
 import { q as E } from "./use-restore-focus-BEM7sFWl.js";
 import { A as D, C as O, b as k } from "./useTheme-CRnjkku0.js";
-import { a as A, n as te, t as ne } from "./code-visibility-Da3iitn_.js";
+import { a as A, n as te, t as ne } from "./code-visibility-CLNfgCjd.js";
 /* empty css                */
 var j = c("sticky-note", [["path", {
 	d: "M21 9a2.4 2.4 0 0 0-.706-1.706l-3.588-3.588A2.4 2.4 0 0 0 15 3H5a2 2 0 0 0-2 2v14a2 2 0 0 0 2 2h14a2 2 0 0 0 2-2z",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@marimo-team/islands",
-  "version": "0.25.3-dev141",
+  "version": "0.25.3-dev2",
   "main": "dist/main.js",
   "types": "dist/index.d.ts",
   "type": "module",
@@ -183,7 +183,9 @@
     "preview:islands": "cross-env VITE_MARIMO_VERSION='0.4.6' VITE_MARIMO_ISLANDS=true vite --config islands/vite.config.mts build",
     "storybook": "storybook dev -p 6006",
     "build-storybook": "storybook build",
-    "sync-katex-css": "node --experimental-strip-types scripts/sync-katex-css.ts"
+    "sync-katex-css": "node --experimental-strip-types scripts/sync-katex-css.ts",
+    "codegen": "node --experimental-strip-types scripts/generate-host-protocol.ts",
+    "codegen:check": "node --experimental-strip-types scripts/generate-host-protocol.ts --check"
   },
   "peerDependencies": {
     "react": "^17 || ^18 || ^19",
@@ -212,6 +214,7 @@
     "jsdom": "^24.1.3",
     "msw": "^2.15.0",
     "npm-run-all2": "^6.2.6",
+    "orval": "8.40.0",
     "oxc-transform-react": "0.145.0",
     "oxfmt": "^0.68.0",
     "oxlint": "^1.83.0",

package/src/__tests__/host-imports.test.ts

@@ -0,0 +1,100 @@
+/* Copyright 2026 Marimo. All rights reserved. */
+
+import NodeChildProcess from "node:child_process";
+import NodeFs from "node:fs";
+import NodeOs from "node:os";
+import NodePath from "node:path";
+import NodeUrl from "node:url";
+import { expect, it } from "vitest";
+import { z } from "zod";
+
+it("enforces host dependencies for runtime and type imports", () => {
+  const frontend = NodeUrl.fileURLToPath(
+    new NodeUrl.URL("../../", import.meta.url),
+  );
+  const directory = NodeFs.mkdtempSync(
+    NodePath.join(NodeOs.tmpdir(), "host-imports-"),
+  );
+  const files = {
+    "src/core/host/allowed.ts": `
+      import { atom } from "jotai/vanilla";
+      import { z } from "zod";
+      import { Logger } from "@/utils/Logger";
+      import type { Document } from "./document";
+      export * from "@/core/host/events";
+      type Event = import("./events").NotebookEvent;
+      void import("./protocol");
+    `,
+    "src/core/host/protocol.ts": `
+      import type { NotificationMessage as A } from "../kernel/messages";
+      import { type NotificationMessage as B } from "@/core/kernel/messages";
+      import { NotificationMessage as C } from "../kernel/messages";
+      import type { NotificationPayload } from "../kernel/messages";
+    `,
+    "src/core/host/forbidden.ts": `
+      import { useEffect } from "react";
+      import type { NotificationMessage } from "../kernel/messages";
+      export * from "../kernel/messages";
+      export { Logger } from "@/utils/Logger/../other";
+      void import("../kernel/messages");
+      type Message = import("../kernel/messages").NotificationMessage;
+      const module = require("../kernel/messages");
+      void import(module);
+      import "./__tests__/allowed";
+      import "./allowed.test";
+    `,
+    "src/core/host/__tests__/allowed.ts": `import { useEffect } from "react";`,
+    "src/core/host/allowed.test.ts": `import { useEffect } from "react";`,
+    "src/core/host/allowed.spec.ts": `import { useEffect } from "react";`,
+    "src/core/websocket/allowed.ts": `import { useEffect } from "react";`,
+  };
+  try {
+    for (const [path, source] of Object.entries(files)) {
+      const destination = NodePath.join(directory, path);
+      NodeFs.mkdirSync(NodePath.dirname(destination), { recursive: true });
+      NodeFs.writeFileSync(destination, source);
+    }
+    const result = NodeChildProcess.spawnSync(
+      NodePath.join(frontend, "node_modules/.bin/oxlint"),
+      [
+        "--config",
+        NodePath.join(frontend, ".oxlintrc.json"),
+        "--format",
+        "json",
+        directory,
+      ],
+      { cwd: frontend, encoding: "utf8" },
+    );
+    const report = z
+      .object({
+        diagnostics: z.array(
+          z.object({
+            severity: z.string(),
+            filename: z.string(),
+            labels: z.array(z.object({ span: z.object({ line: z.number() }) })),
+          }),
+        ),
+      })
+      .parse(JSON.parse(result.stdout));
+    const errors = report.diagnostics.filter(
+      (diagnostic) => diagnostic.severity === "error",
+    );
+    expect(
+      errors
+        .map((error) => ({
+          file: NodePath.basename(error.filename),
+          line: error.labels[0].span.line,
+        }))
+        .toSorted((a, b) => a.file.localeCompare(b.file) || a.line - b.line),
+    ).toEqual([
+      ...[2, 3, 4, 5, 6, 7, 8, 9, 10, 11].map((line) => ({
+        file: "forbidden.ts",
+        line,
+      })),
+      ...[2, 3, 4, 5].map((line) => ({ file: "protocol.ts", line })),
+    ]);
+    expect(result.status).toBe(1);
+  } finally {
+    NodeFs.rmSync(directory, { recursive: true, force: true });
+  }
+});

package/src/core/host/AGENTS.md

@@ -0,0 +1,6 @@
+# Host core
+
+Production code may import host modules, `jotai/vanilla`, `zod`, and
+`@/utils/Logger`. Enforced by `marimo/host-imports`. Tests are exempt.
+
+Define interfaces here and inject application behavior through adapters.

package/src/core/host/__tests__/protocol.test.ts

@@ -0,0 +1,214 @@
+/* Copyright 2026 Marimo. All rights reserved. */
+
+import NodeFs from "node:fs";
+import NodeUrl from "node:url";
+import { describe, expect, expectTypeOf, it } from "vitest";
+import * as Protocol from "../protocol";
+
+const fixtures = new NodeUrl.URL(
+  "../../../../../protocols/host/fixtures/",
+  import.meta.url,
+);
+
+function readFixture(name: string): unknown {
+  return JSON.parse(
+    NodeFs.readFileSync(new NodeUrl.URL(name, fixtures), "utf8"),
+  );
+}
+
+const records = {
+  "record.json": Protocol.HostRecord,
+  "cell.json": Protocol.Cell,
+  "analysis.json": Protocol.Analysis,
+  "diagnostic.json": Protocol.Error,
+  "edit.json": Protocol.EditRequest,
+  "edit-conflict-request.json": Protocol.EditRequest,
+  "edit-response.json": Protocol.EditResponse,
+  "execution-restored.json": Protocol.Execution,
+  "run-cells-request.json": Protocol.RunRequest,
+};
+
+describe("host protocol fixtures", () => {
+  it.each(Object.entries(records))("parses %s unchanged", (name, schema) => {
+    const input = readFixture(name);
+    const original = structuredClone(input);
+    expect(schema.parse(input)).toEqual(original);
+    expect(input).toEqual(original);
+  });
+
+  it.each(NodeFs.readdirSync(new NodeUrl.URL("problems/", fixtures)))(
+    "parses problem %s",
+    (name) => {
+      const input = readFixture(`problems/${name}`);
+      expect(Protocol.Problem.parse(input)).toEqual(input);
+    },
+  );
+
+  it.each(NodeFs.readdirSync(fixtures).filter((name) => name.endsWith(".sse")))(
+    "parses events in %s unchanged",
+    (name) => {
+      const stream = NodeFs.readFileSync(
+        new NodeUrl.URL(name, fixtures),
+        "utf8",
+      );
+      let count = 0;
+      for (const frame of stream.split(/\r?\n\r?\n/)) {
+        const event = /^event: (.+)$/m.exec(frame)?.[1];
+        if (!event && !/^data:/m.test(frame)) {
+          continue;
+        }
+        const data = frame
+          .split(/\r?\n/)
+          .filter((line) => line.startsWith("data:"))
+          .map((line) => line.slice(5).trimStart())
+          .join("\n");
+        const id = /^id: (.+)$/m.exec(frame)?.[1];
+        const payload: unknown = JSON.parse(data);
+        const input = { event, data: payload, ...(id ? { id } : {}) };
+        const original = structuredClone(input);
+        expect(Protocol.Event.parse(input)).toEqual(original);
+        expect(input).toEqual(original);
+        count += 1;
+      }
+      expect(count).toBeGreaterThan(0);
+    },
+  );
+});
+
+describe("host protocol bindings", () => {
+  it("preserves native marimo payloads without interpreting them", () => {
+    expectTypeOf<Protocol.MarimoEvent["data"]["marimo"]>().toBeUnknown();
+    const input = {
+      event: "marimo",
+      id: "42",
+      data: {
+        marimo: {
+          future_payload: { value: Number.NaN },
+        },
+      },
+    };
+    expect(Protocol.Event.parse(input)).toEqual(input);
+  });
+
+  it("accepts additive fields and preserves arbitrary notebook settings", () => {
+    const cell = Protocol.Cell.parse(readFixture("cell.json"));
+    const input = {
+      ...cell,
+      future: { enabled: true },
+      config: { ...cell.config, future: 42 },
+    };
+    const original = structuredClone(input);
+    expect(Protocol.Cell.parse(input)).toEqual(cell);
+    expect(input).toEqual(original);
+
+    const { document } = Protocol.EditResponse.parse(
+      readFixture("edit-response.json"),
+    );
+    const configured = {
+      ...document,
+      app_config: { extension: { values: [1, null, false] } },
+    };
+    expect(Protocol.Document.parse(configured)).toEqual(configured);
+  });
+
+  it("applies the defaults declared for cell inputs", () => {
+    expect(
+      Protocol.CellInput.parse({ id: "c3", code: "x = 1", config: {} }),
+    ).toEqual({
+      id: "c3",
+      code: "x = 1",
+      name: "_",
+      config: {
+        column: null,
+        disabled: false,
+        hide_code: false,
+        expand_output: false,
+      },
+    });
+  });
+
+  it.each(["run_id", "runtime_id", "caused_by"] as const)(
+    "requires the nullable execution field %s",
+    (field) => {
+      const execution = Protocol.Execution.parse(
+        readFixture("execution-restored.json"),
+      );
+      const missing = Object.fromEntries(
+        Object.entries(execution).filter(([key]) => key !== field),
+      );
+      expect(Protocol.Execution.safeParse(missing).success).toBe(false);
+      expect(
+        Protocol.Execution.safeParse({ ...execution, [field]: null }).success,
+      ).toBe(true);
+    },
+  );
+
+  it("preserves snapshot metadata omissions and validates live timestamps", () => {
+    const cell = Protocol.Cell.parse(readFixture("cell.json"));
+    expect(Protocol.CellMessage.parse({ cell })).toEqual({ cell });
+    const message = { cell, time: "2026-01-01T12:00:00+05:30" };
+    expect(Protocol.CellMessage.parse(message)).toEqual(message);
+    for (const time of [
+      null,
+      "yesterday",
+      "2026-02-30T12:00:00Z",
+      "2026-01-01T12:00:00",
+    ]) {
+      expect(Protocol.CellMessage.safeParse({ cell, time }).success).toBe(
+        false,
+      );
+    }
+  });
+
+  it("rejects invalid cell fields without coercing their values", () => {
+    const cell = Protocol.Cell.parse(readFixture("cell.json"));
+    for (const patch of [
+      { id: "" },
+      { code: 42 },
+      { etag: 42 },
+      { version: "2" },
+      { version: 0 },
+      { version: 1.5 },
+      { config: { ...cell.config, disabled: "false" } },
+    ]) {
+      expect(Protocol.Cell.safeParse({ ...cell, ...patch }).success).toBe(
+        false,
+      );
+    }
+    const result = Protocol.Cell.safeParse({ ...cell, code: 42 });
+    expect(result.success).toBe(false);
+    if (result.success) {
+      throw new Error("Expected an invalid cell");
+    }
+    expect(result.error.issues).toEqual([
+      expect.objectContaining({ path: ["code"], code: "invalid_type" }),
+    ]);
+  });
+
+  it("requires the fields of the selected change kind", () => {
+    const change = { kind: "delete_cell", id: "c3", base_etag: "*" };
+    expect(Protocol.Change.parse(change)).toEqual(change);
+    expect(
+      Protocol.Change.safeParse({ kind: "delete_cell", id: "c3" }).success,
+    ).toBe(false);
+    expect(
+      Protocol.Change.safeParse({ ...change, kind: "unknown" }).success,
+    ).toBe(false);
+  });
+
+  it("requires custom payloads while allowing any JSON value", () => {
+    for (const data of [
+      null,
+      false,
+      42,
+      "text",
+      { nested: [1, null, false] },
+    ]) {
+      const custom = { type: "example.event", data };
+      expect(Protocol.Custom.parse(custom)).toEqual(custom);
+    }
+    expect(Protocol.Custom.safeParse({ type: "example.event" }).success).toBe(
+      false,
+    );
+  });
+});