@marimo-team/islands 0.25.3-dev297 → 0.25.3-dev299

package/dist/{feedback-button-CgqRRJ4F.js → feedback-button-CjFZyRp-.js}

@@ -3,14 +3,14 @@ import { h as t, t as n } from "./button-DZuNnIZO.js";
 import { t as r } from "./react-sHtZdjeP.js";
 import { t as i } from "./compiler-runtime-CldRdSsv.js";
 import { t as a } from "./copy-icon-CtllOdmg.js";
-import { D as o, E as s, F as c, Gt as l, L as u, i as d, j as f, n as p, q as m } from "./error-entries-CXWVDDkS.js";
-import { n as h, t as ee } from "./globals-CvV8y9Lx.js";
+import { D as o, E as s, F as c, Gt as l, L as u, i as d, j as f, n as p, q as m } from "./error-entries-BhO7ciHW.js";
+import { n as h, t as ee } from "./globals-APxSeNTW.js";
 import { r as g } from "./assertNever-B-YzWzbL.js";
 import { t as _ } from "./jsx-runtime-3BD1kT0s.js";
 import { Ft as te, p as v, yt as ne } from "./use-restore-focus-CosX7-gx.js";
 import { a as re, i as ie, n as ae, r as oe } from "./dialog-CaYm5imE.js";
 import { t as se } from "./useAsyncData-Ci4AvJff.js";
-import { t as ce } from "./code-visibility-CkF3s0y2.js";
+import { t as ce } from "./code-visibility-CPdcPO-M.js";
 //#region src/components/ui/skeleton.tsx
 var y = /* @__PURE__ */ e(r(), 1), b = i(), x = _(), S = (e) => {
 	let n = (0, b.c)(8), r, i;

package/dist/{glide-data-editor-BPs-HHRj.js → glide-data-editor-BF2c3W18.js}

@@ -14,7 +14,7 @@ import { t as P } from "./jsx-runtime-3BD1kT0s.js";
 import { u as oe } from "./use-restore-focus-CosX7-gx.js";
 import { t as F } from "./useEvent-BRH-aCqi.js";
 import { n as I, t as se } from "./objectWithoutPropertiesLoose-BRDcTsfB.js";
-import { t as ce } from "./ErrorBoundary-7bB09iEz.js";
+import { t as ce } from "./ErrorBoundary-BIjOhBDs.js";
 import { A as le, C as ue, D as de, E as fe, F as pe, I as me, L as he, M as ge, N as _e, O as L, P as ve, R as ye, S as be, T as xe, _ as Se, a as R, b as Ce, c as z, d as we, f as B, g as V, h as Te, i as Ee, j as H, k as U, l as De, m as Oe, n as ke, o as Ae, p as je, r as W, s as Me, t as Ne, u as Pe, v as Fe, w as Ie, x as Le, y as Re, z as ze } from "./data-grid-types-0PJ-9N5n.js";
 //#region ../node_modules/.pnpm/@emotion+memoize@0.9.0/node_modules/@emotion/memoize/dist/emotion-memoize.esm.js
 function Be(e) {
@@ -7068,7 +7068,7 @@ function us(e, t, n, r, i) {
 }
 //#endregion
 //#region ../node_modules/.pnpm/@glideapps+glide-data-grid@6.0.4-alpha24_lodash@4.17.21_marked@15.0.12_react-dom@19.3.0_27cffe7f1bc30287d59ac27db3240c5b/node_modules/@glideapps/glide-data-grid/dist/esm/data-editor/data-editor.js
-var ds = /* @__PURE__ */ e(wr(), 1), fs = /* @__PURE__ */ e(Or(), 1), ps = G.lazy(async () => await import("./data-grid-overlay-editor-BRqdT555.js")), ms = 0;
+var ds = /* @__PURE__ */ e(wr(), 1), fs = /* @__PURE__ */ e(Or(), 1), ps = G.lazy(async () => await import("./data-grid-overlay-editor-BCT5Wl7t.js")), ms = 0;
 function hs(e) {
 	return (0, ds.default)((0, fs.default)((0, fs.default)(e).filter((e) => e.span !== void 0).map((e) => (0, io.default)((e.span?.[0] ?? 0) + 1, (e.span?.[1] ?? 0) + 1))));
 }
@@ -9299,7 +9299,7 @@ function Js(e, t, n, r, i) {
 }
 //#endregion
 //#region ../node_modules/.pnpm/@glideapps+glide-data-grid@6.0.4-alpha24_lodash@4.17.21_marked@15.0.12_react-dom@19.3.0_27cffe7f1bc30287d59ac27db3240c5b/node_modules/@glideapps/glide-data-grid/dist/esm/cells/number-cell.js
-var Ys = G.lazy(async () => await import("./number-overlay-editor-BWWxAhYs.js")), Xs = {
+var Ys = G.lazy(async () => await import("./number-overlay-editor-CELuIgtg.js")), Xs = {
 	getAccessibilityString: (e) => e.data?.toString() ?? "",
 	kind: W.Number,
 	needsHover: (e) => e.hoverEffect === !0,

package/dist/{globals-CvV8y9Lx.js → globals-APxSeNTW.js}

@@ -1,6 +1,6 @@
 import { h as e } from "./tooltip-DMMiOn2f.js";
 import { yt as t } from "./use-restore-focus-CosX7-gx.js";
-import { r as n } from "./code-visibility-CkF3s0y2.js";
+import { r as n } from "./code-visibility-CPdcPO-M.js";
 var r = e("triangle-alert", [
 	["path", {
 		d: "m21.73 18-8-14a2 2 0 0 0-3.48 0l-8 14A2 2 0 0 0 4 21h16a2 2 0 0 0 1.73-3",

package/dist/{html-to-image-WEuC6fGr.js → html-to-image-DDHiKZ88.js}

@@ -9,7 +9,7 @@ import { a as ne, i as re, o as D, r as O, s as k, t as ie } from "./useLifecycl
 import { a as ae, c as oe, i as se, n as ce, o as le, r as ue, s as de, t as fe } from "./select-DsoP1qe8.js";
 import { Y as pe, mt as me, q as he } from "./dropdown-menu-Bb0bFOIk.js";
 import { c as ge, l as _e, n as ve } from "./config-C8MFHQ2E.js";
-import { C as A, E as j, Et as ye, G as be, I as xe, It as Se, K as M, L as N, Nt as Ce, O as we, Ot as Te, P as Ee, R as De, Rt as Oe, S as ke, T as Ae, Ut as je, _ as Me, _t as Ne, a as Pe, at as Fe, bt as Ie, dt as Le, f as Re, ft as ze, gt as Be, h as Ve, ht as He, it as Ue, k as We, mt as Ge, o as Ke, p as qe, pt as Je, rt as Ye, s as Xe, v as Ze, vt as Qe, wt as $e, x as et, xt as tt, yt as nt, zt as rt } from "./error-entries-CXWVDDkS.js";
+import { C as A, E as j, Et as ye, G as be, I as xe, It as Se, K as M, L as N, Nt as Ce, O as we, Ot as Te, P as Ee, R as De, Rt as Oe, S as ke, T as Ae, Ut as je, _ as Me, _t as Ne, a as Pe, at as Fe, bt as Ie, dt as Le, f as Re, ft as ze, gt as Be, h as Ve, ht as He, it as Ue, k as We, mt as Ge, o as Ke, p as qe, pt as Je, rt as Ye, s as Xe, v as Ze, vt as Qe, wt as $e, x as et, xt as tt, yt as nt, zt as rt } from "./error-entries-BhO7ciHW.js";
 import { n as it } from "./assertNever-B-YzWzbL.js";
 import { t as at } from "./react-dom-DUmH0GXv.js";
 import { t as ot } from "./jsx-runtime-3BD1kT0s.js";
@@ -28175,6 +28175,10 @@ var cS = (e) => {
 	attributes: {
 		...v.attributes,
 		"*": [...v.attributes?.["*"] ?? [], "className"]
+	},
+	protocols: {
+		...v.protocols,
+		href: [...v.protocols?.href ?? [], "zotero"]
 	}
 }, fS = Object.values({
 	...x,

package/dist/main.js

@@ -3,20 +3,20 @@ import { _ as a, a as o, d as s, g as c, h as l, i as u, l as d, m as f, n as p,
 import { t as y } from "./react-sHtZdjeP.js";
 import { t as b } from "./compiler-runtime-CldRdSsv.js";
 import { i as x, n as S, r as C, t as w } from "./copy-icon-CtllOdmg.js";
-import { B as T, Bt as E, Dt as D, E as O, F as k, Ft as A, Ht as j, I as M, It as N, L as P, Lt as F, M as I, O as L, Ot as R, P as z, Pt as B, R as ee, Rt as te, St as ne, Ut as re, X as ie, Z as ae, _ as oe, _t as se, a as ce, at as le, b as ue, bt as de, c as fe, ct as pe, dt as me, i as he, it as ge, j as _e, jt as ve, lt as ye, mt as be, n as xe, o as Se, ot as Ce, q as we, rt as Te, ut as Ee, vt as De, yt as Oe, z as ke, zt as Ae } from "./html-to-image-WEuC6fGr.js";
+import { B as T, Bt as E, Dt as D, E as O, F as k, Ft as A, Ht as j, I as M, It as N, L as P, Lt as F, M as I, O as L, Ot as R, P as z, Pt as B, R as ee, Rt as te, St as ne, Ut as re, X as ie, Z as ae, _ as oe, _t as se, a as ce, at as le, b as ue, bt as de, c as fe, ct as pe, dt as me, i as he, it as ge, j as _e, jt as ve, lt as ye, mt as be, n as xe, o as Se, ot as Ce, q as we, rt as Te, ut as Ee, vt as De, yt as Oe, z as ke, zt as Ae } from "./html-to-image-DDHiKZ88.js";
 import { a as je, f as Me, h as Ne, i as Pe, m as Fe, n as Ie, o as Le, r as Re, t as ze } from "./tooltip-DMMiOn2f.js";
 import { D as Be, E as Ve, O as He, S as Ue, T as We, _ as Ge, a as Ke, c as qe, d as Je, f as Ye, g as Xe, h as Ze, i as Qe, l as $e, m as et, n as tt, o as nt, p as rt, r as it, s as at, t as ot, u as st, v as ct, w as lt, x as ut, y as dt } from "./spec-BZMDxAu7.js";
-import { $t as ft, A as pt, At as mt, B as ht, Bt as gt, C as _t, Cn as vt, Ct as yt, D as bt, Dt as xt, E as St, En as Ct, Et as wt, F as Tt, Ft as Et, G as Dt, Gt as Ot, H as kt, Ht as At, I as jt, It as Mt, J as Nt, Jt as Pt, K as Ft, Kt as It, L as Lt, Lt as Rt, M as zt, Mt as Bt, N as Vt, Nt as Ht, O as Ut, Ot as Wt, P as Gt, Pt as Kt, Qt as qt, R as Jt, Rt as Yt, S as Xt, Sn as Zt, T as Qt, Tn as $t, Tt as en, U as tn, Ut as nn, V as rn, Vt as an, W as on, Wt as sn, X as cn, Xt as ln, Y as un, Yt as dn, Z as fn, Zt as pn, _ as mn, _t as hn, an as gn, at as _n, b as vn, bn as yn, bt as bn, c as xn, cn as Sn, ct as Cn, d as wn, dn as Tn, dt as En, en as Dn, f as On, fn as kn, ft as An, g as jn, gn as Mn, gt as Nn, h as Pn, hn as Fn, ht as In, in as Ln, it as Rn, j as zn, jt as Bn, k as Vn, kt as Hn, ln as Un, lt as Wn, m as Gn, mn as Kn, mt as qn, nn as Jn, nt as Yn, on as Xn, ot as Zn, p as Qn, pn as $n, pt as er, q as tr, qt as nr, r as rr, rn as ir, rt as ar, sn as or, st as sr, t as cr, tn as lr, tt as ur, u as dr, un as fr, ut as pr, v as mr, vn as hr, vt as gr, w as _r, wn as vr, wt as yr, x as br, xn as xr, y as Sr, yn as Cr, yt as wr, z as Tr, zt as Er } from "./common-DBM4MzLV.js";
+import { $t as ft, A as pt, At as mt, B as ht, Bt as gt, C as _t, Cn as vt, Ct as yt, D as bt, Dt as xt, E as St, En as Ct, Et as wt, F as Tt, Ft as Et, G as Dt, Gt as Ot, H as kt, Ht as At, I as jt, It as Mt, J as Nt, Jt as Pt, K as Ft, Kt as It, L as Lt, Lt as Rt, M as zt, Mt as Bt, N as Vt, Nt as Ht, O as Ut, Ot as Wt, P as Gt, Pt as Kt, Qt as qt, R as Jt, Rt as Yt, S as Xt, Sn as Zt, T as Qt, Tn as $t, Tt as en, U as tn, Ut as nn, V as rn, Vt as an, W as on, Wt as sn, X as cn, Xt as ln, Y as un, Yt as dn, Z as fn, Zt as pn, _ as mn, _t as hn, an as gn, at as _n, b as vn, bn as yn, bt as bn, c as xn, cn as Sn, ct as Cn, d as wn, dn as Tn, dt as En, en as Dn, f as On, fn as kn, ft as An, g as jn, gn as Mn, gt as Nn, h as Pn, hn as Fn, ht as In, in as Ln, it as Rn, j as zn, jt as Bn, k as Vn, kt as Hn, ln as Un, lt as Wn, m as Gn, mn as Kn, mt as qn, nn as Jn, nt as Yn, on as Xn, ot as Zn, p as Qn, pn as $n, pt as er, q as tr, qt as nr, r as rr, rn as ir, rt as ar, sn as or, st as sr, t as cr, tn as lr, tt as ur, u as dr, un as fr, ut as pr, v as mr, vn as hr, vt as gr, w as _r, wn as vr, wt as yr, x as br, xn as xr, y as Sr, yn as Cr, yt as wr, z as Tr, zt as Er } from "./common-DrL6XZb8.js";
 import { a as Dr, n as Or, s as kr, t as Ar } from "./useLifecycle-SniivYmC.js";
 import { t as jr } from "./check-XFzZeH-y.js";
 import { A as Mr, C as Nr, D as Pr, M as Fr, O as Ir, a as Lr, c as Rr, d as zr, i as Br, k as Vr, l as Hr, n as Ur, o as Wr, r as Gr, s as Kr, t as qr, w as Jr, x as Yr } from "./select-DsoP1qe8.js";
 import { B as Xr, C as Zr, J as Qr, Mt as $r, Q as ei, S as ti, Sn as ni, W as ri, X as ii, Y as ai, Z as oi, _ as si, _t as ci, a as li, bn as ui, c as di, f as fi, g as pi, h as mi, i as hi, kt as gi, m as _i, n as vi, nt as yi, p as bi, pt as xi, r as Si, s as Ci, t as wi, v as Ti, w as Ei, xn as Di, y as Oi, z as ki } from "./dropdown-menu-Bb0bFOIk.js";
 import { c as Ai, i as ji, l as Mi, o as Ni, s as Pi, t as Fi } from "./config-C8MFHQ2E.js";
-import { A as Ii, At as Li, B as Ri, Ct as zi, E as Bi, Et as Vi, Ft as Hi, H as Ui, Ht as Wi, J as Gi, K as Ki, Lt as qi, Mt as Ji, P as Yi, Pt as Xi, Q as Zi, St as Qi, Ut as $i, V as ea, Vt as ta, X as na, Y as ra, Z as ia, _ as aa, c as oa, d as sa, dt as ca, g as la, h as ua, j as da, jt as fa, kt as pa, lt as ma, m as ha, ot as ga, p as _a, q as va, s as ya, st as ba, ut as xa, z as Sa, zt as Ca } from "./error-entries-CXWVDDkS.js";
-import { a as wa, c as Ta, d as Ea, f as Da, i as Oa, l as ka, n as Aa, o as ja, r as Ma, s as Na, t as Pa } from "./process-output-Bkhpf9e-.js";
+import { A as Ii, At as Li, B as Ri, Ct as zi, E as Bi, Et as Vi, Ft as Hi, H as Ui, Ht as Wi, J as Gi, K as Ki, Lt as qi, Mt as Ji, P as Yi, Pt as Xi, Q as Zi, St as Qi, Ut as $i, V as ea, Vt as ta, X as na, Y as ra, Z as ia, _ as aa, c as oa, d as sa, dt as ca, g as la, h as ua, j as da, jt as fa, kt as pa, lt as ma, m as ha, ot as ga, p as _a, q as va, s as ya, st as ba, ut as xa, z as Sa, zt as Ca } from "./error-entries-BhO7ciHW.js";
+import { a as wa, c as Ta, d as Ea, f as Da, i as Oa, l as ka, n as Aa, o as ja, r as Ma, s as Na, t as Pa } from "./process-output-ze6-eHz1.js";
 import { t as Fa } from "./pencil-DYUlSKxZ.js";
 import { a as Ia, c as La, d as Ra, f as za, i as Ba, l as Va, r as Ha } from "./glide-utils-BSQr4d90.js";
-import { n as Ua, t as Wa } from "./globals-CvV8y9Lx.js";
+import { n as Ua, t as Wa } from "./globals-APxSeNTW.js";
 import { a as Ga, i as Ka, n as qa, r as Ja, s as Ya, t as Xa } from "./assertNever-B-YzWzbL.js";
 import { t as Za } from "./react-dom-DUmH0GXv.js";
 import { t as Qa } from "./jsx-runtime-3BD1kT0s.js";
@@ -40,10 +40,10 @@ import { n as qs, t as Js } from "./esm-BDqqT86j.js";
 import { p as Ys } from "./dist-B8pkfkzc.js";
 import { t as Xs } from "./useAsyncData-Ci4AvJff.js";
 import { t as Zs } from "./semaphore-89jsoHtS.js";
-import { t as Qs } from "./ErrorBoundary-7bB09iEz.js";
+import { t as Qs } from "./ErrorBoundary-BIjOhBDs.js";
 import { D as $s, O as ec } from "./vega-loader.browser-B9Pz0EGP.js";
 import { a as tc, n as nc } from "./loader-DZvtzQoD.js";
-import { a as rc, c as ic, i as ac, l as oc, o as sc, s as cc, t as lc } from "./code-visibility-CkF3s0y2.js";
+import { a as rc, c as ic, i as ac, l as oc, o as sc, s as cc, t as lc } from "./code-visibility-CPdcPO-M.js";
 import { t as uc } from "./useDeepCompareMemoize-NaaWoFlX.js";
 import { t as dc } from "./esm-BgKjMvWw.js";
 //#region ../node_modules/.pnpm/iconify-icon@2.3.0/node_modules/iconify-icon/dist/iconify-icon.mjs
@@ -11929,7 +11929,7 @@ var xE = (e) => {
 			output: t
 		};
 	} };
-} }, DE = J.lazy(() => import("./chat-ui-BKIXISv1.js").then((e) => ({ default: e.Chatbot }))), OE = H(K({
+} }, DE = J.lazy(() => import("./chat-ui-Bmq_eXaQ.js").then((e) => ({ default: e.Chatbot }))), OE = H(K({
 	id: W(),
 	role: V([
 		"system",
@@ -12398,7 +12398,7 @@ function ED(e, t) {
 }
 //#endregion
 //#region src/plugins/impl/DataEditorPlugin.tsx
-var DD = J.lazy(() => import("./glide-data-editor-BPs-HHRj.js").then((e) => e.t)), OD = cE("marimo-data-editor", { cssStyles: [jE, ME] }).withData(K({
+var DD = J.lazy(() => import("./glide-data-editor-BF2c3W18.js").then((e) => e.t)), OD = cE("marimo-data-editor", { cssStyles: [jE, ME] }).withData(K({
 	initialValue: K({ edits: H(K({
 		rowIdx: U(),
 		columnId: W(),
@@ -32188,7 +32188,7 @@ function DH(e) {
 }
 //#endregion
 //#region src/components/editor/renderers/slides-layout/slides-layout.tsx
-var OH = J.lazy(() => import("./reveal-component-TUg0taRY.js")), kH = (e) => {
+var OH = J.lazy(() => import("./reveal-component-4GzCHZ2p.js")), kH = (e) => {
 	let t = (0, X.c)(33), { layout: n, setLayout: r, cells: i, mode: a } = e, o = lo(Fs), s = a === "read" || o, c = lo(Qi) > 1, [l, u] = (0, J.useState)(null), d;
 	t[0] !== i || t[1] !== n ? (d = TR(i, n), t[0] = i, t[1] = n, t[2] = d) : d = t[2];
 	let { slideCells: f, skippedIds: p, noOutputIds: m, slideTypes: h, startCellIndex: g } = d, _;

package/dist/{number-overlay-editor-BWWxAhYs.js → number-overlay-editor-CELuIgtg.js}

@@ -1,6 +1,6 @@
 import { a as e } from "./rolldown-runtime-Cb76FRpK.js";
 import { t } from "./react-sHtZdjeP.js";
-import { a as n } from "./glide-data-editor-BPs-HHRj.js";
+import { a as n } from "./glide-data-editor-BF2c3W18.js";
 //#region ../node_modules/.pnpm/@glideapps+glide-data-grid@6.0.4-alpha24_lodash@4.17.21_marked@15.0.12_react-dom@19.3.0_27cffe7f1bc30287d59ac27db3240c5b/node_modules/@glideapps/glide-data-grid/dist/esm/internal/data-grid-overlay-editor/private/number-overlay-editor-style.js
 var r = /* @__PURE__ */ e(t()), i = /*#__PURE__*/ n("div")({
 	name: "NumberOverlayEditorStyle",

package/dist/{process-output-Bkhpf9e-.js → process-output-ze6-eHz1.js}

@@ -1,6 +1,6 @@
-import { T as e } from "./html-to-image-WEuC6fGr.js";
+import { T as e } from "./html-to-image-DDHiKZ88.js";
 import { h as t } from "./tooltip-DMMiOn2f.js";
-import { et as n, tt as r } from "./error-entries-CXWVDDkS.js";
+import { et as n, tt as r } from "./error-entries-BhO7ciHW.js";
 import { r as i } from "./assertNever-B-YzWzbL.js";
 import { n as a } from "./semaphore-89jsoHtS.js";
 var o = t("file", [["path", {

package/dist/{reveal-component-TUg0taRY.js → reveal-component-4GzCHZ2p.js}

@@ -3,15 +3,15 @@ import { g as t, h as n, i as r, m as i, t as a } from "./button-DZuNnIZO.js";
 import { t as o } from "./react-sHtZdjeP.js";
 import { t as s } from "./compiler-runtime-CldRdSsv.js";
 import { h as c, t as l } from "./tooltip-DMMiOn2f.js";
-import { $ as u, Q as d, _n as f, an as p, bn as m, et as h, gn as g, i as _, l as v, n as y, on as b, r as x, t as S, u as C } from "./common-DBM4MzLV.js";
+import { $ as u, Q as d, _n as f, an as p, bn as m, et as h, gn as g, i as _, l as v, n as y, on as b, r as x, t as S, u as C } from "./common-DrL6XZb8.js";
 import { M as w } from "./select-DsoP1qe8.js";
 import { Y as T } from "./dropdown-menu-Bb0bFOIk.js";
-import { Ft as E } from "./error-entries-CXWVDDkS.js";
+import { Ft as E } from "./error-entries-BhO7ciHW.js";
 import { t as D } from "./jsx-runtime-3BD1kT0s.js";
 import { Ft as O, Rt as k, d as A, r as ee } from "./use-restore-focus-CosX7-gx.js";
 import { t as j } from "./useEvent-BRH-aCqi.js";
 import { o as te } from "./static-state-D-Q-Ajaa.js";
-import { n as ne, t as re } from "./code-visibility-CkF3s0y2.js";
+import { n as ne, t as re } from "./code-visibility-CPdcPO-M.js";
 /* empty css                */
 var M = c("sticky-note", [["path", {
 	d: "M21 9a2.4 2.4 0 0 0-.706-1.706l-3.588-3.588A2.4 2.4 0 0 0 15 3H5a2 2 0 0 0-2 2v14a2 2 0 0 0 2 2h14a2 2 0 0 0 2-2z",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@marimo-team/islands",
-  "version": "0.25.3-dev297",
+  "version": "0.25.3-dev299",
   "main": "dist/main.js",
   "types": "dist/index.d.ts",
   "type": "module",

package/src/components/markdown/__tests__/markdown-renderer.test.tsx

@@ -1,6 +1,6 @@
 /* Copyright 2026 Marimo. All rights reserved. */
-import { render, screen, waitFor } from "@testing-library/react";
-import { describe, expect, it } from "vitest";
+import { fireEvent, render, screen, waitFor } from "@testing-library/react";
+import { describe, expect, it, vi } from "vitest";
 import { MarkdownRenderer } from "../markdown-renderer";
 
 describe("MarkdownRenderer", () => {
@@ -40,4 +40,34 @@ describe("MarkdownRenderer", () => {
     expect(container.querySelector(".safe")).toBeInTheDocument();
     expect(container.querySelector("script")).not.toBeInTheDocument();
   });
+
+  it("keeps supported custom URI schemes in Streamdown's link-safety flow", async () => {
+    render(
+      <MarkdownRenderer content="[PDF](zotero://open-pdf/library/items/IDT2EG5W)" />,
+    );
+
+    expect(
+      await screen.findByRole("button", { name: "PDF" }),
+    ).toBeInTheDocument();
+  });
+
+  it("opens the original custom URI from Streamdown's link-safety dialog", async () => {
+    const url = "zotero://open-pdf/library/items/IDT2EG5W?page=1";
+    const windowOpen = vi.spyOn(window, "open").mockImplementation(() => null);
+
+    render(<MarkdownRenderer content={`[PDF](${url})`} />);
+
+    fireEvent.click(await screen.findByRole("button", { name: "PDF" }));
+
+    fireEvent.click(await screen.findByRole("button", { name: "Open link" }));
+
+    expect(windowOpen).toHaveBeenCalledWith(url, "_blank", "noreferrer");
+    windowOpen.mockRestore();
+  });
+
+  it("removes unsafe URI schemes from links", async () => {
+    render(<MarkdownRenderer content="[Unsafe](javascript:alert(1))" />);
+
+    expect(await screen.findByText(/Unsafe\s+\[blocked\]/)).toBeInTheDocument();
+  });
 });

package/src/components/markdown/markdown-renderer.tsx

@@ -160,6 +160,10 @@ const sanitizeSchema = {
     ...defaultSchema.attributes,
     "*": [...(defaultSchema.attributes?.["*"] ?? []), "className"],
   },
+  protocols: {
+    ...defaultSchema.protocols,
+    href: [...(defaultSchema.protocols?.href ?? []), "zotero"],
+  },
 };
 
 // Keep Streamdown's other rehype plugins (raw, harden) so scripts and unsafe

package/src/plugins/core/__test__/sanitize.test.ts

@@ -68,6 +68,14 @@ describe("sanitizeHtml", () => {
     );
   });
 
+  test("preserves supported custom URI schemes in anchors", () => {
+    const html =
+      '<a href="zotero://open-pdf/library/items/IDT2EG5W?page=1">PDF</a>';
+    expect(sanitizeHtml(html)).toMatchInlineSnapshot(
+      `"<a href="zotero://open-pdf/library/items/IDT2EG5W?page=1" target="_self">PDF</a>"`,
+    );
+  });
+
   test("adds target=_self to anchor without target", () => {
     const html = '<a href="https://example.com">Link</a>';
     expect(sanitizeHtml(html)).toMatchInlineSnapshot(

package/src/plugins/core/sanitize-html.ts

@@ -1,6 +1,11 @@
 /* Copyright 2026 Marimo. All rights reserved. */
 import DOMPurify, { type Config } from "dompurify";
 
+// Keep DOMPurify's default safe URI schemes and explicitly allow supported
+// custom schemes without allowing arbitrary unknown protocols.
+const ALLOWED_URI_REGEXP =
+  /^(?:(?:(?:f|ht)tps?|mailto|tel|callto|sms|cid|xmpp|matrix|zotero):|[^a-z]|[-a-z+.]+(?:[^-a-z+.:]|$))/i;
+
 // preserve target=_blank https://github.com/cure53/DOMPurify/issues/317#issuecomment-912474068
 // Guard for non-browser environments (e.g. Node.js in the marimo-lsp extension)
 // where `document` is not available.
@@ -43,6 +48,7 @@ export function sanitizeHtml(html: string) {
     // for SVGs that reference <defs> (e.g., Matplotlib SVG output).
     ADD_TAGS: ["use"],
     ADD_ATTR: ["href", "xlink:href"],
+    ALLOWED_URI_REGEXP,
     // glue elements like style, script or others to document.body and prevent unintuitive browser behavior in several edge-cases
     FORCE_BODY: true,
     CUSTOM_ELEMENT_HANDLING: {