Skip to content

feat: Sandboxed gallery#8076

Merged
dmadisetti merged 3 commits intomainfrom
dm/gallery-sandbox
Feb 3, 2026
Merged

feat: Sandboxed gallery#8076
dmadisetti merged 3 commits intomainfrom
dm/gallery-sandbox

Conversation

@dmadisetti
Copy link
Collaborator

📝 Summary

Enables sandbox for gallery. Precomputed previews were shown in "IPC" mode which lead to a dead front end. Moreover, some of the logic for "RUN" was predicated on it not being in a subprocess.

This PR introduces a "Loading" for lazy start up in gallery mode, and makes the tweaks needed for run over IPC.

cc @peter-gy (can't add you as a review for some reason)

@vercel
Copy link

vercel bot commented Jan 31, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
marimo-docs Ready Ready Preview, Comment Jan 31, 2026 10:12pm

Request Review

mscolnick
mscolnick previously approved these changes Jan 31, 2026
@dmadisetti dmadisetti merged commit a5eccf8 into main Feb 3, 2026
40 of 68 checks passed
@dmadisetti dmadisetti deleted the dm/gallery-sandbox branch February 3, 2026 20:47
@github-actions
Copy link

github-actions bot commented Feb 3, 2026

🚀 Development release published. You may be able to view the changes at https://marimo.app?v=0.19.8-dev14

@peter-gy
Copy link
Contributor

peter-gy commented Feb 4, 2026

Just saw now that I was pinged on this PR. Thanks for picking this up!

dmadisetti pushed a commit that referenced this pull request Feb 19, 2026
#8339)

## 📝 Summary

Ensures that when `—-sandbox` is passed we install `playwright` too
along with the other deps instead of raising error.

## 🔍 Description of Changes

`run_in_sandbox` re-invokes marimo through `uv run`, and the forwarded
command no longer includes `--sandbox`. To preserve intent across
re-entry, we now pass sandbox context to the child process so it can
recover whether the original invocation was `single` or `multi`.

This keeps thumbnail export consistent with the broader CLI sandbox
model introduced in #8076, where behavior is mode-aware:

- `single`: one uv-wrapped process
- `multi`: per-notebook sandbox handling
LiquidGunay pushed a commit to LiquidGunay/marimo that referenced this pull request Feb 21, 2026
marimo-team#8339)

## 📝 Summary

Ensures that when `—-sandbox` is passed we install `playwright` too
along with the other deps instead of raising error.

## 🔍 Description of Changes

`run_in_sandbox` re-invokes marimo through `uv run`, and the forwarded
command no longer includes `--sandbox`. To preserve intent across
re-entry, we now pass sandbox context to the child process so it can
recover whether the original invocation was `single` or `multi`.

This keeps thumbnail export consistent with the broader CLI sandbox
model introduced in marimo-team#8076, where behavior is mode-aware:

- `single`: one uv-wrapped process
- `multi`: per-notebook sandbox handling
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

3 participants