Thebe, without CDN, but self-hosted

[kno10]

I would like to experiment with thebe-lite, but a strict requirement for me is to have it self-hosted, to not raise any privacy concerns (accessing external resources that might use cookies etc.).
I have a local jupyterlite installation. Its newer (0.24.1) and this allows me to add some extension packages. But I cannot get thebe-lite to use it.

It seems there is some part of (and old version of) jupyterlab/core compiled into thebe:

s=JSON.parse(i.PageConfig.getOption("litePluginSettings")||"{}")[l]||{}
o=s.pyodideUrl||"https://cdn.jsdelivr.net/pyodide/v0.23.4/full/pyodide.js"

and I have not found a way to override this constant. I tried <script id="jupyter-config-data" type="application/json">. It seems I can get it to load from a different pipliteUrls, but pyodideUrl is ignored.

Any hints how to make it fully self-hosted (and working, because I currently have a CORS error).

It seems that maybe the options are not passed to the service worker?
Maybe this line should pass the options rather than relying on PageConfig?

https://github.com/executablebooks/thebe/blob/cce89f9051b750145081e78ed7cf8deff24ae14e/packages/lite/src/jlite.ts#L97

[kno10]

FWIW, I managed to get it working, essentially by replacing the pyodide worker via jupyter-config-data:

1. set workerUrl to the location of your "full" jupyterlite worker
2. set baseUrl to the root of your jupyterlite installation

Some (pure-python?) packages still get loaded from files.pythonhosted.org, maybe I can put a simple caching proxy in-between.

This is not very well-documented, and likely subject to change with jupyterlite versions. Here is a starting point:
https://github.com/jupyterlite/jupyterlite/blob/0ce857b1aab8db3253d51d6a126e8cd6a0260d9d/packages/server/src/tokens.ts#L45-L48