pinky-streamlit 0.1.0.dev1__tar.gz

pinky_streamlit-0.1.0.dev1/.github/workflows/ci.yml

@@ -0,0 +1,37 @@
+name: CI
+
+on:
+  push:
+    branches: [main, develop]
+  pull_request:
+    branches: [main, develop]
+
+jobs:
+  ci:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python 3.11
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+
+      - name: Install dependencies
+        run: pip install -e ".[dev]"
+
+      - name: Lint
+        run: ruff check src/ tests/
+
+      - name: Format check
+        run: ruff format --check src/ tests/
+
+      - name: Type check
+        run: mypy src/pinky_streamlit/
+
+      - name: Security scan
+        run: bandit -r src/pinky_streamlit/ -ll
+
+      - name: Tests
+        run: pytest

pinky_streamlit-0.1.0.dev1/.github/workflows/publish.yml

@@ -0,0 +1,32 @@
+name: Publish to PyPI
+
+on:
+  push:
+    tags:
+      - "v*.dev*"
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    env:
+      FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+    permissions:
+      contents: read
+      id-token: write  # required for trusted publishing (OIDC)
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python 3.11
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+
+      - name: Install build
+        run: pip install build
+
+      - name: Build wheel and sdist
+        run: python -m build
+
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1

pinky_streamlit-0.1.0.dev1/.github/workflows/release.yml

@@ -0,0 +1,37 @@
+name: Release
+on:
+  push:
+    branches: [main]
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    env:
+      FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+    permissions:
+      contents: write
+      id-token: write
+    steps:
+      - uses: actions/checkout@v4
+      - name: Read version
+        id: version
+        run: echo "version=$(grep '^version' pyproject.toml | cut -d'"' -f2)" >> $GITHUB_OUTPUT
+      - name: Guard — no .dev version on main
+        run: |
+          if [[ "${{ steps.version.outputs.version }}" == *".dev"* ]]; then
+            echo "❌ version .dev sur main — bumper la version avant de merger"
+            exit 1
+          fi
+      - name: Create tag
+        run: |
+          git tag "v${{ steps.version.outputs.version }}"
+          git push origin "v${{ steps.version.outputs.version }}"
+      - name: Set up Python 3.11
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+      - name: Install build
+        run: pip install build
+      - name: Build
+        run: python -m build
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1

pinky_streamlit-0.1.0.dev1/.gitignore

@@ -0,0 +1,50 @@
+# Python
+__pycache__/
+*.py[cod]
+*.pyo
+*.pyd
+*.egg
+*.egg-info/
+dist/
+build/
+.eggs/
+*.whl
+.venv/
+env/
+venv/
+
+# Testing & coverage
+.pytest_cache/
+.coverage
+.coverage.*
+htmlcov/
+
+# Pre-commit
+.pre-commit-cache/
+
+
+# Type checking
+.mypy_cache/
+
+# Ruff
+.ruff_cache/
+
+# IDEs
+.vscode/
+.idea/
+*.swp
+*.swo
+
+# macOS
+.DS_Store
+**/.DS_Store
+
+# Conda
+.conda/
+
+# Logs
+*.log
+
+# MkDocs
+docs/assets/
+site/

pinky_streamlit-0.1.0.dev1/.pre-commit-config.yaml

@@ -0,0 +1,125 @@
+---
+# =============================================================================
+# .pre-commit-config.yaml — snowflake-kit-streamlit
+# =============================================================================
+# Install:
+#   pip install pre-commit
+#   pre-commit install
+#   pre-commit install --hook-type commit-msg
+#
+# Update standard hooks:
+#   pre-commit autoupdate
+# =============================================================================
+default_install_hook_types: [pre-commit, commit-msg]
+
+repos:
+  # ── Formatting: trailing spaces + newline ─────────────────────────────────
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v6.0.0
+    hooks:
+      - id: trailing-whitespace
+      - id: end-of-file-fixer
+      - id: check-yaml
+      - id: check-toml
+      - id: check-merge-conflict
+      - id: debug-statements
+
+  # ── Formatting: Markdown ──────────────────────────────────────────────────
+  - repo: local
+    hooks:
+      - id: mdformat
+        name: mdformat
+        entry: mdformat
+        language: system
+        files: ^README\.md$
+
+  # ── Security: secrets & forbidden files ──────────────────────────────────
+  - repo: https://github.com/gitleaks/gitleaks
+    rev: v8.30.0
+    hooks:
+      - id: gitleaks
+
+  # ── Security: alternative secret detection ────────────────────────────────
+  - repo: https://github.com/Yelp/detect-secrets
+    rev: v1.5.0
+    hooks:
+      - id: detect-secrets
+        args: ["--baseline", ".secrets.baseline"]
+        exclude: ^docs/
+
+  # ── Python: ruff lint + format ────────────────────────────────────────────
+  - repo: https://github.com/astral-sh/ruff-pre-commit
+    rev: v0.15.9
+    hooks:
+      - id: ruff-check
+        args: [--no-fix]
+      - id: ruff-format
+        args: [--check]
+
+  # ── Python: type checking ─────────────────────────────────────────────────
+  - repo: local
+    hooks:
+      - id: mypy
+        name: mypy
+        entry: mypy
+        language: system
+        types: [python]
+        args: [--ignore-missing-imports]
+        files: ^src/
+
+  # ── Python: security ─────────────────────────────────────────────────────
+  - repo: local
+    hooks:
+      - id: bandit
+        name: bandit
+        entry: bandit
+        language: system
+        pass_filenames: false
+        args: [-r, src/, -ll]
+
+  # ── Zero-width spaces (copy-paste from Outlook/Teams) ────────────────────
+  - repo: local
+    hooks:
+      - id: check-zws
+        name: "[ZWS] Invisible characters (zero-width)"
+        entry: python scripts/hooks/check_zws.py
+        language: system
+        pass_filenames: true
+
+  # ── Python: typed API guard ───────────────────────────────────────────────
+  - repo: local
+    hooks:
+      - id: check-typed-api
+        name: "[TYPED-API] Blocked raw composite annotations in public API"
+        entry: python scripts/hooks/check_typed_api.py
+        language: system
+        types: [python]
+        files: ^src/
+
+  # ── Security: employer keyword filter ────────────────────────────────────
+  - repo: local
+    hooks:
+      - id: check-forbidden-keywords
+        name: "[FORBIDDEN] Employer keyword filter"
+        entry: python scripts/hooks/check_forbidden_keywords.py
+        language: system
+        pass_filenames: true
+
+  # ── Docs up-to-date check ─────────────────────────────────────────────────
+  - repo: local
+    hooks:
+      - id: check-docs-up-to-date
+        name: Docs up-to-date (README + AGENT.md + pdoc)
+        entry: scripts/hooks/check-docs-up-to-date
+        language: script
+        stages: [pre-commit]
+        pass_filenames: false
+
+  # ── Commit message format ─────────────────────────────────────────────────
+  - repo: local
+    hooks:
+      - id: commit-msg-format
+        name: Commit message format
+        entry: scripts/hooks/commit-msg
+        language: script
+        stages: [commit-msg]

pinky_streamlit-0.1.0.dev1/.secrets.baseline

@@ -0,0 +1,127 @@
+{
+  "version": "1.5.0",
+  "plugins_used": [
+    {
+      "name": "ArtifactoryDetector"
+    },
+    {
+      "name": "AWSKeyDetector"
+    },
+    {
+      "name": "AzureStorageKeyDetector"
+    },
+    {
+      "name": "Base64HighEntropyString",
+      "limit": 4.5
+    },
+    {
+      "name": "BasicAuthDetector"
+    },
+    {
+      "name": "CloudantDetector"
+    },
+    {
+      "name": "DiscordBotTokenDetector"
+    },
+    {
+      "name": "GitHubTokenDetector"
+    },
+    {
+      "name": "GitLabTokenDetector"
+    },
+    {
+      "name": "HexHighEntropyString",
+      "limit": 3.0
+    },
+    {
+      "name": "IbmCloudIamDetector"
+    },
+    {
+      "name": "IbmCosHmacDetector"
+    },
+    {
+      "name": "IPPublicDetector"
+    },
+    {
+      "name": "JwtTokenDetector"
+    },
+    {
+      "name": "KeywordDetector",
+      "keyword_exclude": ""
+    },
+    {
+      "name": "MailchimpDetector"
+    },
+    {
+      "name": "NpmDetector"
+    },
+    {
+      "name": "OpenAIDetector"
+    },
+    {
+      "name": "PrivateKeyDetector"
+    },
+    {
+      "name": "PypiTokenDetector"
+    },
+    {
+      "name": "SendGridDetector"
+    },
+    {
+      "name": "SlackDetector"
+    },
+    {
+      "name": "SoftlayerDetector"
+    },
+    {
+      "name": "SquareOAuthDetector"
+    },
+    {
+      "name": "StripeDetector"
+    },
+    {
+      "name": "TelegramBotTokenDetector"
+    },
+    {
+      "name": "TwilioKeyDetector"
+    }
+  ],
+  "filters_used": [
+    {
+      "path": "detect_secrets.filters.allowlist.is_line_allowlisted"
+    },
+    {
+      "path": "detect_secrets.filters.common.is_ignored_due_to_verification_policies",
+      "min_level": 2
+    },
+    {
+      "path": "detect_secrets.filters.heuristic.is_indirect_reference"
+    },
+    {
+      "path": "detect_secrets.filters.heuristic.is_likely_id_string"
+    },
+    {
+      "path": "detect_secrets.filters.heuristic.is_lock_file"
+    },
+    {
+      "path": "detect_secrets.filters.heuristic.is_not_alphanumeric_string"
+    },
+    {
+      "path": "detect_secrets.filters.heuristic.is_potential_uuid"
+    },
+    {
+      "path": "detect_secrets.filters.heuristic.is_prefixed_with_dollar_sign"
+    },
+    {
+      "path": "detect_secrets.filters.heuristic.is_sequential_string"
+    },
+    {
+      "path": "detect_secrets.filters.heuristic.is_swagger_file"
+    },
+    {
+      "path": "detect_secrets.filters.heuristic.is_templated_secret"
+    }
+  ],
+  "results": {},
+  "generated_at": "2026-05-11T21:20:12Z"
+}

pinky_streamlit-0.1.0.dev1/AGENT.md

@@ -0,0 +1,133 @@
+# AGENT.md — pinky-streamlit
+*Update date : 2026-06-04*
+
+Reusable Streamlit in Snowflake components.
+Consumer of `snowflake-kit` (uses `pinky_core.fmt`).
+
+---
+
+## What this repo is
+
+`pinky-streamlit` is a **Python package** (`src/` layout) providing
+shared building blocks for all Streamlit in Snowflake dashboards in the suite.
+
+**Do not duplicate** formatting functions — use `from pinky_core.fmt import ...` directly.
+
+---
+
+## Repository structure
+
+Module naming follows the Streamlit API categories — import functions with `sks_` alias to avoid shadowing `st.*`.
+
+```
+pinky-streamlit/
+├── src/
+│   └── pinky_streamlit/  ← Python package (one sub-package = one concern)
+│       ├── __init__.py            ← public API (re-exports)
+│       └── <sub-package>/         ← each directory is one pure, importable module group
+├── demo/app/                      ← standalone demo Streamlit app (app/ convention)
+├── docs/                          ← see docs/INDEX.md for the full map
+│   ├── explanation/               ← design.md · features.md
+│   ├── reference/                 ← design_system*.md · generated/api/ (never hand-edit)
+│   ├── adr/
+│   ├── how-to/
+│   ├── tutorials/
+│   └── templates/                 ← pdoc template (--template-dir)
+├── tests/                         ← unit tests (test_<module>.py per module)
+├── scripts/hooks/                 ← custom pre-commit hooks
+├── .pre-commit-config.yaml
+├── pyproject.toml
+└── AGENT.md                       ← this file
+```
+
+---
+
+## Stack
+
+- Python 3.11
+- `streamlit==1.52.2` — pinned, CSS design system validated on this version
+- `plotly==5.24.1` — pinned, available in Snowflake package catalog
+- `snowflake-snowpark-python` — session and DataFrame API
+- `snowflake-kit` — shared utilities (fmt, security…)
+
+<important>
+`streamlit` and `plotly` versions are pinned and validated together.
+Do not upgrade without re-validating the full CSS design system and chart rendering.
+</important>
+
+---
+
+## Key constraints
+
+### Streamlit in Snowflake (SiS) context
+
+<important>
+- No file system access beyond `/tmp/`
+- No top-level network calls
+- Session always via `get_active_session()` in production
+- Local dev via `LocalSessionConfig` + `~/.snowflake/connections.toml`
+</important>
+
+### Dependency on snowflake-kit
+
+<important>
+All date/number/string formatting: use `from pinky_core.fmt import ...`
+Never re-implement what's already in `pinky_core.fmt`.
+</important>
+
+### CSS design system
+
+<important>
+- `PALETTE` in `constants.py` is the single source of truth for colors
+- Synchronize with the consumer app's `style.css :root` when changing colors
+- CSS class names (e.g. `{accent}-lighter-bg`, `text-sm`) must match `style.css`
+</important>
+
+### Deprecated Streamlit properties
+
+<important>
+`use_container_width` is deprecated — do not use it in any component.
+Replace with `width="stretch"` for equivalent behavior.
+
+```python
+# ❌ Deprecated
+st.dataframe(df, use_container_width=True)
+
+# ✅ Current
+st.dataframe(df, width="stretch")
+```
+</important>
+
+---
+
+## Commit convention
+
+Format: `<emoji> <type>(<scope>): <description>`
+
+Scopes: `setup` | `core` | `ui` | `demo` | `docs` | `ci` | `tests`
+
+See workspace-level CLAUDE.md for the full emoji ↔ type table.
+
+---
+
+## Agents available (in pinky workspace)
+
+| Command | What it does |
+|---------|-------------|
+| `/commit` | Analyse git diff → propose gitmoji commit message |
+| `/yml_audit` | Audit YAML files (comments + PII tags) |
+| `/code_comments` | Add English comments to Python source |
+| `/enrich_readme` | Complete README placeholders |
+| `/explain` | Explain the repo (dev / archi / infra profile) |
+| `/clean_history` | Rewrite git history with clean commits |
+
+---
+
+## Branch strategy
+
+```
+main        ← stable, PR required, CI required, no direct push
+develop     ← integration, PR required from feature/*, no direct push
+feature/*   ← one task = one branch, short-lived
+hotfix/*    ← urgent fix branched from main
+```

pinky_streamlit-0.1.0.dev1/CONTEXT.md

@@ -0,0 +1,17 @@
+# CONTEXT.md — pinky-streamlit
+*Update date : 2026-05-31 13:30*
+
+Single source of truth for naming in this repo.
+
+| Term (preferred) | Avoid | Definition |
+|---|---|---|
+| `sks_` | — | Import alias prefix for all `pinky_streamlit` functions — avoids shadowing `st.*` |
+| `setup_page()` | `init_page`, `configure_page` | Entry point of every SiS page — injects CSS, font, palette, runs loaders |
+| `get_session()` | `create_session`, `session_factory` | Transparent session resolver: `get_active_session()` in SiS, `LocalSessionConfig` locally |
+| `load_static` | `load_reference` | Cache pattern for data that never changes (lookup tables, static config) |
+| `load_analytic` | `load_kpi`, `load_aggregate` | Cache pattern for aggregates — stale OK for 10 min |
+| `load_crud` | `load_editable` | Cache pattern for editable grids — invalidated on write |
+| `load_nocache` | `load_realtime` | No cache — real-time or post-write refresh |
+| palette | theme, skin | A `Palette` instance from `PALETTES.*` — primary, secondary, tertiary + auto dark variant |
+| `PINKY_LOCAL` | `LOCAL`, `DEV_MODE` | Env var that switches `get_session()` to local DuckDB mode |
+| SiS | SIS, Streamlit Cloud | Streamlit in Snowflake — the Snowflake-hosted Streamlit runtime |

pinky_streamlit-0.1.0.dev1/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 pinky-and-co
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

pinky_streamlit-0.1.0.dev1/PKG-INFO

@@ -0,0 +1,106 @@
+Metadata-Version: 2.4
+Name: pinky-streamlit
+Version: 0.1.0.dev1
+Summary: Reusable Streamlit in Snowflake components for the pinky suite
+Project-URL: Homepage, https://github.com/pinky-and-co/pinky-streamlit
+Project-URL: Repository, https://github.com/pinky-and-co/pinky-streamlit
+Project-URL: Issues, https://github.com/pinky-and-co/pinky-streamlit/issues
+Author: pinky-and-co
+License: MIT License
+        
+        Copyright (c) 2026 pinky-and-co
+        
+        Permission is hereby granted, free of charge, to any person obtaining a copy
+        of this software and associated documentation files (the "Software"), to deal
+        in the Software without restriction, including without limitation the rights
+        to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+        copies of the Software, and to permit persons to whom the Software is
+        furnished to do so, subject to the following conditions:
+        
+        The above copyright notice and this permission notice shall be included in all
+        copies or substantial portions of the Software.
+        
+        THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+        IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+        FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+        AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+        LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+        OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+        SOFTWARE.
+License-File: LICENSE
+Keywords: dashboard,data-engineering,snowflake,streamlit,streamlit-in-snowflake
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Topic :: Database
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
+Requires-Python: >=3.11
+Requires-Dist: openpyxl
+Requires-Dist: pinky-core
+Requires-Dist: plotly==5.24.1
+Requires-Dist: snowflake-snowpark-python
+Requires-Dist: streamlit==1.52.2
+Provides-Extra: dev
+Requires-Dist: bandit; extra == 'dev'
+Requires-Dist: mkdocs-material>=9.0; extra == 'dev'
+Requires-Dist: mkdocstrings[python]>=0.25; extra == 'dev'
+Requires-Dist: mypy; extra == 'dev'
+Requires-Dist: pre-commit; extra == 'dev'
+Requires-Dist: pytest; extra == 'dev'
+Requires-Dist: pytest-cov; extra == 'dev'
+Requires-Dist: ruff; extra == 'dev'
+Description-Content-Type: text/markdown
+
+# pinky-streamlit
+
+*Update date : 2026-06-04*
+
+Reusable Streamlit in Snowflake components for the pinky suite — session, data loading, palette, UI components.
+
+Part of the [pinky-and-co](https://github.com/pinky-and-co) suite.
+
+## Install
+
+```bash
+pip install pinky-streamlit
+```
+
+## Quick start
+
+```python
+from pinky_streamlit import get_session, setup_page, PALETTES
+from pinky_streamlit import load_analytic as sks_load_analytic
+
+session = get_session()
+messages, main, df = setup_page(
+    session=session,
+    loaders=[sks_load_analytic],
+    palette=PALETTES.PYTHIA,
+)
+```
+
+## Docs
+
+**Explanation**
+
+- [Design](docs/explanation/design.md)
+- [Features & roadmap](docs/explanation/features.md)
+
+**Design system**
+
+- [Overview](docs/reference/design_system.md)
+- [Palette & tokens](docs/reference/design_system_palette.md)
+- [Core (session, db, page)](docs/reference/design_system_core.md)
+- [UI components](docs/reference/design_system_ui.md)
+
+**API reference**
+
+- [Generated API docs](docs/reference/generated/api/)
+
+**Decisions**
+
+- [ADRs](docs/adr/)
+
+______________________________________________________________________
+
+MIT License