streamlit-coco 0.2.0__tar.gz → 0.2.1__tar.gz

{streamlit_coco-0.2.0 → streamlit_coco-0.2.1}/CHANGELOG.md

@@ -12,6 +12,14 @@ Living plan (what’s next): [`doc/roadmap.md`](doc/roadmap.md).
 
 ## [Unreleased]
 
+## [0.2.1] — 2026-10-20
+
+The README names the asset contributor. No code change: `0.2.1` is `0.2.0` with the README that PyPI shows (a published file cannot be changed).
+
+### Changed
+
+- README ownership table: Alentz Joseph (Devoteam) is listed as asset contributor, in place of the generic contributors row.
+
 ## [0.2.0] — 2026-10-20
 
 Ask CoCo, a floating window, beside the 0.1.9 chat family. `chat`, `panel`, and `copilot_rail` stay the default.

{streamlit_coco-0.2.0 → streamlit_coco-0.2.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: streamlit-coco
-Version: 0.2.0
+Version: 0.2.1
 Summary: Streamlit component and Python library for Snowflake CoCo (Cortex Code)
 Project-URL: Homepage, https://github.com/lletourmy/streamlit-coco
 Project-URL: Documentation, https://github.com/lletourmy/streamlit-coco#readme
@@ -47,7 +47,7 @@ Description-Content-Type: text/markdown
 [![CI](https://github.com/lletourmy/streamlit-coco/actions/workflows/ci.yml/badge.svg)](https://github.com/lletourmy/streamlit-coco/actions/workflows/ci.yml)
 [![License](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)
 
-> `0.2.0` (alpha). The API may still move. The default interface is still the 0.1.9 chat family (`chat`, `panel`, `copilot_rail`). The floating window is opt-in: `mini=True` on those calls, or `ask_coco(cwd)`. See [`doc/features/ask-coco/ask-coco.md`](doc/features/ask-coco/ask-coco.md).
+> `0.2.1` (alpha). The API may still move. The default interface is still the 0.1.9 chat family (`chat`, `panel`, `copilot_rail`). The floating window is opt-in: `mini=True` on those calls, or `ask_coco(cwd)`. See [`doc/features/ask-coco/ask-coco.md`](doc/features/ask-coco/ask-coco.md).
 
 **Repo:** [github.com/lletourmy/streamlit-coco](https://github.com/lletourmy/streamlit-coco) *(temporary PyPI source)* · **Dev:** [streamlit-coco-dev](https://github.com/DevoteamSP/streamlit-coco-dev)
 **SDK docs:** [Cortex Code Agent SDK](https://docs.snowflake.com/en/user-guide/cortex-code-agent-sdk/cortex-code-agent-sdk)
@@ -326,7 +326,7 @@ Releases: develop here, sync and tag on [`lletourmy/streamlit-coco`](https://git
 | Role | Name | Contact |
 | --- | --- | --- |
 | Asset Owner | Laurent Letourmy | laurent.letourmy@devoteam.com |
-| Contributors | DevoteamSP / streamlit-coco contributors | [streamlit-coco-dev](https://github.com/DevoteamSP/streamlit-coco-dev) |
+| Asset Contributor | Alentz Joseph | alentz.joseph@devoteam.com |
 
 **Snow Builders level:** N0 (alpha), targeting N1. Identity sheet: [`ID.md`](ID.md).
 

{streamlit_coco-0.2.0 → streamlit_coco-0.2.1}/README.md

@@ -5,7 +5,7 @@
 [![CI](https://github.com/lletourmy/streamlit-coco/actions/workflows/ci.yml/badge.svg)](https://github.com/lletourmy/streamlit-coco/actions/workflows/ci.yml)
 [![License](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)
 
-> `0.2.0` (alpha). The API may still move. The default interface is still the 0.1.9 chat family (`chat`, `panel`, `copilot_rail`). The floating window is opt-in: `mini=True` on those calls, or `ask_coco(cwd)`. See [`doc/features/ask-coco/ask-coco.md`](doc/features/ask-coco/ask-coco.md).
+> `0.2.1` (alpha). The API may still move. The default interface is still the 0.1.9 chat family (`chat`, `panel`, `copilot_rail`). The floating window is opt-in: `mini=True` on those calls, or `ask_coco(cwd)`. See [`doc/features/ask-coco/ask-coco.md`](doc/features/ask-coco/ask-coco.md).
 
 **Repo:** [github.com/lletourmy/streamlit-coco](https://github.com/lletourmy/streamlit-coco) *(temporary PyPI source)* · **Dev:** [streamlit-coco-dev](https://github.com/DevoteamSP/streamlit-coco-dev)
 **SDK docs:** [Cortex Code Agent SDK](https://docs.snowflake.com/en/user-guide/cortex-code-agent-sdk/cortex-code-agent-sdk)
@@ -284,7 +284,7 @@ Releases: develop here, sync and tag on [`lletourmy/streamlit-coco`](https://git
 | Role | Name | Contact |
 | --- | --- | --- |
 | Asset Owner | Laurent Letourmy | laurent.letourmy@devoteam.com |
-| Contributors | DevoteamSP / streamlit-coco contributors | [streamlit-coco-dev](https://github.com/DevoteamSP/streamlit-coco-dev) |
+| Asset Contributor | Alentz Joseph | alentz.joseph@devoteam.com |
 
 **Snow Builders level:** N0 (alpha), targeting N1. Identity sheet: [`ID.md`](ID.md).
 

{streamlit_coco-0.2.0 → streamlit_coco-0.2.1}/doc/api.md

@@ -1,6 +1,6 @@
 # API reference: streamlit-coco
 
-Public surface of `import streamlit_coco as st_coco`, and of `streamlit_coco.policy` and `streamlit_coco.testing`. `0.2.0`: signatures may still move. Every signature below was read from the code.
+Public surface of `import streamlit_coco as st_coco`, and of `streamlit_coco.policy` and `streamlit_coco.testing`. `0.2.1`: signatures may still move. Every signature below was read from the code.
 
 **Related:** [README](../README.md) · [Ask CoCo feature file](features/ask-coco/ask-coco.md) (the decisions and their reasons) · [Local deployment](deployment/local.md) · [SDK docs](https://docs.snowflake.com/en/user-guide/cortex-code-agent-sdk/cortex-code-agent-sdk)
 
@@ -716,5 +716,5 @@ python -m streamlit_coco.testing.domdiff [--ref HEAD] [--only REGEX]
 ## Package metadata
 
 ```python
-st_coco.__version__  # "0.2.0"
+st_coco.__version__  # "0.2.1"
 ```

{streamlit_coco-0.2.0 → streamlit_coco-0.2.1}/doc/prd.md

@@ -3,7 +3,7 @@
 **Product:** `streamlit-coco` — a Streamlit component and Python library for embedding [Snowflake CoCo](https://www.snowflake.com/en/product/snowflake-coco/) (formerly Cortex Code) in Streamlit applications.
 
 **Author:** —  
-**Status:** `0.2.0` published on 2026-10-20. The 0.1.9 chat family stays the default; Ask CoCo is opt-in. Next on the [roadmap](roadmap.md): API mode (no CLI) as `0.3.0`, then `0.3.5` / `0.4.0`.
+**Status:** `0.2.1` published on 2026-10-20 (`0.2.0` with the asset contributor named in the README). The 0.1.9 chat family stays the default; Ask CoCo is opt-in. Next on the [roadmap](roadmap.md): API mode (no CLI) as `0.3.0`, then `0.3.5` / `0.4.0`.
 **Last updated:** 2026-10-14
 
 ---

{streamlit_coco-0.2.0 → streamlit_coco-0.2.1}/doc/releases/0.2.0/CHECKLIST.md

@@ -2,7 +2,9 @@
 
 **Owner:** streamlit-coco maintainers
 **Target tag date:** 2026-10-20  
-**GitHub Release / PyPI:** see *Published URLs* below (filled in after the tag)
+**GitHub Release (publisher):** https://github.com/lletourmy/streamlit-coco/releases/tag/v0.2.0  
+**GitHub Release (org mirror):** https://github.com/DevoteamSP/streamlit-coco/releases/tag/v0.2.0  
+**PyPI:** https://pypi.org/project/streamlit-coco/0.2.0/
 
 Do not run `make sync-release` or tag `v0.2.0` until Product docs + QA are done.
 
@@ -41,13 +43,13 @@ Outreach drafts: [`../../../doc-dev/releases/0.2.0/`](../../../doc-dev/releases/
 
 ## 4. GitHub + PyPI (required before this is public)
 
-Follow [`doc/deployment/publish.md`](../../deployment/publish.md). **Left undone on purpose.**
+Follow [`doc/deployment/publish.md`](../../deployment/publish.md). Done 2026-10-20.
 
-- [ ] Merge to `-dev` `main`
-- [ ] `COMMIT=1 PUSH=1 MESSAGE="Release 0.2.0" make sync-release`
-- [ ] Tag `v0.2.0` on public `streamlit-coco` and push
-- [ ] Confirm GitHub Release + PyPI wheel
-- [ ] GitHub Release body: CHANGELOG excerpt + screenshots
+- [x] Merge to `-dev` `main` ([#17](https://github.com/DevoteamSP/streamlit-coco-dev/pull/17); #16, the same lock bumps, closed as superseded)
+- [x] `COMMIT=1 PUSH=1 MESSAGE="Release 0.2.0" make sync-release` to `lletourmy/streamlit-coco` and to `DevoteamSP/streamlit-coco` (identical trees)
+- [x] Tag `v0.2.0` on public `streamlit-coco` and push (also mirrored on `DevoteamSP/streamlit-coco`)
+- [x] Confirm GitHub Release + PyPI wheel; SBOM attached to both Releases. A clean `pip install "streamlit-coco[sdk]==0.2.0"` gives 0.2.0 and the 0.1.9 API guard passes against it
+- [x] GitHub Release body: the CHANGELOG `[0.2.0]` section (written by the workflow). Screenshots are in the repository, not in the body
 
 ## 5. Narrative & outreach (strongly recommended — `doc-dev`)
 
@@ -55,14 +57,15 @@ Follow [`doc/deployment/publish.md`](../../deployment/publish.md). **Left undone
 - [x] Medium draft — [`medium.md`](../../../doc-dev/releases/0.2.0/medium.md) (not posted)
 - [x] Community pass — [`COMMUNITY.md`](../../../doc-dev/releases/0.2.0/COMMUNITY.md) (not posted)
 - [ ] Refresh [`doc/marketing/one-pager.md`](../../marketing/one-pager.md) if positioning changed
-- [ ] Paste published URLs below
+- [x] Paste published URLs below
 
 ### Published URLs
 
 | Channel | URL | Date |
 | --- | --- | --- |
-| GitHub Release | | |
-| PyPI | | |
+| GitHub Release (lletourmy) | https://github.com/lletourmy/streamlit-coco/releases/tag/v0.2.0 | 2026-10-20 |
+| GitHub Release (DevoteamSP) | https://github.com/DevoteamSP/streamlit-coco/releases/tag/v0.2.0 | 2026-10-20 |
+| PyPI | https://pypi.org/project/streamlit-coco/0.2.0/ | 2026-10-20 |
 | LinkedIn | | |
 | Medium | | |
 | Streamlit Forum | | |

streamlit_coco-0.2.1/doc/releases/0.2.1/CHECKLIST.md

@@ -0,0 +1,39 @@
+# Release checklist — 0.2.1
+
+**Owner:** streamlit-coco maintainers  
+**Target tag date:** 2026-10-20  
+**GitHub Release (publisher):** see *Published URLs* below (filled in after the tag)  
+**GitHub Release (org mirror):** see *Published URLs* below  
+**PyPI:** see *Published URLs* below
+
+README patch of [`0.2.0`](../0.2.0/CHECKLIST.md). No outreach: nothing user-visible changed.
+
+---
+
+## 1. Product docs
+
+- [x] **`pyproject.toml`** and `streamlit_coco.__version__`: `0.2.1`
+- [x] **`CHANGELOG.md`**: `## [0.2.1] — 2026-10-20` (the GitHub Release body is this section)
+- [x] **`doc/roadmap.md`**, **`doc/prd.md`**, **`doc/releases/README.md`**, **`README.md`**, **`doc/api.md`**: version and status
+- [x] Locked dependencies unchanged (only the `streamlit-coco` entry of the two `uv.lock` files)
+
+## 2. Quality gates
+
+- [x] `make check`: see the sign-off below
+- [x] Built wheel and sdist pass `twine check`
+
+## 3. GitHub + PyPI
+
+Follow [`doc/deployment/publish.md`](../../deployment/publish.md).
+
+- [ ] `COMMIT=1 PUSH=1 MESSAGE="Release 0.2.1" make sync-release` to `lletourmy/streamlit-coco` and `DevoteamSP/streamlit-coco`
+- [ ] Tag `v0.2.1` on both and push
+- [ ] Confirm the GitHub Releases and the PyPI files; the PyPI page shows the new README
+
+### Published URLs
+
+| Channel | URL | Date |
+| --- | --- | --- |
+| GitHub Release (lletourmy) | | |
+| GitHub Release (DevoteamSP) | | |
+| PyPI | | |

streamlit_coco-0.2.1/doc/releases/0.2.1/README.md

@@ -0,0 +1,11 @@
+# Release kit — 0.2.1
+
+A README patch of [`0.2.0`](../0.2.0/): the ownership table names Alentz Joseph (Devoteam) as asset contributor.
+No code change. PyPI shows the README of the version it serves, and a published file cannot be changed, so the
+new README needed a new version.
+
+| File | Purpose |
+| --- | --- |
+| [CHECKLIST.md](CHECKLIST.md) | Pre-release gate and the published URLs |
+
+Feature narrative and screenshots: [`../0.2.0/`](../0.2.0/). Mechanics: [`../../deployment/publish.md`](../../deployment/publish.md).

{streamlit_coco-0.2.0 → streamlit_coco-0.2.1}/doc/releases/README.md

@@ -2,7 +2,7 @@
 
 Each cut gets `doc/releases/X.Y.Z/` for **ship hygiene** (docs, QA, screenshots).
 
-Current cut: [`0.2.0/`](0.2.0/). Previous cut: [`0.1.9/`](0.1.9/).
+Current cut: [`0.2.1/`](0.2.1/), a README patch of [`0.2.0/`](0.2.0/). Previous feature cut: [`0.1.9/`](0.1.9/).
 
 **Community posts and articles** live under **`doc-dev/releases/X.Y.Z/`** (never synced to public `streamlit-coco`).
 

{streamlit_coco-0.2.0 → streamlit_coco-0.2.1}/doc/roadmap.md

@@ -2,10 +2,10 @@
 
 Living plan. Product detail: [doc/prd.md](prd.md). Shipped history: [CHANGELOG.md](../CHANGELOG.md).
 
-**Status:** `0.2.0` published on 2026-10-20. The 0.1.9 chat family stays the default; Ask CoCo is opt-in ([feature file](features/ask-coco/ask-coco.md)). The last public release is `0.2.0` ([pypi.org/project/streamlit-coco](https://pypi.org/project/streamlit-coco/)). Next: API mode, as `0.3.0`.
+**Status:** `0.2.1` published on 2026-10-20 (the README of `0.2.0` with the asset contributor named; no code change). `0.2.0` was published the same day. The 0.1.9 chat family stays the default; Ask CoCo is opt-in ([feature file](features/ask-coco/ask-coco.md)). The last public release is `0.2.1` ([pypi.org/project/streamlit-coco](https://pypi.org/project/streamlit-coco/)). Next: API mode, as `0.3.0`.
 **Publisher:** temporary Trusted Publisher on [lletourmy/streamlit-coco](https://github.com/lletourmy/streamlit-coco); public tree also synced to [DevoteamSP/streamlit-coco](https://github.com/DevoteamSP/streamlit-coco). Used for this cut (`0.2.0`).
 **Last updated:** 2026-10-20
-**Last cut:** [releases/0.2.0/](releases/0.2.0/)
+**Last cut:** [releases/0.2.1/](releases/0.2.1/) (feature cut: [releases/0.2.0/](releases/0.2.0/))
 **Next cuts:** `0.3.0` API mode (no CLI), branch `0.3.0-remote-api` → `0.3.5` Streamlit in Snowflake → `0.4.0` Native App
 
 > **Before every release:** complete [releases/X.Y.Z/CHECKLIST.md](releases/README.md) (CHANGELOG, this roadmap, PRD, screenshots, [public issues](https://github.com/DevoteamSP/streamlit-coco/issues)) and outreach under `doc-dev/releases/` in the development repository, then [deployment/publish.md](deployment/publish.md).

{streamlit_coco-0.2.0 → streamlit_coco-0.2.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "streamlit-coco"
-version = "0.2.0"
+version = "0.2.1"
 description = "Streamlit component and Python library for Snowflake CoCo (Cortex Code)"
 readme = "README.md"
 requires-python = ">=3.10"

streamlit_coco-0.2.1/release_notes.txt

@@ -0,0 +1,7 @@
+
+The README names the asset contributor. No code change: `0.2.1` is `0.2.0` with the README that PyPI shows (a published file cannot be changed).
+
+### Changed
+
+- README ownership table: Alentz Joseph (Devoteam) is listed as asset contributor, in place of the generic contributors row.
+

{streamlit_coco-0.2.0 → streamlit_coco-0.2.1}/streamlit_coco/__init__.py

@@ -59,7 +59,7 @@ from streamlit_coco.upload import (
     upload_to_cwd,
 )
 
-__version__ = "0.2.0"
+__version__ = "0.2.1"
 
 # UI / Streamlit-backed exports — loaded on first attribute access.
 _LAZY_ATTRS: dict[str, tuple[str, str]] = {

streamlit_coco-0.2.0/release_notes.txt

@@ -1,32 +0,0 @@
-
-Ask CoCo, a floating window, beside the 0.1.9 chat family. `chat`, `panel`, and `copilot_rail` stay the default.
-Upgrading from 0.1.9: nothing to change. Every name, parameter and default of 0.1.9 is kept (a test holds the package to it). The one new requirement is Streamlit 1.55 or later.
-Migration sheet: [`doc/features/ask-coco/ask-coco.md`](doc/features/ask-coco/ask-coco.md).
-
-### Added
-
-- [Ask CoCo design canvas](doc/features/ask-coco/design/README.md): 86 frames, two host-page views, the original manifest and styles, and finished standalone browser consultation pages, with no build step, and a styled index using the canvas palette and local Montserrat.
-- `ask_coco(cwd, ...)` mounts the launcher and the window; `get_window(key)` returns its handle (`ask`, `result`, `form`, `open`, `notice`, `latest_answer`, `new`, `disconnect`, `conversation`).
-- `Features` and `Attachments` (comfort, planning, display switches, session details, files attached in the field), `Gate`, and the `policy` module (`FolderPolicy`, `Command`, `git_readonly`, `request`, ...) as `st_coco.policy.X`. The default policy is the safest: reading inside the working folder is free, everything else asks.
-- `streamlit_coco.testing` and `STREAMLIT_COCO_AGENT=mock`: run any application on the scripted agent, with no Snowflake login.
-- `examples/headless_pipeline.py` answers approvals in code through a `Conversation` with a policy.
-- 0.1.9 compatibility guard: `tests/test_compat_019.py` holds the public API (names, modules, class members, parameter names, order and defaults) to a snapshot of 0.1.9, `tests/fixtures/api_0.1.9.json`. The 0.1.9 tests of the chat family are kept (`test_copilot_rail.py`, `test_rich_text.py`, `test_classic_core.py`, `test_classic_smoke.py`, `tests/e2e_classic/`).
-- `make modern-chat` (`examples/modern_chat`): Rail, Window, or Both. Both shows the Copilot column and Ask CoCo together.
-
-### Changed
-
-- The floating window is off until you pass `mini=True` to `chat`, `panel`, or `copilot_rail`, or call `ask_coco(cwd)`. On the rail, `copilot_rail(..., ask=True)` adds **Minimize** (off by default, so a 0.1.9 rail draws no new control): it hides the rail and opens the window; **Restore** closes the window and brings the rail back. `mini=True` returns the window handle. Session tool allow-lists are not copied onto the window; its rights are its policy. When the rail is already connected, the window starts with that same Snowflake profile. The two clients stay separate.
-- The demo apps (`make simple-chat`, `approval`, `structured`, `cwd-upload`, `backlog`, `bi-semantic`, `app-builder`) keep the 0.1.9 chat, panel, or rail. Each has an **Ask CoCo** control in the sidebar, Off by default. On keeps the window minimized until **Minimize**. `make chat` still runs the simple demo.
-- `render_output_field` accepts a `CocoSession` (the 0.1.9 field) or a window handle (text only, self-refreshing), in the same first parameter, `session`, as in 0.1.9.
-- Streamlit 1.55 or later is required (it was 1.53). `copilot_rail` has called `st.popover(key=)`, new in 1.55, since `0.1.8`: on 1.53 and 1.54 it raised a `TypeError`. pip upgrades Streamlit when it installs this version.
-- `make e2e` drives the window on the scripted agent and uses the installed Edge when Playwright's Chromium is not installed. It also runs the 0.1.9 browser tests of the chat helpers (`tests/e2e_classic`).
-
-### Fixed
-
-- Path-policy regression tests respect native Windows and POSIX path semantics while checking that ambiguous paths never become free reads.
-- A search request names the same kind of place on every machine: the folder walk that finds the first file a read would ask for now goes in name order, not in the filesystem's listing order (a Linux runner could say "a memo" where macOS said "a draft").
-
-### Security
-
-- Lockfiles: `gitpython` 3.1.61 → 3.2.1, `mcp` 1.28.1 → 1.30.0 (kept on 1.x: the fix is in 1.30.0, and the Snowflake SDKs expect `mcp<2`), `pyjwt` 2.13.0 → 2.15.1, `snowflake-connector-python` 4.7.1 → 4.8.0 and `urllib3` 2.7.0 → 2.8.0, in `uv.lock` and `examples/app_builder/uv.lock`. Every locked version is outside the vulnerable range of the 23 open Dependabot alerts, and `make audit` is clean. The alerts close once this reaches `main`.
-