streamlit-coco 0.2.0__tar.gz → 0.2.2__tar.gz

{streamlit_coco-0.2.0 → streamlit_coco-0.2.2}/CHANGELOG.md

@@ -12,6 +12,40 @@ Living plan (what’s next): [`doc/roadmap.md`](doc/roadmap.md).
 
 ## [Unreleased]
 
+## [0.2.2] — 2026-10-25
+
+Ask CoCo can leave the corner: attached to an edge on the full height of the page, or on the whole page. The page can be told where the window is, and take the rest of the screen. Upgrading from 0.2.0 or 0.2.1: nothing to change; every new parameter is keyword-only with a default that keeps today's behaviour.
+
+### Added
+
+- Three icons in the window's title bar: attach to the left edge, attach to the right edge (full height, `min(30rem, 100vw)` wide), or fill the page. The pressed icon puts the window back. `Features(dock=False)` and `Features(full_page=False)` remove them (both on by default). Each icon shows a hint after 750 ms.
+- A click on the title bar (not on one of its buttons) minimises the window.
+- `ask_coco(on_layout=fn)`: `fn(place)` is called when the window changes place (`closed`, `float`, `left`, `right`, `full`), then the page reruns once. `get_window(key).place` reads it on any run; the browser also writes `data-coco-place` and `--coco-dock-w` on `<html>` for the page's own CSS.
+- `ask_coco(split=True)`: while the window is attached to an edge, the page takes the rest of the screen instead of being covered.
+- Docked and full-page windows sit above the page's header, menu bar and sidebar; the floating window no longer reaches up under them on a short screen.
+- Tests: `tests/e2e/test_window_layout.py` (the places, the switches, the callback and split, the hint, the title bar over the header).
+
+### Changed
+
+- `examples/app_builder` and `examples/bi_to_semantic`: Ask CoCo is the only agent surface, on every screen. The sidebar Off/On switch and the Copilot rail are gone; Build, Fix with CoCo and the BI jobs are sent to the window. App Builder suggests its own questions on each screen, BI → Semantic too. Both use `split=True`.
+- `examples/modern_chat` starts with Ask CoCo (then Rail, then Both) and has a Split screen selector in the sidebar.
+
+### Security
+
+- Development lock: `pip-audit` found 41 advisories in `pillow`, `filelock` and `certifi`. Locked `streamlit` 1.66.1 (it capped `pillow<13`), `pillow` 13.0.0, `certifi` 2026.10.23 and `filelock` 4.2.4 (a `[tool.uv]` override on Python 3.11+, because the Snowflake connector still says `filelock<4`). The package floor is still Streamlit 1.55; the browser tests pass on 1.66.1.
+
+### Fixed
+
+- The Ask CoCo window no longer blinks, and the page's own layers no longer show on top of it, while it waits for an answer. Each poll reruns the window's fragment; when a run was slow, Streamlit faded the stale component (opacity below 1), which made it a stacking context for the fixed window. The host container now keeps opacity 1.
+
+## [0.2.1] — 2026-10-20
+
+The README names the asset contributor. No code change: `0.2.1` is `0.2.0` with the README that PyPI shows (a published file cannot be changed).
+
+### Changed
+
+- README ownership table: Alentz Joseph (Devoteam) is listed as asset contributor, in place of the generic contributors row.
+
 ## [0.2.0] — 2026-10-20
 
 Ask CoCo, a floating window, beside the 0.1.9 chat family. `chat`, `panel`, and `copilot_rail` stay the default.

{streamlit_coco-0.2.0 → streamlit_coco-0.2.2}/ID.md

@@ -7,9 +7,9 @@
 | **Snow Builders level** | N0 (working toward N1) |
 | **Status** | active |
 | **Asset Owner** | Laurent Letourmy — laurent.letourmy@devoteam.com |
-| **Contributors** | DevoteamSP / streamlit-coco contributors |
+| **Asset Contributor** | Alentz Joseph — alentz.joseph@devoteam.com |
 | **Created** | 2026-07 |
-| **Last updated** | 2026-09-10 |
+| **Last updated** | 2026-10-20 |
 | **Confidentiality** | Public |
 
 ---

{streamlit_coco-0.2.0 → streamlit_coco-0.2.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: streamlit-coco
-Version: 0.2.0
+Version: 0.2.2
 Summary: Streamlit component and Python library for Snowflake CoCo (Cortex Code)
 Project-URL: Homepage, https://github.com/lletourmy/streamlit-coco
 Project-URL: Documentation, https://github.com/lletourmy/streamlit-coco#readme
@@ -47,7 +47,7 @@ Description-Content-Type: text/markdown
 [![CI](https://github.com/lletourmy/streamlit-coco/actions/workflows/ci.yml/badge.svg)](https://github.com/lletourmy/streamlit-coco/actions/workflows/ci.yml)
 [![License](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)
 
-> `0.2.0` (alpha). The API may still move. The default interface is still the 0.1.9 chat family (`chat`, `panel`, `copilot_rail`). The floating window is opt-in: `mini=True` on those calls, or `ask_coco(cwd)`. See [`doc/features/ask-coco/ask-coco.md`](doc/features/ask-coco/ask-coco.md).
+> `0.2.2` (alpha). The API may still move. The default interface is still the 0.1.9 chat family (`chat`, `panel`, `copilot_rail`). The floating window is opt-in: `mini=True` on those calls, or `ask_coco(cwd)`. See [`doc/features/ask-coco/ask-coco.md`](doc/features/ask-coco/ask-coco.md).
 
 **Repo:** [github.com/lletourmy/streamlit-coco](https://github.com/lletourmy/streamlit-coco) *(temporary PyPI source)* · **Dev:** [streamlit-coco-dev](https://github.com/DevoteamSP/streamlit-coco-dev)
 **SDK docs:** [Cortex Code Agent SDK](https://docs.snowflake.com/en/user-guide/cortex-code-agent-sdk/cortex-code-agent-sdk)
@@ -326,7 +326,7 @@ Releases: develop here, sync and tag on [`lletourmy/streamlit-coco`](https://git
 | Role | Name | Contact |
 | --- | --- | --- |
 | Asset Owner | Laurent Letourmy | laurent.letourmy@devoteam.com |
-| Contributors | DevoteamSP / streamlit-coco contributors | [streamlit-coco-dev](https://github.com/DevoteamSP/streamlit-coco-dev) |
+| Asset Contributor | Alentz Joseph | alentz.joseph@devoteam.com |
 
 **Snow Builders level:** N0 (alpha), targeting N1. Identity sheet: [`ID.md`](ID.md).
 

{streamlit_coco-0.2.0 → streamlit_coco-0.2.2}/README.md

@@ -5,7 +5,7 @@
 [![CI](https://github.com/lletourmy/streamlit-coco/actions/workflows/ci.yml/badge.svg)](https://github.com/lletourmy/streamlit-coco/actions/workflows/ci.yml)
 [![License](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)
 
-> `0.2.0` (alpha). The API may still move. The default interface is still the 0.1.9 chat family (`chat`, `panel`, `copilot_rail`). The floating window is opt-in: `mini=True` on those calls, or `ask_coco(cwd)`. See [`doc/features/ask-coco/ask-coco.md`](doc/features/ask-coco/ask-coco.md).
+> `0.2.2` (alpha). The API may still move. The default interface is still the 0.1.9 chat family (`chat`, `panel`, `copilot_rail`). The floating window is opt-in: `mini=True` on those calls, or `ask_coco(cwd)`. See [`doc/features/ask-coco/ask-coco.md`](doc/features/ask-coco/ask-coco.md).
 
 **Repo:** [github.com/lletourmy/streamlit-coco](https://github.com/lletourmy/streamlit-coco) *(temporary PyPI source)* · **Dev:** [streamlit-coco-dev](https://github.com/DevoteamSP/streamlit-coco-dev)
 **SDK docs:** [Cortex Code Agent SDK](https://docs.snowflake.com/en/user-guide/cortex-code-agent-sdk/cortex-code-agent-sdk)
@@ -284,7 +284,7 @@ Releases: develop here, sync and tag on [`lletourmy/streamlit-coco`](https://git
 | Role | Name | Contact |
 | --- | --- | --- |
 | Asset Owner | Laurent Letourmy | laurent.letourmy@devoteam.com |
-| Contributors | DevoteamSP / streamlit-coco contributors | [streamlit-coco-dev](https://github.com/DevoteamSP/streamlit-coco-dev) |
+| Asset Contributor | Alentz Joseph | alentz.joseph@devoteam.com |
 
 **Snow Builders level:** N0 (alpha), targeting N1. Identity sheet: [`ID.md`](ID.md).
 

{streamlit_coco-0.2.0 → streamlit_coco-0.2.2}/doc/api.md

@@ -1,6 +1,6 @@
 # API reference: streamlit-coco
 
-Public surface of `import streamlit_coco as st_coco`, and of `streamlit_coco.policy` and `streamlit_coco.testing`. `0.2.0`: signatures may still move. Every signature below was read from the code.
+Public surface of `import streamlit_coco as st_coco`, and of `streamlit_coco.policy` and `streamlit_coco.testing`. `0.2.2`: signatures may still move. Every signature below was read from the code.
 
 **Related:** [README](../README.md) · [Ask CoCo feature file](features/ask-coco/ask-coco.md) (the decisions and their reasons) · [Local deployment](deployment/local.md) · [SDK docs](https://docs.snowflake.com/en/user-guide/cortex-code-agent-sdk/cortex-code-agent-sdk)
 
@@ -48,6 +48,8 @@ def ask_coco(
     agent: Callable | None = None,
     connection: str | None = None,
     on_rail: Callable[[], Any] | None = None,
+    on_layout: Callable[[str], Any] | None = None,
+    split: bool = False,
 ) -> Window: ...
 ```
 
@@ -68,6 +70,8 @@ Mounts the launcher (bottom right) and the window, and returns the handle. Call
 | `agent` | A function `(emit) -> agent`, for tests and for another adapter. `None` gives the Cortex adapter, or the scripted agent when `STREAMLIT_COCO_AGENT=mock`. |
 | `connection` | Snowflake profile name. When the window is not connected yet, it connects with this profile. The Copilot rail passes the profile it is already using, so Minimize does not ask you to connect again. |
 | `on_rail` | A function `() -> None`. When set, the window header shows **Restore**. Using it calls the function, then reruns the page. `copilot_rail` uses it to bring its column back after Minimize. |
+| `on_layout` | A function `(place: str) -> None`, called when the window changes place: `"closed"` (minimised), `"float"`, `"left"`, `"right"` (attached to that edge, the whole height of the page, `min(30rem, 100vw)` wide) or `"full"`. The page then reruns once, so it can lay itself out (a column, a narrower grid). Read the same value on any run with `get_window(key).place`. The browser also writes it on the page: `data-coco-place` on `<html>` and the width in `--coco-dock-w`, for the page's own CSS. |
+| `split` | `True`: while the window is attached to the left or the right edge, the page takes the rest of the screen instead of being covered (Streamlit's app container moves over by the dock's width). Off by default. Full page does not split: there is nothing to share. |
 
 Raises `CocoError` before drawing anything when Streamlit is older than 1.55 or `cwd` does not name an existing directory.
 
@@ -255,6 +259,8 @@ class Features:
         session_details: bool = False,
         reasoning: bool = False,
         download_csv: bool = False,
+        dock: bool = True,
+        full_page: bool = True,
     ): ...
 
 # Features.all() builds one with everything on: the playground
@@ -268,6 +274,8 @@ A feature appears only when you switch it on or supply its data. A host that use
 | `steps` | One card per tool call. Off: only failed and refused steps stay, and the sentences CoCo said. |
 | `motion` | The window's animation. It ignores the system's reduced-motion setting. |
 | `copy` | Copy on answers, code and tables. |
+| `dock` | Two icons in the window's header attach it to the left or the right edge, on the whole height of the page. The pressed icon puts the window back. The place is kept in the browser while the page lives. Off: the icons are not there. |
+| `full_page` | An icon in the window's header makes it fill the page. The pressed icon puts the window back. Off: the icon is not there. |
 | `page_text` | Each message carries the text the page shows (more data leaves the browser). |
 | `page_exclude` | CSS selectors left out of that text. |
 | `attachments` | An `Attachments`: the field accepts files. |
@@ -716,5 +724,5 @@ python -m streamlit_coco.testing.domdiff [--ref HEAD] [--only REGEX]
 ## Package metadata
 
 ```python
-st_coco.__version__  # "0.2.0"
+st_coco.__version__  # "0.2.2"
 ```

{streamlit_coco-0.2.0 → streamlit_coco-0.2.2}/doc/features/ask-coco/ask-coco.md

@@ -1,6 +1,6 @@
 # Ask CoCo: the window becomes the package's interface (0.2.0)
 
-Status: released in `0.2.0` (2026-10-20); the window is opt-in. The 0.1.9 chat family
+Status: released in `0.2.0` (2026-10-20); the window is opt-in. `0.2.2` adds the window's places (left, right, full page), the page callback `on_layout` and `split`. The 0.1.9 chat family
 (`chat`, `panel`, `copilot_rail`) is the default again. Pass `mini=True` to one of those, or call
 `ask_coco(cwd)`, to mount the floating window. The sheet below is the other developer's record of
 the window; where it says the chat family is removed, the code on this branch keeps it.
@@ -158,6 +158,8 @@ st_coco.Features(
     session_details=False,  # the menu offers Session details
     reasoning=False,        # CoCo's reasoning as a fold among the steps
     download_csv=False,     # Download CSV in the wider table view
+    dock=True,              # header icons: attach the window to the left or the right edge
+    full_page=True,         # header icon: the window fills the page
 )
 st_coco.Features.all()      # everything on: the playground
 ```
@@ -359,6 +361,7 @@ Found when this file was checked against the code (the code stands; the text abo
   [`test-checklist.md`](test-checklist.md).
 - One window per page: two `ask_coco` calls with different keys draw two launchers at the same place.
 - The window ignores the system's reduced-motion setting **(client)**; `Features(motion=False)` restores it.
+- The window has three places **(client)**: floating (default), attached to the left or the right edge on the full height of the page (30 rem wide), or the full page (one rem around, the conversation 52 rem wide in the middle). Three icons in the header, the pressed one goes back to floating; `Features(dock=False)` removes the two attach icons and `Features(full_page=False)` the full page one; both are on by default. A click on the title bar (not on one of its buttons) minimises the window. The window then covers Streamlit's header and sidebar (z-index 1000000, under its dialogs and popovers). The page is not pushed aside unless `ask_coco(split=True)`: then the app container takes the rest of the screen while the window is attached. `ask_coco(on_layout=fn)` calls `fn(place)` on each change (`closed`, `float`, `left`, `right`, `full`) and reruns the page once; `get_window(key).place` reads it on any run; the browser writes `data-coco-place` and `--coco-dock-w` on `<html>`. Each icon of the title bar shows its hint after 750 ms (no native tooltip).
 - With the keyboard, Allow and Decline are reached with Shift+Tab from the field; a request that arrives under a
   Streamlit dialog cannot be clicked until the dialog is closed.
 

{streamlit_coco-0.2.0 → streamlit_coco-0.2.2}/doc/features/ask-coco/test-checklist.md

@@ -1,6 +1,6 @@
 # Ask CoCo: live run checklist
 
-Needs the Cortex Code program and a Snowflake connection; costs credits. **Nothing below was run live for 0.2.0**:
+Needs the Cortex Code program and a Snowflake connection; costs credits. **Nothing below was run live for 0.2.0 or 0.2.2**:
 the window, the conversation, the gate and the policy are verified on the scripted agent
 (`STREAMLIT_COCO_AGENT=mock`). Run in a scratch folder, never in a customer repository. Run the examples **without** `STREAMLIT_COCO_AGENT=mock`: with it the agent is scripted. Each example below is a `make` target of this repository's Makefile.
 
@@ -24,3 +24,7 @@ Program version read when the adapter was written: Cortex Code 1.1.104, SDK 1.0.
 | 14 | `make cwd-upload`: attach a file in the field, ask about it | The file is saved in `cwd_upload_workspace/_coco_uploads/<id>/` and read without a request; the sidebar uploader writes to `cwd_upload_workspace/_uploads/` | |
 | 15 | With `options.mcp_servers` set | Each MCP call asks, as a change | |
 | 16 | Disconnect the network during a run | "Connection lost", Reconnect; what was typed is kept | |
+| 17 | `make modern-chat`, **Ask CoCo**, sidebar **Split**: open the window, connect, press the attach-right icon in the title bar | The window takes the full height at the right; the page (sidebar included) shrinks to the rest of the screen; the sidebar says `right`; the cards stack | |
+| 18 | Same page: attach left, then **Full page**, then press the pressed icon, then Minimize | Left: the page moves right. Full page: the window covers the page, the conversation keeps a readable width. The pressed icon returns to floating. Minimize: the page gets its screen back (`closed`) | |
+| 19 | Same page, a real run: ask something that makes CoCo ask a question while docked, and leave it waiting 30 s | The window does not blink and nothing of the page draws over it; Streamlit's header and menu bar are under the title bar | |
+| 20 | `make app-builder`: on each screen open the window | The suggested questions follow the screen; Build this app (Brief) is sent to the window and asks before it writes; Fix with CoCo in the preview is sent to the window | |

{streamlit_coco-0.2.0 → streamlit_coco-0.2.2}/doc/prd.md

@@ -3,7 +3,7 @@
 **Product:** `streamlit-coco` — a Streamlit component and Python library for embedding [Snowflake CoCo](https://www.snowflake.com/en/product/snowflake-coco/) (formerly Cortex Code) in Streamlit applications.
 
 **Author:** —  
-**Status:** `0.2.0` published on 2026-10-20. The 0.1.9 chat family stays the default; Ask CoCo is opt-in. Next on the [roadmap](roadmap.md): API mode (no CLI) as `0.3.0`, then `0.3.5` / `0.4.0`.
+**Status:** `0.2.2` prepared on 2026-10-25, not yet published (`0.2.1` published on 2026-10-20: `0.2.0` with the asset contributor named in the README). The 0.1.9 chat family stays the default; Ask CoCo is opt-in. Next on the [roadmap](roadmap.md): API mode (no CLI) as `0.3.0`, then `0.3.5` / `0.4.0`.
 **Last updated:** 2026-10-14
 
 ---

{streamlit_coco-0.2.0 → streamlit_coco-0.2.2}/doc/releases/0.2.0/CHECKLIST.md

@@ -2,7 +2,9 @@
 
 **Owner:** streamlit-coco maintainers
 **Target tag date:** 2026-10-20  
-**GitHub Release / PyPI:** see *Published URLs* below (filled in after the tag)
+**GitHub Release (publisher):** https://github.com/lletourmy/streamlit-coco/releases/tag/v0.2.0  
+**GitHub Release (org mirror):** https://github.com/DevoteamSP/streamlit-coco/releases/tag/v0.2.0  
+**PyPI:** https://pypi.org/project/streamlit-coco/0.2.0/
 
 Do not run `make sync-release` or tag `v0.2.0` until Product docs + QA are done.
 
@@ -41,13 +43,13 @@ Outreach drafts: [`../../../doc-dev/releases/0.2.0/`](../../../doc-dev/releases/
 
 ## 4. GitHub + PyPI (required before this is public)
 
-Follow [`doc/deployment/publish.md`](../../deployment/publish.md). **Left undone on purpose.**
+Follow [`doc/deployment/publish.md`](../../deployment/publish.md). Done 2026-10-20.
 
-- [ ] Merge to `-dev` `main`
-- [ ] `COMMIT=1 PUSH=1 MESSAGE="Release 0.2.0" make sync-release`
-- [ ] Tag `v0.2.0` on public `streamlit-coco` and push
-- [ ] Confirm GitHub Release + PyPI wheel
-- [ ] GitHub Release body: CHANGELOG excerpt + screenshots
+- [x] Merge to `-dev` `main` ([#17](https://github.com/DevoteamSP/streamlit-coco-dev/pull/17); #16, the same lock bumps, closed as superseded)
+- [x] `COMMIT=1 PUSH=1 MESSAGE="Release 0.2.0" make sync-release` to `lletourmy/streamlit-coco` and to `DevoteamSP/streamlit-coco` (identical trees)
+- [x] Tag `v0.2.0` on public `streamlit-coco` and push (also mirrored on `DevoteamSP/streamlit-coco`)
+- [x] Confirm GitHub Release + PyPI wheel; SBOM attached to both Releases. A clean `pip install "streamlit-coco[sdk]==0.2.0"` gives 0.2.0 and the 0.1.9 API guard passes against it
+- [x] GitHub Release body: the CHANGELOG `[0.2.0]` section (written by the workflow). Screenshots are in the repository, not in the body
 
 ## 5. Narrative & outreach (strongly recommended — `doc-dev`)
 
@@ -55,14 +57,15 @@ Follow [`doc/deployment/publish.md`](../../deployment/publish.md). **Left undone
 - [x] Medium draft — [`medium.md`](../../../doc-dev/releases/0.2.0/medium.md) (not posted)
 - [x] Community pass — [`COMMUNITY.md`](../../../doc-dev/releases/0.2.0/COMMUNITY.md) (not posted)
 - [ ] Refresh [`doc/marketing/one-pager.md`](../../marketing/one-pager.md) if positioning changed
-- [ ] Paste published URLs below
+- [x] Paste published URLs below
 
 ### Published URLs
 
 | Channel | URL | Date |
 | --- | --- | --- |
-| GitHub Release | | |
-| PyPI | | |
+| GitHub Release (lletourmy) | https://github.com/lletourmy/streamlit-coco/releases/tag/v0.2.0 | 2026-10-20 |
+| GitHub Release (DevoteamSP) | https://github.com/DevoteamSP/streamlit-coco/releases/tag/v0.2.0 | 2026-10-20 |
+| PyPI | https://pypi.org/project/streamlit-coco/0.2.0/ | 2026-10-20 |
 | LinkedIn | | |
 | Medium | | |
 | Streamlit Forum | | |

streamlit_coco-0.2.2/doc/releases/0.2.1/CHECKLIST.md

@@ -0,0 +1,39 @@
+# Release checklist — 0.2.1
+
+**Owner:** streamlit-coco maintainers  
+**Target tag date:** 2026-10-20  
+**GitHub Release (publisher):** https://github.com/lletourmy/streamlit-coco/releases/tag/v0.2.1  
+**GitHub Release (org mirror):** https://github.com/DevoteamSP/streamlit-coco/releases/tag/v0.2.1  
+**PyPI:** https://pypi.org/project/streamlit-coco/0.2.1/
+
+README patch of [`0.2.0`](../0.2.0/CHECKLIST.md). No outreach: nothing user-visible changed.
+
+---
+
+## 1. Product docs
+
+- [x] **`pyproject.toml`** and `streamlit_coco.__version__`: `0.2.1`
+- [x] **`CHANGELOG.md`**: `## [0.2.1] — 2026-10-20` (the GitHub Release body is this section)
+- [x] **`doc/roadmap.md`**, **`doc/prd.md`**, **`doc/releases/README.md`**, **`README.md`**, **`doc/api.md`**: version and status
+- [x] Locked dependencies unchanged (only the `streamlit-coco` entry of the two `uv.lock` files)
+
+## 2. Quality gates
+
+- [x] `make check`: ruff, 637 passed, 1 skipped, 742 subtests (2026-10-20)
+- [x] Built wheel and sdist pass `twine check`
+
+## 3. GitHub + PyPI
+
+Follow [`doc/deployment/publish.md`](../../deployment/publish.md).
+
+- [x] `COMMIT=1 PUSH=1 MESSAGE="Release 0.2.1" make sync-release` to `lletourmy/streamlit-coco` and `DevoteamSP/streamlit-coco` (identical trees)
+- [x] Tag `v0.2.1` on both and push
+- [x] Confirm the GitHub Releases (wheel, sdist, SBOM) and the PyPI files; the PyPI page shows the new README, and a clean `pip install "streamlit-coco[sdk]==0.2.1"` gives 0.2.1 with the 0.1.9 API guard passing. PyPI's main listing served 0.2.0 for a few minutes after the upload (cache); the version page and the simple index had 0.2.1 at once
+
+### Published URLs
+
+| Channel | URL | Date |
+| --- | --- | --- |
+| GitHub Release (lletourmy) | https://github.com/lletourmy/streamlit-coco/releases/tag/v0.2.1 | 2026-10-20 |
+| GitHub Release (DevoteamSP) | https://github.com/DevoteamSP/streamlit-coco/releases/tag/v0.2.1 | 2026-10-20 |
+| PyPI | https://pypi.org/project/streamlit-coco/0.2.1/ | 2026-10-20 |

streamlit_coco-0.2.2/doc/releases/0.2.1/README.md

@@ -0,0 +1,11 @@
+# Release kit — 0.2.1
+
+A README patch of [`0.2.0`](../0.2.0/): the ownership table names Alentz Joseph (Devoteam) as asset contributor.
+No code change. PyPI shows the README of the version it serves, and a published file cannot be changed, so the
+new README needed a new version.
+
+| File | Purpose |
+| --- | --- |
+| [CHECKLIST.md](CHECKLIST.md) | Pre-release gate and the published URLs |
+
+Feature narrative and screenshots: [`../0.2.0/`](../0.2.0/). Mechanics: [`../../deployment/publish.md`](../../deployment/publish.md).

streamlit_coco-0.2.2/doc/releases/0.2.2/CHECKLIST.md

@@ -0,0 +1,79 @@
+# Release checklist — 0.2.2
+
+**Owner:** streamlit-coco maintainers
+**Target tag date:** 2026-10-25  
+**GitHub Release / PyPI:** see *Published URLs* below (filled in after the tag)
+
+Do not run `make sync-release` or tag `v0.2.2` until Product docs + QA are done.
+
+Outreach drafts: [`../../../doc-dev/releases/0.2.2/`](../../../doc-dev/releases/0.2.2/) (dev-only, not public sync).
+
+---
+
+## 1. Product docs (required)
+
+- [x] **`pyproject.toml`** — `version = "0.2.2"` (and `streamlit_coco.__version__`, `uv.lock`)
+- [x] **`CHANGELOG.md`** — `[Unreleased]` → `## [0.2.2] — 2026-10-25`; fresh `[Unreleased]` left at top
+- [x] **`CHANGELOG.md`** at tag time: heading date `2026-10-25` is the tag date (the GitHub Release body is this section)
+- [x] **`doc/roadmap.md`** — Status / Last updated / Last cut; `v0.2.2` section; Now is still API mode (`0.3.0`)
+- [ ] **Public GitHub issues** — not touched. Close resolved, comment on progressed, propose new ones from `doc/roadmap.md`
+- [x] **`doc/prd.md`** — status line
+- [x] **`doc/api.md`** — version line; `Features(dock, full_page)`; `ask_coco(on_layout, split)`
+- [x] Feature narrative: [`features/ask-coco/ask-coco.md`](../../features/ask-coco/ask-coco.md) (window places, callback, split, hints, title-bar click)
+- [x] Streamlit floor unchanged (**1.55**); `tests/test_streamlit_floor.py` passes
+- [x] Public kit: `doc/releases/0.2.2/`
+- [x] Outreach kit: `doc-dev/releases/0.2.2/` (drafts only)
+
+## 2. Quality gates (required)
+
+- [x] `make check` — ruff, 637 passed, 1 skipped, 742 subtests (2026-10-25, Streamlit 1.66.1)
+- [x] `make e2e` — 15 browser tests (the window, and the 0.1.9 chat helpers on their own harness), including the new `tests/e2e/test_window_layout.py` (2026-10-25, Streamlit 1.66.1)
+- [x] `make test-all` — the above and `pip-audit`: **no known vulnerabilities** (2026-10-25). The first run found 41 in the development lock (`pillow 12.3.0`: 37, fixed in 13.0.0; `filelock 3.32.0`: 3, fixed in 4.2.1; `certifi 2026.7.22`: 1, fixed in 2026.10.19). Fixed by `uv lock --upgrade-package certifi --upgrade-package filelock --upgrade-package pillow --upgrade-package streamlit`: Streamlit 1.60.0 → 1.66.1 (it capped `pillow<13`), `pillow` 13.0.0, `certifi` 2026.10.23; and a `[tool.uv] override-dependencies` for `filelock>=4.2.1` on Python 3.11+ (4.2.4 locked), because `snowflake-connector-python` (via `cortex-code-agent-sdk 1.0.7`) still says `filelock<4` but only uses `FileLock`, `BaseFileLock` and `Timeout`. The override is in the development lock only, not in the wheel; Python 3.10 keeps `filelock` 3.x. The package floor stays Streamlit 1.55; the screenshots were captured on 1.66.1 (the locked version)
+- [x] **0.1.9 compatibility** — `tests/test_compat_019.py` holds the public API to `tests/fixtures/api_0.1.9.json`; every new parameter is keyword-only, last, with a default (2026-10-25)
+- [x] Manual feature checklists — [`features/ask-coco/`](../../features/ask-coco/) (rows 17–20 are new). Run by the maintainer on 2026-10-25 against a real agent; the Result column of the table is not filled in
+- [x] Live CoCo smoke (`make modern-chat`, `make app-builder`, `make bi-semantic` without `STREAMLIT_COCO_AGENT=mock`). Run by the maintainer on 2026-10-25; the outcome of each step is not written down here
+- [x] Flaky once, passes alone and in the full runs: `test_attached_file_lands_in_the_folder` (a slow machine)
+
+## 3. Visuals (required for community posts)
+
+- [x] Screenshots captured per [`screenshots/README.md`](screenshots/README.md) (2026-10-25, scripted agent): `hero.png`, `01-full-page.png`, `02-hint.png`
+- [x] LinkedIn visual [`visual-linkedin-0.2.2.png`](../../../doc-dev/releases/0.2.2/visual-linkedin-0.2.2.png) (dev-only), super title `streamlit-coco 0.2.2`
+- [ ] Optional: 15–30s screen recording (float → attach right → full page → back)
+
+## 4. GitHub + PyPI (required before this is public)
+
+Follow [`doc/deployment/publish.md`](../../deployment/publish.md). **Left undone on purpose.**
+
+- [ ] Merge to `-dev` `main`
+- [ ] `COMMIT=1 PUSH=1 MESSAGE="Release 0.2.2" make sync-release`
+- [ ] Tag `v0.2.2` on public `streamlit-coco` and push
+- [ ] Confirm GitHub Release + PyPI wheel
+- [ ] GitHub Release body: CHANGELOG excerpt + `hero.png`
+
+## 5. Narrative & outreach (strongly recommended — `doc-dev`)
+
+- [x] LinkedIn draft — [`linkedin.md`](../../../doc-dev/releases/0.2.2/linkedin.md) (not posted)
+- [x] Medium draft — [`medium.md`](../../../doc-dev/releases/0.2.2/medium.md) (not posted)
+- [x] Community pass — [`COMMUNITY.md`](../../../doc-dev/releases/0.2.2/COMMUNITY.md) (not posted)
+- [ ] Refresh [`doc/marketing/one-pager.md`](../../marketing/one-pager.md) if positioning changed
+- [ ] Paste published URLs below
+
+### Published URLs
+
+| Channel | URL | Date |
+| --- | --- | --- |
+| GitHub Release | | |
+| PyPI | | |
+| LinkedIn | | |
+| Medium | | |
+| Streamlit Forum | | |
+| Snowflake Community | | |
+| Other | | |
+
+## 6. Sign-off
+
+| Role | Name | Date |
+| --- | --- | --- |
+| Engineering | | |
+| Docs / product | | |
+| Marketing / community | | |

streamlit_coco-0.2.2/doc/releases/0.2.2/NOTES.md

@@ -0,0 +1,42 @@
+# Release notes bank — 0.2.2
+
+Freeform. Feed LinkedIn / Medium / GitHub Release when this cut is published.
+
+## Headline (one line)
+
+> Ask CoCo can dock to the side of your app, and your page makes room for it.
+
+## Top 3 user-visible wins
+
+1. **Three icons in the title bar** — attach the window to the left or the right edge (full height), or fill the page. The pressed icon puts it back. A click on the title bar minimises. Each icon shows a hint after 750 ms.
+2. **The page knows** — `ask_coco(on_layout=fn)` and `get_window(key).place` say where the window is; `split=True` gives the page the rest of the screen.
+3. **No more blink** — while the window waited for an answer, Streamlit faded the stale component every poll, and the page's own layers drew over the window.
+
+## Use cases to feature
+
+1. A copilot beside a working app: the page keeps its screen, the agent keeps its column (`make modern-chat`, Split)
+2. App Builder and BI → Semantic with Ask CoCo only: Build, Fix and the BI jobs go to one conversation, and each screen suggests its own questions
+
+## Learnings (candid)
+
+- A fixed element inside a component is only as stable as its ancestors: one `opacity: 0.8` on the container made it a stacking context, and the page's dataframes and headers drew over a window with `z-index: 8`.
+- Streamlit's header, menu bar and sidebar sit at 999990–999995. A full-height window has to be above them, and below dialogs and popovers.
+- The page does not need a new API to share the screen: Streamlit's app container is absolutely positioned, so moving its `left` or `right` by the dock width is enough, and nothing fixed in the page breaks.
+- The three-icon title bar needed its own hint: the browser's `title` takes about a second and cannot be styled.
+
+## Quotes / soundbites
+
+- “The window docks. The page makes room.”
+- “One agent surface, on every screen. Each screen suggests its own questions.”
+
+## Test plan
+
+- `make test-all` — green on 2026-10-25: ruff, 637 passed, 1 skipped, 742 subtests; 15 browser tests; `pip-audit` clean (Streamlit 1.66.1 locked).
+- Browser tests: `tests/e2e/test_window_layout.py` (places, switches, callback and split, hint, title bar over the header).
+- Not run: the manual live checklists (`features/ask-coco/test-checklist.md`) and the live smoke against Cortex Code.
+
+## Explicit non-goals this cut
+
+- Public sync (`make sync-release`), the tag and PyPI
+- API mode (`0.3.0`)
+- A resizable dock (the width is `min(30rem, 100vw)`)

streamlit_coco-0.2.2/doc/releases/0.2.2/README.md

@@ -0,0 +1,17 @@
+# Release kit — 0.2.2
+
+Feature cut: **Ask CoCo leaves the corner.** The window attaches to the left or the right edge on the full height of the page, or fills the page. The page is told where the window is (`ask_coco(on_layout=)`, `get_window(key).place`) and can take the rest of the screen (`ask_coco(split=True)`). Fix: the window no longer blinks while it waits.
+
+Prepared `2026-10-25`. **Not published.**
+
+| File | Purpose |
+| --- | --- |
+| [CHECKLIST.md](CHECKLIST.md) | Master pre-release gate |
+| [NOTES.md](NOTES.md) | Themes / learnings |
+| [screenshots/README.md](screenshots/README.md) | Capture brief |
+
+Outreach (dev-only): [`../../../doc-dev/releases/0.2.2/`](../../../doc-dev/releases/0.2.2/).
+
+Feature: [`../../features/ask-coco/ask-coco.md`](../../features/ask-coco/ask-coco.md).
+
+Mechanics: [`../../deployment/publish.md`](../../deployment/publish.md) · QA: [`../../testing.md`](../../testing.md).

streamlit_coco-0.2.2/doc/releases/0.2.2/screenshots/README.md

@@ -0,0 +1,45 @@
+# Screenshots — 0.2.2
+
+Store finals in this folder. Prefer PNG. Captured 2026-10-25 on the scripted agent (`STREAMLIT_COCO_AGENT=mock`), Streamlit 1.66.1, 2x.
+
+**Demo:** `make modern-chat` (Ask CoCo first; the Split screen selector is in the sidebar).
+
+## Required shots
+
+| File | Scene | Why |
+| --- | --- | --- |
+| `hero.png` | Ask CoCo attached to the right, **Split** on: the page beside it, a permission request waiting | LinkedIn + GitHub Release |
+| `01-full-page.png` | The window on the **Full page** | The second place |
+| `02-hint.png` | The title bar with the hint under the pressed icon (750 ms) | The icons |
+
+## Optional
+
+| File | Scene |
+| --- | --- |
+| `demo.gif` or `demo.mp4` | 15–30s: float → attach right (the page makes room) → full page → back |
+
+## Capture tips
+
+- `STREAMLIT_COCO_AGENT=mock` needs no Snowflake login
+- No real connection name or home folder in a picture: the capture runs with a throw-away `HOME` (`/tmp/coco_demo`)
+
+## After capture
+
+- [x] Drop files here (`hero.png`, `01-full-page.png`, `02-hint.png`)
+- [x] Reference paths from `doc-dev/releases/0.2.2/linkedin.md`
+- [ ] Reference them in the GitHub Release body when it is created
+- [ ] `demo.gif` / `demo.mp4`: not recorded
+
+## What the pictures show, and what they do not
+
+- The agent is scripted. The request ("Allow CoCo to list files in the .git folder?") is the real policy and gate; the model and the program are scripted. Nothing was run.
+- The sidebar of `hero.png` is the demo's own (Surfaces, Split screen, the place the window reported through `on_layout`).
+
+## Regenerate
+
+```bash
+uv run --extra e2e python scripts/capture_release_screens.py          # split full hint, into this folder
+uv run --extra e2e python scripts/capture_release_screens.py split    # one of: split full hint
+```
+
+Look at each picture before it goes in. The script waits for the real state (the request card, the reported place, the visible hint).

{streamlit_coco-0.2.0 → streamlit_coco-0.2.2}/doc/releases/README.md

@@ -2,7 +2,7 @@
 
 Each cut gets `doc/releases/X.Y.Z/` for **ship hygiene** (docs, QA, screenshots).
 
-Current cut: [`0.2.0/`](0.2.0/). Previous cut: [`0.1.9/`](0.1.9/).
+Current cut: [`0.2.2/`](0.2.2/). Previous cut: [`0.2.1/`](0.2.1/), a README patch of [`0.2.0/`](0.2.0/). Previous feature cut: [`0.1.9/`](0.1.9/).
 
 **Community posts and articles** live under **`doc-dev/releases/X.Y.Z/`** (never synced to public `streamlit-coco`).
 

{streamlit_coco-0.2.0 → streamlit_coco-0.2.2}/doc/roadmap.md

@@ -2,10 +2,10 @@
 
 Living plan. Product detail: [doc/prd.md](prd.md). Shipped history: [CHANGELOG.md](../CHANGELOG.md).
 
-**Status:** `0.2.0` published on 2026-10-20. The 0.1.9 chat family stays the default; Ask CoCo is opt-in ([feature file](features/ask-coco/ask-coco.md)). The last public release is `0.2.0` ([pypi.org/project/streamlit-coco](https://pypi.org/project/streamlit-coco/)). Next: API mode, as `0.3.0`.
-**Publisher:** temporary Trusted Publisher on [lletourmy/streamlit-coco](https://github.com/lletourmy/streamlit-coco); public tree also synced to [DevoteamSP/streamlit-coco](https://github.com/DevoteamSP/streamlit-coco). Used for this cut (`0.2.0`).
-**Last updated:** 2026-10-20
-**Last cut:** [releases/0.2.0/](releases/0.2.0/)
+**Status:** `0.2.2` prepared on 2026-10-25, not yet published. `0.2.1` was published on 2026-10-20 (the README of `0.2.0` with the asset contributor named; no code change), the same day as `0.2.0`. The 0.1.9 chat family stays the default; Ask CoCo is opt-in ([feature file](features/ask-coco/ask-coco.md)). The last public release is `0.2.1` ([pypi.org/project/streamlit-coco](https://pypi.org/project/streamlit-coco/)). Next: API mode, as `0.3.0`.
+**Publisher:** temporary Trusted Publisher on [lletourmy/streamlit-coco](https://github.com/lletourmy/streamlit-coco); public tree also synced to [DevoteamSP/streamlit-coco](https://github.com/DevoteamSP/streamlit-coco). Used for this cut (`0.2.2`).
+**Last updated:** 2026-10-25
+**Last cut:** [releases/0.2.2/](releases/0.2.2/) (previous: [releases/0.2.1/](releases/0.2.1/), a README patch of [releases/0.2.0/](releases/0.2.0/))
 **Next cuts:** `0.3.0` API mode (no CLI), branch `0.3.0-remote-api` → `0.3.5` Streamlit in Snowflake → `0.4.0` Native App
 
 > **Before every release:** complete [releases/X.Y.Z/CHECKLIST.md](releases/README.md) (CHANGELOG, this roadmap, PRD, screenshots, [public issues](https://github.com/DevoteamSP/streamlit-coco/issues)) and outreach under `doc-dev/releases/` in the development repository, then [deployment/publish.md](deployment/publish.md).
@@ -28,6 +28,18 @@ Manual checklists: [doc/features/README.md](features/README.md) — re-run befor
 
 ---
 
+## v0.2.2 — Window places and the page callback
+
+Prepared `2026-10-25`, not yet published.
+
+| Item | Status | Ref |
+| ---- | ------ | --- |
+| Header icons: attach the window to the left or the right edge, or fill the page; `Features(dock=, full_page=)` switch them off | ✅ | [features/ask-coco/ask-coco.md](features/ask-coco/ask-coco.md) |
+| `ask_coco(on_layout=, split=)` and `get_window(key).place`: the page learns where the window is and can take the rest of the screen | ✅ | `make modern-chat` (Split screen selector) |
+| A click on the title bar minimises; hints on the title-bar icons after 750 ms | ✅ | |
+| Fix: the window no longer blinks while it waits (Streamlit faded the stale component) | ✅ | |
+| App Builder and BI → Semantic: Ask CoCo only, on every screen, with the questions of each screen | ✅ | `make app-builder` · `make bi-semantic` |
+
 ## v0.2.0 — Ask CoCo window
 
 Shipped `2026-10-20`. The 0.1.9 chat family stays.

{streamlit_coco-0.2.0 → streamlit_coco-0.2.2}/doc/testing.md

@@ -23,7 +23,7 @@ make e2e
 ## What the tests cover
 
 - **Unit tests** (`tests/`): the conversation, the gate, the policy (paths, secrets, listed commands, SQL), the scripted agent, labels, attachments, `render_output_field`, uploads, the headless example, and **0.1.9 compatibility**: `test_compat_019.py` compares the current API with `tests/fixtures/api_0.1.9.json` (no name, module, member or parameter of 0.1.9 may go, move, become required or change its default; a new parameter needs a default), and `test_copilot_rail.py`, `test_rich_text.py`, `test_classic_core.py` and `test_classic_smoke.py` are the 0.1.9 tests of the chat family, kept. `tests/test_window.py` checks every fixture of `streamlit_coco.testing.VIEWS` against the conversation's contract, and runs a Node check of the window's script when Node is installed.
-- **Browser tests** (`tests/e2e/`): a walk of the default window (connect, a read, Allow, Decline, queue, Take back, Stop, New conversation), the code block's copy button, "Latest exchange only", a file attached in the field and saved in `<cwd>/_coco_uploads/<id>/`, and the page's `cwd_uploader`.
+- **Browser tests** (`tests/e2e/`): a walk of the default window (connect, a read, Allow, Decline, queue, Take back, Stop, New conversation), the code block's copy button, "Latest exchange only", a file attached in the field and saved in `<cwd>/_coco_uploads/<id>/`, and the page's `cwd_uploader`; the window's places (`test_window_layout.py`): attach left or right, full page, the switches, the page callback and `split`, the hint after 750 ms, the title bar over the page's header.
 - **Browser tests of the chat helpers** (`tests/e2e_classic/`): the 0.1.9 tests, unchanged, on a CoCo-free harness: SQL highlighting and the copy button, transcript windowing (**Load earlier**), and the sidebar upload into `cwd`.
 - What no test covers is listed plainly, row by row, in the no-regression table of [`features/ask-coco/ask-coco.md`](features/ask-coco/ask-coco.md) (section 3).
 

{streamlit_coco-0.2.0 → streamlit_coco-0.2.2}/examples/app_builder/README.md

@@ -1,6 +1,6 @@
 # App Builder
 
-Example for [streamlit-coco](https://github.com/DevoteamSP/streamlit-coco): a **library of app types**. Pick a type, fill its **brief** (context, what it allows, what it does not, questions), optionally attach **sketches** of the app you want, then CoCo writes a Streamlit app under approval. Preview and **Fix with CoCo** reuse `copilot_rail()` + `app_viewer()`.
+Example for [streamlit-coco](https://github.com/DevoteamSP/streamlit-coco): a **library of app types**. Pick a type, fill its **brief** (context, what it allows, what it does not, questions), optionally attach **sketches** of the app you want, then CoCo writes a Streamlit app under approval. The agent is **Ask CoCo** (`ask_coco()`, the window at the bottom right) on every screen, with the suggested questions of each screen; Preview and **Fix with CoCo** use `app_viewer()`.
 
 Product brief: [`doc/features/app-builder/UX.md`](../../doc/features/app-builder/UX.md).
 
@@ -29,7 +29,7 @@ uv run --project ../.. --extra dev --with 'streamlit-extras>=1.3.0' python -m st
 | Welcome | You never start from a blank `app.py`; three steps |
 | Library | **Resume** project cards; **Create a new project** type cards (icon, name, users, grounding, screenshot) |
 | Brief | Columns: your brief + sketches · type questions |
-| Studio | **Build this app** / regenerate; header **Open Copilot** and **Open Preview**. Copilot has an **App brief** expander (owner brief + questions; **Save** / **Save & regenerate**) |
+| Studio | **Build this app** / regenerate; header **Open Preview**. Preview has an **App brief** expander (owner brief + questions; **Save** / **Save & regenerate**). **Build this app** and **Fix with CoCo** are sent to Ask CoCo |
 | Admin | Type cards on the left (Edit / Delete / Create); paired Topics / Context and Allows / Does not; question cards; **Guidelines skills** editors for `types/shared/SKILL.md` and the type `SKILL.md` |
 
 **Build with CoCo** needs the CLI. **Build demo scaffold** writes a disconnected `streamlit_app.py` from the fixture CSV (no warehouse, no agent).
@@ -65,5 +65,5 @@ Each app type is one folder under `types/`. The shared generation skill sits nex
 
 Agent / generated files:
 
-- Host cwd for Copilot: `examples/app_builder/out/<slug>/` (`brief.json`, `BRIEF.md`, `sketches/`, `streamlit_app.py`)
+- Working folder of Ask CoCo: `examples/app_builder/out/<slug>/` (`brief.json`, `BRIEF.md`, `sketches/`, `streamlit_app.py`)
 - Preview: `app_viewer()` on that folder (port **8513**)