streamlit-nightly 1.45.1.dev20250507__py3-none-any.whl → 1.45.1.dev20250509__py3-none-any.whl

streamlit/testing/v1/local_script_runner.py

@@ -43,9 +43,9 @@ class LocalScriptRunner(ScriptRunner):
         script_path: str,
         session_state: SafeSessionState,
         pages_manager: PagesManager,
-        args=None,
-        kwargs=None,
-    ):
+        args: Any = None,
+        kwargs: Any = None,
+    ) -> None:
         """Initializes the ScriptRunner for the given script_path."""
 
         assert os.path.isfile(script_path), f"File not found at {script_path}"
@@ -73,7 +73,7 @@ class LocalScriptRunner(ScriptRunner):
         self.event_data: list[Any] = []
 
         def record_event(
-            sender: ScriptRunner | None, event: ScriptRunnerEvent, **kwargs
+            sender: ScriptRunner | None, event: ScriptRunnerEvent, **kwargs: Any
         ) -> None:
             # Assert that we're not getting unexpected `sender` params
             # from ScriptRunner.on_event
@@ -103,7 +103,7 @@ class LocalScriptRunner(ScriptRunner):
     def run(
         self,
         widget_state: WidgetStates | None = None,
-        query_params=None,
+        query_params: dict[str, Any] | None = None,
         timeout: float = 3,
         page_hash: str = "",
     ) -> ElementTree:

streamlit/testing/v1/util.py

@@ -15,13 +15,18 @@
 from __future__ import annotations
 
 from contextlib import contextmanager
-from typing import Any
+from typing import TYPE_CHECKING, Any, Callable
 
 from streamlit import config
 
+if TYPE_CHECKING:
+    from collections.abc import Generator
+
 
 @contextmanager
-def patch_config_options(config_overrides: dict[str, Any]):
+def patch_config_options(
+    config_overrides: dict[str, Any],
+) -> Generator[None, None, None]:
     """A context manager that overrides config options. It can
     also be used as a function decorator.
 
@@ -43,10 +48,12 @@ def patch_config_options(config_overrides: dict[str, Any]):
         yield
 
 
-def build_mock_config_get_option(overrides_dict):
+def build_mock_config_get_option(
+    overrides_dict: dict[str, Any],
+) -> Callable[[str], Any]:
     orig_get_option = config.get_option
 
-    def mock_config_get_option(name):
+    def mock_config_get_option(name: str) -> Any:
         if name in overrides_dict:
             return overrides_dict[name]
         return orig_get_option(name)

streamlit/type_util.py

@@ -119,8 +119,7 @@ def is_type(obj: object, fqn_type_pattern: str | re.Pattern[str]) -> bool:
     fqn_type = get_fqn_type(obj)
     if isinstance(fqn_type_pattern, str):
         return fqn_type_pattern == fqn_type
-    else:
-        return fqn_type_pattern.match(fqn_type) is not None
+    return fqn_type_pattern.match(fqn_type) is not None
 
 
 def _is_type_instance(obj: object, type_to_check: str) -> bool:
@@ -161,7 +160,7 @@ def to_bytes(obj: BytesLike) -> bytes:
     """
     if isinstance(obj, bytearray):
         return bytes(obj)
-    elif isinstance(obj, bytes):
+    if isinstance(obj, bytes):
         return obj
 
     raise RuntimeError(f"{obj} is not convertible to bytes")
@@ -317,7 +316,7 @@ def is_pydeck(obj: object) -> TypeGuard[Deck]:
     return is_type(obj, "pydeck.bindings.deck.Deck")
 
 
-def is_pydantic_model(obj) -> bool:
+def is_pydantic_model(obj: object) -> bool:
     """True if input looks like a Pydantic model instance."""
 
     if isinstance(obj, type):

streamlit/user_info.py

@@ -17,6 +17,7 @@ from __future__ import annotations
 from collections.abc import Iterator, Mapping
 from typing import (
     TYPE_CHECKING,
+    Any,
     Final,
     NoReturn,
     Union,
@@ -548,10 +549,10 @@ class DeprecatedUserInfoProxy(UserInfoProxy):
     Streamlit.
     """
 
-    def __getattribute__(self, name: str):
+    def __getattribute__(self, name: str) -> Any:
         maybe_show_deprecated_user_warning()
         return super().__getattribute__(name)
 
-    def __getitem__(self, key: str):
+    def __getitem__(self, key: str) -> Any:
         maybe_show_deprecated_user_warning()
         return super().__getitem__(key)

streamlit/util.py

@@ -27,7 +27,7 @@ def memoize(func: Callable[..., Any]) -> Callable[..., Any]:
     result: list[Any] = []
 
     @functools.wraps(func)
-    def wrapped_func():
+    def wrapped_func() -> Any:
         if not result:
             result.append(func())
         return result[0]

streamlit/watcher/event_based_path_watcher.py

@@ -243,7 +243,7 @@ class WatchedPath:
         *,  # keyword-only arguments:
         glob_pattern: str | None = None,
         allow_nonexistent: bool = False,
-    ):
+    ) -> None:
         self.md5 = md5
         self.modification_time = modification_time
 

streamlit/watcher/folder_black_list.py

@@ -67,7 +67,7 @@ class FolderBlackList:
     def __repr__(self) -> str:
         return util.repr_(self)
 
-    def is_blacklisted(self, filepath):
+    def is_blacklisted(self, filepath: str) -> bool:
         """Test if filepath is in the blacklist.
 
         Parameters

streamlit/watcher/local_sources_watcher.py

@@ -46,7 +46,7 @@ PathWatcher = None
 
 
 class LocalSourcesWatcher:
-    def __init__(self, pages_manager: PagesManager):
+    def __init__(self, pages_manager: PagesManager) -> None:
         self._pages_manager = pages_manager
         self._main_script_path = os.path.abspath(self._pages_manager.main_script_path)
         self._watch_folders = config.get_option("server.folderWatchList")
@@ -108,7 +108,7 @@ class LocalSourcesWatcher:
     def register_file_change_callback(self, cb: Callable[[str], None]) -> None:
         self._on_path_changed.append(cb)
 
-    def on_path_changed(self, filepath):
+    def on_path_changed(self, filepath: str) -> None:
         _LOGGER.debug("Path changed: %s", filepath)
         if filepath not in self._watched_modules:
             # Check if this is a file in a watched directory
@@ -143,7 +143,7 @@ class LocalSourcesWatcher:
         for cb in self._on_path_changed:
             cb(filepath)
 
-    def close(self):
+    def close(self) -> None:
         for wm in self._watched_modules.values():
             wm.watcher.close()
         self._watched_modules = {}
@@ -190,10 +190,10 @@ class LocalSourcesWatcher:
         wm.watcher.close()
         del self._watched_modules[filepath]
 
-    def _file_is_new(self, filepath):
+    def _file_is_new(self, filepath: str) -> bool:
         return filepath not in self._watched_modules
 
-    def _file_should_be_watched(self, filepath):
+    def _file_should_be_watched(self, filepath: str) -> bool:
         # Using short circuiting for performance.
         return self._file_is_new(filepath) and (
             file_util.file_is_in_folder_glob(filepath, self._script_folder)

streamlit/watcher/path_watcher.py

@@ -38,7 +38,7 @@ class NoOpPathWatcher:
         *,  # keyword-only arguments:
         glob_pattern: str | None = None,
         allow_nonexistent: bool = False,
-    ):
+    ) -> None:
         pass
 
 

streamlit/web/bootstrap.py

@@ -141,7 +141,8 @@ def _fix_pydeck_mapbox_api_warning() -> None:
     will throw an exception.
     """
 
-    os.environ["MAPBOX_API_KEY"] = config.get_option("mapbox.token")
+    if "MAPBOX_API_KEY" not in os.environ:
+        os.environ["MAPBOX_API_KEY"] = config.get_option("mapbox.token")
 
 
 def _maybe_print_static_folder_warning(main_script_path: str) -> None:

streamlit/web/cli.py

@@ -63,10 +63,12 @@ def _convert_config_option_to_click_option(
     }
 
 
-def _make_sensitive_option_callback(config_option: ConfigOption):
-    def callback(_ctx: click.Context, _param: click.Parameter, cli_value) -> None:
+def _make_sensitive_option_callback(
+    config_option: ConfigOption,
+) -> Callable[[click.Context, click.Parameter, Any], None]:
+    def callback(_ctx: click.Context, _param: click.Parameter, cli_value: Any) -> None:
         if cli_value is None:
-            return None
+            return
         raise SystemExit(
             f"Setting {config_option.key!r} option using the CLI flag is not allowed. "
             f"Set this option in the configuration file or environment "
@@ -104,7 +106,7 @@ def configurator_options(func: F) -> F:
             type=parsed_parameter["type"],
             multiple=parsed_parameter["multiple"],
             **click_option_kwargs,
-        )
+        )  # type: ignore
         func = config_option(func)
     return func
 
@@ -198,7 +200,7 @@ def main_hello(**kwargs):
 @configurator_options
 @click.argument("target", required=True, envvar="STREAMLIT_RUN_TARGET")
 @click.argument("args", nargs=-1)
-def main_run(target: str, args=None, **kwargs):
+def main_run(target: str, args: list[str] | None = None, **kwargs: Any) -> None:
     """Run a Python script, piping stderr to Streamlit.
 
     The script can be local or it can be an url. In the latter case, Streamlit
@@ -216,10 +218,9 @@ def main_run(target: str, args=None, **kwargs):
                 "Streamlit requires raw Python (.py) files, but the provided file has no extension.\n"
                 "For more information, please see https://docs.streamlit.io"
             )
-        else:
-            raise click.BadArgumentUsage(
-                f"Streamlit requires raw Python (.py) files, not {extension}.\nFor more information, please see https://docs.streamlit.io"
-            )
+        raise click.BadArgumentUsage(
+            f"Streamlit requires raw Python (.py) files, not {extension}.\nFor more information, please see https://docs.streamlit.io"
+        )
 
     if url_util.is_url(target):
         from streamlit.temporary_directory import TemporaryDirectory
@@ -260,7 +261,7 @@ def _get_command_line_as_string() -> str | None:
 
 
 def _main_run(
-    file,
+    file: str,
     args: list[str] | None = None,
     flag_options: dict[str, Any] | None = None,
 ) -> None:
@@ -368,7 +369,7 @@ def test_prog_name():
 
 @main.command("init")
 @click.argument("directory", required=False)
-def main_init(directory: str | None = None):
+def main_init(directory: str | None = None) -> None:
     """Initialize a new Streamlit project.
 
     If DIRECTORY is specified, create it and initialize the project there.

streamlit/web/server/browser_websocket_handler.py

@@ -154,7 +154,7 @@ class BrowserWebSocketHandler(WebSocketHandler, SessionClient):
 
         return None
 
-    def open(self, *args, **kwargs) -> Awaitable[None] | None:
+    def open(self, *args: Any, **kwargs: Any) -> Awaitable[None] | None:
         user_info: dict[str, str | bool | None] = {}
 
         existing_session_id = None

streamlit/web/server/component_request_handler.py

@@ -30,7 +30,7 @@ _LOGGER: Final = get_logger(__name__)
 
 
 class ComponentRequestHandler(tornado.web.RequestHandler):
-    def initialize(self, registry: BaseComponentRegistry):
+    def initialize(self, registry: BaseComponentRegistry) -> None:
         self._registry = registry
 
     def get(self, path: str) -> None:

streamlit/web/server/media_file_handler.py

@@ -14,6 +14,7 @@
 
 from __future__ import annotations
 
+from typing import Any
 from urllib.parse import quote
 
 import tornado.web
@@ -114,7 +115,7 @@ class MediaFileHandler(tornado.web.StaticFileHandler):
     @classmethod
     def get_content(
         cls, abspath: str, start: int | None = None, end: int | None = None
-    ):
+    ) -> Any:
         _LOGGER.debug("MediaFileHandler: GET %s", abspath)
 
         try:

streamlit/web/server/oauth_authlib_routes.py

@@ -14,7 +14,7 @@
 from __future__ import annotations
 
 import json
-from typing import Any, Final
+from typing import Any, Final, cast
 from urllib.parse import urlparse
 
 import tornado.web
@@ -74,6 +74,13 @@ class AuthHandlerMixin(tornado.web.RequestHandler):
 
     def set_auth_cookie(self, user_info: dict[str, Any]) -> None:
         serialized_cookie_value = json.dumps(user_info)
+
+        # log error if cookie value is larger than 4096 bytes
+        if len(serialized_cookie_value.encode()) > 4096:
+            _LOGGER.error(
+                "Authentication cookie size exceeds maximum browser limit of 4096 bytes. Authentication may fail."
+            )
+
         try:
             # We don't specify Tornado secure flag here because it leads to missing cookie on Safari.
             # The OIDC flow should work only on secure context anyway (localhost or HTTPS),
@@ -161,7 +168,7 @@ class AuthCallbackHandler(AuthHandlerMixin, tornado.web.RequestHandler):
 
         client, _ = create_oauth_client(provider)
         token = client.authorize_access_token(self)
-        user = token.get("userinfo")
+        user = cast("dict[str, Any]", token.get("userinfo"))
 
         cookie_value = dict(user, origin=origin, is_logged_in=True)
         if user:

streamlit/web/server/oidc_mixin.py

@@ -12,6 +12,10 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
+# ruff: noqa: ANN201
+
+from typing import Any, cast
+
 import tornado.web
 from authlib.integrations.base_client import (  # type: ignore[import-untyped]
     BaseApp,
@@ -38,8 +42,11 @@ class TornadoOAuth2App(OAuth2Mixin, OpenIDMixin, BaseApp):  # type: ignore[misc]
         return result
 
     def authorize_redirect(
-        self, request_handler: tornado.web.RequestHandler, redirect_uri=None, **kwargs
-    ):
+        self,
+        request_handler: tornado.web.RequestHandler,
+        redirect_uri: Any = None,
+        **kwargs: Any,
+    ) -> None:
         """Create a HTTP Redirect for Authorization Endpoint.
 
         :param request_handler: HTTP request instance from Tornado.
@@ -52,8 +59,8 @@ class TornadoOAuth2App(OAuth2Mixin, OpenIDMixin, BaseApp):  # type: ignore[misc]
         request_handler.redirect(auth_context["url"], status=302)
 
     def authorize_access_token(
-        self, request_handler: tornado.web.RequestHandler, **kwargs
-    ):
+        self, request_handler: tornado.web.RequestHandler, **kwargs: Any
+    ) -> dict[str, Any]:
         """
         :param request_handler: HTTP request instance from Tornado.
         :return: A token dict.
@@ -82,9 +89,9 @@ class TornadoOAuth2App(OAuth2Mixin, OpenIDMixin, BaseApp):  # type: ignore[misc]
                 token, nonce=state_data["nonce"], claims_options=claims_options
             )
             token = {**token, "userinfo": userinfo}
-        return token
+        return cast("dict[str, Any]", token)
 
-    def _save_authorize_data(self, **kwargs):
+    def _save_authorize_data(self, **kwargs: Any) -> None:
         """Authlib underlying uses the concept of "session" to store state data.
         In Tornado, we don't have a session, so we use the framework's cache option.
         """

streamlit/web/server/routes.py

@@ -15,7 +15,7 @@
 from __future__ import annotations
 
 import os
-from typing import TYPE_CHECKING
+from typing import TYPE_CHECKING, Any
 
 import tornado.web
 
@@ -48,7 +48,7 @@ class StaticFileHandler(tornado.web.StaticFileHandler):
         path: str,
         default_filename: str | None = None,
         reserved_paths: Sequence[str] = (),
-    ):
+    ) -> None:
         self._reserved_paths = reserved_paths
 
         super().initialize(path, default_filename)
@@ -86,7 +86,7 @@ class StaticFileHandler(tornado.web.StaticFileHandler):
 
             raise
 
-    def write_error(self, status_code: int, **kwargs) -> None:
+    def write_error(self, status_code: int, **kwargs: Any) -> None:
         if status_code == 404:
             index_file = os.path.join(file_util.get_static_dir(), "index.html")
             self.render(index_file)

streamlit/web/server/server.py

@@ -244,7 +244,7 @@ def start_listening_tcp_socket(http_server: HTTPServer) -> None:
 
 
 class Server:
-    def __init__(self, main_script_path: str, is_hello: bool):
+    def __init__(self, main_script_path: str, is_hello: bool) -> None:
         """Create the server. It won't be started yet."""
         _set_tornado_log_levels()
         self.initialize_mimetypes()

streamlit/web/server/server_util.py

@@ -16,7 +16,7 @@
 
 from __future__ import annotations
 
-from typing import TYPE_CHECKING, Callable, Final, Literal
+from typing import TYPE_CHECKING, Callable, Final, Literal, cast
 from urllib.parse import urljoin
 
 from streamlit import config, net_util, url_util
@@ -87,12 +87,12 @@ def get_cookie_secret() -> str:
     return cookie_secret
 
 
-def is_xsrf_enabled():
+def is_xsrf_enabled() -> bool:
     csrf_enabled = config.get_option("server.enableXsrfProtection")
     if not csrf_enabled and secrets_singleton.load_if_toml_exists():
         auth_section = secrets_singleton.get("auth", None)
         csrf_enabled = csrf_enabled or auth_section is not None
-    return csrf_enabled
+    return cast("bool", csrf_enabled)
 
 
 def _get_server_address_if_manually_set() -> str | None:
@@ -102,17 +102,18 @@ def _get_server_address_if_manually_set() -> str | None:
 
 
 def make_url_path_regex(
-    *path, trailing_slash: Literal["optional", "required", "prohibited"] = "optional"
+    *path: str,
+    trailing_slash: Literal["optional", "required", "prohibited"] = "optional",
 ) -> str:
     """Get a regex of the form ^/foo/bar/baz/?$ for a path (foo, bar, baz)."""
-    path = [x.strip("/") for x in path if x]  # Filter out falsely components.
+    filtered_paths = [x.strip("/") for x in path if x]  # Filter out falsely components.
     path_format = r"^/%s$"
     if trailing_slash == "optional":
         path_format = r"^/%s/?$"
     elif trailing_slash == "required":
         path_format = r"^/%s/$"
 
-    return path_format % "/".join(path)
+    return path_format % "/".join(filtered_paths)
 
 
 def get_url(host_ip: str) -> str:

streamlit/web/server/upload_file_request_handler.py

@@ -35,7 +35,7 @@ class UploadFileRequestHandler(tornado.web.RequestHandler):
         self,
         file_mgr: MemoryUploadedFileManager,
         is_active_session: Callable[[str], bool],
-    ):
+    ) -> None:
         """
         Parameters
         ----------
@@ -49,7 +49,7 @@ class UploadFileRequestHandler(tornado.web.RequestHandler):
         self._file_mgr = file_mgr
         self._is_active_session = is_active_session
 
-    def set_default_headers(self):
+    def set_default_headers(self) -> None:
         self.set_header("Access-Control-Allow-Methods", "PUT, OPTIONS, DELETE")
         self.set_header("Access-Control-Allow-Headers", "Content-Type")
         if is_xsrf_enabled():
@@ -63,7 +63,7 @@ class UploadFileRequestHandler(tornado.web.RequestHandler):
         elif routes.allow_cross_origin_requests():
             self.set_header("Access-Control-Allow-Origin", "*")
 
-    def options(self, **kwargs):
+    def options(self, **kwargs: Any) -> None:
         """/OPTIONS handler for preflight CORS checks.
 
         When a browser is making a CORS request, it may sometimes first
@@ -83,7 +83,7 @@ class UploadFileRequestHandler(tornado.web.RequestHandler):
         self.set_status(204)
         self.finish()
 
-    def put(self, **kwargs):
+    def put(self, **kwargs: Any) -> None:
         """Receive an uploaded file and add it to our UploadedFileManager."""
 
         args: dict[str, list[bytes]] = {}
@@ -129,7 +129,7 @@ class UploadFileRequestHandler(tornado.web.RequestHandler):
         self._file_mgr.add_file(session_id=session_id, file=uploaded_files[0])
         self.set_status(204)
 
-    def delete(self, **kwargs):
+    def delete(self, **kwargs: Any) -> None:
         """Delete file request handler."""
         session_id = self.path_kwargs["session_id"]
         file_id = self.path_kwargs["file_id"]

{streamlit_nightly-1.45.1.dev20250507.dist-info → streamlit_nightly-1.45.1.dev20250509.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: streamlit-nightly
-Version: 1.45.1.dev20250507
+Version: 1.45.1.dev20250509
 Summary: A faster way to build and share data apps
 Home-page: https://streamlit.io
 Author: Snowflake Inc