feat(ai): ecosysteme d'outils phase 2 - recherche a cle, cache/retry, Playwright, crawl, Gitea/GitHub, documents (#92)

backend/services/mutations.py

@@ -44,7 +44,7 @@ def _ensure_writable(root: Path) -> None:
         raise ServiceError("Vault is read-only", code="read_only", status=403)
 
 
-def _validate_extension(file_path: Path, *, allow_images: bool = False) -> None:
+def _validate_extension(file_path: Path, *, allow_images: bool = False, allow_docs: bool = False) -> None:
     """Reject unsupported file extensions (400)."""
     from backend.indexer import SUPPORTED_EXTENSIONS
 
@@ -53,6 +53,9 @@ def _validate_extension(file_path: Path, *, allow_images: bool = False) -> None:
     if allow_images:
         from backend.attachment_indexer import IMAGE_EXTENSIONS
         allowed = allowed | IMAGE_EXTENSIONS
+    if allow_docs:
+        # Office documents produced by the AI tool layer (#92).
+        allowed = allowed | {".xlsx", ".docx"}
 
     if ext not in allowed and file_path.name.lower() not in ("dockerfile", "makefile"):
         raise ServiceError(
@@ -715,17 +718,20 @@ def save_raw_file(
     content: bytes,
     *,
     overwrite: bool = True,
+    allow_docs: bool = False,
 ) -> dict[str, Any]:
     """Save a binary or text file to a vault (e.g. from upload / drag-and-drop).
 
     Creates parent directories automatically and safely validates the path.
-    Supports supported text extensions, images and Excalidraw files.
+    Supports supported text extensions, images, Excalidraw files and — with
+    ``allow_docs`` — Office documents (.xlsx/.docx) produced by the AI tools.
 
     Args:
         vault_name: Name of the vault.
         path: Vault-relative path.
         content: Raw bytes to write.
         overwrite: When True, replace existing files (with backup).
+        allow_docs: Also accept .xlsx/.docx extensions (AI document tools).
 
     Returns:
         Dict with ``success``, ``vault``, ``path``, and ``size``.
@@ -733,7 +739,7 @@ def save_raw_file(
     root = get_vault_root(vault_name)
     _ensure_writable(root)
     file_path = resolve_safe_path(root, path)
-    _validate_extension(file_path, allow_images=True)
+    _validate_extension(file_path, allow_images=True, allow_docs=allow_docs)
 
     rel_path = _rel(root, file_path)