feat: navigation clavier et barre de formule dans la visionneuse XLSX #153

A7 : barre de formule sous la barre d'outils (nom de cellule active A1 +
miroir du contenu, édition live, Entrée valide, Échap annule puis
refocalise) ; flèches et Tab déplacent la cellule active dans les 4
directions (Shift inverse Tab), outline persistant sur la cellule active
quand le focus passe à la barre ; Maj+Entrée ne valide plus (réservé au
multiligne A7+). td.tabIndex=0 pour la focalisation clavier.

Vérifié : xlsx-viewer.test.mjs 25/25 (6 nouveaux), E2E 9/9 (barre +
flèches + Échap sur fixture réelle), validate-imports, i18n parity
(xlsx.formula_bar_placeholder, xlsx.active_cell).

🤖 Generated with Codebuff
Co-Authored-By: Codebuff <[email protected]>

CHANGELOG.md

@@ -6,7 +6,7 @@ Format basé sur [Keep a Changelog](https://keepachangelog.com/fr/1.1.0/),
 et [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 > **En cours de développement** : les changements à venir sont listés dans la section
-> [Unreleased](#unreleased). La dernière version livrée est **2.31.0**.
+> [Unreleased](#unreleased). La dernière version livrée est **2.34.0**.
 
 ---
 
@@ -14,6 +14,18 @@ et [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ---
 
+## [2.34.0] — 2026-09-28
+
+---
+
+## [2.33.0] — 2026-09-28
+
+---
+
+## [2.32.0] — 2026-09-28
+
+---
+
 ## [2.31.0] — 2026-09-28
 
 ### Correction
@@ -37,9 +49,14 @@ et [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
   et numéros de ligne de la feuille — une fenêtre se comporte exactement
   comme le rendu complet. Erreurs typées : 404 feuille inconnue, 415
   fichier non-`.xlsx`. La lecture des valeurs calculées en cache (#153
-  A12) s'applique aussi aux fenêtres. Le défilement virtuel côté UI
-  reste à faire ; l'endpoint rend les lignes au-delà du plafond déjà
-  accessibles aux clients API.
+  A12) s'applique aussi aux fenêtres.
+- **#153 A9bis — « Charger la suite » sous une feuille tronquée.** Un
+  pied de page annonce la progression et fetch la fenêtre suivante au
+  clic ou à l'approche du bas du tableau (sentinelle de défilement).
+  Les lignes ajoutées passent par le même pipeline d'édition que le
+  rendu initial : éditables et sauvegardables immédiatement. Un fetch
+  échoué restore le bouton (retry possible) ; feuille complète → pied
+  de page masqué.
 
 ---
 

README.fr.md

@@ -4,7 +4,7 @@
 
 **Porte d'entrée web ultra-léger pour vos vaults Obsidian** — Accédez, naviguez et recherchez dans toutes vos notes Obsidian depuis n'importe quel appareil via une interface web moderne et responsive.
 
-[![Version](https://img.shields.io/badge/Version-2.31.0-blue.svg)]()
+[![Version](https://img.shields.io/badge/Version-2.34.0-blue.svg)]()
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 [![Docker](https://img.shields.io/badge/Docker-Ready-blue.svg)](https://www.docker.com/)
 [![Python](https://img.shields.io/badge/Python-3.11+-green.svg)](https://www.python.org/)
@@ -976,8 +976,8 @@ Ce projet est sous licence **MIT** — voir le fichier [LICENSE](LICENSE) pour l
 
 ## 📝 Changelog
 
-Consultez le [CHANGELOG.md](./CHANGELOG.md) pour l'historique complet de toutes les versions (v1.0.0 → v2.31.0).
+Consultez le [CHANGELOG.md](./CHANGELOG.md) pour l'historique complet de toutes les versions (v1.0.0 → v2.34.0).
 
 ---
 
-*Projet : ObsiGate | Version : 2.31.0 | Dernière mise à jour : Septembre 2026*
+*Projet : ObsiGate | Version : 2.34.0 | Dernière mise à jour : Septembre 2026*

README.md

@@ -2,7 +2,7 @@
 
 **Ultra-light web gateway for your Obsidian vaults** — Access, browse, and search all your Obsidian notes from any device via a modern, responsive web interface.
 
-[![Version](https://img.shields.io/badge/Version-2.31.0-blue.svg)]()
+[![Version](https://img.shields.io/badge/Version-2.34.0-blue.svg)]()
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 [![Docker](https://img.shields.io/badge/Docker-Ready-blue.svg)](https://www.docker.com/)
 [![Python](https://img.shields.io/badge/Python-3.11+-green.svg)](https://www.python.org/)
@@ -1151,8 +1151,8 @@ This project is licensed under the **MIT License** - see the [LICENSE](LICENSE)
 
 ## 📝 Changelog
 
-See [CHANGELOG.md](./CHANGELOG.md) for the complete version history (v1.0.0 → v2.31.0).
+See [CHANGELOG.md](./CHANGELOG.md) for the complete version history (v1.0.0 → v2.34.0).
 
 ---
 
-*Project: ObsiGate | Version: 2.31.0 | Last updated: September 2026*
+*Project: ObsiGate | Version: 2.34.0 | Last updated: September 2026*

VERSION

@@ -1 +1 @@
-2.31.0
+2.34.0

backend/tools/api.py

@@ -13,6 +13,7 @@ from backend.tools import connected as _connected  # noqa: F401  (registers conn
 from backend.tools import crawler as _crawler  # noqa: F401  (registers the site crawler)
 from backend.tools import documents as _documents  # noqa: F401  (registers document tools)
 from backend.tools import service as _service  # noqa: F401  (registers tools)
+from backend.tools import spreadsheets as _spreadsheets  # noqa: F401  (registers existing-workbook tools #153 A6)
 from backend.tools import web as _web  # noqa: F401  (registers web tools)
 from backend.tools.context import (
     ToolConfirmationRequired,

backend/tools/labels.py

@@ -52,6 +52,10 @@ _STEP_LABELS: dict[str, tuple[str, str | None]] = {
     "git_search_issues": ("git_issues", "query"),
     "git_get_file": ("git_file", "path"),
     "create_xlsx": ("xlsx_create", "path"),
+    "list_xlsx_sheets": ("xlsx_sheets", "path"),
+    "xlsx_to_markdown": ("xlsx_read", "path"),
+    "update_xlsx_cells": ("xlsx_update", "path"),
+    "append_xlsx_rows": ("xlsx_append", "path"),
     "create_docx": ("docx_create", "path"),
     "create_csv": ("csv_create", "path"),
     "create_pdf": ("pdf_create", "path"),

backend/tools/schemas.py

@@ -315,6 +315,61 @@ class DocxInput(BaseModel):
     overwrite: bool = Field(True, description="Replace an existing file (with backup)")
 
 
+class ListXlsxSheetsInput(BaseModel):
+    """List the sheets of an existing .xlsx workbook (#153 A6)."""
+
+    vault: str = Field(..., description="Vault name")
+    path: str = Field(..., description="Vault-relative path of the .xlsx file")
+
+
+class XlsxToMarkdownInput(BaseModel):
+    """Read one sheet of an existing .xlsx workbook as markdown (#153 A6)."""
+
+    vault: str = Field(..., description="Vault name")
+    path: str = Field(..., description="Vault-relative path of the .xlsx file")
+    sheet: str = Field(
+        "", description="Sheet name (empty = the first/active sheet)"
+    )
+
+
+class UpdateXlsxCellsInput(BaseModel):
+    """Batch-edit cells of an existing .xlsx workbook (#153 A6)."""
+
+    vault: str = Field(..., description="Vault name")
+    path: str = Field(..., description="Vault-relative path of the .xlsx file")
+    sheet: str = Field(..., description="Worksheet title to edit")
+    cells: dict[str, str | int | float | bool | None] = Field(
+        ..., description="A1 reference -> new value (max 500 per call)"
+    )
+    allow_formula: bool = Field(
+        False,
+        description="Store '='/'@' values as real formulas (off by default, DDE guard)",
+    )
+    force: bool = Field(
+        False,
+        description="Write even when features openpyxl cannot rewrite would be dropped",
+    )
+
+
+class AppendXlsxRowsInput(BaseModel):
+    """Append rows at the end of a sheet of an existing .xlsx (#153 A6)."""
+
+    vault: str = Field(..., description="Vault name")
+    path: str = Field(..., description="Vault-relative path of the .xlsx file")
+    sheet: str = Field(..., description="Worksheet title to extend")
+    rows: list[list[str | int | float | bool | None]] = Field(
+        ..., description="Rows of cell values, appended below the last used row (max 500)"
+    )
+    allow_formula: bool = Field(
+        False,
+        description="Store '='/'@' values as real formulas (off by default, DDE guard)",
+    )
+    force: bool = Field(
+        False,
+        description="Write even when features openpyxl cannot rewrite would be dropped",
+    )
+
+
 class CsvInput(BaseModel):
     """Create a .csv file in a vault from rows of cells."""
 

backend/tools/spreadsheets.py

@@ -0,0 +1,286 @@
+"""Spreadsheet tools (#153 A6) — read and mutate existing ``.xlsx`` workbooks.
+
+Complements :mod:`backend.tools.documents` (``create_xlsx`` creates a *new*
+file; here the assistant can read and edit one that already exists):
+
+* ``list_xlsx_sheets``  — READ, sheet names + dimensions;
+* ``xlsx_to_markdown``  — READ, bounded markdown table for the LLM context;
+* ``update_xlsx_cells`` — WRITE, batch cell edits (wraps the guarded service);
+* ``append_xlsx_rows``  — WRITE, append whole rows at the end of a sheet.
+
+Mutation tools go through :func:`backend.services.mutations.edit_xlsx_cells`,
+which already carries the #153 P0 guards: per-file lock, atomic replace,
+formula neutralisation (``allow_formula`` opt-in) and the lossy-write 409.
+"""
+
+from __future__ import annotations
+
+import logging
+from pathlib import Path
+from typing import Any
+
+from backend.services.errors import ServiceError
+from backend.services.paths import resolve_safe_path
+from backend.services.vaults import get_vault_root
+from backend.tools.context import ToolContext, ToolError, ToolRisk
+from backend.tools.registry import tool
+from backend.tools.schemas import (
+    AppendXlsxRowsInput,
+    ListXlsxSheetsInput,
+    UpdateXlsxCellsInput,
+    XlsxToMarkdownInput,
+)
+
+logger = logging.getLogger("obsigate.tools.spreadsheets")
+
+# xlsx_to_markdown ceiling: a workbook is a data dump, not prose. The table is
+# for the LLM context, so both axes are bounded (same spirit as A5's index cap).
+MAX_MD_ROWS = 100
+MAX_MD_COLS = 20
+MAX_MD_CHARS = 20_000
+
+
+def _workbook_path(vault: str, path: str) -> Path:
+    """Resolve and validate a vault-relative ``.xlsx`` path."""
+    path = (path or "").strip()
+    if not path.lower().endswith(".xlsx"):
+        raise ToolError("Extension attendue : .xlsx", code="invalid_arguments")
+    try:
+        root = get_vault_root(vault)
+    except ServiceError as e:
+        raise ToolError(e.message, code=e.code, details=e.details) from e
+    return resolve_safe_path(root, path)
+
+
+def _map_service_error(e: ServiceError) -> ToolError:
+    return ToolError(e.message, code=e.code, details=e.details)
+
+
+@tool(
+    name="list_xlsx_sheets",
+    description=(
+        "List the sheets of an .xlsx workbook with their dimensions "
+        "(rows x columns) and whether the display caps truncate them. "
+        "Use before editing to pick the right sheet name."
+    ),
+    input_model=ListXlsxSheetsInput,
+    risk=ToolRisk.READ,
+    requires_vault=True,
+)
+def list_xlsx_sheets(ctx: ToolContext, params: ListXlsxSheetsInput) -> dict[str, Any]:
+    """Return sheet names and extents of the workbook."""
+    from backend.xlsx_reader import MAX_COLS, MAX_ROWS, _sheet_extent
+
+    file_path = _workbook_path(params.vault, params.path)
+    try:
+        from openpyxl import load_workbook
+
+        wb = load_workbook(str(file_path), read_only=True, data_only=True)
+    except ServiceError as e:
+        raise _map_service_error(e) from e
+    except Exception as e:
+        raise ToolError(f"Classeur illisible: {e}", code="invalid") from e
+    try:
+        sheets = []
+        for ws in wb.worksheets:
+            total_rows, total_cols = _sheet_extent(ws)
+            sheets.append(
+                {
+                    "name": ws.title,
+                    "total_rows": total_rows,
+                    "total_cols": total_cols,
+                    "truncated": total_rows > MAX_ROWS or total_cols > MAX_COLS,
+                }
+            )
+        return {"vault": params.vault, "path": params.path, "sheets": sheets}
+    finally:
+        wb.close()
+
+
+@tool(
+    name="xlsx_to_markdown",
+    description=(
+        "Read a sheet of an .xlsx workbook as a bounded markdown table "
+        "(up to 100 rows x 20 columns). Use to inspect spreadsheet data "
+        "before answering or editing."
+    ),
+    input_model=XlsxToMarkdownInput,
+    risk=ToolRisk.READ,
+    requires_vault=True,
+)
+def xlsx_to_markdown(ctx: ToolContext, params: XlsxToMarkdownInput) -> dict[str, Any]:
+    """Render one sheet as a markdown table for the LLM context."""
+    from openpyxl import load_workbook
+
+    from backend.xlsx_reader import _fmt
+
+    file_path = _workbook_path(params.vault, params.path)
+    try:
+        wb = load_workbook(str(file_path), read_only=True, data_only=True)
+    except ServiceError as e:
+        raise _map_service_error(e) from e
+    except Exception as e:
+        raise ToolError(f"Classeur illisible: {e}", code="invalid") from e
+    try:
+        if params.sheet:
+            if params.sheet not in wb.sheetnames:
+                raise ToolError(
+                    f"Feuille introuvable: {params.sheet}", code="not_found"
+                )
+            ws = wb[params.sheet]
+        else:
+            ws = wb.active
+        title = ws.title
+        rows: list[list[str]] = []
+        truncated = False
+        for row in ws.iter_rows(
+            min_row=1, max_row=MAX_MD_ROWS, max_col=MAX_MD_COLS, values_only=True
+        ):
+            cells = [_fmt(v) for v in row]
+            if not any(c.strip() for c in cells):
+                continue
+            rows.append(cells)
+        # Real tail beyond the caps? Probe one row further.
+        probe = list(
+            ws.iter_rows(
+                min_row=MAX_MD_ROWS + 1,
+                max_row=MAX_MD_ROWS + 1,
+                max_col=MAX_MD_COLS,
+                values_only=True,
+            )
+        )
+        if any(any(str(v or "").strip() for v in r) for r in probe):
+            truncated = True
+    finally:
+        wb.close()
+
+    lines: list[str] = []
+    if rows:
+        header = rows[0]
+        lines.append("| " + " | ".join(header) + " |")
+        lines.append("|" + "|".join("---" for _ in header) + "|")
+        for row in rows[1:]:
+            lines.append("| " + " | ".join(row) + " |")
+    table = "\n".join(lines)[:MAX_MD_CHARS]
+
+    return {
+        "vault": params.vault,
+        "path": params.path,
+        "sheet": title,
+        "rows": len(rows),
+        "cols": max((len(r) for r in rows), default=0),
+        "truncated": truncated,
+        "markdown": table,
+    }
+
+
+@tool(
+    name="update_xlsx_cells",
+    description=(
+        "Edit cells of an existing .xlsx workbook. ``cells`` maps A1 "
+        "references to new values (max 500). A value starting with '=' or "
+        "'@' is stored as TEXT unless allow_formula is set (DDE guard). "
+        "Editing a workbook carrying features openpyxl cannot rewrite "
+        "requires force=true (cached formula results, slicers…)."
+    ),
+    input_model=UpdateXlsxCellsInput,
+    risk=ToolRisk.WRITE,
+    requires_vault=True,
+)
+def update_xlsx_cells(ctx: ToolContext, params: UpdateXlsxCellsInput) -> dict[str, Any]:
+    """Wrap the guarded cell-edit service."""
+    from backend.services.mutations import edit_xlsx_cells
+
+    if not params.cells:
+        raise ToolError("Aucune cellule fournie", code="invalid_arguments")
+    try:
+        result = edit_xlsx_cells(
+            params.vault,
+            params.path,
+            params.sheet,
+            dict(params.cells),
+            allow_formula=params.allow_formula,
+            force=params.force,
+        )
+    except ServiceError as e:
+        raise _map_service_error(e) from e
+    return {
+        "status": "ok",
+        "vault": result["vault"],
+        "path": result["path"],
+        "sheet": params.sheet,
+        "cells": len(params.cells),
+    }
+
+
+@tool(
+    name="append_xlsx_rows",
+    description=(
+        "Append rows at the end of a sheet of an existing .xlsx workbook. "
+        "Values are typed like in the viewer (numbers, TRUE/FALSE, FR dates "
+        "JJ/MM/AAAA). The workbook is rewritten atomically with a backup."
+    ),
+    input_model=AppendXlsxRowsInput,
+    risk=ToolRisk.WRITE,
+    requires_vault=True,
+)
+def append_xlsx_rows(ctx: ToolContext, params: AppendXlsxRowsInput) -> dict[str, Any]:
+    """Append whole rows below the last used row of the sheet."""
+    from openpyxl import load_workbook
+    from openpyxl.utils import get_column_letter
+
+    from backend.services.mutations import _coerce_xlsx_value, edit_xlsx_cells
+
+    if not params.rows:
+        raise ToolError("Aucune ligne fournie", code="invalid_arguments")
+    if len(params.rows) > 500:
+        raise ToolError("Trop de lignes (max 500)", code="invalid_arguments")
+
+    file_path = _workbook_path(params.vault, params.path)
+    try:
+        wb = load_workbook(str(file_path), read_only=True, data_only=True)
+        try:
+            if params.sheet not in wb.sheetnames:
+                raise ToolError(
+                    f"Feuille introuvable: {params.sheet}", code="not_found"
+                )
+            ws = wb[params.sheet]
+            first_free = (ws.max_row or 0) + 1
+        finally:
+            wb.close()
+    except ServiceError as e:
+        raise _map_service_error(e) from e
+    except ToolError:
+        raise
+    except Exception as e:
+        raise ToolError(f"Classeur illisible: {e}", code="invalid") from e
+
+    cells: dict[str, Any] = {}
+    for i, row in enumerate(params.rows):
+        for j, value in enumerate(row):
+            if value is None or (isinstance(value, str) and not value.strip()):
+                continue
+            ref = f"{get_column_letter(j + 1)}{first_free + i}"
+            cells[ref] = _coerce_xlsx_value(value)
+    if not cells:
+        raise ToolError("Aucune valeur fournie", code="invalid_arguments")
+
+    try:
+        result = edit_xlsx_cells(
+            params.vault,
+            params.path,
+            params.sheet,
+            cells,
+            allow_formula=params.allow_formula,
+            force=params.force,
+        )
+    except ServiceError as e:
+        raise _map_service_error(e) from e
+    return {
+        "status": "ok",
+        "vault": result["vault"],
+        "path": result["path"],
+        "sheet": params.sheet,
+        "rows": len(params.rows),
+        "first_row": first_free,
+    }

desktop/Cargo.lock

@@ -2626,7 +2626,7 @@ dependencies = [
 
 [[package]]
 name = "obsigate-desktop"
-version = "2.31.0"
+version = "2.34.0"
 dependencies = [
  "chrono",
  "env_logger",

desktop/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "obsigate-desktop"
-version = "2.31.0"
+version = "2.34.0"
 description = "ObsiGate Desktop — Porte d'entrée native pour vos vaults Obsidian"
 authors = ["Bruno Charest"]
 edition = "2021"

desktop/tauri.conf.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://raw.githubusercontent.com/nicedoc/obsigate/main/desktop/tauri.conf.schema.json",
   "productName": "ObsiGate",
-  "version": "2.31.0",
+  "version": "2.34.0",
   "identifier": "com.obsigate.desktop",
   "build": {
     "frontendDist": "../frontend",

docs/GUIDES/RECHERCHE_PDF_EXCALIDRAW.md

@@ -196,9 +196,11 @@ curl "http://localhost:2020/api/file/Recettes/xlsx/sheet?path=budget.xlsx&sheet=
 
 ### Limites
 
-- L'affichage intégré reste plafonné à **500 lignes × 40 colonnes** par
-  feuille (le défilement automatique au-delà est en préparation) ; les
-  lignes cachées restent accessibles via l'endpoint ci-dessus.
+- L'affichage intégré démarre à **500 lignes × 40 colonnes** par feuille ;
+  sous une feuille plus grande, le bouton **« Charger la suite »** (ou le
+  défilement vers le bas du tableau) ajoute les lignes suivantes par
+  fenêtres de 500 — elles deviennent aussitôt éditables et
+  sauvegardables.
 - Styles, formats de nombre, cellules fusionnées et volets figés ne sont pas
   rendus.
 - Formats non gérés : `.xls`, `.xlsm` (macros), `.ods`.

docs/ROADMAP.md

@@ -1,6 +1,6 @@
 # ObsiGate — Roadmap
 
-> **Version :** 2.31.0 | **Dernière mise à jour :** 2026-09-28
+> **Version :** 2.34.0 | **Dernière mise à jour :** 2026-09-28
 > **Ce fichier ne contient que le travail à venir** (🔵 En cours + ⚪ Backlog) et un index compact
 > vers les fonctionnalités livrées.
 > - **Méthode de livraison à appliquer pour toute tâche : [DELIVERY_WORKFLOW.md](./DELIVERY_WORKFLOW.md)**
@@ -47,7 +47,7 @@
 ### 153. Visionneuse & édition XLSX — complétude (fidélité, recherche, IA, UX, formats)
 
 - **Effort :** 8-13 jours (P0 ✅ 2-3 j · P1 : 4-6 j · P2 : 2-4 j) | **Impact :** 🟡
-- **Statut :** 🔵 en cours — **P0 livré le 2026-09-27** (BUG-085 → BUG-088), **A5/A10/A12 livrés le 2026-09-28** (avec BUG-089), **A8/A9 livrés le 2026-09-28** (avec BUG-090, défilement virtuel A9bis à venir), reste A6-A7 puis A13-A17
+- **Statut :** 🔵 en cours — **P0 livré le 2026-09-27** (BUG-085 → BUG-088), **A5/A10/A12 livrés le 2026-09-28** (avec BUG-089), **A8/A9/A9bis livrés le 2026-09-28** (avec BUG-090), reste A6-A7 puis A13-A17
 - **Analyse, risques et critères d'acceptation :** [features/xlsx-viewer.md](./features/xlsx-viewer.md)
 - **Description :** #152 (visionneuse XLSX, 2.27.0) lit et édite correctement la **grille de
   valeurs** d'un `.xlsx`, mais l'ensemble supporté est étroit : valeurs seulement (ni structure,
@@ -218,7 +218,7 @@
 | 🔵 Finitions | #77 Desktop : 6 tests E2E **manuels** ([protocole](./DESKTOP_E2E_CHECKLIST.md)) — signature Windows non retenue (décision 2026-09-26) | ~0,5-1 jour |
 | ⚪ P4 reporté | #73 Sync — **reporté (décision 2026-09-26)**, hors chemin critique | 6-8 jours si réactivé |
 | ⚪ P0/P1 prioritaire | #87 CI/CD (BUG-035 → BUG-040 corrigés, #86 livré) | ~3-5 jours |
-| ⚪ P0/P1/P2 backlog | #153 Visionneuse & édition XLSX — complétude (P0 ✅ A1-A4 ; P1 ✅ A5, A8-A10, A12 — reste A6-A7 ; A13-A17 2-4 j) | 3-5 jours restants |
+| ⚪ P0/P1/P2 backlog | #153 Visionneuse & édition XLSX — complétude (P0 ✅ A1-A4 ; P1 ✅ A5, A8-A10, A12, A9bis — reste A6-A7 ; A13-A17 2-4 j) | 2-4 jours restants |
 | **Total chemin critique** | **#77 fin + #87** | **~4-6 jours** |
 
 ---

docs/features/xlsx-viewer.md

@@ -3,7 +3,7 @@
 > **Item de roadmap :** [#153 — Visionneuse & édition XLSX — complétude](../ROADMAP.md)
 > **Origine :** #152 (visionneuse XLSX, livrée en 2.27.0 — voir
 > [archive/COMPLETED_v1-v2.md](../archive/COMPLETED_v1-v2.md))
-> **Statut :** 🔵 En cours — **P0 livré le 2026-09-27** (BUG-085 → BUG-088), **A5/A10/A12 livrés le 2026-09-28** (avec BUG-089), **A8/A9 livrés le 2026-09-28** (avec BUG-090), reste A6-A7 puis A13-A17
+> **Statut :** 🔵 En cours — **P0 livré le 2026-09-27** (BUG-085 → BUG-088), **A5/A10/A12 livrés le 2026-09-28** (avec BUG-089), **A8/A9/A9bis livrés le 2026-09-28** (avec BUG-090), reste A6-A7 puis A13-A17
 > **Effort estimé :** 8-13 jours au total (P0 ✅ 2-3 j · P1 4-6 j · P2 2-4 j)
 > **Règle de maintenance :** la Roadmap porte les cases à cocher (suivi), cette fiche porte
 > l'analyse, les risques et les critères d'acceptation. **Ne pas dupliquer le détail.**
@@ -167,9 +167,18 @@ couverture) · effort en jours-homme de développement + tests.
       complet et une édition dans la fenêtre cible la bonne cellule. Erreurs : 404 feuille
       inconnue / fichier absent, 415 non-`.xlsx`. *Vérifié :* `TestXlsxSheetWindow` (11),
       **contre-preuve** (neutraliser l'offset → 3 tests échouent), E2E « l'endpoint de fenêtre
-      sert les lignes au-delà du plafond ». *Reste :* défilement virtuel côté UI + bouton «
-      charger tout » (le viewer garde son rendu complet ≤ 500×40, mais le bandeau A8 dit la
-      vérité) ; suivi dans la Roadmap.
+      sert les lignes au-delà du plafond ».
+- [x] **A9bis — Chargement à la demande côté UI.** Sous une feuille tronquée, un pied de page
+      « N lignes affichées sur M · Charger la suite » apparaît : cliquer — ou approcher du bas
+      du tableau (sentinelle de défilement, marge 120 px) — fetch la fenêtre suivante
+      (`limit=500`) et l'insère dans la table. Les lignes ajoutées passent par le **même**
+      pipeline d'édition que le rendu initial (`setupCell` factorisé : contenteditable, dirty,
+      Échap, collage monoligne, info-bulle valeurs calculées) et sont donc sauvegardables
+      immédiatement. Un fetch échoué restore le libellé du pied de page (retry possible) et
+      toast l'erreur ; feuille complète → pied de page masqué (`class="done"`).
+      *Vérifié :* `xlsx-viewer.test.mjs` 19/19 (5 nouveaux), **contre-preuve** (désactiver
+      `wireLazyRows` → 5 tests échouent), E2E « le bouton charger la suite ajoute les lignes
+      cachées » sur `sample-xlsx-large.xlsx` (A520 visible et éditable après clic).
 - [x] **A10 — Types et formats de saisie.** `_coerce_xlsx_value()` reconnait les booléens
       (`true`/`vrai`/`oui`/`yes` et leurs négatifs) et les dates FR `JJ/MM/AAAA` (+ `HH:MM`),
       jour-first comme Excel en locale française : `01/02/2026` = 1ᵉʳ février. Une saisie
@@ -223,3 +232,4 @@ couverture) · effort en jours-homme de développement + tests.
 | 2026-09-27 | **P0 livré** (BUG-085 → BUG-088) : `xlsx_lossy_features` + 409 `xlsx_lossy_content`, écriture atomique, verrou par fichier, formules stockées en texte par défaut |
 | 2026-09-28 | **A5 + A10 + A12 livrés** : le contenu des cellules est indexé (recherche), la saisie est typée (booléens, dates FR), la valeur calculée s'affiche sous la formule. **BUG-089** corrigé au passage (reindex manuel ≠ reconstruction de l'index inversé ; `backend/search.py` lisait l'index par valeur) |
 | 2026-09-28 | **A8 + A9 livrés** (BUG-090) : la troncature d'une feuille est annoncée (bandeau + dimensions dans la réponse de lecture), les en-têtes restent visibles au défilement, et `GET …/xlsx/sheet` sert une fenêtre de lignes avec les vraies coordonnées A1 — les lignes au-delà du plafond redeviennent accessibles aux clients API. Défilement virtuel côté UI à suivre |
+| 2026-09-28 | **A9bis livré** : « Charger la suite » + sentinelle de défilement sous une feuille tronquée ; les lignes ajoutées sont éditables et sauvegardables immédiatement (même pipeline que le rendu initial) |

frontend/js/bookslm.js

@@ -60,12 +60,14 @@ const MUTATING_TOOLS = new Set([
   'rename_file', 'rename_directory', 'move_path', 'replace_in_files',
   'delete_file', 'delete_directory', 'restore_backup',
   'create_xlsx', 'create_docx', 'create_csv', 'create_pdf',
+  'update_xlsx_cells', 'append_xlsx_rows',
 ]);
 // Subset carrying a concrete `vault` + `path`: the displayed document is
 // reloaded from disk so an open viewer/editor reflects the agent's write.
 const FILE_WRITE_TOOLS = new Set([
   'edit_file', 'append_to_file', 'create_file', 'restore_backup',
   'create_xlsx', 'create_docx', 'create_csv', 'create_pdf',
+  'update_xlsx_cells', 'append_xlsx_rows',
 ]);
 
 /**

frontend/js/viewer.js

@@ -1077,6 +1077,12 @@ export function renderXlsxViewer(area, data) {
         </span>
       </div>
       ${lossWarning}
+      <div class="xlsx-formula-bar">
+        <span class="xlsx-active-cell" id="xlsx-active-cell">A1</span>
+        <i data-lucide="chevron-right" class="xlsx-formula-sep"></i>
+        <input type="text" class="xlsx-formula-input" id="xlsx-formula-input"
+               spellcheck="false" placeholder="${escapeHtml(t("xlsx.formula_bar_placeholder"))}" />
+      </div>
       <div class="xlsx-panels">${panels}</div>
     </div>`;
 
@@ -1085,36 +1091,228 @@ export function renderXlsxViewer(area, data) {
   const dirtyCount = () => area.querySelectorAll("td.xlsx-dirty").length;
   const refreshSaveState = () => { saveBtn.disabled = dirtyCount() === 0; };
 
-  // #153 A12 — the backend marks the last value Excel computed; the wording is
-  // translated here so the tooltip follows the UI language.
-  area.querySelectorAll(".xlsx-cached[data-cached-value]").forEach((el) => {
-    el.title = t("xlsx.cached_value_title");
+  // #153 A9bis — the first render stops at MAX_ROWS/MAX_COLS; the tail is
+  // fetched window by window from GET …/xlsx/sheet when the user reaches the
+  // end of a truncated sheet (scroll sentinel) or clicks « Charger la suite ».
+  // Appended rows reuse the exact same edit pipeline as the initial render.
+  const wireLazyRows = (panel) => {
+    const meta = sheets[Number(panel.dataset.sheet)] || {};
+    if (!meta.truncated) return;
+    const wrapper = panel.querySelector(".csv-table-wrapper");
+    const table = panel.querySelector(".xlsx-table tbody");
+    if (!wrapper || !table) return;
+
+    let offset = Number(meta.rows) || 0;
+    const total = Number(meta.total_rows) || 0;
+    let loading = false;
+    let done = offset >= total;
+
+    const foot = document.createElement("div");
+    foot.className = "xlsx-load-more";
+    const refreshFoot = () => {
+      foot.textContent = done
+        ? ""
+        : `${t("xlsx.truncated_rows", { shown: offset, total })} · ${t("xlsx.load_more")}`;
+      foot.classList.toggle("done", done);
+    };
+    refreshFoot();
+    foot.addEventListener("click", () => { if (!done) loadMore(); });
+    wrapper.insertAdjacentElement("afterend", foot);
+
+    const appendWindow = (win) => {
+      const doc = new DOMParser().parseFromString(`<table>${win.html}</table>`, "text/html");
+      // No `tbody` selector: the fragment embeds its own wrapper div, so the
+      // parse yields bare `<tr>` inside `<table>` (the rows we want) — while
+      // any `tbody` in the fragment belongs to the *embedded* wrapper table.
+      doc.querySelectorAll("tr").forEach((tr) => table.appendChild(tr));
+      offset = win.offset + win.rows;
+      done = !win.has_more;
+      refreshFoot();
+      // The new rows must behave like the initial ones: contenteditable,
+      // dirty tracking, cached-value tooltip, icons in the fresh footnote.
+      panel.querySelectorAll("tbody tr:not([data-wired]) td").forEach(setupCell);
+      panel.querySelectorAll("tbody tr").forEach((tr) => tr.setAttribute("data-wired", "1"));
+      const cachedEls = panel.querySelectorAll(".xlsx-cached[data-cached-value]");
+      cachedEls.forEach((el) => { if (!el.title) el.title = t("xlsx.cached_value_title"); });
+      safeCreateIcons();
+    };
+
+    const loadMore = async () => {
+      if (loading || done) return;
+      loading = true;
+      const label = foot.textContent;
+      foot.textContent = t("xlsx.loading_more");
+      try {
+        const win = await api(
+          `/api/file/${encodeURIComponent(data.vault)}/xlsx/sheet?path=${encodeURIComponent(data.path)}` +
+          `&sheet=${encodeURIComponent(sheets[Number(panel.dataset.sheet)].name)}` +
+          `&offset=${offset}&limit=500`,
+        );
+        appendWindow(win);
+      } catch (err) {
+        foot.textContent = label; // restore: a failed fetch must not eat the button
+        showToast(`${t("xlsx.load_error")}: ${err.message || err}`, "error");
+      } finally {
+        loading = false;
+      }
+    };
+
+    // Scroll sentinel: near the bottom of the wrapper, pull the next window.
+    wrapper.addEventListener("scroll", () => {
+      if (loading || done) return;
+      if (wrapper.scrollTop + wrapper.clientHeight >= wrapper.scrollHeight - 120) loadMore();
+    });
+  };
+
+  // ── #153 A7 — keyboard navigation & formula bar ────────────────────────
+  // One active cell per viewer: clicking or arrowing into a cell shows its
+  // A1 name in the bar; the input mirrors the cell text and typing there
+  // edits the cell live (Enter commits, Escape reverts, then re-focuses).
+  let activeTd = null;
+  const activeCellEl = area.querySelector("#xlsx-active-cell");
+  const formulaInput = area.querySelector("#xlsx-formula-input");
+  const syncing = { value: false }; // guard against input-event feedback loops
+
+  const cellName = (td) => td?.dataset.cell || "";
+
+  const setActiveCell = (td) => {
+    activeTd = td || null;
+    if (area.querySelector("td.xlsx-active")) area.querySelector("td.xlsx-active").classList.remove("xlsx-active");
+    if (!td) {
+      activeCellEl.textContent = "—";
+      formulaInput.value = "";
+      formulaInput.disabled = true;
+      return;
+    }
+    td.classList.add("xlsx-active");
+    activeCellEl.textContent = cellName(td);
+    formulaInput.disabled = false;
+    formulaInput.value = td.textContent;
+  };
+
+  const syncFormulaBar = (td) => {
+    if (td !== activeTd) return;
+    if (!syncing.value) formulaInput.value = td.textContent;
+  };
+
+  // Parse an A1 reference into its (row, col) parts.
+  const parseRef = (ref) => {
+    const m = /^([A-Z]+)(\d+)$/.exec(ref || "");
+    if (!m) return null;
+    let col = 0;
+    for (const ch of m[1]) col = col * 26 + (ch.charCodeAt(0) - 64);
+    return { row: Number(m[2]), col };
+  };
+
+  const findTd = (panel, row, col) =>
+    panel.querySelector(`td[data-cell="${columnName(col)}${row}"]`);
+
+  const columnName = (col) => {
+    let name = "";
+    while (col > 0) {
+      const rem = (col - 1) % 26;
+      name = String.fromCharCode(65 + rem) + name;
+      col = Math.floor((col - 1) / 26);
+    }
+    return name;
+  };
+
+  const moveActive = (td, key, forward = true) => {
+    const ref = parseRef(cellName(td));
+    if (!ref) return;
+    let { row, col } = ref;
+    if (key === "Tab") col += forward ? 1 : -1;
+    else if (key === "ArrowRight") col += 1;
+    else if (key === "ArrowLeft") col -= 1;
+    else if (key === "ArrowDown") row += 1;
+    else if (key === "ArrowUp") row -= 1;
+    if (row < 1 || col < 1) return;
+    const panel = td.closest(".xlsx-panel");
+    const next = findTd(panel, row, col);
+    if (!next) return; // edge of the rendered window: no wrap
+    td.blur();
+    next.focus();
+    setActiveCell(next);
+  };
+
+  formulaInput.addEventListener("input", () => {
+    if (!activeTd) return;
+    syncing.value = true;
+    activeTd.textContent = formulaInput.value;
+    syncing.value = false;
+    activeTd.classList.add("xlsx-dirty");
+    refreshSaveState();
+  });
+  formulaInput.addEventListener("keydown", (e) => {
+    if (!activeTd) return;
+    if (e.key === "Enter") {
+      e.preventDefault();
+      activeTd.blur();
+      activeTd.focus();
+    } else if (e.key === "Escape") {
+      e.preventDefault();
+      activeTd.textContent = activeTd.dataset.orig;
+      activeTd.classList.remove("xlsx-dirty");
+      syncFormulaBar(activeTd);
+      refreshSaveState();
+      activeTd.focus();
+    }
   });
 
-  // Editable cells: Enter blurs, Escape reverts, paste stays single-line.
-  area.querySelectorAll(".xlsx-table td").forEach((td) => {
+  const setupCell = (td) => {
     td.contentEditable = "true";
     td.spellcheck = false;
+    // Focusable without a pointing device: JSDOM requires it to fire focus
+    // events on contenteditable cells, and a keyboard user tabbing into the
+    // table from outside lands on the first cell thanks to it.
+    td.tabIndex = 0;
     td.dataset.orig = td.textContent;
     td.addEventListener("input", () => {
       td.classList.add("xlsx-dirty");
+      syncFormulaBar(td);
       refreshSaveState();
     });
+    td.addEventListener("focus", () => setActiveCell(td));
     td.addEventListener("keydown", (e) => {
-      if (e.key === "Enter") { e.preventDefault(); td.blur(); }
+      if (e.key === "Enter" && !e.shiftKey) { e.preventDefault(); td.blur(); }
       if (e.key === "Escape") {
         td.textContent = td.dataset.orig;
         td.classList.remove("xlsx-dirty");
+        syncFormulaBar(td);
         refreshSaveState();
       }
+      if (e.key === "Tab" || e.key === "ArrowUp" || e.key === "ArrowDown"
+          || e.key === "ArrowLeft" || e.key === "ArrowRight") {
+        // Excel-like: arrows and Tab move to the neighbour cell. Direction is
+        // the key's own (Left/Up = back, Right/Down = forward); Tab follows
+        // Shift. Prevented so Tab never leaves the table and arrows never
+        // move the caret (they move the SELECTION instead).
+        e.preventDefault();
+        const forward = e.key === "Tab"
+          ? !e.shiftKey
+          : (e.key === "ArrowRight" || e.key === "ArrowDown");
+        moveActive(td, e.key, forward);
+      }
     });
     td.addEventListener("paste", (e) => {
       e.preventDefault();
       const text = (e.clipboardData || window.clipboardData).getData("text").replace(/\r?\n/g, " ");
       document.execCommand("insertText", false, text);
     });
+  };
+
+  // #153 A12 — the backend marks the last value Excel computed; the wording is
+  // translated here so the tooltip follows the UI language.
+  area.querySelectorAll(".xlsx-cached[data-cached-value]").forEach((el) => {
+    el.title = t("xlsx.cached_value_title");
   });
 
+  // Editable cells: Enter blurs, Escape reverts, arrows/Tab navigate.
+  area.querySelectorAll(".xlsx-table td").forEach(setupCell);
+  panelEls.forEach(wireLazyRows);
+  // The formula bar starts disabled: nothing is selected yet.
+  setActiveCell(null);
+
   area.querySelectorAll(".xlsx-tab").forEach((tab) => {
     tab.addEventListener("click", () => {
       const idx = tab.dataset.sheet;
@@ -1177,6 +1375,7 @@ export function renderXlsxViewer(area, data) {
         td.classList.remove("xlsx-dirty");
         td.dataset.orig = td.textContent;
       });
+      if (activeTd) syncFormulaBar(activeTd);
       refreshSaveState();
       showToast(t("editor.saved"), "success");
     } catch (err) {

frontend/locales/en.json

@@ -1833,6 +1833,11 @@
   "xlsx.truncated_rows": "{shown} of {total} rows displayed.",
   "xlsx.truncated_cols": "{shown} of {total} columns displayed.",
   "xlsx.truncated_hint": "Cells outside the displayed area cannot be edited here; the workbook is unchanged.",
+  "xlsx.load_more": "Load more",
+  "xlsx.loading_more": "Loading…",
+  "xlsx.load_error": "Could not load the remaining rows",
+  "xlsx.formula_bar_placeholder": "Active cell content",
+  "xlsx.active_cell": "Cell",
   "xlsx.feature_cached_values": "cached values",
   "xlsx.feature_slicers": "slicers and timelines",
   "xlsx.feature_form_controls": "form controls",
@@ -2005,6 +2010,10 @@
   "ai.step.git_issues": "Searched issues: {value}",
   "ai.step.git_file": "Read a repo file: {value}",
   "ai.step.xlsx_create": "Spreadsheet proposed: {value}",
+  "ai.step.xlsx_sheets": "Workbook sheets listed: {value}",
+  "ai.step.xlsx_read": "Workbook read: {value}",
+  "ai.step.xlsx_update": "Cells edited: {value}",
+  "ai.step.xlsx_append": "Rows appended: {value}",
   "ai.step.docx_create": "Word document proposed: {value}",
   "ai.step.csv_create": "CSV file proposed: {value}",
   "ai.step.pdf_create": "PDF document proposed: {value}",

frontend/locales/fr.json

@@ -1833,6 +1833,11 @@
   "xlsx.truncated_rows": "{shown} lignes affichées sur {total}.",
   "xlsx.truncated_cols": "{shown} colonnes affichées sur {total}.",
   "xlsx.truncated_hint": "Les cellules hors de l'affichage ne sont pas éditables ici ; le classeur n'est pas modifié.",
+  "xlsx.load_more": "Charger la suite",
+  "xlsx.loading_more": "Chargement…",
+  "xlsx.load_error": "Chargement de la suite impossible",
+  "xlsx.formula_bar_placeholder": "Contenu de la cellule active",
+  "xlsx.active_cell": "Cellule",
   "xlsx.feature_cached_values": "valeurs calculées",
   "xlsx.feature_slicers": "segments et chronologies",
   "xlsx.feature_form_controls": "contrôles de formulaire",
@@ -2005,6 +2010,10 @@
   "ai.step.git_issues": "Issues recherchées : {value}",
   "ai.step.git_file": "Fichier de dépôt lu : {value}",
   "ai.step.xlsx_create": "Tableur proposé : {value}",
+  "ai.step.xlsx_sheets": "Feuilles du classeur listées : {value}",
+  "ai.step.xlsx_read": "Classeur lu : {value}",
+  "ai.step.xlsx_update": "Cellules modifiées : {value}",
+  "ai.step.xlsx_append": "Lignes ajoutées : {value}",
   "ai.step.docx_create": "Document Word proposé : {value}",
   "ai.step.csv_create": "Fichier CSV proposé : {value}",
   "ai.step.pdf_create": "Document PDF proposé : {value}",

frontend/style.css

@@ -10996,6 +10996,56 @@ body.desktop-mode .editor-container {
   outline: 2px solid var(--accent, #4a90d9);
   outline-offset: -2px;
 }
+/* #153 A7 — the active cell keeps its outline even when focus moves to the
+   formula bar, so the user never loses track of what the bar edits. */
+.xlsx-table td.xlsx-active:not(:focus) {
+  outline: 2px dashed var(--accent, #4a90d9);
+  outline-offset: -2px;
+}
+
+/* #153 A7 — formula bar under the toolbar: [ A1 | > | input ] */
+.xlsx-formula-bar {
+  display: flex;
+  align-items: center;
+  gap: 6px;
+  margin-bottom: 8px;
+}
+.xlsx-active-cell {
+  min-width: 52px;
+  padding: 4px 8px;
+  border: 1px solid var(--border);
+  border-radius: 4px;
+  background: var(--surface);
+  color: var(--text-primary);
+  font-family: 'JetBrains Mono', 'Fira Code', 'Consolas', monospace;
+  font-size: 0.8rem;
+  text-align: center;
+  font-variant-numeric: tabular-nums;
+}
+.xlsx-formula-sep {
+  width: 14px;
+  height: 14px;
+  flex: 0 0 auto;
+  color: var(--text-muted);
+}
+.xlsx-formula-input {
+  flex: 1;
+  min-width: 0;
+  padding: 5px 10px;
+  border: 1px solid var(--border);
+  border-radius: 4px;
+  background: var(--surface);
+  color: var(--text-primary);
+  font-family: 'JetBrains Mono', 'Fira Code', 'Consolas', monospace;
+  font-size: 0.82rem;
+}
+.xlsx-formula-input:focus {
+  outline: 2px solid var(--accent, #4a90d9);
+  outline-offset: -2px;
+}
+.xlsx-formula-input:disabled {
+  opacity: 0.55;
+}
 .xlsx-table td.xlsx-dirty {
   background: rgba(255, 196, 0, 0.18);
 }
@@ -11089,6 +11139,30 @@ body.desktop-mode .editor-container {
   color: var(--accent, #4a90d9);
 }
 
+/* #153 A9bis — “charger la suite” footnote under a truncated sheet. Also the
+   scroll sentinel target: clickable whole, disabled look once the sheet is
+   fully loaded. */
+.xlsx-load-more {
+  display: block;
+  margin: 6px 0 10px;
+  padding: 6px 12px;
+  border: 1px dashed var(--border);
+  border-radius: 4px;
+  background: var(--bg-secondary);
+  color: var(--text-secondary);
+  font-size: 0.82rem;
+  text-align: center;
+  cursor: pointer;
+  user-select: none;
+}
+.xlsx-load-more:hover {
+  border-color: var(--accent, #4a90d9);
+  color: var(--text-primary);
+}
+.xlsx-load-more.done {
+  display: none;
+}
+
 .xlsx-formula-toggle {
   font-family: 'JetBrains Mono', 'Fira Code', 'Consolas', monospace;
   font-weight: 600;

package.json

@@ -1,6 +1,6 @@
 {
   "name": "obsigate",
-  "version": "2.31.0",
+  "version": "2.34.0",
   "description": "**Porte d'entrée web ultra-léger pour vos vaults Obsidian** — Accédez, naviguez et recherchez dans toutes vos notes Obsidian depuis n'importe quel appareil via une interface web moderne et responsive.",
   "main": "patch.js",
   "directories": {

tests/e2e/xlsx-viewer.spec.js

@@ -210,4 +210,49 @@ test.describe('Excel viewer — troncature et navigation (#153 A8/A9)', () => {
     expect(win.html).toContain('Operation 519');
     expect(win.html).not.toContain('data-cell="A1"');
   });
+
+  test('le bouton « charger la suite » ajoute les lignes cachées (#153 A9bis)', async ({ page }) => {
+    await login(page);
+    await openXlsx(page, LARGE);
+
+    // La ligne 500 est la dernière rendue ; le pied de page l'annonce.
+    const foot = page.locator('#content-area .xlsx-load-more');
+    await expect(foot).toBeVisible();
+    await expect(foot).toContainText('Charger la suite');
+    await expect(page.locator('#content-area td[data-cell="A501"]')).toHaveCount(0);
+
+    // Un clic fetch la suite (offset 500, 20 lignes) et l'insère dans la table.
+    await foot.click();
+    await expect(page.locator('#content-area td[data-cell="A520"]')).toBeVisible({ timeout: 10000 });
+    // Une ligne nouvellement arrivée est éditable comme les autres.
+    const cell = page.locator('#content-area td[data-cell="A520"]');
+    await cell.click();
+    await expect(cell).toBeFocused();
+    // Tout est chargé → le pied de page est masqué.
+    await expect(foot).toBeHidden();
+  });
+
+  test('barre de formule et navigation clavier (#153 A7)', async ({ page }) => {
+    await login(page);
+    await openXlsx(page, LARGE);
+
+    // Un clic sur une cellule active la barre avec son nom et son contenu.
+    const cell = page.locator('#content-area td[data-cell="B2"]');
+    await cell.click();
+    await expect(page.locator('#xlsx-active-cell')).toHaveText('B2');
+    const bar = page.locator('#xlsx-formula-input');
+    await expect(bar).toHaveValue(/Operation 1/);
+
+    // Les flèches déplacent la cellule active.
+    await cell.press('ArrowDown');
+    await expect(page.locator('#xlsx-active-cell')).toHaveText('B3');
+    await page.locator('#content-area td[data-cell="B3"]').press('ArrowRight');
+    await expect(page.locator('#xlsx-active-cell')).toHaveText('C3');
+
+    // Éditer depuis la barre marque la cellule dirty, Échap annule.
+    await bar.fill('Operation 2 modifiee');
+    await expect(page.locator('#content-area td[data-cell="C3"]')).toHaveClass(/xlsx-dirty/);
+    await page.locator('#content-area td[data-cell="C3"]').press('Escape');
+    await expect(page.locator('#content-area td.xlsx-dirty')).toHaveCount(0);
+  });
 });

tests/frontend/xlsx-viewer.test.mjs

@@ -8,6 +8,11 @@
  *         retries with `force: true` (or gives up when refused);
  *  - A4 : the f(x) toggle flips `allow_formula` in the save payload.
  *  - A8 : a sheet bigger than the render caps shows the truncation notice.
+ *  - A9bis : the tail of a truncated sheet is fetched window by window from
+ *         GET …/xlsx/sheet (scroll sentinel + click), and the appended rows are
+ *         editable like the initial ones.
+ *  - A7 : formula bar mirrors the active cell; arrows/Tab navigate; editing
+ *         from the bar marks the cell dirty; Escape reverts.
  *
  * Usage: node tests/frontend/xlsx-viewer.test.mjs
  */
@@ -36,6 +41,7 @@ const dom = new JSDOM(
 const w = dom.window;
 globalThis.window = w;
 globalThis.document = w.document;
+globalThis.DOMParser = w.DOMParser;
 globalThis.HTMLElement = w.HTMLElement;
 globalThis.Element = w.Element;
 globalThis.Node = w.Node;
@@ -90,7 +96,11 @@ async function test(name, fn) {
   confirmCalls = 0;
   confirmPrompts = [];
   confirmAnswer = true;
-  nextResponse = () => ({ ok: true, status: 200, body: { status: "ok" } });
+  apiQueue = [];
+  nextResponse = () => {
+    if (apiQueue.length) return apiQueue.shift();
+    return { ok: true, status: 200, body: { status: "ok" } };
+  };
   try {
     await fn();
     console.log(`  ✓ ${name}`);
@@ -113,10 +123,16 @@ await initI18n();
 
 const sheetHtml = (value) =>
   '<div class="csv-table-wrapper"><table class="csv-table xlsx-table">' +
-  '<thead><tr><th class="xlsx-corner"></th><th>A</th></tr></thead><tbody>' +
-  `<tr><th class="xlsx-rownum">1</th><td data-cell="A1">${value}</td></tr>` +
+  '<thead><tr><th class="xlsx-corner"></th><th>A</th><th>B</th></tr></thead><tbody>' +
+  `<tr><th class="xlsx-rownum">1</th><td data-cell="A1">${value}</td><td data-cell="B1">B1</td></tr>` +
+  '<tr><th class="xlsx-rownum">2</th><td data-cell="A2">A2</td><td data-cell="B2">B2</td></tr>' +
   "</tbody></table></div>";
 
+// The JSDOM fetch double serves locale files; everything else is a recorded
+// API call answered by `nextResponse`. `apiQueue` lets a test script the
+// successive windows a lazy-loading sheet will request.
+let apiQueue = [];
+
 function mount({ lossy = [], sheet = {} } = {}) {
   const area = document.getElementById("content-area");
   area.innerHTML = "";
@@ -130,6 +146,13 @@ function mount({ lossy = [], sheet = {} } = {}) {
   return area;
 }
 
+/** Mount a sheet flagged truncated so wireLazyRows() arms the footnote. */
+function mountTruncated({ total = 520, rows = 1 } = {}) {
+  return mount({
+    sheet: { rows, cols: 3, total_rows: total, total_cols: 3, max_rows: 500, max_cols: 40, truncated: total > 500 },
+  });
+}
+
 /** Mark a cell dirty the way a user edit would. */
 function editCell(area, ref, text) {
   const td = area.querySelector(`td[data-cell="${ref}"]`);
@@ -312,6 +335,188 @@ await test("a payload without the dimensions shows no notice", () => {
   assert.ok(!area.textContent.includes("NaN"));
 });
 
+// ── A9bis — lazy loading of the truncated tail ──────────────────────────────
+
+const windowHtml = (from, to) =>
+  '<div class="csv-table-wrapper"><table class="csv-table xlsx-table">' +
+  "<tbody>" +
+  Array.from({ length: to - from + 1 }, (_, i) => {
+    const r = from + i;
+    return `<tr><th class="xlsx-rownum">${r}</th><td data-cell="A${r}">Ligne ${r}</td></tr>`;
+  }).join("") +
+  "</tbody></table></div>";
+
+await test("a truncated sheet gets a load-more footnote, a normal one does not", () => {
+  const truncated = mountTruncated();
+  assert.ok(truncated.querySelector(".xlsx-load-more"), "footnote absent");
+  assert.ok(truncated.querySelector(".xlsx-load-more").textContent.includes(FR["xlsx.load_more"]));
+
+  const plain = mount({ sheet: { rows: 10, cols: 2, total_rows: 10, total_cols: 2, max_rows: 500, max_cols: 40, truncated: false } });
+  assert.equal(plain.querySelector(".xlsx-load-more"), null);
+});
+
+await test("clicking the footnote fetches the next window with the right query", async () => {
+  const area = mountTruncated();
+  apiQueue.push({
+    ok: true,
+    status: 200,
+    body: { sheet: "Feuille1", offset: 1, limit: 500, rows: 2, total_rows: 3, truncated: true, has_more: false, html: windowHtml(2, 3) },
+  });
+  area.querySelector(".xlsx-load-more").click();
+  await new Promise((r) => setTimeout(r, 5));
+  assert.equal(calls.length, 1);
+  assert.match(calls[0].url, /\/api\/file\/V\/xlsx\/sheet\?path=data\.xlsx&sheet=Feuille1&offset=1&limit=500/);
+  // Rows 2 and 3 landed in the table with their real coordinates.
+  assert.ok(area.querySelector('td[data-cell="A2"]'));
+  assert.ok(area.querySelector('td[data-cell="A3"]'));
+  assert.ok(area.querySelector('th.xlsx-rownum') && area.textContent.includes("Ligne 3"));
+  // Everything loaded → the footnote is hidden (kept in the DOM, class `done`).
+  const foot = area.querySelector(".xlsx-load-more");
+  assert.ok(foot, "the footnote element survives");
+  assert.equal(foot.classList.contains("done"), true);
+  assert.ok(!foot.textContent.includes(FR["xlsx.load_more"]), foot.textContent);
+});
+
+await test("appended rows are editable and tracked as dirty", async () => {
+  const area = mountTruncated();
+  apiQueue.push({
+    ok: true,
+    status: 200,
+    body: { sheet: "Feuille1", offset: 1, limit: 500, rows: 1, total_rows: 3, truncated: true, has_more: false, html: windowHtml(2, 2) },
+  });
+  area.querySelector(".xlsx-load-more").click();
+  await new Promise((r) => setTimeout(r, 5));
+  editCell(area, "A2", "modifié");
+  area.querySelector("#xlsx-save-btn").click();
+  await new Promise((r) => setTimeout(r, 5));
+  assert.equal(calls.length, 2, "the save went out");
+  assert.equal(calls[1].url.includes("/xlsx/save"), true);
+  assert.deepEqual(calls[1].body.cells, { A2: "modifié" });
+  assert.equal(calls[1].body.sheet, "Feuille1");
+});
+
+await test("a failed window fetch keeps the footnote and shows an error toast", async () => {
+  const area = mountTruncated();
+  apiQueue.push({ ok: false, status: 500, body: { detail: "boom" } });
+  area.querySelector(".xlsx-load-more").click();
+  await new Promise((r) => setTimeout(r, 5));
+  const foot = area.querySelector(".xlsx-load-more");
+  assert.ok(foot, "footnote must survive a failed fetch");
+  assert.ok(foot.textContent.includes(FR["xlsx.load_more"]), foot.textContent);
+  // `api()` itself toasts the failure (shared behaviour, asserted in E2E);
+  // here we assert the local consequence: the footnote keeps its label.
+  // Retrying works once the server answers again.
+  apiQueue.push({
+    ok: true,
+    status: 200,
+    body: { sheet: "Feuille1", offset: 1, limit: 500, rows: 1, total_rows: 3, truncated: true, has_more: false, html: windowHtml(2, 2) },
+  });
+  foot.click();
+  await new Promise((r) => setTimeout(r, 5));
+  assert.ok(area.querySelector('td[data-cell="A2"]'));
+  assert.equal(area.querySelector(".xlsx-load-more").classList.contains("done"), true);
+});
+
+// ── A7 — formula bar & keyboard navigation ──────────────────────────────────
+
+await test("the formula bar starts empty and disabled", () => {
+  const area = mount();
+  assert.equal(area.querySelector("#xlsx-active-cell").textContent, "—");
+  assert.equal(area.querySelector("#xlsx-formula-input").disabled, true);
+});
+
+await test("focusing a cell shows its name and content in the bar", () => {
+  const area = mount();
+  const td = area.querySelector('td[data-cell="A1"]');
+  td.dispatchEvent(new w.Event("focus", { bubbles: false }));
+  // JSDOM does not run the default focus behaviour on dispatchEvent, so go
+  // through the real API:
+  td.focus();
+  assert.equal(area.querySelector("#xlsx-active-cell").textContent, "A1");
+  assert.equal(area.querySelector("#xlsx-formula-input").value, "100");
+  assert.equal(area.querySelector("#xlsx-formula-input").disabled, false);
+});
+
+await test("typing in the bar edits the cell live and marks it dirty", () => {
+  const area = mount();
+  const td = area.querySelector('td[data-cell="A1"]');
+  td.focus();
+  const input = area.querySelector("#xlsx-formula-input");
+  input.value = "depuis la barre";
+  input.dispatchEvent(new w.Event("input", { bubbles: true }));
+  assert.equal(td.textContent, "depuis la barre");
+  assert.equal(td.classList.contains("xlsx-dirty"), true);
+  assert.equal(area.querySelector("#xlsx-save-btn").disabled, false);
+  // The save payload carries the cell edit.
+  area.querySelector("#xlsx-save-btn").click();
+  return new Promise((r) => setTimeout(r, 5)).then(() => {
+    assert.deepEqual(calls[0].body.cells, { A1: "depuis la barre" });
+  });
+});
+
+await test("Tab and arrows move to the neighbour cell", () => {
+  const area = mount();
+  const a1 = area.querySelector('td[data-cell="A1"]');
+  a1.focus();
+  a1.dispatchEvent(new w.KeyboardEvent("keydown", { key: "Tab", bubbles: true }));
+  assert.equal(area.querySelector("#xlsx-active-cell").textContent, "B1");
+  const b1 = area.querySelector('td[data-cell="B1"]');
+  b1.dispatchEvent(new w.KeyboardEvent("keydown", { key: "ArrowDown", bubbles: true }));
+  assert.equal(area.querySelector("#xlsx-active-cell").textContent, "B2");
+  const b2 = area.querySelector('td[data-cell="B2"]');
+  b2.dispatchEvent(new w.KeyboardEvent("keydown", { key: "ArrowLeft", bubbles: true }));
+  assert.equal(area.querySelector("#xlsx-active-cell").textContent, "A2");
+});
+
+await test("Enter commits and Shift+Tab goes backwards", () => {
+  const area = mount();
+  const a1 = area.querySelector('td[data-cell="A1"]');
+  a1.focus();
+  a1.dispatchEvent(new w.KeyboardEvent("keydown", { key: "Tab", bubbles: true }));
+  const b1 = area.querySelector('td[data-cell="B1"]');
+  b1.dispatchEvent(new w.KeyboardEvent("keydown", { key: "Tab", shiftKey: true, bubbles: true }));
+  assert.equal(area.querySelector("#xlsx-active-cell").textContent, "A1");
+});
+
+await test("a saved edit from the bar resets the dirty flag and orig value", async () => {
+  const area = mount();
+  const td = area.querySelector('td[data-cell="A1"]');
+  td.focus();
+  const input = area.querySelector("#xlsx-formula-input");
+  input.value = "200";
+  input.dispatchEvent(new w.Event("input", { bubbles: true }));
+  area.querySelector("#xlsx-save-btn").click();
+  await new Promise((r) => setTimeout(r, 5));
+  assert.equal(area.querySelectorAll("td.xlsx-dirty").length, 0);
+  assert.equal(td.dataset.orig, "200");
+});
+
+await test("two windows in a row walk the whole sheet", async () => {
+  const area = mountTruncated({ total: 1200 });
+  apiQueue.push({
+    ok: true,
+    status: 200,
+    body: { sheet: "Feuille1", offset: 1, limit: 500, rows: 500, total_rows: 1200, truncated: true, has_more: true, html: windowHtml(2, 501) },
+  });
+  area.querySelector(".xlsx-load-more").click();
+  await new Promise((r) => setTimeout(r, 5));
+  assert.ok(area.querySelector('td[data-cell="A501"]'));
+  // The footnote still shows, with the updated progress.
+  let foot = area.querySelector(".xlsx-load-more");
+  assert.ok(foot, "more rows remain");
+  assert.ok(foot.textContent.includes("501"), foot.textContent);
+
+  apiQueue.push({
+    ok: true,
+    status: 200,
+    body: { sheet: "Feuille1", offset: 501, limit: 500, rows: 200, total_rows: 1200, truncated: true, has_more: false, html: windowHtml(502, 701) },
+  });
+  foot.click();
+  await new Promise((r) => setTimeout(r, 5));
+  assert.ok(area.querySelector('td[data-cell="A701"]'));
+  assert.equal(area.querySelector(".xlsx-load-more").classList.contains("done"), true);
+});
+
 // ── Report ──────────────────────────────────────────────────────────────────
 console.log(`\n${passCount}/${testCount} tests passed\n`);
 process.exit(passCount === testCount ? 0 : 1);

tests/test_spreadsheet_tools.py

@@ -0,0 +1,225 @@
+"""Unit tests for the existing-workbook AI tools (#153 A6).
+
+Covers ``list_xlsx_sheets``, ``xlsx_to_markdown``, ``update_xlsx_cells`` and
+``append_xlsx_rows`` — risk levels, confirmation gating, vault persistence and
+the reuse of the guarded mutation service (P0 guards, formula neutralisation).
+"""
+
+from __future__ import annotations
+
+from pathlib import Path
+
+import pytest
+
+from backend.tools.api import (
+    ToolConfirmationRequired,
+    ToolContext,
+    ToolError,
+    call_tool,
+    get_tool,
+)
+from backend.tools.context import ToolRisk
+
+openpyxl = pytest.importorskip("openpyxl")
+
+
+@pytest.fixture
+def vault(tmp_path, monkeypatch):
+    """A minimal configured vault (index entry patched, no full build)."""
+    vault_dir = tmp_path / "Vault"
+    vault_dir.mkdir()
+    monkeypatch.setitem(
+        __import__("backend.indexer", fromlist=["index"]).index,
+        "Vault",
+        {"name": "Vault", "path": str(vault_dir), "config": {}},
+    )
+    return vault_dir
+
+
+@pytest.fixture
+def workbook(vault: Path) -> Path:
+    """A two-sheet workbook: Budget (values + a formula) and Notes."""
+    path = vault / "classeur.xlsx"
+    wb = openpyxl.Workbook()
+    ws = wb.active
+    ws.title = "Budget"
+    ws.append(["Poste", "Montant"])
+    ws.append(["Loyer", 900])
+    ws.append(["Courses", 250])
+    notes = wb.create_sheet("Notes")
+    notes["A1"] = "bonjour"
+    wb.save(path)
+    return path
+
+
+def _ctx() -> ToolContext:
+    return ToolContext(
+        user={"username": "tester", "role": "admin", "vaults": ["*"]},
+        audit_enabled=False,
+    )
+
+
+class TestRegistry:
+    def test_read_tools_are_read_risk(self):
+        for name in ("list_xlsx_sheets", "xlsx_to_markdown"):
+            spec = get_tool(name)
+            assert spec is not None
+            assert spec.risk == ToolRisk.READ
+
+    def test_mutation_tools_require_confirmation(self):
+        for name in ("update_xlsx_cells", "append_xlsx_rows"):
+            spec = get_tool(name)
+            assert spec is not None
+            assert spec.risk == ToolRisk.WRITE
+            assert spec.requires_confirmation is True
+
+    def test_mutation_tools_raise_without_confirmation(self, vault, workbook):
+        with pytest.raises(ToolConfirmationRequired):
+            call_tool("update_xlsx_cells", _ctx(), {
+                "vault": "Vault", "path": "classeur.xlsx",
+                "sheet": "Budget", "cells": {"B3": "300"},
+            })
+        with pytest.raises(ToolConfirmationRequired):
+            call_tool("append_xlsx_rows", _ctx(), {
+                "vault": "Vault", "path": "classeur.xlsx",
+                "sheet": "Budget", "rows": [["Total", 1150]],
+            })
+
+
+class TestListXlsxSheets:
+    def test_lists_names_and_dimensions(self, vault, workbook):
+        out = call_tool("list_xlsx_sheets", _ctx(), {
+            "vault": "Vault", "path": "classeur.xlsx",
+        })
+        assert out.ok
+        data = out.data
+        assert [s["name"] for s in data["sheets"]] == ["Budget", "Notes"]
+        budget = data["sheets"][0]
+        assert budget["total_rows"] == 3 and budget["total_cols"] == 2
+        assert budget["truncated"] is False
+
+    def test_wrong_extension_rejected(self, vault):
+        with pytest.raises(ToolError):
+            call_tool("list_xlsx_sheets", _ctx(), {
+                "vault": "Vault", "path": "note.md",
+            })
+
+    def test_missing_file_rejected(self, vault):
+        with pytest.raises(ToolError):
+            call_tool("list_xlsx_sheets", _ctx(), {
+                "vault": "Vault", "path": "absent.xlsx",
+            })
+
+
+class TestXlsxToMarkdown:
+    def test_renders_a_bounded_markdown_table(self, vault, workbook):
+        out = call_tool("xlsx_to_markdown", _ctx(), {
+            "vault": "Vault", "path": "classeur.xlsx",
+        })
+        assert out.ok
+        data = out.data
+        assert data["sheet"] == "Budget"
+        assert data["rows"] == 3 and data["truncated"] is False
+        assert "| Poste | Montant |" in data["markdown"]
+        assert "| Loyer | 900 |" in data["markdown"]
+
+    def test_specific_sheet(self, vault, workbook):
+        out = call_tool("xlsx_to_markdown", _ctx(), {
+            "vault": "Vault", "path": "classeur.xlsx", "sheet": "Notes",
+        })
+        assert out.ok
+        data = out.data
+        assert data["sheet"] == "Notes"
+        assert "bonjour" in data["markdown"]
+
+    def test_unknown_sheet_rejected(self, vault, workbook):
+        with pytest.raises(ToolError):
+            call_tool("xlsx_to_markdown", _ctx(), {
+                "vault": "Vault", "path": "classeur.xlsx", "sheet": "Nope",
+            })
+
+    def test_big_sheet_is_flagged_truncated(self, vault):
+        path = vault / "gros.xlsx"
+        wb = openpyxl.Workbook()
+        ws = wb.active
+        for i in range(150):
+            ws.append([f"r{i}", i])
+        wb.save(path)
+        out = call_tool("xlsx_to_markdown", _ctx(), {
+            "vault": "Vault", "path": "gros.xlsx",
+        })
+        assert out.ok
+        data = out.data
+        assert data["rows"] == 100
+        assert data["truncated"] is True
+
+
+class TestUpdateXlsxCells:
+    def test_edits_cells_and_survives_a_reload(self, vault, workbook):
+        out = call_tool("update_xlsx_cells", _ctx(), {
+            "vault": "Vault", "path": "classeur.xlsx",
+            "sheet": "Budget", "cells": {"B3": "300"},
+        }, confirm=True)
+        assert out.ok and out.data["status"] == "ok"
+        wb = openpyxl.load_workbook(workbook)
+        assert wb["Budget"]["B3"].value == 300  # coerced like the viewer
+        wb.close()
+
+    def test_formula_stays_text_by_default(self, vault, workbook):
+        out = call_tool("update_xlsx_cells", _ctx(), {
+            "vault": "Vault", "path": "classeur.xlsx",
+            "sheet": "Budget", "cells": {"C1": "=B2+B3"},
+        }, confirm=True)
+        assert out.ok
+        wb = openpyxl.load_workbook(workbook)
+        assert wb["Budget"]["C1"].data_type == "s"  # A4 guard inherited
+        wb.close()
+
+    def test_empty_cells_rejected(self, vault, workbook):
+        with pytest.raises(ToolError):
+            call_tool("update_xlsx_cells", _ctx(), {
+                "vault": "Vault", "path": "classeur.xlsx",
+                "sheet": "Budget", "cells": {},
+            })
+
+
+class TestAppendXlsxRows:
+    def test_appends_below_the_last_row(self, vault, workbook):
+        out = call_tool("append_xlsx_rows", _ctx(), {
+            "vault": "Vault", "path": "classeur.xlsx",
+            "sheet": "Budget", "rows": [["Total", 1150]],
+        }, confirm=True)
+        assert out.ok
+        assert out.data["first_row"] == 4
+        wb = openpyxl.load_workbook(workbook)
+        ws = wb["Budget"]
+        assert ws["A4"].value == "Total"
+        assert ws["B4"].value == 1150 and isinstance(ws["B4"].value, int)
+        wb.close()
+
+    def test_values_are_coerced(self, vault, workbook):
+        out = call_tool("append_xlsx_rows", _ctx(), {
+            "vault": "Vault", "path": "classeur.xlsx",
+            "sheet": "Budget", "rows": [["VRAI", "01/02/2026", 12.5]],
+        }, confirm=True)
+        assert out.ok
+        wb = openpyxl.load_workbook(workbook)
+        ws = wb["Budget"]
+        assert ws["A4"].value is True
+        assert (ws["B4"].value.month, ws["B4"].value.day) == (2, 1)
+        assert ws["C4"].value == 12.5
+        wb.close()
+
+    def test_unknown_sheet_rejected(self, vault, workbook):
+        with pytest.raises(ToolError):
+            call_tool("append_xlsx_rows", _ctx(), {
+                "vault": "Vault", "path": "classeur.xlsx",
+                "sheet": "Nope", "rows": [["x"]],
+            })
+
+    def test_empty_rows_rejected(self, vault, workbook):
+        with pytest.raises(ToolError):
+            call_tool("append_xlsx_rows", _ctx(), {
+                "vault": "Vault", "path": "classeur.xlsx",
+                "sheet": "Budget", "rows": [],
+            })