WorkbookLens
Deterministic linting, regression testing, semantic diffing, and conservative repair for
Excel workbooks.
WorkbookLens 2.4 core scan, test, diff, and direct OOXML repair workflows work locally without
Microsoft Excel, LibreOffice, an AI key, or a cloud service. Those normal workflows do not calculate
formulas, execute VBA, open embedded objects, or fetch external links. .xlsx files support scan,
test, diff, and conservative repair; .xlsm files remain read-only. Formula-derived auto-repair can
optionally validate isolated temporary copies with Microsoft Excel (preferred) or LibreOffice, but
only after the user explicitly marks the workbook as trusted. The installed application may evaluate
WEBSERVICE, data connections, or other workbook-defined behavior, so leave that authorization off
for untrusted files; lossless normalization still works and formula candidates are skipped. Local
.xls conversion is the same kind of trusted-file-only boundary. Neither path uses a cloud service.
Release status: GitHub Releases are authoritative for source archives and attached artifacts.
Version 2.4.0 may not be published to PyPI; use the
downloaded wheel or source checkout instructions below unless PyPI explicitly lists that version.
Do not assume pipx or uvx can install a GitHub-only release by package name.
What is new in 2.4
- Formula analysis now profiles the full inferred data body instead of relying only on short
contiguous bands. It reports multiple copied-formula outliers, hardcoded interruptions,
formula-looking text, bounded static circular dependencies, and a small set of provable formula
errors without evaluating workbook formulas. Saved OOXML formula-error caches are advisory,
lower-confidence evidence and may be stale. Multiple anomalies remain findings-only; automatic
formula replacement is limited to a single high-confidence anomaly with stable detail-row
evidence.
- Patch Plan schema v3 records candidate uniqueness, derivation evidence, preserved invariants, and
recalculation requirements. One-click safe repair combines lossless normalization with uniquely
derived formula candidates, but Office-backed validation is opt-in for trusted workbooks and any
failed recalculation, rescan, dependency, or idempotency check rolls the candidate back.
- New report-only data-quality rules infer likely identifier columns, mixed numeric storage, robust
numeric outliers, percentage-scale mistakes, date-storage anomalies, and sign-domain violations
(negative values under nonnegative headers, or zero/negative values under positive headers). They
never invent replacement business values.
- New report-only structure rules check partial AutoFilter coverage, chart source-shape mismatches,
freeze panes saved deep inside or beyond content, and print areas that truncate inferred tables or
included chart frames.
- A conservative Formula IR now checks aggregate coverage, cross-sheet targets, notes-column
formulas, algebraic degeneracy, and label/number-format role conflicts without evaluating or
rewriting business formulas.
- Optional Workbook Profiles add user-owned semantics for required fields, enumerations, contacts,
fixed-width identifiers, and number-format roles. Without a Profile, rules continue to require
strong structural evidence and do not invent allowed-value sets.
- Layout geometry now reports drawings that cover non-source data or KPI cells, fixed-format numeric
width risks, unexplained row-height outliers, and role-aware title/header/body/total style
fragmentation. These checks are report-only.
- Isolated extreme long text can receive one atomic bounded-width, wrap, and row-height proposal.
Repeated extreme rows remain findings-only so a shared width dependency cannot be selected
partially, and generated row-height proposals are capped at a readable size.
What is new in 2.3
- The Windows installer and portable package now launch
WorkbookLens.exe as a native, branded
desktop window. The local FastAPI service remains bound to 127.0.0.1, but no console or external
browser is shown; closing the window stops the background service and releases its port.
- A persistent language selector supports Chinese and English. Built-in pages, findings, repair
suggestions, scan reports, semantic-diff reports, and safe error messages follow the selected
language while canonical rule IDs, patch IDs, fingerprints, formulas, and JSON/SARIF data remain
unchanged. Third-party plugin text is retained when no trusted translation is available.
- Local
.xls conversion tolerates Windows or Office configurations that deny access to
Process.Path. WorkbookLens verifies the Excel process with stronger held-handle identity checks
and reports stable WL-CNV-001 through WL-CNV-005 codes plus a diagnostic ID instead of exposing
PowerShell CLIXML, private paths, or tracebacks in the interface.
- Windows artifacts contain a windowed
WorkbookLens.exe, a separate console
WorkbookLensCLI.exe, and the WorkbookLens application icon. The CLI and Python package workflows
remain available for automation and third-party plugins.
What is new in 2.2
- Layout-aware snapshots and semantic diffs now record declared/content dimensions, explicit row
heights, column widths, and saved worksheet views.
WL016_TEXT_DISPLAY_RISK detects likely clipped wrapped text and blocked horizontal overflow. It
can propose bounded row-height, wrap, or repeated-column-width changes.WL017_BORDER_EDGE_INCONSISTENCY treats either side of a shared cell edge as visually present,
reducing false positives. It also detects fully borderless holes and missing outer edges inside a
dense rectangular table, and proposes only edges supported by at least 95% peer consensus.WL018_USED_RANGE_INFLATION identifies separated, format-only tails and can remove only the
enumerated blank styled cells and empty row records after reference and structure checks.WL019_IDENTIFIER_SCIENTIFIC_NOTATION detects long numeric identifiers under identifier-like
headers. Ten- and eleven-digit values can receive a font-aware width-only proposal that preserves
the stored numeric value and type. General-formatted values of 12-15 digits remain findings-only
because Excel can keep scientific notation even in a wide column; longer values may already have
lost precision.WL020_SAVED_VIEW_OFF_CONTENT detects sheets saved with their first content scrolled away or at a
zoom unlikely to show a compact sheet's full content width and height in a typical desktop window.
A reviewed repair can restore the first visible content cell and lower the saved zoom only when the
saved zoom actually exceeds the two-dimensional estimated fit. Merged content contributes its full
extent, visible border/fill templates count toward the layout, and earlier width/height proposals are
included in the estimate. A pure zoom repair may preserve an unshifted frozen pane byte-for-byte;
shifted frozen panes and split panes remain findings-only.WL021_WHITESPACE_ONLY_TAIL detects connected literal-space cells outside the visible layout
envelope. Its reviewed cleanup deletes only default-style nodes; styled cells are cleared while
their font, alignment, protection, style ID, and custom blank-row heights are preserved. Referenced
or structurally significant targets are refused.- Single-row merged titles are treated as bounded display regions, same-column width requests are
coalesced to the largest sufficient proposal, and border repair is limited to genuine internal
shared edges with materialized peers.
- Layout-changing proposals are labeled
layout_review, excluded from --safe-only, and require
explicit patch selection plus --accept-layout-risk. Related wrap/height changes form atomic
groups and cannot be applied partially.
What is new in 2.1
- Chartsheet workbooks scan and repair their ordinary worksheets without losing chart parts.
- Numeric text is auto-converted only under an explicit measure header such as Amount, Price,
Units, Balance, 金额, or 数量. Unknown columns, identifiers, and explicitly text-formatted cells
remain review-only.
- Merged ranges, summary/subtotal rows, non-visible worksheets, hidden rows or columns (including
grouped columns), and protected worksheets remain review-only for automatic repair.
- Formula and style patches also require stable detail-row evidence. Unknown summary labels,
secondary override/adjustment labels, intentionally highlighted rows, and free-form-only row
labels are findings-only when ordinary row semantics cannot be established conservatively.
- Style repair preserves number format, protection, quote-prefix, and pivot-button semantics.
Multiple isolated anomalies are reported without bulk auto-repair.
- Suspicious SUM boundaries now report the candidate formula without an automatic patch because
adjacency alone cannot prove that a tax, adjustment, subtotal, or statistic belongs in the SUM.
What was new in 2.0
- Baseline-aware scans accept a source-scoped findings.json or an aggregate baseline manifest.
- The --new-only gate uses stable rule/location identities; evidence changes are tracked separately.
- findings.json schema version 2 records total, active, suppressed, known, and new counts.
- The GitHub Action supports mode scan or test, YAML config, baselines, and .xlsx/.xlsm.
- Release builds use explicit wheel/sdist allowlists and reject environments, caches, credentials,
private keys, bytecode, unexpected roots, or oversized members.
- CI tests Python 3.11–3.14 on Linux, Windows, and macOS, then installs the built wheel in fresh
environments.
Windows installer (recommended)
For the normal Windows experience, download
WorkbookLens-2.4.0-windows-x64-setup.exe and SHA256SUMS from the official
GitHub Release. Verify the
published checksum before running the installer:
(Get-FileHash .\WorkbookLens-2.4.0-windows-x64-setup.exe -Algorithm SHA256).Hash
The installer uses the current Windows account and does not require administrator access. Its
wizard provides the normal Install button, adds WorkbookLens to the Start menu, offers a
desktop shortcut by default, and registers a standard entry in Windows Installed apps. Open the
Start-menu or desktop shortcut to launch the local WorkbookLens window directly. The application
uses pywebview with the Microsoft Edge WebView2 Runtime to render its loopback-only interface; it
does not show a console or open an external browser. Closing the desktop window stops its background
server cleanly. The language selector offers Chinese and English and remembers the choice locally.
Uninstall from Windows Settings > Apps > Installed apps, or choose
Uninstall WorkbookLens in the WorkbookLens Start-menu folder. The installer and application are
currently unsigned, so Microsoft SmartScreen may display an unfamiliar-app warning. Download only
from the official release and verify the SHA-256 value; do not disable antivirus protection. The
installed application exposes the same local scan, repair, report, and optional .xls conversion
interface as the portable build.
Windows portable ZIP
The official WorkbookLens-2.4.0-windows-x64-portable.zip is the no-install Windows option.
It bundles a 64-bit CPython 3.12 runtime, so users do not need to install Python, uv, Microsoft
Excel, LibreOffice, an AI key, or a cloud client. It is a portable folder rather than an installer:
it does not request administrator access, modify the registry, create file associations, or add an
automatic updater.
Download the ZIP and SHA256SUMS from the official
GitHub Release, compare the
published SHA-256 value, and extract the complete folder. In PowerShell:
(Get-FileHash .\WorkbookLens-2.4.0-windows-x64-portable.zip -Algorithm SHA256).Hash
Expand-Archive .\WorkbookLens-2.4.0-windows-x64-portable.zip -DestinationPath .\WorkbookLens
Set-Location .\WorkbookLens\WorkbookLens-2.4.0-windows-x64
.\Start-WorkbookLens.cmd
The launcher starts the no-console WorkbookLens.exe desktop application. Its background service
listens only on 127.0.0.1, prefers port 8765, and selects an available local port if that port is
already in use. The interface opens inside the WorkbookLens window through Edge WebView2 rather than
an external browser, and closing the window stops the service cleanly. Workbook files, generated
reports, language settings, and diagnostic logs stay on the computer; the portable runtime does not
upload them. WorkbookLensCLI.exe remains available in the same folder for command-line workflows.
The local home page also offers Convert to .xlsx for legacy binary .xls workbooks. Conversion
is enabled only when WorkbookLens detects Microsoft Excel or LibreOffice on that computer. Excel is
preferred for fidelity; LibreOffice is a fallback. Macros and events are disabled for the automated
Excel open, external links are not updated, and the generated file must pass the same bounded OOXML
safety inspection used by normal WorkbookLens inputs before it is downloaded. Conversion can still
change unsupported legacy features, cached formula results, fonts, print layout, or vendor-specific
objects, so review the .xlsx copy before relying on it.
The executable is currently unsigned, so Microsoft SmartScreen may display a warning. Verify the
checksum and download only from the official release. The portable build guarantees the built-in
rules; install the wheel in a normal Python environment when third-party entry-point plugins are
required.
Install the downloaded wheel
The .whl attached to the GitHub Release is a local Python application package, not a hosted
upload service. Workbook processing stays on the user's computer. Installing the wheel may contact
the configured Python package index once to obtain dependencies; scanning, planning, repair, diff,
and the loopback web UI do not upload workbooks.
Download workbooklens-2.4.0-py3-none-any.whl, workbooklens-2.4.0.tar.gz, and
SHA256SUMS from the official
GitHub Release, verify the
checksum, and install it with Python 3.11+ and uv.
PowerShell
Get-Content .\SHA256SUMS
(Get-FileHash .\workbooklens-2.4.0-py3-none-any.whl -Algorithm SHA256).Hash
uv tool install .\workbooklens-2.4.0-py3-none-any.whl
workbooklens --version
workbooklens serve --port 8765
Bash
grep -E ' workbooklens-2\.4\.0-py3-none-any\.whl$' SHA256SUMS | sha256sum -c -
grep -E ' workbooklens-2\.4\.0\.tar\.gz$' SHA256SUMS | sha256sum -c -
uv tool install ./workbooklens-2.4.0-py3-none-any.whl
workbooklens --version
workbooklens serve --port 8765
Then open http://127.0.0.1:8765/. The browser page and temporary upload directory are local to
that process. Sensitive workbooks should use the CLI or this loopback UI rather than a hosted CI
runner.
The setup executable, portable ZIP, and wheel are distributions of the same local application. The
installer is the normal Windows option, the portable ZIP makes no installation changes, and the
wheel is the extensible option for Python users.
Install from this source checkout
WorkbookLens requires Python 3.11 or newer and uv.
Bash
git clone https://github.com/chenweixin123/workbooklens.git
cd workbooklens
uv sync --locked
uv run workbooklens --version
uv run workbooklens demo --out .artifacts/demo
PowerShell
git clone https://github.com/chenweixin123/workbooklens.git
Set-Location workbooklens
uv sync --locked
uv run workbooklens --version
uv run workbooklens demo --out .artifacts/demo
If PyPI lists version 2.4.0, isolated installation is:
uvx --from workbooklens==2.4.0 workbooklens --help
pipx install workbooklens==2.4.0
Core workflows
# Self-contained HTML, JSON, snapshot, and SARIF
workbooklens scan INPUT.xlsx --out report/
# Optional YAML rule configuration
workbooklens scan INPUT.xlsx --config workbooklens.yml --out report/
# Gate only findings absent from an earlier report
workbooklens scan INPUT.xlsx --baseline previous/findings.json --new-only --fail-on warning --out report/
# Pin a portable logical path when invoking from varying working directories
workbooklens scan INPUT.xlsx --source-scope models/INPUT.xlsx --baseline previous/findings.json --new-only --out report/
# Preview and apply source-bound deterministic repairs to a new file
workbooklens plan INPUT.xlsx --config workbooklens.yml --out repair-plan.json
workbooklens apply INPUT.xlsx repair-plan.json --patch-id patch-0123456789abcdef --out INPUT.fixed.xlsx
workbooklens apply INPUT.xlsx repair-plan.json --safe-only --out INPUT.fixed.xlsx
# Apply lossless repairs and validate unique formula candidates from a trusted workbook
workbooklens apply INPUT.xlsx repair-plan.json --auto-repair --recalc-provider auto \
--trust-workbook --out INPUT.auto-fixed.xlsx
# Apply an explicitly reviewed layout patch or atomic layout group
workbooklens apply INPUT.xlsx repair-plan.json --patch-id patch-fedcba9876543210 --accept-layout-risk --out INPUT.layout-fixed.xlsx
# Semantic before/after comparison
workbooklens diff BEFORE.xlsx AFTER.xlsx --out diff.html
# Bounded YAML assertions and finding-count gates
workbooklens test INPUT.xlsx --config workbooklens.yml --out test-results.json
# Loopback-only local review UI
workbooklens serve --port 8765
PowerShell uses the same arguments:
workbooklens scan INPUT.xlsx --baseline previous\findings.json --new-only --fail-on warning --out report
--new-only requires --baseline. A findings.json baseline is bound to its source_scope (normally the
input path relative to the current directory), so a report for one workbook cannot silently hide a
finding in another. Without --new-only, reports retain all current findings while identifying which
were already known. Reusing a --new-only report preserves both its new and previously known IDs.
Optional Workbook Profile
Some spreadsheet mistakes cannot be proved from layout alone. An optional version-3 YAML
profile lets a user declare field roles, constraints, and repair policy without sending the
workbook anywhere:
version: 3
profile:
infer_semantics: true
report_trailing_whitespace: true
review_trailing_whitespace_patches: false
sheets:
- sheet: Invoices
range: A1:G10000
header_row: 1
columns:
- header: Invoice ID
role: identifier
repair: report
required: true
identifier_width: 8
preserve_leading_zeros: true
- header: Status
role: category
required: true
allowed_values: [Open, Paid, Void]
- header: Customer Email
role: email
- header: Amount
role: currency
repair: auto
- header: Tax Rate
role: percentage
repair: review
Supported roles are identifier, category, email, phone, currency, percentage,
date, number, and text. Select a field by header or bounded Excel column. Version 3 adds
repair: auto | review | report: auto still requires a unique parse, stable native peers, no
leading-zero risk, and all postconditions; review emits a semantic-review candidate; report
never emits a patch. Profile rules report missing required values, invalid enumerations or contact
formats, possible lost leading zeros, trailing whitespace, and number-format role conflicts. They
never invent business values. Versions 1 and 2 remain readable and retain their earlier beh
WorkbookLens 是一款本地优先的工具,可对 Excel 工作簿进行 lint 检查、回归测试、语义对比和保守修复,完全在你的机器上运行,不需要 Excel、LibreOffice、AI 密钥或云服务。