From d1955f50974947082abe92854b7032c66419d1d7 Mon Sep 17 00:00:00 2001
From: andy <andymtt@163.com>
Date: Mon, 20 Jul 2026 00:32:01 +0700
Subject: [PATCH] =?UTF-8?q?=E5=AE=9E=E7=8E=B0=20Booking=20Excel=20?=
 =?UTF-8?q?=E9=A2=84=E5=A4=84=E7=90=86=E6=8E=A5=E5=85=A5=20SuperAgent?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 PROJECT_STATE.md                              |   4 +-
 client/src/i18n/locales/en-US.ts              |   1 +
 client/src/i18n/locales/th-TH.ts              |   1 +
 client/src/i18n/locales/zh-CN.ts              |   1 +
 client/src/services/debugEmlService.ts        |   3 +
 client/src/tests/debugEmlService.spec.ts      |  16 +
 client/src/tests/debugEmlView.spec.ts         |  11 +
 client/src/types/debugEml.ts                  |   1 +
 .../views/debug/DebugEmlSuperAgentRunView.vue |  16 +
 docs/project/README.md                        |   1 +
 docs/project/frontend-backend/README.md       |   3 +
 .../backend-to-frontend-notes.md              |   1 +
 .../debug-eml-page-integration-guide.md       |   2 +
 ...gent-agentbus-project-integration-guide.md |  22 +
 .../M004-debug-eml-superagent-upload-v1.md    |   3 +
 ...07-agentbus-superagent-auto-dispatch-v1.md |   7 +
 ...king-excel-pre-superagent-enrichment-v1.md | 418 ++++++++++
 .../security-access-control-boundary.md       |   1 +
 .../impl/SuperAgentDispatchProperties.java    |  29 +
 .../impl/SuperAgentDispatchServiceImpl.java   | 203 ++++-
 .../request/ObjectStorageReadRequest.java     |  13 +
 .../result/ObjectStorageReadResult.java       |  15 +
 .../service/ObjectStorageService.java         |  11 +-
 .../AliyunOssObjectStorageServiceImpl.java    | 112 +++
 .../result/DebugEmlSuperAgentRunResult.java   |   6 +
 .../impl/DebugEmlSuperAgentProperties.java    |  10 +
 .../DebugEmlSuperAgentRunServiceImpl.java     | 124 ++-
 .../common/enums/BookingExcelFileType.java    |  16 +
 ...okingExcelAttachmentExtractionRequest.java |  29 +
 ...ookingExcelAttachmentExtractionResult.java |  37 +
 .../BookingExcelHighlightCellResult.java      |  20 +
 .../BookingExcelHighlightedRowResult.java     |  32 +
 .../result/BookingExcelMonthFilterResult.java |  41 +
 .../BookingExcelSheetExtractionResult.java    |  24 +
 ...okingExcelAttachmentExtractionService.java |  15 +
 .../BookingExcelExtractionProperties.java     |  82 ++
 ...gExcelAttachmentExtractionServiceImpl.java | 751 ++++++++++++++++++
 server/src/main/resources/application-dev.yml |   2 +
 .../src/main/resources/application-prod.yml   |   2 +
 .../src/main/resources/application-test.yml   |   2 +
 server/src/main/resources/application.yml     |   2 +
 .../SuperAgentDispatchServiceImplTest.java    | 278 +++++++
 ...AliyunOssObjectStorageServiceImplTest.java | 196 +++++
 .../DebugEmlSuperAgentControllerTest.java     | 178 +++++
 ...elAttachmentExtractionServiceImplTest.java | 223 ++++++
 45 files changed, 2955 insertions(+), 10 deletions(-)
 create mode 100644 docs/project/requirements/M011-booking-excel-pre-superagent-enrichment-v1.md
 create mode 100644 server/src/main/java/cn/nianxx/thhotel/integrations/storage/aliyunoss/common/request/ObjectStorageReadRequest.java
 create mode 100644 server/src/main/java/cn/nianxx/thhotel/integrations/storage/aliyunoss/common/result/ObjectStorageReadResult.java
 create mode 100644 server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/common/enums/BookingExcelFileType.java
 create mode 100644 server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/common/request/BookingExcelAttachmentExtractionRequest.java
 create mode 100644 server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/common/result/BookingExcelAttachmentExtractionResult.java
 create mode 100644 server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/common/result/BookingExcelHighlightCellResult.java
 create mode 100644 server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/common/result/BookingExcelHighlightedRowResult.java
 create mode 100644 server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/common/result/BookingExcelMonthFilterResult.java
 create mode 100644 server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/common/result/BookingExcelSheetExtractionResult.java
 create mode 100644 server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/service/ReservationBookingExcelAttachmentExtractionService.java
 create mode 100644 server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/service/impl/BookingExcelExtractionProperties.java
 create mode 100644 server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/service/impl/ReservationBookingExcelAttachmentExtractionServiceImpl.java
 create mode 100644 server/src/test/java/cn/nianxx/thhotel/integrations/storage/aliyunoss/service/impl/AliyunOssObjectStorageServiceImplTest.java
 create mode 100644 server/src/test/java/cn/nianxx/thhotel/workflows/reservation/excelimport/service/impl/ReservationBookingExcelAttachmentExtractionServiceImplTest.java

diff --git a/PROJECT_STATE.md b/PROJECT_STATE.md
index ab696bc..ebac31e 100644
--- a/PROJECT_STATE.md
+++ b/PROJECT_STATE.md
@@ -34,7 +34,8 @@
 - `docs/import/` 下按日期导入的资料是输入材料，不等同于当前权威开发契约；当前开发应优先看 `docs/project/README.md` 标记为当前有效或权威契约的文档。
 - 后续每完成一个 Feature 或 Checkpoint，需要更新本文件，避免项目状态继续沉淀在聊天记录里。
 - M010 Rooming List Excel 生成后端 CP1 和前端 V1 已实现：前端 `/reservation/rooming-lists/new` 上传来源名单和手工字段，后端同步生成 `.xlsx` 直接下载，第一版不落库、不上传 OSS。
-- M002 V4 CP1 当前已完成入站解析和现有任务链路过渡适配；M002 V4 CP2 已完成订单任务与多卡领域模型设计；M002 V4 CP3 已完成 V4 订单任务、多卡和 S10/S99 来源通知表结构与 Repository 基线；M002 V4 CP4 已完成入站写入新模型；M002 V4 CP5 已完成前端查询接口并补齐订单详情 `v4_order_tasks[]` 时间线；M002 V4 CP6 已完成普通卡片确认和 S10/S99 来源通知 ack；M002 V4 CP7 已完成 `REVIEW_REQUIRED` 卡复核解阻和复核场景订单归属确认；M002 V4 CP8 已完成目录校验、V4 卡片 `fields[]` 字段白名单、确认写入白名单收口和嵌套业务字段目录校验；M002 V4 CP11 已完成数据库目录、初始化种子、启动补种子、Account / Room Type / Rate Code lookup API，并把 V4 入站、确认、复核目录校验切换到当前酒店数据库目录；M002 V4 CP12 已完成前端 lookup 接入第一版和 V4 订单任务时间线消费。目录管理后台、真实 PMS 同步和 SuperAgent 目录机器接口仍未完成。
+- M011 Booking Excel 附件预处理 CP1/CP2/CP3 已实现：后端可排除人员名单类 Excel，按最近 6 个月候选窗口选择实际存在的最新 3 个业务月，抽取 Booking Update / 附加费表高亮行业务 JSON；Debug EML 和 AgentBus dispatch 在各自 include 开关与总开关同时启用时，会在调用 SuperAgent 前追加 `attachment_extractions[]`。AgentBus 生产链路默认关闭，测试机验证后再评估开启。
+- M002 V4 CP1 当前已完成入站解析和现有任务链路过渡适配；M002 V4 CP2 已完成订单任务与多卡领域模型设计；M002 V4 CP3 已完成 V4 订单任务、多卡和 S10/S99 来源通知表结构与 Repository 基线；M002 V4 CP4 已完成入站写入新模型；M002 V4 CP5 已完成前端查询接口并补齐订单详情 `v4_order_tasks[]` 时间线；M002 V4 CP6 已完成普通卡片确认和 S10/S99 来源通知 ack；M002 V4 CP7 已完成 `REVIEW_REQUIRED` 卡复核解阻和复核场景订单归属确认；M002 V4 CP8 已完成目录校验、V4 卡片 `fields[]` 字段白名单、确认写入白名单收口和嵌套业务字段目录校验；M002 V4 CP11 已完成数据库目录、初始化种子、启动补种子、Account / Room Type / Rate Code lookup API，并把 V4 入站、确认、复核目录校验切换到当前酒店数据库目录；M002 V4 CP12 已完成前端 lookup 接入第一版和 V4 订单任务时间线消费；M002 V4 CP13 目录管理后台 CP1 已完成前后端列表、新增、启用 / 停用闭环。真实 PMS 同步和 SuperAgent 目录机器接口仍未完成。
 - M002 V4 CP2 已确认：V4 工作台统一列表草案为 `/api/reservation/workbench-items`，业务订单任务接口新开 `/api/reservation/order-tasks/**`，S10/S99 来源通知详情草案为 `/api/reservation/source-notifications/{notificationId}`；S10/S99 使用来源通知模型，不再挂隐藏技术订单；`FIT + BOOKING_CODE` 不建 ACTIVE 唯一约束，匹配多条进人工复核；Basic Information 必须先确认；Account / Market / Source 当前通过数据库目录读取和派生；旧 V2/V3 任务详情和草稿确认接口后续可逐步废弃。
 
 ## 5. Next Steps
@@ -42,6 +43,7 @@
 - 后续如继续做 M002 V4，可优先进入测试机 V4 目录管理与多卡 lookup 联调、真实 PMS / OPERA / OHIP 目录同步和 `workflow_reservation_catalog_sync_run` checkpoint。
 - 后续新增重要功能时，优先在 `docs/project/requirements/` 或未来 `docs/specs/` 中形成 Spec，再实现代码。
 - M010 后续如需预览、历史记录、OSS 下载、订单 / 任务预填或客户字段目录化，再单独开前后端 checkpoint。
+- M011 后续如需运营查询或长期追踪，可进入 CP4：设计 Excel 解析批次 / 行级持久化表；当前 CP3 只增强 SuperAgent 输入，不直接落订单、任务或长期解析历史。
 
 ## 6. 文档同步提醒
 
diff --git a/client/src/i18n/locales/en-US.ts b/client/src/i18n/locales/en-US.ts
index ae70ebc..a459cfe 100644
--- a/client/src/i18n/locales/en-US.ts
+++ b/client/src/i18n/locales/en-US.ts
@@ -766,6 +766,7 @@ export default {
     parsedJson: 'Parsed JSON',
     rawAnswer: 'Raw answer',
     warnings: 'Warnings',
+    bookingExcelExtractions: 'Booking Excel attachment extraction',
     debugPayload: 'Debug payload',
     statuses: {
       idle: 'Idle',
diff --git a/client/src/i18n/locales/th-TH.ts b/client/src/i18n/locales/th-TH.ts
index c5895ba..a763646 100644
--- a/client/src/i18n/locales/th-TH.ts
+++ b/client/src/i18n/locales/th-TH.ts
@@ -766,6 +766,7 @@ export default {
     parsedJson: 'JSON ที่แยกแล้ว',
     rawAnswer: 'คำตอบดิบ',
     warnings: 'คำเตือน',
+    bookingExcelExtractions: 'การแยกไฟล์แนบ Booking Excel',
     debugPayload: 'Debug payload',
     statuses: {
       idle: 'รออัปโหลด',
diff --git a/client/src/i18n/locales/zh-CN.ts b/client/src/i18n/locales/zh-CN.ts
index 0f3d31f..bc60f72 100644
--- a/client/src/i18n/locales/zh-CN.ts
+++ b/client/src/i18n/locales/zh-CN.ts
@@ -766,6 +766,7 @@ export default {
     parsedJson: '解析 JSON',
     rawAnswer: '原始回答',
     warnings: '警告',
+    bookingExcelExtractions: 'Booking Excel 附件预处理',
     debugPayload: '调试 Payload',
     statuses: {
       idle: '待上传',
diff --git a/client/src/services/debugEmlService.ts b/client/src/services/debugEmlService.ts
index a58d214..11a90ae 100644
--- a/client/src/services/debugEmlService.ts
+++ b/client/src/services/debugEmlService.ts
@@ -273,6 +273,9 @@ function normalizeDebugEmlResult(payload: unknown): DebugEmlSuperAgentRunResult
       typeof result.html_sanitize_required === 'boolean' ? result.html_sanitize_required : null,
     html_render_mode: nullableStringValue(result.html_render_mode),
     agentbus_like_payload: isRecord(result.agentbus_like_payload) ? result.agentbus_like_payload : null,
+    attachment_extractions: Array.isArray(result.attachment_extractions)
+      ? result.attachment_extractions.filter(isRecord)
+      : [],
     superagent_session_id: nullableStringValue(result.superagent_session_id),
     superagent_run_id: nullableStringValue(result.superagent_run_id),
     superagent_raw_answer: nullableStringValue(result.superagent_raw_answer),
diff --git a/client/src/tests/debugEmlService.spec.ts b/client/src/tests/debugEmlService.spec.ts
index 0d99946..a7f9d18 100644
--- a/client/src/tests/debugEmlService.spec.ts
+++ b/client/src/tests/debugEmlService.spec.ts
@@ -84,6 +84,14 @@ describe('debugEmlService', () => {
         html_sanitize_required: true,
         html_render_mode: 'SANITIZED_HTML',
         agentbus_like_payload: { schema_version: 'debug-eml-upload-v1' },
+        attachment_extractions: [
+          {
+            file_type: 'BOOKING_UPDATE',
+            month_filter: {
+              selected_months: ['2026-05'],
+            },
+          },
+        ],
         superagent_session_id: 'session-1',
         superagent_run_id: 'run-1',
         superagent_raw_answer: '{"ok":true}',
@@ -102,6 +110,14 @@ describe('debugEmlService', () => {
     })
 
     expect(fetchMock).toHaveBeenCalledTimes(1)
+    expect(result.attachment_extractions).toEqual([
+      {
+        file_type: 'BOOKING_UPDATE',
+        month_filter: {
+          selected_months: ['2026-05'],
+        },
+      },
+    ])
     const [url, init] = fetchMock.mock.calls[0]!
     expect(url).toBe('/api/system/debug/eml-superagent-runs')
     expect(init).toMatchObject({
diff --git a/client/src/tests/debugEmlView.spec.ts b/client/src/tests/debugEmlView.spec.ts
index de91dd0..699e810 100644
--- a/client/src/tests/debugEmlView.spec.ts
+++ b/client/src/tests/debugEmlView.spec.ts
@@ -63,6 +63,14 @@ function createResult() {
         original_message_id: '<original@example.test>',
       },
     },
+    attachment_extractions: [
+      {
+        file_type: 'BOOKING_UPDATE',
+        month_filter: {
+          selected_months: ['2026-05'],
+        },
+      },
+    ],
     superagent_session_id: 'session-1',
     superagent_run_id: 'run-1',
     superagent_raw_answer: '{"ok":true}',
@@ -176,6 +184,9 @@ describe('DebugEmlSuperAgentRunView', () => {
     expect(wrapper.find('.debug-eml-html-preview').html()).not.toContain('<script>')
     expect(wrapper.find('.debug-eml-html-preview').html()).not.toContain('onclick')
     expect(wrapper.text()).toContain('booking.eml')
+    expect(wrapper.text()).toContain('Booking Excel 附件预处理')
+    expect(wrapper.text()).toContain('"file_type": "BOOKING_UPDATE"')
+    expect(wrapper.text()).toContain('"selected_months"')
     expect(wrapper.text()).toContain('"schema_version": "debug-eml-upload-v1"')
     expect(wrapper.text()).toContain('"ok": true')
   })
diff --git a/client/src/types/debugEml.ts b/client/src/types/debugEml.ts
index 342fea1..0de4116 100644
--- a/client/src/types/debugEml.ts
+++ b/client/src/types/debugEml.ts
@@ -31,6 +31,7 @@ export interface DebugEmlSuperAgentRunResult {
   html_sanitize_required: boolean | null
   html_render_mode: 'SANITIZED_HTML' | 'TEXT_ONLY' | string | null
   agentbus_like_payload: Record<string, unknown> | null
+  attachment_extractions: Record<string, unknown>[]
   superagent_session_id: string | null
   superagent_run_id: string | null
   superagent_raw_answer: string | null
diff --git a/client/src/views/debug/DebugEmlSuperAgentRunView.vue b/client/src/views/debug/DebugEmlSuperAgentRunView.vue
index 3000747..56fb365 100644
--- a/client/src/views/debug/DebugEmlSuperAgentRunView.vue
+++ b/client/src/views/debug/DebugEmlSuperAgentRunView.vue
@@ -357,6 +357,22 @@
             </details>
           </section>
 
+          <section
+            v-if="result.attachment_extractions.length"
+            class="debug-eml-card"
+          >
+            <div class="th-section-header">
+              <h2 class="th-section-title">
+                <i
+                  class="pi pi-file-excel"
+                  aria-hidden="true"
+                />
+                {{ t('debugEml.bookingExcelExtractions') }}
+              </h2>
+            </div>
+            <pre>{{ formatJson(result.attachment_extractions) }}</pre>
+          </section>
+
           <section class="debug-eml-card debug-eml-result-section">
             <div class="th-section-header">
               <h2 class="th-section-title">
diff --git a/docs/project/README.md b/docs/project/README.md
index a3ec07b..338cef6 100644
--- a/docs/project/README.md
+++ b/docs/project/README.md
@@ -61,6 +61,7 @@
 | `requirements/M008-excel-to-pdf-conversion-v1.md` | 当前有效 | M008 Excel 转 PDF 文件转换能力方案，记录 LibreOffice headless、手动上传转换、邮件附件自动派生 PDF 和部署要求；CP2 已实现手动上传后端接口。 |
 | `requirements/M009-manual-invoice-generation-v1.md` | 当前有效 | M009 Manual Invoice 手工开票生成方案；后端 CP2 已支持无订单 / 无任务手工填写、填充 Excel 模板、转 PDF、OSS 输出和生成记录。 |
 | `requirements/M010-rooming-list-excel-generation-v1.md` | 当前有效 | M010 Rooming List Excel 生成方案；后端 CP1 已支持前端上传来源名单和手工字段，同步生成 `.xlsx` 直接下载，不落库、不上传 OSS。 |
+| `requirements/M011-booking-excel-pre-superagent-enrichment-v1.md` | 当前有效 | M011 Booking Excel 附件预处理方案；CP1/CP2/CP3 已支持 Debug EML 和 AgentBus dispatch 调 SuperAgent 前排除人员名单类 Excel、抽取 Booking / 附加费类 Excel 高亮行并追加 `attachment_extractions[]`；生产 AgentBus 增强默认关闭。 |
 
 ## 集成契约
 
diff --git a/docs/project/frontend-backend/README.md b/docs/project/frontend-backend/README.md
index abe9408..b8a1112 100644
--- a/docs/project/frontend-backend/README.md
+++ b/docs/project/frontend-backend/README.md
@@ -48,6 +48,7 @@
 | 订单任务多卡模型 V4 | `docs/project/requirements/M002-v4-order-task-card-domain-model-cp2.md` | 当前 V4 主入口；后端已开放工作台统一列表、V4 订单任务列表 / 详情、卡片确认、复核解阻、S10/S99 来源通知详情和 ack；前端已完成 V4 页面第一版、目录 lookup 接入、订单详情 V4 时间线消费和系统设置目录管理 CP1。 |
 | Manual Invoice 手工开票生成 | `docs/project/requirements/M009-manual-invoice-generation-v1.md` | 当前有效；后端 CP2 已支持无订单 / 无任务手工填写字段、填 Excel 模板、转 PDF、OSS 输出和生成记录。 |
 | Rooming List Excel 生成 | `docs/project/requirements/M010-rooming-list-excel-generation-v1.md` | 当前有效；后端 CP1 已支持前端上传来源名单并填写目标字段，同步生成 `.xlsx` 直接下载；前端 V1 已新增 `/reservation/rooming-lists/new`，按 Blob 下载处理，不落库、不上传 OSS。 |
+| Booking Excel 附件预处理 | `docs/project/requirements/M011-booking-excel-pre-superagent-enrichment-v1.md` | 当前有效；Debug EML 和 AgentBus dispatch 已支持调 SuperAgent 前排除人员名单类 Excel、抽取 Booking / 附加费类 Excel 高亮行并生成 `attachment_extractions[]`；生产 AgentBus 增强默认关闭。 |
 | 订单任务主流程 V2 | `docs/project/requirements/M002-order-task-workflow-v2.md` | 已实现阶段记录，保留用于理解当前代码中的 S000/S999、订单任务流转和 OPERA 模拟骨架。 |
 | 后端 checkpoint | `docs/project/requirements/M002-backend-checkpoint-plan.md` | 阶段记录，用于理解后端拆分和验收。 |
 | 前端可用接口与待补接口 | `docs/project/frontend-backend/frontend-to-backend-api-requests.md` | 前后端协作清单，已区分可用、后置和历史候选路径，不替代后端权威契约。 |
@@ -64,6 +65,8 @@
 - 任务卡字段控件契约 V1 后端第一版已完成，任务详情 `fields[]` 已返回 `control_type/edit_scope/write_target/options_source/raw_readonly/control_hint`；前端后续按契约接入，不要硬编码 PMS 房型、Rate Code 或未冻结枚举。
 - Manual Invoice 第一阶段按 M009 推进：后端已提供 `POST /api/reservation/invoices/manual-generations`，前端已新增 `/reservation/invoices/new` 手工开票页面，并已按 `invoice.html` 原型的三段式业务结构对齐；页面可以不依赖订单或任务，用户手工填写 / 选择字段后由后端业务接口填充 Excel 模板并生成 PDF；前端不得直接调用 M008 的调试上传转换接口来完成业务开票。侧边栏入口仍以登录后端返回的 menus 为准，建议后续在菜单管理中配置 `RESERVATION_MANUAL_INVOICE` / `/reservation/invoices/new` / `RESERVATION_INVOICE_GENERATE`。
 - Rooming List Excel 后端 CP1 和前端 V1 已按 M010 落地：接口为 `POST /api/reservation/rooming-lists/generations`，前端页面为 `/reservation/rooming-lists/new`，上传来源名单、填写每房人数和目标列字段，后端同步返回 `.xlsx` 下载；该能力不依赖订单或任务，第一版不落库、不上传 OSS，权限码为 `RESERVATION_ROOMING_LIST_GENERATE`。
+- Booking Excel 附件预处理已按 M011 落地 CP1/CP2/CP3：Debug EML 和 AgentBus dispatch 调用 SuperAgent 前由后端解析 Excel 附件，排除人员名单类文件，只把 Booking Update / 附加费表的高亮行业务摘要追加为 `attachment_extractions[]`；第一版不新增前端普通业务入口，AgentBus 增强生产默认关闭。
+- Reservation V4 目录管理后台 CP1 已前后端接入：系统设置下新增 `/system/reservation-catalogs`，需要登录用户具备 `RESERVATION_CATALOG_MANAGE`；前端可维护 Account、Room Type、Rate Code 的列表、新增、启用 / 停用，并明确提示停用目录不再进入普通 V4 任务卡 lookup。
 
 ## 6. 前端开发注意事项
 
diff --git a/docs/project/frontend-backend/backend-to-frontend-notes.md b/docs/project/frontend-backend/backend-to-frontend-notes.md
index c10de32..1febd0f 100644
--- a/docs/project/frontend-backend/backend-to-frontend-notes.md
+++ b/docs/project/frontend-backend/backend-to-frontend-notes.md
@@ -328,6 +328,7 @@ run_label: 可选调试标签
 - `external_message_id` 是后端生成的 Debug 独立 ID，格式类似 `debug-eml-run-{debugRunId}-{sha256前缀}`；原始邮件 `Message-ID` 不再放入 `agentbus_like_payload`，需要排查时看原始 EML OSS 文件和后端 Debug run / SuperAgent metadata。
 - 邮件会话解析支持 `References`、`In-Reply-To` 和 `Thread-Index`，但 Debug EML 的 `external_message_id` 不使用原始 `Message-ID` 做幂等。
 - `agentbus_like_payload` 是后端发送给 SuperAgent 的 AgentBus Outlook-like 主输入，前端只做只读展示；该对象会包含普通 `reply_policy.mode=manual`、`reply_policy.final_only=true`，但不再包含 `schema_version`、`source.provider=DEBUG_EML_UPLOAD`、`debug_context` 或旧的 Debug 专属 `reply_policy.mode=debug_only`。
+- M011 Debug EML 开关启用后，后端会在 `agentbus_like_payload.attachment_extractions[]` 和 Debug 响应中返回 Booking Excel 附件预处理结果；AgentBus dispatch 开关启用后，后端会在调用 SuperAgent 前把同结构结果追加到后台分发 payload。前端只做只读调试展示，不允许编辑后重新提交，也不得把其中的附件 URL、客户敏感字段或解析 JSON 写入普通日志、埋点、localStorage 或 URL query。
 - Debug 来源版本仍由后端 SourceMessage payload 表 `schemaVersion=debug-eml-upload-v1` 记录，前端页面不要再依赖 `agentbus_like_payload.schema_version`。
 - 第一版只返回 SuperAgent 结果，不创建订单、不创建任务、不调用任务结果通知接口。
 - `X-TH-Hotel-Debug-Upload-Key` 只能由调试人员在受控环境手动提供，不能放入 `VITE_*`、源码、构建产物、URL query、localStorage、错误上报或普通日志。
diff --git a/docs/project/frontend-backend/debug-eml-page-integration-guide.md b/docs/project/frontend-backend/debug-eml-page-integration-guide.md
index 8e825a4..1226933 100644
--- a/docs/project/frontend-backend/debug-eml-page-integration-guide.md
+++ b/docs/project/frontend-backend/debug-eml-page-integration-guide.md
@@ -141,6 +141,7 @@ export async function uploadDebugEml(input: {
 | `html_sanitize_required` | boolean | 当前为 `true`，提醒前端不要直接信任原始 HTML。 |
 | `html_render_mode` | string | 当前可能为 `SANITIZED_HTML` 或 `TEXT_ONLY`。 |
 | `agentbus_like_payload` | object | 后端发送给 SuperAgent 的 AgentBus Outlook-like 主 payload；只读展示。 |
+| `attachment_extractions[]` | array | M011 启用时返回的 Booking Excel 附件预处理安全预览，内容与 `agentbus_like_payload.attachment_extractions[]` 对齐；未启用或无匹配附件时为空或不返回。 |
 | `superagent_session_id` | string | SuperAgent session ID。 |
 | `superagent_run_id` | string | SuperAgent run ID。 |
 | `superagent_raw_answer` | string | SuperAgent 最终原始文本回答。 |
@@ -165,6 +166,7 @@ export async function uploadDebugEml(input: {
 - 邮件正文 iframe / 富文本预览优先使用 `html_body_sanitized`。
 - `html_body_with_oss_urls` 可以放在“原始处理 HTML”折叠面板中，不作为默认渲染内容。
 - `agentbus_like_payload` 不包含 Debug 专属字段，不再包含 `schema_version`、`source.provider=DEBUG_EML_UPLOAD`、`source.original_message_id`、`debug_context` 或旧的 Debug 专属 `reply_policy.mode=debug_only`；当前会包含普通 `reply_policy.mode=manual`、`reply_policy.final_only=true`。
+- M011 Debug EML 开关启用后，`agentbus_like_payload` 可能追加 `attachment_extractions[]`，用于让 SuperAgent 在不直接打开整份 Excel 的情况下读取 Booking Update / 附加费表中的高亮业务行。前端只能格式化展示该 JSON，不做业务保存、人工确认或二次提交。
 - 原始邮件 `Message-ID` 不作为 Debug 外部消息 ID，也不进入 SuperAgent 主 payload；需要排查时看原始 EML OSS 文件和后端 Debug run / SuperAgent metadata。
 - `external_message_id` 是 Debug 链路生成的独立 ID，不等同于原始 `Message-ID`。
 - `superagent_parsed_json` 有值时优先展示格式化 JSON；没有值时展示 `superagent_raw_answer`。
diff --git a/docs/project/integrations/superagent-agentbus-project-integration-guide.md b/docs/project/integrations/superagent-agentbus-project-integration-guide.md
index df5c56f..c20185a 100644
--- a/docs/project/integrations/superagent-agentbus-project-integration-guide.md
+++ b/docs/project/integrations/superagent-agentbus-project-integration-guide.md
@@ -477,6 +477,28 @@ AgentBus 新业务 frame
 - dispatch 成功不代表已经创建订单或任务。
 - 任务创建仍由 SuperAgent 后续调用本系统任务结果通知接口或 MCP 写入工具触发。
 
+M011 CP3 已在 worker 调用 SuperAgent Open API 前增加可配置的 Booking Excel 附件预处理：
+
+```text
+SourceMessage payload + 附件引用
+→ 识别 Excel 附件类型
+→ 排除 PASSENGER_ROSTER 人员名单
+→ 按月份窗口抽取 BOOKING_SURCHARGE / BOOKING_UPDATE 高亮行
+→ 把 attachment_extractions[] 追加到发给 SuperAgent 的 AgentBus Outlook-like payload
+```
+
+中文说明：该预处理只增强 SuperAgent 输入证据，不改变 SourceMessage Inbox 的来源事实定位，也不直接创建订单、任务或客户回复。解析失败第一版建议写入安全 warning 并按配置决定是否继续调用 SuperAgent；日志和 dispatch run 不得保存完整附件 URL、签名参数、API Key、Cookie、Secret 或整份 Excel 内容。详细规则见
+`docs/project/requirements/M011-booking-excel-pre-superagent-enrichment-v1.md`。
+
+开启方式：
+
+```text
+AGENTBUS_TEST_SUPERAGENT_DISPATCH_INCLUDE_BOOKING_EXCEL_EXTRACTIONS=true
+RESERVATION_BOOKING_EXCEL_EXTRACTION_ENABLED=true
+```
+
+中文说明：`agentbus.superagent-dispatch.include-booking-excel-extractions` 只控制 AgentBus worker 是否把抽取结果追加给 SuperAgent；`reservation.booking-excel-extraction.enabled` 是解析服务总开关。两者必须同时开启才会产生有效高亮行结果，生产环境默认关闭。
+
 当前表名为 `platform_superagent_dispatch_run`，详细字段、状态流转、错误分类和验收标准见
 `docs/project/requirements/M007-agentbus-superagent-auto-dispatch-v1.md`。
 
diff --git a/docs/project/requirements/M004-debug-eml-superagent-upload-v1.md b/docs/project/requirements/M004-debug-eml-superagent-upload-v1.md
index 36432f0..ec2c8d6 100644
--- a/docs/project/requirements/M004-debug-eml-superagent-upload-v1.md
+++ b/docs/project/requirements/M004-debug-eml-superagent-upload-v1.md
@@ -107,6 +107,7 @@ Debug 页面上传 .eml
 → debug run 标记为 CAPTURING_SOURCE_MESSAGE
 → 调用 SourceMessageCaptureService 写入 SourceMessage Inbox
 → debug run 标记为 SOURCE_CAPTURED
+→ M011 Debug 开关启用时，对 Excel 附件做 Booking 高亮行预处理，并把 attachment_extractions[] 追加到 payload
 → debug run 标记为 CALLING_SUPERAGENT
 → 调用 SuperAgent Open API 创建 session
 → 调用 messages/stream 发送邮件 payload
@@ -120,6 +121,7 @@ Debug 页面上传 .eml
 - SourceMessage Inbox 仍然只表达来源事实，不表达 AI 结论、订单归属或任务状态。
 - Debug 上传链路不能伪装成 AgentBus；必须在 `provider`、`schema_version` 或 debug run 中留下可追溯来源。
 - SuperAgent 返回内容第一版只作为调试展示，不进入 M002 订单任务主流程。
+- M011 的 Excel 附件预处理只作为 SuperAgent 输入增强和 Debug 预览，不直接创建订单或任务；详细规则见 `docs/project/requirements/M011-booking-excel-pre-superagent-enrichment-v1.md`。
 
 ## 6. 后端接口设计
 
@@ -156,6 +158,7 @@ Header: X-TH-Hotel-Debug-Upload-Key: <DEBUG_EML_UPLOAD_ACCESS_KEY>
 | `html_sanitize_required` | 固定提示前端 HTML 需要按安全策略展示 |
 | `html_render_mode` | HTML 推荐渲染模式，当前优先返回 `SANITIZED_HTML` |
 | `agentbus_like_payload` | 发送给 SuperAgent 的 AgentBus Outlook-like 结构化邮件 payload；Debug 来源版本仍由 SourceMessage payload 表 `schemaVersion=debug-eml-upload-v1` 记录，不放入主 payload |
+| `attachment_extractions[]` | M011 Debug 开关启用时返回 Booking Excel 附件预处理安全预览，内容与 `agentbus_like_payload.attachment_extractions[]` 对齐 |
 | `superagent_session_id` | SuperAgent Open API session ID，失败时为空 |
 | `superagent_run_id` | SuperAgent 返回的 run ID，失败时为空 |
 | `superagent_raw_answer` | SuperAgent 最终文本回答 |
diff --git a/docs/project/requirements/M007-agentbus-superagent-auto-dispatch-v1.md b/docs/project/requirements/M007-agentbus-superagent-auto-dispatch-v1.md
index 1db2b63..358c998 100644
--- a/docs/project/requirements/M007-agentbus-superagent-auto-dispatch-v1.md
+++ b/docs/project/requirements/M007-agentbus-superagent-auto-dispatch-v1.md
@@ -20,6 +20,7 @@ M001 已完成 AgentBus 邮件来源事实入库，M004 已完成 Debug EML 人
 AgentBus WebSocket 收到邮件
 → 写入 SourceMessage Inbox
 → 创建 SuperAgent dispatch / outbox 记录
+→ M011 CP3 开启时，worker 对 Excel 附件做 Booking 高亮行预处理
 → 异步 worker 调用 SuperAgent Open API
 → 保存 session_id / run_id / raw_answer / parsed_json / 状态
 → 等待 SuperAgent 通过现有任务结果通知接口或 MCP 提交业务结果
@@ -35,6 +36,7 @@ AgentBus WebSocket 收到邮件
 - Debug EML 链路和生产自动分发链路复用 SuperAgent Open API client，但运行记录表和 provider 必须区分。
 - SuperAgent 返回内容只能保存为外部能力输出，不直接改变业务最终状态。
 - 业务任务创建继续依赖 SuperAgent 后续调用本系统任务结果通知接口或 MCP 工具。
+- M011 已在 Debug EML 和 AgentBus dispatch 链路验证 `attachment_extractions[]` 结构；AgentBus worker 调用 SuperAgent 前追加该字段由独立配置控制，生产链路默认关闭。
 
 ## 3. 触发规则
 
@@ -124,6 +126,8 @@ KEY idx_dispatch_external_message (hotel_id, external_message_id)
 | `agentbus.superagent-dispatch.lock-ttl` | `5m` | worker 处理锁有效期 |
 | `agentbus.superagent-dispatch.initial-backoff` | `30s` | 首次失败后的重试等待时间 |
 | `agentbus.superagent-dispatch.max-backoff` | `15m` | 最大重试等待时间 |
+| `agentbus.superagent-dispatch.include-booking-excel-extractions` | `false` | M011 CP3：是否在调用 SuperAgent 前追加 Booking Excel 高亮行预处理结果 |
+| `agentbus.superagent-dispatch.booking-excel-download-max-size` | `10MB` | M011 CP3：worker 读取单个 Excel 附件的最大大小 |
 | `superagent.open-api.agentbus-external-subject-id` | `th-hotel-agentbus-source-message` | AgentBus 自动分发创建 session 时使用的 external subject id |
 | `superagent.open-api.sse-recovery-max-attempts` | `5` | SSE 断流恢复最大次数 |
 
@@ -133,6 +137,8 @@ KEY idx_dispatch_external_message (hotel_id, external_message_id)
 
 AgentBus 自动分发发送给 SuperAgent 的 message 第一版应基于 SourceMessage 原始 payload 构造。Debug EML 发送给 SuperAgent 的 `agentbus_like_payload` 也按 AgentBus Outlook-like 主结构组装，并包含 `reply_policy.mode`、`reply_policy.final_only`；Debug EML V1 暂用 `mode=manual`、`final_only=true`，不能再使用旧的 Debug 专属 `debug_only`。Debug 来源区分仍保留在 SourceMessage `provider=DEBUG_EML_UPLOAD`、payload 表 `schemaVersion=debug-eml-upload-v1` 和 Open API metadata 中，不混入主 payload。后续 AgentBus 明确真实 `reply_policy.mode` 枚举后，Debug EML 和实时链路需要一起对齐。
 
+AgentBus 开启 M011 CP3 时，message 主 payload 会追加 `attachment_extractions[]`。该字段只包含被识别为 Booking Update / Booking Surcharge 的高亮行安全摘要，以及人员名单类 Excel、附件读取失败或解析失败的安全排除结果 / warning，不包含整份 Excel、完整附件 URL、OSS 签名参数、API Key、Cookie 或 Secret。详细契约见 `docs/project/requirements/M011-booking-excel-pre-superagent-enrichment-v1.md`。
+
 发送 metadata 建议包含：
 
 ```json
@@ -214,6 +220,7 @@ RUNNING / RETRYABLE_FAILED
 - 新增 `SuperAgentDispatchRunEntity`、Mapper、Repository、Service 和配置类。
 - AgentBus 捕获 `AGENTBUS + RECEIVED` 后，在配置开启时幂等创建 dispatch run；重复投递可补偿缺失 outbox。
 - worker 处理 `PENDING / RETRYABLE_FAILED / 锁已过期 RUNNING`，调用共享 SuperAgent Open API client。
+- M011 CP3 已接入 worker：配置开启时读取 SourceMessage 附件 URL，下载 Excel 字节，复用 Booking Excel 预处理服务，并把非空 `attachment_extractions[]` 追加到发给 SuperAgent 的主 payload。
 - Open API client 支持 `Content-Location`、`run_id`、SSE `id`、`Last-Event-ID`、`GET /runs/{run_id}` 和 `GET /runs/{run_id}/events` 恢复。
 - Debug EML 继续复用共享 Open API client。
 - dispatch 成功保存 session、run、last event id、raw answer、parsed json、trace 摘要和状态。
diff --git a/docs/project/requirements/M011-booking-excel-pre-superagent-enrichment-v1.md b/docs/project/requirements/M011-booking-excel-pre-superagent-enrichment-v1.md
new file mode 100644
index 0000000..aeabdbd
--- /dev/null
+++ b/docs/project/requirements/M011-booking-excel-pre-superagent-enrichment-v1.md
@@ -0,0 +1,418 @@
+# M011 Booking Excel 高亮行预处理与 SuperAgent 调用前增强 V1
+
+| 项目 | 内容 |
+| --- | --- |
+| 文档状态 | 当前有效；CP1 / CP2 / CP3 已实现，生产链路默认关闭 |
+| 适用范围 | AgentBus 入站邮件和 Debug EML 上传邮件中的 Excel 附件，在调用 SuperAgent Open API 前做结构化预处理 |
+| 当前目标 | 排除旅行名单类 Excel，抽取 Booking / 附加费类 Excel 中带背景色的业务行，生成安全 JSON 并附加到发给 SuperAgent 的 payload |
+| 依赖能力 | SourceMessage Inbox、Debug EML、AgentBus 自动分发、Apache POI、OSS 附件读取能力、SuperAgent Open API |
+
+## 1. 背景
+
+当前 AgentBus 和 Debug EML 链路都会把邮件正文、HTML、附件摘要组装成 AgentBus Outlook-like payload 后交给 SuperAgent。实际业务邮件中存在多种 Excel 附件：
+
+- 第一种是旅行团人员名单，例如包含 `护照全名`、证件号、生日、性别等字段。这类文件主要服务 Rooming List 或旅客名单整理，不应进入 Booking 更新 / 附加费抽取逻辑。
+- 第二种是春节、节假日或其他附加费用表，业务上关心其中带背景色标记的行。
+- 第三种是 Wyndham / Booking Update 类多 sheet 表格，业务上同样关心最近几个月 sheet 中带背景色标记的行。
+
+如果把整份 Excel 只作为附件 URL 交给 SuperAgent，模型需要自行下载、打开、理解多 sheet 和样式，稳定性和耗时都不可控。因此本需求建议在后端调用 SuperAgent 前增加一个轻量预处理层：只提取与业务判断相关的安全结构化 JSON，把它作为邮件 payload 的补充证据。
+
+## 2. 目标
+
+- 在 AgentBus 自动分发和 Debug EML 上传两条链路中复用同一套 Excel 附件预处理逻辑；当前两条链路均已接入，生产链路仍由配置默认关闭。
+- 识别并排除旅行名单类 Excel，避免把人员名单误当成 Booking 更新或附加费数据。
+- 对 Booking Update / Booking Surcharge 类 Excel，按最近月份筛选 sheet，只抽取有业务背景色的行。
+- 把抽取结果追加到发给 SuperAgent 的 AgentBus Outlook-like payload 中，字段建议为 `attachment_extractions[]`。
+- Debug EML 页面可以展示后端返回的安全抽取预览，用于验证解析是否符合预期。
+- 不改变现有 SourceMessage Inbox 的来源事实定位，不直接创建订单、任务、OPERA / OHIP 操作或客户回复。
+
+## 3. 非目标
+
+- 不把 Excel 高亮行直接落成订单、任务或业务状态。
+- 不绕过 SuperAgent 后续 `task-results` / MCP 入站和本系统校验、人工确认流程。
+- 不让前端直接调用 SuperAgent、AgentBus、OSS 或 Excel 解析服务。
+- 不依赖文件名作为唯一判断依据；文件名只作为辅助信号。
+- 不在普通日志、错误响应、埋点或普通业务接口中输出完整 Excel 内容、完整附件 URL、OSS 签名参数、客户敏感信息、API Key、Cookie 或 Secret。
+- V1 只处理单元格背景色，不把字体颜色、批注、筛选状态或条件格式结果作为稳定业务输入；如后续需要，另开 checkpoint。
+
+## 4. 文件类型识别规则
+
+后端应对每个 `.xls` / `.xlsx` 附件做 sheet 级和 workbook 级识别。推荐输出稳定类型：
+
+| 类型 | 中文说明 | V1 动作 |
+| --- | --- | --- |
+| `PASSENGER_ROSTER` | 旅行团人员名单 / Rooming List 来源名单 | 排除，不向 SuperAgent 提供行级抽取数据，只记录安全 warning 或 `excluded=true` |
+| `BOOKING_SURCHARGE` | 春节、节假日或其他 Booking 附加费用表 | 按月份和背景色抽取行 |
+| `BOOKING_UPDATE` | Booking Update / Wyndham 更新类表格 | 按月份和背景色抽取行 |
+| `UNKNOWN` | 未识别 Excel | 不抽取，记录安全 warning |
+
+### 4.1 第一种表格排除规则
+
+推荐规则：
+
+1. 扫描每个 sheet 前 20 行，做表头归一化，忽略大小写、前后空格、换行和中英文括号差异。
+2. 如果命中以下人员名单字段中的 4 个或以上，可判定该 sheet 为 `PASSENGER_ROSTER`：
+
+```text
+旅游批次
+旅游日期
+成团航班信息
+团号
+团长
+姓名
+护照全名
+证件号
+护照号
+证件有效期结束
+性别
+生日
+年龄
+饮食禁忌
+重大疾病
+```
+
+3. 如果同一个 sheet 同时存在明确 Booking 核心字段组合，应优先标记为待确认而不是直接排除。Booking 核心字段包括：
+
+```text
+酒店 / Hotel / โรงแรม
+酒店回应状况 / Hotel Status / สถานะ
+备注 / Remark / หมายเหตุ
+入住 / Check In / วันเช็คอิน
+退房 / Check Out / วันเช็คเอาท์
+房型 / Room Type
+房数 / Rooms
+团号 / Group Code
+```
+
+4. 如果 workbook 中全部有效 sheet 都是 `PASSENGER_ROSTER`，则整份附件排除。
+5. 如果 workbook 中部分 sheet 是人员名单、部分 sheet 是 Booking 表，应只排除人员名单 sheet，继续处理其他 sheet。
+
+中文说明：第一种表格的排除重点是“字段组合”，不是文件名。后续即使文件名变化，只要字段结构是旅行名单，仍应排除。
+
+### 4.2 第二、第三种表格识别规则
+
+`BOOKING_SURCHARGE` 推荐同时参考：
+
+- 表头或正文出现 `附加费`、`春节`、`新年`、`Surcharge`、`Gala Dinner`、`Compulsory` 等关键词。
+- 存在酒店、入住 / 退房、房型、房数、费用、备注等 Booking 或费用相关字段。
+- 文件名可作为辅助信号，但不能单独决定类型。
+
+`BOOKING_UPDATE` 推荐同时参考：
+
+- sheet 名或文件名出现 `BOOKING`、`UPDATE BOOKING`、`WYNDHAM`、月份标识等关键词。
+- 存在团号、酒店、入住 / 退房、房型、房数、酒店回应状态、备注等 Booking 更新相关字段。
+- 多 sheet 且 sheet 名形如 `BOOKING 01-2026`、`BOOKING 02-2026` 时，优先按 sheet 月份筛选。
+
+识别置信度不足时应输出 `UNKNOWN`，不做激进抽取。
+
+## 5. 最近月份筛选规则
+
+第二、第三种表格通常包含多个月份 sheet，但当前真实样例常见滞后到 4 月、5 月。V1 默认不应死取“当前月 + 前 2 个月”，而应使用“最近 6 个月候选窗口 + 文件内最新 3 个月”的两段式规则。
+
+### 5.1 显式月份窗口
+
+Debug 或后续管理配置可以显式指定月份窗口：
+
+```text
+from_month=YYYY-MM
+to_month=YYYY-MM
+```
+
+规则：
+
+- 优先从 sheet 名解析月份，例如 `BOOKING 01-2026` 解析为 `2026-01`。
+- sheet 名存在多个日期时，优先识别 `MM-YYYY`、`YYYY-MM`、`MMM YYYY` 这类月份粒度。
+- 如果 sheet 名无法解析月份，可扫描业务日期列，例如入住、退房、Booking Date，并以行级日期判断是否落入窗口。
+- 返回结果中必须记录 `matched_sheets[]` 和 `skipped_sheets[]`，便于 Debug 页面核对“为什么某个 sheet 没被抽”。
+
+### 5.2 默认月份选择
+
+没有显式传入 `from_month` / `to_month` 时，默认按以下规则：
+
+1. 取基准月份 `base_month`。
+2. AgentBus 链路的 `base_month` 优先来自 SourceMessage 的 `payload_received_at` 或 AgentBus 邮件 `received_at`，并按酒店本地时区转换为业务月份。
+3. Debug EML 链路的 `base_month` 按本系统 Debug 上传运行创建时间计算，不再尝试按 EML 原始收件时间计算。
+4. 如果来源接收时间缺失，再使用系统当前时间。
+5. 以 `base_month` 为终点，向前取 `lookback_months=6` 个自然月作为候选窗口，包含基准月。
+6. 从文件实际存在且落在候选窗口内的月份中，按月份倒序选择最新 `max_selected_months=3` 个。
+7. 如果候选窗口内实际存在月份少于 3 个，有几个处理几个，并返回 `MATCHED_MONTHS_LESS_THAN_LIMIT` warning。
+8. 如果候选窗口内没有任何月份，返回 `NO_MATCHED_MONTH_SHEET` warning，不回退到 6 个月之前的旧 sheet。
+
+示例：
+
+```text
+邮件接收时间：2026-07-19
+base_month：2026-07
+lookback_months：6
+候选窗口：2026-02 ~ 2026-07
+文件实际月份：2026-03、2026-04
+最终处理月份：2026-03、2026-04
+```
+
+如果文件实际月份为：
+
+```text
+2026-03、2026-04、2026-05、2026-06
+```
+
+最终处理：
+
+```text
+2026-04、2026-05、2026-06
+```
+
+中文说明：这里的“最近几个月”不要由 SuperAgent 猜，应由后端配置或调试页面参数确定。生产链路建议先用默认两段式规则，Debug 链路后续可允许调试人员手动覆盖。
+
+## 6. 高亮行抽取规则
+
+V1 只抽取单元格背景色，不抽取字体颜色。
+
+推荐 Apache POI 判断口径：
+
+- 只把 `FillPatternType.SOLID_FOREGROUND` 且前景色不是默认、自动、白色或主题默认色的单元格视为背景色标记。
+- 忽略空白列、样式污染列和 Excel `max_col` 虚高带来的尾部空列。
+- 先识别表头行和有效业务列，再只扫描业务列范围。
+- 表头自身背景色不代表业务高亮，应从数据行开始判断。
+- 一行只要任一业务列有有效背景色，就作为高亮业务行返回。
+- 返回整行业务字段，同时返回 `highlight_cells[]`，说明哪些列触发了高亮。
+
+建议保留颜色原始值，统一为 ARGB / RGB 字符串：
+
+```json
+{
+  "column": "G",
+  "header": "Remark",
+  "value": "Need confirm surcharge",
+  "fill_color": "FFFFFF00"
+}
+```
+
+## 7. 输出 JSON 契约
+
+后端发给 SuperAgent 的 AgentBus Outlook-like payload 建议增加：
+
+```json
+{
+  "attachment_extractions": [
+    {
+      "attachment_name": "WYNDHAM LIANTAI 2026 UPDATE BOOKING 12-05-2026 NO.1-3.xlsx",
+      "attachment_sha256": "sha256-hex",
+      "file_type": "BOOKING_UPDATE",
+      "parser_version": "booking-highlight-excel-v1",
+      "excluded": false,
+      "skipped_reason": null,
+      "month_filter": {
+        "mode": "DEFAULT_LOOKBACK_LATEST_AVAILABLE",
+        "base_month": "2026-07",
+        "lookback_months": 6,
+        "max_selected_months": 3,
+        "candidate_from_month": "2026-02",
+        "candidate_to_month": "2026-07",
+        "available_months": ["2026-03", "2026-04", "2026-05", "2026-06"],
+        "selected_months": ["2026-04", "2026-05", "2026-06"],
+        "matched_sheets": ["BOOKING 04-2026", "BOOKING 05-2026", "BOOKING 06-2026"],
+        "skipped_sheets": ["BOOKING 01-2026", "BOOKING 02-2026", "BOOKING 03-2026"]
+      },
+      "sheets": [
+        {
+          "sheet_name": "BOOKING 05-2026",
+          "header_row": 3,
+          "highlighted_row_count": 2,
+          "highlighted_rows": [
+            {
+              "row_number": 84,
+              "row_key": "optional-stable-row-key",
+              "highlight_colors": ["FFFFFF00"],
+              "highlight_cells": [
+                {
+                  "column": "G",
+                  "header": "Remark",
+                  "value": "Need confirm surcharge",
+                  "fill_color": "FFFFFF00"
+                }
+              ],
+              "row": {
+                "group_code": "optional",
+                "hotel": "optional",
+                "check_in": "optional",
+                "check_out": "optional",
+                "room_type": "optional",
+                "rooms": "optional",
+                "hotel_status": "optional",
+                "remark": "optional"
+              },
+              "raw_row": {
+                "A": "raw value",
+                "B": "raw value"
+              },
+              "warnings": []
+            }
+          ]
+        }
+      ],
+      "warnings": []
+    }
+  ]
+}
+```
+
+字段说明：
+
+| 字段 | 中文说明 |
+| --- | --- |
+| `attachment_name` | 附件原始文件名，只用于识别，不作为唯一业务判断依据 |
+| `attachment_sha256` | 附件内容 hash，用于排查和幂等；不得替代 SourceMessage ID |
+| `file_type` | 后端识别出的 Excel 类型 |
+| `parser_version` | 解析器版本，便于后续规则升级 |
+| `excluded` | 是否被排除 |
+| `skipped_reason` | 排除或跳过原因，例如 `PASSENGER_ROSTER`、`NO_MATCHED_MONTH_SHEET`、`UNKNOWN_EXCEL_TYPE` |
+| `month_filter` | 本次月份筛选模式、候选窗口、文件内可用月份、最终选中月份和 sheet 命中结果 |
+| `highlighted_rows[]` | 高亮业务行 |
+| `row` | 后端归一化后的常用业务字段；缺失时可以为空 |
+| `raw_row` | 原始列值映射，仅限当前高亮行；不得包含整份表格 |
+| `warnings[]` | 可展示安全警告，不包含 Secret、签名 URL 或完整敏感正文 |
+
+中文说明：`raw_row` 是为了给 SuperAgent 和 Debug 页面提供核对依据，但范围必须限制在被高亮的数据行，不能把整张 sheet 原样塞进 payload。
+
+## 8. 接入链路位置
+
+### 8.1 AgentBus 自动分发
+
+```text
+AgentBus WebSocket
+→ SourceMessage Inbox RECEIVED
+→ 创建 platform_superagent_dispatch_run
+→ worker 读取 SourceMessage payload 和附件引用
+→ Excel 附件预处理
+→ 把 attachment_extractions[] 追加到 AgentBus Outlook-like payload
+→ 调用 SuperAgent Open API
+→ 等待 SuperAgent 后续 task-results / MCP 入站
+```
+
+AgentBus 回调线程不应同步解析大 Excel，也不应同步等待 SuperAgent。解析动作放在 dispatch worker 中，和外部调用一起由 dispatch run 追踪。
+
+AgentBus payload 中的附件地址已是本系统可访问的 OSS 地址。M011 实现时可由后端通过受控 OSS / 存储适配器读取具体 Excel 附件内容，不需要前端参与，也不应把完整 OSS URL 或签名参数写入普通日志。
+
+### 8.2 Debug EML 上传
+
+```text
+Debug EML 上传
+→ 解析邮件并上传原始邮件 / 内联图片 / 附件
+→ 写入 SourceMessage Inbox
+→ Excel 附件预处理
+→ 把 attachment_extractions[] 追加到 agentbus_like_payload
+→ 调用 SuperAgent Open API
+→ Debug 页面展示本系统阶段、SuperAgent trace、最终回答和安全抽取预览
+```
+
+Debug EML 可以把 `attachment_extractions[]` 作为只读调试信息返回给页面。前端不得编辑后再提交，也不得把其中的 OSS URL、客户敏感信息写入日志或埋点。Debug 链路的 Excel 内容来自本次上传 `.eml` 解析出的附件字节或上传到本系统 OSS 后的对象，不依赖外部邮箱附件临时地址。
+
+## 9. 后端模块边界建议
+
+建议把解析能力放在 Reservation 业务流程内，因为当前识别规则和字段归一化明显属于预订业务语义：
+
+```text
+server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport
+├── service
+│   └── impl
+└── common
+    ├── dto
+    ├── request
+    ├── result
+    └── enums
+```
+
+建议核心服务命名：
+
+| 服务 / 类型 | 中文职责 |
+| --- | --- |
+| `ReservationBookingExcelAttachmentExtractionService` | 对邮件 Excel 附件做类型识别、sheet 筛选和高亮行抽取 |
+| `BookingExcelAttachmentExtractionRequest` | 输入附件文件名、内容流、hash、显式月份窗口或默认月份选择参数、来源上下文 |
+| `BookingExcelAttachmentExtractionResult` | 输出 `attachment_extractions[]` 中单个附件的结构 |
+| `BookingExcelFileType` | `PASSENGER_ROSTER`、`BOOKING_SURCHARGE`、`BOOKING_UPDATE`、`UNKNOWN` |
+
+依赖方向：
+
+- `workflows.reservation` 可以依赖 Apache POI 做业务解析。
+- Debug EML 和 AgentBus dispatch 在组装 SuperAgent payload 时调用稳定 Service / Port，不能复制两套解析逻辑。
+- `platform.message` 仍只负责 SourceMessage 来源事实，不反向依赖 Reservation Excel 业务字段。
+- `integrations.ai.superagent` 只负责调用 SuperAgent；如果需要拼装业务增强 payload，应通过内部编排服务或明确的 payload enricher 调用，不把 POI 解析细节放进 Open API client。
+
+## 10. 配置建议
+
+| 配置 | 默认值 | 中文说明 |
+| --- | --- | --- |
+| `reservation.booking-excel-extraction.enabled` | `false` | 是否启用 Booking Excel 附件预处理总开关 |
+| `reservation.booking-excel-extraction.lookback-months` | `6` | 未显式指定月份窗口时，先从基准月向前取最近几个自然月作为候选窗口，包含基准月 |
+| `reservation.booking-excel-extraction.max-selected-months` | `3` | 在候选窗口内，从文件实际存在月份里最多选择最新几个业务月 |
+| `reservation.booking-excel-extraction.max-file-size` | `10MB` | 单个 Excel 附件最大解析大小 |
+| `reservation.booking-excel-extraction.max-sheets` | `24` | 单个 workbook 最大扫描 sheet 数 |
+| `reservation.booking-excel-extraction.max-rows-per-sheet` | `2000` | 单个 sheet 最大扫描行数 |
+| `agentbus.superagent-dispatch.include-booking-excel-extractions` | `false` | AgentBus 自动分发是否把抽取结果追加给 SuperAgent |
+| `agentbus.superagent-dispatch.booking-excel-download-max-size` | `10MB` | AgentBus 自动分发读取单个 Excel 附件的最大大小，避免 worker 下载异常大文件 |
+| `debug.eml-upload.include-booking-excel-extractions` | `false` | Debug EML 是否返回并传递抽取结果 |
+
+中文说明：建议先在 Debug EML 打开，验证样例 Excel 和 SuperAgent 结果稳定后，再在测试机打开 AgentBus 自动分发增强；生产仍保持默认关闭。
+
+## 11. 错误处理和安全边界
+
+- Excel 解析失败不得导致 SourceMessage Inbox 入库失败。
+- V1 解析失败或附件读取失败时记录安全 warning / 跳过结果，并继续调用 SuperAgent；除非后续配置显式要求严格失败。
+- AgentBus 附件地址按本系统可访问 OSS 地址处理；后端通过受控对象存储端口读取 Excel 内容，不依赖前端传来的临时 URL。
+- 安全错误摘要只记录附件名、hash 前缀、sheet 名、行号、错误类型，不记录完整单元格敏感内容、完整附件 URL 或签名参数。
+- Debug 页面展示的抽取 JSON 只面向受控 dev/test 调试入口，不进入普通业务页面。
+- SuperAgent 看到的 `attachment_extractions[]` 只是证据输入；最终业务写入仍必须经过本系统入站契约校验、幂等、权限边界和人工确认。
+
+## 12. 测试范围
+
+后续实现时至少补充以下测试：
+
+- 人员名单类 Excel 命中 `PASSENGER_ROSTER` 并被排除。
+- Booking Surcharge 类 Excel 被识别为 `BOOKING_SURCHARGE`。
+- Booking Update 多 sheet Excel 被识别为 `BOOKING_UPDATE`。
+- sheet 名月份 `BOOKING 01-2026` 能解析为 `2026-01`。
+- 默认模式以来源接收时间的酒店本地月份为 `base_month`，生成最近 6 个月候选窗口。
+- 候选窗口内文件实际存在月份超过 3 个时，只选择最新 3 个。
+- 候选窗口内文件实际存在月份不足 3 个时，有几个处理几个，并返回 `MATCHED_MONTHS_LESS_THAN_LIMIT` warning。
+- 候选窗口内没有实际存在月份时，不回退到更早 sheet，并返回 `NO_MATCHED_MONTH_SHEET` warning。
+- 未选中 sheet 写入 `skipped_sheets[]`。
+- sheet 名缺少月份时，能按入住 / 退房等业务日期列做行级兜底。
+- 背景色判断忽略无填充、默认、自动、白色、表头背景色和样式污染空列。
+- 有任一业务列背景色的数据行会输出到 `highlighted_rows[]`。
+- 输出 JSON 包含 `highlight_cells[]`、`highlight_colors[]`、`row_number` 和归一化 `row`。
+- 解析失败不影响 SourceMessage 入库；是否继续调用 SuperAgent 按配置执行。
+- Debug EML 和 AgentBus dispatch 两条链路复用同一解析服务。
+- 日志、错误响应和调试响应不泄漏 API Key、Cookie、Secret 或完整 OSS 签名 URL。
+
+## 13. 分阶段落地建议
+
+### CP1：解析器和样例测试（已实现）
+
+- 实现 Excel 类型识别、月份筛选和高亮行抽取。
+- 使用当前三类样例文件补单元测试或 fixture 测试。
+- 不接入 SuperAgent，不改 Debug 页面。
+
+### CP2：Debug EML 预览和 payload 增强（已实现）
+
+- Debug EML 上传后执行预处理。
+- Debug 响应和 SSE 事件返回安全 `attachment_extractions[]` 预览。
+- 调用 SuperAgent 时在 `agentbus_like_payload` 中包含该字段。
+- 前端仍只调用本项目后端。
+
+### CP3：AgentBus 自动分发增强（已实现）
+
+- AgentBus dispatch worker 在调用 SuperAgent 前读取 SourceMessage 已保存附件引用，并通过后端对象存储端口下载 Excel 内容。
+- 复用 `ReservationBookingExcelAttachmentExtractionService` 执行同一预处理，非空结果追加到发给 SuperAgent 的 AgentBus Outlook-like payload。
+- 生产链路默认配置关闭，测试机可通过 `agentbus.superagent-dispatch.include-booking-excel-extractions=true` 验证后再评估开启。
+- 附件读取或解析失败时追加安全跳过结果 / warning 并继续调用 SuperAgent；日志和 payload 不写完整附件 URL、签名参数、API Key、Cookie 或 Secret。
+
+### CP4：可选持久化和运营查询
+
+如果后续需要追踪 Excel 解析历史，再单独设计持久化表，例如：
+
+```text
+workflow_reservation_booking_excel_import_batch
+workflow_reservation_booking_excel_import_row
+```
+
+V1 不要求落库，避免在规则未稳定前引入长期数据模型。
diff --git a/docs/project/security-access-control-boundary.md b/docs/project/security-access-control-boundary.md
index fe2a16b..be21871 100644
--- a/docs/project/security-access-control-boundary.md
+++ b/docs/project/security-access-control-boundary.md
@@ -119,6 +119,7 @@
 | SuperAgent Open API Client | `INTERNAL_ONLY` | 只能后端 Adapter 使用，Secret 不出后端 | 通过 debug run 或 dispatch run 追踪 |
 | OSS Adapter | `INTERNAL_ONLY` | 前端只能拿后端返回的安全 URL，不能拿 OSS Secret | 上传和读取入口记录安全摘要 |
 | AgentBus dispatch worker | `INTERNAL_ONLY` | 只由后端调度或受控管理入口触发 | `platform_superagent_dispatch_run` |
+| Booking Excel 附件预处理 | `INTERNAL_ONLY` | M011 CP1 / CP2 / CP3 已接入 Debug EML 与 AgentBus dispatch；只允许后端在调用 SuperAgent 前通过 Service / Port 使用，不单独暴露给前端或第三方 | 记录安全 warning、附件名、hash 前缀、sheet 名、行号和高亮业务行摘要；不得记录完整 Excel、完整附件 URL、签名参数、API Key、Cookie、Secret 或名单类客户敏感原文 |
 | Flyway / bootstrap 初始化 | `INTERNAL_ONLY` | 不提供运行时外部接口 | 通过部署记录和数据库 history 追踪 |
 | 未来 OPERA / OHIP Adapter | `INTERNAL_ONLY` | 浏览器不得直接调用；只能业务服务触发 | 必须记录操作、attempt 和外部结果摘要 |
 
diff --git a/server/src/main/java/cn/nianxx/thhotel/integrations/ai/superagent/service/impl/SuperAgentDispatchProperties.java b/server/src/main/java/cn/nianxx/thhotel/integrations/ai/superagent/service/impl/SuperAgentDispatchProperties.java
index 0d27ee4..5864fbf 100644
--- a/server/src/main/java/cn/nianxx/thhotel/integrations/ai/superagent/service/impl/SuperAgentDispatchProperties.java
+++ b/server/src/main/java/cn/nianxx/thhotel/integrations/ai/superagent/service/impl/SuperAgentDispatchProperties.java
@@ -3,6 +3,7 @@ package cn.nianxx.thhotel.integrations.ai.superagent.service.impl;
 import java.time.Duration;
 import org.springframework.boot.context.properties.ConfigurationProperties;
 import org.springframework.stereotype.Component;
+import org.springframework.util.unit.DataSize;
 
 /**
  * AgentBus SourceMessage 自动分发 SuperAgent 配置。生产默认关闭，由环境变量显式开启。
@@ -27,6 +28,10 @@ public class SuperAgentDispatchProperties {
     private Duration maxBackoff = Duration.ofMinutes(15);
     /** 定时 worker 调度间隔毫秒。 */
     private long workerFixedDelayMs = 10000L;
+    /** AgentBus 分发是否追加 Booking Excel 预处理结果。 */
+    private boolean includeBookingExcelExtractions = false;
+    /** AgentBus 分发读取单个 Excel 附件的最大字节数。 */
+    private DataSize bookingExcelDownloadMaxSize = DataSize.ofMegabytes(10);
 
     public boolean isEnabled() {
         return enabled;
@@ -91,4 +96,28 @@ public class SuperAgentDispatchProperties {
     public void setWorkerFixedDelayMs(long workerFixedDelayMs) {
         this.workerFixedDelayMs = workerFixedDelayMs;
     }
+
+    public boolean isIncludeBookingExcelExtractions() {
+        return includeBookingExcelExtractions;
+    }
+
+    public void setIncludeBookingExcelExtractions(boolean includeBookingExcelExtractions) {
+        this.includeBookingExcelExtractions = includeBookingExcelExtractions;
+    }
+
+    public DataSize getBookingExcelDownloadMaxSize() {
+        return bookingExcelDownloadMaxSize;
+    }
+
+    public void setBookingExcelDownloadMaxSize(DataSize bookingExcelDownloadMaxSize) {
+        this.bookingExcelDownloadMaxSize = bookingExcelDownloadMaxSize == null
+                ? DataSize.ofMegabytes(10)
+                : bookingExcelDownloadMaxSize;
+    }
+
+    public long getBookingExcelDownloadMaxBytes() {
+        return bookingExcelDownloadMaxSize == null
+                ? DataSize.ofMegabytes(10).toBytes()
+                : bookingExcelDownloadMaxSize.toBytes();
+    }
 }
diff --git a/server/src/main/java/cn/nianxx/thhotel/integrations/ai/superagent/service/impl/SuperAgentDispatchServiceImpl.java b/server/src/main/java/cn/nianxx/thhotel/integrations/ai/superagent/service/impl/SuperAgentDispatchServiceImpl.java
index 9d3315a..33ace95 100644
--- a/server/src/main/java/cn/nianxx/thhotel/integrations/ai/superagent/service/impl/SuperAgentDispatchServiceImpl.java
+++ b/server/src/main/java/cn/nianxx/thhotel/integrations/ai/superagent/service/impl/SuperAgentDispatchServiceImpl.java
@@ -11,16 +11,33 @@ import cn.nianxx.thhotel.integrations.ai.superagent.common.result.SuperAgentOpen
 import cn.nianxx.thhotel.integrations.ai.superagent.repository.SuperAgentDispatchRunRepository;
 import cn.nianxx.thhotel.integrations.ai.superagent.service.SuperAgentDispatchService;
 import cn.nianxx.thhotel.integrations.ai.superagent.service.SuperAgentOpenApiClient;
+import cn.nianxx.thhotel.integrations.storage.aliyunoss.common.request.ObjectStorageReadRequest;
+import cn.nianxx.thhotel.integrations.storage.aliyunoss.common.result.ObjectStorageReadResult;
+import cn.nianxx.thhotel.integrations.storage.aliyunoss.service.ObjectStorageService;
+import cn.nianxx.thhotel.platform.message.common.dto.SourceMessageOriginalContent;
+import cn.nianxx.thhotel.platform.message.common.dto.SourceMessageOriginalMediaItem;
+import cn.nianxx.thhotel.platform.message.common.enums.SourceMessageMediaType;
 import cn.nianxx.thhotel.platform.message.common.request.CaptureSourceMessageCommand;
 import cn.nianxx.thhotel.platform.message.common.result.SourceMessageCaptureResult;
 import cn.nianxx.thhotel.platform.message.repository.SourceMessageInboxRepository;
+import cn.nianxx.thhotel.workflows.reservation.excelimport.common.enums.BookingExcelFileType;
+import cn.nianxx.thhotel.workflows.reservation.excelimport.common.request.BookingExcelAttachmentExtractionRequest;
+import cn.nianxx.thhotel.workflows.reservation.excelimport.common.result.BookingExcelAttachmentExtractionResult;
+import cn.nianxx.thhotel.workflows.reservation.excelimport.service.ReservationBookingExcelAttachmentExtractionService;
 import com.fasterxml.jackson.core.JsonProcessingException;
+import com.fasterxml.jackson.databind.JsonNode;
 import com.fasterxml.jackson.databind.ObjectMapper;
+import com.fasterxml.jackson.databind.node.ObjectNode;
 import java.time.Duration;
+import java.time.Instant;
 import java.time.LocalDateTime;
+import java.time.ZoneId;
 import java.time.ZoneOffset;
+import java.time.format.DateTimeParseException;
+import java.util.ArrayList;
 import java.util.LinkedHashMap;
 import java.util.List;
+import java.util.Locale;
 import java.util.Map;
 import java.util.regex.Pattern;
 import org.slf4j.Logger;
@@ -41,6 +58,12 @@ public class SuperAgentDispatchServiceImpl implements SuperAgentDispatchService
     private static final String SAFE_ERROR_CODE_PAYLOAD_NOT_FOUND = "SOURCE_MESSAGE_PAYLOAD_NOT_FOUND";
     private static final String SAFE_ERROR_CODE_UNEXPECTED = "SUPERAGENT_DISPATCH_UNEXPECTED";
     private static final int SAFE_ERROR_MAX_LENGTH = 512;
+    private static final String PAYLOAD_FIELD_ATTACHMENT_EXTRACTIONS = "attachment_extractions";
+    private static final String BOOKING_EXCEL_EXTRACTION_DISABLED_REASON = "BOOKING_EXCEL_EXTRACTION_DISABLED";
+    private static final String WARNING_ATTACHMENT_DOWNLOAD_FAILED = "ATTACHMENT_DOWNLOAD_FAILED";
+    private static final String WARNING_ATTACHMENT_URL_MISSING = "ATTACHMENT_URL_MISSING";
+    private static final String WARNING_PAYLOAD_ENRICHMENT_FAILED = "ATTACHMENT_EXTRACTION_PAYLOAD_ENRICH_FAILED";
+    private static final ZoneId DEFAULT_HOTEL_ZONE = ZoneId.of("Asia/Bangkok");
     private static final Pattern SECRET_PATTERN = Pattern.compile(
             "(?i)(api[_-]?key|token|secret|password|cookie|authorization)\\s*[:=]\\s*[^\\s,;}]+");
 
@@ -49,6 +72,8 @@ public class SuperAgentDispatchServiceImpl implements SuperAgentDispatchService
     private final SuperAgentDispatchRunRepository runRepository;
     private final SourceMessageInboxRepository sourceMessageRepository;
     private final SuperAgentOpenApiClient openApiClient;
+    private final ObjectStorageService objectStorageService;
+    private final ReservationBookingExcelAttachmentExtractionService bookingExcelExtractionService;
     private final ObjectMapper objectMapper;
 
     /**
@@ -60,12 +85,16 @@ public class SuperAgentDispatchServiceImpl implements SuperAgentDispatchService
             SuperAgentDispatchRunRepository runRepository,
             SourceMessageInboxRepository sourceMessageRepository,
             SuperAgentOpenApiClient openApiClient,
+            ObjectStorageService objectStorageService,
+            ReservationBookingExcelAttachmentExtractionService bookingExcelExtractionService,
             ObjectMapper objectMapper) {
         this.properties = properties;
         this.openApiProperties = openApiProperties;
         this.runRepository = runRepository;
         this.sourceMessageRepository = sourceMessageRepository;
         this.openApiClient = openApiClient;
+        this.objectStorageService = objectStorageService;
+        this.bookingExcelExtractionService = bookingExcelExtractionService;
         this.objectMapper = objectMapper;
     }
 
@@ -154,8 +183,9 @@ public class SuperAgentDispatchServiceImpl implements SuperAgentDispatchService
                     .orElseThrow(() -> new SuperAgentDispatchException(
                             SAFE_ERROR_CODE_PAYLOAD_NOT_FOUND,
                             "SourceMessage payload 不存在。"));
+            String dispatchPayloadJson = payloadWithBookingExcelExtractions(run, payloadJson);
             SuperAgentOpenApiResult result = openApiClient.invokeMessage(new SuperAgentOpenApiMessageRequest(
-                    buildMessage(payloadJson),
+                    buildMessage(dispatchPayloadJson),
                     run.idempotencyKey(),
                     openApiProperties.getAgentbusExternalSubjectId(),
                     run.requestId(),
@@ -206,6 +236,177 @@ public class SuperAgentDispatchServiceImpl implements SuperAgentDispatchService
                 """ + payloadJson;
     }
 
+    /**
+     * 在 AgentBus payload 上追加 Booking Excel 高亮行抽取结果。配置关闭或无结果时保持原 payload。
+     */
+    private String payloadWithBookingExcelExtractions(SuperAgentDispatchRunSnapshot run, String payloadJson) {
+        if (!properties.isIncludeBookingExcelExtractions()) {
+            return payloadJson;
+        }
+        try {
+            JsonNode root = objectMapper.readTree(payloadJson);
+            if (!(root instanceof ObjectNode objectNode)) {
+                return payloadJson;
+            }
+            List<BookingExcelAttachmentExtractionResult> attachmentExtractions =
+                    extractBookingExcelAttachments(run, root);
+            if (attachmentExtractions.isEmpty()) {
+                return payloadJson;
+            }
+            ObjectNode enrichedPayload = objectNode.deepCopy();
+            enrichedPayload.set(PAYLOAD_FIELD_ATTACHMENT_EXTRACTIONS, objectMapper.valueToTree(attachmentExtractions));
+            return objectMapper.writeValueAsString(enrichedPayload);
+        } catch (JsonProcessingException exception) {
+            log.warn(
+                    "AgentBus dispatch Booking Excel payload enrichment failed. dispatch_run_id={}, source_message_id={}, warning={}",
+                    run.id(),
+                    run.sourceMessageId(),
+                    WARNING_PAYLOAD_ENRICHMENT_FAILED);
+            return payloadJson;
+        } catch (RuntimeException exception) {
+            log.warn(
+                    "AgentBus dispatch Booking Excel payload enrichment failed. dispatch_run_id={}, source_message_id={}, warning={}",
+                    run.id(),
+                    run.sourceMessageId(),
+                    WARNING_PAYLOAD_ENRICHMENT_FAILED);
+            return payloadJson;
+        }
+    }
+
+    /**
+     * 读取 SourceMessage 附件 URL 并复用 Reservation Excel 解析服务生成 SuperAgent 输入证据。
+     */
+    private List<BookingExcelAttachmentExtractionResult> extractBookingExcelAttachments(
+            SuperAgentDispatchRunSnapshot run,
+            JsonNode payloadRoot) {
+        SourceMessageOriginalContent originalContent = sourceMessageRepository.findOriginalContent(run.sourceMessageId())
+                .orElse(new SourceMessageOriginalContent(run.sourceMessageId(), null, null, List.of()));
+        List<BookingExcelAttachmentExtractionResult> results = new ArrayList<>();
+        for (SourceMessageOriginalMediaItem mediaItem : safeMediaItems(originalContent)) {
+            if (!SourceMessageMediaType.ATTACHMENT.code().equals(mediaItem.mediaType())
+                    || !isExcelAttachmentName(mediaItem.fileName())) {
+                continue;
+            }
+            String attachmentName = safeAttachmentName(mediaItem.fileName());
+            if (mediaItem.externalUrl() == null || mediaItem.externalUrl().isBlank()) {
+                results.add(skippedAttachment(attachmentName, WARNING_ATTACHMENT_URL_MISSING));
+                continue;
+            }
+            try {
+                ObjectStorageReadResult readResult = objectStorageService.readObject(new ObjectStorageReadRequest(
+                        mediaItem.externalUrl(),
+                        properties.getBookingExcelDownloadMaxBytes()));
+                BookingExcelAttachmentExtractionResult extractionResult = bookingExcelExtractionService.extract(
+                        new BookingExcelAttachmentExtractionRequest(
+                                attachmentName,
+                                firstNonBlank(readResult.contentType(), mediaItem.contentType()),
+                                readResult.sizeBytes(),
+                                readResult.content(),
+                                payloadReceivedInstant(payloadRoot),
+                                DEFAULT_HOTEL_ZONE,
+                                null,
+                                null));
+                if (!BOOKING_EXCEL_EXTRACTION_DISABLED_REASON.equals(extractionResult.skippedReason())) {
+                    results.add(extractionResult);
+                }
+            } catch (RuntimeException exception) {
+                results.add(skippedAttachment(attachmentName, WARNING_ATTACHMENT_DOWNLOAD_FAILED));
+                log.warn(
+                        "AgentBus dispatch Booking Excel attachment extraction failed. dispatch_run_id={}, source_message_id={}, attachment_name={}, warning={}",
+                        run.id(),
+                        run.sourceMessageId(),
+                        attachmentName,
+                        WARNING_ATTACHMENT_DOWNLOAD_FAILED);
+            }
+        }
+        return List.copyOf(results);
+    }
+
+    /**
+     * 读取原文媒体列表时做空值保护，避免历史数据导致附件增强中断。
+     */
+    private List<SourceMessageOriginalMediaItem> safeMediaItems(SourceMessageOriginalContent originalContent) {
+        return originalContent.mediaItems() == null ? List.of() : originalContent.mediaItems();
+    }
+
+    /**
+     * 构造附件读取或解析失败时的安全跳过结果，不包含完整附件 URL。
+     */
+    private BookingExcelAttachmentExtractionResult skippedAttachment(String attachmentName, String warning) {
+        return new BookingExcelAttachmentExtractionResult(
+                attachmentName,
+                null,
+                BookingExcelFileType.UNKNOWN,
+                "booking-highlight-excel-v1",
+                true,
+                warning,
+                null,
+                List.of(),
+                List.of(warning));
+    }
+
+    /**
+     * 从 AgentBus payload 中解析接收时间，作为月份选择基准；缺失时用当前 UTC 时间兜底。
+     */
+    private Instant payloadReceivedInstant(JsonNode payloadRoot) {
+        String sourceReceivedAt = text(payloadRoot.path("source"), "received_at");
+        String payloadReceivedAt = text(payloadRoot, "received_at");
+        Instant receivedAt = parseInstant(firstNonBlank(sourceReceivedAt, payloadReceivedAt));
+        return receivedAt == null ? nowUtc().atOffset(ZoneOffset.UTC).toInstant() : receivedAt;
+    }
+
+    /**
+     * 判断附件名是否为可预处理的 Excel 文件。
+     */
+    private boolean isExcelAttachmentName(String attachmentName) {
+        String lowerName = attachmentName == null ? "" : attachmentName.toLowerCase(Locale.ROOT);
+        return lowerName.endsWith(".xlsx") || lowerName.endsWith(".xls");
+    }
+
+    /**
+     * 清理附件名，避免空值进入 warning 和 SuperAgent payload。
+     */
+    private String safeAttachmentName(String attachmentName) {
+        String normalized = attachmentName == null ? "" : attachmentName.trim();
+        return normalized.isEmpty() ? "attachment.xlsx" : normalized;
+    }
+
+    /**
+     * 读取第一个非空文本。
+     */
+    private String firstNonBlank(String firstValue, String secondValue) {
+        return firstValue == null || firstValue.isBlank() ? secondValue : firstValue;
+    }
+
+    /**
+     * 从 JSON 节点读取非空字符串。
+     */
+    private String text(JsonNode node, String fieldName) {
+        if (node == null || node.isMissingNode()) {
+            return null;
+        }
+        JsonNode field = node.path(fieldName);
+        if (field.isMissingNode() || field.isNull()) {
+            return null;
+        }
+        String value = field.asText();
+        return value == null || value.isBlank() ? null : value.trim();
+    }
+
+    /**
+     * 安全解析时间字符串，失败时返回空，避免阻断 dispatch。
+     */
+    private Instant parseInstant(String value) {
+        if (value == null || value.isBlank()) {
+            return null;
+        }
+        try {
+            return Instant.parse(value);
+        } catch (DateTimeParseException exception) {
+            return null;
+        }
+    }
+
     /**
      * 构造 SuperAgent Open API metadata，便于外部系统排查 run 和 SourceMessage 的对应关系。
      */
diff --git a/server/src/main/java/cn/nianxx/thhotel/integrations/storage/aliyunoss/common/request/ObjectStorageReadRequest.java b/server/src/main/java/cn/nianxx/thhotel/integrations/storage/aliyunoss/common/request/ObjectStorageReadRequest.java
new file mode 100644
index 0000000..73d125a
--- /dev/null
+++ b/server/src/main/java/cn/nianxx/thhotel/integrations/storage/aliyunoss/common/request/ObjectStorageReadRequest.java
@@ -0,0 +1,13 @@
+package cn.nianxx.thhotel.integrations.storage.aliyunoss.common.request;
+
+/**
+ * 对象存储读取请求。读取地址只在后端内部使用，不写入普通日志或返回给前端。
+ *
+ * @param externalUrl 已保存的对象访问 URL
+ * @param maxBytes 本次读取允许的最大字节数
+ */
+public record ObjectStorageReadRequest(
+        String externalUrl,
+        Long maxBytes
+) {
+}
diff --git a/server/src/main/java/cn/nianxx/thhotel/integrations/storage/aliyunoss/common/result/ObjectStorageReadResult.java b/server/src/main/java/cn/nianxx/thhotel/integrations/storage/aliyunoss/common/result/ObjectStorageReadResult.java
new file mode 100644
index 0000000..be89ce6
--- /dev/null
+++ b/server/src/main/java/cn/nianxx/thhotel/integrations/storage/aliyunoss/common/result/ObjectStorageReadResult.java
@@ -0,0 +1,15 @@
+package cn.nianxx.thhotel.integrations.storage.aliyunoss.common.result;
+
+/**
+ * 对象存储读取结果。只返回后端内部处理所需的二进制内容和安全元数据。
+ *
+ * @param content 对象二进制内容
+ * @param contentType 对象内容类型
+ * @param sizeBytes 实际读取字节数
+ */
+public record ObjectStorageReadResult(
+        byte[] content,
+        String contentType,
+        Long sizeBytes
+) {
+}
diff --git a/server/src/main/java/cn/nianxx/thhotel/integrations/storage/aliyunoss/service/ObjectStorageService.java b/server/src/main/java/cn/nianxx/thhotel/integrations/storage/aliyunoss/service/ObjectStorageService.java
index 01f714a..22ac6e4 100644
--- a/server/src/main/java/cn/nianxx/thhotel/integrations/storage/aliyunoss/service/ObjectStorageService.java
+++ b/server/src/main/java/cn/nianxx/thhotel/integrations/storage/aliyunoss/service/ObjectStorageService.java
@@ -1,10 +1,12 @@
 package cn.nianxx.thhotel.integrations.storage.aliyunoss.service;
 
+import cn.nianxx.thhotel.integrations.storage.aliyunoss.common.request.ObjectStorageReadRequest;
 import cn.nianxx.thhotel.integrations.storage.aliyunoss.common.request.ObjectStoragePutRequest;
+import cn.nianxx.thhotel.integrations.storage.aliyunoss.common.result.ObjectStorageReadResult;
 import cn.nianxx.thhotel.integrations.storage.aliyunoss.common.result.ObjectStoragePutResult;
 
 /**
- * 对象存储上传端口。业务层依赖该端口，不直接依赖阿里云 OSS SDK。
+ * 对象存储端口。业务层依赖该端口，不直接依赖阿里云 OSS SDK 或外部 URL 读取细节。
  */
 public interface ObjectStorageService {
 
@@ -12,4 +14,11 @@ public interface ObjectStorageService {
      * 上传对象并返回可保存到 SourceMessage 的访问 URL。
      */
     ObjectStoragePutResult putObject(ObjectStoragePutRequest request);
+
+    /**
+     * 后端内部按已保存对象 URL 读取内容。默认实现用于兼容测试内的简单上传 fake。
+     */
+    default ObjectStorageReadResult readObject(ObjectStorageReadRequest request) {
+        throw new UnsupportedOperationException("对象存储读取能力未实现。");
+    }
 }
diff --git a/server/src/main/java/cn/nianxx/thhotel/integrations/storage/aliyunoss/service/impl/AliyunOssObjectStorageServiceImpl.java b/server/src/main/java/cn/nianxx/thhotel/integrations/storage/aliyunoss/service/impl/AliyunOssObjectStorageServiceImpl.java
index 2018c2f..643fb67 100644
--- a/server/src/main/java/cn/nianxx/thhotel/integrations/storage/aliyunoss/service/impl/AliyunOssObjectStorageServiceImpl.java
+++ b/server/src/main/java/cn/nianxx/thhotel/integrations/storage/aliyunoss/service/impl/AliyunOssObjectStorageServiceImpl.java
@@ -1,12 +1,23 @@
 package cn.nianxx.thhotel.integrations.storage.aliyunoss.service.impl;
 
+import cn.nianxx.thhotel.integrations.storage.aliyunoss.common.request.ObjectStorageReadRequest;
 import cn.nianxx.thhotel.integrations.storage.aliyunoss.common.request.ObjectStoragePutRequest;
+import cn.nianxx.thhotel.integrations.storage.aliyunoss.common.result.ObjectStorageReadResult;
 import cn.nianxx.thhotel.integrations.storage.aliyunoss.common.result.ObjectStoragePutResult;
 import cn.nianxx.thhotel.integrations.storage.aliyunoss.service.ObjectStorageService;
 import com.aliyun.oss.OSS;
 import com.aliyun.oss.OSSClientBuilder;
 import com.aliyun.oss.model.ObjectMetadata;
 import java.io.ByteArrayInputStream;
+import java.io.ByteArrayOutputStream;
+import java.io.IOException;
+import java.io.InputStream;
+import java.net.URI;
+import java.net.http.HttpClient;
+import java.net.http.HttpRequest;
+import java.net.http.HttpResponse;
+import java.time.Duration;
+import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.stereotype.Service;
 
 /**
@@ -15,13 +26,27 @@ import org.springframework.stereotype.Service;
 @Service
 public class AliyunOssObjectStorageServiceImpl implements ObjectStorageService {
 
+    private static final int READ_CHUNK_BYTES = 8192;
+    private static final long DEFAULT_READ_MAX_BYTES = 10L * 1024L * 1024L;
+
     private final AliyunOssProperties properties;
+    private final HttpClient httpClient;
 
     /**
      * 注入阿里云 OSS 配置。
      */
+    @Autowired
     public AliyunOssObjectStorageServiceImpl(AliyunOssProperties properties) {
         this.properties = properties;
+        this.httpClient = defaultHttpClient();
+    }
+
+    /**
+     * 测试专用构造器，用于注入 fake HttpClient，避免单元测试依赖真实网络端口。
+     */
+    AliyunOssObjectStorageServiceImpl(AliyunOssProperties properties, HttpClient httpClient) {
+        this.properties = properties;
+        this.httpClient = httpClient;
     }
 
     /**
@@ -61,6 +86,52 @@ public class AliyunOssObjectStorageServiceImpl implements ObjectStorageService {
         }
     }
 
+    /**
+     * 按已保存的对象访问 URL 读取内容。错误摘要不包含完整 URL 或签名参数。
+     */
+    @Override
+    public ObjectStorageReadResult readObject(ObjectStorageReadRequest request) {
+        if (request == null || request.externalUrl() == null || request.externalUrl().isBlank()) {
+            throw new ObjectStorageException("对象存储读取地址不能为空。");
+        }
+        HttpRequest httpRequest;
+        try {
+            httpRequest = HttpRequest.newBuilder(URI.create(request.externalUrl()))
+                    .GET()
+                    .timeout(Duration.ofSeconds(60))
+                    .build();
+        } catch (IllegalArgumentException exception) {
+            throw new ObjectStorageException("对象存储读取地址格式错误。", exception);
+        }
+        try {
+            HttpResponse<InputStream> response = httpClient.send(httpRequest, HttpResponse.BodyHandlers.ofInputStream());
+            if (response.statusCode() < 200 || response.statusCode() >= 300) {
+                closeQuietly(response.body());
+                throw new ObjectStorageException("对象存储读取失败，HTTP 状态：" + response.statusCode() + "。");
+            }
+            byte[] content = readLimited(response.body(), maxBytes(request.maxBytes()));
+            return new ObjectStorageReadResult(
+                    content,
+                    response.headers().firstValue("Content-Type").orElse(null),
+                    (long) content.length);
+        } catch (InterruptedException exception) {
+            Thread.currentThread().interrupt();
+            throw new ObjectStorageException("对象存储读取被中断。", exception);
+        } catch (IOException exception) {
+            throw new ObjectStorageException("对象存储读取失败。", exception);
+        }
+    }
+
+    /**
+     * 构造对象读取使用的 HTTP Client，设置连接超时并固定 HTTP/1.1。
+     */
+    private HttpClient defaultHttpClient() {
+        return HttpClient.newBuilder()
+                .connectTimeout(Duration.ofSeconds(15))
+                .version(HttpClient.Version.HTTP_1_1)
+                .build();
+    }
+
     /**
      * 校验 OSS 必要配置，错误消息不包含任何 Secret。
      */
@@ -81,6 +152,47 @@ public class AliyunOssObjectStorageServiceImpl implements ObjectStorageService {
         return normalizedBase + "/" + objectKey;
     }
 
+    /**
+     * 带上限读取对象字节，避免异常 URL 导致 worker 下载过大内容。
+     */
+    private byte[] readLimited(InputStream inputStream, long maxBytes) throws IOException {
+        try (InputStream stream = inputStream;
+                ByteArrayOutputStream outputStream = new ByteArrayOutputStream()) {
+            byte[] buffer = new byte[READ_CHUNK_BYTES];
+            long total = 0L;
+            int read;
+            while ((read = stream.read(buffer)) >= 0) {
+                total += read;
+                if (total > maxBytes) {
+                    throw new ObjectStorageException("对象存储读取内容超过大小限制。");
+                }
+                outputStream.write(buffer, 0, read);
+            }
+            return outputStream.toByteArray();
+        }
+    }
+
+    /**
+     * 读取大小上限归一化。调用方未传时使用内部默认保护值。
+     */
+    private long maxBytes(Long configuredMaxBytes) {
+        return configuredMaxBytes == null || configuredMaxBytes <= 0 ? DEFAULT_READ_MAX_BYTES : configuredMaxBytes;
+    }
+
+    /**
+     * 关闭非成功响应体，避免长跑 worker 在异常状态下泄露连接资源。
+     */
+    private void closeQuietly(InputStream inputStream) {
+        if (inputStream == null) {
+            return;
+        }
+        try {
+            inputStream.close();
+        } catch (IOException exception) {
+            // 关闭失败不影响原始读取错误。
+        }
+    }
+
     /**
      * 判断字符串是否为空白。
      */
diff --git a/server/src/main/java/cn/nianxx/thhotel/platform/debug/common/result/DebugEmlSuperAgentRunResult.java b/server/src/main/java/cn/nianxx/thhotel/platform/debug/common/result/DebugEmlSuperAgentRunResult.java
index 544f08c..642aea3 100644
--- a/server/src/main/java/cn/nianxx/thhotel/platform/debug/common/result/DebugEmlSuperAgentRunResult.java
+++ b/server/src/main/java/cn/nianxx/thhotel/platform/debug/common/result/DebugEmlSuperAgentRunResult.java
@@ -1,6 +1,8 @@
 package cn.nianxx.thhotel.platform.debug.common.result;
 
 import cn.nianxx.thhotel.integrations.ai.superagent.common.result.SuperAgentOpenApiTraceEvent;
+import cn.nianxx.thhotel.workflows.reservation.excelimport.common.result.BookingExcelAttachmentExtractionResult;
+import com.fasterxml.jackson.annotation.JsonInclude;
 import com.fasterxml.jackson.annotation.JsonProperty;
 import com.fasterxml.jackson.databind.JsonNode;
 import java.util.List;
@@ -22,6 +24,7 @@ import java.util.Map;
  * @param htmlSanitizeRequired 是否要求前端按安全 HTML 规则展示
  * @param htmlRenderMode HTML 渲染建议模式
  * @param agentbusLikePayload 发送给 SuperAgent 的 AgentBus Outlook-like 主 payload
+ * @param attachmentExtractions Booking Excel 附件预处理安全预览
  * @param superagentSessionId SuperAgent session ID
  * @param superagentRunId SuperAgent run ID
  * @param superagentRawAnswer SuperAgent 原始最终回答
@@ -58,6 +61,9 @@ public record DebugEmlSuperAgentRunResult(
         String htmlRenderMode,
         @JsonProperty("agentbus_like_payload")
         Map<String, Object> agentbusLikePayload,
+        @JsonProperty("attachment_extractions")
+        @JsonInclude(JsonInclude.Include.NON_EMPTY)
+        List<BookingExcelAttachmentExtractionResult> attachmentExtractions,
         @JsonProperty("superagent_session_id")
         String superagentSessionId,
         @JsonProperty("superagent_run_id")
diff --git a/server/src/main/java/cn/nianxx/thhotel/platform/debug/service/impl/DebugEmlSuperAgentProperties.java b/server/src/main/java/cn/nianxx/thhotel/platform/debug/service/impl/DebugEmlSuperAgentProperties.java
index 2b2c4c3..01c678f 100644
--- a/server/src/main/java/cn/nianxx/thhotel/platform/debug/service/impl/DebugEmlSuperAgentProperties.java
+++ b/server/src/main/java/cn/nianxx/thhotel/platform/debug/service/impl/DebugEmlSuperAgentProperties.java
@@ -19,6 +19,8 @@ public class DebugEmlSuperAgentProperties {
     private long maxFileBytes = 10 * 1024 * 1024L;
     /** Debug SSE 心跳间隔，用于避免长时间调用 SuperAgent 时中间链路空闲断开。 */
     private Duration sseHeartbeatInterval = Duration.ofSeconds(15);
+    /** 是否在 Debug EML 调用 SuperAgent 前追加 Booking Excel 附件预处理结果。 */
+    private boolean includeBookingExcelExtractions = false;
 
     public boolean isEnabled() {
         return enabled;
@@ -51,4 +53,12 @@ public class DebugEmlSuperAgentProperties {
     public void setSseHeartbeatInterval(Duration sseHeartbeatInterval) {
         this.sseHeartbeatInterval = sseHeartbeatInterval;
     }
+
+    public boolean isIncludeBookingExcelExtractions() {
+        return includeBookingExcelExtractions;
+    }
+
+    public void setIncludeBookingExcelExtractions(boolean includeBookingExcelExtractions) {
+        this.includeBookingExcelExtractions = includeBookingExcelExtractions;
+    }
 }
diff --git a/server/src/main/java/cn/nianxx/thhotel/platform/debug/service/impl/DebugEmlSuperAgentRunServiceImpl.java b/server/src/main/java/cn/nianxx/thhotel/platform/debug/service/impl/DebugEmlSuperAgentRunServiceImpl.java
index a6a25bb..05336f0 100644
--- a/server/src/main/java/cn/nianxx/thhotel/platform/debug/service/impl/DebugEmlSuperAgentRunServiceImpl.java
+++ b/server/src/main/java/cn/nianxx/thhotel/platform/debug/service/impl/DebugEmlSuperAgentRunServiceImpl.java
@@ -35,6 +35,9 @@ import cn.nianxx.thhotel.platform.message.service.EmlMessageParseService;
 import cn.nianxx.thhotel.platform.message.service.SourceMessageCaptureService;
 import cn.nianxx.thhotel.platform.message.service.SourceMessageHtmlSanitizerService;
 import cn.nianxx.thhotel.platform.message.service.impl.EmlMessageParseException;
+import cn.nianxx.thhotel.workflows.reservation.excelimport.common.request.BookingExcelAttachmentExtractionRequest;
+import cn.nianxx.thhotel.workflows.reservation.excelimport.common.result.BookingExcelAttachmentExtractionResult;
+import cn.nianxx.thhotel.workflows.reservation.excelimport.service.ReservationBookingExcelAttachmentExtractionService;
 import com.fasterxml.jackson.core.JsonProcessingException;
 import com.fasterxml.jackson.core.type.TypeReference;
 import com.fasterxml.jackson.databind.JsonNode;
@@ -49,6 +52,7 @@ import java.security.MessageDigest;
 import java.security.NoSuchAlgorithmException;
 import java.time.Duration;
 import java.time.LocalDateTime;
+import java.time.ZoneId;
 import java.time.ZoneOffset;
 import java.time.format.DateTimeFormatter;
 import java.util.ArrayList;
@@ -84,6 +88,9 @@ public class DebugEmlSuperAgentRunServiceImpl implements DebugEmlSuperAgentRunSe
     private static final String SOURCE_CHANNEL = "EMAIL";
     private static final String REPLY_POLICY_MODE = "manual";
     private static final String SCHEMA_VERSION = "debug-eml-upload-v1";
+    private static final String PAYLOAD_FIELD_ATTACHMENT_EXTRACTIONS = "attachment_extractions";
+    private static final String BOOKING_EXCEL_EXTRACTION_DISABLED_REASON = "BOOKING_EXCEL_EXTRACTION_DISABLED";
+    private static final ZoneId DEFAULT_HOTEL_ZONE = ZoneId.of("Asia/Bangkok");
     private static final DateTimeFormatter DATE_FOLDER_FORMATTER = DateTimeFormatter.BASIC_ISO_DATE;
     private static final Pattern CID_REFERENCE_PATTERN = Pattern.compile(
             "(?i)cid:(?:<[^>]+>|%3c[^\\s\"'>]+%3e|[^\\s\"'>]+)");
@@ -103,6 +110,7 @@ public class DebugEmlSuperAgentRunServiceImpl implements DebugEmlSuperAgentRunSe
     private final EmlMessageParseService parseService;
     private final ObjectStorageService objectStorageService;
     private final SourceMessageCaptureService sourceMessageCaptureService;
+    private final ReservationBookingExcelAttachmentExtractionService bookingExcelExtractionService;
     private final SourceMessageInboxRepository sourceMessageInboxRepository;
     private final SourceMessageHtmlSanitizerService htmlSanitizerService;
     private final SuperAgentOpenApiClient superAgentOpenApiClient;
@@ -119,6 +127,7 @@ public class DebugEmlSuperAgentRunServiceImpl implements DebugEmlSuperAgentRunSe
             EmlMessageParseService parseService,
             ObjectStorageService objectStorageService,
             SourceMessageCaptureService sourceMessageCaptureService,
+            ReservationBookingExcelAttachmentExtractionService bookingExcelExtractionService,
             SourceMessageInboxRepository sourceMessageInboxRepository,
             SourceMessageHtmlSanitizerService htmlSanitizerService,
             SuperAgentOpenApiClient superAgentOpenApiClient,
@@ -130,6 +139,7 @@ public class DebugEmlSuperAgentRunServiceImpl implements DebugEmlSuperAgentRunSe
         this.parseService = parseService;
         this.objectStorageService = objectStorageService;
         this.sourceMessageCaptureService = sourceMessageCaptureService;
+        this.bookingExcelExtractionService = bookingExcelExtractionService;
         this.sourceMessageInboxRepository = sourceMessageInboxRepository;
         this.htmlSanitizerService = htmlSanitizerService;
         this.superAgentOpenApiClient = superAgentOpenApiClient;
@@ -486,7 +496,7 @@ public class DebugEmlSuperAgentRunServiceImpl implements DebugEmlSuperAgentRunSe
                 parsed,
                 htmlWithOssUrls,
                 uploadedMedia);
-        String payloadJson = objectMapper.writeValueAsString(payload);
+        String sourcePayloadJson = objectMapper.writeValueAsString(payload);
         markStage(
                 runId,
                 DebugEmlSuperAgentRunStatus.CAPTURING_SOURCE_MESSAGE,
@@ -505,9 +515,13 @@ public class DebugEmlSuperAgentRunServiceImpl implements DebugEmlSuperAgentRunSe
                 parsed.subject(),
                 parsed.textBody(),
                 htmlWithOssUrls,
-                payloadJson,
+                sourcePayloadJson,
                 SCHEMA_VERSION,
                 uploadedMedia.stream().map(UploadedMedia::captureMedia).toList()));
+        List<BookingExcelAttachmentExtractionResult> attachmentExtractions =
+                extractBookingExcelAttachments(runId, parsed.mediaItems(), createdAt, warnings);
+        Map<String, Object> superAgentPayload = payloadWithAttachmentExtractions(payload, attachmentExtractions);
+        String superAgentPayloadJson = objectMapper.writeValueAsString(superAgentPayload);
         updateSourceCapturedRun(
                 runId,
                 captureResult.inboxId(),
@@ -516,7 +530,7 @@ public class DebugEmlSuperAgentRunServiceImpl implements DebugEmlSuperAgentRunSe
                 safeFileName,
                 uploadedMedia.get(0).result().externalUrl(),
                 sha256,
-                payloadJson);
+                superAgentPayloadJson);
 
         markStage(
                 runId,
@@ -524,7 +538,7 @@ public class DebugEmlSuperAgentRunServiceImpl implements DebugEmlSuperAgentRunSe
                 "阶段：调用 SuperAgent Open API，source_message_id=" + captureResult.inboxId() + "。",
                 streamSink);
         SuperAgentMailDebugRequest superAgentRequest = new SuperAgentMailDebugRequest(
-                buildSuperAgentMessage(payloadJson),
+                buildSuperAgentMessage(superAgentPayloadJson),
                 "debug-eml-" + runId,
                 buildSuperAgentMetadata(
                         runId,
@@ -561,7 +575,7 @@ public class DebugEmlSuperAgentRunServiceImpl implements DebugEmlSuperAgentRunSe
                 safeFileName,
                 uploadedMedia.get(0).result().externalUrl(),
                 sha256,
-                payloadJson,
+                superAgentPayloadJson,
                 superAgentResult.sessionId(),
                 superAgentResult.runId(),
                 superAgentResult.profileId(),
@@ -589,7 +603,8 @@ public class DebugEmlSuperAgentRunServiceImpl implements DebugEmlSuperAgentRunSe
                 htmlBodySanitized,
                 true,
                 htmlRenderMode,
-                payload,
+                superAgentPayload,
+                attachmentExtractions,
                 superAgentResult.sessionId(),
                 superAgentResult.runId(),
                 superAgentResult.rawAnswer(),
@@ -607,6 +622,7 @@ public class DebugEmlSuperAgentRunServiceImpl implements DebugEmlSuperAgentRunSe
         SourceMessageOriginalContent originalContent = loadOriginalContent(snapshot.sourceMessageId());
         String htmlBodyWithOssUrls = originalContent == null ? null : originalContent.htmlBody();
         String htmlBodySanitized = htmlBodyWithOssUrls == null ? null : htmlSanitizerService.sanitizeHtml(htmlBodyWithOssUrls);
+        Map<String, Object> payload = parsePayloadJson(snapshot.payloadJson());
         return new DebugEmlSuperAgentRunResult(
                 snapshot.id().toString(),
                 snapshot.sourceMessageId() == null ? null : snapshot.sourceMessageId().toString(),
@@ -620,7 +636,8 @@ public class DebugEmlSuperAgentRunServiceImpl implements DebugEmlSuperAgentRunSe
                 htmlBodySanitized,
                 originalContent == null ? null : true,
                 originalContent == null ? null : htmlSanitizerService.htmlRenderMode(htmlBodyWithOssUrls),
-                parsePayloadJson(snapshot.payloadJson()),
+                payload,
+                attachmentExtractionsFromPayload(payload),
                 snapshot.superagentSessionId(),
                 snapshot.superagentRunId(),
                 snapshot.superagentRawAnswer(),
@@ -708,6 +725,99 @@ public class DebugEmlSuperAgentRunServiceImpl implements DebugEmlSuperAgentRunSe
         }
     }
 
+    /**
+     * 从 Debug EML 附件字节中抽取 Booking Excel 高亮行；该结果只追加给 Debug SuperAgent 输入和调试响应。
+     */
+    private List<BookingExcelAttachmentExtractionResult> extractBookingExcelAttachments(
+            Long runId,
+            List<ParsedEmlMediaItem> mediaItems,
+            LocalDateTime createdAt,
+            List<String> warnings) {
+        if (!properties.isIncludeBookingExcelExtractions() || mediaItems == null || mediaItems.isEmpty()) {
+            return List.of();
+        }
+        List<BookingExcelAttachmentExtractionResult> results = new ArrayList<>();
+        for (ParsedEmlMediaItem mediaItem : mediaItems) {
+            if (!SourceMessageMediaType.ATTACHMENT.code().equals(mediaItem.mediaType())) {
+                continue;
+            }
+            String attachmentName = safeFileName(mediaItem.fileName(), "attachment-" + (results.size() + 1));
+            if (!isExcelAttachmentName(attachmentName)) {
+                continue;
+            }
+            try {
+                byte[] content = mediaItem.bytes();
+                Long sizeBytes = mediaItem.sizeBytes() == null && content != null
+                        ? (long) content.length
+                        : mediaItem.sizeBytes();
+                BookingExcelAttachmentExtractionResult extractionResult =
+                        bookingExcelExtractionService.extract(new BookingExcelAttachmentExtractionRequest(
+                                attachmentName,
+                                mediaItem.contentType(),
+                                sizeBytes,
+                                content,
+                                createdAt.atOffset(ZoneOffset.UTC).toInstant(),
+                                DEFAULT_HOTEL_ZONE,
+                                null,
+                                null));
+                if (!BOOKING_EXCEL_EXTRACTION_DISABLED_REASON.equals(extractionResult.skippedReason())) {
+                    results.add(extractionResult);
+                }
+            } catch (RuntimeException exception) {
+                warnings.add("Booking Excel 附件预处理失败：" + attachmentName);
+                log.warn(
+                        "Debug EML Booking Excel extraction failed. debug_run_id={}, attachment_name={}, exception_chain={}",
+                        runId,
+                        attachmentName,
+                        safeExceptionChain(exception));
+            }
+        }
+        return List.copyOf(results);
+    }
+
+    /**
+     * 将附件预处理结果并入发给 SuperAgent 的 payload；无结果时沿用原始 payload。
+     */
+    private Map<String, Object> payloadWithAttachmentExtractions(
+            Map<String, Object> payload,
+            List<BookingExcelAttachmentExtractionResult> attachmentExtractions) {
+        if (attachmentExtractions == null || attachmentExtractions.isEmpty()) {
+            return payload;
+        }
+        Map<String, Object> enrichedPayload = new LinkedHashMap<>(payload);
+        enrichedPayload.put(PAYLOAD_FIELD_ATTACHMENT_EXTRACTIONS, attachmentExtractions);
+        return enrichedPayload;
+    }
+
+    /**
+     * 查询历史 Debug run 时，从已保存的 payload 中还原附件预处理结果。
+     */
+    private List<BookingExcelAttachmentExtractionResult> attachmentExtractionsFromPayload(Map<String, Object> payload) {
+        if (payload == null || !payload.containsKey(PAYLOAD_FIELD_ATTACHMENT_EXTRACTIONS)) {
+            return List.of();
+        }
+        Object value = payload.get(PAYLOAD_FIELD_ATTACHMENT_EXTRACTIONS);
+        if (!(value instanceof List<?>)) {
+            return List.of();
+        }
+        try {
+            return objectMapper.convertValue(
+                    value,
+                    new TypeReference<List<BookingExcelAttachmentExtractionResult>>() {
+                    });
+        } catch (IllegalArgumentException exception) {
+            return List.of();
+        }
+    }
+
+    /**
+     * 判断附件名是否为可预处理的 Excel 文件。
+     */
+    private boolean isExcelAttachmentName(String attachmentName) {
+        String lowerName = attachmentName == null ? "" : attachmentName.toLowerCase(Locale.ROOT);
+        return lowerName.endsWith(".xlsx") || lowerName.endsWith(".xls");
+    }
+
     /**
      * 解析已入库的 SuperAgent JSON；解析失败返回 null，前端仍可查看 raw answer。
      */
diff --git a/server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/common/enums/BookingExcelFileType.java b/server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/common/enums/BookingExcelFileType.java
new file mode 100644
index 0000000..6f31833
--- /dev/null
+++ b/server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/common/enums/BookingExcelFileType.java
@@ -0,0 +1,16 @@
+package cn.nianxx.thhotel.workflows.reservation.excelimport.common.enums;
+
+/**
+ * Booking Excel 附件识别类型。用于区分应排除的人员名单和可抽取的预订业务表。
+ */
+public enum BookingExcelFileType {
+
+    /** 旅行团人员名单 / Rooming List 来源名单。 */
+    PASSENGER_ROSTER,
+    /** 春节、节假日或其他 Booking 附加费用表。 */
+    BOOKING_SURCHARGE,
+    /** Booking Update / Wyndham 更新类表格。 */
+    BOOKING_UPDATE,
+    /** 未识别 Excel。 */
+    UNKNOWN
+}
diff --git a/server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/common/request/BookingExcelAttachmentExtractionRequest.java b/server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/common/request/BookingExcelAttachmentExtractionRequest.java
new file mode 100644
index 0000000..85c42af
--- /dev/null
+++ b/server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/common/request/BookingExcelAttachmentExtractionRequest.java
@@ -0,0 +1,29 @@
+package cn.nianxx.thhotel.workflows.reservation.excelimport.common.request;
+
+import java.time.Instant;
+import java.time.YearMonth;
+import java.time.ZoneId;
+
+/**
+ * Booking Excel 附件预处理请求。调用方传入附件内容、基准时间和可选月份窗口。
+ *
+ * @param attachmentName 附件文件名
+ * @param contentType MIME 类型
+ * @param sizeBytes 附件大小
+ * @param content 附件二进制内容
+ * @param baseInstant 默认月份选择的基准时间
+ * @param hotelZoneId 酒店本地时区，用于把基准时间转换为业务月份
+ * @param fromMonth 显式起始月份，空时使用默认两段式规则
+ * @param toMonth 显式结束月份，空时使用默认两段式规则
+ */
+public record BookingExcelAttachmentExtractionRequest(
+        String attachmentName,
+        String contentType,
+        Long sizeBytes,
+        byte[] content,
+        Instant baseInstant,
+        ZoneId hotelZoneId,
+        YearMonth fromMonth,
+        YearMonth toMonth
+) {
+}
diff --git a/server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/common/result/BookingExcelAttachmentExtractionResult.java b/server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/common/result/BookingExcelAttachmentExtractionResult.java
new file mode 100644
index 0000000..5e0af66
--- /dev/null
+++ b/server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/common/result/BookingExcelAttachmentExtractionResult.java
@@ -0,0 +1,37 @@
+package cn.nianxx.thhotel.workflows.reservation.excelimport.common.result;
+
+import cn.nianxx.thhotel.workflows.reservation.excelimport.common.enums.BookingExcelFileType;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import java.util.List;
+
+/**
+ * 单个 Excel 附件的预处理结果。该结果只作为 SuperAgent 输入证据和 Debug 预览。
+ *
+ * @param attachmentName 附件文件名
+ * @param attachmentSha256 附件 SHA-256
+ * @param fileType 识别出的文件类型
+ * @param parserVersion 解析器版本
+ * @param excluded 是否排除
+ * @param skippedReason 跳过原因
+ * @param monthFilter 月份筛选结果
+ * @param sheets sheet 抽取结果
+ * @param warnings 安全 warning
+ */
+public record BookingExcelAttachmentExtractionResult(
+        @JsonProperty("attachment_name")
+        String attachmentName,
+        @JsonProperty("attachment_sha256")
+        String attachmentSha256,
+        @JsonProperty("file_type")
+        BookingExcelFileType fileType,
+        @JsonProperty("parser_version")
+        String parserVersion,
+        Boolean excluded,
+        @JsonProperty("skipped_reason")
+        String skippedReason,
+        @JsonProperty("month_filter")
+        BookingExcelMonthFilterResult monthFilter,
+        List<BookingExcelSheetExtractionResult> sheets,
+        List<String> warnings
+) {
+}
diff --git a/server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/common/result/BookingExcelHighlightCellResult.java b/server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/common/result/BookingExcelHighlightCellResult.java
new file mode 100644
index 0000000..43348ec
--- /dev/null
+++ b/server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/common/result/BookingExcelHighlightCellResult.java
@@ -0,0 +1,20 @@
+package cn.nianxx.thhotel.workflows.reservation.excelimport.common.result;
+
+import com.fasterxml.jackson.annotation.JsonProperty;
+
+/**
+ * 单个触发高亮行抽取的单元格。
+ *
+ * @param column Excel 列号，例如 A、G
+ * @param header 表头文本
+ * @param value 单元格显示值
+ * @param fillColor 背景色 ARGB / RGB 值
+ */
+public record BookingExcelHighlightCellResult(
+        String column,
+        String header,
+        String value,
+        @JsonProperty("fill_color")
+        String fillColor
+) {
+}
diff --git a/server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/common/result/BookingExcelHighlightedRowResult.java b/server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/common/result/BookingExcelHighlightedRowResult.java
new file mode 100644
index 0000000..8af41d2
--- /dev/null
+++ b/server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/common/result/BookingExcelHighlightedRowResult.java
@@ -0,0 +1,32 @@
+package cn.nianxx.thhotel.workflows.reservation.excelimport.common.result;
+
+import com.fasterxml.jackson.annotation.JsonProperty;
+import java.util.List;
+import java.util.Map;
+
+/**
+ * Booking Excel 中带业务背景色的数据行。
+ *
+ * @param rowNumber Excel 1 基行号
+ * @param rowKey 可选稳定行键
+ * @param highlightColors 本行命中的背景色集合
+ * @param highlightCells 触发高亮的单元格明细
+ * @param row 归一化业务字段
+ * @param rawRow 原始列值映射
+ * @param warnings 行级安全警告
+ */
+public record BookingExcelHighlightedRowResult(
+        @JsonProperty("row_number")
+        Integer rowNumber,
+        @JsonProperty("row_key")
+        String rowKey,
+        @JsonProperty("highlight_colors")
+        List<String> highlightColors,
+        @JsonProperty("highlight_cells")
+        List<BookingExcelHighlightCellResult> highlightCells,
+        Map<String, String> row,
+        @JsonProperty("raw_row")
+        Map<String, String> rawRow,
+        List<String> warnings
+) {
+}
diff --git a/server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/common/result/BookingExcelMonthFilterResult.java b/server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/common/result/BookingExcelMonthFilterResult.java
new file mode 100644
index 0000000..3b41383
--- /dev/null
+++ b/server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/common/result/BookingExcelMonthFilterResult.java
@@ -0,0 +1,41 @@
+package cn.nianxx.thhotel.workflows.reservation.excelimport.common.result;
+
+import com.fasterxml.jackson.annotation.JsonProperty;
+import java.util.List;
+
+/**
+ * Booking Excel 月份筛选结果。记录候选窗口、文件实际月份、最终选中月份和 sheet 命中情况。
+ *
+ * @param mode 月份筛选模式
+ * @param baseMonth 默认模式基准月份
+ * @param lookbackMonths 默认模式候选窗口月数
+ * @param maxSelectedMonths 默认模式最多选择月份数
+ * @param candidateFromMonth 候选窗口起始月份
+ * @param candidateToMonth 候选窗口结束月份
+ * @param availableMonths 文件内落入候选窗口的月份
+ * @param selectedMonths 最终处理月份
+ * @param matchedSheets 最终处理 sheet
+ * @param skippedSheets 跳过 sheet
+ */
+public record BookingExcelMonthFilterResult(
+        String mode,
+        @JsonProperty("base_month")
+        String baseMonth,
+        @JsonProperty("lookback_months")
+        Integer lookbackMonths,
+        @JsonProperty("max_selected_months")
+        Integer maxSelectedMonths,
+        @JsonProperty("candidate_from_month")
+        String candidateFromMonth,
+        @JsonProperty("candidate_to_month")
+        String candidateToMonth,
+        @JsonProperty("available_months")
+        List<String> availableMonths,
+        @JsonProperty("selected_months")
+        List<String> selectedMonths,
+        @JsonProperty("matched_sheets")
+        List<String> matchedSheets,
+        @JsonProperty("skipped_sheets")
+        List<String> skippedSheets
+) {
+}
diff --git a/server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/common/result/BookingExcelSheetExtractionResult.java b/server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/common/result/BookingExcelSheetExtractionResult.java
new file mode 100644
index 0000000..52b97c5
--- /dev/null
+++ b/server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/common/result/BookingExcelSheetExtractionResult.java
@@ -0,0 +1,24 @@
+package cn.nianxx.thhotel.workflows.reservation.excelimport.common.result;
+
+import com.fasterxml.jackson.annotation.JsonProperty;
+import java.util.List;
+
+/**
+ * 单个 sheet 的 Booking Excel 高亮行抽取结果。
+ *
+ * @param sheetName sheet 名称
+ * @param headerRow 表头行号，1 基
+ * @param highlightedRowCount 高亮业务行数量
+ * @param highlightedRows 高亮业务行明细
+ */
+public record BookingExcelSheetExtractionResult(
+        @JsonProperty("sheet_name")
+        String sheetName,
+        @JsonProperty("header_row")
+        Integer headerRow,
+        @JsonProperty("highlighted_row_count")
+        Integer highlightedRowCount,
+        @JsonProperty("highlighted_rows")
+        List<BookingExcelHighlightedRowResult> highlightedRows
+) {
+}
diff --git a/server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/service/ReservationBookingExcelAttachmentExtractionService.java b/server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/service/ReservationBookingExcelAttachmentExtractionService.java
new file mode 100644
index 0000000..2180b2d
--- /dev/null
+++ b/server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/service/ReservationBookingExcelAttachmentExtractionService.java
@@ -0,0 +1,15 @@
+package cn.nianxx.thhotel.workflows.reservation.excelimport.service;
+
+import cn.nianxx.thhotel.workflows.reservation.excelimport.common.request.BookingExcelAttachmentExtractionRequest;
+import cn.nianxx.thhotel.workflows.reservation.excelimport.common.result.BookingExcelAttachmentExtractionResult;
+
+/**
+ * Booking Excel 附件预处理服务。调用方在发送 SuperAgent 前使用，不直接创建业务任务。
+ */
+public interface ReservationBookingExcelAttachmentExtractionService {
+
+    /**
+     * 识别 Excel 类型并抽取高亮业务行。失败时返回受控结果和 warning，不向外抛出原始异常。
+     */
+    BookingExcelAttachmentExtractionResult extract(BookingExcelAttachmentExtractionRequest request);
+}
diff --git a/server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/service/impl/BookingExcelExtractionProperties.java b/server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/service/impl/BookingExcelExtractionProperties.java
new file mode 100644
index 0000000..5240ba5
--- /dev/null
+++ b/server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/service/impl/BookingExcelExtractionProperties.java
@@ -0,0 +1,82 @@
+package cn.nianxx.thhotel.workflows.reservation.excelimport.service.impl;
+
+import org.springframework.boot.context.properties.ConfigurationProperties;
+import org.springframework.stereotype.Component;
+import org.springframework.util.unit.DataSize;
+
+/**
+ * Booking Excel 附件预处理配置。生产链路默认关闭，先通过 Debug EML 验证。
+ */
+@Component
+@ConfigurationProperties(prefix = "reservation.booking-excel-extraction")
+public class BookingExcelExtractionProperties {
+
+    /** 是否启用 Booking Excel 附件预处理。 */
+    private boolean enabled = false;
+    /** 默认模式候选窗口月数，包含基准月。 */
+    private int lookbackMonths = 6;
+    /** 默认模式从候选窗口内实际存在月份中最多选择几个月。 */
+    private int maxSelectedMonths = 3;
+    /** 单个 Excel 附件最大解析大小，可通过 10MB 这类 DataSize 文本配置。 */
+    private DataSize maxFileSize = DataSize.ofMegabytes(10);
+    /** 单个 workbook 最大扫描 sheet 数。 */
+    private int maxSheets = 24;
+    /** 单个 sheet 最大扫描行数。 */
+    private int maxRowsPerSheet = 2000;
+
+    public boolean isEnabled() {
+        return enabled;
+    }
+
+    public void setEnabled(boolean enabled) {
+        this.enabled = enabled;
+    }
+
+    public int getLookbackMonths() {
+        return lookbackMonths;
+    }
+
+    public void setLookbackMonths(int lookbackMonths) {
+        this.lookbackMonths = lookbackMonths;
+    }
+
+    public int getMaxSelectedMonths() {
+        return maxSelectedMonths;
+    }
+
+    public void setMaxSelectedMonths(int maxSelectedMonths) {
+        this.maxSelectedMonths = maxSelectedMonths;
+    }
+
+    public long getMaxFileSizeBytes() {
+        return maxFileSize == null ? DataSize.ofMegabytes(10).toBytes() : maxFileSize.toBytes();
+    }
+
+    public void setMaxFileSizeBytes(long maxFileSizeBytes) {
+        this.maxFileSize = DataSize.ofBytes(maxFileSizeBytes);
+    }
+
+    public DataSize getMaxFileSize() {
+        return maxFileSize;
+    }
+
+    public void setMaxFileSize(DataSize maxFileSize) {
+        this.maxFileSize = maxFileSize == null ? DataSize.ofMegabytes(10) : maxFileSize;
+    }
+
+    public int getMaxSheets() {
+        return maxSheets;
+    }
+
+    public void setMaxSheets(int maxSheets) {
+        this.maxSheets = maxSheets;
+    }
+
+    public int getMaxRowsPerSheet() {
+        return maxRowsPerSheet;
+    }
+
+    public void setMaxRowsPerSheet(int maxRowsPerSheet) {
+        this.maxRowsPerSheet = maxRowsPerSheet;
+    }
+}
diff --git a/server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/service/impl/ReservationBookingExcelAttachmentExtractionServiceImpl.java b/server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/service/impl/ReservationBookingExcelAttachmentExtractionServiceImpl.java
new file mode 100644
index 0000000..9be9e47
--- /dev/null
+++ b/server/src/main/java/cn/nianxx/thhotel/workflows/reservation/excelimport/service/impl/ReservationBookingExcelAttachmentExtractionServiceImpl.java
@@ -0,0 +1,751 @@
+package cn.nianxx.thhotel.workflows.reservation.excelimport.service.impl;
+
+import cn.nianxx.thhotel.workflows.reservation.excelimport.common.enums.BookingExcelFileType;
+import cn.nianxx.thhotel.workflows.reservation.excelimport.common.request.BookingExcelAttachmentExtractionRequest;
+import cn.nianxx.thhotel.workflows.reservation.excelimport.common.result.BookingExcelAttachmentExtractionResult;
+import cn.nianxx.thhotel.workflows.reservation.excelimport.common.result.BookingExcelHighlightCellResult;
+import cn.nianxx.thhotel.workflows.reservation.excelimport.common.result.BookingExcelHighlightedRowResult;
+import cn.nianxx.thhotel.workflows.reservation.excelimport.common.result.BookingExcelMonthFilterResult;
+import cn.nianxx.thhotel.workflows.reservation.excelimport.common.result.BookingExcelSheetExtractionResult;
+import cn.nianxx.thhotel.workflows.reservation.excelimport.service.ReservationBookingExcelAttachmentExtractionService;
+import java.io.ByteArrayInputStream;
+import java.io.IOException;
+import java.security.MessageDigest;
+import java.security.NoSuchAlgorithmException;
+import java.time.Instant;
+import java.time.YearMonth;
+import java.time.ZoneId;
+import java.util.ArrayList;
+import java.util.Comparator;
+import java.util.HashMap;
+import java.util.LinkedHashMap;
+import java.util.LinkedHashSet;
+import java.util.List;
+import java.util.Locale;
+import java.util.Map;
+import java.util.Objects;
+import java.util.Optional;
+import java.util.Set;
+import java.util.regex.Matcher;
+import java.util.regex.Pattern;
+import org.apache.poi.hssf.util.HSSFColor;
+import org.apache.poi.ss.usermodel.Cell;
+import org.apache.poi.ss.usermodel.CellStyle;
+import org.apache.poi.ss.usermodel.Color;
+import org.apache.poi.ss.usermodel.DataFormatter;
+import org.apache.poi.ss.usermodel.FillPatternType;
+import org.apache.poi.ss.usermodel.Row;
+import org.apache.poi.ss.usermodel.Sheet;
+import org.apache.poi.ss.usermodel.Workbook;
+import org.apache.poi.ss.usermodel.WorkbookFactory;
+import org.apache.poi.xssf.usermodel.XSSFColor;
+import org.springframework.stereotype.Service;
+
+/**
+ * Booking Excel 附件预处理实现。只输出高亮行业务证据，不直接改变订单或任务状态。
+ */
+@Service
+public class ReservationBookingExcelAttachmentExtractionServiceImpl
+        implements ReservationBookingExcelAttachmentExtractionService {
+
+    private static final String PARSER_VERSION = "booking-highlight-excel-v1";
+    private static final String MODE_DEFAULT = "DEFAULT_LOOKBACK_LATEST_AVAILABLE";
+    private static final String MODE_EXPLICIT = "EXPLICIT_RANGE";
+    private static final String WARNING_PASSENGER_ROSTER_EXCLUDED = "PASSENGER_ROSTER_EXCLUDED";
+    private static final String WARNING_MATCHED_MONTHS_LESS_THAN_LIMIT = "MATCHED_MONTHS_LESS_THAN_LIMIT";
+    private static final String WARNING_NO_MATCHED_MONTH_SHEET = "NO_MATCHED_MONTH_SHEET";
+    private static final String WARNING_UNKNOWN_EXCEL_TYPE = "UNKNOWN_EXCEL_TYPE";
+    private static final int MAX_CLASSIFICATION_SCAN_ROWS = 20;
+    private static final Pattern MONTH_YEAR_PATTERN = Pattern.compile("(?<!\\d)(0?[1-9]|1[0-2])[-_/ ](20\\d{2})(?!\\d)");
+    private static final Pattern YEAR_MONTH_PATTERN = Pattern.compile("(?<!\\d)(20\\d{2})[-_/ ](0?[1-9]|1[0-2])(?!\\d)");
+
+    private static final Set<String> PASSENGER_HEADERS = Set.of(
+            normalizeStatic("旅游批次"),
+            normalizeStatic("旅游日期"),
+            normalizeStatic("成团航班信息"),
+            normalizeStatic("团号"),
+            normalizeStatic("团长"),
+            normalizeStatic("姓名"),
+            normalizeStatic("护照全名"),
+            normalizeStatic("证件号"),
+            normalizeStatic("护照号"),
+            normalizeStatic("证件有效期结束"),
+            normalizeStatic("性别"),
+            normalizeStatic("生日"),
+            normalizeStatic("年龄"),
+            normalizeStatic("饮食禁忌"),
+            normalizeStatic("重大疾病"));
+
+    private static final Set<String> BOOKING_HEADERS = Set.of(
+            normalizeStatic("酒店"),
+            normalizeStatic("hotel"),
+            normalizeStatic("酒店回应状况"),
+            normalizeStatic("hotel status"),
+            normalizeStatic("remark"),
+            normalizeStatic("remarks"),
+            normalizeStatic("备注"),
+            normalizeStatic("check in"),
+            normalizeStatic("check out"),
+            normalizeStatic("入住"),
+            normalizeStatic("退房"),
+            normalizeStatic("room type"),
+            normalizeStatic("房型"),
+            normalizeStatic("rooms"),
+            normalizeStatic("房数"),
+            normalizeStatic("group code"),
+            normalizeStatic("团号"));
+
+    private final BookingExcelExtractionProperties properties;
+
+    /**
+     * 注入 Booking Excel 解析配置。
+     */
+    public ReservationBookingExcelAttachmentExtractionServiceImpl(BookingExcelExtractionProperties properties) {
+        this.properties = properties;
+    }
+
+    /**
+     * 识别 Excel 类型并抽取高亮行；解析异常被转换为安全 warning。
+     */
+    @Override
+    public BookingExcelAttachmentExtractionResult extract(BookingExcelAttachmentExtractionRequest request) {
+        List<String> warnings = new ArrayList<>();
+        String attachmentName = request == null ? null : request.attachmentName();
+        String attachmentSha256 = sha256(request == null ? null : request.content());
+        if (!properties.isEnabled()) {
+            warnings.add("BOOKING_EXCEL_EXTRACTION_DISABLED");
+            return skipped(attachmentName, attachmentSha256, BookingExcelFileType.UNKNOWN,
+                    "BOOKING_EXCEL_EXTRACTION_DISABLED", warnings);
+        }
+        if (request == null || request.content() == null || request.content().length == 0) {
+            warnings.add("EXCEL_ATTACHMENT_EMPTY");
+            return skipped(attachmentName, attachmentSha256, BookingExcelFileType.UNKNOWN,
+                    "EXCEL_ATTACHMENT_EMPTY", warnings);
+        }
+        if (!isExcelFile(attachmentName)) {
+            warnings.add("NOT_EXCEL_ATTACHMENT");
+            return skipped(attachmentName, attachmentSha256, BookingExcelFileType.UNKNOWN,
+                    "NOT_EXCEL_ATTACHMENT", warnings);
+        }
+        if (request.content().length > Math.max(1L, properties.getMaxFileSizeBytes())) {
+            warnings.add("EXCEL_ATTACHMENT_TOO_LARGE");
+            return skipped(attachmentName, attachmentSha256, BookingExcelFileType.UNKNOWN,
+                    "EXCEL_ATTACHMENT_TOO_LARGE", warnings);
+        }
+        try (Workbook workbook = WorkbookFactory.create(new ByteArrayInputStream(request.content()))) {
+            return extractWorkbook(request, attachmentSha256, workbook, warnings);
+        } catch (IOException | RuntimeException exception) {
+            warnings.add("EXCEL_PARSE_FAILED");
+            return skipped(attachmentName, attachmentSha256, BookingExcelFileType.UNKNOWN,
+                    "EXCEL_PARSE_FAILED", warnings);
+        }
+    }
+
+    /**
+     * 对 workbook 做分类、月份筛选和 sheet 级高亮行抽取。
+     */
+    private BookingExcelAttachmentExtractionResult extractWorkbook(
+            BookingExcelAttachmentExtractionRequest request,
+            String attachmentSha256,
+            Workbook workbook,
+            List<String> warnings) {
+        DataFormatter formatter = new DataFormatter(Locale.ROOT);
+        List<SheetProfile> profiles = scanProfiles(workbook, formatter);
+        if (profiles.isEmpty()) {
+            warnings.add("EXCEL_WORKBOOK_EMPTY");
+            return skipped(request.attachmentName(), attachmentSha256, BookingExcelFileType.UNKNOWN,
+                    "EXCEL_WORKBOOK_EMPTY", warnings);
+        }
+        BookingExcelFileType fileType = classify(request.attachmentName(), profiles);
+        if (BookingExcelFileType.PASSENGER_ROSTER.equals(fileType)) {
+            warnings.add(WARNING_PASSENGER_ROSTER_EXCLUDED);
+            return skipped(request.attachmentName(), attachmentSha256, fileType, "PASSENGER_ROSTER", warnings);
+        }
+        if (BookingExcelFileType.UNKNOWN.equals(fileType)) {
+            warnings.add(WARNING_UNKNOWN_EXCEL_TYPE);
+            return skipped(request.attachmentName(), attachmentSha256, fileType, "UNKNOWN_EXCEL_TYPE", warnings);
+        }
+
+        List<SheetProfile> businessProfiles = profiles.stream()
+                .filter(profile -> !profile.passengerRoster())
+                .toList();
+        MonthSelection monthSelection = selectMonths(request, businessProfiles, warnings);
+        List<BookingExcelSheetExtractionResult> sheets = new ArrayList<>();
+        for (SheetProfile profile : businessProfiles) {
+            if (profile.month() == null || !monthSelection.selectedMonths().contains(profile.month())) {
+                continue;
+            }
+            sheets.add(extractSheet(profile.sheet(), formatter));
+        }
+        return new BookingExcelAttachmentExtractionResult(
+                request.attachmentName(),
+                attachmentSha256,
+                fileType,
+                PARSER_VERSION,
+                false,
+                null,
+                monthSelection.result(),
+                List.copyOf(sheets),
+                List.copyOf(warnings));
+    }
+
+    /**
+     * 扫描 workbook 中可处理 sheet 的表头、月份和分类信号。
+     */
+    private List<SheetProfile> scanProfiles(Workbook workbook, DataFormatter formatter) {
+        List<SheetProfile> profiles = new ArrayList<>();
+        int sheetCount = Math.min(workbook.getNumberOfSheets(), Math.max(1, properties.getMaxSheets()));
+        for (int sheetIndex = 0; sheetIndex < sheetCount; sheetIndex++) {
+            Sheet sheet = workbook.getSheetAt(sheetIndex);
+            if (sheet == null) {
+                continue;
+            }
+            SheetSignals signals = scanSignals(sheet, formatter);
+            if (signals.nonBlankCellCount() == 0 && parseMonth(sheet.getSheetName()).isEmpty()) {
+                continue;
+            }
+            profiles.add(new SheetProfile(
+                    sheet,
+                    parseMonth(sheet.getSheetName()).orElse(null),
+                    signals.passengerHeaderCount() >= 4 && signals.bookingHeaderCount() < 4,
+                    signals.bookingHeaderCount(),
+                    signals.allText()));
+        }
+        return List.copyOf(profiles);
+    }
+
+    /**
+     * 扫描前若干行，提取人员名单、Booking 和关键词信号。
+     */
+    private SheetSignals scanSignals(Sheet sheet, DataFormatter formatter) {
+        int passengerHeaderCount = 0;
+        int bookingHeaderCount = 0;
+        int nonBlankCellCount = 0;
+        StringBuilder allText = new StringBuilder();
+        int lastRow = Math.min(sheet.getLastRowNum(), MAX_CLASSIFICATION_SCAN_ROWS - 1);
+        Set<String> passengerHeaders = new LinkedHashSet<>();
+        Set<String> bookingHeaders = new LinkedHashSet<>();
+        for (int rowIndex = 0; rowIndex <= lastRow; rowIndex++) {
+            Row row = sheet.getRow(rowIndex);
+            if (row == null || row.getFirstCellNum() < 0) {
+                continue;
+            }
+            for (int cellIndex = row.getFirstCellNum(); cellIndex < row.getLastCellNum(); cellIndex++) {
+                String value = cellText(row.getCell(cellIndex), formatter);
+                if (isBlank(value)) {
+                    continue;
+                }
+                nonBlankCellCount++;
+                allText.append(' ').append(value);
+                String normalized = normalize(value);
+                if (PASSENGER_HEADERS.contains(normalized)) {
+                    passengerHeaders.add(normalized);
+                }
+                if (BOOKING_HEADERS.contains(normalized)) {
+                    bookingHeaders.add(normalized);
+                }
+            }
+        }
+        passengerHeaderCount = passengerHeaders.size();
+        bookingHeaderCount = bookingHeaders.size();
+        return new SheetSignals(passengerHeaderCount, bookingHeaderCount, nonBlankCellCount, allText.toString());
+    }
+
+    /**
+     * 根据文件名和 sheet 信号判断 Excel 类型。
+     */
+    private BookingExcelFileType classify(String attachmentName, List<SheetProfile> profiles) {
+        boolean allPassengerRoster = profiles.stream().allMatch(SheetProfile::passengerRoster);
+        if (allPassengerRoster) {
+            return BookingExcelFileType.PASSENGER_ROSTER;
+        }
+        String combinedText = (safeLower(attachmentName) + " " + profiles.stream()
+                .map(profile -> profile.sheet().getSheetName() + " " + profile.allText())
+                .reduce("", (left, right) -> left + " " + right)).toLowerCase(Locale.ROOT);
+        boolean hasBookingHeaders = profiles.stream().anyMatch(profile -> profile.bookingHeaderCount() >= 4);
+        if (hasBookingHeaders && containsAny(combinedText, "附加费", "春节", "新年", "surcharge", "gala dinner", "compulsory")) {
+            return BookingExcelFileType.BOOKING_SURCHARGE;
+        }
+        boolean hasBookingMonthSheet = profiles.stream().anyMatch(profile ->
+                profile.month() != null && safeLower(profile.sheet().getSheetName()).contains("booking"));
+        if (hasBookingHeaders && (containsAny(combinedText, "update", "booking", "wyndham") || hasBookingMonthSheet)) {
+            return BookingExcelFileType.BOOKING_UPDATE;
+        }
+        return BookingExcelFileType.UNKNOWN;
+    }
+
+    /**
+     * 默认模式先取最近 6 个月候选窗口，再从文件实际存在月份中选择最新 3 个月。
+     */
+    private MonthSelection selectMonths(
+            BookingExcelAttachmentExtractionRequest request,
+            List<SheetProfile> profiles,
+            List<String> warnings) {
+        if (request.fromMonth() != null && request.toMonth() != null) {
+            return explicitMonthSelection(request.fromMonth(), request.toMonth(), profiles, warnings);
+        }
+        int lookbackMonths = Math.max(1, properties.getLookbackMonths());
+        int maxSelectedMonths = Math.max(1, properties.getMaxSelectedMonths());
+        YearMonth baseMonth = YearMonth.from(baseInstant(request).atZone(baseZone(request)));
+        YearMonth candidateFromMonth = baseMonth.minusMonths(lookbackMonths - 1L);
+        YearMonth candidateToMonth = baseMonth;
+        List<YearMonth> availableMonths = availableMonths(profiles, candidateFromMonth, candidateToMonth);
+        List<YearMonth> selectedMonths = availableMonths.stream()
+                .sorted(Comparator.reverseOrder())
+                .limit(maxSelectedMonths)
+                .sorted()
+                .toList();
+        if (selectedMonths.isEmpty()) {
+            warnings.add(WARNING_NO_MATCHED_MONTH_SHEET);
+        } else if (selectedMonths.size() < maxSelectedMonths) {
+            warnings.add(WARNING_MATCHED_MONTHS_LESS_THAN_LIMIT);
+        }
+        return buildMonthSelection(
+                MODE_DEFAULT,
+                baseMonth,
+                lookbackMonths,
+                maxSelectedMonths,
+                candidateFromMonth,
+                candidateToMonth,
+                availableMonths,
+                selectedMonths,
+                profiles);
+    }
+
+    /**
+     * 显式月份窗口模式，处理窗口内所有实际存在月份。
+     */
+    private MonthSelection explicitMonthSelection(
+            YearMonth fromMonth,
+            YearMonth toMonth,
+            List<SheetProfile> profiles,
+            List<String> warnings) {
+        YearMonth candidateFromMonth = fromMonth.isAfter(toMonth) ? toMonth : fromMonth;
+        YearMonth candidateToMonth = fromMonth.isAfter(toMonth) ? fromMonth : toMonth;
+        List<YearMonth> availableMonths = availableMonths(profiles, candidateFromMonth, candidateToMonth);
+        List<YearMonth> selectedMonths = List.copyOf(availableMonths);
+        if (selectedMonths.isEmpty()) {
+            warnings.add(WARNING_NO_MATCHED_MONTH_SHEET);
+        }
+        return buildMonthSelection(
+                MODE_EXPLICIT,
+                null,
+                null,
+                null,
+                candidateFromMonth,
+                candidateToMonth,
+                availableMonths,
+                selectedMonths,
+                profiles);
+    }
+
+    private MonthSelection buildMonthSelection(
+            String mode,
+            YearMonth baseMonth,
+            Integer lookbackMonths,
+            Integer maxSelectedMonths,
+            YearMonth candidateFromMonth,
+            YearMonth candidateToMonth,
+            List<YearMonth> availableMonths,
+            List<YearMonth> selectedMonths,
+            List<SheetProfile> profiles) {
+        Set<YearMonth> selectedMonthSet = Set.copyOf(selectedMonths);
+        List<String> matchedSheets = profiles.stream()
+                .filter(profile -> profile.month() != null && selectedMonthSet.contains(profile.month()))
+                .map(profile -> profile.sheet().getSheetName())
+                .toList();
+        List<String> skippedSheets = profiles.stream()
+                .filter(profile -> profile.month() == null || !selectedMonthSet.contains(profile.month()))
+                .map(profile -> profile.sheet().getSheetName())
+                .toList();
+        BookingExcelMonthFilterResult result = new BookingExcelMonthFilterResult(
+                mode,
+                text(baseMonth),
+                lookbackMonths,
+                maxSelectedMonths,
+                text(candidateFromMonth),
+                text(candidateToMonth),
+                yearMonthTexts(availableMonths),
+                yearMonthTexts(selectedMonths),
+                matchedSheets,
+                skippedSheets);
+        return new MonthSelection(selectedMonths, result);
+    }
+
+    private List<YearMonth> availableMonths(
+            List<SheetProfile> profiles,
+            YearMonth candidateFromMonth,
+            YearMonth candidateToMonth) {
+        return profiles.stream()
+                .map(SheetProfile::month)
+                .filter(Objects::nonNull)
+                .filter(month -> !month.isBefore(candidateFromMonth) && !month.isAfter(candidateToMonth))
+                .distinct()
+                .sorted()
+                .toList();
+    }
+
+    /**
+     * 抽取单个 sheet 中所有带背景色的业务行。
+     */
+    private BookingExcelSheetExtractionResult extractSheet(Sheet sheet, DataFormatter formatter) {
+        HeaderProfile header = findHeader(sheet, formatter);
+        if (header == null) {
+            return new BookingExcelSheetExtractionResult(sheet.getSheetName(), null, 0, List.of());
+        }
+        List<BookingExcelHighlightedRowResult> highlightedRows = new ArrayList<>();
+        int maxRow = Math.min(sheet.getLastRowNum(), header.rowIndex() + Math.max(1, properties.getMaxRowsPerSheet()));
+        for (int rowIndex = header.rowIndex() + 1; rowIndex <= maxRow; rowIndex++) {
+            Row row = sheet.getRow(rowIndex);
+            if (row == null) {
+                continue;
+            }
+            BookingExcelHighlightedRowResult highlightedRow = highlightedRow(row, header, formatter);
+            if (highlightedRow != null) {
+                highlightedRows.add(highlightedRow);
+            }
+        }
+        return new BookingExcelSheetExtractionResult(
+                sheet.getSheetName(),
+                header.rowIndex() + 1,
+                highlightedRows.size(),
+                List.copyOf(highlightedRows));
+    }
+
+    /**
+     * 查找最像业务表头的行，优先选择 Booking 字段命中最多的行。
+     */
+    private HeaderProfile findHeader(Sheet sheet, DataFormatter formatter) {
+        HeaderProfile best = null;
+        int lastRow = Math.min(sheet.getLastRowNum(), MAX_CLASSIFICATION_SCAN_ROWS - 1);
+        for (int rowIndex = 0; rowIndex <= lastRow; rowIndex++) {
+            Row row = sheet.getRow(rowIndex);
+            if (row == null || row.getFirstCellNum() < 0) {
+                continue;
+            }
+            Map<Integer, String> headers = new LinkedHashMap<>();
+            int bookingScore = 0;
+            int nonBlankCount = 0;
+            for (int cellIndex = row.getFirstCellNum(); cellIndex < row.getLastCellNum(); cellIndex++) {
+                String value = cellText(row.getCell(cellIndex), formatter);
+                if (isBlank(value)) {
+                    continue;
+                }
+                headers.put(cellIndex, value);
+                nonBlankCount++;
+                if (BOOKING_HEADERS.contains(normalize(value))) {
+                    bookingScore++;
+                }
+            }
+            if (headers.isEmpty()) {
+                continue;
+            }
+            HeaderProfile candidate = new HeaderProfile(rowIndex, headers, bookingScore, nonBlankCount);
+            if (best == null
+                    || candidate.bookingScore() > best.bookingScore()
+                    || (candidate.bookingScore() == best.bookingScore()
+                    && candidate.nonBlankCount() > best.nonBlankCount())) {
+                best = candidate;
+            }
+        }
+        return best;
+    }
+
+    /**
+     * 如果数据行存在有效背景色，返回行级抽取结果；否则返回 null。
+     */
+    private BookingExcelHighlightedRowResult highlightedRow(
+            Row row,
+            HeaderProfile header,
+            DataFormatter formatter) {
+        List<BookingExcelHighlightCellResult> highlightCells = new ArrayList<>();
+        LinkedHashSet<String> highlightColors = new LinkedHashSet<>();
+        Map<String, String> rawRow = new LinkedHashMap<>();
+        Map<String, String> normalizedRow = new LinkedHashMap<>();
+        for (Map.Entry<Integer, String> headerCell : header.headers().entrySet()) {
+            int cellIndex = headerCell.getKey();
+            Cell cell = row.getCell(cellIndex);
+            String value = cellText(cell, formatter);
+            if (!isBlank(value)) {
+                rawRow.put(columnName(cellIndex), value);
+                normalizedFieldKey(headerCell.getValue()).ifPresent(fieldKey -> normalizedRow.put(fieldKey, value));
+            }
+            String fillColor = fillColor(cell);
+            if (fillColor != null) {
+                highlightColors.add(fillColor);
+                highlightCells.add(new BookingExcelHighlightCellResult(
+                        columnName(cellIndex),
+                        headerCell.getValue(),
+                        value,
+                        fillColor));
+            }
+        }
+        if (highlightCells.isEmpty()) {
+            return null;
+        }
+        return new BookingExcelHighlightedRowResult(
+                row.getRowNum() + 1,
+                null,
+                List.copyOf(highlightColors),
+                List.copyOf(highlightCells),
+                Map.copyOf(normalizedRow),
+                Map.copyOf(rawRow),
+                List.of());
+    }
+
+    private Optional<String> normalizedFieldKey(String header) {
+        String normalized = normalize(header);
+        if (matches(normalized, "groupcode", "团号")) {
+            return Optional.of("group_code");
+        }
+        if (matches(normalized, "hotel", "酒店")) {
+            return Optional.of("hotel");
+        }
+        if (matches(normalized, "checkin", "入住")) {
+            return Optional.of("check_in");
+        }
+        if (matches(normalized, "checkout", "退房")) {
+            return Optional.of("check_out");
+        }
+        if (matches(normalized, "roomtype", "房型")) {
+            return Optional.of("room_type");
+        }
+        if (matches(normalized, "rooms", "房数")) {
+            return Optional.of("rooms");
+        }
+        if (matches(normalized, "hotelstatus", "酒店回应状况")) {
+            return Optional.of("hotel_status");
+        }
+        if (matches(normalized, "remark", "remarks", "备注")) {
+            return Optional.of("remark");
+        }
+        return Optional.empty();
+    }
+
+    private boolean matches(String normalized, String... candidates) {
+        for (String candidate : candidates) {
+            if (normalized.equals(normalize(candidate))) {
+                return true;
+            }
+        }
+        return false;
+    }
+
+    private Optional<YearMonth> parseMonth(String value) {
+        String text = trimToEmpty(value);
+        Matcher monthYear = MONTH_YEAR_PATTERN.matcher(text);
+        if (monthYear.find()) {
+            return Optional.of(YearMonth.of(Integer.parseInt(monthYear.group(2)), Integer.parseInt(monthYear.group(1))));
+        }
+        Matcher yearMonth = YEAR_MONTH_PATTERN.matcher(text);
+        if (yearMonth.find()) {
+            return Optional.of(YearMonth.of(Integer.parseInt(yearMonth.group(1)), Integer.parseInt(yearMonth.group(2))));
+        }
+        return Optional.empty();
+    }
+
+    private String fillColor(Cell cell) {
+        if (cell == null) {
+            return null;
+        }
+        CellStyle style = cell.getCellStyle();
+        if (style == null || !FillPatternType.SOLID_FOREGROUND.equals(style.getFillPattern())) {
+            return null;
+        }
+        Color color = style.getFillForegroundColorColor();
+        String colorText = colorText(color);
+        if (isDefaultFillColor(colorText)) {
+            return null;
+        }
+        return colorText;
+    }
+
+    private String colorText(Color color) {
+        if (color instanceof XSSFColor xssfColor) {
+            String argbHex = xssfColor.getARGBHex();
+            if (!isBlank(argbHex)) {
+                return argbHex.toUpperCase(Locale.ROOT);
+            }
+            byte[] rgb = xssfColor.getRGB();
+            return rgbHex(rgb);
+        }
+        if (color instanceof HSSFColor hssfColor) {
+            String hex = hssfColor.getHexString();
+            if (!isBlank(hex)) {
+                return hex.replace(":", "").toUpperCase(Locale.ROOT);
+            }
+        }
+        return null;
+    }
+
+    private String rgbHex(byte[] rgb) {
+        if (rgb == null || rgb.length == 0) {
+            return null;
+        }
+        StringBuilder builder = new StringBuilder();
+        for (byte value : rgb) {
+            builder.append(String.format(Locale.ROOT, "%02X", value & 0xFF));
+        }
+        return builder.toString();
+    }
+
+    private boolean isDefaultFillColor(String colorText) {
+        if (isBlank(colorText)) {
+            return true;
+        }
+        String normalized = colorText.toUpperCase(Locale.ROOT);
+        return "FFFFFF".equals(normalized)
+                || "FFFFFFFF".equals(normalized)
+                || "00000000".equals(normalized)
+                || "000000".equals(normalized);
+    }
+
+    private BookingExcelAttachmentExtractionResult skipped(
+            String attachmentName,
+            String attachmentSha256,
+            BookingExcelFileType fileType,
+            String skippedReason,
+            List<String> warnings) {
+        return new BookingExcelAttachmentExtractionResult(
+                attachmentName,
+                attachmentSha256,
+                fileType,
+                PARSER_VERSION,
+                true,
+                skippedReason,
+                null,
+                List.of(),
+                List.copyOf(warnings));
+    }
+
+    private boolean isExcelFile(String attachmentName) {
+        String lowerName = safeLower(attachmentName);
+        return lowerName.endsWith(".xlsx") || lowerName.endsWith(".xls");
+    }
+
+    private String cellText(Cell cell, DataFormatter formatter) {
+        if (cell == null) {
+            return "";
+        }
+        return formatter.formatCellValue(cell).trim();
+    }
+
+    private Instant baseInstant(BookingExcelAttachmentExtractionRequest request) {
+        return request.baseInstant() == null ? Instant.now() : request.baseInstant();
+    }
+
+    private ZoneId baseZone(BookingExcelAttachmentExtractionRequest request) {
+        return request.hotelZoneId() == null ? ZoneId.of("UTC") : request.hotelZoneId();
+    }
+
+    private boolean containsAny(String source, String... keywords) {
+        if (source == null) {
+            return false;
+        }
+        for (String keyword : keywords) {
+            if (source.contains(keyword.toLowerCase(Locale.ROOT))) {
+                return true;
+            }
+        }
+        return false;
+    }
+
+    private List<String> yearMonthTexts(List<YearMonth> months) {
+        return months.stream().map(YearMonth::toString).toList();
+    }
+
+    private String text(YearMonth month) {
+        return month == null ? null : month.toString();
+    }
+
+    private String sha256(byte[] content) {
+        if (content == null) {
+            return null;
+        }
+        try {
+            MessageDigest digest = MessageDigest.getInstance("SHA-256");
+            byte[] bytes = digest.digest(content);
+            StringBuilder builder = new StringBuilder(bytes.length * 2);
+            for (byte value : bytes) {
+                builder.append(String.format(Locale.ROOT, "%02x", value & 0xFF));
+            }
+            return builder.toString();
+        } catch (NoSuchAlgorithmException exception) {
+            throw new IllegalStateException("SHA-256 algorithm unavailable.", exception);
+        }
+    }
+
+    private String columnName(int columnIndex) {
+        int value = columnIndex + 1;
+        StringBuilder builder = new StringBuilder();
+        while (value > 0) {
+            int remainder = (value - 1) % 26;
+            builder.insert(0, (char) ('A' + remainder));
+            value = (value - 1) / 26;
+        }
+        return builder.toString();
+    }
+
+    private String safeLower(String value) {
+        return trimToEmpty(value).toLowerCase(Locale.ROOT);
+    }
+
+    private String trimToEmpty(String value) {
+        return value == null ? "" : value.trim();
+    }
+
+    private boolean isBlank(String value) {
+        return value == null || value.trim().isEmpty();
+    }
+
+    private String normalize(String value) {
+        return normalizeStatic(value);
+    }
+
+    private static String normalizeStatic(String value) {
+        if (value == null) {
+            return "";
+        }
+        return value.toLowerCase(Locale.ROOT)
+                .replaceAll("[\\s_\\-/:：()（）.]+", "");
+    }
+
+    /**
+     * sheet 分类画像。
+     */
+    private record SheetProfile(
+            Sheet sheet,
+            YearMonth month,
+            boolean passengerRoster,
+            int bookingHeaderCount,
+            String allText) {
+    }
+
+    /**
+     * sheet 前若干行的分类信号。
+     */
+    private record SheetSignals(
+            int passengerHeaderCount,
+            int bookingHeaderCount,
+            int nonBlankCellCount,
+            String allText) {
+    }
+
+    /**
+     * 业务表头画像。
+     */
+    private record HeaderProfile(
+            int rowIndex,
+            Map<Integer, String> headers,
+            int bookingScore,
+            int nonBlankCount) {
+    }
+
+    /**
+     * 月份选择结果。
+     */
+    private record MonthSelection(
+            List<YearMonth> selectedMonths,
+            BookingExcelMonthFilterResult result) {
+    }
+}
diff --git a/server/src/main/resources/application-dev.yml b/server/src/main/resources/application-dev.yml
index 53c6faf..8772eb5 100644
--- a/server/src/main/resources/application-dev.yml
+++ b/server/src/main/resources/application-dev.yml
@@ -35,6 +35,8 @@ agentbus:
     initial-backoff: ${AGENTBUS_DEV_SUPERAGENT_DISPATCH_INITIAL_BACKOFF:${AGENTBUS_SUPERAGENT_DISPATCH_INITIAL_BACKOFF:30s}}
     max-backoff: ${AGENTBUS_DEV_SUPERAGENT_DISPATCH_MAX_BACKOFF:${AGENTBUS_SUPERAGENT_DISPATCH_MAX_BACKOFF:15m}}
     worker-fixed-delay-ms: ${AGENTBUS_DEV_SUPERAGENT_DISPATCH_WORKER_FIXED_DELAY_MS:${AGENTBUS_SUPERAGENT_DISPATCH_WORKER_FIXED_DELAY_MS:10000}}
+    include-booking-excel-extractions: ${AGENTBUS_DEV_SUPERAGENT_DISPATCH_INCLUDE_BOOKING_EXCEL_EXTRACTIONS:${AGENTBUS_SUPERAGENT_DISPATCH_INCLUDE_BOOKING_EXCEL_EXTRACTIONS:false}}
+    booking-excel-download-max-size: ${AGENTBUS_DEV_SUPERAGENT_DISPATCH_BOOKING_EXCEL_DOWNLOAD_MAX_SIZE:${AGENTBUS_SUPERAGENT_DISPATCH_BOOKING_EXCEL_DOWNLOAD_MAX_SIZE:10MB}}
 
 superagent:
   task-result:
diff --git a/server/src/main/resources/application-prod.yml b/server/src/main/resources/application-prod.yml
index 976f982..e412ab7 100644
--- a/server/src/main/resources/application-prod.yml
+++ b/server/src/main/resources/application-prod.yml
@@ -33,6 +33,8 @@ agentbus:
     initial-backoff: ${AGENTBUS_PROD_SUPERAGENT_DISPATCH_INITIAL_BACKOFF:${AGENTBUS_SUPERAGENT_DISPATCH_INITIAL_BACKOFF:30s}}
     max-backoff: ${AGENTBUS_PROD_SUPERAGENT_DISPATCH_MAX_BACKOFF:${AGENTBUS_SUPERAGENT_DISPATCH_MAX_BACKOFF:15m}}
     worker-fixed-delay-ms: ${AGENTBUS_PROD_SUPERAGENT_DISPATCH_WORKER_FIXED_DELAY_MS:${AGENTBUS_SUPERAGENT_DISPATCH_WORKER_FIXED_DELAY_MS:10000}}
+    include-booking-excel-extractions: ${AGENTBUS_PROD_SUPERAGENT_DISPATCH_INCLUDE_BOOKING_EXCEL_EXTRACTIONS:false}
+    booking-excel-download-max-size: ${AGENTBUS_PROD_SUPERAGENT_DISPATCH_BOOKING_EXCEL_DOWNLOAD_MAX_SIZE:${AGENTBUS_SUPERAGENT_DISPATCH_BOOKING_EXCEL_DOWNLOAD_MAX_SIZE:10MB}}
 
 superagent:
   task-result:
diff --git a/server/src/main/resources/application-test.yml b/server/src/main/resources/application-test.yml
index 0916b06..841dcd2 100644
--- a/server/src/main/resources/application-test.yml
+++ b/server/src/main/resources/application-test.yml
@@ -35,6 +35,8 @@ agentbus:
     initial-backoff: ${AGENTBUS_TEST_SUPERAGENT_DISPATCH_INITIAL_BACKOFF:${AGENTBUS_SUPERAGENT_DISPATCH_INITIAL_BACKOFF:30s}}
     max-backoff: ${AGENTBUS_TEST_SUPERAGENT_DISPATCH_MAX_BACKOFF:${AGENTBUS_SUPERAGENT_DISPATCH_MAX_BACKOFF:15m}}
     worker-fixed-delay-ms: ${AGENTBUS_TEST_SUPERAGENT_DISPATCH_WORKER_FIXED_DELAY_MS:${AGENTBUS_SUPERAGENT_DISPATCH_WORKER_FIXED_DELAY_MS:10000}}
+    include-booking-excel-extractions: ${AGENTBUS_TEST_SUPERAGENT_DISPATCH_INCLUDE_BOOKING_EXCEL_EXTRACTIONS:${AGENTBUS_SUPERAGENT_DISPATCH_INCLUDE_BOOKING_EXCEL_EXTRACTIONS:false}}
+    booking-excel-download-max-size: ${AGENTBUS_TEST_SUPERAGENT_DISPATCH_BOOKING_EXCEL_DOWNLOAD_MAX_SIZE:${AGENTBUS_SUPERAGENT_DISPATCH_BOOKING_EXCEL_DOWNLOAD_MAX_SIZE:10MB}}
 
 superagent:
   task-result:
diff --git a/server/src/main/resources/application.yml b/server/src/main/resources/application.yml
index 4ab3935..0f62f7b 100644
--- a/server/src/main/resources/application.yml
+++ b/server/src/main/resources/application.yml
@@ -38,6 +38,8 @@ agentbus:
     initial-backoff: ${AGENTBUS_SUPERAGENT_DISPATCH_INITIAL_BACKOFF:30s}
     max-backoff: ${AGENTBUS_SUPERAGENT_DISPATCH_MAX_BACKOFF:15m}
     worker-fixed-delay-ms: ${AGENTBUS_SUPERAGENT_DISPATCH_WORKER_FIXED_DELAY_MS:10000}
+    include-booking-excel-extractions: ${AGENTBUS_SUPERAGENT_DISPATCH_INCLUDE_BOOKING_EXCEL_EXTRACTIONS:false}
+    booking-excel-download-max-size: ${AGENTBUS_SUPERAGENT_DISPATCH_BOOKING_EXCEL_DOWNLOAD_MAX_SIZE:10MB}
 
 superagent:
   task-result:
diff --git a/server/src/test/java/cn/nianxx/thhotel/integrations/ai/superagent/service/impl/SuperAgentDispatchServiceImplTest.java b/server/src/test/java/cn/nianxx/thhotel/integrations/ai/superagent/service/impl/SuperAgentDispatchServiceImplTest.java
index 768c03e..d706583 100644
--- a/server/src/test/java/cn/nianxx/thhotel/integrations/ai/superagent/service/impl/SuperAgentDispatchServiceImplTest.java
+++ b/server/src/test/java/cn/nianxx/thhotel/integrations/ai/superagent/service/impl/SuperAgentDispatchServiceImplTest.java
@@ -6,6 +6,7 @@ import static org.mockito.ArgumentMatchers.anyInt;
 import static org.mockito.Mockito.mock;
 import static org.mockito.Mockito.never;
 import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.verifyNoInteractions;
 import static org.mockito.Mockito.when;
 
 import cn.nianxx.thhotel.integrations.ai.superagent.common.dto.SuperAgentDispatchRunDraft;
@@ -17,14 +18,30 @@ import cn.nianxx.thhotel.integrations.ai.superagent.common.request.SuperAgentOpe
 import cn.nianxx.thhotel.integrations.ai.superagent.common.result.SuperAgentOpenApiResult;
 import cn.nianxx.thhotel.integrations.ai.superagent.repository.SuperAgentDispatchRunRepository;
 import cn.nianxx.thhotel.integrations.ai.superagent.service.SuperAgentOpenApiClient;
+import cn.nianxx.thhotel.integrations.storage.aliyunoss.common.request.ObjectStorageReadRequest;
+import cn.nianxx.thhotel.integrations.storage.aliyunoss.common.result.ObjectStorageReadResult;
+import cn.nianxx.thhotel.integrations.storage.aliyunoss.service.ObjectStorageService;
+import cn.nianxx.thhotel.integrations.storage.aliyunoss.service.impl.ObjectStorageException;
 import cn.nianxx.thhotel.platform.message.common.request.CaptureSourceMessageCommand;
 import cn.nianxx.thhotel.platform.message.common.result.SourceMessageCaptureResult;
+import cn.nianxx.thhotel.platform.message.common.dto.SourceMessageOriginalContent;
+import cn.nianxx.thhotel.platform.message.common.dto.SourceMessageOriginalMediaItem;
 import cn.nianxx.thhotel.platform.message.repository.SourceMessageInboxRepository;
+import cn.nianxx.thhotel.workflows.reservation.excelimport.service.ReservationBookingExcelAttachmentExtractionService;
+import cn.nianxx.thhotel.workflows.reservation.excelimport.service.impl.BookingExcelExtractionProperties;
+import cn.nianxx.thhotel.workflows.reservation.excelimport.service.impl.ReservationBookingExcelAttachmentExtractionServiceImpl;
 import com.fasterxml.jackson.databind.ObjectMapper;
+import java.io.ByteArrayOutputStream;
 import java.time.LocalDateTime;
 import java.util.List;
 import java.util.Map;
 import java.util.Optional;
+import org.apache.poi.ss.usermodel.FillPatternType;
+import org.apache.poi.ss.usermodel.IndexedColors;
+import org.apache.poi.ss.usermodel.Row;
+import org.apache.poi.ss.usermodel.Sheet;
+import org.apache.poi.xssf.usermodel.XSSFCellStyle;
+import org.apache.poi.xssf.usermodel.XSSFWorkbook;
 import org.junit.jupiter.api.Test;
 import org.mockito.ArgumentCaptor;
 
@@ -153,20 +170,234 @@ class SuperAgentDispatchServiceImplTest {
         assertThat(updateCaptor.getValue().superagentParsedJson()).isEqualTo("{\"route_code\":\"S10\"}");
     }
 
+    @Test
+    void shouldAppendBookingExcelExtractionsBeforeDispatchingToSuperAgent() throws Exception {
+        SuperAgentDispatchRunRepository runRepository = mock(SuperAgentDispatchRunRepository.class);
+        SourceMessageInboxRepository sourceMessageRepository = mock(SourceMessageInboxRepository.class);
+        SuperAgentOpenApiClient openApiClient = mock(SuperAgentOpenApiClient.class);
+        ObjectStorageService objectStorageService = mock(ObjectStorageService.class);
+        SuperAgentDispatchProperties properties = properties(true, true);
+        properties.setIncludeBookingExcelExtractions(true);
+        SuperAgentDispatchServiceImpl service = service(
+                runRepository,
+                sourceMessageRepository,
+                openApiClient,
+                objectStorageService,
+                bookingExcelExtractionService(true),
+                properties);
+        SuperAgentDispatchRunSnapshot snapshot = snapshot();
+        byte[] excelBytes = bookingUpdateExcelBytes();
+        when(runRepository.claimDue(any(), any(), any(), any(), any(Integer.class))).thenReturn(List.of(snapshot));
+        when(sourceMessageRepository.findPayloadJson(88001L)).thenReturn(Optional.of("""
+                {
+                  "received_at": "2026-07-19T03:00:00Z",
+                  "source": {"external_message_id": "mail-agentbus-001"},
+                  "body": {"text": "Please check highlighted booking update rows"},
+                  "attachments": [
+                    {
+                      "file_name": "WYNDHAM LIANTAI 2026 UPDATE BOOKING.xlsx",
+                      "content_type": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+                      "external_url": "https://oss.example.test/booking-update.xlsx"
+                    }
+                  ]
+                }
+                """));
+        when(sourceMessageRepository.findOriginalContent(88001L)).thenReturn(Optional.of(new SourceMessageOriginalContent(
+                88001L,
+                null,
+                null,
+                List.of(new SourceMessageOriginalMediaItem(
+                        "ATTACHMENT",
+                        "WYNDHAM LIANTAI 2026 UPDATE BOOKING.xlsx",
+                        "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+                        (long) excelBytes.length,
+                        "https://oss.example.test/private/booking-update.xlsx?token=download-secret",
+                        "media-agentbus-excel-001")))));
+        when(objectStorageService.readObject(any(ObjectStorageReadRequest.class))).thenReturn(new ObjectStorageReadResult(
+                excelBytes,
+                "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+                (long) excelBytes.length));
+        when(openApiClient.invokeMessage(any(SuperAgentOpenApiMessageRequest.class))).thenReturn(successResult());
+
+        service.processDueDispatches();
+
+        ArgumentCaptor<ObjectStorageReadRequest> storageRequestCaptor =
+                ArgumentCaptor.forClass(ObjectStorageReadRequest.class);
+        verify(objectStorageService).readObject(storageRequestCaptor.capture());
+        assertThat(storageRequestCaptor.getValue().externalUrl())
+                .isEqualTo("https://oss.example.test/private/booking-update.xlsx?token=download-secret");
+        ArgumentCaptor<SuperAgentOpenApiMessageRequest> requestCaptor =
+                ArgumentCaptor.forClass(SuperAgentOpenApiMessageRequest.class);
+        verify(openApiClient).invokeMessage(requestCaptor.capture());
+        assertThat(requestCaptor.getValue().message())
+                .contains("\"attachment_extractions\"")
+                .contains("\"file_type\":\"BOOKING_UPDATE\"")
+                .contains("\"group_code\":\"GRP-2605-001\"")
+                .doesNotContain("download-secret");
+    }
+
+    @Test
+    void shouldNotReadAttachmentsWhenBookingExcelDispatchSwitchDisabled() {
+        SuperAgentDispatchRunRepository runRepository = mock(SuperAgentDispatchRunRepository.class);
+        SourceMessageInboxRepository sourceMessageRepository = mock(SourceMessageInboxRepository.class);
+        SuperAgentOpenApiClient openApiClient = mock(SuperAgentOpenApiClient.class);
+        ObjectStorageService objectStorageService = mock(ObjectStorageService.class);
+        SuperAgentDispatchServiceImpl service = service(
+                runRepository,
+                sourceMessageRepository,
+                openApiClient,
+                objectStorageService,
+                bookingExcelExtractionService(true),
+                properties(true, true));
+        SuperAgentDispatchRunSnapshot snapshot = snapshot();
+        when(runRepository.claimDue(any(), any(), any(), any(), any(Integer.class))).thenReturn(List.of(snapshot));
+        when(sourceMessageRepository.findPayloadJson(88001L)).thenReturn(Optional.of("""
+                {
+                  "received_at": "2026-07-19T03:00:00Z",
+                  "source": {"external_message_id": "mail-agentbus-001"},
+                  "attachments": [
+                    {"file_name": "WYNDHAM LIANTAI 2026 UPDATE BOOKING.xlsx"}
+                  ]
+                }
+                """));
+        when(openApiClient.invokeMessage(any(SuperAgentOpenApiMessageRequest.class))).thenReturn(successResult());
+
+        service.processDueDispatches();
+
+        verify(sourceMessageRepository, never()).findOriginalContent(88001L);
+        verifyNoInteractions(objectStorageService);
+        ArgumentCaptor<SuperAgentOpenApiMessageRequest> requestCaptor =
+                ArgumentCaptor.forClass(SuperAgentOpenApiMessageRequest.class);
+        verify(openApiClient).invokeMessage(requestCaptor.capture());
+        assertThat(requestCaptor.getValue().message()).doesNotContain("\"attachment_extractions\"");
+    }
+
+    @Test
+    void shouldContinueDispatchWithSafeWarningWhenBookingExcelAttachmentReadFails() {
+        SuperAgentDispatchRunRepository runRepository = mock(SuperAgentDispatchRunRepository.class);
+        SourceMessageInboxRepository sourceMessageRepository = mock(SourceMessageInboxRepository.class);
+        SuperAgentOpenApiClient openApiClient = mock(SuperAgentOpenApiClient.class);
+        ObjectStorageService objectStorageService = mock(ObjectStorageService.class);
+        SuperAgentDispatchProperties properties = properties(true, true);
+        properties.setIncludeBookingExcelExtractions(true);
+        SuperAgentDispatchServiceImpl service = service(
+                runRepository,
+                sourceMessageRepository,
+                openApiClient,
+                objectStorageService,
+                bookingExcelExtractionService(true),
+                properties);
+        SuperAgentDispatchRunSnapshot snapshot = snapshot();
+        when(runRepository.claimDue(any(), any(), any(), any(), any(Integer.class))).thenReturn(List.of(snapshot));
+        when(sourceMessageRepository.findPayloadJson(88001L)).thenReturn(Optional.of("""
+                {
+                  "received_at": "2026-07-19T03:00:00Z",
+                  "source": {"external_message_id": "mail-agentbus-001"},
+                  "body": {"text": "Please check attachment"}
+                }
+                """));
+        when(sourceMessageRepository.findOriginalContent(88001L)).thenReturn(Optional.of(new SourceMessageOriginalContent(
+                88001L,
+                null,
+                null,
+                List.of(new SourceMessageOriginalMediaItem(
+                        "ATTACHMENT",
+                        "WYNDHAM LIANTAI 2026 UPDATE BOOKING.xlsx",
+                        "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+                        2048L,
+                        "https://oss.example.test/private/booking-update.xlsx?token=download-secret",
+                        "media-agentbus-excel-001")))));
+        when(objectStorageService.readObject(any(ObjectStorageReadRequest.class)))
+                .thenThrow(new ObjectStorageException("对象存储读取失败，token=download-secret。"));
+        when(openApiClient.invokeMessage(any(SuperAgentOpenApiMessageRequest.class))).thenReturn(successResult());
+
+        service.processDueDispatches();
+
+        ArgumentCaptor<SuperAgentOpenApiMessageRequest> requestCaptor =
+                ArgumentCaptor.forClass(SuperAgentOpenApiMessageRequest.class);
+        verify(openApiClient).invokeMessage(requestCaptor.capture());
+        assertThat(requestCaptor.getValue().message())
+                .contains("\"attachment_extractions\"")
+                .contains("ATTACHMENT_DOWNLOAD_FAILED")
+                .doesNotContain("download-secret");
+        verify(runRepository).markSucceeded(any(SuperAgentDispatchRunSuccessUpdate.class));
+    }
+
+    @Test
+    void shouldContinueDispatchWhenBookingExcelPayloadEnrichmentFails() {
+        SuperAgentDispatchRunRepository runRepository = mock(SuperAgentDispatchRunRepository.class);
+        SourceMessageInboxRepository sourceMessageRepository = mock(SourceMessageInboxRepository.class);
+        SuperAgentOpenApiClient openApiClient = mock(SuperAgentOpenApiClient.class);
+        SuperAgentDispatchProperties properties = properties(true, true);
+        properties.setIncludeBookingExcelExtractions(true);
+        SuperAgentDispatchServiceImpl service = service(
+                runRepository,
+                sourceMessageRepository,
+                openApiClient,
+                mock(ObjectStorageService.class),
+                bookingExcelExtractionService(true),
+                properties);
+        SuperAgentDispatchRunSnapshot snapshot = snapshot();
+        when(runRepository.claimDue(any(), any(), any(), any(), any(Integer.class))).thenReturn(List.of(snapshot));
+        when(sourceMessageRepository.findPayloadJson(88001L)).thenReturn(Optional.of("""
+                {"received_at":"2026-07-19T03:00:00Z","source":{"external_message_id":"mail-agentbus-001"}}
+                """));
+        when(sourceMessageRepository.findOriginalContent(88001L))
+                .thenThrow(new RuntimeException("unexpected token=download-secret"));
+        when(openApiClient.invokeMessage(any(SuperAgentOpenApiMessageRequest.class))).thenReturn(successResult());
+
+        service.processDueDispatches();
+
+        ArgumentCaptor<SuperAgentOpenApiMessageRequest> requestCaptor =
+                ArgumentCaptor.forClass(SuperAgentOpenApiMessageRequest.class);
+        verify(openApiClient).invokeMessage(requestCaptor.capture());
+        assertThat(requestCaptor.getValue().message())
+                .doesNotContain("\"attachment_extractions\"")
+                .doesNotContain("download-secret");
+        verify(runRepository).markSucceeded(any(SuperAgentDispatchRunSuccessUpdate.class));
+    }
+
     private SuperAgentDispatchServiceImpl service(
             SuperAgentDispatchRunRepository runRepository,
             SourceMessageInboxRepository sourceMessageRepository,
             SuperAgentOpenApiClient openApiClient,
             SuperAgentDispatchProperties properties) {
+        return service(
+                runRepository,
+                sourceMessageRepository,
+                openApiClient,
+                mock(ObjectStorageService.class),
+                bookingExcelExtractionService(false),
+                properties);
+    }
+
+    private SuperAgentDispatchServiceImpl service(
+            SuperAgentDispatchRunRepository runRepository,
+            SourceMessageInboxRepository sourceMessageRepository,
+            SuperAgentOpenApiClient openApiClient,
+            ObjectStorageService objectStorageService,
+            ReservationBookingExcelAttachmentExtractionService bookingExcelExtractionService,
+            SuperAgentDispatchProperties properties) {
         return new SuperAgentDispatchServiceImpl(
                 properties,
                 new SuperAgentOpenApiProperties(),
                 runRepository,
                 sourceMessageRepository,
                 openApiClient,
+                objectStorageService,
+                bookingExcelExtractionService,
                 new ObjectMapper());
     }
 
+    private ReservationBookingExcelAttachmentExtractionService bookingExcelExtractionService(boolean enabled) {
+        BookingExcelExtractionProperties properties = new BookingExcelExtractionProperties();
+        properties.setEnabled(enabled);
+        properties.setLookbackMonths(6);
+        properties.setMaxSelectedMonths(3);
+        properties.setMaxFileSizeBytes(2 * 1024 * 1024);
+        return new ReservationBookingExcelAttachmentExtractionServiceImpl(properties);
+    }
+
     private SuperAgentDispatchProperties properties(boolean enabled, boolean workerEnabled) {
         SuperAgentDispatchProperties properties = new SuperAgentDispatchProperties();
         properties.setEnabled(enabled);
@@ -224,4 +455,51 @@ class SuperAgentDispatchServiceImplTest {
                 now,
                 now);
     }
+
+    private SuperAgentOpenApiResult successResult() {
+        return new SuperAgentOpenApiResult(
+                "session-dispatch-001",
+                "run-dispatch-001",
+                "profile-dispatch",
+                "version-dispatch",
+                "model-dispatch",
+                "{\"route_code\":\"S10\"}",
+                10,
+                5,
+                15,
+                List.of("trace", "end"),
+                List.of(),
+                "/api/open/agent-sessions/session-dispatch-001/runs/run-dispatch-001",
+                "4");
+    }
+
+    private byte[] bookingUpdateExcelBytes() throws Exception {
+        try (XSSFWorkbook workbook = new XSSFWorkbook();
+                ByteArrayOutputStream outputStream = new ByteArrayOutputStream()) {
+            Sheet sheet = workbook.createSheet("BOOKING 05-2026");
+            Row header = sheet.createRow(0);
+            List<String> headers = List.of("Group Code", "Hotel", "Check In", "Check Out", "Room Type", "Rooms", "Remark");
+            for (int index = 0; index < headers.size(); index++) {
+                header.createCell(index).setCellValue(headers.get(index));
+            }
+            Row row = sheet.createRow(1);
+            row.createCell(0).setCellValue("GRP-2605-001");
+            row.createCell(1).setCellValue("Wyndham Liantai");
+            row.createCell(2).setCellValue("2026-05-01");
+            row.createCell(3).setCellValue("2026-05-03");
+            row.createCell(4).setCellValue("UG1");
+            row.createCell(5).setCellValue("2");
+            row.createCell(6).setCellValue("Need update");
+            row.getCell(6).setCellStyle(yellowFill(workbook));
+            workbook.write(outputStream);
+            return outputStream.toByteArray();
+        }
+    }
+
+    private XSSFCellStyle yellowFill(XSSFWorkbook workbook) {
+        XSSFCellStyle style = workbook.createCellStyle();
+        style.setFillPattern(FillPatternType.SOLID_FOREGROUND);
+        style.setFillForegroundColor(IndexedColors.YELLOW.getIndex());
+        return style;
+    }
 }
diff --git a/server/src/test/java/cn/nianxx/thhotel/integrations/storage/aliyunoss/service/impl/AliyunOssObjectStorageServiceImplTest.java b/server/src/test/java/cn/nianxx/thhotel/integrations/storage/aliyunoss/service/impl/AliyunOssObjectStorageServiceImplTest.java
new file mode 100644
index 0000000..7d724a1
--- /dev/null
+++ b/server/src/test/java/cn/nianxx/thhotel/integrations/storage/aliyunoss/service/impl/AliyunOssObjectStorageServiceImplTest.java
@@ -0,0 +1,196 @@
+package cn.nianxx.thhotel.integrations.storage.aliyunoss.service.impl;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
+
+import cn.nianxx.thhotel.integrations.storage.aliyunoss.common.request.ObjectStorageReadRequest;
+import cn.nianxx.thhotel.integrations.storage.aliyunoss.common.result.ObjectStorageReadResult;
+import java.io.ByteArrayInputStream;
+import java.io.IOException;
+import java.net.Authenticator;
+import java.net.CookieHandler;
+import java.net.ProxySelector;
+import java.net.http.HttpClient;
+import java.net.http.HttpHeaders;
+import java.net.http.HttpRequest;
+import java.net.http.HttpResponse;
+import java.nio.charset.StandardCharsets;
+import java.security.NoSuchAlgorithmException;
+import java.time.Duration;
+import java.util.List;
+import java.util.Map;
+import java.util.Optional;
+import java.util.concurrent.CompletableFuture;
+import java.util.concurrent.Executor;
+import javax.net.ssl.SSLContext;
+import javax.net.ssl.SSLParameters;
+import javax.net.ssl.SSLSession;
+import org.junit.jupiter.api.Test;
+
+class AliyunOssObjectStorageServiceImplTest {
+
+    @Test
+    void shouldReadObjectContentFromSavedUrl() {
+        TrackingInputStream responseBody = new TrackingInputStream("excel-bytes".getBytes(StandardCharsets.UTF_8));
+        AliyunOssObjectStorageServiceImpl service = new AliyunOssObjectStorageServiceImpl(
+                new AliyunOssProperties(),
+                new FakeHttpClient(200, responseBody));
+
+        ObjectStorageReadResult result = service.readObject(new ObjectStorageReadRequest(
+                "https://oss.example.test/private/booking.xlsx?token=download-secret",
+                1024L));
+
+        assertThat(result.content()).isEqualTo("excel-bytes".getBytes(StandardCharsets.UTF_8));
+        assertThat(result.contentType()).isEqualTo("application/vnd.ms-excel");
+        assertThat(result.sizeBytes()).isEqualTo(11L);
+        assertThat(responseBody.closed()).isTrue();
+    }
+
+    @Test
+    void shouldRejectObjectWhenContentExceedsLimit() {
+        TrackingInputStream responseBody = new TrackingInputStream("too-large".getBytes(StandardCharsets.UTF_8));
+        AliyunOssObjectStorageServiceImpl service = new AliyunOssObjectStorageServiceImpl(
+                new AliyunOssProperties(),
+                new FakeHttpClient(200, responseBody));
+
+        assertThatThrownBy(() -> service.readObject(new ObjectStorageReadRequest(
+                "https://oss.example.test/private/too-large.xlsx?token=download-secret",
+                4L)))
+                .isInstanceOf(ObjectStorageException.class)
+                .hasMessageContaining("对象存储读取内容超过大小限制")
+                .hasMessageNotContaining("download-secret");
+        assertThat(responseBody.closed()).isTrue();
+    }
+
+    private static final class TrackingInputStream extends ByteArrayInputStream {
+        private boolean closed;
+
+        private TrackingInputStream(byte[] buffer) {
+            super(buffer);
+        }
+
+        @Override
+        public void close() throws IOException {
+            closed = true;
+            super.close();
+        }
+
+        private boolean closed() {
+            return closed;
+        }
+    }
+
+    private static final class FakeHttpClient extends HttpClient {
+        private final int statusCode;
+        private final TrackingInputStream responseBody;
+
+        private FakeHttpClient(int statusCode, TrackingInputStream responseBody) {
+            this.statusCode = statusCode;
+            this.responseBody = responseBody;
+        }
+
+        @Override
+        public Optional<CookieHandler> cookieHandler() {
+            return Optional.empty();
+        }
+
+        @Override
+        public Optional<Duration> connectTimeout() {
+            return Optional.empty();
+        }
+
+        @Override
+        public Redirect followRedirects() {
+            return Redirect.NEVER;
+        }
+
+        @Override
+        public Optional<ProxySelector> proxy() {
+            return Optional.empty();
+        }
+
+        @Override
+        public SSLContext sslContext() {
+            try {
+                return SSLContext.getDefault();
+            } catch (NoSuchAlgorithmException exception) {
+                throw new IllegalStateException(exception);
+            }
+        }
+
+        @Override
+        public SSLParameters sslParameters() {
+            return new SSLParameters();
+        }
+
+        @Override
+        public Optional<Authenticator> authenticator() {
+            return Optional.empty();
+        }
+
+        @Override
+        public Version version() {
+            return Version.HTTP_1_1;
+        }
+
+        @Override
+        public Optional<Executor> executor() {
+            return Optional.empty();
+        }
+
+        @Override
+        @SuppressWarnings("unchecked")
+        public <T> HttpResponse<T> send(HttpRequest request, HttpResponse.BodyHandler<T> responseBodyHandler) {
+            return new SimpleHttpResponse<>(request, statusCode, (T) responseBody);
+        }
+
+        @Override
+        public <T> CompletableFuture<HttpResponse<T>> sendAsync(
+                HttpRequest request,
+                HttpResponse.BodyHandler<T> responseBodyHandler) {
+            return CompletableFuture.failedFuture(new UnsupportedOperationException());
+        }
+
+        @Override
+        public <T> CompletableFuture<HttpResponse<T>> sendAsync(
+                HttpRequest request,
+                HttpResponse.BodyHandler<T> responseBodyHandler,
+                HttpResponse.PushPromiseHandler<T> pushPromiseHandler) {
+            return CompletableFuture.failedFuture(new UnsupportedOperationException());
+        }
+    }
+
+    private record SimpleHttpResponse<T>(
+            HttpRequest request,
+            int statusCode,
+            T body
+    ) implements HttpResponse<T> {
+
+        @Override
+        public Optional<HttpResponse<T>> previousResponse() {
+            return Optional.empty();
+        }
+
+        @Override
+        public HttpHeaders headers() {
+            return HttpHeaders.of(
+                    Map.of("Content-Type", List.of("application/vnd.ms-excel")),
+                    (name, value) -> true);
+        }
+
+        @Override
+        public Optional<SSLSession> sslSession() {
+            return Optional.empty();
+        }
+
+        @Override
+        public java.net.URI uri() {
+            return request.uri();
+        }
+
+        @Override
+        public HttpClient.Version version() {
+            return HttpClient.Version.HTTP_1_1;
+        }
+    }
+}
diff --git a/server/src/test/java/cn/nianxx/thhotel/platform/debug/control/DebugEmlSuperAgentControllerTest.java b/server/src/test/java/cn/nianxx/thhotel/platform/debug/control/DebugEmlSuperAgentControllerTest.java
index dd03cb9..e1d7e68 100644
--- a/server/src/test/java/cn/nianxx/thhotel/platform/debug/control/DebugEmlSuperAgentControllerTest.java
+++ b/server/src/test/java/cn/nianxx/thhotel/platform/debug/control/DebugEmlSuperAgentControllerTest.java
@@ -26,13 +26,21 @@ import cn.nianxx.thhotel.integrations.storage.aliyunoss.common.request.ObjectSto
 import cn.nianxx.thhotel.integrations.storage.aliyunoss.common.result.ObjectStoragePutResult;
 import cn.nianxx.thhotel.integrations.storage.aliyunoss.service.ObjectStorageService;
 import cn.nianxx.thhotel.platform.debug.service.DebugEmlSuperAgentRunService;
+import cn.nianxx.thhotel.workflows.reservation.excelimport.service.impl.BookingExcelExtractionProperties;
 import java.io.ByteArrayOutputStream;
 import java.io.IOException;
 import java.io.OutputStream;
 import java.nio.charset.StandardCharsets;
+import java.util.Base64;
 import java.util.List;
 import java.util.function.Consumer;
 import java.util.concurrent.atomic.AtomicInteger;
+import org.apache.poi.ss.usermodel.FillPatternType;
+import org.apache.poi.ss.usermodel.IndexedColors;
+import org.apache.poi.ss.usermodel.Row;
+import org.apache.poi.ss.usermodel.Sheet;
+import org.apache.poi.xssf.usermodel.XSSFCellStyle;
+import org.apache.poi.xssf.usermodel.XSSFWorkbook;
 import org.junit.jupiter.api.Test;
 import org.junit.jupiter.api.extension.ExtendWith;
 import org.mockito.ArgumentCaptor;
@@ -57,7 +65,9 @@ import org.springframework.web.client.RestClientResponseException;
                 "debug.eml-upload.access-key=test-debug-upload-key",
                 "debug.eml-upload.max-file-bytes=1048576",
                 "debug.eml-upload.sse-heartbeat-interval=25ms",
+                "debug.eml-upload.include-booking-excel-extractions=true",
                 "aliyun.oss.debug-eml-prefix=debug/eml/",
+                "reservation.booking-excel-extraction.enabled=true",
                 "superagent.open-api.enabled=true",
                 "superagent.open-api.external-subject-id=test-debug-eml"
         })
@@ -77,6 +87,9 @@ class DebugEmlSuperAgentControllerTest {
     @Autowired
     private DebugEmlSuperAgentRunService runService;
 
+    @Autowired
+    private BookingExcelExtractionProperties bookingExcelExtractionProperties;
+
     @MockBean
     private ObjectStorageService objectStorageService;
 
@@ -259,6 +272,106 @@ class DebugEmlSuperAgentControllerTest {
                 .andExpect(content().string(not(containsString("test-debug-upload-key"))));
     }
 
+    @Test
+    void shouldAttachBookingExcelExtractionsToDebugPayloadAndSuperAgentMessage() throws Exception {
+        when(objectStorageService.putObject(any())).thenAnswer(invocation -> {
+            ObjectStoragePutRequest request = invocation.getArgument(0);
+            return new ObjectStoragePutResult(
+                    request.objectKey(),
+                    "https://oss.example.test/" + request.objectKey(),
+                    request.contentType(),
+                    request.sizeBytes());
+        });
+        when(superAgentOpenApiClient.invokeMailDebug(any())).thenReturn(new SuperAgentOpenApiResult(
+                "session-debug-excel",
+                "run-debug-excel",
+                "profile-debug",
+                "profile-version-debug",
+                "debug-model",
+                "{\"route_code\":\"S10\"}",
+                11,
+                7,
+                18,
+                List.of("metadata", "values", "end")));
+
+        mockMvc.perform(multipart(ENDPOINT)
+                        .file(emlFileWithBookingExcelAttachment())
+                        .param("hotel_id", "HOTEL-TEST")
+                        .param("run_label", "controller-excel-extraction")
+                        .header("X-TH-Hotel-Debug-Upload-Key", "test-debug-upload-key"))
+                .andExpect(status().isCreated())
+                .andExpect(jsonPath("$.attachment_extractions[0].file_type").value("BOOKING_UPDATE"))
+                .andExpect(jsonPath("$.attachment_extractions[0].month_filter.base_month").value("2026-07"))
+                .andExpect(jsonPath("$.attachment_extractions[0].month_filter.selected_months[0]").value("2026-05"))
+                .andExpect(jsonPath("$.attachment_extractions[0].sheets[0].highlighted_rows[0].row.group_code")
+                        .value("GRP-2605-001"))
+                .andExpect(jsonPath("$.agentbus_like_payload.attachment_extractions[0].file_type")
+                        .value("BOOKING_UPDATE"))
+                .andExpect(jsonPath("$.agentbus_like_payload.attachment_extractions[0].sheets[0]"
+                        + ".highlighted_rows[0].highlight_cells[0].header").value("Remark"));
+
+        ArgumentCaptor<SuperAgentMailDebugRequest> superAgentRequestCaptor =
+                ArgumentCaptor.forClass(SuperAgentMailDebugRequest.class);
+        verify(superAgentOpenApiClient).invokeMailDebug(superAgentRequestCaptor.capture());
+        org.assertj.core.api.Assertions.assertThat(superAgentRequestCaptor.getValue().message())
+                .contains("\"attachment_extractions\"")
+                .contains("\"file_type\":\"BOOKING_UPDATE\"")
+                .contains("\"group_code\":\"GRP-2605-001\"")
+                .doesNotContain("test-debug-upload-key");
+    }
+
+    @Test
+    void shouldQueryBookingExcelExtractionsFromPersistedDebugPayload() throws Exception {
+        mockStorageAndSuperAgentSuccess();
+
+        mockMvc.perform(multipart(ENDPOINT)
+                        .file(emlFileWithBookingExcelAttachment())
+                        .param("hotel_id", "HOTEL-TEST")
+                        .param("run_label", "query-excel-extraction")
+                        .header("X-TH-Hotel-Debug-Upload-Key", "test-debug-upload-key"))
+                .andExpect(status().isCreated());
+
+        Long runId = jdbcTemplate.queryForObject("""
+                SELECT id
+                FROM platform_debug_eml_superagent_run
+                WHERE run_label = 'query-excel-extraction'
+                """, Long.class);
+
+        mockMvc.perform(get(ENDPOINT + "/" + runId)
+                        .header("X-TH-Hotel-Debug-Upload-Key", "test-debug-upload-key"))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.attachment_extractions[0].file_type").value("BOOKING_UPDATE"))
+                .andExpect(jsonPath("$.attachment_extractions[0].month_filter.selected_months[0]").value("2026-05"))
+                .andExpect(jsonPath("$.attachment_extractions[0].sheets[0].highlighted_rows[0].row.group_code")
+                        .value("GRP-2605-001"));
+    }
+
+    @Test
+    void shouldNotAttachBookingExcelExtractionsWhenGlobalExtractionDisabled() throws Exception {
+        bookingExcelExtractionProperties.setEnabled(false);
+        try {
+            mockStorageAndSuperAgentSuccess();
+
+            mockMvc.perform(multipart(ENDPOINT)
+                            .file(emlFileWithBookingExcelAttachment())
+                            .param("hotel_id", "HOTEL-TEST")
+                            .param("run_label", "controller-excel-extraction-disabled")
+                            .header("X-TH-Hotel-Debug-Upload-Key", "test-debug-upload-key"))
+                    .andExpect(status().isCreated())
+                    .andExpect(jsonPath("$.attachment_extractions").doesNotExist())
+                    .andExpect(jsonPath("$.agentbus_like_payload.attachment_extractions").doesNotExist());
+
+            ArgumentCaptor<SuperAgentMailDebugRequest> superAgentRequestCaptor =
+                    ArgumentCaptor.forClass(SuperAgentMailDebugRequest.class);
+            verify(superAgentOpenApiClient).invokeMailDebug(superAgentRequestCaptor.capture());
+            org.assertj.core.api.Assertions.assertThat(superAgentRequestCaptor.getValue().message())
+                    .doesNotContain("\"attachment_extractions\"")
+                    .doesNotContain("BOOKING_EXCEL_EXTRACTION_DISABLED");
+        } finally {
+            bookingExcelExtractionProperties.setEnabled(true);
+        }
+    }
+
     @Test
     void shouldStreamDebugStagesSuperAgentTraceAndFinalResult() throws Exception {
         when(objectStorageService.putObject(any())).thenAnswer(invocation -> {
@@ -716,6 +829,14 @@ class DebugEmlSuperAgentControllerTest {
                 unsafeHtmlEmlBytes());
     }
 
+    private MockMultipartFile emlFileWithBookingExcelAttachment() throws Exception {
+        return new MockMultipartFile(
+                "file",
+                "debug-booking-with-excel.eml",
+                MediaType.TEXT_PLAIN_VALUE,
+                emlBytesWithBookingExcelAttachment());
+    }
+
     private static final class FailingOutputStream extends OutputStream {
 
         @Override
@@ -802,4 +923,61 @@ class DebugEmlSuperAgentControllerTest {
                 --rel-boundary--
                 """.replace("\n", "\r\n").getBytes(StandardCharsets.UTF_8);
     }
+
+    private byte[] emlBytesWithBookingExcelAttachment() throws Exception {
+        String attachmentBase64 = Base64.getMimeEncoder(76, "\r\n".getBytes(StandardCharsets.UTF_8))
+                .encodeToString(bookingUpdateExcelBytes());
+        return ("""
+                From: Guest <guest@example.test>
+                To: Reservations <reservations@example.test>
+                Subject: Debug Booking With Excel
+                Date: Thu, 09 Jul 2026 01:30:00 +0000
+                Message-ID: <debug-controller-excel-message-001@example.test>
+                MIME-Version: 1.0
+                Content-Type: multipart/mixed; boundary="mixed-boundary"
+
+                --mixed-boundary
+                Content-Type: text/plain; charset=UTF-8
+
+                Please check highlighted booking update rows.
+
+                --mixed-boundary
+                Content-Type: application/vnd.openxmlformats-officedocument.spreadsheetml.sheet; name="WYNDHAM LIANTAI 2026 UPDATE BOOKING.xlsx"
+                Content-Transfer-Encoding: base64
+                Content-Disposition: attachment; filename="WYNDHAM LIANTAI 2026 UPDATE BOOKING.xlsx"
+
+                %s
+                --mixed-boundary--
+                """.formatted(attachmentBase64)).replace("\n", "\r\n").getBytes(StandardCharsets.UTF_8);
+    }
+
+    private byte[] bookingUpdateExcelBytes() throws Exception {
+        try (XSSFWorkbook workbook = new XSSFWorkbook();
+                ByteArrayOutputStream outputStream = new ByteArrayOutputStream()) {
+            Sheet sheet = workbook.createSheet("BOOKING 05-2026");
+            Row header = sheet.createRow(0);
+            List<String> headers = List.of("Group Code", "Hotel", "Check In", "Check Out", "Room Type", "Rooms", "Remark");
+            for (int index = 0; index < headers.size(); index++) {
+                header.createCell(index).setCellValue(headers.get(index));
+            }
+            Row row = sheet.createRow(1);
+            row.createCell(0).setCellValue("GRP-2605-001");
+            row.createCell(1).setCellValue("Wyndham Liantai");
+            row.createCell(2).setCellValue("2026-05-01");
+            row.createCell(3).setCellValue("2026-05-03");
+            row.createCell(4).setCellValue("UG1");
+            row.createCell(5).setCellValue("2");
+            row.createCell(6).setCellValue("Need update");
+            row.getCell(6).setCellStyle(yellowFill(workbook));
+            workbook.write(outputStream);
+            return outputStream.toByteArray();
+        }
+    }
+
+    private XSSFCellStyle yellowFill(XSSFWorkbook workbook) {
+        XSSFCellStyle style = workbook.createCellStyle();
+        style.setFillPattern(FillPatternType.SOLID_FOREGROUND);
+        style.setFillForegroundColor(IndexedColors.YELLOW.getIndex());
+        return style;
+    }
 }
diff --git a/server/src/test/java/cn/nianxx/thhotel/workflows/reservation/excelimport/service/impl/ReservationBookingExcelAttachmentExtractionServiceImplTest.java b/server/src/test/java/cn/nianxx/thhotel/workflows/reservation/excelimport/service/impl/ReservationBookingExcelAttachmentExtractionServiceImplTest.java
new file mode 100644
index 0000000..973e2dc
--- /dev/null
+++ b/server/src/test/java/cn/nianxx/thhotel/workflows/reservation/excelimport/service/impl/ReservationBookingExcelAttachmentExtractionServiceImplTest.java
@@ -0,0 +1,223 @@
+package cn.nianxx.thhotel.workflows.reservation.excelimport.service.impl;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import cn.nianxx.thhotel.workflows.reservation.excelimport.common.enums.BookingExcelFileType;
+import cn.nianxx.thhotel.workflows.reservation.excelimport.common.request.BookingExcelAttachmentExtractionRequest;
+import cn.nianxx.thhotel.workflows.reservation.excelimport.common.result.BookingExcelAttachmentExtractionResult;
+import cn.nianxx.thhotel.workflows.reservation.excelimport.common.result.BookingExcelHighlightedRowResult;
+import cn.nianxx.thhotel.workflows.reservation.excelimport.service.ReservationBookingExcelAttachmentExtractionService;
+import java.io.ByteArrayOutputStream;
+import java.time.Instant;
+import java.time.ZoneId;
+import java.util.List;
+import org.apache.poi.ss.usermodel.FillPatternType;
+import org.apache.poi.ss.usermodel.IndexedColors;
+import org.apache.poi.ss.usermodel.Row;
+import org.apache.poi.ss.usermodel.Sheet;
+import org.apache.poi.xssf.usermodel.XSSFCellStyle;
+import org.apache.poi.xssf.usermodel.XSSFWorkbook;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.springframework.util.unit.DataSize;
+
+class ReservationBookingExcelAttachmentExtractionServiceImplTest {
+
+    private ReservationBookingExcelAttachmentExtractionService service;
+
+    @BeforeEach
+    void setUp() {
+        BookingExcelExtractionProperties properties = new BookingExcelExtractionProperties();
+        properties.setEnabled(true);
+        properties.setLookbackMonths(6);
+        properties.setMaxSelectedMonths(3);
+        properties.setMaxFileSizeBytes(2 * 1024 * 1024);
+        properties.setMaxSheets(24);
+        properties.setMaxRowsPerSheet(2000);
+        service = new ReservationBookingExcelAttachmentExtractionServiceImpl(properties);
+    }
+
+    @Test
+    void shouldExcludePassengerRosterWorkbookByHeaderCombination() throws Exception {
+        BookingExcelAttachmentExtractionResult result = service.extract(request(
+                "LLTNamLis.xlsx",
+                passengerRosterWorkbook(),
+                Instant.parse("2026-07-19T03:00:00Z")));
+
+        assertThat(result.fileType()).isEqualTo(BookingExcelFileType.PASSENGER_ROSTER);
+        assertThat(result.excluded()).isTrue();
+        assertThat(result.skippedReason()).isEqualTo("PASSENGER_ROSTER");
+        assertThat(result.sheets()).isEmpty();
+        assertThat(result.warnings()).contains("PASSENGER_ROSTER_EXCLUDED");
+    }
+
+    @Test
+    void shouldSelectLatestThreeAvailableMonthsWithinSixMonthLookback() throws Exception {
+        BookingExcelAttachmentExtractionResult result = service.extract(request(
+                "WYNDHAM LIANTAI 2026 UPDATE BOOKING.xlsx",
+                bookingUpdateWorkbookWithMonths("BOOKING 03-2026", "BOOKING 04-2026", "BOOKING 05-2026", "BOOKING 06-2026"),
+                Instant.parse("2026-07-19T03:00:00Z")));
+
+        assertThat(result.fileType()).isEqualTo(BookingExcelFileType.BOOKING_UPDATE);
+        assertThat(result.excluded()).isFalse();
+        assertThat(result.monthFilter().baseMonth()).isEqualTo("2026-07");
+        assertThat(result.monthFilter().candidateFromMonth()).isEqualTo("2026-02");
+        assertThat(result.monthFilter().candidateToMonth()).isEqualTo("2026-07");
+        assertThat(result.monthFilter().availableMonths())
+                .containsExactly("2026-03", "2026-04", "2026-05", "2026-06");
+        assertThat(result.monthFilter().selectedMonths()).containsExactly("2026-04", "2026-05", "2026-06");
+        assertThat(result.monthFilter().matchedSheets())
+                .containsExactly("BOOKING 04-2026", "BOOKING 05-2026", "BOOKING 06-2026");
+        assertThat(result.monthFilter().skippedSheets()).contains("BOOKING 03-2026");
+        assertThat(result.sheets()).extracting(sheet -> sheet.sheetName())
+                .containsExactly("BOOKING 04-2026", "BOOKING 05-2026", "BOOKING 06-2026");
+    }
+
+    @Test
+    void shouldExtractRowsWhenAnyBusinessColumnHasBackgroundFill() throws Exception {
+        BookingExcelAttachmentExtractionResult result = service.extract(request(
+                "春节-附加费用xlsx.xlsx",
+                surchargeWorkbookWithHighlightedRows(),
+                Instant.parse("2026-07-19T03:00:00Z")));
+
+        assertThat(result.fileType()).isEqualTo(BookingExcelFileType.BOOKING_SURCHARGE);
+        assertThat(result.sheets()).hasSize(1);
+        assertThat(result.sheets().get(0).highlightedRows()).hasSize(1);
+        BookingExcelHighlightedRowResult highlightedRow = result.sheets().get(0).highlightedRows().get(0);
+        assertThat(highlightedRow.rowNumber()).isEqualTo(2);
+        assertThat(highlightedRow.row()).containsEntry("group_code", "GRP-2605-001");
+        assertThat(highlightedRow.row()).containsEntry("hotel", "Wyndham Liantai");
+        assertThat(highlightedRow.row()).containsEntry("remark", "春节附加费待确认");
+        assertThat(highlightedRow.highlightColors()).contains("FFFFFF00");
+        assertThat(highlightedRow.highlightCells()).hasSize(1);
+        assertThat(highlightedRow.highlightCells().get(0).header()).isEqualTo("Remark");
+        assertThat(highlightedRow.rawRow()).containsEntry("A", "GRP-2605-001");
+    }
+
+    @Test
+    void shouldWarnWhenAvailableMonthsLessThanLimit() throws Exception {
+        BookingExcelAttachmentExtractionResult result = service.extract(request(
+                "WYNDHAM LIANTAI 2026 UPDATE BOOKING.xlsx",
+                bookingUpdateWorkbookWithMonths("BOOKING 03-2026", "BOOKING 04-2026"),
+                Instant.parse("2026-07-19T03:00:00Z")));
+
+        assertThat(result.monthFilter().selectedMonths()).containsExactly("2026-03", "2026-04");
+        assertThat(result.warnings()).contains("MATCHED_MONTHS_LESS_THAN_LIMIT");
+    }
+
+    @Test
+    void shouldHonorConfiguredMaxFileSizeDataSize() throws Exception {
+        BookingExcelExtractionProperties properties = new BookingExcelExtractionProperties();
+        properties.setEnabled(true);
+        properties.setMaxFileSize(DataSize.ofBytes(1));
+        ReservationBookingExcelAttachmentExtractionService localService =
+                new ReservationBookingExcelAttachmentExtractionServiceImpl(properties);
+        BookingExcelAttachmentExtractionResult result = localService.extract(request(
+                "WYNDHAM LIANTAI 2026 UPDATE BOOKING.xlsx",
+                bookingUpdateWorkbookWithMonths("BOOKING 05-2026"),
+                Instant.parse("2026-07-19T03:00:00Z")));
+
+        assertThat(result.excluded()).isTrue();
+        assertThat(result.skippedReason()).isEqualTo("EXCEL_ATTACHMENT_TOO_LARGE");
+        assertThat(result.warnings()).contains("EXCEL_ATTACHMENT_TOO_LARGE");
+    }
+
+    private BookingExcelAttachmentExtractionRequest request(
+            String fileName,
+            byte[] content,
+            Instant baseInstant) {
+        return new BookingExcelAttachmentExtractionRequest(
+                fileName,
+                "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+                (long) content.length,
+                content,
+                baseInstant,
+                ZoneId.of("Asia/Bangkok"),
+                null,
+                null);
+    }
+
+    private byte[] passengerRosterWorkbook() throws Exception {
+        try (XSSFWorkbook workbook = new XSSFWorkbook();
+                ByteArrayOutputStream outputStream = new ByteArrayOutputStream()) {
+            Sheet sheet = workbook.createSheet("Sheet1");
+            Row header = sheet.createRow(0);
+            List<String> headers = List.of(
+                    "旅游批次", "旅游日期", "团号", "姓名", "护照全名", "证件号", "性别", "生日");
+            for (int index = 0; index < headers.size(); index++) {
+                header.createCell(index).setCellValue(headers.get(index));
+            }
+            workbook.write(outputStream);
+            return outputStream.toByteArray();
+        }
+    }
+
+    private byte[] bookingUpdateWorkbookWithMonths(String... sheetNames) throws Exception {
+        try (XSSFWorkbook workbook = new XSSFWorkbook();
+                ByteArrayOutputStream outputStream = new ByteArrayOutputStream()) {
+            XSSFCellStyle highlightStyle = yellowFill(workbook);
+            for (String sheetName : sheetNames) {
+                Sheet sheet = workbook.createSheet(sheetName);
+                createBookingHeader(sheet);
+                Row dataRow = sheet.createRow(1);
+                dataRow.createCell(0).setCellValue("GRP-" + sheetName.substring(sheetName.length() - 7));
+                dataRow.createCell(1).setCellValue("Wyndham Liantai");
+                dataRow.createCell(2).setCellValue("2026-05-01");
+                dataRow.createCell(3).setCellValue("2026-05-03");
+                dataRow.createCell(4).setCellValue("UG1");
+                dataRow.createCell(5).setCellValue("2");
+                dataRow.createCell(6).setCellValue("Need update");
+                dataRow.getCell(6).setCellStyle(highlightStyle);
+            }
+            workbook.write(outputStream);
+            return outputStream.toByteArray();
+        }
+    }
+
+    private byte[] surchargeWorkbookWithHighlightedRows() throws Exception {
+        try (XSSFWorkbook workbook = new XSSFWorkbook();
+                ByteArrayOutputStream outputStream = new ByteArrayOutputStream()) {
+            Sheet sheet = workbook.createSheet("BOOKING 05-2026");
+            createBookingHeader(sheet);
+            XSSFCellStyle headerStyle = yellowFill(workbook);
+            sheet.getRow(0).forEach(cell -> cell.setCellStyle(headerStyle));
+
+            Row highlighted = sheet.createRow(1);
+            highlighted.createCell(0).setCellValue("GRP-2605-001");
+            highlighted.createCell(1).setCellValue("Wyndham Liantai");
+            highlighted.createCell(2).setCellValue("2026-05-01");
+            highlighted.createCell(3).setCellValue("2026-05-03");
+            highlighted.createCell(4).setCellValue("UG1");
+            highlighted.createCell(5).setCellValue("2");
+            highlighted.createCell(6).setCellValue("春节附加费待确认");
+            highlighted.getCell(6).setCellStyle(yellowFill(workbook));
+
+            Row normal = sheet.createRow(2);
+            normal.createCell(0).setCellValue("GRP-2605-002");
+            normal.createCell(1).setCellValue("Wyndham Liantai");
+            normal.createCell(2).setCellValue("2026-05-05");
+            normal.createCell(3).setCellValue("2026-05-07");
+            normal.createCell(4).setCellValue("RM1");
+            normal.createCell(5).setCellValue("1");
+            normal.createCell(6).setCellValue("无需处理");
+
+            workbook.write(outputStream);
+            return outputStream.toByteArray();
+        }
+    }
+
+    private void createBookingHeader(Sheet sheet) {
+        Row header = sheet.createRow(0);
+        List<String> headers = List.of("Group Code", "Hotel", "Check In", "Check Out", "Room Type", "Rooms", "Remark");
+        for (int index = 0; index < headers.size(); index++) {
+            header.createCell(index).setCellValue(headers.get(index));
+        }
+    }
+
+    private XSSFCellStyle yellowFill(XSSFWorkbook workbook) {
+        XSSFCellStyle style = workbook.createCellStyle();
+        style.setFillPattern(FillPatternType.SOLID_FOREGROUND);
+        style.setFillForegroundColor(IndexedColors.YELLOW.getIndex());
+        return style;
+    }
+}