@josephyan/qingflow-cli 1.0.10 → 1.0.11

package/src/qingflow_mcp/tools/record_tools.py

@@ -2,18 +2,22 @@ from __future__ import annotations
 
 import csv
 import html
+import mimetypes
 import json
 import os
 import re
 import time
+import zipfile
 from copy import deepcopy
 from dataclasses import dataclass
 from datetime import UTC, datetime, timedelta
 from decimal import Decimal, InvalidOperation
+from io import BytesIO
 from pathlib import Path
 from typing import Any, cast
 from urllib.parse import parse_qs, unquote, urlsplit
 from uuid import uuid4
+from xml.etree import ElementTree
 
 from mcp.server.fastmcp import FastMCP
 
@@ -34,6 +38,7 @@ from .directory_tools import _directory_has_more, _directory_items
 
 DEFAULT_QUERY_PAGE_SIZE = 50
 DEFAULT_LIST_PAGE_SIZE = 200
+DEFAULT_RECORD_LIST_RETURN_LIMIT = 10
 BACKEND_RECORD_ACCESS_PAGE_SIZE = 1000
 DEFAULT_RECORD_ACCESS_SHARD_ROWS = 20_000
 RECORD_ACCESS_UNBOUNDED_ROW_THRESHOLD = 50_000
@@ -43,6 +48,14 @@ RECORD_GET_DETAIL_LOG_PAGE_SIZE = 10
 RECORD_GET_MEDIA_MAX_IMAGES = 30
 RECORD_GET_MEDIA_MAX_IMAGE_BYTES = 20 * 1024 * 1024
 RECORD_GET_MEDIA_MAX_TOTAL_BYTES = 100 * 1024 * 1024
+RECORD_GET_FILE_MAX_FILES = 50
+RECORD_GET_FILE_MAX_BYTES = 50 * 1024 * 1024
+RECORD_GET_FILE_MAX_TOTAL_BYTES = 200 * 1024 * 1024
+RECORD_GET_FILE_TIME_BUDGET_SECONDS = 55.0
+RECORD_GET_FILE_MIN_REMAINING_SECONDS = 8.0
+RECORD_GET_FILE_EXTRACT_PREVIEW_CHARS = 20_000
+RECORD_GET_FILE_EXTRACT_XLSX_MAX_ROWS_PER_SHEET = 200
+RECORD_GET_FILE_EXTRACT_PDF_MAX_PAGES = 50
 DEFAULT_ANALYSIS_PAGE_SIZE = 1000
 DEFAULT_SCAN_MAX_PAGES = 10
 DEFAULT_ANALYSIS_SCAN_MAX_PAGES = 100
@@ -355,7 +368,7 @@ class RecordTools(ToolBase):
             description=(
                 "Browse Qingflow records with a schema-first list DSL. "
                 "Use record_browse_schema_get first, then pass field_id-only columns, where, and order_by clauses. "
-                "This route is for browse/export/sample inspection only, not analysis."
+                "This route returns up to 10 rows plus total counts for browse, sample inspection, and fuzzy record lookup; it is not for analysis."
             )
         )
         def record_list(
@@ -366,7 +379,6 @@ class RecordTools(ToolBase):
             query_fields: list[JSONObject | int] | None = None,
             where: list[JSONObject] | None = None,
             order_by: list[JSONObject] | None = None,
-            limit: int = 50,
             page: int = 1,
             view_id: str | None = None,
             output_profile: str = "normal",
@@ -379,7 +391,6 @@ class RecordTools(ToolBase):
                 query_fields=query_fields or [],
                 where=where or [],
                 order_by=order_by or [],
-                limit=limit,
                 page=page,
                 view_id=view_id,
                 list_type=None,
@@ -1618,8 +1629,8 @@ class RecordTools(ToolBase):
         query_fields: list[JSONObject | int] | None = None,
         where: list[JSONObject],
         order_by: list[JSONObject],
-        limit: int,
-        page: int,
+        limit: int = DEFAULT_RECORD_LIST_RETURN_LIMIT,
+        page: int = 1,
         view_id: str | None = None,
         list_type: int | None = None,
         view_key: str | None = None,
@@ -1664,127 +1675,133 @@ class RecordTools(ToolBase):
                     },
                 )
             )
-        resolved_columns = normalized_columns or self._derive_public_list_columns_for_public(
-            profile=profile,
-            app_key=app_key,
-            resolved_view=view_route,
-        )
-        resolved_query_fields = self._resolve_record_list_query_fields_for_public(
-            profile=profile,
-            app_key=app_key,
-            resolved_view=view_route,
-            selectors=normalized_query_field_selectors,
-        )
+        filters = self._normalize_record_list_where(where)
+        sorts = self._normalize_record_list_order_by(order_by)
 
-        raw = self.record_query(
-            profile=profile,
-            query_mode="list",
-            app_key=app_key,
-            apply_id=None,
-            page_num=page,
-            page_size=DEFAULT_LIST_PAGE_SIZE,
-            requested_pages=1,
-            scan_max_pages=1,
-            auto_expand_pages=False,
-            query_key=normalized_query,
-            search_que_ids=resolved_query_fields,
-            filters=self._normalize_record_list_where(where),
-            sorts=self._normalize_record_list_order_by(order_by),
-            max_rows=limit,
-            max_columns=len(resolved_columns),
-            select_columns=resolved_columns,
-            amount_column=None,
-            time_range={},
-            stat_policy={},
-            strict_full=False,
-            output_profile="verbose" if normalized_output_profile in {"verbose", "normalized"} else DEFAULT_OUTPUT_PROFILE,
-            list_type=view_route.list_type if view_route.list_type is not None else DEFAULT_RECORD_LIST_TYPE,
-            view_key=view_route.view_selection.view_key if view_route.view_selection is not None else None,
-            view_name=view_route.view_selection.view_name if view_route.view_selection is not None else None,
-        )
-        list_data = cast(JSONObject, cast(JSONObject, raw["data"])["list"])
-        pagination = cast(JSONObject, list_data["pagination"])
-        warnings: list[JSONObject] = []
-        warnings.extend(legacy_warnings)
-        warnings.extend(compatibility_warnings)
-        warnings.extend(_view_filter_trust_warnings(view_route))
-        warning = _normalize_optional_text(list_data.get("analysis_warning"))
-        if warning:
-            warnings.append({"code": "BROWSE_ONLY", "message": warning})
-        list_type_used = _coerce_count(pagination.get("list_type_used"))
-        if list_type_used is not None and list_type_used != DEFAULT_RECORD_LIST_TYPE:
-            warnings.append(
-                {
-                    "code": "LIST_TYPE_FALLBACK",
-                    "message": (
-                        f"record_list not accessible via listType={DEFAULT_RECORD_LIST_TYPE}; "
-                        f"fell back to listType={list_type_used} ({get_record_list_type_label(list_type_used)})."
-                    ),
-                }
+        def runner(session_profile, context):
+            browse_scope = self._build_browse_read_scope(
+                profile,
+                context,
+                app_key,
+                view_route,
+                force_refresh=False,
             )
-        rows = list_data.get("rows", [])
-        normalized_public_rows = _normalize_public_record_rows(rows if isinstance(rows, list) else [])
-        lookup_payload = _build_record_list_lookup_payload(
-            query=normalized_query,
-            items=normalized_public_rows,
-            pagination=pagination,
-            limit=limit,
-        )
-        response: JSONObject = {
-            "profile": profile,
-            "ws_id": raw.get("ws_id"),
-            "ok": bool(raw.get("ok", True)),
-            "request_route": raw.get("request_route"),
-            "warnings": warnings,
-            "verification": _view_filter_verification_payload(view_route),
-            "output_profile": normalized_output_profile,
-            "data": {
-                "app_key": app_key,
-                "items": normalized_public_rows,
-                "pagination": {
-                    "page": page,
-                    "limit": limit,
-                    "returned_items": pagination.get("returned_items"),
-                    "result_amount": pagination.get("result_amount"),
-                    "list_type_used": list_type_used,
-                },
-                "selection": {
-                    "columns": [_column_selector_payload(field_id) for field_id in resolved_columns],
-                    "query_fields": [_column_selector_payload(field_id) for field_id in resolved_query_fields],
-                    "view": _accessible_view_payload(view_route),
+            index = cast(FieldIndex, browse_scope["index"])
+            selected_fields = (
+                self._resolve_record_list_columns(normalized_columns, index, view_route=view_route)
+                if normalized_columns
+                else self._derive_record_list_fields_from_index(index)
+            )
+            resolved_columns = [field.que_id for field in selected_fields]
+            resolved_query_fields = self._resolve_record_list_query_fields(
+                normalized_query_field_selectors,
+                index,
+                view_route=view_route,
+            )
+            match_rules = self._resolve_record_list_match_rules(context, filters, index, view_route=view_route)
+            sort_rules = self._resolve_record_list_sort_rules(sorts, index, view_route=view_route)
+            raw = self._record_list_query_view_fields(
+                session_profile=session_profile,
+                context=context,
+                app_key=app_key,
+                view_route=view_route,
+                page_num=page,
+                page_size=DEFAULT_LIST_PAGE_SIZE,
+                query_key=normalized_query,
+                search_que_ids=resolved_query_fields or None,
+                match_rules=match_rules,
+                sort_rules=sort_rules,
+                max_rows=limit,
+                selected_fields=selected_fields,
+                output_profile="verbose" if normalized_output_profile in {"verbose", "normalized"} else DEFAULT_OUTPUT_PROFILE,
+            )
+            list_data = cast(JSONObject, cast(JSONObject, raw["data"])["list"])
+            pagination = cast(JSONObject, list_data["pagination"])
+            warnings: list[JSONObject] = []
+            warnings.extend(legacy_warnings)
+            warnings.extend(compatibility_warnings)
+            warnings.extend(_view_filter_trust_warnings(view_route))
+            warning = _normalize_optional_text(list_data.get("analysis_warning"))
+            if warning:
+                warnings.append({"code": "BROWSE_ONLY", "message": warning})
+            list_type_used = _coerce_count(pagination.get("list_type_used"))
+            if list_type_used is not None and list_type_used != DEFAULT_RECORD_LIST_TYPE:
+                warnings.append(
+                    {
+                        "code": "LIST_TYPE_FALLBACK",
+                        "message": (
+                            f"record_list not accessible via listType={DEFAULT_RECORD_LIST_TYPE}; "
+                            f"fell back to listType={list_type_used} ({get_record_list_type_label(list_type_used)})."
+                        ),
+                    }
+                )
+            rows = list_data.get("rows", [])
+            normalized_public_rows = _normalize_public_record_rows(rows if isinstance(rows, list) else [])
+            lookup_payload = _build_record_list_lookup_payload(
+                query=normalized_query,
+                items=normalized_public_rows,
+                pagination=pagination,
+            )
+            total_count = _coerce_count(pagination.get("result_amount"))
+            returned_count = _coerce_count(pagination.get("returned_items"))
+            if returned_count is None:
+                returned_count = len(normalized_public_rows)
+            truncated = bool(total_count is not None and total_count > returned_count)
+            response: JSONObject = {
+                "profile": profile,
+                "ws_id": raw.get("ws_id"),
+                "ok": bool(raw.get("ok", True)),
+                "request_route": raw.get("request_route"),
+                "warnings": warnings,
+                "verification": _view_filter_verification_payload(view_route),
+                "output_profile": normalized_output_profile,
+                "data": {
+                    "app_key": app_key,
+                    "items": normalized_public_rows,
+                    "pagination": {
+                        "returned_count": returned_count,
+                        "total_count": total_count,
+                        "truncated": truncated,
+                    },
+                    "selection": {
+                        "columns": [_column_selector_payload(field_id) for field_id in resolved_columns],
+                        "query_fields": [_column_selector_payload(field_id) for field_id in resolved_query_fields],
+                        "view": _accessible_view_payload(view_route),
+                    },
                 },
-            },
-        }
-        if lookup_payload is not None:
-            response["lookup"] = lookup_payload
-        if normalized_output_profile == "normalized":
-            normalized_rows = list_data.get("normalized_rows")
-            if isinstance(normalized_rows, list):
-                item_by_apply_id = {
-                    _coerce_count(item.get("apply_id")): item
-                    for item in cast(list[JSONObject], response["data"]["items"])
-                    if isinstance(item, dict) and _coerce_count(item.get("apply_id")) is not None
-                }
-                for entry in normalized_rows:
-                    if not isinstance(entry, dict):
-                        continue
-                    apply_id = _coerce_count(entry.get("apply_id"))
-                    if apply_id is None:
-                        continue
-                    target = item_by_apply_id.get(apply_id)
-                    if target is None:
-                        continue
-                    target["normalized_record"] = cast(JSONObject, entry.get("normalized_record") or {})
-                    target["normalized_ambiguous_fields"] = cast(JSONObject, entry.get("normalized_ambiguous_fields") or {})
-        if normalized_output_profile == "verbose":
-            response["data"]["debug"] = {
-                "completeness": raw.get("completeness"),
-                "evidence": raw.get("evidence"),
-                "resolved_mappings": raw.get("resolved_mappings"),
-                "row_cap_hit": list_data.get("row_cap_hit"),
-                "sample_only": list_data.get("sample_only"),
             }
-        return response
+            if lookup_payload is not None:
+                response["lookup"] = lookup_payload
+            if normalized_output_profile == "normalized":
+                normalized_rows = list_data.get("normalized_rows")
+                if isinstance(normalized_rows, list):
+                    item_by_apply_id = {
+                        _coerce_count(item.get("apply_id")): item
+                        for item in cast(list[JSONObject], response["data"]["items"])
+                        if isinstance(item, dict) and _coerce_count(item.get("apply_id")) is not None
+                    }
+                    for entry in normalized_rows:
+                        if not isinstance(entry, dict):
+                            continue
+                        apply_id = _coerce_count(entry.get("apply_id"))
+                        if apply_id is None:
+                            continue
+                        target = item_by_apply_id.get(apply_id)
+                        if target is None:
+                            continue
+                        target["normalized_record"] = cast(JSONObject, entry.get("normalized_record") or {})
+                        target["normalized_ambiguous_fields"] = cast(JSONObject, entry.get("normalized_ambiguous_fields") or {})
+            if normalized_output_profile == "verbose":
+                response["data"]["debug"] = {
+                    "completeness": raw.get("completeness"),
+                    "evidence": raw.get("evidence"),
+                    "resolved_mappings": raw.get("resolved_mappings"),
+                    "row_cap_hit": list_data.get("row_cap_hit"),
+                    "sample_only": list_data.get("sample_only"),
+                }
+            return response
+
+        return self._run_record_tool(profile, runner)
 
     @tool_cn_name("记录访问")
     def record_access(
@@ -2304,12 +2321,23 @@ class RecordTools(ToolBase):
             fields=fields,
             references=references,
         )
+        file_assets = self._record_get_file_assets(
+            context,
+            app_key=app_key,
+            record_id=record_id_int,
+            resolved_view=resolved_view,
+            audit_node_id=cast(int | None, audit_context.get("audit_node_id")),
+            fields=fields,
+            references=references,
+            media_assets=media_assets,
+        )
         context_integrity = _record_detail_context_integrity(
             references=references,
             data_logs=data_logs,
             workflow_logs=workflow_logs,
             associated_resources=associated_resources,
             media_assets=media_assets,
+            file_assets=file_assets,
             unavailable_context=unavailable_context,
         )
         payload: JSONObject = {
@@ -2332,6 +2360,7 @@ class RecordTools(ToolBase):
             "requested_focus_fields": [_column_selector_payload(field_id) for field_id in requested_focus_field_ids],
             "references": references,
             "media_assets": media_assets,
+            "file_assets": file_assets,
             "data_logs": data_logs,
             "workflow_logs": workflow_logs,
             "associated_resources": associated_resources,
@@ -2867,6 +2896,53 @@ class RecordTools(ToolBase):
                 ],
             }
 
+    def _record_get_file_assets(
+        self,
+        context,  # type: ignore[no-untyped-def]
+        *,
+        app_key: str,
+        record_id: int,
+        resolved_view: AccessibleViewRoute,
+        audit_node_id: int | None,
+        fields: list[JSONObject],
+        references: list[JSONObject],
+        media_assets: JSONObject,
+    ) -> JSONObject:
+        """Collect and localize file assets from the frontend detail context."""
+        try:
+            def refresh_source_url(candidate: JSONObject) -> str | None:
+                return self._record_get_refreshed_media_source_url(
+                    context,
+                    app_key=app_key,
+                    record_id=record_id,
+                    resolved_view=resolved_view,
+                    audit_node_id=audit_node_id,
+                    candidate=candidate,
+                )
+
+            return _record_detail_file_assets_payload(
+                backend=self.backend,
+                context=context,
+                app_key=app_key,
+                record_id=record_id,
+                fields=fields,
+                references=references,
+                media_assets=media_assets,
+                refresh_source_url=refresh_source_url,
+            )
+        except Exception as exc:  # defensive: file assets should never break the core record detail.
+            return {
+                "status": "unavailable",
+                "local_dir": None,
+                "items": [],
+                "warnings": [
+                    {
+                        "code": "FILE_ASSETS_UNAVAILABLE",
+                        "message": f"record_get could not collect file assets: {exc}",
+                    }
+                ],
+            }
+
     def _record_get_refreshed_media_source_url(
         self,
         context,  # type: ignore[no-untyped-def]
@@ -7896,6 +7972,172 @@ class RecordTools(ToolBase):
 
         return self._run_record_tool(profile, runner)
 
+    def _record_list_query_view_fields(
+        self,
+        *,
+        session_profile,
+        context,
+        app_key: str,
+        view_route: AccessibleViewRoute,
+        page_num: int,
+        page_size: int,
+        query_key: str | None,
+        search_que_ids: list[int] | None,
+        match_rules: list[JSONObject],
+        sort_rules: list[JSONObject],
+        max_rows: int,
+        selected_fields: list[FormField],
+        output_profile: str,
+    ) -> JSONObject:
+        """Run public record_list with fields already resolved from the selected view schema."""
+        view_selection = view_route.view_selection
+        current_page = max(page_num, 1)
+        used_list_type: int | None = None
+        if view_selection is not None:
+            fallback_list_types = [view_route.list_type if view_route.list_type is not None else DEFAULT_RECORD_LIST_TYPE]
+        elif view_route.list_type is not None and view_route.list_type != DEFAULT_RECORD_LIST_TYPE:
+            fallback_list_types = [view_route.list_type]
+        else:
+            fallback_list_types = [DEFAULT_RECORD_LIST_TYPE, 14, 1, 2, 12]
+        last_error: QingflowApiError | None = None
+        page: JSONObject | None = None
+        for candidate_list_type in fallback_list_types:
+            try:
+                page = self._search_page(
+                    context,
+                    app_key=app_key,
+                    view_selection=view_selection,
+                    page_num=current_page,
+                    page_size=page_size,
+                    query_key=query_key,
+                    match_rules=match_rules,
+                    sorts=sort_rules,
+                    search_que_ids=search_que_ids,
+                    list_type=candidate_list_type,
+                )
+                used_list_type = None if view_selection is not None else candidate_list_type
+                break
+            except QingflowApiError as exc:
+                last_error = exc
+                if self._should_retry_list_type_fallback(exc) and candidate_list_type != fallback_list_types[-1]:
+                    continue
+                raise
+        if page is None:
+            if last_error is not None:
+                raise last_error
+            raise_tool_error(QingflowApiError.config_error("record_list failed: no accessible listType"))
+
+        page_rows = page.get("list")
+        items = page_rows if isinstance(page_rows, list) else []
+        reported_total = _coerce_count(page.get("total"))
+        if reported_total is None:
+            reported_total = _coerce_count(page.get("count"))
+        result_amount = _effective_total(page, page_size)
+        has_more = _page_has_more(page, current_page, page_size, len(items))
+        rows: list[JSONObject] = []
+        normalized_rows: list[JSONObject] = []
+        page_apply_order: list[int] = []
+        page_answer_map: dict[int, list[JSONValue]] = {}
+        for item in items:
+            if not isinstance(item, dict):
+                continue
+            answers = item.get("answers")
+            answer_list = answers if isinstance(answers, list) else []
+            apply_id = _coerce_count(item.get("applyId")) or _coerce_count(item.get("id"))
+            row = _build_flat_row(answer_list, selected_fields, apply_id=apply_id)
+            rows.append(row)
+            if apply_id is not None:
+                page_apply_order.append(apply_id)
+                page_answer_map[apply_id] = cast(list[JSONValue], answer_list)
+            if len(rows) >= max_rows:
+                break
+        if output_profile == "verbose" and page_apply_order:
+            for apply_id in page_apply_order:
+                normalized_record, normalized_ambiguous_fields = _build_normalized_row_from_answers(
+                    page_answer_map.get(apply_id, []),
+                    selected_fields,
+                )
+                normalized_rows.append(
+                    {
+                        "apply_id": apply_id,
+                        "normalized_record": normalized_record,
+                        "normalized_ambiguous_fields": normalized_ambiguous_fields,
+                    }
+                )
+        effective_result_amount = result_amount if result_amount is not None else len(rows)
+        completeness = _build_completeness(
+            result_amount=effective_result_amount,
+            returned_items=len(rows),
+            fetched_pages=1,
+            requested_pages=1,
+            has_more=has_more,
+            next_page_token=None,
+            is_complete=not has_more and len(rows) < max_rows,
+            omitted_items=max(0, effective_result_amount - len(rows)),
+            extra={},
+        )
+        evidence = {
+            "query_id": _query_id(),
+            "app_key": app_key,
+            "filters": _echo_filters(match_rules),
+            "selected_columns": [field.que_title for field in selected_fields],
+            "time_range": None,
+            "source_pages": [current_page],
+            "view": _view_selection_payload(view_selection),
+            "backend_reported_total": reported_total,
+        }
+        response: JSONObject = {
+            "profile": session_profile.profile,
+            "ws_id": session_profile.selected_ws_id,
+            "ok": True,
+            "request_route": self._request_route_payload(context),
+            "data": {
+                "mode": "list",
+                "source_tool": "record_list",
+                "view": _view_selection_payload(view_selection),
+                "list": {
+                    "rows": rows,
+                    "row_cap_hit": _list_row_cap_hit(returned_items=len(rows), row_cap=max_rows),
+                    "sample_only": _list_sample_only(
+                        returned_items=len(rows),
+                        row_cap=max_rows,
+                        result_amount=effective_result_amount,
+                    ),
+                    "safe_for_final_conclusion": False,
+                    "analysis_warning": _list_sample_warning(
+                        returned_items=len(rows),
+                        row_cap=max_rows,
+                        result_amount=effective_result_amount,
+                    ),
+                    "pagination": {
+                        "page_num": current_page,
+                        "page_size": page_size,
+                        "requested_pages": 1,
+                        "result_amount": effective_result_amount,
+                        "returned_items": len(rows),
+                        "list_type_used": used_list_type,
+                    },
+                    "applied_limits": {
+                        "row_cap": max_rows,
+                        "column_cap": len(selected_fields),
+                        "selected_columns": [field.que_title for field in selected_fields],
+                    },
+                },
+            },
+            "output_profile": output_profile,
+            "next_page_token": None,
+        }
+        if output_profile == "verbose":
+            cast(JSONObject, cast(JSONObject, response["data"])["list"])["normalized_rows"] = normalized_rows
+            response["completeness"] = completeness
+            response["evidence"] = evidence
+            response["resolved_mappings"] = {
+                "select_columns": [_field_mapping_entry("row", field, requested=field.que_title) for field in selected_fields],
+                "filters": [],
+                "time_range": None,
+            }
+        return response
+
     def _get_form_schema(self, profile: str, context, app_key: str, *, force_refresh: bool) -> JSONObject:  # type: ignore[no-untyped-def]
         """执行内部辅助逻辑。"""
         cache_key = (profile, app_key, "applicant_node", None)
@@ -8392,63 +8634,7 @@ class RecordTools(ToolBase):
                 force_refresh=False,
             )
             index = cast(FieldIndex, browse_scope["index"])
-            visible_question_ids = cast(set[int], browse_scope["visible_question_ids"])
-            resolved: list[int] = []
-            seen: set[int] = set()
-            for selector in selectors:
-                try:
-                    field = self._resolve_field_selector(selector, index, location="record_list.query_fields")
-                except RecordInputError as exc:
-                    if exc.error_code == "FIELD_NOT_FOUND":
-                        raise RecordInputError(
-                            message=(
-                                f"record_list query field_id '{selector}' is not in the selected view schema "
-                                f"({resolved_view.view_id})."
-                            ),
-                            error_code="QUERY_FIELD_NOT_IN_VIEW_SCHEMA",
-                            fix_hint="Call record_browse_schema_get for this exact view_id and pass only field_id values from its fields[].",
-                            details={
-                                "location": "record_list.query_fields",
-                                "requested": selector,
-                                "view_id": resolved_view.view_id,
-                                "view_name": resolved_view.name,
-                            },
-                        ) from exc
-                    raise
-                if field.que_id not in visible_question_ids:
-                    raise RecordInputError(
-                        message=(
-                            f"record_list query field_id '{field.que_id}' is not readable in the selected view "
-                            f"({resolved_view.view_id})."
-                        ),
-                        error_code="QUERY_FIELD_NOT_IN_VIEW_SCHEMA",
-                        fix_hint="Call record_browse_schema_get for this exact view_id and pass only field_id values from its fields[].",
-                        details={
-                            "location": "record_list.query_fields",
-                            "requested": selector,
-                            "field_id": field.que_id,
-                            "view_id": resolved_view.view_id,
-                            "view_name": resolved_view.name,
-                        },
-                    )
-                if field.que_id in seen:
-                    continue
-                resolved.append(field.que_id)
-                seen.add(field.que_id)
-            if len(resolved) > BACKEND_LIST_SEARCH_FIELD_LIMIT:
-                raise RecordInputError(
-                    message=(
-                        f"record_list query_fields supports at most {BACKEND_LIST_SEARCH_FIELD_LIMIT} fields."
-                    ),
-                    error_code="QUERY_FIELDS_TOO_MANY",
-                    fix_hint="Narrow query_fields to the most likely title/name/customer/number fields, or omit query_fields to use the backend default search scope.",
-                    details={
-                        "location": "record_list.query_fields",
-                        "max_fields": BACKEND_LIST_SEARCH_FIELD_LIMIT,
-                        "received": len(resolved),
-                    },
-                )
-            return resolved
+            return self._resolve_record_list_query_fields(selectors, index, view_route=resolved_view)
 
         return cast(list[int], self._run_record_tool(profile, runner))
 
@@ -8460,7 +8646,7 @@ class RecordTools(ToolBase):
         resolved_view: AccessibleViewRoute,
     ) -> list[int]:
         """执行内部辅助逻辑。"""
-        browse_scope = self._build_browse_write_scope(
+        browse_scope = self._build_browse_read_scope(
             profile,
             context,
             app_key,
@@ -8468,33 +8654,7 @@ class RecordTools(ToolBase):
             force_refresh=False,
         )
         index = cast(FieldIndex, browse_scope["index"])
-        visible_question_ids = cast(set[int], browse_scope["visible_question_ids"])
-        ordered_visible_fields = [
-            field
-            for field in self._schema_fields_for_mode(
-                profile,
-                context,
-                app_key,
-                index,
-                schema_mode="browse",
-                resolved_view=resolved_view,
-            )
-            if field.que_id in visible_question_ids and field.que_type not in LAYOUT_ONLY_QUE_TYPES
-        ]
-        field_ids = [field.que_id for field in ordered_visible_fields[:MAX_LIST_COLUMN_LIMIT]]
-        if not field_ids:
-            field_ids = [
-                field.que_id
-                for field in index.by_id.values()
-                if field.que_type not in LAYOUT_ONLY_QUE_TYPES
-            ][:MAX_LIST_COLUMN_LIMIT]
-        if not field_ids:
-            raise_tool_error(
-                QingflowApiError.config_error(
-                    "record_list could not determine readable columns for the selected view"
-                )
-            )
-        return field_ids
+        return [field.que_id for field in self._derive_record_list_fields_from_index(index)]
 
     def _get_view_question_ids(self, profile: str, context, view_key: str) -> set[int]:  # type: ignore[no-untyped-def]
         """执行内部辅助逻辑。"""
@@ -10446,14 +10606,161 @@ class RecordTools(ToolBase):
             seen.add(field.que_id)
         return fields
 
-    def _resolve_summary_preview_fields(
+    def _derive_record_list_fields_from_index(self, index: FieldIndex) -> list[FormField]:
+        fields = [
+            field
+            for field in index.by_id.values()
+            if field.que_type not in LAYOUT_ONLY_QUE_TYPES
+        ][:MAX_LIST_COLUMN_LIMIT]
+        if not fields:
+            raise_tool_error(
+                QingflowApiError.config_error(
+                    "record_list could not determine readable columns for the selected view"
+                )
+            )
+        return fields
+
+    def _resolve_record_list_columns(
         self,
-        selectors: list[str | int],
+        selectors: list[int],
         index: FieldIndex,
-        amount_field: FormField | None,
-        time_field: FormField | None,
         *,
-        max_columns: int | None,
+        view_route: AccessibleViewRoute,
+    ) -> list[FormField]:
+        if not selectors:
+            raise_tool_error(QingflowApiError.config_error("columns is required"))
+        fields: list[FormField] = []
+        seen: set[int] = set()
+        for selector in selectors:
+            try:
+                field = self._resolve_field_selector(selector, index, location="record_list.columns")
+            except RecordInputError as exc:
+                if exc.error_code == "FIELD_NOT_FOUND":
+                    raise self._record_list_field_not_in_view_error(
+                        exc,
+                        location="record_list.columns",
+                        error_code="FIELD_NOT_IN_VIEW_SCHEMA",
+                        view_route=view_route,
+                    ) from exc
+                raise
+            if field.que_id in seen:
+                continue
+            fields.append(field)
+            seen.add(field.que_id)
+        return fields
+
+    def _resolve_record_list_query_fields(
+        self,
+        selectors: list[int],
+        index: FieldIndex,
+        *,
+        view_route: AccessibleViewRoute,
+    ) -> list[int]:
+        resolved: list[int] = []
+        seen: set[int] = set()
+        for selector in selectors:
+            try:
+                field = self._resolve_field_selector(selector, index, location="record_list.query_fields")
+            except RecordInputError as exc:
+                if exc.error_code == "FIELD_NOT_FOUND":
+                    raise self._record_list_field_not_in_view_error(
+                        exc,
+                        location="record_list.query_fields",
+                        error_code="QUERY_FIELD_NOT_IN_VIEW_SCHEMA",
+                        view_route=view_route,
+                    ) from exc
+                raise
+            if field.que_id in seen:
+                continue
+            resolved.append(field.que_id)
+            seen.add(field.que_id)
+        if len(resolved) > BACKEND_LIST_SEARCH_FIELD_LIMIT:
+            raise RecordInputError(
+                message=(
+                    f"record_list query_fields supports at most {BACKEND_LIST_SEARCH_FIELD_LIMIT} fields."
+                ),
+                error_code="QUERY_FIELDS_TOO_MANY",
+                fix_hint="Narrow query_fields to the most likely title/name/customer/number fields, or omit query_fields to use the backend default search scope.",
+                details={
+                    "location": "record_list.query_fields",
+                    "max_fields": BACKEND_LIST_SEARCH_FIELD_LIMIT,
+                    "received": len(resolved),
+                },
+            )
+        return resolved
+
+    def _resolve_record_list_match_rules(
+        self,
+        context,  # type: ignore[no-untyped-def]
+        filters: list[JSONObject],
+        index: FieldIndex,
+        *,
+        view_route: AccessibleViewRoute,
+    ) -> list[JSONObject]:
+        try:
+            return self._resolve_match_rules(context, filters, index)
+        except RecordInputError as exc:
+            if exc.error_code == "FIELD_NOT_FOUND":
+                raise self._record_list_field_not_in_view_error(
+                    exc,
+                    location="record_list.where",
+                    error_code="FILTER_FIELD_NOT_IN_VIEW_SCHEMA",
+                    view_route=view_route,
+                ) from exc
+            raise
+
+    def _resolve_record_list_sort_rules(
+        self,
+        sorts: list[JSONObject],
+        index: FieldIndex,
+        *,
+        view_route: AccessibleViewRoute,
+    ) -> list[JSONObject]:
+        try:
+            return self._resolve_sorts(sorts, index)
+        except RecordInputError as exc:
+            if exc.error_code == "FIELD_NOT_FOUND":
+                raise self._record_list_field_not_in_view_error(
+                    exc,
+                    location="record_list.order_by",
+                    error_code="SORT_FIELD_NOT_IN_VIEW_SCHEMA",
+                    view_route=view_route,
+                ) from exc
+            raise
+
+    def _record_list_field_not_in_view_error(
+        self,
+        exc: RecordInputError,
+        *,
+        location: str,
+        error_code: str,
+        view_route: AccessibleViewRoute,
+    ) -> RecordInputError:
+        details = exc.details if isinstance(exc.details, dict) else {}
+        requested = details.get("requested")
+        return RecordInputError(
+            message=(
+                f"{location} field_id '{requested}' is not in the selected view schema "
+                f"({view_route.view_id})."
+            ),
+            error_code=error_code,
+            fix_hint="Call record_browse_schema_get for this exact view_id and pass only field_id values from its fields[].",
+            details={
+                "location": location,
+                "requested": requested,
+                "view_id": view_route.view_id,
+                "view_name": view_route.name,
+            },
+        )
+
+    def _resolve_summary_preview_fields(
+        self,
+        selectors: list[str | int],
+        index: FieldIndex,
+        amount_field: FormField | None,
+        time_field: FormField | None,
+        *,
+        max_columns: int | None,
     ) -> list[FormField]:
         """执行内部辅助逻辑。"""
         if selectors:
@@ -13412,6 +13719,19 @@ _RECORD_MEDIA_IMG_SRC_RE = re.compile(r"""<img\b[^>]*\bsrc\s*=\s*["']?([^"'\s>]+
 _RECORD_MEDIA_MD_IMAGE_RE = re.compile(r"""!\[[^\]]*]\(([^)\s]+)(?:\s+["'][^"']*["'])?\)""")
 _RECORD_MEDIA_URL_RE = re.compile(r"""https?://[^\s<>"')\]]+""", re.IGNORECASE)
 _RECORD_MEDIA_IMAGE_EXTENSIONS = {".png", ".jpg", ".jpeg", ".gif", ".webp", ".bmp", ".svg"}
+_RECORD_FILE_EXTENSIONS = _RECORD_MEDIA_IMAGE_EXTENSIONS | {
+    ".csv",
+    ".doc",
+    ".docx",
+    ".json",
+    ".md",
+    ".pdf",
+    ".text",
+    ".txt",
+    ".xls",
+    ".xlsm",
+    ".xlsx",
+}
 _RECORD_MEDIA_IMAGE_URL_KEYS = {
     "image",
     "imageurl",
@@ -13431,6 +13751,15 @@ _RECORD_MEDIA_IMAGE_URL_KEYS = {
     "url",
     "value",
 }
+_RECORD_FILE_URL_KEYS = _RECORD_MEDIA_IMAGE_URL_KEYS | {
+    "downloadurl",
+    "download_url",
+    "file",
+    "href",
+    "link",
+    "path",
+}
+_RECORD_FILE_NAME_KEYS = {"name", "otherinfo", "filename", "file_name", "title"}
 
 
 def _record_detail_media_assets_payload(
@@ -13656,6 +13985,286 @@ def _record_detail_media_assets_payload(
     return {"status": status, "local_dir": str(local_dir) if items else None, "items": items, "warnings": warnings}
 
 
+def _record_detail_file_assets_payload(
+    *,
+    backend: Any,
+    context: BackendRequestContext,
+    app_key: str,
+    record_id: int,
+    fields: list[JSONObject],
+    references: list[JSONObject],
+    media_assets: JSONObject,
+    refresh_source_url: Any | None = None,
+) -> JSONObject:
+    candidates: list[JSONObject] = []
+    source_record_id = _public_record_id_text(record_id)
+    for field in fields:
+        if isinstance(field, dict):
+            candidates.extend(
+                _record_detail_file_candidates_from_field(
+                    field,
+                    source_app_key=app_key,
+                    source_record_id=source_record_id,
+                    forced_source=None,
+                )
+            )
+    for reference in references:
+        if not isinstance(reference, dict):
+            continue
+        target_fields = reference.get("target_fields") if isinstance(reference.get("target_fields"), list) else []
+        target_app_key = _normalize_optional_text(reference.get("target_app_key")) or app_key
+        target_record_id = _normalize_optional_text(reference.get("target_record_id"))
+        for field in target_fields:
+            if isinstance(field, dict):
+                candidates.extend(
+                    _record_detail_file_candidates_from_field(
+                        field,
+                        source_app_key=target_app_key,
+                        source_record_id=target_record_id,
+                        forced_source="reference_target",
+                    )
+                )
+    if not candidates:
+        return {"status": "none", "local_dir": None, "items": [], "warnings": []}
+
+    local_dir = _record_detail_file_assets_dir(uuid4().hex)
+    local_dir_created = False
+    items: list[JSONObject] = []
+    warnings: list[JSONObject] = []
+    file_by_url: dict[str, str] = {}
+    media_by_url = _record_detail_media_assets_by_url(media_assets)
+    media_by_asset_id = _record_detail_media_assets_by_asset_id(media_assets)
+    total_bytes = 0
+    downloaded_count = 0
+    deadline = time.monotonic() + RECORD_GET_FILE_TIME_BUDGET_SECONDS
+    stopped_for_time_budget = False
+    environment_prefix_cache: dict[str, str] = {}
+
+    def ensure_local_dir() -> None:
+        nonlocal local_dir_created
+        if not local_dir_created:
+            local_dir.mkdir(parents=True, exist_ok=True)
+            local_dir_created = True
+
+    for candidate in candidates:
+        if items and time.monotonic() + RECORD_GET_FILE_MIN_REMAINING_SECONDS >= deadline:
+            stopped_for_time_budget = True
+            warnings.append(
+                {
+                    "code": "FILE_ASSET_TIME_BUDGET_EXCEEDED",
+                    "message": "record_get stopped downloading additional file assets to stay within the internal time budget.",
+                    "time_budget_seconds": RECORD_GET_FILE_TIME_BUDGET_SECONDS,
+                }
+            )
+            break
+        source_url = _normalize_optional_text(candidate.get("source_url"))
+        owner = candidate.get("_owner")
+        if not source_url or not isinstance(owner, dict):
+            continue
+        existing_asset_id = file_by_url.get(source_url)
+        if existing_asset_id:
+            _record_detail_attach_file_asset_id(owner, existing_asset_id)
+            continue
+        file_asset_id = f"file_{len(items) + 1:04d}"
+        file_by_url[source_url] = file_asset_id
+        _record_detail_attach_file_asset_id(owner, file_asset_id)
+        base_item = _record_detail_file_asset_base_item(candidate, file_asset_id=file_asset_id)
+
+        media_item = media_by_url.get(source_url)
+        if media_item is None:
+            media_item = _record_detail_media_item_from_owner_asset_ids(owner, media_by_asset_id, candidate)
+        if isinstance(media_item, dict) and media_item.get("asset_id") not in (None, ""):
+            base_item["media_asset_id"] = media_item.get("asset_id")
+        if downloaded_count >= RECORD_GET_FILE_MAX_FILES:
+            items.append(
+                {
+                    **base_item,
+                    "local_path": None,
+                    "mime_type": None,
+                    "size_bytes": None,
+                    "access_status": "too_large",
+                    "download_strategy": "skipped_limit",
+                    "readable_by_agent": False,
+                    "extraction": {"status": "skipped_too_large", "text_path": None, "preview": None},
+                }
+            )
+            warnings.append(
+                {
+                    "code": "FILE_ASSET_LIMIT_EXCEEDED",
+                    "message": f"record_get stopped downloading files after {RECORD_GET_FILE_MAX_FILES} assets.",
+                }
+            )
+            continue
+
+        reused_media_path = _normalize_optional_text(media_item.get("local_path")) if isinstance(media_item, dict) else None
+        if reused_media_path and media_item.get("access_status") == "downloaded":
+            file_name = _record_detail_file_name_from_candidate(candidate, source_url=source_url, fallback_id=file_asset_id)
+            mime_type = _normalize_optional_text(media_item.get("mime_type")) or _record_detail_mime_from_url(source_url)
+            items.append(
+                {
+                    **base_item,
+                    "download_strategy": media_item.get("download_strategy"),
+                    "storage_auth_type": media_item.get("storage_auth_type"),
+                    "storage_cookie_prefix": media_item.get("storage_cookie_prefix"),
+                    "redirected": media_item.get("redirected"),
+                    "file_name": file_name,
+                    "local_path": reused_media_path,
+                    "mime_type": mime_type,
+                    "size_bytes": media_item.get("size_bytes"),
+                    "access_status": "downloaded",
+                    "readable_by_agent": True,
+                    "extraction": {"status": "unsupported", "text_path": None, "preview": None},
+                }
+            )
+            downloaded_count += 1
+            continue
+
+        download_strategy = _record_detail_media_download_strategy(source_url)
+        download_succeeded = False
+        content: bytes = b""
+        download_meta: JSONObject = {}
+        try:
+            content, download_meta = _record_detail_download_media_content(
+                backend=backend,
+                context=context,
+                source_url=source_url,
+                warnings=warnings,
+                environment_prefix_cache=environment_prefix_cache,
+                requested_strategy=download_strategy,
+            )
+            download_succeeded = True
+        except QingflowApiError as exc:
+            blocked = exc.http_status in {401, 403}
+            if blocked and download_strategy != "referer_acl" and callable(refresh_source_url):
+                refreshed_url = _normalize_optional_text(refresh_source_url(candidate))
+                if refreshed_url and refreshed_url != source_url:
+                    refreshed_strategy = _record_detail_media_download_strategy(refreshed_url)
+                    try:
+                        content, download_meta = _record_detail_download_media_content(
+                            backend=backend,
+                            context=context,
+                            source_url=refreshed_url,
+                            warnings=warnings,
+                            environment_prefix_cache=environment_prefix_cache,
+                            requested_strategy=(
+                                download_strategy
+                                if download_strategy == "decrypted_file_url_then_storage_cookie_redirect"
+                                else refreshed_strategy
+                            ),
+                        )
+                        source_url = refreshed_url
+                        base_item["source_url"] = refreshed_url
+                        download_succeeded = True
+                    except QingflowApiError as refreshed_exc:
+                        exc = refreshed_exc
+                        blocked = exc.http_status in {401, 403}
+                    else:
+                        warnings.append(
+                            {
+                                "code": "FILE_ASSET_STORAGE_URL_REFRESHED",
+                                "file_asset_id": file_asset_id,
+                                "message": "record_get refreshed the record detail once before downloading this file asset.",
+                            }
+                        )
+            if not download_succeeded:
+                warning_code = "STORAGE_COOKIE_AUTH_FAILED" if blocked and download_strategy != "referer_acl" else "FILE_ASSET_DOWNLOAD_FAILED"
+                items.append(
+                    {
+                        **base_item,
+                        "storage_auth_type": _record_detail_storage_auth_type(source_url),
+                        "storage_cookie_prefix": environment_prefix_cache.get("value"),
+                        "redirected": False,
+                        "local_path": None,
+                        "mime_type": _record_detail_mime_from_url(source_url),
+                        "size_bytes": None,
+                        "access_status": "blocked_private_url" if blocked else "download_failed",
+                        "download_strategy": download_strategy,
+                        "readable_by_agent": False,
+                        "extraction": {"status": "failed", "text_path": None, "preview": None},
+                    }
+                )
+                warnings.append(
+                    {
+                        "code": warning_code,
+                        "file_asset_id": file_asset_id,
+                        "message": f"record_get could not download file asset {file_asset_id}: {exc.message}",
+                        "http_status": exc.http_status,
+                    }
+                )
+                continue
+
+        if not isinstance(content, bytes):
+            content = bytes(content or b"")
+        file_name = _record_detail_file_name_from_candidate(candidate, source_url=source_url, fallback_id=file_asset_id)
+        mime_type = _record_detail_file_mime_from_content_or_name(content, source_url=source_url, file_name=file_name)
+        size_bytes = len(content)
+        if size_bytes > RECORD_GET_FILE_MAX_BYTES or total_bytes + size_bytes > RECORD_GET_FILE_MAX_TOTAL_BYTES:
+            items.append(
+                {
+                    **base_item,
+                    **download_meta,
+                    "file_name": file_name,
+                    "local_path": None,
+                    "mime_type": mime_type,
+                    "size_bytes": size_bytes,
+                    "access_status": "too_large",
+                    "readable_by_agent": False,
+                    "extraction": {"status": "skipped_too_large", "text_path": None, "preview": None},
+                }
+            )
+            warnings.append(
+                {
+                    "code": "FILE_ASSET_SIZE_LIMIT_EXCEEDED",
+                    "file_asset_id": file_asset_id,
+                    "message": "record_get skipped a file asset because it exceeded the internal file size budget.",
+                }
+            )
+            continue
+
+        ensure_local_dir()
+        extension = _record_detail_file_extension(mime_type, source_url=source_url, file_name=file_name)
+        local_path = local_dir / f"{file_asset_id}{extension}"
+        local_path.write_bytes(content)
+        extraction = _record_detail_extract_file_asset_text(
+            content,
+            mime_type=mime_type,
+            file_name=file_name,
+            local_dir=local_dir,
+            file_asset_id=file_asset_id,
+        )
+        if extraction.get("status") == "failed":
+            warnings.append(
+                {
+                    "code": "FILE_ASSET_EXTRACTION_FAILED",
+                    "file_asset_id": file_asset_id,
+                    "message": f"record_get downloaded file asset {file_asset_id}, but text extraction failed.",
+                }
+            )
+        total_bytes += size_bytes
+        downloaded_count += 1
+        items.append(
+            {
+                **base_item,
+                **download_meta,
+                "file_name": file_name,
+                "local_path": str(local_path),
+                "mime_type": mime_type,
+                "size_bytes": size_bytes,
+                "access_status": "downloaded",
+                "readable_by_agent": extraction.get("status") == "ok" or _record_detail_image_mime_from_bytes(content) is not None,
+                "extraction": extraction,
+            }
+        )
+
+    if not items:
+        status = "none"
+    elif stopped_for_time_budget or any(item.get("access_status") != "downloaded" or cast(JSONObject, item.get("extraction", {})).get("status") == "failed" for item in items):
+        status = "partial"
+    else:
+        status = "ok"
+    return {"status": status, "local_dir": str(local_dir) if items else None, "items": items, "warnings": warnings}
+
+
 def _record_detail_media_candidates_from_field(
     field: JSONObject,
     *,
@@ -13736,6 +14345,104 @@ def _record_detail_media_candidates_from_field(
     return candidates
 
 
+def _record_detail_file_candidates_from_field(
+    field: JSONObject,
+    *,
+    source_app_key: str | None,
+    source_record_id: str | None,
+    forced_source: str | None,
+) -> list[JSONObject]:
+    field_id = _coerce_count(field.get("field_id"))
+    field_title = _normalize_optional_text(field.get("title"))
+    field_type = _normalize_optional_text(field.get("type"))
+    candidates: list[JSONObject] = []
+    seen_urls: set[str] = set()
+
+    def add_candidate(url: str | None, *, source: str, path: str, name: str | None = None, file_hint: bool = False) -> None:
+        normalized_url = _record_detail_normalize_media_url(url)
+        if not normalized_url or normalized_url in seen_urls:
+            return
+        if not _record_detail_supported_file_url(normalized_url):
+            return
+        if not file_hint and not _record_detail_url_or_name_looks_like_file(normalized_url, name):
+            return
+        seen_urls.add(normalized_url)
+        candidates.append(
+            {
+                "_owner": field,
+                "kind": "file",
+                "source": forced_source or source,
+                "source_path": path,
+                "field_id": field_id,
+                "field_title": field_title,
+                "source_app_key": source_app_key,
+                "source_record_id": source_record_id,
+                "source_url": normalized_url,
+                "file_name": name,
+            }
+        )
+
+    def candidate_name_from_mapping(value: dict[Any, Any]) -> str | None:
+        for key, item in value.items():
+            if _record_detail_media_key(key) in _RECORD_FILE_NAME_KEYS:
+                text = _normalize_optional_text(item) if not isinstance(item, (dict, list)) else None
+                if text:
+                    return text
+        return None
+
+    def scan_text(value: str, *, path: str, source: str, file_hint: bool = False) -> None:
+        for match in _RECORD_MEDIA_IMG_SRC_RE.finditer(value):
+            add_candidate(match.group(1), source="rich_text", path=path, file_hint=True)
+        for match in _RECORD_MEDIA_MD_IMAGE_RE.finditer(value):
+            add_candidate(match.group(1), source="rich_text", path=path, file_hint=True)
+        for match in _RECORD_MEDIA_URL_RE.finditer(value):
+            add_candidate(match.group(0), source=source, path=path, file_hint=file_hint)
+
+    def scan_value(value: JSONValue, *, path: str, source: str, file_hint: bool = False) -> None:
+        if isinstance(value, str):
+            scan_text(value, path=path, source=source, file_hint=file_hint)
+            return
+        if isinstance(value, list):
+            for index, item in enumerate(value):
+                scan_value(cast(JSONValue, item), path=f"{path}[{index}]", source=source, file_hint=file_hint)
+            return
+        if not isinstance(value, dict):
+            return
+
+        attachment = _extract_attachment_item(cast(JSONValue, value))
+        if attachment:
+            add_candidate(
+                _normalize_optional_text(attachment.get("value")),
+                source="attachment" if source == "attachment" else source,
+                path=path,
+                name=_normalize_optional_text(attachment.get("name")),
+                file_hint=True,
+            )
+        candidate_name = candidate_name_from_mapping(value)
+        for key, item in value.items():
+            normalized_key = _record_detail_media_key(key)
+            item_text = _normalize_optional_text(item) if not isinstance(item, (dict, list)) else None
+            key_source = source
+            key_file_hint = file_hint
+            if normalized_key in _RECORD_FILE_URL_KEYS:
+                key_source = "attachment" if source == "attachment" else ("image_field" if source != "subtable" else "subtable")
+                key_file_hint = source == "attachment" or normalized_key not in {"value", "url"}
+                if item_text:
+                    add_candidate(item_text, source=key_source, path=f"{path}.{key}", name=candidate_name, file_hint=key_file_hint)
+            scan_value(cast(JSONValue, item), path=f"{path}.{key}", source=key_source, file_hint=key_file_hint)
+
+    value = cast(JSONValue, field.get("value"))
+    display_value = cast(JSONValue, field.get("display_value"))
+    if field_type == "attachment":
+        scan_value(value, path="value", source="attachment", file_hint=True)
+    elif field_type == "subtable":
+        scan_value(value, path="value", source="subtable", file_hint=True)
+    else:
+        scan_value(value, path="value", source="image_field", file_hint=False)
+    scan_value(display_value, path="display_value", source="rich_text", file_hint=False)
+    return candidates
+
+
 def _record_detail_attach_asset_id(field: JSONObject, asset_id: str) -> None:
     asset_ids = field.get("asset_ids")
     if not isinstance(asset_ids, list):
@@ -13745,6 +14452,15 @@ def _record_detail_attach_asset_id(field: JSONObject, asset_id: str) -> None:
         asset_ids.append(asset_id)
 
 
+def _record_detail_attach_file_asset_id(field: JSONObject, file_asset_id: str) -> None:
+    asset_ids = field.get("file_asset_ids")
+    if not isinstance(asset_ids, list):
+        asset_ids = []
+        field["file_asset_ids"] = asset_ids
+    if file_asset_id not in asset_ids:
+        asset_ids.append(file_asset_id)
+
+
 def _record_detail_media_asset_base_item(candidate: JSONObject, *, asset_id: str) -> JSONObject:
     payload: JSONObject = {
         "asset_id": asset_id,
@@ -13760,12 +14476,77 @@ def _record_detail_media_asset_base_item(candidate: JSONObject, *, asset_id: str
     return payload
 
 
+def _record_detail_file_asset_base_item(candidate: JSONObject, *, file_asset_id: str) -> JSONObject:
+    payload: JSONObject = {
+        "file_asset_id": file_asset_id,
+        "kind": candidate.get("kind") or "file",
+        "source": candidate.get("source") or "attachment",
+        "field_id": candidate.get("field_id"),
+        "field_title": candidate.get("field_title"),
+        "source_url": candidate.get("source_url"),
+    }
+    for key in ("source_path", "source_app_key", "source_record_id", "file_name"):
+        if candidate.get(key) not in (None, ""):
+            payload[key] = candidate.get(key)
+    return payload
+
+
+def _record_detail_media_assets_by_url(media_assets: JSONObject) -> dict[str, JSONObject]:
+    items = media_assets.get("items") if isinstance(media_assets.get("items"), list) else []
+    result: dict[str, JSONObject] = {}
+    for item in items:
+        if not isinstance(item, dict):
+            continue
+        source_url = _normalize_optional_text(item.get("source_url"))
+        if source_url and source_url not in result:
+            result[source_url] = cast(JSONObject, item)
+    return result
+
+
+def _record_detail_media_assets_by_asset_id(media_assets: JSONObject) -> dict[str, JSONObject]:
+    items = media_assets.get("items") if isinstance(media_assets.get("items"), list) else []
+    result: dict[str, JSONObject] = {}
+    for item in items:
+        if not isinstance(item, dict):
+            continue
+        asset_id = _normalize_optional_text(item.get("asset_id"))
+        if asset_id and asset_id not in result:
+            result[asset_id] = cast(JSONObject, item)
+    return result
+
+
+def _record_detail_media_item_from_owner_asset_ids(
+    owner: JSONObject,
+    media_by_asset_id: dict[str, JSONObject],
+    candidate: JSONObject,
+) -> JSONObject | None:
+    asset_ids = owner.get("asset_ids") if isinstance(owner.get("asset_ids"), list) else []
+    if len(asset_ids) != 1:
+        return None
+    media_item = media_by_asset_id.get(str(asset_ids[0]))
+    if not isinstance(media_item, dict):
+        return None
+    candidate_name = _normalize_optional_text(candidate.get("file_name"))
+    media_name = _normalize_optional_text(media_item.get("file_name"))
+    if candidate_name and media_name and candidate_name != media_name:
+        return None
+    if candidate.get("field_id") not in (None, media_item.get("field_id")):
+        return None
+    return media_item
+
+
 def _record_detail_media_assets_dir(run_id: str) -> Path:
     custom_home = os.environ.get("QINGFLOW_MCP_RECORD_ASSETS_HOME")
     base_dir = Path(custom_home).expanduser() if custom_home else get_mcp_home() / "record-assets"
     return base_dir / run_id
 
 
+def _record_detail_file_assets_dir(run_id: str) -> Path:
+    custom_home = os.environ.get("QINGFLOW_MCP_RECORD_FILES_HOME")
+    base_dir = Path(custom_home).expanduser() if custom_home else get_mcp_home() / "record-files"
+    return base_dir / run_id
+
+
 def _record_detail_media_download_headers(context: BackendRequestContext) -> dict[str, str]:
     origin = _record_detail_context_origin(context)
     return {"User-Agent": DEFAULT_USER_AGENT, "Referer": f"{origin}/", "Origin": origin}
@@ -13970,6 +14751,11 @@ def _record_detail_supported_media_url(url: str) -> bool:
     return parsed.scheme.lower() in {"http", "https"} or _record_detail_is_download_file_url(url)
 
 
+def _record_detail_supported_file_url(url: str) -> bool:
+    parsed = urlsplit(url)
+    return parsed.scheme.lower() in {"http", "https"} or _record_detail_is_download_file_url(url)
+
+
 def _record_detail_media_key(key: Any) -> str:
     return str(key or "").strip().replace("-", "_").lower()
 
@@ -13982,6 +14768,18 @@ def _record_detail_url_or_name_looks_like_image(url: str, name: str | None = Non
     return False
 
 
+def _record_detail_url_or_name_looks_like_file(url: str, name: str | None = None) -> bool:
+    if _record_detail_is_download_file_url(url) or _record_detail_is_qingflow_storage_url(url):
+        return True
+    for value in (url, name or ""):
+        if not value:
+            continue
+        path = unquote(urlsplit(value).path).lower() or value.lower()
+        if any(path.endswith(extension) for extension in _RECORD_FILE_EXTENSIONS):
+            return True
+    return False
+
+
 def _record_detail_mime_from_url(url: str) -> str | None:
     path = unquote(urlsplit(url).path).lower()
     if path.endswith(".png"):
@@ -13996,9 +14794,210 @@ def _record_detail_mime_from_url(url: str) -> str | None:
         return "image/bmp"
     if path.endswith(".svg"):
         return "image/svg+xml"
+    if path.endswith(".pdf"):
+        return "application/pdf"
+    if path.endswith(".docx"):
+        return "application/vnd.openxmlformats-officedocument.wordprocessingml.document"
+    if path.endswith(".xlsx"):
+        return "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"
+    if path.endswith(".xlsm"):
+        return "application/vnd.ms-excel.sheet.macroEnabled.12"
+    if path.endswith(".csv"):
+        return "text/csv"
+    if path.endswith(".txt") or path.endswith(".text"):
+        return "text/plain"
+    if path.endswith(".md"):
+        return "text/markdown"
+    if path.endswith(".json"):
+        return "application/json"
+    return None
+
+
+def _record_detail_file_name_from_candidate(candidate: JSONObject, *, source_url: str, fallback_id: str) -> str:
+    raw_name = _normalize_optional_text(candidate.get("file_name"))
+    if raw_name:
+        return raw_name
+    path_name = Path(unquote(urlsplit(source_url).path)).name
+    if path_name:
+        return path_name
+    return fallback_id
+
+
+def _record_detail_file_mime_from_content_or_name(content: bytes, *, source_url: str, file_name: str) -> str | None:
+    image_mime = _record_detail_image_mime_from_bytes(content)
+    if image_mime:
+        return image_mime
+    if content.startswith(b"%PDF"):
+        return "application/pdf"
+    guessed = mimetypes.guess_type(file_name or source_url)[0] or _record_detail_mime_from_url(source_url)
+    if guessed:
+        return guessed
+    lowered = (file_name or source_url).lower()
+    if lowered.endswith(".docx"):
+        return "application/vnd.openxmlformats-officedocument.wordprocessingml.document"
+    if lowered.endswith(".xlsx"):
+        return "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"
+    if lowered.endswith(".xlsm"):
+        return "application/vnd.ms-excel.sheet.macroEnabled.12"
+    if lowered.endswith(".csv"):
+        return "text/csv"
+    if lowered.endswith(".json"):
+        return "application/json"
+    if _record_detail_bytes_look_like_text(content):
+        return "text/plain"
     return None
 
 
+def _record_detail_file_extension(mime_type: str | None, *, source_url: str, file_name: str) -> str:
+    for value in (file_name, unquote(urlsplit(source_url).path)):
+        suffix = Path(value).suffix.lower()
+        if suffix and re.fullmatch(r"\.[a-z0-9]{1,10}", suffix):
+            return suffix
+    if mime_type:
+        extension = mimetypes.guess_extension(mime_type)
+        if extension:
+            return ".jpg" if extension == ".jpe" else extension
+    return ".bin"
+
+
+def _record_detail_bytes_look_like_text(content: bytes) -> bool:
+    if not content:
+        return True
+    sample = content[:4096]
+    if b"\x00" in sample:
+        return False
+    try:
+        sample.decode("utf-8")
+        return True
+    except UnicodeDecodeError:
+        try:
+            sample.decode("gb18030")
+            return True
+        except UnicodeDecodeError:
+            return False
+
+
+def _record_detail_extract_file_asset_text(
+    content: bytes,
+    *,
+    mime_type: str | None,
+    file_name: str,
+    local_dir: Path,
+    file_asset_id: str,
+) -> JSONObject:
+    normalized_name = file_name.lower()
+    try:
+        text: str | None
+        if normalized_name.endswith(".docx") or mime_type == "application/vnd.openxmlformats-officedocument.wordprocessingml.document":
+            text = _record_detail_extract_docx_text(content)
+        elif normalized_name.endswith((".xlsx", ".xlsm")) or mime_type in {
+            "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+            "application/vnd.ms-excel.sheet.macroEnabled.12",
+        }:
+            text = _record_detail_extract_xlsx_text(content)
+        elif normalized_name.endswith(".pdf") or mime_type == "application/pdf":
+            text = _record_detail_extract_pdf_text(content)
+        elif normalized_name.endswith(".json") or mime_type == "application/json":
+            text = _record_detail_decode_json_text(content)
+        elif normalized_name.endswith((".csv", ".txt", ".text", ".md")) or (mime_type or "").startswith("text/"):
+            text = _record_detail_decode_text(content)
+        else:
+            text = None
+    except Exception as exc:
+        return {"status": "failed", "text_path": None, "preview": None, "error": str(exc)}
+    if text is None:
+        return {"status": "unsupported", "text_path": None, "preview": None}
+    text_path = local_dir / f"{file_asset_id}.txt"
+    text_path.write_text(text, encoding="utf-8")
+    preview = text[:RECORD_GET_FILE_EXTRACT_PREVIEW_CHARS]
+    return {
+        "status": "ok",
+        "text_path": str(text_path),
+        "preview": preview,
+        "preview_truncated": len(text) > RECORD_GET_FILE_EXTRACT_PREVIEW_CHARS,
+    }
+
+
+def _record_detail_decode_text(content: bytes) -> str:
+    for encoding in ("utf-8-sig", "utf-8", "gb18030"):
+        try:
+            return content.decode(encoding)
+        except UnicodeDecodeError:
+            continue
+    return content.decode("utf-8", errors="replace")
+
+
+def _record_detail_decode_json_text(content: bytes) -> str:
+    text = _record_detail_decode_text(content)
+    try:
+        return json.dumps(json.loads(text), ensure_ascii=False, indent=2)
+    except ValueError:
+        return text
+
+
+def _record_detail_extract_docx_text(content: bytes) -> str:
+    with zipfile.ZipFile(BytesIO(content)) as archive:
+        document_xml = archive.read("word/document.xml")
+    root = ElementTree.fromstring(document_xml)
+    ns = "{http://schemas.openxmlformats.org/wordprocessingml/2006/main}"
+    body = root.find(f"{ns}body")
+    if body is None:
+        return ""
+
+    def node_text(node: ElementTree.Element) -> str:
+        return "".join(text_node.text or "" for text_node in node.iter(f"{ns}t")).strip()
+
+    lines: list[str] = []
+    for child in list(body):
+        if child.tag == f"{ns}p":
+            line = node_text(child)
+            if line:
+                lines.append(line)
+        elif child.tag == f"{ns}tbl":
+            for row in child.iter(f"{ns}tr"):
+                cells = [node_text(cell) for cell in row.iter(f"{ns}tc")]
+                cells = [cell for cell in cells if cell]
+                if cells:
+                    lines.append(" | ".join(cells))
+    return "\n".join(lines)
+
+
+def _record_detail_extract_xlsx_text(content: bytes) -> str:
+    from openpyxl import load_workbook
+
+    workbook = load_workbook(BytesIO(content), read_only=True, data_only=True)
+    try:
+        parts: list[str] = []
+        for sheet in workbook.worksheets:
+            parts.append(f"# {sheet.title}")
+            row_count = 0
+            for row in sheet.iter_rows(values_only=True):
+                row_count += 1
+                if row_count > RECORD_GET_FILE_EXTRACT_XLSX_MAX_ROWS_PER_SHEET:
+                    parts.append(f"... skipped rows after {RECORD_GET_FILE_EXTRACT_XLSX_MAX_ROWS_PER_SHEET}")
+                    break
+                cells = ["" if cell is None else str(cell) for cell in row]
+                if any(cell for cell in cells):
+                    parts.append("\t".join(cells).rstrip())
+        return "\n".join(parts)
+    finally:
+        workbook.close()
+
+
+def _record_detail_extract_pdf_text(content: bytes) -> str:
+    from pypdf import PdfReader
+
+    reader = PdfReader(BytesIO(content))
+    lines: list[str] = []
+    for index, page in enumerate(reader.pages[:RECORD_GET_FILE_EXTRACT_PDF_MAX_PAGES], start=1):
+        page_text = page.extract_text() or ""
+        if page_text.strip():
+            lines.append(f"# Page {index}\n{page_text.strip()}")
+    if len(reader.pages) > RECORD_GET_FILE_EXTRACT_PDF_MAX_PAGES:
+        lines.append(f"... skipped pages after {RECORD_GET_FILE_EXTRACT_PDF_MAX_PAGES}")
+    return "\n\n".join(lines)
+
+
 def _record_detail_image_mime_from_bytes(content: bytes) -> str | None:
     if content.startswith(b"\x89PNG\r\n\x1a\n"):
         return "image/png"
@@ -14038,6 +15037,7 @@ def _record_detail_context_integrity(
     workflow_logs: JSONObject,
     associated_resources: list[JSONObject],
     media_assets: JSONObject,
+    file_assets: JSONObject,
     unavailable_context: list[JSONObject],
 ) -> JSONObject:
     reference_unavailable = any(item.get("target_detail_completeness") != "full" for item in references)
@@ -14049,6 +15049,7 @@ def _record_detail_context_integrity(
         "workflow_logs": workflow_logs.get("status") or "unknown",
         "associated_resources": "full" if associated_resources or not any(item.get("section") == "associated_resources" for item in unavailable_context) else "unavailable",
         "media_assets": media_assets.get("status") or "unknown",
+        "file_assets": file_assets.get("status") or "unknown",
         "unavailable_count": len(unavailable_context),
         "safe_for_record_fact_conclusion": True,
         "safe_for_full_log_conclusion": False,
@@ -14063,6 +15064,7 @@ def _record_detail_semantic_context(payload: JSONObject) -> str:
     fields = payload.get("fields") if isinstance(payload.get("fields"), list) else []
     references = payload.get("references") if isinstance(payload.get("references"), list) else []
     media_assets = payload.get("media_assets") if isinstance(payload.get("media_assets"), dict) else {}
+    file_assets = payload.get("file_assets") if isinstance(payload.get("file_assets"), dict) else {}
     data_logs = payload.get("data_logs") if isinstance(payload.get("data_logs"), dict) else {}
     workflow_logs = payload.get("workflow_logs") if isinstance(payload.get("workflow_logs"), dict) else {}
     associated_resources = payload.get("associated_resources") if isinstance(payload.get("associated_resources"), list) else []
@@ -14110,6 +15112,20 @@ def _record_detail_semantic_context(payload: JSONObject) -> str:
                 f"（fieldId={_semantic_escape(item.get('field_id'))}），"
                 f"本地路径：{_semantic_escape(item.get('local_path')) or '无'}，{_semantic_escape(readable_text)}。"
             )
+    file_items = file_assets.get("items") if isinstance(file_assets.get("items"), list) else []
+    if file_items:
+        lines.extend(["", "文件附件："])
+        for item in file_items:
+            if not isinstance(item, dict):
+                continue
+            extraction = item.get("extraction") if isinstance(item.get("extraction"), dict) else {}
+            readable_text = "可由智能体读取" if item.get("readable_by_agent") else f"不可直接读取（{item.get('access_status') or 'unknown'}）"
+            lines.append(
+                f"- 文件 {_semantic_escape(item.get('file_asset_id'))}「{_semantic_escape(item.get('file_name'))}」"
+                f"来自字段「{_semantic_escape(item.get('field_title'))}」（fieldId={_semantic_escape(item.get('field_id'))}），"
+                f"本地路径：{_semantic_escape(item.get('local_path')) or '无'}，"
+                f"提取文本：{_semantic_escape(extraction.get('text_path')) or '无'}，{_semantic_escape(readable_text)}。"
+            )
     lines.extend(["", "最近数据日志："])
     _append_semantic_log_lines(lines, data_logs)
     lines.extend(["", "最近流程日志："])
@@ -14227,7 +15243,6 @@ def _build_record_list_lookup_payload(
     query: str | None,
     items: list[JSONObject],
     pagination: JSONObject,
-    limit: int,
 ) -> JSONObject | None:
     if not query:
         return None
@@ -14236,17 +15251,7 @@ def _build_record_list_lookup_payload(
     if returned_items is None:
         returned_items = len(items)
     truncated = bool(reported_total is not None and reported_total > returned_items)
-    scored: list[tuple[int, int, JSONObject]] = []
-    for index, item in enumerate(items):
-        candidate = _record_list_candidate_payload(item, query=query)
-        score = _coerce_count(candidate.get("score")) or 0
-        if score <= 0:
-            candidate["score"] = 40
-            candidate["match_reason"] = "backend_match_without_selected_field_evidence"
-        scored.append((int(candidate["score"]), index, candidate))
-    scored.sort(key=lambda entry: (-entry[0], entry[1]))
-    candidates = [entry[2] for entry in scored[: min(limit, LOOKUP_CONFIRMATION_CANDIDATE_LIMIT)]]
-    confidence = _record_list_lookup_confidence(candidates, truncated=truncated)
+    confidence = _record_list_lookup_confidence(returned_items=returned_items, reported_total=reported_total, truncated=truncated)
     next_action = {
         "single_high": "record_get",
         "multiple": "ask_user",
@@ -14256,140 +15261,25 @@ def _build_record_list_lookup_payload(
     return {
         "mode": "candidate_locator",
         "query": query,
-        "reported_total": reported_total,
-        "returned_candidates": len(candidates),
+        "total_count": reported_total,
+        "returned_count": returned_items,
+        "truncated": truncated,
         "confidence": confidence,
         "next_action": next_action,
-        "candidates": candidates,
     }
 
 
-def _record_list_lookup_confidence(candidates: list[JSONObject], *, truncated: bool) -> str:
-    if not candidates:
+def _record_list_lookup_confidence(*, returned_items: int, reported_total: int | None, truncated: bool) -> str:
+    if returned_items <= 0:
         return "none"
     if truncated:
         return "truncated"
-    if len(candidates) == 1:
-        return "single_high"
-    top = _coerce_count(candidates[0].get("score")) or 0
-    second = _coerce_count(candidates[1].get("score")) or 0
-    if top >= 90 and (top - second) >= 10:
+    effective_total = reported_total if reported_total is not None else returned_items
+    if effective_total == 1:
         return "single_high"
     return "multiple"
 
 
-def _record_list_candidate_payload(item: JSONObject, *, query: str) -> JSONObject:
-    query_norm = _normalize_lookup_query_text(query)
-    matched_fields: list[JSONObject] = []
-    best_score = 0
-    for key, value in item.items():
-        if key in {"normalized_record", "normalized_ambiguous_fields"}:
-            continue
-        value_text = _record_list_value_text(value)
-        if not value_text:
-            continue
-        score, match_type = _record_list_field_match_score(key, value_text, query_norm)
-        if score <= 0:
-            continue
-        best_score = max(best_score, score)
-        matched_fields.append(
-            {
-                "title": key,
-                "value": _truncate_text(value_text, 120),
-                "match_type": match_type,
-                "score": score,
-            }
-        )
-    if matched_fields:
-        best_score = min(100, best_score + min(10, (len(matched_fields) - 1) * 3))
-    record_id = _normalize_optional_text(item.get("record_id")) or _normalize_optional_text(item.get("apply_id"))
-    display_fields = _record_list_display_fields(item)
-    return {
-        "record_id": record_id,
-        "title": _record_list_candidate_title(item) or record_id,
-        "score": best_score,
-        "matched_fields": sorted(matched_fields, key=lambda entry: int(entry.get("score") or 0), reverse=True)[:6],
-        "display_fields": display_fields,
-    }
-
-
-def _record_list_field_match_score(field_title: str, value_text: str, query_norm: str) -> tuple[int, str]:
-    if not query_norm:
-        return 0, "none"
-    value_norm = _normalize_lookup_query_text(value_text)
-    if not value_norm:
-        return 0, "none"
-    title_norm = _normalize_lookup_query_text(field_title)
-    title_like = _record_list_title_like(field_title)
-    id_like = field_title in {"record_id", "apply_id"} or "编号" in field_title or "id" == title_norm
-    if value_norm == query_norm:
-        if id_like:
-            return 100, "exact_identifier"
-        if title_like:
-            return 96, "exact_title"
-        return 86, "exact"
-    if query_norm in value_norm:
-        if id_like:
-            return 92, "contains_identifier"
-        if title_like:
-            return 88, "contains_title"
-        return 68, "contains"
-    if title_like and value_norm in query_norm and len(value_norm) >= 2:
-        return 72, "reverse_contains_title"
-    return 0, "none"
-
-
-def _record_list_candidate_title(item: JSONObject) -> str | None:
-    for key, value in item.items():
-        if key in {"record_id", "apply_id"}:
-            continue
-        if _record_list_title_like(key):
-            text = _record_list_value_text(value)
-            if text:
-                return _truncate_text(text, 80)
-    for key, value in item.items():
-        if key in {"record_id", "apply_id", "normalized_record", "normalized_ambiguous_fields"}:
-            continue
-        text = _record_list_value_text(value)
-        if text:
-            return _truncate_text(text, 80)
-    return None
-
-
-def _record_list_display_fields(item: JSONObject) -> list[JSONObject]:
-    display: list[JSONObject] = []
-    for key, value in item.items():
-        if key in {"record_id", "apply_id", "normalized_record", "normalized_ambiguous_fields"}:
-            continue
-        text = _record_list_value_text(value)
-        if not text:
-            continue
-        display.append({"title": key, "value": _truncate_text(text, 120)})
-        if len(display) >= 6:
-            break
-    return display
-
-
-def _record_list_title_like(field_title: str) -> bool:
-    lowered = field_title.lower()
-    return any(
-        token in field_title or token in lowered
-        for token in ("标题", "名称", "名字", "客户", "公司", "项目", "商机", "线索", "主题", "编号", "name", "title", "customer", "company")
-    )
-
-
-def _record_list_value_text(value: JSONValue) -> str:
-    if value is None:
-        return ""
-    if isinstance(value, str):
-        return value.strip()
-    return _stringify_json(value).strip()
-
-
-def _normalize_lookup_query_text(value: str) -> str:
-    return re.sub(r"\s+", "", value).lower()
-
-
 def _truncate_text(value: str, limit: int) -> str:
     if len(value) <= limit:
         return value