fix: keep approval batching internal

test/server-instructions.test.ts

@@ -43,7 +43,8 @@ test("MCP initialization teaches the workflow while tools/list stays compact", a
     assert.match(client.getInstructions() ?? "", /非必填字段.*是否补充/s);
     assert.match(client.getInstructions() ?? "", /出差申请.*外出.*业务招待申请.*差旅费用报销.*业务招待费用报销/s);
     assert.match(client.getInstructions() ?? "", /revokeId.*approval_revoke_submission/);
-    assert.match(client.getInstructions() ?? "", /最多(?:处理 )?20 条.*零写入.*禁止自动.*重试/s);
+    assert.match(client.getInstructions() ?? "", /单次条数限制.*内部调用细节.*绝不向用户.*一键全选.*如何分组/s);
+    assert.match(client.getInstructions() ?? "", /用户只是在查看.*业务信息.*不主动讨论.*自动分批.*不得造成重复确认/s);
     assert.match(client.getInstructions() ?? "", /近30天.*allowDuplicateInvoices=true/s);
 
     const tools = await client.listTools();
@@ -73,7 +74,7 @@ test("MCP initialization teaches the workflow while tools/list stays compact", a
     assert.match(historySchema.properties.startDate.description, /最近30天/);
     assert.match(descriptions.approval_process_batch ?? "", /用户明确.*不二次确认/);
     assert.match(descriptions.approval_process_batch ?? "", /succeeded.*completed.*followUpRequired/);
-    assert.match(descriptions.approval_process_batch ?? "", /最多 20 条.*任一无效.*零写入/s);
+    assert.match(descriptions.approval_process_batch ?? "", /Schema容量.*不得转述给用户.*任一无效.*零写入/s);
     assert.match(descriptions.approval_prepare_submission ?? "", /明确确认|确认/);
     assert.match(descriptions.approval_get_submission_schema ?? "", /必填字段齐全.*可选字段/);
     assert.match(descriptions.approval_get_submission_options ?? "", /承担部门.*城市编码/);