feat: expose user-readable expense types

test/bridge.test.ts

@@ -248,6 +248,7 @@ test("MCP approval_login returns both portable text and a standard resource link
     assert.match(instructions, /登录链接过期.*approval_login.*绝不.*重新安装/);
     assert.match(instructions, /审批引用.*调用容量.*内部分批.*不得向用户解释/);
     assert.match(instructions, /提单草稿仅可保存在 Agent 所在机器.*不得上传网关.*实时模板 Schema/s);
+    assert.match(instructions, /kind=expense_type.*只向用户展示label.*内部使用code.*绝不索取或展示内部费用编码/s);
     assert.doesNotMatch(instructions, /最多.*20|selectionId|approvalId|targetId/);
     const history = tools.tools.find((tool) => tool.name === "approval_list_history")!;
     assert.equal((history.inputSchema as any).properties.startDate.default, "");
@@ -255,6 +256,9 @@ test("MCP approval_login returns both portable text and a standard resource link
     const batch = tools.tools.find((tool) => tool.name === "approval_process_batch")!;
     assert.equal((batch.inputSchema as any).properties.items.maxItems, 20);
     assert.match(batch.description ?? "", /Schema容量.*不向用户解释.*任一无效则零写入/s);
+    const options = tools.tools.find((tool) => tool.name === "approval_get_submission_options")!;
+    assert.deepEqual((options.inputSchema as any).properties.kind.enum, ["department", "city", "expense_type"]);
+    assert.match(options.description ?? "", /费用类型.*只向用户展示label.*code仅供内部提交/s);
   } finally {
     await client.close();
     await server.close();