@go-labs-sg/bb 2.44.0 → 2.45.1

package/README.md

@@ -508,6 +508,8 @@ Project and budget query payloads keep the Asana identities explicit: `asanaTask
 
 Bill, claim, and quotation mutations accept only suppliers whose approval status is `APPROVED`. An active supplier that is `PENDING_APPROVAL`, `REJECTED`, or `SUPERSEDED` must be approved before it can be used.
 
+Admin/Lead users can run `bb supplier approve <supplierId>` to directly re-approve a `REJECTED` supplier even when no pending approval request exists. This appends a new approval record and activity entry with the current responder/time, retains earlier approval and rejection history unchanged, and synchronizes QuickBooks; it does not send a requester reply email. Non-interactive direct re-approval requires `--allow-state-change --allow-external-write`, without `--allow-email`. An archived supplier remains archived and also needs Admin reactivation (`bb supplier reactivate --ids <supplierId>`) before new use. Reactivating alone does not change approval status. For a pending supplier, the command still resolves the current user's assigned request and queues the existing reply email.
+
 | Area | Legacy handler labels (reference only; non-exhaustive) |
 | --- | --- |
 | **Budgets** | `list-budgets` (full payload by default; `--summary` or `--includeDetails false` for slim list), `get-budget`, `get-budget-items`, `get-budget-details`, `get-budget-categories`, `get-budget-versions`, `rename-budget-version`, `restore-budget-version`, `update-budget-status` (`ESTIMATE_ACCEPTED` requires win proof, auto-marks `PITCH` or `LOST` projects `WON`, and auto-creates an Asana Event Ops section from Prompt 5 tasks when enabled; Prompt 5 skips quantity-zero items, combines matching non-GO-internal suppliers, keeps each GO internal item separate, removes generated work that repeats another line item or group, and schedules applicable subtasks relative to the project start date; `--projectStatusOnCommercialRejection PITCH\|LOST` is required when rejecting the only accepted/closed budget on a commercial project), `mark-budget-won` (`<budgetId>` + proof file path; `PITCH` or `LOST` projects become `WON` automatically), `create-budget` / `update-budget` (`--payload`; cloned unavailable lines require `unavailableItemReviewAcknowledged: true`), `delete-budget`, `create-budget-approval` (also sends approval request emails), `create-estimate`, `send-estimate-to-contact-person` (same contact-person email workflow as web), `add-budget-items`, `update-budget-item`, `replace-budget-item`, `approve-unavailable-item-exception` (Lead/Admin), `remove-budget-item`, `reorder-budget-items`, `update-budget-item-supplier`, `mark-budget-items-not-utilized`, `restore-budget-item`, `create-placeholder-bill` (admin recovery), `create-budget-category`, `update-budget-category`, `delete-budget-category`, `update-budget-commission`, `delete-budget-commission`, `update-budget-discount`, `delete-budget-discount` (`--payload` where noted), `upload-budget-attachment` (`<budgetId>` + local file path; uses `attachment.requestBudgetAttachmentUpload` + PUT + `attachment.confirmBudgetAttachment`) |

package/command-manifest.json

@@ -4795,7 +4795,7 @@
 	{
 		"path": ["supplier", "approve"],
 		"legacyAliases": ["approve-supplier", "approve_supplier"],
-		"summary": "Approve Supplier.",
+		"summary": "Approve a pending supplier request and send a requester reply email, or directly re-approve a rejected supplier as Admin/Lead without a pending request or email. QuickBooks is synchronized; archived suppliers remain archived. Argument: <supplierId>.",
 		"globalOptions": [
 			{
 				"name": "--help",

package/command-reference.md

@@ -833,7 +833,7 @@ Effects: state-change, email.
 
 ## `bb supplier approve`
 
-Approve Supplier.
+Approve a pending supplier request and send a requester reply email, or directly re-approve a rejected supplier as Admin/Lead without a pending request or email. QuickBooks is synchronized; archived suppliers remain archived. Argument: <supplierId>.
 
 Legacy aliases: `approve-supplier`, `approve_supplier`.
 

package/dist/index.js

@@ -35,46 +35,46 @@ var __toESM = (mod, isNodeMode, target) => {
 var __commonJS = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
 var __require = import.meta.require;
 
-// ../../../node_modules/.bun/dotenv@18.0.1/node_modules/dotenv/dist/index.cjs
+// ../../../node_modules/.bun/dotenv@18.0.5/node_modules/dotenv/dist/index.cjs
 var require_dist = __commonJS(function(exports, module) {
-  var O = (e, o) => () => {
+  var I = (e, o) => () => {
     try {
       return o || e((o = { exports: {} }).exports, o), o.exports;
     } catch (t) {
       throw o = 0, t;
     }
   };
-  var q = O((Ce, j) => {
-    function I(e) {
+  var S = I((xe, U) => {
+    function G(e) {
       return typeof e == "string" ? !["false", "0", "no", "off", ""].includes(e.toLowerCase()) : !!e;
     }
-    function B() {
-      let e = {};
-      for (let o of ["ENCODING", "PATH", "QUIET", "DEBUG", "OVERRIDE", "FAST"]) {
-        let t = process.env[`DOTENV_${o}`] != null ? process.env[`DOTENV_${o}`] : process.env[`DOTENV_CONFIG_${o}`];
-        t != null && (e[o.toLowerCase()] = o === "ENCODING" || o === "PATH" ? t : I(t));
+    function X(e = process.env) {
+      let o = {};
+      for (let t of ["ENCODING", "PATH", "QUIET", "DEBUG", "OVERRIDE", "FAST"]) {
+        let n = e[`DOTENV_${t}`] != null ? e[`DOTENV_${t}`] : e[`DOTENV_CONFIG_${t}`];
+        n != null && (o[t.toLowerCase()] = t === "ENCODING" || t === "PATH" ? n : G(n));
       }
-      return e;
+      return o;
     }
-    j.exports = { parseBoolean: I, optionsFromEnv: B };
+    U.exports = { parseBoolean: G, optionsFromEnv: X };
   });
-  var y = O((we, C) => {
-    var H = __require("fs"), x = __require("path"), L = __require("os"), { URL: M, fileURLToPath: W } = __require("url"), { parseBoolean: T, optionsFromEnv: Q } = q(), J = /(?:^|^)\s*(?:export\s+)?([\w.-]+)(?:\s*=\s*?|:\s+?)(\s*'(?:\\'|[^'])*'|\s*"(?:\\"|[^"])*"|\s*`(?:\\`|[^`])*`|[^#\r\n]+)?\s*(?:#.*)?(?:$|$)/mg, v = new Uint8Array(256);
+  var N = I((ye, x) => {
+    var Y = __require("fs"), j = __require("path"), z = __require("os"), { URL: Z, fileURLToPath: ee } = __require("url"), { parseBoolean: k, optionsFromEnv: B } = S(), te = /(?:^|^)\s*(?:export\s+)?([\w.-]+)(?:\s*=\s*?|:\s+?)(\s*'(?:\\'|[^'])*'|\s*"(?:\\"|[^"])*"|\s*`(?:\\`|[^`])*`|[^#\r\n]+)?\s*(?:#.*)?(?:$|$)/mg, b = new Uint8Array(256);
     for (let e = 48;e <= 57; e++)
-      v[e] = 1;
+      b[e] = 1;
     for (let e = 65;e <= 90; e++)
-      v[e] = 1;
+      b[e] = 1;
     for (let e = 97;e <= 122; e++)
-      v[e] = 1;
-    v[45] = 1;
-    v[46] = 1;
-    v[95] = 1;
-    function K(e) {
+      b[e] = 1;
+    b[45] = 1;
+    b[46] = 1;
+    b[95] = 1;
+    function re(e) {
       let o = {}, t = e.toString();
       t = t.replace(/\r\n?/mg, `
 `);
       let n;
-      for (;(n = J.exec(t)) != null; ) {
+      for (;(n = te.exec(t)) != null; ) {
         let r = n[1], s = n[2] || "";
         s = s.trim();
         let i = s[0];
@@ -83,192 +83,182 @@ var require_dist = __commonJS(function(exports, module) {
       }
       return o;
     }
-    function X(e) {
+    function w(e) {
+      return e <= 32 ? e === 32 || e >= 9 && e <= 13 : e >= 160 && (e === 160 || e === 5760 || e >= 8192 && e <= 8202 || e === 8232 || e === 8233 || e === 8239 || e === 8287 || e === 12288 || e === 65279);
+    }
+    function O(e) {
+      return e === 10 || e === 8232 || e === 8233;
+    }
+    function oe(e) {
       let o = {}, t = typeof e == "string" ? e : e.toString();
       t.indexOf("\r") !== -1 && (t = t.replace(/\r\n?/g, `
 `));
       let n = t.length, r = 0;
       for (;r < n; ) {
         let s = t.charCodeAt(r);
-        for (;r < n && (s === 32 || s === 9 || s === 10 || s === 65279); )
+        for (;r < n && w(s); )
           r++, s = t.charCodeAt(r);
         if (r >= n)
           break;
         if (s === 35) {
-          for (;r < n && t.charCodeAt(r) !== 10; )
+          for (;r < n && !O(t.charCodeAt(r)); )
             r++;
           continue;
         }
+        let i = -1;
         if (s === 101 && r + 6 < n && t.charCodeAt(r + 1) === 120 && t.charCodeAt(r + 2) === 112 && t.charCodeAt(r + 3) === 111 && t.charCodeAt(r + 4) === 114 && t.charCodeAt(r + 5) === 116) {
-          let f = t.charCodeAt(r + 6);
-          if (f === 32 || f === 9)
-            for (r += 7;r < n && ((s = t.charCodeAt(r)) === 32 || s === 9); )
-              r++;
-          else
+          let v = t.charCodeAt(r + 6);
+          if (w(v)) {
+            let u = r + 7;
+            for (;u < n && w(t.charCodeAt(u)); )
+              u++;
+            b[t.charCodeAt(u)] && (i = r + 6, r = u);
+          } else
             s = t.charCodeAt(r);
         }
-        let i = r, l = 0;
-        for (;r < n && (l = t.charCodeAt(r), v[l]); )
+        let l = r, d = 0;
+        for (;r < n && (d = t.charCodeAt(r), b[d]); )
           r++;
-        if (r === i) {
-          for (;r < n && t.charCodeAt(r) !== 10; )
+        if (r === l) {
+          for (;r < n && !O(t.charCodeAt(r)); )
             r++;
           continue;
         }
-        let h = t.slice(i, r);
-        if (r >= n && (l = 0), l === 32 || l === 9)
+        let p = t.slice(l, r), f = r;
+        if (r >= n && (d = 0), w(d))
           do
-            r++, l = r < n ? t.charCodeAt(r) : 0;
-          while (l === 32 || l === 9);
-        if (l === 61)
-          r++;
-        else if (l === 58 && r + 1 < n && (t.charCodeAt(r + 1) === 32 || t.charCodeAt(r + 1) === 9))
+            r++, d = r < n ? t.charCodeAt(r) : 0;
+          while (w(d));
+        if (d === 61)
           r++;
+        else if (d === 58 && r === f && r + 1 < n && w(t.charCodeAt(r + 1)))
+          r += 2;
         else {
-          for (;r < n && t.charCodeAt(r) !== 10; )
+          for (r = i === -1 ? f : i;r < n && !O(t.charCodeAt(r)); )
             r++;
           continue;
         }
-        for (;r < n && ((s = t.charCodeAt(r)) === 32 || s === 9); )
-          r++;
-        let u;
-        if (s = r < n ? t.charCodeAt(r) : 0, s === 39 || s === 34 || s === 96) {
-          let f = s, c = r + 1, a = c;
-          for (;a < n; ) {
-            let d = t.charCodeAt(a);
-            if (d === 92 && a + 1 < n) {
-              let p = t.charCodeAt(a + 1);
-              if (p === f || p === 92) {
-                a += 2;
-                continue;
-              }
-            }
-            if (d === f)
+        let c = r, a = r;
+        for (;a < n && w(t.charCodeAt(a)); )
+          a++;
+        let g = t.charCodeAt(a), h, y = false;
+        if (g === 39 || g === 34 || g === 96) {
+          let v = t[a], u = t.indexOf(v, a + 1), m = -1, C = -1;
+          for (;u !== -1; ) {
+            let q = t.charCodeAt(u - 1) === 92, E = u + 1;
+            for (;E < n && !O(t.charCodeAt(E)) && w(t.charCodeAt(E)); )
+              E++;
+            if ((E === n || O(t.charCodeAt(E)) || t.charCodeAt(E) === 35) && (m = u, C = E), !q)
               break;
-            a++;
+            u = t.indexOf(v, u + 1);
           }
-          if (a >= n) {
-            let d = r, p = r;
-            for (;p < n; ) {
-              let w = t.charCodeAt(p);
-              if (w === 35 || w === 10)
-                break;
-              p++;
-            }
-            let m = p;
-            for (;m > d; ) {
-              let w = t.charCodeAt(m - 1);
-              if (w === 32 || w === 9)
-                m--;
-              else
-                break;
-            }
-            if (u = t.slice(d, m), r = p, r < n && t.charCodeAt(r) === 35)
-              for (;r < n && t.charCodeAt(r) !== 10; )
-                r++;
-          } else {
-            for (u = t.slice(c, a), r = a + 1, f === 34 && u.indexOf("\\") !== -1 && (u = u.replace(/\\n/g, `
-`).replace(/\\r/g, "\r"));r < n && ((s = t.charCodeAt(r)) === 32 || s === 9); )
-              r++;
-            if (r < n && t.charCodeAt(r) === 35)
-              for (;r < n && t.charCodeAt(r) !== 10; )
+          if (m !== -1) {
+            if (h = t.slice(a + 1, m), r = C, t.charCodeAt(r) === 35)
+              for (;r < n && !O(t.charCodeAt(r)); )
                 r++;
+            y = true;
           }
-        } else {
-          let f = r, c = t.indexOf(`
-`, r);
-          c === -1 && (c = n);
-          let a = t.indexOf("#", r);
-          (a === -1 || a > c) && (a = c);
-          let d = a;
-          for (;d > f; ) {
-            let p = t.charCodeAt(d - 1);
-            if (p === 32 || p === 9)
-              d--;
-            else
-              break;
-          }
-          u = f === d ? "" : t.slice(f, d), r = a === c ? a : c;
         }
-        o[h] = u;
+        if (!y) {
+          let v = t.indexOf(`
+`, c);
+          v === -1 && (v = n);
+          let u;
+          if (n < 4096)
+            u = t.indexOf("#", c), (u === -1 || u > v) && (u = v);
+          else
+            for (u = c;u < v && t.charCodeAt(u) !== 35; )
+              u++;
+          let m = c, C = u;
+          for (;m < C && w(t.charCodeAt(m)); )
+            m++;
+          for (;C > m && w(t.charCodeAt(C - 1)); )
+            C--;
+          let q = t.charCodeAt(m);
+          if (C - m >= 2 && (q === 39 || q === 34 || q === 96) && t.charCodeAt(C - 1) === q ? h = t.slice(m + 1, C - 1) : h = t.slice(m, C), r = u, u < v)
+            for (;r < n && !O(t.charCodeAt(r)); )
+              r++;
+        }
+        g === 34 && (y || a < r) && h.indexOf("\\") !== -1 && (h = h.replace(/\\n/g, `
+`).replace(/\\r/g, "\r")), o[p] = h;
       }
       return o;
     }
-    function Y(e, o) {
-      return o && T(o.fast) ? X(e) : K(e);
+    function ne(e, o) {
+      return o && k(o.fast) ? oe(e) : re(e);
     }
-    function b(e) {
+    function T(e) {
       console.log(`\u2506 ${e}`);
     }
-    function z(e) {
+    function se(e) {
       console.error(`\u25C7 ${e}`);
     }
-    function N(e) {
-      return e[0] === "~" ? x.join(L.homedir(), e.slice(1)) : e;
+    function V(e) {
+      return e[0] === "~" ? j.join(z.homedir(), e.slice(1)) : e;
     }
-    function Z(e = {}) {
-      return { ...Q(), ...e };
+    function ie(e = {}) {
+      return { ...B(), ...e };
     }
-    function ee(e) {
-      e = Z(e);
-      let o = x.resolve(process.cwd(), ".env"), t = "utf8", n = process.env;
+    function ce(e) {
+      e = ie(e);
+      let o = j.resolve(process.cwd(), ".env"), t = "utf8", n = process.env;
       e && e.processEnv != null && (n = e.processEnv);
-      let r = T(e && e.debug), s = T(e && e.quiet);
-      e && e.encoding ? t = e.encoding : r && b("no encoding is specified (UTF-8 is used by default)");
-      let i = [o];
+      let r = k(e && e.debug);
+      e && e.encoding ? t = e.encoding : r && T("no encoding is specified (UTF-8 is used by default)");
+      let s = [o];
       if (e && e.path)
         if (!Array.isArray(e.path))
-          i = [N(e.path)];
+          s = [V(e.path)];
         else {
-          i = [];
+          s = [];
           for (let c of e.path)
-            i.push(N(c));
+            s.push(V(c));
         }
-      let l, h = {}, u = { fast: e.fast };
-      for (let c of i)
+      let i, l = {}, d = { fast: e.fast };
+      for (let c of s)
         try {
-          let a = g.parse(H.readFileSync(c, { encoding: t }), u);
-          g.populate(h, a, e);
+          let a = A.parse(Y.readFileSync(c, { encoding: t }), d);
+          A.populate(l, a, e);
         } catch (a) {
-          r && b(`failed to load ${c} ${a.message}`), l = a;
+          r && T(`failed to load ${c} ${a.message}`), i = a;
         }
-      let f = g.populate(n, h, e);
-      if (r || !s) {
-        let c = Object.keys(f).length, a = [];
-        for (let d of i)
+      let p = A.populate(n, l, e), f = k(Object.prototype.hasOwnProperty.call(e, "quiet") ? e.quiet : B(n).quiet);
+      if (r || !f) {
+        let c = Object.keys(p).length, a = [];
+        for (let g of s)
           try {
-            let p = x.relative(process.cwd(), d instanceof M ? W(d) : d);
-            a.push(p);
-          } catch (p) {
-            r && b(`failed to load ${d} ${p.message}`), l = p;
+            let h = j.relative(process.cwd(), g instanceof Z ? ee(g) : g);
+            a.push(h);
+          } catch (h) {
+            r && T(`failed to load ${g} ${h.message}`), i = h;
           }
-        z(`injected env (${c}) from ${a.join(",")}`);
+        se(`injected env (${c}) from ${a.join(",")}`);
       }
-      return l ? { parsed: h, error: l } : { parsed: h };
+      return i ? { parsed: l, error: i } : { parsed: l };
     }
-    function te(e) {
-      return g.configDotenv(e);
+    function ae(e) {
+      return A.configDotenv(e);
     }
-    function re(e, o, t = {}) {
+    function le(e, o, t = {}) {
       let n = !!(t && t.debug), r = !!(t && t.override), s = {};
       if (e === null || typeof e != "object" || o === null || typeof o != "object") {
         let i = new Error("OBJECT_REQUIRED: Please check the processEnv argument being passed to populate");
         throw i.code = "OBJECT_REQUIRED", i;
       }
       for (let i of Object.keys(o))
-        Object.prototype.hasOwnProperty.call(e, i) ? (r === true && (e[i] = o[i], s[i] = o[i]), n && b(r === true ? `"${i}" is already defined and WAS overwritten` : `"${i}" is already defined and was NOT overwritten`)) : (e[i] = o[i], s[i] = o[i]);
+        Object.prototype.hasOwnProperty.call(e, i) ? (r === true && (e[i] = o[i], s[i] = o[i]), n && T(r === true ? `"${i}" is already defined and WAS overwritten` : `"${i}" is already defined and was NOT overwritten`)) : (e[i] = o[i], s[i] = o[i]);
       return s;
     }
-    var g = { configDotenv: ee, config: te, parse: Y, populate: re };
-    C.exports.configDotenv = g.configDotenv;
-    C.exports.config = g.config;
-    C.exports.parse = g.parse;
-    C.exports.populate = g.populate;
-    C.exports = g;
+    var A = { configDotenv: ce, config: ae, parse: ne, populate: le };
+    x.exports.configDotenv = A.configDotenv;
+    x.exports.config = A.config;
+    x.exports.parse = A.parse;
+    x.exports.populate = A.populate;
+    x.exports = A;
   });
-  var F = O((be, R) => {
-    var $ = __require("child_process"), oe = __require("fs"), P = __require("path");
-    function ne(e) {
+  var M = I((Te, W) => {
+    var _ = __require("child_process"), fe = __require("fs"), L = __require("path");
+    function ue(e) {
       let o = ['"'], t = 0;
       for (let n of e) {
         if (n === "\\") {
@@ -279,7 +269,7 @@ var require_dist = __commonJS(function(exports, module) {
       }
       return o.push("\\".repeat(t * 2), '"'), o.join("");
     }
-    function _(e, o = 1) {
+    function H(e, o = 1) {
       for (let t = 0;t < o; t++) {
         let n = [];
         for (let r of e) {
@@ -290,47 +280,47 @@ var require_dist = __commonJS(function(exports, module) {
       }
       return e;
     }
-    function D(e, o) {
+    function P(e, o) {
       let t = Object.keys(e).reverse().find((n) => n.toUpperCase() === o);
       return t === undefined ? undefined : e[t];
     }
-    function se(e, o, t) {
-      let n = (D(o, "PATHEXT") || ".COM;.EXE;.BAT;.CMD").split(";").filter(Boolean), s = n.some((l) => e.toLowerCase().endsWith(l.toLowerCase())) ? ["", ...n] : [...n, ""], i = /[\\/]/.test(e) ? [t] : [t, ...(D(o, "PATH") || "").split(";")];
+    function de(e, o, t) {
+      let n = (P(o, "PATHEXT") || ".COM;.EXE;.BAT;.CMD").split(";").filter(Boolean), s = n.some((l) => e.toLowerCase().endsWith(l.toLowerCase())) ? ["", ...n] : [...n, ""], i = /[\\/]/.test(e) ? [t] : [t, ...(P(o, "PATH") || "").split(";")];
       for (let l of i)
-        for (let h of s) {
-          let u = P.resolve(t, l.replace(/^"|"$/g, ""), e + h);
+        for (let d of s) {
+          let p = L.resolve(t, l.replace(/^"|"$/g, ""), e + d);
           try {
-            if (oe.statSync(u).isFile())
-              return u;
+            if (fe.statSync(p).isFile())
+              return p;
           } catch {}
         }
     }
-    function ie(e, o, t) {
+    function pe(e, o, t) {
       if (process.platform !== "win32")
-        return $.spawn(e, o, t);
-      let n = t.env || process.env, r = se(e, n, t.cwd || process.cwd());
+        return _.spawn(e, o, t);
+      let n = t.env || process.env, r = de(e, n, t.cwd || process.cwd());
       if (r && /\.(?:exe|com)$/i.test(r))
-        return $.spawn(r, o, t);
-      let s = /\.(?:bat|cmd)$/i.test(r || e), i = [_(P.normalize(r || e))];
-      for (let h of o)
-        i.push(_(ne(h), s ? 2 : 1));
+        return _.spawn(r, o, t);
+      let s = /\.(?:bat|cmd)$/i.test(r || e), i = [H(L.normalize(r || e))];
+      for (let d of o)
+        i.push(H(ue(d), s ? 2 : 1));
       let l = i.join(" ");
-      return $.spawn(D(n, "COMSPEC") || "cmd.exe", ["/d", "/v:off", "/s", "/c", `"${l}"`], { ...t, windowsVerbatimArguments: true });
+      return _.spawn(P(n, "COMSPEC") || "cmd.exe", ["/d", "/v:off", "/s", "/c", `"${l}"`], { ...t, windowsVerbatimArguments: true });
     }
-    R.exports = ie;
+    W.exports = pe;
   });
-  var V = O((Ae, S) => {
-    var ce = __require("fs"), ae = __require("os"), G = __require("path"), le = __require("child_process"), fe = F(), k = y(), { optionsFromEnv: ue } = q();
-    function A() {
+  var K = I(($e, F) => {
+    var he = __require("fs"), ge = __require("os"), Q = __require("path"), me = __require("child_process"), ve = M(), R = N(), { optionsFromEnv: Ce } = S();
+    function $() {
       console.log(["Usage: dotenv run [--help] [-q|--quiet] [--debug] [--override] [--fast] [-f|--file <paths>] [--] <command> [args...]", "", "Run a command with environment variables from a .env file.", "Place dotenv options before the command; all following arguments go to the command.", "", "Options:", "  -f, --file <paths>  .env paths, comma-separated or repeated (default: .env)", "  -q, --quiet suppress the injected env message", "  --debug     enable debug logging", "  --override  override existing environment variables", "  --fast      use the faster character-scanner parser", "", "Environment variables (DOTENV_CONFIG_* names remain as fallbacks):", "  DOTENV_PATH, DOTENV_ENCODING, DOTENV_QUIET,", "  DOTENV_DEBUG, DOTENV_OVERRIDE,", "  DOTENV_FAST"].join(`
 `));
     }
-    function de(e) {
+    function we(e) {
       let o = [], t = false, n, r, s, i, l = -1;
-      for (let u = 0;u < e.length; u++) {
-        let f = e[u];
+      for (let p = 0;p < e.length; p++) {
+        let f = e[p];
         if (f === "--") {
-          l = u + 1;
+          l = p + 1;
           break;
         }
         if (f === "--help" || f === "-h")
@@ -352,70 +342,70 @@ var require_dist = __commonJS(function(exports, module) {
           continue;
         }
         if (f === "-f" || f === "--file" || f.startsWith("-f=") || f.startsWith("--file=")) {
-          let c = f.indexOf("="), a = c === -1 ? f : f.slice(0, c), d = c === -1 ? e[++u] : f.slice(c + 1);
-          if (!d || d === "--")
+          let c = f.indexOf("="), a = c === -1 ? f : f.slice(0, c), g = c === -1 ? e[++p] : f.slice(c + 1);
+          if (!g || g === "--")
             return { error: `${a} requires a path` };
-          let p = d.split(",").map((m) => m.trim()).filter(Boolean);
-          if (p.length === 0)
+          let h = g.split(",").map((y) => y.trim()).filter(Boolean);
+          if (h.length === 0)
             return { error: `${a} requires a path` };
-          o.push(...p), t = true;
+          o.push(...h), t = true;
           continue;
         }
         if (f.startsWith("-"))
           return { error: `unknown option: ${f}` };
-        l = u;
+        l = p;
         break;
       }
-      let h = l === -1 ? [] : e.slice(l);
-      return { paths: o, pathSet: t, quiet: n, debug: r, override: s, fast: i, command: h };
+      let d = l === -1 ? [] : e.slice(l);
+      return { paths: o, pathSet: t, quiet: n, debug: r, override: s, fast: i, command: d };
     }
-    function pe(e) {
-      return e[0] === "~" ? G.join(ae.homedir(), e.slice(1)) : e;
+    function Ae(e) {
+      return e[0] === "~" ? Q.join(ge.homedir(), e.slice(1)) : e;
     }
-    function he(e) {
-      let o = ue(), t = { encoding: o.encoding || "utf8", quiet: o.quiet === true, debug: o.debug === true, override: o.override === true, fast: o.fast === true, paths: [".env"], defaultPath: true };
+    function Ee(e) {
+      let o = Ce(), t = { encoding: o.encoding || "utf8", quiet: o.quiet === true, debug: o.debug === true, override: o.override === true, fast: o.fast === true, paths: [".env"], defaultPath: true };
       return o.path != null && (t.paths = [o.path], t.defaultPath = false), e.pathSet && (t.paths = e.paths, t.defaultPath = false), e.quiet != null && (t.quiet = e.quiet), e.debug != null && (t.debug = e.debug), e.override != null && (t.override = e.override), e.fast != null && (t.fast = e.fast), t;
     }
-    function ge(e) {
+    function be(e) {
       let o = {}, t = [], n = { override: e.override, debug: e.debug };
       for (let s of e.paths) {
-        let i = G.resolve(process.cwd(), pe(s));
+        let i = Q.resolve(process.cwd(), Ae(s));
         try {
-          let l = k.parse(ce.readFileSync(i, { encoding: e.encoding }), { fast: e.fast });
-          k.populate(o, l, n), t.push(s);
+          let l = R.parse(he.readFileSync(i, { encoding: e.encoding }), { fast: e.fast });
+          R.populate(o, l, n), t.push(s);
         } catch (l) {
           if (e.debug && console.log(`\u2506 failed to load ${s} ${l.message}`), !(e.defaultPath && l.code === "ENOENT"))
             throw l;
         }
       }
-      return { injected: k.populate(process.env, o, n), loadedPaths: t };
+      return { injected: R.populate(process.env, o, n), loadedPaths: t };
     }
-    function U(e) {
+    function J(e) {
       let o = e[0];
       if (o === "--help" || o === "-h") {
-        A();
+        $();
         return;
       }
       if (o !== "run") {
-        A(), process.exitCode = 1;
+        $(), process.exitCode = 1;
         return;
       }
-      let t = de(e.slice(1));
+      let t = we(e.slice(1));
       if (t.help) {
-        A();
+        $();
         return;
       }
       if (t.error) {
-        console.error(`dotenv: ${t.error}`), A(), process.exitCode = 1;
+        console.error(`dotenv: ${t.error}`), $(), process.exitCode = 1;
         return;
       }
       if (t.command.length === 0) {
-        A(), process.exitCode = 1;
+        $(), process.exitCode = 1;
         return;
       }
-      let n = he(t);
+      let n = Ee(t);
       try {
-        let c = ge(n);
+        let c = be(n);
         if (!n.quiet) {
           let a = `\u25C7 injected env (${Object.keys(c.injected).length})`;
           c.loadedPaths.length > 0 && (a += ` from ${c.loadedPaths.join(", ")}`), console.error(a);
@@ -424,11 +414,11 @@ var require_dist = __commonJS(function(exports, module) {
         console.error(`dotenv: ${c.message}`), process.exitCode = 1;
         return;
       }
-      let r = !!process.stdin.isTTY, s = process.platform !== "win32" && !r, i = fe(t.command[0], t.command.slice(1), { stdio: "inherit", detached: s }), l = new Map, h = 0;
-      function u(c) {
+      let r = !!process.stdin.isTTY, s = process.platform !== "win32" && !r, i = ve(t.command[0], t.command.slice(1), { stdio: "inherit", detached: s }), l = new Map, d = 0;
+      function p(c) {
         if (!(!i.pid || i.exitCode !== null || i.signalCode !== null)) {
           if (process.platform === "win32") {
-            le.spawnSync("taskkill", ["/pid", String(i.pid), "/T", "/F"], { stdio: "ignore" });
+            me.spawnSync("taskkill", ["/pid", String(i.pid), "/T", "/F"], { stdio: "ignore" });
             return;
           }
           try {
@@ -446,14 +436,14 @@ var require_dist = __commonJS(function(exports, module) {
       for (let c of ["SIGINT", "SIGTERM", "SIGHUP", "SIGQUIT"]) {
         let a = () => {
           if (c === "SIGINT") {
-            if (h++, r && process.platform !== "win32" && h === 1)
+            if (d++, r && process.platform !== "win32" && d === 1)
               return;
-            if (h > 1) {
-              u(h === 2 ? "SIGTERM" : "SIGKILL");
+            if (d > 1) {
+              p(d === 2 ? "SIGTERM" : "SIGKILL");
               return;
             }
           }
-          u(c);
+          p(c);
         };
         l.set(c, a), process.on(c, a);
       }
@@ -463,16 +453,16 @@ var require_dist = __commonJS(function(exports, module) {
         f(), typeof c == "number" ? process.exit(c) : (setInterval(() => {}, 1000), process.kill(process.pid, a));
       });
     }
-    S.exports = U;
-    S === __require.main && U(process.argv.slice(2));
+    F.exports = J;
+    F === __require.main && J(process.argv.slice(2));
   });
-  var E = y();
-  var ve = V();
-  module.exports = E;
-  module.exports.config = E.config;
-  module.exports.configDotenv = E.configDotenv;
-  module.exports.parse = E.parse;
-  module.exports.populate = E.populate;
+  var D = N();
+  var Oe = K();
+  module.exports = D;
+  module.exports.config = D.config;
+  module.exports.configDotenv = D.configDotenv;
+  module.exports.parse = D.parse;
+  module.exports.populate = D.populate;
 });
 
 // src/load-env.ts
@@ -8504,7 +8494,8 @@ var assertSensitiveWorkflowConfirmed = async (input) => {
     await confirmCurrentCommand({
       action: input.action,
       target: input.entity,
-      details: input.details
+      details: input.details,
+      effects: input.effects
     });
     return;
   }
@@ -9953,6 +9944,17 @@ async function getSupplierDetails(supplierId) {
   });
 }
 async function approveSupplier(supplierId) {
+  const supplier = await api2.supplier.getSupplierById.query({ id: supplierId });
+  if (supplier.status === ExtendedApprovalStatus.REJECTED) {
+    await assertSensitiveWorkflowConfirmed({
+      action: "Re-approve supplier",
+      entity: `supplier ${supplierId}`,
+      effects: ["state-change", "external-write"],
+      details: supplier.active ? "and sync its details with QuickBooks; append a new approval and retain earlier history; no requester reply email is sent" : "and sync its details with QuickBooks; append a new approval and retain earlier history; it remains archived and no requester reply email is sent"
+    });
+    out(await api2.supplier.reapproveSupplier.mutate({ supplierId }));
+    return;
+  }
   await assertSensitiveWorkflowConfirmed({
     action: "Approve supplier",
     entity: `supplier ${supplierId}`,
@@ -10894,6 +10896,8 @@ var effectsFor = (legacyTarget) => {
 };
 var titleCase = (value) => value.split("-").map((word) => `${word.slice(0, 1).toUpperCase()}${word.slice(1)}`).join(" ");
 var summaryFor = (legacyTarget) => {
+  if (legacyTarget === "approve-supplier")
+    return "Approve a pending supplier request and send a requester reply email, or directly re-approve a rejected supplier as Admin/Lead without a pending request or email. QuickBooks is synchronized; archived suppliers remain archived. Argument: <supplierId>.";
   if (legacyTarget === "search-existing-companies")
     return "Search BB and QuickBooks companies without writes. --query <name> [--page <number>].";
   if (legacyTarget === "use-existing-company")
@@ -11823,7 +11827,7 @@ Approvals
   reject-bill <billId> --reason <text> (also sends requester reply email)
   approve-budget <budgetId>           (also sends requester reply email)
   reject-budget <budgetId> --reason <text> (also sends requester reply email)
-  approve-supplier <supplierId>       (also sends requester reply email)
+  approve-supplier <supplierId>       (approve a pending request, or Admin/Lead re-approve a rejected supplier)
   reject-supplier <supplierId> --reason <text> (also sends requester reply email)
 
 Companies & projects
@@ -12258,7 +12262,7 @@ Waiting for approval\u2026
       }
       configureAccessToken(accessToken);
     }
-    if (!resolvedCommand.isLegacyAlias && cmd !== "create-bill" && cmd !== "import-qbo-customer-invoice" && resolvedCommand.command.effects.length > 0) {
+    if (!resolvedCommand.isLegacyAlias && cmd !== "create-bill" && cmd !== "import-qbo-customer-invoice" && cmd !== "approve-supplier" && resolvedCommand.command.effects.length > 0) {
       await confirmCurrentCommand({
         action: resolvedCommand.command.path.join(" "),
         target: commandConfirmationTarget(resolvedCommand),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@go-labs-sg/bb",
-  "version": "2.44.0",
+  "version": "2.45.1",
   "description": "Budget Builder CLI for AI agents — manage budgets, bills, claims, quotations, and customer invoices with explicit workflow previews for sensitive changes.",
   "type": "module",
   "main": "./dist/index.js",

package/role-aware-agent-guide.md

@@ -25,7 +25,7 @@ The Budget Builder API, not the CLI, makes the final decision. A request may nee
 2. A sufficient current database role: `USER`, `INSIDE_SALES`, `LEAD`, `ACCOUNTING_TEAM`, or `ADMIN`. Pending approval assignment does not preserve decision authority after a role change.
 3. Access to the specific resource, commonly through creator ownership or project assignment as Business Development, Inside Sales, or Project Manager.
 4. A compatible resource state, such as a bill being `DRAFT` or `REJECTED` before editing.
-5. A pending approval record assigned to the current user for approval decisions.
+5. A pending approval record assigned to the current user for request decisions. Direct Admin/Lead re-approval of a rejected supplier does not require a pending request.
 6. Required evidence and consistent related records, such as payment proof, approved quotation coverage, or matching project/budget IDs.
 
 Therefore, two users with the same role can receive different results for the same command and different resource IDs.
@@ -95,7 +95,8 @@ This table highlights the role-sensitive command groups an agent is most likely
 | `bb project hub status`, `bb project hub setup`, and `bb project hub sync` | `ADMIN`, project creator, or project assignment as Business Development, Inside Sales, or Project Manager. Setup and sync also enforce Project Hub lifecycle/readiness checks. |
 | `bb supplier update`, `bb item update`, `bb item category update` | Any active authenticated role. Normal-user supplier edits are submitted for approval by the shared API; item/category edits apply immediately. Human review and provider synchronization can temporarily block further supplier edits/new usage. |
 | Edit/delete a bill or quotation | Usually creator or `ADMIN`, with a supported status. |
-| `bb budget approve`, `bb budget reject`, `bb supplier approve`, and `bb supplier reject` | Current user must be the pending approver and currently have role `LEAD` or `ADMIN`. |
+| `bb budget approve`, `bb budget reject`, and `bb supplier reject` | Current user must be the pending approver and currently have role `LEAD` or `ADMIN`. |
+| `bb supplier approve` | `LEAD` or `ADMIN`. Pending suppliers require an assigned pending request; rejected suppliers can be directly re-approved without one. Re-approval preserves archive state and does not send a requester email. |
 | `bb bill approve` and `bb bill reject` | Current user must be the pending approver and currently have role `ACCOUNTING_TEAM` for the finance/check stage or `ADMIN` for the final approval stage. |
 | `bb quotation approve` and `bb quotation reject` | Current user must be the pending approver and currently have role `ADMIN`; a normal submitter cannot decide the quotation. |
 | `bb bill status update ... CHECKED` | `ACCOUNTING_TEAM` or `ADMIN`. |