punchout-simulator 0.3.0 → 0.4.0

package/dist/server/cli.js

@@ -1,13 +1,14 @@
 #!/usr/bin/env node
 
 // src/server/cli.ts
+import { readFileSync as readFileSync3 } from "fs";
 import { fileURLToPath } from "url";
 import { serve } from "@hono/node-server";
 import { nanoid as nanoid7 } from "nanoid";
 
 // src/server/app.ts
 import { existsSync as existsSync3 } from "fs";
-import { Hono as Hono9 } from "hono";
+import { Hono as Hono10 } from "hono";
 import { logger } from "hono/logger";
 import { bodyLimit } from "hono/body-limit";
 import { getCookie } from "hono/cookie";
@@ -24,6 +25,9 @@ function setRuntime(r) {
 function getToken() {
   return runtime.token;
 }
+function getVersion() {
+  return runtime.version;
+}
 function getPublicUrl() {
   return runtime.publicUrl.replace(/\/$/, "");
 }
@@ -144,6 +148,52 @@ function seedBuiltinProfiles(data, now2) {
   }
 }
 
+// src/server/cxml/product-list-presets.ts
+var PRODUCT_LIST_PRESETS = [
+  {
+    id: "sample",
+    name: "Sample assortment",
+    builtin: true,
+    description: "A representative office & industrial supplies catalog (~20 items).",
+    items: [
+      { supplierPartId: "WIDGET-001", supplierPartAuxiliaryId: "WIDGET-001-STD", description: "Premium Steel Widget", unitPrice: 12.5, currency: "USD", uom: "EA", classifications: [{ domain: "UNSPSC", value: "31161500" }], manufacturerPartId: "MFR-W001", manufacturerName: "Acme Manufacturing" },
+      { supplierPartId: "BOLT-250", supplierPartAuxiliaryId: "BOLT-250-CONTRACT-A", description: "M8 Hex Bolt (pack of 250)", unitPrice: 34, currency: "USD", uom: "PK", classifications: [{ domain: "UNSPSC", value: "31161600" }], manufacturerPartId: "MFR-B250", manufacturerName: "Acme Manufacturing" },
+      { supplierPartId: "NUT-M8-500", description: "M8 Hex Nut (pack of 500)", unitPrice: 28.5, currency: "USD", uom: "PK", classifications: [{ domain: "UNSPSC", value: "31161700" }], manufacturerPartId: "MFR-N8500", manufacturerName: "Acme Manufacturing" },
+      { supplierPartId: "WASHER-M8", description: "M8 Flat Washer (pack of 1000)", unitPrice: 19.95, currency: "USD", uom: "PK", classifications: [{ domain: "UNSPSC", value: "31161800" }], manufacturerName: "Acme Manufacturing" },
+      { supplierPartId: "TAPE-RED", supplierPartAuxiliaryId: "TAPE-RED-50M", description: "Industrial Marking Tape, Red", unitPrice: 5.75, currency: "USD", uom: "RL", classifications: [{ domain: "UNSPSC", value: "31201500" }] },
+      { supplierPartId: "TAPE-YEL", supplierPartAuxiliaryId: "TAPE-YEL-50M", description: "Industrial Marking Tape, Yellow", unitPrice: 5.75, currency: "USD", uom: "RL", classifications: [{ domain: "UNSPSC", value: "31201500" }] },
+      // Multiple classifications: UNSPSC + a supplier-specific commodity scheme.
+      { supplierPartId: "CABLE-CU-2.5", supplierPartAuxiliaryId: "CABLE-CU-2.5-RAL", description: "Copper Cable 2.5mm\xB2 (by the metre)", unitPrice: 1.15, currency: "EUR", uom: "MTR", classifications: [{ domain: "UNSPSC", value: "26121600" }, { domain: "eCl@ss", value: "27-06-01-01" }], manufacturerPartId: "WIRE-25", manufacturerName: "Volt Industries", allowFractional: true },
+      { supplierPartId: "CABLE-CU-4.0", supplierPartAuxiliaryId: "CABLE-CU-4.0-RAL", description: "Copper Cable 4.0mm\xB2 (by the metre)", unitPrice: 1.8, currency: "EUR", uom: "MTR", classifications: [{ domain: "UNSPSC", value: "26121600" }, { domain: "eCl@ss", value: "27-06-01-02" }], manufacturerPartId: "WIRE-40", manufacturerName: "Volt Industries", allowFractional: true },
+      { supplierPartId: "PAINT-WHT", description: "Acrylic Wall Paint, White (by the litre)", unitPrice: 8.4, currency: "USD", uom: "LTR", classifications: [{ domain: "UNSPSC", value: "31211500" }], manufacturerName: "ColorWorks", allowFractional: true },
+      { supplierPartId: "LUBE-OIL", description: "Machine Lubricating Oil (by the litre)", unitPrice: 6.9, currency: "USD", uom: "LTR", classifications: [{ domain: "UNSPSC", value: "15121800" }], manufacturerName: "SlickPro", allowFractional: true },
+      { supplierPartId: "GLOVE-NIT-M", supplierPartAuxiliaryId: "GLOVE-NIT-M-CE", description: "Nitrile Gloves, Medium (box of 100)", unitPrice: 9.95, currency: "GBP", uom: "BX", classifications: [{ domain: "UNSPSC", value: "46181504" }], manufacturerName: "SafeHands" },
+      { supplierPartId: "GLOVE-NIT-L", supplierPartAuxiliaryId: "GLOVE-NIT-L-CE", description: "Nitrile Gloves, Large (box of 100)", unitPrice: 9.95, currency: "GBP", uom: "BX", classifications: [{ domain: "UNSPSC", value: "46181504" }], manufacturerName: "SafeHands" },
+      { supplierPartId: "GOGGLE-STD", description: "Safety Goggles, Anti-fog", unitPrice: 4.6, currency: "GBP", uom: "EA", classifications: [{ domain: "UNSPSC", value: "46181702" }], manufacturerName: "SafeHands" },
+      { supplierPartId: "HELMET-WHT", description: "Hard Hat, White", unitPrice: 9.8, currency: "GBP", uom: "EA", classifications: [{ domain: "UNSPSC", value: "46181701" }], manufacturerName: "SafeHands" },
+      { supplierPartId: "PAPER-A4", description: "Copy Paper A4 80gsm (ream of 500)", unitPrice: 18, currency: "PLN", uom: "RM", classifications: [{ domain: "UNSPSC", value: "14111507" }], manufacturerName: "PaperCo" },
+      { supplierPartId: "PEN-BLU-12", description: "Ballpoint Pens, Blue (pack of 12)", unitPrice: 12.99, currency: "PLN", uom: "PK", classifications: [{ domain: "UNSPSC", value: "44121701" }], manufacturerName: "WriteRight" },
+      { supplierPartId: "BINDER-A4", description: "Lever Arch Binder A4, Black", unitPrice: 11.5, currency: "PLN", uom: "EA", classifications: [{ domain: "UNSPSC", value: "44122011" }], manufacturerName: "Officeline" },
+      { supplierPartId: "TONER-BLK", supplierPartAuxiliaryId: "TN-1000-OEM", description: "Laser Toner Cartridge, Black", unitPrice: 64, currency: "USD", uom: "EA", classifications: [{ domain: "UNSPSC", value: "44103105" }], manufacturerPartId: "TN-1000", manufacturerName: "PrintMax" },
+      { supplierPartId: "BATT-AA-24", description: "Alkaline Batteries AA (pack of 24)", unitPrice: 14.5, currency: "USD", uom: "PK", classifications: [{ domain: "UNSPSC", value: "26111702" }], manufacturerName: "PowerCell" },
+      { supplierPartId: "DRILL-BIT-SET", supplierPartAuxiliaryId: "DBS-19-HSS", description: "HSS Drill Bit Set (19 pieces)", unitPrice: 22.75, currency: "USD", uom: "ST", classifications: [{ domain: "UNSPSC", value: "27112700" }], manufacturerPartId: "DBS-19", manufacturerName: "Acme Manufacturing" },
+      { supplierPartId: "GAFF-CLEAN", description: "All-purpose Cleaner Concentrate (by the litre)", unitPrice: 3.6, currency: "USD", uom: "LTR", classifications: [{ domain: "UNSPSC", value: "47131800" }], manufacturerName: "CleanLine", allowFractional: true }
+    ]
+  }
+];
+var SAMPLE_PRODUCT_LIST = {
+  ...PRODUCT_LIST_PRESETS[0],
+  createdAt: "",
+  updatedAt: ""
+};
+function seedBuiltinProductLists(data, now2) {
+  for (const preset of PRODUCT_LIST_PRESETS) {
+    if (!data.productLists.some((p) => p.id === preset.id)) {
+      data.productLists.push({ ...preset, createdAt: now2, updatedAt: now2 });
+    }
+  }
+}
+
 // src/server/store/paths.ts
 import { chmodSync, mkdirSync } from "fs";
 import { resolve } from "path";
@@ -180,15 +230,19 @@ var db = null;
 async function initConfig() {
   ensureDirs();
   const adapter = new JSONFile(configPath());
-  db = new Low(adapter, { buyers: [], suppliers: [], connections: [], profiles: [] });
+  db = new Low(adapter, { buyers: [], suppliers: [], connections: [], profiles: [], productLists: [] });
   await db.read();
-  db.data ||= { buyers: [], suppliers: [], connections: [], profiles: [] };
+  db.data ||= { buyers: [], suppliers: [], connections: [], profiles: [], productLists: [] };
   db.data.buyers ||= [];
   db.data.suppliers ||= [];
   db.data.connections ||= [];
   db.data.profiles ||= [];
+  db.data.productLists ||= [];
   seedBuiltinProfiles(db.data, now());
+  seedBuiltinProductLists(db.data, now());
   migrateLegacy(db.data);
+  migrateInlineCatalogs(db.data);
+  migrateClassifications(db.data);
   await db.write();
   try {
     chmodSync2(configPath(), 384);
@@ -349,6 +403,38 @@ function effectiveProfile(connection, buyer) {
 function dtdVersionFor(eff, docType) {
   return eff.dtdVersions[docType] ?? eff.dtdVersions.default;
 }
+var listProductLists = () => requireDb().data.productLists;
+var getProductList = (id) => requireDb().data.productLists.find((p) => p.id === id);
+async function createProductList(input) {
+  const list = { ...input, id: input.id ?? nanoid(8), createdAt: now(), updatedAt: now() };
+  const d = requireDb();
+  d.data.productLists.push(list);
+  await d.write();
+  return list;
+}
+async function updateProductList(id, patch) {
+  const d = requireDb();
+  const existing = d.data.productLists.find((p) => p.id === id);
+  if (!existing) return void 0;
+  Object.assign(existing, patch, { id, updatedAt: now() });
+  await d.write();
+  return existing;
+}
+async function deleteProductList(id) {
+  const d = requireDb();
+  if (d.data.suppliers.some((s) => s.productListIds?.includes(id))) {
+    throw new Error("product list is referenced by a supplier");
+  }
+  const before = d.data.productLists.length;
+  d.data.productLists = d.data.productLists.filter((p) => p.id !== id);
+  const removed = d.data.productLists.length < before;
+  if (removed) await d.write();
+  return removed;
+}
+function catalogForSupplier(supplier) {
+  const ids = supplier.productListIds ?? [];
+  return ids.flatMap((id) => getProductList(id)?.items ?? []);
+}
 function migrateLegacy(data) {
   const legacy = data.connections.filter((c) => "from" in c || "to" in c);
   if (legacy.length === 0) return;
@@ -408,6 +494,39 @@ function migrateLegacy(data) {
   }
   data.connections = migrated;
 }
+function migrateInlineCatalogs(data) {
+  for (const supplier of data.suppliers) {
+    const legacy = supplier.catalog;
+    if (!legacy || legacy.length === 0) {
+      delete supplier.catalog;
+      continue;
+    }
+    if (supplier.productListIds && supplier.productListIds.length > 0) {
+      delete supplier.catalog;
+      continue;
+    }
+    const list = {
+      id: nanoid(8),
+      name: `${supplier.name} catalog`,
+      items: legacy,
+      createdAt: now(),
+      updatedAt: now()
+    };
+    data.productLists.push(list);
+    supplier.productListIds = [list.id];
+    delete supplier.catalog;
+  }
+}
+function migrateClassifications(data) {
+  for (const list of data.productLists) {
+    for (const item of list.items) {
+      if (!Array.isArray(item.classifications) || item.classifications.length === 0) {
+        item.classifications = item.unspsc ? [{ domain: "UNSPSC", value: String(item.unspsc) }] : [];
+      }
+      delete item.unspsc;
+    }
+  }
+}
 
 // src/server/routes/connections.ts
 var connectionsRoute = new Hono();
@@ -515,22 +634,14 @@ buyersRoute.delete("/:id", async (c) => {
 });
 var suppliersRoute = new Hono2();
 function normalizeSupplier(body) {
-  const catalog = Array.isArray(body?.catalog) ? body.catalog.map((it) => ({
-    supplierPartId: String(it?.supplierPartId ?? ""),
-    description: String(it?.description ?? ""),
-    unitPrice: Number(it?.unitPrice ?? 0) || 0,
-    currency: String(it?.currency ?? "USD"),
-    uom: String(it?.uom ?? "EA"),
-    unspsc: String(it?.unspsc ?? ""),
-    manufacturerPartId: it?.manufacturerPartId ? String(it.manufacturerPartId) : void 0,
-    manufacturerName: it?.manufacturerName ? String(it.manufacturerName) : void 0
-  })) : void 0;
+  const productListIds = Array.isArray(body?.productListIds) ? body.productListIds.map((id) => String(id)) : [];
   return {
     name: String(body?.name ?? "Untitled supplier"),
     identity: cred(body?.identity),
     punchoutUrl: body?.punchoutUrl ? String(body.punchoutUrl) : void 0,
     orderUrl: body?.orderUrl ? String(body.orderUrl) : void 0,
-    catalog
+    productListIds,
+    allowMixedCurrency: Boolean(body?.allowMixedCurrency)
   };
 }
 suppliersRoute.get("/", (c) => c.json(listSuppliers()));
@@ -626,8 +737,66 @@ profilesRoute.delete("/:id", async (c) => {
 });
 profilePresetsRoute.get("/", (c) => c.json(PROFILE_PRESETS));
 
-// src/server/routes/flow.ts
+// src/server/routes/products.ts
 import { Hono as Hono4 } from "hono";
+var productsRoute = new Hono4();
+var productListPresetsRoute = new Hono4();
+function normalizeClassifications(it) {
+  if (Array.isArray(it?.classifications)) {
+    return it.classifications.map((c) => ({ domain: String(c?.domain ?? "UNSPSC"), value: String(c?.value ?? "") })).filter((c) => c.value.trim().length > 0);
+  }
+  if (it?.unspsc) return [{ domain: "UNSPSC", value: String(it.unspsc) }];
+  return [];
+}
+function normalizeItem(it) {
+  return {
+    supplierPartId: String(it?.supplierPartId ?? ""),
+    supplierPartAuxiliaryId: it?.supplierPartAuxiliaryId ? String(it.supplierPartAuxiliaryId) : void 0,
+    description: String(it?.description ?? ""),
+    unitPrice: Number(it?.unitPrice ?? 0) || 0,
+    currency: String(it?.currency ?? "USD"),
+    uom: String(it?.uom ?? "EA"),
+    classifications: normalizeClassifications(it),
+    manufacturerPartId: it?.manufacturerPartId ? String(it.manufacturerPartId) : void 0,
+    manufacturerName: it?.manufacturerName ? String(it.manufacturerName) : void 0,
+    allowFractional: Boolean(it?.allowFractional)
+  };
+}
+function normalizeProductList(body) {
+  const items = Array.isArray(body?.items) ? body.items.map(normalizeItem) : [];
+  return {
+    name: String(body?.name ?? "Untitled product list"),
+    description: body?.description ? String(body.description) : void 0,
+    items
+  };
+}
+productsRoute.get("/", (c) => c.json(listProductLists()));
+productsRoute.post("/", async (c) => {
+  const input = normalizeProductList(await c.req.json().catch(() => ({})));
+  if (!input.name.trim()) return c.json({ errors: ["name is required"] }, 400);
+  return c.json(await createProductList(input), 201);
+});
+productsRoute.get("/:id", (c) => {
+  const p = getProductList(c.req.param("id"));
+  return p ? c.json(p) : c.json({ error: "not found" }, 404);
+});
+productsRoute.put("/:id", async (c) => {
+  if (!getProductList(c.req.param("id"))) return c.json({ error: "not found" }, 404);
+  const input = normalizeProductList(await c.req.json().catch(() => ({})));
+  return c.json(await updateProductList(c.req.param("id"), input));
+});
+productsRoute.delete("/:id", async (c) => {
+  try {
+    const ok = await deleteProductList(c.req.param("id"));
+    return ok ? c.json({ ok: true }) : c.json({ error: "not found" }, 404);
+  } catch (e) {
+    return c.json({ error: e instanceof Error ? e.message : String(e) }, 409);
+  }
+});
+productListPresetsRoute.get("/", (c) => c.json(PRODUCT_LIST_PRESETS));
+
+// src/server/routes/flow.ts
+import { Hono as Hono5 } from "hono";
 import { nanoid as nanoid5 } from "nanoid";
 
 // src/server/store/log.ts
@@ -940,6 +1109,15 @@ function escapeXml(value) {
 function makePayloadId(host3, nowIso) {
   return `${nowIso}.${nanoid4(10)}@${host3}`;
 }
+function lineItemsTotal(items, headerCurrency) {
+  const currencies = new Set(items.map((it) => it.currency || headerCurrency));
+  if (currencies.size > 1) return 0;
+  return items.reduce((sum, it) => sum + (it.unitPriceAmount ?? 0) * it.quantity, 0);
+}
+function classificationBlock(it, indent) {
+  const list = it.classifications && it.classifications.length > 0 ? it.classifications : [{ domain: it.classificationDomain ?? "UNSPSC", value: it.classification ?? "" }];
+  return list.map((c) => `${indent}<Classification domain="${escapeXml(c.domain || "UNSPSC")}">${escapeXml(c.value)}</Classification>`).join("\n");
+}
 function credentialBlock(tag, c) {
   return `    <${tag}>
       <Credential domain="${escapeXml(c.domain)}">
@@ -1050,9 +1228,7 @@ function buildOrderRequest(o) {
           </UnitPrice>
           <Description xml:lang="en">${escapeXml(it.description ?? "")}</Description>
           <UnitOfMeasure>${escapeXml(it.uom ?? "EA")}</UnitOfMeasure>
-          <Classification domain="${escapeXml(it.classificationDomain ?? "UNSPSC")}">${escapeXml(
-      it.classification ?? ""
-    )}</Classification>${it.manufacturerPartId ? `
+${classificationBlock(it, "          ")}${it.manufacturerPartId ? `
           <ManufacturerPartID>${escapeXml(it.manufacturerPartId)}</ManufacturerPartID>` : ""}${it.manufacturerName ? `
           <ManufacturerName>${escapeXml(it.manufacturerName)}</ManufacturerName>` : ""}${commentsWithAttachments(cids, "          ")}
         </ItemDetail>
@@ -1112,10 +1288,7 @@ function buildResponseStatus(o) {
   return envelope(o.payloadId, o.timestamp, o.lang ?? "en-US", inner, o.dtdVersion);
 }
 function buildPunchOutOrderMessage(o) {
-  const total = o.items.reduce(
-    (sum, it) => sum + (it.unitPriceAmount ?? 0) * it.quantity,
-    0
-  );
+  const total = lineItemsTotal(o.items, o.currency);
   const items = o.items.map(
     (it) => `    <ItemIn quantity="${escapeXml(it.quantity)}">
       <ItemID>
@@ -1130,9 +1303,7 @@ function buildPunchOutOrderMessage(o) {
         </UnitPrice>
         <Description xml:lang="en">${escapeXml(it.description ?? "")}</Description>
         <UnitOfMeasure>${escapeXml(it.uom ?? "EA")}</UnitOfMeasure>
-        <Classification domain="${escapeXml(it.classificationDomain ?? "UNSPSC")}">${escapeXml(
-      it.classification ?? ""
-    )}</Classification>${it.manufacturerPartId ? `
+${classificationBlock(it, "        ")}${it.manufacturerPartId ? `
         <ManufacturerPartID>${escapeXml(it.manufacturerPartId)}</ManufacturerPartID>` : ""}
       </ItemDetail>
     </ItemIn>`
@@ -1322,8 +1493,8 @@ function parseCart(doc) {
   const items = asArray(pom?.ItemIn).map((it) => {
     const detail = it?.ItemDetail;
     const up = money(detail?.UnitPrice);
-    const classification = detail?.Classification;
-    const classFirst = Array.isArray(classification) ? classification[0] : classification;
+    const classifications = asArray(detail?.Classification).filter((c) => c != null).map((c) => ({ domain: attr(c, "domain") ?? "", value: text(c) ?? "" }));
+    const classFirst = classifications[0];
     return {
       quantity: Number(attr(it, "quantity") ?? "1") || 1,
       supplierPartId: text(it?.ItemID?.SupplierPartID),
@@ -1332,8 +1503,9 @@ function parseCart(doc) {
       uom: text(detail?.UnitOfMeasure),
       unitPriceAmount: up.amount,
       currency: up.currency,
-      classificationDomain: attr(classFirst, "domain"),
-      classification: text(classFirst),
+      classifications: classifications.length > 0 ? classifications : void 0,
+      classificationDomain: classFirst?.domain,
+      classification: classFirst?.value,
       manufacturerPartId: text(detail?.ManufacturerPartID),
       manufacturerName: text(detail?.ManufacturerName)
     };
@@ -1496,6 +1668,7 @@ function checkPunchback(doc, ctx, issues) {
     issues.warn("empty-cart", "PunchOutOrderMessage contains no ItemIn elements", "cXML/.../PunchOutOrderMessage");
   }
   let lineSum = 0;
+  const lineCurrencies = [];
   items.forEach((it, i) => {
     const base = `cXML/.../ItemIn[${i + 1}]`;
     const qty = num(attr(it, "quantity"));
@@ -1512,10 +1685,13 @@ function checkPunchback(doc, ctx, issues) {
     }
     const up = detail.UnitPrice?.Money;
     const upAmount = num(text(up));
+    const upCurrency = attr(up, "currency");
     if (up == null) {
       issues.error("item-missing-unitprice", `ItemIn[${i + 1}] is missing ItemDetail/UnitPrice/Money`, `${base}/ItemDetail/UnitPrice`);
-    } else if (!attr(up, "currency")) {
+    } else if (!upCurrency) {
       issues.error("item-missing-currency", `ItemIn[${i + 1}] UnitPrice/Money is missing @currency`, `${base}/ItemDetail/UnitPrice/Money`);
+    } else {
+      lineCurrencies.push(upCurrency);
     }
     if (!text(detail.Description)) {
       issues.error("item-missing-description", `ItemIn[${i + 1}] is missing ItemDetail/Description`, `${base}/ItemDetail/Description`);
@@ -1531,7 +1707,14 @@ function checkPunchback(doc, ctx, issues) {
     }
     if (qty != null && upAmount != null) lineSum += qty * upAmount;
   });
-  if (totalAmount != null && items.length > 0) {
+  const singleCurrency = checkSingleCurrency(
+    lineCurrencies,
+    totalCurrency,
+    issues,
+    "cXML/.../PunchOutOrderMessageHeader/Total",
+    ctx.allowMixedCurrency
+  );
+  if (singleCurrency && totalAmount != null && items.length > 0) {
     const diff = Math.abs(totalAmount - lineSum);
     if (diff > 0.01) {
       issues.warn(
@@ -1542,6 +1725,28 @@ function checkPunchback(doc, ctx, issues) {
     }
   }
 }
+function checkSingleCurrency(lineCurrencies, totalCurrency, issues, path, allowMixed = false) {
+  const all = new Set(lineCurrencies.filter(Boolean));
+  if (totalCurrency) all.add(totalCurrency);
+  if (all.size > 1) {
+    const list = [...all].join(", ");
+    if (allowMixed) {
+      issues.warn(
+        "mixed-currency",
+        `Multiple currencies in one document (${list}); allowed for this supplier. The header Total is a single Money \u2014 rely on the per-line currencies.`,
+        path
+      );
+    } else {
+      issues.error(
+        "mixed-currency",
+        `Multiple currencies in one document (${list}). A cXML Total is a single Money \u2014 all line items and the Total must share one currency.`,
+        path
+      );
+    }
+    return false;
+  }
+  return true;
+}
 function checkOrderRequest(doc, ctx, issues) {
   const orderReq = root(doc)?.Request?.OrderRequest;
   if (!orderReq) {
@@ -1568,18 +1773,24 @@ function checkOrderRequest(doc, ctx, issues) {
   if (items.length === 0) {
     issues.error("no-itemout", "OrderRequest contains no ItemOut elements", "cXML/.../OrderRequest");
   }
+  const lineCurrencies = [];
   items.forEach((it, i) => {
     const base = `cXML/.../ItemOut[${i + 1}]`;
     if (!text(it?.ItemID?.SupplierPartID)) {
       issues.error("itemout-missing-id", `ItemOut[${i + 1}] is missing ItemID/SupplierPartID`, `${base}/ItemID`);
     }
-    if (it?.ItemDetail?.UnitPrice?.Money == null) {
+    const up = it?.ItemDetail?.UnitPrice?.Money;
+    if (up == null) {
       issues.error("itemout-missing-unitprice", `ItemOut[${i + 1}] is missing ItemDetail/UnitPrice/Money`, `${base}/ItemDetail/UnitPrice`);
+    } else {
+      const cur = attr(up, "currency");
+      if (cur) lineCurrencies.push(cur);
     }
     if (num(attr(it, "quantity")) == null) {
       issues.error("itemout-missing-quantity", `ItemOut[${i + 1}] is missing @quantity`, base);
     }
   });
+  checkSingleCurrency(lineCurrencies, attr(header2?.Total?.Money, "currency"), issues, "cXML/.../OrderRequestHeader/Total", ctx.allowMixedCurrency);
   const refs = collectCidReferences(doc);
   const available = ctx.availableContentIds;
   const referenced = /* @__PURE__ */ new Set();
@@ -1661,7 +1872,7 @@ function validateDocument(raw, ctx = {}) {
 }
 
 // src/server/routes/flow.ts
-var flowRoute = new Hono4();
+var flowRoute = new Hono5();
 function host() {
   try {
     return new URL(getPublicUrl()).host;
@@ -1686,7 +1897,8 @@ function buyerContext(r) {
     connectionId: connection.id,
     attachmentEncoding: eff.attachmentEncoding,
     eff,
-    expected: { from, to, sender, sharedSecret: connection.sharedSecret }
+    expected: { from, to, sender, sharedSecret: connection.sharedSecret },
+    allowMixedCurrency: supplier.allowMixedCurrency ?? false
   };
 }
 function setupExtrinsics(ctx, buyerCookie) {
@@ -1785,7 +1997,7 @@ flowRoute.post("/:id/setup", async (c) => {
 function buildOrderXml(ctx, body) {
   const items = body.items ?? [];
   const currency = body.currency || items[0]?.currency || "USD";
-  const total = body.total ?? items.reduce((s, it) => s + (it.unitPriceAmount ?? 0) * it.quantity, 0);
+  const total = body.total ?? lineItemsTotal(items, currency);
   const orderId = body.orderId || `PO-${nanoid5(8)}`;
   const attMeta = (body.attachments ?? []).map((a) => ({
     contentId: a.contentId,
@@ -1859,7 +2071,8 @@ flowRoute.post("/:id/order", async (c) => {
   const reqValidation = validateDocument(xml, {
     expected: ctx.expected,
     forceDocType: "OrderRequest",
-    availableContentIds: inputAtts.length > 0 ? availableContentIds : void 0
+    availableContentIds: inputAtts.length > 0 ? availableContentIds : void 0,
+    allowMixedCurrency: ctx.allowMixedCurrency
   });
   const reqLog = appendLog({
     sessionId,
@@ -1900,8 +2113,8 @@ flowRoute.post("/:id/order", async (c) => {
 });
 
 // src/server/routes/punchout-return.ts
-import { Hono as Hono5 } from "hono";
-var punchoutReturnRoute = new Hono5();
+import { Hono as Hono6 } from "hono";
+var punchoutReturnRoute = new Hono6();
 async function extractCxml(c) {
   const ct = (c.req.header("content-type") ?? "").toLowerCase();
   if (ct.includes("application/x-www-form-urlencoded") || ct.includes("multipart/form-data")) {
@@ -1969,9 +2182,9 @@ punchoutReturnRoute.post("/return", async (c) => {
 });
 
 // src/server/routes/stream.ts
-import { Hono as Hono6 } from "hono";
+import { Hono as Hono7 } from "hono";
 import { streamSSE } from "hono/streaming";
-var streamRoute = new Hono6();
+var streamRoute = new Hono7();
 var MAX_STREAMS = 64;
 var activeStreams = 0;
 streamRoute.get("/stream", (c) => {
@@ -2003,8 +2216,8 @@ streamRoute.get("/stream", (c) => {
 });
 
 // src/server/routes/data.ts
-import { Hono as Hono7 } from "hono";
-var dataRoute = new Hono7();
+import { Hono as Hono8 } from "hono";
+var dataRoute = new Hono8();
 function rawMessage(record) {
   const ct = record.contentType ?? record.headers?.["Content-Type"] ?? record.headers?.["content-type"];
   let body = record.body;
@@ -2030,7 +2243,7 @@ ${body}` : body;
 dataRoute.get("/health", (c) => c.json({ ok: true }));
 dataRoute.get(
   "/runtime",
-  (c) => c.json({ publicUrl: getPublicUrl(), callbackUrl: `${getPublicUrl()}/punchout/return` })
+  (c) => c.json({ publicUrl: getPublicUrl(), callbackUrl: `${getPublicUrl()}/punchout/return`, version: getVersion() })
 );
 dataRoute.get("/sessions", (c) => c.json(listSessions()));
 dataRoute.get("/sessions/:id", (c) => c.json(readSession(c.req.param("id"))));
@@ -2056,13 +2269,13 @@ dataRoute.get("/attachments/:hash", (c) => {
 });
 
 // src/server/routes/sim.ts
-import { Hono as Hono8 } from "hono";
+import { Hono as Hono9 } from "hono";
 import { nanoid as nanoid6 } from "nanoid";
-var simRoute = new Hono8();
+var simRoute = new Hono9();
 var DEMO_CATALOG = [
-  { supplierPartId: "WIDGET-001", description: "Premium Steel Widget", unitPrice: 12.5, currency: "USD", uom: "EA", unspsc: "31161500", manufacturerPartId: "MFR-W001", manufacturerName: "Acme Manufacturing" },
-  { supplierPartId: "BOLT-250", description: "M8 Hex Bolt (pack of 250)", unitPrice: 34, currency: "USD", uom: "PK", unspsc: "31161600", manufacturerPartId: "MFR-B250", manufacturerName: "Acme Manufacturing" },
-  { supplierPartId: "TAPE-RED", description: "Industrial Marking Tape, Red", unitPrice: 5.75, currency: "USD", uom: "RL", unspsc: "31201500" }
+  { supplierPartId: "WIDGET-001", description: "Premium Steel Widget", unitPrice: 12.5, currency: "USD", uom: "EA", classifications: [{ domain: "UNSPSC", value: "31161500" }], manufacturerPartId: "MFR-W001", manufacturerName: "Acme Manufacturing" },
+  { supplierPartId: "BOLT-250", description: "M8 Hex Bolt (pack of 250)", unitPrice: 34, currency: "USD", uom: "PK", classifications: [{ domain: "UNSPSC", value: "31161600" }], manufacturerPartId: "MFR-B250", manufacturerName: "Acme Manufacturing" },
+  { supplierPartId: "TAPE-RED", description: "Industrial Marking Tape, Red", unitPrice: 5.75, currency: "USD", uom: "RL", classifications: [{ domain: "UNSPSC", value: "31201500" }] }
 ];
 function host2() {
   try {
@@ -2071,7 +2284,10 @@ function host2() {
     return "punchout-simulator";
   }
 }
-var catalogOf = (s) => s.catalog && s.catalog.length > 0 ? s.catalog : DEMO_CATALOG;
+var catalogOf = (s) => {
+  const items = catalogForSupplier(s);
+  return items.length > 0 ? items : DEMO_CATALOG;
+};
 function safeHttpUrl(u) {
   if (!u) return "";
   try {
@@ -2148,13 +2364,15 @@ simRoute.get("/:id/catalog", (c) => {
   const bd = c.req.query("bd") ?? "";
   const bi = c.req.query("bi") ?? "";
   const items = catalogOf(supplier);
-  const rows = items.map(
-    (it, i) => `<tr>
-      <td><strong>${escapeXml(it.description)}</strong><br><small>${escapeXml(it.supplierPartId)} \xB7 ${escapeXml(it.uom)} \xB7 UNSPSC ${escapeXml(it.unspsc)}</small></td>
+  const rows = items.map((it, i) => {
+    const partId = escapeXml(it.supplierPartId) + (it.supplierPartAuxiliaryId ? ` / ${escapeXml(it.supplierPartAuxiliaryId)}` : "");
+    const cls = (it.classifications ?? []).map((c2) => `${escapeXml(c2.domain)} ${escapeXml(c2.value)}`).join(" \xB7 ");
+    return `<tr>
+      <td><strong>${escapeXml(it.description)}</strong><br><small>${partId} \xB7 ${escapeXml(it.uom)}${cls ? ` \xB7 ${cls}` : ""}</small></td>
       <td class="price">${escapeXml(it.currency)} ${it.unitPrice.toFixed(2)}</td>
-      <td><input type="number" name="q_${i}" value="0" min="0" step="1" inputmode="numeric"></td>
-    </tr>`
-  ).join("\n");
+      <td><input type="number" name="q_${i}" value="0" min="0" step="${it.allowFractional ? "any" : "1"}" inputmode="${it.allowFractional ? "decimal" : "numeric"}"></td>
+    </tr>`;
+  }).join("\n");
   return c.html(`<!doctype html><html lang="en"><head><meta charset="utf-8">
 <meta name="viewport" content="width=device-width, initial-scale=1">
 <title>${escapeXml(supplier.name)} \u2014 mock catalog</title>
@@ -2193,17 +2411,22 @@ simRoute.post("/:id/checkout", async (c) => {
   const catalog = catalogOf(supplier);
   const items = [];
   catalog.forEach((it, i) => {
-    const qty = Number(form[`q_${i}`] ?? 0);
+    let qty = Number(form[`q_${i}`] ?? 0);
+    if (!it.allowFractional) qty = Math.floor(qty);
     if (qty > 0) {
       items.push({
         quantity: qty,
         supplierPartId: it.supplierPartId,
+        supplierPartAuxiliaryId: it.supplierPartAuxiliaryId,
         description: it.description,
         uom: it.uom,
         unitPriceAmount: it.unitPrice,
         currency: it.currency,
-        classificationDomain: "UNSPSC",
-        classification: it.unspsc,
+        classifications: it.classifications,
+        // Keep the legacy single fields populated from the first classification
+        // for back-compat display (CartView) and any single-domain consumer.
+        classificationDomain: it.classifications[0]?.domain,
+        classification: it.classifications[0]?.value,
         manufacturerPartId: it.manufacturerPartId,
         manufacturerName: it.manufacturerName
       });
@@ -2229,7 +2452,10 @@ simRoute.post("/:id/checkout", async (c) => {
     docType: "PunchOutOrderMessage",
     headers: { "Content-Type": "application/x-www-form-urlencoded" },
     body: xml,
-    validation: validateDocument(xml, { forceDocType: "PunchOutOrderMessage" })
+    validation: validateDocument(xml, {
+      forceDocType: "PunchOutOrderMessage",
+      allowMixedCurrency: supplier.allowMixedCurrency
+    })
   });
   const transport = eff?.cartReturnTransport ?? "cxml-urlencoded";
   return c.html(cartReturnPage(formpost, xml, transport));
@@ -2299,7 +2525,8 @@ simRoute.post("/:id/order", async (c) => {
   const validation = validateDocument(xml, {
     expected: expectedFor(supplier.id, from),
     forceDocType: "OrderRequest",
-    availableContentIds: isMultipart(ct) ? availableContentIds : void 0
+    availableContentIds: isMultipart(ct) ? availableContentIds : void 0,
+    allowMixedCurrency: supplier.allowMixedCurrency
   });
   appendLog({
     sessionId,
@@ -2346,7 +2573,7 @@ function findSessionForOrder(doc) {
 // src/server/app.ts
 import { relative } from "path";
 function createApp(opts = {}) {
-  const app = new Hono9();
+  const app = new Hono10();
   if (!opts.quiet) app.use("*", logger());
   app.use(
     "*",
@@ -2365,6 +2592,8 @@ function createApp(opts = {}) {
   app.route("/api/suppliers", suppliersRoute);
   app.route("/api/profiles", profilesRoute);
   app.route("/api/profile-presets", profilePresetsRoute);
+  app.route("/api/product-lists", productsRoute);
+  app.route("/api/product-list-presets", productListPresetsRoute);
   app.route("/api/connections", connectionsRoute);
   app.route("/api/connections", flowRoute);
   app.route("/api", dataRoute);
@@ -2406,7 +2635,8 @@ async function seedDemoIfEmpty() {
     identity: { domain: "DUNS", identity: "987654321" },
     punchoutUrl: `${getPublicUrl()}/sim/demo-supplier/punchout`,
     orderUrl: `${getPublicUrl()}/sim/demo-supplier/order`,
-    catalog: []
+    // Serve the built-in sample assortment (seeded by initConfig).
+    productListIds: ["sample"]
   });
   await createConnection({
     id: "demo",
@@ -2477,6 +2707,13 @@ function hostnameOf(url) {
     return "";
   }
 }
+function readVersion() {
+  try {
+    return JSON.parse(readFileSync3(new URL("../../package.json", import.meta.url), "utf8")).version;
+  } catch {
+    return void 0;
+  }
+}
 function printHelp() {
   console.log(`punchout-simulator \u2014 test cXML PunchOut integrations as a virtual counterparty
 
@@ -2503,7 +2740,7 @@ async function main() {
   const exposed = !LOOPBACK.has(hostnameOf(publicUrl)) || !LOOPBACK.has(bindHost);
   const token = flags.token || (exposed ? nanoid7(24) : void 0);
   setDataDir(flags.dataDir);
-  setRuntime({ port: flags.port, publicUrl, token });
+  setRuntime({ port: flags.port, publicUrl, token, version: readVersion() });
   await initConfig();
   if (flags.seed) await seedDemoIfEmpty();
   const webRoot = flags.dev ? void 0 : fileURLToPath(new URL("../web", import.meta.url));