punchout-simulator 0.3.1 → 0.5.0

package/dist/server/cli.js

@@ -8,7 +8,7 @@ import { nanoid as nanoid7 } from "nanoid";
 
 // src/server/app.ts
 import { existsSync as existsSync3 } from "fs";
-import { Hono as Hono9 } from "hono";
+import { Hono as Hono10 } from "hono";
 import { logger } from "hono/logger";
 import { bodyLimit } from "hono/body-limit";
 import { getCookie } from "hono/cookie";
@@ -56,7 +56,10 @@ var PROFILE_PRESETS = [
     setupOperation: "create",
     attachmentEncoding: "binary",
     cartReturnTransport: "cxml-urlencoded",
-    extrinsics: []
+    extrinsics: [],
+    addressMode: "full",
+    shipToInSetup: false,
+    contactInSetup: false
   },
   {
     id: "ariba",
@@ -68,7 +71,12 @@ var PROFILE_PRESETS = [
     setupOperation: "create",
     attachmentEncoding: "base64",
     cartReturnTransport: "cxml-urlencoded",
-    extrinsics: [{ name: "User", value: "${buyerCookie}", scope: "setup" }]
+    extrinsics: [{ name: "User", value: "${buyerCookie}", scope: "setup" }],
+    // Ariba sends ShipTo (addressID + postal) already in the SetupRequest so the
+    // supplier can return ship-to-specific pricing/availability.
+    addressMode: "both",
+    shipToInSetup: true,
+    contactInSetup: false
   },
   {
     id: "coupa",
@@ -81,7 +89,10 @@ var PROFILE_PRESETS = [
     setupOperation: "create",
     attachmentEncoding: "base64",
     cartReturnTransport: "cxml-urlencoded",
-    extrinsics: []
+    extrinsics: [],
+    addressMode: "both",
+    shipToInSetup: false,
+    contactInSetup: false
   },
   {
     id: "jaggaer",
@@ -93,7 +104,10 @@ var PROFILE_PRESETS = [
     setupOperation: "create",
     attachmentEncoding: "binary",
     cartReturnTransport: "cxml-urlencoded",
-    extrinsics: []
+    extrinsics: [],
+    addressMode: "full",
+    shipToInSetup: false,
+    contactInSetup: false
   },
   {
     id: "oracle",
@@ -105,7 +119,10 @@ var PROFILE_PRESETS = [
     setupOperation: "create",
     attachmentEncoding: "binary",
     cartReturnTransport: "cxml-urlencoded",
-    extrinsics: []
+    extrinsics: [],
+    addressMode: "full",
+    shipToInSetup: false,
+    contactInSetup: false
   },
   {
     id: "sap-srm",
@@ -120,7 +137,11 @@ var PROFILE_PRESETS = [
     setupOperation: "create",
     attachmentEncoding: "base64",
     cartReturnTransport: "cxml-base64",
-    extrinsics: []
+    extrinsics: [],
+    // SAP is location/plant-code centric — addresses by reference.
+    addressMode: "id-only",
+    shipToInSetup: false,
+    contactInSetup: false
   },
   {
     id: "workday",
@@ -132,7 +153,10 @@ var PROFILE_PRESETS = [
     setupOperation: "create",
     attachmentEncoding: "base64",
     cartReturnTransport: "cxml-urlencoded",
-    extrinsics: []
+    extrinsics: [],
+    addressMode: "full",
+    shipToInSetup: false,
+    contactInSetup: false
   }
 ];
 var GENERIC_PROFILE = {
@@ -148,6 +172,52 @@ function seedBuiltinProfiles(data, now2) {
   }
 }
 
+// src/server/cxml/product-list-presets.ts
+var PRODUCT_LIST_PRESETS = [
+  {
+    id: "sample",
+    name: "Sample assortment",
+    builtin: true,
+    description: "A representative office & industrial supplies catalog (~20 items).",
+    items: [
+      { supplierPartId: "WIDGET-001", supplierPartAuxiliaryId: "WIDGET-001-STD", description: "Premium Steel Widget", unitPrice: 12.5, currency: "USD", uom: "EA", classifications: [{ domain: "UNSPSC", value: "31161500" }], manufacturerPartId: "MFR-W001", manufacturerName: "Acme Manufacturing" },
+      { supplierPartId: "BOLT-250", supplierPartAuxiliaryId: "BOLT-250-CONTRACT-A", description: "M8 Hex Bolt (pack of 250)", unitPrice: 34, currency: "USD", uom: "PK", classifications: [{ domain: "UNSPSC", value: "31161600" }], manufacturerPartId: "MFR-B250", manufacturerName: "Acme Manufacturing" },
+      { supplierPartId: "NUT-M8-500", description: "M8 Hex Nut (pack of 500)", unitPrice: 28.5, currency: "USD", uom: "PK", classifications: [{ domain: "UNSPSC", value: "31161700" }], manufacturerPartId: "MFR-N8500", manufacturerName: "Acme Manufacturing" },
+      { supplierPartId: "WASHER-M8", description: "M8 Flat Washer (pack of 1000)", unitPrice: 19.95, currency: "USD", uom: "PK", classifications: [{ domain: "UNSPSC", value: "31161800" }], manufacturerName: "Acme Manufacturing" },
+      { supplierPartId: "TAPE-RED", supplierPartAuxiliaryId: "TAPE-RED-50M", description: "Industrial Marking Tape, Red", unitPrice: 5.75, currency: "USD", uom: "RL", classifications: [{ domain: "UNSPSC", value: "31201500" }] },
+      { supplierPartId: "TAPE-YEL", supplierPartAuxiliaryId: "TAPE-YEL-50M", description: "Industrial Marking Tape, Yellow", unitPrice: 5.75, currency: "USD", uom: "RL", classifications: [{ domain: "UNSPSC", value: "31201500" }] },
+      // Multiple classifications: UNSPSC + a supplier-specific commodity scheme.
+      { supplierPartId: "CABLE-CU-2.5", supplierPartAuxiliaryId: "CABLE-CU-2.5-RAL", description: "Copper Cable 2.5mm\xB2 (by the metre)", unitPrice: 1.15, currency: "EUR", uom: "MTR", classifications: [{ domain: "UNSPSC", value: "26121600" }, { domain: "eCl@ss", value: "27-06-01-01" }], manufacturerPartId: "WIRE-25", manufacturerName: "Volt Industries", allowFractional: true },
+      { supplierPartId: "CABLE-CU-4.0", supplierPartAuxiliaryId: "CABLE-CU-4.0-RAL", description: "Copper Cable 4.0mm\xB2 (by the metre)", unitPrice: 1.8, currency: "EUR", uom: "MTR", classifications: [{ domain: "UNSPSC", value: "26121600" }, { domain: "eCl@ss", value: "27-06-01-02" }], manufacturerPartId: "WIRE-40", manufacturerName: "Volt Industries", allowFractional: true },
+      { supplierPartId: "PAINT-WHT", description: "Acrylic Wall Paint, White (by the litre)", unitPrice: 8.4, currency: "USD", uom: "LTR", classifications: [{ domain: "UNSPSC", value: "31211500" }], manufacturerName: "ColorWorks", allowFractional: true },
+      { supplierPartId: "LUBE-OIL", description: "Machine Lubricating Oil (by the litre)", unitPrice: 6.9, currency: "USD", uom: "LTR", classifications: [{ domain: "UNSPSC", value: "15121800" }], manufacturerName: "SlickPro", allowFractional: true },
+      { supplierPartId: "GLOVE-NIT-M", supplierPartAuxiliaryId: "GLOVE-NIT-M-CE", description: "Nitrile Gloves, Medium (box of 100)", unitPrice: 9.95, currency: "GBP", uom: "BX", classifications: [{ domain: "UNSPSC", value: "46181504" }], manufacturerName: "SafeHands" },
+      { supplierPartId: "GLOVE-NIT-L", supplierPartAuxiliaryId: "GLOVE-NIT-L-CE", description: "Nitrile Gloves, Large (box of 100)", unitPrice: 9.95, currency: "GBP", uom: "BX", classifications: [{ domain: "UNSPSC", value: "46181504" }], manufacturerName: "SafeHands" },
+      { supplierPartId: "GOGGLE-STD", description: "Safety Goggles, Anti-fog", unitPrice: 4.6, currency: "GBP", uom: "EA", classifications: [{ domain: "UNSPSC", value: "46181702" }], manufacturerName: "SafeHands" },
+      { supplierPartId: "HELMET-WHT", description: "Hard Hat, White", unitPrice: 9.8, currency: "GBP", uom: "EA", classifications: [{ domain: "UNSPSC", value: "46181701" }], manufacturerName: "SafeHands" },
+      { supplierPartId: "PAPER-A4", description: "Copy Paper A4 80gsm (ream of 500)", unitPrice: 18, currency: "PLN", uom: "RM", classifications: [{ domain: "UNSPSC", value: "14111507" }], manufacturerName: "PaperCo" },
+      { supplierPartId: "PEN-BLU-12", description: "Ballpoint Pens, Blue (pack of 12)", unitPrice: 12.99, currency: "PLN", uom: "PK", classifications: [{ domain: "UNSPSC", value: "44121701" }], manufacturerName: "WriteRight" },
+      { supplierPartId: "BINDER-A4", description: "Lever Arch Binder A4, Black", unitPrice: 11.5, currency: "PLN", uom: "EA", classifications: [{ domain: "UNSPSC", value: "44122011" }], manufacturerName: "Officeline" },
+      { supplierPartId: "TONER-BLK", supplierPartAuxiliaryId: "TN-1000-OEM", description: "Laser Toner Cartridge, Black", unitPrice: 64, currency: "USD", uom: "EA", classifications: [{ domain: "UNSPSC", value: "44103105" }], manufacturerPartId: "TN-1000", manufacturerName: "PrintMax" },
+      { supplierPartId: "BATT-AA-24", description: "Alkaline Batteries AA (pack of 24)", unitPrice: 14.5, currency: "USD", uom: "PK", classifications: [{ domain: "UNSPSC", value: "26111702" }], manufacturerName: "PowerCell" },
+      { supplierPartId: "DRILL-BIT-SET", supplierPartAuxiliaryId: "DBS-19-HSS", description: "HSS Drill Bit Set (19 pieces)", unitPrice: 22.75, currency: "USD", uom: "ST", classifications: [{ domain: "UNSPSC", value: "27112700" }], manufacturerPartId: "DBS-19", manufacturerName: "Acme Manufacturing" },
+      { supplierPartId: "GAFF-CLEAN", description: "All-purpose Cleaner Concentrate (by the litre)", unitPrice: 3.6, currency: "USD", uom: "LTR", classifications: [{ domain: "UNSPSC", value: "47131800" }], manufacturerName: "CleanLine", allowFractional: true }
+    ]
+  }
+];
+var SAMPLE_PRODUCT_LIST = {
+  ...PRODUCT_LIST_PRESETS[0],
+  createdAt: "",
+  updatedAt: ""
+};
+function seedBuiltinProductLists(data, now2) {
+  for (const preset of PRODUCT_LIST_PRESETS) {
+    if (!data.productLists.some((p) => p.id === preset.id)) {
+      data.productLists.push({ ...preset, createdAt: now2, updatedAt: now2 });
+    }
+  }
+}
+
 // src/server/store/paths.ts
 import { chmodSync, mkdirSync } from "fs";
 import { resolve } from "path";
@@ -184,15 +254,20 @@ var db = null;
 async function initConfig() {
   ensureDirs();
   const adapter = new JSONFile(configPath());
-  db = new Low(adapter, { buyers: [], suppliers: [], connections: [], profiles: [] });
+  db = new Low(adapter, { buyers: [], suppliers: [], connections: [], profiles: [], productLists: [] });
   await db.read();
-  db.data ||= { buyers: [], suppliers: [], connections: [], profiles: [] };
+  db.data ||= { buyers: [], suppliers: [], connections: [], profiles: [], productLists: [] };
   db.data.buyers ||= [];
   db.data.suppliers ||= [];
   db.data.connections ||= [];
   db.data.profiles ||= [];
+  db.data.productLists ||= [];
   seedBuiltinProfiles(db.data, now());
+  migrateProfiles(db.data);
+  seedBuiltinProductLists(db.data, now());
   migrateLegacy(db.data);
+  migrateInlineCatalogs(db.data);
+  migrateClassifications(db.data);
   await db.write();
   try {
     chmodSync2(configPath(), 384);
@@ -347,12 +422,47 @@ function effectiveProfile(connection, buyer) {
     // Connection attachmentEncoding is concrete by construction → explicit override.
     attachmentEncoding: connection.attachmentEncoding ?? p.attachmentEncoding,
     cartReturnTransport: p.cartReturnTransport,
-    extrinsics: p.extrinsics
+    extrinsics: p.extrinsics,
+    addressMode: p.addressMode,
+    shipToInSetup: p.shipToInSetup,
+    contactInSetup: p.contactInSetup
   };
 }
 function dtdVersionFor(eff, docType) {
   return eff.dtdVersions[docType] ?? eff.dtdVersions.default;
 }
+var listProductLists = () => requireDb().data.productLists;
+var getProductList = (id) => requireDb().data.productLists.find((p) => p.id === id);
+async function createProductList(input) {
+  const list = { ...input, id: input.id ?? nanoid(8), createdAt: now(), updatedAt: now() };
+  const d = requireDb();
+  d.data.productLists.push(list);
+  await d.write();
+  return list;
+}
+async function updateProductList(id, patch) {
+  const d = requireDb();
+  const existing = d.data.productLists.find((p) => p.id === id);
+  if (!existing) return void 0;
+  Object.assign(existing, patch, { id, updatedAt: now() });
+  await d.write();
+  return existing;
+}
+async function deleteProductList(id) {
+  const d = requireDb();
+  if (d.data.suppliers.some((s) => s.productListIds?.includes(id))) {
+    throw new Error("product list is referenced by a supplier");
+  }
+  const before = d.data.productLists.length;
+  d.data.productLists = d.data.productLists.filter((p) => p.id !== id);
+  const removed = d.data.productLists.length < before;
+  if (removed) await d.write();
+  return removed;
+}
+function catalogForSupplier(supplier) {
+  const ids = supplier.productListIds ?? [];
+  return ids.flatMap((id) => getProductList(id)?.items ?? []);
+}
 function migrateLegacy(data) {
   const legacy = data.connections.filter((c) => "from" in c || "to" in c);
   if (legacy.length === 0) return;
@@ -412,6 +522,48 @@ function migrateLegacy(data) {
   }
   data.connections = migrated;
 }
+function migrateInlineCatalogs(data) {
+  for (const supplier of data.suppliers) {
+    const legacy = supplier.catalog;
+    if (!legacy || legacy.length === 0) {
+      delete supplier.catalog;
+      continue;
+    }
+    if (supplier.productListIds && supplier.productListIds.length > 0) {
+      delete supplier.catalog;
+      continue;
+    }
+    const list = {
+      id: nanoid(8),
+      name: `${supplier.name} catalog`,
+      items: legacy,
+      createdAt: now(),
+      updatedAt: now()
+    };
+    data.productLists.push(list);
+    supplier.productListIds = [list.id];
+    delete supplier.catalog;
+  }
+}
+function migrateProfiles(data) {
+  for (const p of data.profiles) {
+    if (p.addressMode != null && p.shipToInSetup != null && p.contactInSetup != null) continue;
+    const preset = PROFILE_PRESETS.find((x) => x.id === p.id);
+    p.addressMode ??= preset?.addressMode ?? "full";
+    p.shipToInSetup ??= preset?.shipToInSetup ?? false;
+    p.contactInSetup ??= preset?.contactInSetup ?? false;
+  }
+}
+function migrateClassifications(data) {
+  for (const list of data.productLists) {
+    for (const item of list.items) {
+      if (!Array.isArray(item.classifications) || item.classifications.length === 0) {
+        item.classifications = item.unspsc ? [{ domain: "UNSPSC", value: String(item.unspsc) }] : [];
+      }
+      delete item.unspsc;
+    }
+  }
+}
 
 // src/server/routes/connections.ts
 var connectionsRoute = new Hono();
@@ -486,12 +638,40 @@ var cred = (c) => ({
   domain: String(c?.domain ?? ""),
   identity: String(c?.identity ?? "")
 });
+var str = (v) => v != null && String(v) !== "" ? String(v) : void 0;
+function address(a) {
+  if (a == null || typeof a !== "object") return void 0;
+  const out = {
+    addressId: str(a.addressId),
+    addressIdDomain: str(a.addressIdDomain),
+    name: str(a.name),
+    deliverTo: str(a.deliverTo),
+    street: str(a.street),
+    city: str(a.city),
+    state: str(a.state),
+    postalCode: str(a.postalCode),
+    countryIsoCode: str(a.countryIsoCode),
+    countryName: str(a.countryName),
+    email: str(a.email),
+    phone: str(a.phone)
+  };
+  return Object.values(out).some((v) => v != null) ? out : void 0;
+}
+function contact(c) {
+  const a = address(c);
+  const role = str(c?.role);
+  if (!a && !role) return void 0;
+  return { ...a ?? {}, role: role ?? "endUser" };
+}
 var buyersRoute = new Hono2();
 function normalizeBuyer(body) {
   return {
     name: String(body?.name ?? "Untitled buyer"),
     identity: cred(body?.identity),
-    profileId: body?.profileId ? String(body.profileId) : void 0
+    profileId: body?.profileId ? String(body.profileId) : void 0,
+    shipTo: address(body?.shipTo),
+    billTo: address(body?.billTo),
+    contact: contact(body?.contact)
   };
 }
 buyersRoute.get("/", (c) => c.json(listBuyers()));
@@ -519,22 +699,14 @@ buyersRoute.delete("/:id", async (c) => {
 });
 var suppliersRoute = new Hono2();
 function normalizeSupplier(body) {
-  const catalog = Array.isArray(body?.catalog) ? body.catalog.map((it) => ({
-    supplierPartId: String(it?.supplierPartId ?? ""),
-    description: String(it?.description ?? ""),
-    unitPrice: Number(it?.unitPrice ?? 0) || 0,
-    currency: String(it?.currency ?? "USD"),
-    uom: String(it?.uom ?? "EA"),
-    unspsc: String(it?.unspsc ?? ""),
-    manufacturerPartId: it?.manufacturerPartId ? String(it.manufacturerPartId) : void 0,
-    manufacturerName: it?.manufacturerName ? String(it.manufacturerName) : void 0
-  })) : void 0;
+  const productListIds = Array.isArray(body?.productListIds) ? body.productListIds.map((id) => String(id)) : [];
   return {
     name: String(body?.name ?? "Untitled supplier"),
     identity: cred(body?.identity),
     punchoutUrl: body?.punchoutUrl ? String(body.punchoutUrl) : void 0,
     orderUrl: body?.orderUrl ? String(body.orderUrl) : void 0,
-    catalog
+    productListIds,
+    allowMixedCurrency: Boolean(body?.allowMixedCurrency)
   };
 }
 suppliersRoute.get("/", (c) => c.json(listSuppliers()));
@@ -593,6 +765,7 @@ function normalizeProfile(body) {
   const cartReturnTransport = ["cxml-urlencoded", "cxml-base64", "raw"].includes(
     body?.cartReturnTransport
   ) ? body.cartReturnTransport : "cxml-urlencoded";
+  const addressMode = ["id-only", "full", "both"].includes(body?.addressMode) ? body.addressMode : "full";
   return {
     name: String(body?.name ?? "Untitled profile"),
     platform: body?.platform ? String(body.platform) : void 0,
@@ -601,7 +774,10 @@ function normalizeProfile(body) {
     setupOperation,
     attachmentEncoding,
     cartReturnTransport,
-    extrinsics: normalizeExtrinsics(body?.extrinsics)
+    extrinsics: normalizeExtrinsics(body?.extrinsics),
+    addressMode,
+    shipToInSetup: Boolean(body?.shipToInSetup),
+    contactInSetup: Boolean(body?.contactInSetup)
     // `builtin` is never set from the wire — only code-seeded presets carry it.
   };
 }
@@ -630,8 +806,66 @@ profilesRoute.delete("/:id", async (c) => {
 });
 profilePresetsRoute.get("/", (c) => c.json(PROFILE_PRESETS));
 
-// src/server/routes/flow.ts
+// src/server/routes/products.ts
 import { Hono as Hono4 } from "hono";
+var productsRoute = new Hono4();
+var productListPresetsRoute = new Hono4();
+function normalizeClassifications(it) {
+  if (Array.isArray(it?.classifications)) {
+    return it.classifications.map((c) => ({ domain: String(c?.domain ?? "UNSPSC"), value: String(c?.value ?? "") })).filter((c) => c.value.trim().length > 0);
+  }
+  if (it?.unspsc) return [{ domain: "UNSPSC", value: String(it.unspsc) }];
+  return [];
+}
+function normalizeItem(it) {
+  return {
+    supplierPartId: String(it?.supplierPartId ?? ""),
+    supplierPartAuxiliaryId: it?.supplierPartAuxiliaryId ? String(it.supplierPartAuxiliaryId) : void 0,
+    description: String(it?.description ?? ""),
+    unitPrice: Number(it?.unitPrice ?? 0) || 0,
+    currency: String(it?.currency ?? "USD"),
+    uom: String(it?.uom ?? "EA"),
+    classifications: normalizeClassifications(it),
+    manufacturerPartId: it?.manufacturerPartId ? String(it.manufacturerPartId) : void 0,
+    manufacturerName: it?.manufacturerName ? String(it.manufacturerName) : void 0,
+    allowFractional: Boolean(it?.allowFractional)
+  };
+}
+function normalizeProductList(body) {
+  const items = Array.isArray(body?.items) ? body.items.map(normalizeItem) : [];
+  return {
+    name: String(body?.name ?? "Untitled product list"),
+    description: body?.description ? String(body.description) : void 0,
+    items
+  };
+}
+productsRoute.get("/", (c) => c.json(listProductLists()));
+productsRoute.post("/", async (c) => {
+  const input = normalizeProductList(await c.req.json().catch(() => ({})));
+  if (!input.name.trim()) return c.json({ errors: ["name is required"] }, 400);
+  return c.json(await createProductList(input), 201);
+});
+productsRoute.get("/:id", (c) => {
+  const p = getProductList(c.req.param("id"));
+  return p ? c.json(p) : c.json({ error: "not found" }, 404);
+});
+productsRoute.put("/:id", async (c) => {
+  if (!getProductList(c.req.param("id"))) return c.json({ error: "not found" }, 404);
+  const input = normalizeProductList(await c.req.json().catch(() => ({})));
+  return c.json(await updateProductList(c.req.param("id"), input));
+});
+productsRoute.delete("/:id", async (c) => {
+  try {
+    const ok = await deleteProductList(c.req.param("id"));
+    return ok ? c.json({ ok: true }) : c.json({ error: "not found" }, 404);
+  } catch (e) {
+    return c.json({ error: e instanceof Error ? e.message : String(e) }, 409);
+  }
+});
+productListPresetsRoute.get("/", (c) => c.json(PRODUCT_LIST_PRESETS));
+
+// src/server/routes/flow.ts
+import { Hono as Hono5 } from "hono";
 import { nanoid as nanoid5 } from "nanoid";
 
 // src/server/store/log.ts
@@ -944,6 +1178,15 @@ function escapeXml(value) {
 function makePayloadId(host3, nowIso) {
   return `${nowIso}.${nanoid4(10)}@${host3}`;
 }
+function lineItemsTotal(items, headerCurrency) {
+  const currencies = new Set(items.map((it) => it.currency || headerCurrency));
+  if (currencies.size > 1) return 0;
+  return items.reduce((sum, it) => sum + (it.unitPriceAmount ?? 0) * it.quantity, 0);
+}
+function classificationBlock(it, indent) {
+  const list = it.classifications && it.classifications.length > 0 ? it.classifications : [{ domain: it.classificationDomain ?? "UNSPSC", value: it.classification ?? "" }];
+  return list.map((c) => `${indent}<Classification domain="${escapeXml(c.domain || "UNSPSC")}">${escapeXml(c.value)}</Classification>`).join("\n");
+}
 function credentialBlock(tag, c) {
   return `    <${tag}>
       <Credential domain="${escapeXml(c.domain)}">
@@ -989,6 +1232,11 @@ function extrinsicBlock(items, indent) {
 function buildSetupRequest(o) {
   const lang = o.lang ?? "en-US";
   const deployment = o.deploymentMode ? ` deploymentMode="${escapeXml(o.deploymentMode)}"` : "";
+  const mode = o.addressMode ?? "full";
+  const shipTo = o.shipTo ? `
+${addressBlock("ShipTo", o.shipTo, mode)}` : "";
+  const contact2 = o.contact ? `
+${contactBlock(o.contact, mode, "      ")}` : "";
   const inner = `${header({
     from: o.from,
     to: o.to,
@@ -1001,26 +1249,51 @@ function buildSetupRequest(o) {
       <BuyerCookie>${escapeXml(o.buyerCookie)}</BuyerCookie>
       <BrowserFormPost>
         <URL>${escapeXml(o.browserFormPostUrl)}</URL>
-      </BrowserFormPost>${extrinsicBlock(o.extrinsics, "      ")}
+      </BrowserFormPost>${extrinsicBlock(o.extrinsics, "      ")}${shipTo}${contact2}
     </PunchOutSetupRequest>
   </Request>`;
   return envelope(o.payloadId, o.timestamp, lang, inner, o.dtdVersion);
 }
-function addressBlock(tag, a) {
+var wantsId = (m) => m === "id-only" || m === "both";
+var wantsPostal = (m) => m === "full" || m === "both";
+var hasPostal = (a) => !!(a.deliverTo || a.street || a.city || a.state || a.postalCode);
+function idAttrs(a, mode) {
+  if (!wantsId(mode) || !a.addressId) return "";
+  return ` addressID="${escapeXml(a.addressId)}"${a.addressIdDomain ? ` addressIDDomain="${escapeXml(a.addressIdDomain)}"` : ""}`;
+}
+function postalBlock(a, indent) {
+  return `${indent}<PostalAddress>
+${a.deliverTo ? `${indent}  <DeliverTo>${escapeXml(a.deliverTo)}</DeliverTo>
+` : ""}${indent}  <Street>${escapeXml(a.street ?? "")}</Street>
+${indent}  <City>${escapeXml(a.city ?? "")}</City>
+${indent}  <State>${escapeXml(a.state ?? "")}</State>
+${indent}  <PostalCode>${escapeXml(a.postalCode ?? "")}</PostalCode>
+${indent}  <Country isoCountryCode="${escapeXml(a.countryIsoCode ?? "US")}">${escapeXml(a.countryName ?? "United States")}</Country>
+${indent}</PostalAddress>`;
+}
+function contactInfo(a, indent) {
+  const email = a.email ? `
+${indent}<Email>${escapeXml(a.email)}</Email>` : "";
+  const phone = a.phone ? `
+${indent}<Phone><TelephoneNumber><Number>${escapeXml(a.phone)}</Number></TelephoneNumber></Phone>` : "";
+  return email + phone;
+}
+function addressBlock(tag, a, mode) {
+  const postal = wantsPostal(mode) ? `
+${postalBlock(a, "          ")}` : "";
   return `      <${tag}>
-        <Address${a.addressId ? ` addressID="${escapeXml(a.addressId)}"` : ""}>
-          <Name xml:lang="en">${escapeXml(a.name ?? "")}</Name>
-          <PostalAddress>
-${a.deliverTo ? `            <DeliverTo>${escapeXml(a.deliverTo)}</DeliverTo>
-` : ""}            <Street>${escapeXml(a.street ?? "")}</Street>
-            <City>${escapeXml(a.city ?? "")}</City>
-            <State>${escapeXml(a.state ?? "")}</State>
-            <PostalCode>${escapeXml(a.postalCode ?? "")}</PostalCode>
-            <Country isoCountryCode="${escapeXml(a.countryIsoCode ?? "US")}">${escapeXml(a.countryName ?? "United States")}</Country>
-          </PostalAddress>
+        <Address${idAttrs(a, mode)}>
+          <Name xml:lang="en">${escapeXml(a.name ?? "")}</Name>${postal}${contactInfo(a, "          ")}
         </Address>
       </${tag}>`;
 }
+function contactBlock(c, mode, indent) {
+  const postal = mode !== "id-only" && hasPostal(c) ? `
+${postalBlock(c, indent + "  ")}` : "";
+  return `${indent}<Contact role="${escapeXml(c.role || "endUser")}"${idAttrs(c, mode)}>
+${indent}  <Name xml:lang="en">${escapeXml(c.name ?? "")}</Name>${postal}${contactInfo(c, indent + "  ")}
+${indent}</Contact>`;
+}
 function commentsWithAttachments(cids, indent) {
   if (cids.length === 0) return "";
   const atts = cids.map(
@@ -1054,14 +1327,15 @@ function buildOrderRequest(o) {
           </UnitPrice>
           <Description xml:lang="en">${escapeXml(it.description ?? "")}</Description>
           <UnitOfMeasure>${escapeXml(it.uom ?? "EA")}</UnitOfMeasure>
-          <Classification domain="${escapeXml(it.classificationDomain ?? "UNSPSC")}">${escapeXml(
-      it.classification ?? ""
-    )}</Classification>${it.manufacturerPartId ? `
+${classificationBlock(it, "          ")}${it.manufacturerPartId ? `
           <ManufacturerPartID>${escapeXml(it.manufacturerPartId)}</ManufacturerPartID>` : ""}${it.manufacturerName ? `
           <ManufacturerName>${escapeXml(it.manufacturerName)}</ManufacturerName>` : ""}${commentsWithAttachments(cids, "          ")}
         </ItemDetail>
       </ItemOut>`;
   }).join("\n");
+  const mode = o.addressMode ?? "full";
+  const contact2 = o.contact ? `
+${contactBlock(o.contact, mode, "        ")}` : "";
   const inner = `${header({
     from: o.from,
     to: o.to,
@@ -1077,8 +1351,8 @@ function buildOrderRequest(o) {
         <Total>
           <Money currency="${escapeXml(o.currency)}">${escapeXml(o.total)}</Money>
         </Total>
-${addressBlock("ShipTo", o.shipTo ?? {})}
-${addressBlock("BillTo", o.billTo ?? {})}${commentsWithAttachments(orderLevelCids, "        ")}${extrinsicBlock(
+${addressBlock("ShipTo", o.shipTo ?? {}, mode)}
+${addressBlock("BillTo", o.billTo ?? {}, mode)}${contact2}${commentsWithAttachments(orderLevelCids, "        ")}${extrinsicBlock(
     o.extrinsics,
     "        "
   )}
@@ -1116,10 +1390,7 @@ function buildResponseStatus(o) {
   return envelope(o.payloadId, o.timestamp, o.lang ?? "en-US", inner, o.dtdVersion);
 }
 function buildPunchOutOrderMessage(o) {
-  const total = o.items.reduce(
-    (sum, it) => sum + (it.unitPriceAmount ?? 0) * it.quantity,
-    0
-  );
+  const total = lineItemsTotal(o.items, o.currency);
   const items = o.items.map(
     (it) => `    <ItemIn quantity="${escapeXml(it.quantity)}">
       <ItemID>
@@ -1134,9 +1405,7 @@ function buildPunchOutOrderMessage(o) {
         </UnitPrice>
         <Description xml:lang="en">${escapeXml(it.description ?? "")}</Description>
         <UnitOfMeasure>${escapeXml(it.uom ?? "EA")}</UnitOfMeasure>
-        <Classification domain="${escapeXml(it.classificationDomain ?? "UNSPSC")}">${escapeXml(
-      it.classification ?? ""
-    )}</Classification>${it.manufacturerPartId ? `
+${classificationBlock(it, "        ")}${it.manufacturerPartId ? `
         <ManufacturerPartID>${escapeXml(it.manufacturerPartId)}</ManufacturerPartID>` : ""}
       </ItemDetail>
     </ItemIn>`
@@ -1326,8 +1595,8 @@ function parseCart(doc) {
   const items = asArray(pom?.ItemIn).map((it) => {
     const detail = it?.ItemDetail;
     const up = money(detail?.UnitPrice);
-    const classification = detail?.Classification;
-    const classFirst = Array.isArray(classification) ? classification[0] : classification;
+    const classifications = asArray(detail?.Classification).filter((c) => c != null).map((c) => ({ domain: attr(c, "domain") ?? "", value: text(c) ?? "" }));
+    const classFirst = classifications[0];
     return {
       quantity: Number(attr(it, "quantity") ?? "1") || 1,
       supplierPartId: text(it?.ItemID?.SupplierPartID),
@@ -1336,8 +1605,9 @@ function parseCart(doc) {
       uom: text(detail?.UnitOfMeasure),
       unitPriceAmount: up.amount,
       currency: up.currency,
-      classificationDomain: attr(classFirst, "domain"),
-      classification: text(classFirst),
+      classifications: classifications.length > 0 ? classifications : void 0,
+      classificationDomain: classFirst?.domain,
+      classification: classFirst?.value,
       manufacturerPartId: text(detail?.ManufacturerPartID),
       manufacturerName: text(detail?.ManufacturerName)
     };
@@ -1500,6 +1770,7 @@ function checkPunchback(doc, ctx, issues) {
     issues.warn("empty-cart", "PunchOutOrderMessage contains no ItemIn elements", "cXML/.../PunchOutOrderMessage");
   }
   let lineSum = 0;
+  const lineCurrencies = [];
   items.forEach((it, i) => {
     const base = `cXML/.../ItemIn[${i + 1}]`;
     const qty = num(attr(it, "quantity"));
@@ -1516,10 +1787,13 @@ function checkPunchback(doc, ctx, issues) {
     }
     const up = detail.UnitPrice?.Money;
     const upAmount = num(text(up));
+    const upCurrency = attr(up, "currency");
     if (up == null) {
       issues.error("item-missing-unitprice", `ItemIn[${i + 1}] is missing ItemDetail/UnitPrice/Money`, `${base}/ItemDetail/UnitPrice`);
-    } else if (!attr(up, "currency")) {
+    } else if (!upCurrency) {
       issues.error("item-missing-currency", `ItemIn[${i + 1}] UnitPrice/Money is missing @currency`, `${base}/ItemDetail/UnitPrice/Money`);
+    } else {
+      lineCurrencies.push(upCurrency);
     }
     if (!text(detail.Description)) {
       issues.error("item-missing-description", `ItemIn[${i + 1}] is missing ItemDetail/Description`, `${base}/ItemDetail/Description`);
@@ -1535,7 +1809,14 @@ function checkPunchback(doc, ctx, issues) {
     }
     if (qty != null && upAmount != null) lineSum += qty * upAmount;
   });
-  if (totalAmount != null && items.length > 0) {
+  const singleCurrency = checkSingleCurrency(
+    lineCurrencies,
+    totalCurrency,
+    issues,
+    "cXML/.../PunchOutOrderMessageHeader/Total",
+    ctx.allowMixedCurrency
+  );
+  if (singleCurrency && totalAmount != null && items.length > 0) {
     const diff = Math.abs(totalAmount - lineSum);
     if (diff > 0.01) {
       issues.warn(
@@ -1546,6 +1827,41 @@ function checkPunchback(doc, ctx, issues) {
     }
   }
 }
+function checkSingleCurrency(lineCurrencies, totalCurrency, issues, path, allowMixed = false) {
+  const all = new Set(lineCurrencies.filter(Boolean));
+  if (totalCurrency) all.add(totalCurrency);
+  if (all.size > 1) {
+    const list = [...all].join(", ");
+    if (allowMixed) {
+      issues.warn(
+        "mixed-currency",
+        `Multiple currencies in one document (${list}); allowed for this supplier. The header Total is a single Money \u2014 rely on the per-line currencies.`,
+        path
+      );
+    } else {
+      issues.error(
+        "mixed-currency",
+        `Multiple currencies in one document (${list}). A cXML Total is a single Money \u2014 all line items and the Total must share one currency.`,
+        path
+      );
+    }
+    return false;
+  }
+  return true;
+}
+function checkAddressComplete(addr, label, issues) {
+  if (addr == null) return;
+  const hasId = !!attr(addr, "addressID");
+  const postal = addr.PostalAddress;
+  const hasPostal2 = !!(text(postal?.Street) || text(postal?.City));
+  if (!hasId && !hasPostal2) {
+    issues.warn(
+      `${label.toLowerCase()}-incomplete`,
+      `${label}/Address has neither an addressID nor a Street/City \u2014 the address is empty`,
+      `cXML/.../OrderRequestHeader/${label}/Address`
+    );
+  }
+}
 function checkOrderRequest(doc, ctx, issues) {
   const orderReq = root(doc)?.Request?.OrderRequest;
   if (!orderReq) {
@@ -1564,26 +1880,41 @@ function checkOrderRequest(doc, ctx, issues) {
   }
   if (!header2?.ShipTo) {
     issues.warn("missing-shipto", "OrderRequestHeader/ShipTo is missing", "cXML/.../OrderRequestHeader/ShipTo");
+  } else {
+    checkAddressComplete(header2.ShipTo.Address, "ShipTo", issues);
   }
   if (!header2?.BillTo) {
     issues.warn("missing-billto", "OrderRequestHeader/BillTo is missing", "cXML/.../OrderRequestHeader/BillTo");
+  } else {
+    checkAddressComplete(header2.BillTo.Address, "BillTo", issues);
+  }
+  for (const contact2 of asArray(header2?.Contact)) {
+    if (!attr(contact2, "role")) {
+      issues.warn("contact-missing-role", "OrderRequestHeader/Contact is missing @role", "cXML/.../OrderRequestHeader/Contact");
+    }
   }
   const items = asArray(orderReq.ItemOut);
   if (items.length === 0) {
     issues.error("no-itemout", "OrderRequest contains no ItemOut elements", "cXML/.../OrderRequest");
   }
+  const lineCurrencies = [];
   items.forEach((it, i) => {
     const base = `cXML/.../ItemOut[${i + 1}]`;
     if (!text(it?.ItemID?.SupplierPartID)) {
       issues.error("itemout-missing-id", `ItemOut[${i + 1}] is missing ItemID/SupplierPartID`, `${base}/ItemID`);
     }
-    if (it?.ItemDetail?.UnitPrice?.Money == null) {
+    const up = it?.ItemDetail?.UnitPrice?.Money;
+    if (up == null) {
       issues.error("itemout-missing-unitprice", `ItemOut[${i + 1}] is missing ItemDetail/UnitPrice/Money`, `${base}/ItemDetail/UnitPrice`);
+    } else {
+      const cur = attr(up, "currency");
+      if (cur) lineCurrencies.push(cur);
     }
     if (num(attr(it, "quantity")) == null) {
       issues.error("itemout-missing-quantity", `ItemOut[${i + 1}] is missing @quantity`, base);
     }
   });
+  checkSingleCurrency(lineCurrencies, attr(header2?.Total?.Money, "currency"), issues, "cXML/.../OrderRequestHeader/Total", ctx.allowMixedCurrency);
   const refs = collectCidReferences(doc);
   const available = ctx.availableContentIds;
   const referenced = /* @__PURE__ */ new Set();
@@ -1665,7 +1996,7 @@ function validateDocument(raw, ctx = {}) {
 }
 
 // src/server/routes/flow.ts
-var flowRoute = new Hono4();
+var flowRoute = new Hono5();
 function host() {
   try {
     return new URL(getPublicUrl()).host;
@@ -1690,7 +2021,18 @@ function buyerContext(r) {
     connectionId: connection.id,
     attachmentEncoding: eff.attachmentEncoding,
     eff,
-    expected: { from, to, sender, sharedSecret: connection.sharedSecret }
+    expected: { from, to, sender, sharedSecret: connection.sharedSecret },
+    allowMixedCurrency: supplier.allowMixedCurrency ?? false,
+    shipTo: buyer.shipTo,
+    billTo: buyer.billTo,
+    contact: buyer.contact
+  };
+}
+function setupAddresses(ctx) {
+  return {
+    shipTo: ctx.eff.shipToInSetup ? ctx.shipTo : void 0,
+    contact: ctx.eff.contactInSetup ? ctx.contact : void 0,
+    addressMode: ctx.eff.addressMode
   };
 }
 function setupExtrinsics(ctx, buyerCookie) {
@@ -1723,7 +2065,8 @@ flowRoute.get("/:id/setup/preview", (c) => {
     operation: ctx.eff.setupOperation,
     dtdVersion: dtdVersionFor(ctx.eff, "SetupRequest"),
     userAgent: ctx.eff.userAgent,
-    extrinsics: setupExtrinsics(ctx, buyerCookie)
+    extrinsics: setupExtrinsics(ctx, buyerCookie),
+    ...setupAddresses(ctx)
   });
   return c.json({ buyerCookie, xml, browserFormPostUrl: browserFormPostUrl() });
 });
@@ -1746,7 +2089,8 @@ flowRoute.post("/:id/setup", async (c) => {
     operation: ctx.eff.setupOperation,
     dtdVersion: dtdVersionFor(ctx.eff, "SetupRequest"),
     userAgent: ctx.eff.userAgent,
-    extrinsics: setupExtrinsics(ctx, buyerCookie)
+    extrinsics: setupExtrinsics(ctx, buyerCookie),
+    ...setupAddresses(ctx)
   });
   rememberSessionConnection(buyerCookie, ctx.connectionId);
   const reqValidation = validateDocument(xml, { expected: ctx.expected, forceDocType: "SetupRequest" });
@@ -1789,7 +2133,7 @@ flowRoute.post("/:id/setup", async (c) => {
 function buildOrderXml(ctx, body) {
   const items = body.items ?? [];
   const currency = body.currency || items[0]?.currency || "USD";
-  const total = body.total ?? items.reduce((s, it) => s + (it.unitPriceAmount ?? 0) * it.quantity, 0);
+  const total = body.total ?? lineItemsTotal(items, currency);
   const orderId = body.orderId || `PO-${nanoid5(8)}`;
   const attMeta = (body.attachments ?? []).map((a) => ({
     contentId: a.contentId,
@@ -1808,8 +2152,12 @@ function buildOrderXml(ctx, body) {
     currency,
     total,
     items,
-    shipTo: body.shipTo,
-    billTo: body.billTo,
+    // Order addresses default to the buyer's configured defaults when the body
+    // doesn't override them (the UI pre-fills from the buyer, editable per order).
+    shipTo: body.shipTo ?? ctx.shipTo,
+    billTo: body.billTo ?? ctx.billTo,
+    contact: body.contact ?? ctx.contact,
+    addressMode: ctx.eff.addressMode,
     attachments: attMeta,
     dtdVersion: dtdVersionFor(ctx.eff, "OrderRequest"),
     userAgent: ctx.eff.userAgent,
@@ -1863,7 +2211,8 @@ flowRoute.post("/:id/order", async (c) => {
   const reqValidation = validateDocument(xml, {
     expected: ctx.expected,
     forceDocType: "OrderRequest",
-    availableContentIds: inputAtts.length > 0 ? availableContentIds : void 0
+    availableContentIds: inputAtts.length > 0 ? availableContentIds : void 0,
+    allowMixedCurrency: ctx.allowMixedCurrency
   });
   const reqLog = appendLog({
     sessionId,
@@ -1904,8 +2253,8 @@ flowRoute.post("/:id/order", async (c) => {
 });
 
 // src/server/routes/punchout-return.ts
-import { Hono as Hono5 } from "hono";
-var punchoutReturnRoute = new Hono5();
+import { Hono as Hono6 } from "hono";
+var punchoutReturnRoute = new Hono6();
 async function extractCxml(c) {
   const ct = (c.req.header("content-type") ?? "").toLowerCase();
   if (ct.includes("application/x-www-form-urlencoded") || ct.includes("multipart/form-data")) {
@@ -1973,9 +2322,9 @@ punchoutReturnRoute.post("/return", async (c) => {
 });
 
 // src/server/routes/stream.ts
-import { Hono as Hono6 } from "hono";
+import { Hono as Hono7 } from "hono";
 import { streamSSE } from "hono/streaming";
-var streamRoute = new Hono6();
+var streamRoute = new Hono7();
 var MAX_STREAMS = 64;
 var activeStreams = 0;
 streamRoute.get("/stream", (c) => {
@@ -2007,8 +2356,8 @@ streamRoute.get("/stream", (c) => {
 });
 
 // src/server/routes/data.ts
-import { Hono as Hono7 } from "hono";
-var dataRoute = new Hono7();
+import { Hono as Hono8 } from "hono";
+var dataRoute = new Hono8();
 function rawMessage(record) {
   const ct = record.contentType ?? record.headers?.["Content-Type"] ?? record.headers?.["content-type"];
   let body = record.body;
@@ -2060,13 +2409,13 @@ dataRoute.get("/attachments/:hash", (c) => {
 });
 
 // src/server/routes/sim.ts
-import { Hono as Hono8 } from "hono";
+import { Hono as Hono9 } from "hono";
 import { nanoid as nanoid6 } from "nanoid";
-var simRoute = new Hono8();
+var simRoute = new Hono9();
 var DEMO_CATALOG = [
-  { supplierPartId: "WIDGET-001", description: "Premium Steel Widget", unitPrice: 12.5, currency: "USD", uom: "EA", unspsc: "31161500", manufacturerPartId: "MFR-W001", manufacturerName: "Acme Manufacturing" },
-  { supplierPartId: "BOLT-250", description: "M8 Hex Bolt (pack of 250)", unitPrice: 34, currency: "USD", uom: "PK", unspsc: "31161600", manufacturerPartId: "MFR-B250", manufacturerName: "Acme Manufacturing" },
-  { supplierPartId: "TAPE-RED", description: "Industrial Marking Tape, Red", unitPrice: 5.75, currency: "USD", uom: "RL", unspsc: "31201500" }
+  { supplierPartId: "WIDGET-001", description: "Premium Steel Widget", unitPrice: 12.5, currency: "USD", uom: "EA", classifications: [{ domain: "UNSPSC", value: "31161500" }], manufacturerPartId: "MFR-W001", manufacturerName: "Acme Manufacturing" },
+  { supplierPartId: "BOLT-250", description: "M8 Hex Bolt (pack of 250)", unitPrice: 34, currency: "USD", uom: "PK", classifications: [{ domain: "UNSPSC", value: "31161600" }], manufacturerPartId: "MFR-B250", manufacturerName: "Acme Manufacturing" },
+  { supplierPartId: "TAPE-RED", description: "Industrial Marking Tape, Red", unitPrice: 5.75, currency: "USD", uom: "RL", classifications: [{ domain: "UNSPSC", value: "31201500" }] }
 ];
 function host2() {
   try {
@@ -2075,7 +2424,10 @@ function host2() {
     return "punchout-simulator";
   }
 }
-var catalogOf = (s) => s.catalog && s.catalog.length > 0 ? s.catalog : DEMO_CATALOG;
+var catalogOf = (s) => {
+  const items = catalogForSupplier(s);
+  return items.length > 0 ? items : DEMO_CATALOG;
+};
 function safeHttpUrl(u) {
   if (!u) return "";
   try {
@@ -2152,13 +2504,15 @@ simRoute.get("/:id/catalog", (c) => {
   const bd = c.req.query("bd") ?? "";
   const bi = c.req.query("bi") ?? "";
   const items = catalogOf(supplier);
-  const rows = items.map(
-    (it, i) => `<tr>
-      <td><strong>${escapeXml(it.description)}</strong><br><small>${escapeXml(it.supplierPartId)} \xB7 ${escapeXml(it.uom)} \xB7 UNSPSC ${escapeXml(it.unspsc)}</small></td>
+  const rows = items.map((it, i) => {
+    const partId = escapeXml(it.supplierPartId) + (it.supplierPartAuxiliaryId ? ` / ${escapeXml(it.supplierPartAuxiliaryId)}` : "");
+    const cls = (it.classifications ?? []).map((c2) => `${escapeXml(c2.domain)} ${escapeXml(c2.value)}`).join(" \xB7 ");
+    return `<tr>
+      <td><strong>${escapeXml(it.description)}</strong><br><small>${partId} \xB7 ${escapeXml(it.uom)}${cls ? ` \xB7 ${cls}` : ""}</small></td>
       <td class="price">${escapeXml(it.currency)} ${it.unitPrice.toFixed(2)}</td>
-      <td><input type="number" name="q_${i}" value="0" min="0" step="1" inputmode="numeric"></td>
-    </tr>`
-  ).join("\n");
+      <td><input type="number" name="q_${i}" value="0" min="0" step="${it.allowFractional ? "any" : "1"}" inputmode="${it.allowFractional ? "decimal" : "numeric"}"></td>
+    </tr>`;
+  }).join("\n");
   return c.html(`<!doctype html><html lang="en"><head><meta charset="utf-8">
 <meta name="viewport" content="width=device-width, initial-scale=1">
 <title>${escapeXml(supplier.name)} \u2014 mock catalog</title>
@@ -2197,17 +2551,22 @@ simRoute.post("/:id/checkout", async (c) => {
   const catalog = catalogOf(supplier);
   const items = [];
   catalog.forEach((it, i) => {
-    const qty = Number(form[`q_${i}`] ?? 0);
+    let qty = Number(form[`q_${i}`] ?? 0);
+    if (!it.allowFractional) qty = Math.floor(qty);
     if (qty > 0) {
       items.push({
         quantity: qty,
         supplierPartId: it.supplierPartId,
+        supplierPartAuxiliaryId: it.supplierPartAuxiliaryId,
         description: it.description,
         uom: it.uom,
         unitPriceAmount: it.unitPrice,
         currency: it.currency,
-        classificationDomain: "UNSPSC",
-        classification: it.unspsc,
+        classifications: it.classifications,
+        // Keep the legacy single fields populated from the first classification
+        // for back-compat display (CartView) and any single-domain consumer.
+        classificationDomain: it.classifications[0]?.domain,
+        classification: it.classifications[0]?.value,
         manufacturerPartId: it.manufacturerPartId,
         manufacturerName: it.manufacturerName
       });
@@ -2233,7 +2592,10 @@ simRoute.post("/:id/checkout", async (c) => {
     docType: "PunchOutOrderMessage",
     headers: { "Content-Type": "application/x-www-form-urlencoded" },
     body: xml,
-    validation: validateDocument(xml, { forceDocType: "PunchOutOrderMessage" })
+    validation: validateDocument(xml, {
+      forceDocType: "PunchOutOrderMessage",
+      allowMixedCurrency: supplier.allowMixedCurrency
+    })
   });
   const transport = eff?.cartReturnTransport ?? "cxml-urlencoded";
   return c.html(cartReturnPage(formpost, xml, transport));
@@ -2303,7 +2665,8 @@ simRoute.post("/:id/order", async (c) => {
   const validation = validateDocument(xml, {
     expected: expectedFor(supplier.id, from),
     forceDocType: "OrderRequest",
-    availableContentIds: isMultipart(ct) ? availableContentIds : void 0
+    availableContentIds: isMultipart(ct) ? availableContentIds : void 0,
+    allowMixedCurrency: supplier.allowMixedCurrency
   });
   appendLog({
     sessionId,
@@ -2350,7 +2713,7 @@ function findSessionForOrder(doc) {
 // src/server/app.ts
 import { relative } from "path";
 function createApp(opts = {}) {
-  const app = new Hono9();
+  const app = new Hono10();
   if (!opts.quiet) app.use("*", logger());
   app.use(
     "*",
@@ -2369,6 +2732,8 @@ function createApp(opts = {}) {
   app.route("/api/suppliers", suppliersRoute);
   app.route("/api/profiles", profilesRoute);
   app.route("/api/profile-presets", profilePresetsRoute);
+  app.route("/api/product-lists", productsRoute);
+  app.route("/api/product-list-presets", productListPresetsRoute);
   app.route("/api/connections", connectionsRoute);
   app.route("/api/connections", flowRoute);
   app.route("/api", dataRoute);
@@ -2402,7 +2767,33 @@ async function seedDemoIfEmpty() {
     identity: { domain: "DUNS", identity: "123456789" },
     // Exercise a non-default platform profile end-to-end (Coupa: per-doc-type
     // DTD versions, base64 attachments). Built-in profiles are seeded by initConfig.
-    profileId: "coupa"
+    profileId: "coupa",
+    // Default addresses + end-user contact, so the OrderRequest is populated and
+    // the address feature is exercised out of the box.
+    shipTo: {
+      addressId: "1001",
+      addressIdDomain: "buyerSystemID",
+      name: "Demo Buyer HQ \u2014 Receiving",
+      deliverTo: "Dock 3",
+      street: "1 Market St",
+      city: "San Francisco",
+      state: "CA",
+      postalCode: "94105",
+      countryIsoCode: "US",
+      countryName: "United States"
+    },
+    billTo: {
+      addressId: "9001",
+      addressIdDomain: "buyerSystemID",
+      name: "Demo Buyer Accounts Payable",
+      street: "1 Market St",
+      city: "San Francisco",
+      state: "CA",
+      postalCode: "94105",
+      countryIsoCode: "US",
+      countryName: "United States"
+    },
+    contact: { role: "endUser", name: "Jane Buyer", email: "jane.buyer@demo.example", phone: "+1 555 0100" }
   });
   const supplier = await createSupplier({
     id: "demo-supplier",
@@ -2410,7 +2801,8 @@ async function seedDemoIfEmpty() {
     identity: { domain: "DUNS", identity: "987654321" },
     punchoutUrl: `${getPublicUrl()}/sim/demo-supplier/punchout`,
     orderUrl: `${getPublicUrl()}/sim/demo-supplier/order`,
-    catalog: []
+    // Serve the built-in sample assortment (seeded by initConfig).
+    productListIds: ["sample"]
   });
   await createConnection({
     id: "demo",