punchout-simulator 0.8.0 → 0.8.1

package/README.md

@@ -187,6 +187,26 @@ them up there, then run them from **Sessions**.
 - **Mode B may need the tool publicly reachable.** A real buyer system sends
   SetupRequest/OrderRequest *inbound* to the tool. If that system is remote, run
   behind ngrok/cloudflared and pass `--public-url <https://...>`.
+- **Behind a corporate proxy?** Node's `fetch` ignores the system proxy by
+  default, so on a locked-down network an outbound SetupRequest/OrderRequest can
+  hang until it times out and shows **`HTTP 0` / "operation was aborted"** even
+  though the endpoint works in Postman. The tool honours the standard
+  `HTTP_PROXY` / `HTTPS_PROXY` / `NO_PROXY` environment variables — set them and
+  it routes outbound cXML through the proxy (loopback/`localhost` always bypasses
+  it, so the built-in mock still works). Works on Windows and Linux:
+
+  ```bash
+  # Linux/macOS
+  HTTPS_PROXY=http://proxy.corp:8080 npx punchout-simulator
+  ```
+  ```powershell
+  # Windows PowerShell
+  $env:HTTPS_PROXY="http://proxy.corp:8080"; npx punchout-simulator
+  ```
+
+  > Note: a Windows *system* proxy (set in Windows/Edge settings, or via a PAC
+  > file) is not an environment variable — set `HTTPS_PROXY` explicitly to the
+  > proxy URL your IT uses.
 
 ---
 

package/dist/server/cli.js

@@ -3041,6 +3041,50 @@ async function seedDemoIfEmpty() {
   });
 }
 
+// src/server/proxy.ts
+import { EnvHttpProxyAgent, setGlobalDispatcher } from "undici";
+var LOOPBACK = ["localhost", "127.0.0.1", "::1"];
+function redactProxyUrl(url) {
+  try {
+    const u = new URL(url);
+    if (u.username || u.password) {
+      u.username = "";
+      u.password = "";
+      return u.toString();
+    }
+    return url;
+  } catch {
+    return url;
+  }
+}
+function mergeNoProxy(existing) {
+  const have = (existing ?? "").split(",").map((s) => s.trim()).filter(Boolean);
+  const lower = new Set(have.map((s) => s.toLowerCase()));
+  const merged = [...have];
+  for (const h of LOOPBACK) if (!lower.has(h)) merged.push(h);
+  return merged.join(",");
+}
+function detectProxy(env = process.env) {
+  const httpProxy = env.HTTP_PROXY || env.http_proxy || void 0;
+  const httpsProxy = env.HTTPS_PROXY || env.https_proxy || void 0;
+  return {
+    httpProxy,
+    httpsProxy,
+    noProxy: mergeNoProxy(env.NO_PROXY || env.no_proxy),
+    enabled: !!(httpProxy || httpsProxy)
+  };
+}
+function setupProxy(env = process.env, log = (m) => console.log(m)) {
+  const s = detectProxy(env);
+  if (!s.enabled) return null;
+  env.NO_PROXY = s.noProxy;
+  env.no_proxy = s.noProxy;
+  setGlobalDispatcher(new EnvHttpProxyAgent());
+  const via = s.httpsProxy ? redactProxyUrl(s.httpsProxy) : redactProxyUrl(s.httpProxy ?? "");
+  log(`  proxy:      outbound cXML via ${via} (NO_PROXY=${s.noProxy})`);
+  return s;
+}
+
 // src/server/cli.ts
 function parseFlags(argv) {
   const flags = {
@@ -3091,7 +3135,7 @@ function parseFlags(argv) {
   }
   return flags;
 }
-var LOOPBACK = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "::1", "[::1]", ""]);
+var LOOPBACK2 = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "::1", "[::1]", ""]);
 function hostnameOf(url) {
   try {
     return new URL(url).hostname;
@@ -3127,9 +3171,10 @@ Options:
 }
 async function main() {
   const flags = parseFlags(process.argv.slice(2));
+  setupProxy();
   const publicUrl = flags.publicUrl ?? `http://localhost:${flags.port}`;
   const bindHost = flags.host ?? "127.0.0.1";
-  const exposed = !LOOPBACK.has(hostnameOf(publicUrl)) || !LOOPBACK.has(bindHost);
+  const exposed = !LOOPBACK2.has(hostnameOf(publicUrl)) || !LOOPBACK2.has(bindHost);
   const token = flags.token || (exposed ? nanoid7(24) : void 0);
   setDataDir(flags.dataDir);
   setRuntime({ port: flags.port, publicUrl, token, version: readVersion() });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "punchout-simulator",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "description": "A developer tool for testing cXML PunchOut integrations by acting as a virtual counterparty (virtual buyer or virtual supplier).",
   "keywords": [
     "punchout",
@@ -52,7 +52,8 @@
     "hono": "^4.6.14",
     "lowdb": "^7.0.1",
     "nanoid": "^5.0.9",
-    "open": "^10.1.0"
+    "open": "^10.1.0",
+    "undici": "^8.4.1"
   },
   "devDependencies": {
     "@monaco-editor/react": "^4.6.0",