hookwright 1.0.0 → 1.1.0

package/README.md

@@ -38,7 +38,7 @@ hookwright              # interactive UI — starts in the setup wizard on first
 | Setup | asks for |
 |---|---|
 | **Shopify** | store domain + Admin API access token (needs `read_products`). Verifies immediately and picks up currency, country, province and contact details from the store record |
-| **Webhook** | just the destination URL, plus the signing secret |
+| **Webhook** | one destination URL + signing secret **per integration** — Cashfree, Razorpay Magic and Nitro each get their own |
 | **Customer** | the shopper the abandoned cart belongs to |
 | **Defaults** | currency, platform |
 
@@ -50,14 +50,27 @@ Then **Integrations → Cashfree One Click Checkout** builds the payload:
 2. Variant and quantity per product
 3. Cart discount
 4. Either accept the suggested values, or **review every field** — each one is pre-filled with the generated suggestion, enter accepts it, typing replaces it
-5. Pre-flight report, then send
+5. Pre-flight report — every check, the full field coverage table, the signed request and the complete payload
+6. A **ready-to-paste `curl` is copied to your clipboard** automatically, then send
+
+### The curl is built for pasting
+
+The command is emitted in the exact shape Postman itself exports — `curl --location --request POST` with unindented `--header` / `--data` lines — and the body is inlined, never `@file`. Drop it straight into **Postman → Import → Raw text**, a colleague's terminal, or a bug report.
+
+Single quotes inside product titles (`Levi's 501`) are escaped, and the signature travels with the exact body it signs, so a pasted command verifies precisely as the original request would.
+
+Two things keep this honest: a test that executes the generated command verbatim against a receiver doing real HMAC verification, and a test that runs it through **`curl-to-postmanv2`** — the same parser Postman uses for Raw-text import — asserting the URL, method, every header and a byte-identical body all survive.
+
+In the report screen: `c` re-copies the curl · `j` copies the raw payload JSON · `p` toggles the full payload view.
 
 ## Headless usage
 
 Every command works without a TTY, for CI or scripting:
 
 ```bash
-hookwright build --items 2                 # build from the 2 first products
+hookwright build --items 2                              # cashfree-occ by default
+hookwright build --provider razorpay-magic --items 2
+hookwright build --provider nitro --event orders/create
 hookwright build --search "cold brew"      # only products matching a title
 hookwright build --items 3 --discount 250 --send
 hookwright send --dry-run                  # print the request + curl, send nothing
@@ -78,6 +91,7 @@ A generated payload is useless if the receiver silently drops it, so every build
 - **Phone** — parsed to E.164 using the shipping `country_code`, the same way the consumer does.
 - **Phone allow-list** — refuses to build for a number that isn't an approved test handset, so a live shopper can never be messaged by a test run.
 - **Product images** — every `image_url` is `HEAD`-checked; unreachable images fail the build.
+- **Endpoint exists** — before a signed payload is handed over, the destination is verified: the hostname must resolve, something must accept a TCP connection on the port, and the path must not 404. A typo'd host is caught here instead of looking like a silent delivery failure. The probe is `OPTIONS`, falling back to `HEAD` — **never a POST and never a body**, so it cannot create data on the receiving system. Timeouts and servers that reject `OPTIONS` warn rather than block. Skip with `--no-endpoint-check`, override with `--force`.
 - **Field coverage** — a table of every field the consumer reads, what it maps to, and its value. Missing required fields are flagged in red.
 
 Sending is also blocked when the target looks like production, unless `--force`.
@@ -94,18 +108,26 @@ Override both locations with `HOOKWRIGHT_HOME`, or point at one config with `--c
 
 ## Providers
 
-| provider | signature | headers |
-|---|---|---|
-| `cashfree-occ` | base64 HMAC-SHA256 over `timestamp + body` | `x-webhook-signature`, `x-webhook-timestamp` |
+| provider | signature | headers | events |
+|---|---|---|---|
+| `cashfree-occ` | base64 HMAC-SHA256 over `timestamp + body` | `x-webhook-signature`, `x-webhook-timestamp` | abandoned checkout |
+| `razorpay-magic` | hex HMAC-SHA256 over the body | `x-razorpay-signature` | abandoned checkout |
+| `nitro` | static bearer token, no body signature | `authorization` | 8 — page view, category view, product view, add to cart, remove from cart, checkout, order created, order updated |
+
+Each provider owns its gate, signature scheme, field map, payload shape and summary, so nothing is assumed across them:
+
+- **Cashfree OCC** nests everything under `data`; currency is read from `line_items[0]`, not the root.
+- **Razorpay Magic** is root-level, uses capitalised shipping keys (`Shipping_address.Address1`) and sends `line_items_total` as a **string in paise** — matching [Razorpay's abandoned cart webhook docs](https://razorpay.com/docs/payments/magic-checkout/abandoned-cart/). Its gate is "non-empty `abandoned_checkout_url`" rather than an exact value.
+- **Nitro** keys off `eventName` and requires `eventVal.customer.phone` on *every* event, parsed against root `country`. Choose the event with `--event`, or from the menu in the UI.
 
-Adding one is a single file in `src/providers/` exporting `buildPayload`, `sign`, `webhookUrl`, a `gate` and a `fieldMap` — see [docs/cashfree-occ.md](docs/cashfree-occ.md).
+Adding one is a single file in `src/providers/` exporting `buildPayload`, `sign`, `webhookUrl`, `summarize`, a `gate` and a `fieldMap` — see [docs/cashfree-occ.md](docs/cashfree-occ.md).
 
 ## Development
 
 ```bash
 npm install
 npm run dev     # esbuild watch
-npm test        # 54 tests, no network required
+npm test        # 138 tests, no network required
 npm start       # build + run
 ```
 

package/dist/cli.js

@@ -24,7 +24,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "hookwright",
-      version: "1.0.0",
+      version: "1.1.0",
       description: "Build real, signed e-commerce webhooks from a live Shopify catalogue \u2014 interactive terminal UI, no backend",
       keywords: [
         "webhook",
@@ -63,6 +63,7 @@ var init_package = __esm({
         react: "^19.2.8"
       },
       devDependencies: {
+        "curl-to-postmanv2": "^1.8.7",
         esbuild: "^0.28.2"
       }
     };
@@ -551,6 +552,20 @@ var editableFields = [
   { group: "UTM", path: "data.utm_parameters.utm_content", label: "UTM content", optional: true },
   { group: "UTM", path: "data.utm_parameters.fbclid", label: "Facebook click id", optional: true }
 ];
+function summarize(payload) {
+  const d = payload?.data ?? {};
+  const items = Array.isArray(d.line_items) ? d.line_items : [];
+  return {
+    event: "abandoned checkout",
+    store: d.store_url,
+    customer: `${d.customer?.shipping_address?.customer_name ?? ""} \xB7 ${d.phone ?? ""}`.trim(),
+    items: items.map((i) => `${i.name} x${i.quantity}`).join(", "),
+    total: d.total_price,
+    currency: items[0]?.currency,
+    extra: `was ${d.original_total_price}, discount ${d.total_discount}`,
+    link: d.abandoned_checkout_url
+  };
+}
 var cashfree_occ_default = {
   id: "cashfree-occ",
   urlKey: "cashfree_occ",
@@ -564,7 +579,461 @@ var cashfree_occ_default = {
   buildPayload,
   sign,
   webhookUrl,
-  webhookSecret
+  webhookSecret,
+  summarize
+};
+
+// src/providers/razorpay-magic.mjs
+import crypto2 from "node:crypto";
+var GATE_PATH2 = "abandoned_checkout_url";
+var fieldMap2 = [
+  { source: "abandoned_checkout_url", target: "\xABgate\xBB + abandonedCheckoutUrl", required: true, note: "must be non-empty or the event is dropped" },
+  { source: "created_at", target: "eventTime" },
+  { source: "shop_id", target: "storeUrl", required: true, note: "shopify_domain / store_url also accepted" },
+  { source: "email", target: "email" },
+  { source: "phone", target: "phone", required: true, note: "falls back to Shipping_address.Phone" },
+  { source: "currency", target: "pricing.currency", required: true, note: "read from the ROOT, unlike Cashfree" },
+  { source: "line_items_total", target: "pricing.totalPrice", required: true, note: "documented as a STRING in paise \u2014 the consumer parseFloats it and divides by 100" },
+  { source: "platform", target: "\u2014", note: "documented root field" },
+  { source: "utm_parameters", target: "\u2014", note: "documented root field" },
+  { source: "customer.first_name", target: "customer.firstName" },
+  { source: "customer.last_name", target: "customer.lastName" },
+  { source: "customer.email", target: "customer.email" },
+  { source: "customer.Shipping_address.Name", target: "customer.name" },
+  { source: "customer.Shipping_address.First_name", target: "customer.firstName fallback" },
+  { source: "customer.Shipping_address.Last_name", target: "customer.lastName fallback" },
+  { source: "customer.Shipping_address.Phone", target: "phone fallback" },
+  { source: "customer.Shipping_address.Address1", target: "customer.address1" },
+  { source: "customer.Shipping_address.Address2", target: "customer.address2" },
+  { source: "customer.Shipping_address.City", target: "customer.city" },
+  { source: "customer.Shipping_address.Province", target: "customer.province" },
+  { source: "customer.Shipping_address.Country_name", target: "customer.country" },
+  { source: "customer.Shipping_address.Country_code", target: "customer.countryCode", required: true, note: "region used to parse the phone" },
+  { source: "customer.Shipping_address.Zip", target: "customer.zip" },
+  { source: "line_items[0].name", target: "cart.productName", required: true },
+  { source: "line_items[0].image_url", target: "cart.image", required: true },
+  { source: "line_items[0].quantity", target: "cart.quantity" }
+];
+var editableFields2 = [
+  { group: "Checkout", path: "abandoned_checkout_url", label: "Abandoned checkout URL", hint: "must be non-empty \u2014 this is the schema gate" },
+  { group: "Checkout", path: "created_at", label: "Created at" },
+  { group: "Checkout", path: "shop_id", label: "Shop domain" },
+  { group: "Checkout", path: "cart_token", label: "Cart token" },
+  { group: "Pricing", path: "line_items_total", label: "Line items total (paise, string)", hint: "documented as a string; the consumer divides by 100" },
+  { group: "Pricing", path: "currency", label: "Currency" },
+  { group: "Customer", path: "customer.first_name", label: "First name" },
+  { group: "Customer", path: "customer.last_name", label: "Last name" },
+  { group: "Customer", path: "email", label: "Email" },
+  { group: "Customer", path: "phone", label: "Phone" },
+  { group: "Shipping", path: "customer.Shipping_address.Name", label: "Ship-to name" },
+  { group: "Shipping", path: "customer.Shipping_address.Address1", label: "Address line 1" },
+  { group: "Shipping", path: "customer.Shipping_address.Address2", label: "Address line 2", optional: true },
+  { group: "Shipping", path: "customer.Shipping_address.City", label: "City" },
+  { group: "Shipping", path: "customer.Shipping_address.Province", label: "Province / state" },
+  { group: "Shipping", path: "customer.Shipping_address.Province_code", label: "Province code", optional: true },
+  { group: "Shipping", path: "customer.Shipping_address.Country_name", label: "Country" },
+  { group: "Shipping", path: "customer.Shipping_address.Country_code", label: "Country code", hint: "region used to parse the phone" },
+  { group: "Shipping", path: "customer.Shipping_address.Zip", label: "Zip / postcode" }
+];
+function buildPayload2(ctx) {
+  const { config, items, phone } = ctx;
+  const now = ctx.now ?? /* @__PURE__ */ new Date();
+  const currency = ctx.currency || config.defaults.currency;
+  const domain = config.shopify.domain;
+  const cust = config.customer;
+  const lineItems = items.map(({ product, variant, quantity }) => {
+    const price = money2(variant?.price ?? 0);
+    return {
+      image_url: imageForVariant(product, variant),
+      name: product.title,
+      title: product.title,
+      price,
+      variant_price: price,
+      product_id: String(product.id),
+      variant_id: variant ? String(variant.id) : null,
+      variant_title: variant?.title ?? null,
+      quantity,
+      sku: variant?.sku || null,
+      tax_amount: 0,
+      taxable: true,
+      store_name: config.shopify.shop?.name ?? domain,
+      gram: "0"
+    };
+  });
+  const total = money2(lineItems.reduce((sum, li) => sum + li.price * li.quantity, 0));
+  const discount = money2(Math.min(ctx.discount ?? 0, total));
+  const net2 = money2(total - discount);
+  const checkoutUrl = cartPermalink(domain, items.map(({ variant, quantity }) => ({ variantId: variant?.id, quantity })));
+  return {
+    shop_id: domain,
+    shopify_domain: domain,
+    platform: config.defaults.platform,
+    token: crypto2.randomBytes(16).toString("hex"),
+    cart_token: crypto2.randomBytes(16).toString("hex"),
+    email: cust.email,
+    phone,
+    abandoned_checkout_url: checkoutUrl,
+    currency,
+    // Documented as a string, in the smallest currency unit (paise).
+    // The consumer parses it with parseFloat and divides by 100.
+    line_items_total: String(Math.round(net2 * 100)),
+    line_items: lineItems,
+    tax_details: {},
+    promotions: [],
+    utm_parameters: { ...config.defaults.utm },
+    // Not in the documented field list, but the consumer reads it for eventTime.
+    created_at: now.toISOString(),
+    customer: {
+      email: cust.email,
+      first_name: cust.firstName,
+      last_name: cust.lastName,
+      created_at: now.toISOString(),
+      Shipping_address: {
+        Name: `${cust.firstName} ${cust.lastName}`.trim(),
+        First_name: cust.firstName,
+        Last_name: cust.lastName,
+        Phone: phone,
+        Address1: cust.address1,
+        Address2: cust.address2,
+        City: cust.city,
+        Province: cust.province,
+        Province_code: cust.provinceCode,
+        Country: cust.country,
+        Country_name: cust.country,
+        Country_code: cust.countryCode,
+        Zip: cust.zip
+      }
+    }
+  };
+}
+function sign2({ body, secret }) {
+  const signature = crypto2.createHmac("sha256", String(secret)).update(body).digest("hex");
+  return {
+    signature,
+    timestamp: null,
+    headers: {
+      "content-type": "application/json",
+      "x-razorpay-signature": signature
+    }
+  };
+}
+function webhookUrl2(config) {
+  return String(targetFor(config, "razorpay-magic").webhookUrl ?? "").trim();
+}
+function webhookSecret2(config) {
+  return String(targetFor(config, "razorpay-magic").webhookSecret ?? "");
+}
+function summarize2(payload) {
+  const items = Array.isArray(payload?.line_items) ? payload.line_items : [];
+  const ship = payload?.customer?.Shipping_address ?? {};
+  return {
+    event: "abandoned checkout",
+    store: payload?.shop_id,
+    customer: `${ship.Name ?? ""} \xB7 ${payload?.phone ?? ""}`.trim(),
+    items: items.map((i) => `${i.name} x${i.quantity}`).join(", "),
+    total: Number.parseFloat(payload?.line_items_total ?? "0") / 100,
+    currency: payload?.currency,
+    extra: `${payload?.line_items_total} paise`,
+    link: payload?.abandoned_checkout_url
+  };
+}
+var razorpay_magic_default = {
+  id: "razorpay-magic",
+  urlKey: "razorpay_magic",
+  label: "Razorpay Magic",
+  eventType: "razorpay_magic_abandoned_checkout",
+  gate: { path: GATE_PATH2, value: void 0, nonEmpty: true },
+  signatureScheme: "hex HMAC-SHA256 over the body",
+  signatureHeader: "x-razorpay-signature",
+  fieldMap: fieldMap2,
+  editableFields: editableFields2,
+  buildPayload: buildPayload2,
+  sign: sign2,
+  webhookUrl: webhookUrl2,
+  webhookSecret: webhookSecret2,
+  summarize: summarize2
+};
+
+// src/providers/nitro.mjs
+import crypto3 from "node:crypto";
+var EVENTS = [
+  { eventName: "view", type: "nitro_view", label: "Page View" },
+  { eventName: "category_view", type: "nitro_category_view", label: "Category View" },
+  { eventName: "product_view", type: "nitro_product_view", label: "Product View" },
+  { eventName: "addtocart", type: "nitro_addtocart", label: "Add To Cart" },
+  { eventName: "removefromcart", type: "nitro_removefromcart", label: "Remove From Cart" },
+  { eventName: "checkout", type: "nitro_checkout", label: "Checkout" },
+  { eventName: "orders/create", type: "nitro_orders_create", label: "Order Created" },
+  { eventName: "orders/updated", type: "nitro_orders_updated", label: "Order Updated" }
+];
+var DEFAULT_EVENT = "addtocart";
+var COMMON_FIELDS = [
+  { source: "eventName", target: "\xABgate\xBB", required: true, note: "must match the schema exactly" },
+  { source: "country", target: "phone region", required: true, note: "used to parse eventVal.customer.phone" },
+  { source: "eventVal.customer.phone", target: "phone", required: true, note: "missing phone is rejected on every event" }
+];
+var PAGE_FIELDS = [
+  { source: "eventVal.page", target: "eventVal.page" },
+  { source: "eventVal.h", target: "eventVal.h", note: "host" },
+  { source: "eventVal.l", target: "eventVal.l", note: "location" },
+  { source: "eventVal._ss", target: "eventVal._ss", note: "session" }
+];
+var FIELD_MAPS = {
+  view: [...COMMON_FIELDS, ...PAGE_FIELDS],
+  category_view: [
+    ...COMMON_FIELDS,
+    ...PAGE_FIELDS,
+    { source: "eventVal.resource_id", target: "eventVal.resource_id", required: true },
+    { source: "eventVal.resource", target: "eventVal.resource" },
+    { source: "eventVal.domain", target: "eventVal.domain" }
+  ],
+  product_view: [
+    ...COMMON_FIELDS,
+    ...PAGE_FIELDS,
+    { source: "eventVal.title", target: "eventVal.title", required: true },
+    { source: "eventVal.image", target: "eventVal.image", required: true },
+    { source: "eventVal.price", target: "eventVal.price", required: true },
+    { source: "eventVal.resource_id", target: "eventVal.resource_id", required: true },
+    { source: "eventVal.resource", target: "eventVal.resource" },
+    { source: "eventVal.domain", target: "eventVal.domain" }
+  ],
+  addtocart: [
+    ...COMMON_FIELDS,
+    { source: "eventVal.cart_value", target: "eventVal.cart_value", required: true },
+    { source: "eventVal.init_cart", target: "eventVal.init_cart" },
+    { source: "eventVal.empty_cart", target: "eventVal.empty_cart" },
+    { source: "eventVal.bik_customer_id", target: "eventVal.bik_customer_id" },
+    { source: "eventVal.line_items[0].name", target: "cart enrichment", required: true }
+  ],
+  removefromcart: [
+    ...COMMON_FIELDS,
+    { source: "eventVal.cart_value", target: "eventVal.cart_value", required: true },
+    { source: "eventVal.init_cart", target: "eventVal.init_cart" },
+    { source: "eventVal.empty_cart", target: "eventVal.empty_cart" },
+    { source: "eventVal.bik_customer_id", target: "eventVal.bik_customer_id" },
+    { source: "eventVal.line_items[0].name", target: "cart enrichment" }
+  ],
+  checkout: [
+    ...COMMON_FIELDS,
+    { source: "eventVal.checkout", target: "eventVal.checkout", required: true },
+    { source: "eventVal.cart_value", target: "eventVal.cart_value", required: true },
+    { source: "eventVal.bik_customer_id", target: "eventVal.bik_customer_id" }
+  ],
+  "orders/create": [
+    ...COMMON_FIELDS,
+    { source: "eventVal.order_id", target: "eventVal.order_id", required: true },
+    { source: "eventVal.order_number", target: "eventVal.order_number" },
+    { source: "eventVal.order_name", target: "eventVal.order_name" },
+    { source: "eventVal.price", target: "eventVal.price", required: true },
+    { source: "eventVal.currency", target: "eventVal.currency", required: true },
+    { source: "eventVal.url", target: "eventVal.url" },
+    { source: "eventVal.order_created_at", target: "eventVal.order_created_at" },
+    { source: "eventVal.bik_customer_id", target: "eventVal.bik_customer_id" }
+  ]
+};
+FIELD_MAPS["orders/updated"] = FIELD_MAPS["orders/create"];
+var fieldMap3 = FIELD_MAPS[DEFAULT_EVENT];
+var EDITABLE = {
+  common: [
+    { group: "Event", path: "eventName", label: "Event name", hint: "the schema gate \u2014 must match exactly" },
+    { group: "Event", path: "country", label: "Country code", hint: "region used to parse the phone" },
+    { group: "Event", path: "timestamp", label: "Timestamp" },
+    { group: "Customer", path: "eventVal.customer.phone", label: "Phone", hint: "required on every Nitro event" },
+    { group: "Customer", path: "eventVal.customer.email", label: "Email" },
+    { group: "Customer", path: "eventVal.customer.name", label: "Name" }
+  ],
+  page: [
+    { group: "Page", path: "eventVal.page", label: "Page" },
+    { group: "Page", path: "eventVal.h", label: "Host" },
+    { group: "Page", path: "eventVal.l", label: "Location URL" },
+    { group: "Page", path: "eventVal._ss", label: "Session id" }
+  ],
+  cart: [
+    { group: "Cart", path: "eventVal.cart_value", label: "Cart value", type: "number" },
+    { group: "Cart", path: "eventVal.init_cart", label: "Init cart" },
+    { group: "Cart", path: "eventVal.empty_cart", label: "Empty cart" },
+    { group: "Cart", path: "eventVal.bik_customer_id", label: "Bik customer id" }
+  ],
+  order: [
+    { group: "Order", path: "eventVal.order_id", label: "Order id" },
+    { group: "Order", path: "eventVal.order_number", label: "Order number" },
+    { group: "Order", path: "eventVal.order_name", label: "Order name" },
+    { group: "Order", path: "eventVal.price", label: "Price", type: "number" },
+    { group: "Order", path: "eventVal.currency", label: "Currency" },
+    { group: "Order", path: "eventVal.url", label: "Order URL" }
+  ]
+};
+function editableFieldsFor(eventName) {
+  const e = EDITABLE;
+  if (eventName === "view") return [...e.common, ...e.page];
+  if (eventName === "category_view" || eventName === "product_view") return [...e.common, ...e.page];
+  if (eventName === "addtocart" || eventName === "removefromcart") return [...e.common, ...e.cart];
+  if (eventName === "checkout") return [...e.common, ...e.cart];
+  if (eventName.startsWith("orders/")) return [...e.common, ...e.order];
+  return e.common;
+}
+var editableFields3 = editableFieldsFor(DEFAULT_EVENT);
+function buildPayload3(ctx) {
+  const { config, items, phone } = ctx;
+  const eventName = ctx.eventName ?? DEFAULT_EVENT;
+  const now = ctx.now ?? /* @__PURE__ */ new Date();
+  const currency = ctx.currency || config.defaults.currency;
+  const domain = config.shopify.domain;
+  const cust = config.customer;
+  const session = crypto3.randomBytes(8).toString("hex");
+  const first = items[0];
+  const lineItems = items.map(({ product, variant, quantity }) => ({
+    id: variant ? String(variant.id) : null,
+    product_id: String(product.id),
+    name: product.title,
+    title: product.title,
+    quantity,
+    price: money2(variant?.price ?? 0),
+    image: imageForVariant(product, variant),
+    url: `https://${domain}/products/${product.handle ?? ""}`
+  }));
+  const cartValue = money2(lineItems.reduce((sum, li) => sum + li.price * li.quantity, 0));
+  const productUrl = first ? `https://${domain}/products/${first.product.handle ?? ""}` : `https://${domain}`;
+  const customer = {
+    phone,
+    email: cust.email,
+    name: `${cust.firstName} ${cust.lastName}`.trim(),
+    first_name: cust.firstName,
+    last_name: cust.lastName
+  };
+  const base = {
+    org_token: config.defaults.orgToken ?? crypto3.randomBytes(12).toString("hex"),
+    eventName,
+    userId: crypto3.randomUUID(),
+    timestamp: now.toISOString(),
+    country: cust.countryCode,
+    domain
+  };
+  const page = {
+    page: eventName === "product_view" ? "product" : eventName === "category_view" ? "collection" : "home",
+    h: domain,
+    l: productUrl,
+    _ss: session,
+    domain
+  };
+  let eventVal;
+  switch (eventName) {
+    case "view":
+      eventVal = { ...page, page: "home", l: `https://${domain}`, customer };
+      break;
+    case "category_view":
+      eventVal = {
+        ...page,
+        resource: "collection",
+        resource_id: String(first?.product?.id ?? ""),
+        l: `https://${domain}/collections/all`,
+        customer
+      };
+      break;
+    case "product_view":
+      eventVal = {
+        ...page,
+        resource: "product",
+        resource_id: String(first?.product?.id ?? ""),
+        title: first?.product?.title,
+        image: first ? imageForVariant(first.product, first.variant) : void 0,
+        price: money2(first?.variant?.price ?? 0),
+        customer
+      };
+      break;
+    case "addtocart":
+    case "removefromcart":
+      eventVal = {
+        cart_value: cartValue,
+        init_cart: eventName === "addtocart",
+        empty_cart: eventName === "removefromcart" && items.length === 0,
+        bik_customer_id: crypto3.randomUUID(),
+        line_items: lineItems,
+        [eventName === "addtocart" ? "items_added" : "items_removed"]: lineItems,
+        customer
+      };
+      break;
+    case "checkout":
+      eventVal = {
+        checkout: cartPermalink(domain, items.map(({ variant, quantity }) => ({ variantId: variant?.id, quantity }))),
+        cart_value: cartValue,
+        bik_customer_id: crypto3.randomUUID(),
+        line_items: lineItems,
+        customer
+      };
+      break;
+    case "orders/create":
+    case "orders/updated": {
+      const orderNumber = 1e3 + Math.floor(Math.random() * 9e3);
+      eventVal = {
+        url: `https://${domain}/admin/orders/${orderNumber}`,
+        order_id: String(Date.now()),
+        order_number: orderNumber,
+        order_name: `#${orderNumber}`,
+        price: cartValue,
+        currency,
+        order_created_at: now.toISOString(),
+        bik_customer_id: crypto3.randomUUID(),
+        line_items: lineItems,
+        customer
+      };
+      break;
+    }
+    default:
+      eventVal = { customer };
+  }
+  return { ...base, eventVal };
+}
+function sign3({ secret }) {
+  return {
+    signature: null,
+    timestamp: null,
+    headers: {
+      "content-type": "application/json",
+      authorization: `Bearer ${secret}`
+    }
+  };
+}
+function webhookUrl3(config) {
+  return String(targetFor(config, "nitro").webhookUrl ?? "").trim();
+}
+function webhookSecret3(config) {
+  return String(targetFor(config, "nitro").webhookSecret ?? "");
+}
+function summarize3(payload) {
+  const ev = payload?.eventVal ?? {};
+  const items = Array.isArray(ev.line_items) ? ev.line_items : [];
+  return {
+    event: payload?.eventName,
+    store: payload?.domain,
+    customer: `${ev.customer?.name ?? ""} \xB7 ${ev.customer?.phone ?? ""}`.trim(),
+    items: items.map((i) => `${i.name} x${i.quantity}`).join(", ") || "\u2014",
+    total: ev.cart_value ?? ev.price ?? void 0,
+    currency: ev.currency,
+    extra: ev.order_name ? `order ${ev.order_name}` : ev.checkout ? "checkout started" : "",
+    link: ev.checkout ?? ev.url ?? ev.l
+  };
+}
+var nitro_default = {
+  id: "nitro",
+  urlKey: "nitro",
+  label: "Nitro",
+  events: EVENTS,
+  defaultEvent: DEFAULT_EVENT,
+  eventType: "nitro_addtocart",
+  gate: { path: "eventName", value: DEFAULT_EVENT },
+  gateFor: (eventName) => ({ path: "eventName", value: eventName }),
+  signatureScheme: "static bearer token (no body signature)",
+  signatureHeader: "authorization",
+  fieldMap: fieldMap3,
+  fieldMapFor: (eventName) => FIELD_MAPS[eventName] ?? FIELD_MAPS[DEFAULT_EVENT],
+  editableFields: editableFields3,
+  editableFieldsFor,
+  buildPayload: buildPayload3,
+  sign: sign3,
+  webhookUrl: webhookUrl3,
+  webhookSecret: webhookSecret3,
+  summarize: summarize3
 };
 
 // src/providers/index.mjs
@@ -581,18 +1050,21 @@ var PROVIDER_META = [
     label: "Razorpay Magic",
     signature: "hex HMAC-SHA256 over the body",
     header: "x-razorpay-signature",
-    available: false
+    available: true
   },
   {
     id: "nitro",
     label: "Nitro",
     signature: "static bearer token",
     header: "authorization",
-    available: false
+    available: true,
+    events: nitro_default.events
   }
 ];
 var providers = {
-  [cashfree_occ_default.id]: cashfree_occ_default
+  [cashfree_occ_default.id]: cashfree_occ_default,
+  [razorpay_magic_default.id]: razorpay_magic_default,
+  [nitro_default.id]: nitro_default
 };
 function getProvider(id) {
   const provider = providers[id];
@@ -988,6 +1460,113 @@ function setPath(obj, path6, value) {
   return obj;
 }
 
+// src/core/reachability.mjs
+import dns from "node:dns/promises";
+import net from "node:net";
+function parseEndpoint(url) {
+  const raw = String(url ?? "").trim();
+  if (!raw) return { ok: false, reason: "no webhook URL configured" };
+  let parsed;
+  try {
+    parsed = new URL(raw);
+  } catch {
+    return { ok: false, reason: `"${raw}" is not a valid URL` };
+  }
+  if (!/^https?:$/.test(parsed.protocol)) {
+    return { ok: false, reason: `unsupported protocol "${parsed.protocol}" \u2014 use http or https` };
+  }
+  if (!parsed.hostname) return { ok: false, reason: "URL has no host" };
+  return { ok: true, url: parsed };
+}
+async function resolves(hostname) {
+  if (net.isIP(hostname)) return { ok: true, address: hostname };
+  try {
+    const { address } = await dns.lookup(hostname);
+    return { ok: true, address };
+  } catch (err) {
+    if (err.code === "ENOTFOUND" || err.code === "EAI_AGAIN") {
+      return { ok: false, code: err.code, reason: `host "${hostname}" does not resolve` };
+    }
+    return { ok: false, code: err.code, reason: `DNS lookup failed: ${err.message}` };
+  }
+}
+function connects(host, port, timeoutMs) {
+  return new Promise((resolve) => {
+    const socket = net.connect({ host, port });
+    const done = (result) => {
+      socket.removeAllListeners();
+      socket.destroy();
+      resolve(result);
+    };
+    socket.setTimeout(timeoutMs);
+    socket.once("connect", () => done({ ok: true }));
+    socket.once("timeout", () => done({ ok: false, timedOut: true }));
+    socket.once("error", (err) => done({ ok: false, code: err.code, message: err.message }));
+  });
+}
+async function respond(url, method, timeoutMs) {
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), timeoutMs);
+  try {
+    const res = await fetch(url, { method, signal: controller.signal, redirect: "manual" });
+    clearTimeout(timer);
+    return { responded: true, status: res.status };
+  } catch (err) {
+    clearTimeout(timer);
+    return {
+      responded: false,
+      aborted: err.name === "AbortError",
+      code: err.cause?.code ?? err.code,
+      message: err.message
+    };
+  }
+}
+async function checkEndpointExists(url, { timeoutMs = 8e3 } = {}) {
+  const name = "Endpoint exists";
+  const parsed = parseEndpoint(url);
+  if (!parsed.ok) return { name, ok: false, exists: false, detail: parsed.reason };
+  const target = parsed.url;
+  const dnsResult = await resolves(target.hostname);
+  if (!dnsResult.ok) {
+    return { name, ok: false, exists: false, detail: `${dnsResult.reason} \u2014 check the URL for a typo` };
+  }
+  const port = Number(target.port) || (target.protocol === "https:" ? 443 : 80);
+  const tcp = await connects(dnsResult.address, port, timeoutMs);
+  if (!tcp.ok && tcp.code === "ECONNREFUSED") {
+    return { name, ok: false, exists: false, detail: `${target.host} refused the connection on port ${port} \u2014 nothing is listening there` };
+  }
+  if (!tcp.ok && (tcp.code === "EHOSTUNREACH" || tcp.code === "ENETUNREACH")) {
+    return { name, ok: false, exists: false, detail: `${target.host} is unreachable (${tcp.code})` };
+  }
+  if (!tcp.ok && tcp.timedOut) {
+    return { name, ok: true, warn: true, exists: void 0, detail: `${target.host}:${port} did not accept a connection within ${timeoutMs}ms \u2014 sending anyway` };
+  }
+  let attempt = await respond(target, "OPTIONS", timeoutMs);
+  if (!attempt.responded) attempt = await respond(target, "HEAD", timeoutMs);
+  if (attempt.responded) {
+    if (attempt.status === 404) {
+      return {
+        name,
+        ok: false,
+        exists: true,
+        detail: `${target.host} is reachable but returned 404 for ${target.pathname} \u2014 the host is right, the path is not`
+      };
+    }
+    return { name, ok: true, exists: true, detail: `${target.host} responded (HTTP ${attempt.status}) at ${target.pathname}` };
+  }
+  if (attempt.aborted) {
+    return { name, ok: true, warn: true, exists: void 0, detail: `${target.host} did not answer within ${timeoutMs}ms \u2014 sending anyway` };
+  }
+  const code = attempt.code;
+  if (code === "ENOTFOUND") {
+    return { name, ok: false, exists: false, detail: `${target.host} does not resolve` };
+  }
+  if (code === "CERT_HAS_EXPIRED" || code === "UNABLE_TO_VERIFY_LEAF_SIGNATURE" || code === "DEPTH_ZERO_SELF_SIGNED_CERT") {
+    return { name, ok: true, warn: true, exists: true, detail: `${target.host} is up but its TLS certificate is not trusted (${code})` };
+  }
+  return { name, ok: true, warn: true, exists: void 0, detail: `could not confirm ${target.host} (${code ?? attempt.message}) \u2014 sending anyway` };
+}
+
 // src/core/validate.mjs
 function checkRoundTrip(body) {
   let reparsed;
@@ -1006,20 +1585,45 @@ function checkRoundTrip(body) {
     detail: `re-serialized body differs at offset ${at.index}: sent ${JSON.stringify(at.a)} vs recomputed ${JSON.stringify(at.b)}`
   };
 }
-function checkGate(payload, provider) {
-  const actual = getPath(payload, provider.gate.path);
-  const ok = actual === provider.gate.value;
+function checkGate(payload, provider, eventName) {
+  const gate = eventName && provider.gateFor ? provider.gateFor(eventName) : provider.gate;
+  const actual = getPath(payload, gate.path);
+  if (gate.nonEmpty) {
+    const ok2 = Boolean(actual);
+    return {
+      name: "Schema gate",
+      ok: ok2,
+      detail: ok2 ? `${gate.path} is set` : `${gate.path} is empty \u2014 the schema filter requires a non-empty value, so the event would be silently ignored`
+    };
+  }
+  const ok = actual === gate.value;
   return {
     name: "Schema gate",
     ok,
-    detail: ok ? `${provider.gate.path} = "${actual}"` : `${provider.gate.path} is ${JSON.stringify(actual)} but the schema filter requires "${provider.gate.value}" \u2014 the event would be silently ignored`
+    detail: ok ? `${gate.path} = "${actual}"` : `${gate.path} is ${JSON.stringify(actual)} but the schema filter requires "${gate.value}" \u2014 the event would be silently ignored`
   };
 }
+function locatePhone(payload) {
+  const candidates = [
+    // cashfree-occ
+    ["data.phone", "data.customer.shipping_address.country_code"],
+    ["data.customer.shipping_address.phone", "data.customer.shipping_address.country_code"],
+    // razorpay-magic
+    ["phone", "customer.Shipping_address.Country_code"],
+    ["customer.Shipping_address.Phone", "customer.Shipping_address.Country_code"],
+    // nitro
+    ["eventVal.customer.phone", "country"]
+  ];
+  for (const [phonePath, regionPath] of candidates) {
+    const phone = getPath(payload, phonePath);
+    if (phone) return { phone, region: getPath(payload, regionPath) };
+  }
+  return { phone: void 0, region: void 0 };
+}
 function checkPhone(payload) {
-  const phone = getPath(payload, "data.phone") ?? getPath(payload, "data.customer.shipping_address.phone");
-  const region = getPath(payload, "data.customer.shipping_address.country_code");
+  const { phone, region } = locatePhone(payload);
   if (!phone) {
-    return { name: "Phone", ok: false, detail: "no phone in data.phone or shipping_address.phone \u2014 consumer throws BadPayloadError" };
+    return { name: "Phone", ok: false, detail: "no phone found in the payload \u2014 the consumer throws BadPayloadError" };
   }
   const parsed = toE164(phone, region);
   return {
@@ -1033,8 +1637,8 @@ function checkAllowedPhone(payload, config) {
   if (!allowed.length) {
     return { name: "Phone allow-list", ok: true, detail: "no allow-list configured (skipped)", warn: true };
   }
-  const phone = getPath(payload, "data.phone");
-  const parsed = toE164(phone, getPath(payload, "data.customer.shipping_address.country_code"));
+  const { phone, region } = locatePhone(payload);
+  const parsed = toE164(phone, region);
   const normalized = parsed.ok ? parsed.value : phone;
   const ok = allowed.some((p) => toE164(p, "IN").value === normalized || p === normalized);
   return {
@@ -1043,8 +1647,8 @@ function checkAllowedPhone(payload, config) {
     detail: ok ? `${normalized} is an approved test handset` : `${normalized} is NOT in allowedPhones \u2014 refusing to risk messaging a real shopper`
   };
 }
-function coverage(payload, fieldMap2) {
-  return fieldMap2.map((f) => {
+function coverage(payload, fieldMap4) {
+  return fieldMap4.map((f) => {
     const value = getPath(payload, f.source);
     const present = value !== void 0 && value !== null && value !== "";
     return {
@@ -1058,10 +1662,10 @@ function coverage(payload, fieldMap2) {
   });
 }
 async function checkImages(payload, { timeoutMs = 1e4 } = {}) {
-  const items = getPath(payload, "data.line_items") ?? [];
-  const urls = [...new Set(items.map((i) => i?.image_url).filter(Boolean))];
+  const items = getPath(payload, "data.line_items") ?? getPath(payload, "line_items") ?? getPath(payload, "eventVal.line_items") ?? [];
+  const urls = [...new Set(items.map((i) => i?.image_url ?? i?.image).filter(Boolean))];
   if (!urls.length) {
-    return [{ name: "Product images", ok: false, detail: "no line item carries an image_url \u2014 cart.image resolves to undefined" }];
+    return [{ name: "Product images", ok: true, warn: true, detail: "no line item carries an image \u2014 cart.image will be undefined" }];
   }
   const results = await Promise.all(
     urls.map(async (url) => {
@@ -1083,10 +1687,12 @@ async function checkImages(payload, { timeoutMs = 1e4 } = {}) {
     detail: `${r.ok ? "HTTP " + r.status : "unreachable (" + (r.error ?? r.status) + ")"} \u2014 ${shorten(r.url)}`
   }));
 }
-async function runAll({ payload, body, provider, config, checkImageUrls = true }) {
-  const checks = [checkGate(payload, provider), checkRoundTrip(body), checkPhone(payload), checkAllowedPhone(payload, config)];
+async function runAll({ payload, body, provider, config, checkImageUrls = true, checkEndpoint = true, eventName }) {
+  const checks = [checkGate(payload, provider, eventName), checkRoundTrip(body), checkPhone(payload), checkAllowedPhone(payload, config)];
   if (checkImageUrls) checks.push(...await checkImages(payload));
-  const cov = coverage(payload, provider.fieldMap);
+  if (checkEndpoint) checks.push(await checkEndpointExists(provider.webhookUrl(config)));
+  const fields = eventName && provider.fieldMapFor ? provider.fieldMapFor(eventName) : provider.fieldMap;
+  const cov = coverage(payload, fields);
   const missing = cov.filter((c2) => c2.status === "MISSING");
   checks.push({
     name: "Required field coverage",
@@ -1168,18 +1774,21 @@ function loadPayload(file) {
 }
 
 // src/core/build.mjs
-function draftPayload({ cfg, providerId = "cashfree-occ", items, discount = 0, phone }) {
+function draftPayload({ cfg, providerId = "cashfree-occ", items, discount = 0, phone, eventName }) {
   const provider = getProvider(providerId);
+  const event = eventName ?? provider.defaultEvent;
   const resolvedPhone = phone ?? cfg.customer.phone;
   const parsed = toE164(resolvedPhone, cfg.customer.countryCode);
   const payload = provider.buildPayload({
     config: cfg,
     items,
     discount,
+    eventName: event,
     phone: parsed.ok ? parsed.value : String(resolvedPhone ?? "")
   });
-  const fields = (provider.editableFields ?? []).map((f) => ({ ...f, value: getPath(payload, f.path) }));
-  return { provider, payload, fields };
+  const editable = provider.editableFieldsFor ? provider.editableFieldsFor(event) : provider.editableFields;
+  const fields = (editable ?? []).map((f) => ({ ...f, value: getPath(payload, f.path) }));
+  return { provider, payload, fields, eventName: event };
 }
 function applyEdits(payload, fields, edits) {
   for (const field of fields) {
@@ -1190,15 +1799,17 @@ function applyEdits(payload, fields, edits) {
   }
   return payload;
 }
-async function buildPayload2({ cfg, providerId = "cashfree-occ", items, discount = 0, phone, checkImageUrls = true, payload: prebuilt }) {
+async function buildPayload4({ cfg, providerId = "cashfree-occ", items, discount = 0, phone, checkImageUrls = true, payload: prebuilt, eventName }) {
   if (!items?.length) throw new ConfigError("no products selected");
   const provider = getProvider(providerId);
   const resolvedPhone = phone ?? cfg.customer.phone;
   const parsed = toE164(resolvedPhone, cfg.customer.countryCode);
   if (!parsed.ok) throw new ConfigError(`phone is unusable: ${parsed.reason}`);
-  const payload = prebuilt ?? provider.buildPayload({ config: cfg, items, discount, phone: parsed.value });
+  const event = eventName ?? provider.defaultEvent;
+  const payload = prebuilt ?? provider.buildPayload({ config: cfg, items, discount, phone: parsed.value, eventName: event });
   const body = JSON.stringify(payload);
-  const report = await runAll({ payload, body, provider, config: cfg, checkImageUrls });
+  const report = await runAll({ payload, body, provider, config: cfg, checkImageUrls, eventName: event });
+  const summary = provider.summarize ? provider.summarize(payload) : {};
   const endpoint = provider.webhookUrl(cfg);
   let host = "";
   try {
@@ -1208,17 +1819,18 @@ async function buildPayload2({ cfg, providerId = "cashfree-occ", items, discount
   }
   const meta = {
     provider: provider.id,
+    event,
     endpoint,
     environment: host,
     store: cfg.shopify.domain,
     items: items.map((i) => ({ title: i.product.title, variant: i.variant?.title, qty: i.quantity, price: i.variant?.price })),
-    totalPrice: payload.data.total_price,
-    currency: payload.data.line_items[0]?.currency,
+    totalPrice: summary.total,
+    currency: summary.currency,
     valid: report.ok
   };
   const file = savePayload({ provider: provider.id, payload, body, meta });
   audit("payload.built", { provider: provider.id, valid: report.ok, file });
-  return { provider, payload, body, report, file, meta };
+  return { provider, payload, body, report, file, meta, summary };
 }
 
 // src/core/send.mjs
@@ -1230,18 +1842,32 @@ function looksLikeProduction(origin) {
 }
 function buildRequest({ provider, config, body, timestamp }) {
   const url = provider.webhookUrl(config);
+  if (!url) {
+    const err = new Error(`no webhook URL configured for ${provider.label}`);
+    err.hint = "set it in Setup \u2192 Webhook (or edit targets in config.json)";
+    throw err;
+  }
   const secret = provider.webhookSecret ? provider.webhookSecret(config) : "";
   const signed = provider.sign({ body, secret, timestamp });
   return { url, headers: signed.headers, signature: signed.signature, timestamp: signed.timestamp, body };
 }
-function toCurl({ url, headers, bodyFile }) {
-  const lines = [`curl -X POST '${url}' \\`];
+function shellQuote(value) {
+  return `'${String(value).replace(/'/g, `'\\''`)}'`;
+}
+function toCurl({ url, headers, body, method = "POST" }) {
+  const lines = [`curl --location --request ${method} ${shellQuote(url)} \\`];
   for (const [k, v] of Object.entries(headers)) {
-    lines.push(`  -H '${k}: ${v}' \\`);
+    lines.push(`--header ${shellQuote(`${k}: ${v}`)} \\`);
   }
-  lines.push(`  --data-binary @${bodyFile}`);
+  lines.push(`--data ${shellQuote(body)}`);
   return lines.join("\n");
 }
+function writeCurlFile(command, name = "last-curl.sh") {
+  fs4.mkdirSync(STATE_DIR, { recursive: true });
+  const file = path4.join(STATE_DIR, name);
+  fs4.writeFileSync(file, command + "\n");
+  return file;
+}
 function writeBodyFile(body, name = "last-body.json") {
   fs4.mkdirSync(STATE_DIR, { recursive: true });
   const file = path4.join(STATE_DIR, name);
@@ -1279,28 +1905,42 @@ async function send({ url, headers, body, timeoutMs = 2e4 }) {
 }
 
 // src/core/dispatch.mjs
-async function dispatch({ cfg, record, force = false, dryRun = false, revalidate = true }) {
+async function dispatch({ cfg, record, force = false, dryRun = false, revalidate = true, checkEndpoint = true }) {
   const rec = record ?? loadLast();
   if (!rec) throw new ForgeError("nothing to send", { hint: "build a payload first" });
   const provider = getProvider(rec.provider);
   let report = null;
   if (revalidate) {
-    report = await runAll({ payload: rec.payload, body: rec.body, provider, config: cfg, checkImageUrls: false });
+    report = await runAll({ payload: rec.payload, body: rec.body, provider, config: cfg, checkImageUrls: false, eventName: rec.meta?.event });
     if (!report.ok && !force) {
-      throw new ForgeError("refusing to send a payload that fails pre-flight", {
-        hint: `blocking: ${report.blocking.map((b) => b.name).join(", ")} \u2014 pass --force to override`
+      const err = new ForgeError("refusing to send a payload that fails pre-flight", {
+        hint: "fix the problems below, or pass --force to send regardless"
       });
+      err.failures = report.blocking;
+      throw err;
     }
   }
   const request = buildRequest({ provider, config: cfg, body: rec.body });
   if (looksLikeProduction(request.url) && !force) {
     throw new ForgeError(`target looks like production: ${request.url}`, { hint: "pass --force if you really mean it" });
   }
+  let endpoint = null;
+  if (checkEndpoint && !dryRun) {
+    endpoint = await checkEndpointExists(request.url);
+    if (!endpoint.ok && !force) {
+      const err = new ForgeError(`endpoint check failed: ${endpoint.detail}`, {
+        hint: "fix the URL in Setup \u2192 Webhook, or pass --force to send regardless"
+      });
+      err.failures = [endpoint];
+      throw err;
+    }
+  }
   const bodyFile = writeBodyFile(rec.body);
-  const curl = toCurl({ url: request.url, headers: request.headers, bodyFile });
-  if (dryRun) return { dryRun: true, request, bodyFile, curl, report, provider };
+  const curl = toCurl({ url: request.url, headers: request.headers, body: rec.body });
+  const curlFile = writeCurlFile(curl);
+  if (dryRun) return { dryRun: true, request, bodyFile, curl, curlFile, report, provider, endpoint };
   const result = await send({ url: request.url, headers: request.headers, body: rec.body });
-  return { ...result, dryRun: false, request, bodyFile, curl, report, provider };
+  return { ...result, dryRun: false, request, bodyFile, curl, curlFile, report, provider, endpoint };
 }
 function explainStatus(status) {
   if (status >= 200 && status < 300) return "accepted \u2014 a 2xx only means it was received; check eventData to confirm the event landed";
@@ -1364,6 +2004,7 @@ async function copy(text, { allowOsc52 = true } = {}) {
 // src/ui/screens/Build.jsx
 import { jsx as jsx7, jsxs as jsxs7 } from "react/jsx-runtime";
 var STEP = {
+  EVENT: "event",
   LOADING: "loading",
   PICK: "pick",
   VARIANT: "variant",
@@ -1380,7 +2021,10 @@ var STEP = {
 };
 function Build({ config, providerId = "cashfree-occ", onDone }) {
   const { exit } = useApp();
-  const [step, setStep] = useState(STEP.LOADING);
+  const provider = getProvider(providerId);
+  const multiEvent = Array.isArray(provider.events) && provider.events.length > 1;
+  const [eventName, setEventName] = useState(provider.defaultEvent);
+  const [step, setStep] = useState(multiEvent ? STEP.EVENT : STEP.LOADING);
   const [products, setProducts] = useState([]);
   const [chosen, setChosen] = useState([]);
   const [cursor, setCursor] = useState(0);
@@ -1391,18 +2035,20 @@ function Build({ config, providerId = "cashfree-occ", onDone }) {
   const [edits, setEdits] = useState({});
   const [built, setBuilt] = useState(null);
   const [copied, setCopied] = useState(null);
-  const [showPayload, setShowPayload] = useState(true);
+  const [request, setRequest] = useState(null);
+  const [curl, setCurl] = useState("");
+  const [showPayload, setShowPayload] = useState(false);
   const [sendResult, setSendResult] = useState(null);
   const [error, setError] = useState(null);
   useInput3((input, key) => {
     if (key.escape) onDone();
     if ((step === STEP.RESULT || step === STEP.ERROR) && (key.return || input === "q")) onDone();
     if (step === STEP.REPORT && input === "p") setShowPayload((v) => !v);
-    if (step === STEP.REPORT && input === "c" && built) {
-      copy(built.body).then(setCopied);
-    }
+    if (step === STEP.REPORT && input === "c" && curl) copy(curl).then((r) => setCopied({ ...r, what: "curl" }));
+    if (step === STEP.REPORT && input === "j" && built) copy(built.body).then((r) => setCopied({ ...r, what: "payload JSON" }));
   });
   useEffect(() => {
+    if (step === STEP.EVENT) return;
     let alive = true;
     fetchCatalogue(config).then((list) => {
       if (!alive) return;
@@ -1421,7 +2067,7 @@ function Build({ config, providerId = "cashfree-occ", onDone }) {
     return () => {
       alive = false;
     };
-  }, []);
+  }, [step === STEP.EVENT]);
   const advance = (nextItems, nextCursor) => {
     if (nextCursor >= chosen.length) {
       setItems(nextItems);
@@ -1465,7 +2111,7 @@ function Build({ config, providerId = "cashfree-occ", onDone }) {
   const onDiscount = (raw) => {
     const discount = Math.max(0, Number.parseFloat(raw) || 0);
     try {
-      const next = draftPayload({ cfg: config, providerId, items, discount });
+      const next = draftPayload({ cfg: config, providerId, items, discount, eventName });
       setDraft({ ...next, discount });
       setStep(STEP.MODE);
     } catch (err) {
@@ -1475,10 +2121,20 @@ function Build({ config, providerId = "cashfree-occ", onDone }) {
   };
   const finalise = (payload) => {
     setStep(STEP.BUILDING);
-    buildPayload2({ cfg: config, providerId, items, discount: draft.discount, payload }).then(async (result) => {
+    buildPayload4({ cfg: config, providerId, items, discount: draft.discount, payload, eventName }).then(async (result) => {
       setBuilt(result);
-      if (config.defaults.copyToClipboard !== false) {
-        setCopied(await copy(result.body));
+      let req = null;
+      let command = "";
+      try {
+        req = buildRequest({ provider: result.provider, config, body: result.body });
+        command = toCurl({ url: req.url, headers: req.headers, body: result.body });
+      } catch {
+        req = null;
+      }
+      setRequest(req);
+      setCurl(command);
+      if (config.defaults.copyToClipboard !== false && command) {
+        setCopied({ ...await copy(command), what: "curl" });
       }
       setStep(STEP.REPORT);
     }).catch((err) => {
@@ -1519,10 +2175,24 @@ function Build({ config, providerId = "cashfree-occ", onDone }) {
       Header,
       {
         title: "Build payload",
-        subtitle: `${metaFor(providerId).label} \xB7 abandoned checkout`,
+        subtitle: `${metaFor(providerId).label} \xB7 ${multiEvent ? eventName : "abandoned checkout"}`,
         right: store
       }
     ),
+    step === STEP.EVENT && /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
+      /* @__PURE__ */ jsx7(Text7, { children: "Which event do you want to send?" }),
+      /* @__PURE__ */ jsx7(Box7, { marginTop: 1, children: /* @__PURE__ */ jsx7(
+        Select4,
+        {
+          visibleOptionCount: provider.events.length,
+          options: provider.events.map((e) => ({ label: `${e.label.padEnd(20)} ${e.eventName}`, value: e.eventName })),
+          onChange: (value) => {
+            setEventName(value);
+            setStep(STEP.LOADING);
+          }
+        }
+      ) })
+    ] }),
     step === STEP.LOADING && /* @__PURE__ */ jsx7(Spinner, { label: `fetching live products from ${store}\u2026` }),
     step === STEP.PICK && /* @__PURE__ */ jsxs7(Box7, { flexDirection: "column", children: [
       /* @__PURE__ */ jsxs7(Text7, { children: [
@@ -1611,10 +2281,11 @@ function Build({ config, providerId = "cashfree-occ", onDone }) {
       /* @__PURE__ */ jsx7(Summary, { built, currency }),
       /* @__PURE__ */ jsx7(Section, { title: "Pre-flight", children: /* @__PURE__ */ jsx7(CheckList, { checks: built.report.checks }) }),
       /* @__PURE__ */ jsx7(Section, { title: "Field coverage", children: /* @__PURE__ */ jsx7(FieldTable, { coverage: built.report.coverage }) }),
-      /* @__PURE__ */ jsx7(Section, { title: "Request", children: /* @__PURE__ */ jsx7(RequestPreview, { config, built }) }),
+      /* @__PURE__ */ jsx7(Section, { title: "Request", children: /* @__PURE__ */ jsx7(RequestPreview, { request, bytes: built.body.length }) }),
+      curl ? /* @__PURE__ */ jsx7(Section, { title: "curl \u2014 paste straight into Postman (Import \u2192 Raw text)", children: /* @__PURE__ */ jsx7(Box7, { borderStyle: "round", borderColor: palette.accent, paddingX: 1, flexDirection: "column", children: /* @__PURE__ */ jsx7(Text7, { color: palette.dim, children: curl }) }) }) : null,
       showPayload ? /* @__PURE__ */ jsx7(Section, { title: "Payload", children: /* @__PURE__ */ jsx7(Box7, { borderStyle: "round", borderColor: palette.dim, paddingX: 1, flexDirection: "column", children: /* @__PURE__ */ jsx7(Text7, { color: palette.dim, children: JSON.stringify(built.payload, null, 2) }) }) }) : null,
-      /* @__PURE__ */ jsx7(Box7, { marginTop: 1, children: copied?.ok ? /* @__PURE__ */ jsx7(Text7, { color: palette.ok, children: `\u2714 payload copied to clipboard via ${copied.via}` }) : /* @__PURE__ */ jsx7(Text7, { color: palette.dim, children: `payload saved to ${built.file} \xB7 press c to copy` }) }),
-      /* @__PURE__ */ jsx7(Box7, { children: /* @__PURE__ */ jsx7(Text7, { color: palette.dim, children: "p toggles the full payload \xB7 c copies it" }) }),
+      /* @__PURE__ */ jsx7(Box7, { marginTop: 1, children: copied?.ok ? /* @__PURE__ */ jsx7(Text7, { color: palette.ok, children: `\u2714 ${copied.what} copied to clipboard via ${copied.via}` }) : /* @__PURE__ */ jsx7(Text7, { color: palette.dim, children: `saved to ${built.file} \xB7 press c to copy the curl` }) }),
+      /* @__PURE__ */ jsx7(Box7, { children: /* @__PURE__ */ jsx7(Text7, { color: palette.dim, children: "c copies the curl \xB7 j copies the payload JSON \xB7 p toggles the full payload" }) }),
       /* @__PURE__ */ jsx7(Box7, { marginTop: 1, children: built.report.ok ? /* @__PURE__ */ jsx7(Alert, { variant: "success", children: "payload is valid \u2014 the event will pass the schema gate and signature check" }) : /* @__PURE__ */ jsx7(Alert, { variant: "error", children: `blocking: ${built.report.blocking.map((b) => b.name).join(", ")}` }) }),
       /* @__PURE__ */ jsxs7(Box7, { marginTop: 1, children: [
         /* @__PURE__ */ jsx7(Text7, { children: "Send it to the endpoint now? " }),
@@ -1662,13 +2333,7 @@ function Build({ config, providerId = "cashfree-occ", onDone }) {
     ] })
   ] });
 }
-function RequestPreview({ config, built }) {
-  let request = null;
-  try {
-    request = buildRequest({ provider: built.provider, config, body: built.body });
-  } catch {
-    request = null;
-  }
+function RequestPreview({ request, bytes: bytes2 }) {
   if (!request) return /* @__PURE__ */ jsx7(Text7, { color: palette.dim, children: "  destination not configured" });
   return /* @__PURE__ */ jsx7(
     KeyValue,
@@ -1678,7 +2343,7 @@ function RequestPreview({ config, built }) {
         ["POST", truncate(request.url, 56)],
         ["x-webhook-timestamp", request.timestamp],
         ["x-webhook-signature", truncate(request.signature, 46)],
-        ["body", `${built.body.length} bytes`]
+        ["body", `${bytes2} bytes`]
       ]
     }
   );
@@ -2582,15 +3247,16 @@ async function headless(command, args, config) {
       return 1;
   }
 }
-function requireConfig(config) {
-  if (isConfigured(config)) return null;
-  const missing = configStatus(config).filter((r) => !r.ok).map((r) => r.key);
+function requireConfig(config, providerId = "cashfree-occ") {
+  if (isConfigured(config, providerId)) return null;
+  const missing = configStatus(config, providerId).filter((r) => !r.ok).map((r) => r.key);
   log.fail(`configuration incomplete: ${missing.join(", ")}`);
   log.dim(`run \`hookwright configure\` or edit ${config._path}`);
   return 1;
 }
 async function cmdBuild(args, config) {
-  const bad = requireConfig(config);
+  const providerId = typeof args.flags.provider === "string" ? args.flags.provider : "cashfree-occ";
+  const bad = requireConfig(config, providerId);
   if (bad) return bad;
   const count = Number.parseInt(args.flags.items ?? "1", 10) || 1;
   const discount = Number.parseFloat(args.flags.discount ?? "0") || 0;
@@ -2604,8 +3270,10 @@ async function cmdBuild(args, config) {
   }
   const items = autoSelect(products, count);
   log.ok(`${items.length} product(s): ${items.map((i) => i.product.title).join(", ")}`);
-  const built = await buildPayload2({
+  const built = await buildPayload4({
     cfg: config,
+    providerId,
+    eventName: typeof args.flags.event === "string" ? args.flags.event : void 0,
     items,
     discount,
     phone: typeof args.flags.phone === "string" ? args.flags.phone : void 0,
@@ -2622,8 +3290,18 @@ async function cmdBuild(args, config) {
     }
   }
   if (args.flags.copy !== false && !args.flags.json) {
-    const result = await copy(built.body);
-    if (result.ok) log.ok(`payload copied to clipboard via ${result.via}`);
+    let clip = built.body;
+    let what = "payload JSON";
+    try {
+      const request = buildRequest({ provider: built.provider, config, body: built.body });
+      clip = toCurl({ url: request.url, headers: request.headers, body: built.body });
+      what = "curl";
+    } catch (err) {
+      log.warn(`${err.message} \u2014 copying the payload JSON instead`);
+      if (err.hint) log.dim(err.hint);
+    }
+    const result = await copy(clip);
+    if (result.ok) log.ok(`${what} copied to clipboard via ${result.via}`);
     else log.dim(`clipboard unavailable \u2014 install xclip, xsel or wl-copy to enable copying`);
   }
   if (!built.report.ok && !args.flags.force) {
@@ -2651,7 +3329,8 @@ async function cmdSend(args, config, built) {
     cfg: config,
     record,
     force: Boolean(args.flags.force),
-    dryRun: Boolean(args.flags["dry-run"])
+    dryRun: Boolean(args.flags["dry-run"]),
+    checkEndpoint: args.flags["endpoint-check"] !== false
   });
   if (result.dryRun) {
     log.blank();
@@ -2749,14 +3428,15 @@ function cmdClear(args, config) {
   return 0;
 }
 function printReport(built) {
-  const d = built.payload.data;
+  const s = built.summary ?? {};
   log.blank();
   box("Payload", [
-    `type      ${built.payload.type}`,
-    `store     ${d.store_url}`,
-    `customer  ${d.customer.shipping_address.customer_name} \xB7 ${d.phone}`,
-    `items     ${d.line_items.map((i) => `${i.name} x${i.quantity}`).join(", ")}`,
-    `total     ${d.total_price} ${d.line_items[0]?.currency}  (was ${d.original_total_price}, discount ${d.total_discount})`,
+    `provider  ${built.provider.label}`,
+    `event     ${s.event ?? "\u2014"}`,
+    `store     ${s.store ?? "\u2014"}`,
+    `customer  ${s.customer ?? "\u2014"}`,
+    `items     ${s.items ?? "\u2014"}`,
+    `total     ${s.total ?? "\u2014"} ${s.currency ?? ""}${s.extra ? "  (" + s.extra + ")" : ""}`,
     `saved     ${built.file}`
   ], c.green);
   log.blank();
@@ -2796,6 +3476,9 @@ ${c.bold("COMMANDS")}
   help         show this message
 
 ${c.bold("BUILD OPTIONS")}
+  --provider <id>    cashfree-occ | razorpay-magic | nitro       (default cashfree-occ)
+  --event <name>     nitro only: view \xB7 category_view \xB7 product_view \xB7 addtocart
+                     removefromcart \xB7 checkout \xB7 orders/create \xB7 orders/updated
   --items <n>        how many products to put in the cart      (default 1)
   --search <text>    only consider products matching a title
   --discount <n>     cart discount in major currency units     (default 0)
@@ -2811,6 +3494,7 @@ ${c.bold("SEND OPTIONS")}
   --file <path>      send a specific saved payload
   --dry-run          print the request without sending
   --force            send even if pre-flight fails or target looks like prod
+  --no-endpoint-check  skip verifying the destination exists before sending
 
 ${c.bold("CLEAR OPTIONS")}
   --payloads         delete saved payloads
@@ -2882,6 +3566,9 @@ async function main() {
 main().catch((err) => {
   console.error(c.red(`
 ${err.message}`));
+  for (const failure of err.failures ?? []) {
+    console.error(`  ${c.red(sym.cross)} ${c.bold(failure.name)}: ${failure.detail}`);
+  }
   if (err.hint) console.error(c.yellow(`  ${err.hint}`));
   process.exitCode = 1;
 });

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "hookwright",
-  "version": "1.0.0",
-  "description": "Build real, signed e-commerce webhooks from a live Shopify catalogue \u2014 interactive terminal UI, no backend",
+  "version": "1.1.0",
+  "description": "Build real, signed e-commerce webhooks from a live Shopify catalogue — interactive terminal UI, no backend",
   "keywords": [
     "webhook",
     "shopify",
@@ -39,6 +39,7 @@
     "react": "^19.2.8"
   },
   "devDependencies": {
+    "curl-to-postmanv2": "^1.8.7",
     "esbuild": "^0.28.2"
   }
 }