@capxul/sdk-react 0.1.0-alpha.3 → 0.1.0-alpha.4

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 import { ReactNode } from 'react';
-import { HttpTransport, TransportState, CapxulConfig, BrowserCapxulConfig, AccountId, OrganizationId, ApiKeyId, BalanceLedgerEntryId, ExternalAccountId, MemberId, Account, ApiKey, BalanceLedgerEntry, DocumentId, Document, ExternalAccount, KybProfile, KycProfile, CapxulError as CapxulError$1, Member, OperationId, Operation, Organization, PaymentId, Payment, SafeId, Safe, SubAccountId, SubAccount, TransferId, Transfer, Treasury, VirtualAccountId, VirtualAccount, VirtualCardId, VirtualCard, WebhookEndpointId, WebhookEndpoint, WebhookEventId, WebhookEvent, WithdrawalId, Withdrawal, List, LocalPrivateKeySignerProvider } from '@capxul/sdk';
+import { HttpTransport, TransportState, BrowserCapxulConfig, AccountId, OrganizationId, ApiKeyId, BalanceLedgerEntryId, ExternalAccountId, MemberId, Account, ApiKey, BalanceLedgerEntry, DocumentId, Document, ExternalAccount, KybProfile, KycProfile, CapxulError as CapxulError$1, Member, OperationId, Operation, Organization, PaymentId, Payment, SafeId, Safe, SubAccountId, SubAccount, TokenTransfer, TransferId, Transfer, Treasury, VirtualAccountId, VirtualAccount, VirtualCardId, VirtualCard, WebhookEndpointId, WebhookEndpoint, WebhookEventId, WebhookEvent, WithdrawalId, Withdrawal, List, TokenTransfersListInput, TokenTransfersListPage, LocalPrivateKeySignerProvider } from '@capxul/sdk';
 export { AuthFlowContext, AuthFlowEvent, BrowserCapxulConfig, OnboardingFlowContext, OnboardingFlowEvent, ProvisioningFlowContext, ProvisioningFlowEvent } from '@capxul/sdk';
 import { QueryClient, UseQueryResult } from '@tanstack/react-query';
 import { CapxulClient } from '@capxul/sdk/client';
@@ -55,55 +55,39 @@ declare function CapxulTransportProvider({ transport, children, }: CapxulTranspo
 declare function useCapxulStatus(): TransportState;
 
 /**
- * `CapxulProvider` — React context provider that wires both the
- * `@capxul/sdk` client AND a TanStack Query `QueryClient` for the
- * subtree.
+ * `CapxulProvider` — public React provider for `@capxul/sdk-react`.
  *
- * Two construction paths:
+ * Single-input contract: accepts ONLY `{ config: BrowserCapxulConfig,
+ * queryClient?, children }`. The browser config is the secret-safe
+ * discriminated union from `@capxul/sdk` — `apiKey`, `data`, `signer`,
+ * and other server-only fields are rejected at compile-time AND at
+ * runtime via `createCapxulConfig`'s allow-list validator.
  *
- * 1. **Legacy / harness path** — pass an already-assembled
- *    `config: CapxulConfig`. Used by the e2e harness and CLI-shaped
- *    integrations that build their own auth/data adapters.
+ * The provider builds an `HttpTransport` synchronously and injects it
+ * into `createCapxulClient` via the internal `_transport` slot. The
+ * transport is exposed through `CapxulTransportContext` so
+ * `useCapxulStatus()` can subscribe to its lifecycle state machine.
  *
- * 2. **Lazy-DX path (ADR #14c)** — pass either `publishableKey` or
- *    `browserConfig`. The provider builds an `HttpTransport`
- *    synchronously, injects it into `createCapxulClient` via the
- *    internal `_transport` slot, and exposes the transport through
- *    `CapxulTransportContext` so `useCapxulStatus()` can subscribe
- *    to its lifecycle state machine.
- *
- *    The lazy-DX provider mounts synchronously. There is no
- *    `useState` mutating config, no `useMemo` rebuilding config when
- *    state changes, and no Suspense gate at mount. State transitions
- *    happen on the transport (a stable singleton); React subscribes
- *    via `useSyncExternalStore` and re-renders only the components
- *    that actually depend on the transport state.
+ * Tests and the e2e harness need the server-augmented `CapxulConfig`
+ * shape (with `data`, `signer`, `signing`). Those callers use
+ * `CapxulTestProvider` from `@capxul/sdk-react/proof` instead.
  *
  * Per ADR 4 in the API-first architecture stack PLAN, only
  * `QueryClientProvider` is allowed to live OUTSIDE the single
  * `CapxulContext`. The `QueryClientProvider` is the outermost wrap;
- * the SDK client provider sits inside it; the optional transport
- * provider sits between the two when the lazy-DX path is active.
+ * the SDK client provider sits inside it; the transport provider sits
+ * between the two.
  */
 
 type CapxulProviderProps = {
     /**
-     * Pre-assembled `CapxulConfig` for the legacy / harness path.
-     * Mutually exclusive with `publishableKey` / `browserConfig`.
-     */
-    readonly config?: CapxulConfig;
-    /**
-     * Shorthand for the publishable-key arm of `BrowserCapxulConfig`.
-     * Provider builds the transport synchronously and injects it into
-     * the SDK client — the canonical lazy-DX entry point per ADR #14c.
-     */
-    readonly publishableKey?: string;
-    /**
-     * Full `BrowserCapxulConfig` for callers that need
-     * `mode: "build-time-urls"` or a custom `fetchImpl` (e.g. tests).
-     * Mutually exclusive with `publishableKey` / `config`.
+     * Browser-safe Capxul config — the discriminated union from
+     * `@capxul/sdk`. Either the `build-time-urls` arm or the
+     * `publishable-key` arm. Server-only fields (`apiKey`, `data`,
+     * `signer`, `signing`) are rejected at compile-time and at runtime
+     * via `createCapxulConfig`'s allow-list validator.
      */
-    readonly browserConfig?: BrowserCapxulConfig;
+    readonly config: BrowserCapxulConfig;
     /**
      * Optional TanStack Query `QueryClient`. Pass your app's existing
      * client to share the cache across the SDK hooks and the host
@@ -113,7 +97,7 @@ type CapxulProviderProps = {
     readonly queryClient?: QueryClient;
     readonly children: ReactNode;
 };
-declare function CapxulProvider({ config, publishableKey, browserConfig, queryClient, children, }: CapxulProviderProps): ReactNode;
+declare function CapxulProvider({ config, queryClient, children, }: CapxulProviderProps): ReactNode;
 
 /**
  * `QueryResult<T>` — the canonical three-state return shape for every
@@ -220,16 +204,27 @@ declare function useMe(): UseQueryResult<Account, CapxulError$1>;
 /**
  * Account by id. Omit `accountId` for the calling user (alias for
  * `useMe()` from a developer-perspective lens).
+ *
+ * Slice 2 (#457 story 1): wired via `capxul.accounts.retrieve` for
+ * the id-bearing call and `capxul.me.get()` for the self-lens
+ * shortcut. Returns the legacy `QueryResult<Account>` shape because
+ * only `useMe` has migrated to TanStack Query so far (PLAN.md task
+ * 1.8) — per-hook migration is the rollout pattern.
  */
-declare function useAccount(_accountId?: AccountId): QueryResult<Account>;
+declare function useAccount(accountId?: AccountId): QueryResult<Account>;
 declare function useOrganization(_organizationId: OrganizationId): QueryResult<Organization>;
 declare function useMember(_args: UseMemberArgs): QueryResult<Member>;
 /**
  * Live; status advances as the indexer reconciles the on-chain
  * deployment. Consumers pattern-match on `data.status` via
  * `matchStatus` (see `@capxul/sdk`).
+ *
+ * Slice 2 (#457 story 1): wired via
+ * `capxul.accounts.safes.retrieve(safeId)`. The SDK method is real
+ * post-Withdrawals v1 slice 1; this hook closes the React-side
+ * stub so onboarding can subscribe to Safe deploy progress.
  */
-declare function useSafe(_safeId: SafeId): QueryResult<Safe>;
+declare function useSafe(safeId: SafeId): QueryResult<Safe>;
 declare function useTreasury(_organizationId: OrganizationId): QueryResult<Treasury>;
 /**
  * Org-admin lens only — the hook NEVER returns `secret`.
@@ -243,13 +238,34 @@ declare function useVirtualAccount(_virtualAccountId: VirtualAccountId): QueryRe
 declare function useVirtualCard(_virtualCardId: VirtualCardId): QueryResult<VirtualCard>;
 declare function usePayment(_paymentId: PaymentId): QueryResult<Payment>;
 declare function useTransfer(_transferId: TransferId): QueryResult<Transfer>;
+type UseTokenTransferArgs = {
+    readonly txHash: string;
+    readonly logIndex: number;
+    readonly chainId?: number;
+};
+/**
+ * **NON-CANONICAL** raw on-chain ERC-20 transfer detail. Wired through
+ * `capxul.tokenTransfers.retrieve` per slice/02-story2-balance
+ * Option-A verdict. Identifier is the canonical on-chain composite
+ * `(txHash, logIndex)` so consumers don't have to round-trip through
+ * the Convex doc id.
+ *
+ * Intentionally NOT in `packages/sdk-react/ops/proof/hook-manifest.ts`
+ * — the canonical proof manifest tracks canon-aligned hooks only.
+ */
+declare function useTokenTransfer(args: UseTokenTransferArgs): QueryResult<TokenTransfer>;
 /**
  * Immutable once written; `live` semantically only for late
  * `paymentId` / `transferId` attachment per Doc 02 §"balance_ledger".
  */
 declare function useBalanceLedgerEntry(_args: UseBalanceLedgerEntryArgs): QueryResult<BalanceLedgerEntry>;
 declare function useDocument(_documentId: DocumentId): QueryResult<Document>;
-declare function useWithdrawal(_withdrawalId: WithdrawalId): QueryResult<Withdrawal>;
+/**
+ * Withdrawals v1 slice 1 (#440) — wired through `capxul.withdrawals.retrieve`.
+ * Mirrors `useOperation` (the canonical evidence subscription) since
+ * the withdrawal resource is operation-shaped at its core.
+ */
+declare function useWithdrawal(withdrawalId: WithdrawalId): QueryResult<Withdrawal>;
 /**
  * The canonical evidence subscription per CANON.md §3.3 —
  * `operationId` + `correlationId` are the cross-layer join keys for
@@ -340,6 +356,17 @@ declare function usePayments(_filters?: PaymentsFilters): QueryResult<List<Payme
 declare function useOrgPayments(_args: OrgScopedFilters): QueryResult<List<Payment>>;
 declare function useTransfers(_filters?: TransfersFilters): QueryResult<List<Transfer>>;
 declare function useOrgTransfers(_args: OrgScopedFilters): QueryResult<List<Transfer>>;
+/**
+ * **NON-CANONICAL** raw on-chain ERC-20 transfer feed. Wired through
+ * `capxul.tokenTransfers.list` per slice/02-story2-balance Option-A
+ * verdict. Will be subsumed by canonical `useTransfers` once the
+ * `transfers.*` shape alignment lands. See `core/token-transfers.ts`
+ * doc-comment for the full contract.
+ *
+ * Intentionally NOT in `packages/sdk-react/ops/proof/hook-manifest.ts`
+ * — the canonical proof manifest tracks canon-aligned hooks only.
+ */
+declare function useTokenTransfers(filters?: TokenTransfersListInput): QueryResult<TokenTransfersListPage>;
 /**
  * Append-only per-owner balance-delta feed. Live for late
  * `paymentId` / `transferId` attachment per Doc 02.
@@ -352,8 +379,15 @@ declare function useBalanceLedger(_args: OwnerScopedFilters): QueryResult<List<B
  */
 declare function useDocuments(_filters?: DocumentsFilters): QueryResult<List<Document>>;
 declare function useOrgDocuments(_args: OrgDocumentsFilters): QueryResult<List<Document>>;
-declare function useWithdrawals(_filters?: WithdrawalsFilters): QueryResult<List<Withdrawal>>;
-declare function useOrgWithdrawals(_args: OrgScopedFilters): QueryResult<List<Withdrawal>>;
+/**
+ * Withdrawals v1 slice 1 (#440) — wired through `capxul.withdrawals.list`.
+ */
+declare function useWithdrawals(filters?: WithdrawalsFilters): QueryResult<List<Withdrawal>>;
+/**
+ * Withdrawals v1 slice 1 (#440) — wired through
+ * `capxul.organizations.withdrawals.list`.
+ */
+declare function useOrgWithdrawals(args: OrgScopedFilters): QueryResult<List<Withdrawal>>;
 /**
  * Org-admin lens only — the hook NEVER returns `secret` for any row.
  */
@@ -458,4 +492,4 @@ declare function injectedConnector(options?: InjectedConnectorOptions): CapxulCo
  */
 declare function localPrivateKeyConnector(options: LocalPrivateKeyConnectorOptions): CapxulConnector;
 
-export { CapxulClientProvider, type CapxulClientProviderProps, type CapxulConnector, type CapxulConnectorKind, type CapxulConnectorSession, CapxulProvider, type CapxulProviderProps, CapxulTransportProvider, type CapxulTransportProviderProps, type DocumentsFilters, type InjectedConnectorOptions, type LocalPrivateKeyConnectorOptions, type OrgDocumentsFilters, type OrgScopedFilters, type OwnerRef, type OwnerScopedFilters, type PaginationFilters, type PaymentsFilters, type QueryResult, type TransfersFilters, type UseApiKeyArgs, type UseBalanceLedgerEntryArgs, type UseExternalAccountArgs, type UseMemberArgs, type VirtualAccountsFilters, type VirtualCardsFilters, type WithdrawalsFilters, createCapxulConfig, injectedConnector, localPrivateKeyConnector, useAccount, useApiKey, useApiKeys, useAuthFlow, useBalanceLedger, useBalanceLedgerEntry, useCapxul, useCapxulStatus, useDocument, useDocuments, useExternalAccount, useExternalAccounts, useKybProfile, useKycProfile, useMe, useMember, useMembers, useOnboardingFlow, useOperation, useOrgDocuments, useOrgPayments, useOrgTransfers, useOrgWithdrawals, useOrganization, useOrganizations, usePayment, usePayments, useProvisioningFlow, useSafe, useSubAccount, useSubAccounts, useTransfer, useTransfers, useTreasury, useVirtualAccount, useVirtualAccounts, useVirtualCard, useVirtualCards, useWebhookEndpoint, useWebhookEndpoints, useWebhookEvent, useWithdrawal, useWithdrawals };
+export { CapxulClientProvider, type CapxulClientProviderProps, type CapxulConnector, type CapxulConnectorKind, type CapxulConnectorSession, CapxulProvider, type CapxulProviderProps, CapxulTransportProvider, type CapxulTransportProviderProps, type DocumentsFilters, type InjectedConnectorOptions, type LocalPrivateKeyConnectorOptions, type OrgDocumentsFilters, type OrgScopedFilters, type OwnerRef, type OwnerScopedFilters, type PaginationFilters, type PaymentsFilters, type QueryResult, type TransfersFilters, type UseApiKeyArgs, type UseBalanceLedgerEntryArgs, type UseExternalAccountArgs, type UseMemberArgs, type UseTokenTransferArgs, type VirtualAccountsFilters, type VirtualCardsFilters, type WithdrawalsFilters, createCapxulConfig, injectedConnector, localPrivateKeyConnector, useAccount, useApiKey, useApiKeys, useAuthFlow, useBalanceLedger, useBalanceLedgerEntry, useCapxul, useCapxulStatus, useDocument, useDocuments, useExternalAccount, useExternalAccounts, useKybProfile, useKycProfile, useMe, useMember, useMembers, useOnboardingFlow, useOperation, useOrgDocuments, useOrgPayments, useOrgTransfers, useOrgWithdrawals, useOrganization, useOrganizations, usePayment, usePayments, useProvisioningFlow, useSafe, useSubAccount, useSubAccounts, useTokenTransfer, useTokenTransfers, useTransfer, useTransfers, useTreasury, useVirtualAccount, useVirtualAccounts, useVirtualCard, useVirtualCards, useWebhookEndpoint, useWebhookEndpoints, useWebhookEvent, useWithdrawal, useWithdrawals };

package/dist/index.js

@@ -1,6 +1,6 @@
 "use client";
 import { createContext, useContext, useSyncExternalStore, useMemo, useState, useEffect } from 'react';
-import { createCapxulClient, makeHttpTransport, CapxulError as CapxulError$1 } from '@capxul/sdk';
+import { makeHttpTransport, createCapxulClient, CapxulError as CapxulError$1 } from '@capxul/sdk';
 import { QueryClient, QueryClientProvider, useQuery } from '@tanstack/react-query';
 import { jsx } from 'react/jsx-runtime';
 import { CapxulError as CapxulError$2 } from '@capxul/sdk/errors';
@@ -9,6 +9,45 @@ import { getAddress } from 'viem';
 import { privateKeyToAccount } from 'viem/accounts';
 
 // src/provider.tsx
+var CapxulClientContext = createContext(null);
+function CapxulClientProvider({
+  client,
+  children
+}) {
+  return /* @__PURE__ */ jsx(CapxulClientContext.Provider, { value: client, children });
+}
+function useCapxul() {
+  const client = useContext(CapxulClientContext);
+  if (!client) {
+    throw new Error(
+      "useCapxul() was called outside a <CapxulProvider>. Wrap your app in <CapxulProvider config={...}> before rendering hooks from @capxul/sdk-react."
+    );
+  }
+  return client;
+}
+var CapxulTransportContext = createContext(null);
+function CapxulTransportProvider({
+  transport,
+  children
+}) {
+  return /* @__PURE__ */ jsx(CapxulTransportContext.Provider, { value: transport, children });
+}
+function useCapxulStatus() {
+  const transport = useContext(CapxulTransportContext);
+  return useSyncExternalStore(
+    (listener) => {
+      if (!transport) return () => {
+      };
+      return transport.subscribe(listener);
+    },
+    () => transport?.getState() ?? FALLBACK_READY,
+    () => transport?.getState() ?? FALLBACK_READY
+  );
+}
+var FALLBACK_READY = Object.freeze({
+  status: "ready",
+  runtime: { authBaseUrl: "", convexUrl: "" }
+});
 
 // ../config/src/errors.ts
 var CapxulError = class extends Error {
@@ -81,56 +120,62 @@ function roleKeyFromLabel(label) {
 roleKeyFromLabel("OWNER");
 roleKeyFromLabel("FINANCE_MANAGER");
 roleKeyFromLabel("TEAM_LEAD");
-var CapxulClientContext = createContext(null);
-function CapxulClientProvider({
-  client,
-  children
-}) {
-  return /* @__PURE__ */ jsx(CapxulClientContext.Provider, { value: client, children });
-}
-function useCapxul() {
-  const client = useContext(CapxulClientContext);
-  if (!client) {
-    throw new Error(
-      "useCapxul() was called outside a <CapxulProvider>. Wrap your app in <CapxulProvider config={...}> before rendering hooks from @capxul/sdk-react."
-    );
-  }
-  return client;
-}
-var CapxulTransportContext = createContext(null);
-function CapxulTransportProvider({
-  transport,
-  children
-}) {
-  return /* @__PURE__ */ jsx(CapxulTransportContext.Provider, { value: transport, children });
+
+// src/config.ts
+function createCapxulConfig(input) {
+  assertOnlyKnownKeys(input);
+  assertModeRequiredFields(input);
+  return Object.freeze({ ...input });
 }
-function useCapxulStatus() {
-  const transport = useContext(CapxulTransportContext);
-  return useSyncExternalStore(
-    (listener) => {
-      if (!transport) return () => {
-      };
-      return transport.subscribe(listener);
-    },
-    () => transport?.getState() ?? FALLBACK_READY,
-    () => transport?.getState() ?? FALLBACK_READY
+var ALLOWED_BROWSER_CONFIG_KEYS = [
+  "mode",
+  "authBaseUrl",
+  "convexUrl",
+  "publishableKey",
+  "bootstrapUrl",
+  "fetchImpl"
+];
+function assertOnlyKnownKeys(input) {
+  const candidate = input;
+  const allowed = new Set(ALLOWED_BROWSER_CONFIG_KEYS);
+  const unknown = Object.keys(candidate).filter((key) => !allowed.has(key));
+  if (unknown.length === 0) return;
+  throw Errors.invalidInput(
+    "config",
+    `Browser Capxul config contains unknown or secret/server-only fields: ${unknown.join(", ")}. Allowed keys: ${ALLOWED_BROWSER_CONFIG_KEYS.join(", ")}.`
   );
 }
-var FALLBACK_READY = Object.freeze({
-  status: "ready",
-  runtime: { authBaseUrl: "", convexUrl: "" }
-});
+function assertModeRequiredFields(input) {
+  switch (input.mode) {
+    case "build-time-urls": {
+      if (!input.authBaseUrl || input.authBaseUrl.trim().length === 0) {
+        throw Errors.invalidInput("authBaseUrl", "non-empty string required.");
+      }
+      if (!input.convexUrl || input.convexUrl.trim().length === 0) {
+        throw Errors.invalidInput("convexUrl", "non-empty string required.");
+      }
+      return;
+    }
+    case "publishable-key": {
+      if (!input.publishableKey || input.publishableKey.trim().length === 0) {
+        throw Errors.invalidInput("publishableKey", "non-empty string required.");
+      }
+      return;
+    }
+    default: {
+      const value = input;
+      throw Errors.internalError(
+        `Unhandled BrowserCapxulConfig.mode: ${String(value.mode)}.`
+      );
+    }
+  }
+}
 function CapxulProvider({
   config,
-  publishableKey,
-  browserConfig,
   queryClient,
   children
 }) {
-  const wiring = useMemo(
-    () => buildWiring({ config, publishableKey, browserConfig }),
-    [config, publishableKey, browserConfig]
-  );
+  const wiring = useMemo(() => buildWiring(config), [config]);
   const defaultClient = useMemo(
     () => new QueryClient({
       defaultOptions: { queries: { staleTime: 3e4 } }
@@ -138,47 +183,14 @@ function CapxulProvider({
     []
   );
   const effectiveClient = queryClient ?? defaultClient;
-  const inner = /* @__PURE__ */ jsx(CapxulClientProvider, { client: wiring.client, children });
-  return /* @__PURE__ */ jsx(QueryClientProvider, { client: effectiveClient, children: wiring.transport ? /* @__PURE__ */ jsx(CapxulTransportProvider, { transport: wiring.transport, children: inner }) : inner });
+  return /* @__PURE__ */ jsx(QueryClientProvider, { client: effectiveClient, children: /* @__PURE__ */ jsx(CapxulTransportProvider, { transport: wiring.transport, children: /* @__PURE__ */ jsx(CapxulClientProvider, { client: wiring.client, children }) }) });
 }
-function buildWiring({
-  config,
-  publishableKey,
-  browserConfig
-}) {
-  const sources = [
-    config !== void 0,
-    publishableKey !== void 0,
-    browserConfig !== void 0
-  ].filter(Boolean).length;
-  if (sources === 0) {
-    throw Errors.invalidInput(
-      "CapxulProvider",
-      "Pass exactly one of `config`, `publishableKey`, or `browserConfig`."
-    );
-  }
-  if (sources > 1) {
-    throw Errors.invalidInput(
-      "CapxulProvider",
-      "`config`, `publishableKey`, and `browserConfig` are mutually exclusive \u2014 pass exactly one."
-    );
-  }
-  if (config !== void 0) {
-    return {
-      client: createCapxulClient(config),
-      transport: null
-    };
-  }
-  const browserCfg = browserConfig ?? {
-    mode: "publishable-key",
-    // The narrowing above (`sources === 0` rejected; `config` not
-    // present) guarantees `publishableKey` is set on this branch.
-    publishableKey
-  };
-  const transport = makeHttpTransport(browserCfg);
+function buildWiring(config) {
+  const validated = createCapxulConfig(config);
+  const transport = makeHttpTransport(validated);
   const sdkConfig = {
     _transport: transport,
-    publishableKey: browserCfg.mode === "publishable-key" ? browserCfg.publishableKey : void 0
+    publishableKey: validated.mode === "publishable-key" ? validated.publishableKey : void 0
   };
   return {
     client: createCapxulClient(sdkConfig),
@@ -272,8 +284,12 @@ function useMe() {
     staleTime: 3e4
   });
 }
-function useAccount(_accountId) {
-  return notImplementedQuery("useAccount");
+function useAccount(accountId) {
+  const capxul = useCapxul();
+  return useSdkQuery(
+    () => accountId !== void 0 ? capxul.accounts.retrieve(accountId) : capxul.me.get(),
+    [capxul, accountId]
+  );
 }
 function useOrganization(_organizationId) {
   return notImplementedQuery("useOrganization");
@@ -281,8 +297,12 @@ function useOrganization(_organizationId) {
 function useMember(_args) {
   return notImplementedQuery("useMember");
 }
-function useSafe(_safeId) {
-  return notImplementedQuery("useSafe");
+function useSafe(safeId) {
+  const capxul = useCapxul();
+  return useSdkQuery(
+    () => capxul.accounts.safes.retrieve(safeId),
+    [capxul, safeId]
+  );
 }
 function useTreasury(_organizationId) {
   return notImplementedQuery("useTreasury");
@@ -314,14 +334,25 @@ function usePayment(_paymentId) {
 function useTransfer(_transferId) {
   return notImplementedQuery("useTransfer");
 }
+function useTokenTransfer(args) {
+  const capxul = useCapxul();
+  return useSdkQuery(
+    () => capxul.tokenTransfers.retrieve(args),
+    [capxul, args.txHash, args.logIndex, args.chainId]
+  );
+}
 function useBalanceLedgerEntry(_args) {
   return notImplementedQuery("useBalanceLedgerEntry");
 }
 function useDocument(_documentId) {
   return notImplementedQuery("useDocument");
 }
-function useWithdrawal(_withdrawalId) {
-  return notImplementedQuery("useWithdrawal");
+function useWithdrawal(withdrawalId) {
+  const capxul = useCapxul();
+  return useSdkQuery(() => capxul.withdrawals.retrieve(withdrawalId), [
+    capxul,
+    withdrawalId
+  ]);
 }
 function useOperation(operationId) {
   const capxul = useCapxul();
@@ -368,6 +399,13 @@ function useTransfers(_filters) {
 function useOrgTransfers(_args) {
   return notImplementedQuery("useOrgTransfers");
 }
+function useTokenTransfers(filters) {
+  const capxul = useCapxul();
+  return useSdkQuery(
+    () => capxul.tokenTransfers.list(filters),
+    [capxul, filters?.limit, filters?.cursor, filters?.direction]
+  );
+}
 function useBalanceLedger(_args) {
   return notImplementedQuery("useBalanceLedger");
 }
@@ -377,11 +415,19 @@ function useDocuments(_filters) {
 function useOrgDocuments(_args) {
   return notImplementedQuery("useOrgDocuments");
 }
-function useWithdrawals(_filters) {
-  return notImplementedQuery("useWithdrawals");
+function useWithdrawals(filters) {
+  const capxul = useCapxul();
+  return useSdkQuery(
+    () => capxul.withdrawals.list(filters),
+    [capxul, filters?.limit, filters?.cursor]
+  );
 }
-function useOrgWithdrawals(_args) {
-  return notImplementedQuery("useOrgWithdrawals");
+function useOrgWithdrawals(args) {
+  const capxul = useCapxul();
+  return useSdkQuery(
+    () => capxul.organizations.withdrawals.list(args),
+    [capxul, args.organizationId, args.limit, args.cursor]
+  );
 }
 function useApiKeys(_organizationId) {
   return notImplementedQuery("useApiKeys");
@@ -407,56 +453,6 @@ function useProvisioningFlow() {
   const [snapshot, send] = useActor(machine);
   return { snapshot, send };
 }
-
-// src/config.ts
-function createCapxulConfig(input) {
-  assertOnlyKnownKeys(input);
-  assertModeRequiredFields(input);
-  return Object.freeze({ ...input });
-}
-var ALLOWED_BROWSER_CONFIG_KEYS = [
-  "mode",
-  "authBaseUrl",
-  "convexUrl",
-  "publishableKey",
-  "bootstrapUrl",
-  "fetchImpl"
-];
-function assertOnlyKnownKeys(input) {
-  const candidate = input;
-  const allowed = new Set(ALLOWED_BROWSER_CONFIG_KEYS);
-  const unknown = Object.keys(candidate).filter((key) => !allowed.has(key));
-  if (unknown.length === 0) return;
-  throw Errors.invalidInput(
-    "config",
-    `Browser Capxul config contains unknown or secret/server-only fields: ${unknown.join(", ")}. Allowed keys: ${ALLOWED_BROWSER_CONFIG_KEYS.join(", ")}.`
-  );
-}
-function assertModeRequiredFields(input) {
-  switch (input.mode) {
-    case "build-time-urls": {
-      if (!input.authBaseUrl || input.authBaseUrl.trim().length === 0) {
-        throw Errors.invalidInput("authBaseUrl", "non-empty string required.");
-      }
-      if (!input.convexUrl || input.convexUrl.trim().length === 0) {
-        throw Errors.invalidInput("convexUrl", "non-empty string required.");
-      }
-      return;
-    }
-    case "publishable-key": {
-      if (!input.publishableKey || input.publishableKey.trim().length === 0) {
-        throw Errors.invalidInput("publishableKey", "non-empty string required.");
-      }
-      return;
-    }
-    default: {
-      const value = input;
-      throw Errors.internalError(
-        `Unhandled BrowserCapxulConfig.mode: ${String(value.mode)}.`
-      );
-    }
-  }
-}
 var PRIVATE_KEY_PATTERN = /^0x[0-9a-fA-F]{64}$/;
 var EVM_ADDRESS_PATTERN = /^0x[0-9a-fA-F]{40}$/;
 function injectedConnector(options = {}) {
@@ -553,4 +549,4 @@ function validateAndNormalizeEvmAddress(field, raw) {
   }
 }
 
-export { CapxulClientProvider, CapxulProvider, CapxulTransportProvider, createCapxulConfig, injectedConnector, localPrivateKeyConnector, useAccount, useApiKey, useApiKeys, useAuthFlow, useBalanceLedger, useBalanceLedgerEntry, useCapxul, useCapxulStatus, useDocument, useDocuments, useExternalAccount, useExternalAccounts, useKybProfile, useKycProfile, useMe, useMember, useMembers, useOnboardingFlow, useOperation, useOrgDocuments, useOrgPayments, useOrgTransfers, useOrgWithdrawals, useOrganization, useOrganizations, usePayment, usePayments, useProvisioningFlow, useSafe, useSubAccount, useSubAccounts, useTransfer, useTransfers, useTreasury, useVirtualAccount, useVirtualAccounts, useVirtualCard, useVirtualCards, useWebhookEndpoint, useWebhookEndpoints, useWebhookEvent, useWithdrawal, useWithdrawals };
+export { CapxulClientProvider, CapxulProvider, CapxulTransportProvider, createCapxulConfig, injectedConnector, localPrivateKeyConnector, useAccount, useApiKey, useApiKeys, useAuthFlow, useBalanceLedger, useBalanceLedgerEntry, useCapxul, useCapxulStatus, useDocument, useDocuments, useExternalAccount, useExternalAccounts, useKybProfile, useKycProfile, useMe, useMember, useMembers, useOnboardingFlow, useOperation, useOrgDocuments, useOrgPayments, useOrgTransfers, useOrgWithdrawals, useOrganization, useOrganizations, usePayment, usePayments, useProvisioningFlow, useSafe, useSubAccount, useSubAccounts, useTokenTransfer, useTokenTransfers, useTransfer, useTransfers, useTreasury, useVirtualAccount, useVirtualAccounts, useVirtualCard, useVirtualCards, useWebhookEndpoint, useWebhookEndpoints, useWebhookEvent, useWithdrawal, useWithdrawals };