@capxul/sdk-react 0.1.0-alpha.3 → 0.1.0-alpha.6

package/CHANGELOG.md

@@ -1,5 +1,81 @@
 # @capxul/sdk-react
 
+## 0.1.0-alpha.6
+
+### Minor Changes
+
+- 3af04a9: Public `<CapxulProvider>` now wires authenticated Convex reads end-to-end (#487, closes #484).
+
+  The `build-time-urls` arm of `BrowserCapxulConfig` now causes the provider to internally instantiate a `ConvexReactClient`, wrap it as a `CapxulDataClient`, and feed it as `config.data` into `createCapxulClient`. The existing `auth.createDataClient` callback is wired to the same singleton so a `verifyOtp` call refreshes the data client's auth header without churning the WebSocket. The provider also wraps `client.auth.signOut` so the data client survives sign-out — post-signout reads return typed backend `NOT_AUTHENTICATED` instead of the SDK's `NOT_IMPLEMENTED` stub (closes the #474 friction as a side-effect).
+
+  New optional `sessionStore?: AuthSessionStore` prop lets browser apps opt into `localStorage`-backed persistence and Node consumers (CLIs, e2e harnesses) opt into file-backed persistence. Defaults to in-memory.
+
+  This closes the architectural gap that made the React hook surface (`useMe`, `useAccount`, `useSafe`, ...) impossible to exercise end-to-end through the public provider — previously `config.data` was never populated, so every authenticated read short-circuited to `NOT_IMPLEMENTED`. The Ink reference CLI (`apps/reference-cli/`) is rebuilt on top of the public provider as proof: 17/17 agent-driver assertions pass against live alpha-3 Convex, including a dev-OTP authenticated round-trip that mints a real session via `AUTH_DEV_OTP=00000` and exercises three distinct hook end-states (`NOT_AUTHENTICATED`, `PROFILE_NOT_FOUND`, post-signout `NOT_AUTHENTICATED`).
+
+- 57203a4: Withdrawals v1 W2 (#465) — public surface tightening + org-scope create
+  - `WithdrawalsCreateInput.destination` no longer accepts `kind`. The
+    backend now resolves the `external_account` row by FK and infers
+    the kind + rail server-side. Anything that doesn't route to
+    `chain_wallet` (or is chain_wallet but non-EVM in slice 1) returns
+    `VERIFICATION_REQUIRED` with `details.rail` + `details.currentKind`.
+  - `organizations.withdrawals.create` is now a real mutation (no
+    longer a `NOT_IMPLEMENTED` stub). Returns the `processing` row
+    only — Safe + Zodiac submission orchestration ships in W3+.
+  - `Errors.verificationRequired({ rail, currentKind })` factory
+    added; the `VERIFICATION_REQUIRED` code now broadens to cover
+    both KYC tier gates and unsupported withdrawal rails.
+
+  **Migration:** Remove `destination.kind` from any
+  `capxul.withdrawals.create({ destination: { kind, externalAccountId } })`
+  call sites. Pass only `externalAccountId`.
+
+### Patch Changes
+
+- Updated dependencies [57203a4]
+  - @capxul/sdk@0.1.0-alpha.6
+
+## 0.1.0-alpha.5
+
+### Patch Changes
+
+- Widen the React peer dependency to `>=18.2.0 <20` so React 18-era Ink 5
+  CLI apps can install `@capxul/sdk-react` without forcing React 19 into
+  Ink's React reconciler. The provider and hooks only use React 18-compatible
+  APIs (`createContext`, `useContext`, `useMemo`, `useEffect`, `useState`, and
+  `useSyncExternalStore`), preserving React 19 compatibility while unblocking
+  React 18 hosts.
+
+- Updated dependencies
+  - @capxul/sdk@0.1.0-alpha.5
+
+## 0.1.0-alpha.4
+
+### Minor Changes
+
+- Post-alpha hardening — WAVE 1 + WAVE 2 cumulative
+
+  **WAVE 1 (merged 2026-05-03 12:44Z):**
+  - S2 story 1: wire onboarding readback hooks (#469) — `me.update`, `accounts.retrieve`, `accounts.update`, `useAccount`, `useSafe`
+  - S3 phase 1: Ink reference CLI scaffold + `auth+me` end-to-end against live alpha-3 Convex (#470). Stickiness gate (D3) fired.
+  - S5: split `CapxulProvider` into public single-input `BrowserCapxulConfig` + test-only `CapxulTestProvider` from `@capxul/sdk-react/proof` (#473). Q1 lock honored. 7 type-level provider-shape guards including `@ts-expect-error` against test-provider leaking to public barrel.
+
+  **WAVE 2 (merged 2026-05-03 12:54-13:16Z):**
+  - S3 phase 2: per-domain CLI commands closing #458 (#476) — `account retrieve/update`, `safe retrieve`, `payment retrieve`, `withdrawal retrieve/list`. 12/12 agent-driver tests pass.
+  - S2 story 2: `capxul.tokenTransfers.*` non-canonical SDK namespace (#479) — Option A per #477 (canon-aligned `transfers.*` shape deferred to alpha.5+ pending backend canon work). New `useTokenTransfers` + `useTokenTransfer` hooks; new `getByTxLogIndex` backend query. Hook proof matrix length unchanged at 41 (non-canonical hooks deliberately excluded).
+
+  **S1 (#456) closed no-op** — alpha publish infrastructure (tsup, lazy-DX, transport state machine, npm metadata, READMEs, CHANGELOG, changesets, OIDC release workflow) physically merged into `api-first` via PRs #449-#452 earlier the same day; the slice merge produced 0 file changes per clean-room probe.
+
+  **Friction issues filed for alpha.4+ polish:**
+  - #474 — `me.get` returns `NOT_IMPLEMENTED` when `config.data` is undefined; should be `NOT_AUTHENTICATED`.
+  - #475 — `@capxul/sdk/headless` slim entry point excludes xstate flow machines + brand constructors (1.6 MB → much smaller).
+  - #477 / #478 — `transfers.*` / `balanceLedger.*` / `treasury` canon-shape alignment with indexer feed.
+  - #471 — Vercel-capxul-web preview-deploy systemic failure on api-first base (separate from epic).
+
+### Patch Changes
+
+- Updated dependencies
+  - @capxul/sdk@0.1.0-alpha.4
+
 ## 0.1.0-alpha.3
 
 ### Patch Changes

package/dist/index.cjs

@@ -5,12 +5,52 @@ var react = require('react');
 var sdk = require('@capxul/sdk');
 var reactQuery = require('@tanstack/react-query');
 var jsxRuntime = require('react/jsx-runtime');
+var react$2 = require('convex/react');
 var errors = require('@capxul/sdk/errors');
 var react$1 = require('@xstate/react');
 var viem = require('viem');
 var accounts = require('viem/accounts');
 
 // src/provider.tsx
+var CapxulClientContext = react.createContext(null);
+function CapxulClientProvider({
+  client,
+  children
+}) {
+  return /* @__PURE__ */ jsxRuntime.jsx(CapxulClientContext.Provider, { value: client, children });
+}
+function useCapxul() {
+  const client = react.useContext(CapxulClientContext);
+  if (!client) {
+    throw new Error(
+      "useCapxul() was called outside a <CapxulProvider>. Wrap your app in <CapxulProvider config={...}> before rendering hooks from @capxul/sdk-react."
+    );
+  }
+  return client;
+}
+var CapxulTransportContext = react.createContext(null);
+function CapxulTransportProvider({
+  transport,
+  children
+}) {
+  return /* @__PURE__ */ jsxRuntime.jsx(CapxulTransportContext.Provider, { value: transport, children });
+}
+function useCapxulStatus() {
+  const transport = react.useContext(CapxulTransportContext);
+  return react.useSyncExternalStore(
+    (listener) => {
+      if (!transport) return () => {
+      };
+      return transport.subscribe(listener);
+    },
+    () => transport?.getState() ?? FALLBACK_READY,
+    () => transport?.getState() ?? FALLBACK_READY
+  );
+}
+var FALLBACK_READY = Object.freeze({
+  status: "ready",
+  runtime: { authBaseUrl: "", convexUrl: "" }
+});
 
 // ../config/src/errors.ts
 var CapxulError = class extends Error {
@@ -71,7 +111,29 @@ var Errors = {
     { details }
   ),
   emailDeliveryFailed: (detail) => new CapxulError("EMAIL_DELIVERY_FAILED", `Failed to send email: ${detail}`),
-  internalError: (reason) => new CapxulError("INTERNAL_ERROR", `Internal error: ${reason}`)
+  internalError: (reason) => new CapxulError("INTERNAL_ERROR", `Internal error: ${reason}`),
+  /**
+   * Verification gate. Surfaced when a request hits a verification
+   * boundary the actor cannot cross under their current state. Two
+   * variants share this code:
+   *
+   * - Rail gate (Withdrawals v1 W2, #465): the resolved
+   *   `external_account.kind` routes to a withdrawal rail (e.g.
+   *   `fiat_offramp`, `card_payout`) that is not yet supported. Carries
+   *   `details.rail` + `details.currentKind`.
+   * - KYC tier gate (legacy / future): the actor's KYC tier is below
+   *   the required tier. Carries `details.requiredTier`.
+   *
+   * Code is shared because both expose the same UX shape ("you cannot
+   * proceed until verification advances"); the `details.*` keys
+   * differentiate the route.
+   */
+  verificationRequired: (details) => {
+    const message = "rail" in details ? `Withdrawal rail "${details.rail}" (kind=${details.currentKind}) is not yet supported.` : `Verification tier ${details.requiredTier} is required.`;
+    return new CapxulError("VERIFICATION_REQUIRED", message, {
+      details: { ...details }
+    });
+  }
 };
 
 // ../config/src/org-roles.ts
@@ -83,56 +145,95 @@ function roleKeyFromLabel(label) {
 roleKeyFromLabel("OWNER");
 roleKeyFromLabel("FINANCE_MANAGER");
 roleKeyFromLabel("TEAM_LEAD");
-var CapxulClientContext = react.createContext(null);
-function CapxulClientProvider({
-  client,
-  children
-}) {
-  return /* @__PURE__ */ jsxRuntime.jsx(CapxulClientContext.Provider, { value: client, children });
+
+// src/config.ts
+function createCapxulConfig(input) {
+  assertOnlyKnownKeys(input);
+  assertModeRequiredFields(input);
+  return Object.freeze({ ...input });
 }
-function useCapxul() {
-  const client = react.useContext(CapxulClientContext);
-  if (!client) {
-    throw new Error(
-      "useCapxul() was called outside a <CapxulProvider>. Wrap your app in <CapxulProvider config={...}> before rendering hooks from @capxul/sdk-react."
-    );
-  }
-  return client;
+var ALLOWED_BROWSER_CONFIG_KEYS = [
+  "mode",
+  "authBaseUrl",
+  "convexUrl",
+  "publishableKey",
+  "bootstrapUrl",
+  "fetchImpl"
+];
+function assertOnlyKnownKeys(input) {
+  const candidate = input;
+  const allowed = new Set(ALLOWED_BROWSER_CONFIG_KEYS);
+  const unknown = Object.keys(candidate).filter((key) => !allowed.has(key));
+  if (unknown.length === 0) return;
+  throw Errors.invalidInput(
+    "config",
+    `Browser Capxul config contains unknown or secret/server-only fields: ${unknown.join(", ")}. Allowed keys: ${ALLOWED_BROWSER_CONFIG_KEYS.join(", ")}.`
+  );
 }
-var CapxulTransportContext = react.createContext(null);
-function CapxulTransportProvider({
-  transport,
-  children
-}) {
-  return /* @__PURE__ */ jsxRuntime.jsx(CapxulTransportContext.Provider, { value: transport, children });
+function assertModeRequiredFields(input) {
+  switch (input.mode) {
+    case "build-time-urls": {
+      if (!input.authBaseUrl || input.authBaseUrl.trim().length === 0) {
+        throw Errors.invalidInput("authBaseUrl", "non-empty string required.");
+      }
+      if (!input.convexUrl || input.convexUrl.trim().length === 0) {
+        throw Errors.invalidInput("convexUrl", "non-empty string required.");
+      }
+      return;
+    }
+    case "publishable-key": {
+      if (!input.publishableKey || input.publishableKey.trim().length === 0) {
+        throw Errors.invalidInput("publishableKey", "non-empty string required.");
+      }
+      return;
+    }
+    default: {
+      const value = input;
+      throw Errors.internalError(
+        `Unhandled BrowserCapxulConfig.mode: ${String(value.mode)}.`
+      );
+    }
+  }
 }
-function useCapxulStatus() {
-  const transport = react.useContext(CapxulTransportContext);
-  return react.useSyncExternalStore(
-    (listener) => {
-      if (!transport) return () => {
-      };
-      return transport.subscribe(listener);
-    },
-    () => transport?.getState() ?? FALLBACK_READY,
-    () => transport?.getState() ?? FALLBACK_READY
-  );
+function createReactDataClient(convexUrl, sessionStore) {
+  const client = new react$2.ConvexReactClient(convexUrl);
+  const refreshAuth = () => {
+    const session = sessionStore.get();
+    const jwt = session?.convexJwt;
+    if (jwt) {
+      client.setAuth(() => Promise.resolve(jwt));
+    } else {
+      client.clearAuth();
+    }
+  };
+  refreshAuth();
+  return {
+    query: (name, args) => client.query(name, args),
+    mutation: (name, args) => client.mutation(name, args),
+    action: (name, args) => client.action(name, args),
+    refreshAuth,
+    close: () => {
+      void client.close();
+    }
+  };
 }
-var FALLBACK_READY = Object.freeze({
-  status: "ready",
-  runtime: { authBaseUrl: "", convexUrl: "" }
-});
 function CapxulProvider({
   config,
-  publishableKey,
-  browserConfig,
+  sessionStore,
   queryClient,
   children
 }) {
+  const defaultSessionStore = react.useMemo(() => createMemorySessionStore(), []);
+  const effectiveSessionStore = sessionStore ?? defaultSessionStore;
   const wiring = react.useMemo(
-    () => buildWiring({ config, publishableKey, browserConfig }),
-    [config, publishableKey, browserConfig]
+    () => buildWiring(config, effectiveSessionStore),
+    [config, effectiveSessionStore]
   );
+  react.useEffect(() => {
+    return () => {
+      wiring.dataClient?.close();
+    };
+  }, [wiring]);
   const defaultClient = react.useMemo(
     () => new reactQuery.QueryClient({
       defaultOptions: { queries: { staleTime: 3e4 } }
@@ -140,51 +241,60 @@ function CapxulProvider({
     []
   );
   const effectiveClient = queryClient ?? defaultClient;
-  const inner = /* @__PURE__ */ jsxRuntime.jsx(CapxulClientProvider, { client: wiring.client, children });
-  return /* @__PURE__ */ jsxRuntime.jsx(reactQuery.QueryClientProvider, { client: effectiveClient, children: wiring.transport ? /* @__PURE__ */ jsxRuntime.jsx(CapxulTransportProvider, { transport: wiring.transport, children: inner }) : inner });
+  return /* @__PURE__ */ jsxRuntime.jsx(reactQuery.QueryClientProvider, { client: effectiveClient, children: /* @__PURE__ */ jsxRuntime.jsx(CapxulTransportProvider, { transport: wiring.transport, children: /* @__PURE__ */ jsxRuntime.jsx(CapxulClientProvider, { client: wiring.client, children }) }) });
 }
-function buildWiring({
-  config,
-  publishableKey,
-  browserConfig
-}) {
-  const sources = [
-    config !== void 0,
-    publishableKey !== void 0,
-    browserConfig !== void 0
-  ].filter(Boolean).length;
-  if (sources === 0) {
-    throw Errors.invalidInput(
-      "CapxulProvider",
-      "Pass exactly one of `config`, `publishableKey`, or `browserConfig`."
-    );
-  }
-  if (sources > 1) {
-    throw Errors.invalidInput(
-      "CapxulProvider",
-      "`config`, `publishableKey`, and `browserConfig` are mutually exclusive \u2014 pass exactly one."
-    );
-  }
-  if (config !== void 0) {
-    return {
-      client: sdk.createCapxulClient(config),
-      transport: null
-    };
-  }
-  const browserCfg = browserConfig ?? {
-    mode: "publishable-key",
-    // The narrowing above (`sources === 0` rejected; `config` not
-    // present) guarantees `publishableKey` is set on this branch.
-    publishableKey
-  };
-  const transport = sdk.makeHttpTransport(browserCfg);
+function buildWiring(config, sessionStore) {
+  const validated = createCapxulConfig(config);
+  const transport = sdk.makeHttpTransport(validated);
+  const dataClient = validated.mode === "build-time-urls" ? createReactDataClient(validated.convexUrl, sessionStore) : null;
   const sdkConfig = {
     _transport: transport,
-    publishableKey: browserCfg.mode === "publishable-key" ? browserCfg.publishableKey : void 0
+    publishableKey: validated.mode === "publishable-key" ? validated.publishableKey : void 0,
+    data: dataClient ?? void 0,
+    auth: dataClient ? {
+      // The auth client builds the BetterAuth root URL from this
+      // value. Convex's `.cloud` URL is the wrong host (BetterAuth
+      // is mounted on the `.site` URL), but the build-time-urls
+      // transport already encodes the correct `authBaseUrl` via
+      // its discriminated union. We pass `convexUrl` here only so
+      // `core/auth.ts`'s `createTransportProvider` short-circuits
+      // to the externally-injected `_transport` cache slot.
+      baseUrl: transport.authBaseUrl,
+      sessionStore,
+      createDataClient: async (_session) => {
+        dataClient.refreshAuth();
+        return dataClient;
+      }
+    } : void 0
+  };
+  const client = sdk.createCapxulClient(sdkConfig);
+  if (dataClient) {
+    const originalSignOut = client.auth.signOut;
+    Object.assign(client.auth, {
+      signOut: async () => {
+        const result = await originalSignOut();
+        dataClient.refreshAuth();
+        sdkConfig.data = dataClient;
+        return result;
+      }
+    });
+  }
+  return {
+    client,
+    transport,
+    dataClient
   };
+}
+function createMemorySessionStore() {
+  let current = null;
   return {
-    client: sdk.createCapxulClient(sdkConfig),
-    transport
+    get: () => current,
+    set: (session) => {
+      current = session;
+    },
+    clear: () => {
+      current = null;
+    }
   };
 }
 function notImplementedQuery(hookName) {
@@ -274,8 +384,12 @@ function useMe() {
     staleTime: 3e4
   });
 }
-function useAccount(_accountId) {
-  return notImplementedQuery("useAccount");
+function useAccount(accountId) {
+  const capxul = useCapxul();
+  return useSdkQuery(
+    () => accountId !== void 0 ? capxul.accounts.retrieve(accountId) : capxul.me.get(),
+    [capxul, accountId]
+  );
 }
 function useOrganization(_organizationId) {
   return notImplementedQuery("useOrganization");
@@ -283,8 +397,12 @@ function useOrganization(_organizationId) {
 function useMember(_args) {
   return notImplementedQuery("useMember");
 }
-function useSafe(_safeId) {
-  return notImplementedQuery("useSafe");
+function useSafe(safeId) {
+  const capxul = useCapxul();
+  return useSdkQuery(
+    () => capxul.accounts.safes.retrieve(safeId),
+    [capxul, safeId]
+  );
 }
 function useTreasury(_organizationId) {
   return notImplementedQuery("useTreasury");
@@ -298,8 +416,15 @@ function useKycProfile(_accountId) {
 function useKybProfile(_organizationId) {
   return notImplementedQuery("useKybProfile");
 }
-function useExternalAccount(_args) {
-  return notImplementedQuery("useExternalAccount");
+function useExternalAccount(args) {
+  const capxul = useCapxul();
+  return useSdkQuery(
+    () => args.ownerKind === "account" ? capxul.externalAccounts.retrieve(args.externalAccountId) : capxul.organizations.externalAccounts.retrieve({
+      organizationId: args.ownerId,
+      externalAccountId: args.externalAccountId
+    }),
+    [capxul, args.ownerKind, args.ownerId, args.externalAccountId]
+  );
 }
 function useSubAccount(_subAccountId) {
   return notImplementedQuery("useSubAccount");
@@ -316,14 +441,25 @@ function usePayment(_paymentId) {
 function useTransfer(_transferId) {
   return notImplementedQuery("useTransfer");
 }
+function useTokenTransfer(args) {
+  const capxul = useCapxul();
+  return useSdkQuery(
+    () => capxul.tokenTransfers.retrieve(args),
+    [capxul, args.txHash, args.logIndex, args.chainId]
+  );
+}
 function useBalanceLedgerEntry(_args) {
   return notImplementedQuery("useBalanceLedgerEntry");
 }
 function useDocument(_documentId) {
   return notImplementedQuery("useDocument");
 }
-function useWithdrawal(_withdrawalId) {
-  return notImplementedQuery("useWithdrawal");
+function useWithdrawal(withdrawalId) {
+  const capxul = useCapxul();
+  return useSdkQuery(() => capxul.withdrawals.retrieve(withdrawalId), [
+    capxul,
+    withdrawalId
+  ]);
 }
 function useOperation(operationId) {
   const capxul = useCapxul();
@@ -346,8 +482,14 @@ function useOrganizations() {
 function useMembers(_organizationId) {
   return notImplementedQuery("useMembers");
 }
-function useExternalAccounts(_args) {
-  return notImplementedQuery("useExternalAccounts");
+function useExternalAccounts(args) {
+  const capxul = useCapxul();
+  return useSdkQuery(
+    () => args.ownerKind === "account" ? capxul.accounts.externalAccounts.list({ accountId: args.ownerId }) : capxul.organizations.externalAccounts.list({
+      organizationId: args.ownerId
+    }),
+    [capxul, args.ownerKind, args.ownerId]
+  );
 }
 function useSubAccounts(_args) {
   return notImplementedQuery("useSubAccounts");
@@ -370,6 +512,13 @@ function useTransfers(_filters) {
 function useOrgTransfers(_args) {
   return notImplementedQuery("useOrgTransfers");
 }
+function useTokenTransfers(filters) {
+  const capxul = useCapxul();
+  return useSdkQuery(
+    () => capxul.tokenTransfers.list(filters),
+    [capxul, filters?.limit, filters?.cursor, filters?.direction]
+  );
+}
 function useBalanceLedger(_args) {
   return notImplementedQuery("useBalanceLedger");
 }
@@ -379,11 +528,19 @@ function useDocuments(_filters) {
 function useOrgDocuments(_args) {
   return notImplementedQuery("useOrgDocuments");
 }
-function useWithdrawals(_filters) {
-  return notImplementedQuery("useWithdrawals");
+function useWithdrawals(filters) {
+  const capxul = useCapxul();
+  return useSdkQuery(
+    () => capxul.withdrawals.list(filters),
+    [capxul, filters?.limit, filters?.cursor]
+  );
 }
-function useOrgWithdrawals(_args) {
-  return notImplementedQuery("useOrgWithdrawals");
+function useOrgWithdrawals(args) {
+  const capxul = useCapxul();
+  return useSdkQuery(
+    () => capxul.organizations.withdrawals.list(args),
+    [capxul, args.organizationId, args.limit, args.cursor]
+  );
 }
 function useApiKeys(_organizationId) {
   return notImplementedQuery("useApiKeys");
@@ -409,56 +566,6 @@ function useProvisioningFlow() {
   const [snapshot, send] = react$1.useActor(machine);
   return { snapshot, send };
 }
-
-// src/config.ts
-function createCapxulConfig(input) {
-  assertOnlyKnownKeys(input);
-  assertModeRequiredFields(input);
-  return Object.freeze({ ...input });
-}
-var ALLOWED_BROWSER_CONFIG_KEYS = [
-  "mode",
-  "authBaseUrl",
-  "convexUrl",
-  "publishableKey",
-  "bootstrapUrl",
-  "fetchImpl"
-];
-function assertOnlyKnownKeys(input) {
-  const candidate = input;
-  const allowed = new Set(ALLOWED_BROWSER_CONFIG_KEYS);
-  const unknown = Object.keys(candidate).filter((key) => !allowed.has(key));
-  if (unknown.length === 0) return;
-  throw Errors.invalidInput(
-    "config",
-    `Browser Capxul config contains unknown or secret/server-only fields: ${unknown.join(", ")}. Allowed keys: ${ALLOWED_BROWSER_CONFIG_KEYS.join(", ")}.`
-  );
-}
-function assertModeRequiredFields(input) {
-  switch (input.mode) {
-    case "build-time-urls": {
-      if (!input.authBaseUrl || input.authBaseUrl.trim().length === 0) {
-        throw Errors.invalidInput("authBaseUrl", "non-empty string required.");
-      }
-      if (!input.convexUrl || input.convexUrl.trim().length === 0) {
-        throw Errors.invalidInput("convexUrl", "non-empty string required.");
-      }
-      return;
-    }
-    case "publishable-key": {
-      if (!input.publishableKey || input.publishableKey.trim().length === 0) {
-        throw Errors.invalidInput("publishableKey", "non-empty string required.");
-      }
-      return;
-    }
-    default: {
-      const value = input;
-      throw Errors.internalError(
-        `Unhandled BrowserCapxulConfig.mode: ${String(value.mode)}.`
-      );
-    }
-  }
-}
 var PRIVATE_KEY_PATTERN = /^0x[0-9a-fA-F]{64}$/;
 var EVM_ADDRESS_PATTERN = /^0x[0-9a-fA-F]{40}$/;
 function injectedConnector(options = {}) {
@@ -592,6 +699,8 @@ exports.useProvisioningFlow = useProvisioningFlow;
 exports.useSafe = useSafe;
 exports.useSubAccount = useSubAccount;
 exports.useSubAccounts = useSubAccounts;
+exports.useTokenTransfer = useTokenTransfer;
+exports.useTokenTransfers = useTokenTransfers;
 exports.useTransfer = useTransfer;
 exports.useTransfers = useTransfers;
 exports.useTreasury = useTreasury;