@btst/stack 2.3.0 → 2.5.0

package/dist/plugins/ui-builder/index.d.mts

@@ -1,6 +1,6 @@
 import { z } from 'zod';
-import { C as ContentTypeConfig } from '../../shared/stack.CVDTkMoO.mjs';
-export { L as LoaderContext, b as PaginatedUIBuilderPages, P as ParsedUIBuilderPage, S as SerializedUIBuilderPage, c as UIBuilderClientHooks, a as UIBuilderPage, U as UIBuilderPageData } from '../../shared/stack.6fUOjLs9.mjs';
+import { C as ContentTypeConfig } from '../../shared/stack.B8QD11QU.mjs';
+export { L as LoaderContext, b as PaginatedUIBuilderPages, P as ParsedUIBuilderPage, S as SerializedUIBuilderPage, c as UIBuilderClientHooks, a as UIBuilderPage, U as UIBuilderPageData } from '../../shared/stack.dH7u-TJH.mjs';
 export { C as ComponentLayer, a as ComponentRegistry, R as RegistryEntry, V as Variable } from '../../shared/stack.D1DMlJp-.mjs';
 import 'react';
 import '../../shared/stack.8nldKomx.mjs';

package/dist/plugins/ui-builder/index.d.ts

@@ -1,6 +1,6 @@
 import { z } from 'zod';
-import { C as ContentTypeConfig } from '../../shared/stack.CVDTkMoO.js';
-export { L as LoaderContext, b as PaginatedUIBuilderPages, P as ParsedUIBuilderPage, S as SerializedUIBuilderPage, c as UIBuilderClientHooks, a as UIBuilderPage, U as UIBuilderPageData } from '../../shared/stack.C-Ptrz8s.js';
+import { C as ContentTypeConfig } from '../../shared/stack.B8QD11QU.js';
+export { L as LoaderContext, b as PaginatedUIBuilderPages, P as ParsedUIBuilderPage, S as SerializedUIBuilderPage, c as UIBuilderClientHooks, a as UIBuilderPage, U as UIBuilderPageData } from '../../shared/stack.Cj_zKww4.js';
 export { C as ComponentLayer, a as ComponentRegistry, R as RegistryEntry, V as Variable } from '../../shared/stack.GygI_T3X.js';
 import 'react';
 import '../../shared/stack.8nldKomx.js';

package/dist/shared/{stack.C-WUPMT6.d.cts → stack.B2xZTSiO.d.cts}

@@ -83,21 +83,21 @@ interface LoaderContext {
  */
 interface UIBuilderClientHooks {
     /**
-     * Called before loading the page list. Return false to cancel loading.
+     * Called before loading the page list. Throw an error to cancel loading.
      * @param context - Loader context with path, params, etc.
      */
-    beforeLoadPageList?: (context: LoaderContext) => Promise<boolean> | boolean;
+    beforeLoadPageList?: (context: LoaderContext) => Promise<void> | void;
     /**
      * Called after the page list is loaded.
      * @param context - Loader context
      */
     afterLoadPageList?: (context: LoaderContext) => Promise<void> | void;
     /**
-     * Called before loading the page builder. Return false to cancel loading.
+     * Called before loading the page builder. Throw an error to cancel loading.
      * @param pageId - The page ID (undefined for new pages)
      * @param context - Loader context
      */
-    beforeLoadPageBuilder?: (pageId: string | undefined, context: LoaderContext) => Promise<boolean> | boolean;
+    beforeLoadPageBuilder?: (pageId: string | undefined, context: LoaderContext) => Promise<void> | void;
     /**
      * Called after the page builder is loaded.
      * @param pageId - The page ID (undefined for new pages)

package/dist/shared/{stack.B1EeBt1b.d.ts → stack.B58oHdqm.d.mts}

@@ -1,5 +1,5 @@
 import * as _btst_stack_plugins_api from '@btst/stack/plugins/api';
-import { a as SerializedContentItemWithType, S as SerializedContentType, b as ContentType, c as ContentItem, d as SerializedContentItem, e as ContentItemWithType, f as CMSBackendConfig, I as InverseRelation } from './stack.CVDTkMoO.js';
+import { a as SerializedContentItemWithType, S as SerializedContentType, b as ContentType, c as ContentItem, d as SerializedContentItem, e as ContentItemWithType, f as CMSBackendConfig, I as InverseRelation } from './stack.B8QD11QU.mjs';
 import * as better_call from 'better-call';
 import { z } from 'zod';
 import { Adapter } from '@btst/db';
@@ -78,6 +78,35 @@ declare function getContentItemById(adapter: Adapter, id: string): Promise<Seria
  */
 declare function getContentItemBySlug(adapter: Adapter, contentTypeSlug: string, slug: string): Promise<SerializedContentItemWithType | null>;
 
+/**
+ * Input for creating a new CMS content item.
+ */
+interface CreateCMSContentItemInput {
+    /** URL-safe slug for the item */
+    slug: string;
+    /** Arbitrary data payload — should match the content type schema */
+    data: Record<string, unknown>;
+}
+/**
+ * Create a new content item for a content type (looked up by slug).
+ *
+ * Bypasses Zod schema validation and relation processing — the caller is
+ * responsible for providing valid, relation-free data. For relation fields or
+ * schema validation, use the HTTP endpoint instead.
+ *
+ * Throws if the content type is not found or the slug is already taken within
+ * that content type.
+ *
+ * @remarks **Security:** No authorization hooks (`onBeforeCreate`, `onAfterCreate`)
+ * are called. The caller is responsible for any access-control checks before
+ * invoking this function.
+ *
+ * @param adapter - The database adapter
+ * @param contentTypeSlug - Slug of the target content type
+ * @param input - Item slug and data payload
+ */
+declare function createCMSContentItem(adapter: Adapter, contentTypeSlug: string, input: CreateCMSContentItemInput): Promise<SerializedContentItem>;
+
 /**
  * Route keys for the CMS plugin — matches the keys returned by
  * `stackClient.router.getRoute(path).routeKey`.
@@ -257,6 +286,7 @@ declare const cmsBackendPlugin: (config: CMSBackendConfig) => _btst_stack_plugin
     getContentItemBySlug: (contentTypeSlug: string, slug: string) => Promise<SerializedContentItemWithType<Record<string, unknown>> | null>;
     getContentItemById: (id: string) => Promise<SerializedContentItemWithType<Record<string, unknown>> | null>;
     prefetchForRoute: CMSPrefetchForRoute;
+    createContentItem: (typeSlug: string, input: Parameters<typeof createCMSContentItem>[2]) => Promise<SerializedContentItem>;
 }>;
 type CMSApiRouter = ReturnType<ReturnType<typeof cmsBackendPlugin>["routes"]>;
 
@@ -293,5 +323,5 @@ declare const CMS_QUERY_KEYS: {
     contentDetail: (typeSlug: string, id: string) => readonly ["cmsContent", "detail", string, string];
 };
 
-export { cmsBackendPlugin as c, getAllContentItems as d, getContentItemBySlug as e, getContentItemById as f, getAllContentTypes as g, serializeContentItem as h, serializeContentItemWithType as i, CMS_QUERY_KEYS as j, serializeContentType as s };
-export type { CMSApiRouter as C, ContentListDiscriminator as a, CMSRouteKey as b };
+export { cmsBackendPlugin as c, getAllContentItems as d, getContentItemBySlug as e, getContentItemById as f, getAllContentTypes as g, serializeContentItem as h, serializeContentItemWithType as i, createCMSContentItem as j, CMS_QUERY_KEYS as l, serializeContentType as s };
+export type { CMSApiRouter as C, ContentListDiscriminator as a, CMSRouteKey as b, CreateCMSContentItemInput as k };

package/dist/shared/{stack.CVDTkMoO.d.mts → stack.B8QD11QU.d.cts}

@@ -130,21 +130,21 @@ interface CMSHookContext {
 /**
  * Hooks for customizing CMS backend behavior
  *
- * Note: Before hooks can only deny operations by returning `false`.
+ * Note: Before hooks deny operations by throwing an error.
  * They cannot modify the data being saved. This ensures consistency
  * between the stored content item data and relation junction tables.
  */
 interface CMSBackendHooks {
-    /** Called before creating a content item. Return false to deny the operation. */
-    onBeforeCreate?: (data: Record<string, unknown>, context: CMSHookContext) => Promise<false | void> | false | void;
+    /** Called before creating a content item. Throw an error to deny the operation. */
+    onBeforeCreate?: (data: Record<string, unknown>, context: CMSHookContext) => Promise<void> | void;
     /** Called after creating a content item */
     onAfterCreate?: (item: SerializedContentItem, context: CMSHookContext) => Promise<void> | void;
-    /** Called before updating a content item. Return false to deny the operation. */
-    onBeforeUpdate?: (id: string, data: Record<string, unknown>, context: CMSHookContext) => Promise<false | void> | false | void;
+    /** Called before updating a content item. Throw an error to deny the operation. */
+    onBeforeUpdate?: (id: string, data: Record<string, unknown>, context: CMSHookContext) => Promise<void> | void;
     /** Called after updating a content item */
     onAfterUpdate?: (item: SerializedContentItem, context: CMSHookContext) => Promise<void> | void;
-    /** Called before deleting a content item */
-    onBeforeDelete?: (id: string, context: CMSHookContext) => Promise<boolean> | boolean;
+    /** Called before deleting a content item. Throw an error to deny the operation. */
+    onBeforeDelete?: (id: string, context: CMSHookContext) => Promise<void> | void;
     /** Called after deleting a content item */
     onAfterDelete?: (id: string, context: CMSHookContext) => Promise<void> | void;
     /** Called on any CMS error */

package/dist/shared/{stack.CVDTkMoO.d.cts → stack.B8QD11QU.d.mts}

@@ -130,21 +130,21 @@ interface CMSHookContext {
 /**
  * Hooks for customizing CMS backend behavior
  *
- * Note: Before hooks can only deny operations by returning `false`.
+ * Note: Before hooks deny operations by throwing an error.
  * They cannot modify the data being saved. This ensures consistency
  * between the stored content item data and relation junction tables.
  */
 interface CMSBackendHooks {
-    /** Called before creating a content item. Return false to deny the operation. */
-    onBeforeCreate?: (data: Record<string, unknown>, context: CMSHookContext) => Promise<false | void> | false | void;
+    /** Called before creating a content item. Throw an error to deny the operation. */
+    onBeforeCreate?: (data: Record<string, unknown>, context: CMSHookContext) => Promise<void> | void;
     /** Called after creating a content item */
     onAfterCreate?: (item: SerializedContentItem, context: CMSHookContext) => Promise<void> | void;
-    /** Called before updating a content item. Return false to deny the operation. */
-    onBeforeUpdate?: (id: string, data: Record<string, unknown>, context: CMSHookContext) => Promise<false | void> | false | void;
+    /** Called before updating a content item. Throw an error to deny the operation. */
+    onBeforeUpdate?: (id: string, data: Record<string, unknown>, context: CMSHookContext) => Promise<void> | void;
     /** Called after updating a content item */
     onAfterUpdate?: (item: SerializedContentItem, context: CMSHookContext) => Promise<void> | void;
-    /** Called before deleting a content item */
-    onBeforeDelete?: (id: string, context: CMSHookContext) => Promise<boolean> | boolean;
+    /** Called before deleting a content item. Throw an error to deny the operation. */
+    onBeforeDelete?: (id: string, context: CMSHookContext) => Promise<void> | void;
     /** Called after deleting a content item */
     onAfterDelete?: (id: string, context: CMSHookContext) => Promise<void> | void;
     /** Called on any CMS error */

package/dist/shared/{stack.CVDTkMoO.d.ts → stack.B8QD11QU.d.ts}

@@ -130,21 +130,21 @@ interface CMSHookContext {
 /**
  * Hooks for customizing CMS backend behavior
  *
- * Note: Before hooks can only deny operations by returning `false`.
+ * Note: Before hooks deny operations by throwing an error.
  * They cannot modify the data being saved. This ensures consistency
  * between the stored content item data and relation junction tables.
  */
 interface CMSBackendHooks {
-    /** Called before creating a content item. Return false to deny the operation. */
-    onBeforeCreate?: (data: Record<string, unknown>, context: CMSHookContext) => Promise<false | void> | false | void;
+    /** Called before creating a content item. Throw an error to deny the operation. */
+    onBeforeCreate?: (data: Record<string, unknown>, context: CMSHookContext) => Promise<void> | void;
     /** Called after creating a content item */
     onAfterCreate?: (item: SerializedContentItem, context: CMSHookContext) => Promise<void> | void;
-    /** Called before updating a content item. Return false to deny the operation. */
-    onBeforeUpdate?: (id: string, data: Record<string, unknown>, context: CMSHookContext) => Promise<false | void> | false | void;
+    /** Called before updating a content item. Throw an error to deny the operation. */
+    onBeforeUpdate?: (id: string, data: Record<string, unknown>, context: CMSHookContext) => Promise<void> | void;
     /** Called after updating a content item */
     onAfterUpdate?: (item: SerializedContentItem, context: CMSHookContext) => Promise<void> | void;
-    /** Called before deleting a content item */
-    onBeforeDelete?: (id: string, context: CMSHookContext) => Promise<boolean> | boolean;
+    /** Called before deleting a content item. Throw an error to deny the operation. */
+    onBeforeDelete?: (id: string, context: CMSHookContext) => Promise<void> | void;
     /** Called after deleting a content item */
     onAfterDelete?: (id: string, context: CMSHookContext) => Promise<void> | void;
     /** Called on any CMS error */

package/dist/shared/{stack.CIP6QS9l.d.ts → stack.BDVEpue1.d.ts}

@@ -1,6 +1,6 @@
 import * as _btst_stack_plugins_api from '@btst/stack/plugins/api';
 import * as better_call from 'better-call';
-import { S as SerializedForm, b as SerializedFormSubmissionWithData, F as Form, d as FormSubmission, a as SerializedFormSubmission, e as FormSubmissionWithForm, f as FormBuilderBackendConfig } from './stack.DdI5W6MB.js';
+import { S as SerializedForm, b as SerializedFormSubmissionWithData, F as Form, d as FormSubmission, a as SerializedFormSubmission, e as FormSubmissionWithForm, f as FormBuilderBackendConfig } from './stack.BozPgbrZ.js';
 import { z } from 'zod';
 import { Adapter } from '@btst/db';
 import { QueryClient } from '@tanstack/react-query';

package/dist/shared/{stack.C5dtIncc.d.mts → stack.BTvbxZvw.d.cts}

@@ -1,6 +1,6 @@
 import * as _btst_stack_plugins_api from '@btst/stack/plugins/api';
 import * as better_call from 'better-call';
-import { S as SerializedForm, b as SerializedFormSubmissionWithData, F as Form, d as FormSubmission, a as SerializedFormSubmission, e as FormSubmissionWithForm, f as FormBuilderBackendConfig } from './stack.DdI5W6MB.mjs';
+import { S as SerializedForm, b as SerializedFormSubmissionWithData, F as Form, d as FormSubmission, a as SerializedFormSubmission, e as FormSubmissionWithForm, f as FormBuilderBackendConfig } from './stack.BozPgbrZ.cjs';
 import { z } from 'zod';
 import { Adapter } from '@btst/db';
 import { QueryClient } from '@tanstack/react-query';

package/dist/shared/{stack.DaOcgmrM.d.ts → stack.BV9hnvu4.d.cts}

@@ -244,31 +244,55 @@ interface ChatInterfaceProps {
 }
 declare function ChatInterface({ apiPath, initialMessages, id, variant, className, onMessagesChange, }: ChatInterfaceProps): react_jsx_runtime.JSX.Element;
 
-interface ChatLayoutProps {
+interface ChatLayoutBaseProps {
     /** API base URL */
     apiBaseURL: string;
     /** API base path */
     apiBasePath: string;
     /** Current conversation ID (if viewing existing conversation) */
     conversationId?: string;
-    /** Layout mode: 'full' for full page with sidebar, 'widget' for embeddable widget */
-    layout?: "full" | "widget";
     /** Additional class name for the container */
     className?: string;
-    /** Whether to show the sidebar (default: true for full layout) */
+    /** Whether to show the sidebar */
     showSidebar?: boolean;
-    /** Height of the widget (only applies to widget layout) */
-    widgetHeight?: string | number;
     /** Initial messages to populate the chat (useful for localStorage persistence in public mode) */
     initialMessages?: UIMessage[];
     /** Called whenever messages change (for persistence). Only fires in public mode. */
     onMessagesChange?: (messages: UIMessage[]) => void;
 }
+interface ChatLayoutWidgetProps extends ChatLayoutBaseProps {
+    /** Widget mode: compact embeddable panel with a floating trigger button */
+    layout: "widget";
+    /** Height of the widget panel. Default: `"600px"` */
+    widgetHeight?: string | number;
+    /** Width of the widget panel. Default: `"380px"` */
+    widgetWidth?: string | number;
+    /**
+     * Whether the widget panel starts open. Default: `false`.
+     * Set to `true` when embedding inside an already-open container such as a
+     * Next.js intercepting-route modal — the panel will be immediately visible
+     * without the user needing to click the trigger button.
+     */
+    defaultOpen?: boolean;
+    /**
+     * Whether to render the built-in floating trigger button. Default: `true`.
+     * Set to `false` when you control open/close externally (e.g. a Next.js
+     * parallel-route slot, a custom button, or a `router.back()` dismiss action)
+     * so that the built-in button does not appear alongside your own UI.
+     */
+    showTrigger?: boolean;
+}
+interface ChatLayoutFullProps extends ChatLayoutBaseProps {
+    /** Full-page mode with sidebar navigation (default) */
+    layout?: "full";
+}
+/** Props for the ChatLayout component */
+type ChatLayoutProps = ChatLayoutWidgetProps | ChatLayoutFullProps;
 /**
  * ChatLayout component that provides a full-page chat experience with sidebar
  * or a compact widget mode for embedding.
  */
-declare function ChatLayout({ apiBaseURL, apiBasePath, conversationId, layout, className, showSidebar, widgetHeight, initialMessages, onMessagesChange, }: ChatLayoutProps): react_jsx_runtime.JSX.Element;
+declare function ChatLayout(props: ChatLayoutProps): react_jsx_runtime.JSX.Element;
 
 interface ChatSidebarProps {
     currentConversationId?: string;

package/dist/shared/{stack.DaOcgmrM.d.cts → stack.BV9hnvu4.d.mts}

@@ -244,31 +244,55 @@ interface ChatInterfaceProps {
 }
 declare function ChatInterface({ apiPath, initialMessages, id, variant, className, onMessagesChange, }: ChatInterfaceProps): react_jsx_runtime.JSX.Element;
 
-interface ChatLayoutProps {
+interface ChatLayoutBaseProps {
     /** API base URL */
     apiBaseURL: string;
     /** API base path */
     apiBasePath: string;
     /** Current conversation ID (if viewing existing conversation) */
     conversationId?: string;
-    /** Layout mode: 'full' for full page with sidebar, 'widget' for embeddable widget */
-    layout?: "full" | "widget";
     /** Additional class name for the container */
     className?: string;
-    /** Whether to show the sidebar (default: true for full layout) */
+    /** Whether to show the sidebar */
     showSidebar?: boolean;
-    /** Height of the widget (only applies to widget layout) */
-    widgetHeight?: string | number;
     /** Initial messages to populate the chat (useful for localStorage persistence in public mode) */
     initialMessages?: UIMessage[];
     /** Called whenever messages change (for persistence). Only fires in public mode. */
     onMessagesChange?: (messages: UIMessage[]) => void;
 }
+interface ChatLayoutWidgetProps extends ChatLayoutBaseProps {
+    /** Widget mode: compact embeddable panel with a floating trigger button */
+    layout: "widget";
+    /** Height of the widget panel. Default: `"600px"` */
+    widgetHeight?: string | number;
+    /** Width of the widget panel. Default: `"380px"` */
+    widgetWidth?: string | number;
+    /**
+     * Whether the widget panel starts open. Default: `false`.
+     * Set to `true` when embedding inside an already-open container such as a
+     * Next.js intercepting-route modal — the panel will be immediately visible
+     * without the user needing to click the trigger button.
+     */
+    defaultOpen?: boolean;
+    /**
+     * Whether to render the built-in floating trigger button. Default: `true`.
+     * Set to `false` when you control open/close externally (e.g. a Next.js
+     * parallel-route slot, a custom button, or a `router.back()` dismiss action)
+     * so that the built-in button does not appear alongside your own UI.
+     */
+    showTrigger?: boolean;
+}
+interface ChatLayoutFullProps extends ChatLayoutBaseProps {
+    /** Full-page mode with sidebar navigation (default) */
+    layout?: "full";
+}
+/** Props for the ChatLayout component */
+type ChatLayoutProps = ChatLayoutWidgetProps | ChatLayoutFullProps;
 /**
  * ChatLayout component that provides a full-page chat experience with sidebar
  * or a compact widget mode for embedding.
  */
-declare function ChatLayout({ apiBaseURL, apiBasePath, conversationId, layout, className, showSidebar, widgetHeight, initialMessages, onMessagesChange, }: ChatLayoutProps): react_jsx_runtime.JSX.Element;
+declare function ChatLayout(props: ChatLayoutProps): react_jsx_runtime.JSX.Element;
 
 interface ChatSidebarProps {
     currentConversationId?: string;

package/dist/shared/{stack.DaOcgmrM.d.mts → stack.BV9hnvu4.d.ts}

@@ -244,31 +244,55 @@ interface ChatInterfaceProps {
 }
 declare function ChatInterface({ apiPath, initialMessages, id, variant, className, onMessagesChange, }: ChatInterfaceProps): react_jsx_runtime.JSX.Element;
 
-interface ChatLayoutProps {
+interface ChatLayoutBaseProps {
     /** API base URL */
     apiBaseURL: string;
     /** API base path */
     apiBasePath: string;
     /** Current conversation ID (if viewing existing conversation) */
     conversationId?: string;
-    /** Layout mode: 'full' for full page with sidebar, 'widget' for embeddable widget */
-    layout?: "full" | "widget";
     /** Additional class name for the container */
     className?: string;
-    /** Whether to show the sidebar (default: true for full layout) */
+    /** Whether to show the sidebar */
     showSidebar?: boolean;
-    /** Height of the widget (only applies to widget layout) */
-    widgetHeight?: string | number;
     /** Initial messages to populate the chat (useful for localStorage persistence in public mode) */
     initialMessages?: UIMessage[];
     /** Called whenever messages change (for persistence). Only fires in public mode. */
     onMessagesChange?: (messages: UIMessage[]) => void;
 }
+interface ChatLayoutWidgetProps extends ChatLayoutBaseProps {
+    /** Widget mode: compact embeddable panel with a floating trigger button */
+    layout: "widget";
+    /** Height of the widget panel. Default: `"600px"` */
+    widgetHeight?: string | number;
+    /** Width of the widget panel. Default: `"380px"` */
+    widgetWidth?: string | number;
+    /**
+     * Whether the widget panel starts open. Default: `false`.
+     * Set to `true` when embedding inside an already-open container such as a
+     * Next.js intercepting-route modal — the panel will be immediately visible
+     * without the user needing to click the trigger button.
+     */
+    defaultOpen?: boolean;
+    /**
+     * Whether to render the built-in floating trigger button. Default: `true`.
+     * Set to `false` when you control open/close externally (e.g. a Next.js
+     * parallel-route slot, a custom button, or a `router.back()` dismiss action)
+     * so that the built-in button does not appear alongside your own UI.
+     */
+    showTrigger?: boolean;
+}
+interface ChatLayoutFullProps extends ChatLayoutBaseProps {
+    /** Full-page mode with sidebar navigation (default) */
+    layout?: "full";
+}
+/** Props for the ChatLayout component */
+type ChatLayoutProps = ChatLayoutWidgetProps | ChatLayoutFullProps;
 /**
  * ChatLayout component that provides a full-page chat experience with sidebar
  * or a compact widget mode for embedding.
  */
-declare function ChatLayout({ apiBaseURL, apiBasePath, conversationId, layout, className, showSidebar, widgetHeight, initialMessages, onMessagesChange, }: ChatLayoutProps): react_jsx_runtime.JSX.Element;
+declare function ChatLayout(props: ChatLayoutProps): react_jsx_runtime.JSX.Element;
 
 interface ChatSidebarProps {
     currentConversationId?: string;

package/dist/shared/{stack.DdI5W6MB.d.mts → stack.BozPgbrZ.d.cts}

@@ -146,32 +146,32 @@ interface FormUpdate {
  * Backend hooks for Form Builder plugin
  *
  * All CRUD hooks receive ipAddress and headers for auth/rate limiting.
- * Return false from onBefore* hooks to reject the operation (throws 403).
+ * Throw an error from onBefore* hooks to reject the operation (throws 403).
  */
 interface FormBuilderBackendHooks {
-    /** Called before listing forms. Return false to deny access (403). */
-    onBeforeListForms?: (ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before creating a form. Return false to deny, or modified data. */
-    onBeforeFormCreated?: (data: FormInput, ctx: FormBuilderHookContext) => Promise<FormInput | false> | FormInput | false;
+    /** Called before listing forms. Throw an error to deny access (403). */
+    onBeforeListForms?: (ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before creating a form. Throw an error to deny, or return modified data. */
+    onBeforeFormCreated?: (data: FormInput, ctx: FormBuilderHookContext) => Promise<FormInput | void> | FormInput | void;
     /** Called after a form is created */
     onAfterFormCreated?: (form: SerializedForm, ctx: FormBuilderHookContext) => Promise<void> | void;
-    /** Called before getting a form by ID or slug. Return false to deny access. */
-    onBeforeGetForm?: (idOrSlug: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before updating a form. Return false to deny, or modified data. */
-    onBeforeFormUpdated?: (id: string, data: FormUpdate, ctx: FormBuilderHookContext) => Promise<FormUpdate | false> | FormUpdate | false;
+    /** Called before getting a form by ID or slug. Throw an error to deny access. */
+    onBeforeGetForm?: (idOrSlug: string, ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before updating a form. Throw an error to deny, or return modified data. */
+    onBeforeFormUpdated?: (id: string, data: FormUpdate, ctx: FormBuilderHookContext) => Promise<FormUpdate | void> | FormUpdate | void;
     /** Called after a form is updated */
     onAfterFormUpdated?: (form: SerializedForm, ctx: FormBuilderHookContext) => Promise<void> | void;
-    /** Called before deleting a form. Return false to deny. */
-    onBeforeFormDeleted?: (id: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
+    /** Called before deleting a form. Throw an error to deny. */
+    onBeforeFormDeleted?: (id: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /** Called after a form is deleted */
     onAfterFormDeleted?: (id: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /**
      * Called before processing a form submission.
      * Use for: spam protection, rate limiting, data validation/enrichment.
      *
-     * @returns false to reject submission (400), or modified data to continue
+     * Throw an error to reject submission (400), or return modified data to continue.
      */
-    onBeforeSubmission?: (formSlug: string, data: Record<string, unknown>, ctx: SubmissionHookContext) => Promise<Record<string, unknown> | false> | Record<string, unknown> | false;
+    onBeforeSubmission?: (formSlug: string, data: Record<string, unknown>, ctx: SubmissionHookContext) => Promise<Record<string, unknown> | void> | Record<string, unknown> | void;
     /**
      * Called after a submission is saved.
      * Use for: sending emails, storing in CRM, triggering workflows.
@@ -179,12 +179,12 @@ interface FormBuilderBackendHooks {
     onAfterSubmission?: (submission: SerializedFormSubmission, form: SerializedForm, ctx: SubmissionHookContext) => Promise<void> | void;
     /** Called when a submission fails */
     onSubmissionError?: (error: Error, formSlug: string, data: Record<string, unknown>, ctx: SubmissionHookContext) => Promise<void> | void;
-    /** Called before listing submissions. Return false to deny access (403). */
-    onBeforeListSubmissions?: (formId: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before getting a submission. Return false to deny access. */
-    onBeforeGetSubmission?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before deleting a submission. Return false to deny. */
-    onBeforeSubmissionDeleted?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
+    /** Called before listing submissions. Throw an error to deny access (403). */
+    onBeforeListSubmissions?: (formId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before getting a submission. Throw an error to deny access. */
+    onBeforeGetSubmission?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before deleting a submission. Throw an error to deny. */
+    onBeforeSubmissionDeleted?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /** Called after a submission is deleted */
     onAfterSubmissionDeleted?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /** Called on any error */

package/dist/shared/{stack.DdI5W6MB.d.ts → stack.BozPgbrZ.d.mts}

@@ -146,32 +146,32 @@ interface FormUpdate {
  * Backend hooks for Form Builder plugin
  *
  * All CRUD hooks receive ipAddress and headers for auth/rate limiting.
- * Return false from onBefore* hooks to reject the operation (throws 403).
+ * Throw an error from onBefore* hooks to reject the operation (throws 403).
  */
 interface FormBuilderBackendHooks {
-    /** Called before listing forms. Return false to deny access (403). */
-    onBeforeListForms?: (ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before creating a form. Return false to deny, or modified data. */
-    onBeforeFormCreated?: (data: FormInput, ctx: FormBuilderHookContext) => Promise<FormInput | false> | FormInput | false;
+    /** Called before listing forms. Throw an error to deny access (403). */
+    onBeforeListForms?: (ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before creating a form. Throw an error to deny, or return modified data. */
+    onBeforeFormCreated?: (data: FormInput, ctx: FormBuilderHookContext) => Promise<FormInput | void> | FormInput | void;
     /** Called after a form is created */
     onAfterFormCreated?: (form: SerializedForm, ctx: FormBuilderHookContext) => Promise<void> | void;
-    /** Called before getting a form by ID or slug. Return false to deny access. */
-    onBeforeGetForm?: (idOrSlug: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before updating a form. Return false to deny, or modified data. */
-    onBeforeFormUpdated?: (id: string, data: FormUpdate, ctx: FormBuilderHookContext) => Promise<FormUpdate | false> | FormUpdate | false;
+    /** Called before getting a form by ID or slug. Throw an error to deny access. */
+    onBeforeGetForm?: (idOrSlug: string, ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before updating a form. Throw an error to deny, or return modified data. */
+    onBeforeFormUpdated?: (id: string, data: FormUpdate, ctx: FormBuilderHookContext) => Promise<FormUpdate | void> | FormUpdate | void;
     /** Called after a form is updated */
     onAfterFormUpdated?: (form: SerializedForm, ctx: FormBuilderHookContext) => Promise<void> | void;
-    /** Called before deleting a form. Return false to deny. */
-    onBeforeFormDeleted?: (id: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
+    /** Called before deleting a form. Throw an error to deny. */
+    onBeforeFormDeleted?: (id: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /** Called after a form is deleted */
     onAfterFormDeleted?: (id: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /**
      * Called before processing a form submission.
      * Use for: spam protection, rate limiting, data validation/enrichment.
      *
-     * @returns false to reject submission (400), or modified data to continue
+     * Throw an error to reject submission (400), or return modified data to continue.
      */
-    onBeforeSubmission?: (formSlug: string, data: Record<string, unknown>, ctx: SubmissionHookContext) => Promise<Record<string, unknown> | false> | Record<string, unknown> | false;
+    onBeforeSubmission?: (formSlug: string, data: Record<string, unknown>, ctx: SubmissionHookContext) => Promise<Record<string, unknown> | void> | Record<string, unknown> | void;
     /**
      * Called after a submission is saved.
      * Use for: sending emails, storing in CRM, triggering workflows.
@@ -179,12 +179,12 @@ interface FormBuilderBackendHooks {
     onAfterSubmission?: (submission: SerializedFormSubmission, form: SerializedForm, ctx: SubmissionHookContext) => Promise<void> | void;
     /** Called when a submission fails */
     onSubmissionError?: (error: Error, formSlug: string, data: Record<string, unknown>, ctx: SubmissionHookContext) => Promise<void> | void;
-    /** Called before listing submissions. Return false to deny access (403). */
-    onBeforeListSubmissions?: (formId: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before getting a submission. Return false to deny access. */
-    onBeforeGetSubmission?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before deleting a submission. Return false to deny. */
-    onBeforeSubmissionDeleted?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
+    /** Called before listing submissions. Throw an error to deny access (403). */
+    onBeforeListSubmissions?: (formId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before getting a submission. Throw an error to deny access. */
+    onBeforeGetSubmission?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before deleting a submission. Throw an error to deny. */
+    onBeforeSubmissionDeleted?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /** Called after a submission is deleted */
     onAfterSubmissionDeleted?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /** Called on any error */

package/dist/shared/{stack.DdI5W6MB.d.cts → stack.BozPgbrZ.d.ts}

@@ -146,32 +146,32 @@ interface FormUpdate {
  * Backend hooks for Form Builder plugin
  *
  * All CRUD hooks receive ipAddress and headers for auth/rate limiting.
- * Return false from onBefore* hooks to reject the operation (throws 403).
+ * Throw an error from onBefore* hooks to reject the operation (throws 403).
  */
 interface FormBuilderBackendHooks {
-    /** Called before listing forms. Return false to deny access (403). */
-    onBeforeListForms?: (ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before creating a form. Return false to deny, or modified data. */
-    onBeforeFormCreated?: (data: FormInput, ctx: FormBuilderHookContext) => Promise<FormInput | false> | FormInput | false;
+    /** Called before listing forms. Throw an error to deny access (403). */
+    onBeforeListForms?: (ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before creating a form. Throw an error to deny, or return modified data. */
+    onBeforeFormCreated?: (data: FormInput, ctx: FormBuilderHookContext) => Promise<FormInput | void> | FormInput | void;
     /** Called after a form is created */
     onAfterFormCreated?: (form: SerializedForm, ctx: FormBuilderHookContext) => Promise<void> | void;
-    /** Called before getting a form by ID or slug. Return false to deny access. */
-    onBeforeGetForm?: (idOrSlug: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before updating a form. Return false to deny, or modified data. */
-    onBeforeFormUpdated?: (id: string, data: FormUpdate, ctx: FormBuilderHookContext) => Promise<FormUpdate | false> | FormUpdate | false;
+    /** Called before getting a form by ID or slug. Throw an error to deny access. */
+    onBeforeGetForm?: (idOrSlug: string, ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before updating a form. Throw an error to deny, or return modified data. */
+    onBeforeFormUpdated?: (id: string, data: FormUpdate, ctx: FormBuilderHookContext) => Promise<FormUpdate | void> | FormUpdate | void;
     /** Called after a form is updated */
     onAfterFormUpdated?: (form: SerializedForm, ctx: FormBuilderHookContext) => Promise<void> | void;
-    /** Called before deleting a form. Return false to deny. */
-    onBeforeFormDeleted?: (id: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
+    /** Called before deleting a form. Throw an error to deny. */
+    onBeforeFormDeleted?: (id: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /** Called after a form is deleted */
     onAfterFormDeleted?: (id: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /**
      * Called before processing a form submission.
      * Use for: spam protection, rate limiting, data validation/enrichment.
      *
-     * @returns false to reject submission (400), or modified data to continue
+     * Throw an error to reject submission (400), or return modified data to continue.
      */
-    onBeforeSubmission?: (formSlug: string, data: Record<string, unknown>, ctx: SubmissionHookContext) => Promise<Record<string, unknown> | false> | Record<string, unknown> | false;
+    onBeforeSubmission?: (formSlug: string, data: Record<string, unknown>, ctx: SubmissionHookContext) => Promise<Record<string, unknown> | void> | Record<string, unknown> | void;
     /**
      * Called after a submission is saved.
      * Use for: sending emails, storing in CRM, triggering workflows.
@@ -179,12 +179,12 @@ interface FormBuilderBackendHooks {
     onAfterSubmission?: (submission: SerializedFormSubmission, form: SerializedForm, ctx: SubmissionHookContext) => Promise<void> | void;
     /** Called when a submission fails */
     onSubmissionError?: (error: Error, formSlug: string, data: Record<string, unknown>, ctx: SubmissionHookContext) => Promise<void> | void;
-    /** Called before listing submissions. Return false to deny access (403). */
-    onBeforeListSubmissions?: (formId: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before getting a submission. Return false to deny access. */
-    onBeforeGetSubmission?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before deleting a submission. Return false to deny. */
-    onBeforeSubmissionDeleted?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
+    /** Called before listing submissions. Throw an error to deny access (403). */
+    onBeforeListSubmissions?: (formId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before getting a submission. Throw an error to deny access. */
+    onBeforeGetSubmission?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before deleting a submission. Throw an error to deny. */
+    onBeforeSubmissionDeleted?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /** Called after a submission is deleted */
     onAfterSubmissionDeleted?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /** Called on any error */