@btst/stack 2.4.0 → 2.5.0

package/dist/packages/stack/src/plugins/form-builder/api/plugin.mjs

@@ -6,6 +6,7 @@ import { listFormsQuerySchema, createFormSchema, updateFormSchema, listSubmissio
 import { extractUserAgent, extractIpAddress, slugify } from '../utils.mjs';
 import { getFormSubmissions, getFormBySlug, getFormById, getAllForms, serializeForm, serializeFormSubmission, serializeFormSubmissionWithData } from './getters.mjs';
 import { FORM_QUERY_KEYS } from './query-key-defs.mjs';
+import { runHookWithShim } from '../../utils.mjs';
 
 function createFormBuilderPrefetchForRoute(adapter) {
   return async function prefetchForRoute(key, qc, params) {
@@ -96,10 +97,11 @@ const formBuilderBackendPlugin = (config = {}) => defineBackendPlugin({
         const { status, limit, offset } = ctx.query;
         const context = createContext(ctx.headers);
         if (config.hooks?.onBeforeListForms) {
-          const canList = await config.hooks.onBeforeListForms(context);
-          if (!canList) {
-            throw ctx.error(403, { message: "Access denied" });
-          }
+          await runHookWithShim(
+            () => config.hooks.onBeforeListForms(context),
+            ctx.error,
+            "Access denied"
+          );
         }
         return getAllForms(adapter, { status, limit, offset });
       }
@@ -114,10 +116,11 @@ const formBuilderBackendPlugin = (config = {}) => defineBackendPlugin({
         const { slug } = ctx.params;
         const context = createContext(ctx.headers);
         if (config.hooks?.onBeforeGetForm) {
-          const canGet = await config.hooks.onBeforeGetForm(slug, context);
-          if (!canGet) {
-            throw ctx.error(403, { message: "Access denied" });
-          }
+          await runHookWithShim(
+            () => config.hooks.onBeforeGetForm(slug, context),
+            ctx.error,
+            "Access denied"
+          );
         }
         const form = await getFormBySlug(adapter, slug);
         if (!form) {
@@ -136,10 +139,11 @@ const formBuilderBackendPlugin = (config = {}) => defineBackendPlugin({
         const { id } = ctx.params;
         const context = createContext(ctx.headers);
         if (config.hooks?.onBeforeGetForm) {
-          const canGet = await config.hooks.onBeforeGetForm(id, context);
-          if (!canGet) {
-            throw ctx.error(403, { message: "Access denied" });
-          }
+          await runHookWithShim(
+            () => config.hooks.onBeforeGetForm(id, context),
+            ctx.error,
+            "Access denied"
+          );
         }
         const form = await adapter.findOne({
           model: "form",
@@ -190,15 +194,13 @@ const formBuilderBackendPlugin = (config = {}) => defineBackendPlugin({
           status: body.status
         };
         if (config.hooks?.onBeforeFormCreated) {
-          const result = await config.hooks.onBeforeFormCreated(
-            formInput,
-            context
+          const hookResult = await runHookWithShim(
+            () => config.hooks.onBeforeFormCreated(formInput, context),
+            ctx.error,
+            "Create operation denied"
           );
-          if (result === false) {
-            throw ctx.error(403, { message: "Create operation denied" });
-          }
-          if (result && typeof result === "object") {
-            formInput = result;
+          if (hookResult && typeof hookResult === "object") {
+            formInput = hookResult;
           }
         }
         const form = await adapter.create({
@@ -280,16 +282,13 @@ const formBuilderBackendPlugin = (config = {}) => defineBackendPlugin({
           status: body.status
         };
         if (config.hooks?.onBeforeFormUpdated) {
-          const result = await config.hooks.onBeforeFormUpdated(
-            id,
-            updateInput,
-            context
+          const hookResult = await runHookWithShim(
+            () => config.hooks.onBeforeFormUpdated(id, updateInput, context),
+            ctx.error,
+            "Update operation denied"
           );
-          if (result === false) {
-            throw ctx.error(403, { message: "Update operation denied" });
-          }
-          if (result && typeof result === "object") {
-            updateInput = result;
+          if (hookResult && typeof hookResult === "object") {
+            updateInput = hookResult;
           }
         }
         const updateData = {
@@ -341,13 +340,11 @@ const formBuilderBackendPlugin = (config = {}) => defineBackendPlugin({
           throw ctx.error(404, { message: "Form not found" });
         }
         if (config.hooks?.onBeforeFormDeleted) {
-          const canDelete = await config.hooks.onBeforeFormDeleted(
-            id,
-            context
+          await runHookWithShim(
+            () => config.hooks.onBeforeFormDeleted(id, context),
+            ctx.error,
+            "Delete operation denied"
           );
-          if (!canDelete) {
-            throw ctx.error(403, { message: "Delete operation denied" });
-          }
         }
         await adapter.delete({
           model: "formSubmission",
@@ -412,28 +409,33 @@ const formBuilderBackendPlugin = (config = {}) => defineBackendPlugin({
         }
         let finalData = data;
         if (config.hooks?.onBeforeSubmission) {
+          let hookResult;
+          let originalError;
           try {
-            const result = await config.hooks.onBeforeSubmission(
+            hookResult = await config.hooks.onBeforeSubmission(
               slug,
               data,
               submissionContext
             );
-            if (result === false) {
-              throw ctx.error(400, { message: "Submission rejected" });
-            }
-            if (result && typeof result === "object") {
-              finalData = result;
+            if (hookResult === false) {
+              originalError = new Error("Submission rejected");
             }
-          } catch (error) {
+          } catch (e) {
+            originalError = e instanceof Error ? e : new Error("Submission rejected");
+          }
+          if (originalError) {
             if (config.hooks?.onSubmissionError) {
               await config.hooks.onSubmissionError(
-                error,
+                originalError,
                 slug,
                 data,
                 submissionContext
               );
             }
-            throw error;
+            throw ctx.error(400, { message: originalError.message });
+          }
+          if (hookResult && typeof hookResult === "object") {
+            finalData = hookResult;
           }
         }
         const submission = await adapter.create({
@@ -482,13 +484,11 @@ const formBuilderBackendPlugin = (config = {}) => defineBackendPlugin({
           throw ctx.error(404, { message: "Form not found" });
         }
         if (config.hooks?.onBeforeListSubmissions) {
-          const canList = await config.hooks.onBeforeListSubmissions(
-            formId,
-            context
+          await runHookWithShim(
+            () => config.hooks.onBeforeListSubmissions(formId, context),
+            ctx.error,
+            "Access denied"
           );
-          if (!canList) {
-            throw ctx.error(403, { message: "Access denied" });
-          }
         }
         return getFormSubmissions(adapter, formId, { limit, offset });
       }
@@ -503,13 +503,11 @@ const formBuilderBackendPlugin = (config = {}) => defineBackendPlugin({
         const { formId, subId } = ctx.params;
         const context = createContext(ctx.headers);
         if (config.hooks?.onBeforeGetSubmission) {
-          const canGet = await config.hooks.onBeforeGetSubmission(
-            subId,
-            context
+          await runHookWithShim(
+            () => config.hooks.onBeforeGetSubmission(subId, context),
+            ctx.error,
+            "Access denied"
           );
-          if (!canGet) {
-            throw ctx.error(403, { message: "Access denied" });
-          }
         }
         const submission = await adapter.findOne({
           model: "formSubmission",
@@ -539,13 +537,11 @@ const formBuilderBackendPlugin = (config = {}) => defineBackendPlugin({
           throw ctx.error(404, { message: "Submission not found" });
         }
         if (config.hooks?.onBeforeSubmissionDeleted) {
-          const canDelete = await config.hooks.onBeforeSubmissionDeleted(
-            subId,
-            context
+          await runHookWithShim(
+            () => config.hooks.onBeforeSubmissionDeleted(subId, context),
+            ctx.error,
+            "Delete operation denied"
           );
-          if (!canDelete) {
-            throw ctx.error(403, { message: "Delete operation denied" });
-          }
         }
         await adapter.delete({
           model: "formSubmission",

package/dist/packages/stack/src/plugins/form-builder/client/plugin.cjs

@@ -34,10 +34,10 @@ function createFormListLoader(config) {
       };
       try {
         if (hooks?.beforeLoadFormList) {
-          const canLoad = await hooks.beforeLoadFormList(context);
-          if (!canLoad) {
-            throw new Error("Load prevented by beforeLoadFormList hook");
-          }
+          await client.runClientHookWithShim(
+            () => hooks.beforeLoadFormList(context),
+            "Load prevented by beforeLoadFormList hook"
+          );
         }
         const client$1 = client.createApiClient({
           baseURL: apiBaseURL,
@@ -96,10 +96,10 @@ function createFormBuilderLoader(id, config) {
       };
       try {
         if (hooks?.beforeLoadFormBuilder) {
-          const canLoad = await hooks.beforeLoadFormBuilder(id, context);
-          if (!canLoad) {
-            throw new Error("Load prevented by beforeLoadFormBuilder hook");
-          }
+          await client.runClientHookWithShim(
+            () => hooks.beforeLoadFormBuilder(id, context),
+            "Load prevented by beforeLoadFormBuilder hook"
+          );
         }
         const client$1 = client.createApiClient({
           baseURL: apiBaseURL,
@@ -148,10 +148,10 @@ function createSubmissionsLoader(formId, config) {
       };
       try {
         if (hooks?.beforeLoadSubmissions) {
-          const canLoad = await hooks.beforeLoadSubmissions(formId, context);
-          if (!canLoad) {
-            throw new Error("Load prevented by beforeLoadSubmissions hook");
-          }
+          await client.runClientHookWithShim(
+            () => hooks.beforeLoadSubmissions(formId, context),
+            "Load prevented by beforeLoadSubmissions hook"
+          );
         }
         const client$1 = client.createApiClient({
           baseURL: apiBaseURL,

package/dist/packages/stack/src/plugins/form-builder/client/plugin.mjs

@@ -1,6 +1,6 @@
 import { jsx } from 'react/jsx-runtime';
 import { lazy } from 'react';
-import { defineClientPlugin, createApiClient, isConnectionError } from '@btst/stack/plugins/client';
+import { defineClientPlugin, createApiClient, runClientHookWithShim, isConnectionError } from '@btst/stack/plugins/client';
 import { createRoute } from '@btst/yar';
 import { createFormBuilderQueryKeys } from '../../../../../../plugins/form-builder/query-keys.mjs';
 
@@ -32,10 +32,10 @@ function createFormListLoader(config) {
       };
       try {
         if (hooks?.beforeLoadFormList) {
-          const canLoad = await hooks.beforeLoadFormList(context);
-          if (!canLoad) {
-            throw new Error("Load prevented by beforeLoadFormList hook");
-          }
+          await runClientHookWithShim(
+            () => hooks.beforeLoadFormList(context),
+            "Load prevented by beforeLoadFormList hook"
+          );
         }
         const client = createApiClient({
           baseURL: apiBaseURL,
@@ -94,10 +94,10 @@ function createFormBuilderLoader(id, config) {
       };
       try {
         if (hooks?.beforeLoadFormBuilder) {
-          const canLoad = await hooks.beforeLoadFormBuilder(id, context);
-          if (!canLoad) {
-            throw new Error("Load prevented by beforeLoadFormBuilder hook");
-          }
+          await runClientHookWithShim(
+            () => hooks.beforeLoadFormBuilder(id, context),
+            "Load prevented by beforeLoadFormBuilder hook"
+          );
         }
         const client = createApiClient({
           baseURL: apiBaseURL,
@@ -146,10 +146,10 @@ function createSubmissionsLoader(formId, config) {
       };
       try {
         if (hooks?.beforeLoadSubmissions) {
-          const canLoad = await hooks.beforeLoadSubmissions(formId, context);
-          if (!canLoad) {
-            throw new Error("Load prevented by beforeLoadSubmissions hook");
-          }
+          await runClientHookWithShim(
+            () => hooks.beforeLoadSubmissions(formId, context),
+            "Load prevented by beforeLoadSubmissions hook"
+          );
         }
         const client = createApiClient({
           baseURL: apiBaseURL,

package/dist/packages/stack/src/plugins/kanban/api/plugin.cjs

@@ -2,11 +2,12 @@
 
 const api = require('@btst/stack/plugins/api');
 const db = require('../db.cjs');
-const utils = require('../utils.cjs');
+const utils$1 = require('../utils.cjs');
 const schemas = require('../schemas.cjs');
 const getters = require('./getters.cjs');
 const mutations = require('./mutations.cjs');
 const queryKeyDefs = require('./query-key-defs.cjs');
+const utils = require('../../utils.cjs');
 const serializers = require('./serializers.cjs');
 
 function createKanbanPrefetchForRoute(adapter) {
@@ -58,12 +59,11 @@ const kanbanBackendPlugin = (hooks) => api.defineBackendPlugin({
         const context = { query, headers };
         try {
           if (hooks?.onBeforeListBoards) {
-            const canList = await hooks.onBeforeListBoards(query, context);
-            if (!canList) {
-              throw ctx.error(403, {
-                message: "Unauthorized: Cannot list boards"
-              });
-            }
+            await utils.runHookWithShim(
+              () => hooks.onBeforeListBoards(query, context),
+              ctx.error,
+              "Unauthorized: Cannot list boards"
+            );
           }
           const result = await getters.getAllBoards(adapter, query);
           if (hooks?.onBoardsRead) {
@@ -88,12 +88,11 @@ const kanbanBackendPlugin = (hooks) => api.defineBackendPlugin({
         const context = { params, headers };
         try {
           if (hooks?.onBeforeReadBoard) {
-            const canRead = await hooks.onBeforeReadBoard(params.id, context);
-            if (!canRead) {
-              throw ctx.error(403, {
-                message: "Unauthorized: Cannot read board"
-              });
-            }
+            await utils.runHookWithShim(
+              () => hooks.onBeforeReadBoard(params.id, context),
+              ctx.error,
+              "Unauthorized: Cannot read board"
+            );
           }
           const result = await getters.getBoardById(adapter, params.id);
           if (!result) {
@@ -124,18 +123,14 @@ const kanbanBackendPlugin = (hooks) => api.defineBackendPlugin({
         };
         try {
           if (hooks?.onBeforeCreateBoard) {
-            const canCreate = await hooks.onBeforeCreateBoard(
-              ctx.body,
-              context
+            await utils.runHookWithShim(
+              () => hooks.onBeforeCreateBoard(ctx.body, context),
+              ctx.error,
+              "Unauthorized: Cannot create board"
             );
-            if (!canCreate) {
-              throw ctx.error(403, {
-                message: "Unauthorized: Cannot create board"
-              });
-            }
           }
           const { ...boardData } = ctx.body;
-          const slug = utils.slugify(boardData.slug || boardData.name);
+          const slug = utils$1.slugify(boardData.slug || boardData.name);
           if (!slug) {
             throw ctx.error(400, {
               message: "Invalid slug: must contain at least one alphanumeric character"
@@ -202,19 +197,18 @@ const kanbanBackendPlugin = (hooks) => api.defineBackendPlugin({
         };
         try {
           if (hooks?.onBeforeUpdateBoard) {
-            const canUpdate = await hooks.onBeforeUpdateBoard(
-              ctx.params.id,
-              { ...ctx.body, id: ctx.params.id },
-              context
+            await utils.runHookWithShim(
+              () => hooks.onBeforeUpdateBoard(
+                ctx.params.id,
+                { ...ctx.body, id: ctx.params.id },
+                context
+              ),
+              ctx.error,
+              "Unauthorized: Cannot update board"
             );
-            if (!canUpdate) {
-              throw ctx.error(403, {
-                message: "Unauthorized: Cannot update board"
-              });
-            }
           }
           const { slug: rawSlug, ...restBoardData } = ctx.body;
-          const slugified = rawSlug ? utils.slugify(rawSlug) : void 0;
+          const slugified = rawSlug ? utils$1.slugify(rawSlug) : void 0;
           if (rawSlug && !slugified) {
             throw ctx.error(400, {
               message: "Invalid slug: must contain at least one alphanumeric character"
@@ -268,15 +262,11 @@ const kanbanBackendPlugin = (hooks) => api.defineBackendPlugin({
             throw ctx.error(404, { message: "Board not found" });
           }
           if (hooks?.onBeforeDeleteBoard) {
-            const canDelete = await hooks.onBeforeDeleteBoard(
-              ctx.params.id,
-              context
+            await utils.runHookWithShim(
+              () => hooks.onBeforeDeleteBoard(ctx.params.id, context),
+              ctx.error,
+              "Unauthorized: Cannot delete board"
             );
-            if (!canDelete) {
-              throw ctx.error(403, {
-                message: "Unauthorized: Cannot delete board"
-              });
-            }
           }
           await adapter.delete({
             model: "kanbanBoard",
@@ -307,15 +297,11 @@ const kanbanBackendPlugin = (hooks) => api.defineBackendPlugin({
         };
         try {
           if (hooks?.onBeforeCreateColumn) {
-            const canCreate = await hooks.onBeforeCreateColumn(
-              ctx.body,
-              context
+            await utils.runHookWithShim(
+              () => hooks.onBeforeCreateColumn(ctx.body, context),
+              ctx.error,
+              "Unauthorized: Cannot create column"
             );
-            if (!canCreate) {
-              throw ctx.error(403, {
-                message: "Unauthorized: Cannot create column"
-              });
-            }
           }
           const existingColumns = await adapter.findMany({
             model: "kanbanColumn",
@@ -360,16 +346,15 @@ const kanbanBackendPlugin = (hooks) => api.defineBackendPlugin({
         };
         try {
           if (hooks?.onBeforeUpdateColumn) {
-            const canUpdate = await hooks.onBeforeUpdateColumn(
-              ctx.params.id,
-              { ...ctx.body, id: ctx.params.id },
-              context
+            await utils.runHookWithShim(
+              () => hooks.onBeforeUpdateColumn(
+                ctx.params.id,
+                { ...ctx.body, id: ctx.params.id },
+                context
+              ),
+              ctx.error,
+              "Unauthorized: Cannot update column"
             );
-            if (!canUpdate) {
-              throw ctx.error(403, {
-                message: "Unauthorized: Cannot update column"
-              });
-            }
           }
           const updated = await adapter.update({
             model: "kanbanColumn",
@@ -412,15 +397,11 @@ const kanbanBackendPlugin = (hooks) => api.defineBackendPlugin({
             throw ctx.error(404, { message: "Column not found" });
           }
           if (hooks?.onBeforeDeleteColumn) {
-            const canDelete = await hooks.onBeforeDeleteColumn(
-              ctx.params.id,
-              context
+            await utils.runHookWithShim(
+              () => hooks.onBeforeDeleteColumn(ctx.params.id, context),
+              ctx.error,
+              "Unauthorized: Cannot delete column"
             );
-            if (!canDelete) {
-              throw ctx.error(403, {
-                message: "Unauthorized: Cannot delete column"
-              });
-            }
           }
           await adapter.delete({
             model: "kanbanColumn",
@@ -451,16 +432,15 @@ const kanbanBackendPlugin = (hooks) => api.defineBackendPlugin({
           for (let i = 0; i < columnIds.length; i++) {
             const columnId = columnIds[i];
             if (!columnId) continue;
-            const canUpdate = await hooks.onBeforeUpdateColumn(
-              columnId,
-              { id: columnId, order: i },
-              context
+            await utils.runHookWithShim(
+              () => hooks.onBeforeUpdateColumn(
+                columnId,
+                { id: columnId, order: i },
+                context
+              ),
+              ctx.error,
+              "Unauthorized: Cannot reorder columns"
             );
-            if (!canUpdate) {
-              throw ctx.error(403, {
-                message: "Unauthorized: Cannot reorder columns"
-              });
-            }
           }
         }
         const updatedColumns = [];
@@ -502,15 +482,11 @@ const kanbanBackendPlugin = (hooks) => api.defineBackendPlugin({
         };
         try {
           if (hooks?.onBeforeCreateTask) {
-            const canCreate = await hooks.onBeforeCreateTask(
-              ctx.body,
-              context
+            await utils.runHookWithShim(
+              () => hooks.onBeforeCreateTask(ctx.body, context),
+              ctx.error,
+              "Unauthorized: Cannot create task"
             );
-            if (!canCreate) {
-              throw ctx.error(403, {
-                message: "Unauthorized: Cannot create task"
-              });
-            }
           }
           const existingTasks = await adapter.findMany({
             model: "kanbanTask",
@@ -561,16 +537,15 @@ const kanbanBackendPlugin = (hooks) => api.defineBackendPlugin({
         };
         try {
           if (hooks?.onBeforeUpdateTask) {
-            const canUpdate = await hooks.onBeforeUpdateTask(
-              ctx.params.id,
-              { ...ctx.body, id: ctx.params.id },
-              context
+            await utils.runHookWithShim(
+              () => hooks.onBeforeUpdateTask(
+                ctx.params.id,
+                { ...ctx.body, id: ctx.params.id },
+                context
+              ),
+              ctx.error,
+              "Unauthorized: Cannot update task"
             );
-            if (!canUpdate) {
-              throw ctx.error(403, {
-                message: "Unauthorized: Cannot update task"
-              });
-            }
           }
           const updated = await adapter.update({
             model: "kanbanTask",
@@ -613,15 +588,11 @@ const kanbanBackendPlugin = (hooks) => api.defineBackendPlugin({
             throw ctx.error(404, { message: "Task not found" });
           }
           if (hooks?.onBeforeDeleteTask) {
-            const canDelete = await hooks.onBeforeDeleteTask(
-              ctx.params.id,
-              context
+            await utils.runHookWithShim(
+              () => hooks.onBeforeDeleteTask(ctx.params.id, context),
+              ctx.error,
+              "Unauthorized: Cannot delete task"
             );
-            if (!canDelete) {
-              throw ctx.error(403, {
-                message: "Unauthorized: Cannot delete task"
-              });
-            }
           }
           await adapter.delete({
             model: "kanbanTask",
@@ -656,16 +627,15 @@ const kanbanBackendPlugin = (hooks) => api.defineBackendPlugin({
           throw ctx.error(404, { message: "Task not found" });
         }
         if (hooks?.onBeforeUpdateTask) {
-          const canUpdate = await hooks.onBeforeUpdateTask(
-            taskId,
-            { id: taskId, columnId: targetColumnId, order: targetOrder },
-            context
+          await utils.runHookWithShim(
+            () => hooks.onBeforeUpdateTask(
+              taskId,
+              { id: taskId, columnId: targetColumnId, order: targetOrder },
+              context
+            ),
+            ctx.error,
+            "Unauthorized: Cannot move task"
           );
-          if (!canUpdate) {
-            throw ctx.error(403, {
-              message: "Unauthorized: Cannot move task"
-            });
-          }
         }
         const updated = await adapter.update({
           model: "kanbanTask",
@@ -701,16 +671,15 @@ const kanbanBackendPlugin = (hooks) => api.defineBackendPlugin({
           for (let i = 0; i < taskIds.length; i++) {
             const taskId = taskIds[i];
             if (!taskId) continue;
-            const canUpdate = await hooks.onBeforeUpdateTask(
-              taskId,
-              { id: taskId, order: i },
-              context
+            await utils.runHookWithShim(
+              () => hooks.onBeforeUpdateTask(
+                taskId,
+                { id: taskId, order: i },
+                context
+              ),
+              ctx.error,
+              "Unauthorized: Cannot reorder tasks"
             );
-            if (!canUpdate) {
-              throw ctx.error(403, {
-                message: "Unauthorized: Cannot reorder tasks"
-              });
-            }
           }
         }
         const updatedTasks = [];