@btst/stack 2.4.0 → 2.5.0

package/dist/plugins/ui-builder/client/index.d.mts

@@ -3,7 +3,7 @@ import * as react from 'react';
 import react__default, { ComponentType } from 'react';
 import * as _btst_yar from '@btst/yar';
 import { QueryClient } from '@tanstack/react-query';
-import { c as UIBuilderClientHooks } from '../../../shared/stack.6fUOjLs9.mjs';
+import { c as UIBuilderClientHooks } from '../../../shared/stack.dH7u-TJH.mjs';
 import { a as ComponentRegistry, F as FieldConfigFunction, C as ComponentLayer } from '../../../shared/stack.D1DMlJp-.mjs';
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { A as AutoFormInputComponentProps, F as FieldConfigItem } from '../../../shared/stack.8nldKomx.mjs';
@@ -50,11 +50,11 @@ interface UIBuilderClientConfig {
  *   hooks: {
  *     beforeLoadPageList: async (ctx) => {
  *       const session = await getSession(ctx.headers)
- *       return session?.user?.isAdmin === true
+ *       if (!session?.user?.isAdmin) throw new Error("Admin access required")
  *     },
  *     beforeLoadPageBuilder: async (pageId, ctx) => {
  *       const session = await getSession(ctx.headers)
- *       return session?.user?.isAdmin === true
+ *       if (!session?.user?.isAdmin) throw new Error("Admin access required")
  *     },
  *     onLoadError: () => redirect("/auth/sign-in"),
  *   },

package/dist/plugins/ui-builder/client/index.d.ts

@@ -3,7 +3,7 @@ import * as react from 'react';
 import react__default, { ComponentType } from 'react';
 import * as _btst_yar from '@btst/yar';
 import { QueryClient } from '@tanstack/react-query';
-import { c as UIBuilderClientHooks } from '../../../shared/stack.C-Ptrz8s.js';
+import { c as UIBuilderClientHooks } from '../../../shared/stack.Cj_zKww4.js';
 import { a as ComponentRegistry, F as FieldConfigFunction, C as ComponentLayer } from '../../../shared/stack.GygI_T3X.js';
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { A as AutoFormInputComponentProps, F as FieldConfigItem } from '../../../shared/stack.8nldKomx.js';
@@ -50,11 +50,11 @@ interface UIBuilderClientConfig {
  *   hooks: {
  *     beforeLoadPageList: async (ctx) => {
  *       const session = await getSession(ctx.headers)
- *       return session?.user?.isAdmin === true
+ *       if (!session?.user?.isAdmin) throw new Error("Admin access required")
  *     },
  *     beforeLoadPageBuilder: async (pageId, ctx) => {
  *       const session = await getSession(ctx.headers)
- *       return session?.user?.isAdmin === true
+ *       if (!session?.user?.isAdmin) throw new Error("Admin access required")
  *     },
  *     onLoadError: () => redirect("/auth/sign-in"),
  *   },

package/dist/plugins/ui-builder/index.d.cts

@@ -1,6 +1,6 @@
 import { z } from 'zod';
-import { C as ContentTypeConfig } from '../../shared/stack.CVDTkMoO.cjs';
-export { L as LoaderContext, b as PaginatedUIBuilderPages, P as ParsedUIBuilderPage, S as SerializedUIBuilderPage, c as UIBuilderClientHooks, a as UIBuilderPage, U as UIBuilderPageData } from '../../shared/stack.C-WUPMT6.cjs';
+import { C as ContentTypeConfig } from '../../shared/stack.B8QD11QU.cjs';
+export { L as LoaderContext, b as PaginatedUIBuilderPages, P as ParsedUIBuilderPage, S as SerializedUIBuilderPage, c as UIBuilderClientHooks, a as UIBuilderPage, U as UIBuilderPageData } from '../../shared/stack.B2xZTSiO.cjs';
 export { C as ComponentLayer, a as ComponentRegistry, R as RegistryEntry, V as Variable } from '../../shared/stack.B-YHz18S.cjs';
 import 'react';
 import '../../shared/stack.8nldKomx.cjs';

package/dist/plugins/ui-builder/index.d.mts

@@ -1,6 +1,6 @@
 import { z } from 'zod';
-import { C as ContentTypeConfig } from '../../shared/stack.CVDTkMoO.mjs';
-export { L as LoaderContext, b as PaginatedUIBuilderPages, P as ParsedUIBuilderPage, S as SerializedUIBuilderPage, c as UIBuilderClientHooks, a as UIBuilderPage, U as UIBuilderPageData } from '../../shared/stack.6fUOjLs9.mjs';
+import { C as ContentTypeConfig } from '../../shared/stack.B8QD11QU.mjs';
+export { L as LoaderContext, b as PaginatedUIBuilderPages, P as ParsedUIBuilderPage, S as SerializedUIBuilderPage, c as UIBuilderClientHooks, a as UIBuilderPage, U as UIBuilderPageData } from '../../shared/stack.dH7u-TJH.mjs';
 export { C as ComponentLayer, a as ComponentRegistry, R as RegistryEntry, V as Variable } from '../../shared/stack.D1DMlJp-.mjs';
 import 'react';
 import '../../shared/stack.8nldKomx.mjs';

package/dist/plugins/ui-builder/index.d.ts

@@ -1,6 +1,6 @@
 import { z } from 'zod';
-import { C as ContentTypeConfig } from '../../shared/stack.CVDTkMoO.js';
-export { L as LoaderContext, b as PaginatedUIBuilderPages, P as ParsedUIBuilderPage, S as SerializedUIBuilderPage, c as UIBuilderClientHooks, a as UIBuilderPage, U as UIBuilderPageData } from '../../shared/stack.C-Ptrz8s.js';
+import { C as ContentTypeConfig } from '../../shared/stack.B8QD11QU.js';
+export { L as LoaderContext, b as PaginatedUIBuilderPages, P as ParsedUIBuilderPage, S as SerializedUIBuilderPage, c as UIBuilderClientHooks, a as UIBuilderPage, U as UIBuilderPageData } from '../../shared/stack.Cj_zKww4.js';
 export { C as ComponentLayer, a as ComponentRegistry, R as RegistryEntry, V as Variable } from '../../shared/stack.GygI_T3X.js';
 import 'react';
 import '../../shared/stack.8nldKomx.js';

package/dist/shared/{stack.C-WUPMT6.d.cts → stack.B2xZTSiO.d.cts}

@@ -83,21 +83,21 @@ interface LoaderContext {
  */
 interface UIBuilderClientHooks {
     /**
-     * Called before loading the page list. Return false to cancel loading.
+     * Called before loading the page list. Throw an error to cancel loading.
      * @param context - Loader context with path, params, etc.
      */
-    beforeLoadPageList?: (context: LoaderContext) => Promise<boolean> | boolean;
+    beforeLoadPageList?: (context: LoaderContext) => Promise<void> | void;
     /**
      * Called after the page list is loaded.
      * @param context - Loader context
      */
     afterLoadPageList?: (context: LoaderContext) => Promise<void> | void;
     /**
-     * Called before loading the page builder. Return false to cancel loading.
+     * Called before loading the page builder. Throw an error to cancel loading.
      * @param pageId - The page ID (undefined for new pages)
      * @param context - Loader context
      */
-    beforeLoadPageBuilder?: (pageId: string | undefined, context: LoaderContext) => Promise<boolean> | boolean;
+    beforeLoadPageBuilder?: (pageId: string | undefined, context: LoaderContext) => Promise<void> | void;
     /**
      * Called after the page builder is loaded.
      * @param pageId - The page ID (undefined for new pages)

package/dist/shared/{stack.CczspVn2.d.mts → stack.B58oHdqm.d.mts}

@@ -1,5 +1,5 @@
 import * as _btst_stack_plugins_api from '@btst/stack/plugins/api';
-import { a as SerializedContentItemWithType, S as SerializedContentType, b as ContentType, c as ContentItem, d as SerializedContentItem, e as ContentItemWithType, f as CMSBackendConfig, I as InverseRelation } from './stack.CVDTkMoO.mjs';
+import { a as SerializedContentItemWithType, S as SerializedContentType, b as ContentType, c as ContentItem, d as SerializedContentItem, e as ContentItemWithType, f as CMSBackendConfig, I as InverseRelation } from './stack.B8QD11QU.mjs';
 import * as better_call from 'better-call';
 import { z } from 'zod';
 import { Adapter } from '@btst/db';

package/dist/shared/{stack.CVDTkMoO.d.mts → stack.B8QD11QU.d.cts}

@@ -130,21 +130,21 @@ interface CMSHookContext {
 /**
  * Hooks for customizing CMS backend behavior
  *
- * Note: Before hooks can only deny operations by returning `false`.
+ * Note: Before hooks deny operations by throwing an error.
  * They cannot modify the data being saved. This ensures consistency
  * between the stored content item data and relation junction tables.
  */
 interface CMSBackendHooks {
-    /** Called before creating a content item. Return false to deny the operation. */
-    onBeforeCreate?: (data: Record<string, unknown>, context: CMSHookContext) => Promise<false | void> | false | void;
+    /** Called before creating a content item. Throw an error to deny the operation. */
+    onBeforeCreate?: (data: Record<string, unknown>, context: CMSHookContext) => Promise<void> | void;
     /** Called after creating a content item */
     onAfterCreate?: (item: SerializedContentItem, context: CMSHookContext) => Promise<void> | void;
-    /** Called before updating a content item. Return false to deny the operation. */
-    onBeforeUpdate?: (id: string, data: Record<string, unknown>, context: CMSHookContext) => Promise<false | void> | false | void;
+    /** Called before updating a content item. Throw an error to deny the operation. */
+    onBeforeUpdate?: (id: string, data: Record<string, unknown>, context: CMSHookContext) => Promise<void> | void;
     /** Called after updating a content item */
     onAfterUpdate?: (item: SerializedContentItem, context: CMSHookContext) => Promise<void> | void;
-    /** Called before deleting a content item */
-    onBeforeDelete?: (id: string, context: CMSHookContext) => Promise<boolean> | boolean;
+    /** Called before deleting a content item. Throw an error to deny the operation. */
+    onBeforeDelete?: (id: string, context: CMSHookContext) => Promise<void> | void;
     /** Called after deleting a content item */
     onAfterDelete?: (id: string, context: CMSHookContext) => Promise<void> | void;
     /** Called on any CMS error */

package/dist/shared/{stack.CVDTkMoO.d.cts → stack.B8QD11QU.d.mts}

@@ -130,21 +130,21 @@ interface CMSHookContext {
 /**
  * Hooks for customizing CMS backend behavior
  *
- * Note: Before hooks can only deny operations by returning `false`.
+ * Note: Before hooks deny operations by throwing an error.
  * They cannot modify the data being saved. This ensures consistency
  * between the stored content item data and relation junction tables.
  */
 interface CMSBackendHooks {
-    /** Called before creating a content item. Return false to deny the operation. */
-    onBeforeCreate?: (data: Record<string, unknown>, context: CMSHookContext) => Promise<false | void> | false | void;
+    /** Called before creating a content item. Throw an error to deny the operation. */
+    onBeforeCreate?: (data: Record<string, unknown>, context: CMSHookContext) => Promise<void> | void;
     /** Called after creating a content item */
     onAfterCreate?: (item: SerializedContentItem, context: CMSHookContext) => Promise<void> | void;
-    /** Called before updating a content item. Return false to deny the operation. */
-    onBeforeUpdate?: (id: string, data: Record<string, unknown>, context: CMSHookContext) => Promise<false | void> | false | void;
+    /** Called before updating a content item. Throw an error to deny the operation. */
+    onBeforeUpdate?: (id: string, data: Record<string, unknown>, context: CMSHookContext) => Promise<void> | void;
     /** Called after updating a content item */
     onAfterUpdate?: (item: SerializedContentItem, context: CMSHookContext) => Promise<void> | void;
-    /** Called before deleting a content item */
-    onBeforeDelete?: (id: string, context: CMSHookContext) => Promise<boolean> | boolean;
+    /** Called before deleting a content item. Throw an error to deny the operation. */
+    onBeforeDelete?: (id: string, context: CMSHookContext) => Promise<void> | void;
     /** Called after deleting a content item */
     onAfterDelete?: (id: string, context: CMSHookContext) => Promise<void> | void;
     /** Called on any CMS error */

package/dist/shared/{stack.CVDTkMoO.d.ts → stack.B8QD11QU.d.ts}

@@ -130,21 +130,21 @@ interface CMSHookContext {
 /**
  * Hooks for customizing CMS backend behavior
  *
- * Note: Before hooks can only deny operations by returning `false`.
+ * Note: Before hooks deny operations by throwing an error.
  * They cannot modify the data being saved. This ensures consistency
  * between the stored content item data and relation junction tables.
  */
 interface CMSBackendHooks {
-    /** Called before creating a content item. Return false to deny the operation. */
-    onBeforeCreate?: (data: Record<string, unknown>, context: CMSHookContext) => Promise<false | void> | false | void;
+    /** Called before creating a content item. Throw an error to deny the operation. */
+    onBeforeCreate?: (data: Record<string, unknown>, context: CMSHookContext) => Promise<void> | void;
     /** Called after creating a content item */
     onAfterCreate?: (item: SerializedContentItem, context: CMSHookContext) => Promise<void> | void;
-    /** Called before updating a content item. Return false to deny the operation. */
-    onBeforeUpdate?: (id: string, data: Record<string, unknown>, context: CMSHookContext) => Promise<false | void> | false | void;
+    /** Called before updating a content item. Throw an error to deny the operation. */
+    onBeforeUpdate?: (id: string, data: Record<string, unknown>, context: CMSHookContext) => Promise<void> | void;
     /** Called after updating a content item */
     onAfterUpdate?: (item: SerializedContentItem, context: CMSHookContext) => Promise<void> | void;
-    /** Called before deleting a content item */
-    onBeforeDelete?: (id: string, context: CMSHookContext) => Promise<boolean> | boolean;
+    /** Called before deleting a content item. Throw an error to deny the operation. */
+    onBeforeDelete?: (id: string, context: CMSHookContext) => Promise<void> | void;
     /** Called after deleting a content item */
     onAfterDelete?: (id: string, context: CMSHookContext) => Promise<void> | void;
     /** Called on any CMS error */

package/dist/shared/{stack.Kq2-QzOC.d.ts → stack.BDVEpue1.d.ts}

@@ -1,6 +1,6 @@
 import * as _btst_stack_plugins_api from '@btst/stack/plugins/api';
 import * as better_call from 'better-call';
-import { S as SerializedForm, b as SerializedFormSubmissionWithData, F as Form, d as FormSubmission, a as SerializedFormSubmission, e as FormSubmissionWithForm, f as FormBuilderBackendConfig } from './stack.DdI5W6MB.js';
+import { S as SerializedForm, b as SerializedFormSubmissionWithData, F as Form, d as FormSubmission, a as SerializedFormSubmission, e as FormSubmissionWithForm, f as FormBuilderBackendConfig } from './stack.BozPgbrZ.js';
 import { z } from 'zod';
 import { Adapter } from '@btst/db';
 import { QueryClient } from '@tanstack/react-query';
@@ -191,8 +191,8 @@ declare const formBuilderBackendPlugin: (config?: FormBuilderBackendConfig) => _
         };
         submittedAt: string;
         id: string;
-        data: string;
         formId: string;
+        data: string;
         submittedBy?: string | undefined;
         ipAddress?: string | undefined;
         userAgent?: string | undefined;

package/dist/shared/{stack.B7ONvlD_.d.mts → stack.BTvbxZvw.d.cts}

@@ -1,6 +1,6 @@
 import * as _btst_stack_plugins_api from '@btst/stack/plugins/api';
 import * as better_call from 'better-call';
-import { S as SerializedForm, b as SerializedFormSubmissionWithData, F as Form, d as FormSubmission, a as SerializedFormSubmission, e as FormSubmissionWithForm, f as FormBuilderBackendConfig } from './stack.DdI5W6MB.mjs';
+import { S as SerializedForm, b as SerializedFormSubmissionWithData, F as Form, d as FormSubmission, a as SerializedFormSubmission, e as FormSubmissionWithForm, f as FormBuilderBackendConfig } from './stack.BozPgbrZ.cjs';
 import { z } from 'zod';
 import { Adapter } from '@btst/db';
 import { QueryClient } from '@tanstack/react-query';
@@ -191,8 +191,8 @@ declare const formBuilderBackendPlugin: (config?: FormBuilderBackendConfig) => _
         };
         submittedAt: string;
         id: string;
-        data: string;
         formId: string;
+        data: string;
         submittedBy?: string | undefined;
         ipAddress?: string | undefined;
         userAgent?: string | undefined;

package/dist/shared/{stack.DdI5W6MB.d.mts → stack.BozPgbrZ.d.cts}

@@ -146,32 +146,32 @@ interface FormUpdate {
  * Backend hooks for Form Builder plugin
  *
  * All CRUD hooks receive ipAddress and headers for auth/rate limiting.
- * Return false from onBefore* hooks to reject the operation (throws 403).
+ * Throw an error from onBefore* hooks to reject the operation (throws 403).
  */
 interface FormBuilderBackendHooks {
-    /** Called before listing forms. Return false to deny access (403). */
-    onBeforeListForms?: (ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before creating a form. Return false to deny, or modified data. */
-    onBeforeFormCreated?: (data: FormInput, ctx: FormBuilderHookContext) => Promise<FormInput | false> | FormInput | false;
+    /** Called before listing forms. Throw an error to deny access (403). */
+    onBeforeListForms?: (ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before creating a form. Throw an error to deny, or return modified data. */
+    onBeforeFormCreated?: (data: FormInput, ctx: FormBuilderHookContext) => Promise<FormInput | void> | FormInput | void;
     /** Called after a form is created */
     onAfterFormCreated?: (form: SerializedForm, ctx: FormBuilderHookContext) => Promise<void> | void;
-    /** Called before getting a form by ID or slug. Return false to deny access. */
-    onBeforeGetForm?: (idOrSlug: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before updating a form. Return false to deny, or modified data. */
-    onBeforeFormUpdated?: (id: string, data: FormUpdate, ctx: FormBuilderHookContext) => Promise<FormUpdate | false> | FormUpdate | false;
+    /** Called before getting a form by ID or slug. Throw an error to deny access. */
+    onBeforeGetForm?: (idOrSlug: string, ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before updating a form. Throw an error to deny, or return modified data. */
+    onBeforeFormUpdated?: (id: string, data: FormUpdate, ctx: FormBuilderHookContext) => Promise<FormUpdate | void> | FormUpdate | void;
     /** Called after a form is updated */
     onAfterFormUpdated?: (form: SerializedForm, ctx: FormBuilderHookContext) => Promise<void> | void;
-    /** Called before deleting a form. Return false to deny. */
-    onBeforeFormDeleted?: (id: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
+    /** Called before deleting a form. Throw an error to deny. */
+    onBeforeFormDeleted?: (id: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /** Called after a form is deleted */
     onAfterFormDeleted?: (id: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /**
      * Called before processing a form submission.
      * Use for: spam protection, rate limiting, data validation/enrichment.
      *
-     * @returns false to reject submission (400), or modified data to continue
+     * Throw an error to reject submission (400), or return modified data to continue.
      */
-    onBeforeSubmission?: (formSlug: string, data: Record<string, unknown>, ctx: SubmissionHookContext) => Promise<Record<string, unknown> | false> | Record<string, unknown> | false;
+    onBeforeSubmission?: (formSlug: string, data: Record<string, unknown>, ctx: SubmissionHookContext) => Promise<Record<string, unknown> | void> | Record<string, unknown> | void;
     /**
      * Called after a submission is saved.
      * Use for: sending emails, storing in CRM, triggering workflows.
@@ -179,12 +179,12 @@ interface FormBuilderBackendHooks {
     onAfterSubmission?: (submission: SerializedFormSubmission, form: SerializedForm, ctx: SubmissionHookContext) => Promise<void> | void;
     /** Called when a submission fails */
     onSubmissionError?: (error: Error, formSlug: string, data: Record<string, unknown>, ctx: SubmissionHookContext) => Promise<void> | void;
-    /** Called before listing submissions. Return false to deny access (403). */
-    onBeforeListSubmissions?: (formId: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before getting a submission. Return false to deny access. */
-    onBeforeGetSubmission?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before deleting a submission. Return false to deny. */
-    onBeforeSubmissionDeleted?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
+    /** Called before listing submissions. Throw an error to deny access (403). */
+    onBeforeListSubmissions?: (formId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before getting a submission. Throw an error to deny access. */
+    onBeforeGetSubmission?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before deleting a submission. Throw an error to deny. */
+    onBeforeSubmissionDeleted?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /** Called after a submission is deleted */
     onAfterSubmissionDeleted?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /** Called on any error */

package/dist/shared/{stack.DdI5W6MB.d.cts → stack.BozPgbrZ.d.mts}

@@ -146,32 +146,32 @@ interface FormUpdate {
  * Backend hooks for Form Builder plugin
  *
  * All CRUD hooks receive ipAddress and headers for auth/rate limiting.
- * Return false from onBefore* hooks to reject the operation (throws 403).
+ * Throw an error from onBefore* hooks to reject the operation (throws 403).
  */
 interface FormBuilderBackendHooks {
-    /** Called before listing forms. Return false to deny access (403). */
-    onBeforeListForms?: (ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before creating a form. Return false to deny, or modified data. */
-    onBeforeFormCreated?: (data: FormInput, ctx: FormBuilderHookContext) => Promise<FormInput | false> | FormInput | false;
+    /** Called before listing forms. Throw an error to deny access (403). */
+    onBeforeListForms?: (ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before creating a form. Throw an error to deny, or return modified data. */
+    onBeforeFormCreated?: (data: FormInput, ctx: FormBuilderHookContext) => Promise<FormInput | void> | FormInput | void;
     /** Called after a form is created */
     onAfterFormCreated?: (form: SerializedForm, ctx: FormBuilderHookContext) => Promise<void> | void;
-    /** Called before getting a form by ID or slug. Return false to deny access. */
-    onBeforeGetForm?: (idOrSlug: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before updating a form. Return false to deny, or modified data. */
-    onBeforeFormUpdated?: (id: string, data: FormUpdate, ctx: FormBuilderHookContext) => Promise<FormUpdate | false> | FormUpdate | false;
+    /** Called before getting a form by ID or slug. Throw an error to deny access. */
+    onBeforeGetForm?: (idOrSlug: string, ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before updating a form. Throw an error to deny, or return modified data. */
+    onBeforeFormUpdated?: (id: string, data: FormUpdate, ctx: FormBuilderHookContext) => Promise<FormUpdate | void> | FormUpdate | void;
     /** Called after a form is updated */
     onAfterFormUpdated?: (form: SerializedForm, ctx: FormBuilderHookContext) => Promise<void> | void;
-    /** Called before deleting a form. Return false to deny. */
-    onBeforeFormDeleted?: (id: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
+    /** Called before deleting a form. Throw an error to deny. */
+    onBeforeFormDeleted?: (id: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /** Called after a form is deleted */
     onAfterFormDeleted?: (id: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /**
      * Called before processing a form submission.
      * Use for: spam protection, rate limiting, data validation/enrichment.
      *
-     * @returns false to reject submission (400), or modified data to continue
+     * Throw an error to reject submission (400), or return modified data to continue.
      */
-    onBeforeSubmission?: (formSlug: string, data: Record<string, unknown>, ctx: SubmissionHookContext) => Promise<Record<string, unknown> | false> | Record<string, unknown> | false;
+    onBeforeSubmission?: (formSlug: string, data: Record<string, unknown>, ctx: SubmissionHookContext) => Promise<Record<string, unknown> | void> | Record<string, unknown> | void;
     /**
      * Called after a submission is saved.
      * Use for: sending emails, storing in CRM, triggering workflows.
@@ -179,12 +179,12 @@ interface FormBuilderBackendHooks {
     onAfterSubmission?: (submission: SerializedFormSubmission, form: SerializedForm, ctx: SubmissionHookContext) => Promise<void> | void;
     /** Called when a submission fails */
     onSubmissionError?: (error: Error, formSlug: string, data: Record<string, unknown>, ctx: SubmissionHookContext) => Promise<void> | void;
-    /** Called before listing submissions. Return false to deny access (403). */
-    onBeforeListSubmissions?: (formId: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before getting a submission. Return false to deny access. */
-    onBeforeGetSubmission?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before deleting a submission. Return false to deny. */
-    onBeforeSubmissionDeleted?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
+    /** Called before listing submissions. Throw an error to deny access (403). */
+    onBeforeListSubmissions?: (formId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before getting a submission. Throw an error to deny access. */
+    onBeforeGetSubmission?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before deleting a submission. Throw an error to deny. */
+    onBeforeSubmissionDeleted?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /** Called after a submission is deleted */
     onAfterSubmissionDeleted?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /** Called on any error */

package/dist/shared/{stack.DdI5W6MB.d.ts → stack.BozPgbrZ.d.ts}

@@ -146,32 +146,32 @@ interface FormUpdate {
  * Backend hooks for Form Builder plugin
  *
  * All CRUD hooks receive ipAddress and headers for auth/rate limiting.
- * Return false from onBefore* hooks to reject the operation (throws 403).
+ * Throw an error from onBefore* hooks to reject the operation (throws 403).
  */
 interface FormBuilderBackendHooks {
-    /** Called before listing forms. Return false to deny access (403). */
-    onBeforeListForms?: (ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before creating a form. Return false to deny, or modified data. */
-    onBeforeFormCreated?: (data: FormInput, ctx: FormBuilderHookContext) => Promise<FormInput | false> | FormInput | false;
+    /** Called before listing forms. Throw an error to deny access (403). */
+    onBeforeListForms?: (ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before creating a form. Throw an error to deny, or return modified data. */
+    onBeforeFormCreated?: (data: FormInput, ctx: FormBuilderHookContext) => Promise<FormInput | void> | FormInput | void;
     /** Called after a form is created */
     onAfterFormCreated?: (form: SerializedForm, ctx: FormBuilderHookContext) => Promise<void> | void;
-    /** Called before getting a form by ID or slug. Return false to deny access. */
-    onBeforeGetForm?: (idOrSlug: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before updating a form. Return false to deny, or modified data. */
-    onBeforeFormUpdated?: (id: string, data: FormUpdate, ctx: FormBuilderHookContext) => Promise<FormUpdate | false> | FormUpdate | false;
+    /** Called before getting a form by ID or slug. Throw an error to deny access. */
+    onBeforeGetForm?: (idOrSlug: string, ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before updating a form. Throw an error to deny, or return modified data. */
+    onBeforeFormUpdated?: (id: string, data: FormUpdate, ctx: FormBuilderHookContext) => Promise<FormUpdate | void> | FormUpdate | void;
     /** Called after a form is updated */
     onAfterFormUpdated?: (form: SerializedForm, ctx: FormBuilderHookContext) => Promise<void> | void;
-    /** Called before deleting a form. Return false to deny. */
-    onBeforeFormDeleted?: (id: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
+    /** Called before deleting a form. Throw an error to deny. */
+    onBeforeFormDeleted?: (id: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /** Called after a form is deleted */
     onAfterFormDeleted?: (id: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /**
      * Called before processing a form submission.
      * Use for: spam protection, rate limiting, data validation/enrichment.
      *
-     * @returns false to reject submission (400), or modified data to continue
+     * Throw an error to reject submission (400), or return modified data to continue.
      */
-    onBeforeSubmission?: (formSlug: string, data: Record<string, unknown>, ctx: SubmissionHookContext) => Promise<Record<string, unknown> | false> | Record<string, unknown> | false;
+    onBeforeSubmission?: (formSlug: string, data: Record<string, unknown>, ctx: SubmissionHookContext) => Promise<Record<string, unknown> | void> | Record<string, unknown> | void;
     /**
      * Called after a submission is saved.
      * Use for: sending emails, storing in CRM, triggering workflows.
@@ -179,12 +179,12 @@ interface FormBuilderBackendHooks {
     onAfterSubmission?: (submission: SerializedFormSubmission, form: SerializedForm, ctx: SubmissionHookContext) => Promise<void> | void;
     /** Called when a submission fails */
     onSubmissionError?: (error: Error, formSlug: string, data: Record<string, unknown>, ctx: SubmissionHookContext) => Promise<void> | void;
-    /** Called before listing submissions. Return false to deny access (403). */
-    onBeforeListSubmissions?: (formId: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before getting a submission. Return false to deny access. */
-    onBeforeGetSubmission?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before deleting a submission. Return false to deny. */
-    onBeforeSubmissionDeleted?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
+    /** Called before listing submissions. Throw an error to deny access (403). */
+    onBeforeListSubmissions?: (formId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before getting a submission. Throw an error to deny access. */
+    onBeforeGetSubmission?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before deleting a submission. Throw an error to deny. */
+    onBeforeSubmissionDeleted?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /** Called after a submission is deleted */
     onAfterSubmissionDeleted?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /** Called on any error */

package/dist/shared/{stack.BUkC2EsZ.d.cts → stack.C9Mg2Q46.d.cts}

@@ -1,5 +1,5 @@
 import * as _btst_stack_plugins_api from '@btst/stack/plugins/api';
-import { a as SerializedContentItemWithType, S as SerializedContentType, b as ContentType, c as ContentItem, d as SerializedContentItem, e as ContentItemWithType, f as CMSBackendConfig, I as InverseRelation } from './stack.CVDTkMoO.cjs';
+import { a as SerializedContentItemWithType, S as SerializedContentType, b as ContentType, c as ContentItem, d as SerializedContentItem, e as ContentItemWithType, f as CMSBackendConfig, I as InverseRelation } from './stack.B8QD11QU.cjs';
 import * as better_call from 'better-call';
 import { z } from 'zod';
 import { Adapter } from '@btst/db';

package/dist/shared/{stack.BEn34wW6.d.ts → stack.CTDVxbrA.d.ts}

@@ -24,49 +24,49 @@ interface ChatApiContext<TBody = any, TParams = any, TQuery = any> {
  */
 interface AiChatBackendHooks {
     /**
-     * Called before processing a chat message. Return false to deny access.
+     * Called before processing a chat message. Throw an error to deny access.
      * @param messages - Array of messages being sent
      * @param context - Request context with headers, etc.
      */
     onBeforeChat?: (messages: Array<{
         role: string;
         content: string;
-    }>, context: ChatApiContext) => Promise<boolean> | boolean;
+    }>, context: ChatApiContext) => Promise<void> | void;
     /**
-     * Called before listing conversations. Return false to deny access.
+     * Called before listing conversations. Throw an error to deny access.
      * @param context - Request context with headers, etc.
      */
-    onBeforeListConversations?: (context: ChatApiContext) => Promise<boolean> | boolean;
+    onBeforeListConversations?: (context: ChatApiContext) => Promise<void> | void;
     /**
-     * Called before getting a single conversation. Return false to deny access.
+     * Called before getting a single conversation. Throw an error to deny access.
      * @param conversationId - ID of the conversation being accessed
      * @param context - Request context with headers, etc.
      */
-    onBeforeGetConversation?: (conversationId: string, context: ChatApiContext) => Promise<boolean> | boolean;
+    onBeforeGetConversation?: (conversationId: string, context: ChatApiContext) => Promise<void> | void;
     /**
-     * Called before creating a conversation. Return false to deny access.
+     * Called before creating a conversation. Throw an error to deny access.
      * @param data - Conversation data being created
      * @param context - Request context with headers, etc.
      */
     onBeforeCreateConversation?: (data: {
         id?: string;
         title?: string;
-    }, context: ChatApiContext) => Promise<boolean> | boolean;
+    }, context: ChatApiContext) => Promise<void> | void;
     /**
-     * Called before updating a conversation. Return false to deny access.
+     * Called before updating a conversation. Throw an error to deny access.
      * @param conversationId - ID of the conversation being updated
      * @param data - Updated conversation data
      * @param context - Request context with headers, etc.
      */
     onBeforeUpdateConversation?: (conversationId: string, data: {
         title?: string;
-    }, context: ChatApiContext) => Promise<boolean> | boolean;
+    }, context: ChatApiContext) => Promise<void> | void;
     /**
-     * Called before deleting a conversation. Return false to deny access.
+     * Called before deleting a conversation. Throw an error to deny access.
      * @param conversationId - ID of the conversation being deleted
      * @param context - Request context with headers, etc.
      */
-    onBeforeDeleteConversation?: (conversationId: string, context: ChatApiContext) => Promise<boolean> | boolean;
+    onBeforeDeleteConversation?: (conversationId: string, context: ChatApiContext) => Promise<void> | void;
     /**
      * Called after the structural routeName/allowlist validation, with the list
      * of tool names that passed. Return a filtered subset to further restrict

package/dist/shared/{stack.C-Ptrz8s.d.ts → stack.Cj_zKww4.d.ts}

@@ -83,21 +83,21 @@ interface LoaderContext {
  */
 interface UIBuilderClientHooks {
     /**
-     * Called before loading the page list. Return false to cancel loading.
+     * Called before loading the page list. Throw an error to cancel loading.
      * @param context - Loader context with path, params, etc.
      */
-    beforeLoadPageList?: (context: LoaderContext) => Promise<boolean> | boolean;
+    beforeLoadPageList?: (context: LoaderContext) => Promise<void> | void;
     /**
      * Called after the page list is loaded.
      * @param context - Loader context
      */
     afterLoadPageList?: (context: LoaderContext) => Promise<void> | void;
     /**
-     * Called before loading the page builder. Return false to cancel loading.
+     * Called before loading the page builder. Throw an error to cancel loading.
      * @param pageId - The page ID (undefined for new pages)
      * @param context - Loader context
      */
-    beforeLoadPageBuilder?: (pageId: string | undefined, context: LoaderContext) => Promise<boolean> | boolean;
+    beforeLoadPageBuilder?: (pageId: string | undefined, context: LoaderContext) => Promise<void> | void;
     /**
      * Called after the page builder is loaded.
      * @param pageId - The page ID (undefined for new pages)