@btst/stack 2.4.0 → 2.5.1

package/dist/plugins/ui-builder/client/hooks/index.d.cts

@@ -1,5 +1,5 @@
 import * as _tanstack_react_query from '@tanstack/react-query';
-import { S as SerializedUIBuilderPage } from '../../../../shared/stack.C-WUPMT6.cjs';
+import { S as SerializedUIBuilderPage } from '../../../../shared/stack.B2xZTSiO.cjs';
 import { C as ComponentLayer, V as Variable } from '../../../../shared/stack.B-YHz18S.cjs';
 import 'zod';
 import 'react';

package/dist/plugins/ui-builder/client/hooks/index.d.mts

@@ -1,5 +1,5 @@
 import * as _tanstack_react_query from '@tanstack/react-query';
-import { S as SerializedUIBuilderPage } from '../../../../shared/stack.6fUOjLs9.mjs';
+import { S as SerializedUIBuilderPage } from '../../../../shared/stack.dH7u-TJH.mjs';
 import { C as ComponentLayer, V as Variable } from '../../../../shared/stack.D1DMlJp-.mjs';
 import 'zod';
 import 'react';

package/dist/plugins/ui-builder/client/hooks/index.d.ts

@@ -1,5 +1,5 @@
 import * as _tanstack_react_query from '@tanstack/react-query';
-import { S as SerializedUIBuilderPage } from '../../../../shared/stack.C-Ptrz8s.js';
+import { S as SerializedUIBuilderPage } from '../../../../shared/stack.Cj_zKww4.js';
 import { C as ComponentLayer, V as Variable } from '../../../../shared/stack.GygI_T3X.js';
 import 'zod';
 import 'react';

package/dist/plugins/ui-builder/client/index.d.cts

@@ -3,7 +3,7 @@ import * as react from 'react';
 import react__default, { ComponentType } from 'react';
 import * as _btst_yar from '@btst/yar';
 import { QueryClient } from '@tanstack/react-query';
-import { c as UIBuilderClientHooks } from '../../../shared/stack.C-WUPMT6.cjs';
+import { c as UIBuilderClientHooks } from '../../../shared/stack.B2xZTSiO.cjs';
 import { a as ComponentRegistry, F as FieldConfigFunction, C as ComponentLayer } from '../../../shared/stack.B-YHz18S.cjs';
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { A as AutoFormInputComponentProps, F as FieldConfigItem } from '../../../shared/stack.8nldKomx.cjs';
@@ -50,11 +50,11 @@ interface UIBuilderClientConfig {
  *   hooks: {
  *     beforeLoadPageList: async (ctx) => {
  *       const session = await getSession(ctx.headers)
- *       return session?.user?.isAdmin === true
+ *       if (!session?.user?.isAdmin) throw new Error("Admin access required")
  *     },
  *     beforeLoadPageBuilder: async (pageId, ctx) => {
  *       const session = await getSession(ctx.headers)
- *       return session?.user?.isAdmin === true
+ *       if (!session?.user?.isAdmin) throw new Error("Admin access required")
  *     },
  *     onLoadError: () => redirect("/auth/sign-in"),
  *   },

package/dist/plugins/ui-builder/client/index.d.mts

@@ -3,7 +3,7 @@ import * as react from 'react';
 import react__default, { ComponentType } from 'react';
 import * as _btst_yar from '@btst/yar';
 import { QueryClient } from '@tanstack/react-query';
-import { c as UIBuilderClientHooks } from '../../../shared/stack.6fUOjLs9.mjs';
+import { c as UIBuilderClientHooks } from '../../../shared/stack.dH7u-TJH.mjs';
 import { a as ComponentRegistry, F as FieldConfigFunction, C as ComponentLayer } from '../../../shared/stack.D1DMlJp-.mjs';
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { A as AutoFormInputComponentProps, F as FieldConfigItem } from '../../../shared/stack.8nldKomx.mjs';
@@ -50,11 +50,11 @@ interface UIBuilderClientConfig {
  *   hooks: {
  *     beforeLoadPageList: async (ctx) => {
  *       const session = await getSession(ctx.headers)
- *       return session?.user?.isAdmin === true
+ *       if (!session?.user?.isAdmin) throw new Error("Admin access required")
  *     },
  *     beforeLoadPageBuilder: async (pageId, ctx) => {
  *       const session = await getSession(ctx.headers)
- *       return session?.user?.isAdmin === true
+ *       if (!session?.user?.isAdmin) throw new Error("Admin access required")
  *     },
  *     onLoadError: () => redirect("/auth/sign-in"),
  *   },

package/dist/plugins/ui-builder/client/index.d.ts

@@ -3,7 +3,7 @@ import * as react from 'react';
 import react__default, { ComponentType } from 'react';
 import * as _btst_yar from '@btst/yar';
 import { QueryClient } from '@tanstack/react-query';
-import { c as UIBuilderClientHooks } from '../../../shared/stack.C-Ptrz8s.js';
+import { c as UIBuilderClientHooks } from '../../../shared/stack.Cj_zKww4.js';
 import { a as ComponentRegistry, F as FieldConfigFunction, C as ComponentLayer } from '../../../shared/stack.GygI_T3X.js';
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { A as AutoFormInputComponentProps, F as FieldConfigItem } from '../../../shared/stack.8nldKomx.js';
@@ -50,11 +50,11 @@ interface UIBuilderClientConfig {
  *   hooks: {
  *     beforeLoadPageList: async (ctx) => {
  *       const session = await getSession(ctx.headers)
- *       return session?.user?.isAdmin === true
+ *       if (!session?.user?.isAdmin) throw new Error("Admin access required")
  *     },
  *     beforeLoadPageBuilder: async (pageId, ctx) => {
  *       const session = await getSession(ctx.headers)
- *       return session?.user?.isAdmin === true
+ *       if (!session?.user?.isAdmin) throw new Error("Admin access required")
  *     },
  *     onLoadError: () => redirect("/auth/sign-in"),
  *   },

package/dist/plugins/ui-builder/index.d.cts

@@ -1,6 +1,6 @@
 import { z } from 'zod';
-import { C as ContentTypeConfig } from '../../shared/stack.CVDTkMoO.cjs';
-export { L as LoaderContext, b as PaginatedUIBuilderPages, P as ParsedUIBuilderPage, S as SerializedUIBuilderPage, c as UIBuilderClientHooks, a as UIBuilderPage, U as UIBuilderPageData } from '../../shared/stack.C-WUPMT6.cjs';
+import { C as ContentTypeConfig } from '../../shared/stack.B8QD11QU.cjs';
+export { L as LoaderContext, b as PaginatedUIBuilderPages, P as ParsedUIBuilderPage, S as SerializedUIBuilderPage, c as UIBuilderClientHooks, a as UIBuilderPage, U as UIBuilderPageData } from '../../shared/stack.B2xZTSiO.cjs';
 export { C as ComponentLayer, a as ComponentRegistry, R as RegistryEntry, V as Variable } from '../../shared/stack.B-YHz18S.cjs';
 import 'react';
 import '../../shared/stack.8nldKomx.cjs';

package/dist/plugins/ui-builder/index.d.mts

@@ -1,6 +1,6 @@
 import { z } from 'zod';
-import { C as ContentTypeConfig } from '../../shared/stack.CVDTkMoO.mjs';
-export { L as LoaderContext, b as PaginatedUIBuilderPages, P as ParsedUIBuilderPage, S as SerializedUIBuilderPage, c as UIBuilderClientHooks, a as UIBuilderPage, U as UIBuilderPageData } from '../../shared/stack.6fUOjLs9.mjs';
+import { C as ContentTypeConfig } from '../../shared/stack.B8QD11QU.mjs';
+export { L as LoaderContext, b as PaginatedUIBuilderPages, P as ParsedUIBuilderPage, S as SerializedUIBuilderPage, c as UIBuilderClientHooks, a as UIBuilderPage, U as UIBuilderPageData } from '../../shared/stack.dH7u-TJH.mjs';
 export { C as ComponentLayer, a as ComponentRegistry, R as RegistryEntry, V as Variable } from '../../shared/stack.D1DMlJp-.mjs';
 import 'react';
 import '../../shared/stack.8nldKomx.mjs';

package/dist/plugins/ui-builder/index.d.ts

@@ -1,6 +1,6 @@
 import { z } from 'zod';
-import { C as ContentTypeConfig } from '../../shared/stack.CVDTkMoO.js';
-export { L as LoaderContext, b as PaginatedUIBuilderPages, P as ParsedUIBuilderPage, S as SerializedUIBuilderPage, c as UIBuilderClientHooks, a as UIBuilderPage, U as UIBuilderPageData } from '../../shared/stack.C-Ptrz8s.js';
+import { C as ContentTypeConfig } from '../../shared/stack.B8QD11QU.js';
+export { L as LoaderContext, b as PaginatedUIBuilderPages, P as ParsedUIBuilderPage, S as SerializedUIBuilderPage, c as UIBuilderClientHooks, a as UIBuilderPage, U as UIBuilderPageData } from '../../shared/stack.Cj_zKww4.js';
 export { C as ComponentLayer, a as ComponentRegistry, R as RegistryEntry, V as Variable } from '../../shared/stack.GygI_T3X.js';
 import 'react';
 import '../../shared/stack.8nldKomx.js';

package/dist/shared/{stack.C-WUPMT6.d.cts → stack.B2xZTSiO.d.cts}

@@ -83,21 +83,21 @@ interface LoaderContext {
  */
 interface UIBuilderClientHooks {
     /**
-     * Called before loading the page list. Return false to cancel loading.
+     * Called before loading the page list. Throw an error to cancel loading.
      * @param context - Loader context with path, params, etc.
      */
-    beforeLoadPageList?: (context: LoaderContext) => Promise<boolean> | boolean;
+    beforeLoadPageList?: (context: LoaderContext) => Promise<void> | void;
     /**
      * Called after the page list is loaded.
      * @param context - Loader context
      */
     afterLoadPageList?: (context: LoaderContext) => Promise<void> | void;
     /**
-     * Called before loading the page builder. Return false to cancel loading.
+     * Called before loading the page builder. Throw an error to cancel loading.
      * @param pageId - The page ID (undefined for new pages)
      * @param context - Loader context
      */
-    beforeLoadPageBuilder?: (pageId: string | undefined, context: LoaderContext) => Promise<boolean> | boolean;
+    beforeLoadPageBuilder?: (pageId: string | undefined, context: LoaderContext) => Promise<void> | void;
     /**
      * Called after the page builder is loaded.
      * @param pageId - The page ID (undefined for new pages)

package/dist/shared/{stack.CczspVn2.d.mts → stack.B58oHdqm.d.mts}

@@ -1,5 +1,5 @@
 import * as _btst_stack_plugins_api from '@btst/stack/plugins/api';
-import { a as SerializedContentItemWithType, S as SerializedContentType, b as ContentType, c as ContentItem, d as SerializedContentItem, e as ContentItemWithType, f as CMSBackendConfig, I as InverseRelation } from './stack.CVDTkMoO.mjs';
+import { a as SerializedContentItemWithType, S as SerializedContentType, b as ContentType, c as ContentItem, d as SerializedContentItem, e as ContentItemWithType, f as CMSBackendConfig, I as InverseRelation } from './stack.B8QD11QU.mjs';
 import * as better_call from 'better-call';
 import { z } from 'zod';
 import { Adapter } from '@btst/db';

package/dist/shared/{stack.BepFXT3w.d.mts → stack.B8D4r97Z.d.mts}

@@ -189,25 +189,25 @@ interface KanbanApiContext<TBody = unknown, TParams = unknown, TQuery = unknown>
  */
 interface KanbanBackendHooks {
     /**
-     * Called before listing boards. Return false to deny access.
+     * Called before listing boards. Throw an error to deny access.
      */
-    onBeforeListBoards?: (filter: z.infer<typeof BoardListQuerySchema>, context: KanbanApiContext) => Promise<boolean> | boolean;
+    onBeforeListBoards?: (filter: z.infer<typeof BoardListQuerySchema>, context: KanbanApiContext) => Promise<void> | void;
     /**
-     * Called before creating a board. Return false to deny access.
+     * Called before creating a board. Throw an error to deny access.
      */
-    onBeforeCreateBoard?: (data: z.infer<typeof createBoardSchema>, context: KanbanApiContext) => Promise<boolean> | boolean;
+    onBeforeCreateBoard?: (data: z.infer<typeof createBoardSchema>, context: KanbanApiContext) => Promise<void> | void;
     /**
-     * Called before reading a single board. Return false to deny access.
+     * Called before reading a single board. Throw an error to deny access.
      */
-    onBeforeReadBoard?: (boardId: string, context: KanbanApiContext) => Promise<boolean> | boolean;
+    onBeforeReadBoard?: (boardId: string, context: KanbanApiContext) => Promise<void> | void;
     /**
-     * Called before updating a board. Return false to deny access.
+     * Called before updating a board. Throw an error to deny access.
      */
-    onBeforeUpdateBoard?: (boardId: string, data: z.infer<typeof updateBoardSchema>, context: KanbanApiContext) => Promise<boolean> | boolean;
+    onBeforeUpdateBoard?: (boardId: string, data: z.infer<typeof updateBoardSchema>, context: KanbanApiContext) => Promise<void> | void;
     /**
-     * Called before deleting a board. Return false to deny access.
+     * Called before deleting a board. Throw an error to deny access.
      */
-    onBeforeDeleteBoard?: (boardId: string, context: KanbanApiContext) => Promise<boolean> | boolean;
+    onBeforeDeleteBoard?: (boardId: string, context: KanbanApiContext) => Promise<void> | void;
     /**
      * Called after boards are listed successfully.
      * Receives the items array (same shape as `board[]`) for consistency
@@ -251,17 +251,17 @@ interface KanbanBackendHooks {
      */
     onDeleteBoardError?: (error: Error, context: KanbanApiContext) => Promise<void> | void;
     /**
-     * Called before creating a column. Return false to deny access.
+     * Called before creating a column. Throw an error to deny access.
      */
-    onBeforeCreateColumn?: (data: z.infer<typeof createColumnSchema>, context: KanbanApiContext) => Promise<boolean> | boolean;
+    onBeforeCreateColumn?: (data: z.infer<typeof createColumnSchema>, context: KanbanApiContext) => Promise<void> | void;
     /**
-     * Called before updating a column. Return false to deny access.
+     * Called before updating a column. Throw an error to deny access.
      */
-    onBeforeUpdateColumn?: (columnId: string, data: z.infer<typeof updateColumnSchema>, context: KanbanApiContext) => Promise<boolean> | boolean;
+    onBeforeUpdateColumn?: (columnId: string, data: z.infer<typeof updateColumnSchema>, context: KanbanApiContext) => Promise<void> | void;
     /**
-     * Called before deleting a column. Return false to deny access.
+     * Called before deleting a column. Throw an error to deny access.
      */
-    onBeforeDeleteColumn?: (columnId: string, context: KanbanApiContext) => Promise<boolean> | boolean;
+    onBeforeDeleteColumn?: (columnId: string, context: KanbanApiContext) => Promise<void> | void;
     /**
      * Called after a column is created successfully
      */
@@ -275,17 +275,17 @@ interface KanbanBackendHooks {
      */
     onColumnDeleted?: (columnId: string, context: KanbanApiContext) => Promise<void> | void;
     /**
-     * Called before creating a task. Return false to deny access.
+     * Called before creating a task. Throw an error to deny access.
      */
-    onBeforeCreateTask?: (data: z.infer<typeof createTaskSchema>, context: KanbanApiContext) => Promise<boolean> | boolean;
+    onBeforeCreateTask?: (data: z.infer<typeof createTaskSchema>, context: KanbanApiContext) => Promise<void> | void;
     /**
-     * Called before updating a task. Return false to deny access.
+     * Called before updating a task. Throw an error to deny access.
      */
-    onBeforeUpdateTask?: (taskId: string, data: z.infer<typeof updateTaskSchema>, context: KanbanApiContext) => Promise<boolean> | boolean;
+    onBeforeUpdateTask?: (taskId: string, data: z.infer<typeof updateTaskSchema>, context: KanbanApiContext) => Promise<void> | void;
     /**
-     * Called before deleting a task. Return false to deny access.
+     * Called before deleting a task. Throw an error to deny access.
      */
-    onBeforeDeleteTask?: (taskId: string, context: KanbanApiContext) => Promise<boolean> | boolean;
+    onBeforeDeleteTask?: (taskId: string, context: KanbanApiContext) => Promise<void> | void;
     /**
      * Called after a task is created successfully
      */

package/dist/shared/{stack.CVDTkMoO.d.mts → stack.B8QD11QU.d.cts}

@@ -130,21 +130,21 @@ interface CMSHookContext {
 /**
  * Hooks for customizing CMS backend behavior
  *
- * Note: Before hooks can only deny operations by returning `false`.
+ * Note: Before hooks deny operations by throwing an error.
  * They cannot modify the data being saved. This ensures consistency
  * between the stored content item data and relation junction tables.
  */
 interface CMSBackendHooks {
-    /** Called before creating a content item. Return false to deny the operation. */
-    onBeforeCreate?: (data: Record<string, unknown>, context: CMSHookContext) => Promise<false | void> | false | void;
+    /** Called before creating a content item. Throw an error to deny the operation. */
+    onBeforeCreate?: (data: Record<string, unknown>, context: CMSHookContext) => Promise<void> | void;
     /** Called after creating a content item */
     onAfterCreate?: (item: SerializedContentItem, context: CMSHookContext) => Promise<void> | void;
-    /** Called before updating a content item. Return false to deny the operation. */
-    onBeforeUpdate?: (id: string, data: Record<string, unknown>, context: CMSHookContext) => Promise<false | void> | false | void;
+    /** Called before updating a content item. Throw an error to deny the operation. */
+    onBeforeUpdate?: (id: string, data: Record<string, unknown>, context: CMSHookContext) => Promise<void> | void;
     /** Called after updating a content item */
     onAfterUpdate?: (item: SerializedContentItem, context: CMSHookContext) => Promise<void> | void;
-    /** Called before deleting a content item */
-    onBeforeDelete?: (id: string, context: CMSHookContext) => Promise<boolean> | boolean;
+    /** Called before deleting a content item. Throw an error to deny the operation. */
+    onBeforeDelete?: (id: string, context: CMSHookContext) => Promise<void> | void;
     /** Called after deleting a content item */
     onAfterDelete?: (id: string, context: CMSHookContext) => Promise<void> | void;
     /** Called on any CMS error */

package/dist/shared/{stack.CVDTkMoO.d.cts → stack.B8QD11QU.d.mts}

@@ -130,21 +130,21 @@ interface CMSHookContext {
 /**
  * Hooks for customizing CMS backend behavior
  *
- * Note: Before hooks can only deny operations by returning `false`.
+ * Note: Before hooks deny operations by throwing an error.
  * They cannot modify the data being saved. This ensures consistency
  * between the stored content item data and relation junction tables.
  */
 interface CMSBackendHooks {
-    /** Called before creating a content item. Return false to deny the operation. */
-    onBeforeCreate?: (data: Record<string, unknown>, context: CMSHookContext) => Promise<false | void> | false | void;
+    /** Called before creating a content item. Throw an error to deny the operation. */
+    onBeforeCreate?: (data: Record<string, unknown>, context: CMSHookContext) => Promise<void> | void;
     /** Called after creating a content item */
     onAfterCreate?: (item: SerializedContentItem, context: CMSHookContext) => Promise<void> | void;
-    /** Called before updating a content item. Return false to deny the operation. */
-    onBeforeUpdate?: (id: string, data: Record<string, unknown>, context: CMSHookContext) => Promise<false | void> | false | void;
+    /** Called before updating a content item. Throw an error to deny the operation. */
+    onBeforeUpdate?: (id: string, data: Record<string, unknown>, context: CMSHookContext) => Promise<void> | void;
     /** Called after updating a content item */
     onAfterUpdate?: (item: SerializedContentItem, context: CMSHookContext) => Promise<void> | void;
-    /** Called before deleting a content item */
-    onBeforeDelete?: (id: string, context: CMSHookContext) => Promise<boolean> | boolean;
+    /** Called before deleting a content item. Throw an error to deny the operation. */
+    onBeforeDelete?: (id: string, context: CMSHookContext) => Promise<void> | void;
     /** Called after deleting a content item */
     onAfterDelete?: (id: string, context: CMSHookContext) => Promise<void> | void;
     /** Called on any CMS error */

package/dist/shared/{stack.CVDTkMoO.d.ts → stack.B8QD11QU.d.ts}

@@ -130,21 +130,21 @@ interface CMSHookContext {
 /**
  * Hooks for customizing CMS backend behavior
  *
- * Note: Before hooks can only deny operations by returning `false`.
+ * Note: Before hooks deny operations by throwing an error.
  * They cannot modify the data being saved. This ensures consistency
  * between the stored content item data and relation junction tables.
  */
 interface CMSBackendHooks {
-    /** Called before creating a content item. Return false to deny the operation. */
-    onBeforeCreate?: (data: Record<string, unknown>, context: CMSHookContext) => Promise<false | void> | false | void;
+    /** Called before creating a content item. Throw an error to deny the operation. */
+    onBeforeCreate?: (data: Record<string, unknown>, context: CMSHookContext) => Promise<void> | void;
     /** Called after creating a content item */
     onAfterCreate?: (item: SerializedContentItem, context: CMSHookContext) => Promise<void> | void;
-    /** Called before updating a content item. Return false to deny the operation. */
-    onBeforeUpdate?: (id: string, data: Record<string, unknown>, context: CMSHookContext) => Promise<false | void> | false | void;
+    /** Called before updating a content item. Throw an error to deny the operation. */
+    onBeforeUpdate?: (id: string, data: Record<string, unknown>, context: CMSHookContext) => Promise<void> | void;
     /** Called after updating a content item */
     onAfterUpdate?: (item: SerializedContentItem, context: CMSHookContext) => Promise<void> | void;
-    /** Called before deleting a content item */
-    onBeforeDelete?: (id: string, context: CMSHookContext) => Promise<boolean> | boolean;
+    /** Called before deleting a content item. Throw an error to deny the operation. */
+    onBeforeDelete?: (id: string, context: CMSHookContext) => Promise<void> | void;
     /** Called after deleting a content item */
     onAfterDelete?: (id: string, context: CMSHookContext) => Promise<void> | void;
     /** Called on any CMS error */

package/dist/shared/{stack.kcdnD4gA.d.cts → stack.BgTmujxW.d.mts}

@@ -1,6 +1,6 @@
 import * as _btst_stack_plugins_api from '@btst/stack/plugins/api';
 import * as better_call from 'better-call';
-import { S as SerializedForm, b as SerializedFormSubmissionWithData, F as Form, d as FormSubmission, a as SerializedFormSubmission, e as FormSubmissionWithForm, f as FormBuilderBackendConfig } from './stack.DdI5W6MB.cjs';
+import { S as SerializedForm, b as SerializedFormSubmissionWithData, F as Form, d as FormSubmission, a as SerializedFormSubmission, e as FormSubmissionWithForm, f as FormBuilderBackendConfig } from './stack.BozPgbrZ.mjs';
 import { z } from 'zod';
 import { Adapter } from '@btst/db';
 import { QueryClient } from '@tanstack/react-query';

package/dist/shared/{stack.DdI5W6MB.d.mts → stack.BozPgbrZ.d.cts}

@@ -146,32 +146,32 @@ interface FormUpdate {
  * Backend hooks for Form Builder plugin
  *
  * All CRUD hooks receive ipAddress and headers for auth/rate limiting.
- * Return false from onBefore* hooks to reject the operation (throws 403).
+ * Throw an error from onBefore* hooks to reject the operation (throws 403).
  */
 interface FormBuilderBackendHooks {
-    /** Called before listing forms. Return false to deny access (403). */
-    onBeforeListForms?: (ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before creating a form. Return false to deny, or modified data. */
-    onBeforeFormCreated?: (data: FormInput, ctx: FormBuilderHookContext) => Promise<FormInput | false> | FormInput | false;
+    /** Called before listing forms. Throw an error to deny access (403). */
+    onBeforeListForms?: (ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before creating a form. Throw an error to deny, or return modified data. */
+    onBeforeFormCreated?: (data: FormInput, ctx: FormBuilderHookContext) => Promise<FormInput | void> | FormInput | void;
     /** Called after a form is created */
     onAfterFormCreated?: (form: SerializedForm, ctx: FormBuilderHookContext) => Promise<void> | void;
-    /** Called before getting a form by ID or slug. Return false to deny access. */
-    onBeforeGetForm?: (idOrSlug: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before updating a form. Return false to deny, or modified data. */
-    onBeforeFormUpdated?: (id: string, data: FormUpdate, ctx: FormBuilderHookContext) => Promise<FormUpdate | false> | FormUpdate | false;
+    /** Called before getting a form by ID or slug. Throw an error to deny access. */
+    onBeforeGetForm?: (idOrSlug: string, ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before updating a form. Throw an error to deny, or return modified data. */
+    onBeforeFormUpdated?: (id: string, data: FormUpdate, ctx: FormBuilderHookContext) => Promise<FormUpdate | void> | FormUpdate | void;
     /** Called after a form is updated */
     onAfterFormUpdated?: (form: SerializedForm, ctx: FormBuilderHookContext) => Promise<void> | void;
-    /** Called before deleting a form. Return false to deny. */
-    onBeforeFormDeleted?: (id: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
+    /** Called before deleting a form. Throw an error to deny. */
+    onBeforeFormDeleted?: (id: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /** Called after a form is deleted */
     onAfterFormDeleted?: (id: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /**
      * Called before processing a form submission.
      * Use for: spam protection, rate limiting, data validation/enrichment.
      *
-     * @returns false to reject submission (400), or modified data to continue
+     * Throw an error to reject submission (400), or return modified data to continue.
      */
-    onBeforeSubmission?: (formSlug: string, data: Record<string, unknown>, ctx: SubmissionHookContext) => Promise<Record<string, unknown> | false> | Record<string, unknown> | false;
+    onBeforeSubmission?: (formSlug: string, data: Record<string, unknown>, ctx: SubmissionHookContext) => Promise<Record<string, unknown> | void> | Record<string, unknown> | void;
     /**
      * Called after a submission is saved.
      * Use for: sending emails, storing in CRM, triggering workflows.
@@ -179,12 +179,12 @@ interface FormBuilderBackendHooks {
     onAfterSubmission?: (submission: SerializedFormSubmission, form: SerializedForm, ctx: SubmissionHookContext) => Promise<void> | void;
     /** Called when a submission fails */
     onSubmissionError?: (error: Error, formSlug: string, data: Record<string, unknown>, ctx: SubmissionHookContext) => Promise<void> | void;
-    /** Called before listing submissions. Return false to deny access (403). */
-    onBeforeListSubmissions?: (formId: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before getting a submission. Return false to deny access. */
-    onBeforeGetSubmission?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before deleting a submission. Return false to deny. */
-    onBeforeSubmissionDeleted?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
+    /** Called before listing submissions. Throw an error to deny access (403). */
+    onBeforeListSubmissions?: (formId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before getting a submission. Throw an error to deny access. */
+    onBeforeGetSubmission?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before deleting a submission. Throw an error to deny. */
+    onBeforeSubmissionDeleted?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /** Called after a submission is deleted */
     onAfterSubmissionDeleted?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /** Called on any error */

package/dist/shared/{stack.DdI5W6MB.d.ts → stack.BozPgbrZ.d.mts}

@@ -146,32 +146,32 @@ interface FormUpdate {
  * Backend hooks for Form Builder plugin
  *
  * All CRUD hooks receive ipAddress and headers for auth/rate limiting.
- * Return false from onBefore* hooks to reject the operation (throws 403).
+ * Throw an error from onBefore* hooks to reject the operation (throws 403).
  */
 interface FormBuilderBackendHooks {
-    /** Called before listing forms. Return false to deny access (403). */
-    onBeforeListForms?: (ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before creating a form. Return false to deny, or modified data. */
-    onBeforeFormCreated?: (data: FormInput, ctx: FormBuilderHookContext) => Promise<FormInput | false> | FormInput | false;
+    /** Called before listing forms. Throw an error to deny access (403). */
+    onBeforeListForms?: (ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before creating a form. Throw an error to deny, or return modified data. */
+    onBeforeFormCreated?: (data: FormInput, ctx: FormBuilderHookContext) => Promise<FormInput | void> | FormInput | void;
     /** Called after a form is created */
     onAfterFormCreated?: (form: SerializedForm, ctx: FormBuilderHookContext) => Promise<void> | void;
-    /** Called before getting a form by ID or slug. Return false to deny access. */
-    onBeforeGetForm?: (idOrSlug: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before updating a form. Return false to deny, or modified data. */
-    onBeforeFormUpdated?: (id: string, data: FormUpdate, ctx: FormBuilderHookContext) => Promise<FormUpdate | false> | FormUpdate | false;
+    /** Called before getting a form by ID or slug. Throw an error to deny access. */
+    onBeforeGetForm?: (idOrSlug: string, ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before updating a form. Throw an error to deny, or return modified data. */
+    onBeforeFormUpdated?: (id: string, data: FormUpdate, ctx: FormBuilderHookContext) => Promise<FormUpdate | void> | FormUpdate | void;
     /** Called after a form is updated */
     onAfterFormUpdated?: (form: SerializedForm, ctx: FormBuilderHookContext) => Promise<void> | void;
-    /** Called before deleting a form. Return false to deny. */
-    onBeforeFormDeleted?: (id: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
+    /** Called before deleting a form. Throw an error to deny. */
+    onBeforeFormDeleted?: (id: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /** Called after a form is deleted */
     onAfterFormDeleted?: (id: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /**
      * Called before processing a form submission.
      * Use for: spam protection, rate limiting, data validation/enrichment.
      *
-     * @returns false to reject submission (400), or modified data to continue
+     * Throw an error to reject submission (400), or return modified data to continue.
      */
-    onBeforeSubmission?: (formSlug: string, data: Record<string, unknown>, ctx: SubmissionHookContext) => Promise<Record<string, unknown> | false> | Record<string, unknown> | false;
+    onBeforeSubmission?: (formSlug: string, data: Record<string, unknown>, ctx: SubmissionHookContext) => Promise<Record<string, unknown> | void> | Record<string, unknown> | void;
     /**
      * Called after a submission is saved.
      * Use for: sending emails, storing in CRM, triggering workflows.
@@ -179,12 +179,12 @@ interface FormBuilderBackendHooks {
     onAfterSubmission?: (submission: SerializedFormSubmission, form: SerializedForm, ctx: SubmissionHookContext) => Promise<void> | void;
     /** Called when a submission fails */
     onSubmissionError?: (error: Error, formSlug: string, data: Record<string, unknown>, ctx: SubmissionHookContext) => Promise<void> | void;
-    /** Called before listing submissions. Return false to deny access (403). */
-    onBeforeListSubmissions?: (formId: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before getting a submission. Return false to deny access. */
-    onBeforeGetSubmission?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before deleting a submission. Return false to deny. */
-    onBeforeSubmissionDeleted?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
+    /** Called before listing submissions. Throw an error to deny access (403). */
+    onBeforeListSubmissions?: (formId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before getting a submission. Throw an error to deny access. */
+    onBeforeGetSubmission?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before deleting a submission. Throw an error to deny. */
+    onBeforeSubmissionDeleted?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /** Called after a submission is deleted */
     onAfterSubmissionDeleted?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /** Called on any error */

package/dist/shared/{stack.DdI5W6MB.d.cts → stack.BozPgbrZ.d.ts}

@@ -146,32 +146,32 @@ interface FormUpdate {
  * Backend hooks for Form Builder plugin
  *
  * All CRUD hooks receive ipAddress and headers for auth/rate limiting.
- * Return false from onBefore* hooks to reject the operation (throws 403).
+ * Throw an error from onBefore* hooks to reject the operation (throws 403).
  */
 interface FormBuilderBackendHooks {
-    /** Called before listing forms. Return false to deny access (403). */
-    onBeforeListForms?: (ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before creating a form. Return false to deny, or modified data. */
-    onBeforeFormCreated?: (data: FormInput, ctx: FormBuilderHookContext) => Promise<FormInput | false> | FormInput | false;
+    /** Called before listing forms. Throw an error to deny access (403). */
+    onBeforeListForms?: (ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before creating a form. Throw an error to deny, or return modified data. */
+    onBeforeFormCreated?: (data: FormInput, ctx: FormBuilderHookContext) => Promise<FormInput | void> | FormInput | void;
     /** Called after a form is created */
     onAfterFormCreated?: (form: SerializedForm, ctx: FormBuilderHookContext) => Promise<void> | void;
-    /** Called before getting a form by ID or slug. Return false to deny access. */
-    onBeforeGetForm?: (idOrSlug: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before updating a form. Return false to deny, or modified data. */
-    onBeforeFormUpdated?: (id: string, data: FormUpdate, ctx: FormBuilderHookContext) => Promise<FormUpdate | false> | FormUpdate | false;
+    /** Called before getting a form by ID or slug. Throw an error to deny access. */
+    onBeforeGetForm?: (idOrSlug: string, ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before updating a form. Throw an error to deny, or return modified data. */
+    onBeforeFormUpdated?: (id: string, data: FormUpdate, ctx: FormBuilderHookContext) => Promise<FormUpdate | void> | FormUpdate | void;
     /** Called after a form is updated */
     onAfterFormUpdated?: (form: SerializedForm, ctx: FormBuilderHookContext) => Promise<void> | void;
-    /** Called before deleting a form. Return false to deny. */
-    onBeforeFormDeleted?: (id: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
+    /** Called before deleting a form. Throw an error to deny. */
+    onBeforeFormDeleted?: (id: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /** Called after a form is deleted */
     onAfterFormDeleted?: (id: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /**
      * Called before processing a form submission.
      * Use for: spam protection, rate limiting, data validation/enrichment.
      *
-     * @returns false to reject submission (400), or modified data to continue
+     * Throw an error to reject submission (400), or return modified data to continue.
      */
-    onBeforeSubmission?: (formSlug: string, data: Record<string, unknown>, ctx: SubmissionHookContext) => Promise<Record<string, unknown> | false> | Record<string, unknown> | false;
+    onBeforeSubmission?: (formSlug: string, data: Record<string, unknown>, ctx: SubmissionHookContext) => Promise<Record<string, unknown> | void> | Record<string, unknown> | void;
     /**
      * Called after a submission is saved.
      * Use for: sending emails, storing in CRM, triggering workflows.
@@ -179,12 +179,12 @@ interface FormBuilderBackendHooks {
     onAfterSubmission?: (submission: SerializedFormSubmission, form: SerializedForm, ctx: SubmissionHookContext) => Promise<void> | void;
     /** Called when a submission fails */
     onSubmissionError?: (error: Error, formSlug: string, data: Record<string, unknown>, ctx: SubmissionHookContext) => Promise<void> | void;
-    /** Called before listing submissions. Return false to deny access (403). */
-    onBeforeListSubmissions?: (formId: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before getting a submission. Return false to deny access. */
-    onBeforeGetSubmission?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
-    /** Called before deleting a submission. Return false to deny. */
-    onBeforeSubmissionDeleted?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<boolean> | boolean;
+    /** Called before listing submissions. Throw an error to deny access (403). */
+    onBeforeListSubmissions?: (formId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before getting a submission. Throw an error to deny access. */
+    onBeforeGetSubmission?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
+    /** Called before deleting a submission. Throw an error to deny. */
+    onBeforeSubmissionDeleted?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /** Called after a submission is deleted */
     onAfterSubmissionDeleted?: (submissionId: string, ctx: FormBuilderHookContext) => Promise<void> | void;
     /** Called on any error */

package/dist/shared/{stack.BUkC2EsZ.d.cts → stack.C9Mg2Q46.d.cts}

@@ -1,5 +1,5 @@
 import * as _btst_stack_plugins_api from '@btst/stack/plugins/api';
-import { a as SerializedContentItemWithType, S as SerializedContentType, b as ContentType, c as ContentItem, d as SerializedContentItem, e as ContentItemWithType, f as CMSBackendConfig, I as InverseRelation } from './stack.CVDTkMoO.cjs';
+import { a as SerializedContentItemWithType, S as SerializedContentType, b as ContentType, c as ContentItem, d as SerializedContentItem, e as ContentItemWithType, f as CMSBackendConfig, I as InverseRelation } from './stack.B8QD11QU.cjs';
 import * as better_call from 'better-call';
 import { z } from 'zod';
 import { Adapter } from '@btst/db';

package/dist/shared/{stack.Kq2-QzOC.d.ts → stack.CLQuVdwK.d.ts}

@@ -1,6 +1,6 @@
 import * as _btst_stack_plugins_api from '@btst/stack/plugins/api';
 import * as better_call from 'better-call';
-import { S as SerializedForm, b as SerializedFormSubmissionWithData, F as Form, d as FormSubmission, a as SerializedFormSubmission, e as FormSubmissionWithForm, f as FormBuilderBackendConfig } from './stack.DdI5W6MB.js';
+import { S as SerializedForm, b as SerializedFormSubmissionWithData, F as Form, d as FormSubmission, a as SerializedFormSubmission, e as FormSubmissionWithForm, f as FormBuilderBackendConfig } from './stack.BozPgbrZ.js';
 import { z } from 'zod';
 import { Adapter } from '@btst/db';
 import { QueryClient } from '@tanstack/react-query';

package/dist/shared/{stack.B7ONvlD_.d.mts → stack.CSx98K5H.d.cts}

@@ -1,6 +1,6 @@
 import * as _btst_stack_plugins_api from '@btst/stack/plugins/api';
 import * as better_call from 'better-call';
-import { S as SerializedForm, b as SerializedFormSubmissionWithData, F as Form, d as FormSubmission, a as SerializedFormSubmission, e as FormSubmissionWithForm, f as FormBuilderBackendConfig } from './stack.DdI5W6MB.mjs';
+import { S as SerializedForm, b as SerializedFormSubmissionWithData, F as Form, d as FormSubmission, a as SerializedFormSubmission, e as FormSubmissionWithForm, f as FormBuilderBackendConfig } from './stack.BozPgbrZ.cjs';
 import { z } from 'zod';
 import { Adapter } from '@btst/db';
 import { QueryClient } from '@tanstack/react-query';