@btst/stack 2.4.0 → 2.5.1

package/dist/shared/{stack.BEn34wW6.d.ts → stack.CTDVxbrA.d.ts}

@@ -24,49 +24,49 @@ interface ChatApiContext<TBody = any, TParams = any, TQuery = any> {
  */
 interface AiChatBackendHooks {
     /**
-     * Called before processing a chat message. Return false to deny access.
+     * Called before processing a chat message. Throw an error to deny access.
      * @param messages - Array of messages being sent
      * @param context - Request context with headers, etc.
      */
     onBeforeChat?: (messages: Array<{
         role: string;
         content: string;
-    }>, context: ChatApiContext) => Promise<boolean> | boolean;
+    }>, context: ChatApiContext) => Promise<void> | void;
     /**
-     * Called before listing conversations. Return false to deny access.
+     * Called before listing conversations. Throw an error to deny access.
      * @param context - Request context with headers, etc.
      */
-    onBeforeListConversations?: (context: ChatApiContext) => Promise<boolean> | boolean;
+    onBeforeListConversations?: (context: ChatApiContext) => Promise<void> | void;
     /**
-     * Called before getting a single conversation. Return false to deny access.
+     * Called before getting a single conversation. Throw an error to deny access.
      * @param conversationId - ID of the conversation being accessed
      * @param context - Request context with headers, etc.
      */
-    onBeforeGetConversation?: (conversationId: string, context: ChatApiContext) => Promise<boolean> | boolean;
+    onBeforeGetConversation?: (conversationId: string, context: ChatApiContext) => Promise<void> | void;
     /**
-     * Called before creating a conversation. Return false to deny access.
+     * Called before creating a conversation. Throw an error to deny access.
      * @param data - Conversation data being created
      * @param context - Request context with headers, etc.
      */
     onBeforeCreateConversation?: (data: {
         id?: string;
         title?: string;
-    }, context: ChatApiContext) => Promise<boolean> | boolean;
+    }, context: ChatApiContext) => Promise<void> | void;
     /**
-     * Called before updating a conversation. Return false to deny access.
+     * Called before updating a conversation. Throw an error to deny access.
      * @param conversationId - ID of the conversation being updated
      * @param data - Updated conversation data
      * @param context - Request context with headers, etc.
      */
     onBeforeUpdateConversation?: (conversationId: string, data: {
         title?: string;
-    }, context: ChatApiContext) => Promise<boolean> | boolean;
+    }, context: ChatApiContext) => Promise<void> | void;
     /**
-     * Called before deleting a conversation. Return false to deny access.
+     * Called before deleting a conversation. Throw an error to deny access.
      * @param conversationId - ID of the conversation being deleted
      * @param context - Request context with headers, etc.
      */
-    onBeforeDeleteConversation?: (conversationId: string, context: ChatApiContext) => Promise<boolean> | boolean;
+    onBeforeDeleteConversation?: (conversationId: string, context: ChatApiContext) => Promise<void> | void;
     /**
      * Called after the structural routeName/allowlist validation, with the list
      * of tool names that passed. Return a filtered subset to further restrict

package/dist/shared/{stack.C-Ptrz8s.d.ts → stack.Cj_zKww4.d.ts}

@@ -83,21 +83,21 @@ interface LoaderContext {
  */
 interface UIBuilderClientHooks {
     /**
-     * Called before loading the page list. Return false to cancel loading.
+     * Called before loading the page list. Throw an error to cancel loading.
      * @param context - Loader context with path, params, etc.
      */
-    beforeLoadPageList?: (context: LoaderContext) => Promise<boolean> | boolean;
+    beforeLoadPageList?: (context: LoaderContext) => Promise<void> | void;
     /**
      * Called after the page list is loaded.
      * @param context - Loader context
      */
     afterLoadPageList?: (context: LoaderContext) => Promise<void> | void;
     /**
-     * Called before loading the page builder. Return false to cancel loading.
+     * Called before loading the page builder. Throw an error to cancel loading.
      * @param pageId - The page ID (undefined for new pages)
      * @param context - Loader context
      */
-    beforeLoadPageBuilder?: (pageId: string | undefined, context: LoaderContext) => Promise<boolean> | boolean;
+    beforeLoadPageBuilder?: (pageId: string | undefined, context: LoaderContext) => Promise<void> | void;
     /**
      * Called after the page builder is loaded.
      * @param pageId - The page ID (undefined for new pages)

package/dist/shared/{stack.DWoCZff7.d.cts → stack.D-b5zbPm.d.cts}

@@ -24,49 +24,49 @@ interface ChatApiContext<TBody = any, TParams = any, TQuery = any> {
  */
 interface AiChatBackendHooks {
     /**
-     * Called before processing a chat message. Return false to deny access.
+     * Called before processing a chat message. Throw an error to deny access.
      * @param messages - Array of messages being sent
      * @param context - Request context with headers, etc.
      */
     onBeforeChat?: (messages: Array<{
         role: string;
         content: string;
-    }>, context: ChatApiContext) => Promise<boolean> | boolean;
+    }>, context: ChatApiContext) => Promise<void> | void;
     /**
-     * Called before listing conversations. Return false to deny access.
+     * Called before listing conversations. Throw an error to deny access.
      * @param context - Request context with headers, etc.
      */
-    onBeforeListConversations?: (context: ChatApiContext) => Promise<boolean> | boolean;
+    onBeforeListConversations?: (context: ChatApiContext) => Promise<void> | void;
     /**
-     * Called before getting a single conversation. Return false to deny access.
+     * Called before getting a single conversation. Throw an error to deny access.
      * @param conversationId - ID of the conversation being accessed
      * @param context - Request context with headers, etc.
      */
-    onBeforeGetConversation?: (conversationId: string, context: ChatApiContext) => Promise<boolean> | boolean;
+    onBeforeGetConversation?: (conversationId: string, context: ChatApiContext) => Promise<void> | void;
     /**
-     * Called before creating a conversation. Return false to deny access.
+     * Called before creating a conversation. Throw an error to deny access.
      * @param data - Conversation data being created
      * @param context - Request context with headers, etc.
      */
     onBeforeCreateConversation?: (data: {
         id?: string;
         title?: string;
-    }, context: ChatApiContext) => Promise<boolean> | boolean;
+    }, context: ChatApiContext) => Promise<void> | void;
     /**
-     * Called before updating a conversation. Return false to deny access.
+     * Called before updating a conversation. Throw an error to deny access.
      * @param conversationId - ID of the conversation being updated
      * @param data - Updated conversation data
      * @param context - Request context with headers, etc.
      */
     onBeforeUpdateConversation?: (conversationId: string, data: {
         title?: string;
-    }, context: ChatApiContext) => Promise<boolean> | boolean;
+    }, context: ChatApiContext) => Promise<void> | void;
     /**
-     * Called before deleting a conversation. Return false to deny access.
+     * Called before deleting a conversation. Throw an error to deny access.
      * @param conversationId - ID of the conversation being deleted
      * @param context - Request context with headers, etc.
      */
-    onBeforeDeleteConversation?: (conversationId: string, context: ChatApiContext) => Promise<boolean> | boolean;
+    onBeforeDeleteConversation?: (conversationId: string, context: ChatApiContext) => Promise<void> | void;
     /**
      * Called after the structural routeName/allowlist validation, with the list
      * of tool names that passed. Return a filtered subset to further restrict

package/dist/shared/{stack.CL8ts1Mu.d.ts → stack.DXnclTG7.d.ts}

@@ -113,30 +113,30 @@ interface BlogApiContext<TBody = any, TParams = any, TQuery = any> {
  */
 interface BlogBackendHooks {
     /**
-     * Called before listing posts. Return false to deny access.
+     * Called before listing posts. Throw an error to deny access.
      * @param filter - Query parameters for filtering posts
      * @param context - Request context with headers, etc.
      */
-    onBeforeListPosts?: (filter: z.infer<typeof PostListQuerySchema>, context: BlogApiContext) => Promise<boolean> | boolean;
+    onBeforeListPosts?: (filter: z.infer<typeof PostListQuerySchema>, context: BlogApiContext) => Promise<void> | void;
     /**
-     * Called before creating a post. Return false to deny access.
+     * Called before creating a post. Throw an error to deny access.
      * @param data - Post data being created
      * @param context - Request context with headers, etc.
      */
-    onBeforeCreatePost?: (data: z.infer<typeof createPostSchema>, context: BlogApiContext) => Promise<boolean> | boolean;
+    onBeforeCreatePost?: (data: z.infer<typeof createPostSchema>, context: BlogApiContext) => Promise<void> | void;
     /**
-     * Called before updating a post. Return false to deny access.
+     * Called before updating a post. Throw an error to deny access.
      * @param postId - ID of the post being updated
      * @param data - Updated post data
      * @param context - Request context with headers, etc.
      */
-    onBeforeUpdatePost?: (postId: string, data: z.infer<typeof updatePostSchema>, context: BlogApiContext) => Promise<boolean> | boolean;
+    onBeforeUpdatePost?: (postId: string, data: z.infer<typeof updatePostSchema>, context: BlogApiContext) => Promise<void> | void;
     /**
-     * Called before deleting a post. Return false to deny access.
+     * Called before deleting a post. Throw an error to deny access.
      * @param postId - ID of the post being deleted
      * @param context - Request context with headers, etc.
      */
-    onBeforeDeletePost?: (postId: string, context: BlogApiContext) => Promise<boolean> | boolean;
+    onBeforeDeletePost?: (postId: string, context: BlogApiContext) => Promise<void> | void;
     /**
      * Called after posts are read successfully
      * @param posts - The list of posts returned by the query

package/dist/shared/{stack.heOA9gzA.d.cts → stack.DaZM10cp.d.cts}

@@ -113,30 +113,30 @@ interface BlogApiContext<TBody = any, TParams = any, TQuery = any> {
  */
 interface BlogBackendHooks {
     /**
-     * Called before listing posts. Return false to deny access.
+     * Called before listing posts. Throw an error to deny access.
      * @param filter - Query parameters for filtering posts
      * @param context - Request context with headers, etc.
      */
-    onBeforeListPosts?: (filter: z.infer<typeof PostListQuerySchema>, context: BlogApiContext) => Promise<boolean> | boolean;
+    onBeforeListPosts?: (filter: z.infer<typeof PostListQuerySchema>, context: BlogApiContext) => Promise<void> | void;
     /**
-     * Called before creating a post. Return false to deny access.
+     * Called before creating a post. Throw an error to deny access.
      * @param data - Post data being created
      * @param context - Request context with headers, etc.
      */
-    onBeforeCreatePost?: (data: z.infer<typeof createPostSchema>, context: BlogApiContext) => Promise<boolean> | boolean;
+    onBeforeCreatePost?: (data: z.infer<typeof createPostSchema>, context: BlogApiContext) => Promise<void> | void;
     /**
-     * Called before updating a post. Return false to deny access.
+     * Called before updating a post. Throw an error to deny access.
      * @param postId - ID of the post being updated
      * @param data - Updated post data
      * @param context - Request context with headers, etc.
      */
-    onBeforeUpdatePost?: (postId: string, data: z.infer<typeof updatePostSchema>, context: BlogApiContext) => Promise<boolean> | boolean;
+    onBeforeUpdatePost?: (postId: string, data: z.infer<typeof updatePostSchema>, context: BlogApiContext) => Promise<void> | void;
     /**
-     * Called before deleting a post. Return false to deny access.
+     * Called before deleting a post. Throw an error to deny access.
      * @param postId - ID of the post being deleted
      * @param context - Request context with headers, etc.
      */
-    onBeforeDeletePost?: (postId: string, context: BlogApiContext) => Promise<boolean> | boolean;
+    onBeforeDeletePost?: (postId: string, context: BlogApiContext) => Promise<void> | void;
     /**
      * Called after posts are read successfully
      * @param posts - The list of posts returned by the query

package/dist/shared/{stack.CgWzG5jH.d.ts → stack.DgKOwl20.d.ts}

@@ -189,25 +189,25 @@ interface KanbanApiContext<TBody = unknown, TParams = unknown, TQuery = unknown>
  */
 interface KanbanBackendHooks {
     /**
-     * Called before listing boards. Return false to deny access.
+     * Called before listing boards. Throw an error to deny access.
      */
-    onBeforeListBoards?: (filter: z.infer<typeof BoardListQuerySchema>, context: KanbanApiContext) => Promise<boolean> | boolean;
+    onBeforeListBoards?: (filter: z.infer<typeof BoardListQuerySchema>, context: KanbanApiContext) => Promise<void> | void;
     /**
-     * Called before creating a board. Return false to deny access.
+     * Called before creating a board. Throw an error to deny access.
      */
-    onBeforeCreateBoard?: (data: z.infer<typeof createBoardSchema>, context: KanbanApiContext) => Promise<boolean> | boolean;
+    onBeforeCreateBoard?: (data: z.infer<typeof createBoardSchema>, context: KanbanApiContext) => Promise<void> | void;
     /**
-     * Called before reading a single board. Return false to deny access.
+     * Called before reading a single board. Throw an error to deny access.
      */
-    onBeforeReadBoard?: (boardId: string, context: KanbanApiContext) => Promise<boolean> | boolean;
+    onBeforeReadBoard?: (boardId: string, context: KanbanApiContext) => Promise<void> | void;
     /**
-     * Called before updating a board. Return false to deny access.
+     * Called before updating a board. Throw an error to deny access.
      */
-    onBeforeUpdateBoard?: (boardId: string, data: z.infer<typeof updateBoardSchema>, context: KanbanApiContext) => Promise<boolean> | boolean;
+    onBeforeUpdateBoard?: (boardId: string, data: z.infer<typeof updateBoardSchema>, context: KanbanApiContext) => Promise<void> | void;
     /**
-     * Called before deleting a board. Return false to deny access.
+     * Called before deleting a board. Throw an error to deny access.
      */
-    onBeforeDeleteBoard?: (boardId: string, context: KanbanApiContext) => Promise<boolean> | boolean;
+    onBeforeDeleteBoard?: (boardId: string, context: KanbanApiContext) => Promise<void> | void;
     /**
      * Called after boards are listed successfully.
      * Receives the items array (same shape as `board[]`) for consistency
@@ -251,17 +251,17 @@ interface KanbanBackendHooks {
      */
     onDeleteBoardError?: (error: Error, context: KanbanApiContext) => Promise<void> | void;
     /**
-     * Called before creating a column. Return false to deny access.
+     * Called before creating a column. Throw an error to deny access.
      */
-    onBeforeCreateColumn?: (data: z.infer<typeof createColumnSchema>, context: KanbanApiContext) => Promise<boolean> | boolean;
+    onBeforeCreateColumn?: (data: z.infer<typeof createColumnSchema>, context: KanbanApiContext) => Promise<void> | void;
     /**
-     * Called before updating a column. Return false to deny access.
+     * Called before updating a column. Throw an error to deny access.
      */
-    onBeforeUpdateColumn?: (columnId: string, data: z.infer<typeof updateColumnSchema>, context: KanbanApiContext) => Promise<boolean> | boolean;
+    onBeforeUpdateColumn?: (columnId: string, data: z.infer<typeof updateColumnSchema>, context: KanbanApiContext) => Promise<void> | void;
     /**
-     * Called before deleting a column. Return false to deny access.
+     * Called before deleting a column. Throw an error to deny access.
      */
-    onBeforeDeleteColumn?: (columnId: string, context: KanbanApiContext) => Promise<boolean> | boolean;
+    onBeforeDeleteColumn?: (columnId: string, context: KanbanApiContext) => Promise<void> | void;
     /**
      * Called after a column is created successfully
      */
@@ -275,17 +275,17 @@ interface KanbanBackendHooks {
      */
     onColumnDeleted?: (columnId: string, context: KanbanApiContext) => Promise<void> | void;
     /**
-     * Called before creating a task. Return false to deny access.
+     * Called before creating a task. Throw an error to deny access.
      */
-    onBeforeCreateTask?: (data: z.infer<typeof createTaskSchema>, context: KanbanApiContext) => Promise<boolean> | boolean;
+    onBeforeCreateTask?: (data: z.infer<typeof createTaskSchema>, context: KanbanApiContext) => Promise<void> | void;
     /**
-     * Called before updating a task. Return false to deny access.
+     * Called before updating a task. Throw an error to deny access.
      */
-    onBeforeUpdateTask?: (taskId: string, data: z.infer<typeof updateTaskSchema>, context: KanbanApiContext) => Promise<boolean> | boolean;
+    onBeforeUpdateTask?: (taskId: string, data: z.infer<typeof updateTaskSchema>, context: KanbanApiContext) => Promise<void> | void;
     /**
-     * Called before deleting a task. Return false to deny access.
+     * Called before deleting a task. Throw an error to deny access.
      */
-    onBeforeDeleteTask?: (taskId: string, context: KanbanApiContext) => Promise<boolean> | boolean;
+    onBeforeDeleteTask?: (taskId: string, context: KanbanApiContext) => Promise<void> | void;
     /**
      * Called after a task is created successfully
      */

package/dist/shared/{stack.DTDxgFj8.d.mts → stack.FVWf2JhZ.d.mts}

@@ -24,49 +24,49 @@ interface ChatApiContext<TBody = any, TParams = any, TQuery = any> {
  */
 interface AiChatBackendHooks {
     /**
-     * Called before processing a chat message. Return false to deny access.
+     * Called before processing a chat message. Throw an error to deny access.
      * @param messages - Array of messages being sent
      * @param context - Request context with headers, etc.
      */
     onBeforeChat?: (messages: Array<{
         role: string;
         content: string;
-    }>, context: ChatApiContext) => Promise<boolean> | boolean;
+    }>, context: ChatApiContext) => Promise<void> | void;
     /**
-     * Called before listing conversations. Return false to deny access.
+     * Called before listing conversations. Throw an error to deny access.
      * @param context - Request context with headers, etc.
      */
-    onBeforeListConversations?: (context: ChatApiContext) => Promise<boolean> | boolean;
+    onBeforeListConversations?: (context: ChatApiContext) => Promise<void> | void;
     /**
-     * Called before getting a single conversation. Return false to deny access.
+     * Called before getting a single conversation. Throw an error to deny access.
      * @param conversationId - ID of the conversation being accessed
      * @param context - Request context with headers, etc.
      */
-    onBeforeGetConversation?: (conversationId: string, context: ChatApiContext) => Promise<boolean> | boolean;
+    onBeforeGetConversation?: (conversationId: string, context: ChatApiContext) => Promise<void> | void;
     /**
-     * Called before creating a conversation. Return false to deny access.
+     * Called before creating a conversation. Throw an error to deny access.
      * @param data - Conversation data being created
      * @param context - Request context with headers, etc.
      */
     onBeforeCreateConversation?: (data: {
         id?: string;
         title?: string;
-    }, context: ChatApiContext) => Promise<boolean> | boolean;
+    }, context: ChatApiContext) => Promise<void> | void;
     /**
-     * Called before updating a conversation. Return false to deny access.
+     * Called before updating a conversation. Throw an error to deny access.
      * @param conversationId - ID of the conversation being updated
      * @param data - Updated conversation data
      * @param context - Request context with headers, etc.
      */
     onBeforeUpdateConversation?: (conversationId: string, data: {
         title?: string;
-    }, context: ChatApiContext) => Promise<boolean> | boolean;
+    }, context: ChatApiContext) => Promise<void> | void;
     /**
-     * Called before deleting a conversation. Return false to deny access.
+     * Called before deleting a conversation. Throw an error to deny access.
      * @param conversationId - ID of the conversation being deleted
      * @param context - Request context with headers, etc.
      */
-    onBeforeDeleteConversation?: (conversationId: string, context: ChatApiContext) => Promise<boolean> | boolean;
+    onBeforeDeleteConversation?: (conversationId: string, context: ChatApiContext) => Promise<void> | void;
     /**
      * Called after the structural routeName/allowlist validation, with the list
      * of tool names that passed. Return a filtered subset to further restrict

package/dist/shared/{stack.Dk5r4W1F.d.mts → stack.cfCkioTe.d.mts}

@@ -113,30 +113,30 @@ interface BlogApiContext<TBody = any, TParams = any, TQuery = any> {
  */
 interface BlogBackendHooks {
     /**
-     * Called before listing posts. Return false to deny access.
+     * Called before listing posts. Throw an error to deny access.
      * @param filter - Query parameters for filtering posts
      * @param context - Request context with headers, etc.
      */
-    onBeforeListPosts?: (filter: z.infer<typeof PostListQuerySchema>, context: BlogApiContext) => Promise<boolean> | boolean;
+    onBeforeListPosts?: (filter: z.infer<typeof PostListQuerySchema>, context: BlogApiContext) => Promise<void> | void;
     /**
-     * Called before creating a post. Return false to deny access.
+     * Called before creating a post. Throw an error to deny access.
      * @param data - Post data being created
      * @param context - Request context with headers, etc.
      */
-    onBeforeCreatePost?: (data: z.infer<typeof createPostSchema>, context: BlogApiContext) => Promise<boolean> | boolean;
+    onBeforeCreatePost?: (data: z.infer<typeof createPostSchema>, context: BlogApiContext) => Promise<void> | void;
     /**
-     * Called before updating a post. Return false to deny access.
+     * Called before updating a post. Throw an error to deny access.
      * @param postId - ID of the post being updated
      * @param data - Updated post data
      * @param context - Request context with headers, etc.
      */
-    onBeforeUpdatePost?: (postId: string, data: z.infer<typeof updatePostSchema>, context: BlogApiContext) => Promise<boolean> | boolean;
+    onBeforeUpdatePost?: (postId: string, data: z.infer<typeof updatePostSchema>, context: BlogApiContext) => Promise<void> | void;
     /**
-     * Called before deleting a post. Return false to deny access.
+     * Called before deleting a post. Throw an error to deny access.
      * @param postId - ID of the post being deleted
      * @param context - Request context with headers, etc.
      */
-    onBeforeDeletePost?: (postId: string, context: BlogApiContext) => Promise<boolean> | boolean;
+    onBeforeDeletePost?: (postId: string, context: BlogApiContext) => Promise<void> | void;
     /**
      * Called after posts are read successfully
      * @param posts - The list of posts returned by the query

package/dist/shared/{stack.6fUOjLs9.d.mts → stack.dH7u-TJH.d.mts}

@@ -83,21 +83,21 @@ interface LoaderContext {
  */
 interface UIBuilderClientHooks {
     /**
-     * Called before loading the page list. Return false to cancel loading.
+     * Called before loading the page list. Throw an error to cancel loading.
      * @param context - Loader context with path, params, etc.
      */
-    beforeLoadPageList?: (context: LoaderContext) => Promise<boolean> | boolean;
+    beforeLoadPageList?: (context: LoaderContext) => Promise<void> | void;
     /**
      * Called after the page list is loaded.
      * @param context - Loader context
      */
     afterLoadPageList?: (context: LoaderContext) => Promise<void> | void;
     /**
-     * Called before loading the page builder. Return false to cancel loading.
+     * Called before loading the page builder. Throw an error to cancel loading.
      * @param pageId - The page ID (undefined for new pages)
      * @param context - Loader context
      */
-    beforeLoadPageBuilder?: (pageId: string | undefined, context: LoaderContext) => Promise<boolean> | boolean;
+    beforeLoadPageBuilder?: (pageId: string | undefined, context: LoaderContext) => Promise<void> | void;
     /**
      * Called after the page builder is loaded.
      * @param pageId - The page ID (undefined for new pages)

package/dist/shared/{stack.DASmUVjX.d.ts → stack.sO33ZDhK.d.ts}

@@ -1,5 +1,5 @@
 import * as _btst_stack_plugins_api from '@btst/stack/plugins/api';
-import { a as SerializedContentItemWithType, S as SerializedContentType, b as ContentType, c as ContentItem, d as SerializedContentItem, e as ContentItemWithType, f as CMSBackendConfig, I as InverseRelation } from './stack.CVDTkMoO.js';
+import { a as SerializedContentItemWithType, S as SerializedContentType, b as ContentType, c as ContentItem, d as SerializedContentItem, e as ContentItemWithType, f as CMSBackendConfig, I as InverseRelation } from './stack.B8QD11QU.js';
 import * as better_call from 'better-call';
 import { z } from 'zod';
 import { Adapter } from '@btst/db';

package/dist/shared/{stack.D3GB6wKv.d.cts → stack.uWSqCWAb.d.cts}

@@ -189,25 +189,25 @@ interface KanbanApiContext<TBody = unknown, TParams = unknown, TQuery = unknown>
  */
 interface KanbanBackendHooks {
     /**
-     * Called before listing boards. Return false to deny access.
+     * Called before listing boards. Throw an error to deny access.
      */
-    onBeforeListBoards?: (filter: z.infer<typeof BoardListQuerySchema>, context: KanbanApiContext) => Promise<boolean> | boolean;
+    onBeforeListBoards?: (filter: z.infer<typeof BoardListQuerySchema>, context: KanbanApiContext) => Promise<void> | void;
     /**
-     * Called before creating a board. Return false to deny access.
+     * Called before creating a board. Throw an error to deny access.
      */
-    onBeforeCreateBoard?: (data: z.infer<typeof createBoardSchema>, context: KanbanApiContext) => Promise<boolean> | boolean;
+    onBeforeCreateBoard?: (data: z.infer<typeof createBoardSchema>, context: KanbanApiContext) => Promise<void> | void;
     /**
-     * Called before reading a single board. Return false to deny access.
+     * Called before reading a single board. Throw an error to deny access.
      */
-    onBeforeReadBoard?: (boardId: string, context: KanbanApiContext) => Promise<boolean> | boolean;
+    onBeforeReadBoard?: (boardId: string, context: KanbanApiContext) => Promise<void> | void;
     /**
-     * Called before updating a board. Return false to deny access.
+     * Called before updating a board. Throw an error to deny access.
      */
-    onBeforeUpdateBoard?: (boardId: string, data: z.infer<typeof updateBoardSchema>, context: KanbanApiContext) => Promise<boolean> | boolean;
+    onBeforeUpdateBoard?: (boardId: string, data: z.infer<typeof updateBoardSchema>, context: KanbanApiContext) => Promise<void> | void;
     /**
-     * Called before deleting a board. Return false to deny access.
+     * Called before deleting a board. Throw an error to deny access.
      */
-    onBeforeDeleteBoard?: (boardId: string, context: KanbanApiContext) => Promise<boolean> | boolean;
+    onBeforeDeleteBoard?: (boardId: string, context: KanbanApiContext) => Promise<void> | void;
     /**
      * Called after boards are listed successfully.
      * Receives the items array (same shape as `board[]`) for consistency
@@ -251,17 +251,17 @@ interface KanbanBackendHooks {
      */
     onDeleteBoardError?: (error: Error, context: KanbanApiContext) => Promise<void> | void;
     /**
-     * Called before creating a column. Return false to deny access.
+     * Called before creating a column. Throw an error to deny access.
      */
-    onBeforeCreateColumn?: (data: z.infer<typeof createColumnSchema>, context: KanbanApiContext) => Promise<boolean> | boolean;
+    onBeforeCreateColumn?: (data: z.infer<typeof createColumnSchema>, context: KanbanApiContext) => Promise<void> | void;
     /**
-     * Called before updating a column. Return false to deny access.
+     * Called before updating a column. Throw an error to deny access.
      */
-    onBeforeUpdateColumn?: (columnId: string, data: z.infer<typeof updateColumnSchema>, context: KanbanApiContext) => Promise<boolean> | boolean;
+    onBeforeUpdateColumn?: (columnId: string, data: z.infer<typeof updateColumnSchema>, context: KanbanApiContext) => Promise<void> | void;
     /**
-     * Called before deleting a column. Return false to deny access.
+     * Called before deleting a column. Throw an error to deny access.
      */
-    onBeforeDeleteColumn?: (columnId: string, context: KanbanApiContext) => Promise<boolean> | boolean;
+    onBeforeDeleteColumn?: (columnId: string, context: KanbanApiContext) => Promise<void> | void;
     /**
      * Called after a column is created successfully
      */
@@ -275,17 +275,17 @@ interface KanbanBackendHooks {
      */
     onColumnDeleted?: (columnId: string, context: KanbanApiContext) => Promise<void> | void;
     /**
-     * Called before creating a task. Return false to deny access.
+     * Called before creating a task. Throw an error to deny access.
      */
-    onBeforeCreateTask?: (data: z.infer<typeof createTaskSchema>, context: KanbanApiContext) => Promise<boolean> | boolean;
+    onBeforeCreateTask?: (data: z.infer<typeof createTaskSchema>, context: KanbanApiContext) => Promise<void> | void;
     /**
-     * Called before updating a task. Return false to deny access.
+     * Called before updating a task. Throw an error to deny access.
      */
-    onBeforeUpdateTask?: (taskId: string, data: z.infer<typeof updateTaskSchema>, context: KanbanApiContext) => Promise<boolean> | boolean;
+    onBeforeUpdateTask?: (taskId: string, data: z.infer<typeof updateTaskSchema>, context: KanbanApiContext) => Promise<void> | void;
     /**
-     * Called before deleting a task. Return false to deny access.
+     * Called before deleting a task. Throw an error to deny access.
      */
-    onBeforeDeleteTask?: (taskId: string, context: KanbanApiContext) => Promise<boolean> | boolean;
+    onBeforeDeleteTask?: (taskId: string, context: KanbanApiContext) => Promise<void> | void;
     /**
      * Called after a task is created successfully
      */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@btst/stack",
-  "version": "2.4.0",
+  "version": "2.5.1",
   "description": "A composable, plugin-based library for building full-stack applications.",
   "repository": {
     "type": "git",