@btst/stack 3.0.0-rc.2 → 3.0.0-rc.4

package/dist/plugins/comments/query-keys.d.mts

@@ -1,10 +1,14 @@
 import * as _btst_stack_plugins_client from '@btst/stack/plugins/client';
 import { createApiClient } from '@btst/stack/plugins/client';
-import { C as CommentsListDiscriminator, a as CommentCountDiscriminator, b as CommentsThreadDiscriminator, c as CommentsApiRouter } from '../../shared/stack.oBokjN_J.mjs';
-import { C as CommentListResult, S as SerializedComment } from '../../shared/stack.C3GBG8in.mjs';
+import { C as CommentsListDiscriminator, a as CommentCountDiscriminator, b as CommentsThreadDiscriminator, c as CommentsApiRouter } from '../../shared/stack.BMHoxAn7.mjs';
+import { C as CommentListResult, S as SerializedComment } from '../../shared/stack.COrJrztD.mjs';
 import '@btst/stack/plugins/api';
-import 'better-call';
+import '../../authorization/index.mjs';
 import 'zod';
+import 'zod/v4/core';
+import 'better-call';
+import '@btst/stack/authorization';
+import './permissions.mjs';
 
 interface CommentsListParams {
     resourceId?: string;
@@ -48,17 +52,16 @@ interface CreateCommentInput {
  * `api/query-key-defs.ts` so SSG/loader prefetch hydration keeps working.
  *
  * `currentUserId` is intentionally NOT sent to the server in any query.
- * The server resolves the caller's identity server-side via the
- * `resolveCurrentUserId` hook. Sending it would allow any caller to
- * impersonate another user and read their pending comments. It is still
- * included in the query keys for client-side cache segregation (different
- * users get different cache entries).
+ * The maintained operation resolves the caller's identity through the generic
+ * server auth adapter. Sending it would allow any caller to impersonate another
+ * user and read their pending comments. It is still included in the query keys
+ * for client-side cache segregation (different users get different cache
+ * entries).
  *
  * Mutations declare only the HTTP mapping (path/method/input/select).
  * Cache behavior (optimistic updates, invalidation) lives in the wrapper
- * hooks in `use-comments.tsx`: the public comments hooks take an explicit
- * client config — required by the embeddable `CommentThread` — so they
- * cannot use the overrides-bound `createResource` mutation hooks.
+ * hooks in `use-comments.tsx`; their transport and QueryClient come from the
+ * resolved `comments` runtime exposed by `StackProvider`.
  */
 declare const commentsResources: {
     comments: {
@@ -142,14 +145,11 @@ declare const commentsResources: {
                 method: "POST";
                 input: (vars: {
                     commentId: string;
-                    authorId: string;
                 }) => {
                     params: {
                         id: string;
                     };
-                    body: {
-                        authorId: string;
-                    };
+                    body: {};
                 };
                 select: (data: any) => {
                     likes: number;
@@ -273,14 +273,11 @@ declare function createCommentsQueryKeys(client: ReturnType<typeof createApiClie
                 method: "POST";
                 input: (vars: {
                     commentId: string;
-                    authorId: string;
                 }) => {
                     params: {
                         id: string;
                     };
-                    body: {
-                        authorId: string;
-                    };
+                    body: {};
                 };
                 select: (data: any) => {
                     likes: number;

package/dist/plugins/comments/query-keys.d.ts

@@ -1,10 +1,14 @@
 import * as _btst_stack_plugins_client from '@btst/stack/plugins/client';
 import { createApiClient } from '@btst/stack/plugins/client';
-import { C as CommentsListDiscriminator, a as CommentCountDiscriminator, b as CommentsThreadDiscriminator, c as CommentsApiRouter } from '../../shared/stack.C1ATQ3pd.js';
-import { C as CommentListResult, S as SerializedComment } from '../../shared/stack.C3GBG8in.js';
+import { C as CommentsListDiscriminator, a as CommentCountDiscriminator, b as CommentsThreadDiscriminator, c as CommentsApiRouter } from '../../shared/stack.Bt8hfw9o.js';
+import { C as CommentListResult, S as SerializedComment } from '../../shared/stack.COrJrztD.js';
 import '@btst/stack/plugins/api';
-import 'better-call';
+import '../../authorization/index.js';
 import 'zod';
+import 'zod/v4/core';
+import 'better-call';
+import '@btst/stack/authorization';
+import './permissions.js';
 
 interface CommentsListParams {
     resourceId?: string;
@@ -48,17 +52,16 @@ interface CreateCommentInput {
  * `api/query-key-defs.ts` so SSG/loader prefetch hydration keeps working.
  *
  * `currentUserId` is intentionally NOT sent to the server in any query.
- * The server resolves the caller's identity server-side via the
- * `resolveCurrentUserId` hook. Sending it would allow any caller to
- * impersonate another user and read their pending comments. It is still
- * included in the query keys for client-side cache segregation (different
- * users get different cache entries).
+ * The maintained operation resolves the caller's identity through the generic
+ * server auth adapter. Sending it would allow any caller to impersonate another
+ * user and read their pending comments. It is still included in the query keys
+ * for client-side cache segregation (different users get different cache
+ * entries).
  *
  * Mutations declare only the HTTP mapping (path/method/input/select).
  * Cache behavior (optimistic updates, invalidation) lives in the wrapper
- * hooks in `use-comments.tsx`: the public comments hooks take an explicit
- * client config — required by the embeddable `CommentThread` — so they
- * cannot use the overrides-bound `createResource` mutation hooks.
+ * hooks in `use-comments.tsx`; their transport and QueryClient come from the
+ * resolved `comments` runtime exposed by `StackProvider`.
  */
 declare const commentsResources: {
     comments: {
@@ -142,14 +145,11 @@ declare const commentsResources: {
                 method: "POST";
                 input: (vars: {
                     commentId: string;
-                    authorId: string;
                 }) => {
                     params: {
                         id: string;
                     };
-                    body: {
-                        authorId: string;
-                    };
+                    body: {};
                 };
                 select: (data: any) => {
                     likes: number;
@@ -273,14 +273,11 @@ declare function createCommentsQueryKeys(client: ReturnType<typeof createApiClie
                 method: "POST";
                 input: (vars: {
                     commentId: string;
-                    authorId: string;
                 }) => {
                     params: {
                         id: string;
                     };
-                    body: {
-                        authorId: string;
-                    };
+                    body: {};
                 };
                 select: (data: any) => {
                     likes: number;

package/dist/plugins/comments/query-keys.mjs

@@ -65,7 +65,7 @@ const commentsResources = {
         method: "POST",
         input: (vars) => ({
           params: { id: vars.commentId },
-          body: { authorId: vars.authorId }
+          body: {}
         }),
         select: (data) => data
       }

package/dist/plugins/form-builder/api/index.cjs

@@ -1,17 +1,25 @@
 'use strict';
 
 const plugin = require('../../../packages/stack/src/plugins/form-builder/api/plugin.cjs');
+const lifecycleMigrations = require('../../../packages/stack/src/plugins/form-builder/api/lifecycle-migrations.cjs');
+const operations = require('../../../packages/stack/src/plugins/form-builder/api/operations.cjs');
+const plugins_formBuilder_permissions = require('../permissions.cjs');
 const getters = require('../../../packages/stack/src/plugins/form-builder/api/getters.cjs');
 const queryKeyDefs = require('../../../packages/stack/src/plugins/form-builder/api/query-key-defs.cjs');
 
 
 
 exports.formBuilderBackendPlugin = plugin.formBuilderBackendPlugin;
+exports.FORM_BUILDER_LIFECYCLE_HOOK_MIGRATIONS = lifecycleMigrations.FORM_BUILDER_LIFECYCLE_HOOK_MIGRATIONS;
+exports.FormBuilderOperationError = operations.FormBuilderOperationError;
+exports.createFormBuilderOperations = operations.createFormBuilderOperations;
+exports.formBuilderPermissions = plugins_formBuilder_permissions.formBuilderPermissions;
 exports.getAllForms = getters.getAllForms;
 exports.getFormById = getters.getFormById;
 exports.getFormBySlug = getters.getFormBySlug;
 exports.getFormSubmissions = getters.getFormSubmissions;
 exports.serializeForm = getters.serializeForm;
 exports.serializeFormSubmission = getters.serializeFormSubmission;
+exports.serializeFormSubmissionSummary = getters.serializeFormSubmissionSummary;
 exports.serializeFormSubmissionWithData = getters.serializeFormSubmissionWithData;
 exports.FORM_QUERY_KEYS = queryKeyDefs.FORM_QUERY_KEYS;

package/dist/plugins/form-builder/api/index.d.cts

@@ -1,7 +1,118 @@
-export { j as FORM_QUERY_KEYS, a as FormBuilderApiRouter, b as FormBuilderRouteKey, f as formBuilderBackendPlugin, g as getAllForms, c as getFormById, d as getFormBySlug, e as getFormSubmissions, s as serializeForm, h as serializeFormSubmission, i as serializeFormSubmissionWithData } from '../../../shared/stack.B8vdOMnQ.cjs';
+export { k as FORM_QUERY_KEYS, a as FormBuilderApiRouter, c as FormBuilderOperationError, e as FormBuilderOperations, b as FormBuilderRouteKey, g as FormListOperationResult, h as SubmissionDetailOperationResult, i as SubmissionListOperationResult, j as SubmitOperationResult, d as createFormBuilderOperations, f as formBuilderBackendPlugin } from '../../../shared/stack.zch70Loj.cjs';
+export { formBuilderPermissions } from '../permissions.cjs';
+import { S as SerializedForm, d as SerializedFormSubmissionWithData, F as Form, f as FormSubmission, a as SerializedFormSubmission, c as SerializedFormSubmissionSummary, g as FormSubmissionWithForm } from '../../../shared/stack.v2O65JqF.cjs';
+export { h as FormBuilderBackendConfig, i as FormBuilderBackendHooks, j as FormBuilderHookContext, k as FormBuilderOperationHookContext, l as FormCreateOperationContext, m as FormDeleteOperationContext, o as FormGetForUpdateOperationContext, n as FormGetOperationContext, p as FormListOperationContext, q as FormUpdateOperationContext, r as SubmissionCreateOperationContext, s as SubmissionDeleteOperationContext, t as SubmissionGetOperationContext, v as SubmissionHookContext, b as SubmissionListFormContext, u as SubmissionListOperationContext } from '../../../shared/stack.v2O65JqF.cjs';
+import { DBAdapter } from '@btst/db';
 import '@btst/stack/plugins/api';
-import '../../../shared/stack.BozPgbrZ.cjs';
-import 'better-call';
 import 'zod';
-import '@btst/db';
+import 'zod/v4/core';
+import 'better-call';
 import '@tanstack/react-query';
+import '@btst/stack/authorization';
+import '@btst/stack/context';
+
+/**
+ * Removed Form Builder lifecycle names and their canonical v3 replacements.
+ *
+ * Submission receipt keeps its domain vocabulary. Names absent from this map
+ * did not change.
+ */
+declare const FORM_BUILDER_LIFECYCLE_HOOK_MIGRATIONS: Readonly<{
+    readonly onBeforeFormCreated: "onBeforeCreateForm";
+    readonly onAfterFormCreated: "onAfterCreateForm";
+    readonly onBeforeFormUpdated: "onBeforeUpdateForm";
+    readonly onAfterFormUpdated: "onAfterUpdateForm";
+    readonly onBeforeFormDeleted: "onBeforeDeleteForm";
+    readonly onAfterFormDeleted: "onAfterDeleteForm";
+    readonly onSubmissionError: "onErrorSubmission";
+    readonly onBeforeSubmissionDeleted: "onBeforeDeleteSubmission";
+    readonly onAfterSubmissionDeleted: "onAfterDeleteSubmission";
+}>;
+
+/**
+ * Serialize a Form for SSR/SSG use (convert dates to strings).
+ */
+declare function serializeForm(form: Form): SerializedForm;
+/**
+ * Serialize a FormSubmission for SSR/SSG use (convert dates to strings).
+ */
+declare function serializeFormSubmission(submission: FormSubmission): SerializedFormSubmission;
+/** Strip a submission down to browser-safe collection metadata. */
+declare function serializeFormSubmissionSummary(submission: FormSubmission | SerializedFormSubmission): SerializedFormSubmissionSummary;
+/**
+ * Serialize a FormSubmission with parsed data and joined Form.
+ * If `submission.data` is corrupted JSON, `parsedData` is set to `null` rather
+ * than throwing, so one bad row cannot crash the entire list or SSG build.
+ */
+declare function serializeFormSubmissionWithData(submission: FormSubmissionWithForm): SerializedFormSubmissionWithData;
+/**
+ * Retrieve all forms with optional status filter, pagination, and free-text
+ * search.
+ * Pure DB function — no hooks, no HTTP context. Safe for SSG and server-side use.
+ *
+ * @remarks **Security:** Operation authorization and lifecycle hooks are NOT
+ * called. The caller is responsible for any access-control checks before
+ * invoking this function.
+ *
+ * @param adapter - The database adapter
+ * @param params - Optional filter/pagination parameters. `search` matches
+ * case-insensitively against form names and slugs.
+ */
+declare function getAllForms(adapter: DBAdapter, params?: {
+    status?: string;
+    limit?: number;
+    offset?: number;
+    search?: string;
+}): Promise<{
+    items: SerializedForm[];
+    total: number;
+    limit?: number;
+    offset?: number;
+}>;
+/**
+ * Retrieve a single form by its ID (UUID).
+ * Returns null if the form is not found.
+ * Pure DB function — no hooks, no HTTP context. Safe for SSG and server-side use.
+ *
+ * @remarks **Security:** Operation authorization and lifecycle hooks are NOT called. The caller is
+ * responsible for any access-control checks before invoking this function.
+ *
+ * @param adapter - The database adapter
+ * @param id - The form UUID
+ */
+declare function getFormById(adapter: DBAdapter, id: string): Promise<SerializedForm | null>;
+/**
+ * Retrieve a single form by its slug.
+ * Returns null if the form is not found.
+ * Pure DB function — no hooks, no HTTP context. Safe for SSG and server-side use.
+ *
+ * @remarks **Security:** Operation authorization and lifecycle hooks are NOT called. The caller is
+ * responsible for any access-control checks before invoking this function.
+ *
+ * @param adapter - The database adapter
+ * @param slug - The form slug
+ */
+declare function getFormBySlug(adapter: DBAdapter, slug: string): Promise<SerializedForm | null>;
+/**
+ * Retrieve submissions for a form by form ID, with optional pagination.
+ * Returns an empty result if the form does not exist.
+ * Pure DB function — no hooks, no HTTP context. Safe for server-side use.
+ *
+ * @remarks **Security:** Operation authorization and lifecycle hooks are NOT called. The caller is
+ * responsible for any access-control checks before invoking this function.
+ *
+ * @param adapter - The database adapter
+ * @param formId - The form ID
+ * @param params - Optional pagination parameters
+ */
+declare function getFormSubmissions(adapter: Pick<DBAdapter, "findOne" | "findMany" | "count">, formId: string, params?: {
+    limit?: number;
+    offset?: number;
+}): Promise<{
+    items: SerializedFormSubmissionWithData[];
+    total: number;
+    limit?: number;
+    offset?: number;
+}>;
+
+export { FORM_BUILDER_LIFECYCLE_HOOK_MIGRATIONS, SerializedFormSubmissionSummary, getAllForms, getFormById, getFormBySlug, getFormSubmissions, serializeForm, serializeFormSubmission, serializeFormSubmissionSummary, serializeFormSubmissionWithData };

package/dist/plugins/form-builder/api/index.d.mts

@@ -1,7 +1,118 @@
-export { j as FORM_QUERY_KEYS, a as FormBuilderApiRouter, b as FormBuilderRouteKey, f as formBuilderBackendPlugin, g as getAllForms, c as getFormById, d as getFormBySlug, e as getFormSubmissions, s as serializeForm, h as serializeFormSubmission, i as serializeFormSubmissionWithData } from '../../../shared/stack.DHTvwoNG.mjs';
+export { k as FORM_QUERY_KEYS, a as FormBuilderApiRouter, c as FormBuilderOperationError, e as FormBuilderOperations, b as FormBuilderRouteKey, g as FormListOperationResult, h as SubmissionDetailOperationResult, i as SubmissionListOperationResult, j as SubmitOperationResult, d as createFormBuilderOperations, f as formBuilderBackendPlugin } from '../../../shared/stack.Doy2_wgl.mjs';
+export { formBuilderPermissions } from '../permissions.mjs';
+import { S as SerializedForm, d as SerializedFormSubmissionWithData, F as Form, f as FormSubmission, a as SerializedFormSubmission, c as SerializedFormSubmissionSummary, g as FormSubmissionWithForm } from '../../../shared/stack.OYT8WU4n.mjs';
+export { h as FormBuilderBackendConfig, i as FormBuilderBackendHooks, j as FormBuilderHookContext, k as FormBuilderOperationHookContext, l as FormCreateOperationContext, m as FormDeleteOperationContext, o as FormGetForUpdateOperationContext, n as FormGetOperationContext, p as FormListOperationContext, q as FormUpdateOperationContext, r as SubmissionCreateOperationContext, s as SubmissionDeleteOperationContext, t as SubmissionGetOperationContext, v as SubmissionHookContext, b as SubmissionListFormContext, u as SubmissionListOperationContext } from '../../../shared/stack.OYT8WU4n.mjs';
+import { DBAdapter } from '@btst/db';
 import '@btst/stack/plugins/api';
-import '../../../shared/stack.BozPgbrZ.mjs';
-import 'better-call';
 import 'zod';
-import '@btst/db';
+import 'zod/v4/core';
+import 'better-call';
 import '@tanstack/react-query';
+import '@btst/stack/authorization';
+import '@btst/stack/context';
+
+/**
+ * Removed Form Builder lifecycle names and their canonical v3 replacements.
+ *
+ * Submission receipt keeps its domain vocabulary. Names absent from this map
+ * did not change.
+ */
+declare const FORM_BUILDER_LIFECYCLE_HOOK_MIGRATIONS: Readonly<{
+    readonly onBeforeFormCreated: "onBeforeCreateForm";
+    readonly onAfterFormCreated: "onAfterCreateForm";
+    readonly onBeforeFormUpdated: "onBeforeUpdateForm";
+    readonly onAfterFormUpdated: "onAfterUpdateForm";
+    readonly onBeforeFormDeleted: "onBeforeDeleteForm";
+    readonly onAfterFormDeleted: "onAfterDeleteForm";
+    readonly onSubmissionError: "onErrorSubmission";
+    readonly onBeforeSubmissionDeleted: "onBeforeDeleteSubmission";
+    readonly onAfterSubmissionDeleted: "onAfterDeleteSubmission";
+}>;
+
+/**
+ * Serialize a Form for SSR/SSG use (convert dates to strings).
+ */
+declare function serializeForm(form: Form): SerializedForm;
+/**
+ * Serialize a FormSubmission for SSR/SSG use (convert dates to strings).
+ */
+declare function serializeFormSubmission(submission: FormSubmission): SerializedFormSubmission;
+/** Strip a submission down to browser-safe collection metadata. */
+declare function serializeFormSubmissionSummary(submission: FormSubmission | SerializedFormSubmission): SerializedFormSubmissionSummary;
+/**
+ * Serialize a FormSubmission with parsed data and joined Form.
+ * If `submission.data` is corrupted JSON, `parsedData` is set to `null` rather
+ * than throwing, so one bad row cannot crash the entire list or SSG build.
+ */
+declare function serializeFormSubmissionWithData(submission: FormSubmissionWithForm): SerializedFormSubmissionWithData;
+/**
+ * Retrieve all forms with optional status filter, pagination, and free-text
+ * search.
+ * Pure DB function — no hooks, no HTTP context. Safe for SSG and server-side use.
+ *
+ * @remarks **Security:** Operation authorization and lifecycle hooks are NOT
+ * called. The caller is responsible for any access-control checks before
+ * invoking this function.
+ *
+ * @param adapter - The database adapter
+ * @param params - Optional filter/pagination parameters. `search` matches
+ * case-insensitively against form names and slugs.
+ */
+declare function getAllForms(adapter: DBAdapter, params?: {
+    status?: string;
+    limit?: number;
+    offset?: number;
+    search?: string;
+}): Promise<{
+    items: SerializedForm[];
+    total: number;
+    limit?: number;
+    offset?: number;
+}>;
+/**
+ * Retrieve a single form by its ID (UUID).
+ * Returns null if the form is not found.
+ * Pure DB function — no hooks, no HTTP context. Safe for SSG and server-side use.
+ *
+ * @remarks **Security:** Operation authorization and lifecycle hooks are NOT called. The caller is
+ * responsible for any access-control checks before invoking this function.
+ *
+ * @param adapter - The database adapter
+ * @param id - The form UUID
+ */
+declare function getFormById(adapter: DBAdapter, id: string): Promise<SerializedForm | null>;
+/**
+ * Retrieve a single form by its slug.
+ * Returns null if the form is not found.
+ * Pure DB function — no hooks, no HTTP context. Safe for SSG and server-side use.
+ *
+ * @remarks **Security:** Operation authorization and lifecycle hooks are NOT called. The caller is
+ * responsible for any access-control checks before invoking this function.
+ *
+ * @param adapter - The database adapter
+ * @param slug - The form slug
+ */
+declare function getFormBySlug(adapter: DBAdapter, slug: string): Promise<SerializedForm | null>;
+/**
+ * Retrieve submissions for a form by form ID, with optional pagination.
+ * Returns an empty result if the form does not exist.
+ * Pure DB function — no hooks, no HTTP context. Safe for server-side use.
+ *
+ * @remarks **Security:** Operation authorization and lifecycle hooks are NOT called. The caller is
+ * responsible for any access-control checks before invoking this function.
+ *
+ * @param adapter - The database adapter
+ * @param formId - The form ID
+ * @param params - Optional pagination parameters
+ */
+declare function getFormSubmissions(adapter: Pick<DBAdapter, "findOne" | "findMany" | "count">, formId: string, params?: {
+    limit?: number;
+    offset?: number;
+}): Promise<{
+    items: SerializedFormSubmissionWithData[];
+    total: number;
+    limit?: number;
+    offset?: number;
+}>;
+
+export { FORM_BUILDER_LIFECYCLE_HOOK_MIGRATIONS, SerializedFormSubmissionSummary, getAllForms, getFormById, getFormBySlug, getFormSubmissions, serializeForm, serializeFormSubmission, serializeFormSubmissionSummary, serializeFormSubmissionWithData };

package/dist/plugins/form-builder/api/index.d.ts

@@ -1,7 +1,118 @@
-export { j as FORM_QUERY_KEYS, a as FormBuilderApiRouter, b as FormBuilderRouteKey, f as formBuilderBackendPlugin, g as getAllForms, c as getFormById, d as getFormBySlug, e as getFormSubmissions, s as serializeForm, h as serializeFormSubmission, i as serializeFormSubmissionWithData } from '../../../shared/stack.Cf-DbL1A.js';
+export { k as FORM_QUERY_KEYS, a as FormBuilderApiRouter, c as FormBuilderOperationError, e as FormBuilderOperations, b as FormBuilderRouteKey, g as FormListOperationResult, h as SubmissionDetailOperationResult, i as SubmissionListOperationResult, j as SubmitOperationResult, d as createFormBuilderOperations, f as formBuilderBackendPlugin } from '../../../shared/stack.CGmh-Lpe.js';
+export { formBuilderPermissions } from '../permissions.js';
+import { S as SerializedForm, d as SerializedFormSubmissionWithData, F as Form, f as FormSubmission, a as SerializedFormSubmission, c as SerializedFormSubmissionSummary, g as FormSubmissionWithForm } from '../../../shared/stack.C3bU9w6L.js';
+export { h as FormBuilderBackendConfig, i as FormBuilderBackendHooks, j as FormBuilderHookContext, k as FormBuilderOperationHookContext, l as FormCreateOperationContext, m as FormDeleteOperationContext, o as FormGetForUpdateOperationContext, n as FormGetOperationContext, p as FormListOperationContext, q as FormUpdateOperationContext, r as SubmissionCreateOperationContext, s as SubmissionDeleteOperationContext, t as SubmissionGetOperationContext, v as SubmissionHookContext, b as SubmissionListFormContext, u as SubmissionListOperationContext } from '../../../shared/stack.C3bU9w6L.js';
+import { DBAdapter } from '@btst/db';
 import '@btst/stack/plugins/api';
-import '../../../shared/stack.BozPgbrZ.js';
-import 'better-call';
 import 'zod';
-import '@btst/db';
+import 'zod/v4/core';
+import 'better-call';
 import '@tanstack/react-query';
+import '@btst/stack/authorization';
+import '@btst/stack/context';
+
+/**
+ * Removed Form Builder lifecycle names and their canonical v3 replacements.
+ *
+ * Submission receipt keeps its domain vocabulary. Names absent from this map
+ * did not change.
+ */
+declare const FORM_BUILDER_LIFECYCLE_HOOK_MIGRATIONS: Readonly<{
+    readonly onBeforeFormCreated: "onBeforeCreateForm";
+    readonly onAfterFormCreated: "onAfterCreateForm";
+    readonly onBeforeFormUpdated: "onBeforeUpdateForm";
+    readonly onAfterFormUpdated: "onAfterUpdateForm";
+    readonly onBeforeFormDeleted: "onBeforeDeleteForm";
+    readonly onAfterFormDeleted: "onAfterDeleteForm";
+    readonly onSubmissionError: "onErrorSubmission";
+    readonly onBeforeSubmissionDeleted: "onBeforeDeleteSubmission";
+    readonly onAfterSubmissionDeleted: "onAfterDeleteSubmission";
+}>;
+
+/**
+ * Serialize a Form for SSR/SSG use (convert dates to strings).
+ */
+declare function serializeForm(form: Form): SerializedForm;
+/**
+ * Serialize a FormSubmission for SSR/SSG use (convert dates to strings).
+ */
+declare function serializeFormSubmission(submission: FormSubmission): SerializedFormSubmission;
+/** Strip a submission down to browser-safe collection metadata. */
+declare function serializeFormSubmissionSummary(submission: FormSubmission | SerializedFormSubmission): SerializedFormSubmissionSummary;
+/**
+ * Serialize a FormSubmission with parsed data and joined Form.
+ * If `submission.data` is corrupted JSON, `parsedData` is set to `null` rather
+ * than throwing, so one bad row cannot crash the entire list or SSG build.
+ */
+declare function serializeFormSubmissionWithData(submission: FormSubmissionWithForm): SerializedFormSubmissionWithData;
+/**
+ * Retrieve all forms with optional status filter, pagination, and free-text
+ * search.
+ * Pure DB function — no hooks, no HTTP context. Safe for SSG and server-side use.
+ *
+ * @remarks **Security:** Operation authorization and lifecycle hooks are NOT
+ * called. The caller is responsible for any access-control checks before
+ * invoking this function.
+ *
+ * @param adapter - The database adapter
+ * @param params - Optional filter/pagination parameters. `search` matches
+ * case-insensitively against form names and slugs.
+ */
+declare function getAllForms(adapter: DBAdapter, params?: {
+    status?: string;
+    limit?: number;
+    offset?: number;
+    search?: string;
+}): Promise<{
+    items: SerializedForm[];
+    total: number;
+    limit?: number;
+    offset?: number;
+}>;
+/**
+ * Retrieve a single form by its ID (UUID).
+ * Returns null if the form is not found.
+ * Pure DB function — no hooks, no HTTP context. Safe for SSG and server-side use.
+ *
+ * @remarks **Security:** Operation authorization and lifecycle hooks are NOT called. The caller is
+ * responsible for any access-control checks before invoking this function.
+ *
+ * @param adapter - The database adapter
+ * @param id - The form UUID
+ */
+declare function getFormById(adapter: DBAdapter, id: string): Promise<SerializedForm | null>;
+/**
+ * Retrieve a single form by its slug.
+ * Returns null if the form is not found.
+ * Pure DB function — no hooks, no HTTP context. Safe for SSG and server-side use.
+ *
+ * @remarks **Security:** Operation authorization and lifecycle hooks are NOT called. The caller is
+ * responsible for any access-control checks before invoking this function.
+ *
+ * @param adapter - The database adapter
+ * @param slug - The form slug
+ */
+declare function getFormBySlug(adapter: DBAdapter, slug: string): Promise<SerializedForm | null>;
+/**
+ * Retrieve submissions for a form by form ID, with optional pagination.
+ * Returns an empty result if the form does not exist.
+ * Pure DB function — no hooks, no HTTP context. Safe for server-side use.
+ *
+ * @remarks **Security:** Operation authorization and lifecycle hooks are NOT called. The caller is
+ * responsible for any access-control checks before invoking this function.
+ *
+ * @param adapter - The database adapter
+ * @param formId - The form ID
+ * @param params - Optional pagination parameters
+ */
+declare function getFormSubmissions(adapter: Pick<DBAdapter, "findOne" | "findMany" | "count">, formId: string, params?: {
+    limit?: number;
+    offset?: number;
+}): Promise<{
+    items: SerializedFormSubmissionWithData[];
+    total: number;
+    limit?: number;
+    offset?: number;
+}>;
+
+export { FORM_BUILDER_LIFECYCLE_HOOK_MIGRATIONS, SerializedFormSubmissionSummary, getAllForms, getFormById, getFormBySlug, getFormSubmissions, serializeForm, serializeFormSubmission, serializeFormSubmissionSummary, serializeFormSubmissionWithData };

package/dist/plugins/form-builder/api/index.mjs

@@ -1,3 +1,6 @@
 export { formBuilderBackendPlugin } from '../../../packages/stack/src/plugins/form-builder/api/plugin.mjs';
-export { getAllForms, getFormById, getFormBySlug, getFormSubmissions, serializeForm, serializeFormSubmission, serializeFormSubmissionWithData } from '../../../packages/stack/src/plugins/form-builder/api/getters.mjs';
+export { FORM_BUILDER_LIFECYCLE_HOOK_MIGRATIONS } from '../../../packages/stack/src/plugins/form-builder/api/lifecycle-migrations.mjs';
+export { FormBuilderOperationError, createFormBuilderOperations } from '../../../packages/stack/src/plugins/form-builder/api/operations.mjs';
+export { formBuilderPermissions } from '../permissions.mjs';
+export { getAllForms, getFormById, getFormBySlug, getFormSubmissions, serializeForm, serializeFormSubmission, serializeFormSubmissionSummary, serializeFormSubmissionWithData } from '../../../packages/stack/src/plugins/form-builder/api/getters.mjs';
 export { FORM_QUERY_KEYS } from '../../../packages/stack/src/plugins/form-builder/api/query-key-defs.mjs';

package/dist/plugins/form-builder/client/components/index.d.cts

@@ -1,10 +1,14 @@
 import { F as FormListPageComponent } from '../../../../shared/stack.Db7crl9u.cjs';
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { ComponentType } from 'react';
-import { A as AutoFormInputComponentProps } from '../../../../shared/stack.CPsYC2-Z.cjs';
-import { a as SerializedFormSubmission } from '../../../../shared/stack.BozPgbrZ.cjs';
+import { A as AutoFormInputComponentProps } from '../../../../shared/stack.fdi94T4S.cjs';
+import { a as SerializedFormSubmission } from '../../../../shared/stack.v2O65JqF.cjs';
 import 'react-hook-form';
 import 'zod';
+import '@btst/stack/plugins/api';
+import '@btst/stack/authorization';
+import '@btst/stack/context';
+import '../../permissions.cjs';
 
 interface FormBuilderPageProps {
     id?: string;

package/dist/plugins/form-builder/client/components/index.d.mts

@@ -1,10 +1,14 @@
 import { F as FormListPageComponent } from '../../../../shared/stack.Db7crl9u.mjs';
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { ComponentType } from 'react';
-import { A as AutoFormInputComponentProps } from '../../../../shared/stack.CPsYC2-Z.mjs';
-import { a as SerializedFormSubmission } from '../../../../shared/stack.BozPgbrZ.mjs';
+import { A as AutoFormInputComponentProps } from '../../../../shared/stack.fdi94T4S.mjs';
+import { a as SerializedFormSubmission } from '../../../../shared/stack.OYT8WU4n.mjs';
 import 'react-hook-form';
 import 'zod';
+import '@btst/stack/plugins/api';
+import '@btst/stack/authorization';
+import '@btst/stack/context';
+import '../../permissions.mjs';
 
 interface FormBuilderPageProps {
     id?: string;

package/dist/plugins/form-builder/client/components/index.d.ts

@@ -1,10 +1,14 @@
 import { F as FormListPageComponent } from '../../../../shared/stack.Db7crl9u.js';
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { ComponentType } from 'react';
-import { A as AutoFormInputComponentProps } from '../../../../shared/stack.CPsYC2-Z.js';
-import { a as SerializedFormSubmission } from '../../../../shared/stack.BozPgbrZ.js';
+import { A as AutoFormInputComponentProps } from '../../../../shared/stack.fdi94T4S.js';
+import { a as SerializedFormSubmission } from '../../../../shared/stack.C3bU9w6L.js';
 import 'react-hook-form';
 import 'zod';
+import '@btst/stack/plugins/api';
+import '@btst/stack/authorization';
+import '@btst/stack/context';
+import '../../permissions.js';
 
 interface FormBuilderPageProps {
     id?: string;

package/dist/plugins/form-builder/client/hooks/index.cjs

@@ -11,10 +11,12 @@ exports.useFormBuilderForm = formBuilderHooks.useFormBuilderForm;
 exports.useFormById = formBuilderHooks.useFormById;
 exports.useFormBySlug = formBuilderHooks.useFormBySlug;
 exports.useForms = formBuilderHooks.useForms;
+exports.useSubmission = formBuilderHooks.useSubmission;
 exports.useSubmissions = formBuilderHooks.useSubmissions;
 exports.useSubmitForm = formBuilderHooks.useSubmitForm;
 exports.useSuspenseFormById = formBuilderHooks.useSuspenseFormById;
 exports.useSuspenseFormBySlug = formBuilderHooks.useSuspenseFormBySlug;
+exports.useSuspenseFormForUpdate = formBuilderHooks.useSuspenseFormForUpdate;
 exports.useSuspenseForms = formBuilderHooks.useSuspenseForms;
 exports.useSuspenseSubmissions = formBuilderHooks.useSuspenseSubmissions;
 exports.useUpdateForm = formBuilderHooks.useUpdateForm;