@vantreeseba/drizzle-graphql 7.5.0 → 7.6.0

package/dist/index.cjs

@@ -1144,7 +1144,7 @@ var batchedPaginatedRelationQuery = async (db, targetTable, foreignCol, whereCon
   }
   return rows;
 };
-var createRelationResolverFactory = (db, tables, nullOrdering, filterCtx, limits) => ({ tableName, relationName, relEntry, isOne }) => {
+var createRelationResolverFactory = (db, tables, nullOrdering, filterCtx, limits, scopes) => ({ tableName, relationName, relEntry, isOne }) => {
   const parentTable = tables[tableName];
   const targetTableName = relEntry.targetTableName;
   const targetTable = tables[targetTableName];
@@ -1205,10 +1205,16 @@ var createRelationResolverFactory = (db, tables, nullOrdering, filterCtx, limits
     const loader = getOrCreateLoader(context, loaderKey, async (parentIds) => {
       const executor = resolveExecutor(db, context);
       const uniqueIds = [...new Set(parentIds)];
-      let whereCondition = (0, import_drizzle_orm4.and)(
-        (0, import_drizzle_orm4.inArray)(foreignCol, uniqueIds),
-        whereArg ? extractFilters(targetTable, targetTableName, whereArg, relationFilterCtx(filterCtx, targetTableName)) : void 0,
-        cursorValues ? buildCursorCondition(targetTable, cursorEntries, cursorValues, nullOrdering) : void 0
+      const scope = resolveScope(scopes, context, filterCtx);
+      let whereCondition = withScope(
+        scope,
+        targetTableName,
+        targetTable,
+        (0, import_drizzle_orm4.and)(
+          (0, import_drizzle_orm4.inArray)(foreignCol, uniqueIds),
+          whereArg ? extractFilters(targetTable, targetTableName, whereArg, relationFilterCtx(filterCtx, targetTableName)) : void 0,
+          cursorValues ? buildCursorCondition(targetTable, cursorEntries, cursorValues, nullOrdering) : void 0
+        )
       );
       if (distinct) {
         const keys = await selectDistinctKeys({
@@ -2114,9 +2120,11 @@ var generateTableTypes = (tableName, tables, relationMap, withReturning, relatio
   const table = tables[tableName];
   const columns = visibleColumns(table);
   const columnEntries = Object.entries(columns);
+  const contextColumns = cacheCtx.contextValuesOf?.(tableName);
+  const writableEntries = contextColumns ? columnEntries.filter(([columnName]) => !(columnName in contextColumns)) : columnEntries;
   const relaxedColumns = nestedWrites?.relaxedColumns(tableName);
   const insertFields = Object.fromEntries(
-    columnEntries.map(([columnName, column]) => {
+    writableEntries.map(([columnName, column]) => {
       const converted = drizzleColumnToGraphQLType(
         column,
         columnName,
@@ -2132,7 +2140,7 @@ var generateTableTypes = (tableName, tables, relationMap, withReturning, relatio
     })
   );
   const updateFields = Object.fromEntries(
-    columnEntries.map(([columnName, column]) => {
+    writableEntries.map(([columnName, column]) => {
       const converted = drizzleColumnToGraphQLType(column, columnName, tableName, true, false, true);
       const operations = cacheCtx.featureOf(tableName).fieldUpdateOperations ? fieldUpdateInputType(column, columnName, tableName) : void 0;
       const field = operations ? { ...converted, type: operations } : converted;
@@ -2655,7 +2663,69 @@ var extractFilters = (table, tableName, filters, relationCtx) => {
   }
   return variants.length ? variants.length > 1 ? (0, import_drizzle_orm4.and)(...variants) : variants[0] : void 0;
 };
-var extractRelationsParamsInner = (relationMap, tables, tableName, typeName, originField, typeNameMapper, _isInitial = false, filterCtx, limits) => {
+var resolveScope = (scopes, context, filterCtx) => {
+  if (!scopes) {
+    return void 0;
+  }
+  return {
+    has: (tableName) => !!scopes(tableName),
+    on: (tableName, table) => {
+      const hook = scopes(tableName);
+      if (!hook) {
+        return void 0;
+      }
+      const predicate = hook(context, table);
+      if (predicate === void 0 || predicate === null) {
+        return void 0;
+      }
+      if ((0, import_drizzle_orm4.is)(predicate, import_drizzle_orm4.SQL)) {
+        return predicate;
+      }
+      if (typeof predicate !== "object") {
+        throw new import_graphql5.GraphQLError(
+          `Drizzle-GraphQL Error: the scope for '${tableName}' returned a ${typeof predicate}. A scope returns a filter object, a Drizzle SQL expression, or undefined.`
+        );
+      }
+      return extractFilters(table, tableName, predicate, relationFilterCtx(filterCtx, tableName));
+    }
+  };
+};
+var withScope = (scope, tableName, table, condition) => {
+  const predicate = scope?.on(tableName, table);
+  return predicate ? (0, import_drizzle_orm4.and)(condition, predicate) : condition;
+};
+var bindPolicies = (policies, filterCtx) => policies?.scope || policies?.contextValues ? {
+  scope: policies.scope ? (context) => resolveScope(policies.scope, context, filterCtx) : void 0,
+  contextValues: policies.contextValues
+} : void 0;
+var applyContextValues = (values, hooks, context) => {
+  if (!hooks) {
+    return values;
+  }
+  for (const [columnName, hook] of Object.entries(hooks)) {
+    values[columnName] = hook(context);
+  }
+  return values;
+};
+var applyContextValuesAll = (rows, hooks, context) => {
+  if (!hooks) {
+    return rows;
+  }
+  for (const row of rows) {
+    applyContextValues(row, hooks, context);
+  }
+  return rows;
+};
+var stripContextValues = (values, hooks) => {
+  if (!hooks) {
+    return values;
+  }
+  for (const columnName of Object.keys(hooks)) {
+    delete values[columnName];
+  }
+  return values;
+};
+var extractRelationsParamsInner = (relationMap, tables, tableName, typeName, originField, typeNameMapper, _isInitial = false, filterCtx, limits, scope) => {
   const relationsForTable = relationMap[tableName];
   if (!relationsForTable) {
     return void 0;
@@ -2701,8 +2771,13 @@ var extractRelationsParamsInner = (relationMap, tables, tableName, typeName, ori
     const offset = relationArgs?.offset ?? void 0;
     const limit = (0, import_drizzle_orm4.is)(relEntry.relation, import_drizzle_orm4.One) ? relationArgs?.limit ?? void 0 : applyLimitPolicy(relationArgs?.limit, limits?.(targetTableName), `${tableName}.${relName}`);
     const relWhere = relationArgs?.where;
-    thisRecord.where = relWhere ? {
-      RAW: (aliasedTable2) => extractFilters(aliasedTable2, relName, relWhere, relationFilterCtx(filterCtx, targetTableName))
+    thisRecord.where = relWhere || scope?.has(targetTableName) ? {
+      RAW: (aliasedTable2) => withScope(
+        scope,
+        targetTableName,
+        aliasedTable2,
+        relWhere ? extractFilters(aliasedTable2, relName, relWhere, relationFilterCtx(filterCtx, targetTableName)) : void 0
+      )
     } : void 0;
     const hasPagination = offset != null || limit != null;
     const pkNames = targetPkNames ?? [];
@@ -2718,14 +2793,15 @@ var extractRelationsParamsInner = (relationMap, tables, tableName, typeName, ori
       typeNameMapper,
       false,
       filterCtx,
-      limits
+      limits,
+      scope
     ) : void 0;
     thisRecord.with = relWith;
     args[relName] = thisRecord;
   }
   return args;
 };
-var extractRelationsParams = (relationMap, tables, tableName, info, typeName, typeNameMapper, filterCtx, limits) => {
+var extractRelationsParams = (relationMap, tables, tableName, info, typeName, typeNameMapper, filterCtx, limits, scope) => {
   if (!info) {
     return void 0;
   }
@@ -2738,7 +2814,8 @@ var extractRelationsParams = (relationMap, tables, tableName, info, typeName, ty
     typeNameMapper,
     true,
     filterCtx,
-    limits
+    limits,
+    scope
   );
 };
 var pruneNonEagerRelations = (relationMap, shouldEagerLoad) => {
@@ -3148,7 +3225,8 @@ var prepareMutationRelationColumns = (params) => {
     typeName,
     typeNameMapper,
     void 0,
-    params.limits
+    params.limits,
+    params.scope
   ) : void 0;
   const hasRelations = !!(withParams && Object.keys(withParams).length);
   const baseColumns = extractSelectedColumnsFromTreeSQLFormat(parsedInfo.fieldsByTypeName[typeName], table, {
@@ -3382,7 +3460,8 @@ var runRelationalSelect = async (opts) => {
     single,
     filterCtx,
     pkNames,
-    after
+    after,
+    scope
   } = opts;
   const distinct = opts.distinct?.length ? opts.distinct : void 0;
   const cursorSelected = !single && isCursorFieldSelected(parsedInfo.fieldsByTypeName[typeName], table);
@@ -3414,7 +3493,12 @@ var runRelationalSelect = async (opts) => {
       tableName,
       distinct,
       pkNames: pkNames ?? [],
-      where: where ? extractFilters(table, tableName, where, relationFilterCtx(filterCtx, tableName)) : void 0,
+      where: withScope(
+        scope,
+        tableName,
+        table,
+        where ? extractFilters(table, tableName, where, relationFilterCtx(filterCtx, tableName)) : void 0
+      ),
       orderBy,
       limit: single ? 1 : opts.limit,
       offset
@@ -3441,15 +3525,23 @@ var runRelationalSelect = async (opts) => {
       // exactly the ordering the cursor encodes and the keyset predicate compares against.
       (aliasedTable2) => cursorOrderExprs(aliasedTable2, cursorEntries)
     ) : orderBy ? (aliasedTable2) => extractOrderBy(aliasedTable2, orderBy, relationFilterCtx(filterCtx, tableName), where) : needsDefaultOrder && pkNames?.length ? (aliasedTable2) => primaryKeyOrderExprs(aliasedTable2, pkNames) : void 0,
-    where: distinctKeys ? { RAW: (aliasedTable2) => primaryKeyRestriction(aliasedTable2, pkNames, distinctKeys) } : where || cursorValues ? {
-      RAW: (aliasedTable2) => (0, import_drizzle_orm4.and)(
-        where ? extractFilters(aliasedTable2, tableName, where, relationFilterCtx(filterCtx, tableName)) : void 0,
-        cursorValues ? buildCursorCondition(
-          aliasedTable2,
-          cursorEntries,
-          cursorValues,
-          opts.nullOrdering ?? "nulls-smallest"
-        ) : void 0
+    where: distinctKeys ? (
+      // The distinct pass already ran inside the scope, so the keys it picked are in it.
+      { RAW: (aliasedTable2) => primaryKeyRestriction(aliasedTable2, pkNames, distinctKeys) }
+    ) : where || cursorValues || scope?.has(tableName) ? {
+      RAW: (aliasedTable2) => withScope(
+        scope,
+        tableName,
+        aliasedTable2,
+        (0, import_drizzle_orm4.and)(
+          where ? extractFilters(aliasedTable2, tableName, where, relationFilterCtx(filterCtx, tableName)) : void 0,
+          cursorValues ? buildCursorCondition(
+            aliasedTable2,
+            cursorEntries,
+            cursorValues,
+            opts.nullOrdering ?? "nulls-smallest"
+          ) : void 0
+        )
       )
     } : void 0,
     with: relationMap[tableName] ? extractRelationsParams(
@@ -3460,7 +3552,8 @@ var runRelationalSelect = async (opts) => {
       typeName,
       typeNameMapper,
       filterCtx,
-      opts.limits
+      opts.limits,
+      scope
     ) : void 0
   };
   if (single) {
@@ -3765,7 +3858,7 @@ var assembleAggregateRow = (row, request, target) => {
   }
   return result;
 };
-var generateAggregate = (db, tableName, table, typeName, fieldName, filterArgs, filterCtx) => {
+var generateAggregate = (db, tableName, table, typeName, fieldName, filterArgs, filterCtx, scopes) => {
   const target = aggregateTarget(table, tableName, typeName);
   const queryArgs = {
     where: { type: filterArgs }
@@ -3779,8 +3872,14 @@ var generateAggregate = (db, tableName, table, typeName, fieldName, filterArgs,
           return {};
         }
         let query = resolveExecutor(db, context).select(request.selection).from(table);
-        if (args.where) {
-          query = query.where(extractFilters(table, tableName, args.where, relationFilterCtx(filterCtx, tableName)));
+        const where = withScope(
+          resolveScope(scopes, context, filterCtx),
+          tableName,
+          table,
+          args.where ? extractFilters(table, tableName, args.where, relationFilterCtx(filterCtx, tableName)) : void 0
+        );
+        if (where) {
+          query = query.where(where);
         }
         const rows = await query;
         return assembleAggregateRow(rows[0] ?? {}, request, target);
@@ -3792,7 +3891,7 @@ var generateAggregate = (db, tableName, table, typeName, fieldName, filterArgs,
   };
 };
 var GROUP_KEY = "__dgql_group_key";
-var createRelationAggregateFactory = (db, tables, cacheCtx, typeNameMapper, filterCtx) => {
+var createRelationAggregateFactory = (db, tables, cacheCtx, typeNameMapper, filterCtx, scopes) => {
   return ({ tableName, relationName, relEntry }) => {
     const parentTable = tables[tableName];
     const targetTableName = relEntry.targetTableName;
@@ -3827,9 +3926,14 @@ var createRelationAggregateFactory = (db, tables, cacheCtx, typeNameMapper, filt
         const loader = getOrCreateLoader(context, loaderKey, async (parentIds) => {
           const executor = resolveExecutor(db, context);
           const uniqueIds = [...new Set(parentIds)];
-          const whereCondition = (0, import_drizzle_orm5.and)(
-            (0, import_drizzle_orm5.inArray)(foreignCol, uniqueIds),
-            whereArg ? extractFilters(targetTable, targetTableName, whereArg, relationFilterCtx(filterCtx, targetTableName)) : void 0
+          const whereCondition = withScope(
+            resolveScope(scopes, context, filterCtx),
+            targetTableName,
+            targetTable,
+            (0, import_drizzle_orm5.and)(
+              (0, import_drizzle_orm5.inArray)(foreignCol, uniqueIds),
+              whereArg ? extractFilters(targetTable, targetTableName, whereArg, relationFilterCtx(filterCtx, targetTableName)) : void 0
+            )
           );
           const rows = await executor.select({ [GROUP_KEY]: foreignCol, ...request.selection }).from(targetTable).where(whereCondition).groupBy(foreignCol);
           const byKey = new Map(rows.map((row) => [row[GROUP_KEY], row]));
@@ -3962,7 +4066,7 @@ var buildHavingCondition = (having, columns) => {
   }
   return conditions.length ? (0, import_drizzle_orm5.and)(...conditions) : void 0;
 };
-var generateGroupBy = (db, tableName, table, typeName, fieldName, filterArgs, groupByEnum, havingInput, filterCtx) => {
+var generateGroupBy = (db, tableName, table, typeName, fieldName, filterArgs, groupByEnum, havingInput, filterCtx, scopes) => {
   const target = aggregateTarget(table, tableName, typeName);
   const groupable = groupableColumns(table, tableName);
   const columns = (0, import_drizzle_orm5.getColumns)(table);
@@ -3996,8 +4100,14 @@ var generateGroupBy = (db, tableName, table, typeName, fieldName, filterArgs, gr
           ...request.selection
         };
         let query = resolveExecutor(db, context).select(selection).from(table);
-        if (args.where) {
-          query = query.where(extractFilters(table, tableName, args.where, relationFilterCtx(filterCtx, tableName)));
+        const where = withScope(
+          resolveScope(scopes, context, filterCtx),
+          tableName,
+          table,
+          args.where ? extractFilters(table, tableName, args.where, relationFilterCtx(filterCtx, tableName)) : void 0
+        );
+        if (where) {
+          query = query.where(where);
         }
         query = query.groupBy(...keyColumns.map(([, column]) => column));
         const havingCondition = buildHavingCondition(args.having, columns);
@@ -4023,7 +4133,7 @@ var generateGroupBy = (db, tableName, table, typeName, fieldName, filterArgs, gr
 };
 
 // src/util/builders/mysql.ts
-var generateSelectArray = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx, distinctEnabled = true, limits) => {
+var generateSelectArray = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx, distinctEnabled = true, limits, policies) => {
   const queryBase = db.query[tableName];
   if (!queryBase) {
     throw new Error(
@@ -4058,6 +4168,7 @@ var generateSelectArray = (db, tableName, tables, relationMap, orderArgs, filter
           single: false,
           filterCtx,
           limits,
+          scope: policies?.scope?.(context),
           pkNames,
           db: executor,
           // MySQL sorts NULLs as the smallest values (first in ASC).
@@ -4070,7 +4181,7 @@ var generateSelectArray = (db, tableName, tables, relationMap, orderArgs, filter
     args: queryArgs
   };
 };
-var generateSelectSingle = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx, limits) => {
+var generateSelectSingle = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx, limits, policies) => {
   const queryBase = db.query[tableName];
   if (!queryBase) {
     throw new Error(
@@ -4099,6 +4210,7 @@ var generateSelectSingle = (db, tableName, tables, relationMap, orderArgs, filte
           single: true,
           filterCtx,
           limits,
+          scope: policies?.scope?.(context),
           pkNames,
           db: executor
         });
@@ -4109,7 +4221,7 @@ var generateSelectSingle = (db, tableName, tables, relationMap, orderArgs, filte
     args: queryArgs
   };
 };
-var generateInsertArray = (db, _tableName, table, baseType, fieldName, txCtx) => {
+var generateInsertArray = (db, tableName, table, baseType, fieldName, txCtx, policies) => {
   const queryArgs = {
     values: {
       type: new import_graphql7.GraphQLNonNull(new import_graphql7.GraphQLList(new import_graphql7.GraphQLNonNull(baseType)))
@@ -4120,7 +4232,11 @@ var generateInsertArray = (db, _tableName, table, baseType, fieldName, txCtx) =>
     resolver: async (_source, args, context, info) => {
       try {
         return await runMutation(db, context, info, txCtx, async (executor) => {
-          const input = remapFromGraphQLArrayInput(args.values, table);
+          const input = applyContextValuesAll(
+            remapFromGraphQLArrayInput(args.values, table),
+            policies?.contextValues?.(tableName),
+            context
+          );
           if (!input.length) {
             throw new import_graphql7.GraphQLError("No values were provided!");
           }
@@ -4134,7 +4250,7 @@ var generateInsertArray = (db, _tableName, table, baseType, fieldName, txCtx) =>
     args: queryArgs
   };
 };
-var generateInsertSingle = (db, _tableName, table, baseType, fieldName, txCtx) => {
+var generateInsertSingle = (db, tableName, table, baseType, fieldName, txCtx, policies) => {
   const queryArgs = {
     values: {
       type: new import_graphql7.GraphQLNonNull(baseType)
@@ -4145,7 +4261,11 @@ var generateInsertSingle = (db, _tableName, table, baseType, fieldName, txCtx) =
     resolver: async (_source, args, context, info) => {
       try {
         return await runMutation(db, context, info, txCtx, async (executor) => {
-          const input = remapFromGraphQLSingleInput(args.values, table);
+          const input = applyContextValues(
+            remapFromGraphQLSingleInput(args.values, table),
+            policies?.contextValues?.(tableName),
+            context
+          );
           await executor.insert(table).values(input);
           return { isSuccess: true };
         });
@@ -4156,7 +4276,7 @@ var generateInsertSingle = (db, _tableName, table, baseType, fieldName, txCtx) =
     args: queryArgs
   };
 };
-var generateUpsert = (db, table, baseType, onConflictType, fieldName, single, txCtx) => {
+var generateUpsert = (db, tableName, table, baseType, onConflictType, fieldName, single, txCtx, policies) => {
   const queryArgs = {
     values: {
       type: single ? new import_graphql7.GraphQLNonNull(baseType) : new import_graphql7.GraphQLNonNull(new import_graphql7.GraphQLList(new import_graphql7.GraphQLNonNull(baseType)))
@@ -4172,7 +4292,11 @@ var generateUpsert = (db, table, baseType, onConflictType, fieldName, single, tx
     resolver: async (_source, args, context, info) => {
       try {
         return await runMutation(db, context, info, txCtx, async (executor) => {
-          const input = single ? [remapFromGraphQLSingleInput(args.values, table)] : remapFromGraphQLArrayInput(args.values, table);
+          const input = applyContextValuesAll(
+            single ? [remapFromGraphQLSingleInput(args.values, table)] : remapFromGraphQLArrayInput(args.values, table),
+            policies?.contextValues?.(tableName),
+            context
+          );
           if (!input.length) {
             throw new import_graphql7.GraphQLError("No values were provided!");
           }
@@ -4199,7 +4323,7 @@ var generateUpsert = (db, table, baseType, onConflictType, fieldName, single, tx
     args: queryArgs
   };
 };
-var generateUpdate = (db, tableName, table, setArgs, filterArgs, fieldName, single, requireWhere, filterCtx, txCtx) => {
+var generateUpdate = (db, tableName, table, setArgs, filterArgs, fieldName, single, requireWhere, filterCtx, txCtx, policies) => {
   const queryArgs = {
     set: {
       type: new import_graphql7.GraphQLNonNull(setArgs)
@@ -4214,12 +4338,21 @@ var generateUpdate = (db, tableName, table, setArgs, filterArgs, fieldName, sing
       try {
         return await runMutation(db, context, info, txCtx, async (executor) => {
           const { where, set } = args;
-          const input = remapUpdateInput(set, table, tableName);
+          const scope = policies?.scope?.(context);
+          const input = stripContextValues(
+            remapUpdateInput(set, table, tableName),
+            policies?.contextValues?.(tableName)
+          );
           if (!Object.keys(input).length) {
             throw new import_graphql7.GraphQLError("Unable to update with no values specified!");
           }
           const relationCtx = relationFilterCtx(filterCtx, tableName);
-          const filters = single || requireWhere ? extractRequiredFilters(table, tableName, where, fieldName, relationCtx) : where ? extractFilters(table, tableName, where, relationCtx) : void 0;
+          const filters = withScope(
+            scope,
+            tableName,
+            table,
+            single || requireWhere ? extractRequiredFilters(table, tableName, where, fieldName, relationCtx) : where ? extractFilters(table, tableName, where, relationCtx) : void 0
+          );
           if (single) {
             await assertSingleMatch(executor, table, filters, fieldName);
           }
@@ -4237,7 +4370,7 @@ var generateUpdate = (db, tableName, table, setArgs, filterArgs, fieldName, sing
     args: queryArgs
   };
 };
-var generateUpdateMany = (db, tableName, table, updateManyInput, fieldName, filterCtx, txCtx) => {
+var generateUpdateMany = (db, tableName, table, updateManyInput, fieldName, filterCtx, txCtx, policies) => {
   const queryArgs = {
     updates: {
       type: new import_graphql7.GraphQLNonNull(new import_graphql7.GraphQLList(new import_graphql7.GraphQLNonNull(updateManyInput)))
@@ -4252,14 +4385,21 @@ var generateUpdateMany = (db, tableName, table, updateManyInput, fieldName, filt
           if (!updates.length) {
             throw new import_graphql7.GraphQLError("No updates were provided!");
           }
+          const scope = policies?.scope?.(context);
+          const contextColumns = policies?.contextValues?.(tableName);
           const entries = updates.map(({ where, set }) => {
-            const input = remapUpdateInput(set, table, tableName);
+            const input = stripContextValues(remapUpdateInput(set, table, tableName), contextColumns);
             if (!Object.keys(input).length) {
               throw new import_graphql7.GraphQLError("Unable to update with no values specified!");
             }
             return {
               set: input,
-              filters: where ? extractFilters(table, tableName, where, relationFilterCtx(filterCtx, tableName)) : void 0
+              filters: withScope(
+                scope,
+                tableName,
+                table,
+                where ? extractFilters(table, tableName, where, relationFilterCtx(filterCtx, tableName)) : void 0
+              )
             };
           });
           await executor.transaction(async (tx) => {
@@ -4280,7 +4420,7 @@ var generateUpdateMany = (db, tableName, table, updateManyInput, fieldName, filt
     args: queryArgs
   };
 };
-var generateDelete = (db, tableName, table, filterArgs, fieldName, single, requireWhere, filterCtx, txCtx) => {
+var generateDelete = (db, tableName, table, filterArgs, fieldName, single, requireWhere, filterCtx, txCtx, policies) => {
   const queryArgs = {
     where: {
       type: single || requireWhere ? new import_graphql7.GraphQLNonNull(filterArgs) : filterArgs
@@ -4292,8 +4432,14 @@ var generateDelete = (db, tableName, table, filterArgs, fieldName, single, requi
       try {
         return await runMutation(db, context, info, txCtx, async (executor) => {
           const { where } = args;
+          const scope = policies?.scope?.(context);
           const relationCtx = relationFilterCtx(filterCtx, tableName);
-          const filters = single || requireWhere ? extractRequiredFilters(table, tableName, where, fieldName, relationCtx) : where ? extractFilters(table, tableName, where, relationCtx) : void 0;
+          const filters = withScope(
+            scope,
+            tableName,
+            table,
+            single || requireWhere ? extractRequiredFilters(table, tableName, where, fieldName, relationCtx) : where ? extractFilters(table, tableName, where, relationCtx) : void 0
+          );
           if (single) {
             await assertSingleMatch(executor, table, filters, fieldName);
           }
@@ -4341,12 +4487,16 @@ var generateSchemaData = (db, schema, relations, options) => {
   attachTargetPrimaryKeys(namedRelations, tables, mysqlPrimaryKeyPropNames);
   const eagerRelations = pruneNonEagerRelations(namedRelations, shouldEagerLoad);
   const filterCtx = { tables, relationMap: namedRelations };
+  const scopes = options.policies?.scope;
+  const contextValuesOf = options.policies?.contextValues;
+  const policies = bindPolicies(options.policies, filterCtx);
   const resolverFactory = createRelationResolverFactory(
     db,
     tables,
     "nulls-smallest",
     filterCtx,
-    limits
+    limits,
+    scopes
   );
   const cacheCtx = {
     genericFilterCache: /* @__PURE__ */ new Map(),
@@ -4364,9 +4514,10 @@ var generateSchemaData = (db, schema, relations, options) => {
     limits,
     docs: options.docs ?? {},
     primaryKeyOf: (name) => tables[name] ? mysqlPrimaryKeyPropNames(tables[name]) : [],
+    contextValuesOf,
     featureOf
   };
-  const relationAggregateFactory = anyTable("relationAggregates") ? createRelationAggregateFactory(db, tables, cacheCtx, typeNameMapper, filterCtx) : void 0;
+  const relationAggregateFactory = anyTable("relationAggregates") ? createRelationAggregateFactory(db, tables, cacheCtx, typeNameMapper, filterCtx, scopes) : void 0;
   const queries = {};
   const mutations = {};
   const mutationTxCtx = createMutationTxCtx(options.transactions);
@@ -4436,7 +4587,8 @@ var generateSchemaData = (db, schema, relations, options) => {
       typeNameMapper,
       filterCtx,
       tableFeatures.distinct,
-      limits
+      limits,
+      policies
     );
     const selectSingleGenerated = generateSelectSingle(
       db,
@@ -4449,7 +4601,8 @@ var generateSchemaData = (db, schema, relations, options) => {
       typeName,
       typeNameMapper,
       filterCtx,
-      limits
+      limits,
+      policies
     );
     const insertArrGenerated = tableFeatures.insert ? generateInsertArray(
       db,
@@ -4457,7 +4610,8 @@ var generateSchemaData = (db, schema, relations, options) => {
       schema[tableName],
       insertInput,
       createArrayFieldName,
-      mutationTxCtx
+      mutationTxCtx,
+      policies
     ) : void 0;
     const insertSingleGenerated = tableFeatures.insert ? generateInsertSingle(
       db,
@@ -4465,7 +4619,8 @@ var generateSchemaData = (db, schema, relations, options) => {
       schema[tableName],
       insertInput,
       createSingleFieldName,
-      mutationTxCtx
+      mutationTxCtx,
+      policies
     ) : void 0;
     const onConflictInput = tableFeatures.upsert ? generateOnConflictInput({
       table: schema[tableName],
@@ -4476,21 +4631,25 @@ var generateSchemaData = (db, schema, relations, options) => {
     }) : void 0;
     const upsertArrGenerated = onConflictInput ? generateUpsert(
       db,
+      tableName,
       schema[tableName],
       insertInput,
       onConflictInput,
       upsertArrayFieldName,
       false,
-      mutationTxCtx
+      mutationTxCtx,
+      policies
     ) : void 0;
     const upsertSingleGenerated = onConflictInput ? generateUpsert(
       db,
+      tableName,
       schema[tableName],
       insertInput,
       onConflictInput,
       upsertSingleFieldName,
       true,
-      mutationTxCtx
+      mutationTxCtx,
+      policies
     ) : void 0;
     const updateGenerated = tableFeatures.update ? generateUpdate(
       db,
@@ -4502,7 +4661,8 @@ var generateSchemaData = (db, schema, relations, options) => {
       false,
       tableFeatures.requireWhere,
       filterCtx,
-      mutationTxCtx
+      mutationTxCtx,
+      policies
     ) : void 0;
     const updateSingleGenerated = tableFeatures.update ? generateUpdate(
       db,
@@ -4514,7 +4674,8 @@ var generateSchemaData = (db, schema, relations, options) => {
       true,
       tableFeatures.requireWhere,
       filterCtx,
-      mutationTxCtx
+      mutationTxCtx,
+      policies
     ) : void 0;
     const updateManyInput = tableFeatures.update && tableFeatures.updateMany ? generateUpdateManyInput({ typeName, updatePrefix: prefixes.update, updateInput, tableFilters }) : void 0;
     const updateManyGenerated = updateManyInput ? generateUpdateMany(
@@ -4524,7 +4685,8 @@ var generateSchemaData = (db, schema, relations, options) => {
       updateManyInput,
       updateManyFieldName,
       filterCtx,
-      mutationTxCtx
+      mutationTxCtx,
+      policies
     ) : void 0;
     const deleteGenerated = tableFeatures.delete ? generateDelete(
       db,
@@ -4535,7 +4697,8 @@ var generateSchemaData = (db, schema, relations, options) => {
       false,
       tableFeatures.requireWhere,
       filterCtx,
-      mutationTxCtx
+      mutationTxCtx,
+      policies
     ) : void 0;
     const deleteSingleGenerated = tableFeatures.delete ? generateDelete(
       db,
@@ -4546,7 +4709,8 @@ var generateSchemaData = (db, schema, relations, options) => {
       true,
       tableFeatures.requireWhere,
       filterCtx,
-      mutationTxCtx
+      mutationTxCtx,
+      policies
     ) : void 0;
     const updateCountGenerated = tableFeatures.update && tableFeatures.countMutations ? generateWriteCount({
       db,
@@ -4579,7 +4743,8 @@ var generateSchemaData = (db, schema, relations, options) => {
       typeName,
       aggregateFieldName,
       tableFilters,
-      filterCtx
+      filterCtx,
+      scopes
     ) : void 0;
     const groupByType = tableFeatures.aggregates && tableFeatures.groupBy ? generateGroupByType(schema[tableName], tableName, typeName, cacheCtx) : void 0;
     const groupByEnum = groupByType ? generateGroupByEnum(schema[tableName], tableName, typeName) : void 0;
@@ -4593,7 +4758,8 @@ var generateSchemaData = (db, schema, relations, options) => {
       tableFilters,
       groupByEnum,
       havingInput,
-      filterCtx
+      filterCtx,
+      scopes
     ) : void 0;
     queries[selectArrGenerated.name] = {
       type: selectArrOutput,
@@ -4821,8 +4987,9 @@ var createNestedWriteTypes = (params) => {
       return cached;
     }
     const omitted = plan.fkSide === "child" ? plan.foreignColPropName : void 0;
+    const contextColumns = cacheCtx.contextValuesOf?.(plan.targetTableName);
     const fields = Object.fromEntries(
-      Object.entries(visibleColumns(plan.targetTable)).filter(([columnName]) => columnName !== omitted).map(([columnName, column]) => [
+      Object.entries(visibleColumns(plan.targetTable)).filter(([columnName]) => columnName !== omitted && !contextColumns?.[columnName]).map(([columnName, column]) => [
         columnName,
         drizzleColumnToGraphQLType(column, columnName, plan.targetTableName, false, true, true)
       ])
@@ -4921,8 +5088,8 @@ var createNestedWriteTypes = (params) => {
 var mergedOps = (entries) => Object.assign({}, ...entries.map((entry) => entry.ops));
 var asArray = (value) => Array.isArray(value) ? value : value === void 0 ? [] : [value];
 var createNestedWriteRuntime = (params) => {
-  const { plans, filterCtx } = params;
-  const conditionOf = (plan, filter, operation) => {
+  const { plans, filterCtx, scopes, contextValues } = params;
+  const conditionOf = (plan, filter, operation, scope) => {
     const condition = extractFilters(
       plan.targetTable,
       plan.targetTableName,
@@ -4934,7 +5101,7 @@ var createNestedWriteRuntime = (params) => {
         `Drizzle-GraphQL Error: '${operation}' on '${plan.relationName}' needs a filter that selects rows \u2014 it was given one that matches everything.`
       );
     }
-    return condition;
+    return withScope(scope, plan.targetTableName, plan.targetTable, condition);
   };
   const assertSingleOperation = (plan, op) => {
     const supplied = ["create", "connect", "disconnect"].filter((key) => op[key] !== void 0 && op[key] !== null);
@@ -4944,7 +5111,7 @@ var createNestedWriteRuntime = (params) => {
       );
     }
   };
-  const detachAll = async (executor, plan, key) => executor.update(plan.targetTable).set({ [plan.foreignColPropName]: null }).where((0, import_drizzle_orm7.eq)(plan.foreignCol, key));
+  const detachAll = async (executor, plan, key, scope) => executor.update(plan.targetTable).set({ [plan.foreignColPropName]: null }).where(withScope(scope, plan.targetTableName, plan.targetTable, (0, import_drizzle_orm7.eq)(plan.foreignCol, key)));
   return {
     enabled: (tableName) => !!plans[tableName],
     split: (tableName, values) => {
@@ -4978,12 +5145,13 @@ var createNestedWriteRuntime = (params) => {
       }
       return columns;
     },
-    applyParentSide: async (executor, tableName, ops) => {
+    applyParentSide: async (executor, tableName, ops, context) => {
       const tablePlans = plans[tableName];
       const patch = {};
       if (!tablePlans) {
         return patch;
       }
+      const scope = resolveScope(scopes, context, filterCtx);
       for (const [relationName, op] of Object.entries(ops)) {
         const plan = tablePlans[relationName];
         if (!plan || plan.fkSide !== "parent") {
@@ -4991,7 +5159,11 @@ var createNestedWriteRuntime = (params) => {
         }
         assertSingleOperation(plan, op);
         if (op["create"] !== void 0) {
-          const values = remapFromGraphQLSingleInput({ ...op["create"] }, plan.targetTable);
+          const values = applyContextValues(
+            remapFromGraphQLSingleInput({ ...op["create"] }, plan.targetTable),
+            contextValues?.(plan.targetTableName),
+            context
+          );
           const inserted = await executor.insert(plan.targetTable).values(values).returning();
           const created = inserted[0];
           if (!created) {
@@ -5001,7 +5173,7 @@ var createNestedWriteRuntime = (params) => {
           }
           patch[plan.localColPropName] = created[plan.foreignColPropName];
         } else if (op["connect"] !== void 0) {
-          const rows = await executor.select().from(plan.targetTable).where(conditionOf(plan, op["connect"], "connect"));
+          const rows = await executor.select().from(plan.targetTable).where(conditionOf(plan, op["connect"], "connect", scope));
           if (rows.length !== 1) {
             throw new import_graphql8.GraphQLError(
               `Drizzle-GraphQL Error: 'connect' on '${relationName}' matched ${rows.length} rows \u2014 it attaches a single row, so its filter must match exactly one.`
@@ -5014,11 +5186,12 @@ var createNestedWriteRuntime = (params) => {
       }
       return patch;
     },
-    applyChildSide: async (executor, tableName, ops, parentRows) => {
+    applyChildSide: async (executor, tableName, ops, parentRows, context) => {
       const tablePlans = plans[tableName];
       if (!tablePlans) {
         return;
       }
+      const scope = resolveScope(scopes, context, filterCtx);
       for (const [relationName, op] of Object.entries(ops)) {
         const plan = tablePlans[relationName];
         if (!plan || plan.fkSide !== "child") {
@@ -5035,34 +5208,38 @@ var createNestedWriteRuntime = (params) => {
             );
           }
           if (op["set"] !== void 0) {
-            await detachAll(executor, plan, key);
+            await detachAll(executor, plan, key, scope);
             for (const filter of asArray(op["set"])) {
-              await executor.update(plan.targetTable).set({ [plan.foreignColPropName]: key }).where(conditionOf(plan, filter, "set"));
+              await executor.update(plan.targetTable).set({ [plan.foreignColPropName]: key }).where(conditionOf(plan, filter, "set", scope));
             }
           }
           if (op["disconnect"] !== void 0) {
             if (plan.isOne) {
               if (op["disconnect"] === true) {
-                await detachAll(executor, plan, key);
+                await detachAll(executor, plan, key, scope);
               }
             } else {
               for (const filter of asArray(op["disconnect"])) {
-                await executor.update(plan.targetTable).set({ [plan.foreignColPropName]: null }).where((0, import_drizzle_orm7.and)((0, import_drizzle_orm7.eq)(plan.foreignCol, key), conditionOf(plan, filter, "disconnect")));
+                await executor.update(plan.targetTable).set({ [plan.foreignColPropName]: null }).where((0, import_drizzle_orm7.and)((0, import_drizzle_orm7.eq)(plan.foreignCol, key), conditionOf(plan, filter, "disconnect", scope)));
               }
             }
           }
           const attaches = op["connect"] !== void 0 || op["create"] !== void 0;
           if (plan.isOne && attaches && plan.canDetach && op["set"] === void 0) {
-            await detachAll(executor, plan, key);
+            await detachAll(executor, plan, key, scope);
           }
           if (op["connect"] !== void 0) {
             for (const filter of asArray(op["connect"])) {
-              await executor.update(plan.targetTable).set({ [plan.foreignColPropName]: key }).where(conditionOf(plan, filter, "connect"));
+              await executor.update(plan.targetTable).set({ [plan.foreignColPropName]: key }).where(conditionOf(plan, filter, "connect", scope));
             }
           }
           if (op["create"] !== void 0) {
             const rows = asArray(op["create"]).map((row) => ({
-              ...remapFromGraphQLSingleInput({ ...row }, plan.targetTable),
+              ...applyContextValues(
+                remapFromGraphQLSingleInput({ ...row }, plan.targetTable),
+                contextValues?.(plan.targetTableName),
+                context
+              ),
               [plan.foreignColPropName]: key
             }));
             if (rows.length) {
@@ -5075,30 +5252,30 @@ var createNestedWriteRuntime = (params) => {
   };
 };
 var writeWithNestedOps = async (params) => {
-  const { executor, runtime, tableName, entries, remapValues, write } = params;
+  const { executor, runtime, tableName, entries, remapValues, write, context } = params;
   return executor.transaction(async (tx) => {
     const rows = [];
     for (const entry of entries) {
-      const patch = await runtime.applyParentSide(tx, tableName, entry.ops);
+      const patch = await runtime.applyParentSide(tx, tableName, entry.ops, context);
       const written = await write(tx, { ...remapValues(entry.columns), ...patch });
-      await runtime.applyChildSide(tx, tableName, entry.ops, written);
+      await runtime.applyChildSide(tx, tableName, entry.ops, written, context);
       rows.push(...written);
     }
     return rows;
   });
 };
 var updateWithNestedOps = async (params) => {
-  const { executor, runtime, tableName, columns, ops, remapValues, write } = params;
+  const { executor, runtime, tableName, columns, ops, remapValues, write, context } = params;
   return executor.transaction(async (tx) => {
-    const patch = await runtime.applyParentSide(tx, tableName, ops);
+    const patch = await runtime.applyParentSide(tx, tableName, ops, context);
     const rows = await write(tx, { ...remapValues(columns), ...patch });
-    await runtime.applyChildSide(tx, tableName, ops, rows);
+    await runtime.applyChildSide(tx, tableName, ops, rows, context);
     return rows;
   });
 };
 
 // src/util/builders/pg.ts
-var generateSelectArray2 = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx, distinctEnabled = true, limits) => {
+var generateSelectArray2 = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx, distinctEnabled = true, limits, policies) => {
   const queryBase = db.query[tableName];
   const table = tables[tableName];
   const limitPolicy = limits?.(tableName);
@@ -5114,6 +5291,7 @@ var generateSelectArray2 = (db, tableName, tables, relationMap, orderArgs, filte
       try {
         const parsedInfo = (0, import_graphql_parse_resolve_info3.parseResolveInfo)(info, { deep: true });
         const { executor, queryBase: requestQueryBase } = resolveQueryExecutor(db, context, tableName, queryBase);
+        const scope = policies?.scope?.(context);
         const limit = applyLimitPolicy(args.limit, limitPolicy, fieldName);
         if (requestQueryBase) {
           return await runRelationalSelect({
@@ -5132,6 +5310,7 @@ var generateSelectArray2 = (db, tableName, tables, relationMap, orderArgs, filte
             limits,
             pkNames,
             db: executor,
+            scope,
             // PostgreSQL sorts NULLs as the largest values (last in ASC).
             nullOrdering: "nulls-largest"
           });
@@ -5170,7 +5349,12 @@ var generateSelectArray2 = (db, tableName, tables, relationMap, orderArgs, filte
           }
         }
         const cursorCondition = after != null && cursorEntries ? buildCursorCondition(table, cursorEntries, decodeCursor(after, cursorEntries), "nulls-largest") : void 0;
-        const baseWhereSql = where ? extractFilters(table, tableName, where, relationFilterCtx(filterCtx, tableName)) : void 0;
+        const baseWhereSql = withScope(
+          scope,
+          tableName,
+          table,
+          where ? extractFilters(table, tableName, where, relationFilterCtx(filterCtx, tableName)) : void 0
+        );
         const whereSql = cursorCondition ? (0, import_drizzle_orm8.and)(baseWhereSql, cursorCondition) : baseWhereSql;
         let distinctKeys;
         if (distinct?.length) {
@@ -5225,7 +5409,7 @@ var generateSelectArray2 = (db, tableName, tables, relationMap, orderArgs, filte
     args: queryArgs
   };
 };
-var generateSelectSingle2 = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx, limits) => {
+var generateSelectSingle2 = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx, limits, policies) => {
   const queryBase = db.query[tableName];
   const queryArgs = selectSingleArgs(orderArgs, filterArgs);
   const table = tables[tableName];
@@ -5236,6 +5420,7 @@ var generateSelectSingle2 = (db, tableName, tables, relationMap, orderArgs, filt
       try {
         const parsedInfo = (0, import_graphql_parse_resolve_info3.parseResolveInfo)(info, { deep: true });
         const { executor, queryBase: requestQueryBase } = resolveQueryExecutor(db, context, tableName, queryBase);
+        const scope = policies?.scope?.(context);
         if (requestQueryBase) {
           return await runRelationalSelect({
             queryBase: requestQueryBase,
@@ -5251,7 +5436,8 @@ var generateSelectSingle2 = (db, tableName, tables, relationMap, orderArgs, filt
             filterCtx,
             limits,
             pkNames,
-            db: executor
+            db: executor,
+            scope
           });
         }
         const { offset, orderBy, where } = args;
@@ -5261,8 +5447,14 @@ var generateSelectSingle2 = (db, tableName, tables, relationMap, orderArgs, filt
           { tableName, relationMap, tables }
         );
         let q = executor.select(selectedColumnsSql).from(table);
-        if (where) {
-          q = q.where(extractFilters(table, tableName, where, relationFilterCtx(filterCtx, tableName)));
+        const whereSql = withScope(
+          scope,
+          tableName,
+          table,
+          where ? extractFilters(table, tableName, where, relationFilterCtx(filterCtx, tableName)) : void 0
+        );
+        if (whereSql) {
+          q = q.where(whereSql);
         }
         if (orderBy) {
           q = q.orderBy(...extractOrderBy(table, orderBy, relationFilterCtx(filterCtx, tableName), where));
@@ -5283,7 +5475,7 @@ var generateSelectSingle2 = (db, tableName, tables, relationMap, orderArgs, filt
   };
 };
 var pgPrimaryKeyPropNames = (table) => getPrimaryKeyPropNamesFromConfig(table, import_pg_core2.getTableConfig);
-var generateInsertArray2 = (db, tableName, table, tables, relationMap, baseType, fieldName, typeName, typeNameMapper, conflictDoNothing = false, txCtx, nested, limits) => {
+var generateInsertArray2 = (db, tableName, table, tables, relationMap, baseType, fieldName, typeName, typeNameMapper, conflictDoNothing = false, txCtx, nested, limits, policies) => {
   const queryArgs = {
     values: {
       type: new import_graphql9.GraphQLNonNull(new import_graphql9.GraphQLList(new import_graphql9.GraphQLNonNull(baseType)))
@@ -5300,7 +5492,13 @@ var generateInsertArray2 = (db, tableName, table, tables, relationMap, baseType,
           }
           const entries = nested?.enabled(tableName) ? args.values.map((values) => nested.split(tableName, values)) : void 0;
           const nestedEntries = entries?.some((entry) => nested.hasOps(entry.ops)) ? entries : void 0;
-          const input = nestedEntries ? [] : remapFromGraphQLArrayInput(entries ? entries.map((entry) => entry.columns) : args.values, table);
+          const contextColumns = policies?.contextValues?.(tableName);
+          const scope = policies?.scope?.(context);
+          const input = nestedEntries ? [] : applyContextValuesAll(
+            remapFromGraphQLArrayInput(entries ? entries.map((entry) => entry.columns) : args.values, table),
+            contextColumns,
+            context
+          );
           const parsedInfo = (0, import_graphql_parse_resolve_info3.parseResolveInfo)(info, {
             deep: true
           });
@@ -5313,7 +5511,8 @@ var generateInsertArray2 = (db, tableName, table, tables, relationMap, baseType,
             table,
             pkNames,
             parsedInfo,
-            limits
+            limits,
+            scope
           });
           const returning = nestedEntries ? nested.withJoinColumns(tableName, mergedOps(nestedEntries), { ...columns }, table) : columns;
           const runInsert = async (target, values) => {
@@ -5328,8 +5527,9 @@ var generateInsertArray2 = (db, tableName, table, tables, relationMap, baseType,
             runtime: nested,
             tableName,
             entries: nestedEntries,
-            remapValues: (values) => remapFromGraphQLSingleInput(values, table),
-            write: (tx, values) => runInsert(tx, [values])
+            remapValues: (values) => applyContextValues(remapFromGraphQLSingleInput(values, table), contextColumns, context),
+            write: (tx, values) => runInsert(tx, [values]),
+            context
           }) : await runInsert(executor, input);
           const enriched = hasRelations ? await eagerLoadMutationRelations(executor, tableName, result, pkNames, withParams) : result;
           return remapToGraphQLArrayOutput(enriched, tableName, table, relationMap);
@@ -5341,7 +5541,7 @@ var generateInsertArray2 = (db, tableName, table, tables, relationMap, baseType,
     args: queryArgs
   };
 };
-var generateInsertSingle2 = (db, tableName, table, tables, relationMap, baseType, fieldName, typeName, typeNameMapper, conflictDoNothing = false, txCtx, nested, limits) => {
+var generateInsertSingle2 = (db, tableName, table, tables, relationMap, baseType, fieldName, typeName, typeNameMapper, conflictDoNothing = false, txCtx, nested, limits, policies) => {
   const queryArgs = {
     values: {
       type: new import_graphql9.GraphQLNonNull(baseType)
@@ -5355,7 +5555,13 @@ var generateInsertSingle2 = (db, tableName, table, tables, relationMap, baseType
         return await runMutation(db, context, info, txCtx, async (executor) => {
           const entry = nested?.enabled(tableName) ? nested.split(tableName, args.values) : void 0;
           const nestedEntry = entry && nested.hasOps(entry.ops) ? entry : void 0;
-          const input = nestedEntry ? {} : remapFromGraphQLSingleInput(entry ? entry.columns : args.values, table);
+          const contextColumns = policies?.contextValues?.(tableName);
+          const scope = policies?.scope?.(context);
+          const input = nestedEntry ? {} : applyContextValues(
+            remapFromGraphQLSingleInput(entry ? entry.columns : args.values, table),
+            contextColumns,
+            context
+          );
           const parsedInfo = (0, import_graphql_parse_resolve_info3.parseResolveInfo)(info, {
             deep: true
           });
@@ -5368,7 +5574,8 @@ var generateInsertSingle2 = (db, tableName, table, tables, relationMap, baseType
             table,
             pkNames,
             parsedInfo,
-            limits
+            limits,
+            scope
           });
           const returning = nestedEntry ? nested.withJoinColumns(tableName, nestedEntry.ops, { ...columns }, table) : columns;
           const runInsert = async (target, values) => {
@@ -5383,8 +5590,9 @@ var generateInsertSingle2 = (db, tableName, table, tables, relationMap, baseType
             runtime: nested,
             tableName,
             entries: [nestedEntry],
-            remapValues: (values) => remapFromGraphQLSingleInput(values, table),
-            write: runInsert
+            remapValues: (values) => applyContextValues(remapFromGraphQLSingleInput(values, table), contextColumns, context),
+            write: runInsert,
+            context
           }) : await runInsert(executor, input);
           if (!result[0]) {
             if (!conflictDoNothing) {
@@ -5402,7 +5610,7 @@ var generateInsertSingle2 = (db, tableName, table, tables, relationMap, baseType
     args: queryArgs
   };
 };
-var generateUpsert2 = (db, tableName, table, tables, relationMap, baseType, onConflictType, uniqueSets, fieldName, typeName, single, typeNameMapper, filterCtx, txCtx, nested, limits) => {
+var generateUpsert2 = (db, tableName, table, tables, relationMap, baseType, onConflictType, uniqueSets, fieldName, typeName, single, typeNameMapper, filterCtx, txCtx, nested, limits, policies) => {
   const queryArgs = {
     values: {
       type: single ? new import_graphql9.GraphQLNonNull(baseType) : new import_graphql9.GraphQLNonNull(new import_graphql9.GraphQLList(new import_graphql9.GraphQLNonNull(baseType)))
@@ -5424,7 +5632,13 @@ var generateUpsert2 = (db, tableName, table, tables, relationMap, baseType, onCo
           }
           const entries = nested?.enabled(tableName) ? supplied.map((values) => nested.split(tableName, values)) : void 0;
           const nestedEntries = entries?.some((entry) => nested.hasOps(entry.ops)) ? entries : void 0;
-          const input = nestedEntries ? [] : remapFromGraphQLArrayInput(entries ? entries.map((entry) => entry.columns) : supplied, table);
+          const contextColumns = policies?.contextValues?.(tableName);
+          const scope = policies?.scope?.(context);
+          const input = nestedEntries ? [] : applyContextValuesAll(
+            remapFromGraphQLArrayInput(entries ? entries.map((entry) => entry.columns) : supplied, table),
+            contextColumns,
+            context
+          );
           const parsedInfo = (0, import_graphql_parse_resolve_info3.parseResolveInfo)(info, { deep: true });
           const { columns, hasRelations, withParams } = prepareMutationRelationColumns({
             relationMap,
@@ -5435,7 +5649,8 @@ var generateUpsert2 = (db, tableName, table, tables, relationMap, baseType, onCo
             table,
             pkNames,
             parsedInfo,
-            limits
+            limits,
+            scope
           });
           const returning = nestedEntries ? nested.withJoinColumns(tableName, mergedOps(nestedEntries), { ...columns }, table) : columns;
           const runUpsert = async (target, values) => {
@@ -5450,7 +5665,8 @@ var generateUpsert2 = (db, tableName, table, tables, relationMap, baseType, onCo
               buildWhere: (where) => extractFilters(table, tableName, where, relationFilterCtx(filterCtx, tableName))
             });
             let query = target.insert(table).values(values).returning(returning);
-            query = plan.action === "NOTHING" ? query.onConflictDoNothing(plan.target ? { target: plan.target } : void 0) : query.onConflictDoUpdate({ target: plan.target, set: plan.set, setWhere: plan.setWhere });
+            const setWhere = withScope(scope, tableName, table, plan.setWhere);
+            query = plan.action === "NOTHING" ? query.onConflictDoNothing(plan.target ? { target: plan.target } : void 0) : query.onConflictDoUpdate({ target: plan.target, set: plan.set, setWhere });
             return await query;
           };
           const result = nestedEntries ? await writeWithNestedOps({
@@ -5458,8 +5674,9 @@ var generateUpsert2 = (db, tableName, table, tables, relationMap, baseType, onCo
             runtime: nested,
             tableName,
             entries: nestedEntries,
-            remapValues: (values) => remapFromGraphQLSingleInput(values, table),
-            write: (tx, values) => runUpsert(tx, [values])
+            remapValues: (values) => applyContextValues(remapFromGraphQLSingleInput(values, table), contextColumns, context),
+            write: (tx, values) => runUpsert(tx, [values]),
+            context
           }) : await runUpsert(executor, input);
           if (single && !result[0]) {
             return void 0;
@@ -5474,7 +5691,7 @@ var generateUpsert2 = (db, tableName, table, tables, relationMap, baseType, onCo
     args: queryArgs
   };
 };
-var generateUpdate2 = (db, tableName, table, tables, relationMap, setArgs, filterArgs, fieldName, typeName, single, requireWhere, typeNameMapper, filterCtx, txCtx, nested, limits) => {
+var generateUpdate2 = (db, tableName, table, tables, relationMap, setArgs, filterArgs, fieldName, typeName, single, requireWhere, typeNameMapper, filterCtx, txCtx, nested, limits, policies) => {
   const queryArgs = {
     set: {
       type: new import_graphql9.GraphQLNonNull(setArgs)
@@ -5490,6 +5707,7 @@ var generateUpdate2 = (db, tableName, table, tables, relationMap, setArgs, filte
       try {
         return await runMutation(db, context, info, txCtx, async (executor) => {
           const { where, set } = args;
+          const scope = policies?.scope?.(context);
           const parsedInfo = (0, import_graphql_parse_resolve_info3.parseResolveInfo)(info, {
             deep: true
           });
@@ -5502,16 +5720,25 @@ var generateUpdate2 = (db, tableName, table, tables, relationMap, setArgs, filte
             table,
             pkNames,
             parsedInfo,
-            limits
+            limits,
+            scope
           });
           const entry = nested?.enabled(tableName) ? nested.split(tableName, set) : void 0;
           const nestedOps = entry && nested.hasOps(entry.ops) ? entry.ops : void 0;
-          const input = remapUpdateInput(entry ? entry.columns : set, table, tableName);
+          const input = stripContextValues(
+            remapUpdateInput(entry ? entry.columns : set, table, tableName),
+            policies?.contextValues?.(tableName)
+          );
           if (!Object.keys(input).length && !nestedOps) {
             throw new import_graphql9.GraphQLError("Unable to update with no values specified!");
           }
           const relationCtx = relationFilterCtx(filterCtx, tableName);
-          const filters = single || requireWhere ? extractRequiredFilters(table, tableName, where, fieldName, relationCtx) : where ? extractFilters(table, tableName, where, relationCtx) : void 0;
+          const filters = withScope(
+            scope,
+            tableName,
+            table,
+            single || requireWhere ? extractRequiredFilters(table, tableName, where, fieldName, relationCtx) : where ? extractFilters(table, tableName, where, relationCtx) : void 0
+          );
           if (single) {
             await assertSingleMatch(executor, table, filters, fieldName);
           }
@@ -5531,7 +5758,8 @@ var generateUpdate2 = (db, tableName, table, tables, relationMap, setArgs, filte
             columns: input,
             ops: nestedOps,
             remapValues: (values) => values,
-            write: runUpdate
+            write: runUpdate,
+            context
           }) : await runUpdate(executor, input);
           if (single && result.length > 1) {
             throw new import_graphql9.GraphQLError(`${fieldName}: 'where' matched more than one row!`);
@@ -5549,7 +5777,7 @@ var generateUpdate2 = (db, tableName, table, tables, relationMap, setArgs, filte
     args: queryArgs
   };
 };
-var generateUpdateMany2 = (db, tableName, table, tables, relationMap, updateManyInput, fieldName, typeName, typeNameMapper, filterCtx, txCtx, nested, limits) => {
+var generateUpdateMany2 = (db, tableName, table, tables, relationMap, updateManyInput, fieldName, typeName, typeNameMapper, filterCtx, txCtx, nested, limits, policies) => {
   const queryArgs = {
     updates: {
       type: new import_graphql9.GraphQLNonNull(new import_graphql9.GraphQLList(new import_graphql9.GraphQLNonNull(updateManyInput)))
@@ -5565,6 +5793,8 @@ var generateUpdateMany2 = (db, tableName, table, tables, relationMap, updateMany
           if (!updates.length) {
             throw new import_graphql9.GraphQLError("No updates were provided!");
           }
+          const scope = policies?.scope?.(context);
+          const contextColumns = policies?.contextValues?.(tableName);
           const parsedInfo = (0, import_graphql_parse_resolve_info3.parseResolveInfo)(info, {
             deep: true
           });
@@ -5577,19 +5807,28 @@ var generateUpdateMany2 = (db, tableName, table, tables, relationMap, updateMany
             table,
             pkNames,
             parsedInfo,
-            limits
+            limits,
+            scope
           });
           const entries = updates.map(({ where, set }) => {
             const split = nested?.enabled(tableName) ? nested.split(tableName, set) : void 0;
             const ops = split && nested.hasOps(split.ops) ? split.ops : void 0;
-            const input = remapUpdateInput(split ? split.columns : set, table, tableName);
+            const input = stripContextValues(
+              remapUpdateInput(split ? split.columns : set, table, tableName),
+              contextColumns
+            );
             if (!Object.keys(input).length && !ops) {
               throw new import_graphql9.GraphQLError("Unable to update with no values specified!");
             }
             return {
               set: input,
               ops,
-              filters: where ? extractFilters(table, tableName, where, relationFilterCtx(filterCtx, tableName)) : void 0
+              filters: withScope(
+                scope,
+                tableName,
+                table,
+                where ? extractFilters(table, tableName, where, relationFilterCtx(filterCtx, tableName)) : void 0
+              )
             };
           });
           const returning = entries.some((entry) => entry.ops) ? nested.withJoinColumns(
@@ -5603,7 +5842,7 @@ var generateUpdateMany2 = (db, tableName, table, tables, relationMap, updateMany
           const perEntry = await executor.transaction(async (tx) => {
             const results = [];
             for (const entry of entries) {
-              const values = entry.ops ? { ...entry.set, ...await nested.applyParentSide(tx, tableName, entry.ops) } : entry.set;
+              const values = entry.ops ? { ...entry.set, ...await nested.applyParentSide(tx, tableName, entry.ops, context) } : entry.set;
               const writes = Object.keys(values).length > 0;
               let query = writes ? tx.update(table).set(values) : tx.select(returning).from(table);
               if (entry.filters) {
@@ -5611,7 +5850,7 @@ var generateUpdateMany2 = (db, tableName, table, tables, relationMap, updateMany
               }
               const rows = await (writes ? query.returning(returning) : query);
               if (entry.ops) {
-                await nested.applyChildSide(tx, tableName, entry.ops, rows);
+                await nested.applyChildSide(tx, tableName, entry.ops, rows, context);
               }
               results.push(rows);
             }
@@ -5640,7 +5879,7 @@ var generateUpdateMany2 = (db, tableName, table, tables, relationMap, updateMany
     args: queryArgs
   };
 };
-var generateDelete2 = (db, tableName, table, filterArgs, fieldName, typeName, single, requireWhere, filterCtx, selectionCtx, txCtx) => {
+var generateDelete2 = (db, tableName, table, filterArgs, fieldName, typeName, single, requireWhere, filterCtx, selectionCtx, txCtx, policies) => {
   const queryArgs = {
     where: {
       type: single || requireWhere ? new import_graphql9.GraphQLNonNull(filterArgs) : filterArgs
@@ -5652,6 +5891,7 @@ var generateDelete2 = (db, tableName, table, filterArgs, fieldName, typeName, si
       try {
         return await runMutation(db, context, info, txCtx, async (executor) => {
           const { where } = args;
+          const scope = policies?.scope?.(context);
           const parsedInfo = (0, import_graphql_parse_resolve_info3.parseResolveInfo)(info, {
             deep: true
           });
@@ -5661,7 +5901,12 @@ var generateDelete2 = (db, tableName, table, filterArgs, fieldName, typeName, si
             selectionCtx
           );
           const relationCtx = relationFilterCtx(filterCtx, tableName);
-          const filters = single || requireWhere ? extractRequiredFilters(table, tableName, where, fieldName, relationCtx) : where ? extractFilters(table, tableName, where, relationCtx) : void 0;
+          const filters = withScope(
+            scope,
+            tableName,
+            table,
+            single || requireWhere ? extractRequiredFilters(table, tableName, where, fieldName, relationCtx) : where ? extractFilters(table, tableName, where, relationCtx) : void 0
+          );
           if (single) {
             await assertSingleMatch(executor, table, filters, fieldName);
           }
@@ -5719,12 +5964,16 @@ function generateSchemaData2(db, schema, relations, options) {
   attachTargetPrimaryKeys(namedRelations, tables, pgPrimaryKeyPropNames);
   const eagerRelations = pruneNonEagerRelations(namedRelations, shouldEagerLoad);
   const filterCtx = { tables, relationMap: namedRelations };
+  const scopes = options.policies?.scope;
+  const contextValuesOf = options.policies?.contextValues;
+  const policies = bindPolicies(options.policies, filterCtx);
   const resolverFactory = createRelationResolverFactory(
     db,
     tables,
     "nulls-largest",
     filterCtx,
-    limits
+    limits,
+    scopes
   );
   const cacheCtx = {
     genericFilterCache: /* @__PURE__ */ new Map(),
@@ -5742,6 +5991,7 @@ function generateSchemaData2(db, schema, relations, options) {
     limits,
     docs: options.docs ?? {},
     primaryKeyOf: (name) => tables[name] ? pgPrimaryKeyPropNames(tables[name]) : [],
+    contextValuesOf,
     featureOf
   };
   const nestedPlans = features.nestedWrites ? buildNestedWritePlans(
@@ -5752,8 +6002,8 @@ function generateSchemaData2(db, schema, relations, options) {
     extractRelationJoinColumns
   ) : void 0;
   const nestedTypes = nestedPlans ? createNestedWriteTypes({ plans: nestedPlans, cacheCtx, typeNameMapper, insertPrefix: prefixes.insert }) : void 0;
-  const nestedRuntime = nestedPlans ? createNestedWriteRuntime({ plans: nestedPlans, filterCtx }) : void 0;
-  const relationAggregateFactory = anyTable("relationAggregates") ? createRelationAggregateFactory(db, tables, cacheCtx, typeNameMapper, filterCtx) : void 0;
+  const nestedRuntime = nestedPlans ? createNestedWriteRuntime({ plans: nestedPlans, filterCtx, scopes, contextValues: contextValuesOf }) : void 0;
+  const relationAggregateFactory = anyTable("relationAggregates") ? createRelationAggregateFactory(db, tables, cacheCtx, typeNameMapper, filterCtx, scopes) : void 0;
   const queries = {};
   const mutations = {};
   const mutationTxCtx = createMutationTxCtx(options.transactions);
@@ -5813,7 +6063,8 @@ function generateSchemaData2(db, schema, relations, options) {
       typeNameMapper,
       filterCtx,
       tableFeatures.distinct,
-      limits
+      limits,
+      policies
     );
     const selectSingleGenerated = generateSelectSingle2(
       db,
@@ -5826,7 +6077,8 @@ function generateSchemaData2(db, schema, relations, options) {
       typeName,
       typeNameMapper,
       filterCtx,
-      limits
+      limits,
+      policies
     );
     const insertArrGenerated = tableFeatures.insert ? generateInsertArray2(
       db,
@@ -5841,7 +6093,8 @@ function generateSchemaData2(db, schema, relations, options) {
       conflictDoNothing,
       mutationTxCtx,
       nestedRuntime,
-      limits
+      limits,
+      policies
     ) : void 0;
     const insertSingleGenerated = tableFeatures.insert ? generateInsertSingle2(
       db,
@@ -5856,7 +6109,8 @@ function generateSchemaData2(db, schema, relations, options) {
       conflictDoNothing,
       mutationTxCtx,
       nestedRuntime,
-      limits
+      limits,
+      policies
     ) : void 0;
     const uniqueSets = tableFeatures.upsert ? getUniqueColumnSets(schema[tableName], import_pg_core2.getTableConfig) : [];
     const onConflictInput = tableFeatures.upsert ? generateOnConflictInput({
@@ -5882,7 +6136,8 @@ function generateSchemaData2(db, schema, relations, options) {
       filterCtx,
       mutationTxCtx,
       nestedRuntime,
-      limits
+      limits,
+      policies
     ) : void 0;
     const upsertSingleGenerated = onConflictInput ? generateUpsert2(
       db,
@@ -5900,7 +6155,8 @@ function generateSchemaData2(db, schema, relations, options) {
       filterCtx,
       mutationTxCtx,
       nestedRuntime,
-      limits
+      limits,
+      policies
     ) : void 0;
     const updateGenerated = tableFeatures.update ? generateUpdate2(
       db,
@@ -5918,7 +6174,8 @@ function generateSchemaData2(db, schema, relations, options) {
       filterCtx,
       mutationTxCtx,
       nestedRuntime,
-      limits
+      limits,
+      policies
     ) : void 0;
     const updateSingleGenerated = tableFeatures.update ? generateUpdate2(
       db,
@@ -5936,7 +6193,8 @@ function generateSchemaData2(db, schema, relations, options) {
       filterCtx,
       mutationTxCtx,
       nestedRuntime,
-      limits
+      limits,
+      policies
     ) : void 0;
     const updateManyInput = tableFeatures.update && tableFeatures.updateMany ? generateUpdateManyInput({ typeName, updatePrefix: prefixes.update, updateInput, tableFilters }) : void 0;
     const updateManyGenerated = updateManyInput ? generateUpdateMany2(
@@ -5952,7 +6210,8 @@ function generateSchemaData2(db, schema, relations, options) {
       filterCtx,
       mutationTxCtx,
       nestedRuntime,
-      limits
+      limits,
+      policies
     ) : void 0;
     const deleteGenerated = tableFeatures.delete ? generateDelete2(
       db,
@@ -5965,7 +6224,8 @@ function generateSchemaData2(db, schema, relations, options) {
       tableFeatures.requireWhere,
       filterCtx,
       { tableName, relationMap: namedRelations, tables },
-      mutationTxCtx
+      mutationTxCtx,
+      policies
     ) : void 0;
     const deleteSingleGenerated = tableFeatures.delete ? generateDelete2(
       db,
@@ -5978,7 +6238,8 @@ function generateSchemaData2(db, schema, relations, options) {
       tableFeatures.requireWhere,
       filterCtx,
       { tableName, relationMap: namedRelations, tables },
-      mutationTxCtx
+      mutationTxCtx,
+      policies
     ) : void 0;
     const updateCountGenerated = tableFeatures.update && tableFeatures.countMutations ? generateWriteCount({
       db,
@@ -6012,7 +6273,8 @@ function generateSchemaData2(db, schema, relations, options) {
       typeName,
       aggregateFieldName,
       tableFilters,
-      filterCtx
+      filterCtx,
+      scopes
     ) : void 0;
     const groupByType = tableFeatures.aggregates && tableFeatures.groupBy ? generateGroupByType(schema[tableName], tableName, typeName, cacheCtx) : void 0;
     const groupByEnum = groupByType ? generateGroupByEnum(schema[tableName], tableName, typeName) : void 0;
@@ -6026,7 +6288,8 @@ function generateSchemaData2(db, schema, relations, options) {
       tableFilters,
       groupByEnum,
       havingInput,
-      filterCtx
+      filterCtx,
+      scopes
     ) : void 0;
     queries[selectArrGenerated.name] = {
       type: selectArrOutput,
@@ -6228,7 +6491,7 @@ var import_drizzle_orm9 = require("drizzle-orm");
 var import_sqlite_core2 = require("drizzle-orm/sqlite-core");
 var import_graphql10 = require("graphql");
 var import_graphql_parse_resolve_info4 = require("graphql-parse-resolve-info");
-var generateSelectArray3 = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx, distinctEnabled = true, limits) => {
+var generateSelectArray3 = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx, distinctEnabled = true, limits, policies) => {
   const queryBase = db.query[tableName];
   if (!queryBase) {
     throw new Error(
@@ -6265,6 +6528,7 @@ var generateSelectArray3 = (db, tableName, tables, relationMap, orderArgs, filte
           limits,
           pkNames,
           db: executor,
+          scope: policies?.scope?.(context),
           // SQLite sorts NULLs as the smallest values (first in ASC).
           nullOrdering: "nulls-smallest"
         });
@@ -6275,7 +6539,7 @@ var generateSelectArray3 = (db, tableName, tables, relationMap, orderArgs, filte
     args: queryArgs
   };
 };
-var generateSelectSingle3 = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx, limits) => {
+var generateSelectSingle3 = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx, limits, policies) => {
   const queryBase = db.query[tableName];
   if (!queryBase) {
     throw new Error(
@@ -6305,7 +6569,8 @@ var generateSelectSingle3 = (db, tableName, tables, relationMap, orderArgs, filt
           filterCtx,
           limits,
           pkNames,
-          db: executor
+          db: executor,
+          scope: policies?.scope?.(context)
         });
       } catch (e) {
         throw toGraphQLError(e);
@@ -6315,7 +6580,7 @@ var generateSelectSingle3 = (db, tableName, tables, relationMap, orderArgs, filt
   };
 };
 var sqlitePrimaryKeyPropNames = (table) => getPrimaryKeyPropNamesFromConfig(table, import_sqlite_core2.getTableConfig);
-var generateInsertArray3 = (db, tableName, table, tables, relationMap, baseType, fieldName, typeName, typeNameMapper, conflictDoNothing = false, txCtx, nested, limits) => {
+var generateInsertArray3 = (db, tableName, table, tables, relationMap, baseType, fieldName, typeName, typeNameMapper, conflictDoNothing = false, txCtx, nested, limits, policies) => {
   const queryArgs = {
     values: {
       type: new import_graphql10.GraphQLNonNull(new import_graphql10.GraphQLList(new import_graphql10.GraphQLNonNull(baseType)))
@@ -6332,7 +6597,13 @@ var generateInsertArray3 = (db, tableName, table, tables, relationMap, baseType,
           }
           const entries = nested?.enabled(tableName) ? args.values.map((values) => nested.split(tableName, values)) : void 0;
           const nestedEntries = entries?.some((entry) => nested.hasOps(entry.ops)) ? entries : void 0;
-          const input = nestedEntries ? [] : remapFromGraphQLArrayInput(entries ? entries.map((entry) => entry.columns) : args.values, table);
+          const contextColumns = policies?.contextValues?.(tableName);
+          const scope = policies?.scope?.(context);
+          const input = nestedEntries ? [] : applyContextValuesAll(
+            remapFromGraphQLArrayInput(entries ? entries.map((entry) => entry.columns) : args.values, table),
+            contextColumns,
+            context
+          );
           const parsedInfo = (0, import_graphql_parse_resolve_info4.parseResolveInfo)(info, {
             deep: true
           });
@@ -6345,7 +6616,8 @@ var generateInsertArray3 = (db, tableName, table, tables, relationMap, baseType,
             table,
             pkNames,
             parsedInfo,
-            limits
+            limits,
+            scope
           });
           const returning = nestedEntries ? nested.withJoinColumns(tableName, mergedOps(nestedEntries), { ...columns }, table) : columns;
           const runInsert = async (target, values) => {
@@ -6360,8 +6632,9 @@ var generateInsertArray3 = (db, tableName, table, tables, relationMap, baseType,
             runtime: nested,
             tableName,
             entries: nestedEntries,
-            remapValues: (values) => remapFromGraphQLSingleInput(values, table),
-            write: (tx, values) => runInsert(tx, [values])
+            remapValues: (values) => applyContextValues(remapFromGraphQLSingleInput(values, table), contextColumns, context),
+            write: (tx, values) => runInsert(tx, [values]),
+            context
           }) : await runInsert(executor, input);
           const enriched = hasRelations ? await eagerLoadMutationRelations(executor, tableName, result, pkNames, withParams) : result;
           return remapToGraphQLArrayOutput(enriched, tableName, table, relationMap);
@@ -6373,7 +6646,7 @@ var generateInsertArray3 = (db, tableName, table, tables, relationMap, baseType,
     args: queryArgs
   };
 };
-var generateInsertSingle3 = (db, tableName, table, tables, relationMap, baseType, fieldName, typeName, typeNameMapper, conflictDoNothing = false, txCtx, nested, limits) => {
+var generateInsertSingle3 = (db, tableName, table, tables, relationMap, baseType, fieldName, typeName, typeNameMapper, conflictDoNothing = false, txCtx, nested, limits, policies) => {
   const queryArgs = {
     values: {
       type: new import_graphql10.GraphQLNonNull(baseType)
@@ -6387,7 +6660,13 @@ var generateInsertSingle3 = (db, tableName, table, tables, relationMap, baseType
         return await runMutation(db, context, info, txCtx, async (executor) => {
           const entry = nested?.enabled(tableName) ? nested.split(tableName, args.values) : void 0;
           const nestedEntry = entry && nested.hasOps(entry.ops) ? entry : void 0;
-          const input = nestedEntry ? {} : remapFromGraphQLSingleInput(entry ? entry.columns : args.values, table);
+          const contextColumns = policies?.contextValues?.(tableName);
+          const scope = policies?.scope?.(context);
+          const input = nestedEntry ? {} : applyContextValues(
+            remapFromGraphQLSingleInput(entry ? entry.columns : args.values, table),
+            contextColumns,
+            context
+          );
           const parsedInfo = (0, import_graphql_parse_resolve_info4.parseResolveInfo)(info, {
             deep: true
           });
@@ -6400,7 +6679,8 @@ var generateInsertSingle3 = (db, tableName, table, tables, relationMap, baseType
             table,
             pkNames,
             parsedInfo,
-            limits
+            limits,
+            scope
           });
           const returning = nestedEntry ? nested.withJoinColumns(tableName, nestedEntry.ops, { ...columns }, table) : columns;
           const runInsert = async (target, values) => {
@@ -6415,8 +6695,9 @@ var generateInsertSingle3 = (db, tableName, table, tables, relationMap, baseType
             runtime: nested,
             tableName,
             entries: [nestedEntry],
-            remapValues: (values) => remapFromGraphQLSingleInput(values, table),
-            write: runInsert
+            remapValues: (values) => applyContextValues(remapFromGraphQLSingleInput(values, table), contextColumns, context),
+            write: runInsert,
+            context
           }) : await runInsert(executor, input);
           if (!result[0]) {
             if (!conflictDoNothing) {
@@ -6434,7 +6715,7 @@ var generateInsertSingle3 = (db, tableName, table, tables, relationMap, baseType
     args: queryArgs
   };
 };
-var generateUpsert3 = (db, tableName, table, tables, relationMap, baseType, onConflictType, uniqueSets, fieldName, typeName, single, typeNameMapper, filterCtx, txCtx, nested, limits) => {
+var generateUpsert3 = (db, tableName, table, tables, relationMap, baseType, onConflictType, uniqueSets, fieldName, typeName, single, typeNameMapper, filterCtx, txCtx, nested, limits, policies) => {
   const queryArgs = {
     values: {
       type: single ? new import_graphql10.GraphQLNonNull(baseType) : new import_graphql10.GraphQLNonNull(new import_graphql10.GraphQLList(new import_graphql10.GraphQLNonNull(baseType)))
@@ -6456,7 +6737,13 @@ var generateUpsert3 = (db, tableName, table, tables, relationMap, baseType, onCo
           }
           const entries = nested?.enabled(tableName) ? supplied.map((values) => nested.split(tableName, values)) : void 0;
           const nestedEntries = entries?.some((entry) => nested.hasOps(entry.ops)) ? entries : void 0;
-          const input = nestedEntries ? [] : remapFromGraphQLArrayInput(entries ? entries.map((entry) => entry.columns) : supplied, table);
+          const contextColumns = policies?.contextValues?.(tableName);
+          const scope = policies?.scope?.(context);
+          const input = nestedEntries ? [] : applyContextValuesAll(
+            remapFromGraphQLArrayInput(entries ? entries.map((entry) => entry.columns) : supplied, table),
+            contextColumns,
+            context
+          );
           const parsedInfo = (0, import_graphql_parse_resolve_info4.parseResolveInfo)(info, { deep: true });
           const { columns, hasRelations, withParams } = prepareMutationRelationColumns({
             relationMap,
@@ -6467,7 +6754,8 @@ var generateUpsert3 = (db, tableName, table, tables, relationMap, baseType, onCo
             table,
             pkNames,
             parsedInfo,
-            limits
+            limits,
+            scope
           });
           const returning = nestedEntries ? nested.withJoinColumns(tableName, mergedOps(nestedEntries), { ...columns }, table) : columns;
           const runUpsert = async (target, values) => {
@@ -6482,7 +6770,8 @@ var generateUpsert3 = (db, tableName, table, tables, relationMap, baseType, onCo
               buildWhere: (where) => extractFilters(table, tableName, where, relationFilterCtx(filterCtx, tableName))
             });
             let query = target.insert(table).values(values).returning(returning);
-            query = plan.action === "NOTHING" ? query.onConflictDoNothing(plan.target ? { target: plan.target } : void 0) : query.onConflictDoUpdate({ target: plan.target, set: plan.set, setWhere: plan.setWhere });
+            const setWhere = withScope(scope, tableName, table, plan.setWhere);
+            query = plan.action === "NOTHING" ? query.onConflictDoNothing(plan.target ? { target: plan.target } : void 0) : query.onConflictDoUpdate({ target: plan.target, set: plan.set, setWhere });
             return await query;
           };
           const result = nestedEntries ? await writeWithNestedOps({
@@ -6490,8 +6779,9 @@ var generateUpsert3 = (db, tableName, table, tables, relationMap, baseType, onCo
             runtime: nested,
             tableName,
             entries: nestedEntries,
-            remapValues: (values) => remapFromGraphQLSingleInput(values, table),
-            write: (tx, values) => runUpsert(tx, [values])
+            remapValues: (values) => applyContextValues(remapFromGraphQLSingleInput(values, table), contextColumns, context),
+            write: (tx, values) => runUpsert(tx, [values]),
+            context
           }) : await runUpsert(executor, input);
           if (single && !result[0]) {
             return void 0;
@@ -6506,7 +6796,7 @@ var generateUpsert3 = (db, tableName, table, tables, relationMap, baseType, onCo
     args: queryArgs
   };
 };
-var generateUpdate3 = (db, tableName, table, tables, relationMap, setArgs, filterArgs, fieldName, typeName, single, requireWhere, typeNameMapper, filterCtx, txCtx, nested, limits) => {
+var generateUpdate3 = (db, tableName, table, tables, relationMap, setArgs, filterArgs, fieldName, typeName, single, requireWhere, typeNameMapper, filterCtx, txCtx, nested, limits, policies) => {
   const queryArgs = {
     set: {
       type: new import_graphql10.GraphQLNonNull(setArgs)
@@ -6522,6 +6812,7 @@ var generateUpdate3 = (db, tableName, table, tables, relationMap, setArgs, filte
       try {
         return await runMutation(db, context, info, txCtx, async (executor) => {
           const { where, set } = args;
+          const scope = policies?.scope?.(context);
           const parsedInfo = (0, import_graphql_parse_resolve_info4.parseResolveInfo)(info, {
             deep: true
           });
@@ -6534,16 +6825,25 @@ var generateUpdate3 = (db, tableName, table, tables, relationMap, setArgs, filte
             table,
             pkNames,
             parsedInfo,
-            limits
+            limits,
+            scope
           });
           const entry = nested?.enabled(tableName) ? nested.split(tableName, set) : void 0;
           const nestedOps = entry && nested.hasOps(entry.ops) ? entry.ops : void 0;
-          const input = remapUpdateInput(entry ? entry.columns : set, table, tableName);
+          const input = stripContextValues(
+            remapUpdateInput(entry ? entry.columns : set, table, tableName),
+            policies?.contextValues?.(tableName)
+          );
           if (!Object.keys(input).length && !nestedOps) {
             throw new import_graphql10.GraphQLError("Unable to update with no values specified!");
           }
           const relationCtx = relationFilterCtx(filterCtx, tableName);
-          const filters = single || requireWhere ? extractRequiredFilters(table, tableName, where, fieldName, relationCtx) : where ? extractFilters(table, tableName, where, relationCtx) : void 0;
+          const filters = withScope(
+            scope,
+            tableName,
+            table,
+            single || requireWhere ? extractRequiredFilters(table, tableName, where, fieldName, relationCtx) : where ? extractFilters(table, tableName, where, relationCtx) : void 0
+          );
           if (single) {
             await assertSingleMatch(executor, table, filters, fieldName);
           }
@@ -6563,7 +6863,8 @@ var generateUpdate3 = (db, tableName, table, tables, relationMap, setArgs, filte
             columns: input,
             ops: nestedOps,
             remapValues: (values) => values,
-            write: runUpdate
+            write: runUpdate,
+            context
           }) : await runUpdate(executor, input);
           if (single && result.length > 1) {
             throw new import_graphql10.GraphQLError(`${fieldName}: 'where' matched more than one row!`);
@@ -6581,7 +6882,7 @@ var generateUpdate3 = (db, tableName, table, tables, relationMap, setArgs, filte
     args: queryArgs
   };
 };
-var generateUpdateMany3 = (db, tableName, table, tables, relationMap, updateManyInput, fieldName, typeName, typeNameMapper, filterCtx, txCtx, nested, limits) => {
+var generateUpdateMany3 = (db, tableName, table, tables, relationMap, updateManyInput, fieldName, typeName, typeNameMapper, filterCtx, txCtx, nested, limits, policies) => {
   const queryArgs = {
     updates: {
       type: new import_graphql10.GraphQLNonNull(new import_graphql10.GraphQLList(new import_graphql10.GraphQLNonNull(updateManyInput)))
@@ -6597,6 +6898,8 @@ var generateUpdateMany3 = (db, tableName, table, tables, relationMap, updateMany
           if (!updates.length) {
             throw new import_graphql10.GraphQLError("No updates were provided!");
           }
+          const scope = policies?.scope?.(context);
+          const contextColumns = policies?.contextValues?.(tableName);
           const parsedInfo = (0, import_graphql_parse_resolve_info4.parseResolveInfo)(info, {
             deep: true
           });
@@ -6609,19 +6912,28 @@ var generateUpdateMany3 = (db, tableName, table, tables, relationMap, updateMany
             table,
             pkNames,
             parsedInfo,
-            limits
+            limits,
+            scope
           });
           const entries = updates.map(({ where, set }) => {
             const split = nested?.enabled(tableName) ? nested.split(tableName, set) : void 0;
             const ops = split && nested.hasOps(split.ops) ? split.ops : void 0;
-            const input = remapUpdateInput(split ? split.columns : set, table, tableName);
+            const input = stripContextValues(
+              remapUpdateInput(split ? split.columns : set, table, tableName),
+              contextColumns
+            );
             if (!Object.keys(input).length && !ops) {
               throw new import_graphql10.GraphQLError("Unable to update with no values specified!");
             }
             return {
               set: input,
               ops,
-              filters: where ? extractFilters(table, tableName, where, relationFilterCtx(filterCtx, tableName)) : void 0
+              filters: withScope(
+                scope,
+                tableName,
+                table,
+                where ? extractFilters(table, tableName, where, relationFilterCtx(filterCtx, tableName)) : void 0
+              )
             };
           });
           const anyNested = entries.some((entry) => entry.ops);
@@ -6639,7 +6951,7 @@ var generateUpdateMany3 = (db, tableName, table, tables, relationMap, updateMany
             return query.returning(returning).all();
           };
           const runNestedEntry = async (tx, entry) => {
-            const values = entry.ops ? { ...entry.set, ...await nested.applyParentSide(tx, tableName, entry.ops) } : entry.set;
+            const values = entry.ops ? { ...entry.set, ...await nested.applyParentSide(tx, tableName, entry.ops, context) } : entry.set;
             const writes = Object.keys(values).length > 0;
             let query = writes ? tx.update(table).set(values) : tx.select(returning).from(table);
             if (entry.filters) {
@@ -6647,7 +6959,7 @@ var generateUpdateMany3 = (db, tableName, table, tables, relationMap, updateMany
             }
             const rows = await (writes ? query.returning(returning) : query);
             if (entry.ops) {
-              await nested.applyChildSide(tx, tableName, entry.ops, rows);
+              await nested.applyChildSide(tx, tableName, entry.ops, rows, context);
             }
             return rows;
           };
@@ -6700,7 +7012,7 @@ var generateUpdateMany3 = (db, tableName, table, tables, relationMap, updateMany
     args: queryArgs
   };
 };
-var generateDelete3 = (db, tableName, table, filterArgs, fieldName, typeName, single, requireWhere, filterCtx, selectionCtx, txCtx) => {
+var generateDelete3 = (db, tableName, table, filterArgs, fieldName, typeName, single, requireWhere, filterCtx, selectionCtx, txCtx, policies) => {
   const queryArgs = {
     where: {
       type: single || requireWhere ? new import_graphql10.GraphQLNonNull(filterArgs) : filterArgs
@@ -6712,6 +7024,7 @@ var generateDelete3 = (db, tableName, table, filterArgs, fieldName, typeName, si
       try {
         return await runMutation(db, context, info, txCtx, async (executor) => {
           const { where } = args;
+          const scope = policies?.scope?.(context);
           const parsedInfo = (0, import_graphql_parse_resolve_info4.parseResolveInfo)(info, {
             deep: true
           });
@@ -6721,7 +7034,12 @@ var generateDelete3 = (db, tableName, table, filterArgs, fieldName, typeName, si
             selectionCtx
           );
           const relationCtx = relationFilterCtx(filterCtx, tableName);
-          const filters = single || requireWhere ? extractRequiredFilters(table, tableName, where, fieldName, relationCtx) : where ? extractFilters(table, tableName, where, relationCtx) : void 0;
+          const filters = withScope(
+            scope,
+            tableName,
+            table,
+            single || requireWhere ? extractRequiredFilters(table, tableName, where, fieldName, relationCtx) : where ? extractFilters(table, tableName, where, relationCtx) : void 0
+          );
           if (single) {
             await assertSingleMatch(executor, table, filters, fieldName);
           }
@@ -6780,12 +7098,16 @@ var generateSchemaData3 = (db, schema, relations, options) => {
   attachTargetPrimaryKeys(namedRelations, tables, sqlitePrimaryKeyPropNames);
   const eagerRelations = pruneNonEagerRelations(namedRelations, shouldEagerLoad);
   const filterCtx = { tables, relationMap: namedRelations };
+  const scopes = options.policies?.scope;
+  const contextValuesOf = options.policies?.contextValues;
+  const policies = bindPolicies(options.policies, filterCtx);
   const resolverFactory = createRelationResolverFactory(
     db,
     tables,
     "nulls-smallest",
     filterCtx,
-    limits
+    limits,
+    scopes
   );
   const cacheCtx = {
     genericFilterCache: /* @__PURE__ */ new Map(),
@@ -6803,6 +7125,7 @@ var generateSchemaData3 = (db, schema, relations, options) => {
     limits,
     docs: options.docs ?? {},
     primaryKeyOf: (name) => tables[name] ? sqlitePrimaryKeyPropNames(tables[name]) : [],
+    contextValuesOf,
     featureOf
   };
   if (features.nestedWrites && db.resultKind === "sync") {
@@ -6818,8 +7141,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
     extractRelationJoinColumns
   ) : void 0;
   const nestedTypes = nestedPlans ? createNestedWriteTypes({ plans: nestedPlans, cacheCtx, typeNameMapper, insertPrefix: prefixes.insert }) : void 0;
-  const nestedRuntime = nestedPlans ? createNestedWriteRuntime({ plans: nestedPlans, filterCtx }) : void 0;
-  const relationAggregateFactory = anyTable("relationAggregates") ? createRelationAggregateFactory(db, tables, cacheCtx, typeNameMapper, filterCtx) : void 0;
+  const nestedRuntime = nestedPlans ? createNestedWriteRuntime({ plans: nestedPlans, filterCtx, scopes, contextValues: contextValuesOf }) : void 0;
+  const relationAggregateFactory = anyTable("relationAggregates") ? createRelationAggregateFactory(db, tables, cacheCtx, typeNameMapper, filterCtx, scopes) : void 0;
   const queries = {};
   const mutations = {};
   if (options.transactions && db.resultKind === "sync") {
@@ -6884,7 +7207,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       typeNameMapper,
       filterCtx,
       tableFeatures.distinct,
-      limits
+      limits,
+      policies
     );
     const selectSingleGenerated = generateSelectSingle3(
       db,
@@ -6897,7 +7221,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       typeName,
       typeNameMapper,
       filterCtx,
-      limits
+      limits,
+      policies
     );
     const insertArrGenerated = tableFeatures.insert ? generateInsertArray3(
       db,
@@ -6912,7 +7237,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       conflictDoNothing,
       mutationTxCtx,
       nestedRuntime,
-      limits
+      limits,
+      policies
     ) : void 0;
     const insertSingleGenerated = tableFeatures.insert ? generateInsertSingle3(
       db,
@@ -6927,7 +7253,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       conflictDoNothing,
       mutationTxCtx,
       nestedRuntime,
-      limits
+      limits,
+      policies
     ) : void 0;
     const uniqueSets = tableFeatures.upsert ? getUniqueColumnSets(schema[tableName], import_sqlite_core2.getTableConfig) : [];
     const onConflictInput = tableFeatures.upsert ? generateOnConflictInput({
@@ -6953,7 +7280,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       filterCtx,
       mutationTxCtx,
       nestedRuntime,
-      limits
+      limits,
+      policies
     ) : void 0;
     const upsertSingleGenerated = onConflictInput ? generateUpsert3(
       db,
@@ -6971,7 +7299,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       filterCtx,
       mutationTxCtx,
       nestedRuntime,
-      limits
+      limits,
+      policies
     ) : void 0;
     const updateGenerated = tableFeatures.update ? generateUpdate3(
       db,
@@ -6989,7 +7318,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       filterCtx,
       mutationTxCtx,
       nestedRuntime,
-      limits
+      limits,
+      policies
     ) : void 0;
     const updateSingleGenerated = tableFeatures.update ? generateUpdate3(
       db,
@@ -7007,7 +7337,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       filterCtx,
       mutationTxCtx,
       nestedRuntime,
-      limits
+      limits,
+      policies
     ) : void 0;
     const updateManyInput = tableFeatures.update && tableFeatures.updateMany ? generateUpdateManyInput({ typeName, updatePrefix: prefixes.update, updateInput, tableFilters }) : void 0;
     const updateManyGenerated = updateManyInput ? generateUpdateMany3(
@@ -7023,7 +7354,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       filterCtx,
       mutationTxCtx,
       nestedRuntime,
-      limits
+      limits,
+      policies
     ) : void 0;
     const deleteGenerated = tableFeatures.delete ? generateDelete3(
       db,
@@ -7036,7 +7368,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       tableFeatures.requireWhere,
       filterCtx,
       { tableName, relationMap: namedRelations, tables },
-      mutationTxCtx
+      mutationTxCtx,
+      policies
     ) : void 0;
     const deleteSingleGenerated = tableFeatures.delete ? generateDelete3(
       db,
@@ -7049,7 +7382,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       tableFeatures.requireWhere,
       filterCtx,
       { tableName, relationMap: namedRelations, tables },
-      mutationTxCtx
+      mutationTxCtx,
+      policies
     ) : void 0;
     const updateCountGenerated = tableFeatures.update && tableFeatures.countMutations ? generateWriteCount({
       db,
@@ -7083,7 +7417,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       typeName,
       aggregateFieldName,
       tableFilters,
-      filterCtx
+      filterCtx,
+      scopes
     ) : void 0;
     const groupByType = tableFeatures.aggregates && tableFeatures.groupBy ? generateGroupByType(schema[tableName], tableName, typeName, cacheCtx) : void 0;
     const groupByEnum = groupByType ? generateGroupByEnum(schema[tableName], tableName, typeName) : void 0;
@@ -7097,7 +7432,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       tableFilters,
       groupByEnum,
       havingInput,
-      filterCtx
+      filterCtx,
+      scopes
     ) : void 0;
     queries[selectArrGenerated.name] = {
       type: selectArrOutput,
@@ -7489,6 +7825,43 @@ var buildSchema = (db, config) => {
     limitPolicyCache.set(tableName, resolved);
     return resolved;
   } : void 0;
+  const scopeConfig = config?.scope;
+  const contextValuesConfig = config?.contextValues;
+  if (scopeConfig || contextValuesConfig) {
+    const tableNames = new Set(tableKeys);
+    for (const [tableName, hook] of Object.entries(scopeConfig ?? {})) {
+      if (!tableNames.has(tableName)) {
+        throw new Error(
+          `Drizzle-GraphQL Error: config.scope names '${tableName}', which is not a table in the Drizzle schema.`
+        );
+      }
+      if (typeof hook !== "function") {
+        throw new Error(`Drizzle-GraphQL Error: config.scope.${tableName} must be a function.`);
+      }
+    }
+    for (const [tableName, columnHooks] of Object.entries(contextValuesConfig ?? {})) {
+      if (!tableNames.has(tableName)) {
+        throw new Error(
+          `Drizzle-GraphQL Error: config.contextValues names '${tableName}', which is not a table in the Drizzle schema.`
+        );
+      }
+      const columns = (0, import_drizzle_orm11.getColumns)(schema[tableName]);
+      for (const [columnName, hook] of Object.entries(columnHooks)) {
+        if (!columns[columnName]) {
+          throw new Error(
+            `Drizzle-GraphQL Error: config.contextValues names '${tableName}.${columnName}', which is not a column of that table.`
+          );
+        }
+        if (typeof hook !== "function") {
+          throw new Error(`Drizzle-GraphQL Error: config.contextValues.${tableName}.${columnName} must be a function.`);
+        }
+      }
+    }
+  }
+  const policies = scopeConfig || contextValuesConfig ? {
+    scope: scopeConfig ? (tableName) => scopeConfig[tableName] : void 0,
+    contextValues: contextValuesConfig ? (tableName) => contextValuesConfig[tableName] : void 0
+  } : void 0;
   const exclude = config?.exclude;
   if (exclude) {
     const tableNames = new Set(tableKeys);
@@ -7606,6 +7979,7 @@ var buildSchema = (db, config) => {
     enumNameMapper: config?.enumNameMapper,
     transactions,
     limits,
+    policies,
     exclude,
     docs: {
       describeColumn: config?.describeColumn,