@vantreeseba/drizzle-graphql 7.5.0 → 7.7.0

package/dist/index.cjs

@@ -1144,7 +1144,7 @@ var batchedPaginatedRelationQuery = async (db, targetTable, foreignCol, whereCon
   }
   return rows;
 };
-var createRelationResolverFactory = (db, tables, nullOrdering, filterCtx, limits) => ({ tableName, relationName, relEntry, isOne }) => {
+var createRelationResolverFactory = (db, tables, nullOrdering, filterCtx, limits, policies) => ({ tableName, relationName, relEntry, isOne }) => {
   const parentTable = tables[tableName];
   const targetTableName = relEntry.targetTableName;
   const targetTable = tables[targetTableName];
@@ -1166,7 +1166,14 @@ var createRelationResolverFactory = (db, tables, nullOrdering, filterCtx, limits
     if (localValue == null) {
       return isOne ? null : [];
     }
-    const { where: whereArg, orderBy: orderByArg, limit: requestedLimit, offset, after } = args ?? {};
+    const {
+      where: whereArg,
+      orderBy: orderByArg,
+      limit: requestedLimit,
+      offset,
+      after,
+      deleted
+    } = args ?? {};
     const limit = applyLimitPolicy(requestedLimit, limitPolicy, `${tableName}.${relationName}`);
     const distinct = (args ?? {}).distinct?.length ? (args ?? {}).distinct : void 0;
     const cursorSelected = !isOne && !!info && selectsCursorField(info, targetTable);
@@ -1197,6 +1204,7 @@ var createRelationResolverFactory = (db, tables, nullOrdering, filterCtx, limits
       orderBy: orderByArg ?? null,
       limit: limit ?? null,
       offset: offset ?? null,
+      deleted: deleted ?? null,
       after: after ?? null,
       distinct: distinct ?? null,
       cursor: cursorEntries ? 1 : 0
@@ -1205,10 +1213,17 @@ var createRelationResolverFactory = (db, tables, nullOrdering, filterCtx, limits
     const loader = getOrCreateLoader(context, loaderKey, async (parentIds) => {
       const executor = resolveExecutor(db, context);
       const uniqueIds = [...new Set(parentIds)];
-      let whereCondition = (0, import_drizzle_orm4.and)(
-        (0, import_drizzle_orm4.inArray)(foreignCol, uniqueIds),
-        whereArg ? extractFilters(targetTable, targetTableName, whereArg, relationFilterCtx(filterCtx, targetTableName)) : void 0,
-        cursorValues ? buildCursorCondition(targetTable, cursorEntries, cursorValues, nullOrdering) : void 0
+      const scope = resolveScope(policies, context, filterCtx);
+      let whereCondition = withScope(
+        scope,
+        targetTableName,
+        targetTable,
+        (0, import_drizzle_orm4.and)(
+          (0, import_drizzle_orm4.inArray)(foreignCol, uniqueIds),
+          whereArg ? extractFilters(targetTable, targetTableName, whereArg, relationFilterCtx(filterCtx, targetTableName)) : void 0,
+          cursorValues ? buildCursorCondition(targetTable, cursorEntries, cursorValues, nullOrdering) : void 0
+        ),
+        deleted
       );
       if (distinct) {
         const keys = await selectDistinctKeys({
@@ -2013,7 +2028,8 @@ var generateSelectFields = (tables, tableName, relationMap, fromTableName, fromR
           {
             type: isRequired ? new import_graphql5.GraphQLNonNull(relType) : relType,
             args: {
-              where: { type: relSelectData.filters }
+              where: { type: relSelectData.filters },
+              ...deletedArg(cacheCtx.softDeleteOf, targetTableName)
             },
             resolve,
             ...relationDocs,
@@ -2032,6 +2048,7 @@ var generateSelectFields = (tables, tableName, relationMap, fromTableName, fromR
             orderBy: { type: relSelectData.order },
             offset: { type: import_graphql5.GraphQLInt },
             limit: { type: import_graphql5.GraphQLInt },
+            ...deletedArg(cacheCtx.softDeleteOf, targetTableName),
             after: {
               type: import_graphql5.GraphQLString,
               description: "Keyset pagination: only return related rows strictly after this cursor (a row's `cursor` field from a previous page of this relation, under the same orderBy)."
@@ -2059,7 +2076,8 @@ var generateSelectFields = (tables, tableName, relationMap, fromTableName, fromR
             {
               type: new import_graphql5.GraphQLNonNull(relationAggregate.type),
               args: {
-                where: { type: relSelectData.filters }
+                where: { type: relSelectData.filters },
+                ...deletedArg(cacheCtx.softDeleteOf, targetTableName)
               },
               resolve: relationAggregate.resolve,
               extensions: {
@@ -2114,9 +2132,14 @@ var generateTableTypes = (tableName, tables, relationMap, withReturning, relatio
   const table = tables[tableName];
   const columns = visibleColumns(table);
   const columnEntries = Object.entries(columns);
+  const contextColumns = cacheCtx.contextValuesOf?.(tableName);
+  const markerColumn = cacheCtx.softDeleteOf?.(tableName)?.columnName;
+  const writableEntries = contextColumns || markerColumn ? columnEntries.filter(
+    ([columnName]) => !(contextColumns && columnName in contextColumns) && columnName !== markerColumn
+  ) : columnEntries;
   const relaxedColumns = nestedWrites?.relaxedColumns(tableName);
   const insertFields = Object.fromEntries(
-    columnEntries.map(([columnName, column]) => {
+    writableEntries.map(([columnName, column]) => {
       const converted = drizzleColumnToGraphQLType(
         column,
         columnName,
@@ -2132,7 +2155,7 @@ var generateTableTypes = (tableName, tables, relationMap, withReturning, relatio
     })
   );
   const updateFields = Object.fromEntries(
-    columnEntries.map(([columnName, column]) => {
+    writableEntries.map(([columnName, column]) => {
       const converted = drizzleColumnToGraphQLType(column, columnName, tableName, true, false, true);
       const operations = cacheCtx.featureOf(tableName).fieldUpdateOperations ? fieldUpdateInputType(column, columnName, tableName) : void 0;
       const field = operations ? { ...converted, type: operations } : converted;
@@ -2655,7 +2678,132 @@ var extractFilters = (table, tableName, filters, relationCtx) => {
   }
   return variants.length ? variants.length > 1 ? (0, import_drizzle_orm4.and)(...variants) : variants[0] : void 0;
 };
-var extractRelationsParamsInner = (relationMap, tables, tableName, typeName, originField, typeNameMapper, _isInitial = false, filterCtx, limits) => {
+var deletedFilterEnum = new import_graphql5.GraphQLEnumType({
+  name: "DeletedFilter",
+  description: "Which rows a read over a soft-deleting table returns.",
+  values: {
+    EXCLUDE: { value: "EXCLUDE", description: "Only rows that are not marked deleted. The default." },
+    INCLUDE: { value: "INCLUDE", description: "Marked and unmarked rows alike." },
+    ONLY: { value: "ONLY", description: "Only rows that are marked deleted \u2014 a trash view." }
+  }
+});
+var resolveSoftDeleteInfo = (table, tableName, declaration) => {
+  const config = typeof declaration === "string" ? { column: declaration } : declaration;
+  const columnName = config?.column;
+  if (typeof columnName !== "string" || !columnName) {
+    throw new Error(
+      `Drizzle-GraphQL Error: config.softDelete.${tableName} must be a column name or an object with a 'column' property.`
+    );
+  }
+  const column = (0, import_drizzle_orm4.getColumns)(table)[columnName];
+  if (!column) {
+    throw new Error(
+      `Drizzle-GraphQL Error: config.softDelete names '${tableName}.${columnName}', which is not a column of that table.`
+    );
+  }
+  const nullable = !column.notNull;
+  const { type: baseType, constraint } = (0, import_drizzle_orm4.extractExtendedColumnType)(column);
+  const hasDeleted = "deletedValue" in config && config.deletedValue !== void 0;
+  const writeDeleted = hasDeleted ? typeof config.deletedValue === "function" ? config.deletedValue : () => config.deletedValue : constraint === "date" && baseType === "object" ? () => /* @__PURE__ */ new Date() : baseType === "string" ? () => (/* @__PURE__ */ new Date()).toISOString() : baseType === "number" ? () => Date.now() : baseType === "bigint" ? () => BigInt(Date.now()) : () => true;
+  let marker;
+  if (!nullable) {
+    if (hasDeleted && typeof config.deletedValue !== "function") {
+      marker = config.deletedValue;
+    } else if (!hasDeleted && baseType === "boolean") {
+      marker = true;
+    } else {
+      throw new Error(
+        `Drizzle-GraphQL Error: config.softDelete.${tableName} marks a NOT NULL column ('${columnName}'), so 'deletedValue' must be a constant that means deleted \u2014 not a function, and not omitted for a non-boolean column.`
+      );
+    }
+  }
+  const hasRestored = "restoredValue" in config;
+  const writeRestored = hasRestored ? config.restoredValue : nullable ? null : baseType === "boolean" ? false : void 0;
+  if (!nullable && writeRestored === void 0) {
+    throw new Error(
+      `Drizzle-GraphQL Error: config.softDelete.${tableName} marks a NOT NULL column ('${columnName}'), so 'restoredValue' must say what restoring writes back.`
+    );
+  }
+  return { columnName, column, nullable, writeDeleted, writeRestored, marker };
+};
+var softDeletePredicate = (info, table, mode) => {
+  if (mode === "INCLUDE") {
+    return void 0;
+  }
+  const column = table?.[info.columnName] ?? info.column;
+  if (info.nullable) {
+    return mode === "ONLY" ? (0, import_drizzle_orm4.isNotNull)(column) : (0, import_drizzle_orm4.isNull)(column);
+  }
+  return mode === "ONLY" ? (0, import_drizzle_orm4.eq)(column, info.marker) : (0, import_drizzle_orm4.ne)(column, info.marker);
+};
+var resolveScope = (policies, context, filterCtx) => {
+  const scopes = policies?.scope;
+  const softDelete = policies?.softDelete;
+  if (!scopes && !softDelete) {
+    return void 0;
+  }
+  return {
+    has: (tableName, mode) => !!scopes?.(tableName) || !!softDelete?.(tableName) && (mode ?? "EXCLUDE") !== "INCLUDE",
+    on: (tableName, table, mode) => {
+      const marked = softDelete?.(tableName);
+      const deleted = marked ? softDeletePredicate(marked, table, mode ?? "EXCLUDE") : void 0;
+      const hook = scopes?.(tableName);
+      if (!hook) {
+        return deleted;
+      }
+      const predicate = hook(context, table);
+      if (predicate === void 0 || predicate === null) {
+        return deleted;
+      }
+      if ((0, import_drizzle_orm4.is)(predicate, import_drizzle_orm4.SQL)) {
+        return (0, import_drizzle_orm4.and)(deleted, predicate);
+      }
+      if (typeof predicate !== "object") {
+        throw new import_graphql5.GraphQLError(
+          `Drizzle-GraphQL Error: the scope for '${tableName}' returned a ${typeof predicate}. A scope returns a filter object, a Drizzle SQL expression, or undefined.`
+        );
+      }
+      return (0, import_drizzle_orm4.and)(deleted, extractFilters(table, tableName, predicate, relationFilterCtx(filterCtx, tableName)));
+    }
+  };
+};
+var withScope = (scope, tableName, table, condition, mode) => {
+  const predicate = scope?.on(tableName, table, mode);
+  return predicate ? (0, import_drizzle_orm4.and)(condition, predicate) : condition;
+};
+var bindPolicies = (policies, filterCtx) => policies?.scope || policies?.contextValues || policies?.softDelete ? {
+  scope: policies.scope || policies.softDelete ? (context) => resolveScope(policies, context, filterCtx) : void 0,
+  contextValues: policies.contextValues,
+  softDelete: policies.softDelete
+} : void 0;
+var applyContextValues = (values, hooks, context) => {
+  if (!hooks) {
+    return values;
+  }
+  for (const [columnName, hook] of Object.entries(hooks)) {
+    values[columnName] = hook(context);
+  }
+  return values;
+};
+var applyContextValuesAll = (rows, hooks, context) => {
+  if (!hooks) {
+    return rows;
+  }
+  for (const row of rows) {
+    applyContextValues(row, hooks, context);
+  }
+  return rows;
+};
+var stripContextValues = (values, hooks) => {
+  if (!hooks) {
+    return values;
+  }
+  for (const columnName of Object.keys(hooks)) {
+    delete values[columnName];
+  }
+  return values;
+};
+var extractRelationsParamsInner = (relationMap, tables, tableName, typeName, originField, typeNameMapper, _isInitial = false, filterCtx, limits, scope) => {
   const relationsForTable = relationMap[tableName];
   if (!relationsForTable) {
     return void 0;
@@ -2701,8 +2849,15 @@ var extractRelationsParamsInner = (relationMap, tables, tableName, typeName, ori
     const offset = relationArgs?.offset ?? void 0;
     const limit = (0, import_drizzle_orm4.is)(relEntry.relation, import_drizzle_orm4.One) ? relationArgs?.limit ?? void 0 : applyLimitPolicy(relationArgs?.limit, limits?.(targetTableName), `${tableName}.${relName}`);
     const relWhere = relationArgs?.where;
-    thisRecord.where = relWhere ? {
-      RAW: (aliasedTable2) => extractFilters(aliasedTable2, relName, relWhere, relationFilterCtx(filterCtx, targetTableName))
+    const relDeleted = relationArgs?.deleted;
+    thisRecord.where = relWhere || scope?.has(targetTableName, relDeleted) ? {
+      RAW: (aliasedTable2) => withScope(
+        scope,
+        targetTableName,
+        aliasedTable2,
+        relWhere ? extractFilters(aliasedTable2, relName, relWhere, relationFilterCtx(filterCtx, targetTableName)) : void 0,
+        relDeleted
+      )
     } : void 0;
     const hasPagination = offset != null || limit != null;
     const pkNames = targetPkNames ?? [];
@@ -2718,14 +2873,15 @@ var extractRelationsParamsInner = (relationMap, tables, tableName, typeName, ori
       typeNameMapper,
       false,
       filterCtx,
-      limits
+      limits,
+      scope
     ) : void 0;
     thisRecord.with = relWith;
     args[relName] = thisRecord;
   }
   return args;
 };
-var extractRelationsParams = (relationMap, tables, tableName, info, typeName, typeNameMapper, filterCtx, limits) => {
+var extractRelationsParams = (relationMap, tables, tableName, info, typeName, typeNameMapper, filterCtx, limits, scope) => {
   if (!info) {
     return void 0;
   }
@@ -2738,7 +2894,8 @@ var extractRelationsParams = (relationMap, tables, tableName, info, typeName, ty
     typeNameMapper,
     true,
     filterCtx,
-    limits
+    limits,
+    scope
   );
 };
 var pruneNonEagerRelations = (relationMap, shouldEagerLoad) => {
@@ -3148,7 +3305,8 @@ var prepareMutationRelationColumns = (params) => {
     typeName,
     typeNameMapper,
     void 0,
-    params.limits
+    params.limits,
+    params.scope
   ) : void 0;
   const hasRelations = !!(withParams && Object.keys(withParams).length);
   const baseColumns = extractSelectedColumnsFromTreeSQLFormat(parsedInfo.fieldsByTypeName[typeName], table, {
@@ -3224,9 +3382,11 @@ var computeResolverFieldNames = (tableName, typeNameMapper, prefixes, suffixes)
   const updateFieldName = `${prefixes.update}${mapped ? capitalize(mapped.singular) : capitalize(tableName)}`;
   const updateManyFieldName = `${prefixes.update}${mapped ? capitalize(mapped.plural) : capitalize(tableName)}Many`;
   const deleteFieldName = `${prefixes.delete}${mapped ? capitalize(mapped.singular) : capitalize(tableName)}`;
+  const restoreFieldName = `${prefixes.restore ?? "restore"}${mapped ? capitalize(mapped.singular) : capitalize(tableName)}`;
   const writeSingleSuffix = suffixes.single === "" ? "Single" : suffixes.single;
   const updateSingleFieldName = `${updateFieldName}${writeSingleSuffix}`;
   const deleteSingleFieldName = `${deleteFieldName}${writeSingleSuffix}`;
+  const restoreSingleFieldName = `${restoreFieldName}${writeSingleSuffix}`;
   const pluralNoun = mapped ? capitalize(mapped.plural) : capitalize(tableName);
   const updateCountFieldName = `${prefixes.update}${pluralNoun}Count`;
   const deleteCountFieldName = `${prefixes.delete}${pluralNoun}Count`;
@@ -3246,6 +3406,8 @@ var computeResolverFieldNames = (tableName, typeNameMapper, prefixes, suffixes)
     updateCountFieldName,
     deleteFieldName,
     deleteSingleFieldName,
+    restoreFieldName,
+    restoreSingleFieldName,
     deleteCountFieldName
   };
 };
@@ -3350,7 +3512,13 @@ var generateWriteCount = ({
     args: queryArgs
   };
 };
-var selectArrayArgs = (orderArgs, filterArgs, distinctEnum) => ({
+var deletedArg = (softDelete, tableName) => softDelete?.(tableName) ? {
+  deleted: {
+    type: deletedFilterEnum,
+    description: "Whether rows marked deleted are returned. Defaults to EXCLUDE."
+  }
+} : {};
+var selectArrayArgs = (orderArgs, filterArgs, distinctEnum, softDelete, tableName) => ({
   offset: { type: import_graphql5.GraphQLInt },
   limit: { type: import_graphql5.GraphQLInt },
   orderBy: { type: orderArgs },
@@ -3359,12 +3527,14 @@ var selectArrayArgs = (orderArgs, filterArgs, distinctEnum) => ({
     type: import_graphql5.GraphQLString,
     description: "Keyset pagination: only return rows strictly after this cursor (a row's `cursor` field from a previous page, under the same orderBy)."
   },
-  ...distinctEnum ? { distinct: { type: new import_graphql5.GraphQLList(new import_graphql5.GraphQLNonNull(distinctEnum)) } } : {}
+  ...distinctEnum ? { distinct: { type: new import_graphql5.GraphQLList(new import_graphql5.GraphQLNonNull(distinctEnum)) } } : {},
+  ...deletedArg(softDelete, tableName)
 });
-var selectSingleArgs = (orderArgs, filterArgs) => ({
+var selectSingleArgs = (orderArgs, filterArgs, softDelete, tableName) => ({
   offset: { type: import_graphql5.GraphQLInt },
   orderBy: { type: orderArgs },
-  where: { type: filterArgs }
+  where: { type: filterArgs },
+  ...deletedArg(softDelete, tableName)
 });
 var runRelationalSelect = async (opts) => {
   const {
@@ -3382,7 +3552,9 @@ var runRelationalSelect = async (opts) => {
     single,
     filterCtx,
     pkNames,
-    after
+    after,
+    scope,
+    deleted
   } = opts;
   const distinct = opts.distinct?.length ? opts.distinct : void 0;
   const cursorSelected = !single && isCursorFieldSelected(parsedInfo.fieldsByTypeName[typeName], table);
@@ -3414,7 +3586,13 @@ var runRelationalSelect = async (opts) => {
       tableName,
       distinct,
       pkNames: pkNames ?? [],
-      where: where ? extractFilters(table, tableName, where, relationFilterCtx(filterCtx, tableName)) : void 0,
+      where: withScope(
+        scope,
+        tableName,
+        table,
+        where ? extractFilters(table, tableName, where, relationFilterCtx(filterCtx, tableName)) : void 0,
+        deleted
+      ),
       orderBy,
       limit: single ? 1 : opts.limit,
       offset
@@ -3441,15 +3619,24 @@ var runRelationalSelect = async (opts) => {
       // exactly the ordering the cursor encodes and the keyset predicate compares against.
       (aliasedTable2) => cursorOrderExprs(aliasedTable2, cursorEntries)
     ) : orderBy ? (aliasedTable2) => extractOrderBy(aliasedTable2, orderBy, relationFilterCtx(filterCtx, tableName), where) : needsDefaultOrder && pkNames?.length ? (aliasedTable2) => primaryKeyOrderExprs(aliasedTable2, pkNames) : void 0,
-    where: distinctKeys ? { RAW: (aliasedTable2) => primaryKeyRestriction(aliasedTable2, pkNames, distinctKeys) } : where || cursorValues ? {
-      RAW: (aliasedTable2) => (0, import_drizzle_orm4.and)(
-        where ? extractFilters(aliasedTable2, tableName, where, relationFilterCtx(filterCtx, tableName)) : void 0,
-        cursorValues ? buildCursorCondition(
-          aliasedTable2,
-          cursorEntries,
-          cursorValues,
-          opts.nullOrdering ?? "nulls-smallest"
-        ) : void 0
+    where: distinctKeys ? (
+      // The distinct pass already ran inside the scope, so the keys it picked are in it.
+      { RAW: (aliasedTable2) => primaryKeyRestriction(aliasedTable2, pkNames, distinctKeys) }
+    ) : where || cursorValues || scope?.has(tableName, deleted) ? {
+      RAW: (aliasedTable2) => withScope(
+        scope,
+        tableName,
+        aliasedTable2,
+        (0, import_drizzle_orm4.and)(
+          where ? extractFilters(aliasedTable2, tableName, where, relationFilterCtx(filterCtx, tableName)) : void 0,
+          cursorValues ? buildCursorCondition(
+            aliasedTable2,
+            cursorEntries,
+            cursorValues,
+            opts.nullOrdering ?? "nulls-smallest"
+          ) : void 0
+        ),
+        deleted
       )
     } : void 0,
     with: relationMap[tableName] ? extractRelationsParams(
@@ -3460,7 +3647,8 @@ var runRelationalSelect = async (opts) => {
       typeName,
       typeNameMapper,
       filterCtx,
-      opts.limits
+      opts.limits,
+      scope
     ) : void 0
   };
   if (single) {
@@ -3765,10 +3953,11 @@ var assembleAggregateRow = (row, request, target) => {
   }
   return result;
 };
-var generateAggregate = (db, tableName, table, typeName, fieldName, filterArgs, filterCtx) => {
+var generateAggregate = (db, tableName, table, typeName, fieldName, filterArgs, filterCtx, policies) => {
   const target = aggregateTarget(table, tableName, typeName);
   const queryArgs = {
-    where: { type: filterArgs }
+    where: { type: filterArgs },
+    ...deletedArg(policies?.softDelete, tableName)
   };
   return {
     name: fieldName,
@@ -3779,8 +3968,15 @@ var generateAggregate = (db, tableName, table, typeName, fieldName, filterArgs,
           return {};
         }
         let query = resolveExecutor(db, context).select(request.selection).from(table);
-        if (args.where) {
-          query = query.where(extractFilters(table, tableName, args.where, relationFilterCtx(filterCtx, tableName)));
+        const where = withScope(
+          resolveScope(policies, context, filterCtx),
+          tableName,
+          table,
+          args.where ? extractFilters(table, tableName, args.where, relationFilterCtx(filterCtx, tableName)) : void 0,
+          args.deleted
+        );
+        if (where) {
+          query = query.where(where);
         }
         const rows = await query;
         return assembleAggregateRow(rows[0] ?? {}, request, target);
@@ -3792,7 +3988,7 @@ var generateAggregate = (db, tableName, table, typeName, fieldName, filterArgs,
   };
 };
 var GROUP_KEY = "__dgql_group_key";
-var createRelationAggregateFactory = (db, tables, cacheCtx, typeNameMapper, filterCtx) => {
+var createRelationAggregateFactory = (db, tables, cacheCtx, typeNameMapper, filterCtx, policies) => {
   return ({ tableName, relationName, relEntry }) => {
     const parentTable = tables[tableName];
     const targetTableName = relEntry.targetTableName;
@@ -3819,17 +4015,25 @@ var createRelationAggregateFactory = (db, tables, cacheCtx, typeNameMapper, filt
           return assembleAggregateRow({}, request, target);
         }
         const whereArg = args?.where;
+        const deleted = args?.deleted;
         const argsKey = JSON.stringify({
           where: whereArg ?? null,
+          deleted: deleted ?? null,
           selection: Object.keys(request.selection).sort()
         });
         const loaderKey = `${tableName}::${relationName}::aggregate::${argsKey}`;
         const loader = getOrCreateLoader(context, loaderKey, async (parentIds) => {
           const executor = resolveExecutor(db, context);
           const uniqueIds = [...new Set(parentIds)];
-          const whereCondition = (0, import_drizzle_orm5.and)(
-            (0, import_drizzle_orm5.inArray)(foreignCol, uniqueIds),
-            whereArg ? extractFilters(targetTable, targetTableName, whereArg, relationFilterCtx(filterCtx, targetTableName)) : void 0
+          const whereCondition = withScope(
+            resolveScope(policies, context, filterCtx),
+            targetTableName,
+            targetTable,
+            (0, import_drizzle_orm5.and)(
+              (0, import_drizzle_orm5.inArray)(foreignCol, uniqueIds),
+              whereArg ? extractFilters(targetTable, targetTableName, whereArg, relationFilterCtx(filterCtx, targetTableName)) : void 0
+            ),
+            deleted
           );
           const rows = await executor.select({ [GROUP_KEY]: foreignCol, ...request.selection }).from(targetTable).where(whereCondition).groupBy(foreignCol);
           const byKey = new Map(rows.map((row) => [row[GROUP_KEY], row]));
@@ -3962,7 +4166,7 @@ var buildHavingCondition = (having, columns) => {
   }
   return conditions.length ? (0, import_drizzle_orm5.and)(...conditions) : void 0;
 };
-var generateGroupBy = (db, tableName, table, typeName, fieldName, filterArgs, groupByEnum, havingInput, filterCtx) => {
+var generateGroupBy = (db, tableName, table, typeName, fieldName, filterArgs, groupByEnum, havingInput, filterCtx, policies) => {
   const target = aggregateTarget(table, tableName, typeName);
   const groupable = groupableColumns(table, tableName);
   const columns = (0, import_drizzle_orm5.getColumns)(table);
@@ -3973,7 +4177,8 @@ var generateGroupBy = (db, tableName, table, typeName, fieldName, filterArgs, gr
       description: "Columns to group by. One result row per distinct combination of their values."
     },
     where: { type: filterArgs, description: "Filters the rows before they are grouped." },
-    having: { type: havingInput, description: "Filters the groups after they are aggregated." }
+    having: { type: havingInput, description: "Filters the groups after they are aggregated." },
+    ...deletedArg(policies?.softDelete, tableName)
   };
   return {
     name: fieldName,
@@ -3996,8 +4201,15 @@ var generateGroupBy = (db, tableName, table, typeName, fieldName, filterArgs, gr
           ...request.selection
         };
         let query = resolveExecutor(db, context).select(selection).from(table);
-        if (args.where) {
-          query = query.where(extractFilters(table, tableName, args.where, relationFilterCtx(filterCtx, tableName)));
+        const where = withScope(
+          resolveScope(policies, context, filterCtx),
+          tableName,
+          table,
+          args.where ? extractFilters(table, tableName, args.where, relationFilterCtx(filterCtx, tableName)) : void 0,
+          args.deleted
+        );
+        if (where) {
+          query = query.where(where);
         }
         query = query.groupBy(...keyColumns.map(([, column]) => column));
         const havingCondition = buildHavingCondition(args.having, columns);
@@ -4023,7 +4235,7 @@ var generateGroupBy = (db, tableName, table, typeName, fieldName, filterArgs, gr
 };
 
 // src/util/builders/mysql.ts
-var generateSelectArray = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx, distinctEnabled = true, limits) => {
+var generateSelectArray = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx, distinctEnabled = true, limits, policies) => {
   const queryBase = db.query[tableName];
   if (!queryBase) {
     throw new Error(
@@ -4036,7 +4248,9 @@ var generateSelectArray = (db, tableName, tables, relationMap, orderArgs, filter
   const queryArgs = selectArrayArgs(
     orderArgs,
     filterArgs,
-    distinctEnabled ? generateDistinctEnum(table, typeName) : void 0
+    distinctEnabled ? generateDistinctEnum(table, typeName) : void 0,
+    policies?.softDelete,
+    tableName
   );
   return {
     name: fieldName,
@@ -4058,6 +4272,7 @@ var generateSelectArray = (db, tableName, tables, relationMap, orderArgs, filter
           single: false,
           filterCtx,
           limits,
+          scope: policies?.scope?.(context),
           pkNames,
           db: executor,
           // MySQL sorts NULLs as the smallest values (first in ASC).
@@ -4070,14 +4285,14 @@ var generateSelectArray = (db, tableName, tables, relationMap, orderArgs, filter
     args: queryArgs
   };
 };
-var generateSelectSingle = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx, limits) => {
+var generateSelectSingle = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx, limits, policies) => {
   const queryBase = db.query[tableName];
   if (!queryBase) {
     throw new Error(
       `Drizzle-GraphQL Error: Table ${tableName} not found in drizzle instance. Did you forget to pass schema to drizzle constructor?`
     );
   }
-  const queryArgs = selectSingleArgs(orderArgs, filterArgs);
+  const queryArgs = selectSingleArgs(orderArgs, filterArgs, policies?.softDelete, tableName);
   const table = tables[tableName];
   const pkNames = mysqlPrimaryKeyPropNames(table);
   return {
@@ -4099,6 +4314,7 @@ var generateSelectSingle = (db, tableName, tables, relationMap, orderArgs, filte
           single: true,
           filterCtx,
           limits,
+          scope: policies?.scope?.(context),
           pkNames,
           db: executor
         });
@@ -4109,7 +4325,7 @@ var generateSelectSingle = (db, tableName, tables, relationMap, orderArgs, filte
     args: queryArgs
   };
 };
-var generateInsertArray = (db, _tableName, table, baseType, fieldName, txCtx) => {
+var generateInsertArray = (db, tableName, table, baseType, fieldName, txCtx, policies) => {
   const queryArgs = {
     values: {
       type: new import_graphql7.GraphQLNonNull(new import_graphql7.GraphQLList(new import_graphql7.GraphQLNonNull(baseType)))
@@ -4120,7 +4336,11 @@ var generateInsertArray = (db, _tableName, table, baseType, fieldName, txCtx) =>
     resolver: async (_source, args, context, info) => {
       try {
         return await runMutation(db, context, info, txCtx, async (executor) => {
-          const input = remapFromGraphQLArrayInput(args.values, table);
+          const input = applyContextValuesAll(
+            remapFromGraphQLArrayInput(args.values, table),
+            policies?.contextValues?.(tableName),
+            context
+          );
           if (!input.length) {
             throw new import_graphql7.GraphQLError("No values were provided!");
           }
@@ -4134,7 +4354,7 @@ var generateInsertArray = (db, _tableName, table, baseType, fieldName, txCtx) =>
     args: queryArgs
   };
 };
-var generateInsertSingle = (db, _tableName, table, baseType, fieldName, txCtx) => {
+var generateInsertSingle = (db, tableName, table, baseType, fieldName, txCtx, policies) => {
   const queryArgs = {
     values: {
       type: new import_graphql7.GraphQLNonNull(baseType)
@@ -4145,7 +4365,11 @@ var generateInsertSingle = (db, _tableName, table, baseType, fieldName, txCtx) =
     resolver: async (_source, args, context, info) => {
       try {
         return await runMutation(db, context, info, txCtx, async (executor) => {
-          const input = remapFromGraphQLSingleInput(args.values, table);
+          const input = applyContextValues(
+            remapFromGraphQLSingleInput(args.values, table),
+            policies?.contextValues?.(tableName),
+            context
+          );
           await executor.insert(table).values(input);
           return { isSuccess: true };
         });
@@ -4156,7 +4380,7 @@ var generateInsertSingle = (db, _tableName, table, baseType, fieldName, txCtx) =
     args: queryArgs
   };
 };
-var generateUpsert = (db, table, baseType, onConflictType, fieldName, single, txCtx) => {
+var generateUpsert = (db, tableName, table, baseType, onConflictType, fieldName, single, txCtx, policies) => {
   const queryArgs = {
     values: {
       type: single ? new import_graphql7.GraphQLNonNull(baseType) : new import_graphql7.GraphQLNonNull(new import_graphql7.GraphQLList(new import_graphql7.GraphQLNonNull(baseType)))
@@ -4172,7 +4396,11 @@ var generateUpsert = (db, table, baseType, onConflictType, fieldName, single, tx
     resolver: async (_source, args, context, info) => {
       try {
         return await runMutation(db, context, info, txCtx, async (executor) => {
-          const input = single ? [remapFromGraphQLSingleInput(args.values, table)] : remapFromGraphQLArrayInput(args.values, table);
+          const input = applyContextValuesAll(
+            single ? [remapFromGraphQLSingleInput(args.values, table)] : remapFromGraphQLArrayInput(args.values, table),
+            policies?.contextValues?.(tableName),
+            context
+          );
           if (!input.length) {
             throw new import_graphql7.GraphQLError("No values were provided!");
           }
@@ -4199,7 +4427,7 @@ var generateUpsert = (db, table, baseType, onConflictType, fieldName, single, tx
     args: queryArgs
   };
 };
-var generateUpdate = (db, tableName, table, setArgs, filterArgs, fieldName, single, requireWhere, filterCtx, txCtx) => {
+var generateUpdate = (db, tableName, table, setArgs, filterArgs, fieldName, single, requireWhere, filterCtx, txCtx, policies) => {
   const queryArgs = {
     set: {
       type: new import_graphql7.GraphQLNonNull(setArgs)
@@ -4214,12 +4442,21 @@ var generateUpdate = (db, tableName, table, setArgs, filterArgs, fieldName, sing
       try {
         return await runMutation(db, context, info, txCtx, async (executor) => {
           const { where, set } = args;
-          const input = remapUpdateInput(set, table, tableName);
+          const scope = policies?.scope?.(context);
+          const input = stripContextValues(
+            remapUpdateInput(set, table, tableName),
+            policies?.contextValues?.(tableName)
+          );
           if (!Object.keys(input).length) {
             throw new import_graphql7.GraphQLError("Unable to update with no values specified!");
           }
           const relationCtx = relationFilterCtx(filterCtx, tableName);
-          const filters = single || requireWhere ? extractRequiredFilters(table, tableName, where, fieldName, relationCtx) : where ? extractFilters(table, tableName, where, relationCtx) : void 0;
+          const filters = withScope(
+            scope,
+            tableName,
+            table,
+            single || requireWhere ? extractRequiredFilters(table, tableName, where, fieldName, relationCtx) : where ? extractFilters(table, tableName, where, relationCtx) : void 0
+          );
           if (single) {
             await assertSingleMatch(executor, table, filters, fieldName);
           }
@@ -4237,7 +4474,7 @@ var generateUpdate = (db, tableName, table, setArgs, filterArgs, fieldName, sing
     args: queryArgs
   };
 };
-var generateUpdateMany = (db, tableName, table, updateManyInput, fieldName, filterCtx, txCtx) => {
+var generateUpdateMany = (db, tableName, table, updateManyInput, fieldName, filterCtx, txCtx, policies) => {
   const queryArgs = {
     updates: {
       type: new import_graphql7.GraphQLNonNull(new import_graphql7.GraphQLList(new import_graphql7.GraphQLNonNull(updateManyInput)))
@@ -4252,14 +4489,21 @@ var generateUpdateMany = (db, tableName, table, updateManyInput, fieldName, filt
           if (!updates.length) {
             throw new import_graphql7.GraphQLError("No updates were provided!");
           }
+          const scope = policies?.scope?.(context);
+          const contextColumns = policies?.contextValues?.(tableName);
           const entries = updates.map(({ where, set }) => {
-            const input = remapUpdateInput(set, table, tableName);
+            const input = stripContextValues(remapUpdateInput(set, table, tableName), contextColumns);
             if (!Object.keys(input).length) {
               throw new import_graphql7.GraphQLError("Unable to update with no values specified!");
             }
             return {
               set: input,
-              filters: where ? extractFilters(table, tableName, where, relationFilterCtx(filterCtx, tableName)) : void 0
+              filters: withScope(
+                scope,
+                tableName,
+                table,
+                where ? extractFilters(table, tableName, where, relationFilterCtx(filterCtx, tableName)) : void 0
+              )
             };
           });
           await executor.transaction(async (tx) => {
@@ -4280,7 +4524,8 @@ var generateUpdateMany = (db, tableName, table, updateManyInput, fieldName, filt
     args: queryArgs
   };
 };
-var generateDelete = (db, tableName, table, filterArgs, fieldName, single, requireWhere, filterCtx, txCtx) => {
+var generateDelete = (db, tableName, table, filterArgs, fieldName, single, requireWhere, filterCtx, txCtx, policies, restore = false) => {
+  const softDelete = policies?.softDelete?.(tableName);
   const queryArgs = {
     where: {
       type: single || requireWhere ? new import_graphql7.GraphQLNonNull(filterArgs) : filterArgs
@@ -4292,12 +4537,19 @@ var generateDelete = (db, tableName, table, filterArgs, fieldName, single, requi
       try {
         return await runMutation(db, context, info, txCtx, async (executor) => {
           const { where } = args;
+          const scope = policies?.scope?.(context);
           const relationCtx = relationFilterCtx(filterCtx, tableName);
-          const filters = single || requireWhere ? extractRequiredFilters(table, tableName, where, fieldName, relationCtx) : where ? extractFilters(table, tableName, where, relationCtx) : void 0;
+          const filters = withScope(
+            scope,
+            tableName,
+            table,
+            single || requireWhere ? extractRequiredFilters(table, tableName, where, fieldName, relationCtx) : where ? extractFilters(table, tableName, where, relationCtx) : void 0,
+            restore ? "ONLY" : void 0
+          );
           if (single) {
             await assertSingleMatch(executor, table, filters, fieldName);
           }
-          let query = executor.delete(table);
+          let query = softDelete ? executor.update(table).set({ [softDelete.columnName]: restore ? softDelete.writeRestored : softDelete.writeDeleted() }) : executor.delete(table);
           if (filters) {
             query = query.where(filters);
           }
@@ -4341,12 +4593,17 @@ var generateSchemaData = (db, schema, relations, options) => {
   attachTargetPrimaryKeys(namedRelations, tables, mysqlPrimaryKeyPropNames);
   const eagerRelations = pruneNonEagerRelations(namedRelations, shouldEagerLoad);
   const filterCtx = { tables, relationMap: namedRelations };
+  const tablePolicies = options.policies;
+  const contextValuesOf = tablePolicies?.contextValues;
+  const softDeleteOf = tablePolicies?.softDelete;
+  const policies = bindPolicies(tablePolicies, filterCtx);
   const resolverFactory = createRelationResolverFactory(
     db,
     tables,
     "nulls-smallest",
     filterCtx,
-    limits
+    limits,
+    tablePolicies
   );
   const cacheCtx = {
     genericFilterCache: /* @__PURE__ */ new Map(),
@@ -4364,9 +4621,11 @@ var generateSchemaData = (db, schema, relations, options) => {
     limits,
     docs: options.docs ?? {},
     primaryKeyOf: (name) => tables[name] ? mysqlPrimaryKeyPropNames(tables[name]) : [],
+    contextValuesOf,
+    softDeleteOf,
     featureOf
   };
-  const relationAggregateFactory = anyTable("relationAggregates") ? createRelationAggregateFactory(db, tables, cacheCtx, typeNameMapper, filterCtx) : void 0;
+  const relationAggregateFactory = anyTable("relationAggregates") ? createRelationAggregateFactory(db, tables, cacheCtx, typeNameMapper, filterCtx, tablePolicies) : void 0;
   const queries = {};
   const mutations = {};
   const mutationTxCtx = createMutationTxCtx(options.transactions);
@@ -4422,8 +4681,11 @@ var generateSchemaData = (db, schema, relations, options) => {
       updateCountFieldName,
       deleteFieldName,
       deleteSingleFieldName,
+      restoreFieldName,
+      restoreSingleFieldName,
       deleteCountFieldName
     } = computeResolverFieldNames(tableName, typeNameMapper, prefixes, suffixes);
+    const softDeleteInfo = softDeleteOf?.(tableName);
     const selectArrGenerated = generateSelectArray(
       db,
       tableName,
@@ -4436,7 +4698,8 @@ var generateSchemaData = (db, schema, relations, options) => {
       typeNameMapper,
       filterCtx,
       tableFeatures.distinct,
-      limits
+      limits,
+      policies
     );
     const selectSingleGenerated = generateSelectSingle(
       db,
@@ -4449,7 +4712,8 @@ var generateSchemaData = (db, schema, relations, options) => {
       typeName,
       typeNameMapper,
       filterCtx,
-      limits
+      limits,
+      policies
     );
     const insertArrGenerated = tableFeatures.insert ? generateInsertArray(
       db,
@@ -4457,7 +4721,8 @@ var generateSchemaData = (db, schema, relations, options) => {
       schema[tableName],
       insertInput,
       createArrayFieldName,
-      mutationTxCtx
+      mutationTxCtx,
+      policies
     ) : void 0;
     const insertSingleGenerated = tableFeatures.insert ? generateInsertSingle(
       db,
@@ -4465,7 +4730,8 @@ var generateSchemaData = (db, schema, relations, options) => {
       schema[tableName],
       insertInput,
       createSingleFieldName,
-      mutationTxCtx
+      mutationTxCtx,
+      policies
     ) : void 0;
     const onConflictInput = tableFeatures.upsert ? generateOnConflictInput({
       table: schema[tableName],
@@ -4476,21 +4742,25 @@ var generateSchemaData = (db, schema, relations, options) => {
     }) : void 0;
     const upsertArrGenerated = onConflictInput ? generateUpsert(
       db,
+      tableName,
       schema[tableName],
       insertInput,
       onConflictInput,
       upsertArrayFieldName,
       false,
-      mutationTxCtx
+      mutationTxCtx,
+      policies
     ) : void 0;
     const upsertSingleGenerated = onConflictInput ? generateUpsert(
       db,
+      tableName,
       schema[tableName],
       insertInput,
       onConflictInput,
       upsertSingleFieldName,
       true,
-      mutationTxCtx
+      mutationTxCtx,
+      policies
     ) : void 0;
     const updateGenerated = tableFeatures.update ? generateUpdate(
       db,
@@ -4502,7 +4772,8 @@ var generateSchemaData = (db, schema, relations, options) => {
       false,
       tableFeatures.requireWhere,
       filterCtx,
-      mutationTxCtx
+      mutationTxCtx,
+      policies
     ) : void 0;
     const updateSingleGenerated = tableFeatures.update ? generateUpdate(
       db,
@@ -4514,7 +4785,8 @@ var generateSchemaData = (db, schema, relations, options) => {
       true,
       tableFeatures.requireWhere,
       filterCtx,
-      mutationTxCtx
+      mutationTxCtx,
+      policies
     ) : void 0;
     const updateManyInput = tableFeatures.update && tableFeatures.updateMany ? generateUpdateManyInput({ typeName, updatePrefix: prefixes.update, updateInput, tableFilters }) : void 0;
     const updateManyGenerated = updateManyInput ? generateUpdateMany(
@@ -4524,7 +4796,8 @@ var generateSchemaData = (db, schema, relations, options) => {
       updateManyInput,
       updateManyFieldName,
       filterCtx,
-      mutationTxCtx
+      mutationTxCtx,
+      policies
     ) : void 0;
     const deleteGenerated = tableFeatures.delete ? generateDelete(
       db,
@@ -4535,7 +4808,8 @@ var generateSchemaData = (db, schema, relations, options) => {
       false,
       tableFeatures.requireWhere,
       filterCtx,
-      mutationTxCtx
+      mutationTxCtx,
+      policies
     ) : void 0;
     const deleteSingleGenerated = tableFeatures.delete ? generateDelete(
       db,
@@ -4546,7 +4820,34 @@ var generateSchemaData = (db, schema, relations, options) => {
       true,
       tableFeatures.requireWhere,
       filterCtx,
-      mutationTxCtx
+      mutationTxCtx,
+      policies
+    ) : void 0;
+    const restoreGenerated = softDeleteInfo ? generateDelete(
+      db,
+      tableName,
+      schema[tableName],
+      tableFilters,
+      restoreFieldName,
+      false,
+      tableFeatures.requireWhere,
+      filterCtx,
+      mutationTxCtx,
+      policies,
+      true
+    ) : void 0;
+    const restoreSingleGenerated = softDeleteInfo ? generateDelete(
+      db,
+      tableName,
+      schema[tableName],
+      tableFilters,
+      restoreSingleFieldName,
+      true,
+      tableFeatures.requireWhere,
+      filterCtx,
+      mutationTxCtx,
+      policies,
+      true
     ) : void 0;
     const updateCountGenerated = tableFeatures.update && tableFeatures.countMutations ? generateWriteCount({
       db,
@@ -4579,7 +4880,8 @@ var generateSchemaData = (db, schema, relations, options) => {
       typeName,
       aggregateFieldName,
       tableFilters,
-      filterCtx
+      filterCtx,
+      tablePolicies
     ) : void 0;
     const groupByType = tableFeatures.aggregates && tableFeatures.groupBy ? generateGroupByType(schema[tableName], tableName, typeName, cacheCtx) : void 0;
     const groupByEnum = groupByType ? generateGroupByEnum(schema[tableName], tableName, typeName) : void 0;
@@ -4593,7 +4895,8 @@ var generateSchemaData = (db, schema, relations, options) => {
       tableFilters,
       groupByEnum,
       havingInput,
-      filterCtx
+      filterCtx,
+      tablePolicies
     ) : void 0;
     queries[selectArrGenerated.name] = {
       type: selectArrOutput,
@@ -4643,7 +4946,9 @@ var generateSchemaData = (db, schema, relations, options) => {
       [updateManyGenerated, { operation: "updateMany", single: false, targetArg: "updates" }],
       [updateSingleGenerated, { operation: "update", single: true, targetArg: "where" }],
       [deleteGenerated, { operation: "delete", single: false, targetArg: "where" }],
-      [deleteSingleGenerated, { operation: "delete", single: true, targetArg: "where" }]
+      [deleteSingleGenerated, { operation: "delete", single: true, targetArg: "where" }],
+      [restoreGenerated, { operation: "restore", single: false, targetArg: "where" }],
+      [restoreSingleGenerated, { operation: "restore", single: true, targetArg: "where" }]
     ];
     for (const [generated, meta] of generatedMutations) {
       if (generated) {
@@ -4821,8 +5126,9 @@ var createNestedWriteTypes = (params) => {
       return cached;
     }
     const omitted = plan.fkSide === "child" ? plan.foreignColPropName : void 0;
+    const contextColumns = cacheCtx.contextValuesOf?.(plan.targetTableName);
     const fields = Object.fromEntries(
-      Object.entries(visibleColumns(plan.targetTable)).filter(([columnName]) => columnName !== omitted).map(([columnName, column]) => [
+      Object.entries(visibleColumns(plan.targetTable)).filter(([columnName]) => columnName !== omitted && !contextColumns?.[columnName]).map(([columnName, column]) => [
         columnName,
         drizzleColumnToGraphQLType(column, columnName, plan.targetTableName, false, true, true)
       ])
@@ -4921,8 +5227,8 @@ var createNestedWriteTypes = (params) => {
 var mergedOps = (entries) => Object.assign({}, ...entries.map((entry) => entry.ops));
 var asArray = (value) => Array.isArray(value) ? value : value === void 0 ? [] : [value];
 var createNestedWriteRuntime = (params) => {
-  const { plans, filterCtx } = params;
-  const conditionOf = (plan, filter, operation) => {
+  const { plans, filterCtx, policies, contextValues } = params;
+  const conditionOf = (plan, filter, operation, scope) => {
     const condition = extractFilters(
       plan.targetTable,
       plan.targetTableName,
@@ -4934,7 +5240,7 @@ var createNestedWriteRuntime = (params) => {
         `Drizzle-GraphQL Error: '${operation}' on '${plan.relationName}' needs a filter that selects rows \u2014 it was given one that matches everything.`
       );
     }
-    return condition;
+    return withScope(scope, plan.targetTableName, plan.targetTable, condition);
   };
   const assertSingleOperation = (plan, op) => {
     const supplied = ["create", "connect", "disconnect"].filter((key) => op[key] !== void 0 && op[key] !== null);
@@ -4944,7 +5250,7 @@ var createNestedWriteRuntime = (params) => {
       );
     }
   };
-  const detachAll = async (executor, plan, key) => executor.update(plan.targetTable).set({ [plan.foreignColPropName]: null }).where((0, import_drizzle_orm7.eq)(plan.foreignCol, key));
+  const detachAll = async (executor, plan, key, scope) => executor.update(plan.targetTable).set({ [plan.foreignColPropName]: null }).where(withScope(scope, plan.targetTableName, plan.targetTable, (0, import_drizzle_orm7.eq)(plan.foreignCol, key)));
   return {
     enabled: (tableName) => !!plans[tableName],
     split: (tableName, values) => {
@@ -4978,12 +5284,13 @@ var createNestedWriteRuntime = (params) => {
       }
       return columns;
     },
-    applyParentSide: async (executor, tableName, ops) => {
+    applyParentSide: async (executor, tableName, ops, context) => {
       const tablePlans = plans[tableName];
       const patch = {};
       if (!tablePlans) {
         return patch;
       }
+      const scope = resolveScope(policies, context, filterCtx);
       for (const [relationName, op] of Object.entries(ops)) {
         const plan = tablePlans[relationName];
         if (!plan || plan.fkSide !== "parent") {
@@ -4991,7 +5298,11 @@ var createNestedWriteRuntime = (params) => {
         }
         assertSingleOperation(plan, op);
         if (op["create"] !== void 0) {
-          const values = remapFromGraphQLSingleInput({ ...op["create"] }, plan.targetTable);
+          const values = applyContextValues(
+            remapFromGraphQLSingleInput({ ...op["create"] }, plan.targetTable),
+            contextValues?.(plan.targetTableName),
+            context
+          );
           const inserted = await executor.insert(plan.targetTable).values(values).returning();
           const created = inserted[0];
           if (!created) {
@@ -5001,7 +5312,7 @@ var createNestedWriteRuntime = (params) => {
           }
           patch[plan.localColPropName] = created[plan.foreignColPropName];
         } else if (op["connect"] !== void 0) {
-          const rows = await executor.select().from(plan.targetTable).where(conditionOf(plan, op["connect"], "connect"));
+          const rows = await executor.select().from(plan.targetTable).where(conditionOf(plan, op["connect"], "connect", scope));
           if (rows.length !== 1) {
             throw new import_graphql8.GraphQLError(
               `Drizzle-GraphQL Error: 'connect' on '${relationName}' matched ${rows.length} rows \u2014 it attaches a single row, so its filter must match exactly one.`
@@ -5014,11 +5325,12 @@ var createNestedWriteRuntime = (params) => {
       }
       return patch;
     },
-    applyChildSide: async (executor, tableName, ops, parentRows) => {
+    applyChildSide: async (executor, tableName, ops, parentRows, context) => {
       const tablePlans = plans[tableName];
       if (!tablePlans) {
         return;
       }
+      const scope = resolveScope(policies, context, filterCtx);
       for (const [relationName, op] of Object.entries(ops)) {
         const plan = tablePlans[relationName];
         if (!plan || plan.fkSide !== "child") {
@@ -5035,34 +5347,38 @@ var createNestedWriteRuntime = (params) => {
             );
           }
           if (op["set"] !== void 0) {
-            await detachAll(executor, plan, key);
+            await detachAll(executor, plan, key, scope);
             for (const filter of asArray(op["set"])) {
-              await executor.update(plan.targetTable).set({ [plan.foreignColPropName]: key }).where(conditionOf(plan, filter, "set"));
+              await executor.update(plan.targetTable).set({ [plan.foreignColPropName]: key }).where(conditionOf(plan, filter, "set", scope));
             }
           }
           if (op["disconnect"] !== void 0) {
             if (plan.isOne) {
               if (op["disconnect"] === true) {
-                await detachAll(executor, plan, key);
+                await detachAll(executor, plan, key, scope);
               }
             } else {
               for (const filter of asArray(op["disconnect"])) {
-                await executor.update(plan.targetTable).set({ [plan.foreignColPropName]: null }).where((0, import_drizzle_orm7.and)((0, import_drizzle_orm7.eq)(plan.foreignCol, key), conditionOf(plan, filter, "disconnect")));
+                await executor.update(plan.targetTable).set({ [plan.foreignColPropName]: null }).where((0, import_drizzle_orm7.and)((0, import_drizzle_orm7.eq)(plan.foreignCol, key), conditionOf(plan, filter, "disconnect", scope)));
               }
             }
           }
           const attaches = op["connect"] !== void 0 || op["create"] !== void 0;
           if (plan.isOne && attaches && plan.canDetach && op["set"] === void 0) {
-            await detachAll(executor, plan, key);
+            await detachAll(executor, plan, key, scope);
           }
           if (op["connect"] !== void 0) {
             for (const filter of asArray(op["connect"])) {
-              await executor.update(plan.targetTable).set({ [plan.foreignColPropName]: key }).where(conditionOf(plan, filter, "connect"));
+              await executor.update(plan.targetTable).set({ [plan.foreignColPropName]: key }).where(conditionOf(plan, filter, "connect", scope));
             }
           }
           if (op["create"] !== void 0) {
             const rows = asArray(op["create"]).map((row) => ({
-              ...remapFromGraphQLSingleInput({ ...row }, plan.targetTable),
+              ...applyContextValues(
+                remapFromGraphQLSingleInput({ ...row }, plan.targetTable),
+                contextValues?.(plan.targetTableName),
+                context
+              ),
               [plan.foreignColPropName]: key
             }));
             if (rows.length) {
@@ -5075,30 +5391,30 @@ var createNestedWriteRuntime = (params) => {
   };
 };
 var writeWithNestedOps = async (params) => {
-  const { executor, runtime, tableName, entries, remapValues, write } = params;
+  const { executor, runtime, tableName, entries, remapValues, write, context } = params;
   return executor.transaction(async (tx) => {
     const rows = [];
     for (const entry of entries) {
-      const patch = await runtime.applyParentSide(tx, tableName, entry.ops);
+      const patch = await runtime.applyParentSide(tx, tableName, entry.ops, context);
       const written = await write(tx, { ...remapValues(entry.columns), ...patch });
-      await runtime.applyChildSide(tx, tableName, entry.ops, written);
+      await runtime.applyChildSide(tx, tableName, entry.ops, written, context);
       rows.push(...written);
     }
     return rows;
   });
 };
 var updateWithNestedOps = async (params) => {
-  const { executor, runtime, tableName, columns, ops, remapValues, write } = params;
+  const { executor, runtime, tableName, columns, ops, remapValues, write, context } = params;
   return executor.transaction(async (tx) => {
-    const patch = await runtime.applyParentSide(tx, tableName, ops);
+    const patch = await runtime.applyParentSide(tx, tableName, ops, context);
     const rows = await write(tx, { ...remapValues(columns), ...patch });
-    await runtime.applyChildSide(tx, tableName, ops, rows);
+    await runtime.applyChildSide(tx, tableName, ops, rows, context);
     return rows;
   });
 };
 
 // src/util/builders/pg.ts
-var generateSelectArray2 = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx, distinctEnabled = true, limits) => {
+var generateSelectArray2 = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx, distinctEnabled = true, limits, policies) => {
   const queryBase = db.query[tableName];
   const table = tables[tableName];
   const limitPolicy = limits?.(tableName);
@@ -5106,7 +5422,9 @@ var generateSelectArray2 = (db, tableName, tables, relationMap, orderArgs, filte
   const queryArgs = selectArrayArgs(
     orderArgs,
     filterArgs,
-    distinctEnabled ? generateDistinctEnum(table, typeName) : void 0
+    distinctEnabled ? generateDistinctEnum(table, typeName) : void 0,
+    policies?.softDelete,
+    tableName
   );
   return {
     name: fieldName,
@@ -5114,6 +5432,7 @@ var generateSelectArray2 = (db, tableName, tables, relationMap, orderArgs, filte
       try {
         const parsedInfo = (0, import_graphql_parse_resolve_info3.parseResolveInfo)(info, { deep: true });
         const { executor, queryBase: requestQueryBase } = resolveQueryExecutor(db, context, tableName, queryBase);
+        const scope = policies?.scope?.(context);
         const limit = applyLimitPolicy(args.limit, limitPolicy, fieldName);
         if (requestQueryBase) {
           return await runRelationalSelect({
@@ -5132,11 +5451,12 @@ var generateSelectArray2 = (db, tableName, tables, relationMap, orderArgs, filte
             limits,
             pkNames,
             db: executor,
+            scope,
             // PostgreSQL sorts NULLs as the largest values (last in ASC).
             nullOrdering: "nulls-largest"
           });
         }
-        const { offset, orderBy, where, distinct, after } = args;
+        const { offset, orderBy, where, distinct, after, deleted } = args;
         const selectedColumnsSql = extractSelectedColumnsFromTreeSQLFormat(
           parsedInfo.fieldsByTypeName[typeName],
           table,
@@ -5170,7 +5490,13 @@ var generateSelectArray2 = (db, tableName, tables, relationMap, orderArgs, filte
           }
         }
         const cursorCondition = after != null && cursorEntries ? buildCursorCondition(table, cursorEntries, decodeCursor(after, cursorEntries), "nulls-largest") : void 0;
-        const baseWhereSql = where ? extractFilters(table, tableName, where, relationFilterCtx(filterCtx, tableName)) : void 0;
+        const baseWhereSql = withScope(
+          scope,
+          tableName,
+          table,
+          where ? extractFilters(table, tableName, where, relationFilterCtx(filterCtx, tableName)) : void 0,
+          deleted
+        );
         const whereSql = cursorCondition ? (0, import_drizzle_orm8.and)(baseWhereSql, cursorCondition) : baseWhereSql;
         let distinctKeys;
         if (distinct?.length) {
@@ -5225,9 +5551,9 @@ var generateSelectArray2 = (db, tableName, tables, relationMap, orderArgs, filte
     args: queryArgs
   };
 };
-var generateSelectSingle2 = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx, limits) => {
+var generateSelectSingle2 = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx, limits, policies) => {
   const queryBase = db.query[tableName];
-  const queryArgs = selectSingleArgs(orderArgs, filterArgs);
+  const queryArgs = selectSingleArgs(orderArgs, filterArgs, policies?.softDelete, tableName);
   const table = tables[tableName];
   const pkNames = pgPrimaryKeyPropNames(table);
   return {
@@ -5236,6 +5562,7 @@ var generateSelectSingle2 = (db, tableName, tables, relationMap, orderArgs, filt
       try {
         const parsedInfo = (0, import_graphql_parse_resolve_info3.parseResolveInfo)(info, { deep: true });
         const { executor, queryBase: requestQueryBase } = resolveQueryExecutor(db, context, tableName, queryBase);
+        const scope = policies?.scope?.(context);
         if (requestQueryBase) {
           return await runRelationalSelect({
             queryBase: requestQueryBase,
@@ -5251,18 +5578,26 @@ var generateSelectSingle2 = (db, tableName, tables, relationMap, orderArgs, filt
             filterCtx,
             limits,
             pkNames,
-            db: executor
+            db: executor,
+            scope
           });
         }
-        const { offset, orderBy, where } = args;
+        const { offset, orderBy, where, deleted } = args;
         const selectedColumnsSql = extractSelectedColumnsFromTreeSQLFormat(
           parsedInfo.fieldsByTypeName[typeName],
           table,
           { tableName, relationMap, tables }
         );
         let q = executor.select(selectedColumnsSql).from(table);
-        if (where) {
-          q = q.where(extractFilters(table, tableName, where, relationFilterCtx(filterCtx, tableName)));
+        const whereSql = withScope(
+          scope,
+          tableName,
+          table,
+          where ? extractFilters(table, tableName, where, relationFilterCtx(filterCtx, tableName)) : void 0,
+          deleted
+        );
+        if (whereSql) {
+          q = q.where(whereSql);
         }
         if (orderBy) {
           q = q.orderBy(...extractOrderBy(table, orderBy, relationFilterCtx(filterCtx, tableName), where));
@@ -5283,7 +5618,7 @@ var generateSelectSingle2 = (db, tableName, tables, relationMap, orderArgs, filt
   };
 };
 var pgPrimaryKeyPropNames = (table) => getPrimaryKeyPropNamesFromConfig(table, import_pg_core2.getTableConfig);
-var generateInsertArray2 = (db, tableName, table, tables, relationMap, baseType, fieldName, typeName, typeNameMapper, conflictDoNothing = false, txCtx, nested, limits) => {
+var generateInsertArray2 = (db, tableName, table, tables, relationMap, baseType, fieldName, typeName, typeNameMapper, conflictDoNothing = false, txCtx, nested, limits, policies) => {
   const queryArgs = {
     values: {
       type: new import_graphql9.GraphQLNonNull(new import_graphql9.GraphQLList(new import_graphql9.GraphQLNonNull(baseType)))
@@ -5300,7 +5635,13 @@ var generateInsertArray2 = (db, tableName, table, tables, relationMap, baseType,
           }
           const entries = nested?.enabled(tableName) ? args.values.map((values) => nested.split(tableName, values)) : void 0;
           const nestedEntries = entries?.some((entry) => nested.hasOps(entry.ops)) ? entries : void 0;
-          const input = nestedEntries ? [] : remapFromGraphQLArrayInput(entries ? entries.map((entry) => entry.columns) : args.values, table);
+          const contextColumns = policies?.contextValues?.(tableName);
+          const scope = policies?.scope?.(context);
+          const input = nestedEntries ? [] : applyContextValuesAll(
+            remapFromGraphQLArrayInput(entries ? entries.map((entry) => entry.columns) : args.values, table),
+            contextColumns,
+            context
+          );
           const parsedInfo = (0, import_graphql_parse_resolve_info3.parseResolveInfo)(info, {
             deep: true
           });
@@ -5313,7 +5654,8 @@ var generateInsertArray2 = (db, tableName, table, tables, relationMap, baseType,
             table,
             pkNames,
             parsedInfo,
-            limits
+            limits,
+            scope
           });
           const returning = nestedEntries ? nested.withJoinColumns(tableName, mergedOps(nestedEntries), { ...columns }, table) : columns;
           const runInsert = async (target, values) => {
@@ -5328,8 +5670,9 @@ var generateInsertArray2 = (db, tableName, table, tables, relationMap, baseType,
             runtime: nested,
             tableName,
             entries: nestedEntries,
-            remapValues: (values) => remapFromGraphQLSingleInput(values, table),
-            write: (tx, values) => runInsert(tx, [values])
+            remapValues: (values) => applyContextValues(remapFromGraphQLSingleInput(values, table), contextColumns, context),
+            write: (tx, values) => runInsert(tx, [values]),
+            context
           }) : await runInsert(executor, input);
           const enriched = hasRelations ? await eagerLoadMutationRelations(executor, tableName, result, pkNames, withParams) : result;
           return remapToGraphQLArrayOutput(enriched, tableName, table, relationMap);
@@ -5341,7 +5684,7 @@ var generateInsertArray2 = (db, tableName, table, tables, relationMap, baseType,
     args: queryArgs
   };
 };
-var generateInsertSingle2 = (db, tableName, table, tables, relationMap, baseType, fieldName, typeName, typeNameMapper, conflictDoNothing = false, txCtx, nested, limits) => {
+var generateInsertSingle2 = (db, tableName, table, tables, relationMap, baseType, fieldName, typeName, typeNameMapper, conflictDoNothing = false, txCtx, nested, limits, policies) => {
   const queryArgs = {
     values: {
       type: new import_graphql9.GraphQLNonNull(baseType)
@@ -5355,7 +5698,13 @@ var generateInsertSingle2 = (db, tableName, table, tables, relationMap, baseType
         return await runMutation(db, context, info, txCtx, async (executor) => {
           const entry = nested?.enabled(tableName) ? nested.split(tableName, args.values) : void 0;
           const nestedEntry = entry && nested.hasOps(entry.ops) ? entry : void 0;
-          const input = nestedEntry ? {} : remapFromGraphQLSingleInput(entry ? entry.columns : args.values, table);
+          const contextColumns = policies?.contextValues?.(tableName);
+          const scope = policies?.scope?.(context);
+          const input = nestedEntry ? {} : applyContextValues(
+            remapFromGraphQLSingleInput(entry ? entry.columns : args.values, table),
+            contextColumns,
+            context
+          );
           const parsedInfo = (0, import_graphql_parse_resolve_info3.parseResolveInfo)(info, {
             deep: true
           });
@@ -5368,7 +5717,8 @@ var generateInsertSingle2 = (db, tableName, table, tables, relationMap, baseType
             table,
             pkNames,
             parsedInfo,
-            limits
+            limits,
+            scope
           });
           const returning = nestedEntry ? nested.withJoinColumns(tableName, nestedEntry.ops, { ...columns }, table) : columns;
           const runInsert = async (target, values) => {
@@ -5383,8 +5733,9 @@ var generateInsertSingle2 = (db, tableName, table, tables, relationMap, baseType
             runtime: nested,
             tableName,
             entries: [nestedEntry],
-            remapValues: (values) => remapFromGraphQLSingleInput(values, table),
-            write: runInsert
+            remapValues: (values) => applyContextValues(remapFromGraphQLSingleInput(values, table), contextColumns, context),
+            write: runInsert,
+            context
           }) : await runInsert(executor, input);
           if (!result[0]) {
             if (!conflictDoNothing) {
@@ -5402,7 +5753,7 @@ var generateInsertSingle2 = (db, tableName, table, tables, relationMap, baseType
     args: queryArgs
   };
 };
-var generateUpsert2 = (db, tableName, table, tables, relationMap, baseType, onConflictType, uniqueSets, fieldName, typeName, single, typeNameMapper, filterCtx, txCtx, nested, limits) => {
+var generateUpsert2 = (db, tableName, table, tables, relationMap, baseType, onConflictType, uniqueSets, fieldName, typeName, single, typeNameMapper, filterCtx, txCtx, nested, limits, policies) => {
   const queryArgs = {
     values: {
       type: single ? new import_graphql9.GraphQLNonNull(baseType) : new import_graphql9.GraphQLNonNull(new import_graphql9.GraphQLList(new import_graphql9.GraphQLNonNull(baseType)))
@@ -5424,7 +5775,13 @@ var generateUpsert2 = (db, tableName, table, tables, relationMap, baseType, onCo
           }
           const entries = nested?.enabled(tableName) ? supplied.map((values) => nested.split(tableName, values)) : void 0;
           const nestedEntries = entries?.some((entry) => nested.hasOps(entry.ops)) ? entries : void 0;
-          const input = nestedEntries ? [] : remapFromGraphQLArrayInput(entries ? entries.map((entry) => entry.columns) : supplied, table);
+          const contextColumns = policies?.contextValues?.(tableName);
+          const scope = policies?.scope?.(context);
+          const input = nestedEntries ? [] : applyContextValuesAll(
+            remapFromGraphQLArrayInput(entries ? entries.map((entry) => entry.columns) : supplied, table),
+            contextColumns,
+            context
+          );
           const parsedInfo = (0, import_graphql_parse_resolve_info3.parseResolveInfo)(info, { deep: true });
           const { columns, hasRelations, withParams } = prepareMutationRelationColumns({
             relationMap,
@@ -5435,7 +5792,8 @@ var generateUpsert2 = (db, tableName, table, tables, relationMap, baseType, onCo
             table,
             pkNames,
             parsedInfo,
-            limits
+            limits,
+            scope
           });
           const returning = nestedEntries ? nested.withJoinColumns(tableName, mergedOps(nestedEntries), { ...columns }, table) : columns;
           const runUpsert = async (target, values) => {
@@ -5450,7 +5808,8 @@ var generateUpsert2 = (db, tableName, table, tables, relationMap, baseType, onCo
               buildWhere: (where) => extractFilters(table, tableName, where, relationFilterCtx(filterCtx, tableName))
             });
             let query = target.insert(table).values(values).returning(returning);
-            query = plan.action === "NOTHING" ? query.onConflictDoNothing(plan.target ? { target: plan.target } : void 0) : query.onConflictDoUpdate({ target: plan.target, set: plan.set, setWhere: plan.setWhere });
+            const setWhere = withScope(scope, tableName, table, plan.setWhere);
+            query = plan.action === "NOTHING" ? query.onConflictDoNothing(plan.target ? { target: plan.target } : void 0) : query.onConflictDoUpdate({ target: plan.target, set: plan.set, setWhere });
             return await query;
           };
           const result = nestedEntries ? await writeWithNestedOps({
@@ -5458,8 +5817,9 @@ var generateUpsert2 = (db, tableName, table, tables, relationMap, baseType, onCo
             runtime: nested,
             tableName,
             entries: nestedEntries,
-            remapValues: (values) => remapFromGraphQLSingleInput(values, table),
-            write: (tx, values) => runUpsert(tx, [values])
+            remapValues: (values) => applyContextValues(remapFromGraphQLSingleInput(values, table), contextColumns, context),
+            write: (tx, values) => runUpsert(tx, [values]),
+            context
           }) : await runUpsert(executor, input);
           if (single && !result[0]) {
             return void 0;
@@ -5474,7 +5834,7 @@ var generateUpsert2 = (db, tableName, table, tables, relationMap, baseType, onCo
     args: queryArgs
   };
 };
-var generateUpdate2 = (db, tableName, table, tables, relationMap, setArgs, filterArgs, fieldName, typeName, single, requireWhere, typeNameMapper, filterCtx, txCtx, nested, limits) => {
+var generateUpdate2 = (db, tableName, table, tables, relationMap, setArgs, filterArgs, fieldName, typeName, single, requireWhere, typeNameMapper, filterCtx, txCtx, nested, limits, policies) => {
   const queryArgs = {
     set: {
       type: new import_graphql9.GraphQLNonNull(setArgs)
@@ -5490,6 +5850,7 @@ var generateUpdate2 = (db, tableName, table, tables, relationMap, setArgs, filte
       try {
         return await runMutation(db, context, info, txCtx, async (executor) => {
           const { where, set } = args;
+          const scope = policies?.scope?.(context);
           const parsedInfo = (0, import_graphql_parse_resolve_info3.parseResolveInfo)(info, {
             deep: true
           });
@@ -5502,16 +5863,25 @@ var generateUpdate2 = (db, tableName, table, tables, relationMap, setArgs, filte
             table,
             pkNames,
             parsedInfo,
-            limits
+            limits,
+            scope
           });
           const entry = nested?.enabled(tableName) ? nested.split(tableName, set) : void 0;
           const nestedOps = entry && nested.hasOps(entry.ops) ? entry.ops : void 0;
-          const input = remapUpdateInput(entry ? entry.columns : set, table, tableName);
+          const input = stripContextValues(
+            remapUpdateInput(entry ? entry.columns : set, table, tableName),
+            policies?.contextValues?.(tableName)
+          );
           if (!Object.keys(input).length && !nestedOps) {
             throw new import_graphql9.GraphQLError("Unable to update with no values specified!");
           }
           const relationCtx = relationFilterCtx(filterCtx, tableName);
-          const filters = single || requireWhere ? extractRequiredFilters(table, tableName, where, fieldName, relationCtx) : where ? extractFilters(table, tableName, where, relationCtx) : void 0;
+          const filters = withScope(
+            scope,
+            tableName,
+            table,
+            single || requireWhere ? extractRequiredFilters(table, tableName, where, fieldName, relationCtx) : where ? extractFilters(table, tableName, where, relationCtx) : void 0
+          );
           if (single) {
             await assertSingleMatch(executor, table, filters, fieldName);
           }
@@ -5531,7 +5901,8 @@ var generateUpdate2 = (db, tableName, table, tables, relationMap, setArgs, filte
             columns: input,
             ops: nestedOps,
             remapValues: (values) => values,
-            write: runUpdate
+            write: runUpdate,
+            context
           }) : await runUpdate(executor, input);
           if (single && result.length > 1) {
             throw new import_graphql9.GraphQLError(`${fieldName}: 'where' matched more than one row!`);
@@ -5549,7 +5920,7 @@ var generateUpdate2 = (db, tableName, table, tables, relationMap, setArgs, filte
     args: queryArgs
   };
 };
-var generateUpdateMany2 = (db, tableName, table, tables, relationMap, updateManyInput, fieldName, typeName, typeNameMapper, filterCtx, txCtx, nested, limits) => {
+var generateUpdateMany2 = (db, tableName, table, tables, relationMap, updateManyInput, fieldName, typeName, typeNameMapper, filterCtx, txCtx, nested, limits, policies) => {
   const queryArgs = {
     updates: {
       type: new import_graphql9.GraphQLNonNull(new import_graphql9.GraphQLList(new import_graphql9.GraphQLNonNull(updateManyInput)))
@@ -5565,6 +5936,8 @@ var generateUpdateMany2 = (db, tableName, table, tables, relationMap, updateMany
           if (!updates.length) {
             throw new import_graphql9.GraphQLError("No updates were provided!");
           }
+          const scope = policies?.scope?.(context);
+          const contextColumns = policies?.contextValues?.(tableName);
           const parsedInfo = (0, import_graphql_parse_resolve_info3.parseResolveInfo)(info, {
             deep: true
           });
@@ -5577,19 +5950,28 @@ var generateUpdateMany2 = (db, tableName, table, tables, relationMap, updateMany
             table,
             pkNames,
             parsedInfo,
-            limits
+            limits,
+            scope
           });
           const entries = updates.map(({ where, set }) => {
             const split = nested?.enabled(tableName) ? nested.split(tableName, set) : void 0;
             const ops = split && nested.hasOps(split.ops) ? split.ops : void 0;
-            const input = remapUpdateInput(split ? split.columns : set, table, tableName);
+            const input = stripContextValues(
+              remapUpdateInput(split ? split.columns : set, table, tableName),
+              contextColumns
+            );
             if (!Object.keys(input).length && !ops) {
               throw new import_graphql9.GraphQLError("Unable to update with no values specified!");
             }
             return {
               set: input,
               ops,
-              filters: where ? extractFilters(table, tableName, where, relationFilterCtx(filterCtx, tableName)) : void 0
+              filters: withScope(
+                scope,
+                tableName,
+                table,
+                where ? extractFilters(table, tableName, where, relationFilterCtx(filterCtx, tableName)) : void 0
+              )
             };
           });
           const returning = entries.some((entry) => entry.ops) ? nested.withJoinColumns(
@@ -5603,7 +5985,7 @@ var generateUpdateMany2 = (db, tableName, table, tables, relationMap, updateMany
           const perEntry = await executor.transaction(async (tx) => {
             const results = [];
             for (const entry of entries) {
-              const values = entry.ops ? { ...entry.set, ...await nested.applyParentSide(tx, tableName, entry.ops) } : entry.set;
+              const values = entry.ops ? { ...entry.set, ...await nested.applyParentSide(tx, tableName, entry.ops, context) } : entry.set;
               const writes = Object.keys(values).length > 0;
               let query = writes ? tx.update(table).set(values) : tx.select(returning).from(table);
               if (entry.filters) {
@@ -5611,7 +5993,7 @@ var generateUpdateMany2 = (db, tableName, table, tables, relationMap, updateMany
               }
               const rows = await (writes ? query.returning(returning) : query);
               if (entry.ops) {
-                await nested.applyChildSide(tx, tableName, entry.ops, rows);
+                await nested.applyChildSide(tx, tableName, entry.ops, rows, context);
               }
               results.push(rows);
             }
@@ -5640,7 +6022,8 @@ var generateUpdateMany2 = (db, tableName, table, tables, relationMap, updateMany
     args: queryArgs
   };
 };
-var generateDelete2 = (db, tableName, table, filterArgs, fieldName, typeName, single, requireWhere, filterCtx, selectionCtx, txCtx) => {
+var generateDelete2 = (db, tableName, table, filterArgs, fieldName, typeName, single, requireWhere, filterCtx, selectionCtx, txCtx, policies, restore = false) => {
+  const softDelete = policies?.softDelete?.(tableName);
   const queryArgs = {
     where: {
       type: single || requireWhere ? new import_graphql9.GraphQLNonNull(filterArgs) : filterArgs
@@ -5652,6 +6035,7 @@ var generateDelete2 = (db, tableName, table, filterArgs, fieldName, typeName, si
       try {
         return await runMutation(db, context, info, txCtx, async (executor) => {
           const { where } = args;
+          const scope = policies?.scope?.(context);
           const parsedInfo = (0, import_graphql_parse_resolve_info3.parseResolveInfo)(info, {
             deep: true
           });
@@ -5661,11 +6045,17 @@ var generateDelete2 = (db, tableName, table, filterArgs, fieldName, typeName, si
             selectionCtx
           );
           const relationCtx = relationFilterCtx(filterCtx, tableName);
-          const filters = single || requireWhere ? extractRequiredFilters(table, tableName, where, fieldName, relationCtx) : where ? extractFilters(table, tableName, where, relationCtx) : void 0;
+          const filters = withScope(
+            scope,
+            tableName,
+            table,
+            single || requireWhere ? extractRequiredFilters(table, tableName, where, fieldName, relationCtx) : where ? extractFilters(table, tableName, where, relationCtx) : void 0,
+            restore ? "ONLY" : void 0
+          );
           if (single) {
             await assertSingleMatch(executor, table, filters, fieldName);
           }
-          let query = executor.delete(table);
+          let query = softDelete ? executor.update(table).set({ [softDelete.columnName]: restore ? softDelete.writeRestored : softDelete.writeDeleted() }) : executor.delete(table);
           if (filters) {
             query = query.where(filters);
           }
@@ -5719,12 +6109,17 @@ function generateSchemaData2(db, schema, relations, options) {
   attachTargetPrimaryKeys(namedRelations, tables, pgPrimaryKeyPropNames);
   const eagerRelations = pruneNonEagerRelations(namedRelations, shouldEagerLoad);
   const filterCtx = { tables, relationMap: namedRelations };
+  const tablePolicies = options.policies;
+  const contextValuesOf = tablePolicies?.contextValues;
+  const softDeleteOf = tablePolicies?.softDelete;
+  const policies = bindPolicies(tablePolicies, filterCtx);
   const resolverFactory = createRelationResolverFactory(
     db,
     tables,
     "nulls-largest",
     filterCtx,
-    limits
+    limits,
+    tablePolicies
   );
   const cacheCtx = {
     genericFilterCache: /* @__PURE__ */ new Map(),
@@ -5742,6 +6137,8 @@ function generateSchemaData2(db, schema, relations, options) {
     limits,
     docs: options.docs ?? {},
     primaryKeyOf: (name) => tables[name] ? pgPrimaryKeyPropNames(tables[name]) : [],
+    contextValuesOf,
+    softDeleteOf,
     featureOf
   };
   const nestedPlans = features.nestedWrites ? buildNestedWritePlans(
@@ -5752,8 +6149,13 @@ function generateSchemaData2(db, schema, relations, options) {
     extractRelationJoinColumns
   ) : void 0;
   const nestedTypes = nestedPlans ? createNestedWriteTypes({ plans: nestedPlans, cacheCtx, typeNameMapper, insertPrefix: prefixes.insert }) : void 0;
-  const nestedRuntime = nestedPlans ? createNestedWriteRuntime({ plans: nestedPlans, filterCtx }) : void 0;
-  const relationAggregateFactory = anyTable("relationAggregates") ? createRelationAggregateFactory(db, tables, cacheCtx, typeNameMapper, filterCtx) : void 0;
+  const nestedRuntime = nestedPlans ? createNestedWriteRuntime({
+    plans: nestedPlans,
+    filterCtx,
+    policies: tablePolicies,
+    contextValues: contextValuesOf
+  }) : void 0;
+  const relationAggregateFactory = anyTable("relationAggregates") ? createRelationAggregateFactory(db, tables, cacheCtx, typeNameMapper, filterCtx, tablePolicies) : void 0;
   const queries = {};
   const mutations = {};
   const mutationTxCtx = createMutationTxCtx(options.transactions);
@@ -5799,8 +6201,11 @@ function generateSchemaData2(db, schema, relations, options) {
       updateCountFieldName,
       deleteFieldName,
       deleteSingleFieldName,
+      restoreFieldName,
+      restoreSingleFieldName,
       deleteCountFieldName
     } = computeResolverFieldNames(tableName, typeNameMapper, prefixes, suffixes);
+    const softDeleteInfo = softDeleteOf?.(tableName);
     const selectArrGenerated = generateSelectArray2(
       db,
       tableName,
@@ -5813,7 +6218,8 @@ function generateSchemaData2(db, schema, relations, options) {
       typeNameMapper,
       filterCtx,
       tableFeatures.distinct,
-      limits
+      limits,
+      policies
     );
     const selectSingleGenerated = generateSelectSingle2(
       db,
@@ -5826,7 +6232,8 @@ function generateSchemaData2(db, schema, relations, options) {
       typeName,
       typeNameMapper,
       filterCtx,
-      limits
+      limits,
+      policies
     );
     const insertArrGenerated = tableFeatures.insert ? generateInsertArray2(
       db,
@@ -5841,7 +6248,8 @@ function generateSchemaData2(db, schema, relations, options) {
       conflictDoNothing,
       mutationTxCtx,
       nestedRuntime,
-      limits
+      limits,
+      policies
     ) : void 0;
     const insertSingleGenerated = tableFeatures.insert ? generateInsertSingle2(
       db,
@@ -5856,7 +6264,8 @@ function generateSchemaData2(db, schema, relations, options) {
       conflictDoNothing,
       mutationTxCtx,
       nestedRuntime,
-      limits
+      limits,
+      policies
     ) : void 0;
     const uniqueSets = tableFeatures.upsert ? getUniqueColumnSets(schema[tableName], import_pg_core2.getTableConfig) : [];
     const onConflictInput = tableFeatures.upsert ? generateOnConflictInput({
@@ -5882,7 +6291,8 @@ function generateSchemaData2(db, schema, relations, options) {
       filterCtx,
       mutationTxCtx,
       nestedRuntime,
-      limits
+      limits,
+      policies
     ) : void 0;
     const upsertSingleGenerated = onConflictInput ? generateUpsert2(
       db,
@@ -5900,7 +6310,8 @@ function generateSchemaData2(db, schema, relations, options) {
       filterCtx,
       mutationTxCtx,
       nestedRuntime,
-      limits
+      limits,
+      policies
     ) : void 0;
     const updateGenerated = tableFeatures.update ? generateUpdate2(
       db,
@@ -5918,7 +6329,8 @@ function generateSchemaData2(db, schema, relations, options) {
       filterCtx,
       mutationTxCtx,
       nestedRuntime,
-      limits
+      limits,
+      policies
     ) : void 0;
     const updateSingleGenerated = tableFeatures.update ? generateUpdate2(
       db,
@@ -5936,7 +6348,8 @@ function generateSchemaData2(db, schema, relations, options) {
       filterCtx,
       mutationTxCtx,
       nestedRuntime,
-      limits
+      limits,
+      policies
     ) : void 0;
     const updateManyInput = tableFeatures.update && tableFeatures.updateMany ? generateUpdateManyInput({ typeName, updatePrefix: prefixes.update, updateInput, tableFilters }) : void 0;
     const updateManyGenerated = updateManyInput ? generateUpdateMany2(
@@ -5952,7 +6365,8 @@ function generateSchemaData2(db, schema, relations, options) {
       filterCtx,
       mutationTxCtx,
       nestedRuntime,
-      limits
+      limits,
+      policies
     ) : void 0;
     const deleteGenerated = tableFeatures.delete ? generateDelete2(
       db,
@@ -5965,7 +6379,8 @@ function generateSchemaData2(db, schema, relations, options) {
       tableFeatures.requireWhere,
       filterCtx,
       { tableName, relationMap: namedRelations, tables },
-      mutationTxCtx
+      mutationTxCtx,
+      policies
     ) : void 0;
     const deleteSingleGenerated = tableFeatures.delete ? generateDelete2(
       db,
@@ -5978,7 +6393,38 @@ function generateSchemaData2(db, schema, relations, options) {
       tableFeatures.requireWhere,
       filterCtx,
       { tableName, relationMap: namedRelations, tables },
-      mutationTxCtx
+      mutationTxCtx,
+      policies
+    ) : void 0;
+    const restoreGenerated = softDeleteInfo ? generateDelete2(
+      db,
+      tableName,
+      schema[tableName],
+      tableFilters,
+      restoreFieldName,
+      typeName,
+      false,
+      tableFeatures.requireWhere,
+      filterCtx,
+      { tableName, relationMap: namedRelations, tables },
+      mutationTxCtx,
+      policies,
+      true
+    ) : void 0;
+    const restoreSingleGenerated = softDeleteInfo ? generateDelete2(
+      db,
+      tableName,
+      schema[tableName],
+      tableFilters,
+      restoreSingleFieldName,
+      typeName,
+      true,
+      tableFeatures.requireWhere,
+      filterCtx,
+      { tableName, relationMap: namedRelations, tables },
+      mutationTxCtx,
+      policies,
+      true
     ) : void 0;
     const updateCountGenerated = tableFeatures.update && tableFeatures.countMutations ? generateWriteCount({
       db,
@@ -6012,7 +6458,8 @@ function generateSchemaData2(db, schema, relations, options) {
       typeName,
       aggregateFieldName,
       tableFilters,
-      filterCtx
+      filterCtx,
+      tablePolicies
     ) : void 0;
     const groupByType = tableFeatures.aggregates && tableFeatures.groupBy ? generateGroupByType(schema[tableName], tableName, typeName, cacheCtx) : void 0;
     const groupByEnum = groupByType ? generateGroupByEnum(schema[tableName], tableName, typeName) : void 0;
@@ -6026,7 +6473,8 @@ function generateSchemaData2(db, schema, relations, options) {
       tableFilters,
       groupByEnum,
       havingInput,
-      filterCtx
+      filterCtx,
+      tablePolicies
     ) : void 0;
     queries[selectArrGenerated.name] = {
       type: selectArrOutput,
@@ -6163,6 +6611,26 @@ function generateSchemaData2(db, schema, relations, options) {
         }
       };
     }
+    if (restoreGenerated) {
+      mutations[restoreGenerated.name] = {
+        type: arrTableItemOutput,
+        args: restoreGenerated.args,
+        resolve: restoreGenerated.resolver,
+        extensions: {
+          drizzle: drizzleMeta({ kind: "mutation", operation: "restore", single: false, targetArg: "where" })
+        }
+      };
+    }
+    if (restoreSingleGenerated) {
+      mutations[restoreSingleGenerated.name] = {
+        type: singleTableItemOutput,
+        args: restoreSingleGenerated.args,
+        resolve: restoreSingleGenerated.resolver,
+        extensions: {
+          drizzle: drizzleMeta({ kind: "mutation", operation: "restore", single: true, targetArg: "where" })
+        }
+      };
+    }
     if (updateCountGenerated) {
       mutations[updateCountGenerated.name] = {
         type: new import_graphql9.GraphQLNonNull(import_graphql9.GraphQLInt),
@@ -6228,7 +6696,7 @@ var import_drizzle_orm9 = require("drizzle-orm");
 var import_sqlite_core2 = require("drizzle-orm/sqlite-core");
 var import_graphql10 = require("graphql");
 var import_graphql_parse_resolve_info4 = require("graphql-parse-resolve-info");
-var generateSelectArray3 = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx, distinctEnabled = true, limits) => {
+var generateSelectArray3 = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx, distinctEnabled = true, limits, policies) => {
   const queryBase = db.query[tableName];
   if (!queryBase) {
     throw new Error(
@@ -6241,7 +6709,9 @@ var generateSelectArray3 = (db, tableName, tables, relationMap, orderArgs, filte
   const queryArgs = selectArrayArgs(
     orderArgs,
     filterArgs,
-    distinctEnabled ? generateDistinctEnum(table, typeName) : void 0
+    distinctEnabled ? generateDistinctEnum(table, typeName) : void 0,
+    policies?.softDelete,
+    tableName
   );
   return {
     name: fieldName,
@@ -6265,6 +6735,7 @@ var generateSelectArray3 = (db, tableName, tables, relationMap, orderArgs, filte
           limits,
           pkNames,
           db: executor,
+          scope: policies?.scope?.(context),
           // SQLite sorts NULLs as the smallest values (first in ASC).
           nullOrdering: "nulls-smallest"
         });
@@ -6275,14 +6746,14 @@ var generateSelectArray3 = (db, tableName, tables, relationMap, orderArgs, filte
     args: queryArgs
   };
 };
-var generateSelectSingle3 = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx, limits) => {
+var generateSelectSingle3 = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx, limits, policies) => {
   const queryBase = db.query[tableName];
   if (!queryBase) {
     throw new Error(
       `Drizzle-GraphQL Error: Table ${tableName} not found in drizzle instance. Did you forget to pass schema to drizzle constructor?`
     );
   }
-  const queryArgs = selectSingleArgs(orderArgs, filterArgs);
+  const queryArgs = selectSingleArgs(orderArgs, filterArgs, policies?.softDelete, tableName);
   const table = tables[tableName];
   const pkNames = sqlitePrimaryKeyPropNames(table);
   return {
@@ -6305,7 +6776,8 @@ var generateSelectSingle3 = (db, tableName, tables, relationMap, orderArgs, filt
           filterCtx,
           limits,
           pkNames,
-          db: executor
+          db: executor,
+          scope: policies?.scope?.(context)
         });
       } catch (e) {
         throw toGraphQLError(e);
@@ -6315,7 +6787,7 @@ var generateSelectSingle3 = (db, tableName, tables, relationMap, orderArgs, filt
   };
 };
 var sqlitePrimaryKeyPropNames = (table) => getPrimaryKeyPropNamesFromConfig(table, import_sqlite_core2.getTableConfig);
-var generateInsertArray3 = (db, tableName, table, tables, relationMap, baseType, fieldName, typeName, typeNameMapper, conflictDoNothing = false, txCtx, nested, limits) => {
+var generateInsertArray3 = (db, tableName, table, tables, relationMap, baseType, fieldName, typeName, typeNameMapper, conflictDoNothing = false, txCtx, nested, limits, policies) => {
   const queryArgs = {
     values: {
       type: new import_graphql10.GraphQLNonNull(new import_graphql10.GraphQLList(new import_graphql10.GraphQLNonNull(baseType)))
@@ -6332,7 +6804,13 @@ var generateInsertArray3 = (db, tableName, table, tables, relationMap, baseType,
           }
           const entries = nested?.enabled(tableName) ? args.values.map((values) => nested.split(tableName, values)) : void 0;
           const nestedEntries = entries?.some((entry) => nested.hasOps(entry.ops)) ? entries : void 0;
-          const input = nestedEntries ? [] : remapFromGraphQLArrayInput(entries ? entries.map((entry) => entry.columns) : args.values, table);
+          const contextColumns = policies?.contextValues?.(tableName);
+          const scope = policies?.scope?.(context);
+          const input = nestedEntries ? [] : applyContextValuesAll(
+            remapFromGraphQLArrayInput(entries ? entries.map((entry) => entry.columns) : args.values, table),
+            contextColumns,
+            context
+          );
           const parsedInfo = (0, import_graphql_parse_resolve_info4.parseResolveInfo)(info, {
             deep: true
           });
@@ -6345,7 +6823,8 @@ var generateInsertArray3 = (db, tableName, table, tables, relationMap, baseType,
             table,
             pkNames,
             parsedInfo,
-            limits
+            limits,
+            scope
           });
           const returning = nestedEntries ? nested.withJoinColumns(tableName, mergedOps(nestedEntries), { ...columns }, table) : columns;
           const runInsert = async (target, values) => {
@@ -6360,8 +6839,9 @@ var generateInsertArray3 = (db, tableName, table, tables, relationMap, baseType,
             runtime: nested,
             tableName,
             entries: nestedEntries,
-            remapValues: (values) => remapFromGraphQLSingleInput(values, table),
-            write: (tx, values) => runInsert(tx, [values])
+            remapValues: (values) => applyContextValues(remapFromGraphQLSingleInput(values, table), contextColumns, context),
+            write: (tx, values) => runInsert(tx, [values]),
+            context
           }) : await runInsert(executor, input);
           const enriched = hasRelations ? await eagerLoadMutationRelations(executor, tableName, result, pkNames, withParams) : result;
           return remapToGraphQLArrayOutput(enriched, tableName, table, relationMap);
@@ -6373,7 +6853,7 @@ var generateInsertArray3 = (db, tableName, table, tables, relationMap, baseType,
     args: queryArgs
   };
 };
-var generateInsertSingle3 = (db, tableName, table, tables, relationMap, baseType, fieldName, typeName, typeNameMapper, conflictDoNothing = false, txCtx, nested, limits) => {
+var generateInsertSingle3 = (db, tableName, table, tables, relationMap, baseType, fieldName, typeName, typeNameMapper, conflictDoNothing = false, txCtx, nested, limits, policies) => {
   const queryArgs = {
     values: {
       type: new import_graphql10.GraphQLNonNull(baseType)
@@ -6387,7 +6867,13 @@ var generateInsertSingle3 = (db, tableName, table, tables, relationMap, baseType
         return await runMutation(db, context, info, txCtx, async (executor) => {
           const entry = nested?.enabled(tableName) ? nested.split(tableName, args.values) : void 0;
           const nestedEntry = entry && nested.hasOps(entry.ops) ? entry : void 0;
-          const input = nestedEntry ? {} : remapFromGraphQLSingleInput(entry ? entry.columns : args.values, table);
+          const contextColumns = policies?.contextValues?.(tableName);
+          const scope = policies?.scope?.(context);
+          const input = nestedEntry ? {} : applyContextValues(
+            remapFromGraphQLSingleInput(entry ? entry.columns : args.values, table),
+            contextColumns,
+            context
+          );
           const parsedInfo = (0, import_graphql_parse_resolve_info4.parseResolveInfo)(info, {
             deep: true
           });
@@ -6400,7 +6886,8 @@ var generateInsertSingle3 = (db, tableName, table, tables, relationMap, baseType
             table,
             pkNames,
             parsedInfo,
-            limits
+            limits,
+            scope
           });
           const returning = nestedEntry ? nested.withJoinColumns(tableName, nestedEntry.ops, { ...columns }, table) : columns;
           const runInsert = async (target, values) => {
@@ -6415,8 +6902,9 @@ var generateInsertSingle3 = (db, tableName, table, tables, relationMap, baseType
             runtime: nested,
             tableName,
             entries: [nestedEntry],
-            remapValues: (values) => remapFromGraphQLSingleInput(values, table),
-            write: runInsert
+            remapValues: (values) => applyContextValues(remapFromGraphQLSingleInput(values, table), contextColumns, context),
+            write: runInsert,
+            context
           }) : await runInsert(executor, input);
           if (!result[0]) {
             if (!conflictDoNothing) {
@@ -6434,7 +6922,7 @@ var generateInsertSingle3 = (db, tableName, table, tables, relationMap, baseType
     args: queryArgs
   };
 };
-var generateUpsert3 = (db, tableName, table, tables, relationMap, baseType, onConflictType, uniqueSets, fieldName, typeName, single, typeNameMapper, filterCtx, txCtx, nested, limits) => {
+var generateUpsert3 = (db, tableName, table, tables, relationMap, baseType, onConflictType, uniqueSets, fieldName, typeName, single, typeNameMapper, filterCtx, txCtx, nested, limits, policies) => {
   const queryArgs = {
     values: {
       type: single ? new import_graphql10.GraphQLNonNull(baseType) : new import_graphql10.GraphQLNonNull(new import_graphql10.GraphQLList(new import_graphql10.GraphQLNonNull(baseType)))
@@ -6456,7 +6944,13 @@ var generateUpsert3 = (db, tableName, table, tables, relationMap, baseType, onCo
           }
           const entries = nested?.enabled(tableName) ? supplied.map((values) => nested.split(tableName, values)) : void 0;
           const nestedEntries = entries?.some((entry) => nested.hasOps(entry.ops)) ? entries : void 0;
-          const input = nestedEntries ? [] : remapFromGraphQLArrayInput(entries ? entries.map((entry) => entry.columns) : supplied, table);
+          const contextColumns = policies?.contextValues?.(tableName);
+          const scope = policies?.scope?.(context);
+          const input = nestedEntries ? [] : applyContextValuesAll(
+            remapFromGraphQLArrayInput(entries ? entries.map((entry) => entry.columns) : supplied, table),
+            contextColumns,
+            context
+          );
           const parsedInfo = (0, import_graphql_parse_resolve_info4.parseResolveInfo)(info, { deep: true });
           const { columns, hasRelations, withParams } = prepareMutationRelationColumns({
             relationMap,
@@ -6467,7 +6961,8 @@ var generateUpsert3 = (db, tableName, table, tables, relationMap, baseType, onCo
             table,
             pkNames,
             parsedInfo,
-            limits
+            limits,
+            scope
           });
           const returning = nestedEntries ? nested.withJoinColumns(tableName, mergedOps(nestedEntries), { ...columns }, table) : columns;
           const runUpsert = async (target, values) => {
@@ -6482,7 +6977,8 @@ var generateUpsert3 = (db, tableName, table, tables, relationMap, baseType, onCo
               buildWhere: (where) => extractFilters(table, tableName, where, relationFilterCtx(filterCtx, tableName))
             });
             let query = target.insert(table).values(values).returning(returning);
-            query = plan.action === "NOTHING" ? query.onConflictDoNothing(plan.target ? { target: plan.target } : void 0) : query.onConflictDoUpdate({ target: plan.target, set: plan.set, setWhere: plan.setWhere });
+            const setWhere = withScope(scope, tableName, table, plan.setWhere);
+            query = plan.action === "NOTHING" ? query.onConflictDoNothing(plan.target ? { target: plan.target } : void 0) : query.onConflictDoUpdate({ target: plan.target, set: plan.set, setWhere });
             return await query;
           };
           const result = nestedEntries ? await writeWithNestedOps({
@@ -6490,8 +6986,9 @@ var generateUpsert3 = (db, tableName, table, tables, relationMap, baseType, onCo
             runtime: nested,
             tableName,
             entries: nestedEntries,
-            remapValues: (values) => remapFromGraphQLSingleInput(values, table),
-            write: (tx, values) => runUpsert(tx, [values])
+            remapValues: (values) => applyContextValues(remapFromGraphQLSingleInput(values, table), contextColumns, context),
+            write: (tx, values) => runUpsert(tx, [values]),
+            context
           }) : await runUpsert(executor, input);
           if (single && !result[0]) {
             return void 0;
@@ -6506,7 +7003,7 @@ var generateUpsert3 = (db, tableName, table, tables, relationMap, baseType, onCo
     args: queryArgs
   };
 };
-var generateUpdate3 = (db, tableName, table, tables, relationMap, setArgs, filterArgs, fieldName, typeName, single, requireWhere, typeNameMapper, filterCtx, txCtx, nested, limits) => {
+var generateUpdate3 = (db, tableName, table, tables, relationMap, setArgs, filterArgs, fieldName, typeName, single, requireWhere, typeNameMapper, filterCtx, txCtx, nested, limits, policies) => {
   const queryArgs = {
     set: {
       type: new import_graphql10.GraphQLNonNull(setArgs)
@@ -6522,6 +7019,7 @@ var generateUpdate3 = (db, tableName, table, tables, relationMap, setArgs, filte
       try {
         return await runMutation(db, context, info, txCtx, async (executor) => {
           const { where, set } = args;
+          const scope = policies?.scope?.(context);
           const parsedInfo = (0, import_graphql_parse_resolve_info4.parseResolveInfo)(info, {
             deep: true
           });
@@ -6534,16 +7032,25 @@ var generateUpdate3 = (db, tableName, table, tables, relationMap, setArgs, filte
             table,
             pkNames,
             parsedInfo,
-            limits
+            limits,
+            scope
           });
           const entry = nested?.enabled(tableName) ? nested.split(tableName, set) : void 0;
           const nestedOps = entry && nested.hasOps(entry.ops) ? entry.ops : void 0;
-          const input = remapUpdateInput(entry ? entry.columns : set, table, tableName);
+          const input = stripContextValues(
+            remapUpdateInput(entry ? entry.columns : set, table, tableName),
+            policies?.contextValues?.(tableName)
+          );
           if (!Object.keys(input).length && !nestedOps) {
             throw new import_graphql10.GraphQLError("Unable to update with no values specified!");
           }
           const relationCtx = relationFilterCtx(filterCtx, tableName);
-          const filters = single || requireWhere ? extractRequiredFilters(table, tableName, where, fieldName, relationCtx) : where ? extractFilters(table, tableName, where, relationCtx) : void 0;
+          const filters = withScope(
+            scope,
+            tableName,
+            table,
+            single || requireWhere ? extractRequiredFilters(table, tableName, where, fieldName, relationCtx) : where ? extractFilters(table, tableName, where, relationCtx) : void 0
+          );
           if (single) {
             await assertSingleMatch(executor, table, filters, fieldName);
           }
@@ -6563,7 +7070,8 @@ var generateUpdate3 = (db, tableName, table, tables, relationMap, setArgs, filte
             columns: input,
             ops: nestedOps,
             remapValues: (values) => values,
-            write: runUpdate
+            write: runUpdate,
+            context
           }) : await runUpdate(executor, input);
           if (single && result.length > 1) {
             throw new import_graphql10.GraphQLError(`${fieldName}: 'where' matched more than one row!`);
@@ -6581,7 +7089,7 @@ var generateUpdate3 = (db, tableName, table, tables, relationMap, setArgs, filte
     args: queryArgs
   };
 };
-var generateUpdateMany3 = (db, tableName, table, tables, relationMap, updateManyInput, fieldName, typeName, typeNameMapper, filterCtx, txCtx, nested, limits) => {
+var generateUpdateMany3 = (db, tableName, table, tables, relationMap, updateManyInput, fieldName, typeName, typeNameMapper, filterCtx, txCtx, nested, limits, policies) => {
   const queryArgs = {
     updates: {
       type: new import_graphql10.GraphQLNonNull(new import_graphql10.GraphQLList(new import_graphql10.GraphQLNonNull(updateManyInput)))
@@ -6597,6 +7105,8 @@ var generateUpdateMany3 = (db, tableName, table, tables, relationMap, updateMany
           if (!updates.length) {
             throw new import_graphql10.GraphQLError("No updates were provided!");
           }
+          const scope = policies?.scope?.(context);
+          const contextColumns = policies?.contextValues?.(tableName);
           const parsedInfo = (0, import_graphql_parse_resolve_info4.parseResolveInfo)(info, {
             deep: true
           });
@@ -6609,19 +7119,28 @@ var generateUpdateMany3 = (db, tableName, table, tables, relationMap, updateMany
             table,
             pkNames,
             parsedInfo,
-            limits
+            limits,
+            scope
           });
           const entries = updates.map(({ where, set }) => {
             const split = nested?.enabled(tableName) ? nested.split(tableName, set) : void 0;
             const ops = split && nested.hasOps(split.ops) ? split.ops : void 0;
-            const input = remapUpdateInput(split ? split.columns : set, table, tableName);
+            const input = stripContextValues(
+              remapUpdateInput(split ? split.columns : set, table, tableName),
+              contextColumns
+            );
             if (!Object.keys(input).length && !ops) {
               throw new import_graphql10.GraphQLError("Unable to update with no values specified!");
             }
             return {
               set: input,
               ops,
-              filters: where ? extractFilters(table, tableName, where, relationFilterCtx(filterCtx, tableName)) : void 0
+              filters: withScope(
+                scope,
+                tableName,
+                table,
+                where ? extractFilters(table, tableName, where, relationFilterCtx(filterCtx, tableName)) : void 0
+              )
             };
           });
           const anyNested = entries.some((entry) => entry.ops);
@@ -6639,7 +7158,7 @@ var generateUpdateMany3 = (db, tableName, table, tables, relationMap, updateMany
             return query.returning(returning).all();
           };
           const runNestedEntry = async (tx, entry) => {
-            const values = entry.ops ? { ...entry.set, ...await nested.applyParentSide(tx, tableName, entry.ops) } : entry.set;
+            const values = entry.ops ? { ...entry.set, ...await nested.applyParentSide(tx, tableName, entry.ops, context) } : entry.set;
             const writes = Object.keys(values).length > 0;
             let query = writes ? tx.update(table).set(values) : tx.select(returning).from(table);
             if (entry.filters) {
@@ -6647,7 +7166,7 @@ var generateUpdateMany3 = (db, tableName, table, tables, relationMap, updateMany
             }
             const rows = await (writes ? query.returning(returning) : query);
             if (entry.ops) {
-              await nested.applyChildSide(tx, tableName, entry.ops, rows);
+              await nested.applyChildSide(tx, tableName, entry.ops, rows, context);
             }
             return rows;
           };
@@ -6700,7 +7219,8 @@ var generateUpdateMany3 = (db, tableName, table, tables, relationMap, updateMany
     args: queryArgs
   };
 };
-var generateDelete3 = (db, tableName, table, filterArgs, fieldName, typeName, single, requireWhere, filterCtx, selectionCtx, txCtx) => {
+var generateDelete3 = (db, tableName, table, filterArgs, fieldName, typeName, single, requireWhere, filterCtx, selectionCtx, txCtx, policies, restore = false) => {
+  const softDelete = policies?.softDelete?.(tableName);
   const queryArgs = {
     where: {
       type: single || requireWhere ? new import_graphql10.GraphQLNonNull(filterArgs) : filterArgs
@@ -6712,6 +7232,7 @@ var generateDelete3 = (db, tableName, table, filterArgs, fieldName, typeName, si
       try {
         return await runMutation(db, context, info, txCtx, async (executor) => {
           const { where } = args;
+          const scope = policies?.scope?.(context);
           const parsedInfo = (0, import_graphql_parse_resolve_info4.parseResolveInfo)(info, {
             deep: true
           });
@@ -6721,11 +7242,17 @@ var generateDelete3 = (db, tableName, table, filterArgs, fieldName, typeName, si
             selectionCtx
           );
           const relationCtx = relationFilterCtx(filterCtx, tableName);
-          const filters = single || requireWhere ? extractRequiredFilters(table, tableName, where, fieldName, relationCtx) : where ? extractFilters(table, tableName, where, relationCtx) : void 0;
+          const filters = withScope(
+            scope,
+            tableName,
+            table,
+            single || requireWhere ? extractRequiredFilters(table, tableName, where, fieldName, relationCtx) : where ? extractFilters(table, tableName, where, relationCtx) : void 0,
+            restore ? "ONLY" : void 0
+          );
           if (single) {
             await assertSingleMatch(executor, table, filters, fieldName);
           }
-          let query = executor.delete(table);
+          let query = softDelete ? executor.update(table).set({ [softDelete.columnName]: restore ? softDelete.writeRestored : softDelete.writeDeleted() }) : executor.delete(table);
           if (filters) {
             query = query.where(filters);
           }
@@ -6780,12 +7307,17 @@ var generateSchemaData3 = (db, schema, relations, options) => {
   attachTargetPrimaryKeys(namedRelations, tables, sqlitePrimaryKeyPropNames);
   const eagerRelations = pruneNonEagerRelations(namedRelations, shouldEagerLoad);
   const filterCtx = { tables, relationMap: namedRelations };
+  const tablePolicies = options.policies;
+  const contextValuesOf = tablePolicies?.contextValues;
+  const softDeleteOf = tablePolicies?.softDelete;
+  const policies = bindPolicies(tablePolicies, filterCtx);
   const resolverFactory = createRelationResolverFactory(
     db,
     tables,
     "nulls-smallest",
     filterCtx,
-    limits
+    limits,
+    tablePolicies
   );
   const cacheCtx = {
     genericFilterCache: /* @__PURE__ */ new Map(),
@@ -6803,6 +7335,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
     limits,
     docs: options.docs ?? {},
     primaryKeyOf: (name) => tables[name] ? sqlitePrimaryKeyPropNames(tables[name]) : [],
+    contextValuesOf,
+    softDeleteOf,
     featureOf
   };
   if (features.nestedWrites && db.resultKind === "sync") {
@@ -6818,8 +7352,13 @@ var generateSchemaData3 = (db, schema, relations, options) => {
     extractRelationJoinColumns
   ) : void 0;
   const nestedTypes = nestedPlans ? createNestedWriteTypes({ plans: nestedPlans, cacheCtx, typeNameMapper, insertPrefix: prefixes.insert }) : void 0;
-  const nestedRuntime = nestedPlans ? createNestedWriteRuntime({ plans: nestedPlans, filterCtx }) : void 0;
-  const relationAggregateFactory = anyTable("relationAggregates") ? createRelationAggregateFactory(db, tables, cacheCtx, typeNameMapper, filterCtx) : void 0;
+  const nestedRuntime = nestedPlans ? createNestedWriteRuntime({
+    plans: nestedPlans,
+    filterCtx,
+    policies: tablePolicies,
+    contextValues: contextValuesOf
+  }) : void 0;
+  const relationAggregateFactory = anyTable("relationAggregates") ? createRelationAggregateFactory(db, tables, cacheCtx, typeNameMapper, filterCtx, tablePolicies) : void 0;
   const queries = {};
   const mutations = {};
   if (options.transactions && db.resultKind === "sync") {
@@ -6870,8 +7409,11 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       updateCountFieldName,
       deleteFieldName,
       deleteSingleFieldName,
+      restoreFieldName,
+      restoreSingleFieldName,
       deleteCountFieldName
     } = computeResolverFieldNames(tableName, typeNameMapper, prefixes, suffixes);
+    const softDeleteInfo = softDeleteOf?.(tableName);
     const selectArrGenerated = generateSelectArray3(
       db,
       tableName,
@@ -6884,7 +7426,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       typeNameMapper,
       filterCtx,
       tableFeatures.distinct,
-      limits
+      limits,
+      policies
     );
     const selectSingleGenerated = generateSelectSingle3(
       db,
@@ -6897,7 +7440,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       typeName,
       typeNameMapper,
       filterCtx,
-      limits
+      limits,
+      policies
     );
     const insertArrGenerated = tableFeatures.insert ? generateInsertArray3(
       db,
@@ -6912,7 +7456,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       conflictDoNothing,
       mutationTxCtx,
       nestedRuntime,
-      limits
+      limits,
+      policies
     ) : void 0;
     const insertSingleGenerated = tableFeatures.insert ? generateInsertSingle3(
       db,
@@ -6927,7 +7472,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       conflictDoNothing,
       mutationTxCtx,
       nestedRuntime,
-      limits
+      limits,
+      policies
     ) : void 0;
     const uniqueSets = tableFeatures.upsert ? getUniqueColumnSets(schema[tableName], import_sqlite_core2.getTableConfig) : [];
     const onConflictInput = tableFeatures.upsert ? generateOnConflictInput({
@@ -6953,7 +7499,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       filterCtx,
       mutationTxCtx,
       nestedRuntime,
-      limits
+      limits,
+      policies
     ) : void 0;
     const upsertSingleGenerated = onConflictInput ? generateUpsert3(
       db,
@@ -6971,7 +7518,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       filterCtx,
       mutationTxCtx,
       nestedRuntime,
-      limits
+      limits,
+      policies
     ) : void 0;
     const updateGenerated = tableFeatures.update ? generateUpdate3(
       db,
@@ -6989,7 +7537,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       filterCtx,
       mutationTxCtx,
       nestedRuntime,
-      limits
+      limits,
+      policies
     ) : void 0;
     const updateSingleGenerated = tableFeatures.update ? generateUpdate3(
       db,
@@ -7007,7 +7556,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       filterCtx,
       mutationTxCtx,
       nestedRuntime,
-      limits
+      limits,
+      policies
     ) : void 0;
     const updateManyInput = tableFeatures.update && tableFeatures.updateMany ? generateUpdateManyInput({ typeName, updatePrefix: prefixes.update, updateInput, tableFilters }) : void 0;
     const updateManyGenerated = updateManyInput ? generateUpdateMany3(
@@ -7023,7 +7573,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       filterCtx,
       mutationTxCtx,
       nestedRuntime,
-      limits
+      limits,
+      policies
     ) : void 0;
     const deleteGenerated = tableFeatures.delete ? generateDelete3(
       db,
@@ -7036,7 +7587,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       tableFeatures.requireWhere,
       filterCtx,
       { tableName, relationMap: namedRelations, tables },
-      mutationTxCtx
+      mutationTxCtx,
+      policies
     ) : void 0;
     const deleteSingleGenerated = tableFeatures.delete ? generateDelete3(
       db,
@@ -7049,7 +7601,38 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       tableFeatures.requireWhere,
       filterCtx,
       { tableName, relationMap: namedRelations, tables },
-      mutationTxCtx
+      mutationTxCtx,
+      policies
+    ) : void 0;
+    const restoreGenerated = softDeleteInfo ? generateDelete3(
+      db,
+      tableName,
+      schema[tableName],
+      tableFilters,
+      restoreFieldName,
+      typeName,
+      false,
+      tableFeatures.requireWhere,
+      filterCtx,
+      { tableName, relationMap: namedRelations, tables },
+      mutationTxCtx,
+      policies,
+      true
+    ) : void 0;
+    const restoreSingleGenerated = softDeleteInfo ? generateDelete3(
+      db,
+      tableName,
+      schema[tableName],
+      tableFilters,
+      restoreSingleFieldName,
+      typeName,
+      true,
+      tableFeatures.requireWhere,
+      filterCtx,
+      { tableName, relationMap: namedRelations, tables },
+      mutationTxCtx,
+      policies,
+      true
     ) : void 0;
     const updateCountGenerated = tableFeatures.update && tableFeatures.countMutations ? generateWriteCount({
       db,
@@ -7083,7 +7666,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       typeName,
       aggregateFieldName,
       tableFilters,
-      filterCtx
+      filterCtx,
+      tablePolicies
     ) : void 0;
     const groupByType = tableFeatures.aggregates && tableFeatures.groupBy ? generateGroupByType(schema[tableName], tableName, typeName, cacheCtx) : void 0;
     const groupByEnum = groupByType ? generateGroupByEnum(schema[tableName], tableName, typeName) : void 0;
@@ -7097,7 +7681,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       tableFilters,
       groupByEnum,
       havingInput,
-      filterCtx
+      filterCtx,
+      tablePolicies
     ) : void 0;
     queries[selectArrGenerated.name] = {
       type: selectArrOutput,
@@ -7234,6 +7819,26 @@ var generateSchemaData3 = (db, schema, relations, options) => {
         }
       };
     }
+    if (restoreGenerated) {
+      mutations[restoreGenerated.name] = {
+        type: arrTableItemOutput,
+        args: restoreGenerated.args,
+        resolve: restoreGenerated.resolver,
+        extensions: {
+          drizzle: drizzleMeta({ kind: "mutation", operation: "restore", single: false, targetArg: "where" })
+        }
+      };
+    }
+    if (restoreSingleGenerated) {
+      mutations[restoreSingleGenerated.name] = {
+        type: singleTableItemOutput,
+        args: restoreSingleGenerated.args,
+        resolve: restoreSingleGenerated.resolver,
+        extensions: {
+          drizzle: drizzleMeta({ kind: "mutation", operation: "restore", single: true, targetArg: "where" })
+        }
+      };
+    }
     if (updateCountGenerated) {
       mutations[updateCountGenerated.name] = {
         type: new import_graphql10.GraphQLNonNull(import_graphql10.GraphQLInt),
@@ -7444,7 +8049,8 @@ var buildSchema = (db, config) => {
     insert: config?.prefixes?.insert ?? "create",
     delete: config?.prefixes?.delete ?? "delete",
     update: config?.prefixes?.update ?? "update",
-    upsert: config?.prefixes?.upsert ?? "upsert"
+    upsert: config?.prefixes?.upsert ?? "upsert",
+    restore: config?.prefixes?.restore ?? "restore"
   };
   const suffixes = {
     list: config?.suffixes?.list ?? "",
@@ -7489,6 +8095,66 @@ var buildSchema = (db, config) => {
     limitPolicyCache.set(tableName, resolved);
     return resolved;
   } : void 0;
+  const scopeConfig = config?.scope;
+  const contextValuesConfig = config?.contextValues;
+  if (scopeConfig || contextValuesConfig) {
+    const tableNames = new Set(tableKeys);
+    for (const [tableName, hook] of Object.entries(scopeConfig ?? {})) {
+      if (!tableNames.has(tableName)) {
+        throw new Error(
+          `Drizzle-GraphQL Error: config.scope names '${tableName}', which is not a table in the Drizzle schema.`
+        );
+      }
+      if (typeof hook !== "function") {
+        throw new Error(`Drizzle-GraphQL Error: config.scope.${tableName} must be a function.`);
+      }
+    }
+    for (const [tableName, columnHooks] of Object.entries(contextValuesConfig ?? {})) {
+      if (!tableNames.has(tableName)) {
+        throw new Error(
+          `Drizzle-GraphQL Error: config.contextValues names '${tableName}', which is not a table in the Drizzle schema.`
+        );
+      }
+      const columns = (0, import_drizzle_orm11.getColumns)(schema[tableName]);
+      for (const [columnName, hook] of Object.entries(columnHooks)) {
+        if (!columns[columnName]) {
+          throw new Error(
+            `Drizzle-GraphQL Error: config.contextValues names '${tableName}.${columnName}', which is not a column of that table.`
+          );
+        }
+        if (typeof hook !== "function") {
+          throw new Error(`Drizzle-GraphQL Error: config.contextValues.${tableName}.${columnName} must be a function.`);
+        }
+      }
+    }
+  }
+  const softDeleteConfig = config?.softDelete;
+  const softDeleteInfos = /* @__PURE__ */ new Map();
+  if (softDeleteConfig) {
+    if (typeof softDeleteConfig === "function") {
+      for (const tableName of tableKeys) {
+        const declaration = softDeleteConfig(schema[tableName], tableName);
+        if (declaration) {
+          softDeleteInfos.set(tableName, resolveSoftDeleteInfo(schema[tableName], tableName, declaration));
+        }
+      }
+    } else {
+      const tableNames = new Set(tableKeys);
+      for (const [tableName, declaration] of Object.entries(softDeleteConfig)) {
+        if (!tableNames.has(tableName)) {
+          throw new Error(
+            `Drizzle-GraphQL Error: config.softDelete names '${tableName}', which is not a table in the Drizzle schema.`
+          );
+        }
+        softDeleteInfos.set(tableName, resolveSoftDeleteInfo(schema[tableName], tableName, declaration));
+      }
+    }
+  }
+  const policies = scopeConfig || contextValuesConfig || softDeleteInfos.size ? {
+    scope: scopeConfig ? (tableName) => scopeConfig[tableName] : void 0,
+    contextValues: contextValuesConfig ? (tableName) => contextValuesConfig[tableName] : void 0,
+    softDelete: softDeleteInfos.size ? (tableName) => softDeleteInfos.get(tableName) : void 0
+  } : void 0;
   const exclude = config?.exclude;
   if (exclude) {
     const tableNames = new Set(tableKeys);
@@ -7606,6 +8272,7 @@ var buildSchema = (db, config) => {
     enumNameMapper: config?.enumNameMapper,
     transactions,
     limits,
+    policies,
     exclude,
     docs: {
       describeColumn: config?.describeColumn,