hook

type AfterDeleteHook interface {
	AfterDelete(ctx context.Context, qc *QueryContext) error
}

type AfterInsertHook interface {
	AfterInsert(ctx context.Context, qc *QueryContext) error
}

type AfterScanHook interface {
	AfterScan(ctx context.Context, qc *QueryContext) error
}

type AfterUpdateHook interface {
	AfterUpdate(ctx context.Context, qc *QueryContext) error
}

type BeforeDeleteHook interface {
	BeforeDelete(ctx context.Context, qc *QueryContext) error
}

type BeforeInsertHook interface {
	BeforeInsert(ctx context.Context, qc *QueryContext) error
}

type BeforeScanHook interface {
	BeforeScan(ctx context.Context, qc *QueryContext) error
}

type BeforeUpdateHook interface {
	BeforeUpdate(ctx context.Context, qc *QueryContext) error
}

type Condition struct {
	Column   string
	Operator string
	Value    any
}

type Decision int

type Engine struct {
	// contains filtered or unexported fields
}

type ExtraFilter struct {
	// Clause is a raw WHERE fragment with placeholders.
	// e.g., "tenant_id = $1"
	Clause string
	Args   []any

	// NativeFilter is a driver-specific filter document (e.g., bson.M for MongoDB).
	NativeFilter any
}

type HookResult struct {
	Decision Decision
	Error    error         // Set when Decision == Deny.
	Filters  []ExtraFilter // Additional conditions to inject (pre-query).
}

type Operation int

type PostMutationHook interface {
	AfterMutation(ctx context.Context, qc *QueryContext, data any, result any) error
}

type PostQueryHook interface {
	AfterQuery(ctx context.Context, qc *QueryContext, result any) error
}

type PreMutationHook interface {
	BeforeMutation(ctx context.Context, qc *QueryContext, data any) (*HookResult, error)
}

type PreQueryHook interface {
	BeforeQuery(ctx context.Context, qc *QueryContext) (*HookResult, error)
}

type QueryContext struct {
	// Operation type.
	Operation Operation

	// Table or collection name.
	Table string

	// Model type (reflect.Type of the struct).
	ModelType reflect.Type

	// Columns being accessed (SELECT) or mutated (INSERT/UPDATE).
	Columns []string

	// PrivacyColumns maps columns to their grove:",privacy:X" classification.
	// Only populated for columns that have a privacy tag.
	PrivacyColumns map[string]string

	// Conditions extracted from WHERE/filter (informational).
	Conditions []Condition

	// RawQuery is the built query string (available after building, before execution).
	RawQuery string

	// RawArgs are the query arguments.
	RawArgs []any

	// TenantID from context, if set.
	TenantID string

	// InTransaction reports whether the query runs inside an explicit
	// transaction (built through a driver's Tx wrapper). Hooks that apply
	// different policies per path — e.g. a tenant backstop that trusts
	// RLS inside stamped transactions but denies pool-path access —
	// branch on this.
	InTransaction bool

	// TagSource indicates whether the model uses grove:"..." or bun:"..." tags.
	TagSource TagSource

	// Values holds user-supplied context values.
	Values map[string]any
}

type Scope struct {
	// Tables restricts the hook to these tables. Empty means all tables.
	Tables []string

	// Operations restricts the hook to these operations. Empty means all operations.
	Operations []Operation

	// Priority determines execution order (lower = earlier). Default: 100.
	Priority int
}

type StreamRowHook interface {
	OnStreamRow(ctx context.Context, qc *QueryContext, row any) (Decision, error)
}

type TagSource int