Safe dynamic SQL with squirrel (optional filters, stable ordering)

                  package store

import (
  "context"

  sq "github.com/Masterminds/squirrel"
  "github.com/jackc/pgx/v5/pgxpool"
)

type Filters struct {
  Status string
  Owner  string
  Limit  uint64
}

func Find(ctx context.Context, db *pgxpool.Pool, f Filters) ([]string, error) {
  q := sq.Select("id").From("tasks").PlaceholderFormat(sq.Dollar).OrderBy("created_at DESC")
  if f.Status != "" {
    q = q.Where(sq.Eq{"status": f.Status})
  }
  if f.Owner != "" {
    q = q.Where(sq.Eq{"owner_id": f.Owner})
  }
  if f.Limit == 0 || f.Limit > 200 {
    f.Limit = 50
  }
  q = q.Limit(f.Limit)

  sqlStr, args, err := q.ToSql()
  if err != nil {
    return nil, err
  }
  rows, err := db.Query(ctx, sqlStr, args...)
  if err != nil {
    return nil, err
  }
  defer rows.Close()

  ids := make([]string, 0, f.Limit)
  for rows.Next() {
    var id string
    if err := rows.Scan(&id); err != nil {
      return nil, err
    }
    ids = append(ids, id)
  }
  return ids, rows.Err()
}