Add inline SQL support with configurable sanitization

row_query/__init__.py

@@ -26,12 +26,14 @@
     QueryNotFoundError,
     RegistryError,
     RowQueryError,
+    SQLSanitizationError,
     StrictModeViolation,
     TransactionError,
     TransactionStateError,
 )
 from row_query.core.migration import MigrationInfo, MigrationManager
 from row_query.core.registry import SQLRegistry
+from row_query.core.sanitizer import SQLSanitizer
 from row_query.core.transaction import AsyncTransactionManager, TransactionManager
 from row_query.mapping.model import ModelMapper
 
@@ -45,6 +47,8 @@
     "AsyncEngine",
     # Registry
     "SQLRegistry",
+    # Sanitizer
+    "SQLSanitizer",
     # Transaction
     "TransactionManager",
     "AsyncTransactionManager",
@@ -63,6 +67,7 @@
     "ExecutionError",
     "MultipleRowsError",
     "ParameterBindingError",
+    "SQLSanitizationError",
     "MappingError",
     "ColumnMismatchError",
     "StrictModeViolation",

row_query/adapters/sqlite.py

@@ -50,7 +50,7 @@ def execute(
         params: dict[str, Any] | None = None,
     ) -> sqlite3.Cursor:
         """Execute SQL and return a cursor."""
-        return connection.execute(sql, params or {})
+        return connection.execute(sql, params if params is not None else {})
 
 
 class SqliteAsyncAdapter:
@@ -95,4 +95,4 @@ async def execute_async(
         params: dict[str, Any] | None = None,
     ) -> Any:
         """Execute SQL asynchronously and return a cursor."""
-        return await connection.execute(sql, params or {})
+        return await connection.execute(sql, params if params is not None else {})