t-sql 3.1.0__tar.gz → 4.0.0__tar.gz

{t_sql-3.1.0 → t_sql-4.0.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: t-sql
-Version: 3.1.0
+Version: 4.0.0
 Summary: Safe SQL. SQL queries for python t-strings (PEP 750)
 Project-URL: Homepage, https://github.com/nhumrich/t-sql
 License-File: LICENSE
@@ -257,12 +257,47 @@ query = (Posts.select()
 
 ## Query Features
 
+### Selecting All Columns from a Table
+
+Use `Table.ALL` to select all columns from a specific table:
+
+```python
+# Select all columns from posts
+query = Posts.select(Posts.ALL)
+# ('SELECT posts.* FROM posts', [])
+
+# Select all columns from posts + specific columns from joined tables
+query = (Posts.select(Posts.ALL, Users.username, Users.email)
+         .join(Users, Posts.user_id == Users.id))
+# ('SELECT posts.*, users.username, users.email FROM posts INNER JOIN users ON ...', [])
+
+# Select all columns from multiple tables
+query = Posts.select(Posts.ALL, Users.ALL).join(Users, Posts.user_id == Users.id)
+# ('SELECT posts.*, users.* FROM posts INNER JOIN users ON ...', [])
+```
+
+This is particularly useful when joining tables where you want all columns from one table but only specific columns from others.
+
+### NULL Checks and Other Operators
+
 ```python
+# NULL checks
+query = Users.select().where(Users.email.is_null())
+query = Users.select().where(Users.email.is_not_null())
+
 # IN clause
 query = Users.select().where(Users.id.in_([1, 2, 3]))
+query = Users.select().where(Users.id.not_in([1, 2, 3]))
 
 # LIKE clause
 query = Users.select().where(Users.username.like('%john%'))
+query = Users.select().where(Users.username.not_like('%john%'))
+query = Users.select().where(Users.username.ilike('%JOHN%'))  # case-insensitive
+query = Users.select().where(Users.username.not_ilike('%JOHN%'))
+
+# BETWEEN clause
+query = Users.select().where(Users.age.between(18, 65))
+query = Users.select().where(Users.age.not_between(18, 65))
 
 # ORDER BY
 query = Posts.select().order_by(Posts.id)  # defaults to ASC
@@ -333,10 +368,9 @@ query = (Users.insert(id='abc123', username='john', email='john@example.com')
 ### UPDATE
 
 ```python
-# Basic update (no WHERE = updates all rows!)
+# UPDATE requires WHERE clause or explicit .all_rows() for safety
 query = Users.update(email='newemail@example.com')
-sql, params = query.render()
-# ('UPDATE users SET email = ?', ['newemail@example.com'])
+# ❌ Raises UnsafeQueryError: UPDATE without WHERE requires .all_rows()
 
 # UPDATE with WHERE
 query = Users.update(email='newemail@example.com').where(Users.id == 'abc123')
@@ -348,6 +382,11 @@ query = (Users.update(email='newemail@example.com')
          .where(Users.id == 'abc123')
          .where(Users.age > 18))
 
+# Explicitly update all rows (use with caution!)
+query = Users.update(status='inactive').all_rows()
+sql, params = query.render()
+# ('UPDATE users SET status = ?', ['inactive'])
+
 # With RETURNING (Postgres/SQLite)
 query = (Users.update(email='new@example.com')
          .where(Users.id == 'abc123')
@@ -358,10 +397,9 @@ query = (Users.update(email='new@example.com')
 ### DELETE
 
 ```python
-# Basic delete (no WHERE = deletes all rows!)
+# DELETE requires WHERE clause or explicit .all_rows() for safety
 query = Users.delete()
-sql, params = query.render()
-# ('DELETE FROM users', [])
+# ❌ Raises UnsafeQueryError: DELETE without WHERE requires .all_rows()
 
 # DELETE with WHERE
 query = Users.delete().where(Users.id == 'abc123')
@@ -371,6 +409,11 @@ sql, params = query.render()
 # Multiple conditions
 query = Users.delete().where(Users.age < 18).where(Users.active == False)
 
+# Explicitly delete all rows (use with extreme caution!)
+query = Users.delete().all_rows()
+sql, params = query.render()
+# ('DELETE FROM users', [])
+
 # With RETURNING (Postgres/SQLite)
 query = Users.delete().where(Users.id == 'abc123').returning()
 # ('DELETE FROM users WHERE users.id = ? RETURNING *', ['abc123'])
@@ -626,6 +669,27 @@ sql, _ = tsql.render(t"SELECT * FROM users WHERE name = {malicious}", style=tsql
 
 **Important:** While effective, parameterization is always preferred when available. Use `ESCAPED` only when necessary.
 
+### 4. Query Builder Safety: UPDATE/DELETE Protection
+
+The query builder prevents accidental mass UPDATE/DELETE operations by requiring an explicit WHERE clause or `.all_rows()` call:
+
+```python
+from tsql import UnsafeQueryError
+
+# This raises UnsafeQueryError at render time
+Users.update(status='inactive').render()  # ❌ Error!
+Users.delete().render()  # ❌ Error!
+
+# Must add WHERE clause
+Users.update(status='inactive').where(Users.id == user_id).render()  # ✅
+
+# Or explicitly confirm mass operation
+Users.update(status='inactive').all_rows().render()  # ✅
+Users.delete().all_rows().render()  # ✅
+```
+
+This protection catches the most common and dangerous SQL mistake: forgetting the WHERE clause. 
+
 ## Danger Zones: Where You Can Still Get Hurt
 
 ### The :unsafe Format Spec

{t_sql-3.1.0 → t_sql-4.0.0}/README.md

@@ -247,12 +247,47 @@ query = (Posts.select()
 
 ## Query Features
 
+### Selecting All Columns from a Table
+
+Use `Table.ALL` to select all columns from a specific table:
+
+```python
+# Select all columns from posts
+query = Posts.select(Posts.ALL)
+# ('SELECT posts.* FROM posts', [])
+
+# Select all columns from posts + specific columns from joined tables
+query = (Posts.select(Posts.ALL, Users.username, Users.email)
+         .join(Users, Posts.user_id == Users.id))
+# ('SELECT posts.*, users.username, users.email FROM posts INNER JOIN users ON ...', [])
+
+# Select all columns from multiple tables
+query = Posts.select(Posts.ALL, Users.ALL).join(Users, Posts.user_id == Users.id)
+# ('SELECT posts.*, users.* FROM posts INNER JOIN users ON ...', [])
+```
+
+This is particularly useful when joining tables where you want all columns from one table but only specific columns from others.
+
+### NULL Checks and Other Operators
+
 ```python
+# NULL checks
+query = Users.select().where(Users.email.is_null())
+query = Users.select().where(Users.email.is_not_null())
+
 # IN clause
 query = Users.select().where(Users.id.in_([1, 2, 3]))
+query = Users.select().where(Users.id.not_in([1, 2, 3]))
 
 # LIKE clause
 query = Users.select().where(Users.username.like('%john%'))
+query = Users.select().where(Users.username.not_like('%john%'))
+query = Users.select().where(Users.username.ilike('%JOHN%'))  # case-insensitive
+query = Users.select().where(Users.username.not_ilike('%JOHN%'))
+
+# BETWEEN clause
+query = Users.select().where(Users.age.between(18, 65))
+query = Users.select().where(Users.age.not_between(18, 65))
 
 # ORDER BY
 query = Posts.select().order_by(Posts.id)  # defaults to ASC
@@ -323,10 +358,9 @@ query = (Users.insert(id='abc123', username='john', email='john@example.com')
 ### UPDATE
 
 ```python
-# Basic update (no WHERE = updates all rows!)
+# UPDATE requires WHERE clause or explicit .all_rows() for safety
 query = Users.update(email='newemail@example.com')
-sql, params = query.render()
-# ('UPDATE users SET email = ?', ['newemail@example.com'])
+# ❌ Raises UnsafeQueryError: UPDATE without WHERE requires .all_rows()
 
 # UPDATE with WHERE
 query = Users.update(email='newemail@example.com').where(Users.id == 'abc123')
@@ -338,6 +372,11 @@ query = (Users.update(email='newemail@example.com')
          .where(Users.id == 'abc123')
          .where(Users.age > 18))
 
+# Explicitly update all rows (use with caution!)
+query = Users.update(status='inactive').all_rows()
+sql, params = query.render()
+# ('UPDATE users SET status = ?', ['inactive'])
+
 # With RETURNING (Postgres/SQLite)
 query = (Users.update(email='new@example.com')
          .where(Users.id == 'abc123')
@@ -348,10 +387,9 @@ query = (Users.update(email='new@example.com')
 ### DELETE
 
 ```python
-# Basic delete (no WHERE = deletes all rows!)
+# DELETE requires WHERE clause or explicit .all_rows() for safety
 query = Users.delete()
-sql, params = query.render()
-# ('DELETE FROM users', [])
+# ❌ Raises UnsafeQueryError: DELETE without WHERE requires .all_rows()
 
 # DELETE with WHERE
 query = Users.delete().where(Users.id == 'abc123')
@@ -361,6 +399,11 @@ sql, params = query.render()
 # Multiple conditions
 query = Users.delete().where(Users.age < 18).where(Users.active == False)
 
+# Explicitly delete all rows (use with extreme caution!)
+query = Users.delete().all_rows()
+sql, params = query.render()
+# ('DELETE FROM users', [])
+
 # With RETURNING (Postgres/SQLite)
 query = Users.delete().where(Users.id == 'abc123').returning()
 # ('DELETE FROM users WHERE users.id = ? RETURNING *', ['abc123'])
@@ -616,6 +659,27 @@ sql, _ = tsql.render(t"SELECT * FROM users WHERE name = {malicious}", style=tsql
 
 **Important:** While effective, parameterization is always preferred when available. Use `ESCAPED` only when necessary.
 
+### 4. Query Builder Safety: UPDATE/DELETE Protection
+
+The query builder prevents accidental mass UPDATE/DELETE operations by requiring an explicit WHERE clause or `.all_rows()` call:
+
+```python
+from tsql import UnsafeQueryError
+
+# This raises UnsafeQueryError at render time
+Users.update(status='inactive').render()  # ❌ Error!
+Users.delete().render()  # ❌ Error!
+
+# Must add WHERE clause
+Users.update(status='inactive').where(Users.id == user_id).render()  # ✅
+
+# Or explicitly confirm mass operation
+Users.update(status='inactive').all_rows().render()  # ✅
+Users.delete().all_rows().render()  # ✅
+```
+
+This protection catches the most common and dangerous SQL mistake: forgetting the WHERE clause. 
+
 ## Danger Zones: Where You Can Still Get Hurt
 
 ### The :unsafe Format Spec

{t_sql-3.1.0 → t_sql-4.0.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "t-sql"
-version = "3.1.0"
+version = "4.0.0"
 description = "Safe SQL. SQL queries for python t-strings (PEP 750)"
 readme = "README.md"
 requires-python = ">=3.14"

{t_sql-3.1.0 → t_sql-4.0.0}/tests/test_query_builder.py

@@ -838,23 +838,81 @@ def test_tstring_with_params_in_select():
     assert params == [' - ', 5]
 
 
-def test_column_is_null_property():
-    """Test is_null property"""
-    condition = Users.email.is_null
+def test_select_table_all():
+    """Test selecting all columns from a table using Table.ALL"""
+    query = Posts.select(Posts.ALL)
+    sql, params = query.render()
+
+    assert 'SELECT posts.*' in sql
+    assert 'FROM posts' in sql
+    assert params == []
+
+
+def test_select_table_all_with_other_columns():
+    """Test mixing Table.ALL with specific columns from another table"""
+    query = Posts.select(Posts.ALL, Users.username, Users.email)
+    sql, params = query.render()
+
+    assert 'SELECT posts.*, users.username, users.email' in sql
+    assert 'FROM posts' in sql
+    assert params == []
+
+
+def test_select_multiple_table_alls():
+    """Test selecting all columns from multiple tables"""
+    query = Posts.select(Posts.ALL, Users.ALL)
+    sql, params = query.render()
+
+    assert 'SELECT posts.*, users.*' in sql
+    assert 'FROM posts' in sql
+    assert params == []
+
+
+def test_select_table_all_with_join():
+    """Test Table.ALL in a real-world join scenario"""
+    query = (Posts.select(Posts.ALL, Users.username)
+             .join(Users, Posts.user_id == Users.id)
+             .where(Posts.id > 100))
+    sql, params = query.render()
+
+    assert 'SELECT posts.*, users.username' in sql
+    assert 'FROM posts' in sql
+    assert 'INNER JOIN users ON posts.user_id = users.id' in sql
+    assert 'WHERE posts.id > ?' in sql
+    assert params == [100]
+
+
+def test_select_table_all_with_schema():
+    """Test that Table.ALL works with schema-qualified tables"""
+    class Accounts(Table, table_name='accounts', schema='other'):
+        id: Column
+        name: Column
+
+    query = Accounts.select(Accounts.ALL)
+    sql, params = query.render()
+
+    assert 'SELECT other.accounts.*' in sql
+    assert 'FROM other.accounts' in sql
+    assert params == []
+
+
+def test_column_is_null_method():
+    """Test is_null method"""
+    condition = Users.email.is_null()
     assert condition.operator == 'IS'
     assert condition.right is None
 
 
-def test_column_is_not_null_property():
-    """Test is_not_null property"""
-    condition = Users.email.is_not_null
+def test_column_is_not_null_method():
+    """Test is_not_null method"""
+    condition = Users.email.is_not_null()
     assert condition.operator == 'IS NOT'
     assert condition.right is None
 
 
 def test_where_with_is_null():
     """Test WHERE with is_null"""
-    query = Users.select().where(Users.email.is_null)
+    query = Users.select().where(Users.email.is_null())
     sql, params = query.render()
 
     assert 'WHERE users.email IS NULL' in sql
@@ -863,7 +921,7 @@ def test_where_with_is_null():
 
 def test_where_with_is_not_null():
     """Test WHERE with is_not_null"""
-    query = Users.select().where(Users.email.is_not_null)
+    query = Users.select().where(Users.email.is_not_null())
     sql, params = query.render()
 
     assert 'WHERE users.email IS NOT NULL' in sql
@@ -1002,7 +1060,7 @@ def test_complex_query_with_new_operators():
     """Test complex query using multiple new operators"""
     query = (Users.select()
              .where(Users.id.between(1, 100))
-             .where(Users.email.is_not_null)
+             .where(Users.email.is_not_null())
              .where(Users.id.not_in([5, 10, 15]))
              .where(Users.username.ilike('%test%')))
     sql, params = query.render()
@@ -1172,7 +1230,7 @@ def test_returning_cols_validation_update():
     import pytest
 
     # Test with malicious returning column
-    query = Users.update(username='hacked')
+    query = Users.update(username='hacked').all_rows()
     builder = query.returning("id, (SELECT password FROM admin_users LIMIT 1) AS stolen")
 
     with pytest.raises(ValueError, match="Invalid RETURNING column name"):
@@ -1191,7 +1249,7 @@ def test_returning_cols_validation_delete():
     import pytest
 
     # Test with malicious returning column
-    query = Users.delete()
+    query = Users.delete().all_rows()
     builder = query.returning("* FROM users; DROP TABLE secrets; --")
 
     with pytest.raises(ValueError, match="Invalid RETURNING column name"):
@@ -1222,3 +1280,46 @@ def test_conflict_cols_list_validation():
     sql, params = builder2.render()
 
     assert 'ON CONFLICT (id, email)' in sql
+
+
+def test_update_without_where_raises_error():
+    """Test that UPDATE without WHERE clause raises UnsafeQueryError"""
+    import pytest
+    from tsql.query_builder import UnsafeQueryError
+
+    builder = Users.update(username='updated')
+
+    with pytest.raises(UnsafeQueryError, match="UPDATE without WHERE clause requires explicit .all_rows()"):
+        builder.render()
+
+
+def test_update_with_all_rows_works():
+    """Test that UPDATE with .all_rows() bypasses safety check"""
+    builder = Users.update(username='updated').all_rows()
+    sql, params = builder.render()
+
+    assert 'UPDATE users SET' in sql
+    assert 'username = ?' in sql
+    assert 'WHERE' not in sql
+    assert params == ['updated']
+
+
+def test_delete_without_where_raises_error():
+    """Test that DELETE without WHERE clause raises UnsafeQueryError"""
+    import pytest
+    from tsql.query_builder import UnsafeQueryError
+
+    builder = Users.delete()
+
+    with pytest.raises(UnsafeQueryError, match="DELETE without WHERE clause requires explicit .all_rows()"):
+        builder.render()
+
+
+def test_delete_with_all_rows_works():
+    """Test that DELETE with .all_rows() bypasses safety check"""
+    builder = Users.delete().all_rows()
+    sql, params = builder.render()
+
+    assert 'DELETE FROM users' in sql
+    assert 'WHERE' not in sql
+    assert params == []

{t_sql-3.1.0 → t_sql-4.0.0}/tests/test_sqlalchemy_integration.py

@@ -229,6 +229,38 @@ def test_mixing_query_builder_with_tsql():
     assert params == [18, 'john', 'john', 25]
 
 
+def test_sa_column_annotations_are_correct_type():
+    """Test that SA Column assignments get correct type annotations for IDE autocomplete"""
+    from tsql.query_builder import Column as TsqlColumn
+
+    metadata = MetaData()
+
+    class MyTable(Table, table_name='mytable', metadata=metadata):
+        my_column = Column(TIMESTAMP())
+        another = Column(Integer())
+        text_field = Column(String(100))
+
+    # Verify that __annotations__ has been updated to reflect tsql.Column
+    assert 'my_column' in MyTable.__annotations__
+    assert 'another' in MyTable.__annotations__
+    assert 'text_field' in MyTable.__annotations__
+
+    assert MyTable.__annotations__['my_column'] == TsqlColumn
+    assert MyTable.__annotations__['another'] == TsqlColumn
+    assert MyTable.__annotations__['text_field'] == TsqlColumn
+
+    # Verify that the columns actually work as tsql.Column objects
+    col = MyTable.my_column
+    assert isinstance(col, TsqlColumn)
+    assert hasattr(col, 'is_null')
+    assert hasattr(col, 'asc')
+    assert hasattr(col, 'desc')
+
+    # Verify is_null works
+    condition = col.is_null()
+    assert condition.operator == 'IS'
+    assert condition.right is None
+
 def gen_id(prefix):
     """Dummy function for test"""
     return f"{prefix}_123"

{t_sql-3.1.0 → t_sql-4.0.0}/tsql/__init__.py

@@ -360,6 +360,8 @@ def delete(table: str, id: str | int) -> TSQL:
     return TSQL(t"DELETE FROM {table:literal} WHERE id = {id}")
 
 
+from tsql.query_builder import UnsafeQueryError
+
 __all__ = [
     'TSQL',
     'TSQLQuery',
@@ -370,5 +372,6 @@ __all__ = [
     'update',
     'delete',
     'set_style',
+    'UnsafeQueryError',
 ]
 

{t_sql-3.1.0 → t_sql-4.0.0}/tsql/query_builder.py

@@ -5,6 +5,14 @@ from abc import ABC, abstractmethod
 
 from tsql import TSQL, t_join
 
+
+class UnsafeQueryError(Exception):
+    """Raised when attempting to render an UPDATE or DELETE query without a WHERE clause.
+
+    To perform mass updates or deletes, explicitly call .all_rows() to confirm intent.
+    """
+    pass
+
 # Optional SQLAlchemy support
 try:
     from sqlalchemy import MetaData, Table as SATable, Column as SAColumn
@@ -30,10 +38,9 @@ class OrderByClause:
 class Column:
     """Represents a bound column (table + column name) for building queries"""
 
-    def __init__(self, table_name: str = None, column_name: str = None, python_type: type = None, alias: str = None, schema: str = None):
+    def __init__(self, table_name: str = None, column_name: str = None, alias: str = None, schema: str = None):
         self.table_name = table_name
         self.column_name = column_name
-        self.python_type = python_type
         self.alias = alias
         self.schema = schema
 
@@ -63,7 +70,7 @@ class Column:
         Example:
             users.select(users.first_name.as_('first'), users.last_name.as_('last'))
         """
-        return Column(self.table_name, self.column_name, self.python_type, alias, self.schema)
+        return Column(self.table_name, self.column_name, alias, self.schema)
 
     def __eq__(self, other) -> 'Condition':
         if other is None:
@@ -141,12 +148,10 @@ class Column:
         """
         return Condition(self, 'NOT BETWEEN', (start, end))
 
-    @property
     def is_null(self) -> 'Condition':
         """Create an IS NULL condition"""
         return Condition(self, 'IS', None)
 
-    @property
     def is_not_null(self) -> 'Condition':
         """Create an IS NOT NULL condition"""
         return Condition(self, 'IS NOT', None)
@@ -263,7 +268,11 @@ class Table:
                     sa_columns.append(sa_col)
 
                 # Create query builder ColumnDescriptor
-                setattr(cls, field_name, ColumnDescriptor(field_name, field_type))
+                setattr(cls, field_name, ColumnDescriptor(field_name))
+                # Update annotation to reflect the descriptor's return type
+                if not hasattr(cls, '__annotations__'):
+                    cls.__annotations__ = {}
+                cls.__annotations__[field_name] = Column
                 continue
 
             # Check if it's a Column instance (for column_name remapping)
@@ -275,7 +284,11 @@ class Table:
                     db_column_name = field_name
 
                 # Create query builder ColumnDescriptor with the DB column name
-                setattr(cls, field_name, ColumnDescriptor(db_column_name, field_type))
+                setattr(cls, field_name, ColumnDescriptor(db_column_name))
+                # Update annotation to reflect the descriptor's return type
+                if not hasattr(cls, '__annotations__'):
+                    cls.__annotations__ = {}
+                cls.__annotations__[field_name] = Column
 
                 # Create SQLAlchemy column if metadata provided
                 if metadata is not None and HAS_SQLALCHEMY:
@@ -286,7 +299,11 @@ class Table:
             # Check if it's an Ellipsis (...) declaration
             if field_value is ...:
                 # Create query builder ColumnDescriptor
-                setattr(cls, field_name, ColumnDescriptor(field_name, None))
+                setattr(cls, field_name, ColumnDescriptor(field_name))
+                # Update annotation to reflect the descriptor's return type
+                if not hasattr(cls, '__annotations__'):
+                    cls.__annotations__ = {}
+                cls.__annotations__[field_name] = Column
                 continue
 
             # Otherwise, handle type annotations
@@ -295,7 +312,11 @@ class Table:
                 continue
 
             # Create query builder ColumnDescriptor for type-annotated fields
-            setattr(cls, field_name, ColumnDescriptor(field_name, field_type))
+            setattr(cls, field_name, ColumnDescriptor(field_name))
+            # Update annotation to reflect the descriptor's return type
+            if not hasattr(cls, '__annotations__'):
+                cls.__annotations__ = {}
+            cls.__annotations__[field_name] = Column
 
             # Create SQLAlchemy column if metadata provided
             if metadata is not None and HAS_SQLALCHEMY:
@@ -306,6 +327,9 @@ class Table:
         if metadata is not None and HAS_SQLALCHEMY:
             cls._sa_table = SATable(cls.table_name, metadata, *sa_columns, schema=schema)
 
+        # Add the ALL descriptor for wildcard column selection
+        cls.ALL = AllColumnsDescriptor()
+
     @classmethod
     def select(cls, *columns: Union['Column', Template]) -> 'SelectQueryBuilder':
         """Start building a SELECT query"""
@@ -359,9 +383,8 @@ class Table:
 class ColumnDescriptor:
     """Descriptor that creates Column objects when accessed on Table classes or instances"""
 
-    def __init__(self, column_name: str, python_type: type = None):
+    def __init__(self, column_name: str):
         self.column_name = column_name
-        self.python_type = python_type
 
     def __set_name__(self, owner, name):
         self.column_name = name
@@ -370,7 +393,17 @@ class ColumnDescriptor:
         if objtype is None:
             objtype = type(obj)
         schema = getattr(objtype, 'schema', None)
-        return Column(objtype.table_name, self.column_name, self.python_type, schema=schema)
+        return Column(objtype.table_name, self.column_name, schema=schema)
+
+
+class AllColumnsDescriptor:
+    """Descriptor that creates a Column with wildcard (*) for selecting all columns from a table"""
+
+    def __get__(self, obj, objtype=None) -> Column:
+        if objtype is None:
+            objtype = type(obj)
+        schema = getattr(objtype, 'schema', None)
+        return Column(objtype.table_name, '*', schema=schema)
 
 
 class Condition:
@@ -687,10 +720,27 @@ class UpdateBuilder(QueryBuilder):
 
         self._conditions: List[Union[Condition, Template]] = []
         self._returning_cols: Optional[List[str]] = None
+        self._requires_where: bool = True
 
     def where(self, condition: Union[Condition, Template]) -> 'UpdateBuilder':
         """Add a WHERE condition (multiple calls are ANDed together)"""
         self._conditions.append(condition)
+        self._requires_where = False
+        return self
+
+    def all_rows(self) -> 'UpdateBuilder':
+        """Explicitly confirm intent to update all rows without a WHERE clause.
+
+        By default, UPDATE queries without WHERE clauses will raise UnsafeQueryError
+        at render time. Call this method to bypass that safety check.
+
+        Returns:
+            self for method chaining
+
+        Example:
+            Users.update(status='inactive').all_rows()
+        """
+        self._requires_where = False
         return self
 
     def returning(self, *columns: str) -> 'UpdateBuilder':
@@ -736,6 +786,11 @@ class UpdateBuilder(QueryBuilder):
 
     def render(self, style=None):
         """Convenience method to render the query directly"""
+        if self._requires_where:
+            raise UnsafeQueryError(
+                "UPDATE without WHERE clause requires explicit .all_rows() call to confirm intent. "
+                "This prevents accidentally updating all rows in the table."
+            )
         return self.to_tsql().render(style)
 
     def __repr__(self) -> str:
@@ -756,10 +811,27 @@ class DeleteBuilder(QueryBuilder):
         self.base_table = base_table
         self._conditions: List[Union[Condition, Template]] = []
         self._returning_cols: Optional[List[str]] = None
+        self._requires_where: bool = True
 
     def where(self, condition: Union[Condition, Template]) -> 'DeleteBuilder':
         """Add a WHERE condition (multiple calls are ANDed together)"""
         self._conditions.append(condition)
+        self._requires_where = False
+        return self
+
+    def all_rows(self) -> 'DeleteBuilder':
+        """Explicitly confirm intent to delete all rows without a WHERE clause.
+
+        By default, DELETE queries without WHERE clauses will raise UnsafeQueryError
+        at render time. Call this method to bypass that safety check.
+
+        Returns:
+            self for method chaining
+
+        Example:
+            Users.delete().all_rows()
+        """
+        self._requires_where = False
         return self
 
     def returning(self, *columns: str) -> 'DeleteBuilder':
@@ -804,6 +876,11 @@ class DeleteBuilder(QueryBuilder):
 
     def render(self, style=None):
         """Convenience method to render the query directly"""
+        if self._requires_where:
+            raise UnsafeQueryError(
+                "DELETE without WHERE clause requires explicit .all_rows() call to confirm intent. "
+                "This prevents accidentally deleting all rows in the table."
+            )
         return self.to_tsql().render(style)
 
     def __repr__(self) -> str: