alasql 4.15.0 → 4.16.1

package/bin/alasql-cli.js

@@ -2,7 +2,7 @@
 
 //
 // Command line interface for Alasql
-// Version: 0.2.3
+// Version: 4.16.1
 // Date: 28.07.2015
 // (c) 2014-2022, Andrey Gershun & Mathias Wulff
 //

package/dist/alasql-worker.js

@@ -1,7 +1,7 @@
-//! AlaSQL v4.14.0 build: develop-3b8d5542 | © 2014-2025 Andrey Gershun & Mathias Wulff | License: MIT
+//! AlaSQL v4.16.1 build: develop-ff717ec7 | © 2014-2025 Andrey Gershun & Mathias Wulff | License: MIT
 /*
 @module alasql
-@version 4.14.0
+@version 4.16.1
 
 AlaSQL - JavaScript SQL database
 © 2014-2025	Andrey Gershun & Mathias Wulff

package/dist/alasql.fs.js

@@ -1,7 +1,7 @@
-//! AlaSQL v4.14.0 build: develop-3b8d5542 | © 2014-2025 Andrey Gershun & Mathias Wulff | License: MIT
+//! AlaSQL v4.16.1 build: develop-ff717ec7 | © 2014-2025 Andrey Gershun & Mathias Wulff | License: MIT
 /*
 @module alasql
-@version 4.14.0
+@version 4.16.1
 
 AlaSQL - JavaScript SQL database
 © 2014-2025	Andrey Gershun & Mathias Wulff
@@ -141,8 +141,8 @@ SOFTWARE.
 		Current version of alasql
 		  @constant {string}
 	*/
-	alasql.version = '4.14.0';
-	alasql.build = 'develop-3b8d5542';
+	alasql.version = '4.16.1';
+	alasql.build = 'develop-ff717ec7';
 
 	/**
 		Debug flag
@@ -4522,11 +4522,11 @@ var cloneDeep = (utils.cloneDeep = function cloneDeep(obj) {
 		return +obj;
 	}
 
-	var temp = new obj.constructor(); // changed
+	var temp = new (Object.prototype.hasOwnProperty.call(obj, 'constructor') ? Object : obj.constructor)(); // changed
 
 	for (var key in obj) {
 		if (obj.hasOwnProperty(key)) {
-			temp[key] = cloneDeep(obj[key]);
+			/* A "__proto__" key from parsed data is copied as data, never as the prototype */ if (key === '__proto__') { Object.defineProperty(temp, key, {value: cloneDeep(obj[key]), writable: true, enumerable: true, configurable: true}); } else { temp[key] = cloneDeep(obj[key]); }
 		}
 	}
 	return temp;
@@ -4598,7 +4598,7 @@ var extend = (utils.extend = function extend(a, b) {
 	a = a || {};
 	for (var key in b) {
 		if (b.hasOwnProperty(key)) {
-			a[key] = b[key];
+			/* A "__proto__" key from parsed data is copied as data, never as the prototype */ if (key === '__proto__') { Object.defineProperty(a, key, {value: b[key], writable: true, enumerable: true, configurable: true}); } else { a[key] = b[key]; }
 		}
 	}
 	return a;
@@ -8527,6 +8527,12 @@ yy.ExistsValue = class ExistsValue {
 alasql.precompile = function (statement, databaseid, params) {
 	if (!statement) return;
 	statement.params = params;
+	// For CREATE VIEW statements, move queries to the select object
+	// so they can be compiled later when the view is first used
+	if (statement.view && statement.select && statement.queries) {
+		statement.select.queries = statement.queries;
+		return;
+	}
 	if (statement.queries) {
 		statement.queriesfn = statement.queries.map(function (q) {
 			var nq = q.compile(databaseid || statement.database.databaseid);
@@ -8615,7 +8621,12 @@ yy.Select.prototype.compileFrom = function (query) {
 				};
 			} else if (alasql.databases[source.databaseid].tables[source.tableid].view) {
 				source.datafn = (query, params, cb, idx, alasql) => {
-					let res = alasql.databases[source.databaseid].tables[source.tableid].select(params);
+					let table = alasql.databases[source.databaseid].tables[source.tableid];
+					// Lazily compile the view's select on first use
+					if (!table.select && table.viewSelect) {
+						table.select = table.viewSelect.compile(table.viewDatabaseid);
+					}
+					let res = table.select(params);
 					if (cb) res = cb(res, idx, query);
 					return res;
 				};
@@ -9331,7 +9342,7 @@ yy.Select.prototype.compileGroup = function (query) {
 			aft2 = '';
 
 		if (typeof query.groupStar !== 'undefined') {
-			aft2 += "for(var f in p['" + query.groupStar + "']) {g[f]=p['" + query.groupStar + "'][f];};";
+			aft2 += "for(var f in p['" + query.groupStar + "']) {if(/^__proto__$/.test(f))Object.defineProperty(g,f,{writable:true,enumerable:true,configurable:true});g[f]=p['" + query.groupStar + "'][f];};";
 		}
 
 		s += query.selectGroup
@@ -9793,7 +9804,7 @@ function compileSelectStar(query, aliases, joinstar) {
 					'var w=p["' + escapeq(alias) + '"];for(var k in w){r["' + escapeq(alias) + '_"+k]=w[k]};';
 			} else {
 				// Default overwrite mode
-				sp += 'var w=p["' + escapeq(alias) + '"];for(var k in w){r[k]=w[k]};';
+				sp += 'var w=p["' + escapeq(alias) + '"];for(var k in w){if(/^__proto__$/.test(k))Object.defineProperty(r,k,{writable:true,enumerable:true,configurable:true});r[k]=w[k]};';
 			}
 
 			query.dirtyColumns = true;
@@ -10232,10 +10243,10 @@ yy.Select.prototype.compileSelectGroup1 = function (query) {
 	self.columns.forEach(function (col) {
 
 		if (col instanceof yy.Column && col.columnid === '*') {
-			//			s += 'for(var k in g){r[k]=g[k]};';
+			//			s += 'for(var k in g){if(/^__proto__$/.test(k))Object.defineProperty(r,k,{writable:true,enumerable:true,configurable:true});r[k]=g[k]};';
 			//			s += 'for(var k in this.query.groupColumns){r[k]=g[this.query.groupColumns[k]]};';
 
-			s += 'for(var k in g) {r[k]=g[k]};';
+			s += 'for(var k in g) {if(/^__proto__$/.test(k))Object.defineProperty(r,k,{writable:true,enumerable:true,configurable:true});r[k]=g[k]};';
 			return '';
 
 		} else {
@@ -11537,7 +11548,7 @@ yy.Over = class Over {
 						const allValues = this.right.map(value => value.value);
 						const allValuesStr = allValues.join(',');
 						alasql.sets[allValuesStr] = alasql.sets[allValuesStr] || new Set(allValues);
-						s = `alasql.sets["${allValuesStr}"].has(alasql.utils.getValueOf(${leftJS()}))`;
+						s = `alasql.sets[${JSON.stringify(allValuesStr)}].has(alasql.utils.getValueOf(${leftJS()}))`;
 					}
 				} else {
 					s = `(${rightJS()}.indexOf(${leftJS()}) > -1)`;
@@ -11571,7 +11582,7 @@ yy.Over = class Over {
 						const allValues = this.right.map(value => value.value);
 						const allValuesStr = allValues.join(',');
 						alasql.sets[allValuesStr] = alasql.sets[allValuesStr] || new Set(allValues);
-						s = `!alasql.sets["${allValuesStr}"].has(alasql.utils.getValueOf(${leftJS()}))`;
+						s = `!alasql.sets[${JSON.stringify(allValuesStr)}].has(alasql.utils.getValueOf(${leftJS()}))`;
 					}
 				} else {
 					s = `(${rightJS()}.indexOf(${leftJS()}) === -1)`;
@@ -11976,17 +11987,23 @@ yy.Over = class Over {
 		}
 
 		findAggregator(query) {
-			const colas = escapeq(this.toString()) + ':' + query.selectGroup.length;
-
-			if (!this.nick) {
-				this.nick = colas;
+			// Check if an identical aggregate already exists in selectGroup
+			let existingAggr = query.selectGroup.find(agg => agg.toString() === this.toString());
 
-				if (!query.removeKeys.includes(colas)) {
-					query.removeKeys.push(colas);
+			if (existingAggr) {
+				// Reuse the existing aggregate's nick to share the same accumulator
+				this.aggrNick = existingAggr.nick;
+			} else {
+				// New aggregate - assign nick and add to selectGroup
+				if (!this.nick) {
+					this.nick = escapeq(this.toString()) + ':' + query.selectGroup.length;
+					if (!query.removeKeys.includes(this.nick)) {
+						query.removeKeys.push(this.nick);
+					}
 				}
+				this.aggrNick = this.nick;
+				query.selectGroup.push(this);
 			}
-
-			query.selectGroup.push(this);
 		}
 
 		toType() {
@@ -12006,7 +12023,8 @@ yy.Over = class Over {
 		}
 
 		toJS() {
-			var colas = this.nick;
+			// Use aggrNick for duplicate aggregates to share the same accumulator, otherwise use the unique nick
+			var colas = this.aggrNick || this.nick;
 			if (colas === undefined) {
 				colas = escapeq(this.toString());
 			}
@@ -12506,8 +12524,20 @@ stdfn.CONCAT_WS = function () {
 // Aggregator for joining strings
 alasql.aggr.group_concat = alasql.aggr.GROUP_CONCAT = function (v, s, stage) {
 	if (stage === 1) {
+		// Initialize: skip null values
+		if (v === null || v === undefined) {
+			return null;
+		}
 		return '' + v;
 	} else if (stage === 2) {
+		// Accumulate: skip null values
+		if (v === null || v === undefined) {
+			return s;
+		}
+		// If accumulator is null/undefined, start with current value
+		if (s === null || s === undefined) {
+			return '' + v;
+		}
 		s += ',' + v;
 		return s;
 	}
@@ -13400,7 +13430,9 @@ yy.CreateTable.prototype.execute = function (databaseid, params, cb) {
 	//Used in 420from queryfn when table.view = true!
 	if (this.view && this.select) {
 		table.view = true;
-		table.select = this.select.compile(this.table.databaseid || databaseid);
+		// Store the uncompiled select statement and databaseid for lazy compilation
+		table.viewSelect = this.select;
+		table.viewDatabaseid = this.table.databaseid || databaseid;
 	}
 
 	if (db.engineid) {
@@ -13521,7 +13553,7 @@ yy.CreateTable.prototype.execute = function (databaseid, params, cb) {
 
 			table.update(
 				function (t) {
-					for (var f in r) t[f] = r[f];
+					for (var f in r) {if(/^__proto__$/.test(f))Object.defineProperty(t,f,{writable:true,enumerable:true,configurable:true});t[f] = r[f];}
 				},
 				table.data.indexOf(toreplace),
 				params
@@ -15188,6 +15220,14 @@ yy.Insert.prototype.compile = function (databaseid) {
 		throw "Table '" + tableid + "' could not be found";
 	}
 
+	// Helper function to create error message for value/column count mismatch
+	var createValueCountMismatchError = function (valueCount, columnCount, columnType) {
+		return (
+			`The number of values (${valueCount}) does not match the number of ${columnType} (${columnCount}). ` +
+			'If using a subquery, use INSERT INTO ... SELECT instead of INSERT INTO ... VALUES (SELECT ...)'
+		);
+	};
+
 	// Check, if this dirty flag is required
 	var s = '';
 	var sw = '';
@@ -15221,6 +15261,12 @@ yy.Insert.prototype.compile = function (databaseid) {
 
 			//			s += '';
 			if (self.columns) {
+				// Validate that we have the right number of values for the columns
+				if (values.length !== self.columns.length) {
+					throw new Error(
+						createValueCountMismatchError(values.length, self.columns.length, 'columns')
+					);
+				}
 				self.columns.forEach(function (col, idx) {
 
 					//			ss.push(col.columnid +':'+ self.values[idx].value.toString());
@@ -15253,6 +15299,12 @@ yy.Insert.prototype.compile = function (databaseid) {
 				//				var table = db.tables[tableid];
 
 				if (Array.isArray(values) && table.columns && table.columns.length > 0) {
+					// Validate that we have the right number of values for the table columns
+					if (values.length !== table.columns.length) {
+						throw new Error(
+							createValueCountMismatchError(values.length, table.columns.length, 'table columns')
+						);
+					}
 					table.columns.forEach(function (col, idx) {
 						var q = "'" + col.columnid + "':";
 						//						var val = values[idx].toJS();
@@ -15272,7 +15324,7 @@ yy.Insert.prototype.compile = function (databaseid) {
 					});
 				} else {
 
-					//					sw = 'var w='+JSONtoJS(values)+';for(var k in w){r[k]=w[k]};';
+					//					sw = 'var w='+JSONtoJS(values)+';for(var k in w){if(/^__proto__$/.test(k))Object.defineProperty(r,k,{writable:true,enumerable:true,configurable:true});r[k]=w[k]};';
 					sw = JSONtoJS(values);
 				}
 			}
@@ -15351,7 +15403,7 @@ yy.Insert.prototype.compile = function (databaseid) {
 			self.output.columns.forEach(function (col) {
 				if (col.columnid === '*') {
 					// For *, expand all properties
-					s += 'for(var key in r){ outputRow[key] = r[key]; }';
+					s += 'for(var key in r){ if(/^__proto__$/.test(key))Object.defineProperty(outputRow,key,{writable:true,enumerable:true,configurable:true});outputRow[key] = r[key]; }';
 				} else {
 					var colname = col.as || col.columnid;
 					// Direct property access for simple columns
@@ -15430,7 +15482,7 @@ yy.Insert.prototype.compile = function (databaseid) {
 							if (col.columnid === '*') {
 								// For *, expand all properties
 								for (var key in r) {
-									outputRow[key] = r[key];
+									if(/^__proto__$/.test(key))Object.defineProperty(outputRow,key,{writable:true,enumerable:true,configurable:true});outputRow[key] = r[key];
 								}
 							} else {
 								var colname = col.as || col.columnid;
@@ -15781,7 +15833,7 @@ yy.Delete.prototype.compile = function (databaseid) {
 						if (col.columnid === '*') {
 							// For *, expand all properties
 							for (var key in r) {
-								outputRow[key] = r[key];
+								if(/^__proto__$/.test(key))Object.defineProperty(outputRow,key,{writable:true,enumerable:true,configurable:true});outputRow[key] = r[key];
 							}
 						} else {
 							var colname = col.as || col.columnid;
@@ -15852,7 +15904,7 @@ yy.Delete.prototype.compile = function (databaseid) {
 						if (col.columnid === '*') {
 							// For *, expand all properties
 							for (var key in r) {
-								outputRow[key] = r[key];
+								if(/^__proto__$/.test(key))Object.defineProperty(outputRow,key,{writable:true,enumerable:true,configurable:true});outputRow[key] = r[key];
 							}
 						} else {
 							var colname = col.as || col.columnid;
@@ -16022,7 +16074,7 @@ yy.Update.prototype.compile = function (databaseid) {
 					if (col.columnid === '*') {
 						// For *, use INSERTED values
 						for (var key in inserted) {
-							outputRow[key] = inserted[key];
+							if(/^__proto__$/.test(key))Object.defineProperty(outputRow,key,{writable:true,enumerable:true,configurable:true});outputRow[key] = inserted[key];
 						}
 					} else {
 						var colname = col.as || col.columnid;
@@ -19587,6 +19639,35 @@ IDB.updateTable = function (databaseid, tableid, assignfn, wherefn, params, cb)
 		};
 	};
 };
+
+/**
+ * Commit transaction for IndexedDB
+ * Note: IndexedDB operations are auto-committed per operation
+ * This method provides API compatibility
+ */
+IDB.commit = function (databaseid, cb) {
+	// IndexedDB auto-commits each operation's transaction
+	// No additional action needed
+	return cb ? cb(1) : 1;
+};
+
+/**
+ * Begin transaction - alias to commit for IndexedDB
+ * Similar to LOCALSTORAGE pattern
+ */
+IDB.begin = IDB.commit;
+
+/**
+ * Rollback transaction for IndexedDB
+ * Note: IndexedDB operations are auto-committed per operation
+ * Manual rollback not supported - operations cannot be undone
+ */
+IDB.rollback = function (databaseid, cb) {
+	// IndexedDB auto-commits each operation
+	// Cannot rollback already-committed operations
+	// This provides API compatibility only
+	return cb ? cb(1) : 1;
+};
 //
 // 91localstorage.js
 // localStorage and DOM-Storage engine

package/dist/alasql.js

@@ -1,7 +1,7 @@
-//! AlaSQL v4.14.0 build: develop-3b8d5542 | © 2014-2025 Andrey Gershun & Mathias Wulff | License: MIT
+//! AlaSQL v4.16.1 build: develop-ff717ec7 | © 2014-2025 Andrey Gershun & Mathias Wulff | License: MIT
 /*
 @module alasql
-@version 4.14.0
+@version 4.16.1
 
 AlaSQL - JavaScript SQL database
 © 2014-2025	Andrey Gershun & Mathias Wulff
@@ -141,8 +141,8 @@ SOFTWARE.
 		Current version of alasql
 		  @constant {string}
 	*/
-	alasql.version = '4.14.0';
-	alasql.build = 'develop-3b8d5542';
+	alasql.version = '4.16.1';
+	alasql.build = 'develop-ff717ec7';
 
 	/**
 		Debug flag
@@ -4522,11 +4522,11 @@ var cloneDeep = (utils.cloneDeep = function cloneDeep(obj) {
 		return +obj;
 	}
 
-	var temp = new obj.constructor(); // changed
+	var temp = new (Object.prototype.hasOwnProperty.call(obj, 'constructor') ? Object : obj.constructor)(); // changed
 
 	for (var key in obj) {
 		if (obj.hasOwnProperty(key)) {
-			temp[key] = cloneDeep(obj[key]);
+			/* A "__proto__" key from parsed data is copied as data, never as the prototype */ if (key === '__proto__') { Object.defineProperty(temp, key, {value: cloneDeep(obj[key]), writable: true, enumerable: true, configurable: true}); } else { temp[key] = cloneDeep(obj[key]); }
 		}
 	}
 	return temp;
@@ -4598,7 +4598,7 @@ var extend = (utils.extend = function extend(a, b) {
 	a = a || {};
 	for (var key in b) {
 		if (b.hasOwnProperty(key)) {
-			a[key] = b[key];
+			/* A "__proto__" key from parsed data is copied as data, never as the prototype */ if (key === '__proto__') { Object.defineProperty(a, key, {value: b[key], writable: true, enumerable: true, configurable: true}); } else { a[key] = b[key]; }
 		}
 	}
 	return a;
@@ -8527,6 +8527,12 @@ yy.ExistsValue = class ExistsValue {
 alasql.precompile = function (statement, databaseid, params) {
 	if (!statement) return;
 	statement.params = params;
+	// For CREATE VIEW statements, move queries to the select object
+	// so they can be compiled later when the view is first used
+	if (statement.view && statement.select && statement.queries) {
+		statement.select.queries = statement.queries;
+		return;
+	}
 	if (statement.queries) {
 		statement.queriesfn = statement.queries.map(function (q) {
 			var nq = q.compile(databaseid || statement.database.databaseid);
@@ -8615,7 +8621,12 @@ yy.Select.prototype.compileFrom = function (query) {
 				};
 			} else if (alasql.databases[source.databaseid].tables[source.tableid].view) {
 				source.datafn = (query, params, cb, idx, alasql) => {
-					let res = alasql.databases[source.databaseid].tables[source.tableid].select(params);
+					let table = alasql.databases[source.databaseid].tables[source.tableid];
+					// Lazily compile the view's select on first use
+					if (!table.select && table.viewSelect) {
+						table.select = table.viewSelect.compile(table.viewDatabaseid);
+					}
+					let res = table.select(params);
 					if (cb) res = cb(res, idx, query);
 					return res;
 				};
@@ -9331,7 +9342,7 @@ yy.Select.prototype.compileGroup = function (query) {
 			aft2 = '';
 
 		if (typeof query.groupStar !== 'undefined') {
-			aft2 += "for(var f in p['" + query.groupStar + "']) {g[f]=p['" + query.groupStar + "'][f];};";
+			aft2 += "for(var f in p['" + query.groupStar + "']) {if(/^__proto__$/.test(f))Object.defineProperty(g,f,{writable:true,enumerable:true,configurable:true});g[f]=p['" + query.groupStar + "'][f];};";
 		}
 
 		s += query.selectGroup
@@ -9793,7 +9804,7 @@ function compileSelectStar(query, aliases, joinstar) {
 					'var w=p["' + escapeq(alias) + '"];for(var k in w){r["' + escapeq(alias) + '_"+k]=w[k]};';
 			} else {
 				// Default overwrite mode
-				sp += 'var w=p["' + escapeq(alias) + '"];for(var k in w){r[k]=w[k]};';
+				sp += 'var w=p["' + escapeq(alias) + '"];for(var k in w){if(/^__proto__$/.test(k))Object.defineProperty(r,k,{writable:true,enumerable:true,configurable:true});r[k]=w[k]};';
 			}
 
 			query.dirtyColumns = true;
@@ -10232,10 +10243,10 @@ yy.Select.prototype.compileSelectGroup1 = function (query) {
 	self.columns.forEach(function (col) {
 
 		if (col instanceof yy.Column && col.columnid === '*') {
-			//			s += 'for(var k in g){r[k]=g[k]};';
+			//			s += 'for(var k in g){if(/^__proto__$/.test(k))Object.defineProperty(r,k,{writable:true,enumerable:true,configurable:true});r[k]=g[k]};';
 			//			s += 'for(var k in this.query.groupColumns){r[k]=g[this.query.groupColumns[k]]};';
 
-			s += 'for(var k in g) {r[k]=g[k]};';
+			s += 'for(var k in g) {if(/^__proto__$/.test(k))Object.defineProperty(r,k,{writable:true,enumerable:true,configurable:true});r[k]=g[k]};';
 			return '';
 
 		} else {
@@ -11537,7 +11548,7 @@ yy.Over = class Over {
 						const allValues = this.right.map(value => value.value);
 						const allValuesStr = allValues.join(',');
 						alasql.sets[allValuesStr] = alasql.sets[allValuesStr] || new Set(allValues);
-						s = `alasql.sets["${allValuesStr}"].has(alasql.utils.getValueOf(${leftJS()}))`;
+						s = `alasql.sets[${JSON.stringify(allValuesStr)}].has(alasql.utils.getValueOf(${leftJS()}))`;
 					}
 				} else {
 					s = `(${rightJS()}.indexOf(${leftJS()}) > -1)`;
@@ -11571,7 +11582,7 @@ yy.Over = class Over {
 						const allValues = this.right.map(value => value.value);
 						const allValuesStr = allValues.join(',');
 						alasql.sets[allValuesStr] = alasql.sets[allValuesStr] || new Set(allValues);
-						s = `!alasql.sets["${allValuesStr}"].has(alasql.utils.getValueOf(${leftJS()}))`;
+						s = `!alasql.sets[${JSON.stringify(allValuesStr)}].has(alasql.utils.getValueOf(${leftJS()}))`;
 					}
 				} else {
 					s = `(${rightJS()}.indexOf(${leftJS()}) === -1)`;
@@ -11976,17 +11987,23 @@ yy.Over = class Over {
 		}
 
 		findAggregator(query) {
-			const colas = escapeq(this.toString()) + ':' + query.selectGroup.length;
-
-			if (!this.nick) {
-				this.nick = colas;
+			// Check if an identical aggregate already exists in selectGroup
+			let existingAggr = query.selectGroup.find(agg => agg.toString() === this.toString());
 
-				if (!query.removeKeys.includes(colas)) {
-					query.removeKeys.push(colas);
+			if (existingAggr) {
+				// Reuse the existing aggregate's nick to share the same accumulator
+				this.aggrNick = existingAggr.nick;
+			} else {
+				// New aggregate - assign nick and add to selectGroup
+				if (!this.nick) {
+					this.nick = escapeq(this.toString()) + ':' + query.selectGroup.length;
+					if (!query.removeKeys.includes(this.nick)) {
+						query.removeKeys.push(this.nick);
+					}
 				}
+				this.aggrNick = this.nick;
+				query.selectGroup.push(this);
 			}
-
-			query.selectGroup.push(this);
 		}
 
 		toType() {
@@ -12006,7 +12023,8 @@ yy.Over = class Over {
 		}
 
 		toJS() {
-			var colas = this.nick;
+			// Use aggrNick for duplicate aggregates to share the same accumulator, otherwise use the unique nick
+			var colas = this.aggrNick || this.nick;
 			if (colas === undefined) {
 				colas = escapeq(this.toString());
 			}
@@ -12506,8 +12524,20 @@ stdfn.CONCAT_WS = function () {
 // Aggregator for joining strings
 alasql.aggr.group_concat = alasql.aggr.GROUP_CONCAT = function (v, s, stage) {
 	if (stage === 1) {
+		// Initialize: skip null values
+		if (v === null || v === undefined) {
+			return null;
+		}
 		return '' + v;
 	} else if (stage === 2) {
+		// Accumulate: skip null values
+		if (v === null || v === undefined) {
+			return s;
+		}
+		// If accumulator is null/undefined, start with current value
+		if (s === null || s === undefined) {
+			return '' + v;
+		}
 		s += ',' + v;
 		return s;
 	}
@@ -13400,7 +13430,9 @@ yy.CreateTable.prototype.execute = function (databaseid, params, cb) {
 	//Used in 420from queryfn when table.view = true!
 	if (this.view && this.select) {
 		table.view = true;
-		table.select = this.select.compile(this.table.databaseid || databaseid);
+		// Store the uncompiled select statement and databaseid for lazy compilation
+		table.viewSelect = this.select;
+		table.viewDatabaseid = this.table.databaseid || databaseid;
 	}
 
 	if (db.engineid) {
@@ -13521,7 +13553,7 @@ yy.CreateTable.prototype.execute = function (databaseid, params, cb) {
 
 			table.update(
 				function (t) {
-					for (var f in r) t[f] = r[f];
+					for (var f in r) {if(/^__proto__$/.test(f))Object.defineProperty(t,f,{writable:true,enumerable:true,configurable:true});t[f] = r[f];}
 				},
 				table.data.indexOf(toreplace),
 				params
@@ -15188,6 +15220,14 @@ yy.Insert.prototype.compile = function (databaseid) {
 		throw "Table '" + tableid + "' could not be found";
 	}
 
+	// Helper function to create error message for value/column count mismatch
+	var createValueCountMismatchError = function (valueCount, columnCount, columnType) {
+		return (
+			`The number of values (${valueCount}) does not match the number of ${columnType} (${columnCount}). ` +
+			'If using a subquery, use INSERT INTO ... SELECT instead of INSERT INTO ... VALUES (SELECT ...)'
+		);
+	};
+
 	// Check, if this dirty flag is required
 	var s = '';
 	var sw = '';
@@ -15221,6 +15261,12 @@ yy.Insert.prototype.compile = function (databaseid) {
 
 			//			s += '';
 			if (self.columns) {
+				// Validate that we have the right number of values for the columns
+				if (values.length !== self.columns.length) {
+					throw new Error(
+						createValueCountMismatchError(values.length, self.columns.length, 'columns')
+					);
+				}
 				self.columns.forEach(function (col, idx) {
 
 					//			ss.push(col.columnid +':'+ self.values[idx].value.toString());
@@ -15253,6 +15299,12 @@ yy.Insert.prototype.compile = function (databaseid) {
 				//				var table = db.tables[tableid];
 
 				if (Array.isArray(values) && table.columns && table.columns.length > 0) {
+					// Validate that we have the right number of values for the table columns
+					if (values.length !== table.columns.length) {
+						throw new Error(
+							createValueCountMismatchError(values.length, table.columns.length, 'table columns')
+						);
+					}
 					table.columns.forEach(function (col, idx) {
 						var q = "'" + col.columnid + "':";
 						//						var val = values[idx].toJS();
@@ -15272,7 +15324,7 @@ yy.Insert.prototype.compile = function (databaseid) {
 					});
 				} else {
 
-					//					sw = 'var w='+JSONtoJS(values)+';for(var k in w){r[k]=w[k]};';
+					//					sw = 'var w='+JSONtoJS(values)+';for(var k in w){if(/^__proto__$/.test(k))Object.defineProperty(r,k,{writable:true,enumerable:true,configurable:true});r[k]=w[k]};';
 					sw = JSONtoJS(values);
 				}
 			}
@@ -15351,7 +15403,7 @@ yy.Insert.prototype.compile = function (databaseid) {
 			self.output.columns.forEach(function (col) {
 				if (col.columnid === '*') {
 					// For *, expand all properties
-					s += 'for(var key in r){ outputRow[key] = r[key]; }';
+					s += 'for(var key in r){ if(/^__proto__$/.test(key))Object.defineProperty(outputRow,key,{writable:true,enumerable:true,configurable:true});outputRow[key] = r[key]; }';
 				} else {
 					var colname = col.as || col.columnid;
 					// Direct property access for simple columns
@@ -15430,7 +15482,7 @@ yy.Insert.prototype.compile = function (databaseid) {
 							if (col.columnid === '*') {
 								// For *, expand all properties
 								for (var key in r) {
-									outputRow[key] = r[key];
+									if(/^__proto__$/.test(key))Object.defineProperty(outputRow,key,{writable:true,enumerable:true,configurable:true});outputRow[key] = r[key];
 								}
 							} else {
 								var colname = col.as || col.columnid;
@@ -15781,7 +15833,7 @@ yy.Delete.prototype.compile = function (databaseid) {
 						if (col.columnid === '*') {
 							// For *, expand all properties
 							for (var key in r) {
-								outputRow[key] = r[key];
+								if(/^__proto__$/.test(key))Object.defineProperty(outputRow,key,{writable:true,enumerable:true,configurable:true});outputRow[key] = r[key];
 							}
 						} else {
 							var colname = col.as || col.columnid;
@@ -15852,7 +15904,7 @@ yy.Delete.prototype.compile = function (databaseid) {
 						if (col.columnid === '*') {
 							// For *, expand all properties
 							for (var key in r) {
-								outputRow[key] = r[key];
+								if(/^__proto__$/.test(key))Object.defineProperty(outputRow,key,{writable:true,enumerable:true,configurable:true});outputRow[key] = r[key];
 							}
 						} else {
 							var colname = col.as || col.columnid;
@@ -16022,7 +16074,7 @@ yy.Update.prototype.compile = function (databaseid) {
 					if (col.columnid === '*') {
 						// For *, use INSERTED values
 						for (var key in inserted) {
-							outputRow[key] = inserted[key];
+							if(/^__proto__$/.test(key))Object.defineProperty(outputRow,key,{writable:true,enumerable:true,configurable:true});outputRow[key] = inserted[key];
 						}
 					} else {
 						var colname = col.as || col.columnid;
@@ -19587,6 +19639,35 @@ IDB.updateTable = function (databaseid, tableid, assignfn, wherefn, params, cb)
 		};
 	};
 };
+
+/**
+ * Commit transaction for IndexedDB
+ * Note: IndexedDB operations are auto-committed per operation
+ * This method provides API compatibility
+ */
+IDB.commit = function (databaseid, cb) {
+	// IndexedDB auto-commits each operation's transaction
+	// No additional action needed
+	return cb ? cb(1) : 1;
+};
+
+/**
+ * Begin transaction - alias to commit for IndexedDB
+ * Similar to LOCALSTORAGE pattern
+ */
+IDB.begin = IDB.commit;
+
+/**
+ * Rollback transaction for IndexedDB
+ * Note: IndexedDB operations are auto-committed per operation
+ * Manual rollback not supported - operations cannot be undone
+ */
+IDB.rollback = function (databaseid, cb) {
+	// IndexedDB auto-commits each operation
+	// Cannot rollback already-committed operations
+	// This provides API compatibility only
+	return cb ? cb(1) : 1;
+};
 //
 // 91localstorage.js
 // localStorage and DOM-Storage engine