jsql-neo 6.4.0-beta.11 → 6.4.0-beta.12

package/README.md

@@ -3,7 +3,7 @@
 > **One engine to rule them all** — a Rust-powered embedded database that speaks your language:
 > MySQL, PostgreSQL, MongoDB, Redis, SQL, TypeScript, **and the browser**.
 
-> **v6.4.0-beta.11** — official release build · [github.com/vexify-org/JSQL-neo](https://github.com/vexify-org/JSQL-neo) · [jsql.vexify.top](https://jsql.vexify.top)
+> **v6.4.0-beta.12** — official release build · [github.com/vexify-org/JSQL-neo](https://github.com/vexify-org/JSQL-neo) · [jsql.vexify.top](https://jsql.vexify.top)
 
 ![Engines](https://img.shields.io/badge/engines-Native%20%7C%20WASM%20%7C%20Pure%20JS-7ee787)
 ![MySQL](https://img.shields.io/badge/protocol-MySQL%20compatible-1f6feb)

package/index.js

@@ -1,5 +1,5 @@
 /**
- * JSQL-NEO v6.4.0-beta.11 — Rust-Powered Embedded Database (WASM + HTTP)
+ * JSQL-NEO v6.4.0-beta.12 — Rust-Powered Embedded Database (WASM + HTTP)
  *
  * @example
  * const jsql = require('jsql-neo');

package/lib/sql.js

@@ -392,6 +392,7 @@ class Parser {
     this.pos = 0;
     this.paramCount = 0;   // 顺序占位符 ? 的序号（从 0 开始）
     this.subquerySeq = 0;  // FROM 子查询无别名时自动生成 __subN
+    this.depth = 0;        // 子查询递归深度
   }
 
   peek(offset = 0) { return this.tokens[this.pos + offset]; }
@@ -1220,6 +1221,8 @@ class Parser {
   }
 
   parseSelect() {
+    this.depth++;
+    if (this.depth > 200) throw new Error('Subquery nesting too deep (max 200)');
     this.expectKeyword('SELECT');
     let distinct = false;
     if (this.isKeyword('DISTINCT')) { this.next(); distinct = true; }
@@ -1390,9 +1393,18 @@ class Parser {
     if (this.isKeyword('LIMIT')) {
       this.next();
       limit = this.parseValue();
+      if (typeof limit === 'bigint') limit = Number(limit <= BigInt(Number.MAX_SAFE_INTEGER) ? limit : BigInt(Number.MAX_SAFE_INTEGER));
       if (typeof limit === 'number' && limit < 0) throw new Error(`LIMIT must be a non-negative integer, got ${limit}`);
-      if (this.isKeyword('OFFSET')) { this.next(); offset = this.parseValue(); if (typeof offset === 'number' && offset < 0) throw new Error(`OFFSET must be a non-negative integer, got ${offset}`); }
-      else if (this.peek().type === 'op' && this.peek().value === ',') { this.next(); offset = limit; limit = this.parseValue(); if (typeof limit === 'number' && limit < 0) throw new Error(`LIMIT must be a non-negative integer, got ${limit}`); }
+      if (this.isKeyword('OFFSET')) { this.next(); offset = this.parseValue(); if (typeof offset === 'bigint') offset = Number(offset <= BigInt(Number.MAX_SAFE_INTEGER) ? offset : BigInt(Number.MAX_SAFE_INTEGER)); if (typeof offset === 'number' && offset < 0) throw new Error(`OFFSET must be a non-negative integer, got ${offset}`); }
+      else if (this.peek().type === 'op' && this.peek().value === ',') { this.next(); offset = limit; limit = this.parseValue(); if (typeof limit === 'bigint') limit = Number(limit <= BigInt(Number.MAX_SAFE_INTEGER) ? limit : BigInt(Number.MAX_SAFE_INTEGER)); if (typeof limit === 'number' && limit < 0) throw new Error(`LIMIT must be a non-negative integer, got ${limit}`); }
+    }
+    // OFFSET without LIMIT (MySQL compatible)
+    if (limit === null && this.isKeyword('OFFSET')) {
+      this.next();
+      offset = this.parseValue();
+      if (typeof offset === 'bigint') offset = Number(offset <= BigInt(Number.MAX_SAFE_INTEGER) ? offset : BigInt(Number.MAX_SAFE_INTEGER));
+      if (typeof offset === 'number' && offset < 0) throw new Error(`OFFSET must be a non-negative integer, got ${offset}`);
+      limit = Number.MAX_SAFE_INTEGER;
     }
     // 集合运算：UNION [ALL|DISTINCT] / INTERSECT [ALL|DISTINCT] / EXCEPT [ALL|DISTINCT]
     let union = null, intersect = null, except = null;
@@ -1421,13 +1433,15 @@ class Parser {
       if (this.isWord('FIRST') || this.isWord('NEXT')) this.next();
       else throw new Error(`Expected FIRST or NEXT after FETCH, got '${this.peek().value}'`);
       const nTok = this.next();
-      const n = nTok.type === 'number' ? nTok.value : Number(nTok.value);
+      let n = nTok.type === 'number' ? nTok.value : Number(nTok.value);
+      if (typeof n === 'bigint') n = Number(n <= BigInt(Number.MAX_SAFE_INTEGER) ? n : BigInt(Number.MAX_SAFE_INTEGER));
       if (!Number.isFinite(n)) throw new Error(`Expected row count after FETCH FIRST, got '${nTok.value}'`);
       limit = n;
       if (this.isWord('ROW') || this.isWord('ROWS')) this.next();
       if (this.isWord('ONLY')) this.next();
     }
     this.optionalTailSemicolon();
+    this.depth--;
 
     return { type: 'select', columns, aggregate, distinct, from, where, groupBy, having, orderBy, limit, offset, union, intersect, except, rollup };
   }
@@ -1534,6 +1548,7 @@ class Parser {
     }
     let where = null;
     if (this.isKeyword('WHERE')) { this.next(); where = this.parseExpr(); }
+    else console.warn(`⚠️  UPDATE without WHERE clause — this will modify ALL rows in '${table}'`);
     const returning = this.parseOptionalReturning();
     this.optionalTailSemicolon();
     return { type: 'update', table, assignments, where, returning };
@@ -1562,6 +1577,7 @@ class Parser {
     if (this.isKeyword('LIMIT')) {
       this.next();
       limit = this.parseValue();
+      if (typeof limit === 'bigint') limit = Number(limit <= BigInt(Number.MAX_SAFE_INTEGER) ? limit : BigInt(Number.MAX_SAFE_INTEGER));
       if (typeof limit === 'number' && limit < 0) throw new Error(`LIMIT must be a non-negative integer, got ${limit}`);
     }
     const returning = this.parseOptionalReturning();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jsql-neo",
-  "version": "6.4.0-beta.11",
+  "version": "6.4.0-beta.12",
   "description": "JSQL-NEO — Rust-powered embedded database with WASM, REST API, B-Tree indexes, WAL, crash recovery",
   "main": "index.js",
   "types": "index.d.ts",