GeezerVison

This provides a lightweight alternative to ExecutableNormalizedOperation
(ENO) for tracking query complexity during validation.

New features:
- QueryComplexityLimits class with maxDepth and maxFieldsCount settings
- Configuration via GraphQLContext using QueryComplexityLimits.KEY
- Fragment fields counted at each spread site (like ENO)
- Depth tracking measures nested Field nodes
- New validation error types: MaxQueryDepthExceeded, MaxQueryFieldsExceeded

Implementation notes:
- Fragment complexity is calculated lazily during first spread traversal
- No additional AST traversal needed - complexity tracked during normal
  validation traversal
- Subsequent spreads of the same fragment add the stored complexity

Usage:
```java
QueryComplexityLimits limits = QueryComplexityLimits.newLimits()
    .maxDepth(10)
    .maxFieldsCount(100)
    .build();

ExecutionInput input = ExecutionInput.newExecutionInput()
    .query(query)
    .graphQLContext(ctx -> ctx.put(QueryComplexityLimits.KEY, limits))
    .build();
```

Co-Authored-By: Claude Opus 4.5 <[email protected]>

Move introspection abuse detection from execution-time ENO creation to
the validation layer. This eliminates the expensive
ExecutableNormalizedOperation construction for every introspection query.

The validator now enforces two checks when GOOD_FAITH_INTROSPECTION is
enabled: field repetition (__schema/__type max once, __Type cycle fields
max once) and tightened complexity limits (500 fields, 20 depth).

Co-Authored-By: Claude Opus 4.6 <[email protected]>

…base

- Add @nullable annotations for QueryComplexityLimits parameters
- Replace shouldRunNonFragmentSpreadChecks() with shouldRunDocumentLevelRules()
- Replace fragmentSpreadVisitDepth with fragmentRetraversalDepth

Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>

The OverlappingFieldsCanBeMergedBenchmarkTest uses intentionally large
queries (108k fields, depth 101) that exceed default complexity limits.
Pass QueryComplexityLimits.NONE to bypass the limits in these tests.

Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>

The refactored GoodFaithIntrospection validation had uncovered code paths
for queries that exceed complexity limits (field count or depth) without
triggering the tooManyFields cycle check. These tests exercise:
- Wide introspection query exceeding field count limit (>500 fields)
- Deep introspection query exceeding depth limit (>20 levels via ofType)
- Custom user limits combined with good faith limits

Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>

Instead of pre-scanning the document with containsIntrospectionFields,
let checkGoodFaithIntrospection detect introspection queries at
validation time when it first encounters __schema or __type on the
Query type. At that point it tightens the complexity limits and sets
a flag so that subsequent limit breaches throw
GoodFaithIntrospectionExceeded directly.

This eliminates the pre-scan (which could miss introspection fields
hidden inside inline fragments or fragment spreads) and simplifies
GraphQL.validate().

Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>

- Remove redundant @nonnull annotations from new validate() overload
  (class is @NullMarked, only @nullable needed for limits parameter)
- Remove redundant null check in QueryComplexityLimits.setDefaultLimits()
  (class is @NullMarked, parameter cannot be null)

Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>

A GraphQL schema always has a query type.

Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>

Replace "__schema", "__type", and "__Type" string literals in
checkGoodFaithIntrospection with Introspection.SchemaMetaFieldDef,
Introspection.TypeMetaFieldDef, and Introspection.__Type.

Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>

Bad merge in 0c7b9c3 took the one-liner branchName definition from
master (which does replaceAll inline) but kept the two-liner's
sanitizedBranchName reference from the copilot branch. The variable
branchName already includes sanitization via replaceAll('[/\\]', '-').

Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>

Covers the lambda branch in GraphQL.validate() where good faith is
disabled and an existing custom rule predicate also excludes a rule,
exercising the && short-circuit path.

Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>