Allow disabling return value validation to improve performance

[mahmudsudo]

closes #1493

[spawnia]

Please fix CI and address the Copilot review once it's available.

[Copilot]

Pull request overview

This PR introduces a new trustResult flag intended to improve execution performance by skipping several runtime validations/serialization steps and “trusting” resolver return values.

Changes:

• Added a trustResult boolean flag to the Executor and GraphQL public APIs and threaded it through execution context.
• Added trustResult support to ServerConfig and passed it through the server execution helper.
• Added PHPUnit coverage for the new behavior and updated the generated class reference signatures.

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 6 comments.

Show a summary per file

File	Description
tests/Executor/TrustResultTest.php	Adds tests demonstrating which validations are skipped when trustResult=true.
src/Server/ServerConfig.php	Adds trustResult config option, setter, and getter.
src/Server/Helper.php	Passes trustResult from ServerConfig into GraphQL::promiseToExecute().
src/GraphQL.php	Adds trustResult parameter to facade APIs and forwards it to the executor.
src/Executor/ReferenceExecutor.php	Skips non-null, leaf serialization, list iterable validation, and isTypeOf checks when trusted.
src/Executor/Executor.php	Adds trustResult parameter to executor APIs and forwards it into the implementation factory.
src/Executor/ExecutionContext.php	Stores trustResult in the execution context.
docs/class-reference.md	Updates documented method signatures and phpstan type aliases.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

[mahmudsudo]

@spawnia fixed ci errors and copilot reviews

[spawnia]

I would not categorize this pull request as a fix - it is a new feature.

Have you benchmarked this?

[mahmudsudo]

@spawnia

[spawnia]

I ran two sets of benchmarks.

No regression when trustResult is disabled (default)

The if ($this->exeContext->trustResult) checks added to the hot execution path have no measurable cost. Comparing all existing benchmarks (BuildSchemaBench, DeferredBench, HugeSchemaBench, LexerBench, ScalarOverrideBench, StarWarsBench) between this branch and master, every delta falls within normal run-to-run noise (±1–2%). No consistent directional regression was observed.

Gains when trustResult is enabled

A new TrustResultBench was added (benchmarks/TrustResultBench.php) covering three scenarios:

Scenario	Without trustResult	With trustResult	Improvement
500 items × 8 built-in scalar fields (4 000 serialize() calls)	32.98ms	31.54ms	~4.4%
100 items × 5 custom scalar fields (preg_replace in serialize())	5.04ms	4.57ms	~9.4%
100 objects with isTypeOf callback	3.39ms	3.14ms	~7.3%
30 orders with nested objects (combined)	3.30ms	3.24ms	~1.8%

The benefit scales with how expensive each serialize() / isTypeOf() call is. Built-in scalar serialization is cheap (simple type coercion), so gains there are modest; custom scalars or non-trivial isTypeOf checks show more improvement.

Benchmarks were run without opcache on PHP 8.3.6.

[shmax]

@spawnia isn't this covering the same ground as #1730 ?

[spawnia]

@shmax No, #1730 is about inputs - this is about outputs.

[shmax]

Ah, gotcha. 👍

[Copilot]

Pull request overview

Copilot reviewed 11 out of 11 changed files in this pull request and generated 2 comments.

Comments suppressed due to low confidence (1)

src/Executor/Executor.php:187

• Executor::promiseToExecute() calls the configured implementation factory with 10 positional arguments. On PHP 8+ this will throw an ArgumentCountError for older userland factories that only declare the pre-existing parameters, contradicting the new test expecting extra args to be ignored. Consider invoking the factory with only the number of parameters it declares (unless variadic) to preserve BC while still passing $trustResult to newer factories.

        $executor = (self::$implementationFactory)(
            $promiseAdapter,
            $schema,
            $documentNode,
            $rootValue,
            $contextValue,
            $variableValues ?? [],
            $operationName,
            $fieldResolver ?? self::$defaultFieldResolver,
            $argsMapper ?? self::$defaultArgsMapper,
            $trustResult,
        );