Module limits 

Parser DoS limits.

These limits are uniformly applied at parser entry points so a malicious query string can’t exhaust recursion stack, RAM, or identifier bookkeeping. Limit values are documented in docs/security/parser-limits.md (issue #87).

Defaults

Limit	Default	Rationale
max_depth	16	Recursive descent + Pratt; above typical
		hand-written queries (≤ 12).
max_input_bytes	1 MiB	Hard cap on the token stream input.
max_identifier_chars	256	Long enough for legitimate UUID-tagged names,
		short enough to bound HashMap pressure.
max_tokens	8192	Bounds token-driven parser work even when input
		bytes and recursion depth stay below their caps.

Callers that need different limits (replication apply, admin DDL migrations) construct a custom ParserLimits and pass it to Parser::with_limits.

Structs

ParserLimits

Hard limits enforced by the front-end.