eager_eye 1.2.15 → 1.3.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 84a1f7a4156669772686b2138d5015bd82e5859ec09d5b1cce55b795a896c8fe
-  data.tar.gz: bc45520cd998ab972ee86c6654cd6ec111846eb417512eae4d588ace8135cab0
+  metadata.gz: edf21044e597735154b0b1acdcda9230749bf027e8b8acafe70c6aaa1da22b62
+  data.tar.gz: b7d6b716ff42f9e160c292a54ecf0344027c73e24eae29f6aecd34aae27d60ac
 SHA512:
-  metadata.gz: c3a621919af0c95f005ba215d6db440504fa235e33ede88326ad1813f826f851e77bf20a7066200df993a18bc535c024142cc79930aab714b7db80995f2578f4
-  data.tar.gz: 86702c9c9ad9b27dcd4fb0a581bdab8864f7eda953b983b4bb7c3a07e6d5f581f39544c2ddfdc0fdb3f4b7c71d84be73df608d02302df7e1db51e4c4eaa4294e
+  metadata.gz: 1849caab263614bdb85ed1ddcd15f63ae4199cd978ae56e2c8a690ca0e4c0e4616851f9a09f835d95e61adb457e35d5d07fbb3cb189c6394812f7064901cfaed
+  data.tar.gz: fe737b046298753a2fb9739f26307d46fbe4852a47f2a147fae56169259824dff4ced9f3f4cc3c6a37c58dbaea03785d2a1003d230d6b5c7cba56c4224ad011e

data/CHANGELOG.md

@@ -7,6 +7,57 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.3.1] - 2026-06-12
+
+### Changed — precision (fewer false positives)
+
+Validated against two large production apps (~1,080 hand-checked findings). These
+changes cut false positives by ~53% (339 → 158) with near-zero recall loss
+(5 findings), and lift the trustworthy detectors toward 100% precision.
+
+- **Schema-aware column guard.** New `SchemaParser` reads `db/schema.rb` (found by
+  walking up from the scanned path) to learn every table's real columns. When a
+  receiver's model can't be inferred, a method whose name the schema knows as a
+  column (`comsn_rate`, `vat_rate`, `service_fee_rate`) is no longer mistaken for
+  an association/query method. `loop_association` and `custom_method_query` no
+  longer flag column reads on unresolved receivers.
+- **Per-iteration association dedup.** `loop_association` reports a memoized
+  `belongs_to`/`has_one` read once per iteration instead of on every line — a
+  repeated read hits Rails' instance cache, not the database. Associations used
+  as a query-chain base (`x.assoc.find_by`, `x.assoc.where`) still report each
+  occurrence, since those re-query.
+- **Serializer render-site awareness.** New `SerializerUsageParser` scans render
+  sites (`XxxBlueprint.render*`, AMS `(each_)serializer:`) and records, per
+  serializer + Blueprinter view, which associations are eager-loaded and whether
+  only single records are passed. `serializer_nesting` stays silent when an
+  association is preloaded at every render site of that view, or the serializer
+  is only ever handed single records. It never concludes "safe" for a view it
+  can't see rendered, so genuine N+1s are preserved.
+- **`custom_method_query` refinements.** Skips Enumerable aggregates with a block
+  argument (`relation.sum(&:amount)`), per-batch queries inside
+  `in_batches`/`find_in_batches`, and relation query methods called directly on a
+  single iteration element (a SELECT alias such as `record.ids`, not a query).
+- **`validation_n_plus_one`** ignores saves that skip validations
+  (`save(validate: false)` / `create(..., validate: false)`).
+
+### Added
+
+- **`--baseline FILE` flag** — compare the current scan against a previously
+  captured JSON report and surface only issues that are NOT in the baseline.
+  Designed for the brownfield CI workflow: accept existing N+1s as the
+  baseline, fail builds only on regressions (new issues introduced by a PR).
+  Baseline files are produced by the existing `--format json` output (the
+  flag accepts either the full report-shaped object or a bare array of
+  issues). Malformed/missing baselines exit with a clear error message.
+- **`EagerEye::Issue.from_h(hash)`** — public factory that rebuilds an
+  `Issue` from its serialized form (e.g. a parsed JSON entry). Coerces
+  `detector`/`severity` strings back to symbols and defaults severity to
+  `:warning` when absent. Round-trips through `to_h` and `to_json`.
+- **`EagerEye::Baseline`** — the helper behind `--baseline`. Loads issues
+  from a JSON path (`Baseline.load_issues(path)`) and filters a current
+  issue list against them (`Baseline.filter(issues, path)`). Useful
+  programmatically for projects that wrap EagerEye in their own runner.
+
 ## [1.2.15] - 2026-05-01
 
 ### Fixed