Skip to content

Cal.com fixtures: task runners, Pages Router routes, stub guard (v0.1.3)#20

Merged
Shakargy merged 1 commit into
mainfrom
v0.1.3-calcom-fixtures
Jul 8, 2026
Merged

Cal.com fixtures: task runners, Pages Router routes, stub guard (v0.1.3)#20
Shakargy merged 1 commit into
mainfrom
v0.1.3-calcom-fixtures

Conversation

@Shakargy

@Shakargy Shakargy commented Jul 8, 2026

Copy link
Copy Markdown
Owner

Summary

Fixture-driven release from a real proof run against Cal.com (5,736 files scanned in ~5s). Every wrong or missing output became a fix plus a regression fixture.

Fixes

  • Background Jobs under-called: Cal.com's custom Tasker (InternalTasker/RedisTasker/task-processor) is real job infrastructure, but only BullMQ new Worker()/new Queue() patterns were recognized. Custom task-runner classes and enqueue/task-processing verbs now produce background_job behavior evidence. Cal.com result: low/weak -> medium with worker evidence.
  • Admin Permissions missed: Next.js Pages Router API files (pages/api/**) produced no route signals, hiding Cal.com's admin surface entirely. Pages Router API routes are now extracted. Cal.com result: not detected -> medium with route evidence.
  • Stub guard (the important one): Cal.com community edition ships pages/api/stripe/webhook.ts as a handler that always returns 404. Naive Pages Router extraction would have turned that stub into route evidence and confirmed Billing Webhooks on a repo that cannot prove them. New rule: a disabled-endpoint stub (only behavior is a 404/501 response) is not route behavior. Billing Webhooks on Cal.com stays honestly hedged at low.
  • Perf: fixed a backtracking regex (\w*Tasker) that took the Cal.com scan from ~4s to 135s. Final: ~5s.

Fixtures added

  • fixtures/jobs/tasker-is-background-jobs
  • fixtures/nextjs/pages-api-admin-is-admin-permissions
  • fixtures/webhooks/stub-404-webhook-not-billing

Verification

  • 107 tests passing (was 104)
  • Re-scan of Cal.com verified: Auth high (unchanged), Background Jobs medium, Admin Permissions medium, Billing Webhooks low/hedged (unchanged, by design)
  • python -m build + twine check pass

Version bumped to 0.1.3. No tag, no publish - awaiting approval.

…d (v0.1.3)

Fixture-driven release from a real proof run against Cal.com (5,736 files, ~5s):

- Custom task-runner infrastructure (Tasker classes, enqueue/task-processing
  verbs) now produces background_job behavior evidence; BullMQ-only patterns
  missed Cal.com's Tasker. Background Jobs: low/weak -> medium with worker
  evidence.
- Next.js Pages Router API files (pages/api/**) are now extracted as routes;
  Cal.com's admin surface was invisible. Admin Permissions: missed -> medium
  with route evidence.
- Disabled-endpoint stubs (handlers whose only behavior is a 404/501 response,
  e.g. community editions stripping features) are not route behavior and cannot
  confirm a concept. Guards the honest refusal on Cal.com's stubbed
  stripe/webhook.ts, which Pages Router extraction would otherwise have broken.
- Perf: avoid a backtracking regex that took the Cal.com scan from ~4s to 135s.

Three new fixtures encode all of the above. 107 tests passing. Version 0.1.3.
@Shakargy Shakargy merged commit 909afc8 into main Jul 8, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant