@agent-native/scheduling 0.1.23 → 0.1.25

package/docs/llms-full.txt

@@ -162,19 +162,20 @@ owned by or shared with the current user, read/write actions throw.
 
 For full customization, you can move the package source into your own repo.
 
-**Planned for v0.2:** `agent-native eject @agent-native/scheduling`.
+Preview the complete change report, then apply it explicitly:
 
-**Today (v0.1)** — do it manually:
+```bash
+agent-native package eject @agent-native/scheduling
+agent-native package eject @agent-native/scheduling --apply
+```
 
-1. `cp -r node_modules/@agent-native/scheduling/src packages/scheduling-local/src`
-2. Add `packages/scheduling-local/` to your workspaces.
-3. Replace `"@agent-native/scheduling": "^0.1"` in dependencies with
-   `"@local/scheduling": "workspace:*"` (or similar).
-4. Run a find/replace across your repo from `@agent-native/scheduling` to
-   `@local/scheduling`.
-5. Install: `pnpm install`.
+The command copies the published source into `packages/scheduling`, updates the
+consumer dependency to `workspace:*`, preserves canonical
+`@agent-native/scheduling` imports, and runs the detected package manager. It
+refuses an existing target, unsupported workspace layout, or other collision.
+All writes and lockfiles roll back if installation fails.
 
-Now you own the code and can modify freely. Upstream updates are available via
+Now you own the code and can modify it freely. Upstream updates are available via
 `npm view @agent-native/scheduling versions` — you can selectively port changes.
 
 
@@ -200,7 +201,7 @@ locally-owned scheduling stack, not an API wrapper.
   application, booking-limit bucketing, recurring-event expansion.
 - **Server layer** (`/server`) — DB repos, availability engine, booking
   service, pluggable calendar + video providers (Google Calendar, Outlook,
-  Zoom, Google Meet, built-in video), iCal generator, lifecycle hooks →
+  Zoom, Microsoft Teams, Google Meet, built-in video), iCal generator, lifecycle hooks →
   workflows.
 - **Actions** (`/actions/*`) — ~55 `defineAction` modules covering every
   operation in the product (event type CRUD, availability edit, booking
@@ -228,6 +229,7 @@ import {
   registerVideoProvider,
   createGoogleCalendarProvider,
   createDailyVideoProvider,
+  createTeamsProvider,
 } from "@agent-native/scheduling/server/providers";
 import { getDb, schema } from "./db/index.js";
 
@@ -248,6 +250,12 @@ registerCalendarProvider(createGoogleCalendarProvider({
 registerVideoProvider(createDailyVideoProvider({
   apiKey: process.env.DAILY_API_KEY!,
 }));
+
+registerVideoProvider(createTeamsProvider({
+  clientId: process.env.MICROSOFT_CLIENT_ID!,
+  clientSecret: process.env.MICROSOFT_CLIENT_SECRET!,
+  getAccessToken: fetchMicrosoftToken, // your refresh-aware implementation
+}));
 ```
 
 ## Full documentation
@@ -255,6 +263,13 @@ registerVideoProvider(createDailyVideoProvider({
 For the full bundled docs (every .md file concatenated), see
 `llms-full.txt` in this folder.
 
+## Package lifecycle
+
+The published static `agent-native.package.json` drives safe package lifecycle
+commands. Use `agent-native package inspect @agent-native/scheduling --json`
+for contribution metadata, and preview `package add` or `package eject` before
+re-running with `--apply`. Inspection never executes package code.
+
 ## Individual skills
 
 - skills/scheduling-basics/SKILL.md — Core concepts, terminology.
@@ -282,8 +297,8 @@ Scheduling needs two kinds of providers:
 - **CalendarProvider** — reads busy intervals + writes events.
 - **VideoProvider** — creates meeting rooms when a booking is confirmed.
 
-Built-ins: Google Calendar, Office 365, Zoom, built-in video (Daily.co), Google
-Meet (piggy-backs on Google Calendar).
+Built-ins: Google Calendar, Office 365, Zoom, Microsoft Teams, built-in video
+(Daily.co), and Google Meet (piggy-backs on Google Calendar).
 
 ## CalendarProvider
 
@@ -344,6 +359,34 @@ Video providers are invoked by the booking service when a booking's location
 is `builtin-video`, `zoom`, `google-meet`, or `teams`. Meeting URLs land in
 `booking_references`.
 
+### Microsoft Teams
+
+Teams uses delegated Microsoft OAuth for work or school accounts. Register the
+provider with consumer-owned token storage and refresh callbacks:
+
+```ts
+import {
+  createTeamsProvider,
+  registerVideoProvider,
+} from "@agent-native/scheduling/server/providers";
+
+registerVideoProvider(
+  createTeamsProvider({
+    clientId: process.env.MICROSOFT_CLIENT_ID!,
+    clientSecret: process.env.MICROSOFT_CLIENT_SECRET!,
+    tenant: process.env.MICROSOFT_TENANT_ID,
+    getAccessToken: resolveMicrosoftAccessToken,
+    updateTokens: saveMicrosoftTokens,
+    markInvalid: markSchedulingCredentialInvalid,
+  }),
+);
+```
+
+The provider requests `offline_access`, `OnlineMeetings.ReadWrite`, and
+`User.Read`. Start the grant with `connect-video --kind teams_video` and finish
+the callback with `completeVideoOAuth()`. `getAccessToken` must refresh expired
+tokens; the package never reads a token store or environment directly.
+
 
 ---
 ## schema.md
@@ -710,7 +753,8 @@ description: Calendar + video provider integrations — Google Calendar, Office
 - **builtin_video** — Daily.co-backed; zero OAuth; server-to-server API key.
 - **zoom_video** — OAuth; create meetings via Zoom REST API.
 - **google_meet** — piggy-backs on Google Calendar credential.
-- **teams_video** (planned) — Microsoft Teams.
+- **teams_video** — delegated Microsoft OAuth for work or school accounts;
+  creates and cancels standalone meetings through Microsoft Graph.
 
 ## Credential lifecycle
 
@@ -742,8 +786,25 @@ See `docs/providers.md` for the full interface.
 | "Connect Google Calendar" | `connect-calendar --kind google_calendar --redirectUri ...` → redirect to returned `authUrl` |
 | "Stop checking my vacation calendar" | `toggle-selected-calendar --include false` for that externalId |
 | "Default to Zoom for new bookings" | `set-default-conferencing-app --credentialId <zoom-cred>` |
+| "Connect Microsoft Teams" | `connect-video --kind teams_video --redirectUri ...` → complete the callback with `completeVideoOAuth()` |
+| "Default to Teams for new bookings" | `set-default-conferencing-app --credentialId <teams-cred>` |
 | "Refresh calendar cache" | `refresh-busy-times` |
 
+## Microsoft Teams setup
+
+Register `createTeamsProvider()` as a video provider with the deployment's
+Microsoft client id and secret plus consumer-owned `getAccessToken`,
+`updateTokens`, and `markInvalid` callbacks. The provider defaults to the
+`organizations` tenant because Graph's delegated online-meeting API supports
+work or school accounts, not personal Microsoft accounts. It requests only
+`offline_access`, `OnlineMeetings.ReadWrite`, and `User.Read`.
+
+Use `connect-video` to start OAuth and `completeVideoOAuth()` in the callback;
+inserting a `teams_video` row with `install-conferencing-app` alone does not
+grant Microsoft access. Token refresh remains the consumer's responsibility in
+`getAccessToken`. The booking service stores the returned meeting id and join
+URL in `booking_references` and calls the provider again on cancellation.
+
 
 ---
 ## skills/routing-forms/SKILL.md

package/docs/llms.txt

@@ -17,7 +17,7 @@ locally-owned scheduling stack, not an API wrapper.
   application, booking-limit bucketing, recurring-event expansion.
 - **Server layer** (`/server`) — DB repos, availability engine, booking
   service, pluggable calendar + video providers (Google Calendar, Outlook,
-  Zoom, Google Meet, built-in video), iCal generator, lifecycle hooks →
+  Zoom, Microsoft Teams, Google Meet, built-in video), iCal generator, lifecycle hooks →
   workflows.
 - **Actions** (`/actions/*`) — ~55 `defineAction` modules covering every
   operation in the product (event type CRUD, availability edit, booking
@@ -45,6 +45,7 @@ import {
   registerVideoProvider,
   createGoogleCalendarProvider,
   createDailyVideoProvider,
+  createTeamsProvider,
 } from "@agent-native/scheduling/server/providers";
 import { getDb, schema } from "./db/index.js";
 
@@ -65,6 +66,12 @@ registerCalendarProvider(createGoogleCalendarProvider({
 registerVideoProvider(createDailyVideoProvider({
   apiKey: process.env.DAILY_API_KEY!,
 }));
+
+registerVideoProvider(createTeamsProvider({
+  clientId: process.env.MICROSOFT_CLIENT_ID!,
+  clientSecret: process.env.MICROSOFT_CLIENT_SECRET!,
+  getAccessToken: fetchMicrosoftToken, // your refresh-aware implementation
+}));
 ```
 
 ## Full documentation
@@ -72,6 +79,13 @@ registerVideoProvider(createDailyVideoProvider({
 For the full bundled docs (every .md file concatenated), see
 `llms-full.txt` in this folder.
 
+## Package lifecycle
+
+The published static `agent-native.package.json` drives safe package lifecycle
+commands. Use `agent-native package inspect @agent-native/scheduling --json`
+for contribution metadata, and preview `package add` or `package eject` before
+re-running with `--apply`. Inspection never executes package code.
+
 ## Individual skills
 
 - skills/scheduling-basics/SKILL.md — Core concepts, terminology.

package/docs/providers.md

@@ -5,8 +5,8 @@ Scheduling needs two kinds of providers:
 - **CalendarProvider** — reads busy intervals + writes events.
 - **VideoProvider** — creates meeting rooms when a booking is confirmed.
 
-Built-ins: Google Calendar, Office 365, Zoom, built-in video (Daily.co), Google
-Meet (piggy-backs on Google Calendar).
+Built-ins: Google Calendar, Office 365, Zoom, Microsoft Teams, built-in video
+(Daily.co), and Google Meet (piggy-backs on Google Calendar).
 
 ## CalendarProvider
 
@@ -66,3 +66,31 @@ registerVideoProvider({
 Video providers are invoked by the booking service when a booking's location
 is `builtin-video`, `zoom`, `google-meet`, or `teams`. Meeting URLs land in
 `booking_references`.
+
+### Microsoft Teams
+
+Teams uses delegated Microsoft OAuth for work or school accounts. Register the
+provider with consumer-owned token storage and refresh callbacks:
+
+```ts
+import {
+  createTeamsProvider,
+  registerVideoProvider,
+} from "@agent-native/scheduling/server/providers";
+
+registerVideoProvider(
+  createTeamsProvider({
+    clientId: process.env.MICROSOFT_CLIENT_ID!,
+    clientSecret: process.env.MICROSOFT_CLIENT_SECRET!,
+    tenant: process.env.MICROSOFT_TENANT_ID,
+    getAccessToken: resolveMicrosoftAccessToken,
+    updateTokens: saveMicrosoftTokens,
+    markInvalid: markSchedulingCredentialInvalid,
+  }),
+);
+```
+
+The provider requests `offline_access`, `OnlineMeetings.ReadWrite`, and
+`User.Read`. Start the grant with `connect-video --kind teams_video` and finish
+the callback with `completeVideoOAuth()`. `getAccessToken` must refresh expired
+tokens; the package never reads a token store or environment directly.

package/docs/skills/integrations/SKILL.md

@@ -17,7 +17,8 @@ description: Calendar + video provider integrations — Google Calendar, Office
 - **builtin_video** — Daily.co-backed; zero OAuth; server-to-server API key.
 - **zoom_video** — OAuth; create meetings via Zoom REST API.
 - **google_meet** — piggy-backs on Google Calendar credential.
-- **teams_video** (planned) — Microsoft Teams.
+- **teams_video** — delegated Microsoft OAuth for work or school accounts;
+  creates and cancels standalone meetings through Microsoft Graph.
 
 ## Credential lifecycle
 
@@ -49,4 +50,21 @@ See `docs/providers.md` for the full interface.
 | "Connect Google Calendar" | `connect-calendar --kind google_calendar --redirectUri ...` → redirect to returned `authUrl` |
 | "Stop checking my vacation calendar" | `toggle-selected-calendar --include false` for that externalId |
 | "Default to Zoom for new bookings" | `set-default-conferencing-app --credentialId <zoom-cred>` |
+| "Connect Microsoft Teams" | `connect-video --kind teams_video --redirectUri ...` → complete the callback with `completeVideoOAuth()` |
+| "Default to Teams for new bookings" | `set-default-conferencing-app --credentialId <teams-cred>` |
 | "Refresh calendar cache" | `refresh-busy-times` |
+
+## Microsoft Teams setup
+
+Register `createTeamsProvider()` as a video provider with the deployment's
+Microsoft client id and secret plus consumer-owned `getAccessToken`,
+`updateTokens`, and `markInvalid` callbacks. The provider defaults to the
+`organizations` tenant because Graph's delegated online-meeting API supports
+work or school accounts, not personal Microsoft accounts. It requests only
+`offline_access`, `OnlineMeetings.ReadWrite`, and `User.Read`.
+
+Use `connect-video` to start OAuth and `completeVideoOAuth()` in the callback;
+inserting a `teams_video` row with `install-conferencing-app` alone does not
+grant Microsoft access. Token refresh remains the consumer's responsibility in
+`getAccessToken`. The booking service stores the returned meeting id and join
+URL in `booking_references` and calls the provider again on cancellation.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/scheduling",
-  "version": "0.1.23",
+  "version": "0.1.25",
   "description": "Scheduling primitives for agent-native apps — event types, availability, bookings, team scheduling, workflows, and routing forms.",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {
@@ -13,6 +13,7 @@
     "directory": "packages/scheduling"
   },
   "files": [
+    "agent-native.package.json",
     "dist",
     "docs",
     "src"
@@ -52,23 +53,22 @@
     "nanoid": "^5.1.9",
     "rrule": "^2.8.1",
     "zod": "^4.3.6",
-    "@agent-native/toolkit": "^0.4.4"
+    "@agent-native/toolkit": "^0.4.7"
   },
   "devDependencies": {
     "@libsql/client": "^0.15.8",
-    "@tabler/icons-react": "^3.0.0",
+    "@tabler/icons-react": "^3.41.1",
     "@types/node": "^24.2.1",
     "@types/react": "^19.2.14",
     "drizzle-orm": "^0.45.2",
     "react": "^19.2.5",
-    "typescript": "npm:@typescript/typescript6@^6.0.2",
     "typescript-7": "npm:typescript@^7.0.2",
     "vitest": "^4.1.5",
-    "@agent-native/core": "0.92.4"
+    "@agent-native/core": "0.98.0"
   },
   "peerDependencies": {
     "@agent-native/core": ">=0.8.0",
-    "@tabler/icons-react": ">=3",
+    "@tabler/icons-react": "^3.41.1",
     "drizzle-orm": ">=0.45",
     "react": ">=18",
     "react-dom": ">=18"
@@ -84,6 +84,7 @@
       "optional": true
     }
   },
+  "agentNativeManifest": "agent-native.package.json",
   "scripts": {
     "build": "tsc && node scripts/build-llms-full.mjs",
     "dev": "tsc --watch",

package/src/actions/_helpers.ts

@@ -15,6 +15,24 @@ export function currentUserEmailOrNull(): string | null {
   return getSchedulingContext().getCurrentUserEmail() ?? null;
 }
 
+/**
+ * Verify the current user is the host of a booking. Throws "Not authorized to
+ * <action>" if not. Mirrors the `isHost` half of the `isHost || hasToken`
+ * guard used by cancel-booking/reschedule-booking, for booking actions that
+ * don't accept a public capability token (attendee/note/status mutations —
+ * host identity is the only legitimate caller for these).
+ */
+export function assertBookingHost(
+  booking: { hostEmail: string },
+  action: string,
+): void {
+  const userEmail = currentUserEmailOrNull();
+  const isHost = !!userEmail && userEmail === booking.hostEmail;
+  if (!isHost) {
+    throw new Error(`Not authorized to ${action}`);
+  }
+}
+
 export function currentOrgId(): string | undefined {
   return getSchedulingContext().getCurrentOrgId?.();
 }

package/src/actions/add-booking-attendee.ts

@@ -4,6 +4,7 @@ import { z } from "zod";
 
 import { getBookingByUid } from "../server/bookings-repo.js";
 import { getSchedulingContext } from "../server/context.js";
+import { assertBookingHost } from "./_helpers.js";
 
 export default defineAction({
   description: "Add an attendee (or seat reservation) to a booking",
@@ -16,6 +17,7 @@ export default defineAction({
   run: async (args) => {
     const booking = await getBookingByUid(args.uid);
     if (!booking) throw new Error(`Booking ${args.uid} not found`);
+    assertBookingHost(booking, "add an attendee to this booking");
     const { getDb, schema } = getSchedulingContext();
     await getDb()
       .insert(schema.bookingAttendees)

package/src/actions/add-booking-note.ts

@@ -4,7 +4,7 @@ import { z } from "zod";
 
 import { getBookingByUid } from "../server/bookings-repo.js";
 import { getSchedulingContext } from "../server/context.js";
-import { currentUserEmail } from "./_helpers.js";
+import { assertBookingHost, currentUserEmail } from "./_helpers.js";
 
 export default defineAction({
   description: "Add an internal (host-only) note to a booking",
@@ -12,6 +12,7 @@ export default defineAction({
   run: async (args) => {
     const booking = await getBookingByUid(args.uid);
     if (!booking) throw new Error(`Booking ${args.uid} not found`);
+    assertBookingHost(booking, "add a note to this booking");
     const { getDb, schema } = getSchedulingContext();
     const id = nanoid();
     await getDb().insert(schema.bookingNotes).values({

package/src/actions/booking-authz.spec.ts

@@ -0,0 +1,288 @@
+/**
+ * Cross-tenant write (IDOR) regression tests for booking actions that
+ * mutate — or disclose a capability token for — a booking that belongs to
+ * another host. Mirrors the `isHost` guard already proven in
+ * `cancel-booking.ts` / `reschedule-booking.ts`.
+ */
+import { randomUUID } from "node:crypto";
+import { mkdtempSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+
+import { createClient, type Client } from "@libsql/client";
+import { drizzle } from "drizzle-orm/libsql";
+import { afterEach, beforeEach, describe, expect, it } from "vitest";
+
+import * as schema from "../schema/index.js";
+import { setSchedulingContext } from "../server/context.js";
+import addBookingAttendee from "./add-booking-attendee.js";
+import addBookingNote from "./add-booking-note.js";
+import confirmBooking from "./confirm-booking.js";
+import markNoShow from "./mark-no-show.js";
+import removeBookingAttendee from "./remove-booking-attendee.js";
+import sendRescheduleLink from "./send-reschedule-link.js";
+
+const HOST_EMAIL = "host@example.com";
+const OUTSIDER_EMAIL = "outsider@example.com";
+const BOOKING_UID = "booking-uid-1";
+const ATTENDEE_EMAIL = "attendee@example.com";
+
+let client: Client;
+let dbDir: string;
+let currentUserEmail: string | undefined;
+
+beforeEach(async () => {
+  dbDir = mkdtempSync(join(tmpdir(), "scheduling-booking-authz-test-"));
+  client = createClient({ url: `file:${join(dbDir, `${randomUUID()}.db`)}` });
+  await client.execute(`
+    CREATE TABLE bookings (
+      id TEXT PRIMARY KEY,
+      uid TEXT NOT NULL UNIQUE,
+      event_type_id TEXT NOT NULL,
+      host_email TEXT NOT NULL,
+      title TEXT NOT NULL,
+      description TEXT,
+      start_time TEXT NOT NULL,
+      end_time TEXT NOT NULL,
+      timezone TEXT NOT NULL DEFAULT 'UTC',
+      status TEXT NOT NULL DEFAULT 'confirmed',
+      location TEXT,
+      custom_responses TEXT,
+      cancel_token TEXT,
+      reschedule_token TEXT,
+      from_reschedule TEXT,
+      cancellation_reason TEXT,
+      rescheduling_reason TEXT,
+      ical_uid TEXT NOT NULL,
+      ical_sequence INTEGER NOT NULL DEFAULT 0,
+      recurring_event_id TEXT,
+      paid INTEGER NOT NULL DEFAULT 0,
+      no_show_host INTEGER NOT NULL DEFAULT 0,
+      metadata TEXT,
+      created_at TEXT NOT NULL,
+      updated_at TEXT NOT NULL,
+      owner_email TEXT NOT NULL DEFAULT 'local@localhost',
+      org_id TEXT,
+      visibility TEXT NOT NULL DEFAULT 'private'
+    );
+  `);
+  await client.execute(`
+    CREATE TABLE booking_attendees (
+      id TEXT PRIMARY KEY,
+      booking_id TEXT NOT NULL,
+      email TEXT NOT NULL,
+      name TEXT NOT NULL,
+      timezone TEXT,
+      locale TEXT,
+      no_show INTEGER NOT NULL DEFAULT 0,
+      created_at TEXT NOT NULL
+    );
+  `);
+  await client.execute(`
+    CREATE TABLE booking_references (
+      id TEXT PRIMARY KEY,
+      booking_id TEXT NOT NULL,
+      type TEXT NOT NULL,
+      external_id TEXT NOT NULL,
+      meeting_url TEXT,
+      meeting_password TEXT,
+      credential_id TEXT,
+      created_at TEXT NOT NULL
+    );
+  `);
+  await client.execute(`
+    CREATE TABLE booking_notes (
+      id TEXT PRIMARY KEY,
+      booking_id TEXT NOT NULL,
+      author_email TEXT NOT NULL,
+      content TEXT NOT NULL,
+      created_at TEXT NOT NULL
+    );
+  `);
+
+  const db = drizzle(client, { schema });
+  currentUserEmail = HOST_EMAIL;
+  setSchedulingContext({
+    getDb: () => db,
+    schema,
+    getCurrentUserEmail: () => currentUserEmail,
+  });
+
+  const now = new Date().toISOString();
+  await client.execute({
+    sql: `INSERT INTO bookings (
+      id, uid, event_type_id, host_email, title, start_time, end_time,
+      timezone, status, cancel_token, reschedule_token, ical_uid, created_at, updated_at
+    ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,
+    args: [
+      "booking-1",
+      BOOKING_UID,
+      "event-type-1",
+      HOST_EMAIL,
+      "Test Meeting",
+      "2026-08-01T10:00:00.000Z",
+      "2026-08-01T10:30:00.000Z",
+      "UTC",
+      "pending",
+      "cancel-token-1",
+      "reschedule-token-1",
+      "ical-uid-1",
+      now,
+      now,
+    ],
+  });
+  await client.execute({
+    sql: `INSERT INTO booking_attendees (id, booking_id, email, name, created_at) VALUES (?, ?, ?, ?, ?)`,
+    args: ["attendee-1", "booking-1", ATTENDEE_EMAIL, "Attendee One", now],
+  });
+});
+
+afterEach(() => {
+  client.close();
+  rmSync(dbDir, { recursive: true, force: true });
+});
+
+async function bookingStatus(): Promise<string> {
+  const { rows } = await client.execute({
+    sql: "SELECT status FROM bookings WHERE uid = ?",
+    args: [BOOKING_UID],
+  });
+  return String(rows[0]?.status);
+}
+
+async function attendeeEmails(): Promise<string[]> {
+  const { rows } = await client.execute({
+    sql: "SELECT email FROM booking_attendees WHERE booking_id = 'booking-1'",
+  });
+  return rows.map((r: any) => String(r.email)).sort();
+}
+
+async function attendeeNoShow(email: string): Promise<boolean> {
+  const { rows } = await client.execute({
+    sql: "SELECT no_show FROM booking_attendees WHERE booking_id = 'booking-1' AND email = ?",
+    args: [email],
+  });
+  return Boolean(rows[0]?.no_show);
+}
+
+async function noteCount(): Promise<number> {
+  const { rows } = await client.execute("SELECT * FROM booking_notes");
+  return rows.length;
+}
+
+describe("confirm-booking authorization", () => {
+  it("rejects a non-host caller and leaves the booking unchanged", async () => {
+    currentUserEmail = OUTSIDER_EMAIL;
+    await expect(confirmBooking.run({ uid: BOOKING_UID })).rejects.toThrow(
+      /not authorized/i,
+    );
+    expect(await bookingStatus()).toBe("pending");
+  });
+
+  it("allows the host to confirm the booking", async () => {
+    currentUserEmail = HOST_EMAIL;
+    const result: any = await confirmBooking.run({ uid: BOOKING_UID });
+    expect(result.booking?.status).toBe("confirmed");
+    expect(await bookingStatus()).toBe("confirmed");
+  });
+});
+
+describe("mark-no-show authorization", () => {
+  it("rejects a non-host caller and leaves the attendee unchanged", async () => {
+    currentUserEmail = OUTSIDER_EMAIL;
+    await expect(
+      markNoShow.run({ uid: BOOKING_UID, attendeeEmail: ATTENDEE_EMAIL }),
+    ).rejects.toThrow(/not authorized/i);
+    expect(await attendeeNoShow(ATTENDEE_EMAIL)).toBe(false);
+  });
+
+  it("allows the host to mark an attendee no-show", async () => {
+    currentUserEmail = HOST_EMAIL;
+    const result: any = await markNoShow.run({
+      uid: BOOKING_UID,
+      attendeeEmail: ATTENDEE_EMAIL,
+    });
+    expect(result.ok).toBe(true);
+    expect(await attendeeNoShow(ATTENDEE_EMAIL)).toBe(true);
+  });
+});
+
+describe("add-booking-attendee authorization", () => {
+  it("rejects a non-host caller and does not add the attendee", async () => {
+    currentUserEmail = OUTSIDER_EMAIL;
+    await expect(
+      addBookingAttendee.run({
+        uid: BOOKING_UID,
+        name: "Intruder",
+        email: "intruder@example.com",
+      }),
+    ).rejects.toThrow(/not authorized/i);
+    expect(await attendeeEmails()).toEqual([ATTENDEE_EMAIL]);
+  });
+
+  it("allows the host to add an attendee", async () => {
+    currentUserEmail = HOST_EMAIL;
+    await addBookingAttendee.run({
+      uid: BOOKING_UID,
+      name: "New Guest",
+      email: "guest@example.com",
+    });
+    expect(await attendeeEmails()).toEqual(
+      [ATTENDEE_EMAIL, "guest@example.com"].sort(),
+    );
+  });
+});
+
+describe("remove-booking-attendee authorization", () => {
+  it("rejects a non-host caller and does not remove the attendee", async () => {
+    currentUserEmail = OUTSIDER_EMAIL;
+    await expect(
+      removeBookingAttendee.run({ uid: BOOKING_UID, email: ATTENDEE_EMAIL }),
+    ).rejects.toThrow(/not authorized/i);
+    expect(await attendeeEmails()).toEqual([ATTENDEE_EMAIL]);
+  });
+
+  it("allows the host to remove an attendee", async () => {
+    currentUserEmail = HOST_EMAIL;
+    await removeBookingAttendee.run({
+      uid: BOOKING_UID,
+      email: ATTENDEE_EMAIL,
+    });
+    expect(await attendeeEmails()).toEqual([]);
+  });
+});
+
+describe("add-booking-note authorization", () => {
+  it("rejects a non-host caller and does not create a note", async () => {
+    currentUserEmail = OUTSIDER_EMAIL;
+    await expect(
+      addBookingNote.run({ uid: BOOKING_UID, content: "snooping" }),
+    ).rejects.toThrow(/not authorized/i);
+    expect(await noteCount()).toBe(0);
+  });
+
+  it("allows the host to add a note", async () => {
+    currentUserEmail = HOST_EMAIL;
+    const result: any = await addBookingNote.run({
+      uid: BOOKING_UID,
+      content: "host note",
+    });
+    expect(result.id).toBeTruthy();
+    expect(await noteCount()).toBe(1);
+  });
+});
+
+describe("send-reschedule-link authorization", () => {
+  it("rejects a non-host caller and never returns the reschedule token", async () => {
+    currentUserEmail = OUTSIDER_EMAIL;
+    await expect(sendRescheduleLink.run({ uid: BOOKING_UID })).rejects.toThrow(
+      /not authorized/i,
+    );
+  });
+
+  it("returns the reschedule URL with token for the host", async () => {
+    currentUserEmail = HOST_EMAIL;
+    const result: any = await sendRescheduleLink.run({ uid: BOOKING_UID });
+    expect(result.url).toContain("reschedule-token-1");
+  });
+});