feat: add invite code validity controls

- Add invite code starts/expires fields across contracts, API, Spacetime bindings, and admin UI
- Enforce pending/expired invite code redemption behavior and expose admin status
- Add admin write-operation confirmation guard and documentation
- Add invite code contract/runtime tests

apps/admin-web/src/pages/AdminDebugHttpPage.tsx

@@ -7,6 +7,7 @@ import type {
   AdminDebugHttpMethod,
   AdminDebugHttpResponse,
 } from '../api/adminApiTypes';
+import {useAdminWriteConfirm} from '../components/useAdminWriteConfirm';
 import {formatUnknownJson, handlePageError} from './pageUtils';
 
 interface AdminDebugHttpPageProps {
@@ -33,6 +34,7 @@ export function AdminDebugHttpPage({
   const [result, setResult] = useState<AdminDebugHttpResponse | null>(null);
   const [errorMessage, setErrorMessage] = useState('');
   const [isSubmitting, setIsSubmitting] = useState(false);
+  const {confirmWrite, confirmDialog} = useAdminWriteConfirm();
 
   const jsonPreview = useMemo(
     () => formatUnknownJson(result?.bodyJson),
@@ -46,6 +48,16 @@ export function AdminDebugHttpPage({
     }
 
     setErrorMessage('');
+    if (method !== 'GET') {
+      const confirmed = await confirmWrite({
+        action: `${method} 调试请求`,
+        target: path.trim(),
+      });
+      if (!confirmed) {
+        return;
+      }
+    }
+
     setIsSubmitting(true);
     try {
       const response = await debugAdminHttp(token, {
@@ -209,6 +221,7 @@ export function AdminDebugHttpPage({
           )}
         </section>
       </div>
+      {confirmDialog}
     </section>
   );
 }