feat: add invite code validity controls

- Add invite code starts/expires fields across contracts, API, Spacetime bindings, and admin UI
- Enforce pending/expired invite code redemption behavior and expose admin status
- Add admin write-operation confirmation guard and documentation
- Add invite code contract/runtime tests

apps/admin-web/src/pages/AdminRedeemCodePage.tsx

@@ -10,6 +10,7 @@ import type {
   ProfileRedeemCodeAdminResponse,
   ProfileRedeemCodeMode,
 } from '../api/adminApiTypes';
+import {useAdminWriteConfirm} from '../components/useAdminWriteConfirm';
 import {handlePageError, splitLines} from './pageUtils';
 
 interface AdminRedeemCodePageProps {
@@ -46,6 +47,7 @@ export function AdminRedeemCodePage({
   const [isSaving, setIsSaving] = useState(false);
   const [isDisabling, setIsDisabling] = useState(false);
   const [isLoading, setIsLoading] = useState(false);
+  const {confirmWrite, confirmDialog} = useAdminWriteConfirm();
 
   useEffect(() => {
     void refreshRedeemCodes();
@@ -72,6 +74,14 @@ export function AdminRedeemCodePage({
     }
 
     setErrorMessage('');
+    const confirmed = await confirmWrite({
+      action: '保存兑换码',
+      target: code.trim(),
+    });
+    if (!confirmed) {
+      return;
+    }
+
     setIsSaving(true);
     try {
       const response = await upsertProfileRedeemCode(token, {
@@ -101,6 +111,14 @@ export function AdminRedeemCodePage({
     }
 
     setDisableErrorMessage('');
+    const confirmed = await confirmWrite({
+      action: '停用兑换码',
+      target: disableCode.trim(),
+    });
+    if (!confirmed) {
+      return;
+    }
+
     setIsDisabling(true);
     try {
       const response = await disableProfileRedeemCode(token, {
@@ -376,6 +394,7 @@ export function AdminRedeemCodePage({
           </section>
         </div>
       </div>
+      {confirmDialog}
     </section>
   );
 }