feat(admin): invitations management tab

[PierreBrisorgueil]

Summary

• New "Invitations" tab in the admin space (src/modules/admin).
• A coreDataTableComponent lists signup invitations with a per-row status chip (Pending / Accepted / Expired, derived from usedAt/expiresAt), an Invite button opening an email dialog (createInvitation), and a per-row revoke action (coreConfirmDialog → deleteInvitation).
• Backed by the already-merged /api/auth/invitations admin API (list/create/revoke). Tab gated by the same CASL meta as the Users tab (action: manage, subject: UserAdmin).

Why

Admins need a self-service UI to manage signup invitations without direct API or DB access.

Scope

• Modules impacted: src/modules/admin (new view + route + tab entry)
• Cross-module impact: none
• Risk level: low

Closes #4216

Validation

• npm run lint
• npm run test:unit
• npm run build
• Manual checks done (if applicable)

Guardrails check

• No secrets or credentials introduced (.env*, secrets/**, keys, tokens)
• No risky rename/move of core stack paths
• Changes remain merge-friendly for downstream projects
• Tests added or updated when behavior changed

Notes for reviewers

• Security considerations: Tab gated by { action: manage, subject: UserAdmin } — same guard as the Users tab.
• Mergeability considerations: No conflicts with master; API endpoints were merged separately upstream.
• Follow-up tasks: Downstream propagation via /update-project once merged.

Test plan

Full Vue unit suite green (1934 tests) + lint clean. New tests cover:

• Store actions (list, create, revoke)
• Status derivation (usedAt / expiresAt logic)
• Create/revoke wiring to the store
• Route + tab registration

[doc-sync ack] clean (no deleted files, no stale comments).

Summary by CodeRabbit

Release Notes

• New Features

  • Added an invitations management system to the admin panel
  • New "Invitations" tab displaying all user invitations with their status
  • Ability to create and send invitations via email address
  • Ability to revoke invitations before they are accepted
  • Invitations display status as Pending, Accepted, or Expired

• Tests

  • Added comprehensive test coverage for the new invitations management features

[coderabbitai]

Warning

Review limit reached

@PierreBrisorgueil, we couldn't start this review because you've reached your PR review rate limit.

More reviews will be available in 46 minutes and 12 seconds. Learn how PR review limits work.

Your organization has run out of usage credits. Purchase more in the billing tab.

⌛ How to resolve this issue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans include higher PR review limits than trial, open-source, and free plans. In all cases, reviews become available again over time. During sustained high-volume PR review activity, CodeRabbit may temporarily slow when the next review becomes available.

Please see our Fair Usage Limits Policy for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro

Run ID: f9c2b0fe-f5f3-4d45-9f82-8a0cea2e9748

📥 Commits

Reviewing files that changed from the base of the PR and between ed0c8da and bae9d78.

📒 Files selected for processing (3)

• src/modules/admin/stores/admin.store.js
• src/modules/admin/tests/admin.invitations.view.unit.tests.js
• src/modules/admin/views/admin.invitations.view.vue

Walkthrough

This PR adds a complete invitations management feature to the admin section. It includes store actions to fetch, create, and revoke signup invitations; a new Vue component with a data table, create dialog, and revoke confirmation; router configuration for the /admin/invitations route; layout integration adding an "Invitations" tab; and comprehensive unit tests covering store logic, component behavior, and routing.

Changes

Admin invitations management

Layer / File(s)	Summary
Store API for invitations src/modules/admin/stores/admin.store.js	invitations state array and three actions: getInvitations() loads from /auth/invitations, createInvitation(email) POSTs to create, and deleteInvitation(id) DELETEs to revoke. All follow existing error-handling patterns.
Invitations view component src/modules/admin/views/admin.invitations.view.vue	New Vue component managing the invitations UI: displays a data table with status (Accepted/Expired/Pending), "Invite" button opening a create dialog with email validation, and per-row revoke button opening a confirmation dialog. Both dialogs interact with the store and refresh the list on success.
Router and layout integration src/modules/admin/router/admin.router.js, src/modules/admin/views/admin.layout.vue	Imports adminInvitations component, registers /admin/invitations child route with manage/UserAdmin authorization metadata, and adds a canonical "Invitations" tab to BUILT_IN_TABS for navigation display.
Store action tests src/modules/admin/tests/admin.store.unit.tests.js	Tests for getUser action (success/failure cases) and new invitations actions (getInvitations, createInvitation, deleteInvitation) with API failure and error rethrow scenarios.
View component tests src/modules/admin/tests/admin.invitations.view.unit.tests.js	243-line Vitest suite covering invitations exposure, status derivation, create/revoke success and error flows with dialog/loading state, validation rule helpers, and interaction coverage for dialog/form/input updates.
Router and layout integration tests src/modules/admin/tests/admin.router.unit.tests.js, src/modules/admin/tests/admin.layout.unit.tests.js	Verifies /admin/invitations route exists with correct name, asserts 5 built-in tabs including "Invitations" are passed to CorePageHeaderTabs, and confirms invalid tab config falls back to built-in tabs only.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~25 minutes

Possibly related PRs

• pierreb-devkit/Vue#4190: Refactors admin.layout.vue and its tests to use CorePageHeaderTabs component, establishing the tab configuration contract that the invitations tab integrates into.
• pierreb-devkit/Vue#3975: Flattens the /admin router structure and refactors the tab-bar chrome, providing the foundation for the new /admin/invitations nested route and its corresponding tab entry.
• pierreb-devkit/Vue#3959: Establishes the admin parent-child routing architecture and layout-based tab rendering that this invitations feature builds upon.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly summarizes the main change: adding an invitations management tab to the admin module.
Description check	✅ Passed	The PR description comprehensively covers all required template sections including Summary, Why, Scope, Validation checklist, Guardrails, and Notes for reviewers.
Linked Issues check	✅ Passed	All requirements from issue #4216 are met: Invitations tab with list/status display, send invite dialog, revoke action, and CASL gating by UserAdmin permission.
Out of Scope Changes check	✅ Passed	All changes are scoped to admin invitations management—new view, route, tab, store actions, and comprehensive tests aligned with issue #4216 objectives.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch feat/admin-invitations-tab

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 99.57%. Comparing base (d17a841) to head (bae9d78).
⚠️ Report is 3 commits behind head on master.

Additional details and impacted files

@@           Coverage Diff           @@
##           master    #4217   +/-   ##
=======================================
  Coverage   99.56%   99.57%           
=======================================
  Files          31       31           
  Lines        1159     1182   +23     
  Branches      330      330           
=======================================
+ Hits         1154     1177   +23     
  Misses          5        5           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[Copilot]

Pull request overview

Adds an Invitations management tab to the Admin area, providing UI + store support for listing, creating, and revoking signup invitations via the existing admin API.

Changes:

• Added a new Admin child route (/admin/invitations) and a corresponding built-in Admin tab entry.
• Implemented AdminInvitations view with a datatable, create-invite dialog, and revoke confirmation flow.
• Extended the admin Pinia store with invitations state + actions and added unit tests covering routing, layout tabs, store actions, and view behavior.

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
src/modules/admin/views/admin.layout.vue	Adds the Invitations tab to the built-in Admin tab list.
src/modules/admin/views/admin.invitations.view.vue	New Invitations tab UI: list + status chip + create/revoke dialogs.
src/modules/admin/router/admin.router.js	Registers the /admin/invitations child route with CASL meta.
src/modules/admin/stores/admin.store.js	Adds invitations state plus list/create/revoke actions hitting /auth/invitations.
src/modules/admin/tests/admin.store.unit.tests.js	Adds store tests for invitations CRUD actions.
src/modules/admin/tests/admin.router.unit.tests.js	Adds coverage that the invitations child route is registered.
src/modules/admin/tests/admin.layout.unit.tests.js	Updates expectations for the new built-in tab count and presence.
src/modules/admin/tests/admin.invitations.view.unit.tests.js	Adds view-level tests for status derivation and create/revoke wiring.

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@src/modules/admin/tests/admin.invitations.view.unit.tests.js`:
- Around line 180-192: The test uses a no-op assertion
(expect(wrapper.vm).toBeDefined()) after triggering button clicks; replace that
with assertions that verify the actual observable state changes: after
simulating the Cancel button click in the "cancel button in create-dialog" test
assert that wrapper.vm.createDialog.show === false, and in the related submit
test assert that the v-form submit sets wrapper.vm.createDialog.valid === true
(or whatever concrete flag your component uses). Locate the tests in
admin.invitations.view.unit.tests.js that manipulate createDialog.show and the
form submit handler and update their expect statements to check those specific
properties (createDialog.show and createDialog.valid) instead of merely
asserting wrapper.vm is defined.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro

Run ID: bd139481-a69b-467d-8dab-2f1b2e8d114a

📥 Commits

Reviewing files that changed from the base of the PR and between 37a43e5 and ed0c8da.

📒 Files selected for processing (8)

• src/modules/admin/router/admin.router.js
• src/modules/admin/stores/admin.store.js
• src/modules/admin/tests/admin.invitations.view.unit.tests.js
• src/modules/admin/tests/admin.layout.unit.tests.js
• src/modules/admin/tests/admin.router.unit.tests.js
• src/modules/admin/tests/admin.store.unit.tests.js
• src/modules/admin/views/admin.invitations.view.vue
• src/modules/admin/views/admin.layout.vue