4 commits

Author	SHA1	Message	Date
Alexandre Brandizzi	9084b7f642	fix(team-members): answer invalid_invite when send-code finds the invite closed ... SendCodeAsync validates the invite, then starts the code with a conditional update that also requires the invite to still be open. When an admin revoked the link (or it was used) between those two reads, the refusal was reported as resend_too_soon with a Retry-After, although the link was already dead. On a refused start the invite is now read again: a closed invite gets the same generic invalid_invite response as any other dead link, and a cooldown or send limit refusal is computed from the fresh row.	2026-09-25 16:40:54 -03:00
Alexandre Brandizzi	afc2330184	fix(team-members): report only password-rule failures at finish as a rejected password	2026-09-25 13:05:35 -03:00
Alexandre Brandizzi	385229c64d	fix(team-members): keep omitted phone, report invite email failures, never echo invite errors	2026-09-25 12:11:52 -03:00
Alexandre Brandizzi	c0ae8479ce	feat(team-members): invite registration with emailed code confirmation (SH-385)	2026-09-25 11:49:10 -03:00