Add invite-only group classes

Group classes can now be marked invite-only (us_offerings.access_mode).
Invite-only classes are hidden from the public catalog and reachable only
when the instructor lets someone in via one of three paths, managed from
My Lessons -> My Group Classes:

- Add students directly: enrols them now with a pending payment.
- Make available: grants registered students access to self-enrol through
  the normal paid flow (multi-select, emailed a notice).
- Invite by email: tokenised registration invite tied to the class for a
  non-account address; after they register the class becomes enrollable.
  Reuses an existing pending invite instead of sending a second link.

New us_group_access table records grants; GET /offerings merges granted
invite-only classes for the caller; enrolment requires a grant
(403 invite_required) and flips it to enrolled on success.

composer test (487), composer lint, composer cs all pass.

Co-Authored-By: Claude Opus 4.8 <[email protected]>

tests/Unit/Auth/InviteRepositoryTest.php

@@ -35,11 +35,12 @@ class InviteRepositoryTest extends TestCase
                     return $d['email'] === '[email protected]'
                         && $d['token'] === 'tok123'
                         && $d['kind'] === Invite::KIND_PERSONAL
+                        && $d['offering_id'] === null
                         && $d['status'] === Invite::STATUS_PENDING
                         && $d['invited_by'] === 2
                         && $d['expires_at'] === null;
                 }),
-                ['%s', '%s', '%s', '%s', '%s', '%d', '%d', '%s', '%s', '%s']
+                ['%s', '%s', '%s', '%s', '%d', '%s', '%d', '%d', '%s', '%s', '%s']
             );
         $this->db->insert_id = 5;
 

tests/Unit/Auth/InviteTest.php

@@ -155,8 +155,42 @@ class InviteTest extends TestCase
     {
         $arr = (new Invite('[email protected]', 'tok', id: 1))->toArray();
 
-        foreach (['id', 'email', 'token', 'role', 'kind', 'status', 'invited_by', 'accepted_user_id', 'accepted_at', 'expires_at'] as $key) {
+        foreach (['id', 'email', 'token', 'role', 'kind', 'status', 'invited_by', 'accepted_user_id', 'accepted_at', 'expires_at', 'offering_id'] as $key) {
             self::assertArrayHasKey($key, $arr);
         }
     }
+
+    public function testOfferingIdRoundTrips(): void
+    {
+        $invite = Invite::fromRow((object) [
+            'id'               => '5',
+            'email'            => '[email protected]',
+            'token'            => 'tok123',
+            'role'             => RoleManager::STUDENT,
+            'status'           => Invite::STATUS_PENDING,
+            'invited_by'       => '2',
+            'accepted_user_id' => null,
+            'accepted_at'      => null,
+            'offering_id'      => '8',
+        ]);
+
+        self::assertSame(8, $invite->offeringId);
+        self::assertSame(8, $invite->toArray()['offering_id']);
+    }
+
+    public function testOfferingIdDefaultsToNullWhenColumnMissing(): void
+    {
+        $invite = Invite::fromRow((object) [
+            'id'               => '5',
+            'email'            => '[email protected]',
+            'token'            => 'tok123',
+            'role'             => RoleManager::STUDENT,
+            'status'           => Invite::STATUS_PENDING,
+            'invited_by'       => null,
+            'accepted_user_id' => null,
+            'accepted_at'      => null,
+        ]);
+
+        self::assertNull($invite->offeringId);
+    }
 }

tests/Unit/Auth/RegistrationMailerTest.php

@@ -81,4 +81,42 @@ class RegistrationMailerTest extends TestCase
     {
         self::assertFalse((new RegistrationMailer())->sendRejected(''));
     }
+
+    public function testSendClassAccessGrantedEmailsTheStudent(): void
+    {
+        Functions\expect('wp_mail')
+            ->once()
+            ->with(
+                '[email protected]',
+                Mockery::on(static fn (string $subject): bool => str_contains($subject, 'Choir')),
+                Mockery::on(static fn (string $body): bool => str_contains($body, 'Choir'))
+            )
+            ->andReturn(true);
+
+        self::assertTrue((new RegistrationMailer())->sendClassAccessGranted($this->user('[email protected]'), 'Choir'));
+    }
+
+    public function testSendClassAccessGrantedReturnsFalseWithoutRecipient(): void
+    {
+        self::assertFalse((new RegistrationMailer())->sendClassAccessGranted($this->user(''), 'Choir'));
+    }
+
+    public function testSendClassInviteIncludesTheLink(): void
+    {
+        Functions\expect('wp_mail')
+            ->once()
+            ->with(
+                '[email protected]',
+                Mockery::type('string'),
+                Mockery::on(static fn (string $body): bool => str_contains($body, 'http://join.test'))
+            )
+            ->andReturn(true);
+
+        self::assertTrue((new RegistrationMailer())->sendClassInvite('[email protected]', 'http://join.test', 'Choir'));
+    }
+
+    public function testSendClassInviteReturnsFalseWithoutRecipient(): void
+    {
+        self::assertFalse((new RegistrationMailer())->sendClassInvite('', 'http://join.test', 'Choir'));
+    }
 }

tests/Unit/Auth/RegistrationPageTest.php

@@ -9,6 +9,7 @@ use Unsupervised\Schedular\Auth\Invite;
 use Unsupervised\Schedular\Auth\InviteRepository;
 use Unsupervised\Schedular\Auth\RegistrationMailer;
 use Unsupervised\Schedular\Auth\RegistrationPage;
+use Unsupervised\Schedular\GroupClass\GroupAccessRepository;
 use Unsupervised\Schedular\Payment\StudioSettings;
 use Unsupervised\Schedular\Policy\AcceptanceRepository;
 use Unsupervised\Schedular\Policy\Policy;
@@ -45,11 +46,15 @@ class RegistrationPageTest extends TestCase
         $questions->shouldReceive('findByScope')->andReturn([])->byDefault();
         $answers->shouldReceive('insert')->andReturn(1)->byDefault();
 
+        $access = Mockery::mock(GroupAccessRepository::class);
+        $access->shouldReceive('linkStudentByEmail')->andReturn(true)->byDefault();
+
         $this->ctx = [
             'invites'   => $invites,
             'policies'  => $policies,
             'questions' => $questions,
             'answers'   => $answers,
+            'access'    => $access,
             'mailer'    => Mockery::mock(RegistrationMailer::class),
             'settings'  => Mockery::mock(StudioSettings::class),
         ];
@@ -63,6 +68,7 @@ class RegistrationPageTest extends TestCase
             $this->ctx['mailer'],
             $questions,
             $answers,
+            $access,
         );
 
         $_POST = [];
@@ -110,6 +116,26 @@ class RegistrationPageTest extends TestCase
         self::assertSame('invite', $this->submit($invite, false));
     }
 
+    public function testInviteAcceptanceLinksClassGrantForTheEmail(): void
+    {
+        $_POST = [ 'password' => 'password123', 'display_name' => 'Ada' ];
+
+        Functions\when('email_exists')->justReturn(false);
+        Functions\when('wp_insert_user')->justReturn(42);
+        Functions\when('is_wp_error')->justReturn(false);
+
+        $this->ctx['invites']->shouldReceive('markAccepted')->once();
+        Functions\when('wp_set_current_user')->justReturn(null);
+        Functions\when('wp_set_auth_cookie')->justReturn(null);
+
+        // A personal invite tied to a class grant links the new account to it.
+        $this->ctx['access']->shouldReceive('linkStudentByEmail')->once()->with('[email protected]', 42)->andReturn(true);
+
+        $invite = new Invite(email: '[email protected]', token: 'hash', offeringId: 8);
+
+        self::assertSame('invite', $this->submit($invite, false));
+    }
+
     public function testOpenBranchCreatesPendingWithoutLoginAndEmails(): void
     {
         $_POST = [ 'password' => 'password123', 'display_name' => 'Ada', 'email' => '[email protected]' ];

tests/Unit/GroupClass/EnrollmentEndpointTest.php

@@ -7,6 +7,7 @@ use Brain\Monkey\Functions;
 use Mockery;
 use Unsupervised\Schedular\GroupClass\EnrollmentEndpoint;
 use Unsupervised\Schedular\GroupClass\EnrollmentRepository;
+use Unsupervised\Schedular\GroupClass\GroupAccessRepository;
 use Unsupervised\Schedular\Offering\Offering;
 use Unsupervised\Schedular\Offering\OfferingRepository;
 use Unsupervised\Schedular\Payment\Payment;
@@ -20,6 +21,7 @@ class EnrollmentEndpointTest extends TestCase
     private OfferingRepository $offerings;
     private RegistrationGate $gate;
     private PaymentService $payments;
+    private GroupAccessRepository $access;
     private EnrollmentEndpoint $endpoint;
 
     protected function setUp(): void
@@ -35,12 +37,14 @@ class EnrollmentEndpointTest extends TestCase
         $this->offerings   = Mockery::mock(OfferingRepository::class);
         $this->gate        = Mockery::mock(RegistrationGate::class);
         $this->payments    = Mockery::mock(PaymentService::class);
+        $this->access      = Mockery::mock(GroupAccessRepository::class);
 
         $this->endpoint = new EnrollmentEndpoint(
             $this->enrollments,
             $this->offerings,
             $this->gate,
             $this->payments,
+            $this->access,
         );
     }
 
@@ -49,6 +53,11 @@ class EnrollmentEndpointTest extends TestCase
         return new Offering(instructorId: 3, kind: Offering::KIND_GROUP_CLASS, title: 'Choir', price: $price, id: 8);
     }
 
+    private function inviteOnlyOffering(): Offering
+    {
+        return new Offering(instructorId: 3, kind: Offering::KIND_GROUP_CLASS, title: 'Private Choir', accessMode: Offering::ACCESS_INVITE_ONLY, id: 8);
+    }
+
     private function expectSuccessfulEnrollment(): void
     {
         $this->enrollments->shouldReceive('hasActiveEnrollment')->with(8, 5)->andReturn(false);
@@ -98,4 +107,31 @@ class EnrollmentEndpointTest extends TestCase
             $result->get_data()['payment']
         );
     }
+
+    public function testInviteOnlyClassRejectsStudentWithoutGrant(): void
+    {
+        $this->offerings->shouldReceive('findById')->with(8)->andReturn($this->inviteOnlyOffering());
+        $this->enrollments->shouldReceive('hasActiveEnrollment')->with(8, 5)->andReturn(false);
+        $this->access->shouldReceive('hasGrant')->with(8, 5)->andReturn(false);
+        $this->enrollments->shouldReceive('insert')->never();
+
+        $result = $this->endpoint->enroll(new \WP_REST_Request(['offering_id' => 8]));
+
+        self::assertInstanceOf(\WP_Error::class, $result);
+        self::assertSame('invite_required', $result->get_error_code());
+        self::assertSame(403, $result->error_data['invite_required']['status']);
+    }
+
+    public function testInviteOnlyClassAllowsGrantedStudentAndMarksEnrolled(): void
+    {
+        $this->offerings->shouldReceive('findById')->with(8)->andReturn($this->inviteOnlyOffering());
+        $this->access->shouldReceive('hasGrant')->with(8, 5)->andReturn(true);
+        $this->expectSuccessfulEnrollment();
+        $this->access->shouldReceive('markEnrolled')->once()->with(8, 5);
+
+        $result = $this->endpoint->enroll(new \WP_REST_Request(['offering_id' => 8]));
+
+        self::assertInstanceOf(\WP_REST_Response::class, $result);
+        self::assertSame(201, $result->get_status());
+    }
 }

tests/Unit/GroupClass/GroupAccessRepositoryTest.php

@@ -0,0 +1,158 @@
+<?php
+declare(strict_types=1);
+
+namespace Unsupervised\Schedular\Tests\Unit\GroupClass;
+
+use Brain\Monkey\Functions;
+use Mockery;
+use Unsupervised\Schedular\GroupClass\GroupAccess;
+use Unsupervised\Schedular\GroupClass\GroupAccessRepository;
+use Unsupervised\Schedular\Tests\Unit\TestCase;
+
+class GroupAccessRepositoryTest extends TestCase
+{
+    private \wpdb $db;
+    private GroupAccessRepository $repo;
+
+    protected function setUp(): void
+    {
+        parent::setUp();
+
+        $this->db         = Mockery::mock(\wpdb::class);
+        $this->db->prefix = 'wp_';
+        $this->repo       = new GroupAccessRepository($this->db);
+    }
+
+    public function testInsertReturnsId(): void
+    {
+        Functions\expect('current_time')->with('mysql')->andReturn('2026-06-02 09:00:00');
+
+        $this->db->shouldReceive('insert')
+            ->once()
+            ->with(
+                'wp_us_group_access',
+                Mockery::on(static function (array $d): bool {
+                    return $d['offering_id'] === 8
+                        && $d['student_id'] === 5
+                        && $d['status'] === GroupAccess::STATUS_INVITED;
+                }),
+                ['%d', '%d', '%s', '%d', '%s', '%d', '%s']
+            );
+        $this->db->insert_id = 3;
+
+        self::assertSame(3, $this->repo->insert(new GroupAccess(offeringId: 8, studentId: 5, invitedBy: 2)));
+    }
+
+    public function testHasGrantTrueWhenCountPositive(): void
+    {
+        $this->db->shouldReceive('prepare')
+            ->once()
+            ->with(
+                Mockery::pattern('/offering_id = %d AND student_id = %d AND status IN/'),
+                'wp_us_group_access',
+                8,
+                5,
+                GroupAccess::STATUS_INVITED,
+                GroupAccess::STATUS_ENROLLED
+            )
+            ->andReturn('SELECT ...');
+        $this->db->shouldReceive('get_var')->andReturn('1');
+
+        self::assertTrue($this->repo->hasGrant(8, 5));
+    }
+
+    public function testHasGrantFalseWhenZero(): void
+    {
+        $this->db->shouldReceive('prepare')->andReturn('SELECT ...');
+        $this->db->shouldReceive('get_var')->andReturn('0');
+
+        self::assertFalse($this->repo->hasGrant(8, 5));
+    }
+
+    public function testFindGrantedOfferingIdsReturnsInts(): void
+    {
+        $this->db->shouldReceive('prepare')
+            ->once()
+            ->with(
+                Mockery::pattern('/DISTINCT offering_id.*student_id = %d/s'),
+                'wp_us_group_access',
+                5,
+                GroupAccess::STATUS_INVITED,
+                GroupAccess::STATUS_ENROLLED
+            )
+            ->andReturn('SELECT ...');
+        $this->db->shouldReceive('get_col')->andReturn(['8', '9']);
+
+        self::assertSame([8, 9], $this->repo->findGrantedOfferingIds(5));
+    }
+
+    public function testFindByOfferingMapsRows(): void
+    {
+        $this->db->shouldReceive('prepare')->andReturn('SELECT ...');
+        $this->db->shouldReceive('get_results')->andReturn([
+            (object) [
+                'id'          => '1',
+                'offering_id' => '8',
+                'student_id'  => '5',
+                'email'       => '',
+                'invite_id'   => null,
+                'status'      => GroupAccess::STATUS_INVITED,
+                'invited_by'  => '2',
+            ],
+        ]);
+
+        $grants = $this->repo->findByOffering(8);
+
+        self::assertCount(1, $grants);
+        self::assertSame(5, $grants[0]->studentId);
+    }
+
+    public function testLinkStudentByEmailUpdatesNullStudentRows(): void
+    {
+        $this->db->shouldReceive('prepare')
+            ->once()
+            ->with(
+                Mockery::pattern('/UPDATE %i SET student_id = %d WHERE email = %s AND student_id IS NULL/'),
+                'wp_us_group_access',
+                5,
+                '[email protected]'
+            )
+            ->andReturn('UPDATE ...');
+        $this->db->shouldReceive('query')->once()->with('UPDATE ...')->andReturn(1);
+
+        self::assertTrue($this->repo->linkStudentByEmail('[email protected]', 5));
+    }
+
+    public function testLinkStudentByEmailIgnoresEmptyEmail(): void
+    {
+        $this->db->shouldReceive('prepare')->never();
+
+        self::assertFalse($this->repo->linkStudentByEmail('', 5));
+    }
+
+    public function testMarkEnrolledUpdatesStatus(): void
+    {
+        $this->db->shouldReceive('update')
+            ->once()
+            ->with(
+                'wp_us_group_access',
+                ['status' => GroupAccess::STATUS_ENROLLED],
+                ['offering_id' => 8, 'student_id' => 5],
+                ['%s'],
+                ['%d', '%d']
+            )
+            ->andReturn(1);
+
+        self::assertTrue($this->repo->markEnrolled(8, 5));
+    }
+
+    public function testRevokeUpdatesStatus(): void
+    {
+        $this->db->shouldReceive('update')
+            ->once()
+            ->with('wp_us_group_access', ['status' => GroupAccess::STATUS_REVOKED], ['id' => 3], ['%s'], ['%d'])
+            ->andReturn(1);
+
+        self::assertTrue($this->repo->revoke(3));
+    }
+}

tests/Unit/GroupClass/GroupAccessTest.php

@@ -0,0 +1,70 @@
+<?php
+declare(strict_types=1);
+
+namespace Unsupervised\Schedular\Tests\Unit\GroupClass;
+
+use Unsupervised\Schedular\GroupClass\GroupAccess;
+use Unsupervised\Schedular\Tests\Unit\TestCase;
+
+class GroupAccessTest extends TestCase
+{
+    public function testDefaultsToInvitedStatusAndNullStudent(): void
+    {
+        $access = new GroupAccess(offeringId: 8);
+
+        self::assertSame(GroupAccess::STATUS_INVITED, $access->status);
+        self::assertNull($access->studentId);
+        self::assertSame('', $access->email);
+    }
+
+    public function testFromRowMapsColumns(): void
+    {
+        $row = (object) [
+            'id'          => '3',
+            'offering_id' => '8',
+            'student_id'  => '5',
+            'email'       => '[email protected]',
+            'invite_id'   => '9',
+            'status'      => GroupAccess::STATUS_ENROLLED,
+            'invited_by'  => '2',
+        ];
+
+        $access = GroupAccess::fromRow($row);
+
+        self::assertSame(3, $access->id);
+        self::assertSame(8, $access->offeringId);
+        self::assertSame(5, $access->studentId);
+        self::assertSame('[email protected]', $access->email);
+        self::assertSame(9, $access->inviteId);
+        self::assertSame(GroupAccess::STATUS_ENROLLED, $access->status);
+        self::assertSame(2, $access->invitedBy);
+    }
+
+    public function testFromRowCastsNullStudentAndInvite(): void
+    {
+        $row = (object) [
+            'id'          => '3',
+            'offering_id' => '8',
+            'student_id'  => null,
+            'email'       => '[email protected]',
+            'invite_id'   => null,
+            'status'      => GroupAccess::STATUS_INVITED,
+            'invited_by'  => null,
+        ];
+
+        $access = GroupAccess::fromRow($row);
+
+        self::assertNull($access->studentId);
+        self::assertNull($access->inviteId);
+        self::assertNull($access->invitedBy);
+    }
+
+    public function testToArrayContainsExpectedKeys(): void
+    {
+        $arr = (new GroupAccess(offeringId: 8, studentId: 5, id: 3))->toArray();
+
+        foreach (['id', 'offering_id', 'student_id', 'email', 'invite_id', 'status', 'invited_by'] as $key) {
+            self::assertArrayHasKey($key, $arr);
+        }
+    }
+}

tests/Unit/GroupClass/GroupClassControllerTest.php

@@ -5,13 +5,17 @@ namespace Unsupervised\Schedular\Tests\Unit\GroupClass;
 
 use Brain\Monkey\Functions;
 use Mockery;
+use Unsupervised\Schedular\Auth\InviteRepository;
+use Unsupervised\Schedular\Auth\RegistrationMailer;
 use Unsupervised\Schedular\GroupClass\Enrollment;
 use Unsupervised\Schedular\GroupClass\EnrollmentRepository;
+use Unsupervised\Schedular\GroupClass\GroupAccessRepository;
 use Unsupervised\Schedular\GroupClass\GroupClassController;
 use Unsupervised\Schedular\Offering\Offering;
 use Unsupervised\Schedular\Offering\OfferingRepository;
 use Unsupervised\Schedular\Payment\Payment;
 use Unsupervised\Schedular\Payment\PaymentRepository;
+use Unsupervised\Schedular\Payment\PaymentService;
 use Unsupervised\Schedular\Tests\Unit\TestCase;
 
 class GroupClassControllerTest extends TestCase
@@ -19,19 +23,38 @@ class GroupClassControllerTest extends TestCase
     private EnrollmentRepository&Mockery\MockInterface $enrollments;
     private OfferingRepository&Mockery\MockInterface $offerings;
     private PaymentRepository&Mockery\MockInterface $payments;
+    private GroupAccessRepository&Mockery\MockInterface $access;
+    private PaymentService&Mockery\MockInterface $paymentService;
+    private InviteRepository&Mockery\MockInterface $invites;
+    private RegistrationMailer&Mockery\MockInterface $mailer;
     private GroupClassController $controller;
 
     protected function setUp(): void
     {
         parent::setUp();
 
-        $this->enrollments = Mockery::mock(EnrollmentRepository::class);
-        $this->offerings   = Mockery::mock(OfferingRepository::class);
-        $this->payments    = Mockery::mock(PaymentRepository::class);
-        $this->controller  = new GroupClassController($this->enrollments, $this->offerings, $this->payments);
+        $this->enrollments    = Mockery::mock(EnrollmentRepository::class);
+        $this->offerings      = Mockery::mock(OfferingRepository::class);
+        $this->payments       = Mockery::mock(PaymentRepository::class);
+        $this->access         = Mockery::mock(GroupAccessRepository::class);
+        $this->paymentService = Mockery::mock(PaymentService::class);
+        $this->invites        = Mockery::mock(InviteRepository::class);
+        $this->mailer         = Mockery::mock(RegistrationMailer::class);
+        $this->controller     = new GroupClassController(
+            $this->enrollments,
+            $this->offerings,
+            $this->payments,
+            $this->access,
+            $this->paymentService,
+            $this->invites,
+            $this->mailer,
+        );
 
         Functions\when('current_user_can')->justReturn(true);
         Functions\when('get_current_user_id')->justReturn(3);
+        Functions\when('get_users')->justReturn([]);
+        Functions\when('esc_attr')->returnArg();
+        Functions\when('esc_attr_e')->returnArg();
     }
 
     private function offering(int $id, string $title, ?int $capacity): Offering
@@ -157,4 +180,170 @@ class GroupClassControllerTest extends TestCase
 
         $this->controller->renderInstructorPage();
     }
+
+    protected function tearDown(): void
+    {
+        $_POST = [];
+        parent::tearDown();
+    }
+
+    private function inviteOnlyOffering(float $price = 0.0): Offering
+    {
+        return new Offering(
+            instructorId: 3,
+            kind:         Offering::KIND_GROUP_CLASS,
+            title:        'Private Choir',
+            price:        $price,
+            accessMode:   Offering::ACCESS_INVITE_ONLY,
+            id:           8,
+        );
+    }
+
+    /** Stub the form-processing helpers and the render tail shared by all action tests. */
+    private function stubActionContext(): void
+    {
+        Functions\when('check_admin_referer')->justReturn(true);
+        Functions\when('sanitize_key')->alias(static fn ($v) => strtolower((string) $v));
+        Functions\when('wp_unslash')->returnArg();
+        Functions\when('sanitize_email')->returnArg();
+        Functions\when('absint')->alias(static fn ($v) => abs((int) $v));
+
+        // Render tail: no classes/enrolments to draw so the assertion targets the notice.
+        $this->offerings->shouldReceive('findAll')->with(3, Offering::KIND_GROUP_CLASS)->andReturn([]);
+        $this->enrollments->shouldReceive('findByInstructor')->with(3)->andReturn([]);
+    }
+
+    public function testAddDirectEnrolsStudentWithPendingPayment(): void
+    {
+        $_POST = ['usc_action' => 'add_direct', 'offering_id' => 8, 'student_ids' => [5]];
+        $this->stubActionContext();
+
+        $this->offerings->shouldReceive('findById')->with(8)->andReturn($this->inviteOnlyOffering(100.0));
+        $this->enrollments->shouldReceive('hasActiveEnrollment')->with(8, 5)->andReturn(false);
+        $this->enrollments->shouldReceive('insert')->once()->andReturn(44);
+
+        $payment = new Payment(
+            studentId:        5,
+            instructorId:     3,
+            registrationType: Payment::REG_ENROLLMENT,
+            registrationId:   44,
+            amount:           100.0,
+            method:           Payment::METHOD_ETRANSFER,
+            status:           Payment::STATUS_PENDING,
+            id:               12,
+        );
+        $this->paymentService->shouldReceive('createForRegistration')
+            ->once()
+            ->with(Payment::REG_ENROLLMENT, 44, 5, 3, 100.0, 'CAD', null)
+            ->andReturn($payment);
+        $this->enrollments->shouldReceive('setPaymentId')->once()->with(44, 12)->andReturn(true);
+        $this->access->shouldReceive('markEnrolled')->once()->with(8, 5);
+
+        $html = $this->renderInstructor();
+
+        self::assertStringContainsString('1 student(s) added to the class.', $html);
+    }
+
+    public function testGrantAccessCreatesGrantAndEmailsStudent(): void
+    {
+        $_POST = ['usc_action' => 'grant_access', 'offering_id' => 8, 'student_ids' => [5]];
+        $this->stubActionContext();
+
+        $this->offerings->shouldReceive('findById')->with(8)->andReturn($this->inviteOnlyOffering());
+        $this->enrollments->shouldReceive('hasActiveEnrollment')->with(8, 5)->andReturn(false);
+        $this->access->shouldReceive('hasGrant')->with(8, 5)->andReturn(false);
+        $this->access->shouldReceive('insert')->once()->andReturn(1);
+
+        $user = Mockery::mock(\WP_User::class);
+        $user->user_email = '[email protected]';
+        Functions\when('get_userdata')->justReturn($user);
+        $this->mailer->shouldReceive('sendClassAccessGranted')->once()->with($user, 'Private Choir')->andReturn(true);
+
+        $html = $this->renderInstructor();
+
+        self::assertStringContainsString('1 student(s) granted access.', $html);
+    }
+
+    public function testInviteEmailForNewAddressCreatesInviteAndSendsLink(): void
+    {
+        $_POST = ['usc_action' => 'invite_email', 'offering_id' => 8, 'email' => '[email protected]'];
+        $this->stubActionContext();
+
+        $this->offerings->shouldReceive('findById')->with(8)->andReturn($this->inviteOnlyOffering());
+        Functions\when('is_email')->justReturn(true);
+        Functions\when('email_exists')->justReturn(false);
+        $this->invites->shouldReceive('findPendingByEmail')->with('[email protected]')->andReturn(null);
+        Functions\when('wp_generate_password')->justReturn('rawtoken');
+        Functions\when('get_option')->justReturn(0);
+        Functions\when('home_url')->justReturn('http://home.test/');
+        Functions\when('add_query_arg')->justReturn('http://home.test/?us_invite=rawtoken');
+
+        $this->invites->shouldReceive('insert')->once()->andReturn(7);
+        $this->access->shouldReceive('insert')->once()->andReturn(2);
+        $this->mailer->shouldReceive('sendClassInvite')->once()->with('[email protected]', 'http://home.test/?us_invite=rawtoken', 'Private Choir')->andReturn(true);
+
+        $html = $this->renderInstructor();
+
+        self::assertStringContainsString('Invitation sent.', $html);
+    }
+
+    public function testInviteEmailReusesPendingInviteWithoutSendingLink(): void
+    {
+        $_POST = ['usc_action' => 'invite_email', 'offering_id' => 8, 'email' => '[email protected]'];
+        $this->stubActionContext();
+
+        $this->offerings->shouldReceive('findById')->with(8)->andReturn($this->inviteOnlyOffering());
+        Functions\when('is_email')->justReturn(true);
+        Functions\when('email_exists')->justReturn(false);
+        $this->invites->shouldReceive('findPendingByEmail')->with('[email protected]')->andReturn(
+            new \Unsupervised\Schedular\Auth\Invite(email: '[email protected]', token: 'hash', id: 9)
+        );
+
+        // No new invite row and no email — just a grant attached to the existing invite.
+        $this->invites->shouldReceive('insert')->never();
+        $this->mailer->shouldReceive('sendClassInvite')->never();
+        $this->access->shouldReceive('insert')->once()->andReturn(2);
+
+        $html = $this->renderInstructor();
+
+        self::assertStringContainsString('No new link was sent.', $html);
+    }
+
+    public function testInviteEmailForExistingAccountGrantsAccess(): void
+    {
+        $_POST = ['usc_action' => 'invite_email', 'offering_id' => 8, 'email' => '[email protected]'];
+        $this->stubActionContext();
+
+        $this->offerings->shouldReceive('findById')->with(8)->andReturn($this->inviteOnlyOffering());
+        Functions\when('is_email')->justReturn(true);
+        Functions\when('email_exists')->justReturn(55);
+
+        $this->enrollments->shouldReceive('hasActiveEnrollment')->with(8, 55)->andReturn(false);
+        $this->access->shouldReceive('hasGrant')->with(8, 55)->andReturn(false);
+        $this->access->shouldReceive('insert')->once()->andReturn(3);
+
+        $user = Mockery::mock(\WP_User::class);
+        $user->user_email = '[email protected]';
+        Functions\when('get_userdata')->justReturn($user);
+        $this->mailer->shouldReceive('sendClassAccessGranted')->once()->andReturn(true);
+
+        $html = $this->renderInstructor();
+
+        self::assertStringContainsString('1 student(s) granted access.', $html);
+    }
+
+    public function testActionRejectedForClassNotOwnedByInstructor(): void
+    {
+        $_POST = ['usc_action' => 'add_direct', 'offering_id' => 8, 'student_ids' => [5]];
+        $this->stubActionContext();
+
+        // Offering owned by a different instructor (7, not the current user 3).
+        $foreign = new Offering(instructorId: 7, kind: Offering::KIND_GROUP_CLASS, title: 'Other', accessMode: Offering::ACCESS_INVITE_ONLY, id: 8);
+        $this->offerings->shouldReceive('findById')->with(8)->andReturn($foreign);
+        $this->enrollments->shouldReceive('insert')->never();
+
+        $html = $this->renderInstructor();
+
+        self::assertStringContainsString('That group class was not found.', $html);
+    }
 }

tests/Unit/Offering/OfferingControllerTest.php

@@ -70,6 +70,39 @@ class OfferingControllerTest extends TestCase
         $this->render();
     }
 
+    public function testAddInviteOnlyGroupClassStoresInviteOnlyAccess(): void
+    {
+        $_POST = [
+            'usc_action'  => 'add',
+            'title'       => 'Private Choir',
+            'kind'        => Offering::KIND_GROUP_CLASS,
+            'invite_only' => '1',
+        ];
+
+        $this->repository->shouldReceive('insert')->once()->with(Mockery::on(
+            static fn (Offering $o) => Offering::ACCESS_INVITE_ONLY === $o->accessMode
+        ))->andReturn(1);
+        $this->repository->shouldReceive('findAll')->andReturn([]);
+
+        $this->render();
+    }
+
+    public function testAddWithoutInviteOnlyDefaultsToPublicAccess(): void
+    {
+        $_POST = [
+            'usc_action' => 'add',
+            'title'      => 'Open Choir',
+            'kind'       => Offering::KIND_GROUP_CLASS,
+        ];
+
+        $this->repository->shouldReceive('insert')->once()->with(Mockery::on(
+            static fn (Offering $o) => Offering::ACCESS_PUBLIC === $o->accessMode
+        ))->andReturn(1);
+        $this->repository->shouldReceive('findAll')->andReturn([]);
+
+        $this->render();
+    }
+
     public function testAddOneOffGroupClassEndsOnItsStartDate(): void
     {
         $_POST = [

tests/Unit/Offering/OfferingEndpointTest.php

@@ -0,0 +1,102 @@
+<?php
+declare(strict_types=1);
+
+namespace Unsupervised\Schedular\Tests\Unit\Offering;
+
+use Brain\Monkey\Functions;
+use Mockery;
+use Unsupervised\Schedular\GroupClass\GroupAccessRepository;
+use Unsupervised\Schedular\Offering\Offering;
+use Unsupervised\Schedular\Offering\OfferingEndpoint;
+use Unsupervised\Schedular\Offering\OfferingRepository;
+use Unsupervised\Schedular\Tests\Unit\TestCase;
+
+class OfferingEndpointTest extends TestCase
+{
+    private OfferingRepository&Mockery\MockInterface $repository;
+    private GroupAccessRepository&Mockery\MockInterface $access;
+    private OfferingEndpoint $endpoint;
+
+    protected function setUp(): void
+    {
+        parent::setUp();
+
+        Functions\when('get_current_user_id')->justReturn(5);
+
+        $this->repository = Mockery::mock(OfferingRepository::class);
+        $this->access     = Mockery::mock(GroupAccessRepository::class);
+        $this->endpoint   = new OfferingEndpoint($this->repository, $this->access);
+    }
+
+    private function group(int $id, string $access): Offering
+    {
+        return new Offering(instructorId: 3, kind: Offering::KIND_GROUP_CLASS, title: "Class $id", accessMode: $access, id: $id);
+    }
+
+    public function testIndexReturnsPublicOfferingsOnlyWhenNoGrants(): void
+    {
+        $this->repository->shouldReceive('findAll')
+            ->once()
+            ->with(0, '', Mockery::on(static fn ($v): bool => true === $v), Offering::ACCESS_PUBLIC)
+            ->andReturn([$this->group(1, Offering::ACCESS_PUBLIC)]);
+        $this->access->shouldReceive('findGrantedOfferingIds')->with(5)->andReturn([]);
+
+        $data = $this->endpoint->index(new \WP_REST_Request())->get_data();
+
+        self::assertCount(1, $data);
+        self::assertSame(1, $data[0]['id']);
+    }
+
+    public function testIndexMergesGrantedInviteOnlyOfferings(): void
+    {
+        $this->repository->shouldReceive('findAll')
+            ->once()
+            ->with(0, '', Mockery::any(), Offering::ACCESS_PUBLIC)
+            ->andReturn([$this->group(1, Offering::ACCESS_PUBLIC)]);
+        $this->access->shouldReceive('findGrantedOfferingIds')->with(5)->andReturn([8]);
+        $this->repository->shouldReceive('findById')->with(8)->andReturn($this->group(8, Offering::ACCESS_INVITE_ONLY));
+
+        $data = $this->endpoint->index(new \WP_REST_Request())->get_data();
+
+        self::assertSame([1, 8], array_column($data, 'id'));
+    }
+
+    public function testIndexOmitsGrantedOfferingThatIsNoLongerInviteOnly(): void
+    {
+        $this->repository->shouldReceive('findAll')->andReturn([]);
+        $this->access->shouldReceive('findGrantedOfferingIds')->with(5)->andReturn([8]);
+        // Grant persists but the class was flipped back to public — it is already
+        // in the public list, so it must not be appended a second time.
+        $this->repository->shouldReceive('findById')->with(8)->andReturn($this->group(8, Offering::ACCESS_PUBLIC));
+
+        $data = $this->endpoint->index(new \WP_REST_Request())->get_data();
+
+        self::assertSame([], $data);
+    }
+
+    public function testIndexRespectsKindFilterForGrantedOfferings(): void
+    {
+        $this->repository->shouldReceive('findAll')
+            ->with(0, Offering::KIND_PRIVATE_LESSON, Mockery::any(), Offering::ACCESS_PUBLIC)
+            ->andReturn([]);
+        $this->access->shouldReceive('findGrantedOfferingIds')->with(5)->andReturn([8]);
+        // Granted class is a group class; the request filters to private lessons.
+        $this->repository->shouldReceive('findById')->with(8)->andReturn($this->group(8, Offering::ACCESS_INVITE_ONLY));
+
+        $data = $this->endpoint->index(new \WP_REST_Request(['kind' => Offering::KIND_PRIVATE_LESSON]))->get_data();
+
+        self::assertSame([], $data);
+    }
+
+    public function testIndexOmitsEtransferEmailFromPublicListing(): void
+    {
+        $this->repository->shouldReceive('findAll')->andReturn([
+            new Offering(instructorId: 3, kind: Offering::KIND_GROUP_CLASS, title: 'Choir', etransferEmail: '[email protected]', id: 1),
+        ]);
+        $this->access->shouldReceive('findGrantedOfferingIds')->with(5)->andReturn([]);
+
+        $data = $this->endpoint->index(new \WP_REST_Request())->get_data();
+
+        self::assertArrayNotHasKey('etransfer_email', $data[0]);
+    }
+}

tests/Unit/Offering/OfferingRepositoryTest.php

@@ -154,6 +154,44 @@ class OfferingRepositoryTest extends TestCase
         $this->repo->findAll(3, Offering::KIND_GROUP_CLASS);
     }
 
+    public function testFindAllFiltersByAccessMode(): void
+    {
+        $this->db->shouldReceive('prepare')
+            ->once()
+            ->with(
+                Mockery::pattern('/access_mode = %s/'),
+                Mockery::on(static fn (array $p): bool => $p === ['wp_us_offerings', Offering::ACCESS_PUBLIC])
+            )
+            ->andReturn('SELECT ...');
+
+        $this->db->shouldReceive('get_results')->andReturn([]);
+
+        self::assertSame([], $this->repo->findAll(accessMode: Offering::ACCESS_PUBLIC));
+    }
+
+    public function testInsertPersistsAccessMode(): void
+    {
+        Functions\expect('current_time')->with('mysql')->andReturn('2026-04-01 12:00:00');
+
+        $this->db->shouldReceive('insert')
+            ->once()
+            ->with(
+                'wp_us_offerings',
+                Mockery::on(static fn (array $data): bool => $data['access_mode'] === Offering::ACCESS_INVITE_ONLY),
+                Mockery::type('array')
+            );
+        $this->db->insert_id = 1;
+
+        $offering = new Offering(
+            instructorId: 5,
+            kind:         Offering::KIND_GROUP_CLASS,
+            title:        'Private Choir',
+            accessMode:   Offering::ACCESS_INVITE_ONLY,
+        );
+
+        self::assertSame(1, $this->repo->insert($offering));
+    }
+
     public function testDeleteCallsWpdbDelete(): void
     {
         $this->db->shouldReceive('delete')

tests/Unit/Offering/OfferingTest.php

@@ -132,11 +132,53 @@ class OfferingTest extends TestCase
         $offering = new Offering(1, Offering::KIND_PRIVATE_LESSON, 'Lesson', id: 10);
         $arr      = $offering->toArray();
 
-        foreach (['id', 'instructor_id', 'kind', 'title', 'price', 'billing_mode', 'is_active'] as $key) {
+        foreach (['id', 'instructor_id', 'kind', 'title', 'price', 'billing_mode', 'access_mode', 'is_active'] as $key) {
             self::assertArrayHasKey($key, $arr);
         }
     }
 
+    public function testDefaultsToPublicAccess(): void
+    {
+        $offering = new Offering(1, Offering::KIND_GROUP_CLASS, 'Choir', id: 10);
+
+        self::assertSame(Offering::ACCESS_PUBLIC, $offering->accessMode);
+        self::assertFalse($offering->isInviteOnly());
+    }
+
+    public function testInviteOnlyAccessIsReported(): void
+    {
+        $offering = new Offering(1, Offering::KIND_GROUP_CLASS, 'Choir', accessMode: Offering::ACCESS_INVITE_ONLY, id: 10);
+
+        self::assertTrue($offering->isInviteOnly());
+        self::assertSame(Offering::ACCESS_INVITE_ONLY, $offering->toArray()['access_mode']);
+    }
+
+    public function testFromRowReadsInviteOnlyAccessMode(): void
+    {
+        $row = (object) [
+            'id'               => '7',
+            'instructor_id'    => '3',
+            'kind'             => Offering::KIND_GROUP_CLASS,
+            'title'            => 'Private Choir',
+            'description'      => null,
+            'duration_minutes' => null,
+            'price'            => '0.00',
+            'currency'         => 'CAD',
+            'billing_mode'     => Offering::BILLING_FULL_TERM,
+            'allow_weekly'     => '0',
+            'capacity'         => null,
+            'term_start'       => null,
+            'term_end'         => null,
+            'schedule_note'    => null,
+            'etransfer_email'  => null,
+            'cancellation_cutoff_hours' => null,
+            'access_mode'      => Offering::ACCESS_INVITE_ONLY,
+            'is_active'        => '1',
+        ];
+
+        self::assertTrue(Offering::fromRow($row)->isInviteOnly());
+    }
+
     public function testToArrayIncludesEtransferEmailByDefault(): void
     {
         $offering = new Offering(1, Offering::KIND_PRIVATE_LESSON, 'Lesson', etransferEmail: '[email protected]', id: 10);