feat(ECR-013B): AccountLifecycle Closed；启用 Loop 连续执行

UserStatus 迁移、DeviceAuth 拒绝非 active、admin-h5 CTA；
Reviewer Closed。Human 授权 LOOP_AUTHORIZATION（免逐闸确认）。

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/admin-h5/src/api/client.ts

@@ -117,6 +117,19 @@ export const adminApi = {
   users: (q = '') =>
     request<{ items: UserListItem[] }>('GET', `/users?q=${encodeURIComponent(q)}`),
   user: (id: string) => request<UserDetail>('GET', `/users/${id}`),
+  setUserStatus: (id: string, status: string, reason: string) =>
+    request<UserDetail>('POST', `/users/${id}/status`, { status, reason }),
+  statusTransitions: (id: string) =>
+    request<{
+      items: Array<{
+        id: string
+        from_status: string
+        to_status: string
+        admin_id: string
+        reason: string
+        created_at: string
+      }>
+    }>('GET', `/users/${id}/status-transitions`),
   grant: (id: string, plan: string) =>
     request<{ ok: boolean }>('POST', `/users/${id}/membership/grant`, { plan }),
   grantAskQuota: (id: string, delta: number) =>

apps/admin-h5/src/pages/UserDetailPage.vue

@@ -1,9 +1,11 @@
 <script setup lang="ts">
-import { onMounted, ref } from 'vue'
+import { computed, onMounted, ref } from 'vue'
 import { RouterLink, useRoute } from 'vue-router'
 import { adminApi, type UserDetail } from '@/api/client'
+import { useAuthStore } from '@/stores/auth'
 
 const route = useRoute()
+const auth = useAuthStore()
 const loading = ref(false)
 const error = ref('')
 const detail = ref<UserDetail | null>(null)
@@ -11,12 +13,28 @@ const plan = ref('month')
 const askDelta = ref(10)
 const grantMsg = ref('')
 const askMsg = ref('')
+const nextStatus = ref('banned')
+const statusReason = ref('')
+const statusMsg = ref('')
+const transitions = ref<
+  Array<{
+    from_status: string
+    to_status: string
+    reason: string
+    created_at: string
+  }>
+>([])
+
+const canWriteStatus = computed(() => auth.can('admin.users.status.write'))
 
 async function load() {
   loading.value = true
   error.value = ''
   try {
-    detail.value = await adminApi.user(String(route.params.id))
+    const id = String(route.params.id)
+    detail.value = await adminApi.user(id)
+    const tr = await adminApi.statusTransitions(id)
+    transitions.value = tr.items || []
   } catch (e) {
     error.value = e instanceof Error ? e.message : '加载失败'
   } finally {
@@ -46,6 +64,18 @@ async function grantAsk() {
   }
 }
 
+async function changeStatus() {
+  statusMsg.value = ''
+  try {
+    await adminApi.setUserStatus(String(route.params.id), nextStatus.value, statusReason.value)
+    statusMsg.value = '状态已更新'
+    statusReason.value = ''
+    await load()
+  } catch (e) {
+    statusMsg.value = e instanceof Error ? e.message : '状态更新失败'
+  }
+}
+
 function fmtTime(iso?: string | null) {
   if (!iso) return '—'
   try {
@@ -83,6 +113,25 @@ onMounted(load)
           <div><span>创建</span><strong>{{ fmtTime(detail.created_at) }}</strong></div>
           <div class="wide"><span>ID</span><code>{{ detail.id }}</code></div>
         </div>
+        <div v-if="canWriteStatus" class="grant">
+          <select v-model="nextStatus">
+            <option value="active">active</option>
+            <option value="disabled">disabled</option>
+            <option value="banned">banned</option>
+            <option value="suspended">suspended</option>
+          </select>
+          <input v-model="statusReason" class="reason" type="text" placeholder="原因（必填）" />
+          <button class="btn" type="button" @click="changeStatus">变更状态</button>
+          <span v-if="statusMsg" class="muted">{{ statusMsg }}</span>
+        </div>
+        <div v-if="transitions.length" class="trans">
+          <h3>状态迁移</h3>
+          <ul>
+            <li v-for="(t, i) in transitions" :key="i">
+              {{ t.from_status }} → {{ t.to_status }} · {{ t.reason || '—' }} · {{ fmtTime(t.created_at) }}
+            </li>
+          </ul>
+        </div>
       </div>
 
       <div class="card block">
@@ -177,6 +226,7 @@ onMounted(load)
 .crumb a { color: var(--accent); }
 h1 { margin: 0 0 1rem; font-size: 1.35rem; }
 h2 { margin: 0 0 0.6rem; font-size: 1.05rem; }
+h3 { margin: 0.75rem 0 0.35rem; font-size: 0.95rem; }
 .block { margin-bottom: 1rem; }
 .kv {
   display: grid;
@@ -187,5 +237,11 @@ h2 { margin: 0 0 0.6rem; font-size: 1.05rem; }
 .kv .wide { grid-column: 1 / -1; }
 .kv code { font-size: 0.82rem; word-break: break-all; }
 .grant { display: flex; flex-wrap: wrap; gap: 0.5rem; align-items: center; margin-top: 0.75rem; }
-.grant select { border: 1px solid var(--line); border-radius: 8px; padding: 0.45rem 0.6rem; }
+.grant select, .grant .reason {
+  border: 1px solid var(--line);
+  border-radius: 8px;
+  padding: 0.45rem 0.6rem;
+}
+.grant .reason { min-width: 12rem; }
+.trans ul { margin: 0; padding-left: 1.1rem; color: var(--muted); font-size: 0.85rem; }
 </style>