完善角色与消息权限：收紧板管内容处置，彻底删除仅站长，并统一管理删帖/评弹窗。

Co-authored-by: Cursor <cursoragent@cursor.com>

frontend/components/PostActions.tsx

@@ -5,7 +5,7 @@ import { useRouter } from "next/navigation";
 import Link from "next/link";
 import { Pencil, Trash2, Pin, Star, SlidersHorizontal, ChevronDown, Check, BadgeCheck } from "lucide-react";
 import { apiMe, apiDeletePost, apiTogglePin, apiToggleRecommend, apiAdminApprovePost, type User } from "@/lib/api";
-import { canModerateBoard, isAdminOrAbove } from "@/lib/roles";
+import { canStaffSoftDelete, canModerateBoard, isAdminOrAbove } from "@/lib/roles";
 import { toast } from "@/lib/toast";
 import ConfirmDialog from "@/components/ConfirmDialog";
 import StaffDeletePostModal from "@/components/StaffDeletePostModal";
@@ -13,6 +13,7 @@ import StaffDeletePostModal from "@/components/StaffDeletePostModal";
 interface PostActionsProps {
   postId: string;
   authorId: number;
+  authorRole?: string | null;
   boardId: number;
   pinned: number;
   recommended: boolean;
@@ -25,6 +26,7 @@ interface PostActionsProps {
 export default function PostActions({
   postId,
   authorId,
+  authorRole,
   boardId,
   pinned,
   recommended,
@@ -64,12 +66,15 @@ export default function PostActions({
     };
   }, [open]);
 
-  const canManage = !!user && (user.id === authorId || canModerateBoard(user, boardId));
+  const canManage =
+    !!user &&
+    (user.id === authorId || canStaffSoftDelete(user, boardId, authorRole));
   const isAdmin = !!user && isAdminOrAbove(user.role);
-  const canApprove = !!user && status === "pending" && canModerateBoard(user, boardId);
+  const canApprove =
+    !!user && status === "pending" && canModerateBoard(user, boardId);
   // staff 删他人帖：走类型+理由；作者自删：简单确认
   const staffDeletingOther =
-    !!user && user.id !== authorId && canModerateBoard(user, boardId);
+    !!user && user.id !== authorId && canStaffSoftDelete(user, boardId, authorRole);
 
   const runDelete = async (opts?: { delete_type?: string; delete_reason?: string }) => {
     setDeleting(true);