完善角色与消息权限：收紧板管内容处置，彻底删除仅站长，并统一管理删帖/评弹窗。

Co-authored-by: Cursor <cursoragent@cursor.com>

frontend/lib/api.ts

@@ -44,6 +44,10 @@ export interface User {
   role: string;
   // 板块管理员被授权的板块（仅 /api/me 返回；前端据此渲染审核入口/按钮）
   board_ids?: number[];
+  // 站点消息管理（站长授予；站长/超管固有监管不必依赖此字段）
+  can_manage_messages?: boolean;
+  // 作为群管理员的群数量（/me；用于后台消息入口）
+  chat_admin_room_count?: number;
   // 仅 /api/me 与 /api/profile 响应中返回（用户自身敏感信息）
   email?: string;
   signature?: string;
@@ -1900,6 +1904,7 @@ export interface AdminUser {
   role: string; // user | board_admin | admin | super_admin | owner
   board_ids: number[]; // 板块管理员的授权板块
   banned: boolean;
+  can_manage_messages?: boolean;
   points?: number;
   post_count: number;
   comment_count: number;
@@ -2026,6 +2031,21 @@ export async function apiAdminSetUserRole(
   return data as { user: AdminUser };
 }
 
+// 站长授予/撤销站点消息管理权限
+export async function apiAdminSetUserMessages(
+  id: number,
+  canManageMessages: boolean
+): Promise<{ user: AdminUser }> {
+  const res = await fetchWithRefresh(`/api/admin/users/${id}/messages`, {
+    method: "PUT",
+    headers: clientHeaders({ "Content-Type": "application/json" }),
+    body: JSON.stringify({ can_manage_messages: canManageMessages }),
+  });
+  const data = await res.json().catch(() => ({}));
+  if (!res.ok) throw new Error(data.error || "消息权限更新失败");
+  return data as { user: AdminUser };
+}
+
 // 某用户的登录历史（IP/UA/成败）
 export async function apiAdminUserLoginLogs(
   id: number,
@@ -2546,7 +2566,7 @@ export interface ChatRoom {
 // 列表/详情聚合视图：扁平房间 + 当前访问者相关字段
 export interface ChatRoomView extends ChatRoom {
   joined: boolean;
-  my_role: "" | "owner" | "member" | "overseer";
+  my_role: "" | "owner" | "admin" | "member" | "overseer";
   unread_count: number;
   pinned?: boolean;
   pin_forced?: boolean;
@@ -2558,7 +2578,7 @@ export interface ChatRoomMember {
   id: number;
   room_id: number;
   user_id: number;
-  role: "owner" | "member";
+  role: "owner" | "admin" | "member";
   last_read_message_id: number;
   muted: boolean;
   created_at: string;
@@ -2824,7 +2844,7 @@ export async function apiListChatMembers(
   return data as ChatMembersResponse;
 }
 
-// 客户端：群主踢人
+// 客户端：群主/群管踢人
 export async function apiKickChatMember(
   roomId: number,
   userId: number
@@ -2838,7 +2858,45 @@ export async function apiKickChatMember(
   return data as { ok: boolean };
 }
 
-// 客户端：邀请成员（用户名列表，群主/监管）
+// 客户端：禁言/解禁
+export async function apiMuteChatMember(
+  roomId: number,
+  userId: number,
+  muted: boolean
+): Promise<{ ok: boolean; muted: boolean }> {
+  const res = await fetchWithRefresh(
+    `/api/chat/rooms/${roomId}/members/${userId}/mute`,
+    {
+      method: "PUT",
+      headers: clientHeaders({ "Content-Type": "application/json" }),
+      body: JSON.stringify({ muted }),
+    }
+  );
+  const data = await res.json().catch(() => ({}));
+  if (!res.ok) throw new Error(data.error || "禁言操作失败");
+  return data as { ok: boolean; muted: boolean };
+}
+
+// 客户端：站长任命/撤销群管理员
+export async function apiSetChatMemberRole(
+  roomId: number,
+  userId: number,
+  role: "admin" | "member"
+): Promise<{ ok: boolean; role: string }> {
+  const res = await fetchWithRefresh(
+    `/api/chat/rooms/${roomId}/members/${userId}/role`,
+    {
+      method: "PUT",
+      headers: clientHeaders({ "Content-Type": "application/json" }),
+      body: JSON.stringify({ role }),
+    }
+  );
+  const data = await res.json().catch(() => ({}));
+  if (!res.ok) throw new Error(data.error || "设置群角色失败");
+  return data as { ok: boolean; role: string };
+}
+
+// 客户端：邀请成员（用户名列表，群主/群管/监管）
 export async function apiInviteChatMembers(
   roomId: number,
   usernames: string[]