收口聊天室安全边界并优化特效生命周期

resources/views/chat/partials/user-actions.blade.php

@@ -1045,6 +1045,7 @@
                 $canKickUser = Auth::id() === 1 || (($roomPermissionMap[\App\Support\PositionPermissionRegistry::USER_KICK] ?? false) === true);
                 $canMuteUser = Auth::id() === 1 || (($roomPermissionMap[\App\Support\PositionPermissionRegistry::USER_MUTE] ?? false) === true);
                 $canFreezeUser = Auth::id() === 1 || (($roomPermissionMap[\App\Support\PositionPermissionRegistry::USER_FREEZE] ?? false) === true);
+                $canRewardUser = Auth::id() === 1 || (($roomPermissionMap[\App\Support\PositionPermissionRegistry::ROOM_REWARD] ?? false) === true);
                 $hasUserModerationPermission = $canWarnUser || $canKickUser || $canMuteUser || $canFreezeUser;
                 $hasPositionActions = Auth::user()->activePosition || $myLevel >= $superLevel;
             @endphp
@@ -1095,8 +1096,8 @@
                                         </button>
                                     @endif
 
-                                    {{-- 职务奖励金币（凭空产生），仅有在职职务且 max_reward != 0 的人可见 --}}
-                                    @if ($hasPositionActions)
+                                    {{-- 职务奖励金币（凭空产生），仅有明确奖励权限且 max_reward != 0 的人可见 --}}
+                                    @if ($canRewardUser)
                                         <button x-show="window.chatContext?.myMaxReward !== 0"
                                                 style="flex:1; padding: 5px; border-radius: 4px; font-size: 11px; background: #fef3c7; border: 1px solid #f59e0b; cursor: pointer;"
                                                 x-on:click="openRewardModal(userInfo.username)">💰 奖励金币