feat: add reply/forward/pin message flow across backend and web

- add reply_to/forwarded_from message fields and chat pinned_message field

- add forward and pin APIs plus reply support in message create

- wire web actions: Reply, Fwd, Pin and reply composer state

- fix spam policy bug: allow repeated identical messages, keep rate limiting

web/src/components/MessageList.tsx

@@ -1,4 +1,5 @@
 import { useMemo } from "react";
+import { forwardMessage, pinMessage } from "../api/chats";
 import { useAuthStore } from "../store/authStore";
 import { useChatStore } from "../store/chatStore";
 import { formatTime } from "../utils/format";
@@ -8,6 +9,9 @@ export function MessageList() {
   const activeChatId = useChatStore((s) => s.activeChatId);
   const messagesByChat = useChatStore((s) => s.messagesByChat);
   const typingByChat = useChatStore((s) => s.typingByChat);
+  const chats = useChatStore((s) => s.chats);
+  const setReplyToMessage = useChatStore((s) => s.setReplyToMessage);
+  const updateChatPinnedMessage = useChatStore((s) => s.updateChatPinnedMessage);
 
   const messages = useMemo(() => {
     if (!activeChatId) {
@@ -15,13 +19,38 @@ export function MessageList() {
     }
     return messagesByChat[activeChatId] ?? [];
   }, [activeChatId, messagesByChat]);
+  const activeChat = chats.find((chat) => chat.id === activeChatId);
 
   if (!activeChatId) {
     return <div className="flex h-full items-center justify-center text-slate-300/80">Select a chat</div>;
   }
+  const chatId = activeChatId;
+
+  async function handleForward(messageId: number) {
+    const targetRaw = window.prompt("Forward to chat id:");
+    if (!targetRaw) {
+      return;
+    }
+    const targetId = Number(targetRaw);
+    if (!Number.isFinite(targetId) || targetId <= 0) {
+      return;
+    }
+    await forwardMessage(messageId, targetId);
+  }
+
+  async function handlePin(messageId: number) {
+    const nextPinned = activeChat?.pinned_message_id === messageId ? null : messageId;
+    const chat = await pinMessage(chatId, nextPinned);
+    updateChatPinnedMessage(chatId, chat.pinned_message_id ?? null);
+  }
 
   return (
     <div className="flex h-full flex-col">
+      {activeChat?.pinned_message_id ? (
+        <div className="border-b border-slate-700/50 bg-slate-900/60 px-4 py-2 text-xs text-sky-300">
+          Pinned message ID: {activeChat.pinned_message_id}
+        </div>
+      ) : null}
       <div className="tg-scrollbar flex-1 overflow-auto px-3 py-4 md:px-6">
         {messages.map((message) => {
           const own = message.sender_id === me?.id;
@@ -34,11 +63,30 @@ export function MessageList() {
                     : "rounded-bl-md border border-slate-700/60 bg-slate-900/80 text-slate-100"
                 }`}
               >
+                {message.forwarded_from_message_id ? (
+                  <p className={`mb-1 text-[11px] font-semibold ${own ? "text-slate-900/75" : "text-sky-300"}`}>Forwarded</p>
+                ) : null}
+                {message.reply_to_message_id ? (
+                  <p className={`mb-1 text-[11px] ${own ? "text-slate-900/75" : "text-slate-300"}`}>Reply to #{message.reply_to_message_id}</p>
+                ) : null}
                 {renderContent(message.type, message.text)}
-                <p className={`mt-1 flex items-center justify-end gap-1 text-[11px] ${own ? "text-slate-900/85" : "text-slate-400"}`}>
+                <div className="mt-1 flex items-center justify-between gap-2">
+                  <div className="flex gap-1">
+                    <button className={`rounded px-1.5 py-0.5 text-[10px] ${own ? "bg-slate-900/15" : "bg-slate-700/70"}`} onClick={() => setReplyToMessage(chatId, message)}>
+                      Reply
+                    </button>
+                    <button className={`rounded px-1.5 py-0.5 text-[10px] ${own ? "bg-slate-900/15" : "bg-slate-700/70"}`} onClick={() => void handleForward(message.id)}>
+                      Fwd
+                    </button>
+                    <button className={`rounded px-1.5 py-0.5 text-[10px] ${own ? "bg-slate-900/15" : "bg-slate-700/70"}`} onClick={() => void handlePin(message.id)}>
+                      Pin
+                    </button>
+                  </div>
+                  <p className={`flex items-center justify-end gap-1 text-[11px] ${own ? "text-slate-900/85" : "text-slate-400"}`}>
                   <span>{formatTime(message.created_at)}</span>
                   {own ? <span className={message.delivery_status === "read" ? "text-cyan-900" : ""}>{renderStatus(message.delivery_status)}</span> : null}
-                </p>
+                  </p>
+                </div>
               </div>
             </div>
           );