feat(bots): Implement comprehensive bot system with autonomous posting, content management, and API endpoints

- Add bot management system with creation, suspension, and reinstatement functionality
- Implement autonomous bot posting with scheduling, rate limiting, and content generation
- Add content fetching system supporting RSS feeds and multiple content sources
- Implement LLM-based content generation with customizable bot personalities
- Add mention handling and automated response system for bot interactions
- Implement API key management with encryption using AUTH_SECRET for simplified deployment
- Add comprehensive bot logging system for activity tracking and error monitoring
- Create bot administration pages and settings UI for managing bot configurations
- Add database migrations for bot system schema including users, sources, and content items
- Implement cron job system for automated bot operations and scheduled tasks
- Add extensive test coverage with unit and property-based tests for core bot modules
- Simplify encryption by deriving keys from AUTH_SECRET instead of separate environment variable
- Implement automatic content fetching on post trigger with retry logic
- Add Reddit-specific link preview handling using oEmbed API for reliable metadata extraction
- Create utility scripts for bot inspection and cleanup operations
- Add comprehensive bot system documentation and improvement tracking

src/app/api/posts/[id]/route.ts

@@ -144,18 +144,26 @@ export async function DELETE(
 ) {
     try {
         const { requireAuth } = await import('@/lib/auth');
+        const { bots } = await import('@/db');
         const user = await requireAuth();
         const { id } = await params;
 
         const post = await db.query.posts.findFirst({
             where: eq(posts.id, id),
+            with: {
+                bot: true,
+            },
         });
 
         if (!post) {
             return NextResponse.json({ error: 'Post not found' }, { status: 404 });
         }
 
-        if (post.userId !== user.id) {
+        // Allow deletion if user owns the post OR if user owns the bot that made the post
+        const isPostOwner = post.userId === user.id;
+        const isBotOwner = post.bot && post.bot.ownerId === user.id;
+        
+        if (!isPostOwner && !isBotOwner) {
             return NextResponse.json({ error: 'Unauthorized' }, { status: 403 });
         }
 
@@ -174,11 +182,14 @@ export async function DELETE(
         // 2. Delete the post (cascades to media, likes, notifications)
         await db.delete(posts).where(eq(posts.id, id));
 
-        // 3. Decrement user's postsCount
-        if (user.postsCount > 0) {
+        // 3. Decrement the post author's postsCount
+        const postAuthor = await db.query.users.findFirst({
+            where: eq(users.id, post.userId),
+        });
+        if (postAuthor && postAuthor.postsCount > 0) {
             await db.update(users)
-                .set({ postsCount: user.postsCount - 1 })
-                .where(eq(users.id, user.id));
+                .set({ postsCount: postAuthor.postsCount - 1 })
+                .where(eq(users.id, post.userId));
         }
 
         return NextResponse.json({ success: true });