first commit, i i have no idea what i have done

server/internal/router/router.go

@@ -0,0 +1,67 @@
+package router
+
+import (
+	"net/http"
+	"time"
+
+	"github.com/gin-gonic/gin"
+	"github.com/minio/minio-go/v7"
+	"gorm.io/gorm"
+
+	"smoop-api/internal/config"
+	"smoop-api/internal/crypto"
+	"smoop-api/internal/handlers"
+)
+
+func Build(db *gorm.DB, minio *minio.Client, cfg *config.Config) *gin.Engine {
+	r := gin.Default()
+
+	jwtMgr := crypto.NewJWT(cfg.JWTSecret)
+
+	// --- Handlers
+	authH := handlers.NewAuthHandler(db, jwtMgr)
+	usersH := handlers.NewUsersHandler(db)
+	devH := handlers.NewDevicesHandler(db)
+	recH := handlers.NewRecordsHandler(db, minio, cfg.MinIO.RecordsBucket, cfg.MinIO.PresignTTL)
+	liveH := handlers.NewLivestreamHandler(minio, cfg.MinIO.LivestreamBucket)
+
+	// --- Public auth
+	r.POST("/auth/signup", authH.SignUp)
+	r.POST("/auth/signin", authH.SignIn)
+	r.POST("/auth/check_token", authH.CheckToken)
+
+	// Protected
+	authMW := handlers.Auth(jwtMgr)
+	adminOnly := handlers.RequireRole("admin")
+
+	r.POST("/auth/change_password", authMW, authH.ChangePassword)
+
+	r.GET("/users/profile", authMW, usersH.Profile)
+	r.POST("/users/:id/set_role", authMW, adminOnly, usersH.SetRole)
+	r.GET("/users", authMW, adminOnly, usersH.List)
+	r.POST("/users/create", authMW, adminOnly, usersH.Create)
+
+	r.GET("/devices", authMW, devH.List)
+	r.POST("/devices/create", authMW, devH.Create)
+	r.POST("/devices/:guid/rename", authMW, devH.Rename)
+	r.POST("/devices/:guid/add_to_user", authMW, devH.AddToUser)
+	r.POST("/devices/:guid/set_users", authMW, adminOnly, devH.SetUsers)
+	r.POST("/devices/:guid/remove_from_user", authMW, devH.RemoveFromUser)
+
+	r.POST("/records/upload", authMW, recH.Upload)
+	r.GET("/records", authMW, recH.List)
+	r.GET("/records/:id/file", authMW, recH.File)
+
+	// WebSocket livestream
+	r.GET("/livestream", authMW, liveH.Upgrade)
+
+	// health
+	r.GET("/healthz", func(c *gin.Context) { c.String(http.StatusOK, "ok") })
+
+	// sensible defaults
+	r.MaxMultipartMemory = 64 << 20 // 64 MiB
+	_ = time.Now()                  // appease linters
+	return r
+}
+
+// --- JWT middleware & helpers (kept here to avoid new dirs) ---