feat: core IoT integration with pairing flow and upload endpoint

- Add database models: Device, PairingSession, AIMetrics
- Implement device authentication middleware for secure IoT communication
- Build device pairing flow (mobile request → IoT verify → device token)
- Create IoT endpoint for uploading run data

Author: fazirta

cmd/server/main.go

@@ -36,6 +36,8 @@ func main() {
 	}))
 
 	authHandler := handlers.NewAuthHandler(db)
+	mobileHandler := handlers.NewMobileHandler(db)
+	iotHandler := handlers.NewIoTHandler(db)
 
 	api := r.Group("/api/v1")
 	{
@@ -58,6 +60,31 @@ func main() {
 			protectedAuth.GET("/profile", authHandler.GetProfile)
 			protectedAuth.PUT("/profile", authHandler.UpdateProfile)
 		}
+
+		mobile := api.Group("/mobile")
+		mobile.Use(middleware.AuthMiddleware())
+		{
+			mobile.POST("/pairing/request", mobileHandler.RequestPairingCode)
+			mobile.GET("/pairing/:session_id/status", mobileHandler.CheckPairingStatus)
+
+			mobile.GET("/devices", mobileHandler.GetDevices)
+			mobile.DELETE("/devices/:device_id", mobileHandler.RemoveDevice)
+		}
+
+		iot := api.Group("/iot")
+		{
+			iot.POST("/pairing/verify", iotHandler.VerifyPairingCode)
+
+			iotProtected := iot.Group("")
+			iotProtected.Use(middleware.DeviceAuthMiddleware(db))
+			{
+				iotProtected.POST("/runs/upload", iotHandler.UploadRun)
+				iotProtected.POST("/runs/batch", iotHandler.BatchUploadRuns)
+
+				iotProtected.POST("/devices/status", iotHandler.UpdateDeviceStatus)
+				iotProtected.GET("/devices/config", iotHandler.GetDeviceConfig)
+			}
+		}
 	}
 
 

internal/database/migrate.go

@@ -8,6 +8,9 @@ import (
 func Migrate(db *gorm.DB) error {
 	return db.AutoMigrate(
 		&models.User{},
+		&models.Device{},
+		&models.PairingSession{},
 		&models.Run{},
+		&models.AIMetrics{},
 	)
 }