Phase 2 Week 5: Device Registration & Management

Implement device registration and management system for universal sync.

Database Changes:
- Add device queries to queries.sql (CRUD operations, registration, auth)
- Add sync queue management queries
- Add conflict resolution queries
- Regenerate sqlc models with new device-related types

Device Handler (devices.go):
- InitiateRegistration: Start device registration with auth URL and QR code
- CheckRegistrationStatus: Poll for registration approval
- ListDevices: Get all devices for current user
- GetDevice: Get specific device details
- UpdateDevice: Update device settings (name, sync settings, frequency)
- DeleteDevice: Remove device from account
- ApproveDevice: User approves device registration via web
- RejectDevice: Reject pending device registration
- ListPendingRegistrations: Show all pending registrations
- generateDeviceToken: Generate secure Bearer token for devices

Device Authentication Middleware (device_auth.go):
- Authenticate: Validate device Bearer tokens
- RequirePermission: Check device permissions by type
- hasPermission: Define permissions per device type
- UpdateLastSeen: Auto-update device last_seen timestamp

Configuration:
- Add BaseURL field to Config for device setup URLs

API Endpoints:
POST /api/devices/register - Initiate device registration
POST /api/devices/register/status - Check registration status
GET /api/devices/approve/:id - Approve device (web UI)
POST /api/devices/reject/:id - Reject device
GET /api/devices - List user's devices
GET /api/devices/:id - Get device details
PUT /api/devices/:id - Update device settings
DELETE /api/devices/:id - Delete device
GET /api/devices/pending - List pending registrations

Bruno API Collection:
- Initiate Device Registration
- Check Registration Status
- List Devices
- Get Device
- Update Device
- Delete Device

Dependencies:
- github.com/skip2/go-qrcode for QR code generation

Device Types Supported:
- koreader: Calibre-compatible sync
- kobo: Kobo sync protocol
- web: Web interface
- mobile: Mobile apps

Device Permissions:
- sync:progress
- sync:annotations
- sync:metadata
- device:manage (web only)

cmd/server/main.go

@@ -4,6 +4,7 @@ import (
 	"bookmann/internal/config"
 	"bookmann/internal/database"
 	"bookmann/internal/handlers"
+	"bookmann/internal/middleware"
 	ratelimit "bookmann/internal/middleware"
 	"bookmann/templates"
 	"bytes"
@@ -48,6 +49,10 @@ func main() {
 
 	authHandler := handlers.NewAuthHandler(queries, cfg.JWTSecret, loginAttemptTracker)
 	libraryHandler := handlers.NewLibraryHandler(queries)
+	deviceHandler := handlers.NewDeviceHandler(queries, cfg.JWTSecret, cfg)
+
+	deviceAuthMiddleware := middleware.NewDeviceAuthMiddleware(queries)
+	_ = deviceAuthMiddleware
 
 	e := echo.New()
 
@@ -151,6 +156,20 @@ func main() {
 	authGroup.PUT("/theme", authHandler.UpdateTheme)
 	// force rebuild
 
+	// Device management routes (public - for registration)
+	e.POST("/api/devices/register", deviceHandler.InitiateRegistration)
+	e.POST("/api/devices/register/status", deviceHandler.CheckRegistrationStatus)
+	e.GET("/devices/approve/:registration_id", deviceHandler.ApproveDevice)
+	e.POST("/devices/reject/:registration_id", deviceHandler.RejectDevice)
+
+	// Device management routes (protected - require user auth)
+	devices := protected.Group("/devices")
+	devices.GET("", deviceHandler.ListDevices)
+	devices.GET("/:id", deviceHandler.GetDevice)
+	devices.PUT("/:id", deviceHandler.UpdateDevice)
+	devices.DELETE("/:id", deviceHandler.DeleteDevice)
+	devices.GET("/pending", deviceHandler.ListPendingRegistrations)
+
 	// Static files
 	e.Static("/static", "web/static")