Phase 1 MVP: gateway, CRUD handlers, frontend components

Backend:
- WebSocket gateway (hub, client, events) with fanout broadcast
- Server CRUD handlers (create, list, get, update, delete)
- Channel CRUD handlers (create, list, get, update, delete)
- Message CRUD handlers (list with cursor pagination, create, update, delete)
- cmd/migrate standalone migration CLI (up/down)
- cmd/server wired to all handlers + WebSocket + static file serving

Frontend:
- Zustand stores: auth, server, channel, message, websocket
- API client with fetch wrapper
- Terminal-styled components: Layout, LoginForm, ChatArea, ChannelList, ServerBar, MemberList
- React Router with login and main routes
- Gruvbox dark palette throughout

Ops:
- Docker Compose with app service (multi-stage build)
- Caddyfile with WebSocket upgrade support
- Makefile for common tasks

cmd/server/main.go

@@ -7,10 +7,15 @@ import (
 	"os"
 
 	"git.dustin.coffee/hobokenchicken/dumpsterChat/internal/auth"
+	"git.dustin.coffee/hobokenchicken/dumpsterChat/internal/channel"
 	"git.dustin.coffee/hobokenchicken/dumpsterChat/internal/config"
 	"git.dustin.coffee/hobokenchicken/dumpsterChat/internal/db"
+	"git.dustin.coffee/hobokenchicken/dumpsterChat/internal/gateway"
+	"git.dustin.coffee/hobokenchicken/dumpsterChat/internal/message"
+	"git.dustin.coffee/hobokenchicken/dumpsterChat/internal/middleware"
+	"git.dustin.coffee/hobokenchicken/dumpsterChat/internal/server"
 	"github.com/go-chi/chi/v5"
-	"github.com/go-chi/chi/v5/middleware"
+	chimw "github.com/go-chi/chi/v5/middleware"
 )
 
 func main() {
@@ -30,20 +35,73 @@ func main() {
 		os.Exit(1)
 	}
 
-	r := chi.NewRouter()
-	r.Use(middleware.Logger)
-	r.Use(middleware.Recoverer)
-	r.Use(middleware.RequestID)
+	// Session store for middleware
+	sessionStore := auth.NewSessionStore(database.DB, cfg)
 
+	// WebSocket hub
+	hub := gateway.NewHub(logger)
+	go hub.Run()
+
+	r := chi.NewRouter()
+	r.Use(chimw.Logger)
+	r.Use(chimw.Recoverer)
+	r.Use(chimw.RequestID)
+
+	// Health check
 	r.Get("/health", func(w http.ResponseWriter, r *http.Request) {
 		w.WriteHeader(http.StatusOK)
 		w.Write([]byte("ok"))
 	})
 
-	r.Route("/api/v1/auth", func(r chi.Router) {
-		auth.NewHandler(database.DB, cfg).RegisterRoutes(r)
+	// WebSocket endpoint
+	r.Get("/ws", func(w http.ResponseWriter, r *http.Request) {
+		gateway.ServeWS(database.DB, hub, logger, w, r)
 	})
 
+	// API routes
+	r.Route("/api/v1", func(r chi.Router) {
+		// Auth (public)
+		r.Route("/auth", func(r chi.Router) {
+			auth.NewHandler(database.DB, cfg).RegisterRoutes(r)
+		})
+
+		// Protected routes
+		r.Group(func(r chi.Router) {
+			r.Use(middleware.Session(sessionStore, cfg))
+			r.Use(middleware.RequireAuth)
+
+			// Servers
+			r.Route("/servers", func(r chi.Router) {
+				server.NewHandler(database.DB).RegisterRoutes(r)
+
+				// Channels (nested under servers)
+				r.Route("/{serverID}/channels", func(r chi.Router) {
+					channel.NewHandler(database.DB).RegisterRoutes(r)
+				})
+			})
+
+			// Messages (under channels)
+			r.Route("/channels/{channelID}/messages", func(r chi.Router) {
+				message.NewHandler(database.DB, hub).RegisterRoutes(r)
+			})
+		})
+	})
+
+	// Static file serving for production (SPA)
+	staticDir := "/srv/web"
+	if _, err := os.Stat(staticDir); err == nil {
+		fileServer := http.FileServer(http.Dir(staticDir))
+		r.NotFound(func(w http.ResponseWriter, r *http.Request) {
+			// If the file exists, serve it; otherwise serve index.html (SPA fallback)
+			path := staticDir + r.URL.Path
+			if _, err := os.Stat(path); os.IsNotExist(err) {
+				http.ServeFile(w, r, staticDir+"/index.html")
+				return
+			}
+			fileServer.ServeHTTP(w, r)
+		})
+	}
+
 	addr := fmt.Sprintf(":%s", cfg.Port)
 	logger.Info("starting server", "addr", addr)
 	if err := http.ListenAndServe(addr, r); err != nil {