go-duck-cli 1.0.8 → 1.1.1

package/templates/go/entity.go.hbs

@@ -8,27 +8,29 @@ import (
 )
 
 type {{name}} struct {
+{{#if isDocument}}
+ID string `json:"id" bson:"_id,omitempty"`
+{{else}}
 ID uint `gorm:"primaryKey" json:"id"`
-{{#each fields}}
-{{capitalize name}} {{toGoType type}} `{{#if unique}}gorm:"uniqueIndex" {{/if}}{{#if (isJson type)}}gorm:"type:{{toLowerCase type}};serializer:json" {{/if}}json:"{{name}}" {{#if required}}binding:"required"{{/if}}`
-{{/each}}
-{{#if (eq annotation "@Audited")}}
-CreatedBy string `gorm:"column:created_by" json:"createdBy"`
-CreatedDate time.Time `gorm:"column:created_date" json:"createdDate"`
-LastModifiedBy string `gorm:"column:last_modified_by" json:"lastModifiedBy"`
-LastModifiedDate time.Time `gorm:"column:last_modified_date" json:"lastModifiedDate"`
-LastModifiedUserID string `gorm:"column:last_modified_user_id" json:"lastModifiedUserId"`
+{{/if}}
+{{> renderFields fields=fields isDocument=isDocument}}
+{{#if isAudited}}
+CreatedBy string `{{#if isDocument}}bson:"created_by"{{else}}gorm:"column:created_by"{{/if}} json:"createdBy"`
+CreatedDate time.Time `{{#if isDocument}}bson:"created_date"{{else}}gorm:"column:created_date"{{/if}} json:"createdDate"`
+LastModifiedBy string `{{#if isDocument}}bson:"last_modified_by"{{else}}gorm:"column:last_modified_by"{{/if}} json:"lastModifiedBy"`
+LastModifiedDate time.Time `{{#if isDocument}}bson:"last_modified_date"{{else}}gorm:"column:last_modified_date"{{/if}} json:"lastModifiedDate"`
 {{else}}
-CreatedAt time.Time `gorm:"autoCreateTime" json:"createdAt"`
-UpdatedAt time.Time `gorm:"autoUpdateTime" json:"updatedAt"`
+CreatedAt time.Time `{{#if isDocument}}bson:"created_at"{{else}}gorm:"autoCreateTime"{{/if}} json:"createdAt"`
+UpdatedAt time.Time `{{#if isDocument}}bson:"updated_at"{{else}}gorm:"autoUpdateTime"{{/if}} json:"updatedAt"`
 {{/if}}
 {{#each relationships}}
 {{#if (eq from.entity ../name)}}
-{{capitalize from.field}} []{{capitalize to.entity}} `gorm:"foreignKey:{{capitalize to.field}}ID" json:"{{from.field}}"`
+{{capitalize from.field}} []{{capitalize to.entity}} `{{#unless ../isDocument}}{{#unless toIsDocument}}gorm:"foreignKey:{{capitalize to.field}}ID"{{else}}gorm:"-"{{/unless}}{{/unless}} json:"{{from.field}}" bson:"{{from.field}}"`
 {{else}}
-{{capitalize to.field}}ID *uint `gorm:"column:{{to.field}}_id;index" json:"{{to.field}}Id"`
-{{capitalize to.field}} *{{capitalize from.entity}} `gorm:"foreignKey:{{capitalize to.field}}ID"
-json:"{{to.field}},omitempty"`
+{{capitalize to.field}}ID {{#if ../isDocument}}string{{else}}{{#if fromIsDocument}}string{{else}}*uint{{/if}}{{/if}} `{{#if ../isDocument}}bson:"{{toLowerCase to.field}}_id"{{else}}gorm:"column:{{to.field}}_id;index"{{/if}} json:"{{to.field}}Id"`
+{{#unless ../isDocument}}
+{{capitalize to.field}} *{{capitalize from.entity}} `{{#unless fromIsDocument}}gorm:"foreignKey:{{capitalize to.field}}ID"{{else}}gorm:"-"{{/unless}} json:"{{to.field}},omitempty"`
+{{/unless}}
 {{/if}}
 {{/each}}
 }

package/templates/go/main.go.hbs

@@ -1,189 +1,56 @@
 package main
 
 import (
-"context"
-"fmt"
-"log"
-"net/http"
-
-"github.com/gin-gonic/gin"
-"go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin"
-"gorm.io/driver/postgres"
-"gorm.io/gorm"
-"gorm.io/plugin/opentelemetry/tracing"
-"{{app_name}}/management"
-"{{app_name}}/middleware"
-"{{app_name}}/controllers"
-"{{app_name}}/graph"
-"{{app_name}}/ws"
-"{{app_name}}/config"
-"{{app_name}}/logger"
-"{{app_name}}/messaging"
-"{{app_name}}/cache"
-"{{app_name}}/resilience"
-"{{app_name}}/internal/telemetry"
-"{{app_name}}/internal/repository"
-"{{app_name}}/internal/server"
-k_grpc "github.com/go-kratos/kratos/v2/transport/grpc"
-// go-duck-needle-add-import
+	"context"
+	"fmt"
+	"log"
+
+	"{{app_name}}/config"
+	"{{app_name}}/logger"
+	"{{app_name}}/router"
+	"{{app_name}}/internal/server"
+	"{{app_name}}/internal/worker"
+    "{{app_name}}/internal/repository"
+    "gorm.io/driver/postgres"
+    "gorm.io/gorm"
 )
 
 func main() {
-// 1. Load Configuration
-appConfig, err := config.LoadConfig()
-if err != nil {
-log.Fatalf("Failed to load configuration: %v", err)
-}
-
-// 2. Initialize Logging & Observability (Datadog)
-logger.InitLogger(appConfig)
-logger.Info("Starting %s version %s...", appConfig.GoDuck.Name, appConfig.GoDuck.Version)
-
-// 3. Initialize OpenTelemetry Tracing
-shutdown, err := telemetry.InitTelemetry(appConfig)
-if err != nil {
-log.Printf("Warning: Failed to initialize OpenTelemetry: %v", err)
-}
-defer shutdown(context.Background())
-
-// 4. Initialize Resilience Layer (Circuit Breaker)
-resilience.InitResilience(appConfig)
-
-// 5. Initialize MQTT Messaging (for Webhooks/Audit)
-messaging.InitMQTT(appConfig)
-
-// 6. Initialize Distributed Caching (Redis)
-cache.InitCache(appConfig)
-
-// 7. Initialize master DB connection with Pool Tuning & Tracing
-masterDB, err := gorm.Open(postgres.Open(appConfig.GetDSN()), &gorm.Config{})
-if err != nil {
-log.Fatalf("Failed to connect to master database: %v", err)
-}
-// go-duck-needle-add-init-server
-
-// Inject GORM OTel Plugin
-if err := masterDB.Use(tracing.NewPlugin()); err != nil {
-log.Printf("Warning: Failed to inject GORM OTel plugin: %v", err)
-}
-
-sqlDB, _ := masterDB.DB()
-sqlDB.SetMaxOpenConns(appConfig.GoDuck.Datasource.MaxOpenConns)
-sqlDB.SetMaxIdleConns(appConfig.GoDuck.Datasource.MaxIdleConns)
-sqlDB.SetConnMaxLifetime(appConfig.GoDuck.Datasource.ConnMaxLifetime)
-
-// 8. Initialize Repository
-repo := repository.NewRepository(masterDB)
-// go-duck-needle-add-init-repository
-
-// 9. Initialize & Start Kratos gRPC Server (in background)
-go func() {
-    grpcSrv := server.NewGRPCServer(appConfig, repo)
-    logger.Info("Starting Kratos gRPC server on %s", appConfig.GoDuck.Server.GRPC.Addr)
-    if err := grpcSrv.Start(context.Background()); err != nil {
-        logger.Error("Failed to start Kratos gRPC server: %v", err)
+	// 1. Load Configuration
+	appConfig, err := config.LoadConfig()
+	if err != nil {
+		log.Fatalf("Failed to load configuration: %v", err)
+	}
+
+	// 2. Initialize Logging
+	logger.InitLogger(appConfig)
+	logger.Info("Starting %s version %s...", appConfig.GoDuck.Name, appConfig.GoDuck.Version)
+
+	// 3. Setup Reusable Router (Initializes DB, Cache, etc.)
+	r := router.SetupRouter(appConfig)
+
+    // 4. Background Services (Only for standard binary deployment)
+    // Initialize repository for Kratos
+    masterDB, err := gorm.Open(postgres.Open(appConfig.GetDSN()), &gorm.Config{})
+    if err == nil {
+        repo := repository.NewRepository(masterDB)
+        
+        // Start Kratos gRPC Server
+        go func() {
+            grpcSrv := server.NewGRPCServer(appConfig, repo)
+            logger.Info("Starting Kratos gRPC server on %s", appConfig.GoDuck.Server.GRPC.Addr)
+            if err := grpcSrv.Start(context.Background()); err != nil {
+                logger.Error("Failed to start Kratos gRPC server: %v", err)
+            }
+        }()
+
+        // Start Distributed Outbox Worker
+        outboxWorker := worker.NewOutboxWorker(masterDB, appConfig)
+        go outboxWorker.Start(context.Background())
     }
-}()
-// go-duck-needle-add-grpc-start
-
-r := gin.Default()
-
-// 8. Global Middleware (OTel, Rate Limit & CORS)
-if appConfig.GoDuck.Telemetry.OTel.Enabled {
-r.Use(otelgin.Middleware(appConfig.GoDuck.Name))
-}
-r.Use(middleware.RateLimitMiddleware(appConfig))
-r.Use(middleware.CORSMiddleware(appConfig))
-
-// Health Check
-r.GET("/health", func(c *gin.Context) {
-c.JSON(http.StatusOK, gin.H{"status": "UP"})
-})
-
-// Swagger Docs & UI
-r.StaticFile("/swagger.json", "./docs/swagger.json")
-r.GET("/swagger", func(c *gin.Context) {
-c.Header("Content-Type", "text/html; charset=utf-8")
-c.String(http.StatusOK, \`
-<!DOCTYPE html>
-<html lang="en">
-
-<head>
-    <meta charset="UTF-8">
-    <title>Swagger UI</title>
-    <link rel="stylesheet" type="text/css" href="https://unpkg.com/swagger-ui-dist@3/swagger-ui.css">
-</head>
-
-<body>
-    <div id="swagger-ui"></div>
-    <script src="https://unpkg.com/swagger-ui-dist@3/swagger-ui-bundle.js"> </script>
-    <script>
-        window.onload = function () {
-            window.ui = SwaggerUIBundle({
-                url: "/swagger.json",
-                dom_id: '#swagger-ui',
-                deepLinking: true,
-                presets: [SwaggerUIBundle.presets.apis],
-                layout: "BaseLayout"
-            });
-        };
-    </script>
-</body>
-
-</html>
-\`)
-})
-
-// Management APIs (Run-time DB creation)
-mgmt := r.Group("/management")
-{
-mgmt.POST("/db/create", management.CreateDatabaseAndMigrate(masterDB))
-}
-
-// 9. Secured Application APIs
-api := r.Group("/api")
-api.Use(middleware.JWTMiddleware())
-api.Use(middleware.TenantMiddleware(masterDB, appConfig))
-api.Use(middleware.AuditMiddleware(masterDB))
-api.Use(middleware.MeteringMiddleware(masterDB))
-{
-// Observability
-auditCtrl := controllers.AuditController{DB: masterDB}
-api.GET("/audit", auditCtrl.GetLogs)
-
-meteringCtrl := controllers.MeteringController{DB: masterDB}
-api.POST("/metering/limit", meteringCtrl.SetLimit)
-api.GET("/metering/usage", meteringCtrl.GetUsage)
-
-// Search
-searchCtrl := controllers.SearchController{DB: masterDB}
-api.GET("/rpc/:table", searchCtrl.GenericSearch)
-
-{{#each entities}}
-// {{name}} Routes
-{{toLowerCase name}}Ctrl := controllers.{{capitalize name}}Controller{DB: masterDB, Config: appConfig}
-api.POST("/{{toLowerCase name}}s", {{toLowerCase name}}Ctrl.Create)
-api.POST("/{{toLowerCase name}}s/bulk", {{toLowerCase name}}Ctrl.BulkCreate)
-api.GET("/{{toLowerCase name}}s", {{toLowerCase name}}Ctrl.GetAll)
-api.GET("/{{toLowerCase name}}s/:id", {{toLowerCase name}}Ctrl.GetByID)
-api.PUT("/{{toLowerCase name}}s/:id", {{toLowerCase name}}Ctrl.Update)
-api.PUT("/{{toLowerCase name}}s/bulk", {{toLowerCase name}}Ctrl.BulkUpdate)
-api.PATCH("/{{toLowerCase name}}s/:id", {{toLowerCase name}}Ctrl.Patch)
-api.PATCH("/{{toLowerCase name}}s/bulk", {{toLowerCase name}}Ctrl.BulkPatch)
-api.DELETE("/{{toLowerCase name}}s/:id", {{toLowerCase name}}Ctrl.Delete)
-{{/each}}
-// go-duck-needle-add-route
-}
-
-// 10. GraphQL
-r.POST("/graphql", func(c *gin.Context) {
-graph.HandleGraphQLRequest(masterDB, c)
-})
-
-// 11. WebSockets
-wsDispatcher := ws.NewDispatcher(masterDB)
-r.GET("/ws", middleware.JWTMiddleware(), wsDispatcher.HandleConnection)
 
-port := fmt.Sprintf(":%d", appConfig.GoDuck.Server.Port)
-r.Run(port)
+	// 5. Start HTTP Server
+	port := fmt.Sprintf(":%d", appConfig.GoDuck.Server.Port)
+	logger.Info("Starting HTTP server on %s", port)
+	r.Run(port)
 }

package/templates/go/migrator.go.hbs

@@ -0,0 +1,65 @@
+package migrations
+
+import (
+	"embed"
+	"fmt"
+
+	"github.com/pressly/goose/v3"
+	"gorm.io/gorm"
+)
+
+// Global migrations embed filesystem
+//go:embed sql/*.sql
+var embedMigrations embed.FS
+
+// RunGoNativeMigrations performs idempotent schema updates using Goose and maintains a migration version table
+func RunGoNativeMigrations(db *gorm.DB) error {
+	fmt.Printf("Checking embedded migrations with Goose...\n")
+
+	// Get native SQL DB from GORM
+	sqlDB, err := db.DB()
+	if err != nil {
+		return fmt.Errorf("failed to get sql.DB: %v", err)
+	}
+
+	// 1. Setup Goose
+    // Goose natively supports versioning and history tracking via its version table.
+    // We rename it to 'database_changelog' for the user.
+	goose.SetTableName("database_changelog")
+	if err := goose.SetDialect("postgres"); err != nil {
+		return fmt.Errorf("failed to set goose dialect: %v", err)
+	}
+
+	// 2. Use embedded FS (migrator.go is in 'migrations/' and SQL files are in 'migrations/sql/')
+    // So the path relative to Go source file is 'sql'
+	goose.SetBaseFS(embedMigrations)
+
+	// 3. Run Migrations
+	if err := goose.Up(sqlDB, "sql"); err != nil {
+		return fmt.Errorf("goose up failed: %v", err)
+	}
+
+	fmt.Println("All Goose migrations completed successfully.")
+	return nil
+}
+
+// RunGoNativeMigrationsForTenant runs migrations for a specific tenant DB
+func RunGoNativeMigrationsForTenant(db *gorm.DB) error {
+	sqlDB, err := db.DB()
+	if err != nil {
+		return fmt.Errorf("failed to get sql.DB: %v", err)
+	}
+
+	goose.SetTableName("database_changelog")
+	if err := goose.SetDialect("postgres"); err != nil {
+		return fmt.Errorf("failed to set goose dialect: %v", err)
+	}
+
+	goose.SetBaseFS(embedMigrations)
+
+	if err := goose.Up(sqlDB, "sql"); err != nil {
+		return fmt.Errorf("goose up failed for tenant: %v", err)
+	}
+
+	return nil
+}

package/templates/go/router.go.hbs

@@ -0,0 +1,272 @@
+package router
+
+import (
+    "context"
+    "log"
+    "net/http"
+    "time"
+
+    "github.com/gin-gonic/gin"
+    "go.mongodb.org/mongo-driver/mongo"
+    "go.mongodb.org/mongo-driver/mongo/options"
+    "go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin"
+    "gorm.io/driver/postgres"
+    "gorm.io/gorm"
+    "gorm.io/plugin/opentelemetry/tracing"
+    "{{app_name}}/management"
+    "{{app_name}}/middleware"
+    "{{app_name}}/controllers"
+    "{{app_name}}/models"
+    "{{app_name}}/migrations"
+    "{{app_name}}/graph"
+    "{{app_name}}/ws"
+    "{{app_name}}/config"
+    "{{app_name}}/logger"
+    "{{app_name}}/messaging"
+    "{{app_name}}/cache"
+    "{{app_name}}/resilience"
+    "{{app_name}}/internal/storage"
+    "{{app_name}}/internal/telemetry"
+    "{{app_name}}/internal/search"
+)
+
+func SetupRouter(appConfig *config.Config) *gin.Engine {
+    // 1. Initialize Logging & Observability
+    logger.InitLogger(appConfig)
+    
+    // 2. Initialize OpenTelemetry Tracing
+    _, err := telemetry.InitTelemetry(appConfig)
+    if err != nil {
+        log.Printf("Warning: Failed to initialize OpenTelemetry: %v", err)
+    }
+
+    // 3. Initialize Resilience Layer (Circuit Breaker)
+    resilience.InitResilience(appConfig)
+
+    // 4. Initialize Messaging (Dual-Broker: MQTT + NATS - Async)
+    messaging.InitMQTT(appConfig)
+    messaging.InitNATS(appConfig)
+
+    // 5. Initialize Distributed Caching (Redis)
+    cache.InitCache(appConfig)
+
+    // 6. Initialize Elasticsearch Engine (Spring-style Search)
+    search.InitElasticsearch(appConfig)
+
+    // 7. Initialize Storage Providers & Bootstrap Credentials
+    if err := storage.InitStorage(appConfig); err != nil {
+        log.Printf("Warning: Failed to bootstrap storage credentials: %v", err)
+    }
+
+    // 8. Initialize Hybrid-Store connections with Pool Tuning & Tracing
+    var masterDB *gorm.DB
+    if appConfig.GoDuck.Datasource.Host != "" {
+        db, err := gorm.Open(postgres.Open(appConfig.GetDSN()), &gorm.Config{})
+        if err != nil {
+            log.Fatalf("Failed to connect to master database: %v", err)
+        }
+        masterDB = db
+
+        // Inject GORM OTel Plugin
+        if err := masterDB.Use(tracing.NewPlugin()); err != nil {
+            log.Printf("Warning: Failed to inject GORM OTel plugin: %v", err)
+        }
+
+        sqlDB, _ := masterDB.DB()
+        sqlDB.SetMaxOpenConns(appConfig.GoDuck.Datasource.MaxOpenConns)
+        sqlDB.SetMaxIdleConns(appConfig.GoDuck.Datasource.MaxIdleConns)
+        sqlDB.SetConnMaxLifetime(appConfig.GoDuck.Datasource.ConnMaxLifetime)
+
+        // 9. Auto-Migrate Master System Registry (Infrastructure)
+        masterDB.AutoMigrate(&models.TenantRole{}, &models.APIUsage{}, &models.APIUsageHistory{}, &models.AuditLog{}, &models.DistributedOutbox{})
+
+        // 10. Run Goose Migrations (The Modern Go-Native Way)
+        if err := migrations.RunGoNativeMigrations(masterDB); err != nil {
+            logger.Error("Goose Migration failed: %v", err)
+        }
+    }
+
+    var masterMongo *mongo.Client
+    _ = masterMongo // Skip unused variable error if no MongoDB entities exist
+
+    if appConfig.GoDuck.Datasource.MongoDB.Enabled {
+        ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
+        defer cancel()
+        client, err := mongo.Connect(ctx, options.Client().ApplyURI(appConfig.GetMongoURI()))
+        if err != nil {
+            log.Fatalf("Failed to connect to master MongoDB: %v", err)
+        }
+        masterMongo = client
+        log.Println("✅ Connected to master MongoDB")
+    }
+
+    r := gin.Default()
+
+    // 11. Global Middleware (OTel, Rate Limit & CORS)
+    if appConfig.GoDuck.Telemetry.OTel.Enabled {
+        r.Use(otelgin.Middleware(appConfig.GoDuck.Name))
+    }
+    r.Use(middleware.RateLimitMiddleware(appConfig))
+    r.Use(middleware.CORSMiddleware(appConfig))
+
+    // Health Check
+    r.GET("/health", func(c *gin.Context) {
+        c.JSON(http.StatusOK, gin.H{"status": "UP"})
+    })
+
+    // Swagger Docs & UI
+    r.StaticFile("/swagger.json", "./docs/swagger.json")
+    r.GET("/swagger", func(c *gin.Context) {
+        c.Data(http.StatusOK, "text/html; charset=utf-8", []byte(`<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <title>Swagger UI</title>
+  <link rel="stylesheet" type="text/css" href="https://cdnjs.cloudflare.com/ajax/libs/swagger-ui/4.15.5/swagger-ui.css" />
+  <style>
+    html { box-sizing: border-box; overflow: -moz-scrollbars-vertical; overflow-y: scroll; }
+    *, *:before, *:after { box-sizing: inherit; }
+    body { margin:0; background: #fafafa; }
+  </style>
+</head>
+<body>
+  <div id="swagger-ui"></div>
+  <script src="https://cdnjs.cloudflare.com/ajax/libs/swagger-ui/4.15.5/swagger-ui-bundle.js"></script>
+  <script src="https://cdnjs.cloudflare.com/ajax/libs/swagger-ui/4.15.5/swagger-ui-standalone-preset.js"></script>
+  <script>
+    window.onload = function() {
+      const ui = SwaggerUIBundle({
+        url: "/swagger.json",
+        dom_id: '#swagger-ui',
+        deepLinking: true,
+        presets: [
+          SwaggerUIBundle.presets.apis,
+          SwaggerUIStandalonePreset
+        ],
+        layout: "StandaloneLayout"
+      });
+      window.ui = ui;
+    };
+  </script>
+</body>
+</html>`))
+    })
+
+    // Management APIs (Run-time DB onboarding)
+    mgmt := r.Group("/management")
+    mgmt.Use(middleware.JWTMiddleware())
+    mgmt.Use(middleware.SuperAdminRoleMiddleware(appConfig))
+    {
+        mgmt.POST("/tenant/assign", management.CreateDatabaseAndMigrate(masterDB))
+    }
+
+    // Open Application APIs (No Auth)
+    openApi := r.Group("/open/api")
+    if appConfig.GoDuck.Multitenancy.Enabled {
+        openApi.Use(middleware.PublicTenantMiddleware(masterDB, appConfig))
+    }
+    {
+        {{#each entities}}
+        // {{name}} Public Routes
+        {{#if (isAnyOperationOpen name ../openEntities)}}
+        {{toLowerCase name}}OpenCtrl := controllers.{{capitalize name}}Controller{
+            {{#if isDocument}}MongoClient: masterMongo,{{else}}DB: masterDB,{{/if}}
+            Config: appConfig,
+        }
+        {{#if (isOpen name ../openEntities 'create')}}
+        openApi.POST("/{{toLowerCase name}}s", {{toLowerCase name}}OpenCtrl.Create)
+        openApi.POST("/{{toLowerCase name}}s/bulk", {{toLowerCase name}}OpenCtrl.BulkCreate)
+        {{/if}}
+        {{#if (isOpen name ../openEntities 'read')}}
+        openApi.GET("/{{toLowerCase name}}s", {{toLowerCase name}}OpenCtrl.GetAll)
+        openApi.GET("/{{toLowerCase name}}s/:id", {{toLowerCase name}}OpenCtrl.GetByID)
+        {{/if}}
+        {{#if (isOpen name ../openEntities 'update')}}
+        openApi.PUT("/{{toLowerCase name}}s/:id", {{toLowerCase name}}OpenCtrl.Update)
+        openApi.PUT("/{{toLowerCase name}}s/bulk", {{toLowerCase name}}OpenCtrl.BulkUpdate)
+        {{/if}}
+        {{#if (isOpen name ../openEntities 'delete')}}
+        openApi.DELETE("/{{toLowerCase name}}s/:id", {{toLowerCase name}}OpenCtrl.Delete)
+        {{/if}}
+        {{#if (isOpen name ../openEntities 'update')}}
+        openApi.PATCH("/{{toLowerCase name}}s/:id", {{toLowerCase name}}OpenCtrl.Patch)
+        openApi.PATCH("/{{toLowerCase name}}s/bulk", {{toLowerCase name}}OpenCtrl.BulkPatch)
+        {{/if}}
+        {{/if}}
+        {{/each}}
+    }
+
+    // Secured Application APIs
+    api := r.Group("/api")
+    api.Use(middleware.JWTMiddleware())
+    api.Use(middleware.TenantMiddleware(masterDB, appConfig))
+    api.Use(middleware.AuditMiddleware(masterDB))
+    api.Use(middleware.MeteringMiddleware(masterDB))
+    {
+        // Silo Portfolio
+        api.GET("/silos/me", management.GetMySilos(masterDB))
+
+        // Business Reporting APIs
+        meteringCtrl := controllers.MeteringController{DB: masterDB}
+        api.GET("/metering/usage", meteringCtrl.GetUsage)
+        api.GET("/metering/history", meteringCtrl.GetHistory)
+
+        // --- Infrastructure/Confidential Layer ---
+        admin := r.Group("/api/admin")
+        admin.Use(middleware.JWTMiddleware())
+        admin.Use(middleware.SuperAdminRoleMiddleware(appConfig))
+        {
+            auditCtrl := controllers.AuditController{DB: masterDB}
+            admin.GET("/audit", auditCtrl.GetLogs)
+            admin.POST("/metering/limit", meteringCtrl.SetLimit)
+        }
+
+        // Search
+        searchCtrl := controllers.SearchController{DB: masterDB}
+        api.GET("/rpc/:table", searchCtrl.GenericSearch)
+
+        // Elasticsearch Global Search
+        if appConfig.GoDuck.Elasticsearch.Enabled {
+            esCtrl := controllers.NewESSearchController(appConfig)
+            api.GET("/search/:entity", esCtrl.GlobalSearch)
+        }
+
+        // Global Storage Endpoints
+        storageCtrl := controllers.StorageController{}
+        api.POST("/storage/upload", storageCtrl.Upload)
+        
+        // Exact Retrieval (Requires ?provider=)
+        api.GET("/storage/download/*key", storageCtrl.Download)
+        
+        // Distributed Cross-Scan Retrieval (No provider required)
+        api.GET("/storage/scan/*key", storageCtrl.CrossScanDownload)
+
+        {{#each entities}}
+        // {{name}} Routes
+        {{toLowerCase name}}Ctrl := controllers.{{capitalize name}}Controller{
+            {{#if isDocument}}MongoClient: masterMongo,{{else}}DB: masterDB,{{/if}}
+            Config: appConfig,
+        }
+        api.POST("/{{toLowerCase name}}s", {{toLowerCase name}}Ctrl.Create)
+        api.POST("/{{toLowerCase name}}s/bulk", {{toLowerCase name}}Ctrl.BulkCreate)
+        api.GET("/{{toLowerCase name}}s", {{toLowerCase name}}Ctrl.GetAll)
+        api.GET("/{{toLowerCase name}}s/:id", {{toLowerCase name}}Ctrl.GetByID)
+        api.PUT("/{{toLowerCase name}}s/:id", {{toLowerCase name}}Ctrl.Update)
+        api.PUT("/{{toLowerCase name}}s/bulk", {{toLowerCase name}}Ctrl.BulkUpdate)
+        api.PATCH("/{{toLowerCase name}}s/:id", {{toLowerCase name}}Ctrl.Patch)
+        api.PATCH("/{{toLowerCase name}}s/bulk", {{toLowerCase name}}Ctrl.BulkPatch)
+        api.DELETE("/{{toLowerCase name}}s/:id", {{toLowerCase name}}Ctrl.Delete)
+        {{/each}}
+    }
+
+    // GraphQL
+    r.POST("/graphql", middleware.JWTMiddleware(), middleware.TenantMiddleware(masterDB, appConfig), func(c *gin.Context) {
+        graph.HandleGraphQLRequest(c)
+    })
+
+    // WebSockets
+    wsDispatcher := ws.NewDispatcher(masterDB)
+    r.GET("/ws", middleware.JWTMiddleware(), middleware.TenantMiddleware(masterDB, appConfig), wsDispatcher.HandleConnection)
+
+    return r
+}