feat: complete contract-driven business development and MySQL integration

cmd/go-omni/apigen/templates.go

@@ -28,14 +28,10 @@ func run(ctx context.Context,path string)(runErr error){
  cfg,err:=config.Load(path);if err!=nil{return err}
  logger,err:=logx.New(cfg.Server.Log);if err!=nil{return err}
  defer func(){runErr=errors.Join(runErr,logger.Close())}()
- logx.SetDefault(logger)
  deps,err:=svc.New(ctx,logger,cfg);if err!=nil{return err}
  // RunContext drains HTTP requests before returning. This scope owns dependencies
  // and closes them exactly once, before closing the borrowed logger.
- defer func(){
-  runErr=errors.Join(runErr,deps.Close())
-  if cause:=deps.Lifecycle.Err();cause!=nil && !errors.Is(runErr,cause){runErr=errors.Join(runErr,cause)}
- }()
+ defer func(){runErr=deps.Finish(runErr)}()
  app,err:=handler.NewApp(deps);if err!=nil{return err}
  defer func(){runErr=errors.Join(runErr,app.Close())}()
  logger.InfoContext(ctx,"service.starting","address",app.Config().Address)
@@ -111,6 +107,16 @@ and produce REVIEW notices. This source scan does not execute project code or
 replace go test ./... . Snapshot-based REVIEW notices describe changes since the
 last successful generation; they do not persist as an acknowledgement checklist.
 
+## Contract tools
+
+api format [--check] preserves comments and normalizes indentation. api upgrade
+previews changed infrastructure; --apply only replaces recognized prior seeds.
+Use @request policy overrides and @app(request: {...}) for query/JSON strictness.
+Explicitly exported api/omni.errors.json documents the Go-owned error catalog;
+the CLI never executes project Go. omni.imports.json permits named shared roots;
+workspace format/generate/check processes explicitly listed independent services.
+Full reference: https://git.yuntuo.hk/k2safe/go-omni/src/branch/main/DEVELOPMENT.md
+
 ## Layout
 
 `+"```text"+`
@@ -119,7 +125,8 @@ main.go                      # GENERATED startup, lifecycle and route registrati
 etc/config.yaml              # lowerCamelCase configuration
 internal/config/             # defaults -> file -> environment
 internal/svc/                # dependency initialization and cleanup
-internal/types/typesGen.go    # generated request/response types
+internal/types/*Gen.go        # DTOs split by source API, one types package
+internal/svc/runtimeGen.go    # GENERATED lifecycle and infrastructure startup
 internal/apierrors/errorsGen.go # generated fresh error constructors, when declared
 internal/handler/<group>/     # generated binding and Logic adapters
 internal/logic/<group>/      # developer-owned business operations
@@ -138,7 +145,7 @@ use the same contract. 404/405 and ordinary App routes use the declared App defa
 No template is selected by declaration/import order. Without @app, existing framework
 response defaults apply. An explicit API App default takes precedence over response
 options in svc, keeping generated routes and OpenAPI consistent.
-Handlers reject nil successful responses. Body DTOs use application/json and have a 1 MiB limit by default.
+Object responses reject nil; []DTO maps nil to []; *DTO permits null; returns(null) is a successful null value. No returns means 204. Body DTOs use application/json and have a 1 MiB limit by default.
 Use @body(maxBytes: ...) for route limits. @body(mode: raw|multipart; maxBytes: ...)
 adds a *httpx.Body argument to Logic, without handwritten handlers. Raw is the exact
 limited request stream; Parts supports sequential multipart reading with no temp files.
@@ -146,11 +153,10 @@ limited request stream; Parts supports sequential multipart reading with no temp
 Logic result of *httpx.Stream; the handler closes Content and streams it unwrapped.
 Signature verification and storage policy belong to Logic/middleware. A consumed
 request stream cannot be reread automatically; use one reader owner or explicitly
-bounded buffering. Stream reads respect configured server timeouts. Multipart parts
-are not DTO form fields: form tags remain URL query parameters. The optional manual
+bounded buffering. Stream reads respect configured server timeouts. Declare multipart/multipartJSON/file DTO fields for validated uploads; without those fields the existing streaming Body is passed. form tags remain URL query parameters. The optional manual
 handler/custom binder hooks are preserved, and are needed only for custom protocols.
 
-Fields require exactly one source tag: json, path, form (URL query only), header.
+Fields require one source tag: json, path, form (URL query), header, multipart, multipartJSON or file. Multipart fields select full automatic binding before Logic; File/[]File are request-scoped disk-backed uploads. Use File.Open to stream them; generated cleanup owns their lifetime.
 All are required by presence unless optional, omitempty or default is specified.
 Zero and false are valid present values; binding:"required" rejects scalar zero.
 Use *T with optional when business logic needs to distinguish missing from zero.
@@ -171,7 +177,7 @@ The selected auth runs first; @auth none removes inherited declarative auth.
 Validation policy remains in the middleware implementation. Public messages must
 not contain secrets; error causes may be included in server logs.
 
-svc.New receives the loaded Config and borrowed Logger. Add dependencies there,
+Generated svc.New receives Config and a borrowed Logger. Add dependencies in svc.Init,
 then immediately register each cleanup with OnClose. A later initialization failure
 runs registered cleanups in reverse order. Close is idempotent. GlobalMiddleware
 provides global hooks; Middlewares supplies named API hooks. AppOptions is evaluated
@@ -208,7 +214,7 @@ func infrastructureREADME(o Options) string {
 
 Selected database: %s; storage: %s; logging: %s/%s.
 MySQL uses database/sql through deps.DB, including InTx and a readiness probe.
-Set GO_OMNI_DB_DSN; pool settings live in etc/config.yaml and GO_OMNI_DB_*.
+Use structured database/mysql configuration and GO_OMNI_DB_PASSWORD. Other connection/pool/TLS settings live in etc/config.yaml and GO_OMNI_DB_*.
 No tables are invented or migrated automatically from request/response DTOs.
 The none/memory selection opens no database; implement repositories per business.