fix: stabilization batch 5 — grpc scaffold, middleware, interfaces, elasticsearch, config port, swagger

[sazardev]

Stabilization batch 5 — follow-up fixes from the batch-4 audit

Addresses the items documented (but not fixed) in #60. Each fix was reproduced against generated projects and verified with go build/go vet. The full multi-DB matrix (init → feature --validation --middleware-types … → handler --type grpc) now builds + vets clean on all six databases — sqlite, postgres, mysql, postgres-json, sqlserver, mongodb (6/6). go test ./cmd/... is green.

Fixed

1. gRPC scaffold broke the whole module. The //go:build proto server imported a pb package that was never generated; go mod tidy/go vet evaluate build-tagged files and attempted a remote module lookup, failing for the entire module. Now generate a build-tagged placeholder pb package so the import resolves locally — the default build still excludes it, and -tags proto compiles the scaffold against the stubs (the placeholder is deleted once protoc produces the real *.pb.go). Verified: go mod tidy, default go build/go vet, and go build -tags proto all succeed.
2. feature --middleware-types left an orphaned package. routes.go was generated before the middleware package existed, so it emitted inline cors/logging duplicates and never imported the package. Reordered so the middleware package is generated first; routes.go now imports it and wires middleware.CORS/middleware.Logging.
3. interfaces --handler/--all didn't compile (undefined: User). The gRPC request/response interfaces referenced a bare *User; they now return *domain.<Entity> and the package is imported. Verified the interfaces package builds.
4. Elasticsearch reads always returned empty. FindAll/FullTextSearch ignored (or discarded) the response body and returned an untouched empty slice, and FindByID decoded the raw GET envelope instead of _source. Now parse hits[]._source / _source into the domain types.
5. .goca.yaml always recorded database.port: 5432. Now records the conventional port for the chosen --database (mysql 3306, mongodb 27017, sqlserver 1433, elasticsearch 9200, sqlite/dynamodb 0).
6. messages --dry-run created empty directories. Removed the unconditional os.MkdirAll; the file writers create parent dirs only when a file is actually written.
7. repository --implementation was a no-op (it always regenerated the interface too, identical to the default). It now emits only the implementation, mirroring --interface-only; feature updated to request both layers explicitly so its DI wiring still compiles.
8. Swagger @Success annotations referenced non-existent types (swag init would fail): Get used usecase.Get<Entity>Output (never generated → now domain.<Entity>) and List used usecase.List<Entity>sOutput (→ the real usecase.List<Entity>Output).

Investigated — not bugs

• Exit codes (middleware/config validate/config init/template show/doctor): all already return non-zero on error on current master (fixed in an earlier batch / stale audit).
• analyze --output json: already emits valid JSON on stdout (human output goes to stderr).
• Dead flags --validation/--dto-validation: not dead — they toggle generation; the audit saw identical output only because the config defaults them on (config-driven default, same as --swagger).

Remaining (genuinely larger — left for dedicated work)

• init --template (minimal/rest-api/microservice/monolith/enterprise) still produces byte-identical Go code; only .goca.yaml differs. Delivering distinct scaffolds (e.g. microservice gRPC, monolith web) is a feature, not a fix.
• Custom templates (goca template init + edit) are still not consumed by generation — needs the template engine wired into the generators.
• interfaces --repository/--usecase produce standalone TDD interfaces that drift from the real generated implementations.
• test-integration --database doesn't affect helpers.go (always imports all drivers).
• --cache as the first feature is still orphaned (the new DI container is created with cache disabled) — needs full redisClient scaffolding in NewContainer + main.go. (Batch 4 already made the incremental path compile-safe.)
• Wide wiki/ doc drift (Gin vs gorilla/mux, default DB, JWT version, file layout).

Note: pre-existing test failures (not from this PR)

internal/testing/tests (TestEntityCommand, TestFeatureCommand, TestConfigCodeGeneration/DatabaseTypeMySQL) fail identically on master — stale hardcoded content expectations (e.g. expecting Client_id) that drifted from the generators across earlier batches. They are unrelated to this PR; worth a dedicated cleanup of the integration suite's expectations.

🤖 Generated with Claude Code