fix: 32 bugs across server, CLI, generators, tests, and proto

Server bugs:
- Fix race condition: register callback channel before stream.Send
- Promote voidDetector JNI local ref to global ref
- Enable SQLite WAL mode and set MaxOpenConns(1)
- Add nil checks for systemMain/getSystemContext return values
- Check NewStringUTF errors in launchPermissionDialog
- Use errors.Is for io.EOF comparison in proxy_stream
- Add all primitive types to NewPrimitiveArray (was byte-only)
- Use INSERT OR REPLACE for client re-registration

CLI bugs:
- Fix --insecure flag description (TLS skip-verify, not plaintext)
- Add default transport credentials when no flags given
- Remove InsecureSkipVerify override when mTLS certs provided
- Fix readFileViaJNI to loop reads instead of single truncating call

Generator bugs:
- Set ResultExpr for no-error object-returning methods
- Add handle store logic for no-error object returns in template
- Fix hardcoded jni import path to use JniModule variable
- Fix collision rename: check for secondary collisions
- Fix TrimRight→TrimSuffix for trailing underscore removal
- Fix byte result type: uint32 cast to match proto field
- Add int param/result type casts (int↔int32)
- Remove unused cc field from generated client structs

Test bugs:
- Fix capture_test.go wrong CLI path (battery-manager→manager)
- Fix 3 slice aliasing bugs (list_commands, setup_test, scenarios_test)
- Fix TestMain os.Exit skipping defer cleanup
- Fix %v→%w error wrapping in setup_test
- Fix is-same test misleading failure message
- Add test for uint16 client result expr
- Add test for no-error object return server method

Proto bugs:
- Fix handlestore.proto go_package (jni→jni-proxy module)
- Fix loop variable shadowing in protogen collision rename
- Fix ReturnVoid handling in protoTypeFromReturn
- Check scanner.Err() in protoscan after scanning

Author: xaionaro@dx.center

cmd/jnicli/camera_record.go

@@ -691,13 +691,23 @@ func readFileViaJNI(ctx context.Context, j *jniCaller, path string) ([]byte, err
 	}
 	buf := resp.GetArrayHandle()
 
-	// fis.read(buf)
-	readMid, err := j.getMethodID(ctx, fisCls, "read", "([B)I")
+	// fis.read(buf, offset, length) in a loop until all bytes are read.
+	readMid, err := j.getMethodID(ctx, fisCls, "read", "([BII)I")
 	if err != nil {
 		return nil, fmt.Errorf("getting read method: %w", err)
 	}
-	if _, err := j.callIntMethod(ctx, fis, readMid, objVal(buf)); err != nil {
-		return nil, fmt.Errorf("reading file: %w", err)
+	var offset int32
+	remaining := size
+	for remaining > 0 {
+		n, err := j.callIntMethod(ctx, fis, readMid, objVal(buf), intVal(offset), intVal(remaining))
+		if err != nil {
+			return nil, fmt.Errorf("reading file at offset %d: %w", offset, err)
+		}
+		if n == -1 {
+			break // EOF
+		}
+		offset += n
+		remaining -= n
 	}
 
 	// fis.close()

cmd/jnicli/list_commands.go

@@ -17,7 +17,9 @@ var listCommandsCmd = &cobra.Command{
 }
 
 func printLeafCommands(cmd *cobra.Command, path []string) {
-	current := append(path, cmd.Use)
+	current := make([]string, len(path)+1)
+	copy(current, path)
+	current[len(path)] = cmd.Use
 
 	if !cmd.HasSubCommands() && cmd.RunE != nil {
 		fmt.Println(strings.Join(current, " "))

cmd/jnicli/root.go

@@ -11,6 +11,7 @@ import (
 	"github.com/spf13/cobra"
 	"google.golang.org/grpc"
 	"google.golang.org/grpc/credentials"
+	"google.golang.org/grpc/credentials/insecure"
 )
 
 const maxGRPCRecvMsgSize = 128 * 1024 * 1024
@@ -56,6 +57,9 @@ var rootCmd = &cobra.Command{
 			// CA (jniservice generates its own CA). This is NOT plaintext.
 			opts = append(opts, grpc.WithTransportCredentials(credentials.NewTLS(
 				&tls.Config{InsecureSkipVerify: true})))
+		default:
+			// No TLS configuration provided — use plaintext.
+			opts = append(opts, grpc.WithTransportCredentials(insecure.NewCredentials()))
 		}
 
 		conn, err := grpc.NewClient(flagAddr, opts...)
@@ -75,7 +79,7 @@ var rootCmd = &cobra.Command{
 
 func init() {
 	rootCmd.PersistentFlags().StringVarP(&flagAddr, "addr", "a", "localhost:50051", "gRPC server address")
-	rootCmd.PersistentFlags().BoolVar(&flagInsecure, "insecure", false, "use insecure connection (no TLS)")
+	rootCmd.PersistentFlags().BoolVar(&flagInsecure, "insecure", false, "skip TLS server certificate verification")
 	rootCmd.PersistentFlags().DurationVar(&flagTimeout, "timeout", 10*time.Second, "request timeout")
 	rootCmd.PersistentFlags().StringVarP(&flagFormat, "format", "f", "json", "output format (json|text)")
 	rootCmd.PersistentFlags().StringVar(&flagCert, "cert", "", "path to client certificate PEM file (for mTLS)")
@@ -110,9 +114,5 @@ func buildMTLSCredentials() (credentials.TransportCredentials, error) {
 		tlsCfg.RootCAs = caPool
 	}
 
-	if flagInsecure {
-		tlsCfg.InsecureSkipVerify = true
-	}
-
 	return credentials.NewTLS(tlsCfg), nil
 }

cmd/jniservice/server.go

@@ -427,6 +427,9 @@ func initAndroidContext(vm *jni.VM, handles *handlestore.HandleStore) int64 {
 			if err != nil {
 				return fmt.Errorf("systemMain: %w", err)
 			}
+			if atObj == nil || atObj.Ref() == 0 {
+				return fmt.Errorf("systemMain returned null")
+			}
 
 			getCtxMID, err := env.GetMethodID(atCls, "getSystemContext", "()Landroid/app/ContextImpl;")
 			if err != nil {
@@ -436,6 +439,9 @@ func initAndroidContext(vm *jni.VM, handles *handlestore.HandleStore) int64 {
 			if err != nil {
 				return fmt.Errorf("getSystemContext: %w", err)
 			}
+			if ctxObj == nil || ctxObj.Ref() == 0 {
+				return fmt.Errorf("getSystemContext returned null")
+			}
 			contextHandle = handles.Put(env, ctxObj)
 		}
 
@@ -529,7 +535,10 @@ func launchPermissionDialog(
 	if err != nil {
 		return err
 	}
-	reqIDKey, _ := env.NewStringUTF("request_id")
+	reqIDKey, err := env.NewStringUTF("request_id")
+	if err != nil {
+		return fmt.Errorf("creating request_id key string: %w", err)
+	}
 	// Intentionally ignoring error: putExtra is an Intent builder method
 	// where failure is non-recoverable in the dialog launch flow.
 	_, _ = env.CallObjectMethod(intent, putLongMID, jni.ObjectValue(&reqIDKey.Object), jni.LongValue(requestID))
@@ -540,23 +549,35 @@ func launchPermissionDialog(
 	if err != nil {
 		return err
 	}
-	clientIDKey, _ := env.NewStringUTF("client_id")
-	clientIDVal, _ := env.NewStringUTF(clientID)
+	clientIDKey, err := env.NewStringUTF("client_id")
+	if err != nil {
+		return fmt.Errorf("creating client_id key string: %w", err)
+	}
+	clientIDVal, err := env.NewStringUTF(clientID)
+	if err != nil {
+		return fmt.Errorf("creating client_id value string: %w", err)
+	}
 	// Intentionally ignoring error: putExtra is an Intent builder method
 	// where failure is non-recoverable in the dialog launch flow.
 	_, _ = env.CallObjectMethod(intent, putStringMID,
 		jni.ObjectValue(&clientIDKey.Object), jni.ObjectValue(&clientIDVal.Object))
 
 	// intent.putExtra("methods", joinedMethods)
-	methodsKey, _ := env.NewStringUTF("methods")
+	methodsKey, err := env.NewStringUTF("methods")
+	if err != nil {
+		return fmt.Errorf("creating methods key string: %w", err)
+	}
 	joinedMethods := ""
 	for i, m := range methods {
 		if i > 0 {
 			joinedMethods += ","
 		}
 		joinedMethods += m
 	}
-	methodsVal, _ := env.NewStringUTF(joinedMethods)
+	methodsVal, err := env.NewStringUTF(joinedMethods)
+	if err != nil {
+		return fmt.Errorf("creating methods value string: %w", err)
+	}
 	// Intentionally ignoring error: putExtra is an Intent builder method
 	// where failure is non-recoverable in the dialog launch flow.
 	_, _ = env.CallObjectMethod(intent, putStringMID,