Fix Wi-Fi credential save with plain NVS (encryption off).

Initialise NVS before integration startup, recover from encrypted-partition mismatches without re-enabling encryption, and improve provisioning logs and POST body handling.

Co-authored-by: Cursor <cursoragent@cursor.com>

Software/components/net/src/NetBootstrap.cpp

@@ -47,7 +47,7 @@ constexpr char kTag[] = "NetBootstrap";
 {
     const auto nvsResult = secure_store::initEncryptedStorage();
     if (!nvsResult) {
-        ESP_LOGE(kTag, "encrypted NVS init failed");
+        ESP_LOGE(kTag, "NVS init failed");
         return std::unexpected(NetError::NvsInitFailed);
     }
 
@@ -151,16 +151,24 @@ startStaMode(core::ISecureStore& store, tuner::TunerService& tuner,
 {
     auto credsResult = store.loadWifiCredentials();
     if (!credsResult) {
-        ESP_LOGE(kTag, "stored credentials missing");
+        ESP_LOGE(kTag, "stored credentials missing or unreadable");
         return std::unexpected(NetError::CredentialsNotFound);
     }
 
+    const auto& creds = credsResult.value();
+    ESP_LOGI(kTag, "joining SSID %.*s",
+             static_cast<int>(creds.ssid().value().size()),
+             creds.ssid().value().data());
+
     esp_netif_create_default_wifi_sta();
 
     StaClient sta;
     if (auto staResult =
-            sta.connect(credsResult.value(), deviceIdentity.hostname());
+            sta.connect(creds, deviceIdentity.hostname());
         !staResult) {
+        ESP_LOGW(kTag, "STA connect failed for SSID %.*s — credentials kept in NVS",
+                 static_cast<int>(creds.ssid().value().size()),
+                 creds.ssid().value().data());
         return std::unexpected(staResult.error());
     }
 
@@ -207,7 +215,11 @@ NetBootstrap::start(core::ISecureStore& store, tuner::TunerService& tuner,
         if (staResult) {
             return staResult;
         }
-        ESP_LOGW(kTag, "STA join failed — falling back to setup SoftAP");
+        ESP_LOGW(kTag,
+                 "STA join failed — Wi-Fi credentials are stored; check "
+                 "SSID/password or signal (falling back to setup SoftAP)");
+    } else {
+        ESP_LOGI(kTag, "no stored Wi-Fi credentials — entering setup SoftAP");
     }
 
     return startSetupMode(store, tuner, audio, bluetooth, stations, integration,

Software/components/net/src/SetupWebServer.cpp

@@ -648,12 +648,25 @@ esp_err_t wifiPostHandler(httpd_req_t* req)
     }
 
     std::array<char, 512> body{};
+    const int contentLen = req->content_len;
+    if (contentLen <= 0 || contentLen >= static_cast<int>(body.size())) {
+        const std::string json =
+            core::serializeWifiProvisionErrorJson("invalid_json");
+        httpd_resp_set_status(req, "400 Bad Request");
+        httpd_resp_set_type(req, "application/json");
+        return httpd_resp_send(req, json.c_str(), json.size());
+    }
+
     int received = 0;
-    while (received < static_cast<int>(body.size()) - 1) {
+    while (received < contentLen) {
         const int chunk = httpd_req_recv(req, body.data() + received,
-                                         body.size() - 1 - received);
+                                         contentLen - received);
         if (chunk <= 0) {
-            break;
+            const std::string json =
+                core::serializeWifiProvisionErrorJson("invalid_json");
+            httpd_resp_set_status(req, "400 Bad Request");
+            httpd_resp_set_type(req, "application/json");
+            return httpd_resp_send(req, json.c_str(), json.size());
         }
         received += chunk;
     }