End-to-end OTA verified on dc-0002 after resolving server-side schema
mismatch (server now emits update/size/sig_b64 alongside existing fields).
Firmware changes:
- Bump FW_VERSION 1.0.0 -> 1.0.1
- Replace log_i/w/e with Serial.printf in ota_updater so output appears
regardless of CORE_DEBUG_LEVEL (the prior macros were silent in prod)
- Log partition labels/offsets, per-128KB progress, computed sha256,
HTTP errors with body, esp_ota_* errors by name, Content-Length vs
expected size
- Check esp_ota_write return value (previously ignored -- silent
partition corruption on write failure) and abort cleanly on error
- Reject update if expected_size > target partition size
- Serial.flush() + 500ms delay before esp_restart() so the final log
line escapes the UART
- Boot-time: log running partition label/offset/state + FW_VERSION,
and call esp_ota_mark_app_valid_cancel_rollback() on PENDING_VERIFY
to prevent silent rollback after a successful OTA
Docs:
- Rewrite docs/ota-deployment-status.md to reflect resolved state,
document the schema fix and the .bin/.sig co-deploy invariant
