fix(k1): harden BLE discovery and bridge recovery

tests/test_wifi_provisioning.py

@@ -3,12 +3,14 @@ from types import SimpleNamespace
 from typing import Any
 
 import pytest
+from bleak.exc import BleakDeviceNotFoundError
 
 import k1link.device_plugins.xgrids_k1.ble.wifi_provisioning as wifi_module
 from k1link.device_plugins.xgrids_k1.ble.wifi_provisioning import (
     FRAME_LENGTH,
     build_wifi_provisioning_frame,
     parse_wifi_status,
+    provision_wifi_once,
     read_wifi_status_once,
 )
 
@@ -185,3 +187,41 @@ def test_read_wifi_status_recovery_rediscover_ignores_retained_handle(
     )
 
     assert result["status"]["ipv4"] == "10.255.254.77"
+
+
+def test_provisioning_write_requires_fresh_rediscovery_before_connecting(
+    monkeypatch: pytest.MonkeyPatch,
+) -> None:
+    stale_handle = object()
+    rediscovery_calls: list[tuple[str, float]] = []
+    client_calls: list[object] = []
+
+    async def missing_device(address: str, *, timeout: float) -> None:
+        rediscovery_calls.append((address, timeout))
+        return None
+
+    class ForbiddenClient:
+        def __init__(self, device: object, **_kwargs: object) -> None:
+            client_calls.append(device)
+            raise AssertionError("a failed fresh discovery must stop before the BLE write session")
+
+    monkeypatch.setattr(wifi_module, "discovered_device", lambda _uuid: stale_handle)
+    monkeypatch.setattr(
+        wifi_module.BleakScanner,
+        "find_device_by_address",
+        missing_device,
+    )
+    monkeypatch.setattr(wifi_module, "BleakClient", ForbiddenClient)
+
+    with pytest.raises(BleakDeviceNotFoundError):
+        asyncio.run(
+            provision_wifi_once(
+                "synthetic-corebluetooth-uuid",
+                "LabNet",
+                "synthetic-password",
+                timeout_seconds=1.0,
+            )
+        )
+
+    assert rediscovery_calls == [("synthetic-corebluetooth-uuid", 1.0)]
+    assert client_calls == []