v2.5.132 – v2.5.145 — 2026-07-18¶

fix(provision): build agent-install URL from PANEL_BASE_URL, drop sudo, tolerate self-signed
fix(installer): recover from broken apt list state (empty Debian index)
fix(install): avoid conflicting Sury apt source (Signed-By clash)
fix(install): heal broken apt index in the agent-install script too
fix(install): agent.env ordering — persist PDNS_API_KEY at creation, not before
fix(provision): auto-pin agent TLS fingerprint after the node install completes
fix(install): atomic agent-binary swap (avoid "Text file busy" on re-install)
fix(servers): TOFU-pin agent TLS fingerprint on first sight in the server list
fix(install): agent script drops legacy netcell apt source (Signed-By clash)
i18n(install): English CLI output for both installers
fix(agent-pool): rebuild cached client when TLS fingerprint/token/url changes
fix(servers): default new-node roles to "web", not "standalone"
feat(mail): gateway is always the master; push mail SNI to gateway + storage node
fix(servers): base reachability on an authenticated call, not public /health
fix(db): only require redirect_type 301/302 for actual redirect domains