agent
Derived source for the pinned build. The shipped bundle itself is not in the tree; npm run fetch downloads it to artifacts/agent.original.js and checks it against pin.json.
Derived source for the pinned build. The shipped bundle itself is not in the tree; npm run fetch
downloads it to artifacts/agent.original.js and checks it against pin.json.
| file | what it is |
|---|---|
agent.clean.js | the deobfuscated agent, 9,091 lines, every binding renamed |
agent.clean.keepnames.js | the same passes with the original minified identifiers kept |
worker.clean.js | the Web Worker the agent ships as a Blob string, 134 lines |
vaults.json | all 32 decrypted string tables, with the role names the detector matched |
crc32-map.json | every CRC32 site and the property name it resolves to |
pin.json | the target: URL, hash, size, fetch date, plus the hash of each derived file |
original.headers.txt | the response headers the bundle was served with |
agent.clean.js is runnable. It is regenerated by npm run clean and checked by npm run verify,
which decodes every string table out of it and diffs against the original. The hashes under
pin.json's derived key are written by verify on a pass, so a file that does not match its hash
was not the one the gate accepted.
Use agent.clean.keepnames.js when cross-referencing a stack trace or a breakpoint against the
shipped file: the line numbers differ but the identifiers are the ones the browser shows.