akari-video 0.1.76 → 0.1.77

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "akari-video",
-  "version": "0.1.76",
+  "version": "0.1.77",
   "description": "AKARI Video launcher CLI — start an AI-edited video project from any directory: scaffold, connection check, then hand over to Claude Code (or opencode). AKARI Video を opencode や Claude Code で、どのディレクトリからでも始めるための `akari` ランチャー CLI。接続確認（doctor）→ 未セットアップならプロジェクト雛形を作成 → AI エージェントを起動する。外部 npm 依存ゼロ（Node.js 組み込みモジュールのみ）。",
   "type": "module",
   "bin": {

package/src/service-urls.cjs

@@ -0,0 +1,38 @@
+// Shared by the launcher, resolver and shell. Keep this module browser-safe;
+// CommonJS also lets the shell's compiled CommonJS modules load it in Node.
+const AKARI_HOST = 'akari.video';
+const LEGACY_AKARI_HOST = 'akari-oss.app';
+const DEFAULT_STORE_API = `https://${AKARI_HOST}`;
+const DEFAULT_STORE_BASE_URL = `${DEFAULT_STORE_API}/api/store`;
+const DEFAULT_STORE_LAB_BASE_URL = `${DEFAULT_STORE_API}/lab`;
+const DEFAULT_ASSETS_BASE_URL = `${DEFAULT_STORE_API}/assets/`;
+const DEFAULT_CATALOG_URL = `${DEFAULT_ASSETS_BASE_URL}catalog.json`;
+
+/** Migrate only the former official origin; preserve custom servers and paths. */
+function normalizeAkariUrl(value) {
+  try {
+    const url = new URL(value);
+    if ((url.protocol === 'https:' || url.protocol === 'http:') && url.hostname === LEGACY_AKARI_HOST) {
+      url.protocol = 'https:';
+      url.hostname = AKARI_HOST;
+      return url.href;
+    }
+  } catch { /* Local paths and malformed values keep their existing handling. */ }
+  return value;
+}
+
+/** Store credentials contain .../api/store; purchase pages live under .../lab. */
+function deriveStoreLabBaseUrl(storeApiUrl) {
+  if (!storeApiUrl) return DEFAULT_STORE_LAB_BASE_URL;
+  return normalizeAkariUrl(storeApiUrl).replace(/\/api\/store\/?$/, '/lab');
+}
+
+exports.AKARI_HOST = AKARI_HOST;
+exports.LEGACY_AKARI_HOST = LEGACY_AKARI_HOST;
+exports.DEFAULT_STORE_API = DEFAULT_STORE_API;
+exports.DEFAULT_STORE_BASE_URL = DEFAULT_STORE_BASE_URL;
+exports.DEFAULT_STORE_LAB_BASE_URL = DEFAULT_STORE_LAB_BASE_URL;
+exports.DEFAULT_ASSETS_BASE_URL = DEFAULT_ASSETS_BASE_URL;
+exports.DEFAULT_CATALOG_URL = DEFAULT_CATALOG_URL;
+exports.normalizeAkariUrl = normalizeAkariUrl;
+exports.deriveStoreLabBaseUrl = deriveStoreLabBaseUrl;

package/src/service-urls.d.cts

@@ -0,0 +1,9 @@
+export const AKARI_HOST: string;
+export const LEGACY_AKARI_HOST: string;
+export const DEFAULT_STORE_API: string;
+export const DEFAULT_STORE_BASE_URL: string;
+export const DEFAULT_STORE_LAB_BASE_URL: string;
+export const DEFAULT_ASSETS_BASE_URL: string;
+export const DEFAULT_CATALOG_URL: string;
+export function normalizeAkariUrl(value: string): string;
+export function deriveStoreLabBaseUrl(storeApiUrl: string | undefined): string;

package/src/store-device-connect.mjs

@@ -5,7 +5,8 @@ import {
 import { homedir, hostname } from 'node:os';
 import path from 'node:path';
 
-export const DEFAULT_STORE_BASE_URL = 'https://akari-oss.app/api/store';
+import { DEFAULT_STORE_BASE_URL, normalizeAkariUrl } from './service-urls.cjs';
+export { DEFAULT_STORE_BASE_URL } from './service-urls.cjs';
 const CREDENTIALS_FILE = 'store-credentials.json';
 
 export function resolveAkariHome(env = process.env) {
@@ -22,7 +23,7 @@ export function readCredentials(env = process.env) {
   try {
     const parsed = JSON.parse(readFileSync(file, 'utf8'));
     if (typeof parsed?.token !== 'string' || typeof parsed?.url !== 'string') return null;
-    return parsed;
+    return { ...parsed, url: normalizeAkariUrl(parsed.url) };
   } catch {
     return null;
   }
@@ -57,7 +58,7 @@ export function defaultOpenBrowser(url, platform = process.platform) {
 export async function fetchStoreEntitlements(fetchImpl, baseUrl, token) {
   let response;
   try {
-    response = await fetchImpl(`${baseUrl}/v1/entitlements`, {
+    response = await fetchImpl(`${normalizeAkariUrl(baseUrl).replace(/\/+$/, '')}/v1/entitlements`, {
       headers: { authorization: `Bearer ${token}` }
     });
   } catch (error) {
@@ -95,7 +96,7 @@ export async function validateAndSaveCredentials(
     return { status: 'error', error };
   }
   const credentials = {
-    url: baseUrl,
+    url: normalizeAkariUrl(baseUrl),
     token,
     email: data.email,
     connected_at: now().toISOString()
@@ -113,7 +114,7 @@ export async function startDeviceConnection({
   label = `AKARI Video (${hostname()})`,
   openBrowser
 } = {}) {
-  const normalizedBaseUrl = baseUrl.replace(/\/$/, '');
+  const normalizedBaseUrl = normalizeAkariUrl(baseUrl).replace(/\/+$/, '');
   let response;
   try {
     response = await fetchImpl(`${normalizedBaseUrl}/device/start`, {
@@ -159,7 +160,7 @@ export async function pollDeviceConnection({
 }) {
   let response;
   try {
-    response = await fetchImpl(`${baseUrl}/device/claim`, {
+    response = await fetchImpl(`${normalizeAkariUrl(baseUrl).replace(/\/+$/, '')}/device/claim`, {
       method: 'POST',
       headers: { 'content-type': 'application/json' },
       body: JSON.stringify({ deviceCode })

package/vendor/docs/contract-2026-07-13-asset-library.md

@@ -442,7 +442,7 @@ catalog に載せる素材は、取得元のライセンスが CC0 相当（帰
 出どころはカタログ掲載（lab）、明示 origin タグ（site / own）、AKARI 配布元の source.url（lab）、
 その他の source.url あり（site）、それ以外（own）の順で決める。
 AKARI 配布元は URL を解析し、ホスト github.com かつパスの最初のセグメントが AkariLabs、
-またはホスト akari-oss.app とそのサブドメインで判定する。壊れた URL は site とする。
+またはホスト akari.video とそのサブドメインで判定する。移行期間中は旧公式ホストとそのサブドメインも受け入れる。壊れた URL は site とする。
 素材ディレクトリの `CREDIT.txt` はクレジット文面 1 行。文面がある場合は
 `license.attribution_required: true`、source がある場合はその attribution_required も true にする。
 

package/vendor/docs/contract-2026-09-02-asset-reference-model.md

@@ -4,7 +4,8 @@
 `akari-assets list`（または `akari assets list`）の先頭行で実際の置き場を確認する。
 以下の `<ライブラリの置き場>` はその表示先を指し、音源はその下の `audio/` に入る。
 
-- 状態: 実装済み（機械層のみ。シェル UI の採用は後続）
+- 状態: 実装済み（機械層 2026-09-02。シェル UI の採用 = 取り込みフローの reference 既定化・プロジェクト面の「参照」札・
+  プレビュー / タイムラインの経路・「素材をまとめる」は 2026-09-22 `task/2026-09-21-library-reference-in-shell` で採用）
 - 決定日: 2026-09-02
 - 実装: `packages/asset-resolver`（記帳・実体化）/ `packages/render-cut`・`packages/edit-lint`（解決）
 
@@ -99,8 +100,8 @@ render-cut は子プロセスの起動前に排他的に作成し、OSR / GPU（
 
 ## 5. スコープ外（後続）
 
-- シェル UI の採用（取り込みフローの reference 既定化・プロジェクト面の「参照」バッジ・
-  プレビュー経路のフォールバック）
+- ~~シェル UI の採用（取り込みフローの reference 既定化・プロジェクト面の「参照」バッジ・
+  プレビュー経路のフォールバック）~~ → 2026-09-22 に採用済み（「状態」行を参照）。残るのは置き場側の変化で札を自動更新する件
 - 共有キャッシュの容量管理 UI
 
 出自: 2026-09-02 の素材パネル再設計ラウンドの裁定 3（実体 = 共有キャッシュ・プロジェクトには参照・

package/vendor/packages/akari-launcher/package.json

@@ -1,6 +1,6 @@
 {
   "name": "akari-video",
-  "version": "0.1.76",
+  "version": "0.1.77",
   "description": "AKARI Video launcher CLI — start an AI-edited video project from any directory: scaffold, connection check, then hand over to Claude Code (or opencode). AKARI Video を opencode や Claude Code で、どのディレクトリからでも始めるための `akari` ランチャー CLI。接続確認（doctor）→ 未セットアップならプロジェクト雛形を作成 → AI エージェントを起動する。外部 npm 依存ゼロ（Node.js 組み込みモジュールのみ）。 [akari-video npm vendor: bin/akari.mjs is reference-only. These CLI entrypoints are not included in the akari-video npm package. Use `akari doctor --json` and run the path reported in `render_cut.path`. Full installations provide it in a monorepo checkout, ~/.akari/app, /Applications/AKARI Video.app/Contents/Resources/packages, or %LOCALAPPDATA%\\Programs\\@akari-videoshell\\resources\\packages.]",
   "type": "module",
   "files": [

package/vendor/packages/asset-resolver/README.md

@@ -78,7 +78,7 @@ checksums 不一致は、いずれも `AssetResolverError`（`code: 'download_fa
 {
   "schema": "akari-assets-catalog/v0",
   "version": "2026-08-04",
-  "base": "https://akari-oss.app/assets/",
+  "base": "https://akari.video/assets/",
   "items": [
     {
       "id": "br-typing-laptop",
@@ -110,9 +110,9 @@ checksums 不一致は、いずれも `AssetResolverError`（`code: 'download_fa
 | --- | --- | --- |
 | `AKARI_HOME` | `~/.akari` | マシン状態（library-location.json・カタログキャッシュ・store-credentials.json）。作業場なしでは旧 assets/ もここに置く |
 | `AKARI_LIBRARY_ROOT` | 未設定 | ライブラリの書き込み先の明示上書き（読みは旧置き場にもフォールバック） |
-| `AKARI_ASSETS_CATALOG` | `https://akari-oss.app/assets/catalog.json` | カタログの取得元。**URL** ならリモート fetch、それ以外はローカルファイルパスとして読む（未デプロイの開発時は store リポのローカル出力を指す） |
+| `AKARI_ASSETS_CATALOG` | `https://akari.video/assets/catalog.json` | カタログの取得元。**URL** ならリモート fetch、それ以外はローカルファイルパスとして読む（未デプロイの開発時は store リポのローカル出力を指す） |
 | `AKARI_ASSETS_BASE` | カタログの `base` フィールド | 素材実体の配信ベースの上書き（ローカル開発でディレクトリを直接指すときに使う） |
-| `AKARI_STORE_API` | `https://akari-oss.app` | entitlements API のホスト上書き。未設定時は `~/.akari/store-credentials.json` の `url`（`akari store connect` が書き込む値）から組み立てる |
+| `AKARI_STORE_API` | `https://akari.video` | entitlements API のホスト上書き。未設定時は `~/.akari/store-credentials.json` の `url`（`akari store connect` が書き込む値）から組み立てる |
 
 `store-credentials.json` が無い場合、または entitlements API への到達に失敗した場合は
 「entitlements 不明」として無料素材のみが使える状態にフォールバックする（黙って有料を通したり、
@@ -193,7 +193,7 @@ root（絶対パス）、state（pending / migrating / done / declined）、deci
 | `preview` / `mediaFile` | ローカル素材では `preview.png` / 直下で一意な主メディアのファイル名。無ければ null |
 
 AKARI 配布元は URL を解析し、ホスト `github.com` かつパスの最初のセグメントが `AkariLabs`、
-またはホスト `akari-oss.app` とそのサブドメインで判定する。壊れた URL は `site` とする。
+またはホスト `akari.video` とそのサブドメインで判定する。移行期間中は旧公式ホストとそのサブドメインも受け入れる。壊れた URL は `site` とする。
 
 主メディアはシェルと同じ一意解決の規則で、複数テイクから勝手に選ばない。
 still の `preview.png` は主メディア候補から除く。音・映像・画像に加え、取り込み対象の

package/vendor/packages/asset-resolver/bin/akari-assets.mjs

@@ -16,6 +16,7 @@ import { startBrowseServer } from '../src/browse-server.mjs';
 import { bundleProjectReferences } from '../src/bundle.mjs';
 import { cacheCatalog, loadCatalog } from '../src/catalog.mjs';
 import { resolve as resolveAsset } from '../src/resolve.mjs';
+import { DEFAULT_CATALOG_URL, DEFAULT_STORE_API } from '../src/service-urls.mjs';
 import { composeState } from '../src/state.mjs';
 
 function flagValue(args, name) {
@@ -193,9 +194,9 @@ function printUsage() {
 環境変数:
   AKARI_HOME             マシン設定の置き場（既定: ~/.akari）
   AKARI_LIBRARY_ROOT     ライブラリの置き場の上書き
-  AKARI_ASSETS_CATALOG   カタログの取得元。URL またはローカルパス（既定: akari-oss.app/assets/catalog.json）
+  AKARI_ASSETS_CATALOG   カタログの取得元。URL またはローカルパス（既定: ${DEFAULT_CATALOG_URL}）
   AKARI_ASSETS_BASE      素材実体の配信ベースの上書き（既定はカタログの "base" フィールド）
-  AKARI_STORE_API        entitlements API のホスト上書き（既定: akari-oss.app）`);
+  AKARI_STORE_API        entitlements API のホスト上書き（既定: ${DEFAULT_STORE_API}）`);
 }
 
 async function main() {

package/vendor/packages/asset-resolver/package.json

@@ -3,7 +3,7 @@
   "version": "0.0.1",
   "private": true,
   "type": "module",
-  "description": "無料素材の参照配布 + オンデマンド取得 resolver。akari-oss.app/assets のカタログとエンタイトルメントを合成し、使った素材だけを ~/.akari/assets/ へ取得・sha256 検証・validate-asset 検証してから登録する。外部 npm 依存ゼロ（Node.js 組み込みモジュールのみ）。",
+  "description": "無料素材の参照配布 + オンデマンド取得 resolver。akari.video/assets のカタログとエンタイトルメントを合成し、使った素材だけを ~/.akari/assets/ へ取得・sha256 検証・validate-asset 検証してから登録する。外部 npm 依存ゼロ（Node.js 組み込みモジュールのみ）。",
   "bin": {
     "akari-assets": "bin/akari-assets.mjs"
   },

package/vendor/packages/asset-resolver/src/env.mjs

@@ -8,8 +8,8 @@
 import os from 'node:os';
 import path from 'node:path';
 
-export const DEFAULT_CATALOG_URL = 'https://akari-oss.app/assets/catalog.json';
-export const DEFAULT_STORE_API = 'https://akari-oss.app';
+import { DEFAULT_CATALOG_URL, DEFAULT_STORE_API, normalizeAkariUrl } from './service-urls.mjs';
+export { DEFAULT_CATALOG_URL, DEFAULT_STORE_API } from './service-urls.mjs';
 const CREDENTIALS_FILE = 'store-credentials.json';
 const CATALOG_CACHE_FILE = 'catalog-cache.json';
 
@@ -30,7 +30,7 @@ export function resolveAkariHome(env = process.env) {
 export function resolveCatalogSource(env = process.env) {
   const raw = env.AKARI_ASSETS_CATALOG || DEFAULT_CATALOG_URL;
   if (isRemoteLocation(raw)) {
-    return { kind: 'url', value: raw };
+    return { kind: 'url', value: normalizeAkariUrl(raw) };
   }
   return { kind: 'file', value: path.resolve(raw) };
 }
@@ -45,7 +45,7 @@ export function resolveEffectiveBase(env = process.env, catalog) {
   if (!base) {
     throw new Error('素材の配信ベースが決まりません（catalog.base 未設定・AKARI_ASSETS_BASE 未設定）');
   }
-  return base;
+  return normalizeAkariUrl(base);
 }
 
 export function resolveCredentialsPath(env = process.env) {
@@ -57,7 +57,7 @@ export function catalogCachePath(env = process.env) {
 }
 
 function trimTrailingSlash(value) {
-  return value.replace(/\/+$/, '');
+  return normalizeAkariUrl(value).replace(/\/+$/, '');
 }
 
 /**

package/vendor/packages/asset-resolver/src/library.mjs

@@ -3,10 +3,13 @@ import { readdirSync, statSync, readFileSync } from 'node:fs';
 import path from 'node:path';
 import { resolveAssetLibraryRoots } from '../../creator-root/src/index.mjs';
 
+import { AKARI_HOST, LEGACY_AKARI_HOST } from './service-urls.mjs';
+
 export const ASSET_CATEGORIES = ['overlay', 'still', 'scene3d', 'audio', 'broll', 'font'];
 const FIRST_PARTY_SOURCES = [
   { hostname: 'github.com', firstPathSegment: 'AkariLabs' },
-  { hostname: 'akari-oss.app', includeSubdomains: true },
+  { hostname: AKARI_HOST, includeSubdomains: true },
+  { hostname: LEGACY_AKARI_HOST, includeSubdomains: true },
 ];
 
 function isFirstPartySource(sourceUrl) {

package/vendor/packages/asset-resolver/src/service-urls.mjs

@@ -0,0 +1,14 @@
+import { existsSync } from 'node:fs';
+import { createRequire } from 'node:module';
+import { fileURLToPath } from 'node:url';
+
+// The resolver is shipped under launcher/vendor/packages/asset-resolver.
+// Both layouts point to the launcher's single canonical, browser-safe module;
+// no duplicate constants or changes to the vendor manifest are needed.
+const checkout = new URL('../../akari-launcher/src/service-urls.cjs', import.meta.url);
+const packaged = new URL('../../../../src/service-urls.cjs', import.meta.url);
+export const {
+  AKARI_HOST, LEGACY_AKARI_HOST, DEFAULT_STORE_API, DEFAULT_STORE_BASE_URL,
+  DEFAULT_STORE_LAB_BASE_URL, DEFAULT_ASSETS_BASE_URL, DEFAULT_CATALOG_URL,
+  normalizeAkariUrl, deriveStoreLabBaseUrl,
+} = createRequire(import.meta.url)(fileURLToPath(existsSync(checkout) ? checkout : packaged));

package/vendor/packages/asset-resolver/src/shell-reference.mjs

@@ -0,0 +1,92 @@
+// Thin shell entry point: keep the ledger and containment rules in project-references.
+import { lstat, readdir, realpath, stat } from 'node:fs/promises';
+import path from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { resolveAssetLibraryRoots } from '../../creator-root/src/index.mjs';
+import { readProjectReferences, resolveLibraryFallback } from './project-references.mjs';
+
+const within = (root, target) => {
+  const rel = path.relative(root, target);
+  return rel === '' || (rel !== '..' && !rel.startsWith(`..${path.sep}`) && !path.isAbsolute(rel));
+};
+
+export async function resolveProjectAssetPath(project, declaredPath, env = process.env) {
+  const normalized = declaredPath.replaceAll('\\', '/');
+  if (path.isAbsolute(normalized) || normalized.split('/').some(part => part === '..' || part === '.')) {
+    throw new Error('素材パスがプロジェクトの外を指しています');
+  }
+  const root = await realpath(project);
+  const local = path.resolve(root, normalized);
+  if (!within(root, local)) throw new Error('素材パスがプロジェクトの外を指しています');
+  // An existing local entry always wins, including a broken or escaping symlink:
+  // never silently replace an invalid project entry with a library file.
+  let exists = false;
+  try { await lstat(local); exists = true; } catch (error) { if (error.code !== 'ENOENT') throw error; }
+  let ancestor = path.dirname(local);
+  while (within(root, ancestor)) {
+    try {
+      if (!within(root, await realpath(ancestor))) throw new Error('素材パスがプロジェクトの外を指しています');
+      break;
+    } catch (error) { if (error.code !== 'ENOENT') throw error; }
+    ancestor = path.dirname(ancestor);
+  }
+  if (exists) {
+    const actual = await realpath(local);
+    if (!within(root, actual)) throw new Error('素材パスがプロジェクトの外を指しています');
+    return (await stat(actual)).isFile() ? actual : null;
+  }
+  const references = await readProjectReferences(root);
+  for (const akariAssetsDir of resolveAssetLibraryRoots(env).read) {
+    const found = resolveLibraryFallback({ declaredPath: normalized, references, akariAssetsDir });
+    if (found) return found;
+  }
+  return null;
+}
+
+/** Enumerate only ledger-authorized files, in library read order; no symlink traversal. */
+export async function listProjectReferenceAssets(project, env = process.env) {
+  const references = await readProjectReferences(project);
+  return Promise.all(references.map(async reference => {
+    const files = new Map();
+    let libraryDir;
+    if ([reference.category, reference.id].some(value => !value || value === '.' || value === '..' || /[\\/]/.test(value))) {
+      return { ...reference, files: [] };
+    }
+    for (const root of resolveAssetLibraryRoots(env).read) {
+      const directory = path.resolve(root, reference.category, reference.id);
+      if (!within(path.resolve(root), directory)) continue;
+      try { if (!within(await realpath(root), await realpath(directory))) continue; } catch { continue; }
+      const walk = async (dir, prefix = '') => {
+        for (const entry of await readdir(dir, { withFileTypes: true })) {
+          const name = prefix + entry.name;
+          if (entry.isDirectory()) await walk(path.join(dir, entry.name), `${name}/`);
+          else {
+            const absolute = resolveLibraryFallback({
+              declaredPath: `assets/${reference.category}/${reference.id}/${name}`, references, akariAssetsDir: root,
+            });
+            if (absolute && !files.has(name)) {
+              libraryDir ??= directory;
+              files.set(name, { name, path: absolute, bytes: (await stat(absolute)).size });
+            }
+          }
+        }
+      };
+      try { await walk(directory); } catch (error) { if (error.code !== 'ENOENT') throw error; }
+    }
+    return { ...reference, libraryDir, files: [...files.values()] };
+  }));
+}
+
+/** Resolve before synchronous timeline rendering, including audio and thumbnail consumers. */
+export async function projectReferenceMediaUris(project, env = process.env, declaredPaths = []) {
+  const uris = {};
+  const paths = new Set(declaredPaths);
+  for (const asset of await listProjectReferenceAssets(project, env)) {
+    for (const file of asset.files) paths.add(`assets/${asset.category}/${asset.id}/${file.name}`);
+  }
+  for (const declared of paths) {
+    const actual = await resolveProjectAssetPath(project, declared, env);
+    if (actual) uris[declared.replaceAll('\\', '/')] = pathToFileURL(actual).href;
+  }
+  return uris;
+}

package/vendor/packages/asset-resolver/test/local-library.test.mjs

@@ -5,6 +5,7 @@ import path from 'node:path';
 import test from 'node:test';
 import { composeState } from '../src/state.mjs';
 import { primaryMediaFile, sourceFields } from '../src/library.mjs';
+import { LEGACY_AKARI_HOST } from '../src/service-urls.mjs';
 import { setupFixtureEnv } from './helpers.mjs';
 
 function fixture(t) {
@@ -110,12 +111,16 @@ for (const kind of ['bgm', 'jingle', 'sfx']) {
 for (const [url, expected] of [
   ['https://github.com/AkariLabs-evil/x', 'site'],
   ['https://evil.example/github.com/AkariLabs/x', 'site'],
-  ['https://akari-oss.app.evil.example/x', 'site'],
-  ['https://evilakari-oss.app/x', 'site'],
+  [`https://${LEGACY_AKARI_HOST}.evil.example/x`, 'site'],
+  ['https://akari.video.evil.example/x', 'site'],
+  ['https://evilakari.video/x', 'site'],
+  ['https://akari.video/x', 'lab'],
+  ['https://x.akari.video/x', 'lab'],
+  [`https://evil${LEGACY_AKARI_HOST}/x`, 'site'],
   ['https://github.com/other/AkariLabs/x', 'site'],
-  ['https://akari-oss.app/x', 'lab'],
-  ['https://assets.akari-oss.app/x', 'lab'],
-  ['https://cdn.assets.akari-oss.app/x', 'lab'],
+  [`https://${LEGACY_AKARI_HOST}/x`, 'lab'],
+  [`https://assets.${LEGACY_AKARI_HOST}/x`, 'lab'],
+  [`https://cdn.assets.${LEGACY_AKARI_HOST}/x`, 'lab'],
   ['https://[broken', 'site'],
   ['not a URL', 'site'],
 ]) {

package/vendor/packages/asset-resolver/test/service-urls.test.mjs

@@ -0,0 +1,100 @@
+import assert from 'node:assert/strict';
+import { execFileSync } from 'node:child_process';
+import { cpSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import path from 'node:path';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+import test from 'node:test';
+import {
+  DEFAULT_ASSETS_BASE_URL, DEFAULT_CATALOG_URL, DEFAULT_STORE_API,
+  DEFAULT_STORE_BASE_URL, DEFAULT_STORE_LAB_BASE_URL, LEGACY_AKARI_HOST,
+  deriveStoreLabBaseUrl, normalizeAkariUrl,
+} from '../src/service-urls.mjs';
+import { resolveCatalogSource, resolveDownloadUrl, resolveEffectiveBase, resolveEntitlementsUrl } from '../src/env.mjs';
+import { fetchEntitlements } from '../src/entitlements.mjs';
+
+const repo = fileURLToPath(new URL('../../../', import.meta.url));
+
+test('tracked sources and documentation cannot reintroduce the retired domain', () => {
+  const allowed = new Set([
+    'packages/akari-launcher/src/service-urls.cjs',
+    'packages/asset-resolver/test/service-urls.test.mjs',
+  ]);
+  const files = execFileSync('git', ['ls-files', '-z'], { cwd: repo, encoding: 'utf8' }).split('\0').filter(Boolean);
+  const targets = files.filter(file => {
+    // Evidence and changelogs record historical observations, not current defaults.
+    if (/(^|\/)evidence\//.test(file) || /(^|\/)CHANGELOG[^/]*$/i.test(file)) return false;
+    return /^(apps|packages)\/.*\/(src|bin|test)\//.test(file)
+      || /^(docs|skills)\//.test(file) || /(^|\/)README[^/]*$/i.test(file)
+      || /(^|\/)package\.json$/.test(file);
+  });
+  assert.ok(targets.includes('packages/asset-resolver/src/env.mjs'));
+  assert.ok(targets.includes('apps/shell/extensions/akari-surfaces/src/browser/akari-settings-dialog.ts'));
+  const violations = targets.filter(file => !allowed.has(file) && readFileSync(path.join(repo, file), 'utf8').includes('akari-oss'));
+  assert.deepEqual(violations, [], 'Use the shared service URLs; only the legacy constant and this test may mention the retired domain');
+});
+
+test('all official defaults use the current origin', () => {
+  assert.equal(LEGACY_AKARI_HOST, 'akari-oss.app');
+  assert.equal(DEFAULT_STORE_API, 'https://akari.video');
+  assert.equal(DEFAULT_STORE_BASE_URL, 'https://akari.video/api/store');
+  assert.equal(DEFAULT_STORE_LAB_BASE_URL, 'https://akari.video/lab');
+  assert.equal(DEFAULT_ASSETS_BASE_URL, 'https://akari.video/assets/');
+  assert.equal(DEFAULT_CATALOG_URL, 'https://akari.video/assets/catalog.json');
+  assert.equal(resolveEntitlementsUrl({}), 'https://akari.video/api/store/v1/entitlements');
+  assert.equal(resolveCatalogSource({}).value, DEFAULT_CATALOG_URL);
+});
+
+for (const [input, expected] of [
+  [`https://${LEGACY_AKARI_HOST}/api/store`, 'https://akari.video/api/store'],
+  [`http://${LEGACY_AKARI_HOST}/assets/a?x=1#preview`, 'https://akari.video/assets/a?x=1#preview'],
+  [`https://${LEGACY_AKARI_HOST.toUpperCase()}/api/store/`, 'https://akari.video/api/store/'],
+  ['https://akari.video/api/store', 'https://akari.video/api/store'],
+  ['http://localhost:8788/api/store', 'http://localhost:8788/api/store'],
+  [`https://${LEGACY_AKARI_HOST}.evil.example/api/store`, `https://${LEGACY_AKARI_HOST}.evil.example/api/store`],
+  [`https://evil${LEGACY_AKARI_HOST}/api/store`, `https://evil${LEGACY_AKARI_HOST}/api/store`],
+  ['not a URL', 'not a URL'],
+  ['/local/assets/', '/local/assets/'],
+]) test(`URL normalization: ${input}`, () => assert.equal(normalizeAkariUrl(input), expected));
+
+for (const origin of [`https://${LEGACY_AKARI_HOST}`, 'https://akari.video', 'http://localhost:8788']) {
+  const expected = origin.includes(LEGACY_AKARI_HOST) ? 'https://akari.video' : origin;
+  test(`configured endpoints and saved credentials: ${origin}`, async t => {
+    const home = mkdtempSync(path.join(tmpdir(), 'akari-domain-'));
+    t.after(() => rmSync(home, { recursive: true, force: true }));
+    const credentials = { url: `${origin}/api/store/`, token: 'fixture-token' };
+    writeFileSync(path.join(home, 'store-credentials.json'), JSON.stringify(credentials));
+    const calls = [];
+    const result = await fetchEntitlements({ env: { AKARI_HOME: home }, fetchImpl: async url => {
+      calls.push(url);
+      return new Response(JSON.stringify({ entitlements: [{ product_id: 'example' }] }));
+    } });
+    assert.equal(result.status, 'ok');
+    assert.deepEqual([...result.ids], ['example']);
+    assert.deepEqual(calls, [`${expected}/api/store/v1/entitlements`]);
+    assert.equal(resolveEntitlementsUrl({ AKARI_STORE_API: `${origin}/` }, credentials), `${expected}/api/store/v1/entitlements`);
+    assert.equal(resolveDownloadUrl({}, credentials, 'a b'), `${expected}/api/store/v1/download/a%20b`);
+    assert.equal(resolveDownloadUrl({ AKARI_STORE_API: origin }, credentials, 'a b'), `${expected}/api/store/v1/download/a%20b`);
+    assert.equal(resolveCatalogSource({ AKARI_ASSETS_CATALOG: `${origin}/assets/catalog.json` }).value, `${expected}/assets/catalog.json`);
+    assert.equal(resolveEffectiveBase({}, { base: `${origin}/assets/` }), `${expected}/assets/`);
+    assert.equal(resolveEffectiveBase({ AKARI_ASSETS_BASE: `${origin}/assets/` }), `${expected}/assets/`);
+    assert.equal(deriveStoreLabBaseUrl(credentials.url), `${expected}/lab`);
+  });
+}
+
+for (const [layout, resolverPath, launcherPath] of [
+  ['npm vendor', 'vendor/packages/asset-resolver/src', 'src'],
+  ['Electron resources', 'packages/asset-resolver/src', 'packages/akari-launcher/src'],
+]) test(`${layout}: resolver loads the canonical module from the installed launcher`, async t => {
+  const root = mkdtempSync(path.join(tmpdir(), 'akari-domain-vendor-'));
+  t.after(() => rmSync(root, { recursive: true, force: true }));
+  const resolverSrc = path.join(root, resolverPath);
+  const launcherSrc = path.join(root, launcherPath);
+  mkdirSync(resolverSrc, { recursive: true });
+  mkdirSync(launcherSrc, { recursive: true });
+  cpSync(path.join(repo, 'packages/akari-launcher/src/service-urls.cjs'), path.join(launcherSrc, 'service-urls.cjs'));
+  for (const file of ['service-urls.mjs', 'env.mjs']) cpSync(new URL(`../src/${file}`, import.meta.url), path.join(resolverSrc, file));
+  const installed = await import(pathToFileURL(path.join(resolverSrc, 'env.mjs')));
+  assert.equal(installed.resolveEntitlementsUrl({}, { url: `https://${LEGACY_AKARI_HOST}/api/store` }), 'https://akari.video/api/store/v1/entitlements');
+  assert.equal(installed.resolveCatalogSource({}).value, DEFAULT_CATALOG_URL);
+});