diff --git a/CLAUDE.md b/CLAUDE.md
index 00433c2..18d36ae 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -81,7 +81,7 @@ Examora is a monorepo with three logical layers:
 
 ## Judge Flow (planned, not yet implemented)
 
-1. `POST /api/client/programming/submissions` → inserts `submissions` + `judge_tasks` rows, enqueues to Redis Stream
+1. `POST /api/v1/submissions` → inserts `submissions` + `judge_tasks` rows, enqueues to Redis Stream
 2. `judge-worker` consumes from Redis Stream → reads submission + test cases from PostgreSQL → calls `sandbox-runner` → writes `judge_case_results` → updates `submissions.status`
 3. Candidate polls status until terminal state
 
diff --git a/apps/admin/src/access.ts b/apps/admin/src/access.ts
index d67ead0..b872b56 100644
--- a/apps/admin/src/access.ts
+++ b/apps/admin/src/access.ts
@@ -8,7 +8,7 @@ export default function access(
 ) {
   const { currentUser, forbidden } = initialState ?? {};
 
-  // If the user is forbidden (403 from /api/auth/me), deny access
+  // If the user is forbidden (403 from /api/v1/auth/me), deny access
   if (forbidden) {
     return { canAdmin: false };
   }
diff --git a/apps/admin/src/app.tsx b/apps/admin/src/app.tsx
index 9518d63..0a1db66 100644
--- a/apps/admin/src/app.tsx
+++ b/apps/admin/src/app.tsx
@@ -2,8 +2,9 @@ import {
   type Settings as LayoutSettings,
   SettingDrawer,
 } from '@ant-design/pro-components';
+import { API_PATHS } from '@examora/types';
 import type { RunTimeLayoutConfig } from '@umijs/max';
-import { history, Link } from '@umijs/max';
+import { history, Link, useIntl } from '@umijs/max';
 import { Avatar, Button, ConfigProvider, Result } from 'antd';
 import dayjs from 'dayjs';
 import relativeTime from 'dayjs/plugin/relativeTime';
@@ -86,7 +87,7 @@ export async function getInitialState(): Promise<{
     if (!token) return null;
 
     try {
-      const response = await fetch('/api/auth/me', {
+      const response = await fetch(API_PATHS.auth.me, {
         headers: { Authorization: `Bearer ${token}` },
       });
       const data = await response.json();
@@ -255,13 +256,14 @@ export const request: any = {
 
 // 无权限页面组件
 const ForbiddenPage: React.FC = () => {
+  const intl = useIntl();
   const [loading, setLoading] = React.useState(false);
 
   const handleLogout = async () => {
     setLoading(true);
     try {
       const token = getAccessToken();
-      await fetch('/api/auth/logout', {
+      await fetch(API_PATHS.auth.logout, {
         method: 'POST',
         headers: { Authorization: `Bearer ${token}` },
       });
@@ -275,11 +277,11 @@ const ForbiddenPage: React.FC = () => {
   return (
     <Result
       status="403"
-      title="无权访问后台"
-      subTitle="您的账户尚未激活或没有后台访问权限，请联系管理员开通权限。"
+      title={intl.formatMessage({ id: 'pages.forbidden.title' })}
+      subTitle={intl.formatMessage({ id: 'pages.forbidden.subTitle' })}
       extra={
         <Button type="primary" loading={loading} onClick={handleLogout}>
-          重新登录
+          {intl.formatMessage({ id: 'pages.forbidden.relogin' })}
         </Button>
       }
     />
diff --git a/apps/admin/src/auth/config.ts b/apps/admin/src/auth/config.ts
index 6395fa7..baf5e0f 100644
--- a/apps/admin/src/auth/config.ts
+++ b/apps/admin/src/auth/config.ts
@@ -1,8 +1,9 @@
+import { API_PATHS } from '@examora/types';
 import { request } from '@umijs/max';
 import type { AuthConfig } from './token';
 
 export const fetchAuthConfig = async (): Promise<AuthConfig> => {
-  const response = await request<AuthConfig>('/api/auth/config', {
+  const response = await request<AuthConfig>(API_PATHS.auth.config, {
     method: 'GET',
   });
   return response;
diff --git a/apps/admin/src/components/RightContent/AvatarDropdown.tsx b/apps/admin/src/components/RightContent/AvatarDropdown.tsx
index 8cf38b9..57bf6a0 100644
--- a/apps/admin/src/components/RightContent/AvatarDropdown.tsx
+++ b/apps/admin/src/components/RightContent/AvatarDropdown.tsx
@@ -1,4 +1,5 @@
 import { LogoutOutlined, SettingOutlined } from '@ant-design/icons';
+import { API_PATHS } from '@examora/types';
 import { history, request, useIntl, useModel } from '@umijs/max';
 import type { MenuProps } from 'antd';
 import { Spin } from 'antd';
@@ -48,7 +49,7 @@ export const AvatarDropdown: React.FC<GlobalHeaderRightProps> = ({
   const intl = useIntl();
   const loginOut = async () => {
     try {
-      await request('/api/auth/logout', { method: 'POST' });
+      await request(API_PATHS.auth.logout, { method: 'POST' });
     } catch (_) {
       // ignore logout errors
     }
diff --git a/apps/admin/src/components/RightContent/index.tsx b/apps/admin/src/components/RightContent/index.tsx
index f7fb406..f1a038f 100644
--- a/apps/admin/src/components/RightContent/index.tsx
+++ b/apps/admin/src/components/RightContent/index.tsx
@@ -18,6 +18,7 @@ const useStyles = createStyles(() => ({
     fontSize: 18,
     color: 'inherit',
     transition: 'background 0.2s',
+    borderRadius: 8,
     '&:hover': { background: 'rgba(0,0,0,0.04)' },
   },
 }));
diff --git a/apps/admin/src/components/TagSelect/index.tsx b/apps/admin/src/components/TagSelect/index.tsx
index 4b4a7b4..a5339f5 100644
--- a/apps/admin/src/components/TagSelect/index.tsx
+++ b/apps/admin/src/components/TagSelect/index.tsx
@@ -1,5 +1,6 @@
 import { DownOutlined, UpOutlined } from '@ant-design/icons';
 import { useMergedState } from '@rc-component/util';
+import { useIntl } from '@umijs/max';
 import { Tag } from 'antd';
 import { clsx } from 'clsx';
 import React, { type FC, useMemo, useState } from 'react';
@@ -51,6 +52,7 @@ export interface TagSelectProps {
 const TagSelect: FC<TagSelectProps> & {
   Option: typeof TagSelectOption;
 } = (props) => {
+  const intl = useIntl();
   const { styles } = useStyles();
   const {
     children,
@@ -103,9 +105,9 @@ const TagSelect: FC<TagSelectProps> & {
   };
   const checkedAll = allTags.length === value?.length && allTags.length > 0;
   const {
-    expandText = '展开',
-    collapseText = '收起',
-    selectAllText = '全部',
+    expandText = intl.formatMessage({ id: 'common.expand' }),
+    collapseText = intl.formatMessage({ id: 'common.collapse' }),
+    selectAllText = intl.formatMessage({ id: 'common.selectAll' }),
   } = actionsText;
   const cls = clsx(styles.tagSelect, className, {
     [styles.hasExpandTag]: expandable,
diff --git a/apps/admin/src/locales/en-US/pages.ts b/apps/admin/src/locales/en-US/pages.ts
index a90fdee..7a80ed9 100644
--- a/apps/admin/src/locales/en-US/pages.ts
+++ b/apps/admin/src/locales/en-US/pages.ts
@@ -1,5 +1,8 @@
 export default {
   'common.actions': 'Actions',
+  'common.expand': 'Expand',
+  'common.collapse': 'Collapse',
+  'common.selectAll': 'All',
   'pages.404.subTitle': 'Sorry, the page you visited does not exist.',
   'pages.404.buttonText': 'Back to Home',
   'pages.admin.subPage.title': 'Admin-only page',
@@ -442,6 +445,131 @@ export default {
     'To-do tasks will be notified via in-site messages',
   'pages.account.settings.switch.on': 'On',
   'pages.account.settings.switch.off': 'Off',
+  // Dashboard
+  'pages.dashboard.week.mon': 'Mon',
+  'pages.dashboard.week.tue': 'Tue',
+  'pages.dashboard.week.wed': 'Wed',
+  'pages.dashboard.week.thu': 'Thu',
+  'pages.dashboard.week.fri': 'Fri',
+  'pages.dashboard.week.sat': 'Sat',
+  'pages.dashboard.week.sun': 'Sun',
+  'pages.dashboard.hero.title': 'Exam Operations Dashboard',
+  'pages.dashboard.hero.kicker': 'Live Operations',
+  'pages.dashboard.hero.subtitle':
+    "Aggregate exam progress, proctoring events, question assets, and judge queues to help admins identify today's key risks quickly.",
+  'pages.dashboard.hero.online': 'Online Candidates',
+  'pages.dashboard.hero.risk': 'Risk Alerts',
+  'pages.dashboard.hero.queue': 'Pending Judges',
+  'pages.dashboard.actions.createExam': 'New Exam',
+  'pages.dashboard.actions.viewMonitoring': 'View Monitoring',
+  'pages.dashboard.stats.candidates.label': 'Registered Candidates',
+  'pages.dashboard.stats.candidates.caption': '146 new candidates this week',
+  'pages.dashboard.stats.activeExams.label': 'Active Exams',
+  'pages.dashboard.stats.activeExams.trend': '45 online',
+  'pages.dashboard.stats.activeExams.caption': 'Across 6 rooms',
+  'pages.dashboard.stats.papers.label': 'Total Papers',
+  'pages.dashboard.stats.papers.caption': 'Published this month',
+  'pages.dashboard.stats.questions.label': 'Total Questions',
+  'pages.dashboard.stats.questions.caption': 'Question reuse rate',
+  'pages.dashboard.chart.weekAria': '{label} 7-day trend',
+  'pages.dashboard.chart.empty': 'No trend data',
+  'pages.dashboard.series.online': 'Online Candidates',
+  'pages.dashboard.series.queue': 'Judge Queue',
+  'pages.dashboard.series.risk': 'Risk Events',
+  'pages.dashboard.load.title': 'Exam Load Trend',
+  'pages.dashboard.load.range': 'Last 12 hours',
+  'pages.dashboard.load.peakOnline': 'Peak Online',
+  'pages.dashboard.load.peakOnlineCaption': 'Peaked at 16:00',
+  'pages.dashboard.load.peakQueue': 'Queue Peak',
+  'pages.dashboard.load.peakQueueCaption': 'Average 42 seconds',
+  'pages.dashboard.load.riskEvents': 'Risk Events',
+  'pages.dashboard.load.riskEventsCaption': 'Down 18% from yesterday',
+  'pages.dashboard.load.aria':
+    'Online candidates, judge queue, and risk event trend in the last 12 hours',
+  'pages.dashboard.progress.title': 'Exam Progress',
+  'pages.dashboard.progress.allExams': 'All Exams',
+  'pages.dashboard.progress.activeCount': '{count} active',
+  'pages.dashboard.progress.duration': '{count} min',
+  'pages.dashboard.exams.math': '2026 Spring Advanced Mathematics Final',
+  'pages.dashboard.exams.python': 'Python Programming Skills Test',
+  'pages.dashboard.exams.physics': 'College Physics Mock Test',
+  'pages.dashboard.status.running': 'Running',
+  'pages.dashboard.status.closed': 'Closed',
+  'pages.dashboard.risk.low': 'Low Risk',
+  'pages.dashboard.risk.watch': 'Watch',
+  'pages.dashboard.risk.normal': 'Normal',
+  'pages.dashboard.risk.title': 'Proctoring Risk',
+  'pages.dashboard.risk.watchCount': '9 need attention',
+  'pages.dashboard.risk.healthLabel': 'Exam Health Today',
+  'pages.dashboard.risk.healthTitle': 'Stable',
+  'pages.dashboard.risk.healthCopy':
+    'Auto-submit, off-screen, and network fluctuation events are under control.',
+  'pages.dashboard.risk.offscreen': 'Off-screen Events',
+  'pages.dashboard.risk.network': 'Network Fluctuations',
+  'pages.dashboard.risk.review': 'Manual Reviews',
+  'pages.dashboard.queue.title': 'Judge Queue',
+  'pages.dashboard.queue.waiting': 'Waiting',
+  'pages.dashboard.queue.running': 'Running',
+  'pages.dashboard.queue.failed': 'Needs Review',
+  'pages.dashboard.activities.title': 'Exam Activity',
+  'pages.dashboard.activities.a1':
+    'Li Na submitted the Python Programming Skills Test',
+  'pages.dashboard.activities.a2': "Wang Lei's exam was auto-submitted",
+  'pages.dashboard.activities.a3':
+    'Zhang Wei started the 2026 Spring Advanced Mathematics exam',
+  'pages.dashboard.activities.a4':
+    'Chen Jing submitted the Data Structures and Algorithms test',
+  'pages.dashboard.activities.5m': '5 minutes ago',
+  'pages.dashboard.activities.8m': '8 minutes ago',
+  'pages.dashboard.activities.12m': '12 minutes ago',
+  'pages.dashboard.activities.15m': '15 minutes ago',
+  'pages.dashboard.shortcuts.title': 'Quick Access',
+  'pages.dashboard.shortcuts.users': 'User Management',
+  'pages.dashboard.shortcuts.exams': 'Exam Management',
+  'pages.dashboard.shortcuts.papers': 'Paper Management',
+  'pages.dashboard.shortcuts.questions': 'Question Bank',
+  'pages.dashboard.shortcuts.programming': 'Programming Bank',
+  'pages.dashboard.shortcuts.submissions': 'Submissions',
+  // Coming soon
+  'pages.comingSoon.title': 'Module Under Construction',
+  'pages.comingSoon.description':
+    'This admin module is reserved in the navigation and will be connected in a future iteration.',
+  'pages.comingSoon.shortTitle': 'Coming Soon',
+  'pages.comingSoon.shortDescription':
+    'This feature is under development. Please check back later.',
+  'pages.comingSoon.backDashboard': 'Back to Dashboard',
+  'pages.comingSoon.viewExams': 'View Exam Management',
+  'pages.comingSoon.note':
+    'This entry keeps the admin information architecture stable while business pages are added.',
+  'pages.comingSoon.questions.title': 'Question Bank',
+  'pages.comingSoon.questions.description':
+    'Question lists, type settings, answers, and explanations will be connected here.',
+  'pages.comingSoon.programming.title': 'Programming Questions and Test Cases',
+  'pages.comingSoon.programming.description':
+    'Programming templates, sample cases, hidden cases, and execution limits will be managed here.',
+  'pages.comingSoon.papers.title': 'Paper Management',
+  'pages.comingSoon.papers.description':
+    'Paper composition, question ordering, score settings, and status flow will be connected here.',
+  'pages.comingSoon.examCreate.title': 'Create Exam',
+  'pages.comingSoon.examCreate.description':
+    'Exam details, paper binding, and pre-publish configuration will be connected here.',
+  'pages.comingSoon.candidates.title': 'Candidate Management',
+  'pages.comingSoon.candidates.description':
+    'Candidate accounts, exam authorization, groups, and import/export will be connected here.',
+  'pages.comingSoon.events.title': 'Proctoring Audit',
+  'pages.comingSoon.events.description':
+    'Desktop events, device binding, and abnormal behavior records will be viewed here.',
+  'pages.comingSoon.submissions.title': 'Submission Records',
+  'pages.comingSoon.submissions.description':
+    'Candidate papers, programming submissions, and scoring status will be summarized here.',
+  'pages.comingSoon.judgeTasks.title': 'Judge Tasks',
+  'pages.comingSoon.judgeTasks.description':
+    'Async judge tasks, retry status, and sandbox results will be tracked here.',
+  // Forbidden
+  'pages.forbidden.title': 'Admin Access Denied',
+  'pages.forbidden.subTitle':
+    'Your account is inactive or does not have admin access. Contact an administrator to enable access.',
+  'pages.forbidden.relogin': 'Sign In Again',
   'navbar.settings': 'Settings',
   'navbar.logout': 'Logout',
 };
diff --git a/apps/admin/src/locales/zh-CN/pages.ts b/apps/admin/src/locales/zh-CN/pages.ts
index f2c3d0b..d49366f 100644
--- a/apps/admin/src/locales/zh-CN/pages.ts
+++ b/apps/admin/src/locales/zh-CN/pages.ts
@@ -1,5 +1,8 @@
 export default {
   'common.actions': '操作',
+  'common.expand': '展开',
+  'common.collapse': '收起',
+  'common.selectAll': '全部',
   'pages.404.subTitle': '抱歉，您访问的页面不存在。',
   'pages.404.buttonText': '返回首页',
   'pages.admin.subPage.title': '管理员专属页面',
@@ -37,22 +40,19 @@ export default {
   'pages.login.sso': '使用企业 SSO 登录',
   'pages.login.footnote': '访问权限由系统角色与账号状态控制。',
   'pages.login.ssoSuccess': 'SSO 登录成功',
-  'pages.login.sectionLabel': 'Secure access',
+  'pages.login.sectionLabel': '安全访问',
   'pages.login.or': '或',
   // Login brand section
-  'pages.login.brand.eyebrow': 'Admin Console',
+  'pages.login.brand.eyebrow': '管理后台',
   'pages.login.brand.headline': '考试运营与评测管理后台',
   'pages.login.brand.description':
     '集中管理题库、试卷、考试发布、考生记录与评测结果。',
-  'pages.login.brand.signal1.title': 'Exam Lifecycle',
-  'pages.login.brand.signal1.desc':
-    'Publish, schedule, and track exam operations.',
-  'pages.login.brand.signal2.title': 'Judge Pipeline',
-  'pages.login.brand.signal2.desc':
-    'Review submissions and monitor execution status.',
-  'pages.login.brand.signal3.title': 'Access Control',
-  'pages.login.brand.signal3.desc':
-    'Manage admin roles and protected workflows.',
+  'pages.login.brand.signal1.title': '考试全生命周期',
+  'pages.login.brand.signal1.desc': '发布、排期并追踪考试运营状态。',
+  'pages.login.brand.signal2.title': '判题流水线',
+  'pages.login.brand.signal2.desc': '查看提交记录并监控评测执行状态。',
+  'pages.login.brand.signal3.title': '访问控制',
+  'pages.login.brand.signal3.desc': '管理后台角色与受保护操作流程。',
   // Users page
   'pages.users.title': '用户列表',
   'pages.users.description':
@@ -418,6 +418,126 @@ export default {
     '待办任务将以站内信的形式通知',
   'pages.account.settings.switch.on': '开',
   'pages.account.settings.switch.off': '关',
+  // Dashboard
+  'pages.dashboard.week.mon': '周一',
+  'pages.dashboard.week.tue': '周二',
+  'pages.dashboard.week.wed': '周三',
+  'pages.dashboard.week.thu': '周四',
+  'pages.dashboard.week.fri': '周五',
+  'pages.dashboard.week.sat': '周六',
+  'pages.dashboard.week.sun': '周日',
+  'pages.dashboard.hero.title': '考试运营工作台',
+  'pages.dashboard.hero.kicker': '实时运营',
+  'pages.dashboard.hero.subtitle':
+    '聚合考试进度、监考事件、题库资产与判题队列，帮助管理员快速判断今天的关键风险。',
+  'pages.dashboard.hero.online': '在线考生',
+  'pages.dashboard.hero.risk': '风险关注',
+  'pages.dashboard.hero.queue': '等待判题',
+  'pages.dashboard.actions.createExam': '新建考试',
+  'pages.dashboard.actions.viewMonitoring': '查看监控',
+  'pages.dashboard.stats.candidates.label': '注册考生',
+  'pages.dashboard.stats.candidates.caption': '较上周新增 146 人',
+  'pages.dashboard.stats.activeExams.label': '进行中考试',
+  'pages.dashboard.stats.activeExams.trend': '45 人在线',
+  'pages.dashboard.stats.activeExams.caption': '覆盖 6 个考场',
+  'pages.dashboard.stats.papers.label': '试卷总数',
+  'pages.dashboard.stats.papers.caption': '本月发布试卷',
+  'pages.dashboard.stats.questions.label': '题目总数',
+  'pages.dashboard.stats.questions.caption': '题库可复用率',
+  'pages.dashboard.chart.weekAria': '{label} 7 日趋势',
+  'pages.dashboard.chart.empty': '暂无趋势数据',
+  'pages.dashboard.series.online': '在线考生',
+  'pages.dashboard.series.queue': '判题队列',
+  'pages.dashboard.series.risk': '风险事件',
+  'pages.dashboard.load.title': '考试负载趋势',
+  'pages.dashboard.load.range': '近 12 小时',
+  'pages.dashboard.load.peakOnline': '峰值在线',
+  'pages.dashboard.load.peakOnlineCaption': '16:00 达到峰值',
+  'pages.dashboard.load.peakQueue': '队列峰值',
+  'pages.dashboard.load.peakQueueCaption': '平均处理 42 秒',
+  'pages.dashboard.load.riskEvents': '风险事件',
+  'pages.dashboard.load.riskEventsCaption': '较昨日下降 18%',
+  'pages.dashboard.load.aria': '近 12 小时在线考生、判题队列和风险事件趋势',
+  'pages.dashboard.progress.title': '考试进度',
+  'pages.dashboard.progress.allExams': '全部考试',
+  'pages.dashboard.progress.activeCount': '{count} 人在考',
+  'pages.dashboard.progress.duration': '{count} 分钟',
+  'pages.dashboard.exams.math': '2026 春季高等数学期末考试',
+  'pages.dashboard.exams.python': 'Python 程序设计能力测试',
+  'pages.dashboard.exams.physics': '大学物理模拟测试',
+  'pages.dashboard.status.running': '进行中',
+  'pages.dashboard.status.closed': '已结束',
+  'pages.dashboard.risk.low': '低风险',
+  'pages.dashboard.risk.watch': '关注',
+  'pages.dashboard.risk.normal': '正常',
+  'pages.dashboard.risk.title': '监考风险',
+  'pages.dashboard.risk.watchCount': '需关注 9',
+  'pages.dashboard.risk.healthLabel': '今日考试健康度',
+  'pages.dashboard.risk.healthTitle': '整体稳定',
+  'pages.dashboard.risk.healthCopy':
+    '自动提交、离屏与网络波动事件均处于可控范围。',
+  'pages.dashboard.risk.offscreen': '离屏事件',
+  'pages.dashboard.risk.network': '网络波动',
+  'pages.dashboard.risk.review': '人工复核',
+  'pages.dashboard.queue.title': '判题队列',
+  'pages.dashboard.queue.waiting': '等待判题',
+  'pages.dashboard.queue.running': '执行中',
+  'pages.dashboard.queue.failed': '需复核',
+  'pages.dashboard.activities.title': '考试动态',
+  'pages.dashboard.activities.a1': '李娜提交了 Python 程序设计能力测试',
+  'pages.dashboard.activities.a2': '王磊的考试被系统自动提交',
+  'pages.dashboard.activities.a3': '张伟开始作答 2026 春季高等数学',
+  'pages.dashboard.activities.a4': '陈静提交了数据结构与算法测试',
+  'pages.dashboard.activities.5m': '5 分钟前',
+  'pages.dashboard.activities.8m': '8 分钟前',
+  'pages.dashboard.activities.12m': '12 分钟前',
+  'pages.dashboard.activities.15m': '15 分钟前',
+  'pages.dashboard.shortcuts.title': '快捷入口',
+  'pages.dashboard.shortcuts.users': '用户管理',
+  'pages.dashboard.shortcuts.exams': '考试管理',
+  'pages.dashboard.shortcuts.papers': '试卷管理',
+  'pages.dashboard.shortcuts.questions': '题库管理',
+  'pages.dashboard.shortcuts.programming': '编程题库',
+  'pages.dashboard.shortcuts.submissions': '提交记录',
+  // Coming soon
+  'pages.comingSoon.title': '模块建设中',
+  'pages.comingSoon.description':
+    '该管理模块已预留导航入口，业务页面会在后续迭代接入。',
+  'pages.comingSoon.shortTitle': '即将上线',
+  'pages.comingSoon.shortDescription': '该功能正在开发中，敬请期待。',
+  'pages.comingSoon.backDashboard': '返回工作台',
+  'pages.comingSoon.viewExams': '查看考试管理',
+  'pages.comingSoon.note':
+    '当前入口用于固定后台信息架构，避免后续业务页面上线时反复调整主菜单。',
+  'pages.comingSoon.questions.title': '题库管理',
+  'pages.comingSoon.questions.description':
+    '题目列表、题型配置、答案与解析维护即将接入。',
+  'pages.comingSoon.programming.title': '编程题与测试用例',
+  'pages.comingSoon.programming.description':
+    '编程题模板、样例用例、隐藏用例和运行限制将在这里管理。',
+  'pages.comingSoon.papers.title': '试卷管理',
+  'pages.comingSoon.papers.description':
+    '组卷、题目排序、分值配置和试卷状态流转即将接入。',
+  'pages.comingSoon.examCreate.title': '创建考试',
+  'pages.comingSoon.examCreate.description':
+    '考试基本信息、试卷绑定和发布前配置将在这里接入。',
+  'pages.comingSoon.candidates.title': '考生管理',
+  'pages.comingSoon.candidates.description':
+    '考生账号、考试授权、分组和导入导出能力即将接入。',
+  'pages.comingSoon.events.title': '监考审计',
+  'pages.comingSoon.events.description':
+    '桌面端事件、设备绑定、异常行为记录将在这里查看。',
+  'pages.comingSoon.submissions.title': '提交记录',
+  'pages.comingSoon.submissions.description':
+    '候选人答卷、编程提交和判分状态将在这里汇总。',
+  'pages.comingSoon.judgeTasks.title': '判题任务',
+  'pages.comingSoon.judgeTasks.description':
+    '异步判题任务、重试状态和沙箱结果将在这里跟踪。',
+  // Forbidden
+  'pages.forbidden.title': '无权访问后台',
+  'pages.forbidden.subTitle':
+    '您的账户尚未激活或没有后台访问权限，请联系管理员开通权限。',
+  'pages.forbidden.relogin': '重新登录',
   'navbar.settings': '设置',
   'navbar.logout': '退出登录',
 };
diff --git a/apps/admin/src/pages/Assessment/Results/JudgeTasks/index.tsx b/apps/admin/src/pages/Assessment/Results/JudgeTasks/index.tsx
index 6839cbb..cef70ad 100644
--- a/apps/admin/src/pages/Assessment/Results/JudgeTasks/index.tsx
+++ b/apps/admin/src/pages/Assessment/Results/JudgeTasks/index.tsx
@@ -1,19 +1,30 @@
 import { PageContainer } from '@ant-design/pro-components';
-import { history } from '@umijs/max';
+import { history, useIntl } from '@umijs/max';
 import { Button, Card, Result } from 'antd';
 import React from 'react';
 
 const Index: React.FC = () => {
+  const intl = useIntl();
+
   return (
-    <PageContainer content="查看编程题目的评测任务状态和执行结果，监控系统判题服务的运行情况。">
+    <PageContainer
+      content={intl.formatMessage({
+        id: 'pages.comingSoon.judgeTasks.description',
+      })}
+    >
       <Card>
         <Result
           status="info"
-          title="即将上线"
-          subTitle="该功能正在开发中，敬请期待。"
+          title={intl.formatMessage({ id: 'pages.comingSoon.shortTitle' })}
+          subTitle={intl.formatMessage({
+            id: 'pages.comingSoon.shortDescription',
+          })}
           extra={
-            <Button type="primary" onClick={() => history.push('/')}>
-              返回首页
+            <Button
+              type="primary"
+              onClick={() => history.push('/overview/dashboard')}
+            >
+              {intl.formatMessage({ id: 'pages.comingSoon.backDashboard' })}
             </Button>
           }
         />
diff --git a/apps/admin/src/pages/Assessment/Results/Submissions/index.tsx b/apps/admin/src/pages/Assessment/Results/Submissions/index.tsx
index 918a149..4cd3883 100644
--- a/apps/admin/src/pages/Assessment/Results/Submissions/index.tsx
+++ b/apps/admin/src/pages/Assessment/Results/Submissions/index.tsx
@@ -1,19 +1,30 @@
 import { PageContainer } from '@ant-design/pro-components';
-import { history } from '@umijs/max';
+import { history, useIntl } from '@umijs/max';
 import { Button, Card, Result } from 'antd';
 import React from 'react';
 
 const Index: React.FC = () => {
+  const intl = useIntl();
+
   return (
-    <PageContainer content="查看考生提交记录，追踪编程题目的评测结果和得分情况。">
+    <PageContainer
+      content={intl.formatMessage({
+        id: 'pages.comingSoon.submissions.description',
+      })}
+    >
       <Card>
         <Result
           status="info"
-          title="即将上线"
-          subTitle="该功能正在开发中，敬请期待。"
+          title={intl.formatMessage({ id: 'pages.comingSoon.shortTitle' })}
+          subTitle={intl.formatMessage({
+            id: 'pages.comingSoon.shortDescription',
+          })}
           extra={
-            <Button type="primary" onClick={() => history.push('/')}>
-              返回首页
+            <Button
+              type="primary"
+              onClick={() => history.push('/overview/dashboard')}
+            >
+              {intl.formatMessage({ id: 'pages.comingSoon.backDashboard' })}
             </Button>
           }
         />
diff --git a/apps/admin/src/pages/ComingSoon/index.tsx b/apps/admin/src/pages/ComingSoon/index.tsx
index 1dfb086..2eeb945 100644
--- a/apps/admin/src/pages/ComingSoon/index.tsx
+++ b/apps/admin/src/pages/ComingSoon/index.tsx
@@ -7,86 +7,92 @@ import {
   TrophyOutlined,
 } from '@ant-design/icons';
 import { PageContainer } from '@ant-design/pro-components';
+import { useIntl } from '@umijs/max';
 import { Button, Card, Result, Space, Typography } from 'antd';
 import React from 'react';
 
 const moduleMeta: Record<
   string,
   {
-    title: string;
-    description: string;
+    titleId: string;
+    descriptionId: string;
     icon: React.ReactNode;
   }
 > = {
-  '/library/questions': {
-    title: '题库管理',
-    description: '题目列表、题型配置、答案与解析维护即将接入。',
+  '/content/library/questions': {
+    titleId: 'pages.comingSoon.questions.title',
+    descriptionId: 'pages.comingSoon.questions.description',
     icon: <DatabaseOutlined />,
   },
-  '/library/programming': {
-    title: '编程题与测试用例',
-    description: '编程题模板、样例用例、隐藏用例和运行限制将在这里管理。',
+  '/content/library/programming': {
+    titleId: 'pages.comingSoon.programming.title',
+    descriptionId: 'pages.comingSoon.programming.description',
     icon: <DatabaseOutlined />,
   },
-  '/papers': {
-    title: '试卷管理',
-    description: '组卷、题目排序、分值配置和试卷状态流转即将接入。',
+  '/content/papers': {
+    titleId: 'pages.comingSoon.papers.title',
+    descriptionId: 'pages.comingSoon.papers.description',
     icon: <FileTextOutlined />,
   },
-  '/exams/create': {
-    title: '创建考试',
-    description: '考试基本信息、试卷绑定和发布前配置将在这里接入。',
+  '/examination/exams/create': {
+    titleId: 'pages.comingSoon.examCreate.title',
+    descriptionId: 'pages.comingSoon.examCreate.description',
     icon: <FileTextOutlined />,
   },
-  '/candidates': {
-    title: '考生管理',
-    description: '考生账号、考试授权、分组和导入导出能力即将接入。',
+  '/examination/candidates': {
+    titleId: 'pages.comingSoon.candidates.title',
+    descriptionId: 'pages.comingSoon.candidates.description',
     icon: <TeamOutlined />,
   },
-  '/proctoring/events': {
-    title: '监考审计',
-    description: '桌面端事件、设备绑定、异常行为记录将在这里查看。',
+  '/monitoring/proctoring/events': {
+    titleId: 'pages.comingSoon.events.title',
+    descriptionId: 'pages.comingSoon.events.description',
     icon: <SafetyOutlined />,
   },
-  '/results/submissions': {
-    title: '提交记录',
-    description: '候选人答卷、编程提交和判分状态将在这里汇总。',
+  '/assessment/results/submissions': {
+    titleId: 'pages.comingSoon.submissions.title',
+    descriptionId: 'pages.comingSoon.submissions.description',
     icon: <TrophyOutlined />,
   },
-  '/results/judge-tasks': {
-    title: '判题任务',
-    description: '异步判题任务、重试状态和沙箱结果将在这里跟踪。',
+  '/assessment/results/judge-tasks': {
+    titleId: 'pages.comingSoon.judgeTasks.title',
+    descriptionId: 'pages.comingSoon.judgeTasks.description',
     icon: <TrophyOutlined />,
   },
 };
 
 const fallbackMeta = {
-  title: '模块建设中',
-  description: '该管理模块已预留导航入口，业务页面会在后续迭代接入。',
+  titleId: 'pages.comingSoon.title',
+  descriptionId: 'pages.comingSoon.description',
   icon: <ClockCircleOutlined />,
 };
 
 const ComingSoon: React.FC = () => {
+  const intl = useIntl();
   const meta = moduleMeta[window.location.pathname] ?? fallbackMeta;
+  const title = intl.formatMessage({ id: meta.titleId });
+  const description = intl.formatMessage({ id: meta.descriptionId });
 
   return (
-    <PageContainer title={meta.title}>
+    <PageContainer title={title}>
       <Card>
         <Result
           icon={meta.icon}
-          title={meta.title}
-          subTitle={meta.description}
+          title={title}
+          subTitle={description}
           extra={
             <Space>
-              <Button type="primary" href="/dashboard">
-                返回工作台
+              <Button type="primary" href="/overview/dashboard">
+                {intl.formatMessage({ id: 'pages.comingSoon.backDashboard' })}
+              </Button>
+              <Button href="/examination/exams">
+                {intl.formatMessage({ id: 'pages.comingSoon.viewExams' })}
               </Button>
-              <Button href="/exams">查看考试管理</Button>
             </Space>
           }
         />
         <Typography.Paragraph type="secondary" style={{ textAlign: 'center' }}>
-          当前入口用于固定后台信息架构，避免后续业务页面上线时反复调整主菜单。
+          {intl.formatMessage({ id: 'pages.comingSoon.note' })}
         </Typography.Paragraph>
       </Card>
     </PageContainer>
diff --git a/apps/admin/src/pages/Content/Library/Questions/Detail.tsx b/apps/admin/src/pages/Content/Library/Questions/Detail.tsx
index ffd5efe..bb64cb6 100644
--- a/apps/admin/src/pages/Content/Library/Questions/Detail.tsx
+++ b/apps/admin/src/pages/Content/Library/Questions/Detail.tsx
@@ -26,6 +26,7 @@ import {
 } from '@dnd-kit/sortable';
 import type { AdminQuestion, QuestionType } from '@examora/types';
 import {
+  API_PATHS,
   DIFFICULTY_OPTIONS,
   QUESTION_STATUS_OPTIONS,
   QUESTION_TYPE_OPTIONS,
@@ -1212,7 +1213,7 @@ const QuestionsDetailContent: React.FC = () => {
     setLoading(true);
     try {
       const response = await request<QuestionEnvelope>(
-        `/api/admin/questions/${questionId}`,
+        API_PATHS.admin.question(questionId),
       );
       setQuestion(response.data);
     } catch (_error) {
@@ -1234,7 +1235,6 @@ const QuestionsDetailContent: React.FC = () => {
         status: 'DRAFT',
         time_limit_ms: 2000,
         memory_limit_mb: 256,
-        content: { text: '' },
         ...(initialType
           ? {
               type: initialType,
@@ -1291,7 +1291,7 @@ const QuestionsDetailContent: React.FC = () => {
         }
         setSaving(true);
         const response = await request<QuestionEnvelope>(
-          '/api/admin/questions',
+          API_PATHS.admin.questions,
           { method: 'POST', data: payload, skipErrorHandler: true },
         );
         message.success(
@@ -1317,7 +1317,7 @@ const QuestionsDetailContent: React.FC = () => {
         delete payload.test_cases;
       }
       setSaving(true);
-      await request(`/api/admin/questions/${question.id}`, {
+      await request(API_PATHS.admin.question(question.id), {
         method: 'PUT',
         data: payload,
         skipErrorHandler: true,
@@ -1381,7 +1381,7 @@ const QuestionsDetailContent: React.FC = () => {
   const deleteQuestion = async () => {
     if (!question) return;
     try {
-      await request(`/api/admin/questions/${question.id}`, {
+      await request(API_PATHS.admin.question(question.id), {
         method: 'DELETE',
         skipErrorHandler: true,
       });
diff --git a/apps/admin/src/pages/Content/Library/Questions/index.tsx b/apps/admin/src/pages/Content/Library/Questions/index.tsx
index 6f8748b..9366a6b 100644
--- a/apps/admin/src/pages/Content/Library/Questions/index.tsx
+++ b/apps/admin/src/pages/Content/Library/Questions/index.tsx
@@ -16,6 +16,7 @@ import {
 } from '@ant-design/pro-components';
 import type { AdminQuestion, QuestionType } from '@examora/types';
 import {
+  API_PATHS,
   DIFFICULTY_OPTIONS,
   QUESTION_STATUS_OPTIONS,
   QUESTION_TYPE_OPTIONS,
@@ -178,7 +179,7 @@ export const QuestionsPageContent: React.FC<QuestionsPageContentProps> = ({
       }),
       onOk: async () => {
         try {
-          await request(`/api/admin/questions/${question.id}`, {
+          await request(API_PATHS.admin.question(question.id), {
             method: 'DELETE',
             skipErrorHandler: true,
           });
@@ -260,7 +261,7 @@ export const QuestionsPageContent: React.FC<QuestionsPageContentProps> = ({
       }),
       onOk: async () => {
         try {
-          await request(`/api/admin/questions/${question.id}`, {
+          await request(API_PATHS.admin.question(question.id), {
             method: 'PATCH',
             data: { status: next },
             skipErrorHandler: true,
@@ -371,7 +372,7 @@ export const QuestionsPageContent: React.FC<QuestionsPageContentProps> = ({
           const response = await request<{
             code: number;
             data: BatchActionResult;
-          }>('/api/admin/questions/batch/status', {
+          }>(API_PATHS.admin.questionBatchStatus, {
             method: 'PATCH',
             data: { ids: selectedRows.map((item) => item.id), status },
             skipErrorHandler: true,
@@ -419,7 +420,7 @@ export const QuestionsPageContent: React.FC<QuestionsPageContentProps> = ({
           const response = await request<{
             code: number;
             data: BatchActionResult;
-          }>('/api/admin/questions/batch', {
+          }>(API_PATHS.admin.questionBatch, {
             method: 'DELETE',
             data: { ids: selectedRows.map((item) => item.id) },
             skipErrorHandler: true,
@@ -719,7 +720,7 @@ export const QuestionsPageContent: React.FC<QuestionsPageContentProps> = ({
             const response = await request<{
               code: number;
               data: { items: AdminQuestion[]; total: number };
-            }>('/api/admin/questions', {
+            }>(API_PATHS.admin.questions, {
               params: {
                 page: params.current,
                 page_size: params.pageSize,
diff --git a/apps/admin/src/pages/Content/Papers/Detail/index.tsx b/apps/admin/src/pages/Content/Papers/Detail/index.tsx
index d9ee00d..8b73f54 100644
--- a/apps/admin/src/pages/Content/Papers/Detail/index.tsx
+++ b/apps/admin/src/pages/Content/Papers/Detail/index.tsx
@@ -30,7 +30,11 @@ import {
   verticalListSortingStrategy,
 } from '@dnd-kit/sortable';
 import type { AdminPaperOutline, AdminQuestion } from '@examora/types';
-import { DIFFICULTY_OPTIONS, QUESTION_TYPE_OPTIONS } from '@examora/types';
+import {
+  API_PATHS,
+  DIFFICULTY_OPTIONS,
+  QUESTION_TYPE_OPTIONS,
+} from '@examora/types';
 import { history, request, useIntl } from '@umijs/max';
 import {
   App as AntdApp,
@@ -282,7 +286,7 @@ const PaperDetailContent: React.FC = () => {
         const response = await request<{
           code: number;
           data: AdminPaperOutline;
-        }>(`/api/admin/papers/${paperId}/outline`);
+        }>(API_PATHS.admin.paperOutline(paperId));
         if (cancelled) return;
         const outline = response.data;
         setPaper(outline.paper);
@@ -535,7 +539,7 @@ const PaperDetailContent: React.FC = () => {
 
   const saveOutline = async (targetPaperID: number) => {
     const response = await request<{ code: number; data: AdminPaperOutline }>(
-      `/api/admin/papers/${targetPaperID}/outline`,
+      API_PATHS.admin.paperOutline(targetPaperID),
       {
         method: 'PUT',
         skipErrorHandler: true,
@@ -586,7 +590,7 @@ const PaperDetailContent: React.FC = () => {
       const values = await form.validateFields();
       setSaving(true);
       const paperResponse = await request<{ code: number; data: Paper }>(
-        isCreate ? '/api/admin/papers' : `/api/admin/papers/${paperId}`,
+        isCreate ? API_PATHS.admin.papers : API_PATHS.admin.paper(paperId),
         {
           method: isCreate ? 'POST' : 'PUT',
           skipErrorHandler: true,
@@ -1327,7 +1331,7 @@ const PaperDetailContent: React.FC = () => {
               const response = await request<{
                 code: number;
                 data: { items: AdminQuestion[]; total: number };
-              }>('/api/admin/questions', {
+              }>(API_PATHS.admin.questions, {
                 params: {
                   page: params.current,
                   page_size: params.pageSize,
diff --git a/apps/admin/src/pages/Content/Papers/index.tsx b/apps/admin/src/pages/Content/Papers/index.tsx
index 0575ba6..a64ed72 100644
--- a/apps/admin/src/pages/Content/Papers/index.tsx
+++ b/apps/admin/src/pages/Content/Papers/index.tsx
@@ -11,6 +11,7 @@ import {
   type ProColumns,
   ProTable,
 } from '@ant-design/pro-components';
+import { API_PATHS } from '@examora/types';
 import { history, request, useIntl } from '@umijs/max';
 import { App as AntdApp, Button, Dropdown, Space, Tag, Tooltip } from 'antd';
 import dayjs from 'dayjs';
@@ -91,7 +92,7 @@ const PapersPageContent: React.FC = () => {
       }),
       onOk: async () => {
         try {
-          await request(`/api/admin/papers/${paper.id}`, {
+          await request(API_PATHS.admin.paper(paper.id), {
             method: 'DELETE',
             skipErrorHandler: true,
           });
@@ -190,7 +191,7 @@ const PapersPageContent: React.FC = () => {
           const response = await request<{
             code: number;
             data: BatchActionResult;
-          }>('/api/admin/papers/batch', {
+          }>(API_PATHS.admin.paperBatch, {
             method: 'DELETE',
             data: { ids: selectedRows.map((item) => item.id) },
             skipErrorHandler: true,
@@ -454,7 +455,7 @@ const PapersPageContent: React.FC = () => {
             const response = await request<{
               code: number;
               data: { items: Paper[]; total: number };
-            }>('/api/admin/papers', {
+            }>(API_PATHS.admin.papers, {
               params: {
                 page: params.current,
                 page_size: params.pageSize,
diff --git a/apps/admin/src/pages/Examination/Candidates/index.tsx b/apps/admin/src/pages/Examination/Candidates/index.tsx
index 64e1232..542a8d3 100644
--- a/apps/admin/src/pages/Examination/Candidates/index.tsx
+++ b/apps/admin/src/pages/Examination/Candidates/index.tsx
@@ -1,19 +1,30 @@
 import { PageContainer } from '@ant-design/pro-components';
-import { history } from '@umijs/max';
+import { history, useIntl } from '@umijs/max';
 import { Button, Card, Result } from 'antd';
 import React from 'react';
 
 const Index: React.FC = () => {
+  const intl = useIntl();
+
   return (
-    <PageContainer content="管理考生账号，导入和导出考生信息，查看考生参与考试情况。">
+    <PageContainer
+      content={intl.formatMessage({
+        id: 'pages.comingSoon.candidates.description',
+      })}
+    >
       <Card>
         <Result
           status="info"
-          title="即将上线"
-          subTitle="该功能正在开发中，敬请期待。"
+          title={intl.formatMessage({ id: 'pages.comingSoon.shortTitle' })}
+          subTitle={intl.formatMessage({
+            id: 'pages.comingSoon.shortDescription',
+          })}
           extra={
-            <Button type="primary" onClick={() => history.push('/')}>
-              返回首页
+            <Button
+              type="primary"
+              onClick={() => history.push('/overview/dashboard')}
+            >
+              {intl.formatMessage({ id: 'pages.comingSoon.backDashboard' })}
             </Button>
           }
         />
diff --git a/apps/admin/src/pages/Examination/ExamList/index.tsx b/apps/admin/src/pages/Examination/ExamList/index.tsx
index 1a9af71..5a0ceeb 100644
--- a/apps/admin/src/pages/Examination/ExamList/index.tsx
+++ b/apps/admin/src/pages/Examination/ExamList/index.tsx
@@ -6,6 +6,7 @@ import {
   type ProColumns,
   ProTable,
 } from '@ant-design/pro-components';
+import { API_PATHS } from '@examora/types';
 import { history, request, useIntl } from '@umijs/max';
 import { App as AntdApp, Button, Dropdown, Space, Tag } from 'antd';
 import dayjs from 'dayjs';
@@ -163,7 +164,7 @@ const ExamListContent: React.FC = () => {
           const response = await request<{
             code: number;
             data: BatchActionResult;
-          }>('/api/admin/exams/batch/close', {
+          }>(API_PATHS.admin.examBatchClose, {
             method: 'POST',
             data: { ids: closableSelectedRows.map((item) => item.id) },
             skipErrorHandler: true,
@@ -370,7 +371,7 @@ const ExamListContent: React.FC = () => {
             const response = await request<{
               code: number;
               data: { items: Exam[]; total: number };
-            }>('/api/admin/exams', {
+            }>(API_PATHS.admin.exams, {
               skipErrorHandler: true,
               params: {
                 page: params.current,
diff --git a/apps/admin/src/pages/Examination/ExamPublish/index.tsx b/apps/admin/src/pages/Examination/ExamPublish/index.tsx
index c61d2e6..b643a91 100644
--- a/apps/admin/src/pages/Examination/ExamPublish/index.tsx
+++ b/apps/admin/src/pages/Examination/ExamPublish/index.tsx
@@ -1,4 +1,5 @@
 import { PageContainer } from '@ant-design/pro-components';
+import { API_PATHS } from '@examora/types';
 import { history, request, useIntl } from '@umijs/max';
 import {
   Alert,
@@ -39,7 +40,7 @@ const ExamPublishContent: React.FC = () => {
     if (!examId) return;
 
     setLoading(true);
-    request<{ code: number; data: Exam }>(`/api/admin/exams/${examId}`, {
+    request<{ code: number; data: Exam }>(API_PATHS.admin.exam(examId), {
       method: 'GET',
       skipErrorHandler: true,
     })
@@ -73,7 +74,7 @@ const ExamPublishContent: React.FC = () => {
     setSubmitting(true);
     try {
       const response = await request<{ code: number; message: string }>(
-        `/api/admin/exams/${examId}/publish`,
+        API_PATHS.admin.examPublish(examId),
         {
           method: 'POST',
           skipErrorHandler: true,
diff --git a/apps/admin/src/pages/Login/Login.less b/apps/admin/src/pages/Login/Login.less
index 705d6a3..ccd8d37 100644
--- a/apps/admin/src/pages/Login/Login.less
+++ b/apps/admin/src/pages/Login/Login.less
@@ -1,4 +1,5 @@
 .examora-login {
+  position: relative;
   min-height: 100vh;
   display: grid;
   grid-template-columns: minmax(420px, 0.92fr) minmax(420px, 1fr);
@@ -6,6 +7,14 @@
   color: #262626;
 }
 
+.examora-login__lang {
+  position: absolute;
+  top: 20px;
+  right: 24px;
+  z-index: 3;
+  color: #262626;
+}
+
 .examora-login__brand {
   position: relative;
   display: flex;
diff --git a/apps/admin/src/pages/Login/Login.tsx b/apps/admin/src/pages/Login/Login.tsx
index ff755eb..613b46d 100644
--- a/apps/admin/src/pages/Login/Login.tsx
+++ b/apps/admin/src/pages/Login/Login.tsx
@@ -5,6 +5,7 @@ import {
   SafetyCertificateOutlined,
   UserOutlined,
 } from '@ant-design/icons';
+import { API_PATHS } from '@examora/types';
 import { request, useIntl } from '@umijs/max';
 import {
   Alert,
@@ -18,6 +19,7 @@ import {
 import { useEffect, useState } from 'react';
 import type { AuthConfig, LoginResponse } from '@/auth/token';
 import { setAccessToken, setLocalProfile } from '@/auth/token';
+import { SelectLang } from '@/components';
 import './Login.less';
 
 const { Text, Title } = Typography;
@@ -66,7 +68,7 @@ const Login: React.FC = () => {
     const loadConfig = async () => {
       try {
         const response = await request<AuthConfig | ApiEnvelope<AuthConfig>>(
-          '/api/auth/config',
+          API_PATHS.auth.config,
           {
             method: 'GET',
           },
@@ -98,7 +100,7 @@ const Login: React.FC = () => {
     try {
       const response = await request<
         LoginResponse | ApiEnvelope<LoginResponse>
-      >('/api/auth/login', {
+      >(API_PATHS.auth.login, {
         method: 'POST',
         data: values,
         skipErrorHandler: true,
@@ -129,11 +131,14 @@ const Login: React.FC = () => {
   };
 
   const handleLogtoLogin = () => {
-    window.location.href = '/api/auth/logto/login';
+    window.location.href = API_PATHS.auth.logtoLogin;
   };
 
   return (
     <main className="examora-login">
+      <div className="examora-login__lang">
+        <SelectLang />
+      </div>
       <section className="examora-login__brand" aria-label="Examora overview">
         <div className="examora-login__brand-top">
           <img src="/logo.svg" alt="Examora" className="examora-login__logo" />
diff --git a/apps/admin/src/pages/Monitoring/Proctoring/Events/index.tsx b/apps/admin/src/pages/Monitoring/Proctoring/Events/index.tsx
index 852e7a2..fc0177c 100644
--- a/apps/admin/src/pages/Monitoring/Proctoring/Events/index.tsx
+++ b/apps/admin/src/pages/Monitoring/Proctoring/Events/index.tsx
@@ -1,19 +1,30 @@
 import { PageContainer } from '@ant-design/pro-components';
-import { history } from '@umijs/max';
+import { history, useIntl } from '@umijs/max';
 import { Button, Card, Result } from 'antd';
 import React from 'react';
 
 const Index: React.FC = () => {
+  const intl = useIntl();
+
   return (
-    <PageContainer content="查看考试过程中的异常事件和违规行为记录，保障线上考试公平公正。">
+    <PageContainer
+      content={intl.formatMessage({
+        id: 'pages.comingSoon.events.description',
+      })}
+    >
       <Card>
         <Result
           status="info"
-          title="即将上线"
-          subTitle="该功能正在开发中，敬请期待。"
+          title={intl.formatMessage({ id: 'pages.comingSoon.shortTitle' })}
+          subTitle={intl.formatMessage({
+            id: 'pages.comingSoon.shortDescription',
+          })}
           extra={
-            <Button type="primary" onClick={() => history.push('/')}>
-              返回首页
+            <Button
+              type="primary"
+              onClick={() => history.push('/overview/dashboard')}
+            >
+              {intl.formatMessage({ id: 'pages.comingSoon.backDashboard' })}
             </Button>
           }
         />
diff --git a/apps/admin/src/pages/System/Settings/Users/index.tsx b/apps/admin/src/pages/System/Settings/Users/index.tsx
index db12d1a..2795f7a 100644
--- a/apps/admin/src/pages/System/Settings/Users/index.tsx
+++ b/apps/admin/src/pages/System/Settings/Users/index.tsx
@@ -10,6 +10,7 @@ import {
   type ProColumns,
   ProTable,
 } from '@ant-design/pro-components';
+import { API_PATHS } from '@examora/types';
 import { request, useIntl } from '@umijs/max';
 import {
   App as AntdApp,
@@ -51,6 +52,14 @@ interface UserFormValues {
 const ROLE_KEYS = ['ADMIN', 'TEACHER', 'STUDENT'] as const;
 const STATUS_KEYS = ['ACTIVE', 'INACTIVE', 'SUSPENDED'] as const;
 
+const normalizeRole = (role?: string) => {
+  const normalized = role?.toUpperCase();
+  if (normalized === 'CLIENT') return 'STUDENT';
+  return normalized || '';
+};
+
+const normalizeStatus = (status?: string) => status?.toUpperCase() || '';
+
 const UserListContent: React.FC = () => {
   const intl = useIntl();
   const { message: antdMessage } = AntdApp.useApp();
@@ -137,8 +146,8 @@ const UserListContent: React.FC = () => {
       username: user.username,
       display_name: user.display_name,
       email: user.email,
-      role: user.role as UserFormValues['role'],
-      status: user.status as UserFormValues['status'],
+      role: normalizeRole(user.role) as UserFormValues['role'],
+      status: normalizeStatus(user.status) as UserFormValues['status'],
     });
     setDrawerOpen(true);
   };
@@ -148,7 +157,7 @@ const UserListContent: React.FC = () => {
       const values = await userForm.validateFields();
       setSaving(true);
       await request(
-        editing ? `/api/admin/users/${editing.id}` : '/api/admin/users',
+        editing ? API_PATHS.admin.user(editing.id) : API_PATHS.admin.users,
         {
           method: editing ? 'PUT' : 'POST',
           data: values,
@@ -212,7 +221,7 @@ const UserListContent: React.FC = () => {
       }),
       onOk: async () => {
         try {
-          await request(`/api/admin/users/${user.id}`, {
+          await request(API_PATHS.admin.user(user.id), {
             method: 'DELETE',
           });
           antdMessage.success(
@@ -303,11 +312,14 @@ const UserListContent: React.FC = () => {
       width: 90,
       search: false,
       valueEnum: roleValueEnum,
-      render: (_, user) => (
-        <Tag className="user-role-tag">
-          {roleLabelMap[user.role] || user.role}
-        </Tag>
-      ),
+      render: (_, user) => {
+        const roleKey = normalizeRole(user.role);
+        return (
+          <Tag className="user-role-tag">
+            {roleLabelMap[roleKey] || user.role}
+          </Tag>
+        );
+      },
     },
     {
       title: intl.formatMessage({
@@ -319,13 +331,16 @@ const UserListContent: React.FC = () => {
       width: 90,
       search: false,
       valueEnum: statusValueEnum,
-      render: (_, user) => (
-        <Tag
-          className={`user-status-tag user-status-${user.status.toLowerCase()}`}
-        >
-          {statusLabelMap[user.status] || user.status}
-        </Tag>
-      ),
+      render: (_, user) => {
+        const statusKey = normalizeStatus(user.status);
+        return (
+          <Tag
+            className={`user-status-tag user-status-${statusKey.toLowerCase()}`}
+          >
+            {statusLabelMap[statusKey] || user.status}
+          </Tag>
+        );
+      },
     },
     {
       title: intl.formatMessage({
@@ -482,7 +497,7 @@ const UserListContent: React.FC = () => {
             const response = await request<{
               code: number;
               data: { items: User[]; total: number };
-            }>('/api/admin/users', {
+            }>(API_PATHS.admin.users, {
               params: {
                 page: current,
                 page_size: pageSize,
@@ -566,7 +581,7 @@ const UserListContent: React.FC = () => {
             try {
               await userForm.validateFields();
               setSaving(true);
-              await request('/api/admin/users', {
+              await request(API_PATHS.admin.users, {
                 method: 'POST',
                 data: userForm.getFieldsValue(),
               });
diff --git a/apps/admin/src/pages/Welcome/TrendLineChart.tsx b/apps/admin/src/pages/Welcome/TrendLineChart.tsx
index 1aaeddf..83c468d 100644
--- a/apps/admin/src/pages/Welcome/TrendLineChart.tsx
+++ b/apps/admin/src/pages/Welcome/TrendLineChart.tsx
@@ -1,3 +1,4 @@
+import { useIntl } from '@umijs/max';
 import {
   curveMonotoneX,
   area as d3Area,
@@ -51,7 +52,7 @@ const toSeries = ({
   return [
     {
       key: 'trend',
-      label: '趋势',
+      label: 'Trend',
       color,
       data: data ?? [],
       showArea,
@@ -84,6 +85,7 @@ const TrendLineChart: React.FC<TrendLineChartProps> = ({
   showLegend = false,
   compact = false,
 }) => {
+  const intl = useIntl();
   const mergedSeries = toSeries({ data, series, color, showArea });
   const values = getChartValues(mergedSeries);
   const labels = getLabels(mergedSeries);
@@ -91,7 +93,7 @@ const TrendLineChart: React.FC<TrendLineChartProps> = ({
   if (!values.length || !labels.length) {
     return (
       <div className="trend-chart trend-chart-empty" style={{ height }}>
-        <span>暂无趋势数据</span>
+        <span>{intl.formatMessage({ id: 'pages.dashboard.chart.empty' })}</span>
       </div>
     );
   }
diff --git a/apps/admin/src/pages/Welcome/index.tsx b/apps/admin/src/pages/Welcome/index.tsx
index 7aabda4..cd37cf2 100644
--- a/apps/admin/src/pages/Welcome/index.tsx
+++ b/apps/admin/src/pages/Welcome/index.tsx
@@ -18,6 +18,7 @@ import {
   UserOutlined,
 } from '@ant-design/icons';
 import { PageContainer } from '@ant-design/pro-components';
+import { useIntl } from '@umijs/max';
 import {
   Badge,
   Button,
@@ -38,81 +39,94 @@ import './welcome.less';
 const { Text, Title } = Typography;
 
 const Welcome: React.FC = () => {
+  const intl = useIntl();
+  const f = (id: string, values?: Record<string, string | number>) =>
+    intl.formatMessage({ id }, values);
+  const weekDays = [
+    f('pages.dashboard.week.mon'),
+    f('pages.dashboard.week.tue'),
+    f('pages.dashboard.week.wed'),
+    f('pages.dashboard.week.thu'),
+    f('pages.dashboard.week.fri'),
+    f('pages.dashboard.week.sat'),
+    f('pages.dashboard.week.sun'),
+  ];
+
   const stats = [
     {
       key: 'candidates',
-      label: '注册考生',
+      label: f('pages.dashboard.stats.candidates.label'),
       value: 1247,
       trend: '+12.8%',
-      caption: '较上周新增 146 人',
+      caption: f('pages.dashboard.stats.candidates.caption'),
       icon: <UserOutlined />,
       tone: 'blue',
       chartColor: '#18181b',
       trendData: [
-        { label: '周一', value: 1018 },
-        { label: '周二', value: 1042 },
-        { label: '周三', value: 1096 },
-        { label: '周四', value: 1124 },
-        { label: '周五', value: 1190 },
-        { label: '周六', value: 1216 },
-        { label: '周日', value: 1247 },
+        { label: weekDays[0], value: 1018 },
+        { label: weekDays[1], value: 1042 },
+        { label: weekDays[2], value: 1096 },
+        { label: weekDays[3], value: 1124 },
+        { label: weekDays[4], value: 1190 },
+        { label: weekDays[5], value: 1216 },
+        { label: weekDays[6], value: 1247 },
       ],
     },
     {
       key: 'activeExams',
-      label: '进行中考试',
+      label: f('pages.dashboard.stats.activeExams.label'),
       value: 38,
-      trend: '45 人在线',
-      caption: '覆盖 6 个考场',
+      trend: f('pages.dashboard.stats.activeExams.trend'),
+      caption: f('pages.dashboard.stats.activeExams.caption'),
       icon: <FireOutlined />,
       tone: 'amber',
       chartColor: '#f97316',
       trendData: [
-        { label: '周一', value: 24 },
-        { label: '周二', value: 31 },
-        { label: '周三', value: 28 },
-        { label: '周四', value: 34 },
-        { label: '周五', value: 38 },
-        { label: '周六', value: 33 },
-        { label: '周日', value: 38 },
+        { label: weekDays[0], value: 24 },
+        { label: weekDays[1], value: 31 },
+        { label: weekDays[2], value: 28 },
+        { label: weekDays[3], value: 34 },
+        { label: weekDays[4], value: 38 },
+        { label: weekDays[5], value: 33 },
+        { label: weekDays[6], value: 38 },
       ],
     },
     {
       key: 'papers',
-      label: '试卷总数',
+      label: f('pages.dashboard.stats.papers.label'),
       value: 156,
       trend: '+8',
-      caption: '本月发布试卷',
+      caption: f('pages.dashboard.stats.papers.caption'),
       icon: <FileProtectOutlined />,
       tone: 'green',
       chartColor: '#22c55e',
       trendData: [
-        { label: '周一', value: 132 },
-        { label: '周二', value: 138 },
-        { label: '周三', value: 139 },
-        { label: '周四', value: 144 },
-        { label: '周五', value: 150 },
-        { label: '周六', value: 152 },
-        { label: '周日', value: 156 },
+        { label: weekDays[0], value: 132 },
+        { label: weekDays[1], value: 138 },
+        { label: weekDays[2], value: 139 },
+        { label: weekDays[3], value: 144 },
+        { label: weekDays[4], value: 150 },
+        { label: weekDays[5], value: 152 },
+        { label: weekDays[6], value: 156 },
       ],
     },
     {
       key: 'questions',
-      label: '题目总数',
+      label: f('pages.dashboard.stats.questions.label'),
       value: 2843,
       trend: '92%',
-      caption: '题库可复用率',
+      caption: f('pages.dashboard.stats.questions.caption'),
       icon: <DatabaseOutlined />,
       tone: 'violet',
       chartColor: '#404040',
       trendData: [
-        { label: '周一', value: 2660 },
-        { label: '周二', value: 2704 },
-        { label: '周三', value: 2748 },
-        { label: '周四', value: 2768 },
-        { label: '周五', value: 2812 },
-        { label: '周六', value: 2824 },
-        { label: '周日', value: 2843 },
+        { label: weekDays[0], value: 2660 },
+        { label: weekDays[1], value: 2704 },
+        { label: weekDays[2], value: 2748 },
+        { label: weekDays[3], value: 2768 },
+        { label: weekDays[4], value: 2812 },
+        { label: weekDays[5], value: 2824 },
+        { label: weekDays[6], value: 2843 },
       ],
     },
   ];
@@ -120,7 +134,7 @@ const Welcome: React.FC = () => {
   const loadTrendSeries = [
     {
       key: 'online',
-      label: '在线考生',
+      label: f('pages.dashboard.series.online'),
       color: '#18181b',
       showArea: true,
       data: [
@@ -135,7 +149,7 @@ const Welcome: React.FC = () => {
     },
     {
       key: 'queue',
-      label: '判题队列',
+      label: f('pages.dashboard.series.queue'),
       color: '#f97316',
       dashed: true,
       data: [
@@ -150,7 +164,7 @@ const Welcome: React.FC = () => {
     },
     {
       key: 'risk',
-      label: '风险事件',
+      label: f('pages.dashboard.series.risk'),
       color: '#ef4444',
       data: [
         { label: '08:00', value: 2 },
@@ -167,56 +181,59 @@ const Welcome: React.FC = () => {
   const exams = [
     {
       key: 'math-final',
-      name: '2026 春季高等数学期末考试',
+      name: f('pages.dashboard.exams.math'),
       progress: 78,
       active: 45,
       total: 120,
-      status: '进行中',
-      risk: '低风险',
+      status: f('pages.dashboard.status.running'),
+      risk: f('pages.dashboard.risk.low'),
+      riskLevel: 'low',
     },
     {
       key: 'python',
-      name: 'Python 程序设计能力测试',
+      name: f('pages.dashboard.exams.python'),
       progress: 45,
       active: 12,
       total: 60,
-      status: '进行中',
-      risk: '关注',
+      status: f('pages.dashboard.status.running'),
+      risk: f('pages.dashboard.risk.watch'),
+      riskLevel: 'watch',
     },
     {
       key: 'physics',
-      name: '大学物理模拟测试',
+      name: f('pages.dashboard.exams.physics'),
       progress: 100,
       active: 0,
       total: 80,
-      status: '已结束',
-      risk: '正常',
+      status: f('pages.dashboard.status.closed'),
+      risk: f('pages.dashboard.risk.normal'),
+      riskLevel: 'normal',
     },
   ];
 
   const activities = [
     {
       key: 'a1',
-      text: '李娜提交了 Python 程序设计能力测试',
-      meta: '5 分钟前',
+      text: f('pages.dashboard.activities.a1'),
+      meta: f('pages.dashboard.activities.5m'),
       color: '#262626',
     },
     {
       key: 'a2',
-      text: '王磊的考试被系统自动提交',
-      meta: '8 分钟前',
+      text: f('pages.dashboard.activities.a2'),
+      meta: f('pages.dashboard.activities.8m'),
       color: '#f97316',
     },
     {
       key: 'a3',
-      text: '张伟开始作答 2026 春季高等数学',
-      meta: '12 分钟前',
+      text: f('pages.dashboard.activities.a3'),
+      meta: f('pages.dashboard.activities.12m'),
       color: '#22c55e',
     },
     {
       key: 'a4',
-      text: '陈静提交了数据结构与算法测试',
-      meta: '15 分钟前',
+      text: f('pages.dashboard.activities.a4'),
+      meta: f('pages.dashboard.activities.15m'),
       color: '#262626',
     },
   ];
@@ -224,55 +241,61 @@ const Welcome: React.FC = () => {
   const judgeQueues = [
     {
       key: 'waiting',
-      label: '等待判题',
+      label: f('pages.dashboard.queue.waiting'),
       value: 126,
       percent: 64,
       color: '#18181b',
     },
     {
       key: 'running',
-      label: '执行中',
+      label: f('pages.dashboard.queue.running'),
       value: 18,
       percent: 42,
       color: '#f97316',
     },
-    { key: 'failed', label: '需复核', value: 7, percent: 18, color: '#ef4444' },
+    {
+      key: 'failed',
+      label: f('pages.dashboard.queue.failed'),
+      value: 7,
+      percent: 18,
+      color: '#ef4444',
+    },
   ];
 
   const shortcuts = [
     {
       key: 'users',
-      label: '用户管理',
+      label: f('pages.dashboard.shortcuts.users'),
       path: '/system/settings/users',
       icon: <SolutionOutlined />,
     },
     {
       key: 'exams',
-      label: '考试管理',
+      label: f('pages.dashboard.shortcuts.exams'),
       path: '/examination/exams',
       icon: <ProjectOutlined />,
     },
     {
       key: 'papers',
-      label: '试卷管理',
+      label: f('pages.dashboard.shortcuts.papers'),
       path: '/content/papers',
       icon: <BookOutlined />,
     },
     {
       key: 'questions',
-      label: '题库管理',
+      label: f('pages.dashboard.shortcuts.questions'),
       path: '/content/library/questions',
       icon: <DatabaseOutlined />,
     },
     {
       key: 'programming',
-      label: '编程题库',
+      label: f('pages.dashboard.shortcuts.programming'),
       path: '/content/library/programming',
       icon: <CodeOutlined />,
     },
     {
       key: 'submissions',
-      label: '提交记录',
+      label: f('pages.dashboard.shortcuts.submissions'),
       path: '/assessment/results/submissions',
       icon: <AuditOutlined />,
     },
@@ -285,31 +308,31 @@ const Welcome: React.FC = () => {
           <div className="hero-main">
             <div className="hero-title-row">
               <Title level={2} className="hero-title">
-                考试运营工作台
+                {f('pages.dashboard.hero.title')}
               </Title>
               <Space size={8} wrap className="hero-kicker">
                 <span className="hero-status-dot" />
-                <span>实时运营</span>
+                <span>{f('pages.dashboard.hero.kicker')}</span>
                 <Tag className="hero-product-tag" variant="filled">
                   Examora Admin
                 </Tag>
               </Space>
             </div>
             <Text className="hero-subtitle">
-              聚合考试进度、监考事件、题库资产与判题队列，帮助管理员快速判断今天的关键风险。
+              {f('pages.dashboard.hero.subtitle')}
             </Text>
             <div className="hero-pulse">
               <span>
                 <strong>45</strong>
-                在线考生
+                {f('pages.dashboard.hero.online')}
               </span>
               <span>
                 <strong>9</strong>
-                风险关注
+                {f('pages.dashboard.hero.risk')}
               </span>
               <span>
                 <strong>126</strong>
-                等待判题
+                {f('pages.dashboard.hero.queue')}
               </span>
             </div>
           </div>
@@ -319,13 +342,13 @@ const Welcome: React.FC = () => {
               type="primary"
               icon={<ProjectOutlined />}
             >
-              新建考试
+              {f('pages.dashboard.actions.createExam')}
             </Button>
             <Button
               href="/monitoring/proctoring/events"
               icon={<SafetyOutlined />}
             >
-              查看监控
+              {f('pages.dashboard.actions.viewMonitoring')}
             </Button>
           </Space>
         </section>
@@ -349,7 +372,9 @@ const Welcome: React.FC = () => {
                 <Text className="metric-caption">{stat.caption}</Text>
                 <TrendLineChart
                   compact
-                  ariaLabel={`${stat.label} 7 日趋势`}
+                  ariaLabel={f('pages.dashboard.chart.weekAria', {
+                    label: stat.label,
+                  })}
                   data={stat.trendData}
                   color={stat.chartColor}
                   height={52}
@@ -367,31 +392,39 @@ const Welcome: React.FC = () => {
               title={
                 <Space>
                   <BarChartOutlined />
-                  考试负载趋势
+                  {f('pages.dashboard.load.title')}
                 </Space>
               }
-              extra={<Text type="secondary">近 12 小时</Text>}
+              extra={
+                <Text type="secondary">{f('pages.dashboard.load.range')}</Text>
+              }
             >
               <div className="load-trend-layout">
                 <div className="load-trend-summary">
                   <div>
-                    <Text type="secondary">峰值在线</Text>
+                    <Text type="secondary">
+                      {f('pages.dashboard.load.peakOnline')}
+                    </Text>
                     <strong>84</strong>
-                    <span>16:00 达到峰值</span>
+                    <span>{f('pages.dashboard.load.peakOnlineCaption')}</span>
                   </div>
                   <div>
-                    <Text type="secondary">队列峰值</Text>
+                    <Text type="secondary">
+                      {f('pages.dashboard.load.peakQueue')}
+                    </Text>
                     <strong>126</strong>
-                    <span>平均处理 42 秒</span>
+                    <span>{f('pages.dashboard.load.peakQueueCaption')}</span>
                   </div>
                   <div>
-                    <Text type="secondary">风险事件</Text>
+                    <Text type="secondary">
+                      {f('pages.dashboard.load.riskEvents')}
+                    </Text>
                     <strong>9</strong>
-                    <span>较昨日下降 18%</span>
+                    <span>{f('pages.dashboard.load.riskEventsCaption')}</span>
                   </div>
                 </div>
                 <TrendLineChart
-                  ariaLabel="近 12 小时在线考生、判题队列和风险事件趋势"
+                  ariaLabel={f('pages.dashboard.load.aria')}
                   series={loadTrendSeries}
                   height={210}
                   showGrid
@@ -410,7 +443,7 @@ const Welcome: React.FC = () => {
               title={
                 <Space>
                   <BarChartOutlined />
-                  考试进度
+                  {f('pages.dashboard.progress.title')}
                 </Space>
               }
               extra={
@@ -420,7 +453,7 @@ const Welcome: React.FC = () => {
                   icon={<ArrowRightOutlined />}
                   iconPlacement="end"
                 >
-                  全部考试
+                  {f('pages.dashboard.progress.allExams')}
                 </Button>
               }
             >
@@ -433,20 +466,30 @@ const Welcome: React.FC = () => {
                       </Text>
                       <div className="exam-meta">
                         <span>
-                          <TeamOutlined /> {exam.active} 人在考
+                          <TeamOutlined />{' '}
+                          {f('pages.dashboard.progress.activeCount', {
+                            count: exam.active,
+                          })}
                         </span>
                         <span>
-                          <ClockCircleOutlined /> {exam.total} 分钟
+                          <ClockCircleOutlined />{' '}
+                          {f('pages.dashboard.progress.duration', {
+                            count: exam.total,
+                          })}
                         </span>
                       </div>
                     </div>
                     <Space size={8} wrap>
                       <Tag
-                        color={exam.status === '已结束' ? '#22c55e' : '#262626'}
+                        color={exam.key === 'physics' ? '#22c55e' : '#262626'}
                       >
                         {exam.status}
                       </Tag>
-                      <Tag color={exam.risk === '关注' ? '#f97316' : '#262626'}>
+                      <Tag
+                        color={
+                          exam.riskLevel === 'watch' ? '#f97316' : '#262626'
+                        }
+                      >
                         {exam.risk}
                       </Tag>
                     </Space>
@@ -468,12 +511,12 @@ const Welcome: React.FC = () => {
               title={
                 <Space>
                   <AlertOutlined />
-                  监考风险
+                  {f('pages.dashboard.risk.title')}
                 </Space>
               }
               extra={
                 <Tag color="#f97316" variant="filled">
-                  需关注 9
+                  {f('pages.dashboard.risk.watchCount')}
                 </Tag>
               }
             >
@@ -486,26 +529,34 @@ const Welcome: React.FC = () => {
                   railColor="#f4f4f5"
                 />
                 <div>
-                  <Text className="risk-label">今日考试健康度</Text>
+                  <Text className="risk-label">
+                    {f('pages.dashboard.risk.healthLabel')}
+                  </Text>
                   <Title level={3} className="risk-title">
-                    整体稳定
+                    {f('pages.dashboard.risk.healthTitle')}
                   </Title>
                   <Text className="risk-copy">
-                    自动提交、离屏与网络波动事件均处于可控范围。
+                    {f('pages.dashboard.risk.healthCopy')}
                   </Text>
                 </div>
               </div>
               <div className="risk-grid">
                 <div>
-                  <Text type="secondary">离屏事件</Text>
+                  <Text type="secondary">
+                    {f('pages.dashboard.risk.offscreen')}
+                  </Text>
                   <strong>6</strong>
                 </div>
                 <div>
-                  <Text type="secondary">网络波动</Text>
+                  <Text type="secondary">
+                    {f('pages.dashboard.risk.network')}
+                  </Text>
                   <strong>3</strong>
                 </div>
                 <div>
-                  <Text type="secondary">人工复核</Text>
+                  <Text type="secondary">
+                    {f('pages.dashboard.risk.review')}
+                  </Text>
                   <strong>2</strong>
                 </div>
               </div>
@@ -520,7 +571,7 @@ const Welcome: React.FC = () => {
               title={
                 <Space>
                   <ThunderboltOutlined />
-                  判题队列
+                  {f('pages.dashboard.queue.title')}
                 </Space>
               }
             >
@@ -549,10 +600,15 @@ const Welcome: React.FC = () => {
               title={
                 <Space>
                   <FireOutlined />
-                  考试动态
+                  {f('pages.dashboard.activities.title')}
                 </Space>
               }
-              extra={<Badge status="processing" text="实时" />}
+              extra={
+                <Badge
+                  status="processing"
+                  text={f('pages.dashboard.hero.kicker')}
+                />
+              }
             >
               <Timeline
                 className="activity-timeline"
@@ -576,7 +632,7 @@ const Welcome: React.FC = () => {
               title={
                 <Space>
                   <CheckCircleOutlined />
-                  快捷入口
+                  {f('pages.dashboard.shortcuts.title')}
                 </Space>
               }
             >
diff --git a/apps/admin/src/services/api.ts b/apps/admin/src/services/api.ts
index 0f86029..d2b988f 100644
--- a/apps/admin/src/services/api.ts
+++ b/apps/admin/src/services/api.ts
@@ -1,10 +1,11 @@
 // @ts-ignore
 /* eslint-disable */
+import { API_PATHS } from "@examora/types";
 import { request } from "@umijs/max";
 
-/** 获取当前的用户 GET /api/auth/me */
+/** 获取当前的用户 GET /api/v1/auth/me */
 export async function currentUser(options?: { [key: string]: any }) {
-  return request<API.CurrentUser>("/api/auth/me", {
+  return request<API.CurrentUser>(API_PATHS.auth.me, {
     method: "GET",
     ...(options || {}),
   });
diff --git a/apps/desktop/src/App.vue b/apps/desktop/src/App.vue
index 2f79831..9509dfd 100644
--- a/apps/desktop/src/App.vue
+++ b/apps/desktop/src/App.vue
@@ -1,49 +1,19 @@
 <script setup lang="ts">
+import { ApiClient } from '@examora/client';
+import type {
+  CandidateExamItem,
+  CandidatePaper,
+  CandidateQuestion,
+  ExamSession,
+} from '@examora/types';
 import { computed, onMounted, onUnmounted, ref } from 'vue';
 
-// Types matching packages/types
-interface ExamSession {
-  id: string;
-  examSnapshotId: string;
-  userId: string;
-  status: 'NOT_STARTED' | 'IN_PROGRESS' | 'SUBMITTED' | 'EXPIRED';
-  startedAt?: string;
-  submittedAt?: string;
-  remainingSeconds?: number;
-}
-
-interface CandidateQuestion {
-  snapshotId: string;
-  type:
-    | 'SINGLE_CHOICE'
-    | 'MULTIPLE_CHOICE'
-    | 'TRUE_FALSE'
-    | 'FILL_BLANK'
-    | 'SHORT_ANSWER'
-    | 'PROGRAMMING';
-  title: string;
-  content: Record<string, unknown>;
-  score: number;
-  sortOrder: number;
-  sampleTestCases?: { input: string; expectedOutput: string }[];
-  starterCode?: string;
-  timeLimitMs: number;
-}
-
 interface ChoiceOption {
   key: string;
   text: string;
 }
 
-interface CandidatePaper {
-  examSnapshotId: string;
-  title: string;
-  startTime: string;
-  endTime: string;
-  durationMinutes: number;
-  remainingSeconds: number;
-  questions: CandidateQuestion[];
-}
+const apiClient = new ApiClient({ baseUrl: '' });
 
 // State
 const currentView = ref<'login' | 'list' | 'exam'>('login');
@@ -51,15 +21,18 @@ const examId = ref<number>(1);
 const username = ref('');
 const password = ref('');
 const loginError = ref('');
+const listError = ref('');
+const examError = ref('');
 const loginLoading = ref(false);
 
-const sessions = ref<{ id: number; title: string; status: string }[]>([]);
+const sessions = ref<CandidateExamItem[]>([]);
 const currentSession = ref<ExamSession | null>(null);
 const paper = ref<CandidatePaper | null>(null);
 const currentQuestionIndex = ref(0);
 const answers = ref<Map<string, Record<string, unknown>>>(new Map());
 const submitLoading = ref(false);
 const autoSaveStatus = ref<'idle' | 'saving' | 'saved'>('idle');
+const examActive = ref(false);
 
 let timerInterval: number | null = null;
 let autoSaveInterval: number | null = null;
@@ -71,12 +44,21 @@ const currentQuestion = computed(() => {
 
 const formattedTime = computed(() => {
   if (!paper.value) return '00:00';
-  const secs = paper.value.remainingSeconds;
+  const secs = paper.value.remaining_seconds;
   const mins = Math.floor(secs / 60);
   const secsRem = secs % 60;
   return `${String(mins).padStart(2, '0')}:${String(secsRem).padStart(2, '0')}`;
 });
 
+function syncClientTokenFromStorage() {
+  const token = localStorage.getItem('token');
+  if (token) {
+    apiClient.setAccessToken(token);
+  } else {
+    apiClient.clearAccessToken();
+  }
+}
+
 // Login
 async function handleLogin() {
   if (!username.value || !password.value) {
@@ -86,53 +68,39 @@ async function handleLogin() {
   loginLoading.value = true;
   loginError.value = '';
   try {
-    const res = await fetch('/api/auth/login', {
-      method: 'POST',
-      headers: { 'Content-Type': 'application/json' },
-      body: JSON.stringify({
-        username: username.value,
-        password: password.value,
-      }),
+    const loginData = await apiClient.authLogin({
+      username: username.value,
+      password: password.value,
     });
-    const data = await res.json();
-    if (data.code === 0) {
-      localStorage.setItem('token', data.data.token);
-      // Fetch user info after login to get user ID
-      const meRes = await fetch('/api/auth/me', {
-        headers: { Authorization: `Bearer ${data.data.token}` },
-      });
-      const meData = await meRes.json();
-      if (meData.code === 0) {
-        localStorage.setItem('userId', String(meData.data.id));
-      }
-      loadExamList();
-    } else {
-      loginError.value = data.message || '登录失败';
-    }
-  } catch {
-    loginError.value = '网络错误';
+    localStorage.setItem('token', loginData.token);
+    const meData = await apiClient.authMe();
+    localStorage.setItem('userId', String(meData.id));
+    await loadExamList();
+  } catch (error) {
+    loginError.value = error instanceof Error ? error.message : '网络错误';
   } finally {
     loginLoading.value = false;
   }
 }
 
 async function loadExamList() {
+  listError.value = '';
   try {
-    const res = await fetch('/api/client/exams', {
-      headers: { Authorization: `Bearer ${localStorage.getItem('token')}` },
-    });
-    const data = await res.json();
-    if (data.code === 0) {
-      sessions.value = data.data.items || [];
-    }
-  } catch (e) {
-    console.error('Failed to load exam list:', e);
+    syncClientTokenFromStorage();
+    const data = await apiClient.listAvailableExams();
+    sessions.value = data.items || [];
+  } catch (error) {
+    listError.value =
+      error instanceof Error ? error.message : '考试列表加载失败';
   }
   currentView.value = 'list';
 }
 
 function selectExam(id: number) {
   examId.value = id;
+  currentQuestionIndex.value = 0;
+  answers.value.clear();
+  examActive.value = false;
   startExam();
 }
 
@@ -140,87 +108,45 @@ async function startExam() {
   const userId = localStorage.getItem('userId');
   if (!userId) return;
 
+  examError.value = '';
   try {
-    // Start session
-    const res = await fetch(
-      `/api/client/exams/${examId.value}/sessions/start`,
-      {
-        method: 'POST',
-        headers: {
-          'Content-Type': 'application/json',
-          Authorization: `Bearer ${localStorage.getItem('token')}`,
-        },
-        body: JSON.stringify({ device_id: 'desktop-001' }),
-      },
-    );
-    const data = await res.json();
-    if (data.code === 0) {
-      currentSession.value = data.data;
-    }
-
-    // Get paper
-    const paperRes = await fetch(`/api/client/exams/${examId.value}/paper`, {
-      headers: { Authorization: `Bearer ${localStorage.getItem('token')}` },
+    syncClientTokenFromStorage();
+    currentSession.value = await apiClient.startExamSession(examId.value, {
+      device_id: 'desktop-001',
     });
-    const paperData = await paperRes.json();
-    if (paperData.code === 0) {
-      // Map snake_case backend fields to camelCase
-      paper.value = {
-        examSnapshotId: String(paperData.data.exam_snapshot_id),
-        title: paperData.data.title || '',
-        startTime: paperData.data.start_time,
-        endTime: paperData.data.end_time,
-        durationMinutes: paperData.data.duration_minutes,
-        remainingSeconds: paperData.data.remaining_seconds,
-        questions: (paperData.data.questions || []).map((q: any) => ({
-          snapshotId: String(q.snapshot_id),
-          type: q.type,
-          title: q.title,
-          content: q.content || {},
-          score: q.score,
-          sortOrder: q.sort_order,
-          sampleTestCases: (q.sample_test_cases || []).map((tc: any) => ({
-            input: tc.input,
-            expectedOutput: tc.expected_output,
-          })),
-          starterCode: q.starter_code,
-          timeLimitMs: q.time_limit_ms,
-        })),
-      };
-      currentView.value = 'exam';
-      startTimer();
-      startAutoSave();
-    }
-  } catch (e) {
-    console.error('Failed to start exam:', e);
+    paper.value = await apiClient.getCandidatePaper(examId.value);
+    examActive.value = true;
+    currentView.value = 'exam';
+    startTimer();
+    startAutoSave();
+  } catch (error) {
+    examError.value = error instanceof Error ? error.message : '考试启动失败';
   }
 }
 
 function startTimer() {
+  if (timerInterval) clearInterval(timerInterval);
   timerInterval = window.setInterval(() => {
-    if (paper.value && paper.value.remainingSeconds > 0) {
-      paper.value.remainingSeconds--;
+    if (paper.value && paper.value.remaining_seconds > 0) {
+      paper.value.remaining_seconds--;
     }
   }, 1000);
 }
 
 function startAutoSave() {
+  if (autoSaveInterval) clearInterval(autoSaveInterval);
   autoSaveInterval = window.setInterval(() => {
     saveDraft();
   }, 30000); // every 30 seconds
 }
 
 async function saveDraft() {
-  if (!paper.value) return;
+  if (!paper.value || !examActive.value || submitLoading.value) return;
   autoSaveStatus.value = 'saving';
   try {
-    await fetch(`/api/client/exams/${examId.value}/answers`, {
-      method: 'POST',
-      headers: {
-        'Content-Type': 'application/json',
-        Authorization: `Bearer ${localStorage.getItem('token')}`,
-      },
-      body: JSON.stringify({ answers: Object.fromEntries(answers.value) }),
+    syncClientTokenFromStorage();
+    await apiClient.saveAnswers(examId.value, {
+      answers: Object.fromEntries(answers.value),
     });
     autoSaveStatus.value = 'saved';
     setTimeout(() => {
@@ -235,14 +161,19 @@ async function submitExam() {
   if (!confirm('确定要交卷吗？')) return;
   submitLoading.value = true;
   try {
-    await fetch(`/api/client/exams/${examId.value}/submit`, {
-      method: 'POST',
-      headers: { Authorization: `Bearer ${localStorage.getItem('token')}` },
-    });
-    alert('提交成功');
+    syncClientTokenFromStorage();
+    examActive.value = false;
     cleanup();
+    await apiClient.submitExam(examId.value);
+    alert('提交成功');
+    paper.value = null;
+    currentSession.value = null;
+    answers.value.clear();
     currentView.value = 'list';
   } catch {
+    examActive.value = true;
+    startTimer();
+    startAutoSave();
     alert('提交失败');
   } finally {
     submitLoading.value = false;
@@ -252,6 +183,9 @@ async function submitExam() {
 function cleanup() {
   if (timerInterval) clearInterval(timerInterval);
   if (autoSaveInterval) clearInterval(autoSaveInterval);
+  timerInterval = null;
+  autoSaveInterval = null;
+  autoSaveStatus.value = 'idle';
 }
 
 function handleAnswer(questionId: string, answer: Record<string, unknown>) {
@@ -318,9 +252,24 @@ function navigateQuestion(index: number) {
   currentQuestionIndex.value = index;
 }
 
+async function handleLogout() {
+  try {
+    syncClientTokenFromStorage();
+    await apiClient.authLogout();
+  } catch {
+    apiClient.clearAccessToken();
+  }
+  localStorage.removeItem('token');
+  localStorage.removeItem('userId');
+  examActive.value = false;
+  cleanup();
+  currentView.value = 'login';
+}
+
 onMounted(() => {
   const token = localStorage.getItem('token');
   if (token) {
+    syncClientTokenFromStorage();
     loadExamList();
   }
 });
@@ -334,21 +283,35 @@ onUnmounted(() => {
   <main class="layout">
     <!-- Login View -->
     <div v-if="currentView === 'login'" class="login-panel">
-      <div class="login-card">
+      <form class="login-card" @submit.prevent="handleLogin">
         <h2>候选人登录</h2>
         <div class="form-group">
-          <label>用户名</label>
-          <input v-model="username" type="text" placeholder="请输入用户名" />
+          <label for="login-username">用户名</label>
+          <input
+            id="login-username"
+            v-model="username"
+            name="username"
+            type="text"
+            autocomplete="username"
+            placeholder="请输入用户名"
+          />
         </div>
         <div class="form-group">
-          <label>密码</label>
-          <input v-model="password" type="password" placeholder="请输入密码" />
+          <label for="login-password">密码</label>
+          <input
+            id="login-password"
+            v-model="password"
+            name="password"
+            type="password"
+            autocomplete="current-password"
+            placeholder="请输入密码"
+          />
         </div>
         <p v-if="loginError" class="error">{{ loginError }}</p>
-        <button @click="handleLogin" :disabled="loginLoading" class="btn-primary">
+        <button type="submit" :disabled="loginLoading" class="btn-primary">
           {{ loginLoading ? '登录中...' : '登录' }}
         </button>
-      </div>
+      </form>
     </div>
 
     <!-- Exam List View -->
@@ -358,8 +321,10 @@ onUnmounted(() => {
           <p class="kicker">Examora Desktop</p>
           <h1>选择考试</h1>
         </div>
-        <button @click="currentView = 'login'" class="btn-secondary">退出登录</button>
+        <button @click="handleLogout" class="btn-secondary">退出登录</button>
       </header>
+      <p v-if="listError" class="error">{{ listError }}</p>
+      <p v-if="examError" class="error">{{ examError }}</p>
       <div class="exam-grid">
         <div v-for="exam in sessions" :key="exam.id" class="exam-card">
           <h3>{{ exam.title }}</h3>
@@ -377,7 +342,7 @@ onUnmounted(() => {
           <h1>{{ paper.title }}</h1>
         </div>
         <div class="status">
-          <span :class="{ warning: paper.remainingSeconds < 300 }">
+          <span :class="{ warning: paper.remaining_seconds < 300 }">
             Timer: {{ formattedTime }}
           </span>
           <span>Autosave: {{ autoSaveStatus }}</span>
@@ -391,8 +356,8 @@ onUnmounted(() => {
           <div class="question-nav">
             <button
               v-for="(q, index) in paper.questions"
-              :key="q.snapshotId"
-              :class="{ active: index === currentQuestionIndex, answered: answers.has(q.snapshotId) }"
+              :key="q.snapshot_id"
+              :class="{ active: index === currentQuestionIndex, answered: answers.has(String(q.snapshot_id)) }"
               @click="navigateQuestion(index)"
             >
               {{ index + 1 }}
@@ -416,10 +381,10 @@ onUnmounted(() => {
                 <label v-for="opt in getChoiceOptions(currentQuestion)" :key="opt.key">
                   <input
                     type="radio"
-                    :name="'q-' + currentQuestion.snapshotId"
+                    :name="'q-' + currentQuestion.snapshot_id"
                     :value="opt.key"
-                    :checked="answers.get(currentQuestion.snapshotId)?.choice === opt.key"
-                    @change="handleAnswer(currentQuestion.snapshotId, { choice: opt.key })"
+                    :checked="answers.get(String(currentQuestion.snapshot_id))?.choice === opt.key"
+                    @change="handleAnswer(String(currentQuestion.snapshot_id), { choice: opt.key })"
                   />
                   <span class="option-key">{{ opt.key }}</span>
                   {{ opt.text }}
@@ -430,8 +395,8 @@ onUnmounted(() => {
                   <input
                     type="checkbox"
                     :value="opt.key"
-                    :checked="isChoiceSelected(currentQuestion.snapshotId, opt.key)"
-                    @change="toggleMultipleChoice(currentQuestion.snapshotId, opt.key, ($event.target as HTMLInputElement).checked)"
+                    :checked="isChoiceSelected(String(currentQuestion.snapshot_id), opt.key)"
+                    @change="toggleMultipleChoice(String(currentQuestion.snapshot_id), opt.key, ($event.target as HTMLInputElement).checked)"
                   />
                   <span class="option-key">{{ opt.key }}</span>
                   {{ opt.text }}
@@ -439,22 +404,22 @@ onUnmounted(() => {
               </template>
               <template v-else-if="currentQuestion.type === 'PROGRAMMING'">
                 <textarea
-                  :value="getAnswerString(currentQuestion.snapshotId, 'code')"
-                  @input="handleAnswer(currentQuestion.snapshotId, { code: ($event.target as HTMLTextAreaElement).value })"
+                  :value="getAnswerString(String(currentQuestion.snapshot_id), 'code')"
+                  @input="handleAnswer(String(currentQuestion.snapshot_id), { code: ($event.target as HTMLTextAreaElement).value })"
                   placeholder="请输入代码..."
                   class="code-editor"
                 ></textarea>
-                <p v-if="currentQuestion.sampleTestCases?.length" class="sample-cases">
+                <div v-if="currentQuestion.sample_test_cases?.length" class="sample-cases">
                   示例用例：
-                  <div v-for="(tc, i) in currentQuestion.sampleTestCases" :key="i">
-                    输入: {{ tc.input }} → 输出: {{ tc.expectedOutput }}
+                  <div v-for="(tc, i) in currentQuestion.sample_test_cases" :key="i">
+                    输入: {{ tc.input }} → 输出: {{ tc.expected_output }}
                   </div>
-                </p>
+                </div>
               </template>
               <template v-else>
                 <textarea
-                  :value="getAnswerString(currentQuestion.snapshotId, 'text')"
-                  @input="handleAnswer(currentQuestion.snapshotId, { text: ($event.target as HTMLTextAreaElement).value })"
+                  :value="getAnswerString(String(currentQuestion.snapshot_id), 'text')"
+                  @input="handleAnswer(String(currentQuestion.snapshot_id), { text: ($event.target as HTMLTextAreaElement).value })"
                   placeholder="请输入答案..."
                 ></textarea>
               </template>
diff --git a/apps/desktop/vite.config.ts b/apps/desktop/vite.config.ts
index d3b8588..581c26f 100644
--- a/apps/desktop/vite.config.ts
+++ b/apps/desktop/vite.config.ts
@@ -1,9 +1,17 @@
 import vue from '@vitejs/plugin-vue';
 import { defineConfig } from 'vite';
 
+const apiProxyTarget = process.env.API_PROXY_TARGET || 'http://localhost:8080';
+
 export default defineConfig({
   plugins: [vue()],
   server: {
     port: 5174,
+    proxy: {
+      '/api/': {
+        target: apiProxyTarget,
+        changeOrigin: true,
+      },
+    },
   },
 });
diff --git a/internal/api/auth.go b/internal/api/auth.go
index 52d4120..1c4e192 100644
--- a/internal/api/auth.go
+++ b/internal/api/auth.go
@@ -21,13 +21,13 @@ const (
 	tokenCookieName = "examora_token"
 )
 
-func (s *Server) registerAuthRoutes(router *gin.Engine, authMiddleware gin.HandlerFunc) {
-	router.GET("/api/auth/config", s.getAuthConfig)
-	router.POST("/api/auth/login", s.login)
-	router.GET("/api/auth/logto/login", s.logtoLogin)
-	router.GET("/api/auth/logto/callback", s.logtoCallback)
-	router.POST("/api/auth/logout", authMiddleware, s.logout)
-	router.GET("/api/auth/me", authMiddleware, s.me)
+func (s *Server) registerAuthRoutes(v1 *gin.RouterGroup, authMiddleware gin.HandlerFunc) {
+	v1.GET("/auth/config", s.getAuthConfig)
+	v1.POST("/auth/login", s.login)
+	v1.GET("/auth/logto/login", s.logtoLogin)
+	v1.GET("/auth/logto/callback", s.logtoCallback)
+	v1.POST("/auth/logout", authMiddleware, s.logout)
+	v1.GET("/auth/me", authMiddleware, s.me)
 }
 
 func (s *Server) getAuthConfig(c *gin.Context) {
@@ -62,7 +62,7 @@ func (s *Server) logtoLogin(c *gin.Context) {
 
 	state := generateSecureState()
 	scheme := requestScheme(c)
-	callbackURL := fmt.Sprintf("%s://%s/api/auth/logto/callback", scheme, c.Request.Host)
+	callbackURL := fmt.Sprintf("%s://%s/api/v1/auth/logto/callback", scheme, c.Request.Host)
 
 	c.SetSameSite(http.SameSiteStrictMode)
 	c.SetCookie(stateCookieName, state, 300, "/", "", scheme == "https", true)
@@ -102,7 +102,7 @@ func (s *Server) logtoCallback(c *gin.Context) {
 	scheme := requestScheme(c)
 	c.SetCookie(stateCookieName, "", -1, "/", "", scheme == "https", true)
 
-	callbackURL := fmt.Sprintf("%s://%s/api/auth/logto/callback", scheme, c.Request.Host)
+	callbackURL := fmt.Sprintf("%s://%s/api/v1/auth/logto/callback", scheme, c.Request.Host)
 	tokenURL := fmt.Sprintf("%s/oidc/token", s.cfg.LogtoEndpoint)
 	resp, err := http.PostForm(tokenURL, url.Values{
 		"grant_type":   {"authorization_code"},
diff --git a/internal/api/exam.go b/internal/api/exam.go
index 7b08553..1433c10 100644
--- a/internal/api/exam.go
+++ b/internal/api/exam.go
@@ -3,7 +3,7 @@ package api
 import (
 	"github.com/gin-gonic/gin"
 
-	"github.com/coding-hui/examora/internal/exam"
+	examSvc "github.com/coding-hui/examora/internal/exam"
 	"github.com/coding-hui/examora/internal/transport/http/response"
 )
 
@@ -19,16 +19,28 @@ func (s *Server) registerExamAdminRoutes(admin *gin.RouterGroup) {
 	admin.GET("/exam-results/:id", s.getExamResult)
 }
 
+func (s *Server) listCandidateExams(c *gin.Context) {
+	userID := currentUserID(c)
+	items, err := s.exam.ListAvailableExams(c.Request.Context(), userID)
+	if err != nil {
+		writeError(c, err)
+		return
+	}
+	response.Success(c, map[string]any{"items": items})
+}
+
 func (s *Server) registerExamClientRoutes(client *gin.RouterGroup) {
-	// M1: Candidate exam flow
-	client.GET("/exams/:id/paper", s.getCandidatePaper)
-	client.POST("/exams/:id/sessions/start", s.startExamSession)
-	client.GET("/exams/:id/sessions/current", s.getCurrentSession)
-	client.POST("/exams/:id/answers", s.saveAnswers)
-	client.POST("/exams/:id/submit", s.submitExam)
-	client.GET("/exams/:id/result", s.getMyExamResult)
+	client.GET("/available", s.listCandidateExams)
+	client.GET("/:id/paper", s.getCandidatePaper)
+	client.POST("/:id/sessions/start", s.startExamSession)
+	client.GET("/:id/sessions/current", s.getCurrentSession)
+	client.POST("/:id/answers", s.saveAnswers)
+	client.POST("/:id/submit", s.submitExam)
+	client.GET("/:id/result", s.getMyExamResult)
+}
 
-	client.POST("/exams/:id/submissions", s.createSubmission)
+func (s *Server) registerClientCommonRoutes(client *gin.RouterGroup) {
+	client.POST("/submissions", s.createSubmission)
 	client.GET("/submissions/:id", s.getSubmission)
 	client.GET("/submissions/:id/result", s.getSubmission)
 	client.POST("/heartbeat", s.recordClientEvent("HEARTBEAT"))
@@ -195,15 +207,15 @@ func (s *Server) submitExam(c *gin.Context) {
 }
 
 func (s *Server) createSubmission(c *gin.Context) {
-	examID, ok := parseUintParam(c, "id")
+	req, ok := bindJSON[createSubmissionRequest](c)
 	if !ok {
 		return
 	}
-	req, ok := bindJSON[createSubmissionRequest](c)
-	if !ok {
+	if req.ExamID == 0 || req.QuestionID == 0 {
+		response.BadRequest(c, "exam_id and question_id are required")
 		return
 	}
-	created, err := s.exam.CreateSubmission(c.Request.Context(), examID, currentUserID(c), req.command())
+	created, err := s.exam.CreateSubmission(c.Request.Context(), req.ExamID, currentUserID(c), req.command())
 	if err != nil {
 		writeError(c, err)
 		return
@@ -235,7 +247,7 @@ func (s *Server) listExamResults(c *gin.Context) {
 		writeError(c, err)
 		return
 	}
-	response.PageSuccessWith(c, items, total, pageNum, pageSize, func(item exam.ExamResult) examResultResponse {
+	response.PageSuccessWith(c, items, total, pageNum, pageSize, func(item examSvc.ExamResult) examResultResponse {
 		return toExamResultResponse(item, false)
 	})
 }
diff --git a/internal/api/exam_test.go b/internal/api/exam_test.go
index 32b2305..1a6ebea 100644
--- a/internal/api/exam_test.go
+++ b/internal/api/exam_test.go
@@ -45,7 +45,7 @@ func newExamAPIRouter(t *testing.T) (*gin.Engine, *exam.Service) {
 
 	server := &Server{exam: service}
 	router := gin.New()
-	admin := router.Group("/api/admin")
+	admin := router.Group("/api/v1")
 	server.registerExamAdminRoutes(admin)
 	return router, service
 }
@@ -67,7 +67,7 @@ func TestBatchCloseExamsEndpointReturnsPartialFailures(t *testing.T) {
 
 	bodyBytes, err := json.Marshal(map[string]any{"ids": []uint64{published.ID, draft.ID}})
 	require.NoError(t, err)
-	req := httptest.NewRequest(http.MethodPost, "/api/admin/exams/batch/close", bytes.NewReader(bodyBytes))
+	req := httptest.NewRequest(http.MethodPost, "/api/v1/exams/batch/close", bytes.NewReader(bodyBytes))
 	req.Header.Set("Content-Type", "application/json")
 	resp := httptest.NewRecorder()
 	router.ServeHTTP(resp, req)
diff --git a/internal/api/library_test.go b/internal/api/library_test.go
index 6eedd7f..9db52c6 100644
--- a/internal/api/library_test.go
+++ b/internal/api/library_test.go
@@ -32,7 +32,7 @@ func newLibraryAPIRouter(t *testing.T) (*gin.Engine, *library.Service) {
 
 	server := &Server{library: service}
 	router := gin.New()
-	admin := router.Group("/api/admin")
+	admin := router.Group("/api/v1")
 	server.registerLibraryAdminRoutes(admin)
 	return router, service
 }
@@ -74,7 +74,7 @@ func TestListQuestionsEndpointSupportsFiltersAndPaging(t *testing.T) {
 	})
 	require.NoError(t, err)
 
-	req := httptest.NewRequest(http.MethodGet, "/api/admin/questions?keyword=middleware&type=short_answer&difficulty=medium&status=published&page=1&page_size=10", nil)
+	req := httptest.NewRequest(http.MethodGet, "/api/v1/questions?keyword=middleware&type=short_answer&difficulty=medium&status=published&page=1&page_size=10", nil)
 	resp := httptest.NewRecorder()
 	router.ServeHTTP(resp, req)
 
@@ -136,7 +136,7 @@ func TestListQuestionsEndpointSupportsUpdatedAtSorting(t *testing.T) {
 	})
 	require.NoError(t, err)
 
-	req := httptest.NewRequest(http.MethodGet, "/api/admin/questions?status=published&sort_field=updated_at&sort_order=desc&page=1&page_size=10", nil)
+	req := httptest.NewRequest(http.MethodGet, "/api/v1/questions?status=published&sort_field=updated_at&sort_order=desc&page=1&page_size=10", nil)
 	resp := httptest.NewRecorder()
 	router.ServeHTTP(resp, req)
 
@@ -170,7 +170,7 @@ func TestListQuestionsEndpointNormalizesUnsafeSortAndPaging(t *testing.T) {
 	})
 	require.NoError(t, err)
 
-	req := httptest.NewRequest(http.MethodGet, "/api/admin/questions?sort_field=updated_at%3Bdrop%20table%20questions&sort_order=asc&page=0&page_size=100000", nil)
+	req := httptest.NewRequest(http.MethodGet, "/api/v1/questions?sort_field=updated_at%3Bdrop%20table%20questions&sort_order=asc&page=0&page_size=100000", nil)
 	resp := httptest.NewRecorder()
 	router.ServeHTTP(resp, req)
 
@@ -211,7 +211,7 @@ func TestBatchPatchQuestionStatusEndpointReturnsPartialFailures(t *testing.T) {
 		"status": library.QuestionStatusPublished,
 	})
 	require.NoError(t, err)
-	req := httptest.NewRequest(http.MethodPatch, "/api/admin/questions/batch/status", bytes.NewReader(bodyBytes))
+	req := httptest.NewRequest(http.MethodPatch, "/api/v1/questions/batch/status", bytes.NewReader(bodyBytes))
 	req.Header.Set("Content-Type", "application/json")
 	resp := httptest.NewRecorder()
 	router.ServeHTTP(resp, req)
@@ -266,7 +266,7 @@ func TestBatchDeleteQuestionsEndpointProtectsReferencedQuestions(t *testing.T) {
 
 	bodyBytes, err := json.Marshal(map[string]any{"ids": []uint64{referenced.ID, loose.ID}})
 	require.NoError(t, err)
-	req := httptest.NewRequest(http.MethodDelete, "/api/admin/questions/batch", bytes.NewReader(bodyBytes))
+	req := httptest.NewRequest(http.MethodDelete, "/api/v1/questions/batch", bytes.NewReader(bodyBytes))
 	req.Header.Set("Content-Type", "application/json")
 	resp := httptest.NewRecorder()
 	router.ServeHTTP(resp, req)
@@ -288,7 +288,7 @@ func TestBatchDeleteQuestionsEndpointProtectsReferencedQuestions(t *testing.T) {
 func TestBatchDeleteQuestionsEndpointRejectsEmptyIDs(t *testing.T) {
 	router, _ := newLibraryAPIRouter(t)
 
-	req := httptest.NewRequest(http.MethodDelete, "/api/admin/questions/batch", bytes.NewReader([]byte(`{"ids":[]}`)))
+	req := httptest.NewRequest(http.MethodDelete, "/api/v1/questions/batch", bytes.NewReader([]byte(`{"ids":[]}`)))
 	req.Header.Set("Content-Type", "application/json")
 	resp := httptest.NewRecorder()
 	router.ServeHTTP(resp, req)
@@ -327,7 +327,7 @@ func TestListPapersEndpointSupportsFiltersAndSummary(t *testing.T) {
 	})
 	require.NoError(t, err)
 
-	req := httptest.NewRequest(http.MethodGet, "/api/admin/papers?keyword=backend&status=draft&page=1&page_size=10", nil)
+	req := httptest.NewRequest(http.MethodGet, "/api/v1/papers?keyword=backend&status=draft&page=1&page_size=10", nil)
 	resp := httptest.NewRecorder()
 	router.ServeHTTP(resp, req)
 
@@ -367,7 +367,7 @@ func TestBatchDeletePapersEndpointReturnsPartialFailures(t *testing.T) {
 
 	bodyBytes, err := json.Marshal(map[string]any{"ids": []uint64{first.ID, second.ID, 99999}})
 	require.NoError(t, err)
-	req := httptest.NewRequest(http.MethodDelete, "/api/admin/papers/batch", bytes.NewReader(bodyBytes))
+	req := httptest.NewRequest(http.MethodDelete, "/api/v1/papers/batch", bytes.NewReader(bodyBytes))
 	req.Header.Set("Content-Type", "application/json")
 	resp := httptest.NewRecorder()
 	router.ServeHTTP(resp, req)
@@ -406,7 +406,7 @@ func TestListPaperQuestionsEndpointReturnsQuestionSummary(t *testing.T) {
 	})
 	require.NoError(t, err)
 
-	req := httptest.NewRequest(http.MethodGet, "/api/admin/papers/1/questions", nil)
+	req := httptest.NewRequest(http.MethodGet, "/api/v1/papers/1/questions", nil)
 	resp := httptest.NewRecorder()
 	router.ServeHTTP(resp, req)
 
@@ -453,7 +453,7 @@ func TestUpdatePaperQuestionEndpointUpdatesScoreAndSortOrder(t *testing.T) {
 
 	bodyBytes, err := json.Marshal(map[string]any{"score": 12.5, "sort_order": 1})
 	require.NoError(t, err)
-	req := httptest.NewRequest(http.MethodPatch, "/api/admin/papers/1/questions/1", bytes.NewReader(bodyBytes))
+	req := httptest.NewRequest(http.MethodPatch, "/api/v1/papers/1/questions/1", bytes.NewReader(bodyBytes))
 	req.Header.Set("Content-Type", "application/json")
 	resp := httptest.NewRecorder()
 	router.ServeHTTP(resp, req)
diff --git a/internal/api/response.go b/internal/api/response.go
index 60f761f..66362dd 100644
--- a/internal/api/response.go
+++ b/internal/api/response.go
@@ -7,6 +7,7 @@ import (
 	"github.com/gin-gonic/gin"
 
 	"github.com/coding-hui/examora/internal/exam"
+	"github.com/coding-hui/examora/internal/judge"
 	"github.com/coding-hui/examora/internal/library"
 	"github.com/coding-hui/examora/internal/transport/http/response"
 )
@@ -19,7 +20,7 @@ func writeError(c *gin.Context, err error) {
 	if err == nil {
 		return
 	}
-	if library.IsNotFound(err) || exam.IsNotFound(err) {
+	if library.IsNotFound(err) || exam.IsNotFound(err) || judge.IsNotFound(err) {
 		c.JSON(http.StatusNotFound, response.Envelope{Code: response.CodeNotFound, Message: err.Error()})
 		return
 	}
diff --git a/internal/api/routes_test.go b/internal/api/routes_test.go
new file mode 100644
index 0000000..3f63ddb
--- /dev/null
+++ b/internal/api/routes_test.go
@@ -0,0 +1,56 @@
+package api
+
+import (
+	"net/http"
+	"net/http/httptest"
+	"testing"
+
+	"github.com/gin-gonic/gin"
+	"github.com/stretchr/testify/require"
+)
+
+func TestRegisterRoutesUsesVersionedResourcePaths(t *testing.T) {
+	gin.SetMode(gin.TestMode)
+
+	server := &Server{}
+	router := gin.New()
+	server.RegisterRoutes(router)
+
+	registered := map[string]struct{}{}
+	for _, route := range router.Routes() {
+		registered[route.Method+" "+route.Path] = struct{}{}
+	}
+
+	require.Contains(t, registered, "POST /api/v1/auth/login")
+	require.Contains(t, registered, "GET /api/v1/questions")
+	require.Contains(t, registered, "GET /api/v1/exams/available")
+	require.Contains(t, registered, "POST /api/v1/exams/:id/sessions/start")
+	require.Contains(t, registered, "POST /api/v1/submissions")
+
+	require.NotContains(t, registered, "POST /api/auth/login")
+	require.NotContains(t, registered, "GET /api/admin/questions")
+	require.NotContains(t, registered, "GET /api/client/exams")
+	require.NotContains(t, registered, "POST /api/client/exams/:id/sessions/start")
+}
+
+func TestRemovedLegacyRoutePrefixesReturnNotFound(t *testing.T) {
+	gin.SetMode(gin.TestMode)
+
+	server := &Server{}
+	router := gin.New()
+	server.RegisterRoutes(router)
+
+	for _, path := range []string{
+		"/api/auth/login",
+		"/api/admin/questions",
+		"/api/client/exams",
+		"/api/client/exams/1/sessions/start",
+	} {
+		req := httptest.NewRequest(http.MethodGet, path, nil)
+		resp := httptest.NewRecorder()
+
+		router.ServeHTTP(resp, req)
+
+		require.Equal(t, http.StatusNotFound, resp.Code, path)
+	}
+}
diff --git a/internal/api/server.go b/internal/api/server.go
index c062515..05f6a2a 100644
--- a/internal/api/server.go
+++ b/internal/api/server.go
@@ -28,14 +28,18 @@ func (s *Server) RegisterRoutes(router *gin.Engine) {
 	router.GET("/api/health", s.health)
 
 	authMW := middleware.Authenticator(s.auth)
-	s.registerAuthRoutes(router, authMW)
+	v1 := router.Group("/api/v1")
+	s.registerAuthRoutes(v1, authMW)
 
-	admin := router.Group("/api/admin", authMW, middleware.RequireAdmin(s.auth))
+	admin := v1.Group("", authMW, middleware.RequireAdmin(s.auth))
 	s.registerUserAdminRoutes(admin)
 	s.registerLibraryAdminRoutes(admin)
 	s.registerExamAdminRoutes(admin)
 	s.registerJudgeRoutes(admin)
 
-	client := router.Group("/api/client", authMW, middleware.RequireClient(s.auth))
+	client := v1.Group("/exams", authMW, middleware.RequireClient(s.auth))
 	s.registerExamClientRoutes(client)
+
+	clientCommon := v1.Group("", authMW, middleware.RequireClient(s.auth))
+	s.registerClientCommonRoutes(clientCommon)
 }
diff --git a/internal/api/types.go b/internal/api/types.go
index 5ed1fad..2c17a1c 100644
--- a/internal/api/types.go
+++ b/internal/api/types.go
@@ -269,6 +269,7 @@ type saveAnswersRequest struct {
 }
 
 type createSubmissionRequest struct {
+	ExamID     uint64         `json:"exam_id"`
 	QuestionID uint64         `json:"question_id"`
 	Answer     map[string]any `json:"answer"`
 	Code       string         `json:"code"`
@@ -452,7 +453,7 @@ func (r saveExamRequest) command(createdBy uint64) exam.SaveExamCommand {
 }
 
 func (r createSubmissionRequest) command() exam.CreateSubmissionCommand {
-	return exam.CreateSubmissionCommand{QuestionID: r.QuestionID, Answer: r.Answer, Code: r.Code, Language: r.Language}
+	return exam.CreateSubmissionCommand{ExamID: r.ExamID, QuestionID: r.QuestionID, Answer: r.Answer, Code: r.Code, Language: r.Language}
 }
 
 func (r recordEventRequest) command(defaultType string) exam.RecordEventCommand {
diff --git a/internal/exam/exam.go b/internal/exam/exam.go
index 23d5dd9..1a003f5 100644
--- a/internal/exam/exam.go
+++ b/internal/exam/exam.go
@@ -63,10 +63,59 @@ func (s *Service) ListExams(ctx context.Context, pageNum, pageSize int) ([]Exam,
 	return s.store.ListExams(ctx, pageNum, pageSize)
 }
 
+func (s *Service) ListExamSessionsByUser(ctx context.Context, userID uint64) ([]ExamSession, error) {
+	return s.store.ListExamSessionsByUser(ctx, userID)
+}
+
 func (s *Service) GetExam(ctx context.Context, id uint64) (*Exam, error) {
 	return s.store.GetExam(ctx, id)
 }
 
+func (s *Service) GetExamSnapshot(ctx context.Context, id uint64) (*ExamSnapshot, error) {
+	return s.store.GetExamSnapshot(ctx, id)
+}
+
+func (s *Service) ListAvailableExams(ctx context.Context, userID uint64) ([]ExamSessionItem, error) {
+	snapshots, err := s.store.ListExamSnapshots(ctx)
+	if err != nil {
+		return nil, err
+	}
+	sessions, err := s.store.ListExamSessionsByUser(ctx, userID)
+	if err != nil {
+		return nil, err
+	}
+	sessionMap := make(map[uint64]*ExamSession, len(sessions))
+	for i := range sessions {
+		sessionMap[sessions[i].ExamSnapshotID] = &sessions[i]
+	}
+	items := make([]ExamSessionItem, 0, len(snapshots))
+	for _, snap := range snapshots {
+		exam, err := s.store.GetExam(ctx, snap.ExamID)
+		if err != nil {
+			return nil, err
+		}
+		if exam.Status == StatusClosed || exam.Status == StatusArchived {
+			continue
+		}
+		status := SessionStatusNotStarted
+		if sess, ok := sessionMap[snap.ID]; ok {
+			status = sess.Status
+		}
+		items = append(items, ExamSessionItem{
+			ID:     snap.ExamID,
+			Title:  exam.Title,
+			Status: status,
+		})
+	}
+	return items, nil
+}
+
+type ExamSessionItem struct {
+	ID     uint64 `json:"id"`
+	Title  string `json:"title"`
+	Status string `json:"status"`
+}
+
 func (s *Service) CreateExam(ctx context.Context, cmd SaveExamCommand) (*Exam, error) {
 	if cmd.PaperID != nil {
 		ok, err := s.papers.PaperExists(ctx, *cmd.PaperID)
diff --git a/internal/exam/snapshot_service.go b/internal/exam/snapshot_service.go
index 325f8de..6b2ef99 100644
--- a/internal/exam/snapshot_service.go
+++ b/internal/exam/snapshot_service.go
@@ -218,6 +218,9 @@ func (s *Service) PublishExamWithSnapshot(ctx context.Context, examID uint64, st
 
 // GetCandidatePaper returns a candidate-safe view of the exam paper (no answers, no hidden test cases)
 func (s *Service) GetCandidatePaper(ctx context.Context, examID, userID uint64) (*CandidatePaper, error) {
+	if err := s.ensureCandidateExamOpen(ctx, examID); err != nil {
+		return nil, err
+	}
 	e, err := s.store.GetExam(ctx, examID)
 	if err != nil {
 		return nil, err
@@ -311,6 +314,10 @@ func (s *Service) GetCandidatePaper(ctx context.Context, examID, userID uint64)
 
 // StartExamSession creates or resumes an exam session for a candidate
 func (s *Service) StartExamSession(ctx context.Context, examID, userID uint64, ipAddress, deviceID string) (*ExamSession, error) {
+	if err := s.ensureCandidateExamOpen(ctx, examID); err != nil {
+		return nil, err
+	}
+
 	snapshot, err := s.store.GetExamSnapshotByExamID(ctx, examID)
 	if err != nil {
 		return nil, err
@@ -362,6 +369,9 @@ func (s *Service) StartExamSession(ctx context.Context, examID, userID uint64, i
 
 // SubmitExam finalizes the exam session and triggers grading
 func (s *Service) SubmitExam(ctx context.Context, examID, userID uint64) error {
+	if err := s.ensureCandidateExamOpen(ctx, examID); err != nil {
+		return err
+	}
 	snapshot, err := s.store.GetExamSnapshotByExamID(ctx, examID)
 	if err != nil {
 		return err
@@ -389,6 +399,9 @@ func (s *Service) SubmitExam(ctx context.Context, examID, userID uint64) error {
 
 // GetCurrentSession returns the current exam session for a user
 func (s *Service) GetCurrentSession(ctx context.Context, examID, userID uint64) (*ExamSession, error) {
+	if err := s.ensureCandidateExamOpen(ctx, examID); err != nil {
+		return nil, err
+	}
 	snapshot, err := s.store.GetExamSnapshotByExamID(ctx, examID)
 	if err != nil {
 		return nil, err
@@ -405,6 +418,9 @@ func (s *Service) GetCurrentSession(ctx context.Context, examID, userID uint64)
 
 // SaveAnswers saves candidate answer drafts
 func (s *Service) SaveAnswers(ctx context.Context, examID, userID uint64, answers map[string]map[string]any) error {
+	if err := s.ensureCandidateExamOpen(ctx, examID); err != nil {
+		return err
+	}
 	snapshot, err := s.store.GetExamSnapshotByExamID(ctx, examID)
 	if err != nil {
 		return err
@@ -455,6 +471,17 @@ func (s *Service) SaveAnswers(ctx context.Context, examID, userID uint64, answer
 	return nil
 }
 
+func (s *Service) ensureCandidateExamOpen(ctx context.Context, examID uint64) error {
+	e, err := s.store.GetExam(ctx, examID)
+	if err != nil {
+		return err
+	}
+	if e.Status == StatusClosed || e.Status == StatusArchived {
+		return ErrInvalidExamStatusTransition
+	}
+	return nil
+}
+
 // =====================================================================
 // Helper types and constants for candidate exam flow
 // =====================================================================
diff --git a/internal/exam/snapshot_service_test.go b/internal/exam/snapshot_service_test.go
index 377568b..09edb17 100644
--- a/internal/exam/snapshot_service_test.go
+++ b/internal/exam/snapshot_service_test.go
@@ -2,6 +2,7 @@ package exam_test
 
 import (
 	"context"
+	"encoding/json"
 	"path/filepath"
 	"strconv"
 	"testing"
@@ -670,3 +671,132 @@ func TestPublishRejectsInvalidPublishedQuestionShape(t *testing.T) {
 	_, err = fx.exams.PublishExamWithSnapshot(ctx, created.ID, time.Now(), time.Now().Add(time.Hour), 60)
 	require.ErrorIs(t, err, library.ErrInvalidQuestion)
 }
+
+func TestStartExamSessionRejectsClosedExam(t *testing.T) {
+	fx := newExamFixture(t)
+	ctx := context.Background()
+
+	created := publishableExam(t, fx)
+	start := time.Now().Add(-time.Minute)
+	end := time.Now().Add(time.Hour)
+	_, err := fx.exams.PublishExamWithSnapshot(ctx, created.ID, start, end, 60)
+	require.NoError(t, err)
+
+	// Close the exam
+	require.NoError(t, fx.exams.CloseExam(ctx, created.ID))
+
+	// Attempting to start a session should be rejected
+	_, err = fx.exams.StartExamSession(ctx, created.ID, 42, "127.0.0.1", "device-1")
+	require.ErrorIs(t, err, exam.ErrInvalidExamStatusTransition)
+}
+
+func TestAvailableExamItemUsesCandidateWireShape(t *testing.T) {
+	payload, err := json.Marshal(exam.ExamSessionItem{
+		ID:     1,
+		Title:  "Final exam",
+		Status: exam.SessionStatusNotStarted,
+	})
+	require.NoError(t, err)
+	require.JSONEq(t, `{"id":1,"title":"Final exam","status":"NOT_STARTED"}`, string(payload))
+}
+
+func TestStartExamSessionRejectsArchivedExam(t *testing.T) {
+	fx := newExamFixture(t)
+	ctx := context.Background()
+
+	created := publishableExam(t, fx)
+	start := time.Now().Add(-time.Minute)
+	end := time.Now().Add(time.Hour)
+	_, err := fx.exams.PublishExamWithSnapshot(ctx, created.ID, start, end, 60)
+	require.NoError(t, err)
+
+	// Manually set status to archived via UpdateExam
+	_, err = fx.exams.UpdateExam(ctx, created.ID, exam.SaveExamCommand{
+		Title:           created.Title,
+		Status:          exam.StatusArchived,
+		DurationMinutes: created.DurationMinutes,
+		CreatedBy:       created.CreatedBy,
+	})
+	require.NoError(t, err)
+
+	// Attempting to start a session should be rejected
+	_, err = fx.exams.StartExamSession(ctx, created.ID, 42, "127.0.0.1", "device-1")
+	require.ErrorIs(t, err, exam.ErrInvalidExamStatusTransition)
+}
+
+func TestClosedExamRejectsExistingSessionCandidateActions(t *testing.T) {
+	fx := newExamFixture(t)
+	ctx := context.Background()
+
+	created := publishableExam(t, fx)
+	start := time.Now().Add(-time.Minute)
+	end := time.Now().Add(time.Hour)
+	snapshot, err := fx.exams.PublishExamWithSnapshot(ctx, created.ID, start, end, 60)
+	require.NoError(t, err)
+	_, err = fx.exams.StartExamSession(ctx, created.ID, 42, "127.0.0.1", "device-1")
+	require.NoError(t, err)
+	snaps, err := fx.examStore.ListQuestionSnapshots(ctx, snapshot.ID)
+	require.NoError(t, err)
+	require.NotEmpty(t, snaps)
+
+	require.NoError(t, fx.exams.CloseExam(ctx, created.ID))
+
+	_, err = fx.exams.GetCandidatePaper(ctx, created.ID, 42)
+	require.ErrorIs(t, err, exam.ErrInvalidExamStatusTransition)
+	_, err = fx.exams.GetCurrentSession(ctx, created.ID, 42)
+	require.ErrorIs(t, err, exam.ErrInvalidExamStatusTransition)
+	err = fx.exams.SaveAnswers(ctx, created.ID, 42, map[string]map[string]any{
+		strconv.FormatUint(snaps[0].ID, 10): {"choice": "A"},
+	})
+	require.ErrorIs(t, err, exam.ErrInvalidExamStatusTransition)
+	err = fx.exams.SubmitExam(ctx, created.ID, 42)
+	require.ErrorIs(t, err, exam.ErrInvalidExamStatusTransition)
+}
+
+func TestCreateSubmissionRequiresActiveExamSessionAndSnapshotQuestion(t *testing.T) {
+	fx := newExamFixture(t)
+	ctx := context.Background()
+
+	created := publishableExam(t, fx)
+	start := time.Now().Add(-time.Minute)
+	end := time.Now().Add(time.Hour)
+	snapshot, err := fx.exams.PublishExamWithSnapshot(ctx, created.ID, start, end, 60)
+	require.NoError(t, err)
+	snaps, err := fx.examStore.ListQuestionSnapshots(ctx, snapshot.ID)
+	require.NoError(t, err)
+	require.Len(t, snaps, 2)
+
+	_, err = fx.exams.CreateSubmission(ctx, created.ID, 42, exam.CreateSubmissionCommand{
+		QuestionID: snaps[1].ID,
+		Code:       "package main\nfunc main() {}",
+		Language:   "GO",
+	})
+	require.ErrorIs(t, err, exam.ErrForbidden)
+
+	_, err = fx.exams.StartExamSession(ctx, created.ID, 42, "127.0.0.1", "device-1")
+	require.NoError(t, err)
+	_, err = fx.exams.CreateSubmission(ctx, created.ID, 42, exam.CreateSubmissionCommand{
+		QuestionID: 999999,
+		Code:       "package main\nfunc main() {}",
+		Language:   "GO",
+	})
+	require.ErrorIs(t, err, exam.ErrForbidden)
+
+	submission, err := fx.exams.CreateSubmission(ctx, created.ID, 42, exam.CreateSubmissionCommand{
+		QuestionID: snaps[1].QuestionID,
+		Code:       "package main\nfunc main() {}",
+		Language:   "GO",
+	})
+	require.NoError(t, err)
+	require.Equal(t, snaps[1].ID, submission.Submission.QuestionID)
+	require.Len(t, fx.judge.tasks, 1)
+	require.Equal(t, snaps[1].ID, fx.judge.tasks[0].QuestionID)
+
+	require.NoError(t, fx.exams.SubmitExam(ctx, created.ID, 42))
+	_, err = fx.exams.CreateSubmission(ctx, created.ID, 42, exam.CreateSubmissionCommand{
+		QuestionID: snaps[1].ID,
+		Code:       "package main\nfunc main() {}",
+		Language:   "GO",
+	})
+	require.ErrorIs(t, err, exam.ErrForbidden)
+}
diff --git a/internal/exam/store.go b/internal/exam/store.go
index 4dd3169..25a1a4d 100644
--- a/internal/exam/store.go
+++ b/internal/exam/store.go
@@ -19,6 +19,7 @@ type Store interface {
 type ExamSessionStore interface {
 	CreateExamSession(ctx context.Context, session *ExamSession) error
 	GetExamSession(ctx context.Context, examSnapshotID, userID uint64) (*ExamSession, error)
+	ListExamSessionsByUser(ctx context.Context, userID uint64) ([]ExamSession, error)
 	UpdateExamSession(ctx context.Context, session *ExamSession) error
 }
 
@@ -32,6 +33,7 @@ type SnapshotStore interface {
 	CreateExamSnapshot(ctx context.Context, snap *ExamSnapshot) error
 	GetExamSnapshot(ctx context.Context, id uint64) (*ExamSnapshot, error)
 	GetExamSnapshotByExamID(ctx context.Context, examID uint64) (*ExamSnapshot, error)
+	ListExamSnapshots(ctx context.Context) ([]ExamSnapshot, error)
 	ListPaperSectionSnapshots(ctx context.Context, examSnapshotID uint64) ([]PaperSectionSnapshot, error)
 	CreatePaperSectionSnapshot(ctx context.Context, snap *PaperSectionSnapshot) error
 	ListQuestionSnapshots(ctx context.Context, examSnapshotID uint64) ([]QuestionSnapshot, error)
diff --git a/internal/exam/store/session.go b/internal/exam/store/session.go
index b3dfdb6..a091860 100644
--- a/internal/exam/store/session.go
+++ b/internal/exam/store/session.go
@@ -24,6 +24,18 @@ func (s *Store) GetExamSession(ctx context.Context, examSnapshotID, userID uint6
 	return toExamSession(&row), nil
 }
 
+func (s *Store) ListExamSessionsByUser(ctx context.Context, userID uint64) ([]exam.ExamSession, error) {
+	var rows []database.ExamSessionModel
+	if err := s.db(ctx).Where("user_id = ?", userID).Find(&rows).Error; err != nil {
+		return nil, err
+	}
+	sessions := make([]exam.ExamSession, 0, len(rows))
+	for _, row := range rows {
+		sessions = append(sessions, *toExamSession(&row))
+	}
+	return sessions, nil
+}
+
 func (s *Store) UpdateExamSession(ctx context.Context, session *exam.ExamSession) error {
 	row := toExamSessionModel(session)
 	return s.db(ctx).
diff --git a/internal/exam/store/snapshot.go b/internal/exam/store/snapshot.go
index e425388..6d0d31f 100644
--- a/internal/exam/store/snapshot.go
+++ b/internal/exam/store/snapshot.go
@@ -24,6 +24,18 @@ func (s *Store) GetExamSnapshotByExamID(ctx context.Context, examID uint64) (*ex
 	return toExamSnapshot(&row), nil
 }
 
+func (s *Store) ListExamSnapshots(ctx context.Context) ([]exam.ExamSnapshot, error) {
+	var rows []database.ExamSnapshotModel
+	if err := s.db(ctx).Order("published_at DESC").Find(&rows).Error; err != nil {
+		return nil, err
+	}
+	items := make([]exam.ExamSnapshot, 0, len(rows))
+	for _, row := range rows {
+		items = append(items, *toExamSnapshot(&row))
+	}
+	return items, nil
+}
+
 func (s *Store) GetExamSnapshot(ctx context.Context, id uint64) (*exam.ExamSnapshot, error) {
 	var row database.ExamSnapshotModel
 	if err := s.db(ctx).First(&row, "id = ?", id).Error; err != nil {
diff --git a/internal/exam/submission.go b/internal/exam/submission.go
index 03719a5..260af1b 100644
--- a/internal/exam/submission.go
+++ b/internal/exam/submission.go
@@ -26,6 +26,7 @@ type Submission struct {
 }
 
 type CreateSubmissionCommand struct {
+	ExamID     uint64
 	QuestionID uint64
 	Answer     map[string]any
 	Code       string
@@ -37,8 +38,42 @@ type CreatedSubmission struct {
 }
 
 func (s *Service) CreateSubmission(ctx context.Context, examID uint64, userID uint64, cmd CreateSubmissionCommand) (*CreatedSubmission, error) {
+	if cmd.ExamID != 0 && cmd.ExamID != examID {
+		return nil, ErrForbidden
+	}
+	if err := s.ensureCandidateExamOpen(ctx, examID); err != nil {
+		return nil, err
+	}
+	snapshot, err := s.store.GetExamSnapshotByExamID(ctx, examID)
+	if err != nil {
+		return nil, err
+	}
+	session, err := s.store.GetExamSession(ctx, snapshot.ID, userID)
+	if err != nil {
+		return nil, ErrForbidden
+	}
+	if session.Status != SessionStatusInProgress {
+		return nil, ErrForbidden
+	}
+	questionSnapshots, err := s.store.ListQuestionSnapshots(ctx, snapshot.ID)
+	if err != nil {
+		return nil, err
+	}
+	resolvedQuestionID := uint64(0)
+	for _, questionSnapshot := range questionSnapshots {
+		if questionSnapshot.ID == cmd.QuestionID {
+			resolvedQuestionID = questionSnapshot.ID
+			break
+		}
+		if questionSnapshot.QuestionID == cmd.QuestionID {
+			resolvedQuestionID = questionSnapshot.ID
+		}
+	}
+	if resolvedQuestionID == 0 {
+		return nil, ErrForbidden
+	}
 	status := SubmissionStatusPending
-	sub := &Submission{ExamID: examID, UserID: userID, QuestionID: cmd.QuestionID, Answer: cmd.Answer, Code: cmd.Code, Language: cmd.Language, Status: status}
+	sub := &Submission{ExamID: examID, UserID: userID, QuestionID: resolvedQuestionID, Answer: cmd.Answer, Code: cmd.Code, Language: cmd.Language, Status: status}
 	if err := s.store.CreateSubmission(ctx, sub); err != nil {
 		return nil, err
 	}
diff --git a/internal/judge/store/repository.go b/internal/judge/store/repository.go
index 3c2b1e4..38d6165 100644
--- a/internal/judge/store/repository.go
+++ b/internal/judge/store/repository.go
@@ -32,7 +32,7 @@ func (r *Store) Create(ctx context.Context, t *judge.Task) error {
 func (r *Store) FindByID(ctx context.Context, id uint64) (*judge.Task, error) {
 	var row database.JudgeTaskModel
 	if err := transaction.DBFromContext(ctx, r.db).First(&row, "id = ?", id).Error; err != nil {
-		return nil, err
+		return nil, database.MapNotFound(err, judge.ErrTaskNotFound)
 	}
 	return toTaskModel(&row), nil
 }
diff --git a/internal/judge/store/repository_test.go b/internal/judge/store/repository_test.go
new file mode 100644
index 0000000..10d5758
--- /dev/null
+++ b/internal/judge/store/repository_test.go
@@ -0,0 +1,26 @@
+package store_test
+
+import (
+	"context"
+	"path/filepath"
+	"testing"
+
+	"github.com/stretchr/testify/require"
+
+	"github.com/coding-hui/examora/internal/infra/database"
+	"github.com/coding-hui/examora/internal/judge"
+	judgestore "github.com/coding-hui/examora/internal/judge/store"
+)
+
+func TestFindByIDMapsMissingTaskToDomainNotFound(t *testing.T) {
+	db, err := database.Open(filepath.Join(t.TempDir(), "examora-test.db"))
+	require.NoError(t, err)
+	require.NoError(t, database.AutoMigrate(db))
+
+	store := judgestore.New(db)
+
+	task, err := store.FindByID(context.Background(), 999999)
+
+	require.Nil(t, task)
+	require.ErrorIs(t, err, judge.ErrTaskNotFound)
+}
diff --git a/internal/judge/task.go b/internal/judge/task.go
index a27a059..a2a6e38 100644
--- a/internal/judge/task.go
+++ b/internal/judge/task.go
@@ -19,7 +19,14 @@ const (
 	StatusCanceled            = "CANCELED"
 )
 
-var ErrInvalidStatusTransition = errors.New("invalid judge status transition")
+var (
+	ErrInvalidStatusTransition = errors.New("invalid judge status transition")
+	ErrTaskNotFound            = errors.New("judge task not found")
+)
+
+func IsNotFound(err error) bool {
+	return errors.Is(err, ErrTaskNotFound)
+}
 
 type Task struct {
 	ID            uint64         `json:"id"`
diff --git a/packages/client/src/index.ts b/packages/client/src/index.ts
index 4f49882..b84e296 100644
--- a/packages/client/src/index.ts
+++ b/packages/client/src/index.ts
@@ -1,10 +1,19 @@
 import type {
+  AuthConfig,
+  AuthMeData,
+  CandidateExamList,
   CandidatePaper,
   CandidateQuestion,
+  CreateSubmissionPayload,
+  CreatedSubmission,
   ExamSession,
   ExamSessionStatus,
+  LoginPayload,
+  LoginResponse,
+  SaveAnswersPayload,
   SubmissionStatus,
 } from '@examora/types';
+import { API_PATHS } from '@examora/types';
 
 export interface ApiClientOptions {
   baseUrl: string;
@@ -55,10 +64,10 @@ export class ApiClient {
     return this.request<T>(path);
   }
 
-  async post<T>(path: string, body: unknown): Promise<T> {
+  async post<T>(path: string, body?: unknown): Promise<T> {
     return this.request<T>(path, {
       method: 'POST',
-      body: JSON.stringify(body),
+      body: body === undefined ? undefined : JSON.stringify(body),
     });
   }
 
@@ -84,24 +93,72 @@ export class ApiClient {
   }
 
   // Auth
-  async authMe(): Promise<{
-    user_id: string;
-    name?: string;
-    email?: string;
-    scopes?: string[];
-    audience?: string[];
-    client_id?: string;
-    organization_id?: string;
-  }> {
-    return this.get('/api/auth/me');
+  async authConfig(): Promise<AuthConfig> {
+    return this.get(API_PATHS.auth.config);
+  }
+
+  async authLogin(payload: LoginPayload): Promise<LoginResponse> {
+    const response = await this.post<LoginResponse>(API_PATHS.auth.login, payload);
+    this.setAccessToken(response.token);
+    return response;
+  }
+
+  async authLogout(): Promise<void> {
+    await this.post<void>(API_PATHS.auth.logout);
+    this.clearAccessToken();
+  }
+
+  async authMe(): Promise<AuthMeData> {
+    return this.get(API_PATHS.auth.me);
+  }
+
+  async listAvailableExams(): Promise<CandidateExamList> {
+    return this.get(API_PATHS.candidate.availableExams);
+  }
+
+  async startExamSession(
+    examID: number | string,
+    payload: { device_id?: string } = {},
+  ): Promise<ExamSession> {
+    return this.post(API_PATHS.candidate.startSession(examID), payload);
+  }
+
+  async getCandidatePaper(examID: number | string): Promise<CandidatePaper> {
+    return this.get(API_PATHS.candidate.paper(examID));
+  }
+
+  async saveAnswers(
+    examID: number | string,
+    payload: SaveAnswersPayload,
+  ): Promise<void> {
+    await this.post(API_PATHS.candidate.answers(examID), payload);
+  }
+
+  async submitExam(examID: number | string): Promise<void> {
+    await this.post(API_PATHS.candidate.submit(examID));
+  }
+
+  async createSubmission(
+    payload: CreateSubmissionPayload,
+  ): Promise<CreatedSubmission> {
+    return this.post(API_PATHS.candidate.submissions, payload);
   }
 }
 
 // Re-export types for convenience
 export type {
+  AuthConfig,
+  AuthMeData,
+  CandidateExamList,
   CandidatePaper,
   CandidateQuestion,
+  CreateSubmissionPayload,
+  CreatedSubmission,
   ExamSession,
   ExamSessionStatus,
+  LoginPayload,
+  LoginResponse,
+  SaveAnswersPayload,
   SubmissionStatus,
 };
+export { API_PATHS };
diff --git a/packages/types/src/index.ts b/packages/types/src/index.ts
index 3d7d5f0..21ac34e 100644
--- a/packages/types/src/index.ts
+++ b/packages/types/src/index.ts
@@ -13,6 +13,82 @@ export interface PageResponse<T> {
   page_size: number;
 }
 
+export interface AuthConfig {
+  auth_mode: string;
+  logto_enabled: boolean;
+  has_local_users: boolean;
+}
+
+export interface LoginPayload {
+  username: string;
+  password: string;
+}
+
+export interface LoginResponse {
+  token: string;
+  expires_at: number;
+  user?: AuthMeData;
+}
+
+export interface AuthMeData {
+  id: number;
+  username: string;
+  display_name?: string;
+  roles?: string[];
+  permissions?: Record<string, string[]>;
+  external_subject?: string;
+}
+
+export const API_PATHS = {
+  auth: {
+    config: "/api/v1/auth/config",
+    login: "/api/v1/auth/login",
+    logout: "/api/v1/auth/logout",
+    me: "/api/v1/auth/me",
+    logtoLogin: "/api/v1/auth/logto/login",
+  },
+  candidate: {
+    availableExams: "/api/v1/exams/available",
+    paper: (examID: number | string) => `/api/v1/exams/${examID}/paper`,
+    startSession: (examID: number | string) =>
+      `/api/v1/exams/${examID}/sessions/start`,
+    currentSession: (examID: number | string) =>
+      `/api/v1/exams/${examID}/sessions/current`,
+    answers: (examID: number | string) => `/api/v1/exams/${examID}/answers`,
+    submit: (examID: number | string) => `/api/v1/exams/${examID}/submit`,
+    result: (examID: number | string) => `/api/v1/exams/${examID}/result`,
+    submissions: "/api/v1/submissions",
+    submission: (submissionID: number | string) =>
+      `/api/v1/submissions/${submissionID}`,
+    heartbeat: "/api/v1/heartbeat",
+    deviceBind: "/api/v1/device-bind",
+    securityReport: "/api/v1/security-report",
+    examEvents: "/api/v1/exam-events",
+  },
+  admin: {
+    users: "/api/v1/users",
+    user: (userID: number | string) => `/api/v1/users/${userID}`,
+    questions: "/api/v1/questions",
+    question: (questionID: number | string) => `/api/v1/questions/${questionID}`,
+    questionBatchStatus: "/api/v1/questions/batch/status",
+    questionBatch: "/api/v1/questions/batch",
+    papers: "/api/v1/papers",
+    paper: (paperID: number | string) => `/api/v1/papers/${paperID}`,
+    paperOutline: (paperID: number | string) =>
+      `/api/v1/papers/${paperID}/outline`,
+    paperQuestions: (paperID: number | string) =>
+      `/api/v1/papers/${paperID}/questions`,
+    paperQuestion: (paperID: number | string, questionID: number | string) =>
+      `/api/v1/papers/${paperID}/questions/${questionID}`,
+    paperBatch: "/api/v1/papers/batch",
+    exams: "/api/v1/exams",
+    exam: (examID: number | string) => `/api/v1/exams/${examID}`,
+    examPublish: (examID: number | string) =>
+      `/api/v1/exams/${examID}/publish`,
+    examBatchClose: "/api/v1/exams/batch/close",
+  },
+} as const;
+
 export type QuestionType =
   | "SINGLE_CHOICE"
   | "MULTIPLE_CHOICE"
@@ -299,6 +375,16 @@ export interface ExamSnapshot {
   published_at: string;
 }
 
+export interface CandidateExamItem {
+  id: number;
+  title: string;
+  status: ExamSessionStatus;
+}
+
+export interface CandidateExamList {
+  items: CandidateExamItem[];
+}
+
 /** Candidate exam session */
 export interface ExamSession {
   id: number;
@@ -354,17 +440,50 @@ export interface SampleTestCase {
 
 /** Candidate submission for objective questions */
 export interface CandidateSubmission {
+  exam_id: number;
   question_id: number;
   answer: Record<string, unknown>;
 }
 
 /** Programming submission */
 export interface ProgrammingSubmission {
+  exam_id: number;
   question_id: number;
   code: string;
   language: string;
 }
 
+export interface SaveAnswersPayload {
+  answers: Record<string, Record<string, unknown>>;
+}
+
+export interface CreateSubmissionPayload {
+  exam_id: number;
+  question_id: number;
+  answer?: Record<string, unknown>;
+  code?: string;
+  language?: string;
+}
+
+export interface SubmissionRecord {
+  id: number;
+  exam_id: number;
+  user_id: number;
+  question_id: number;
+  answer?: Record<string, unknown>;
+  code?: string;
+  language?: string;
+  status: SubmissionStatus;
+  score: number;
+  result?: Record<string, unknown>;
+  submitted_at: string;
+  judged_at?: string;
+}
+
+export interface CreatedSubmission {
+  submission: SubmissionRecord;
+}
+
 export type ExamResultStatus = "GRADED" | "JUDGING" | "MANUAL_REQUIRED";
 
 export type QuestionResultStatus =
diff --git a/website/docs/concepts/authentication/README.md b/website/docs/concepts/authentication/README.md
index b677cbf..be8b634 100644
--- a/website/docs/concepts/authentication/README.md
+++ b/website/docs/concepts/authentication/README.md
@@ -22,5 +22,5 @@ Examora uses Logto for authentication and keeps authorization inside the backend
 ## Backend Responsibility
 
 - Resolve a current business user from the Logto token
-- Enforce RBAC for `/api/admin/*` and ownership rules for `/api/client/*`
+- Enforce RBAC via `RequireAdmin`/`RequireClient` middleware on `/api/v1/*` routes
 - Never trust the frontend to decide roles
diff --git a/website/docs/reference/api/README.md b/website/docs/reference/api/README.md
index f7fc6e6..b91db02 100644
--- a/website/docs/reference/api/README.md
+++ b/website/docs/reference/api/README.md
@@ -10,13 +10,15 @@ Base path: `/api`. All timestamps use ISO 8601 UTC strings.
 
 - Frontends authenticate with Logto
 - API endpoints expect `Authorization: Bearer <token>`
-- `GET /api/auth/me` resolves the current Examora user from the Logto token
+- `GET /api/v1/auth/me` resolves the current Examora user from the Logto token
 
 ## Route Groups
 
-- `/api/auth/*`: identity-related introspection
-- `/api/admin/*`: admin-only management routes
-- `/api/client/*`: student exam-session routes
+All routes live under `/api/v1`. Permission is enforced by `RequireAdmin`/`RequireClient` middleware, not by URL structure.
+
+- `/api/v1/*` (authenticated): unified entry point
+- Admin resources: `/api/v1/questions`, `/api/v1/papers`, `/api/v1/exams`, etc. (RequireAdmin)
+- Candidate resources: `/api/v1/exams/available`, `/api/v1/exams/:id/sessions/start`, `/api/v1/submissions`, etc. (RequireClient)
 
 ## Key Guarantees