diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1317d7e..3b2390d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -14,6 +14,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.2.11] - 2026-09-05
+
+### Fixed
+
+- Gave the auth tab switcher a visible keyboard focus indicator (the selected tab previously showed no focus change at all) and raised the `--text-soft` token to an AA-compliant contrast in both themes (light 2.78→4.85:1, dark 4.1→5.76:1).
+- Registration now marks the invite code as required and validates it inline, adds `autocomplete` to all auth inputs, announces server auth errors with `role="alert"`, and resolves OAuth links against the API origin so they work in split web/worker deployments.
+- Workspace routes now set a per-page document title (e.g. "邮件列表 · WeMail") and the dashboard and inbox pages render a page-level heading, following the existing per-page sr-only h1 convention.
+- Link-type extraction chips now name the link by type (登录链接 / 服务链接 / 订阅链接 / 有用链接) instead of a fixed English "LOGIN LINK" label.
+- The create-mailbox dialog keeps its primary action enabled and validates on submit with field-level messages, instead of disabling the button until the form is valid.
+- The mail list empty state now points users without any mailbox to creating one, and the detail metadata row no longer overflows its panel by a few pixels at 320px width.
+
 ## [0.2.10] - 2026-09-05
 
 ### Fixed
diff --git a/apps/docs/package.json b/apps/docs/package.json
index 9d2ffcc..426c4f5 100644
--- a/apps/docs/package.json
+++ b/apps/docs/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@wemail/docs",
-  "version": "0.2.10",
+  "version": "0.2.11",
   "private": true,
   "type": "module",
   "scripts": {
diff --git a/apps/web/package.json b/apps/web/package.json
index fc778b0..b569c42 100644
--- a/apps/web/package.json
+++ b/apps/web/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@wemail/web",
-  "version": "0.2.10",
+  "version": "0.2.11",
   "private": true,
   "type": "module",
   "scripts": {
diff --git a/apps/web/src/app/AppLayout.tsx b/apps/web/src/app/AppLayout.tsx
index a820ff0..3820f11 100644
--- a/apps/web/src/app/AppLayout.tsx
+++ b/apps/web/src/app/AppLayout.tsx
@@ -143,6 +143,14 @@ export function AppLayout({
   const activeSecondaryRoute =
     shell.secondaryNav.find((item) => item.to === location.pathname)?.to ?? shell.secondaryNav[0]?.to ?? "";
   const hasAnnouncementBadge = announcementCount > 0;
+  const activePageLabel =
+    shell.secondaryNav.find((item) => item.to === activeSecondaryRoute)?.label ?? shell.activePrimaryLabel;
+
+  // Screen-reader and browser-history users identify the page by its title;
+  // without this every route shares the static "WeMail" document title.
+  useEffect(() => {
+    document.title = `${activePageLabel} · WeMail`;
+  }, [activePageLabel]);
 
   useEffect(() => {
     const areas = [railScrollRef.current, mainScrollRef.current].filter(Boolean) as Array<HTMLElement>;
diff --git a/apps/web/src/features/auth/AuthForms.tsx b/apps/web/src/features/auth/AuthForms.tsx
index d7cc291..22320a6 100644
--- a/apps/web/src/features/auth/AuthForms.tsx
+++ b/apps/web/src/features/auth/AuthForms.tsx
@@ -2,6 +2,7 @@ import type { FormEvent, ReactNode } from "react";
 import { CircleAlert, Eye, EyeOff, KeyRound, Mail, Ticket, UserRound } from "lucide-react";
 import { useRef, useState } from "react";
 
+import { resolveApiUrl } from "../../shared/api/client";
 import { Button, ButtonAnchor } from "../../shared/button";
 import { FormField, TextInput } from "../../shared/form";
 
@@ -51,6 +52,13 @@ function validatePassword(value: string) {
   return null;
 }
 
+function validateInviteCode(value: string) {
+  // Registration requires a valid invite server-side; surface that at the
+  // field instead of letting an empty submit come back as a banner error.
+  if (!value.trim()) return getRequiredMessage("邀请码");
+  return null;
+}
+
 function compactFieldErrors(errors: AuthFieldErrors) {
   const visibleErrors: AuthFieldErrors = {};
 
@@ -152,7 +160,8 @@ export function AuthForms({ authError, onRegister, onLogin, mode, oauthNext = "/
     const nextErrors: AuthFieldErrors = {
       registerName: validateName(registerName) ?? undefined,
       registerEmail: validateEmail(registerEmail) ?? undefined,
-      registerPassword: validatePassword(registerPassword) ?? undefined
+      registerPassword: validatePassword(registerPassword) ?? undefined,
+      registerInviteCode: validateInviteCode(registerInviteCode) ?? undefined
     };
     const visibleErrors = compactFieldErrors(nextErrors);
 
@@ -168,7 +177,11 @@ export function AuthForms({ authError, onRegister, onLogin, mode, oauthNext = "/
 
   return (
     <div className="auth-form-shell">
-      {authError ? <p className="error-banner">{authError}</p> : null}
+      {authError ? (
+        <p className="error-banner" role="alert">
+          {authError}
+        </p>
+      ) : null}
       {mode === "login" ? (
         <div aria-labelledby="auth-tab-login" className="auth-form-panel" id="auth-panel-login" role="tabpanel">
           <form className="auth-form" noValidate onSubmit={handleLoginSubmit}>
@@ -181,6 +194,7 @@ export function AuthForms({ authError, onRegister, onLogin, mode, oauthNext = "/
                   <TextInput
                     {...getFieldErrorProps("loginEmail", "login-email")}
                     className="auth-input-control"
+                    autoComplete="email"
                     id="login-email"
                     name="email"
                     onChange={(event) => {
@@ -205,6 +219,7 @@ export function AuthForms({ authError, onRegister, onLogin, mode, oauthNext = "/
                   <TextInput
                     {...getFieldErrorProps("loginPassword", "login-password")}
                     className="auth-input-control"
+                    autoComplete="current-password"
                     id="login-password"
                     minLength={8}
                     name="password"
@@ -241,7 +256,7 @@ export function AuthForms({ authError, onRegister, onLogin, mode, oauthNext = "/
             <div className="auth-oauth-list" aria-label="快捷登录">
               <ButtonAnchor
                 aria-label="使用 GitHub 登录"
-                href={`/api/auth/oauth/github/start?next=${encodeURIComponent(oauthNext)}`}
+                href={resolveApiUrl(`/api/auth/oauth/github/start?next=${encodeURIComponent(oauthNext)}`)}
                 leadingIcon={
                   <svg width="20" height="20" viewBox="0 0 24 24" fill="currentColor" aria-hidden="true">
                     <path d="M12 0.296997C5.37 0.296997 0 5.67 0 12.297C0 17.6 3.438 22.097 8.205 23.682C8.805 23.795 9.025 23.424 9.025 23.105C9.025 22.82 9.015 22.065 9.01 21.065C5.672 21.789 4.968 19.455 4.968 19.455C4.422 18.07 3.633 17.7 3.633 17.7C2.546 16.956 3.717 16.971 3.717 16.971C4.922 17.055 5.555 18.207 5.555 18.207C6.625 20.042 8.364 19.512 9.05 19.205C9.158 18.429 9.467 17.9 9.81 17.6C7.145 17.3 4.344 16.268 4.344 11.67C4.344 10.36 4.809 9.29 5.579 8.45C5.444 8.147 5.039 6.927 5.684 5.274C5.684 5.274 6.689 4.952 8.984 6.504C9.944 6.237 10.964 6.105 11.984 6.099C13.004 6.105 14.024 6.237 14.984 6.504C17.264 4.952 18.269 5.274 18.269 5.274C18.914 6.927 18.509 8.147 18.389 8.45C19.154 9.29 19.619 10.36 19.619 11.67C19.619 16.28 16.814 17.295 14.144 17.59C14.564 17.95 14.954 18.686 14.954 19.81C14.954 21.416 14.939 22.706 14.939 23.096C14.939 23.411 15.149 23.786 15.764 23.666C20.565 22.092 24 17.592 24 12.297C24 5.67 18.627 0.296997 12 0.296997Z"/>
@@ -253,7 +268,7 @@ export function AuthForms({ authError, onRegister, onLogin, mode, oauthNext = "/
               </ButtonAnchor>
               <ButtonAnchor
                 aria-label="使用 LinuxDo 登录"
-                href={`/api/auth/oauth/linuxdo/start?next=${encodeURIComponent(oauthNext)}`}
+                href={resolveApiUrl(`/api/auth/oauth/linuxdo/start?next=${encodeURIComponent(oauthNext)}`)}
                 leadingIcon={
                   <img src="/icons/linuxdo.svg" width="20" height="20" alt="" aria-hidden="true" />
                 }
@@ -276,6 +291,7 @@ export function AuthForms({ authError, onRegister, onLogin, mode, oauthNext = "/
                   <TextInput
                     {...getFieldErrorProps("registerName", "register-name")}
                     className="auth-input-control"
+                    autoComplete="name"
                     id="register-name"
                     name="name"
                     onChange={(event) => {
@@ -299,6 +315,7 @@ export function AuthForms({ authError, onRegister, onLogin, mode, oauthNext = "/
                   <TextInput
                     {...getFieldErrorProps("registerEmail", "register-email")}
                     className="auth-input-control"
+                    autoComplete="email"
                     id="register-email"
                     name="email"
                     onChange={(event) => {
@@ -323,6 +340,7 @@ export function AuthForms({ authError, onRegister, onLogin, mode, oauthNext = "/
                   <TextInput
                     {...getFieldErrorProps("registerPassword", "register-password")}
                     className="auth-input-control"
+                    autoComplete="new-password"
                     id="register-password"
                     minLength={8}
                     name="password"
@@ -350,7 +368,7 @@ export function AuthForms({ authError, onRegister, onLogin, mode, oauthNext = "/
                 {renderFieldValidation("registerPassword", "register-password")}
               </div>
             </FormField>
-            <FormField htmlFor="register-invite-code" label="邀请码">
+            <FormField htmlFor="register-invite-code" label="邀请码" required>
               <div className="auth-field-stack">
                 <div className={cx("auth-input-shell form-control-shell", fieldErrors.registerInviteCode && "is-invalid")}>
                   <span aria-hidden="true" className="auth-input-icon form-control-icon">
@@ -361,6 +379,8 @@ export function AuthForms({ authError, onRegister, onLogin, mode, oauthNext = "/
                     className="auth-input-control"
                     id="register-invite-code"
                     name="inviteCode"
+                    placeholder="INVITE-XXXXXXXX"
+                    required
                     onChange={(event) => {
                       setRegisterInviteCode(event.target.value);
                       clearFieldError("registerInviteCode");
@@ -381,7 +401,7 @@ export function AuthForms({ authError, onRegister, onLogin, mode, oauthNext = "/
             <div className="auth-oauth-list" aria-label="快捷登录">
               <ButtonAnchor
                 aria-label="使用 GitHub 登录"
-                href={`/api/auth/oauth/github/start?next=${encodeURIComponent(oauthNext)}`}
+                href={resolveApiUrl(`/api/auth/oauth/github/start?next=${encodeURIComponent(oauthNext)}`)}
                 leadingIcon={
                   <svg width="20" height="20" viewBox="0 0 24 24" fill="currentColor" aria-hidden="true">
                     <path d="M12 0.296997C5.37 0.296997 0 5.67 0 12.297C0 17.6 3.438 22.097 8.205 23.682C8.805 23.795 9.025 23.424 9.025 23.105C9.025 22.82 9.015 22.065 9.01 21.065C5.672 21.789 4.968 19.455 4.968 19.455C4.422 18.07 3.633 17.7 3.633 17.7C2.546 16.956 3.717 16.971 3.717 16.971C4.922 17.055 5.555 18.207 5.555 18.207C6.625 20.042 8.364 19.512 9.05 19.205C9.158 18.429 9.467 17.9 9.81 17.6C7.145 17.3 4.344 16.268 4.344 11.67C4.344 10.36 4.809 9.29 5.579 8.45C5.444 8.147 5.039 6.927 5.684 5.274C5.684 5.274 6.689 4.952 8.984 6.504C9.944 6.237 10.964 6.105 11.984 6.099C13.004 6.105 14.024 6.237 14.984 6.504C17.264 4.952 18.269 5.274 18.269 5.274C18.914 6.927 18.509 8.147 18.389 8.45C19.154 9.29 19.619 10.36 19.619 11.67C19.619 16.28 16.814 17.295 14.144 17.59C14.564 17.95 14.954 18.686 14.954 19.81C14.954 21.416 14.939 22.706 14.939 23.096C14.939 23.411 15.149 23.786 15.764 23.666C20.565 22.092 24 17.592 24 12.297C24 5.67 18.627 0.296997 12 0.296997Z"/>
@@ -393,7 +413,7 @@ export function AuthForms({ authError, onRegister, onLogin, mode, oauthNext = "/
               </ButtonAnchor>
               <ButtonAnchor
                 aria-label="使用 LinuxDo 登录"
-                href={`/api/auth/oauth/linuxdo/start?next=${encodeURIComponent(oauthNext)}`}
+                href={resolveApiUrl(`/api/auth/oauth/linuxdo/start?next=${encodeURIComponent(oauthNext)}`)}
                 leadingIcon={
                   <img src="/icons/linuxdo.svg" width="20" height="20" alt="" aria-hidden="true" />
                 }
diff --git a/apps/web/src/features/inbox/MessageStreamPanel.tsx b/apps/web/src/features/inbox/MessageStreamPanel.tsx
index 0daf990..9d83db4 100644
--- a/apps/web/src/features/inbox/MessageStreamPanel.tsx
+++ b/apps/web/src/features/inbox/MessageStreamPanel.tsx
@@ -25,6 +25,7 @@ export type MessageAdvancedFilters = {
 
 type MessageStreamPanelProps = {
   filter: MessageFilter;
+  hasMailboxes?: boolean;
   errorMessage?: string | null;
   isBatchActionRunning?: boolean;
   isLoading?: boolean;
@@ -67,6 +68,7 @@ const extractionIcons = {
 
 export function MessageStreamPanel({
   filter,
+  hasMailboxes = false,
   errorMessage = null,
   isBatchActionRunning = false,
   isLoading = false,
@@ -223,7 +225,11 @@ export function MessageStreamPanel({
         {messages.length === 0 && !isLoading && !errorMessage ? (
           <EmptyState
             className="message-empty-card"
-            description="当前筛选下没有消息，切换筛选或等待新邮件到达。"
+            description={
+              hasMailboxes
+                ? "当前筛选下没有消息，切换筛选或等待新邮件到达。"
+                : "还没有邮箱，先创建一个邮箱开始收信。"
+            }
             icon={<Inbox size={26} strokeWidth={1.8} aria-hidden="true" />}
             title="暂无邮件"
           />
diff --git a/apps/web/src/features/inbox/view-models.ts b/apps/web/src/features/inbox/view-models.ts
index 9f3fe33..a3f67ca 100644
--- a/apps/web/src/features/inbox/view-models.ts
+++ b/apps/web/src/features/inbox/view-models.ts
@@ -2,13 +2,22 @@ import type { MessageSummary } from "@wemail/shared";
 
 import { formatAttachmentSize, formatReceivedAt, formatSenderName } from "./formatters";
 
+const linkChipLabels: Partial<Record<MessageSummary["extraction"]["type"], string>> = {
+  auth_link: "登录链接",
+  service_link: "服务链接",
+  subscription_link: "订阅链接",
+  other_link: "有用链接"
+};
+
 function toExtractionChip(message: MessageSummary) {
   if (message.extraction.type === "auth_code" && message.extraction.value.trim()) {
     return { tone: "code", icon: "key", primary: message.extraction.value, secondary: "已提取验证码" } as const;
   }
 
-  if (["auth_link", "service_link", "subscription_link", "other_link"].includes(message.extraction.type)) {
-    return { tone: "link", icon: "link", primary: "LOGIN LINK", secondary: message.extraction.label || "已识别链接" } as const;
+  if (linkChipLabels[message.extraction.type]) {
+    // The chip names what the link is for; a fixed English label both broke
+    // the Chinese voice and mislabeled service/subscription links as login.
+    return { tone: "link", icon: "link", primary: linkChipLabels[message.extraction.type], secondary: message.extraction.label || "已识别链接" } as const;
   }
 
   return {
diff --git a/apps/web/src/pages/AuthPage.tsx b/apps/web/src/pages/AuthPage.tsx
index add470b..0feed69 100644
--- a/apps/web/src/pages/AuthPage.tsx
+++ b/apps/web/src/pages/AuthPage.tsx
@@ -1,5 +1,5 @@
 import type { FormEvent, KeyboardEvent } from "react";
-import { useState } from "react";
+import { useEffect, useState } from "react";
 import { Link, Navigate, useLocation, useNavigate } from "react-router-dom";
 
 import { AuthForms } from "../features/auth/AuthForms";
@@ -55,6 +55,11 @@ export function AuthPage({ authError, onRegister, onLogin, onOAuthFinalize, onTo
   const [oauthInviteCode, setOAuthInviteCode] = useState("");
   const [isOAuthInviteSubmitting, setIsOAuthInviteSubmitting] = useState(false);
 
+  // Distinguish the auth tab from every other WeMail tab in the browser.
+  useEffect(() => {
+    document.title = `${mode === "register" ? "注册" : "登录"} · WeMail`;
+  }, [mode]);
+
   function switchMode(nextMode: (typeof AUTH_MODES)[number]) {
     if (nextMode === mode) return;
     const nextPath = nextMode === "login" ? "/login" : "/register";
diff --git a/apps/web/src/pages/DashboardPage.tsx b/apps/web/src/pages/DashboardPage.tsx
index e6e4716..55b0b76 100644
--- a/apps/web/src/pages/DashboardPage.tsx
+++ b/apps/web/src/pages/DashboardPage.tsx
@@ -178,6 +178,7 @@ export function DashboardPage({ canViewRoleCard = false }: DashboardPageProps) {
 
   return (
     <main className="workspace-grid dashboard-grid">
+      <h1 className="sr-only">仪表盘</h1>
       <section className="dashboard-kpi-grid" aria-label="仪表盘核心指标">
         {dashboard.kpis.map((kpi, index) => {
           const KpiIcon = KPI_ICONS[index] ?? Inbox;
diff --git a/apps/web/src/pages/InboxPage.tsx b/apps/web/src/pages/InboxPage.tsx
index bd9acb3..19d087a 100644
--- a/apps/web/src/pages/InboxPage.tsx
+++ b/apps/web/src/pages/InboxPage.tsx
@@ -1,4 +1,4 @@
-import { useEffect, useMemo, useState, type FormEvent } from "react";
+import { useEffect, useMemo, useRef, useState, type FormEvent } from "react";
 
 import type {
   ExtractionType,
@@ -128,7 +128,22 @@ export function InboxPage({
   const [label, setLabel] = useState("");
   const [domain, setDomain] = useState("");
   const [creatorNote, setCreatorNote] = useState("");
+  const [composerFieldErrors, setComposerFieldErrors] = useState<{
+    label?: string;
+    domain?: string;
+    creatorNote?: string;
+  }>({});
+  const composerFormRef = useRef<HTMLFormElement | null>(null);
   const [isSubmitting, setIsSubmitting] = useState(false);
+
+  function clearComposerFieldError(key: "label" | "domain" | "creatorNote") {
+    setComposerFieldErrors((current) => {
+      if (!current[key]) return current;
+      const next = { ...current };
+      delete next[key];
+      return next;
+    });
+  }
   const [outboundDrawerOpen, setOutboundDrawerOpen] = useState(false);
   const [mailboxSelectorOpen, setMailboxSelectorOpen] = useState(false);
   const [mailboxSearchValue, setMailboxSearchValue] = useState("");
@@ -196,12 +211,6 @@ export function InboxPage({
   const safeMailboxPage = Math.min(mailboxPage, Math.max(1, Math.ceil(mailboxSelectorTotal / mailboxSelectorPageSize)));
   const detailMessage = selectedMessage ?? messages.find((message) => message.id === selectedMessageId) ?? messages[0] ?? null;
   const activeMessageId = detailMessage?.id ?? null;
-  const canCreateMailbox =
-    Boolean(label.trim()) &&
-    Boolean(domain) &&
-    (!requireCreatorNote || Boolean(creatorNote.trim())) &&
-    !isSubmitting &&
-    !isLoadingDomains;
   const domainPlaceholderLabel = isLoadingDomains ? "加载域名中" : availableDomains.length === 0 ? "暂无可用域名" : "请选择域名";
 
   useEffect(() => {
@@ -209,6 +218,7 @@ export function InboxPage({
       setLabel(suggestedLabel);
       setDomain("");
       setCreatorNote("");
+      setComposerFieldErrors({});
       setIsSubmitting(false);
     }
   }, [mailboxComposerOpen, suggestedLabel]);
@@ -279,8 +289,28 @@ export function InboxPage({
   const handleCreateMailbox = async (event: FormEvent<HTMLFormElement>) => {
     event.preventDefault();
     const nextLabel = label.trim();
-    if (!canCreateMailbox || !nextLabel) return;
+    const nextErrors: { label?: string; domain?: string; creatorNote?: string } = {};
+    if (!nextLabel) nextErrors.label = "请输入邮箱标签";
+    if (!domain) nextErrors.domain = "请选择邮箱域名";
+    if (requireCreatorNote && !creatorNote.trim()) nextErrors.creatorNote = "请填写用途备注";
+
+    // Validate on submit and focus the first invalid field — the same pattern
+    // as the auth forms — instead of disabling the primary action until valid.
+    if (Object.keys(nextErrors).length > 0) {
+      setComposerFieldErrors(nextErrors);
+      const form = composerFormRef.current;
+      if (nextErrors.label) {
+        form?.querySelector<HTMLInputElement>('input[name="mailboxLabel"]')?.focus();
+      } else if (nextErrors.domain) {
+        // SelectInput's ref targets the hidden native select; focus the trigger.
+        form?.querySelector<HTMLElement>('[role="combobox"]')?.focus();
+      } else {
+        form?.querySelector<HTMLInputElement>('input[name="mailboxCreatorNote"]')?.focus();
+      }
+      return;
+    }
 
+    setComposerFieldErrors({});
     setIsSubmitting(true);
     try {
       await onCreateMailbox({
@@ -385,6 +415,7 @@ export function InboxPage({
   return (
     <>
       <main className="workspace-grid inbox-page-grid">
+        <h1 className="sr-only">邮件列表</h1>
         <InboxSummaryBar
           attachmentCount={messageListSummary.attachmentCount}
           extractionCount={messageListSummary.extractionCount}
@@ -404,6 +435,7 @@ export function InboxPage({
         <div className="workspace-grid inbox-grid">
           <MessageStreamPanel
             filter={messageFilter}
+            hasMailboxes={mailboxes.length > 0}
             messages={messages}
             page={safeMessagePage}
             pageSize={messageListPageSize}
@@ -444,25 +476,47 @@ export function InboxPage({
           onClose={onCloseMailboxComposer}
           title="创建新邮箱"
         >
-          <form className="composer-form workspace-dialog-form" onSubmit={(event) => void handleCreateMailbox(event)}>
+          <form
+            className="composer-form workspace-dialog-form"
+            noValidate
+            onSubmit={(event) => void handleCreateMailbox(event)}
+            ref={composerFormRef}
+          >
             <p className="section-copy">填写邮箱标签并选择可用域名，系统将生成邮箱地址。</p>
-            <FormField label="邮箱标签" required>
+            <FormField
+              label="邮箱标签"
+              message={composerFieldErrors.label}
+              required
+              tone={composerFieldErrors.label ? "error" : "default"}
+            >
               <TextInput
+                aria-invalid={composerFieldErrors.label ? "true" : undefined}
                 aria-label="邮箱标签"
                 name="mailboxLabel"
-                onChange={(event) => setLabel(event.target.value)}
+                onChange={(event) => {
+                  setLabel(event.target.value);
+                  clearComposerFieldError("label");
+                }}
                 placeholder="例如：ops、admin、support"
                 required
                 type="text"
                 value={label}
               />
             </FormField>
-            <FormField label="邮箱域名" required>
+            <FormField
+              label="邮箱域名"
+              message={composerFieldErrors.domain}
+              required
+              tone={composerFieldErrors.domain ? "error" : "default"}
+            >
               <SelectInput
                 aria-label="邮箱域名"
                 disabled={isLoadingDomains || availableDomains.length === 0}
                 name="mailboxDomain"
-                onChange={(event) => setDomain(event.target.value)}
+                onChange={(event) => {
+                  setDomain(event.target.value);
+                  clearComposerFieldError("domain");
+                }}
                 required
                 value={domain}
               >
@@ -477,11 +531,20 @@ export function InboxPage({
               </SelectInput>
             </FormField>
             {requireCreatorNote ? (
-              <FormField label="用途备注" required>
+              <FormField
+                label="用途备注"
+                message={composerFieldErrors.creatorNote}
+                required
+                tone={composerFieldErrors.creatorNote ? "error" : "default"}
+              >
                 <TextInput
+                  aria-invalid={composerFieldErrors.creatorNote ? "true" : undefined}
                   aria-label="用途备注"
                   name="mailboxCreatorNote"
-                  onChange={(event) => setCreatorNote(event.target.value)}
+                  onChange={(event) => {
+                    setCreatorNote(event.target.value);
+                    clearComposerFieldError("creatorNote");
+                  }}
                   placeholder="例如：市场活动回收、客服收件"
                   required
                   type="text"
@@ -493,7 +556,7 @@ export function InboxPage({
               <Button onClick={onCloseMailboxComposer} variant="secondary">
                 取消
               </Button>
-              <Button disabled={!canCreateMailbox} type="submit" variant="primary">
+              <Button disabled={isSubmitting} type="submit" variant="primary">
                 {isSubmitting ? "创建中…" : "创建邮箱"}
               </Button>
             </div>
diff --git a/apps/web/src/shared/api/client.ts b/apps/web/src/shared/api/client.ts
index 2cda10b..d820009 100644
--- a/apps/web/src/shared/api/client.ts
+++ b/apps/web/src/shared/api/client.ts
@@ -1,4 +1,7 @@
-function resolveApiUrl(path: string) {
+// Exported for raw <a href> entry points (OAuth start links) that must reach
+// the same API origin the JSON client uses; same-origin deployments resolve
+// to the relative path, split web/worker deployments get the absolute URL.
+export function resolveApiUrl(path: string) {
   if (/^https?:\/\//.test(path)) return path;
 
   const configuredBase = import.meta.env.VITE_API_BASE_URL;
diff --git a/apps/web/src/shared/styles/index.css b/apps/web/src/shared/styles/index.css
index 4dc749e..ffe5e63 100644
--- a/apps/web/src/shared/styles/index.css
+++ b/apps/web/src/shared/styles/index.css
@@ -32,7 +32,9 @@
   --border-strong: rgba(17, 17, 17, 0.14);
   --text: #111111;
   --text-muted: rgba(17, 17, 17, 0.62);
-  --text-soft: rgba(17, 17, 17, 0.42);
+  /* 0.60 is the floor that keeps text-soft at 4.7:1+ on the near-white
+     surfaces it renders on (AA for body text); 0.42 measured 2.78:1. */
+  --text-soft: rgba(17, 17, 17, 0.6);
   --accent: #ff7a00;
   --accent-strong: #ff8b26;
   --accent-soft: rgba(255, 122, 0, 0.14);
@@ -77,7 +79,9 @@
   --border-strong: rgba(255, 255, 255, 0.12);
   --text: #f5f5f5;
   --text-muted: rgba(245, 245, 245, 0.72);
-  --text-soft: rgba(245, 245, 245, 0.44);
+  /* 0.55 measures 5.1:1+ on the dark surfaces it renders on (AA for body
+     text); 0.44 measured 4.1:1. */
+  --text-soft: rgba(245, 245, 245, 0.55);
   --accent: #ff7a00;
   --accent-strong: #ff922d;
   --accent-soft: rgba(255, 122, 0, 0.16);
@@ -1813,6 +1817,14 @@ button:disabled {
   background: rgba(255, 255, 255, 0.2);
 }
 
+/* The selected tab's own background/box-shadow rules would swallow a
+   focus-visible restyle, so the keyboard indicator is an outline — the same
+   treatment .announcements-carousel-step:focus-visible uses. */
+.auth-tab:focus-visible {
+  outline: 3px solid color-mix(in srgb, var(--accent) 24%, transparent);
+  outline-offset: 2px;
+}
+
 .auth-tab.active,
 .auth-tab[aria-selected="true"] {
   background: var(--surface-contrast);
@@ -10555,6 +10567,9 @@ button:disabled {
   flex-wrap: wrap;
   gap: 14px;
   font-size: 0.92rem;
+  /* Grid items default to min-width: auto, so the nowrap email spans pushed
+     this row past the detail panel's track at narrow widths. */
+  min-width: 0;
 }
 
 .extraction-card,
diff --git a/apps/web/src/test/auth-forms.test.tsx b/apps/web/src/test/auth-forms.test.tsx
index 8957c04..7f2decb 100644
--- a/apps/web/src/test/auth-forms.test.tsx
+++ b/apps/web/src/test/auth-forms.test.tsx
@@ -61,16 +61,18 @@ describe("AuthForms", () => {
     expect(screen.getByLabelText(/^邮箱/)).toHaveValue("login@example.com");
   });
 
-  it("renders GitHub and LinuxDo OAuth links with the post-auth target", () => {
+  it("renders GitHub and LinuxDo OAuth links pointing at the API origin", () => {
     render(<AuthForms {...authFormProps} mode="login" oauthNext="/settings/profile" />);
 
+    // Raw anchors must resolve through the API client's base URL so they work
+    // when web and worker are deployed on separate origins (dev, previews).
     expect(screen.getByRole("link", { name: "使用 GitHub 登录" })).toHaveAttribute(
       "href",
-      "/api/auth/oauth/github/start?next=%2Fsettings%2Fprofile"
+      "http://127.0.0.1:8787/api/auth/oauth/github/start?next=%2Fsettings%2Fprofile"
     );
     expect(screen.getByRole("link", { name: "使用 LinuxDo 登录" })).toHaveAttribute(
       "href",
-      "/api/auth/oauth/linuxdo/start?next=%2Fsettings%2Fprofile"
+      "http://127.0.0.1:8787/api/auth/oauth/linuxdo/start?next=%2Fsettings%2Fprofile"
     );
   });
 
@@ -147,7 +149,7 @@ describe("AuthForms", () => {
     expect(screen.getByLabelText(/^邮箱/)).toHaveAttribute("aria-invalid", "true");
   });
 
-  it("submits registration when only the invite code is empty", () => {
+  it("blocks registration when the invite code is empty", () => {
     const onRegister = vi.fn();
     render(<AuthForms authError={null} mode="register" onLogin={vi.fn()} onRegister={onRegister} />);
 
@@ -156,9 +158,11 @@ describe("AuthForms", () => {
     fireEvent.change(screen.getByLabelText(/^密码/), { target: { value: "password123" } });
     fireEvent.submit(screen.getByRole("button", { name: "立即注册" }).closest("form")!);
 
-    expect(onRegister).toHaveBeenCalledOnce();
-    expect(screen.queryByText("请输入邀请码")).not.toBeInTheDocument();
-    expect(screen.getByLabelText(/^邀请码/)).not.toHaveAttribute("aria-invalid");
+    // The invite is required server-side, so an empty field is caught here
+    // with a field-level message instead of a banner error after submit.
+    expect(onRegister).not.toHaveBeenCalled();
+    expect(screen.getByText("请输入邀请码")).toHaveClass("auth-field-validation");
+    expect(screen.getByLabelText(/^邀请码/)).toHaveAttribute("aria-invalid", "true");
   });
 
   it("shows register backend errors in Chinese", async () => {
diff --git a/apps/web/src/test/integration/inbox-page.test.tsx b/apps/web/src/test/integration/inbox-page.test.tsx
index 4b0878b..4269916 100644
--- a/apps/web/src/test/integration/inbox-page.test.tsx
+++ b/apps/web/src/test/integration/inbox-page.test.tsx
@@ -666,7 +666,7 @@ describe("mail list integration", () => {
     expect(screen.queryByRole("heading", { name: /^消息详情$/i })).not.toBeInTheDocument();
     expect(screen.getByRole("region", { name: /^阅读与提取详情$/i })).toBeInTheDocument();
     expect(screen.getByText("收件人：inbox-owner@example.com")).toBeInTheDocument();
-    expect(screen.getByText(/^LOGIN LINK$/i)).toBeInTheDocument();
+    expect(screen.getByText(/^登录链接$/i)).toBeInTheDocument();
     const extractionCard = screen.getByLabelText("邮件识别结果");
     expect(within(extractionCard).getByText(/^识别到验证码$/i)).toBeInTheDocument();
     expect(within(extractionCard).getByText(/^482913$/i)).toBeInTheDocument();
@@ -705,7 +705,7 @@ describe("mail list integration", () => {
 
     const linkMessage = messageResults.getByRole("button", { name: /Your login link/i });
     const linkMessageTop = linkMessage.querySelector(".message-item-top");
-    expect(within(linkMessageTop as HTMLElement).getByText(/^LOGIN LINK$/i).closest(".message-extraction-chip")?.querySelector(".message-extraction-chip-icon")).not.toBeNull();
+    expect(within(linkMessageTop as HTMLElement).getByText(/^登录链接$/i).closest(".message-extraction-chip")?.querySelector(".message-extraction-chip-icon")).not.toBeNull();
     expect(within(linkMessageTop as HTMLElement).getByText(/^附件 1$/i).closest(".message-item-attachment-chip")?.querySelector("svg")).not.toBeNull();
   });
 
@@ -931,7 +931,14 @@ describe("mail list integration", () => {
     const domainCombobox = within(dialog).getByRole("combobox", { name: /^邮箱域名$/i });
     expect(domainCombobox).toHaveTextContent("请选择域名");
     expect(within(dialog).getByRole("button", { name: /^取消$/i })).toBeInTheDocument();
-    expect(within(dialog).getByRole("button", { name: /^创建邮箱$/i })).toBeDisabled();
+
+    // The primary action stays enabled; validation runs on submit with a
+    // field-level message and moves focus to the first invalid control.
+    const submitButton = within(dialog).getByRole("button", { name: /^创建邮箱$/i });
+    expect(submitButton).toBeEnabled();
+    await user.click(submitButton);
+    expect(await within(dialog).findByText("请选择邮箱域名")).toBeInTheDocument();
+    expect(domainCombobox).toHaveFocus();
 
     await user.click(domainCombobox);
     expect(await screen.findByRole("option", { name: /^example.com$/i })).toBeInTheDocument();
@@ -939,7 +946,7 @@ describe("mail list integration", () => {
     await user.click(screen.getByRole("option", { name: /^example.com$/i }));
 
     expect(domainCombobox).toHaveTextContent("example.com");
-    expect(within(dialog).getByRole("button", { name: /^创建邮箱$/i })).toBeEnabled();
+    expect(within(dialog).queryByText("请选择邮箱域名")).not.toBeInTheDocument();
   });
 
   it("shows the real empty state instead of preview messages when the backend list is empty", async () => {
@@ -1064,7 +1071,7 @@ describe("mail list integration", () => {
     await waitFor(() => {
       expect(getMailMessageRequestParams().some((params) => params.get("search") === "contoso")).toBe(true);
     });
-    expect(messageResults().getByText(/^LOGIN LINK$/i)).toBeInTheDocument();
+    expect(messageResults().getByText(/^登录链接$/i)).toBeInTheDocument();
     expect(messageResults().queryByText(/^482913$/i)).not.toBeInTheDocument();
     expect(messageResults().queryByText(/^未提取$/i)).not.toBeInTheDocument();
 
@@ -1074,7 +1081,7 @@ describe("mail list integration", () => {
     await waitFor(() => {
       expect(getMailMessageRequestParams().some((params) => params.get("filter") === "attachment" && !params.has("search"))).toBe(true);
     });
-    expect(messageResults().getByText(/^LOGIN LINK$/i)).toBeInTheDocument();
+    expect(messageResults().getByText(/^登录链接$/i)).toBeInTheDocument();
     expect(messageResults().getByText(/^附件 1$/i)).toBeInTheDocument();
     expect(messageResults().queryByText(/^482913$/i)).not.toBeInTheDocument();
 
@@ -1086,7 +1093,7 @@ describe("mail list integration", () => {
     expect(messageResults().getAllByText(/^未提取$/i).length).toBeGreaterThan(0);
     expect(messageResults().getByText(/Welcome to Demo App/i)).toBeInTheDocument();
     expect(messageResults().getByText(/Second mailbox notice/i)).toBeInTheDocument();
-    expect(messageResults().queryByText(/^LOGIN LINK$/i)).not.toBeInTheDocument();
+    expect(messageResults().queryByText(/^登录链接$/i)).not.toBeInTheDocument();
 
     await user.click(screen.getByRole("tab", { name: /^全部$/i }));
     await waitFor(() => {
@@ -1327,13 +1334,13 @@ describe("mail list integration", () => {
     expect(await screen.findByRole("button", { name: /^复制验证码$/i })).toBeInTheDocument();
     const messageResults = () => within(screen.getByRole("group", { name: /^消息结果列表$/i }));
 
-    expect(messageResults().getByText(/^LOGIN LINK$/i)).toBeInTheDocument();
+    expect(messageResults().getByText(/^登录链接$/i)).toBeInTheDocument();
     expect(messageResults().getAllByText(/^未提取$/i).length).toBeGreaterThan(0);
 
     await user.click(screen.getByRole("tab", { name: /^验证码$/i }));
 
     expect(messageResults().getByText("482913")).toBeInTheDocument();
-    expect(messageResults().queryByText(/^LOGIN LINK$/i)).not.toBeInTheDocument();
+    expect(messageResults().queryByText(/^登录链接$/i)).not.toBeInTheDocument();
     expect(messageResults().queryByText(/^未提取$/i)).not.toBeInTheDocument();
     expect(screen.getByRole("button", { name: /^复制验证码$/i })).toBeInTheDocument();
   });
diff --git a/apps/worker/package.json b/apps/worker/package.json
index 40283c8..3e0f383 100644
--- a/apps/worker/package.json
+++ b/apps/worker/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@wemail/worker",
-  "version": "0.2.10",
+  "version": "0.2.11",
   "private": true,
   "type": "module",
   "scripts": {
diff --git a/docs/openapi.yaml b/docs/openapi.yaml
index 48605ac..b92074b 100644
--- a/docs/openapi.yaml
+++ b/docs/openapi.yaml
@@ -2,7 +2,7 @@
   "openapi": "3.1.0",
   "info": {
     "title": "WeMail 菜单化后端 API",
-    "version": "0.2.10",
+    "version": "0.2.11",
     "description": "WeMail 后端 API 已按管理后台左侧菜单分组。旧 /auth、/admin、/api/mailboxes、/api/messages、/api/outbound、/api/keys、/api/telegram 路径不再保留。"
   },
   "servers": [
diff --git a/package.json b/package.json
index e4d0a8a..ec1d2e1 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "wemail",
-  "version": "0.2.10",
+  "version": "0.2.11",
   "private": true,
   "type": "module",
   "packageManager": "pnpm@10.18.2",
diff --git a/packages/shared/package.json b/packages/shared/package.json
index c2d88e3..043014d 100644
--- a/packages/shared/package.json
+++ b/packages/shared/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@wemail/shared",
-  "version": "0.2.10",
+  "version": "0.2.11",
   "private": true,
   "type": "module",
   "exports": {
diff --git a/packages/shared/src/version.ts b/packages/shared/src/version.ts
index f58e079..8ef1fa1 100644
--- a/packages/shared/src/version.ts
+++ b/packages/shared/src/version.ts
@@ -1,2 +1,2 @@
-export const WEMAIL_VERSION = "0.2.10";
+export const WEMAIL_VERSION = "0.2.11";
 export const WEMAIL_VERSION_LABEL = `v${WEMAIL_VERSION}`;