diff --git a/.env.example b/.env.example
index 79c90efae..4e901db56 100644
--- a/.env.example
+++ b/.env.example
@@ -1,8 +1,8 @@
 # Desktop edition (cn or intl; defaults to intl)
 MEMMY_APP_EDITION=intl
 
-# Cloud service
-MEMMY_CLOUD_SERVICE=https://memmy-api.memtensor.cn
+# Cloud service origin (clients append /api/... paths)
+MEMMY_CLOUD_SERVICE=https://api.memmy.cn
 
 # Analytics (GA4)
 MEMMY_GA4_MEASUREMENT_ID=
diff --git a/.github/release-notes/v1.1.8.md b/.github/release-notes/v1.1.8.md
new file mode 100644
index 000000000..694c9355f
--- /dev/null
+++ b/.github/release-notes/v1.1.8.md
@@ -0,0 +1,13 @@
+# Memmy v1.1.8
+
+## Highlights
+
+- Fixed Windows startup lifecycle handling reported by MEMMY-495.
+- Fixed Windows memory-service cleanup and update blocking reported by MEMMY-504 and MEMMY-494.
+- Persisted monotonic WebUI transcript event timestamps reported by MEMMY-434.
+
+## Upgrade notes
+
+- Memmy Desktop and Agent are version 1.1.8.
+- The bundled Memory service, viewer, and CLI remain independently versioned.
+- The Memory protocol remains version 1.
diff --git a/App/backend/local-api-contracts/src/index.ts b/App/backend/local-api-contracts/src/index.ts
index 98d03d49f..1d9331291 100644
--- a/App/backend/local-api-contracts/src/index.ts
+++ b/App/backend/local-api-contracts/src/index.ts
@@ -592,6 +592,35 @@ export const PromotionFlagsSchema = z.object({
 });
 export type PromotionFlags = z.infer<typeof PromotionFlagsSchema>;
 
+export const LotteryStatusSchema = z.object({
+    shouldShow: z.boolean(),
+    startAt: z.number().int().nonnegative(),
+    endAt: z.number().int().nonnegative(),
+    serverNow: z.number().int().nonnegative(),
+    landingUrl: z.string().url()
+}).refine((status) => status.endAt > status.startAt, {
+    message: "Lottery endAt must be later than startAt",
+    path: ["endAt"]
+});
+export type LotteryStatus = z.infer<typeof LotteryStatusSchema>;
+
+export const LotteryRewardSchema = z.discriminatedUnion("hasReward", [
+    z.object({
+        hasReward: z.literal(false)
+    }),
+    z.object({
+        hasReward: z.literal(true),
+        drawId: z.string().min(1).optional(),
+        tokenAmount: z.number().int().positive()
+    })
+]);
+export type LotteryReward = z.infer<typeof LotteryRewardSchema>;
+
+export const LotteryRewardAckInputSchema = z.object({
+    drawId: z.string().min(1).optional()
+});
+export type LotteryRewardAckInput = z.infer<typeof LotteryRewardAckInputSchema>;
+
 export const AppBootstrapResponseSchema = z.object({
     app: AppSettingsDtoSchema,
     onboarding: OnboardingStateDtoSchema,
@@ -611,7 +640,8 @@ export const AppBootstrapResponseSchema = z.object({
     legal: LegalAgreementUrlsSchema.optional(),
     // Src module.
     // Promotions.
-    promotions: PromotionFlagsSchema.optional()
+    promotions: PromotionFlagsSchema.optional(),
+    lotteryStatus: LotteryStatusSchema.optional()
 });
 export type AppBootstrapResponse = z.infer<typeof AppBootstrapResponseSchema>;
 
diff --git a/App/backend/src/adapters/inbound/local-api/routes/account.ts b/App/backend/src/adapters/inbound/local-api/routes/account.ts
index 2a2816a49..c84671bc3 100644
--- a/App/backend/src/adapters/inbound/local-api/routes/account.ts
+++ b/App/backend/src/adapters/inbound/local-api/routes/account.ts
@@ -5,6 +5,8 @@ import {
   AccountProfileViewSchema,
   AccountSessionViewSchema,
   AvatarOptionSchema,
+  LotteryRewardAckInputSchema,
+  LotteryRewardSchema,
   OkResponseSchema,
   SendCodeInputSchema,
   SendCodeResponseSchema,
@@ -122,6 +124,25 @@ export function registerAccountRoutes(app: FastifyInstance, options: RegisterAcc
     })
   );
 
+  app.get(
+    "/api/account/lottery/reward",
+    { preHandler: options.authenticateRuntimeToken },
+    withErrorEnvelope(async (_request, reply) => {
+      const response = LotteryRewardSchema.parse(await options.account.getLotteryReward());
+      return reply.send(response);
+    })
+  );
+
+  app.post(
+    "/api/account/lottery/reward/ack",
+    { preHandler: options.authenticateRuntimeToken },
+    withErrorEnvelope(async (request, reply) => {
+      const input = LotteryRewardAckInputSchema.parse(request.body);
+      const response = OkResponseSchema.parse(await options.account.ackLotteryReward(input));
+      return reply.send(response);
+    })
+  );
+
   app.get(
     "/api/account/avatars",
     { preHandler: options.authenticateRuntimeToken },
diff --git a/App/backend/src/adapters/inbound/local-api/tests/account-routes.test.ts b/App/backend/src/adapters/inbound/local-api/tests/account-routes.test.ts
index 64b74c9da..f8557ffbf 100644
--- a/App/backend/src/adapters/inbound/local-api/tests/account-routes.test.ts
+++ b/App/backend/src/adapters/inbound/local-api/tests/account-routes.test.ts
@@ -106,6 +106,34 @@ describe("account local api routes", () => {
     ]);
   });
 
+  it("forwards lottery reward lookup and acknowledgement through AccountService", async () => {
+    const calls: unknown[] = [];
+    app = createServer({
+      account: {
+        async getLotteryReward() {
+          calls.push("get");
+          return { hasReward: true as const, drawId: "1", tokenAmount: 500_000 };
+        },
+        async ackLotteryReward(input: unknown) {
+          calls.push({ ack: input });
+          return { ok: true };
+        }
+      }
+    });
+
+    const reward = await app.inject({
+      method: "GET",
+      url: "/api/account/lottery/reward",
+      headers: { "x-memmy-local-token": "test-token" }
+    });
+    const ack = await injectJson("POST", "/api/account/lottery/reward/ack", { drawId: "1" });
+
+    expect(reward.statusCode).toBe(200);
+    expect(reward.json()).toEqual({ hasReward: true, drawId: "1", tokenAmount: 500_000 });
+    expect(ack.json()).toEqual({ ok: true });
+    expect(calls).toEqual(["get", { ack: { drawId: "1" } }]);
+  });
+
   it("lists avatars and stores the selected avatar behind the runtime token", async () => {
     const calls: string[] = [];
     app = createServer({
diff --git a/App/backend/src/adapters/outbound/cloud-client/http-cloud-client.ts b/App/backend/src/adapters/outbound/cloud-client/http-cloud-client.ts
index a6beda24e..6eb1c4e66 100644
--- a/App/backend/src/adapters/outbound/cloud-client/http-cloud-client.ts
+++ b/App/backend/src/adapters/outbound/cloud-client/http-cloud-client.ts
@@ -9,6 +9,8 @@ import {
   LegalAgreementUrlsSchema,
   IntegrationToolResultSchema,
   InvitationResultSchema,
+  LotteryRewardSchema,
+  LotteryStatusSchema,
   OkResponseSchema,
   PromotionFlagsSchema,
   QWEN_ASR_MODEL_ID,
@@ -20,6 +22,8 @@ import {
   type IntegrationConnection,
   type IntegrationConnectionsResponse,
   type LegalAgreementUrls,
+  type LotteryReward,
+  type LotteryStatus,
   type IntegrationToolResult,
   type OkResponse,
   type PromotionFlags,
@@ -45,10 +49,12 @@ import type {
   CloudStartSocialLoginResult,
   CloudLogoutInput,
   GetAccountInfoInput,
+  GetLotteryRewardInput,
   EnsureInvitationCodeInput,
   GetTokenQuotaEligibilityInput,
   GetTokenUsageInput,
   GrantTokensInput,
+  AckLotteryRewardInput,
   ReleaseCheckResult,
   RequestTokenQuotaInput,
   TokenQuotaApplyResult,
@@ -414,6 +420,36 @@ export function createHttpCloudClient(options: CreateHttpCloudClientOptions = {}
       } catch {
         return undefined;
       }
+    },
+
+    async getLotteryStatus(): Promise<LotteryStatus | undefined> {
+      try {
+        const data = await requestCloudData<unknown>(fetchImpl, baseUrl, timeoutMs, "/api/memmy/lottery/status", {
+          method: "GET",
+          lang: "zh"
+        });
+        const parsed = LotteryStatusSchema.safeParse(data);
+        return parsed.success ? parsed.data : undefined;
+      } catch {
+        return undefined;
+      }
+    },
+
+    async getLotteryReward(input: GetLotteryRewardInput): Promise<LotteryReward> {
+      const data = await requestCloudData<unknown>(fetchImpl, baseUrl, timeoutMs, "/api/memmy/lottery/reward", {
+        method: "GET",
+        lang: "zh",
+        bearerCredential: input.uuid
+      });
+      return LotteryRewardSchema.parse(data);
+    },
+
+    async ackLotteryReward(input: AckLotteryRewardInput): Promise<void> {
+      await requestBoolean(fetchImpl, baseUrl, timeoutMs, "/api/memmy/lottery/reward/ack", {
+        body: input.drawId ? { drawId: input.drawId } : {},
+        lang: "zh",
+        bearerCredential: input.uuid
+      });
     }
   };
 }
diff --git a/App/backend/src/adapters/outbound/cloud-client/index.ts b/App/backend/src/adapters/outbound/cloud-client/index.ts
index 72c917b5f..4da38d507 100644
--- a/App/backend/src/adapters/outbound/cloud-client/index.ts
+++ b/App/backend/src/adapters/outbound/cloud-client/index.ts
@@ -1,5 +1,6 @@
 export { createHttpCloudClient, type CreateHttpCloudClientOptions } from "./http-cloud-client.js";
 export type {
+  AckLotteryRewardInput,
   CheckReleaseInput,
   CloudAsrTranscriptionInput,
   CloudAsrTranscriptionResult,
@@ -18,6 +19,7 @@ export type {
   CloudStartSocialLoginResult,
   CloudLogoutInput,
   GetAccountInfoInput,
+  GetLotteryRewardInput,
   GetTokenQuotaEligibilityInput,
   GetTokenUsageInput,
   GrantTokensInput,
diff --git a/App/backend/src/adapters/outbound/cloud-client/tests/cloud-client.test.ts b/App/backend/src/adapters/outbound/cloud-client/tests/cloud-client.test.ts
index 9228c7d09..498655008 100644
--- a/App/backend/src/adapters/outbound/cloud-client/tests/cloud-client.test.ts
+++ b/App/backend/src/adapters/outbound/cloud-client/tests/cloud-client.test.ts
@@ -1101,6 +1101,112 @@ describe("cloud client", () => {
     await expect(client.getPromotions()).resolves.toBeUndefined();
   });
 
+  it("http client fetches the remote lottery status", async () => {
+    const requests: Array<{ path: string; method: string | undefined }> = [];
+    const lotteryStatus = {
+      shouldShow: true,
+      startAt: 1790121600000,
+      endAt: 1790812800000,
+      serverNow: 1790456789000,
+      landingUrl: "https://memmy.cn/activity/mid-autumn"
+    };
+    server = createServer((request, response) => {
+      requests.push({
+        path: request.url ?? "",
+        method: request.method
+      });
+      sendJson(response, { code: 0, message: "ok", data: lotteryStatus });
+    });
+    await listen(server);
+    const address = server.address();
+    if (!address || typeof address === "string") {
+      throw new Error("Mock cloud server did not bind to a port");
+    }
+    const client = createHttpCloudClient({ baseUrl: `http://127.0.0.1:${address.port}`, timeoutMs: 1000 });
+
+    await expect(client.getLotteryStatus()).resolves.toEqual(lotteryStatus);
+    expect(requests).toEqual([{
+      path: "/api/memmy/lottery/status",
+      method: "GET"
+    }]);
+  });
+
+  it("http client fails closed when the lottery status is invalid", async () => {
+    server = createServer((_request, response) => {
+      sendJson(response, {
+        code: 0,
+        message: "ok",
+        data: {
+          shouldShow: true,
+          startAt: 1790121600000,
+          endAt: 1790812800000
+        }
+      });
+    });
+    await listen(server);
+    const address = server.address();
+    if (!address || typeof address === "string") {
+      throw new Error("Mock cloud server did not bind to a port");
+    }
+    const client = createHttpCloudClient({ baseUrl: `http://127.0.0.1:${address.port}`, timeoutMs: 1000 });
+
+    await expect(client.getLotteryStatus()).resolves.toBeUndefined();
+  });
+
+  it("http client reads and acknowledges a lottery reward with account authorization", async () => {
+    const requests: Array<{
+      path: string;
+      method: string | undefined;
+      body: unknown;
+      authorization: string | undefined;
+    }> = [];
+    server = createServer(async (request, response) => {
+      requests.push({
+        path: request.url ?? "",
+        method: request.method,
+        body: await readJson(request),
+        authorization: request.headers.authorization
+      });
+      sendJson(response, request.url === "/api/memmy/lottery/reward"
+        ? {
+            code: 0,
+            message: "ok",
+            data: { hasReward: true, drawId: "1", tokenAmount: 500_000 }
+          }
+        : { code: 0, message: "ok", data: true });
+    });
+    await listen(server);
+    const address = server.address();
+    if (!address || typeof address === "string") {
+      throw new Error("Mock cloud server did not bind to a port");
+    }
+    const client = createHttpCloudClient({ baseUrl: `http://127.0.0.1:${address.port}`, timeoutMs: 1000 });
+
+    await expect(client.getLotteryReward({ uuid: "cloud.login.uuid" })).resolves.toEqual({
+      hasReward: true,
+      drawId: "1",
+      tokenAmount: 500_000
+    });
+    await expect(client.ackLotteryReward({
+      uuid: "cloud.login.uuid",
+      drawId: "1"
+    })).resolves.toBeUndefined();
+    expect(requests).toEqual([
+      {
+        path: "/api/memmy/lottery/reward",
+        method: "GET",
+        body: {},
+        authorization: "Bearer cloud.login.uuid"
+      },
+      {
+        path: "/api/memmy/lottery/reward/ack",
+        method: "POST",
+        body: { drawId: "1" },
+        authorization: "Bearer cloud.login.uuid"
+      }
+    ]);
+  });
+
 });
 
 function listen(serverToListen: ReturnType<typeof createServer>): Promise<void> {
diff --git a/App/backend/src/adapters/outbound/cloud-client/types.ts b/App/backend/src/adapters/outbound/cloud-client/types.ts
index 37a00f448..95909dedc 100644
--- a/App/backend/src/adapters/outbound/cloud-client/types.ts
+++ b/App/backend/src/adapters/outbound/cloud-client/types.ts
@@ -9,6 +9,8 @@ import type {
   LegalAgreementUrls,
   IntegrationToolResult,
   InvitationResult,
+  LotteryReward,
+  LotteryStatus,
   OkResponse,
   PromotionFlags,
   SocialLoginProvider,
@@ -129,6 +131,15 @@ export interface GrantTokensInput {
   uuid?: string;
 }
 
+export interface GetLotteryRewardInput {
+  uuid: string;
+}
+
+export interface AckLotteryRewardInput {
+  uuid: string;
+  drawId?: string;
+}
+
 /** Contract for request token quota input. */
 export interface RequestTokenQuotaInput {
   /** Uuid. */
@@ -254,4 +265,10 @@ export interface CloudClient {
   getLegalUrls(): Promise<LegalAgreementUrls | undefined>;
   /** Reads get promotions. */
   getPromotions(): Promise<PromotionFlags | undefined>;
+  /** Reads the remotely controlled lottery campaign status. */
+  getLotteryStatus(): Promise<LotteryStatus | undefined>;
+  /** Reads the latest unacknowledged lottery reward for the account. */
+  getLotteryReward(input: GetLotteryRewardInput): Promise<LotteryReward>;
+  /** Marks the latest matching lottery reward as shown. */
+  ackLotteryReward(input: AckLotteryRewardInput): Promise<void>;
 }
diff --git a/App/backend/src/load-env.ts b/App/backend/src/load-env.ts
index c6397e99e..f232128ce 100644
--- a/App/backend/src/load-env.ts
+++ b/App/backend/src/load-env.ts
@@ -34,15 +34,6 @@ export interface LoadCloudServiceEnvOptions {
 /** Loads the public cloud-service origin without allowing packaged raw env files. */
 export function loadCloudServiceEnv(options: LoadCloudServiceEnvOptions = {}): string | null {
   const env = options.env ?? process.env;
-  if (Object.prototype.hasOwnProperty.call(env, "MEMMY_CLOUD_SERVICE")) {
-    const externalValue = env.MEMMY_CLOUD_SERVICE?.trim();
-    if (externalValue) {
-      env.MEMMY_CLOUD_SERVICE = externalValue;
-      return "environment";
-    }
-    delete env.MEMMY_CLOUD_SERVICE;
-  }
-
   if (options.manifestPath !== undefined) {
     if (!existsSync(options.manifestPath)) {
       throw new Error("Packaged desktop runtime manifest is missing");
@@ -54,9 +45,21 @@ export function loadCloudServiceEnv(options: LoadCloudServiceEnvOptions = {}): s
       throw new Error("Packaged desktop runtime manifest cloud service must use HTTPS");
     }
     env.MEMMY_CLOUD_SERVICE = manifestService;
+    // MEMMY_CLOUD_URL is a development-only override. Do not let a stale
+    // value inherited from an older installation redirect a packaged app.
+    delete env.MEMMY_CLOUD_URL;
     return options.manifestPath;
   }
 
+  if (Object.prototype.hasOwnProperty.call(env, "MEMMY_CLOUD_SERVICE")) {
+    const externalValue = env.MEMMY_CLOUD_SERVICE?.trim();
+    if (externalValue) {
+      env.MEMMY_CLOUD_SERVICE = externalValue;
+      return "environment";
+    }
+    delete env.MEMMY_CLOUD_SERVICE;
+  }
+
   const moduleDir = options.moduleDir ?? dirname(fileURLToPath(import.meta.url));
   const envPath = findRepoEnvFile(options.cwd ?? process.cwd()) ?? findRepoEnvFile(moduleDir);
   if (envPath) {
diff --git a/App/backend/src/project-version.ts b/App/backend/src/project-version.ts
index df3b4098a..913ec8dcd 100644
--- a/App/backend/src/project-version.ts
+++ b/App/backend/src/project-version.ts
@@ -1,2 +1,2 @@
 /** Generated from the root package.json by scripts/sync-project-version.mjs. */
-export const MEMMY_VERSION = "1.1.7";
+export const MEMMY_VERSION = "1.1.8";
diff --git a/App/backend/src/services/account-service.ts b/App/backend/src/services/account-service.ts
index 99beb8c5c..84178908b 100644
--- a/App/backend/src/services/account-service.ts
+++ b/App/backend/src/services/account-service.ts
@@ -4,6 +4,7 @@ import {
   AccountLoginResultViewSchema,
   AccountProfileViewSchema,
   AccountSessionViewSchema,
+  LotteryRewardSchema,
   SendCodeResponseSchema,
   SocialLoginStatusResponseSchema,
   StartSocialLoginResponseSchema,
@@ -12,6 +13,8 @@ import {
   type AccountLoginResultView,
   type AccountProfileView,
   type AccountSessionView,
+  type LotteryReward,
+  type LotteryRewardAckInput,
   type SendCodeInput,
   type SendCodeResponse,
   type SocialLoginStatusInput,
@@ -39,6 +42,8 @@ export interface AccountService {
   startSocialLogin(input: StartSocialLoginInput): Promise<StartSocialLoginResponse>;
   getSocialLoginStatus(input: SocialLoginStatusInput): Promise<SocialLoginStatusResponse>;
   getInvitation(): Promise<AccountInvitationView>;
+  getLotteryReward(): Promise<LotteryReward>;
+  ackLotteryReward(input: LotteryRewardAckInput): Promise<OkResponse>;
   updateProfile(input: UpdateAccountProfileInput): Promise<AccountProfileView>;
   markGuideFinished(): Promise<OkResponse>;
   logout(): Promise<OkResponse>;
@@ -136,6 +141,32 @@ export function createAccountService(options: CreateAccountServiceOptions): Acco
       );
     },
 
+    async getLotteryReward() {
+      const uuid = options.accountSessionRepository.getCloudUuid();
+      if (!uuid) {
+        return { hasReward: false };
+      }
+      try {
+        return LotteryRewardSchema.parse(await options.cloudClient.getLotteryReward({ uuid }));
+      } catch {
+        return { hasReward: false };
+      }
+    },
+
+    async ackLotteryReward(input) {
+      const uuid = options.accountSessionRepository.getCloudUuid();
+      if (!uuid) {
+        throw Object.assign(new Error("Account session is not authenticated"), {
+          code: "unauthorized" as const
+        });
+      }
+      await options.cloudClient.ackLotteryReward({
+        uuid,
+        ...(input.drawId ? { drawId: input.drawId } : {})
+      });
+      return { ok: true };
+    },
+
     async updateProfile(input) {
       const session = options.accountSessionRepository.get();
       if (!session.authenticated) {
diff --git a/App/backend/src/services/bootstrap-service.ts b/App/backend/src/services/bootstrap-service.ts
index 2d21fd9b3..ee04bee34 100644
--- a/App/backend/src/services/bootstrap-service.ts
+++ b/App/backend/src/services/bootstrap-service.ts
@@ -5,6 +5,7 @@ import {
   type AppSettingsDto,
   type HealthStatus,
   type LegalAgreementUrls,
+  type LotteryStatus,
   type OnboardingStateDto,
   type PromotionFlags,
   type TokenUsageDto
@@ -34,12 +35,13 @@ export function createBootstrapService(options: CreateBootstrapServiceOptions):
       const bootstrap = options.appStateStore.repositories.bootstrap;
       const appSettings = bootstrap.getAppSettings();
       const onboarding = await reconcileImprovementProgram(options, appSettings, bootstrap.getOnboardingState());
-      const [memoryHealth, cloudHealth, tokenUsage, legal, promotions] = await Promise.all([
+      const [memoryHealth, cloudHealth, tokenUsage, legal, promotions, lotteryStatus] = await Promise.all([
         getMemoryHealth(options.memoryClient),
         getCloudHealth(options.cloudClient),
         refreshTokenUsage(options),
         getLegalUrls(options.cloudClient),
-        getPromotions(options.cloudClient)
+        getPromotions(options.cloudClient),
+        getLotteryStatus(options.cloudClient)
       ]);
 
       return AppBootstrapResponseSchema.parse({
@@ -62,7 +64,8 @@ export function createBootstrapService(options: CreateBootstrapServiceOptions):
           cloud: cloudHealth.status
         },
         ...(legal ? { legal } : {}),
-        promotions
+        promotions,
+        ...(lotteryStatus ? { lotteryStatus } : {})
       });
     }
   };
@@ -166,6 +169,14 @@ async function getPromotions(cloudClient: CloudClient): Promise<PromotionFlags>
   }
 }
 
+async function getLotteryStatus(cloudClient: CloudClient): Promise<LotteryStatus | undefined> {
+  try {
+    return await cloudClient.getLotteryStatus();
+  } catch {
+    return undefined;
+  }
+}
+
 async function getMemoryHealth(memoryClient: MemoryClient): Promise<HealthStatus> {
   try {
     const health = await memoryClient.health();
diff --git a/App/backend/src/services/tests/account-service.test.ts b/App/backend/src/services/tests/account-service.test.ts
index 180105a4c..95d1dc4c8 100644
--- a/App/backend/src/services/tests/account-service.test.ts
+++ b/App/backend/src/services/tests/account-service.test.ts
@@ -28,6 +28,75 @@ function createAccountService(options: TestAccountServiceOptions) {
 }
 
 describe("AccountService", () => {
+  it("treats a logged-out lottery reward lookup as no reward", async () => {
+    let cloudCalls = 0;
+    const service = createAccountService({
+      cloudClient: {
+        ...createCloudClientStub(),
+        async getLotteryReward() {
+          cloudCalls += 1;
+          return { hasReward: true as const, drawId: "1", tokenAmount: 500_000 };
+        }
+      },
+      accountSessionRepository: createAccountSessionRepositoryStub()
+    });
+
+    await expect(service.getLotteryReward()).resolves.toEqual({ hasReward: false });
+    expect(cloudCalls).toBe(0);
+  });
+
+  it("reads and acknowledges lottery rewards with the current cloud credential", async () => {
+    const calls: unknown[] = [];
+    const service = createAccountService({
+      cloudClient: {
+        ...createCloudClientStub(),
+        async getLotteryReward(input) {
+          calls.push({ get: input });
+          return { hasReward: true as const, drawId: "1", tokenAmount: 500_000 };
+        },
+        async ackLotteryReward(input) {
+          calls.push({ ack: input });
+        }
+      },
+      accountSessionRepository: {
+        ...createAccountSessionRepositoryStub(),
+        getCloudUuid() {
+          return "cloud.login.uuid";
+        }
+      }
+    });
+
+    await expect(service.getLotteryReward()).resolves.toEqual({
+      hasReward: true,
+      drawId: "1",
+      tokenAmount: 500_000
+    });
+    await expect(service.ackLotteryReward({ drawId: "1" })).resolves.toEqual({ ok: true });
+    expect(calls).toEqual([
+      { get: { uuid: "cloud.login.uuid" } },
+      { ack: { uuid: "cloud.login.uuid", drawId: "1" } }
+    ]);
+  });
+
+  it("fails closed when the cloud lottery reward lookup is unavailable", async () => {
+    const service = createAccountService({
+      cloudClient: {
+        ...createCloudClientStub(),
+        async getLotteryReward() {
+          throw Object.assign(new Error("unauthorized"), { code: "unauthorized" as const });
+        }
+      },
+      accountSessionRepository: {
+        ...createAccountSessionRepositoryStub(),
+        getCloudUuid() {
+          return "stale.cloud.uuid";
+        }
+      }
+    });
+
+    await expect(service.getLotteryReward()).resolves.toEqual({ hasReward: false });
+  });
+
   it("rejects verification channels that are not supported by the desktop package", async () => {
     let cloudCalls = 0;
     const service = createAccountService({
@@ -1071,6 +1140,12 @@ function createCloudClientStub() {
     async grantImprovementProgramTokens() {
       return this.getTokenUsage({});
     },
+    async getLotteryReward() {
+      return { hasReward: false as const };
+    },
+    async ackLotteryReward() {
+      return undefined;
+    },
     async sendTelemetry() {
       return undefined;
     },
diff --git a/App/backend/src/services/tests/bootstrap-service.test.ts b/App/backend/src/services/tests/bootstrap-service.test.ts
index 866d6dbc9..d0e1f5e48 100644
--- a/App/backend/src/services/tests/bootstrap-service.test.ts
+++ b/App/backend/src/services/tests/bootstrap-service.test.ts
@@ -4,6 +4,25 @@ import type { AppStateStore } from "../../infrastructure/app-state-store/index.j
 import { createBootstrapService } from "../bootstrap-service.js";
 
 describe("BootstrapService", () => {
+  it("includes the remote lottery status in bootstrap for logged-out clients", async () => {
+    const lotteryStatus = {
+      shouldShow: true,
+      startAt: 1790121600000,
+      endAt: 1790812800000,
+      serverNow: 1790456789000,
+      landingUrl: "https://memmy.cn/activity/mid-autumn"
+    };
+    const service = createBootstrapService(createUnauthenticatedOptions({
+      async getLotteryStatus() {
+        return lotteryStatus;
+      }
+    }));
+
+    await expect(service.getBootstrap()).resolves.toMatchObject({
+      lotteryStatus
+    });
+  });
+
   it("refreshes token usage from cloud for authenticated account sessions", async () => {
     const calls: unknown[] = [];
     const cloudTokenUsage = {
diff --git a/App/backend/src/tests/load-env.test.ts b/App/backend/src/tests/load-env.test.ts
index 7e2322a2f..042890e1f 100644
--- a/App/backend/src/tests/load-env.test.ts
+++ b/App/backend/src/tests/load-env.test.ts
@@ -2,6 +2,7 @@ import { mkdtempSync, mkdirSync, rmSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { afterEach, describe, expect, it } from "vitest";
+import { resolveCloudClientConfig } from "../config/service-urls.js";
 import { loadCloudServiceEnv } from "../load-env.js";
 
 const roots: string[] = [];
@@ -11,13 +12,18 @@ afterEach(() => {
 });
 
 describe("backend cloud-service env loading", () => {
-  it("keeps an explicit environment origin ahead of the packaged manifest", () => {
+  it("uses the packaged manifest instead of an inherited environment origin", () => {
     const root = fixtureRoot();
     const manifestPath = writeManifest(root, "https://manifest.example.test");
-    const env = { MEMMY_CLOUD_SERVICE: "https://external.example.test" };
+    const env = {
+      MEMMY_CLOUD_SERVICE: "https://external.example.test",
+      MEMMY_CLOUD_URL: "https://stale.example.test"
+    };
 
-    expect(loadCloudServiceEnv({ env, manifestPath })).toBe("environment");
-    expect(env.MEMMY_CLOUD_SERVICE).toBe("https://external.example.test");
+    expect(loadCloudServiceEnv({ env, manifestPath })).toBe(manifestPath);
+    expect(env.MEMMY_CLOUD_SERVICE).toBe("https://manifest.example.test");
+    expect(env.MEMMY_CLOUD_URL).toBeUndefined();
+    expect(resolveCloudClientConfig(env).baseUrl).toBe("https://manifest.example.test");
   });
 
   it("loads only the allowlisted cloud service from a packaged manifest", () => {
diff --git a/App/backend/src/tests/local-app-contracts.test.ts b/App/backend/src/tests/local-app-contracts.test.ts
index 050dc5584..6a0623f62 100644
--- a/App/backend/src/tests/local-app-contracts.test.ts
+++ b/App/backend/src/tests/local-app-contracts.test.ts
@@ -21,6 +21,9 @@ import {
   LocalDataClearResponseSchema,
   LocalDataExportResponseSchema,
   LocalDataRevealResponseSchema,
+  LotteryRewardAckInputSchema,
+  LotteryRewardSchema,
+  LotteryStatusSchema,
   ImageGenModelConfigInputSchema,
   ImageGenModelConfigViewSchema,
   ModelConfigInputSchema,
@@ -543,6 +546,45 @@ describe("local app contracts", () => {
     });
   });
 
+  it("parses the remote lottery status contract", () => {
+    expect(LotteryStatusSchema.parse({
+      shouldShow: true,
+      startAt: 1790121600000,
+      endAt: 1790812800000,
+      serverNow: 1790456789000,
+      landingUrl: "https://memmy.cn/activity/mid-autumn"
+    })).toEqual({
+      shouldShow: true,
+      startAt: 1790121600000,
+      endAt: 1790812800000,
+      serverNow: 1790456789000,
+      landingUrl: "https://memmy.cn/activity/mid-autumn"
+    });
+    expect(() => LotteryStatusSchema.parse({
+      shouldShow: true,
+      startAt: 1790812800000,
+      endAt: 1790121600000,
+      serverNow: 1790456789000,
+      landingUrl: "https://memmy.cn/activity/mid-autumn"
+    })).toThrow();
+  });
+
+  it("parses lottery reward and acknowledgement contracts", () => {
+    expect(LotteryRewardSchema.parse({ hasReward: false })).toEqual({ hasReward: false });
+    expect(LotteryRewardSchema.parse({
+      hasReward: true,
+      drawId: "1",
+      tokenAmount: 500_000
+    })).toEqual({
+      hasReward: true,
+      drawId: "1",
+      tokenAmount: 500_000
+    });
+    expect(LotteryRewardAckInputSchema.parse({ drawId: "1" })).toEqual({ drawId: "1" });
+    expect(LotteryRewardAckInputSchema.parse({})).toEqual({});
+    expect(() => LotteryRewardSchema.parse({ hasReward: true, tokenAmount: 0 })).toThrow();
+  });
+
   it("parses tool integration contracts", () => {
     const listItem = IntegrationListItemSchema.parse({
       id: "wechat",
diff --git a/App/backend/src/tests/support/mock-cloud-client.ts b/App/backend/src/tests/support/mock-cloud-client.ts
index 2c3e36b0e..62fbfb50d 100644
--- a/App/backend/src/tests/support/mock-cloud-client.ts
+++ b/App/backend/src/tests/support/mock-cloud-client.ts
@@ -25,7 +25,7 @@ import type {
   UpdateAccountGuideInput,
   UpdateCloudAccountProfileInput
 } from "../../adapters/outbound/cloud-client/types.js";
-import type { LegalAgreementUrls, PromotionFlags } from "@memmy/local-api-contracts";
+import type { LegalAgreementUrls, LotteryStatus, PromotionFlags } from "@memmy/local-api-contracts";
 
 export interface CreateMockCloudClientOptions {
   health?: CloudHealth;
@@ -35,6 +35,8 @@ export interface CreateMockCloudClientOptions {
   legal?: LegalAgreementUrls;
   /** Promotions. */
   promotions?: PromotionFlags;
+  /** Lottery campaign status. */
+  lotteryStatus?: LotteryStatus;
 }
 
 export function createMockCloudClient(options: CreateMockCloudClientOptions = {}): CloudClient {
@@ -225,6 +227,18 @@ export function createMockCloudClient(options: CreateMockCloudClientOptions = {}
 
     async getPromotions() {
       return options.promotions;
+    },
+
+    async getLotteryStatus() {
+      return options.lotteryStatus;
+    },
+
+    async getLotteryReward() {
+      return { hasReward: false };
+    },
+
+    async ackLotteryReward() {
+      return undefined;
     }
   };
 }
diff --git a/App/frontend/desktop/src/api/account-client.ts b/App/frontend/desktop/src/api/account-client.ts
index e6a2e310e..18c141796 100644
--- a/App/frontend/desktop/src/api/account-client.ts
+++ b/App/frontend/desktop/src/api/account-client.ts
@@ -3,6 +3,8 @@ import {
   AccountLoginResultViewSchema,
   AccountProfileViewSchema,
   AccountSessionViewSchema,
+  LotteryRewardAckInputSchema,
+  LotteryRewardSchema,
   OkResponseSchema,
   SendCodeInputSchema,
   SendCodeResponseSchema,
@@ -16,6 +18,8 @@ import {
   type AccountLoginResultView,
   type AccountProfileView,
   type AccountSessionView,
+  type LotteryReward,
+  type LotteryRewardAckInput,
   type OkResponse,
   type RuntimeConfig,
   type SendCodeInput,
@@ -63,6 +67,8 @@ export interface AccountClient {
   startSocialLogin(input: StartSocialLoginInput): Promise<StartSocialLoginResponse>;
   getSocialLoginStatus(input: SocialLoginStatusInput): Promise<SocialLoginStatusResponse>;
   getInvitation(): Promise<AccountInvitationView>;
+  getLotteryReward(): Promise<LotteryReward>;
+  ackLotteryReward(input: LotteryRewardAckInput): Promise<OkResponse>;
   updateProfile(input: UpdateAccountProfileInput): Promise<AccountProfileView>;
   markGuideFinished(): Promise<OkResponse>;
   logout(): Promise<OkResponse>;
@@ -116,6 +122,24 @@ export function createHttpAccountClient(config: RuntimeConfig): AccountClient {
       });
     },
 
+    async getLotteryReward() {
+      return requestJson({
+        config,
+        path: "/api/account/lottery/reward",
+        schema: LotteryRewardSchema
+      });
+    },
+
+    async ackLotteryReward(input) {
+      return requestJson({
+        config,
+        path: "/api/account/lottery/reward/ack",
+        schema: OkResponseSchema,
+        init: { method: "POST" },
+        body: LotteryRewardAckInputSchema.parse(input)
+      });
+    },
+
     async updateProfile(input) {
       return requestJson({
         config,
diff --git a/App/frontend/desktop/src/api/tests/account-client.test.ts b/App/frontend/desktop/src/api/tests/account-client.test.ts
index 1764fc272..85cf6d9cf 100644
--- a/App/frontend/desktop/src/api/tests/account-client.test.ts
+++ b/App/frontend/desktop/src/api/tests/account-client.test.ts
@@ -85,6 +85,38 @@ describe("account-client", () => {
     expect(fetchMock).toHaveBeenCalledTimes(1);
   });
 
+  it("读取并确认到账 Token 奖励", async () => {
+    const fetchMock = vi.fn(async (input: RequestInfo | URL, init?: RequestInit) => {
+      const url = input.toString();
+      expect(init?.headers).toMatchObject({
+        "x-memmy-local-token": "token"
+      });
+
+      if (url.endsWith("/api/account/lottery/reward")) {
+        expect(init?.method).toBe("GET");
+        return jsonResponse({ hasReward: true, drawId: "1", tokenAmount: 500_000 });
+      }
+
+      if (url.endsWith("/api/account/lottery/reward/ack")) {
+        expect(init?.method).toBe("POST");
+        expect(JSON.parse(String(init?.body))).toEqual({ drawId: "1" });
+        return jsonResponse({ ok: true });
+      }
+
+      throw new Error(`unexpected request: ${url}`);
+    });
+    vi.stubGlobal("fetch", fetchMock);
+    const client = createHttpAccountClient(config);
+
+    await expect(client.getLotteryReward()).resolves.toEqual({
+      hasReward: true,
+      drawId: "1",
+      tokenAmount: 500_000
+    });
+    await expect(client.ackLotteryReward({ drawId: "1" })).resolves.toEqual({ ok: true });
+    expect(fetchMock).toHaveBeenCalledTimes(2);
+  });
+
   it("通过真实本地 API 完成验证码发送、校验和昵称更新", async () => {
     const fetchMock = vi.fn(async (input: RequestInfo | URL, init?: RequestInit) => {
       const url = input.toString();
diff --git a/App/frontend/desktop/src/app.tsx b/App/frontend/desktop/src/app.tsx
index f6ea86ae0..70796707a 100644
--- a/App/frontend/desktop/src/app.tsx
+++ b/App/frontend/desktop/src/app.tsx
@@ -16,8 +16,11 @@ import {
 import { AppProviders, useApiClients } from "./app/providers.js";
 import { AppRouter } from "./app/router.js";
 import { UpdateCoordinatorProvider } from "./app/update-coordinator.js";
+import { CampaignPromptHost } from "./components/campaign-prompt-host.js";
 import { GithubStarPromptHost } from "./components/github-star-prompt-host.js";
 import { InviteResultToast } from "./components/invite-result-toast.js";
+import { NotificationCenterProvider } from "./components/notification-center.js";
+import { TokenCreditToastHost } from "./components/token-credit-toast-host.js";
 import {
   FOCUSED_AGENT_CHAT_STORAGE_KEY,
   readGuidanceCompleted,
@@ -329,9 +332,12 @@ function RuntimeApp() {
   return (
     <UpdateCoordinatorProvider>
       <AgentRuntimeBridge taskStateCoordinator={taskStateCoordinator ?? undefined}>
-        <AppRouter onRetry={retry} />
-        <GithubStarPromptHost />
-        {state.invitationToast ? (
+        <NotificationCenterProvider>
+          <AppRouter onRetry={retry} />
+          <CampaignPromptHost />
+          <TokenCreditToastHost />
+          <GithubStarPromptHost />
+          {state.invitationToast ? (
           <InviteResultToast
             key={state.invitationToast.id}
             text={t(
@@ -354,7 +360,8 @@ function RuntimeApp() {
               }
             }}
           />
-        ) : null}
+          ) : null}
+        </NotificationCenterProvider>
       </AgentRuntimeBridge>
     </UpdateCoordinatorProvider>
   );
diff --git a/App/frontend/desktop/src/app/campaign-prompt-state.ts b/App/frontend/desktop/src/app/campaign-prompt-state.ts
new file mode 100644
index 000000000..6026ca7dc
--- /dev/null
+++ b/App/frontend/desktop/src/app/campaign-prompt-state.ts
@@ -0,0 +1,173 @@
+/** Local persistence and eligibility for the Mid-Autumn campaign prompt. */
+import type { LotteryStatus, UserMode } from "@memmy/local-api-contracts";
+
+/** Build-time safety switch layered on top of the remote campaign status. */
+export const CAMPAIGN_PROMPT_ENABLED = true;
+
+export const CAMPAIGN_PROMPT_STORAGE_KEY = "memmy.campaignPrompt.v1";
+export const CAMPAIGN_PROMPT_MAX_SHOWS = 1;
+
+export interface CampaignPromptPersistedState {
+  showCount: number;
+  dismissedAt: number | null;
+  actioned: boolean;
+}
+
+const EMPTY_STATE: CampaignPromptPersistedState = {
+  showCount: 0,
+  dismissedAt: null,
+  actioned: false
+};
+
+let campaignPromptOpen = false;
+
+/** Whether the campaign prompt is currently on screen (hides the GitHub star card). */
+export function isCampaignPromptOpen(): boolean {
+  return campaignPromptOpen;
+}
+
+/** Records whether the campaign prompt is currently rendered. */
+export function setCampaignPromptOpen(open: boolean): void {
+  campaignPromptOpen = open;
+}
+
+/** Reads persisted campaign prompt state from storage. */
+export function readCampaignPromptState(storage: Storage | undefined): CampaignPromptPersistedState {
+  if (!storage) {
+    return { ...EMPTY_STATE };
+  }
+  try {
+    const raw = storage.getItem(CAMPAIGN_PROMPT_STORAGE_KEY);
+    if (!raw) {
+      return { ...EMPTY_STATE };
+    }
+    const parsed = JSON.parse(raw) as Partial<CampaignPromptPersistedState>;
+    return {
+      showCount: typeof parsed.showCount === "number" && parsed.showCount >= 0 ? Math.floor(parsed.showCount) : 0,
+      dismissedAt: typeof parsed.dismissedAt === "number" ? parsed.dismissedAt : null,
+      actioned: parsed.actioned === true
+    };
+  } catch {
+    return { ...EMPTY_STATE };
+  }
+}
+
+/** Writes persisted campaign prompt state to storage. */
+export function writeCampaignPromptState(
+  storage: Storage | undefined,
+  state: CampaignPromptPersistedState
+): void {
+  if (!storage) {
+    return;
+  }
+  storage.setItem(CAMPAIGN_PROMPT_STORAGE_KEY, JSON.stringify(state));
+}
+
+/** Whether the campaign prompt may be offered on this app open. */
+export function shouldOfferCampaignPrompt(
+  state: CampaignPromptPersistedState,
+  remoteStatus: LotteryStatus | null | undefined
+): boolean {
+  if (!CAMPAIGN_PROMPT_ENABLED) {
+    return false;
+  }
+  if (!remoteStatus?.shouldShow) {
+    return false;
+  }
+  if (remoteStatus.serverNow < remoteStatus.startAt || remoteStatus.serverNow >= remoteStatus.endAt) {
+    return false;
+  }
+  if (state.actioned) {
+    return false;
+  }
+  if (state.showCount >= CAMPAIGN_PROMPT_MAX_SHOWS) {
+    return false;
+  }
+  return true;
+}
+
+const CAMPAIGN_PROMPT_WORKSPACE_PATHS = new Set([
+  "/main",
+  "/memory",
+  "/memory-sources",
+  "/knowledge",
+  "/tools",
+  "/settings"
+]);
+
+/** Account needs a signed-in user. BYOK needs a saved Agent model. Both wait until guidance has settled. */
+export function isCampaignPromptSessionReady(input: {
+  userMode: UserMode | null | undefined;
+  accountUserId: string | null | undefined;
+  byokConfigured?: boolean;
+  guidanceDone?: boolean;
+}): boolean {
+  if (input.guidanceDone !== true) {
+    return false;
+  }
+  if (input.userMode === "byok") {
+    return input.byokConfigured === true;
+  }
+  return input.userMode === "account" && Boolean(input.accountUserId);
+}
+
+/** Guidance has settled when no deferred step is showing, and this machine finished the guide or onboarding is already complete. */
+export function isGuidanceDone(input: {
+  guidanceCompleted: boolean;
+  onboardingCompleted: boolean;
+  deferredGuidanceStep: string | null;
+}): boolean {
+  if (input.deferredGuidanceStep != null) {
+    return false;
+  }
+  if (input.guidanceCompleted) {
+    return true;
+  }
+  return input.onboardingCompleted;
+}
+
+/** Workspace routes that can show the campaign prompt after boot. Setup, login, onboarding, and the pet window wait. */
+export function isCampaignPromptSurfaceReady(input: {
+  startupStatus: string;
+  currentPath: string;
+}): boolean {
+  return input.startupStatus === "ready" && CAMPAIGN_PROMPT_WORKSPACE_PATHS.has(input.currentPath);
+}
+
+/** Records that the prompt was shown (counts toward the max of 1). */
+export function markCampaignPromptShown(storage: Storage | undefined): CampaignPromptPersistedState {
+  const current = readCampaignPromptState(storage);
+  const next: CampaignPromptPersistedState = {
+    ...current,
+    showCount: current.showCount + 1,
+    dismissedAt: null
+  };
+  writeCampaignPromptState(storage, next);
+  return next;
+}
+
+/** Records "maybe later". With a one-show cap, this does not reopen later. */
+export function markCampaignPromptDismissed(
+  storage: Storage | undefined,
+  nowMs: number = Date.now()
+): CampaignPromptPersistedState {
+  const current = readCampaignPromptState(storage);
+  const next: CampaignPromptPersistedState = {
+    ...current,
+    dismissedAt: nowMs
+  };
+  writeCampaignPromptState(storage, next);
+  return next;
+}
+
+/** Records that the user opened the activity site — never show again. */
+export function markCampaignPromptActioned(storage: Storage | undefined): CampaignPromptPersistedState {
+  const current = readCampaignPromptState(storage);
+  const next: CampaignPromptPersistedState = {
+    ...current,
+    actioned: true,
+    dismissedAt: null
+  };
+  writeCampaignPromptState(storage, next);
+  return next;
+}
diff --git a/App/frontend/desktop/src/app/campaign-prompt-url.ts b/App/frontend/desktop/src/app/campaign-prompt-url.ts
new file mode 100644
index 000000000..a1d4c25d8
--- /dev/null
+++ b/App/frontend/desktop/src/app/campaign-prompt-url.ts
@@ -0,0 +1,20 @@
+import type { ResolvedLanguage } from "../i18n/messages.js";
+
+/** Official activity page URL for the current app edition and language. */
+export function getCampaignActivityUrl(language: ResolvedLanguage): string {
+  const international = import.meta.env.MEMMY_APP_EDITION === "intl";
+  const envKey = international ? "MEMMY_LEGAL_INTL_BASE_URL" : "MEMMY_LEGAL_CN_BASE_URL";
+  const baseUrl = (international
+    ? import.meta.env.MEMMY_LEGAL_INTL_BASE_URL
+    : import.meta.env.MEMMY_LEGAL_CN_BASE_URL
+  )?.trim();
+
+  if (!baseUrl) {
+    throw new Error(`${envKey} is required.`);
+  }
+
+  const localePrefix = international
+    ? (language === "zh-CN" ? "cn/" : "")
+    : (language === "en-US" ? "en/" : "");
+  return new URL(`${localePrefix}activity/`, `${baseUrl.replace(/\/+$/, "")}/`).toString();
+}
diff --git a/App/frontend/desktop/src/app/desktop-prompt-preview.ts b/App/frontend/desktop/src/app/desktop-prompt-preview.ts
new file mode 100644
index 000000000..52da39982
--- /dev/null
+++ b/App/frontend/desktop/src/app/desktop-prompt-preview.ts
@@ -0,0 +1,14 @@
+export type DesktopPromptPreviewKind = "campaign" | "tokenCredit";
+
+/** Dev-only query `?previewPrompt=campaign|tokenCredit|all` to force-show desktop prompts. */
+export function isDesktopPromptPreview(kind: DesktopPromptPreviewKind): boolean {
+  if (typeof window === "undefined" || !import.meta.env.DEV) {
+    return false;
+  }
+  try {
+    const preview = new URLSearchParams(window.location.search).get("previewPrompt");
+    return preview === kind || preview === "all";
+  } catch {
+    return false;
+  }
+}
diff --git a/App/frontend/desktop/src/app/tests/campaign-prompt-state.test.ts b/App/frontend/desktop/src/app/tests/campaign-prompt-state.test.ts
new file mode 100644
index 000000000..0bb741963
--- /dev/null
+++ b/App/frontend/desktop/src/app/tests/campaign-prompt-state.test.ts
@@ -0,0 +1,200 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+import type { LotteryStatus } from "@memmy/local-api-contracts";
+import {
+  CAMPAIGN_PROMPT_MAX_SHOWS,
+  CAMPAIGN_PROMPT_STORAGE_KEY,
+  isGuidanceDone,
+  isCampaignPromptSessionReady,
+  isCampaignPromptSurfaceReady,
+  markCampaignPromptActioned,
+  markCampaignPromptDismissed,
+  markCampaignPromptShown,
+  readCampaignPromptState,
+  shouldOfferCampaignPrompt,
+  type CampaignPromptPersistedState
+} from "../campaign-prompt-state.js";
+
+class MemoryStorage implements Storage {
+  private readonly data = new Map<string, string>();
+
+  get length() {
+    return this.data.size;
+  }
+
+  clear() {
+    this.data.clear();
+  }
+
+  getItem(key: string) {
+    return this.data.get(key) ?? null;
+  }
+
+  key(index: number) {
+    return [...this.data.keys()][index] ?? null;
+  }
+
+  removeItem(key: string) {
+    this.data.delete(key);
+  }
+
+  setItem(key: string, value: string) {
+    this.data.set(key, value);
+  }
+}
+
+const duringCampaign = 1790456789000;
+
+function remoteStatus(overrides: Partial<LotteryStatus> = {}): LotteryStatus {
+  return {
+    shouldShow: true,
+    startAt: 1790121600000,
+    endAt: 1790812800000,
+    serverNow: duringCampaign,
+    landingUrl: "https://memmy.cn/activity/mid-autumn",
+    ...overrides
+  };
+}
+
+function emptyState(): CampaignPromptPersistedState {
+  return { showCount: 0, dismissedAt: null, actioned: false };
+}
+
+describe("campaign prompt eligibility", () => {
+  afterEach(() => {
+    vi.unstubAllEnvs();
+  });
+
+  it("offers the prompt during the campaign window", () => {
+    expect(shouldOfferCampaignPrompt(emptyState(), remoteStatus())).toBe(true);
+  });
+
+  it("fails closed when the remote switch is off or unavailable", () => {
+    expect(shouldOfferCampaignPrompt(emptyState(), remoteStatus({ shouldShow: false }))).toBe(false);
+    expect(shouldOfferCampaignPrompt(emptyState(), undefined)).toBe(false);
+  });
+
+  it("uses server time to enforce the remote campaign window", () => {
+    expect(shouldOfferCampaignPrompt(emptyState(), remoteStatus({ serverNow: 1790121599999 }))).toBe(false);
+    expect(shouldOfferCampaignPrompt(emptyState(), remoteStatus({ serverNow: 1790812800000 }))).toBe(false);
+  });
+
+  it("is ready only on workspace routes after boot", () => {
+    for (const currentPath of ["/main", "/memory", "/memory-sources", "/knowledge", "/tools", "/settings"]) {
+      expect(isCampaignPromptSurfaceReady({ startupStatus: "ready", currentPath })).toBe(true);
+    }
+  });
+
+  it("treats an authenticated account and a configured BYOK session as logged in", () => {
+    expect(isCampaignPromptSessionReady({
+      userMode: "account",
+      accountUserId: "user-1",
+      guidanceDone: true
+    })).toBe(true);
+    expect(isCampaignPromptSessionReady({
+      userMode: "account",
+      accountUserId: "user-1",
+      guidanceDone: false
+    })).toBe(false);
+    expect(isCampaignPromptSessionReady({ userMode: "account", accountUserId: "user-1" })).toBe(false);
+    expect(isCampaignPromptSessionReady({
+      userMode: "byok",
+      accountUserId: null,
+      byokConfigured: true,
+      guidanceDone: true
+    })).toBe(true);
+    expect(isCampaignPromptSessionReady({
+      userMode: "byok",
+      accountUserId: null,
+      byokConfigured: false,
+      guidanceDone: true
+    })).toBe(false);
+    expect(isCampaignPromptSessionReady({ userMode: "byok", accountUserId: null, guidanceDone: true })).toBe(false);
+    expect(isCampaignPromptSessionReady({ userMode: "byok", accountUserId: null })).toBe(false);
+    expect(isCampaignPromptSessionReady({
+      userMode: "byok",
+      accountUserId: null,
+      byokConfigured: true,
+      guidanceDone: false
+    })).toBe(false);
+    expect(isCampaignPromptSessionReady({ userMode: "account", accountUserId: null })).toBe(false);
+    expect(isCampaignPromptSessionReady({ userMode: "account", accountUserId: "" })).toBe(false);
+    expect(isCampaignPromptSessionReady({ userMode: "unset", accountUserId: null })).toBe(false);
+    expect(isCampaignPromptSessionReady({ userMode: undefined, accountUserId: "user-1" })).toBe(false);
+  });
+
+  it("treats finished guidance as done, and an in-progress tour as not done", () => {
+    expect(isGuidanceDone({
+      guidanceCompleted: true,
+      onboardingCompleted: false,
+      deferredGuidanceStep: null
+    })).toBe(true);
+    expect(isGuidanceDone({
+      guidanceCompleted: true,
+      onboardingCompleted: false,
+      deferredGuidanceStep: "product_tour"
+    })).toBe(false);
+    expect(isGuidanceDone({
+      guidanceCompleted: true,
+      onboardingCompleted: true,
+      deferredGuidanceStep: "improvement"
+    })).toBe(false);
+    expect(isGuidanceDone({
+      guidanceCompleted: false,
+      onboardingCompleted: true,
+      deferredGuidanceStep: null
+    })).toBe(true);
+    expect(isGuidanceDone({
+      guidanceCompleted: false,
+      onboardingCompleted: true,
+      deferredGuidanceStep: "product_tour"
+    })).toBe(false);
+    expect(isGuidanceDone({
+      guidanceCompleted: false,
+      onboardingCompleted: false,
+      deferredGuidanceStep: null
+    })).toBe(false);
+  });
+
+  it("waits for boot and skips setup, login, onboarding, and the pet window", () => {
+    expect(isCampaignPromptSurfaceReady({ startupStatus: "loading", currentPath: "/main" })).toBe(false);
+    for (const currentPath of [
+      "/welcome",
+      "/login",
+      "/token-detail",
+      "/onboarding",
+      "/api-key",
+      "/api-key-models",
+      "/api-key-optional",
+      "/pet"
+    ]) {
+      expect(isCampaignPromptSurfaceReady({ startupStatus: "ready", currentPath })).toBe(false);
+    }
+  });
+
+  it("stops after one show or a site visit", () => {
+    expect(CAMPAIGN_PROMPT_MAX_SHOWS).toBe(1);
+    expect(shouldOfferCampaignPrompt({
+      showCount: CAMPAIGN_PROMPT_MAX_SHOWS,
+      dismissedAt: null,
+      actioned: false
+    }, remoteStatus())).toBe(false);
+    expect(shouldOfferCampaignPrompt({
+      showCount: 0,
+      dismissedAt: null,
+      actioned: true
+    }, remoteStatus())).toBe(false);
+  });
+
+  it("persists shown, dismissed, and actioned states", () => {
+    const storage = new MemoryStorage();
+    expect(readCampaignPromptState(storage)).toEqual(emptyState());
+
+    expect(markCampaignPromptShown(storage)).toMatchObject({ showCount: 1, dismissedAt: null });
+    expect(JSON.parse(storage.getItem(CAMPAIGN_PROMPT_STORAGE_KEY) ?? "{}")).toMatchObject({ showCount: 1 });
+    expect(shouldOfferCampaignPrompt(readCampaignPromptState(storage), remoteStatus())).toBe(false);
+
+    expect(markCampaignPromptDismissed(storage, duringCampaign).dismissedAt).toBe(duringCampaign);
+    expect(markCampaignPromptActioned(storage)).toMatchObject({ actioned: true, dismissedAt: null });
+    expect(shouldOfferCampaignPrompt(readCampaignPromptState(storage), remoteStatus())).toBe(false);
+  });
+});
diff --git a/App/frontend/desktop/src/app/tests/campaign-prompt-url.test.ts b/App/frontend/desktop/src/app/tests/campaign-prompt-url.test.ts
new file mode 100644
index 000000000..168ce0466
--- /dev/null
+++ b/App/frontend/desktop/src/app/tests/campaign-prompt-url.test.ts
@@ -0,0 +1,25 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { getCampaignActivityUrl } from "../campaign-prompt-url.js";
+
+beforeEach(() => {
+  vi.stubEnv("MEMMY_APP_EDITION", "cn");
+  vi.stubEnv("MEMMY_LEGAL_CN_BASE_URL", "https://test.memmy.cn");
+  vi.stubEnv("MEMMY_LEGAL_INTL_BASE_URL", "https://test.memmy.bot");
+});
+
+afterEach(() => {
+  vi.unstubAllEnvs();
+});
+
+describe("getCampaignActivityUrl", () => {
+  it("uses the CN activity path and language prefix", () => {
+    expect(getCampaignActivityUrl("zh-CN")).toBe("https://test.memmy.cn/activity/");
+    expect(getCampaignActivityUrl("en-US")).toBe("https://test.memmy.cn/en/activity/");
+  });
+
+  it("uses the intl activity path and language prefix", () => {
+    vi.stubEnv("MEMMY_APP_EDITION", "intl");
+    expect(getCampaignActivityUrl("en-US")).toBe("https://test.memmy.bot/activity/");
+    expect(getCampaignActivityUrl("zh-CN")).toBe("https://test.memmy.bot/cn/activity/");
+  });
+});
diff --git a/App/frontend/desktop/src/assets/campaign/mid-autumn-riceball.jpg b/App/frontend/desktop/src/assets/campaign/mid-autumn-riceball.jpg
new file mode 100644
index 000000000..2021a1e7f
Binary files /dev/null and b/App/frontend/desktop/src/assets/campaign/mid-autumn-riceball.jpg differ
diff --git a/App/frontend/desktop/src/components/agent-model-selector.tsx b/App/frontend/desktop/src/components/agent-model-selector.tsx
index 08f1f9990..85528e583 100644
--- a/App/frontend/desktop/src/components/agent-model-selector.tsx
+++ b/App/frontend/desktop/src/components/agent-model-selector.tsx
@@ -20,6 +20,12 @@ export interface AgentModelSelectorProps {
   scopeKey: string;
   disabled: boolean;
   seedConfig?: ModelProviderConfig | null;
+  /**
+   * Called when the user explicitly picks a model, so the caller can persist it as the
+   * mode default (remembered for new chats after restart). The per-chat selection is
+   * still tracked separately in Agent state.
+   */
+  onDefaultModelSelected?: (candidateId: string) => void;
 }
 
 /** Per-chat catalog preset picker. Selection lives in Agent state, never browser storage. */
@@ -80,6 +86,7 @@ export function AgentModelSelector(props: AgentModelSelectorProps) {
 
   function selectModel(candidateId: string) {
     dispatch(agentActions.pendingModelPresetUpdated(props.scopeKey, candidateId));
+    props.onDefaultModelSelected?.(candidateId);
   }
 
   function openCustomModelSettings() {
diff --git a/App/frontend/desktop/src/components/campaign-prompt-host.tsx b/App/frontend/desktop/src/components/campaign-prompt-host.tsx
new file mode 100644
index 000000000..00c430ab3
--- /dev/null
+++ b/App/frontend/desktop/src/components/campaign-prompt-host.tsx
@@ -0,0 +1,109 @@
+/** Hosts the Mid-Autumn campaign prompt on eligible app opens. */
+import { useEffect, useRef, useState } from "react";
+import { getCampaignActivityUrl } from "../app/campaign-prompt-url.js";
+import {
+  isGuidanceDone,
+  isCampaignPromptOpen,
+  isCampaignPromptSessionReady,
+  isCampaignPromptSurfaceReady,
+  markCampaignPromptActioned,
+  markCampaignPromptDismissed,
+  markCampaignPromptShown,
+  readCampaignPromptState,
+  setCampaignPromptOpen,
+  shouldOfferCampaignPrompt
+} from "../app/campaign-prompt-state.js";
+import { isDesktopPromptPreview } from "../app/desktop-prompt-preview.js";
+import { readDeferredGuidanceStep, readGuidanceCompleted } from "../app/routes.js";
+import { useTranslation } from "../i18n/use-translation.js";
+import { useAppState } from "../state/app-state.js";
+import { openExternalUrl } from "../utils/open-url.js";
+import { CampaignPrompt } from "./campaign-prompt.js";
+
+function browserStorage(): Storage | undefined {
+  return typeof window === "undefined" ? undefined : window.localStorage;
+}
+
+/** Shows the campaign reminder after the user enters a workspace with guidance settled. */
+export function CampaignPromptHost() {
+  const { state } = useAppState();
+  const { language } = useTranslation();
+  const [open, setOpen] = useState(false);
+  const offeredRef = useRef(false);
+  const preview = isDesktopPromptPreview("campaign");
+  const surfaceReady = isCampaignPromptSurfaceReady({
+    startupStatus: state.startup.status,
+    currentPath: state.navigation.currentPath
+  });
+  const sessionReady = isCampaignPromptSessionReady({
+    userMode: state.bootstrap?.app.userMode,
+    accountUserId: state.account.userId,
+    byokConfigured: Boolean(state.modelConfig?.catalog?.modelAssignments.byok.agent.candidates.length),
+    guidanceDone: isGuidanceDone({
+      guidanceCompleted: readGuidanceCompleted(browserStorage()),
+      onboardingCompleted: state.bootstrap?.onboarding?.completed === true,
+      deferredGuidanceStep: readDeferredGuidanceStep(typeof window === "undefined" ? undefined : window.sessionStorage)
+    })
+  });
+
+  useEffect(() => {
+    if (open === isCampaignPromptOpen()) {
+      return;
+    }
+    setCampaignPromptOpen(open);
+    return () => {
+      if (isCampaignPromptOpen()) {
+        setCampaignPromptOpen(false);
+      }
+    };
+  }, [open]);
+
+  useEffect(() => {
+    if (open || offeredRef.current) {
+      return;
+    }
+
+    if (preview) {
+      offeredRef.current = true;
+      setOpen(true);
+      return;
+    }
+
+    if (!surfaceReady || !sessionReady) {
+      return;
+    }
+
+    const storage = browserStorage();
+    const persisted = readCampaignPromptState(storage);
+    if (!shouldOfferCampaignPrompt(persisted, state.bootstrap?.lotteryStatus)) {
+      offeredRef.current = true;
+      return;
+    }
+
+    offeredRef.current = true;
+    markCampaignPromptShown(storage);
+    setOpen(true);
+  }, [open, preview, sessionReady, state.bootstrap?.lotteryStatus, surfaceReady]);
+
+  if (!open) {
+    return null;
+  }
+
+  return (
+    <CampaignPrompt
+      onDismiss={() => {
+        if (!preview) {
+          markCampaignPromptDismissed(browserStorage());
+        }
+        setOpen(false);
+      }}
+      onOpenSite={() => {
+        if (!preview) {
+          markCampaignPromptActioned(browserStorage());
+        }
+        setOpen(false);
+        void openExternalUrl(getCampaignActivityUrl(language));
+      }}
+    />
+  );
+}
diff --git a/App/frontend/desktop/src/components/campaign-prompt.css b/App/frontend/desktop/src/components/campaign-prompt.css
new file mode 100644
index 000000000..08756fddb
--- /dev/null
+++ b/App/frontend/desktop/src/components/campaign-prompt.css
@@ -0,0 +1,193 @@
+.campaign-intro-backdrop {
+  position: fixed;
+  inset: 0;
+  z-index: 4000;
+  display: grid;
+  place-items: center;
+  padding: 16px;
+  box-sizing: border-box;
+  background: color-mix(in srgb, var(--color-text-ink) 23%, transparent);
+  backdrop-filter: blur(5px);
+  -webkit-backdrop-filter: blur(5px);
+}
+
+.campaign-intro-dialog {
+  --campaign-intro-muted: color-mix(in srgb, var(--color-text-ink) 64%, var(--color-background-paper));
+  --campaign-intro-border: color-mix(in srgb, var(--color-border-stone) 65%, var(--color-background-paper));
+  display: grid;
+  grid-template-columns: 300px minmax(300px, 1fr);
+  align-items: stretch;
+  position: relative;
+  width: min(720px, calc(100vw - 32px));
+  max-height: calc(100dvh - 32px);
+  border-radius: 26px;
+  overflow-x: hidden;
+  overflow-y: auto;
+  box-shadow:
+    0 22px 90px color-mix(in srgb, var(--color-text-ink) 18%, transparent),
+    0 2px 10px color-mix(in srgb, var(--color-text-ink) 6%, transparent);
+  background:
+    linear-gradient(
+      165deg,
+      color-mix(in srgb, var(--color-accent-peach) 18%, var(--color-background-paper)) 0%,
+      var(--color-background-paper) 42%,
+      var(--color-background-paper) 100%
+    );
+  color: var(--color-text-ink);
+  outline: none;
+  font-family: var(--font-sans);
+}
+
+.campaign-intro-close {
+  position: absolute;
+  z-index: 2;
+  top: 12px;
+  right: 12px;
+  display: grid;
+  place-items: center;
+  width: 22px;
+  height: 22px;
+  padding: 0;
+  border: 0;
+  border-radius: 999px;
+  color: #fff8e6;
+  background: rgba(13, 24, 42, 0.42);
+  box-shadow: 0 0 0 1px rgba(255, 248, 230, 0.22);
+  cursor: pointer;
+}
+
+.campaign-intro-close:hover {
+  color: #fff;
+  background: rgba(13, 24, 42, 0.62);
+}
+
+.campaign-intro-copy {
+  position: relative;
+  z-index: 1;
+  display: flex;
+  flex-direction: column;
+  align-items: stretch;
+  justify-content: flex-start;
+  padding: 30px 22px 22px;
+  overflow-y: auto;
+  min-height: 0;
+  background: color-mix(in srgb, var(--color-accent-peach) 16%, var(--color-background-paper));
+}
+
+.campaign-intro-eyebrow {
+  margin: 0 0 10px;
+  width: fit-content;
+  padding: 4px 10px;
+  border-radius: 999px;
+  background: color-mix(in srgb, var(--color-accent-peach) 42%, var(--color-background-paper));
+  color: color-mix(in srgb, var(--color-icon-ember) 72%, var(--color-text-ink));
+  font-size: 12px;
+  font-weight: 650;
+  letter-spacing: 0.04em;
+}
+
+.campaign-intro-copy h2 {
+  margin: 0;
+  font-size: 24px;
+  line-height: 1.3;
+  font-weight: 700;
+  letter-spacing: -0.5px;
+  text-wrap: balance;
+}
+
+.campaign-intro-poem {
+  margin: 18px 0 22px;
+  padding: 4px 0 4px 14px;
+  display: flex;
+  flex-direction: column;
+  gap: 8px;
+  border-left: 2px solid color-mix(in srgb, var(--color-icon-ember) 38%, var(--color-accent-peach));
+}
+
+.campaign-intro-poem p {
+  margin: 0;
+  font-size: 16px;
+  line-height: 1.75;
+  font-weight: 550;
+  color: color-mix(in srgb, var(--color-text-ink) 88%, var(--color-background-paper));
+}
+
+.campaign-intro-poem p:first-child {
+  font-size: 18px;
+  font-weight: 650;
+}
+
+.campaign-intro-actions {
+  margin-top: auto;
+  padding-top: 24px;
+  display: flex;
+  align-items: center;
+  gap: 10px;
+}
+
+.campaign-intro-primary {
+  width: 100%;
+  min-height: 44px;
+  padding: 10px 18px;
+  border: 0;
+  border-radius: 12px;
+  background: color-mix(in srgb, var(--color-action-sky) 64%, var(--color-icon-ember));
+  color: #fffaf0;
+  font-size: 14px;
+  font-weight: 700;
+  letter-spacing: 0.02em;
+  cursor: pointer;
+}
+
+.campaign-intro-primary:hover {
+  background: color-mix(in srgb, var(--color-action-sky-hover) 60%, var(--color-icon-ember));
+}
+
+.campaign-intro-dialog button:focus-visible {
+  outline: 2px solid color-mix(in srgb, var(--color-action-sky) 55%, var(--color-icon-ember));
+  outline-offset: 4px;
+}
+
+.campaign-intro-visual {
+  position: relative;
+  isolation: isolate;
+  overflow: hidden;
+  min-height: 468px;
+  background: #0d182a;
+}
+
+.campaign-intro-art {
+  position: absolute;
+  inset: 0;
+  display: block;
+  width: 100%;
+  height: 100%;
+  object-fit: cover;
+  object-position: center 34%;
+}
+
+@media (max-height: 620px) and (min-width: 821px) {
+  .campaign-intro-copy { padding: 24px 20px 18px; }
+  .campaign-intro-copy h2 { font-size: 24px; }
+  .campaign-intro-poem { margin: 14px 0 18px; }
+  .campaign-intro-poem p { font-size: 15px; }
+  .campaign-intro-poem p:first-child { font-size: 16px; }
+  .campaign-intro-visual { min-height: 400px; }
+}
+
+@media (max-width: 820px) {
+  .campaign-intro-backdrop { padding: 16px; }
+  .campaign-intro-dialog {
+    width: min(430px, calc(100vw - 32px));
+    max-height: calc(100dvh - 32px);
+    display: flex;
+    flex-direction: column;
+    overflow-y: auto;
+    border-radius: 21px;
+  }
+  .campaign-intro-copy { overflow: visible; padding: 28px 24px 24px; flex-shrink: 0; }
+  .campaign-intro-copy h2 { font-size: 24px; }
+  .campaign-intro-close { top: 10px; right: 10px; }
+  .campaign-intro-poem { margin: 18px 0 22px; }
+  .campaign-intro-visual { min-height: 280px; flex-shrink: 0; }
+}
diff --git a/App/frontend/desktop/src/components/campaign-prompt.tsx b/App/frontend/desktop/src/components/campaign-prompt.tsx
new file mode 100644
index 000000000..fba7290f8
--- /dev/null
+++ b/App/frontend/desktop/src/components/campaign-prompt.tsx
@@ -0,0 +1,138 @@
+/** Large campaign reminder, matching the computer-history feature-update dialog. */
+import { X } from "lucide-react";
+import { useEffect, useRef, type KeyboardEvent } from "react";
+import { createPortal } from "react-dom";
+import campaignArtUrl from "../assets/campaign/mid-autumn-riceball.jpg";
+import { useTranslation } from "../i18n/use-translation.js";
+import "./campaign-prompt.css";
+
+export interface CampaignPromptProps {
+  onOpenSite: () => void;
+  onDismiss: () => void;
+}
+
+const CN_COPY = {
+  eyebrow: "campaignPrompt.eyebrow",
+  title: "campaignPrompt.title",
+  poem: ["campaignPrompt.poemLine1", "campaignPrompt.poemLine2", "campaignPrompt.poemLine3"],
+  cta: "campaignPrompt.cta"
+} as const;
+
+const INTL_COPY = {
+  eyebrow: "campaignPromptIntl.eyebrow",
+  title: "campaignPromptIntl.title",
+  poem: ["campaignPromptIntl.poemLine1", "campaignPromptIntl.poemLine2", "campaignPromptIntl.poemLine3"],
+  cta: "campaignPromptIntl.cta"
+} as const;
+
+/** Overseas builds show the intl copy set; the mainland build keeps the CN set. */
+function campaignCopy() {
+  return import.meta.env.MEMMY_APP_EDITION === "intl" ? INTL_COPY : CN_COPY;
+}
+
+/** Centered feature-update dialog inviting the user to the activity site. */
+export function CampaignPrompt(props: CampaignPromptProps) {
+  const { t } = useTranslation();
+  const dialogRef = useRef<HTMLElement>(null);
+  const onDismiss = props.onDismiss;
+  const copy = campaignCopy();
+
+  useEffect(() => {
+    const overflow = document.body.style.overflow;
+    document.body.style.overflow = "hidden";
+    dialogRef.current?.focus();
+
+    function onKey(event: globalThis.KeyboardEvent) {
+      if (event.key === "Escape") {
+        event.preventDefault();
+        event.stopPropagation();
+        onDismiss();
+      }
+    }
+
+    document.addEventListener("keydown", onKey, true);
+    return () => {
+      document.body.style.overflow = overflow;
+      document.removeEventListener("keydown", onKey, true);
+    };
+  }, [onDismiss]);
+
+  if (typeof document === "undefined") {
+    return null;
+  }
+
+  return createPortal(
+    <div
+      className="campaign-intro-backdrop"
+      onClick={(event) => {
+        if (event.target === event.currentTarget) {
+          onDismiss();
+        }
+      }}
+    >
+      <section
+        ref={dialogRef}
+        className="campaign-intro-dialog"
+        role="dialog"
+        aria-modal="true"
+        aria-labelledby="campaign-intro-title"
+        aria-describedby="campaign-intro-description"
+        tabIndex={-1}
+        onKeyDown={trapFocus}
+      >
+        <button
+          className="campaign-intro-close"
+          type="button"
+          aria-label={t("common.close")}
+          onClick={onDismiss}
+        >
+          <X size={14} />
+        </button>
+        <div className="campaign-intro-copy">
+          <p className="campaign-intro-eyebrow">{t(copy.eyebrow)}</p>
+          <h2 id="campaign-intro-title">{t(copy.title)}</h2>
+          <div id="campaign-intro-description" className="campaign-intro-poem">
+            {copy.poem.map((key) => (
+              <p key={key}>{t(key)}</p>
+            ))}
+          </div>
+          <div className="campaign-intro-actions">
+            <button className="campaign-intro-primary" type="button" onClick={props.onOpenSite}>
+              {t(copy.cta)}
+            </button>
+          </div>
+        </div>
+        <div className="campaign-intro-visual" aria-hidden="true">
+          <img
+            className="campaign-intro-art"
+            src={campaignArtUrl}
+            alt=""
+          />
+        </div>
+      </section>
+    </div>,
+    document.body
+  );
+}
+
+function trapFocus(event: KeyboardEvent<HTMLElement>) {
+  if (event.key !== "Tab") {
+    return;
+  }
+  const items = Array.from(
+    event.currentTarget.querySelectorAll<HTMLElement>('button:not(:disabled), a[href], [tabindex="0"]')
+  );
+  const first = items[0];
+  const last = items.at(-1);
+  if (!first || !last) {
+    event.preventDefault();
+    return;
+  }
+  if (event.shiftKey && (document.activeElement === first || document.activeElement === event.currentTarget)) {
+    event.preventDefault();
+    last.focus();
+  } else if (!event.shiftKey && (document.activeElement === last || document.activeElement === event.currentTarget)) {
+    event.preventDefault();
+    first.focus();
+  }
+}
diff --git a/App/frontend/desktop/src/components/github-star-prompt-host.tsx b/App/frontend/desktop/src/components/github-star-prompt-host.tsx
index 1f33f5657..1bc1911b0 100644
--- a/App/frontend/desktop/src/components/github-star-prompt-host.tsx
+++ b/App/frontend/desktop/src/components/github-star-prompt-host.tsx
@@ -1,5 +1,6 @@
 /** Hosts the GitHub star prompt across all routes after agent turn completion. */
 import { useEffect, useRef, useState } from "react";
+import { isCampaignPromptOpen } from "../app/campaign-prompt-state.js";
 import {
   markGithubStarPromptActioned,
   markGithubStarPromptDismissed,
@@ -29,7 +30,7 @@ export function GithubStarPromptHost() {
     }
     lastHandledCompletionAt.current = completion.at;
 
-    if (open) {
+    if (open || isCampaignPromptOpen()) {
       return;
     }
 
diff --git a/App/frontend/desktop/src/components/notification-center.tsx b/App/frontend/desktop/src/components/notification-center.tsx
new file mode 100644
index 000000000..eada9ac60
--- /dev/null
+++ b/App/frontend/desktop/src/components/notification-center.tsx
@@ -0,0 +1,112 @@
+/** App-wide notification center: a top-right stack with a queue for overflow. */
+import { createContext, useCallback, useContext, useMemo, useRef, useState, type ReactNode } from "react";
+import { createPortal } from "react-dom";
+import type { LucideIcon } from "lucide-react";
+import { useTranslation } from "../i18n/use-translation.js";
+import { NotificationToast, type NotificationVariant } from "./notification-toast.js";
+
+/** Max notifications visible at once; extras wait in the queue until a slot frees. */
+export const NOTIFICATION_STACK_MAX_VISIBLE = 3;
+
+export interface NotificationInput {
+  variant?: NotificationVariant;
+  title: string;
+  body?: string;
+  /** Optional emphasized value shown as the hero line, e.g. a credited token amount. */
+  emphasis?: string;
+  /** Optional icon override; defaults to the variant icon. */
+  icon?: LucideIcon;
+  /** Optional inline action link; clicking it runs onAction, then dismisses the notification. */
+  actionLabel?: string;
+  onAction?: () => void;
+  /** Side effect to run when this notification is dismissed (e.g. refresh balance). */
+  onClose?: () => void;
+}
+
+interface NotificationItem extends NotificationInput {
+  id: string;
+}
+
+export interface NotificationCenterValue {
+  /** Enqueues a notification and returns its id. */
+  notify(input: NotificationInput): string;
+  /** Dismisses a notification by id (runs its onClose). */
+  dismiss(id: string): void;
+}
+
+const NotificationCenterContext = createContext<NotificationCenterValue | null>(null);
+
+let notificationSeq = 0;
+
+function nextNotificationId(): string {
+  notificationSeq += 1;
+  return `notification-${notificationSeq}-${Date.now()}`;
+}
+
+/** Provides notify/dismiss and renders the top-right stack. */
+export function NotificationCenterProvider(props: { children: ReactNode }) {
+  const { t } = useTranslation();
+  const [items, setItems] = useState<NotificationItem[]>([]);
+  const closeCallbacksRef = useRef(new Map<string, (() => void) | undefined>());
+
+  const dismiss = useCallback((id: string) => {
+    if (!closeCallbacksRef.current.has(id)) {
+      return;
+    }
+    const onClose = closeCallbacksRef.current.get(id);
+    closeCallbacksRef.current.delete(id);
+    setItems((current) => current.filter((item) => item.id !== id));
+    onClose?.();
+  }, []);
+
+  const notify = useCallback((input: NotificationInput) => {
+    const id = nextNotificationId();
+    closeCallbacksRef.current.set(id, input.onClose);
+    setItems((current) => [...current, { ...input, id }]);
+    return id;
+  }, []);
+
+  const value = useMemo<NotificationCenterValue>(() => ({ notify, dismiss }), [notify, dismiss]);
+
+  // Keep FIFO order; show the first N, render newest-of-those on top.
+  const visible = items.slice(0, NOTIFICATION_STACK_MAX_VISIBLE);
+  const stack = typeof document === "undefined" || visible.length === 0
+    ? null
+    : createPortal(
+        <div className="memmy-notification-stack" role="region" aria-label={t("notifications.regionLabel")}>
+          {[...visible].reverse().map((item) => (
+            <NotificationToast
+              key={item.id}
+              variant={item.variant}
+              title={item.title}
+              body={item.body}
+              emphasis={item.emphasis}
+              icon={item.icon}
+              actionLabel={item.actionLabel}
+              onAction={item.onAction ? () => {
+                item.onAction?.();
+                dismiss(item.id);
+              } : undefined}
+              onDismiss={() => dismiss(item.id)}
+            />
+          ))}
+        </div>,
+        document.body
+      );
+
+  return (
+    <NotificationCenterContext.Provider value={value}>
+      {props.children}
+      {stack}
+    </NotificationCenterContext.Provider>
+  );
+}
+
+/** Access the notification center; throws outside the provider. */
+export function useNotificationCenter(): NotificationCenterValue {
+  const value = useContext(NotificationCenterContext);
+  if (!value) {
+    throw new Error("useNotificationCenter must be used within NotificationCenterProvider");
+  }
+  return value;
+}
diff --git a/App/frontend/desktop/src/components/notification-toast.tsx b/App/frontend/desktop/src/components/notification-toast.tsx
new file mode 100644
index 000000000..e6a0950e5
--- /dev/null
+++ b/App/frontend/desktop/src/components/notification-toast.tsx
@@ -0,0 +1,61 @@
+/** Generic top-right notification card. Compact base for all in-app notices. */
+import { ChevronRight, X, type LucideIcon } from "lucide-react";
+import { useTranslation } from "../i18n/use-translation.js";
+
+export type NotificationVariant = "success" | "info" | "warning";
+
+export interface NotificationToastProps {
+  variant?: NotificationVariant;
+  title: string;
+  body?: string;
+  /** Optional emphasized value shown under the title, e.g. a credited token amount. */
+  emphasis?: string;
+  /** Optional leading icon. Omit for a text-only card. */
+  icon?: LucideIcon;
+  /** Optional action link. */
+  actionLabel?: string;
+  onAction?: () => void;
+  onDismiss: () => void;
+}
+
+/** Notification card aligned with the GitHub-star floating card. */
+export function NotificationToast(props: NotificationToastProps) {
+  const { t } = useTranslation();
+  const variant = props.variant ?? "info";
+  const Icon = props.icon;
+
+  return (
+    <div
+      className={`memmy-notification memmy-notification--${variant}`}
+      role="status"
+      aria-live="polite"
+    >
+      {Icon ? (
+        <span className="memmy-notification__badge" aria-hidden="true">
+          <Icon size={16} strokeWidth={2} />
+        </span>
+      ) : null}
+      <div className="memmy-notification__content">
+        <div className="memmy-notification__header">
+          <p className="memmy-notification__title">{props.title}</p>
+          <button
+            type="button"
+            className="memmy-notification__close"
+            aria-label={t("common.close")}
+            onClick={props.onDismiss}
+          >
+            <X size={14} strokeWidth={2.2} aria-hidden="true" />
+          </button>
+        </div>
+        {props.emphasis ? <p className="memmy-notification__emphasis">{props.emphasis}</p> : null}
+        {props.body ? <p className="memmy-notification__body">{props.body}</p> : null}
+        {props.actionLabel && props.onAction ? (
+          <button type="button" className="memmy-notification__action" onClick={props.onAction}>
+            <span>{props.actionLabel}</span>
+            <ChevronRight size={13} strokeWidth={2.4} aria-hidden="true" />
+          </button>
+        ) : null}
+      </div>
+    </div>
+  );
+}
diff --git a/App/frontend/desktop/src/components/search-palette.tsx b/App/frontend/desktop/src/components/search-palette.tsx
index a7161d884..ae5dfeda2 100644
--- a/App/frontend/desktop/src/components/search-palette.tsx
+++ b/App/frontend/desktop/src/components/search-palette.tsx
@@ -114,23 +114,22 @@ export function SearchPalette(props: SearchPaletteProps) {
               missingProjectLabel: props.missingProjectLabel,
               registryUnavailableLabel: props.registryUnavailableLabel
             });
+            const taskLabel = [task.title || untitledLabel || "", ownership].filter(Boolean).join(" · ");
             return (
             <button
               key={task.sessionKey}
               type="button"
               role="option"
               aria-selected={i === activeIndex}
-              aria-label={`${task.title || untitledLabel || ""} · ${ownership}`}
-              title={ownership}
+              aria-label={taskLabel}
+              title={ownership || undefined}
               className={`search-palette-item${i === activeIndex ? " search-palette-item--active" : ""}`}
               onMouseEnter={() => setActiveIndex(i)}
               onClick={() => onSelectTask(task)}
             >
               <span className="search-palette-item-title">{task.title || untitledLabel}</span>
               {task.preview && <span className="search-palette-item-preview">{task.preview}</span>}
-              <span className="search-palette-item-preview">
-                {ownership}
-              </span>
+              {ownership && <span className="search-palette-item-preview">{ownership}</span>}
             </button>
             );
           })}
@@ -175,7 +174,7 @@ export function resolveTaskOwnership(
     ? projects.find((candidate) => candidate.id === task.groupProjectId) ?? null
     : null;
   if (project) return `${project.name} · ${task.cwd}`;
-  if (task.projectId == null) return labels.standaloneLabel ?? "";
+  if (task.projectId == null) return "";
   const unavailableLabel = labels.projectRegistryState === "corrupt"
     ? labels.registryUnavailableLabel
     : labels.missingProjectLabel;
diff --git a/App/frontend/desktop/src/components/tests/campaign-token-prompts.test.tsx b/App/frontend/desktop/src/components/tests/campaign-token-prompts.test.tsx
new file mode 100644
index 000000000..5ee93ea10
--- /dev/null
+++ b/App/frontend/desktop/src/components/tests/campaign-token-prompts.test.tsx
@@ -0,0 +1,352 @@
+// @vitest-environment happy-dom
+
+import { act, StrictMode } from "react";
+import { createRoot, type Root } from "react-dom/client";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { clearDeferredGuidanceStep, writeDeferredGuidanceStep, writeGuidanceCompleted } from "../../app/routes.js";
+import { I18nProvider } from "../../i18n/i18n-provider.js";
+import { CampaignPromptHost } from "../campaign-prompt-host.js";
+import { CampaignPrompt } from "../campaign-prompt.js";
+import { NotificationToast } from "../notification-toast.js";
+
+const mocks = vi.hoisted(() => ({
+  openExternalUrl: vi.fn(),
+  appState: {
+    state: {
+      startup: { status: "ready" },
+      navigation: { currentPath: "/main" },
+      bootstrap: {
+        app: { userMode: "account" as const },
+        onboarding: { completed: false },
+        lotteryStatus: {
+          shouldShow: true,
+          startAt: 1790121600000,
+          endAt: 1790812800000,
+          serverNow: 1790456789000,
+          landingUrl: "https://remote.example/ignored"
+        }
+      },
+      account: { userId: "user-1" as string | null },
+      modelConfig: {
+        catalog: {
+          modelAssignments: {
+            byok: { agent: { candidates: [] as string[] } }
+          }
+        }
+      }
+    }
+  }
+}));
+
+vi.mock("../../state/app-state.js", () => ({
+  useAppState: () => mocks.appState
+}));
+
+vi.mock("../../utils/open-url.js", () => ({
+  openExternalUrl: mocks.openExternalUrl
+}));
+
+(globalThis as typeof globalThis & { IS_REACT_ACT_ENVIRONMENT: boolean }).IS_REACT_ACT_ENVIRONMENT = true;
+
+describe("campaign and token credit prompts", () => {
+  let container: HTMLDivElement;
+  let root: Root;
+
+  beforeEach(() => {
+    window.localStorage.clear();
+    window.sessionStorage.clear();
+    mocks.openExternalUrl.mockClear();
+    mocks.appState.state.startup.status = "ready";
+    mocks.appState.state.navigation.currentPath = "/main";
+    mocks.appState.state.bootstrap.app.userMode = "account";
+    mocks.appState.state.bootstrap.onboarding.completed = false;
+    mocks.appState.state.account.userId = "user-1";
+    mocks.appState.state.modelConfig.catalog.modelAssignments.byok.agent.candidates = [];
+    writeGuidanceCompleted(window.localStorage);
+    container = document.createElement("div");
+    document.body.append(container);
+    root = createRoot(container);
+  });
+
+  afterEach(() => {
+    act(() => root.unmount());
+    document.body.replaceChildren();
+    vi.unstubAllEnvs();
+  });
+
+  it("uses remote status only for eligibility and keeps the project activity URL", async () => {
+    vi.stubEnv("MEMMY_APP_EDITION", "cn");
+    vi.stubEnv("MEMMY_LEGAL_CN_BASE_URL", "https://project-url.example");
+
+    await act(async () => {
+      root.render(
+        <I18nProvider language="zh-CN">
+          <CampaignPromptHost />
+        </I18nProvider>
+      );
+    });
+
+    const action = Array.from(document.body.querySelectorAll("button"))
+      .find((button) => button.textContent === "去官网参与活动");
+    expect(action).not.toBeUndefined();
+
+    await act(async () => {
+      action?.click();
+    });
+
+    expect(mocks.openExternalUrl).toHaveBeenCalledWith("https://project-url.example/activity/");
+    expect(mocks.openExternalUrl).not.toHaveBeenCalledWith("https://remote.example/ignored");
+  });
+
+  it("waits for an account or BYOK login in the same session", async () => {
+    mocks.appState.state.navigation.currentPath = "/welcome";
+    mocks.appState.state.bootstrap.app.userMode = "unset";
+    mocks.appState.state.account.userId = null;
+
+    await act(async () => {
+      root.render(
+        <I18nProvider language="zh-CN">
+          <CampaignPromptHost />
+        </I18nProvider>
+      );
+    });
+    expect(document.body.textContent).not.toContain("去官网参与活动");
+
+    mocks.appState.state.navigation.currentPath = "/main";
+    mocks.appState.state.bootstrap.app.userMode = "account";
+    mocks.appState.state.account.userId = "user-1";
+    window.localStorage.removeItem("memmy.guidanceCompleted");
+    await act(async () => {
+      root.render(
+        <I18nProvider language="zh-CN">
+          <CampaignPromptHost />
+        </I18nProvider>
+      );
+    });
+    expect(document.body.textContent).not.toContain("去官网参与活动");
+
+    writeGuidanceCompleted(window.localStorage);
+    await act(async () => {
+      root.render(
+        <I18nProvider language="zh-CN">
+          <CampaignPromptHost />
+        </I18nProvider>
+      );
+    });
+    expect(document.body.textContent).toContain("去官网参与活动");
+  });
+
+  it("shows the prompt for BYOK after guidance, without a cloud account id", async () => {
+    mocks.appState.state.bootstrap.app.userMode = "byok";
+    mocks.appState.state.account.userId = null;
+    mocks.appState.state.modelConfig.catalog.modelAssignments.byok.agent.candidates = ["local-agent"];
+    window.localStorage.removeItem("memmy.guidanceCompleted");
+
+    await act(async () => {
+      root.render(
+        <I18nProvider language="zh-CN">
+          <CampaignPromptHost />
+        </I18nProvider>
+      );
+    });
+    expect(document.body.textContent).not.toContain("去官网参与活动");
+
+    writeGuidanceCompleted(window.localStorage);
+    await act(async () => {
+      root.render(
+        <I18nProvider language="zh-CN">
+          <CampaignPromptHost />
+        </I18nProvider>
+      );
+    });
+
+    expect(document.body.textContent).toContain("去官网参与活动");
+  });
+
+  it("waits out setup pages and an in-progress guide, then shows once", async () => {
+    mocks.appState.state.bootstrap.app.userMode = "byok";
+    mocks.appState.state.account.userId = null;
+    mocks.appState.state.navigation.currentPath = "/api-key";
+    window.localStorage.removeItem("memmy.guidanceCompleted");
+
+    await act(async () => {
+      root.render(
+        <I18nProvider language="zh-CN">
+          <CampaignPromptHost />
+        </I18nProvider>
+      );
+    });
+    expect(document.body.textContent).not.toContain("去官网参与活动");
+
+    mocks.appState.state.navigation.currentPath = "/welcome";
+    await act(async () => {
+      root.render(
+        <I18nProvider language="zh-CN">
+          <CampaignPromptHost />
+        </I18nProvider>
+      );
+    });
+    expect(document.body.textContent).not.toContain("去官网参与活动");
+
+    mocks.appState.state.navigation.currentPath = "/main";
+    mocks.appState.state.modelConfig.catalog.modelAssignments.byok.agent.candidates = ["local-agent"];
+    mocks.appState.state.bootstrap.onboarding.completed = true;
+    writeGuidanceCompleted(window.localStorage);
+    writeDeferredGuidanceStep(window.sessionStorage, "product_tour");
+    await act(async () => {
+      root.render(
+        <I18nProvider language="zh-CN">
+          <CampaignPromptHost />
+        </I18nProvider>
+      );
+    });
+    expect(document.body.textContent).not.toContain("去官网参与活动");
+
+    clearDeferredGuidanceStep(window.sessionStorage);
+    await act(async () => {
+      root.render(
+        <I18nProvider language="zh-CN">
+          <CampaignPromptHost />
+        </I18nProvider>
+      );
+    });
+    expect(document.body.textContent).toContain("去官网参与活动");
+
+    await act(async () => root.unmount());
+    root = createRoot(container);
+    await act(async () => {
+      root.render(
+        <I18nProvider language="zh-CN">
+          <CampaignPromptHost />
+        </I18nProvider>
+      );
+    });
+    expect(document.body.textContent).not.toContain("去官网参与活动");
+  });
+
+  it("shows once for an account that already finished onboarding", async () => {
+    window.localStorage.removeItem("memmy.guidanceCompleted");
+    mocks.appState.state.bootstrap.onboarding.completed = true;
+
+    await act(async () => {
+      root.render(
+        <I18nProvider language="zh-CN">
+          <CampaignPromptHost />
+        </I18nProvider>
+      );
+    });
+    expect(document.body.textContent).toContain("去官网参与活动");
+
+    await act(async () => root.unmount());
+    root = createRoot(container);
+    await act(async () => {
+      root.render(
+        <I18nProvider language="zh-CN">
+          <CampaignPromptHost />
+        </I18nProvider>
+      );
+    });
+    expect(document.body.textContent).not.toContain("去官网参与活动");
+  });
+
+  it("renders the large feature-update campaign dialog", () => {
+    act(() => {
+      root.render(
+        <StrictMode>
+          <I18nProvider language="zh-CN">
+            <CampaignPrompt onOpenSite={() => undefined} onDismiss={() => undefined} />
+          </I18nProvider>
+        </StrictMode>
+      );
+    });
+
+    const dialog = document.body.querySelector(".campaign-intro-dialog");
+    expect(dialog).not.toBeNull();
+    expect(document.body.textContent).toContain("🥮 中秋限定 · 至 9.30");
+    expect(document.body.textContent).toContain("中秋弹幕活动开始了");
+    expect(document.body.textContent).toContain("🥮 中秋年年吃月饼");
+    expect(document.body.textContent).toContain("🍙 饭团也可以是圆的");
+    expect(document.body.textContent).toContain("吃完打卡评价还能领 Token");
+    expect(document.body.textContent).toContain("去官网参与活动");
+    expect(document.body.textContent).not.toContain("等下再来");
+    expect(document.body.querySelector('[aria-label="关闭"]')).not.toBeNull();
+    expect(document.body.querySelector(".campaign-intro-secondary")).toBeNull();
+    expect(document.body.querySelector("img.campaign-intro-art")).not.toBeNull();
+    expect(document.body.querySelector(".campaign-intro-moon")).toBeNull();
+    expect(document.body.querySelector(".campaign-intro-mascot")).toBeNull();
+    expect(document.body.querySelector(".campaign-intro-highlights")).toBeNull();
+    expect(document.body.querySelector(".campaign-intro-demo")).toBeNull();
+    expect(document.body.querySelector(".github-star-prompt")).toBeNull();
+  });
+
+  it("renders the overseas copy for the intl edition", () => {
+    vi.stubEnv("MEMMY_APP_EDITION", "intl");
+
+    act(() => {
+      root.render(
+        <StrictMode>
+          <I18nProvider language="en-US">
+            <CampaignPrompt onOpenSite={() => undefined} onDismiss={() => undefined} />
+          </I18nProvider>
+        </StrictMode>
+      );
+    });
+
+    expect(document.body.textContent).toContain("Word is, the year's roundest moon is almost here.");
+    expect(document.body.textContent).toContain("Our onigiri? Even rounder.");
+    expect(document.body.textContent).toContain("Doubt it? Take a bite, leave a review, and grab some tokens.");
+    expect(document.body.textContent).not.toContain("Mooncakes every Mid-Autumn");
+
+    vi.unstubAllEnvs();
+  });
+
+  it("renders the overseas Chinese copy for the intl edition", () => {
+    vi.stubEnv("MEMMY_APP_EDITION", "intl");
+
+    act(() => {
+      root.render(
+        <StrictMode>
+          <I18nProvider language="zh-CN">
+            <CampaignPrompt onOpenSite={() => undefined} onDismiss={() => undefined} />
+          </I18nProvider>
+        </StrictMode>
+      );
+    });
+
+    expect(document.body.textContent).toContain("听说，一年里最圆的月亮就要来了");
+    expect(document.body.textContent).toContain("而我们的饭团？比它还圆");
+    expect(document.body.textContent).not.toContain("中秋年年吃月饼");
+
+    vi.unstubAllEnvs();
+  });
+
+  it("renders the token credit notice as title, amount, and close", () => {
+    const htmlContainer = document.createElement("div");
+    const toastRoot = createRoot(htmlContainer);
+    const onDismiss = vi.fn();
+    act(() => {
+      toastRoot.render(
+        <I18nProvider language="zh-CN">
+          <NotificationToast
+            variant="success"
+            title="🎁 弹幕抽奖 Token 已到账"
+            emphasis="+500,000"
+            onDismiss={onDismiss}
+          />
+        </I18nProvider>
+      );
+    });
+
+    expect(htmlContainer.querySelector(".memmy-notification--success")).not.toBeNull();
+    expect(htmlContainer.querySelector(".memmy-notification__title")?.textContent).toBe("🎁 弹幕抽奖 Token 已到账");
+    expect(htmlContainer.querySelector(".memmy-notification__emphasis")?.textContent).toBe("+500,000");
+    expect(htmlContainer.querySelector(".memmy-notification__body")).toBeNull();
+    expect(htmlContainer.querySelector(".memmy-notification__action")).toBeNull();
+
+    const close = htmlContainer.querySelector('[aria-label="关闭"]');
+    act(() => (close as HTMLButtonElement).click());
+    expect(onDismiss).toHaveBeenCalledTimes(1);
+    expect(htmlContainer.innerHTML).not.toContain("campaign-intro-primary");
+    act(() => toastRoot.unmount());
+  });
+});
diff --git a/App/frontend/desktop/src/components/tests/notification-center.test.tsx b/App/frontend/desktop/src/components/tests/notification-center.test.tsx
new file mode 100644
index 000000000..0ec4debe0
--- /dev/null
+++ b/App/frontend/desktop/src/components/tests/notification-center.test.tsx
@@ -0,0 +1,99 @@
+// @vitest-environment happy-dom
+
+import { act, StrictMode } from "react";
+import { createRoot, type Root } from "react-dom/client";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { I18nProvider } from "../../i18n/i18n-provider.js";
+import {
+  NOTIFICATION_STACK_MAX_VISIBLE,
+  NotificationCenterProvider,
+  useNotificationCenter,
+  type NotificationCenterValue
+} from "../notification-center.js";
+
+(globalThis as typeof globalThis & { IS_REACT_ACT_ENVIRONMENT: boolean }).IS_REACT_ACT_ENVIRONMENT = true;
+
+let center: NotificationCenterValue | null = null;
+
+function CenterHandle() {
+  center = useNotificationCenter();
+  return null;
+}
+
+function stackItems(): Element[] {
+  const stack = document.body.querySelector(".memmy-notification-stack");
+  return stack ? Array.from(stack.querySelectorAll(".memmy-notification")) : [];
+}
+
+describe("NotificationCenter", () => {
+  let container: HTMLDivElement;
+  let root: Root;
+
+  beforeEach(() => {
+    container = document.createElement("div");
+    document.body.append(container);
+    root = createRoot(container);
+    center = null;
+    act(() => {
+      root.render(
+        <StrictMode>
+          <I18nProvider language="zh-CN">
+            <NotificationCenterProvider>
+              <CenterHandle />
+            </NotificationCenterProvider>
+          </I18nProvider>
+        </StrictMode>
+      );
+    });
+  });
+
+  afterEach(() => {
+    act(() => root.unmount());
+    document.body.replaceChildren();
+  });
+
+  it("caps visible notifications and queues the overflow", () => {
+    act(() => {
+      for (let i = 1; i <= NOTIFICATION_STACK_MAX_VISIBLE + 1; i += 1) {
+        center?.notify({ title: `通知 ${i}` });
+      }
+    });
+
+    expect(stackItems()).toHaveLength(NOTIFICATION_STACK_MAX_VISIBLE);
+    // The 4th is queued, not shown yet.
+    expect(document.body.textContent).not.toContain("通知 4");
+  });
+
+  it("runs onClose on dismiss and reveals the next queued notification", () => {
+    const onClose = vi.fn();
+    act(() => {
+      center?.notify({ title: "通知 1", onClose });
+      for (let i = 2; i <= NOTIFICATION_STACK_MAX_VISIBLE + 1; i += 1) {
+        center?.notify({ title: `通知 ${i}` });
+      }
+    });
+    expect(document.body.textContent).not.toContain("通知 4");
+
+    // Oldest visible ("通知 1") is rendered at the bottom; dismiss it via its close button.
+    const closeButtons = document.body.querySelectorAll('.memmy-notification [aria-label="关闭"]');
+    act(() => (closeButtons[closeButtons.length - 1] as HTMLButtonElement).click());
+
+    expect(onClose).toHaveBeenCalledTimes(1);
+    expect(stackItems()).toHaveLength(NOTIFICATION_STACK_MAX_VISIBLE);
+    expect(document.body.textContent).toContain("通知 4");
+  });
+
+  it("runs the action then dismisses the notification", () => {
+    const onAction = vi.fn();
+    act(() => {
+      center?.notify({ title: "带链接的通知", actionLabel: "打开详情", onAction });
+    });
+
+    const action = document.body.querySelector(".memmy-notification__action");
+    expect(action?.textContent).toContain("打开详情");
+    act(() => (action as HTMLButtonElement).click());
+
+    expect(onAction).toHaveBeenCalledTimes(1);
+    expect(stackItems()).toHaveLength(0);
+  });
+});
diff --git a/App/frontend/desktop/src/components/tests/search-palette.test.tsx b/App/frontend/desktop/src/components/tests/search-palette.test.tsx
index 943fc2abc..8ea9d7f32 100644
--- a/App/frontend/desktop/src/components/tests/search-palette.test.tsx
+++ b/App/frontend/desktop/src/components/tests/search-palette.test.tsx
@@ -160,4 +160,24 @@ describe("SearchPalette", () => {
     expect(html).toContain('title="项目注册表不可用 · /projects/alpha"');
     expect(html).toContain('aria-label="Project task · 项目注册表不可用 · /projects/alpha"');
   });
+
+  it("does not render the standalone ownership label for independent tasks", () => {
+    const html = renderToString(
+      <SearchPalette
+        open
+        tasks={[makeTask({ sessionKey: "standalone", title: "独立任务" })]}
+        standaloneLabel="最近"
+        placeholder="搜索任务"
+        emptyLabel="无匹配结果"
+        untitledLabel="未命名对话"
+        ariaLabel="搜索任务"
+        onClose={() => undefined}
+        onSelectTask={() => undefined}
+      />
+    );
+
+    expect(html).toContain("独立任务");
+    expect(html).not.toContain("最近");
+    expect(html).not.toContain("search-palette-item-preview");
+  });
 });
diff --git a/App/frontend/desktop/src/components/tests/token-credit-toast-host.test.tsx b/App/frontend/desktop/src/components/tests/token-credit-toast-host.test.tsx
new file mode 100644
index 000000000..7a63ea769
--- /dev/null
+++ b/App/frontend/desktop/src/components/tests/token-credit-toast-host.test.tsx
@@ -0,0 +1,174 @@
+// @vitest-environment happy-dom
+
+import { act, StrictMode } from "react";
+import { createRoot, type Root } from "react-dom/client";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { I18nProvider } from "../../i18n/i18n-provider.js";
+import { NotificationCenterProvider } from "../notification-center.js";
+import { TokenCreditToastHost } from "../token-credit-toast-host.js";
+
+const mocks = vi.hoisted(() => ({
+  dispatch: vi.fn(),
+  getLotteryReward: vi.fn(),
+  ackLotteryReward: vi.fn(),
+  getBootstrap: vi.fn(),
+  appState: {
+    state: {
+      account: {
+        userId: "user-1" as string | null
+      }
+    }
+  }
+}));
+
+vi.mock("../../state/app-state.js", () => ({
+  useAppState: () => ({
+    state: mocks.appState.state,
+    dispatch: mocks.dispatch
+  })
+}));
+
+vi.mock("../../app/providers.js", () => ({
+  useOptionalApiClients: () => ({
+    clients: {
+      account: {
+        getLotteryReward: mocks.getLotteryReward,
+        ackLotteryReward: mocks.ackLotteryReward
+      },
+      bootstrap: {
+        getBootstrap: mocks.getBootstrap
+      }
+    },
+    setClients: () => undefined
+  })
+}));
+
+(globalThis as typeof globalThis & { IS_REACT_ACT_ENVIRONMENT: boolean }).IS_REACT_ACT_ENVIRONMENT = true;
+
+describe("TokenCreditToastHost", () => {
+  let container: HTMLDivElement;
+  let root: Root;
+
+  beforeEach(() => {
+    mocks.dispatch.mockReset();
+    mocks.getLotteryReward.mockReset();
+    mocks.ackLotteryReward.mockReset();
+    mocks.getBootstrap.mockReset();
+    mocks.appState.state.account.userId = "user-1";
+    mocks.ackLotteryReward.mockResolvedValue({ ok: true });
+    mocks.getBootstrap.mockResolvedValue({
+      tokenUsage: {
+        planName: "体验 Token",
+        totalTokens: 30_500_000,
+        usedTokens: 0,
+        remainingTokens: 30_500_000,
+        expiresAt: null,
+        lastSyncedAt: null,
+        sceneUsages: []
+      }
+    });
+    container = document.createElement("div");
+    document.body.append(container);
+    root = createRoot(container);
+  });
+
+  afterEach(() => {
+    act(() => root.unmount());
+    document.body.replaceChildren();
+  });
+
+  it("coalesces startup and focus checks while a reward request is pending", async () => {
+    let resolveReward: ((reward: { hasReward: false }) => void) | undefined;
+    mocks.getLotteryReward.mockImplementation(() => new Promise((resolve) => {
+      resolveReward = resolve;
+    }));
+
+    await renderHost(root);
+    act(() => {
+      window.dispatchEvent(new Event("focus"));
+      window.dispatchEvent(new Event("focus"));
+    });
+
+    expect(mocks.getLotteryReward).toHaveBeenCalledTimes(1);
+
+    await act(async () => {
+      resolveReward?.({ hasReward: false });
+    });
+  });
+
+  it("checks after login when the app started logged out", async () => {
+    mocks.appState.state.account.userId = null;
+    mocks.getLotteryReward.mockResolvedValue({ hasReward: false });
+
+    await renderHost(root);
+    expect(mocks.getLotteryReward).not.toHaveBeenCalled();
+
+    mocks.appState.state.account.userId = "user-1";
+    await renderHost(root);
+
+    expect(mocks.getLotteryReward).toHaveBeenCalledTimes(1);
+  });
+
+  it("shows a reward once and acknowledges it only after manual close", async () => {
+    mocks.getLotteryReward.mockResolvedValue({
+      hasReward: true,
+      drawId: "1",
+      tokenAmount: 500_000
+    });
+
+    await renderHost(root);
+
+    expect(document.body.textContent).toContain("🎁 弹幕抽奖 Token 已到账");
+    expect(document.body.textContent).toContain("+500,000");
+    expect(mocks.ackLotteryReward).not.toHaveBeenCalled();
+
+    await act(async () => {
+      window.dispatchEvent(new Event("focus"));
+    });
+    expect(document.body.querySelectorAll(".memmy-notification")).toHaveLength(1);
+
+    const close = document.body.querySelector<HTMLButtonElement>('[aria-label="关闭"]');
+    await act(async () => {
+      close?.click();
+    });
+
+    expect(mocks.ackLotteryReward).toHaveBeenCalledWith({ drawId: "1" });
+    expect(mocks.getBootstrap).toHaveBeenCalledTimes(1);
+    expect(mocks.dispatch).toHaveBeenCalledWith(expect.objectContaining({ type: "tokenUsage/updated" }));
+  });
+
+  it("still shows the startup reward after StrictMode replays effects", async () => {
+    mocks.getLotteryReward.mockResolvedValue({
+      hasReward: true,
+      drawId: "strict-1",
+      tokenAmount: 500_000
+    });
+
+    await act(async () => {
+      root.render(
+        <StrictMode>
+          <I18nProvider language="zh-CN">
+            <NotificationCenterProvider>
+              <TokenCreditToastHost />
+            </NotificationCenterProvider>
+          </I18nProvider>
+        </StrictMode>
+      );
+    });
+
+    expect(document.body.textContent).toContain("+500,000");
+    expect(mocks.getLotteryReward).toHaveBeenCalledTimes(1);
+  });
+});
+
+async function renderHost(root: Root): Promise<void> {
+  await act(async () => {
+    root.render(
+      <I18nProvider language="zh-CN">
+        <NotificationCenterProvider>
+          <TokenCreditToastHost />
+        </NotificationCenterProvider>
+      </I18nProvider>
+    );
+  });
+}
diff --git a/App/frontend/desktop/src/components/token-credit-toast-host.tsx b/App/frontend/desktop/src/components/token-credit-toast-host.tsx
new file mode 100644
index 000000000..48edc17b0
--- /dev/null
+++ b/App/frontend/desktop/src/components/token-credit-toast-host.tsx
@@ -0,0 +1,112 @@
+/** Enqueues the token-credit notification after a campaign reward is granted. */
+import { useCallback, useEffect, useRef } from "react";
+import { isDesktopPromptPreview } from "../app/desktop-prompt-preview.js";
+import { useOptionalApiClients } from "../app/providers.js";
+import { useTranslation } from "../i18n/use-translation.js";
+import { formatTokenGiftAmount } from "../pages/token-gift.js";
+import { appActions } from "../state/app-actions.js";
+import { useAppState } from "../state/app-state.js";
+import { useNotificationCenter } from "./notification-center.js";
+
+const PREVIEW_TOKEN_AMOUNT = 500_000;
+
+/** Pushes a manual-close notice for the latest unacknowledged campaign reward. */
+export function TokenCreditToastHost() {
+  const { state, dispatch } = useAppState();
+  const { clients } = useOptionalApiClients();
+  const { t } = useTranslation();
+  const { notify } = useNotificationCenter();
+  const notifiedRef = useRef(false);
+  const activeAccountUserIdRef = useRef<string | null>(null);
+  const rewardRequestRef = useRef<{
+    accountUserId: string;
+    request: Promise<void>;
+  } | null>(null);
+  const shownRewardKeysRef = useRef(new Set<string>());
+
+  /** Refreshes the token balance after the user closes the notice. */
+  const refreshBalance = useCallback(() => {
+    if (!clients) {
+      return;
+    }
+    void clients.bootstrap
+      .getBootstrap()
+      .then((bootstrap) => dispatch(appActions.tokenUsageUpdated(bootstrap.tokenUsage)))
+      .catch((error: unknown) => console.warn("[token-credit] failed to refresh token usage:", error));
+  }, [clients, dispatch]);
+
+  /** Enqueues the title + amount credit notification. */
+  const showTokenCredit = useCallback((tokens: number, onClose: () => void = refreshBalance) => {
+    notify({
+      variant: "success",
+      title: t("tokenCredit.title"),
+      emphasis: `+${formatTokenGiftAmount(tokens)}`,
+      onClose
+    });
+  }, [notify, refreshBalance, t]);
+
+  useEffect(() => {
+    if (notifiedRef.current || !isDesktopPromptPreview("tokenCredit")) {
+      return;
+    }
+    notifiedRef.current = true;
+    showTokenCredit(PREVIEW_TOKEN_AMOUNT);
+  }, [showTokenCredit]);
+
+  useEffect(() => {
+    const accountUserId = state.account.userId;
+    if (!clients || !accountUserId) {
+      return;
+    }
+    const activeClients = clients;
+    const activeAccountUserId = accountUserId;
+
+    activeAccountUserIdRef.current = activeAccountUserId;
+
+    function checkReward() {
+      if (rewardRequestRef.current?.accountUserId === activeAccountUserId) {
+        return;
+      }
+
+      const request = activeClients.account
+        .getLotteryReward()
+        .then((reward) => {
+          if (activeAccountUserIdRef.current !== activeAccountUserId || !reward.hasReward) {
+            return;
+          }
+
+          const rewardKey = reward.drawId ? `draw:${reward.drawId}` : `amount:${reward.tokenAmount}`;
+          if (shownRewardKeysRef.current.has(rewardKey)) {
+            return;
+          }
+          shownRewardKeysRef.current.add(rewardKey);
+
+          showTokenCredit(reward.tokenAmount, () => {
+            void activeClients.account
+              .ackLotteryReward(reward.drawId ? { drawId: reward.drawId } : {})
+              .catch((error: unknown) => console.warn("[token-credit] failed to acknowledge reward:", error))
+              .finally(refreshBalance);
+          });
+        })
+        .catch((error: unknown) => console.warn("[token-credit] failed to fetch reward:", error))
+        .finally(() => {
+          if (rewardRequestRef.current?.request === request) {
+            rewardRequestRef.current = null;
+          }
+        });
+
+      rewardRequestRef.current = { accountUserId: activeAccountUserId, request };
+    }
+
+    checkReward();
+    window.addEventListener("focus", checkReward);
+    return () => {
+      if (activeAccountUserIdRef.current === activeAccountUserId) {
+        activeAccountUserIdRef.current = null;
+      }
+      window.removeEventListener("focus", checkReward);
+    };
+  }, [clients, refreshBalance, showTokenCredit, state.account.userId]);
+
+  return null;
+}
diff --git a/App/frontend/desktop/src/i18n/messages.ts b/App/frontend/desktop/src/i18n/messages.ts
index 968910a96..dfd42f44e 100644
--- a/App/frontend/desktop/src/i18n/messages.ts
+++ b/App/frontend/desktop/src/i18n/messages.ts
@@ -179,6 +179,21 @@ export const zhCNMessages = {
   "githubStar.bodyLine2": "你的 Star 会帮助更多人发现它",
   "githubStar.cta": "去 GitHub 支持 ⭐",
   "githubStar.later": "以后再说",
+  "campaignPrompt.eyebrow": "🥮 中秋限定 · 至 9.30",
+  "campaignPrompt.title": "中秋弹幕活动开始了",
+  "campaignPrompt.poemLine1": "🥮 中秋年年吃月饼",
+  "campaignPrompt.poemLine2": "🍙 饭团也可以是圆的",
+  "campaignPrompt.poemLine3": "吃完打卡评价还能领 Token",
+  "campaignPrompt.cta": "去官网参与活动",
+  "campaignPromptIntl.eyebrow": "🌕 中秋限定",
+  "campaignPromptIntl.title": "最圆的月亮就要来了",
+  "campaignPromptIntl.poemLine1": "🌕 听说，一年里最圆的月亮就要来了",
+  "campaignPromptIntl.poemLine2": "而我们的饭团？比它还圆",
+  "campaignPromptIntl.poemLine3": "不信？咬一口、留个评价，还能顺手领点 Token",
+  "campaignPromptIntl.cta": "去官网参与活动",
+  "tokenCredit.title": "🎁 弹幕抽奖 Token 已到账",
+  "tokenCredit.body": "发弹幕抽奖的奖励已发放到你的账户",
+  "notifications.regionLabel": "通知",
   "login.title": "创建你的 Memmy 账号",
   "login.identifier": "邮箱或手机号",
   "login.phonePlaceholder": "请输入手机号",
@@ -1884,6 +1899,21 @@ export const enUSMessages: Record<keyof typeof zhCNMessages, string> = {
   "githubStar.bodyLine2": "Your Star helps more people discover it",
   "githubStar.cta": "Star on GitHub ⭐️",
   "githubStar.later": "Maybe later",
+  "campaignPrompt.eyebrow": "🥮 Limited · until Sep 30",
+  "campaignPrompt.title": "Mid-Autumn comment draw is on",
+  "campaignPrompt.poemLine1": "🥮 Mooncakes every Mid-Autumn",
+  "campaignPrompt.poemLine2": "🍙 Rice balls can be round too",
+  "campaignPrompt.poemLine3": "Check in, share a review, get Token",
+  "campaignPrompt.cta": "Join on our site",
+  "campaignPromptIntl.eyebrow": "🌕 Mid-Autumn · limited time",
+  "campaignPromptIntl.title": "The roundest moon is almost here",
+  "campaignPromptIntl.poemLine1": "🌕 Word is, the year's roundest moon is almost here.",
+  "campaignPromptIntl.poemLine2": "Our onigiri? Even rounder.",
+  "campaignPromptIntl.poemLine3": "Doubt it? Take a bite, leave a review, and grab some tokens.",
+  "campaignPromptIntl.cta": "Join on our site",
+  "tokenCredit.title": "🎁 Comment-draw Token credited",
+  "tokenCredit.body": "Your comment-draw prize is now in your account",
+  "notifications.regionLabel": "Notifications",
   "login.title": "Create your Memmy account",
   "login.identifier": "Email or phone",
   "login.phonePlaceholder": "Enter your phone number",
diff --git a/App/frontend/desktop/src/pages/agent-thread-messages.tsx b/App/frontend/desktop/src/pages/agent-thread-messages.tsx
index 88a5d1f97..29588a66c 100644
--- a/App/frontend/desktop/src/pages/agent-thread-messages.tsx
+++ b/App/frontend/desktop/src/pages/agent-thread-messages.tsx
@@ -2334,7 +2334,7 @@ const TRACE_CATEGORY_ICONS: Record<ToolTraceCategory, ComponentType<SVGProps<SVG
 function TraceLine(props: { item: ActivityToolStepItem; t: Translate }) {
   void props.t;
   const phase = props.item.event.phase;
-  const isError = phase === "error";
+  const isError = phase === "error" && !props.item.recovered;
   const category = props.item.category;
   const Icon = TRACE_CATEGORY_ICONS[category] ?? Wand2;
   const summary = (
@@ -2426,6 +2426,8 @@ interface ActivityToolStepItem {
   category: ToolTraceCategory;
   event: AgentToolProgressEvent;
   details: ActivityToolDetail[];
+  /** A later invocation of the same tool in this activity run completed successfully. */
+  recovered?: boolean;
   key: string;
 }
 
@@ -2500,9 +2502,48 @@ function buildActivitySegments(messages: AgentChatMessage[], t: Translate): Acti
       appendToolGroupSegment(segments, `${messageKey}:toolgroup`, items, t);
     }
   });
+  markRecoveredToolErrors(segments);
   return segments;
 }
 
+/** Keep raw failure details available on expansion, but do not present a successfully retried call as an active red error. */
+function markRecoveredToolErrors(segments: ActivitySegment[]): void {
+  const steps = segments.flatMap((segment) => segment.type === "toolGroup"
+    ? segment.items.filter((item): item is ActivityToolStepItem => item.type === "toolStep")
+    : []);
+  steps.forEach((step, index) => {
+    if (step.event.phase !== "error") return;
+    const name = toolEventName(step.event);
+    if (!name) return;
+    step.recovered = steps.slice(index + 1).some((candidate) => (
+      toolEventName(candidate.event) === name && toolEventSucceededForDisplay(candidate.event)
+    ));
+  });
+}
+
+function toolEventSucceededForDisplay(event: AgentToolProgressEvent): boolean {
+  if (event.phase !== "end" || event.error != null) return false;
+  if (typeof event.result === "string") {
+    const result = event.result.trim();
+    if (/^(?:error|plugin_invalid|invalid|failed|failure)\s*:/iu.test(result)) return false;
+    if (result.startsWith("{")) {
+      try {
+        const parsed: unknown = JSON.parse(result);
+        if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+          const record = parsed as Record<string, unknown>;
+          if (record.ok === false || record.success === false || record.error) return false;
+        }
+      } catch {
+        // A non-JSON textual result may still represent a successful tool response.
+      }
+    }
+  } else if (event.result && typeof event.result === "object" && !Array.isArray(event.result)) {
+    const record = event.result as Record<string, unknown>;
+    if (record.ok === false || record.success === false || record.error) return false;
+  }
+  return true;
+}
+
 function appendToolGroupSegment(
   segments: ActivitySegment[],
   key: string,
diff --git a/App/frontend/desktop/src/pages/home-page.tsx b/App/frontend/desktop/src/pages/home-page.tsx
index 484e141a6..f6ea3c1d3 100644
--- a/App/frontend/desktop/src/pages/home-page.tsx
+++ b/App/frontend/desktop/src/pages/home-page.tsx
@@ -51,7 +51,7 @@ import {
   type PendingFileAttachment,
   type PendingImage
 } from "../state/agent-composer-state.js";
-import { createModelWorkspace, resolveModelSelection } from "../state/model-workspace.js";
+import { createModelWorkspace, defaultModelSelectionInput, resolveModelSelection } from "../state/model-workspace.js";
 import {
   AgentCommandPalette,
   buildVisibleSlashCommands,
@@ -898,6 +898,27 @@ export function HomePage() {
       allowUnassignedSelected: pendingModelPreset == null && Boolean(committedModelSelection)
     }
   );
+  // Persist the model the user picks in the chat selector as the mode default, so a new chat
+  // after restart defaults to the last-used model instead of the platform default. Only the
+  // account/byok `agent.default` is written (the backend mirrors it to agents.defaults.modelPreset);
+  // the per-chat selection stays in Agent state. Relies on the BYOK-candidate enrollment fix so
+  // the default survives the account-mode startup re-projection.
+  const persistDefaultModelRef = useRef(false);
+  const persistDefaultModel = useCallback(async (candidateId: string) => {
+    const configClient = clients?.config;
+    if (!configClient || persistDefaultModelRef.current) return;
+    const input = defaultModelSelectionInput(modelWorkspace, modelWorkspaceMode, candidateId);
+    if (!input) return;
+    persistDefaultModelRef.current = true;
+    try {
+      const saved = await configClient.saveModelCatalog(input);
+      dispatch(appActions.modelConfigUpdated(saved));
+    } catch {
+      // The per-chat selection is already applied; a failed default persist must not break it.
+    } finally {
+      persistDefaultModelRef.current = false;
+    }
+  }, [clients, modelWorkspace, modelWorkspaceMode, dispatch]);
   useEffect(() => {
     setAnalyticsModelSource(resolvedConversationModel.candidate?.source ?? null);
     return () => setAnalyticsModelSource(null);
@@ -2726,6 +2747,7 @@ export function HomePage() {
                     scopeKey={modelSelectionScopeKey}
                     disabled={isCurrentAgentRunning || isCreatingChat || messageSendInFlight}
                     seedConfig={state.modelConfig}
+                    onDefaultModelSelected={persistDefaultModel}
                   />
                   <button
                     type="button"
@@ -2944,6 +2966,7 @@ export function HomePage() {
                           scopeKey={modelSelectionScopeKey}
                           disabled={isCurrentAgentRunning || isCreatingChat || messageSendInFlight}
                           seedConfig={state.modelConfig}
+                          onDefaultModelSelected={persistDefaultModel}
                         />
                         <button
                           type="button"
diff --git a/App/frontend/desktop/src/pages/tests/agent-thread-messages.test.tsx b/App/frontend/desktop/src/pages/tests/agent-thread-messages.test.tsx
index 7508d07a5..9e74374ff 100644
--- a/App/frontend/desktop/src/pages/tests/agent-thread-messages.test.tsx
+++ b/App/frontend/desktop/src/pages/tests/agent-thread-messages.test.tsx
@@ -668,6 +668,54 @@ describe("AgentThreadMessages", () => {
     expect(html).not.toContain("浏览了 1 处");
   });
 
+  it("de-emphasizes a tool validation error after the same tool succeeds on retry", () => {
+    const html = renderToString(
+      <I18nProvider language="zh-CN">
+        <AgentThreadMessages
+          chatScopeKey="chat-recovered-tool-error"
+          messages={[{
+            id: "trace",
+            role: "tool",
+            kind: "trace",
+            content: "",
+            traces: [],
+            toolEvents: [
+              { phase: "error", call_id: "call-invalid", name: "review_update_spec", error: "Invalid outputFormats" },
+              { phase: "end", call_id: "call-valid", name: "review_update_spec", result: JSON.stringify({ ok: true }) }
+            ],
+            stoppedByUser: true
+          }]}
+        />
+      </I18nProvider>
+    );
+
+    expect(html).not.toContain("agent-activity-timeline-item--error");
+    expect(html).not.toContain("agent-activity-timeline-item__error");
+    expect(html).toContain("Invalid outputFormats");
+  });
+
+  it("keeps an unrecovered tool error visibly red", () => {
+    const html = renderToString(
+      <I18nProvider language="zh-CN">
+        <AgentThreadMessages
+          chatScopeKey="chat-unrecovered-tool-error"
+          messages={[{
+            id: "trace",
+            role: "tool",
+            kind: "trace",
+            content: "",
+            traces: [],
+            toolEvents: [{ phase: "error", call_id: "call-invalid", name: "review_update_spec", error: "Invalid outputFormats" }],
+            stoppedByUser: true
+          }]}
+        />
+      </I18nProvider>
+    );
+
+    expect(html).toContain("agent-activity-timeline-item--error");
+    expect(html).toContain("agent-activity-timeline-item__error");
+  });
+
   it("folds the whole finished run — thoughts, tools, drafts — behind one worked-for header", () => {
     const html = renderToString(
       <I18nProvider language="zh-CN">
diff --git a/App/frontend/desktop/src/state/model-workspace.ts b/App/frontend/desktop/src/state/model-workspace.ts
index c4f58a684..1ba09c723 100644
--- a/App/frontend/desktop/src/state/model-workspace.ts
+++ b/App/frontend/desktop/src/state/model-workspace.ts
@@ -496,6 +496,18 @@ export function upsertModelConnection(
   const remainingIds = new Set(next.providers.flatMap((item) => item.models.map((model) => model.presetId)));
   pruneInvalidAssignmentReferences(next.modelAssignments.byok, remainingIds);
   pruneInvalidAssignmentReferences(next.modelAssignments.account, remainingIds);
+  // BYOK presets are the source of truth: the backend re-derives account.agent.candidates
+  // from byok.agent.candidates on every account-mode startup, dropping any BYOK preset that
+  // is absent there. So a custom (source: "byok") model added while in account mode must also
+  // be enrolled in the byok candidate list, otherwise it survives the session but vanishes on
+  // the next restart.
+  if (mode !== "byok") {
+    const byokAgent = next.modelAssignments.byok.agent;
+    byokAgent.candidates = replaceIds(byokAgent.candidates, previousPresetIds, nextAgentPresetIds);
+    if (!byokAgent.default || previousPresetIds.includes(byokAgent.default)) {
+      byokAgent.default = nextPresetIds.find((id) => presetHasCapability(next, id, "agent")) ?? byokAgent.default;
+    }
+  }
   refreshEffectiveCandidates(next);
   return { workspace: createModelWorkspace(next), error: null };
 }
@@ -565,6 +577,22 @@ export function setDefaultTaskModel(
   return createModelWorkspace(next);
 }
 
+/**
+ * Builds the persistence payload that makes `candidateId` the `mode` default, or null when there
+ * is nothing to persist (the id is not a candidate for this mode, or it is already the default).
+ * Used to remember the model picked in the chat selector as the default for new chats across
+ * restart, without redundant config writes.
+ */
+export function defaultModelSelectionInput(
+  workspace: ModelWorkspace,
+  mode: ModelWorkspaceMode,
+  candidateId: string
+): ModelConfigInput | null {
+  const agent = workspace.catalog.modelAssignments[mode].agent;
+  if (!agent.candidates.includes(candidateId) || agent.default === candidateId) return null;
+  return modelConfigInput(setDefaultTaskModel(workspace, mode, candidateId));
+}
+
 export function setModelAssignment(
   workspace: ModelWorkspace,
   mode: ModelWorkspaceMode,
diff --git a/App/frontend/desktop/src/state/tests/model-workspace.test.ts b/App/frontend/desktop/src/state/tests/model-workspace.test.ts
index afb7d4245..0e455923e 100644
--- a/App/frontend/desktop/src/state/tests/model-workspace.test.ts
+++ b/App/frontend/desktop/src/state/tests/model-workspace.test.ts
@@ -19,11 +19,13 @@ import {
   assignedCatalogEndpointId,
   clearLegacyModelWorkspace,
   createModelWorkspace,
+  defaultModelSelectionInput,
   deleteModelConnection,
   getModelCandidates,
   getTaskModelCandidates,
   modelConfigInput,
   resolveModelSelection,
+  setDefaultTaskModel,
   setModelAssignment,
   setTaskModelCandidates,
   upsertByokPreset,
@@ -860,6 +862,64 @@ describe("canonical model workspace adapter", () => {
     expect(assigned.catalog.modelAssignments.byok).toEqual(originalByok);
   });
 
+  it("账号模式新增自定义 BYOK 模型时同步登记进 byok 真源候选（重启后账号投影不丢弃）", () => {
+    const workspace = createModelWorkspace(catalog());
+    const added = upsertModelConnection(workspace, "account", {
+      provider: "openai",
+      endpoint: "https://api-int.example.test/v1",
+      protocol: "openai-chat-completions",
+      apiKey: "sk-custom",
+      models: ["gpt-5.6-sol"],
+      modelCapabilities: { "gpt-5.6-sol": "chat" }
+    });
+
+    expect(added.error).toBeNull();
+    const newPreset = added.workspace.catalog.providers
+      .flatMap((provider) => provider.models)
+      .find((model) => model.model === "gpt-5.6-sol");
+    expect(newPreset).toBeDefined();
+    // 当次可见：进入账号候选
+    expect(added.workspace.catalog.modelAssignments.account.agent.candidates).toContain(newPreset!.presetId);
+    // 关键：后端每次重启用 byok.agent.candidates 重算账号候选，自定义模型必须同时登记于此才不会丢
+    expect(added.workspace.catalog.modelAssignments.byok.agent.candidates).toContain(newPreset!.presetId);
+  });
+
+  it("账号模式选新自定义模型为默认时，该默认因已登记进 byok 真源而能跨重启保留", () => {
+    const workspace = createModelWorkspace(catalog());
+    const added = upsertModelConnection(workspace, "account", {
+      provider: "openai",
+      endpoint: "https://api-int.example.test/v1",
+      protocol: "openai-chat-completions",
+      apiKey: "sk-custom",
+      models: ["gpt-5.6-sol"],
+      modelCapabilities: { "gpt-5.6-sol": "chat" }
+    });
+    expect(added.error).toBeNull();
+    const newPresetId = added.workspace.catalog.providers
+      .flatMap((provider) => provider.models)
+      .find((model) => model.model === "gpt-5.6-sol")!.presetId;
+
+    const selected = setDefaultTaskModel(added.workspace, "account", newPresetId);
+
+    // 选中项成为账号默认
+    expect(selected.catalog.modelAssignments.account.agent.default).toBe(newPresetId);
+    // 且它在 byok 真源候选里 —— 后端账号投影仅当默认仍在“由 byok 候选重算出的候选集”中时才保留默认
+    //（见 account-model-projection.test.ts:146-155），因此该默认重启后不会被回退到平台默认
+    expect(selected.catalog.modelAssignments.byok.agent.candidates).toContain(newPresetId);
+  });
+
+  it("defaultModelSelectionInput：仅在选中项是候选且非当前默认时才产出持久化 payload", () => {
+    const workspace = createModelWorkspace(catalog());
+    // account 当前默认是 account-agent;选候选内的 byok-agent → 产出把默认设为 byok-agent 的 payload
+    const input = defaultModelSelectionInput(workspace, "account", "byok-agent");
+    expect(input).not.toBeNull();
+    expect(input!.modelAssignments.account.agent.default).toBe("byok-agent");
+    // 已是当前默认 → 无需写,返回 null(避免重复持久化)
+    expect(defaultModelSelectionInput(workspace, "account", "account-agent")).toBeNull();
+    // 不是该模式候选 → null
+    expect(defaultModelSelectionInput(workspace, "account", "not-a-candidate")).toBeNull();
+  });
+
   it("清空本地 Embedding Assignment 时保留账号 Assignment 与目录项", () => {
     const workspace = createModelWorkspace(catalog());
     const before = modelConfigInput(workspace);
diff --git a/App/frontend/desktop/src/styles.css b/App/frontend/desktop/src/styles.css
index 4d673e72d..2914f104a 100644
--- a/App/frontend/desktop/src/styles.css
+++ b/App/frontend/desktop/src/styles.css
@@ -7017,6 +7017,153 @@ input[type="checkbox"].check-sky:checked::after {
   background: var(--color-action-sky-hover);
 }
 
+.memmy-notification-stack {
+  position: fixed;
+  top: var(--codex-toolbar-height);
+  right: var(--space-5);
+  z-index: 30;
+  display: flex;
+  flex-direction: column;
+  gap: var(--space-2);
+  width: 220px;
+  max-width: calc(100vw - 32px);
+  pointer-events: none;
+}
+
+body.memmy-platform-windows:not(.memmy-window-fullscreen) .memmy-notification-stack {
+  top: calc(var(--codex-toolbar-height) * 2);
+}
+
+.memmy-notification {
+  pointer-events: auto;
+  box-sizing: border-box;
+  display: flex;
+  align-items: flex-start;
+  gap: 12px;
+  width: 100%;
+  padding: 12px;
+  border-radius: var(--radius-card);
+  border: 1px solid color-mix(in srgb, var(--color-border-stone) 50%, transparent);
+  background: var(--color-background-paper);
+  box-shadow: var(--shadow-soft);
+  animation: memmy-notification-in 180ms ease-out;
+}
+
+.memmy-notification--success {
+  --memmy-notification-accent: var(--color-action-sky);
+}
+
+.memmy-notification--info {
+  --memmy-notification-accent: color-mix(in srgb, var(--color-text-ink) 55%, transparent);
+}
+
+.memmy-notification--warning {
+  --memmy-notification-accent: var(--color-accent-peach);
+}
+
+.memmy-notification__badge {
+  flex: 0 0 auto;
+  display: grid;
+  place-items: center;
+  width: 28px;
+  height: 28px;
+  margin-top: 1px;
+  border-radius: 8px;
+  color: var(--memmy-notification-accent);
+  background: color-mix(in srgb, var(--memmy-notification-accent) 12%, var(--color-background-paper));
+}
+
+.memmy-notification__content {
+  flex: 1 1 auto;
+  min-width: 0;
+  display: flex;
+  flex-direction: column;
+  gap: 4px;
+}
+
+.memmy-notification__header {
+  display: flex;
+  align-items: flex-start;
+  justify-content: space-between;
+  gap: 8px;
+}
+
+.memmy-notification__title {
+  margin: 0;
+  min-width: 0;
+  font-size: 13px;
+  font-weight: 700;
+  line-height: 18px;
+  color: var(--color-text-ink);
+}
+
+.memmy-notification__emphasis {
+  margin: 0;
+  font-size: 14px;
+  font-weight: 700;
+  line-height: 20px;
+  color: var(--color-action-sky);
+}
+
+.memmy-notification__body {
+  margin: 0;
+  font-size: 12px;
+  font-weight: 400;
+  line-height: 18px;
+  color: color-mix(in srgb, var(--color-text-ink) 58%, transparent);
+}
+
+.memmy-notification__action {
+  align-self: flex-start;
+  display: inline-flex;
+  align-items: center;
+  gap: 1px;
+  margin-top: 4px;
+  padding: 0;
+  border: 0;
+  background: transparent;
+  color: var(--color-action-sky);
+  font-size: 12px;
+  font-weight: 550;
+  line-height: 16px;
+  cursor: pointer;
+}
+
+.memmy-notification__action:hover {
+  color: var(--color-action-sky-hover);
+}
+
+.memmy-notification__close {
+  flex: 0 0 auto;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 24px;
+  height: 24px;
+  margin: -2px -4px 0 0;
+  padding: 0;
+  border: 0;
+  border-radius: var(--radius-btn);
+  background: transparent;
+  color: color-mix(in srgb, var(--color-text-ink) 45%, transparent);
+  cursor: pointer;
+  transition: color 150ms ease, background 150ms ease;
+}
+
+.memmy-notification__close:hover {
+  background: color-mix(in srgb, var(--color-canvas-oat) 70%, transparent);
+  color: color-mix(in srgb, var(--color-text-ink) 70%, transparent);
+}
+
+@keyframes memmy-notification-in {
+  from { opacity: 0; transform: translateY(-6px); }
+  to { opacity: 1; transform: translateY(0); }
+}
+
+@media (prefers-reduced-motion: reduce) {
+  .memmy-notification { animation: none; }
+}
+
 .banner {
   display: flex;
   align-items: flex-start;
diff --git a/App/memmy-agent/package-lock.json b/App/memmy-agent/package-lock.json
index fe7597811..94cfeb826 100644
--- a/App/memmy-agent/package-lock.json
+++ b/App/memmy-agent/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "memmy-agent",
-  "version": "1.1.7",
+  "version": "1.1.8",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "memmy-agent",
-      "version": "1.1.7",
+      "version": "1.1.8",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.100.1",
         "@aws-sdk/client-bedrock-runtime": "^3.1061.0",
diff --git a/App/memmy-agent/package.json b/App/memmy-agent/package.json
index 003e08295..06b93c83e 100644
--- a/App/memmy-agent/package.json
+++ b/App/memmy-agent/package.json
@@ -1,6 +1,6 @@
 {
   "name": "memmy-agent",
-  "version": "1.1.7",
+  "version": "1.1.8",
   "description": "TypeScript refactor of memmy's agent runtime.",
   "type": "module",
   "main": "./dist/index.js",
diff --git a/App/memmy-agent/src/entrypoints/frontend-bridge/gui-transcript-sync.ts b/App/memmy-agent/src/entrypoints/frontend-bridge/gui-transcript-sync.ts
index 55b7b2104..c4d1265e6 100644
--- a/App/memmy-agent/src/entrypoints/frontend-bridge/gui-transcript-sync.ts
+++ b/App/memmy-agent/src/entrypoints/frontend-bridge/gui-transcript-sync.ts
@@ -46,6 +46,7 @@ function guiSessionKey(sessionKey: string): string {
 export class GuiTranscriptMirror {
   readonly sessions: SessionManager;
   readonly workspace: string;
+  private lastCreatedAt = 0;
 
   constructor(sessions: SessionManager, workspace: string) {
     this.sessions = sessions;
@@ -112,7 +113,17 @@ export class GuiTranscriptMirror {
   }
 
   append(sessionKey: string, record: Record<string, any>): number {
-    return appendTranscriptObject(guiSessionKey(sessionKey), record);
+    const suppliedCreatedAt = typeof record.createdAt === "number" && Number.isFinite(record.createdAt)
+      ? Math.trunc(record.createdAt)
+      : null;
+    const createdAt = suppliedCreatedAt == null
+      ? Math.max(Date.now(), this.lastCreatedAt + 1)
+      : suppliedCreatedAt;
+    this.lastCreatedAt = Math.max(this.lastCreatedAt, createdAt);
+    return appendTranscriptObject(guiSessionKey(sessionKey), {
+      ...record,
+      createdAt,
+    });
   }
 
   private appendTurn(turn: MirrorTurn, record: Record<string, any>): number {
diff --git a/App/memmy-agent/src/entrypoints/frontend-bridge/transcript.ts b/App/memmy-agent/src/entrypoints/frontend-bridge/transcript.ts
index 75919c115..e0cc18861 100644
--- a/App/memmy-agent/src/entrypoints/frontend-bridge/transcript.ts
+++ b/App/memmy-agent/src/entrypoints/frontend-bridge/transcript.ts
@@ -559,6 +559,17 @@ export function replayTranscriptToUiMessages(lines: Dict[], options: ReplayTrans
     return createdAt == null ? {} : { createdAt };
   }
 
+  function messageCreatedAtPatch(role: "user" | "assistant", rec: Dict): Dict {
+    const eventTime = createdAtPatch(rec);
+    if (Object.keys(eventTime).length > 0) {
+      // Keep the legacy session-message fallback aligned for later records
+      // that still omit an event-level timestamp.
+      sessionCreatedAtIndexByRole[role] += 1;
+      return eventTime;
+    }
+    return roleCreatedAtPatch(role);
+  }
+
   function newActivitySegment({ activate = true }: { activate?: boolean } = {}): string {
     activitySegmentCounter += 1;
     const segmentId = `activity-${activitySegmentCounter}`;
@@ -811,7 +822,7 @@ export function replayTranscriptToUiMessages(lines: Dict[], options: ReplayTrans
       messages.push({
         id: newId("as", idx),
         role: "assistant",
-        ...roleCreatedAtPatch("assistant"),
+        ...messageCreatedAtPatch("assistant", rec),
         ...extra,
         ...activeTurnPatch(),
       });
@@ -819,7 +830,7 @@ export function replayTranscriptToUiMessages(lines: Dict[], options: ReplayTrans
       messages.push({
         id: newId("as", idx),
         role: "assistant",
-        ...roleCreatedAtPatch("assistant"),
+        ...messageCreatedAtPatch("assistant", rec),
         ...extra,
         ...activeTurnPatch(),
       });
@@ -1158,7 +1169,7 @@ export function replayTranscriptToUiMessages(lines: Dict[], options: ReplayTrans
         role: "user",
         content: text,
         ...activeTurnPatch(),
-        ...roleCreatedAtPatch("user"),
+        ...messageCreatedAtPatch("user", rec),
       };
       const clientRequestId = stringValue(rec.client_request_id)
         ?? stringValue(rec.clientRequestId);
@@ -1197,7 +1208,7 @@ export function replayTranscriptToUiMessages(lines: Dict[], options: ReplayTrans
           bufferMessageId = adopted;
           const messageIndex = messages.findIndex((message) => message.id === adopted);
           if (messageIndex >= 0 && messages[messageIndex].createdAt == null) {
-            messages[messageIndex] = { ...messages[messageIndex], ...roleCreatedAtPatch("assistant") };
+            messages[messageIndex] = { ...messages[messageIndex], ...messageCreatedAtPatch("assistant", rec) };
           }
         } else {
           bufferMessageId = newId("buf", idx);
@@ -1207,7 +1218,7 @@ export function replayTranscriptToUiMessages(lines: Dict[], options: ReplayTrans
             content: "",
             isStreaming: true,
             ...activeTurnPatch(),
-            ...roleCreatedAtPatch("assistant"),
+            ...messageCreatedAtPatch("assistant", rec),
           });
         }
       }
@@ -1237,7 +1248,7 @@ export function replayTranscriptToUiMessages(lines: Dict[], options: ReplayTrans
             content: finalText,
             isStreaming: true,
             ...activeTurnPatch(),
-            ...roleCreatedAtPatch("assistant"),
+            ...messageCreatedAtPatch("assistant", rec),
           });
         } else {
           const messageIndex = messages.findIndex((message) => message.id === bufferMessageId);
diff --git a/App/memmy-agent/src/integrations/channels/websocket.ts b/App/memmy-agent/src/integrations/channels/websocket.ts
index da36e055d..591dc8f31 100644
--- a/App/memmy-agent/src/integrations/channels/websocket.ts
+++ b/App/memmy-agent/src/integrations/channels/websocket.ts
@@ -674,6 +674,7 @@ export class WebSocketChannel extends BaseChannel {
   sessionManager: any = null;
   guiSessionProjection: GuiSessionProjection | null = null;
   transcriptMonitor: GatewayTranscriptMonitor | null = null;
+  private lastWebuiTranscriptCreatedAt = 0;
   terminalRunControl: TerminalRunControl | null = null;
   staticDistPath: string | null = null;
   runtimeModelName: RuntimeModelNameResolver = null;
@@ -2579,7 +2580,17 @@ export class WebSocketChannel extends BaseChannel {
   tryAppendWebuiTranscript(chatId: string, wire: Record<string, any>): void {
     try {
       const key = `websocket:${chatId}`;
-      const offset = appendTranscriptObject(key, structuredClone(wire));
+      const record = structuredClone(wire);
+      const suppliedCreatedAt = record.createdAt ?? record.created_at ?? record.timestamp;
+      if (!(
+        (typeof suppliedCreatedAt === "number" && Number.isFinite(suppliedCreatedAt))
+        || (typeof suppliedCreatedAt === "string" && suppliedCreatedAt.trim())
+      )) {
+        const createdAt = Math.max(Date.now(), this.lastWebuiTranscriptCreatedAt + 1);
+        this.lastWebuiTranscriptCreatedAt = createdAt;
+        record.createdAt = createdAt;
+      }
+      const offset = appendTranscriptObject(key, record);
       this.transcriptMonitor?.noteConsumed(key, offset);
     } catch {
       // Transcript persistence is best-effort for live WebSocket delivery.
diff --git a/App/memmy-agent/src/load-env.ts b/App/memmy-agent/src/load-env.ts
index ffaffb3c7..1f1d1a399 100644
--- a/App/memmy-agent/src/load-env.ts
+++ b/App/memmy-agent/src/load-env.ts
@@ -6,8 +6,9 @@
  *
  * Note: this module must be the first import in each entrypoint (main.ts /
  * index.ts), so it completes before providers/registry.ts or any other module
- * reads MEMMY_CLOUD_SERVICE during module evaluation. Existing env values, such
- * as externally injected ones, take priority and are not overwritten.
+ * reads MEMMY_CLOUD_SERVICE during module evaluation. Packaged manifest values
+ * take priority over inherited environment values so upgrades cannot keep a
+ * stale cloud endpoint from an earlier installation.
  */
 import { config as loadDotenv } from "dotenv";
 import {
@@ -56,18 +57,9 @@ export interface LoadCloudServiceEnvOptions {
   loadDotenv?: typeof loadDotenv;
 }
 
-/** Loads external env, then a packaged manifest, then a development .env. */
+/** Loads a packaged manifest first, then external env, then a development .env. */
 export function loadCloudServiceEnv(options: LoadCloudServiceEnvOptions = {}): string | null {
   const env = options.env ?? process.env;
-  if (Object.prototype.hasOwnProperty.call(env, "MEMMY_CLOUD_SERVICE")) {
-    const externalValue = env.MEMMY_CLOUD_SERVICE?.trim();
-    if (externalValue) {
-      env.MEMMY_CLOUD_SERVICE = externalValue;
-      return "environment";
-    }
-    delete env.MEMMY_CLOUD_SERVICE;
-  }
-
   const moduleDir = options.moduleDir ?? dirname(fileURLToPath(import.meta.url));
   const packagedRuntime = isPackagedRuntimeModule(moduleDir);
   if (options.manifestPath !== undefined || packagedRuntime) {
@@ -78,9 +70,21 @@ export function loadCloudServiceEnv(options: LoadCloudServiceEnvOptions = {}): s
     env.MEMMY_CLOUD_SERVICE = cloudServiceFromDesktopRuntimeManifest(
       readFileSync(manifestPath, "utf8"),
     );
+    // MEMMY_CLOUD_URL is a development-only override. Do not let a stale
+    // value inherited from an older installation redirect a packaged app.
+    delete env.MEMMY_CLOUD_URL;
     return manifestPath;
   }
 
+  if (Object.prototype.hasOwnProperty.call(env, "MEMMY_CLOUD_SERVICE")) {
+    const externalValue = env.MEMMY_CLOUD_SERVICE?.trim();
+    if (externalValue) {
+      env.MEMMY_CLOUD_SERVICE = externalValue;
+      return "environment";
+    }
+    delete env.MEMMY_CLOUD_SERVICE;
+  }
+
   const envPath = findRepoEnvFile(options.cwd ?? process.cwd()) ?? findRepoEnvFile(moduleDir);
   if (envPath) {
     (options.loadDotenv ?? loadDotenv)({
diff --git a/App/memmy-agent/tests/entrypoints/frontend-bridge/gui-transcript-sync.test.ts b/App/memmy-agent/tests/entrypoints/frontend-bridge/gui-transcript-sync.test.ts
index 59d254047..cd631528f 100644
--- a/App/memmy-agent/tests/entrypoints/frontend-bridge/gui-transcript-sync.test.ts
+++ b/App/memmy-agent/tests/entrypoints/frontend-bridge/gui-transcript-sync.test.ts
@@ -140,6 +140,9 @@ describe("GUI transcript synchronization", () => {
       client_request_id: clientRequestId,
       source: { kind: "im", channel: "telegram" },
     });
+    const createdAts = transcript.map((record) => record.createdAt);
+    expect(createdAts.every((createdAt) => typeof createdAt === "number")).toBe(true);
+    expect(createdAts).toEqual([...createdAts].sort((left, right) => left - right));
     for (const record of transcript.slice(1, 10)) {
       expect(record.source).toEqual({ kind: "im", channel: "telegram" });
     }
diff --git a/App/memmy-agent/tests/entrypoints/frontend-bridge/webui-transcript.test.ts b/App/memmy-agent/tests/entrypoints/frontend-bridge/webui-transcript.test.ts
index 92155aa9b..39f9ffe5b 100644
--- a/App/memmy-agent/tests/entrypoints/frontend-bridge/webui-transcript.test.ts
+++ b/App/memmy-agent/tests/entrypoints/frontend-bridge/webui-transcript.test.ts
@@ -444,7 +444,7 @@ describe("webui transcript replay", () => {
     expect(messages[1]).toMatchObject({ role: "assistant", content: "a", createdAt: Date.parse("2026-06-19T08:07:03.000Z") });
   });
 
-  it("prefers persisted session message times over transcript event times", () => {
+  it("prefers canonical transcript event times over stale session message times", () => {
     const messages = replayTranscriptToUiMessages(
       [
         { event: "user", chat_id: "t-session-time", text: "q", createdAt: "2026-06-23T10:00:00.000Z" },
@@ -458,8 +458,8 @@ describe("webui transcript replay", () => {
       },
     );
 
-    expect(messages[0]).toMatchObject({ role: "user", content: "q", createdAt: Date.parse("2026-06-19T08:07:00.000Z") });
-    expect(messages[1]).toMatchObject({ role: "assistant", content: "a", createdAt: Date.parse("2026-06-19T08:07:03.000Z") });
+    expect(messages[0]).toMatchObject({ role: "user", content: "q", createdAt: Date.parse("2026-06-23T10:00:00.000Z") });
+    expect(messages[1]).toMatchObject({ role: "assistant", content: "a", createdAt: Date.parse("2026-06-23T10:00:01.000Z") });
   });
 
   it("augments replayed assistant markdown image text", () => {
diff --git a/App/memmy-agent/tests/integrations/channels/websocket-channel.test.ts b/App/memmy-agent/tests/integrations/channels/websocket-channel.test.ts
index ef2703bf0..fecf1c42e 100644
--- a/App/memmy-agent/tests/integrations/channels/websocket-channel.test.ts
+++ b/App/memmy-agent/tests/integrations/channels/websocket-channel.test.ts
@@ -35,6 +35,12 @@ function sent(ws: { send: ReturnType<typeof vi.fn> }, index = 0): any {
   return JSON.parse(ws.send.mock.calls[index][0]);
 }
 
+function withoutCreatedAt<T extends Record<string, any>>(row: T): T {
+  const copy = { ...row };
+  delete copy.createdAt;
+  return copy;
+}
+
 function modelSelection(preset: string, provider: string, model: string): any {
   const endpointId = provider === "anthropic" ? "messages" : "chat";
   const protocol = provider === "anthropic" ? "anthropic-messages" : "openai-chat-completions";
@@ -1167,6 +1173,18 @@ describe("WebSocket channel", () => {
     expect(sent(ws, 3).model_error).toEqual({ category: "image_input_unsupported" });
   });
 
+  it("persists an event timestamp for WebUI transcript rows", () => {
+    tempDataDir();
+    const channel = new WebSocketChannel({}, new MessageBus());
+    channel.tryAppendWebuiTranscript("chat-timestamp", { event: "message", text: "hello" });
+    channel.tryAppendWebuiTranscript("chat-timestamp", { event: "turn_end" });
+    const rows = fs.readFileSync(webuiTranscriptPath("websocket:chat-timestamp"), "utf8")
+      .trim().split(/\r?\n/u).map((line) => JSON.parse(line));
+    expect(rows).toHaveLength(2);
+    expect(rows[0].createdAt).toEqual(expect.any(Number));
+    expect(rows[1].createdAt).toBeGreaterThan(rows[0].createdAt);
+  });
+
   it("sends context compaction status as a dedicated WebUI event and transcript row", async () => {
     tempDataDir();
     const channel = new WebSocketChannel({}, new MessageBus());
@@ -1197,7 +1215,7 @@ describe("WebSocket channel", () => {
       .trim()
       .split(/\n/u)
       .map((line) => JSON.parse(line));
-    expect(transcript).toEqual([sent(ws)]);
+    expect(transcript.map(withoutCreatedAt)).toEqual([sent(ws)]);
   });
 
   it("sends retry wait as a live-only event without transcript content", async () => {
@@ -1584,7 +1602,7 @@ describe("WebSocket channel", () => {
       .trim()
       .split(/\r?\n/)
       .map((line) => JSON.parse(line));
-    expect(lines).toEqual([{ event: "stop_result", chat_id: "chat-1", stopped: 1 }]);
+    expect(lines.map(withoutCreatedAt)).toEqual([{ event: "stop_result", chat_id: "chat-1", stopped: 1 }]);
   });
 
   it("emits stream and goal control events to subscribers", async () => {
@@ -2050,7 +2068,7 @@ describe("WebSocket channel", () => {
       .trim()
       .split(/\r?\n/)
       .map((line) => JSON.parse(line));
-    expect(lines).toEqual([sent(ws, 1)]);
+    expect(lines.map(withoutCreatedAt)).toEqual([sent(ws, 1)]);
   });
 
   it("sends agent UI blobs on progress messages", async () => {
@@ -2136,7 +2154,7 @@ describe("WebSocket channel", () => {
       .trim()
       .split(/\r?\n/)
       .map((line) => JSON.parse(line));
-    expect(lines).toEqual([
+    expect(lines.map(withoutCreatedAt)).toEqual([
       { event: "reasoning_delta", chat_id: "chat-1", text: "thinking", stream_id: "r1" },
       { event: "reasoning_end", chat_id: "chat-1", stream_id: "r1" },
       {
@@ -2595,7 +2613,7 @@ describe("WebSocket channel", () => {
       .trim()
       .split(/\r?\n/)
       .map((line) => JSON.parse(line));
-    expect(lines).toEqual([
+    expect(lines.map(withoutCreatedAt)).toEqual([
       { event: "delta", chat_id: "chat-1", text: "hel", stream_id: "s1" },
       { event: "stream_end", chat_id: "chat-1", resuming: true, text: "hello", stream_id: "s1" },
     ]);
diff --git a/App/memmy-agent/tests/load-env.test.ts b/App/memmy-agent/tests/load-env.test.ts
index b9ccafd63..af851f3f4 100644
--- a/App/memmy-agent/tests/load-env.test.ts
+++ b/App/memmy-agent/tests/load-env.test.ts
@@ -11,7 +11,7 @@ afterEach(() => {
 });
 
 describe("packaged memmy cloud-service loading", () => {
-  it("prefers explicit env, then the ASAR manifest, then development .env", () => {
+  it("uses the packaged manifest before inherited env, then development .env", () => {
     const root = fixtureRoot();
     const moduleDir = join(root, "app.asar", "dist", "runtime", "memmy-agent", "dist");
     mkdirSync(moduleDir, { recursive: true });
@@ -20,9 +20,13 @@ describe("packaged memmy cloud-service loading", () => {
     writeFileSync(manifestPath, JSON.stringify({ cloudService: "https://manifest.example.test" }));
     writeFileSync(join(root, ".env"), "MEMMY_CLOUD_SERVICE=https://dev.example.test\n");
 
-    const externalEnv = { MEMMY_CLOUD_SERVICE: "https://external.example.test" };
-    expect(loadCloudServiceEnv({ cwd: root, moduleDir, env: externalEnv })).toBe("environment");
-    expect(externalEnv.MEMMY_CLOUD_SERVICE).toBe("https://external.example.test");
+    const externalEnv = {
+      MEMMY_CLOUD_SERVICE: "https://external.example.test",
+      MEMMY_CLOUD_URL: "https://stale.example.test"
+    };
+    expect(loadCloudServiceEnv({ cwd: root, moduleDir, env: externalEnv })).toBe(manifestPath);
+    expect(externalEnv.MEMMY_CLOUD_SERVICE).toBe("https://manifest.example.test");
+    expect(externalEnv.MEMMY_CLOUD_URL).toBeUndefined();
 
     const packagedEnv: NodeJS.ProcessEnv = {};
     expect(loadCloudServiceEnv({ cwd: root, moduleDir, env: packagedEnv })).toBe(manifestPath);
diff --git a/App/shell/desktop/package.json b/App/shell/desktop/package.json
index fcc11589c..cac7e5b4e 100644
--- a/App/shell/desktop/package.json
+++ b/App/shell/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@memmy/desktop",
-  "version": "1.1.7",
+  "version": "1.1.8",
   "private": true,
   "type": "module",
   "description": "Memmy desktop client.",
diff --git a/App/shell/desktop/src/main/main.ts b/App/shell/desktop/src/main/main.ts
index 9cbb79311..5c39391e4 100644
--- a/App/shell/desktop/src/main/main.ts
+++ b/App/shell/desktop/src/main/main.ts
@@ -98,6 +98,7 @@ import {
   resolveStartupSplashHtml,
   resolveStartupSplashLanguage,
   resolveUpdateSplashHtml,
+  shouldQuitWhenAllWindowsClosed,
   type StartupSplashLanguage
 } from "./startup-splash.js";
 import {
@@ -2850,55 +2851,45 @@ try {
   $appDir = Split-Path -Parent $AppExe
   Write-MemmyUpdateLog "install dir $appDir"
 
-  $id = 0
-  if ([int]::TryParse($AppPid, [ref]$id)) {
+  # The app launches memory-service with the same Memmy.exe binary (run-as-node).
+  # Only the PID handed off by the app identifies the process that must exit; a
+  # path-wide scan would mistake a memory-service child/orphan for the app.
+  $appProcessId = 0
+  [void][int]::TryParse($AppPid, [ref]$appProcessId)
+  function Get-MemmyUpdateAppProcesses {
+    if ($appProcessId -le 0) {
+      return @()
+    }
+    return @(Get-Process -Id $appProcessId -ErrorAction SilentlyContinue)
+  }
+
+  if ($appProcessId -gt 0) {
+    Write-MemmyUpdateLog ('waiting for handed-off app PID; ignoring memory-service descendants: ' + $appProcessId)
     $deadline = (Get-Date).AddSeconds(60)
     do {
-      $process = Get-Process -Id $id -ErrorAction SilentlyContinue
-      if ($null -eq $process) {
+      $running = @(Get-MemmyUpdateAppProcesses)
+      if ($running.Count -eq 0) {
         break
       }
       Start-Sleep -Milliseconds ${WINDOWS_UPDATE_INSTALL_PROCESS_POLL_MS}
     } while ((Get-Date) -lt $deadline)
+  } else {
+    Write-MemmyUpdateLog 'app PID unavailable; continuing without a path-wide process scan'
   }
 
-  $deadline = (Get-Date).AddSeconds(30)
-  do {
-    $running = @(Get-Process -ErrorAction SilentlyContinue | Where-Object {
-      try {
-        $_.Path -eq $AppExe
-      } catch {
-        $false
-      }
-    })
-    if ($running.Count -eq 0) {
-      Write-MemmyUpdateLog 'all app processes exited'
-      break
-    }
-    Write-MemmyUpdateLog ('waiting app processes: ' + (($running | ForEach-Object { $_.Id }) -join ','))
-    Start-Sleep -Milliseconds ${WINDOWS_UPDATE_INSTALL_PROCESS_POLL_MS}
-  } while ((Get-Date) -lt $deadline)
+  $running = @(Get-MemmyUpdateAppProcesses)
+  if ($running.Count -eq 0) {
+    Write-MemmyUpdateLog 'all handed-off app processes exited'
+  }
 
-  $runningBeforeInstall = @(Get-Process -ErrorAction SilentlyContinue | Where-Object {
-    try {
-      $_.Path -eq $AppExe
-    } catch {
-      $false
-    }
-  })
+  $runningBeforeInstall = @(Get-MemmyUpdateAppProcesses)
 
   if ($runningBeforeInstall.Count -gt 0) {
     Write-MemmyUpdateLog ('app processes still running before install; waiting: ' + (($runningBeforeInstall | ForEach-Object { $_.Id }) -join ','))
     $deadline = (Get-Date).AddSeconds(120)
     do {
       Start-Sleep -Milliseconds ${WINDOWS_UPDATE_INSTALL_PROCESS_POLL_MS}
-      $runningBeforeInstall = @(Get-Process -ErrorAction SilentlyContinue | Where-Object {
-        try {
-          $_.Path -eq $AppExe
-        } catch {
-          $false
-        }
-      })
+      $runningBeforeInstall = @(Get-MemmyUpdateAppProcesses)
       if ($runningBeforeInstall.Count -eq 0) {
         Write-MemmyUpdateLog 'app processes exited before install'
         break
@@ -5025,13 +5016,13 @@ app.on("activate", () => {
 
 app.on("window-all-closed", () => {
   if (isQuitting) return;
-  if (!isBootReady) {
-    void writePackagedStartupLog(`boot:window-all-closed-ignored:${bootStage}`);
+  if (!shouldQuitWhenAllWindowsClosed(process.platform, isBootReady)) {
+    if (!isBootReady) {
+      void writePackagedStartupLog(`boot:window-all-closed-ignored:${bootStage}`);
+    }
     return;
   }
-  if (process.platform !== "darwin") {
-    app.quit();
-  }
+  app.quit();
 });
 
 app.on("before-quit", (event) => {
@@ -5188,9 +5179,13 @@ async function cleanupBeforeQuit(): Promise<void> {
 
 function readStopMemoryServiceOnExitSetting(): boolean {
   try {
-    return localBackend?.getAppSettings().stopMemoryServiceOnExit ?? false;
+    // Windows updates and reboot handoffs cannot safely leave a detached
+    // Memmy.exe memory-service behind: it shares the app executable and can
+    // be mistaken for the desktop process by the next launch/update.
+    return localBackend?.getAppSettings().stopMemoryServiceOnExit
+      ?? process.platform === "win32";
   } catch {
-    return false;
+    return process.platform === "win32";
   }
 }
 
diff --git a/App/shell/desktop/src/main/startup-splash.ts b/App/shell/desktop/src/main/startup-splash.ts
index 989f70256..597171598 100644
--- a/App/shell/desktop/src/main/startup-splash.ts
+++ b/App/shell/desktop/src/main/startup-splash.ts
@@ -3,6 +3,21 @@ import { DatabaseSync } from "node:sqlite";
 
 export type StartupSplashLanguage = "zh-CN" | "en-US";
 
+/**
+ * Returns whether closing the last window should terminate the desktop app.
+ *
+ * During boot the splash can be the only visible window. Treating its native
+ * close as a normal post-boot window close would terminate a slow startup
+ * before the runtime has finished initializing. macOS keeps the app resident
+ * after its windows close, so it follows the platform convention there.
+ */
+export function shouldQuitWhenAllWindowsClosed(
+  platform: NodeJS.Platform,
+  isBootReady: boolean,
+): boolean {
+  return isBootReady && platform !== "darwin";
+}
+
 export function resolveStartupSplashLanguage(
   databasePath: string,
   fallback: StartupSplashLanguage
diff --git a/App/shell/desktop/tests/packaged-runtime-boundary.test.ts b/App/shell/desktop/tests/packaged-runtime-boundary.test.ts
index 189c53144..9ae5ef6fb 100644
--- a/App/shell/desktop/tests/packaged-runtime-boundary.test.ts
+++ b/App/shell/desktop/tests/packaged-runtime-boundary.test.ts
@@ -1143,6 +1143,12 @@ describe("desktop packaged runtime boundaries", () => {
     expect(mainSource).toContain('ipcMain.removeHandler("memmy:export-diagnostics-report")');
   });
 
+  it("stops the Windows memory service by default during app exit", () => {
+    const mainSource = readFileSync(mainSourcePath, "utf8");
+    expect(mainSource).toContain('process.platform === "win32"');
+    expect(mainSource).toContain("stopMemoryServiceOnExit");
+  });
+
   it("opens Computer History Markdown through a restricted desktop bridge", () => {
     const mainSource = readFileSync(mainSourcePath, "utf8");
     const preloadSource = readFileSync(preloadSourcePath, "utf8");
@@ -1252,6 +1258,10 @@ describe("desktop packaged runtime boundaries", () => {
     expect(mainSource).toContain("$arguments = @('/S', '--updated', '/currentuser', ('/D=' + $appDir))");
     expect(mainSource).not.toContain("app reopened before install; deferring update");
     expect(mainSource).toContain("app processes still running before install; waiting");
+    expect(mainSource).toContain("function Get-MemmyUpdateAppProcesses");
+    expect(mainSource).toContain("$AppPid");
+    expect(mainSource).toContain("memory-service");
+    expect(mainSource).not.toContain("$_.Path -eq $AppExe");
     expect(mainSource).toContain("function hideMacDockForPreparedUpdateInstall");
     expect(mainSource).toContain("app.dock?.hide()");
     expect(mainSource).toContain("isManagedUpdateInstallerRunning");
@@ -1909,6 +1919,7 @@ describe("desktop packaged runtime boundaries", () => {
     const versionGuardSource = readFileSync(verifyPackageVersionPath, "utf8");
     const asarGuardSource = readFileSync(verifyPackagedAsarPath, "utf8");
 
+    expect(mainSource).toContain("loadCloudServiceEnv({");
     expect(mainSource).toContain('manifestPath: app.isPackaged ? join(import.meta.dirname, "desktop-edition.json") : undefined');
     for (const source of [macSource, winSource]) {
       expect(source).toContain("write-desktop-edition-manifest.mjs");
diff --git a/App/shell/desktop/tests/startup-lifecycle.test.ts b/App/shell/desktop/tests/startup-lifecycle.test.ts
index e65877fcd..efeaede63 100644
--- a/App/shell/desktop/tests/startup-lifecycle.test.ts
+++ b/App/shell/desktop/tests/startup-lifecycle.test.ts
@@ -3,7 +3,11 @@ import { readFileSync } from "node:fs";
 import { createContext, runInContext } from "node:vm";
 import ts from "typescript";
 import { afterEach, describe, expect, it, vi } from "vitest";
-import { resolveStartupSplashHtml, resolveUpdateSplashHtml } from "../src/main/startup-splash.js";
+import {
+  resolveStartupSplashHtml,
+  resolveUpdateSplashHtml,
+  shouldQuitWhenAllWindowsClosed,
+} from "../src/main/startup-splash.js";
 
 // Execute the real startup/window callbacks without importing Electron or starting user services.
 // The AST extraction keeps the race tests tied to main.ts rather than a copy of its implementation.
@@ -114,7 +118,9 @@ function setup(options: { delay?: number; error?: Error; apiError?: Error; clean
     hideInWindowMenuBar: noop, updateFullWindowButtonPosition: noop, attachWindowOpenHandler: noop,
     attachRendererContextMenu: noop, attachRendererShortcutGuards: noop, attachMainWindowFullScreenSync: noop,
     handleMainWindowClose: noop, handleMainWindowMinimize: noop, resolveRendererUrl: () => "http://test-renderer.invalid",
-    shouldIgnoreStaleReopenQuit: () => false, hasSingleInstanceLock: true,
+    shouldIgnoreStaleReopenQuit: () => false,
+    shouldQuitWhenAllWindowsClosed,
+    hasSingleInstanceLock: true,
     readStopMemoryServiceOnExitSetting: () => false, armQuitCleanupForceExitTimer: noop,
     cleanupBeforeQuit: async () => {}, clearQuitCleanupForceExitTimer: noop, relaunchAfterQuitCleanupIfRequested: noop
   });
diff --git a/App/shell/desktop/tests/startup-splash.test.ts b/App/shell/desktop/tests/startup-splash.test.ts
index 147c7ec82..648eeb3d9 100644
--- a/App/shell/desktop/tests/startup-splash.test.ts
+++ b/App/shell/desktop/tests/startup-splash.test.ts
@@ -7,6 +7,7 @@ import {
   resolveStartupSplashHtml,
   resolveStartupSplashLanguage,
   resolveUpdateSplashHtml,
+  shouldQuitWhenAllWindowsClosed,
   type StartupSplashLanguage
 } from "../src/main/startup-splash.js";
 
@@ -19,6 +20,18 @@ afterEach(() => {
 });
 
 describe("startup splash localization", () => {
+  it("does not quit when the last window closes before boot is ready", () => {
+    expect(shouldQuitWhenAllWindowsClosed("win32", false)).toBe(false);
+  });
+
+  it("quits after boot when the last window closes on Windows", () => {
+    expect(shouldQuitWhenAllWindowsClosed("win32", true)).toBe(true);
+  });
+
+  it("keeps macOS resident after all windows close", () => {
+    expect(shouldQuitWhenAllWindowsClosed("darwin", true)).toBe(false);
+  });
+
   it.each<StartupSplashLanguage>(["zh-CN", "en-US"])("reads the persisted %s application language", (language) => {
     const databasePath = createSettingsDatabase(language);
 
diff --git a/Memory/src/cli/load-env.ts b/Memory/src/cli/load-env.ts
index c602e5c13..57fdaf58d 100644
--- a/Memory/src/cli/load-env.ts
+++ b/Memory/src/cli/load-env.ts
@@ -34,7 +34,7 @@ export function findRepoEnvFile(startDir: string): string | null {
   }
 }
 
-/** Load external env, then the packaged manifest, then a development .env. */
+/** Load a packaged manifest first, then external env, then a development .env. */
 export function loadCloudServiceEnv(options: {
   cwd?: string;
   moduleDir?: string;
@@ -43,15 +43,6 @@ export function loadCloudServiceEnv(options: {
   loadDotenv?: typeof loadDotenv;
 } = {}): string | null {
   const env = options.env ?? process.env;
-  if (Object.prototype.hasOwnProperty.call(env, "MEMMY_CLOUD_SERVICE")) {
-    const externalValue = env.MEMMY_CLOUD_SERVICE?.trim();
-    if (externalValue) {
-      env.MEMMY_CLOUD_SERVICE = externalValue;
-      return "environment";
-    }
-    delete env.MEMMY_CLOUD_SERVICE;
-  }
-
   const moduleDir = options.moduleDir ?? dirname(fileURLToPath(import.meta.url));
   const packagedRuntime = isPackagedRuntimeModule(moduleDir);
   if (options.manifestPath !== undefined || packagedRuntime) {
@@ -62,9 +53,21 @@ export function loadCloudServiceEnv(options: {
     env.MEMMY_CLOUD_SERVICE = cloudServiceFromDesktopRuntimeManifest(
       readFileSync(manifestPath, "utf8"),
     );
+    // MEMMY_CLOUD_URL is a development-only override. Do not let a stale
+    // value inherited from an older installation redirect a packaged runtime.
+    delete env.MEMMY_CLOUD_URL;
     return manifestPath;
   }
 
+  if (Object.prototype.hasOwnProperty.call(env, "MEMMY_CLOUD_SERVICE")) {
+    const externalValue = env.MEMMY_CLOUD_SERVICE?.trim();
+    if (externalValue) {
+      env.MEMMY_CLOUD_SERVICE = externalValue;
+      return "environment";
+    }
+    delete env.MEMMY_CLOUD_SERVICE;
+  }
+
   const envPath =
     findRepoEnvFile(options.cwd ?? process.cwd()) ?? findRepoEnvFile(moduleDir);
   if (envPath) {
diff --git a/Memory/tests/load-env.test.ts b/Memory/tests/load-env.test.ts
index 468d35cb8..a19301477 100644
--- a/Memory/tests/load-env.test.ts
+++ b/Memory/tests/load-env.test.ts
@@ -20,9 +20,13 @@ describe("packaged memmy-memory cloud-service loading", () => {
     writeFileSync(manifestPath, JSON.stringify({ cloudService: "https://manifest.example.test" }));
     writeFileSync(join(root, ".env"), "MEMMY_CLOUD_SERVICE=https://dev.example.test\n");
 
-    const externalEnv = { MEMMY_CLOUD_SERVICE: "https://external.example.test" };
-    expect(loadCloudServiceEnv({ cwd: root, moduleDir, env: externalEnv })).toBe("environment");
-    expect(externalEnv.MEMMY_CLOUD_SERVICE).toBe("https://external.example.test");
+    const externalEnv = {
+      MEMMY_CLOUD_SERVICE: "https://external.example.test",
+      MEMMY_CLOUD_URL: "https://stale.example.test"
+    };
+    expect(loadCloudServiceEnv({ cwd: root, moduleDir, env: externalEnv })).toBe(manifestPath);
+    expect(externalEnv.MEMMY_CLOUD_SERVICE).toBe("https://manifest.example.test");
+    expect(externalEnv.MEMMY_CLOUD_URL).toBeUndefined();
 
     const packagedEnv: NodeJS.ProcessEnv = {};
     expect(loadCloudServiceEnv({ cwd: root, moduleDir, env: packagedEnv })).toBe(manifestPath);
diff --git a/docs/cn/development/local-dev.mdx b/docs/cn/development/local-dev.mdx
index 0565fcc03..e4fd34f48 100644
--- a/docs/cn/development/local-dev.mdx
+++ b/docs/cn/development/local-dev.mdx
@@ -15,7 +15,7 @@ bash scripts/dev-start.sh    # 装依赖 → 构建 → 起全套服务
 
 `scripts/dev-start.sh` 一条命令完成全部：自动安装依赖、构建 Memory 与 memmy-agent、把 `memmy` / `memmy-memory` CLI 安装到 `~/.local/bin`，并同时拉起 Memory、Agent API、Gateway、前端和桌面后端。启动后在弹出的桌面应用里完成账号登录或 BYOK 配置，脚本会在模型配置写好后自动启动 agent 服务。
 
-> `.env` 中 `MEMMY_CLOUD_SERVICE` 默认指向 `https://memmy-api.memtensor.cn`，复制即连官方云服务——无需自建后端、无需自备 API Key。Windows 请在 Git Bash 中运行；脚本会把 `~/.local/bin` 加入 PATH。
+> `.env` 中 `MEMMY_CLOUD_SERVICE` 默认指向 `https://api.memmy.cn`（只填写域名，不要追加 `/api`，客户端会自动拼接接口路径），复制即连官方云服务——无需自建后端、无需自备 API Key。Windows 请在 Git Bash 中运行；脚本会把 `~/.local/bin` 加入 PATH。
 
 ## 环境要求
 
diff --git a/docs/en/development/local-dev.mdx b/docs/en/development/local-dev.mdx
index cb60cf857..13e9e1422 100644
--- a/docs/en/development/local-dev.mdx
+++ b/docs/en/development/local-dev.mdx
@@ -15,7 +15,7 @@ bash scripts/dev-start.sh    # Install deps → build → start the full stack
 
 `scripts/dev-start.sh` does everything in one command: it installs dependencies, builds Memory and memmy-agent, installs the `memmy` / `memmy-memory` CLIs into `~/.local/bin`, and starts the full stack (Memory, Agent API, Gateway, frontend, and desktop backend). Once the desktop app opens, finish account sign-in or BYOK setup — the script waits for the model config and then starts the agent services automatically.
 
-> `MEMMY_CLOUD_SERVICE` in `.env` defaults to `https://memmy-api.memtensor.cn`, so copying it connects you to the official cloud — no self-hosted backend or API key required. On Windows, run it in Git Bash; the script adds `~/.local/bin` to your PATH.
+> `MEMMY_CLOUD_SERVICE` in `.env` defaults to `https://api.memmy.cn (use the origin only; clients append /api/... paths)`, so copying it connects you to the official cloud — no self-hosted backend or API key required. On Windows, run it in Git Bash; the script adds `~/.local/bin` to your PATH.
 
 ## Requirements
 
diff --git a/package-lock.json b/package-lock.json
index 64ab8a276..76f288f9f 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "memmy-agent",
-  "version": "1.1.7",
+  "version": "1.1.8",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "memmy-agent",
-      "version": "1.1.7",
+      "version": "1.1.8",
       "workspaces": [
         "Migrations",
         "AgentSourceCore",
@@ -588,7 +588,7 @@
     },
     "App/shell/desktop": {
       "name": "@memmy/desktop",
-      "version": "1.1.7",
+      "version": "1.1.8",
       "dependencies": {
         "@memmy/backend": "0.0.0",
         "@memmy/desktop-interface": "0.0.0",
diff --git a/package.json b/package.json
index bd7ddf477..193ee3e7a 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "memmy-agent",
-  "version": "1.1.7",
+  "version": "1.1.8",
   "private": true,
   "type": "module",
   "description": "Local-first agent memory substrate with desktop and CLI surfaces.",
diff --git a/scripts/auto-release-mac.sh b/scripts/auto-release-mac.sh
index e6d62be63..136ce85ec 100644
--- a/scripts/auto-release-mac.sh
+++ b/scripts/auto-release-mac.sh
@@ -21,11 +21,11 @@ REPO_DIR="/Users/zongy/Documents/MemTensor/Memmy-agent"
 BRANCH="${MEMMY_RELEASE_BRANCH:-}"
 
 # Backend for upload + querying the download list (cn/intl share the same one)
-API_BASE="https://memmy-api.memtensor.cn"
+API_BASE="https://api.memmy.cn"
 
 # Public cloud-service origin embedded through the allowlisted runtime manifest.
-CN_CLOUD_SERVICE="https://memmy-api.memtensor.cn"
-INTL_CLOUD_SERVICE="https://memmy-api.memtensor.cn"
+CN_CLOUD_SERVICE="https://api.memmy.cn"
+INTL_CLOUD_SERVICE="https://api.memmy.cn"
 
 # Release notes (customizable)
 RELEASE_NOTES="Daily automated build (dev)"