diff --git a/apps/console/package.json b/apps/console/package.json
index faf6e12d3f..16c093d4d0 100644
--- a/apps/console/package.json
+++ b/apps/console/package.json
@@ -39,6 +39,7 @@
     "@ulticode/i18n-completeness": "workspace:*",
     "@ulticode/locale-preference": "workspace:*",
     "@ulticode/markdown-utils": "workspace:*",
+    "@ulticode/request-state": "workspace:*",
     "@ulticode/sidebar-menu": "workspace:*",
     "@ulticode/submission-status": "workspace:*",
     "@ulticode/theme": "workspace:*",
diff --git a/apps/console/src/api/__tests__/problem.spec.ts b/apps/console/src/api/__tests__/problem.spec.ts
index da8874eb56..e82bf8d877 100644
--- a/apps/console/src/api/__tests__/problem.spec.ts
+++ b/apps/console/src/api/__tests__/problem.spec.ts
@@ -84,7 +84,8 @@ describe("fetchProblems", () => {
       totalPages: 4,
     });
 
-    const result = await fetchProblems({ search: "two sum" }, 2, 1);
+    const signal = new AbortController().signal;
+    const result = await fetchProblems({ search: "two sum" }, 2, 1, signal);
 
     expect(result.items[0]?.title).toBe("Two Sum");
     expect(result.total).toBe(4);
@@ -93,6 +94,7 @@ describe("fetchProblems", () => {
     expect(result.totalPages).toBe(4);
     expect(apiGet).toHaveBeenCalledWith(
       "/problems?page=2&pageSize=1&search=two+sum",
+      { signal },
     );
   });
 });
diff --git a/apps/console/src/api/problem.ts b/apps/console/src/api/problem.ts
index 7efff40916..752377dbb3 100644
--- a/apps/console/src/api/problem.ts
+++ b/apps/console/src/api/problem.ts
@@ -29,6 +29,7 @@ export async function fetchProblems(
   filters: ProblemFilters = {},
   page: number = 1,
   pageSize: number = 50,
+  signal?: AbortSignal,
 ): Promise<PageResult<Problem>> {
   const params = new URLSearchParams();
   params.append("page", String(page));
@@ -44,7 +45,7 @@ export async function fetchProblems(
   if (filters.sortBy) params.append("sortBy", filters.sortBy);
   if (filters.sortOrder) params.append("sortOrder", filters.sortOrder);
 
-  const response = await apiGet<unknown>(`/problems?${params.toString()}`);
+  const response = await apiGet<unknown>(`/problems?${params.toString()}`, { signal });
   const pageResult = readPage<unknown>(response);
   return {
     ...pageResult,
diff --git a/apps/console/src/components/problem/composables/useProblemExplorer.ts b/apps/console/src/components/problem/composables/useProblemExplorer.ts
index e5f100ad46..997971a4f7 100644
--- a/apps/console/src/components/problem/composables/useProblemExplorer.ts
+++ b/apps/console/src/components/problem/composables/useProblemExplorer.ts
@@ -5,6 +5,7 @@ import type { Component } from "vue";
 import type { ProblemExplorerProps } from "../type";
 import { CheckCircle2, FileEdit } from "lucide-vue-next";
 import { fetchProblems } from "@/api/problem";
+import { createValueRequest } from "@ulticode/request-state";
 import { toast } from "vue-sonner";
 import { useRouter } from "vue-router";
 import { PROBLEM_CATEGORIES } from "@/constants/problem-categories";
@@ -33,11 +34,15 @@ export function useProblemExplorer(props: ProblemExplorerProps) {
   const page = ref(1);
   const total = ref(0);
   const totalPages = ref(1);
-  const isLoading = ref(false);
+  const problemRequest = createValueRequest({
+    errorMessage: "Failed to load problems",
+    onError: (error) => {
+      console.error("Failed to load problems", error);
+      toast.error(t("problem.explorer.failedToLoad"));
+    },
+  });
+  const isLoading = problemRequest.loading;
   const searchDebounceTimer = ref<ReturnType<typeof setTimeout> | null>(null);
-  // Monotonic request token: a fresh search/filter bumps it so an in-flight
-  // response that was superseded can detect it is stale and discard itself.
-  const latestRequestToken = ref(0);
 
   const selectedCategory = ref(props.initialCategory || "all");
 
@@ -68,46 +73,28 @@ export function useProblemExplorer(props: ProblemExplorerProps) {
   };
 
   const loadProblems = async (append = false) => {
-    // Supplied mode: the caller passed its own problem list, so there is no
-    // fetch to perform and the watchers/clearFilters/onMounted stay no-op.
     if (props.problems !== undefined) return;
-    // Serialize pagination (scroll-driven load-more can fan); fresh
-    // searches/filters go through and supersede via latestRequestToken.
     if (append && isLoading.value) return;
-    const myToken = ++latestRequestToken.value;
-    isLoading.value = true;
-    try {
-      const currentPage = append ? page.value : 1;
-      const result = await fetchProblems(
-        buildFilters(),
-        currentPage,
-        PROBLEMS_PER_PAGE,
-      );
-      // A newer search/filter superseded this request — discard the stale
-      // response so it cannot overwrite newer state.
-      if (myToken !== latestRequestToken.value) return;
-      if (append) {
-        fallbackProblems.value = [...fallbackProblems.value, ...result.items];
-      } else {
-        fallbackProblems.value = result.items;
-        page.value = 1;
-      }
-      total.value = result.total;
-      totalPages.value = result.totalPages;
-    } catch (error) {
-      if (myToken !== latestRequestToken.value) return;
-      console.error("Failed to load problems", error);
-      toast.error(t("problem.explorer.failedToLoad"));
-      if (!append) {
+    const currentPage = append ? page.value : 1;
+    const result = await problemRequest.run((signal) =>
+      fetchProblems(buildFilters(), currentPage, PROBLEMS_PER_PAGE, signal),
+    );
+    if (!result) {
+      if (problemRequest.error.value && !append) {
         fallbackProblems.value = [];
         total.value = 0;
         totalPages.value = 1;
       }
-    } finally {
-      if (myToken === latestRequestToken.value) {
-        isLoading.value = false;
-      }
+      return;
+    }
+    if (append) {
+      fallbackProblems.value = [...fallbackProblems.value, ...result.items];
+    } else {
+      fallbackProblems.value = result.items;
+      page.value = 1;
     }
+    total.value = result.total;
+    totalPages.value = result.totalPages;
   };
 
   onMounted(() => {
diff --git a/apps/console/src/composables/useSearch.ts b/apps/console/src/composables/useSearch.ts
index 4b65ab1dfa..0bdeebdd47 100644
--- a/apps/console/src/composables/useSearch.ts
+++ b/apps/console/src/composables/useSearch.ts
@@ -1,5 +1,6 @@
 import { onScopeDispose, ref, type Ref } from "vue";
 import { searchApi } from "@/api/search";
+import { createValueRequest } from "@ulticode/request-state";
 import type { SearchResult } from "@/types/search";
 
 export interface UseSearchOptions {
@@ -29,32 +30,24 @@ export function useSearch(options: UseSearchOptions = {}): UseSearchReturn {
 
   const query = ref("");
   const results = ref<SearchResult[]>([]);
-  const loading = ref(false);
-  const error = ref<string | null>(null);
+  const request = createValueRequest({ errorMessage: "Search failed" });
+  const { loading, error } = request;
   const total = ref(0);
   const selectedIndex = ref(0);
   const isOpen = ref(false);
 
   let debounceTimer: ReturnType<typeof setTimeout> | null = null;
-  let activeController: AbortController | null = null;
-  let latestRequest = 0;
-
   function cancelPendingSearch(): void {
-    latestRequest += 1;
+    request.cancel();
 
     if (debounceTimer) {
       clearTimeout(debounceTimer);
       debounceTimer = null;
     }
-
-    activeController?.abort();
-    activeController = null;
-    loading.value = false;
   }
 
   const search = (q: string): void => {
     cancelPendingSearch();
-    const requestId = latestRequest;
 
     query.value = q;
     error.value = null;
@@ -68,42 +61,12 @@ export function useSearch(options: UseSearchOptions = {}): UseSearchReturn {
 
     debounceTimer = setTimeout(() => {
       debounceTimer = null;
-      if (requestId !== latestRequest) {
-        return;
-      }
-
-      const controller = new AbortController();
-      activeController = controller;
-      loading.value = true;
-
-      void searchApi
-        .search({ query: q, limit }, controller.signal)
-        .then((response) => {
-          if (requestId !== latestRequest || controller.signal.aborted) {
-            return;
-          }
-
-          results.value = response.results;
-          total.value = response.total;
-          selectedIndex.value = 0;
-        })
-        .catch((err: unknown) => {
-          if (requestId !== latestRequest || controller.signal.aborted) {
-            return;
-          }
-
-          error.value = err instanceof Error ? err.message : "Search failed";
-          results.value = [];
-          total.value = 0;
-        })
-        .finally(() => {
-          if (requestId === latestRequest) {
-            loading.value = false;
-            if (activeController === controller) {
-              activeController = null;
-            }
-          }
-        });
+      void request.run((signal) => searchApi.search({ query: q, limit }, signal)).then((response) => {
+        if (!response) return;
+        results.value = response.results;
+        total.value = response.total;
+        selectedIndex.value = 0;
+      });
     }, debounceMs);
   };
 
diff --git a/apps/console/src/stores/__tests__/contestBrowse.spec.ts b/apps/console/src/stores/__tests__/contestBrowse.spec.ts
index f0a6f51b2b..c5843314ac 100644
--- a/apps/console/src/stores/__tests__/contestBrowse.spec.ts
+++ b/apps/console/src/stores/__tests__/contestBrowse.spec.ts
@@ -82,12 +82,25 @@ describe("useContestBrowseStore loading state", () => {
 
     expect(store.loadingContests).toBe(false);
   });
-  it("does not write past-load failures into shared browse error", async () => {
-    vi.mocked(fetchPastContests).mockRejectedValue(new Error("past failed"));
+  it("keeps past-only pagination out of page-wide loading", async () => {
+    type ContestPage = PaginatedResult<ContestListItem>;
+
+    const past = deferred<ContestPage>();
+    vi.mocked(fetchPastContests).mockReturnValue(past.promise);
+
     const store = useContestBrowseStore();
-    store.error = "ongoing failed";
+    const pastLoad = store.loadPastContests(1, 10);
+    expect(store.loadingContests).toBe(false);
 
+    past.resolve({ items: [], total: 0, page: 1, pageSize: 10, totalPages: 0 });
+    await pastLoad;
+    expect(store.loadingContests).toBe(false);
+  });
+
+  it("exposes past-load failures from request-state", async () => {
+    vi.mocked(fetchPastContests).mockRejectedValue(new Error("past failed"));
+    const store = useContestBrowseStore();
     await expect(store.loadPastContests()).rejects.toThrow("past failed");
-    expect(store.error).toBe("ongoing failed");
+    expect(store.error).toBe("past failed");
   });
 });
diff --git a/apps/console/src/stores/achievement.ts b/apps/console/src/stores/achievement.ts
index 5c035e68ad..ccb2794cd9 100644
--- a/apps/console/src/stores/achievement.ts
+++ b/apps/console/src/stores/achievement.ts
@@ -3,12 +3,15 @@ import { ref, computed } from "vue";
 import type { Achievement, AchievementProgress } from "@/types/achievement";
 import { achievementApi } from "@/api/achievement";
 import { getSocketManager, NotificationEvent } from "@/lib/socket";
+import { createValueRequest } from "@ulticode/request-state";
 
 export const useAchievementStore = defineStore("achievement", () => {
   const achievements = ref<Achievement[]>([]);
   const userAchievements = ref<AchievementProgress[]>([]);
   const totalPoints = ref(0);
-  const loading = ref(false);
+  const allRequest = createValueRequest({ errorMessage: "Failed to load achievements", rethrow: true });
+  const userRequest = createValueRequest({ errorMessage: "Failed to load user achievements", rethrow: true });
+  const loading = computed(() => allRequest.loading.value || userRequest.loading.value);
   const initialized = ref(false);
   const error = ref<string | null>(null);
 
@@ -42,39 +45,39 @@ export const useAchievementStore = defineStore("achievement", () => {
 
   // Actions
   async function fetchAll(params?: { category?: string }) {
-    loading.value = true;
     error.value = null;
+    allRequest.error.value = null;
+    userRequest.error.value = null;
     try {
-      const result = await achievementApi.getAll(params);
+      const result = await allRequest.run(() => achievementApi.getAll(params));
+      if (!result) return null;
       achievements.value = result.items;
       return result;
     } catch (err) {
-      error.value =
-        err instanceof Error ? err.message : "Failed to load achievements";
+      error.value = allRequest.error.value;
       throw err;
-    } finally {
-      loading.value = false;
     }
   }
 
   async function fetchUserAchievements() {
-    loading.value = true;
     error.value = null;
+    allRequest.error.value = null;
+    userRequest.error.value = null;
     try {
-      const result = await achievementApi.getUserAchievements();
+      const result = await userRequest.run(() => achievementApi.getUserAchievements());
+      if (!result) return null;
       userAchievements.value = result;
       return result;
     } catch (err) {
-      error.value =
-        err instanceof Error ? err.message : "Failed to load user achievements";
+      error.value = userRequest.error.value;
       throw err;
-    } finally {
-      loading.value = false;
     }
   }
 
   async function fetchUserPoints() {
     error.value = null;
+    allRequest.error.value = null;
+    userRequest.error.value = null;
     try {
       const result = await achievementApi.getUserPoints();
       totalPoints.value = result.points;
@@ -90,6 +93,8 @@ export const useAchievementStore = defineStore("achievement", () => {
     if (initialized.value) return;
 
     error.value = null;
+    allRequest.error.value = null;
+    userRequest.error.value = null;
     try {
       await Promise.all([fetchUserAchievements(), fetchUserPoints()]);
       initialized.value = true;
@@ -134,6 +139,8 @@ export const useAchievementStore = defineStore("achievement", () => {
 
   function clearError() {
     error.value = null;
+    allRequest.error.value = null;
+    userRequest.error.value = null;
   }
 
   return {
diff --git a/apps/console/src/stores/bookmark.ts b/apps/console/src/stores/bookmark.ts
index 0f7011b820..f76d953b10 100644
--- a/apps/console/src/stores/bookmark.ts
+++ b/apps/console/src/stores/bookmark.ts
@@ -1,5 +1,6 @@
 import { defineStore } from "pinia";
 import { computed, ref } from "vue";
+import { createValueRequest } from "@ulticode/request-state";
 import type {
   AddBookmarkInput,
   BookmarkFolder,
@@ -28,10 +29,14 @@ export const useBookmarkStore = defineStore("bookmark", () => {
   const selectedFolderId = ref<string | null>(null);
   const selectedFolderDetails = ref<BookmarkFolderDetail | null>(null);
   const isLoading = ref(false);
-  const isLoadingDetails = ref(false);
+  const detailRequest = createValueRequest({
+    errorMessage: "Failed to load folder details",
+    rethrow: true,
+  });
+  const isLoadingDetails = detailRequest.loading;
   const isLoaded = ref(false);
-  const error = ref<string | null>(null);
-  let detailRequestId = 0;
+  const operationError = ref<string | null>(null);
+  const error = computed(() => operationError.value ?? detailRequest.error.value);
 
   const defaultFolder = computed(() => folders.value.find((f) => f.isDefault));
 
@@ -51,7 +56,8 @@ export const useBookmarkStore = defineStore("bookmark", () => {
     if (isLoaded.value && !force) return;
 
     isLoading.value = true;
-    error.value = null;
+    operationError.value = null;
+    detailRequest.error.value = null;
     try {
       folders.value = await fetchFolders();
       isLoaded.value = true;
@@ -62,7 +68,7 @@ export const useBookmarkStore = defineStore("bookmark", () => {
         resetSelection();
       }
     } catch (err) {
-      error.value = getErrorMessage(err, "Failed to load folders");
+      operationError.value = getErrorMessage(err, "Failed to load folders");
       throw err;
     } finally {
       isLoading.value = false;
@@ -82,24 +88,14 @@ export const useBookmarkStore = defineStore("bookmark", () => {
   }
 
   async function loadFolderDetails(id: string) {
-    const requestId = ++detailRequestId;
-    isLoadingDetails.value = true;
-    error.value = null;
+    operationError.value = null;
+    detailRequest.error.value = null;
     try {
-      const details = await fetchFolder(id);
-      if (requestId === detailRequestId) {
-        selectedFolderDetails.value = details;
-      }
+      const details = await detailRequest.run(() => fetchFolder(id));
+      if (details) selectedFolderDetails.value = details;
     } catch (err) {
-      if (requestId === detailRequestId) {
-        selectedFolderDetails.value = null;
-        error.value = getErrorMessage(err, "Failed to load folder details");
-      }
+      selectedFolderDetails.value = null;
       throw err;
-    } finally {
-      if (requestId === detailRequestId) {
-        isLoadingDetails.value = false;
-      }
     }
   }
 
@@ -117,23 +113,25 @@ export const useBookmarkStore = defineStore("bookmark", () => {
   }
 
   function resetSelection() {
-    detailRequestId += 1;
+    detailRequest.cancel();
     selectedFolderId.value = null;
     selectedFolderDetails.value = null;
     isLoadingDetails.value = false;
-    error.value = null;
+    operationError.value = null;
+    detailRequest.error.value = null;
   }
 
   async function createFolder(
     data: CreateFolderInput,
   ): Promise<BookmarkFolder> {
-    error.value = null;
+    operationError.value = null;
+    detailRequest.error.value = null;
     try {
       const newFolder = await apiCreateFolder(data);
       folders.value.push(newFolder);
       return newFolder;
     } catch (err) {
-      error.value = getErrorMessage(err, "Failed to create folder");
+      operationError.value = getErrorMessage(err, "Failed to create folder");
       throw err;
     }
   }
@@ -142,7 +140,8 @@ export const useBookmarkStore = defineStore("bookmark", () => {
     id: string,
     data: UpdateFolderInput,
   ): Promise<BookmarkFolder> {
-    error.value = null;
+    operationError.value = null;
+    detailRequest.error.value = null;
     try {
       const updated = await apiUpdateFolder(id, data);
       const index = folders.value.findIndex((f) => f.id === id);
@@ -158,13 +157,14 @@ export const useBookmarkStore = defineStore("bookmark", () => {
       }
       return updated;
     } catch (err) {
-      error.value = getErrorMessage(err, "Failed to update folder");
+      operationError.value = getErrorMessage(err, "Failed to update folder");
       throw err;
     }
   }
 
   async function removeFolder(id: string): Promise<void> {
-    error.value = null;
+    operationError.value = null;
+    detailRequest.error.value = null;
     try {
       await apiDeleteFolder(id);
       folders.value = folders.value.filter((f) => f.id !== id);
@@ -172,13 +172,14 @@ export const useBookmarkStore = defineStore("bookmark", () => {
         resetSelection();
       }
     } catch (err) {
-      error.value = getErrorMessage(err, "Failed to delete folder");
+      operationError.value = getErrorMessage(err, "Failed to delete folder");
       throw err;
     }
   }
 
   async function reorderFolders(ids: string[]): Promise<void> {
-    error.value = null;
+    operationError.value = null;
+    detailRequest.error.value = null;
     try {
       await apiReorderFolders(ids);
       ids.forEach((id, index) => {
@@ -193,7 +194,7 @@ export const useBookmarkStore = defineStore("bookmark", () => {
         return a.sortOrder - b.sortOrder;
       });
     } catch (err) {
-      error.value = getErrorMessage(err, "Failed to reorder folders");
+      operationError.value = getErrorMessage(err, "Failed to reorder folders");
       throw err;
     }
   }
@@ -242,7 +243,8 @@ export const useBookmarkStore = defineStore("bookmark", () => {
     data: AddBookmarkInput,
   ): Promise<BookmarkItem> {
     return runFolderMutation(folderId, async () => {
-      error.value = null;
+      operationError.value = null;
+      detailRequest.error.value = null;
       try {
         const item = await apiAddBookmark(folderId, data);
         const details = selectedFolderDetails.value;
@@ -256,7 +258,7 @@ export const useBookmarkStore = defineStore("bookmark", () => {
         }
         return item;
       } catch (err) {
-        error.value = getErrorMessage(err, "Failed to add bookmark");
+        operationError.value = getErrorMessage(err, "Failed to add bookmark");
         throw err;
       }
     });
@@ -267,7 +269,8 @@ export const useBookmarkStore = defineStore("bookmark", () => {
     bookmarkId: string,
   ): Promise<void> {
     return runFolderMutation(folderId, async () => {
-      error.value = null;
+      operationError.value = null;
+      detailRequest.error.value = null;
       try {
         await apiRemoveBookmark(folderId, bookmarkId);
         const details = selectedFolderDetails.value;
@@ -278,7 +281,7 @@ export const useBookmarkStore = defineStore("bookmark", () => {
           updateItemCount(folderId, -1);
         }
       } catch (err) {
-        error.value = getErrorMessage(err, "Failed to remove bookmark");
+        operationError.value = getErrorMessage(err, "Failed to remove bookmark");
         throw err;
       }
     });
@@ -290,7 +293,8 @@ export const useBookmarkStore = defineStore("bookmark", () => {
     targetId: string,
   ): Promise<void> {
     return runFolderMutation(folderId, async () => {
-      error.value = null;
+      operationError.value = null;
+      detailRequest.error.value = null;
       try {
         await apiRemoveBookmarkByTarget(folderId, targetType, targetId);
         const details = selectedFolderDetails.value;
@@ -304,14 +308,15 @@ export const useBookmarkStore = defineStore("bookmark", () => {
           updateItemCount(folderId, -1);
         }
       } catch (err) {
-        error.value = getErrorMessage(err, "Failed to remove bookmark");
+        operationError.value = getErrorMessage(err, "Failed to remove bookmark");
         throw err;
       }
     });
   }
 
   function clearError() {
-    error.value = null;
+    operationError.value = null;
+    detailRequest.error.value = null;
   }
 
   function reset() {
@@ -319,7 +324,8 @@ export const useBookmarkStore = defineStore("bookmark", () => {
     folders.value = [];
     isLoaded.value = false;
     isLoading.value = false;
-    error.value = null;
+    operationError.value = null;
+    detailRequest.error.value = null;
   }
 
   return {
diff --git a/apps/console/src/stores/contest/rankingStore.ts b/apps/console/src/stores/contest/rankingStore.ts
index 61ad53bacc..99afd76502 100644
--- a/apps/console/src/stores/contest/rankingStore.ts
+++ b/apps/console/src/stores/contest/rankingStore.ts
@@ -1,5 +1,6 @@
 // console/src/stores/contest/rankingStore.ts
 import { defineStore } from "pinia";
+import { createValueRequest } from "@ulticode/request-state";
 import { ref, computed } from "vue";
 import type { RankingEntry } from "@/types/contest";
 import { getRanking } from "@/api/contest";
@@ -13,10 +14,14 @@ export const useRankingStore = defineStore("ranking", () => {
   const rankings = ref<RankingEntry[]>([]);
 
   /** Loading state */
-  const loading = ref(false);
+  const rankingRequest = createValueRequest({
+    errorMessage: "Failed to load ranking",
+    rethrow: true,
+  });
+  const loading = rankingRequest.loading;
 
   /** Error message */
-  const error = ref<string | null>(null);
+  const error = rankingRequest.error;
 
   /** Whether the ranking is frozen (during final minutes of contest) */
   const frozen = ref(false);
@@ -46,17 +51,11 @@ export const useRankingStore = defineStore("ranking", () => {
     slug: string,
     options?: { page?: number; limit?: number; includeVirtual?: boolean },
   ): Promise<void> {
-    loading.value = true;
-    error.value = null;
     try {
-      const result = await getRanking(slug, options);
-      rankings.value = result.items;
+      const result = await rankingRequest.run(() => getRanking(slug, options));
+      if (result) rankings.value = result.items;
     } catch (err) {
-      error.value =
-        err instanceof Error ? err.message : "Failed to load ranking";
       throw err;
-    } finally {
-      loading.value = false;
     }
   }
 
@@ -64,9 +63,10 @@ export const useRankingStore = defineStore("ranking", () => {
    * Clear ranking data
    */
   function clearRanking(): void {
+    rankingRequest.cancel();
+    rankingRequest.error.value = null;
     rankings.value = [];
     frozen.value = false;
-    error.value = null;
   }
 
   /**
@@ -87,16 +87,16 @@ export const useRankingStore = defineStore("ranking", () => {
    * Clear error state
    */
   function clearError(): void {
-    error.value = null;
+    rankingRequest.error.value = null;
   }
 
   /**
    * Reset store to initial state
    */
   function $reset(): void {
+    rankingRequest.cancel();
+    rankingRequest.error.value = null;
     rankings.value = [];
-    loading.value = false;
-    error.value = null;
     frozen.value = false;
   }
 
diff --git a/apps/console/src/stores/contestBrowse.ts b/apps/console/src/stores/contestBrowse.ts
index fbdf0855aa..f96218b19e 100644
--- a/apps/console/src/stores/contestBrowse.ts
+++ b/apps/console/src/stores/contestBrowse.ts
@@ -1,5 +1,6 @@
 import { defineStore } from "pinia";
-import { ref } from "vue";
+import { computed, ref } from "vue";
+import { createValueRequest } from "@ulticode/request-state";
 import type { ContestListItem } from "@/types/contest";
 import {
   fetchUpcomingContests,
@@ -28,7 +29,18 @@ export const useContestBrowseStore = defineStore("contestBrowse", () => {
   const pastContests = ref<ContestListItem[]>([]);
   const pastContestsTotal = ref(0);
 
-  const loadingContests = ref(false);
+  const contestsRequest = createValueRequest({
+    errorMessage: "Failed to load contests",
+    rethrow: true,
+  });
+  const pastContestsRequest = createValueRequest({
+    errorMessage: "Failed to load contests",
+    rethrow: true,
+  });
+  // Page-wide loading covers the ongoing/upcoming lists only; past-tab
+  // pagination reports through usePastContestsPager's own tab-level loading
+  // so page turns keep the finished-tab skeleton and pager UI.
+  const loadingContests = computed(() => contestsRequest.loading.value);
   const error = ref<string | null>(null);
 
   // =========================================================================
@@ -36,32 +48,43 @@ export const useContestBrowseStore = defineStore("contestBrowse", () => {
   // =========================================================================
 
   async function loadContests() {
-    loadingContests.value = true;
     error.value = null;
+    contestsRequest.error.value = null;
+    pastContestsRequest.error.value = null;
     try {
-      const [upcoming, running] = await Promise.all([
+      const lists = await contestsRequest.run(() => Promise.all([
         fetchUpcomingContests(),
         fetchRunningContests(),
-      ]);
+      ]));
+      if (!lists) return;
+      const [upcoming, running] = lists;
       upcomingContests.value = upcoming.items;
       runningContests.value = running.items;
     } catch (err) {
-      error.value =
-        err instanceof Error ? err.message : "Failed to load contests";
+      error.value = contestsRequest.error.value;
       throw err;
-    } finally {
-      loadingContests.value = false;
     }
   }
 
   async function loadPastContests(page: number = 1, pageSize: number = 10) {
-    const result = await fetchPastContests(page, pageSize);
-    pastContests.value = result.items;
-    pastContestsTotal.value = result.total;
+    error.value = null;
+    contestsRequest.error.value = null;
+    pastContestsRequest.error.value = null;
+    try {
+      const result = await pastContestsRequest.run(() => fetchPastContests(page, pageSize));
+      if (!result) return;
+      pastContests.value = result.items;
+      pastContestsTotal.value = result.total;
+    } catch (err) {
+      error.value = pastContestsRequest.error.value;
+      throw err;
+    }
   }
 
   function clearError() {
     error.value = null;
+    contestsRequest.error.value = null;
+    pastContestsRequest.error.value = null;
   }
 
   return {
diff --git a/apps/console/src/stores/contestDetail.ts b/apps/console/src/stores/contestDetail.ts
index 2d7db4f842..1c65ccf4cb 100644
--- a/apps/console/src/stores/contestDetail.ts
+++ b/apps/console/src/stores/contestDetail.ts
@@ -1,4 +1,5 @@
 import { defineStore } from "pinia";
+import { createValueRequest } from "@ulticode/request-state";
 import { computed, ref } from "vue";
 import type {
   ContestDetail,
@@ -52,7 +53,11 @@ export const useContestDetailStore = defineStore("contestDetail", () => {
 
   const userParticipation = ref<Map<string, ParticipationStatus>>(new Map());
 
-  const loading = ref(false);
+  const detailRequest = createValueRequest({
+    errorMessage: "Failed to load contest details",
+    rethrow: true,
+  });
+  const loading = detailRequest.loading;
   const error = ref<string | null>(null);
 
   // =========================================================================
@@ -72,16 +77,14 @@ export const useContestDetailStore = defineStore("contestDetail", () => {
   // =========================================================================
 
   async function loadContestDetail(contestId: string) {
-    loading.value = true;
     error.value = null;
+    detailRequest.error.value = null;
     try {
-      currentContest.value = await fetchContestDetail(contestId);
+      const contest = await detailRequest.run(() => fetchContestDetail(contestId));
+      if (contest) currentContest.value = contest;
     } catch (err) {
-      error.value =
-        err instanceof Error ? err.message : "Failed to load contest details";
+      error.value = detailRequest.error.value;
       throw err;
-    } finally {
-      loading.value = false;
     }
   }
 
@@ -109,6 +112,7 @@ export const useContestDetailStore = defineStore("contestDetail", () => {
 
   async function registerForContest(contestId: string) {
     error.value = null;
+    detailRequest.error.value = null;
     try {
       await apiRegister(contestId);
       const status = await fetchParticipationStatus(contestId);
@@ -129,6 +133,7 @@ export const useContestDetailStore = defineStore("contestDetail", () => {
 
   async function unregisterFromContest(contestId: string) {
     error.value = null;
+    detailRequest.error.value = null;
     try {
       await apiUnregister(contestId);
       const status = await fetchParticipationStatus(contestId);
@@ -177,6 +182,7 @@ export const useContestDetailStore = defineStore("contestDetail", () => {
 
   function clearError() {
     error.value = null;
+    detailRequest.error.value = null;
   }
 
   return {
diff --git a/apps/console/src/stores/contestRanking.ts b/apps/console/src/stores/contestRanking.ts
index eb614cbdea..43fcb92aba 100644
--- a/apps/console/src/stores/contestRanking.ts
+++ b/apps/console/src/stores/contestRanking.ts
@@ -1,5 +1,6 @@
 import { defineStore } from "pinia";
-import { ref } from "vue";
+import { createValueRequest } from "@ulticode/request-state";
+import { computed, ref } from "vue";
 import type { ContestListItem, GlobalRankingEntry, UserContestHistory } from "@/types/contest";
 import {
   fetchGlobalRankings,
@@ -30,14 +31,19 @@ export const useContestRankingStore = defineStore("contestRanking", () => {
   // =========================================================================
 
   const globalRankings = ref<GlobalRankingEntry[]>([]);
-  const loadingRankings = ref(false);
+  const rankingsRequest = createValueRequest({
+    errorMessage: "Failed to load rankings",
+    rethrow: true,
+  });
+  const loadingRankings = rankingsRequest.loading;
 
   const registeredContests = ref<ContestListItem[]>([]);
   const participatedContests = ref<ContestListItem[]>([]);
   const virtualContests = ref<ContestListItem[]>([]);
   const contestHistory = ref<UserContestHistory[]>([]);
 
-  const error = ref<string | null>(null);
+  const operationError = ref<string | null>(null);
+  const error = computed(() => operationError.value ?? rankingsRequest.error.value);
 
   // =========================================================================
   // ACTIONS — GLOBAL RANKINGS
@@ -48,21 +54,17 @@ export const useContestRankingStore = defineStore("contestRanking", () => {
     limit?: number;
     country?: string;
   }) {
-    loadingRankings.value = true;
-    error.value = null;
+    operationError.value = null;
+    rankingsRequest.error.value = null;
     try {
-      const result = await fetchGlobalRankings({
+      const result = await rankingsRequest.run(() => fetchGlobalRankings({
         page: options?.page ?? 1,
         limit: options?.limit ?? 10,
         country: options?.country,
-      });
-      globalRankings.value = result.items;
+      }));
+      if (result) globalRankings.value = result.items;
     } catch (err) {
-      error.value =
-        err instanceof Error ? err.message : "Failed to load rankings";
       throw err;
-    } finally {
-      loadingRankings.value = false;
     }
   }
 
@@ -73,7 +75,8 @@ export const useContestRankingStore = defineStore("contestRanking", () => {
   async function loadUserContests(
     type?: "registered" | "participated" | "virtual",
   ) {
-    error.value = null;
+    operationError.value = null;
+    rankingsRequest.error.value = null;
     try {
       if (type) {
         const result = await apiFetchUserContests(type);
@@ -91,25 +94,27 @@ export const useContestRankingStore = defineStore("contestRanking", () => {
         virtualContests.value = virtual.items;
       }
     } catch (err) {
-      error.value =
+      operationError.value =
         err instanceof Error ? err.message : "Failed to load user contests";
       throw err;
     }
   }
 
   async function loadContestHistory() {
-    error.value = null;
+    operationError.value = null;
+    rankingsRequest.error.value = null;
     try {
       contestHistory.value = await fetchUserContestHistory();
     } catch (err) {
-      error.value =
+      operationError.value =
         err instanceof Error ? err.message : "Failed to load contest history";
       throw err;
     }
   }
 
   function clearError() {
-    error.value = null;
+    operationError.value = null;
+    rankingsRequest.error.value = null;
   }
 
   return {
diff --git a/apps/console/src/stores/userStats.ts b/apps/console/src/stores/userStats.ts
index 638a566a00..8edf4f0ae0 100644
--- a/apps/console/src/stores/userStats.ts
+++ b/apps/console/src/stores/userStats.ts
@@ -3,11 +3,14 @@ import { ref, computed } from "vue";
 import type { UserStats, UserSkills } from "@/types/userStats";
 import { fetchUserStats, fetchUserSkills } from "@/api/user";
 import { useAuthStore } from "./auth";
+import { createValueRequest } from "@ulticode/request-state";
 
 export const useUserStatsStore = defineStore("userStats", () => {
   const stats = ref<UserStats | null>(null);
   const skills = ref<UserSkills | null>(null);
-  const loading = ref(false);
+  const statsRequest = createValueRequest({ errorMessage: "Failed to load stats", rethrow: true });
+  const skillsRequest = createValueRequest({ errorMessage: "Failed to load skills", rethrow: true });
+  const loading = computed(() => statsRequest.loading.value || skillsRequest.loading.value);
   const lastFetch = ref<number>(0);
   const cacheTTL = 5 * 60 * 1000; // 5 分钟
   const error = ref<string | null>(null);
@@ -69,51 +72,44 @@ export const useUserStatsStore = defineStore("userStats", () => {
   async function fetchStats(forceRefresh = false) {
     const authStore = useAuthStore();
     if (!authStore.userId) return null;
-
-    if (!forceRefresh && isCacheValid.value && stats.value) {
-      return stats.value;
-    }
-
-    loading.value = true;
+    if (!forceRefresh && isCacheValid.value && stats.value) return stats.value;
     error.value = null;
+    statsRequest.error.value = null;
+    skillsRequest.error.value = null;
     try {
-      const result = await fetchUserStats(authStore.userId);
+      const result = await statsRequest.run(() => fetchUserStats(authStore.userId!));
+      if (!result) return null;
       stats.value = result;
       lastFetch.value = Date.now();
       return result;
     } catch (err) {
-      error.value = err instanceof Error ? err.message : "Failed to load stats";
+      error.value = statsRequest.error.value;
       throw err;
-    } finally {
-      loading.value = false;
     }
   }
 
   async function fetchSkills(forceRefresh = false) {
     const authStore = useAuthStore();
     if (!authStore.userId) return null;
-
-    if (!forceRefresh && skills.value) {
-      return skills.value;
-    }
-
-    loading.value = true;
+    if (!forceRefresh && skills.value) return skills.value;
     error.value = null;
+    statsRequest.error.value = null;
+    skillsRequest.error.value = null;
     try {
-      const result = await fetchUserSkills(authStore.userId);
+      const result = await skillsRequest.run(() => fetchUserSkills(authStore.userId!));
+      if (!result) return null;
       skills.value = result;
       return result;
     } catch (err) {
-      error.value =
-        err instanceof Error ? err.message : "Failed to load skills";
+      error.value = skillsRequest.error.value;
       throw err;
-    } finally {
-      loading.value = false;
     }
   }
 
   async function initialize() {
     error.value = null;
+    statsRequest.error.value = null;
+    skillsRequest.error.value = null;
     try {
       await Promise.all([fetchStats(), fetchSkills()]);
     } catch (err) {
@@ -128,6 +124,8 @@ export const useUserStatsStore = defineStore("userStats", () => {
 
   function clearError() {
     error.value = null;
+    statsRequest.error.value = null;
+    skillsRequest.error.value = null;
   }
 
   return {
diff --git a/apps/console/src/views/contest/components/MyContests.vue b/apps/console/src/views/contest/components/MyContests.vue
index 63f59b73e2..a0a3c0e1f1 100644
--- a/apps/console/src/views/contest/components/MyContests.vue
+++ b/apps/console/src/views/contest/components/MyContests.vue
@@ -1,5 +1,6 @@
 <script setup lang="ts">
 import { ref, onMounted, watch } from "vue";
+import { createValueRequest } from "@ulticode/request-state";
 import { useContestRankingStore } from "@/stores/contestRanking";
 import { useRouter } from "vue-router";
 import { Card, CardContent, CardHeader, CardTitle } from "@/components/ui/card";
@@ -11,56 +12,50 @@ import { useI18n } from "vue-i18n";
 
 const contestStore = useContestRankingStore();
 const router = useRouter();
-const loading = ref(true);
+const tabRequest = createValueRequest({
+  errorMessage: "Failed to load contests",
+  rethrow: true,
+});
+const loading = tabRequest.loading;
 const activeTab = ref("registered");
 const { t, locale } = useI18n();
 
-let requestId = 0;
-
 async function loadDataForTab(tab: string) {
-  const currentId = ++requestId;
-  switch (tab) {
-    case "registered": {
-      if (contestStore.registeredContests.length === 0) {
-        await contestStore.loadUserContests("registered");
-      }
-      break;
-    }
-    case "participated": {
-      if (contestStore.contestHistory.length === 0) {
-        await contestStore.loadContestHistory();
-      }
-      break;
-    }
-    case "virtual": {
-      if (contestStore.virtualContests.length === 0) {
-        await contestStore.loadUserContests("virtual");
-      }
-      break;
+  return tabRequest.run(async () => {
+    switch (tab) {
+      case "registered":
+        if (contestStore.registeredContests.length === 0) {
+          await contestStore.loadUserContests("registered");
+        }
+        break;
+      case "participated":
+        if (contestStore.contestHistory.length === 0) {
+          await contestStore.loadContestHistory();
+        }
+        break;
+      case "virtual":
+        if (contestStore.virtualContests.length === 0) {
+          await contestStore.loadUserContests("virtual");
+        }
+        break;
     }
-  }
-  // Only update loading if this is still the latest request
-  if (currentId === requestId) {
-    loading.value = false;
-  }
+    return true;
+  });
 }
 
 onMounted(async () => {
   try {
     await loadDataForTab(activeTab.value);
   } catch {
-    // Error handled by UI state
-    loading.value = false;
+    // Error handled by UI state.
   }
 });
 
 watch(activeTab, async (newTab) => {
-  loading.value = true;
   try {
     await loadDataForTab(newTab);
   } catch {
-    // Error handled by UI state
-    loading.value = false;
+    // Error handled by UI state.
   }
 });
 
diff --git a/apps/console/tsconfig.app.json b/apps/console/tsconfig.app.json
index 8349821541..b5366b90d6 100644
--- a/apps/console/tsconfig.app.json
+++ b/apps/console/tsconfig.app.json
@@ -11,6 +11,7 @@
     "../../packages/sidebar-menu/src/**/*.vue",
     "../../packages/markdown-utils/src/**/*",
     "../../packages/http-client/src/**/*",
+    "../../packages/request-state/src/**/*",
     "../../packages/locale-preference/src/**/*",
     "../../packages/datetime-utils/src/**/*",
     "../../packages/badge-config/src/**/*",
diff --git a/apps/management/package.json b/apps/management/package.json
index 978183b1d1..06bb034a4d 100644
--- a/apps/management/package.json
+++ b/apps/management/package.json
@@ -36,6 +36,7 @@
     "@ulticode/i18n-completeness": "workspace:*",
     "@ulticode/locale-preference": "workspace:*",
     "@ulticode/markdown-utils": "workspace:*",
+    "@ulticode/request-state": "workspace:*",
     "@ulticode/sidebar-menu": "workspace:*",
     "@ulticode/submission-status": "workspace:*",
     "@ulticode/theme": "workspace:*",
diff --git a/apps/management/src/api/admin/dashboard.ts b/apps/management/src/api/admin/dashboard.ts
index e7d334fd60..18a171bd03 100644
--- a/apps/management/src/api/admin/dashboard.ts
+++ b/apps/management/src/api/admin/dashboard.ts
@@ -124,8 +124,8 @@ export interface ChartQueryParams {
 
 export const dashboardApi = {
   // Note: request.ts intercepts and unwraps Result<T>, returning just T
-  async getStats(): Promise<DashboardStats> {
-    return apiGet<DashboardStats>('/admin/dashboard/stats')
+  async getStats(signal?: AbortSignal): Promise<DashboardStats> {
+    return apiGet<DashboardStats>('/admin/dashboard/stats', { signal })
   },
 
   async getChartStats(params: ChartQueryParams = {}): Promise<ChartStatsResponse> {
diff --git a/apps/management/src/components/layout/AppSidebar.vue b/apps/management/src/components/layout/AppSidebar.vue
index 667dfcdd9c..7109d87c33 100644
--- a/apps/management/src/components/layout/AppSidebar.vue
+++ b/apps/management/src/components/layout/AppSidebar.vue
@@ -1,17 +1,20 @@
 <script setup lang="ts">
+import {
+  systemPermissionRules,
+  problemPermissionRules,
+  problemListPermissionRules,
+  tagPermissionRules,
+  contestPermissionRules,
+  solutionPermissionRules,
+  forumPermissionRules,
+  userPermissionRules,
+  commentPermissionRules,
+} from '@/composables/domainPermissionMaps'
+import { usePermissionMap } from '@/composables/usePermissionMap'
 import { computed } from 'vue'
 import { useI18n } from 'vue-i18n'
 import { useAuthStore } from '@/stores/auth'
 import { useSearchPalette } from '@/composables/useSearchPalette'
-import { useSystemPermissions } from '@/composables/useSystemPermissions'
-import { useProblemPermissions } from '@/composables/useProblemPermissions'
-import { useProblemListPermissions } from '@/composables/useProblemListPermissions'
-import { useTagPermissions } from '@/composables/useTagPermissions'
-import { useContestPermissions } from '@/composables/useContestPermissions'
-import { useSolutionPermissions } from '@/composables/useSolutionPermissions'
-import { useForumPermissions } from '@/composables/useForumPermissions'
-import { useUserPermissions } from '@/composables/useUserPermissions'
-import { useCommentPermissions } from '@/composables/useCommentPermissions'
 import {
   IconCode,
   IconDashboard,
@@ -51,15 +54,15 @@ const { toggleSidebar } = useSidebar()
 const { t } = useI18n()
 const authStore = useAuthStore()
 const { open: openSearch } = useSearchPalette()
-const { can: systemCan } = useSystemPermissions()
-const { can: problemCan } = useProblemPermissions()
-const { can: problemListCan } = useProblemListPermissions()
-const { can: tagCan } = useTagPermissions()
-const { can: contestCan } = useContestPermissions()
-const { can: solutionCan } = useSolutionPermissions()
-const { can: forumCan } = useForumPermissions()
-const { can: userCan } = useUserPermissions()
-const { can: commentCan } = useCommentPermissions()
+const systemCan = { system: usePermissionMap(systemPermissionRules) }
+const problemCan = { problem: usePermissionMap(problemPermissionRules) }
+const problemListCan = { problemList: usePermissionMap(problemListPermissionRules) }
+const tagCan = { tag: usePermissionMap(tagPermissionRules) }
+const contestCan = { contest: usePermissionMap(contestPermissionRules) }
+const solutionCan = { solution: usePermissionMap(solutionPermissionRules) }
+const forumCan = { forum: usePermissionMap(forumPermissionRules) }
+const userCan = { user: usePermissionMap(userPermissionRules) }
+const commentCan = { comment: usePermissionMap(commentPermissionRules) }
 
 const user = computed(() => ({
   name: authStore.user?.name || 'Admin',
diff --git a/apps/management/src/composables/domainPermissionMaps.ts b/apps/management/src/composables/domainPermissionMaps.ts
new file mode 100644
index 0000000000..c5f65bbd07
--- /dev/null
+++ b/apps/management/src/composables/domainPermissionMaps.ts
@@ -0,0 +1,74 @@
+import type { PermissionComputedMap } from './usePermissionMap'
+import { PERM } from '@/constants/permissions'
+
+export const analyticsPermissionRules = { read: PERM.ANALYTICS_READ } as const
+export type AnalyticsPermissionMap = PermissionComputedMap<typeof analyticsPermissionRules>
+
+export const commentPermissionRules = {
+  moderateForum: PERM.MODERATE_FORUM_COMMENT,
+  moderateSolution: PERM.MODERATE_SOLUTION_COMMENT,
+} as const
+export type CommentPermissionMap = PermissionComputedMap<typeof commentPermissionRules>
+
+export const contestPermissionRules = {
+  read: PERM.CONTEST_READ,
+  create: PERM.CONTEST_CREATE,
+  update: PERM.CONTEST_UPDATE,
+  delete: PERM.CONTEST_DELETE,
+} as const
+export type ContestPermissionMap = PermissionComputedMap<typeof contestPermissionRules>
+
+export const forumPermissionRules = {
+  moderatePost: PERM.MODERATE_FORUM_POST,
+  deletePost: PERM.DELETE_FORUM_POST,
+} as const
+export type ForumPermissionMap = PermissionComputedMap<typeof forumPermissionRules>
+
+export const problemPermissionRules = {
+  read: PERM.PROBLEM_READ,
+  create: PERM.PROBLEM_CREATE,
+  update: PERM.PROBLEM_UPDATE,
+  delete: PERM.PROBLEM_DELETE,
+  moderate: PERM.MODERATE_PROBLEM,
+} as const
+export type ProblemPermissionMap = PermissionComputedMap<typeof problemPermissionRules>
+
+export const problemListPermissionRules = {
+  read: PERM.PROBLEM_LIST_READ,
+  create: PERM.PROBLEM_LIST_CREATE,
+  update: PERM.PROBLEM_LIST_UPDATE,
+  delete: PERM.PROBLEM_LIST_DELETE,
+  manageProblems: PERM.PROBLEM_LIST_MANAGE_PROBLEMS,
+} as const
+export type ProblemListPermissionMap = PermissionComputedMap<typeof problemListPermissionRules>
+
+export const solutionPermissionRules = {
+  read: PERM.SOLUTION_READ,
+  moderate: PERM.MODERATE_SOLUTION,
+  delete: PERM.DELETE_SOLUTION,
+} as const
+export type SolutionPermissionMap = PermissionComputedMap<typeof solutionPermissionRules>
+
+export const systemPermissionRules = {
+  read: PERM.SYSTEM_READ,
+  update: PERM.SYSTEM_UPDATE,
+  manageUsers: PERM.SYSTEM_MANAGE_USERS,
+} as const
+export type SystemPermissionMap = PermissionComputedMap<typeof systemPermissionRules>
+
+export const tagPermissionRules = {
+  read: PERM.TAG_READ,
+  update: PERM.TAG_UPDATE,
+  // System managers and problem editors can manage the shared tag catalog.
+  manage: [PERM.SYSTEM_MANAGE_USERS, PERM.PROBLEM_UPDATE],
+} as const
+export type TagPermissionMap = PermissionComputedMap<typeof tagPermissionRules>
+
+export const userPermissionRules = {
+  read: PERM.USER_READ,
+  create: PERM.USER_CREATE,
+  update: PERM.USER_UPDATE,
+  delete: PERM.USER_DELETE,
+  moderate: PERM.MODERATE_USER,
+} as const
+export type UserPermissionMap = PermissionComputedMap<typeof userPermissionRules>
diff --git a/apps/management/src/composables/useAnalyticsPermissions.ts b/apps/management/src/composables/useAnalyticsPermissions.ts
deleted file mode 100644
index 644950d705..0000000000
--- a/apps/management/src/composables/useAnalyticsPermissions.ts
+++ /dev/null
@@ -1,15 +0,0 @@
-import { type ComputedRef } from 'vue'
-import { PERM } from '@/constants/permissions'
-import { usePermissionMap } from './usePermissionMap'
-
-export interface AnalyticsPermissionMap {
-  read: ComputedRef<boolean>
-}
-
-export function useAnalyticsPermissions(): { can: { analytics: AnalyticsPermissionMap } } {
-  const analytics: AnalyticsPermissionMap = usePermissionMap({
-    read: PERM.ANALYTICS_READ,
-  })
-
-  return { can: { analytics } }
-}
diff --git a/apps/management/src/composables/useCommentPermissions.ts b/apps/management/src/composables/useCommentPermissions.ts
deleted file mode 100644
index 228893558b..0000000000
--- a/apps/management/src/composables/useCommentPermissions.ts
+++ /dev/null
@@ -1,17 +0,0 @@
-import { type ComputedRef } from 'vue'
-import { PERM } from '@/constants/permissions'
-import { usePermissionMap } from './usePermissionMap'
-
-export interface CommentPermissionMap {
-  moderateForum: ComputedRef<boolean>
-  moderateSolution: ComputedRef<boolean>
-}
-
-export function useCommentPermissions(): { can: { comment: CommentPermissionMap } } {
-  const comment: CommentPermissionMap = usePermissionMap({
-    moderateForum: PERM.MODERATE_FORUM_COMMENT,
-    moderateSolution: PERM.MODERATE_SOLUTION_COMMENT,
-  })
-
-  return { can: { comment } }
-}
diff --git a/apps/management/src/composables/useContestPermissions.ts b/apps/management/src/composables/useContestPermissions.ts
deleted file mode 100644
index a04c03f4e0..0000000000
--- a/apps/management/src/composables/useContestPermissions.ts
+++ /dev/null
@@ -1,21 +0,0 @@
-import { type ComputedRef } from 'vue'
-import { PERM } from '@/constants/permissions'
-import { usePermissionMap } from './usePermissionMap'
-
-export interface ContestPermissionMap {
-  read: ComputedRef<boolean>
-  create: ComputedRef<boolean>
-  update: ComputedRef<boolean>
-  delete: ComputedRef<boolean>
-}
-
-export function useContestPermissions(): { can: { contest: ContestPermissionMap } } {
-  const contest: ContestPermissionMap = usePermissionMap({
-    read: PERM.CONTEST_READ,
-    create: PERM.CONTEST_CREATE,
-    update: PERM.CONTEST_UPDATE,
-    delete: PERM.CONTEST_DELETE,
-  })
-
-  return { can: { contest } }
-}
diff --git a/apps/management/src/composables/useDomainPermissions.test.ts b/apps/management/src/composables/useDomainPermissions.test.ts
index 76fe97ae8f..7e98d3c209 100644
--- a/apps/management/src/composables/useDomainPermissions.test.ts
+++ b/apps/management/src/composables/useDomainPermissions.test.ts
@@ -1,31 +1,86 @@
+import { reactive, type ComputedRef } from 'vue'
 import { describe, expect, it, vi } from 'vitest'
 import { useAuthStore } from '@/stores/auth'
-import { useContestPermissions } from './useContestPermissions'
-import { useForumPermissions } from './useForumPermissions'
+import { PERM, type Permission } from '@/constants/permissions'
+import {
+  analyticsPermissionRules,
+  commentPermissionRules,
+  contestPermissionRules,
+  forumPermissionRules,
+  problemListPermissionRules,
+  problemPermissionRules,
+  solutionPermissionRules,
+  systemPermissionRules,
+  tagPermissionRules,
+  userPermissionRules,
+} from './domainPermissionMaps'
+import { usePermissionMap } from './usePermissionMap'
 
 vi.mock('@/stores/auth')
 
 describe('domain permission maps', () => {
-  it('maps contest update to UPDATE:CONTEST', () => {
+  it('preserves every domain can predicate and any-of rule behavior', () => {
+    const granted = reactive(new Set<string>())
     const hasPermission = vi.fn((action: string, resource: string) =>
-      action === 'UPDATE' && resource === 'CONTEST',
+      granted.has(action + ':' + resource),
     )
     vi.mocked(useAuthStore).mockReturnValue({ hasPermission } as never)
 
-    const { can } = useContestPermissions()
+    const can = {
+      analytics: usePermissionMap(analyticsPermissionRules),
+      comment: usePermissionMap(commentPermissionRules),
+      contest: usePermissionMap(contestPermissionRules),
+      forum: usePermissionMap(forumPermissionRules),
+      problem: usePermissionMap(problemPermissionRules),
+      problemList: usePermissionMap(problemListPermissionRules),
+      solution: usePermissionMap(solutionPermissionRules),
+      system: usePermissionMap(systemPermissionRules),
+      tag: usePermissionMap(tagPermissionRules),
+      user: usePermissionMap(userPermissionRules),
+    }
 
-    expect(can.contest.update.value).toBe(true)
-    expect(hasPermission).toHaveBeenCalledWith('UPDATE', 'CONTEST')
-  })
-
-  it('maps forum post moderation and fails closed', () => {
-    const hasPermission = vi.fn().mockReturnValue(false)
-    vi.mocked(useAuthStore).mockReturnValue({ hasPermission } as never)
-
-    const { can } = useForumPermissions()
+    const predicates: Array<[ComputedRef<boolean>, Permission]> = [
+      [can.analytics.read, PERM.ANALYTICS_READ],
+      [can.comment.moderateForum, PERM.MODERATE_FORUM_COMMENT],
+      [can.comment.moderateSolution, PERM.MODERATE_SOLUTION_COMMENT],
+      [can.contest.read, PERM.CONTEST_READ],
+      [can.contest.create, PERM.CONTEST_CREATE],
+      [can.contest.update, PERM.CONTEST_UPDATE],
+      [can.contest.delete, PERM.CONTEST_DELETE],
+      [can.forum.moderatePost, PERM.MODERATE_FORUM_POST],
+      [can.forum.deletePost, PERM.DELETE_FORUM_POST],
+      [can.problem.read, PERM.PROBLEM_READ],
+      [can.problem.create, PERM.PROBLEM_CREATE],
+      [can.problem.update, PERM.PROBLEM_UPDATE],
+      [can.problem.delete, PERM.PROBLEM_DELETE],
+      [can.problem.moderate, PERM.MODERATE_PROBLEM],
+      [can.problemList.read, PERM.PROBLEM_LIST_READ],
+      [can.problemList.create, PERM.PROBLEM_LIST_CREATE],
+      [can.problemList.update, PERM.PROBLEM_LIST_UPDATE],
+      [can.problemList.delete, PERM.PROBLEM_LIST_DELETE],
+      [can.problemList.manageProblems, PERM.PROBLEM_LIST_MANAGE_PROBLEMS],
+      [can.solution.read, PERM.SOLUTION_READ],
+      [can.solution.moderate, PERM.MODERATE_SOLUTION],
+      [can.solution.delete, PERM.DELETE_SOLUTION],
+      [can.system.read, PERM.SYSTEM_READ],
+      [can.system.update, PERM.SYSTEM_UPDATE],
+      [can.system.manageUsers, PERM.SYSTEM_MANAGE_USERS],
+      [can.tag.read, PERM.TAG_READ],
+      [can.tag.update, PERM.TAG_UPDATE],
+      [can.tag.manage, PERM.SYSTEM_MANAGE_USERS],
+      [can.tag.manage, PERM.PROBLEM_UPDATE],
+      [can.user.read, PERM.USER_READ],
+      [can.user.create, PERM.USER_CREATE],
+      [can.user.update, PERM.USER_UPDATE],
+      [can.user.delete, PERM.USER_DELETE],
+      [can.user.moderate, PERM.MODERATE_USER],
+    ]
 
-    expect(can.forum.moderatePost.value).toBe(false)
-    expect(can.forum.deletePost.value).toBe(false)
-    expect(hasPermission).toHaveBeenCalledWith('MODERATE', 'FORUM_POST')
+    for (const [predicate, permission] of predicates) {
+      granted.clear()
+      expect(predicate.value).toBe(false)
+      granted.add(permission.action + ':' + permission.resource)
+      expect(predicate.value).toBe(true)
+    }
   })
 })
diff --git a/apps/management/src/composables/useForumPermissions.ts b/apps/management/src/composables/useForumPermissions.ts
deleted file mode 100644
index 07eff1eaea..0000000000
--- a/apps/management/src/composables/useForumPermissions.ts
+++ /dev/null
@@ -1,17 +0,0 @@
-import { type ComputedRef } from 'vue'
-import { PERM } from '@/constants/permissions'
-import { usePermissionMap } from './usePermissionMap'
-
-export interface ForumPermissionMap {
-  moderatePost: ComputedRef<boolean>
-  deletePost: ComputedRef<boolean>
-}
-
-export function useForumPermissions(): { can: { forum: ForumPermissionMap } } {
-  const forum: ForumPermissionMap = usePermissionMap({
-    moderatePost: PERM.MODERATE_FORUM_POST,
-    deletePost: PERM.DELETE_FORUM_POST,
-  })
-
-  return { can: { forum } }
-}
diff --git a/apps/management/src/composables/usePermissionMap.test.ts b/apps/management/src/composables/usePermissionMap.test.ts
deleted file mode 100644
index f983a7fa27..0000000000
--- a/apps/management/src/composables/usePermissionMap.test.ts
+++ /dev/null
@@ -1,56 +0,0 @@
-import { reactive } from 'vue'
-import { describe, expect, it, vi } from 'vitest'
-import { useAuthStore } from '@/stores/auth'
-import { PERM } from '@/constants/permissions'
-import { usePermissionMap } from './usePermissionMap'
-
-vi.mock('@/stores/auth')
-
-describe('usePermissionMap', () => {
-  it('maps a permission and an any-of rule to reactive predicates', () => {
-    const granted = reactive({ problem: true, system: false })
-    const hasPermission = vi.fn((action: string, resource: string) =>
-      action === PERM.PROBLEM_UPDATE.action && resource === PERM.PROBLEM_UPDATE.resource
-        ? granted.problem
-        : action === PERM.SYSTEM_MANAGE_USERS.action
-            && resource === PERM.SYSTEM_MANAGE_USERS.resource
-          ? granted.system
-          : false,
-    )
-    vi.mocked(useAuthStore).mockReturnValue({ hasPermission } as never)
-
-    const permissions = usePermissionMap({
-      update: PERM.PROBLEM_UPDATE,
-      manage: [PERM.SYSTEM_MANAGE_USERS, PERM.PROBLEM_UPDATE],
-    })
-
-    expect(permissions.update.value).toBe(true)
-    expect(permissions.manage.value).toBe(true)
-    granted.problem = false
-    expect(permissions.update.value).toBe(false)
-    expect(permissions.manage.value).toBe(false)
-    granted.system = true
-    expect(permissions.manage.value).toBe(true)
-    expect(hasPermission).toHaveBeenCalledWith(
-      PERM.PROBLEM_UPDATE.action,
-      PERM.PROBLEM_UPDATE.resource,
-    )
-    expect(hasPermission).toHaveBeenCalledWith(
-      PERM.SYSTEM_MANAGE_USERS.action,
-      PERM.SYSTEM_MANAGE_USERS.resource,
-    )
-  })
-
-  it('fails closed when the auth store denies every rule', () => {
-    const hasPermission = vi.fn().mockReturnValue(false)
-    vi.mocked(useAuthStore).mockReturnValue({ hasPermission } as never)
-
-    const permissions = usePermissionMap({
-      read: PERM.USER_READ,
-      manage: [PERM.SYSTEM_MANAGE_USERS, PERM.PROBLEM_UPDATE],
-    })
-
-    expect(permissions.read.value).toBe(false)
-    expect(permissions.manage.value).toBe(false)
-  })
-})
diff --git a/apps/management/src/composables/useProblemListPermissions.test.ts b/apps/management/src/composables/useProblemListPermissions.test.ts
deleted file mode 100644
index d0f2d11c65..0000000000
--- a/apps/management/src/composables/useProblemListPermissions.test.ts
+++ /dev/null
@@ -1,43 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from 'vitest'
-import { createPinia, setActivePinia } from 'pinia'
-import { useAuthStore } from '@/stores/auth'
-import { useProblemListPermissions } from './useProblemListPermissions'
-
-vi.mock('@/stores/auth')
-
-describe('useProblemListPermissions', () => {
-  beforeEach(() => {
-    setActivePinia(createPinia())
-    vi.clearAllMocks()
-  })
-
-  it('exposes one update predicate for all problem-list editing surfaces', () => {
-    const mockHasPermission = vi.fn((action: string, resource: string) =>
-      action === 'UPDATE' && resource === 'PROBLEM_LIST',
-    )
-    vi.mocked(useAuthStore).mockReturnValue({
-      hasPermission: mockHasPermission,
-    } as unknown as ReturnType<typeof useAuthStore>)
-
-    const { can } = useProblemListPermissions()
-
-    expect(can.problemList.update.value).toBe(true)
-    expect(can.problemList.manageProblems.value).toBe(false)
-    expect(mockHasPermission).toHaveBeenCalledWith('UPDATE', 'PROBLEM_LIST')
-  })
-
-  it('keeps problem-list management fail-closed', () => {
-    const mockHasPermission = vi.fn().mockReturnValue(false)
-    vi.mocked(useAuthStore).mockReturnValue({
-      hasPermission: mockHasPermission,
-    } as unknown as ReturnType<typeof useAuthStore>)
-
-    const { can } = useProblemListPermissions()
-
-    expect(can.problemList.read.value).toBe(false)
-    expect(can.problemList.create.value).toBe(false)
-    expect(can.problemList.update.value).toBe(false)
-    expect(can.problemList.delete.value).toBe(false)
-    expect(can.problemList.manageProblems.value).toBe(false)
-  })
-})
diff --git a/apps/management/src/composables/useProblemListPermissions.ts b/apps/management/src/composables/useProblemListPermissions.ts
deleted file mode 100644
index ab76073b3f..0000000000
--- a/apps/management/src/composables/useProblemListPermissions.ts
+++ /dev/null
@@ -1,25 +0,0 @@
-import { type ComputedRef } from 'vue'
-import { PERM } from '@/constants/permissions'
-import { usePermissionMap } from './usePermissionMap'
-
-export interface ProblemListPermissionMap {
-  read: ComputedRef<boolean>
-  create: ComputedRef<boolean>
-  update: ComputedRef<boolean>
-  delete: ComputedRef<boolean>
-  manageProblems: ComputedRef<boolean>
-}
-
-export function useProblemListPermissions(): {
-  can: { problemList: ProblemListPermissionMap }
-} {
-  const problemList: ProblemListPermissionMap = usePermissionMap({
-    read: PERM.PROBLEM_LIST_READ,
-    create: PERM.PROBLEM_LIST_CREATE,
-    update: PERM.PROBLEM_LIST_UPDATE,
-    delete: PERM.PROBLEM_LIST_DELETE,
-    manageProblems: PERM.PROBLEM_LIST_MANAGE_PROBLEMS,
-  })
-
-  return { can: { problemList } }
-}
diff --git a/apps/management/src/composables/useProblemPermissions.ts b/apps/management/src/composables/useProblemPermissions.ts
deleted file mode 100644
index 067a90d02c..0000000000
--- a/apps/management/src/composables/useProblemPermissions.ts
+++ /dev/null
@@ -1,23 +0,0 @@
-import { type ComputedRef } from 'vue'
-import { PERM } from '@/constants/permissions'
-import { usePermissionMap } from './usePermissionMap'
-
-export interface ProblemPermissionMap {
-  read: ComputedRef<boolean>
-  create: ComputedRef<boolean>
-  update: ComputedRef<boolean>
-  delete: ComputedRef<boolean>
-  moderate: ComputedRef<boolean>
-}
-
-export function useProblemPermissions(): { can: { problem: ProblemPermissionMap } } {
-  const problem: ProblemPermissionMap = usePermissionMap({
-    read: PERM.PROBLEM_READ,
-    create: PERM.PROBLEM_CREATE,
-    update: PERM.PROBLEM_UPDATE,
-    delete: PERM.PROBLEM_DELETE,
-    moderate: PERM.MODERATE_PROBLEM,
-  })
-
-  return { can: { problem } }
-}
diff --git a/apps/management/src/composables/useRemoteTable.test.ts b/apps/management/src/composables/useRemoteTable.test.ts
index fda40a78ad..5a70b4774e 100644
--- a/apps/management/src/composables/useRemoteTable.test.ts
+++ b/apps/management/src/composables/useRemoteTable.test.ts
@@ -319,47 +319,49 @@ describe('useRemoteTable', () => {
     expect(table.total.value).toBe(1)
   })
 
-  it('keeps mutation-owned loading through a debounced transition', () => {
-    vi.useFakeTimers()
+  it('keeps mutation loading separate from table fetch loading', async () => {
+    let finishMutation!: () => void
     const collection = createCollectionSlice<Row, Params>({
       load: vi.fn().mockResolvedValue({ items: [], total: 0 }),
     })
     const table = useRemoteTable<Row, Filters, Params>({
       store: collection,
       initialQuery: { filters: { status: 'all' } },
-      toParams: ({ filters, page, limit }) => ({
-        status: filters.status,
-        page,
-        limit,
-      }),
+      toParams: ({ filters, page, limit }) => ({ status: filters.status, page, limit }),
     })
+    const mutation = collection.runMutation(() => new Promise<void>((resolve) => { finishMutation = resolve }), 'Failed')
 
-    // No collection request is active: isLoading belongs to a mutation or
-    // export that is still running when the user starts a table search.
-    collection.isLoading.value = true
-    table.setSearch('graphs')
+    await table.setFilters({ status: 'draft' })
 
-    expect(collection.isLoading.value).toBe(true)
+    expect(collection.mutationLoading.value).toBe(true)
+    expect(collection.isLoading.value).toBe(false)
+    expect(table.loading.value).toBe(false)
+    finishMutation()
+    await mutation
   })
 
-  it('keeps collection fetch loading independent from mutations', async () => {
-    const { store, table } = createTable({ showInitialLoading: false })
-    let finishFetch: (() => void) | undefined
-    store.fetch.mockImplementation(
-      () => new Promise<void>((resolve) => { finishFetch = resolve }),
-    )
-
-    // A mutation owns the shared flag when a table transition starts a fetch.
-    store.isLoading.value = true
+  it('keeps fetch loading active while mutation loading finishes', async () => {
+    let finishFetch!: (page: { items: Row[]; total: number }) => void
+    let finishMutation!: () => void
+    const collection = createCollectionSlice<Row, Params>({
+      load: () => new Promise((resolve) => { finishFetch = resolve }),
+    })
+    const table = useRemoteTable<Row, Filters, Params>({
+      store: collection,
+      initialQuery: { filters: { status: 'all' } },
+      showInitialLoading: false,
+      toParams: ({ filters, page, limit }) => ({ status: filters.status, page, limit }),
+    })
+    const mutation = collection.runMutation(() => new Promise<void>((resolve) => { finishMutation = resolve }), 'Failed')
     const transition = table.setFilters({ status: 'draft' })
 
-    // The mutation finishes while the collection request is still in flight:
-    // the table must keep reporting loading until its own fetch settles.
-    store.isLoading.value = false
-    expect(finishFetch).toBeDefined()
+    expect(collection.isLoading.value).toBe(true)
+    finishMutation()
+    await mutation
+    expect(collection.isLoading.value).toBe(true)
     expect(table.loading.value).toBe(true)
 
-    finishFetch!()
+    finishFetch({ items: [], total: 0 })
     await transition
     expect(table.loading.value).toBe(false)
   })
diff --git a/apps/management/src/composables/useRemoteTable.ts b/apps/management/src/composables/useRemoteTable.ts
index cec7f53e62..e1926ed38a 100644
--- a/apps/management/src/composables/useRemoteTable.ts
+++ b/apps/management/src/composables/useRemoteTable.ts
@@ -110,17 +110,12 @@ export function useRemoteTable<
     () => readonly(query.value) as DeepReadonly<RemoteTableQuery<TFilters>>,
   )
   const initialLoad = ref(showInitialLoading)
-  // Tracks this table's own in-flight fetches: stores alias isLoading for
-  // mutations too, so a mutation's finally must not report a running fetch
-  // as finished.
-  const pendingRequests = ref(0)
   let searchTimer: ReturnType<typeof setTimeout> | undefined
   let routeTimer: ReturnType<typeof setTimeout> | undefined
 
   const loading = computed(
     () =>
       initialLoad.value ||
-      pendingRequests.value > 0 ||
       toValue(store.isLoading) ||
       false,
   )
@@ -162,11 +157,9 @@ export function useRemoteTable<
       limit: current.pagination.pageSize,
     })
 
-    pendingRequests.value += 1
     try {
       await store.fetch(params)
     } finally {
-      pendingRequests.value -= 1
       if (!searchTimer && !toValue(store.isLoading)) initialLoad.value = false
     }
   }
diff --git a/apps/management/src/composables/useSolutionPermissions.ts b/apps/management/src/composables/useSolutionPermissions.ts
deleted file mode 100644
index 50f8f74636..0000000000
--- a/apps/management/src/composables/useSolutionPermissions.ts
+++ /dev/null
@@ -1,19 +0,0 @@
-import { type ComputedRef } from 'vue'
-import { PERM } from '@/constants/permissions'
-import { usePermissionMap } from './usePermissionMap'
-
-export interface SolutionPermissionMap {
-  read: ComputedRef<boolean>
-  moderate: ComputedRef<boolean>
-  delete: ComputedRef<boolean>
-}
-
-export function useSolutionPermissions(): { can: { solution: SolutionPermissionMap } } {
-  const solution: SolutionPermissionMap = usePermissionMap({
-    read: PERM.SOLUTION_READ,
-    moderate: PERM.MODERATE_SOLUTION,
-    delete: PERM.DELETE_SOLUTION,
-  })
-
-  return { can: { solution } }
-}
diff --git a/apps/management/src/composables/useSystemPermissions.ts b/apps/management/src/composables/useSystemPermissions.ts
deleted file mode 100644
index 1db51fd380..0000000000
--- a/apps/management/src/composables/useSystemPermissions.ts
+++ /dev/null
@@ -1,19 +0,0 @@
-import { type ComputedRef } from 'vue'
-import { PERM } from '@/constants/permissions'
-import { usePermissionMap } from './usePermissionMap'
-
-export interface SystemPermissionMap {
-  read: ComputedRef<boolean>
-  update: ComputedRef<boolean>
-  manageUsers: ComputedRef<boolean>
-}
-
-export function useSystemPermissions(): { can: { system: SystemPermissionMap } } {
-  const system: SystemPermissionMap = usePermissionMap({
-    read: PERM.SYSTEM_READ,
-    update: PERM.SYSTEM_UPDATE,
-    manageUsers: PERM.SYSTEM_MANAGE_USERS,
-  })
-
-  return { can: { system } }
-}
diff --git a/apps/management/src/composables/useTagPermissions.ts b/apps/management/src/composables/useTagPermissions.ts
deleted file mode 100644
index a6e6387c4e..0000000000
--- a/apps/management/src/composables/useTagPermissions.ts
+++ /dev/null
@@ -1,21 +0,0 @@
-import { type ComputedRef } from 'vue'
-import { PERM } from '@/constants/permissions'
-import { usePermissionMap } from './usePermissionMap'
-
-export interface TagPermissionMap {
-  read: ComputedRef<boolean>
-  update: ComputedRef<boolean>
-  manage: ComputedRef<boolean>
-}
-
-export function useTagPermissions(): { can: { tag: TagPermissionMap } } {
-  const tag: TagPermissionMap = usePermissionMap({
-    read: PERM.TAG_READ,
-    update: PERM.TAG_UPDATE,
-    // Preserve the existing policy: system managers and problem editors can
-    // manage the shared tag catalog.
-    manage: [PERM.SYSTEM_MANAGE_USERS, PERM.PROBLEM_UPDATE],
-  })
-
-  return { can: { tag } }
-}
diff --git a/apps/management/src/composables/useUserPermissions.ts b/apps/management/src/composables/useUserPermissions.ts
deleted file mode 100644
index 535d6d1a77..0000000000
--- a/apps/management/src/composables/useUserPermissions.ts
+++ /dev/null
@@ -1,23 +0,0 @@
-import { type ComputedRef } from 'vue'
-import { PERM } from '@/constants/permissions'
-import { usePermissionMap } from './usePermissionMap'
-
-export interface UserPermissionMap {
-  read: ComputedRef<boolean>
-  create: ComputedRef<boolean>
-  update: ComputedRef<boolean>
-  delete: ComputedRef<boolean>
-  moderate: ComputedRef<boolean>
-}
-
-export function useUserPermissions(): { can: { user: UserPermissionMap } } {
-  const user: UserPermissionMap = usePermissionMap({
-    read: PERM.USER_READ,
-    create: PERM.USER_CREATE,
-    update: PERM.USER_UPDATE,
-    delete: PERM.USER_DELETE,
-    moderate: PERM.MODERATE_USER,
-  })
-
-  return { can: { user } }
-}
diff --git a/apps/management/src/stores/admin/__tests__/comments.spec.ts b/apps/management/src/stores/admin/__tests__/comments.spec.ts
index 2378257856..6266b6fbc9 100644
--- a/apps/management/src/stores/admin/__tests__/comments.spec.ts
+++ b/apps/management/src/stores/admin/__tests__/comments.spec.ts
@@ -170,6 +170,23 @@ describe('useCommentsStore', () => {
       expect(store.loading).toBe(false)
     })
 
+    it('recovers the combined banner after a failed mutation once the next fetch succeeds', async () => {
+      vi.mocked(commentsApi.bulkAction).mockRejectedValue(new Error('bulk boom'))
+
+      const store = useCommentsStore()
+      await expect(store.bulkModerate([makeRow('a', 'forum')], 'delete')).rejects.toThrow(
+        'bulk boom',
+      )
+      expect(store.error).not.toBeNull()
+
+      await store.fetch({ page: 1 })
+      expect(store.error).toBeNull()
+
+      vi.mocked(commentsApi.getComments).mockRejectedValue(new Error('refresh boom'))
+      await store.fetch({ page: 1 })
+      expect(store.error).toBe('refresh boom')
+    })
+
     it('does not expose bulkAction on the public store surface', () => {
       const store = useCommentsStore() as unknown as Record<string, unknown>
       expect(store.bulkAction).toBeUndefined()
diff --git a/apps/management/src/stores/admin/audit.ts b/apps/management/src/stores/admin/audit.ts
index bacbda6aca..6c98181aae 100644
--- a/apps/management/src/stores/admin/audit.ts
+++ b/apps/management/src/stores/admin/audit.ts
@@ -1,5 +1,5 @@
 import { defineStore } from 'pinia'
-import { ref } from 'vue'
+import { computed, ref } from 'vue'
 import {
   auditApi,
   type AuditLog,
@@ -8,7 +8,7 @@ import {
   type AuditExportParams,
 } from '@/api/admin/audit'
 import { createCollectionSlice } from '@/stores/createCollectionSlice'
-import { extractApiErrorMessage } from '@/utils/error'
+import { createValueRequest } from '@/stores/createValueRequest'
 export const useAuditStore = defineStore('adminAudit', () => {
   const collection = createCollectionSlice<AuditLog, AuditLogQueryParams>({
     load: async (params = {}, signal) => {
@@ -18,67 +18,37 @@ export const useAuditStore = defineStore('adminAudit', () => {
   })
   const logs = collection.items
   const total = collection.total
-  const loading = collection.isLoading
-  const error = collection.error
+  const loading = computed(() => collection.isLoading.value || collection.mutationLoading.value)
+  const error = computed(() => collection.error.value || collection.mutationError.value)
   const stats = ref<AuditStats | null>(null)
-  const statsLoading = ref(false)
-  const statsError = ref<string | null>(null)
-  let statsController: AbortController | null = null
-  let statsSequence = 0
+  const statsRequest = createValueRequest({
+    errorMessage: 'Failed to fetch audit stats',
+    rethrow: true,
+    onError: (err) => console.error('Failed to fetch audit stats:', err),
+  })
 
   const fetchLogs = collection.fetch
 
-  function cancelStats(): void {
-    statsSequence += 1
-    statsController?.abort()
-    statsController = null
-    statsLoading.value = false
-  }
+  const cancelStats = statsRequest.cancel
 
   async function fetchStats(params?: AuditLogQueryParams) {
-    statsController?.abort()
-    const controller = new AbortController()
-    statsController = controller
-    const request = ++statsSequence
-    statsLoading.value = true
-    statsError.value = null
-    try {
-      const data = await auditApi.getAuditStats(params, controller.signal)
-      if (request === statsSequence && !controller.signal.aborted) stats.value = data
-      return data
-    } catch (err: unknown) {
-      if (controller.signal.aborted || request !== statsSequence) return null
-      statsError.value = extractApiErrorMessage(err, 'Failed to fetch audit stats')
-      console.error('Failed to fetch audit stats:', err)
-      throw err
-    } finally {
-      if (statsController === controller) {
-        statsController = null
-        statsLoading.value = false
-      }
-    }
+    const data = await statsRequest.run((signal) => auditApi.getAuditStats(params, signal))
+    if (data !== null) stats.value = data
+    return data
   }
 
   async function exportLogs(params: AuditExportParams) {
-    loading.value = true
-    error.value = null
-    try {
+    return collection.runMutation(async () => {
       await auditApi.exportAuditLogs(params)
-    } catch (err: unknown) {
-      error.value = extractApiErrorMessage(err, 'Failed to export audit logs')
-      console.error('Failed to export audit logs:', err)
-      throw err
-    } finally {
-      loading.value = false
-    }
+    }, 'Failed to export audit logs')
   }
 
   return {
     logs,
     total,
     stats,
-    statsLoading,
-    statsError,
+    statsLoading: statsRequest.loading,
+    statsError: statsRequest.error,
     loading,
     error,
     fetchLogs,
diff --git a/apps/management/src/stores/admin/comments.ts b/apps/management/src/stores/admin/comments.ts
index fa57478ffa..e07590bdf7 100644
--- a/apps/management/src/stores/admin/comments.ts
+++ b/apps/management/src/stores/admin/comments.ts
@@ -1,5 +1,5 @@
 import { defineStore } from 'pinia'
-import { ref } from 'vue'
+import { computed, ref } from 'vue'
 import {
   commentsApi,
   type Comment,
@@ -7,7 +7,6 @@ import {
   type CommentType,
   type BulkCommentActionDto,
 } from '@/api/admin/comments'
-import { extractApiErrorMessage } from '@/utils/error'
 import { useAuthStore } from '@/stores/auth'
 import { PERM } from '@/constants/permissions'
 import { createCollectionSlice } from '@/stores/createCollectionSlice'
@@ -34,65 +33,42 @@ export const useCommentsStore = defineStore('adminComments', () => {
   const comments = collection.items
   const total = collection.total
   const currentComment = ref<Comment | null>(null)
-  const loading = collection.isLoading
-  const error = collection.error
+  const loading = computed(() => collection.isLoading.value || collection.mutationLoading.value)
+  const error = computed(() => collection.error.value || collection.mutationError.value)
   const fetchComments = collection.fetch
 
   async function fetchComment(id: string, type: CommentType) {
-    loading.value = true
-    error.value = null
-    try {
+    return collection.runMutation(async () => {
       const comment = await commentsApi.getComment(id, type)
       currentComment.value = comment
       return comment
-    } catch (err: unknown) {
-      error.value = extractApiErrorMessage(err, 'Failed to fetch comment')
-      throw err
-    } finally {
-      loading.value = false
-    }
+    }, 'Failed to fetch comment')
   }
 
   async function flagComment(id: string, type: CommentType, reason: string) {
-    loading.value = true
-    error.value = null
-    try {
+    return collection.runMutation(async () => {
       const updatedComment = await commentsApi.flagComment(id, type, reason)
       const index = comments.value.findIndex((c) => c.id === id)
       if (index !== -1 && updatedComment) {
         comments.value = comments.value.map((c) => (c.id === id ? updatedComment : c))
       }
       return updatedComment
-    } catch (err: unknown) {
-      error.value = extractApiErrorMessage(err, 'Failed to flag comment')
-      throw err
-    } finally {
-      loading.value = false
-    }
+    }, 'Failed to flag comment')
   }
 
   async function unflagComment(id: string, type: CommentType) {
-    loading.value = true
-    error.value = null
-    try {
+    return collection.runMutation(async () => {
       const updatedComment = await commentsApi.unflagComment(id, type)
       const index = comments.value.findIndex((c) => c.id === id)
       if (index !== -1 && updatedComment) {
         comments.value = comments.value.map((c) => (c.id === id ? updatedComment : c))
       }
       return updatedComment
-    } catch (err: unknown) {
-      error.value = extractApiErrorMessage(err, 'Failed to unflag comment')
-      throw err
-    } finally {
-      loading.value = false
-    }
+    }, 'Failed to unflag comment')
   }
 
   async function deleteComment(id: string, type: CommentType) {
-    loading.value = true
-    error.value = null
-    try {
+    return collection.runMutation(async () => {
       await commentsApi.deleteComment(id, type)
       const index = comments.value.findIndex((c) => c.id === id)
       if (index !== -1) {
@@ -102,12 +78,7 @@ export const useCommentsStore = defineStore('adminComments', () => {
           ...comments.value.slice(index + 1),
         ]
       }
-    } catch (err: unknown) {
-      error.value = extractApiErrorMessage(err, 'Failed to delete comment')
-      throw err
-    } finally {
-      loading.value = false
-    }
+    }, 'Failed to delete comment')
   }
 
   /**
@@ -116,17 +87,10 @@ export const useCommentsStore = defineStore('adminComments', () => {
    * the {@link bulkModerate} workflow, not on the wire shape.
    */
   async function runBulkAction(data: BulkCommentActionDto): Promise<void> {
-    loading.value = true
-    error.value = null
-    try {
+    return collection.runMutation(async () => {
       await commentsApi.bulkAction(data)
       await fetchComments(lastParams.value)
-    } catch (err: unknown) {
-      error.value = extractApiErrorMessage(err, 'Failed to perform bulk action')
-      throw err
-    } finally {
-      loading.value = false
-    }
+    }, 'Failed to perform bulk action')
   }
 
   /**
@@ -208,14 +172,15 @@ export const useCommentsStore = defineStore('adminComments', () => {
   }
 
   function clearError() {
-    error.value = null
+    collection.clearError()
+    collection.mutationError.value = null
   }
 
   function reset() {
     comments.value = []
     total.value = 0
-    loading.value = false
-    error.value = null
+    collection.clearError()
+    collection.mutationError.value = null
     lastParams.value = {}
   }
 
diff --git a/apps/management/src/stores/admin/dashboard.ts b/apps/management/src/stores/admin/dashboard.ts
index 2e55924705..e10ba4f2c5 100644
--- a/apps/management/src/stores/admin/dashboard.ts
+++ b/apps/management/src/stores/admin/dashboard.ts
@@ -7,27 +7,23 @@ import {
   type ChartQueryParams,
 } from '@/api/admin/dashboard'
 import { extractApiErrorMessage } from '@/utils/error'
+import { createValueRequest } from '@/stores/createValueRequest'
 export const useDashboardStore = defineStore('adminDashboard', () => {
   // Note: API returns unwrapped data (request.ts interceptor handles Result<T>)
   const stats = ref<DashboardStats | null>(null)
   const chartData = ref<ChartStatsResponse | null>(null)
-  const loading = ref(false)
-  const error = ref<string | null>(null)
+  const statsRequest = createValueRequest({
+    errorMessage: 'Failed to fetch dashboard stats',
+    rethrow: true,
+    onError: (err) => console.error('Failed to fetch dashboard stats:', err),
+  })
+  const loading = statsRequest.loading
+  const error = statsRequest.error
 
   async function fetchStats() {
-    loading.value = true
-    error.value = null
-    try {
-      const data = await dashboardApi.getStats()
-      stats.value = data
-      return data
-    } catch (err: unknown) {
-      error.value = extractApiErrorMessage(err, 'Failed to fetch dashboard stats')
-      console.error('Failed to fetch dashboard stats:', err)
-      throw err
-    } finally {
-      loading.value = false
-    }
+    const data = await statsRequest.run((signal) => dashboardApi.getStats(signal))
+    if (data !== null) stats.value = data
+    return data
   }
 
   async function fetchChartStats(params: ChartQueryParams = {}) {
diff --git a/apps/management/src/stores/admin/forum.ts b/apps/management/src/stores/admin/forum.ts
index 8371e2a83d..073ed8c058 100644
--- a/apps/management/src/stores/admin/forum.ts
+++ b/apps/management/src/stores/admin/forum.ts
@@ -1,5 +1,5 @@
 import { defineStore } from 'pinia'
-import { ref } from 'vue'
+import { computed, ref } from 'vue'
 import {
   forumApi,
   type ForumPost,
@@ -22,8 +22,9 @@ export const useForumStore = defineStore('adminForum', () => {
   })
   const posts = collection.items
   const totalPosts = collection.total
-  const postsLoading = collection.isLoading
-  const postsError = collection.error
+  const postsLoading = collection.mutationLoading
+  const combinedPostsLoading = computed(() => collection.isLoading.value || postsLoading.value)
+  const postsError = computed(() => collection.error.value || collection.mutationError.value)
   const fetchPosts = collection.fetch
 
   // Communities State
@@ -52,23 +53,15 @@ export const useForumStore = defineStore('adminForum', () => {
   }
 
   async function deletePost(id: string) {
-    postsLoading.value = true
-    try {
+    return collection.runMutation(async () => {
       await forumApi.deletePost(id)
       // Optimistic update or refresh
       await fetchPosts() // Refreshing is safer for pagination
-    } catch (err: unknown) {
-      const msg = extractApiErrorMessage(err, 'Failed to delete post')
-      postsError.value = msg
-      throw err
-    } finally {
-      postsLoading.value = false
-    }
+    }, 'Failed to delete post')
   }
 
   async function togglePin(post: ForumPost) {
-    postsLoading.value = true
-    try {
+    return collection.runMutation(async () => {
       if (post.isPinned) {
         await forumApi.unpinPost(post.id)
       } else {
@@ -79,17 +72,11 @@ export const useForumStore = defineStore('adminForum', () => {
       if (index !== -1 && posts.value[index]) {
         posts.value[index].isPinned = !post.isPinned
       }
-    } catch (err: unknown) {
-      postsError.value = 'Failed to update pin status'
-      throw err
-    } finally {
-      postsLoading.value = false
-    }
+    }, 'Failed to update pin status')
   }
 
   async function toggleLock(post: ForumPost) {
-    postsLoading.value = true
-    try {
+    return collection.runMutation(async () => {
       if (post.isLocked) {
         await forumApi.unlockPost(post.id)
       } else {
@@ -100,29 +87,19 @@ export const useForumStore = defineStore('adminForum', () => {
       if (index !== -1 && posts.value[index]) {
         posts.value[index].isLocked = !post.isLocked
       }
-    } catch (err: unknown) {
-      postsError.value = 'Failed to update lock status'
-      throw err
-    } finally {
-      postsLoading.value = false
-    }
+    }, 'Failed to update lock status')
   }
 
   async function bulkAction(ids: string[], action: BulkForumActionType) {
-    postsLoading.value = true
-    try {
+    return collection.runMutation(async () => {
       await forumApi.bulkAction({ ids, action })
       await fetchPosts()
-    } catch (err: unknown) {
-      postsError.value = 'Failed to perform bulk action'
-      throw err
-    } finally {
-      postsLoading.value = false
-    }
+    }, 'Failed to perform bulk action')
   }
 
   function clearError() {
-    postsError.value = null
+    collection.clearError()
+    collection.mutationError.value = null
   }
 
   // Post Detail Actions
@@ -186,7 +163,7 @@ export const useForumStore = defineStore('adminForum', () => {
     cancel: collection.cancel,
     posts,
     totalPosts,
-    postsLoading,
+    postsLoading: combinedPostsLoading,
     postsError,
     communities,
     communitiesLoading,
diff --git a/apps/management/src/stores/admin/moderation/moderationStore.ts b/apps/management/src/stores/admin/moderation/moderationStore.ts
index 0cc7ed1aa9..8e3eaa084b 100644
--- a/apps/management/src/stores/admin/moderation/moderationStore.ts
+++ b/apps/management/src/stores/admin/moderation/moderationStore.ts
@@ -18,6 +18,7 @@ import {
 } from '@/api/admin/moderation'
 import { extractApiErrorMessage } from '@/utils/error'
 import { createCollectionSlice } from '@/stores/createCollectionSlice'
+import { createValueRequest } from '@/stores/createValueRequest'
 
 export const TERMINAL_STATUSES: Readonly<Partial<Record<ModerationStatus, true>>> = {
   [ModerationStatus.RESOLVED]: true,
@@ -30,9 +31,9 @@ export const isTerminalStatus = (status: ModerationStatus): boolean =>
 /**
  * Moderation decision and collection store.
  *
- * Collection slices own queue, reports, appeals, and stats request state,
- * including cancellation and stale-response protection. Decision methods
- * own server-result reconciliation: claim patches its queue row, moderation
+ * Collection slices own queue, reports, and appeals request state. The
+ * value-request module owns stats request state, cancellation, and stale-response
+ * protection. Decision methods own server-result reconciliation: claim patches its queue row, moderation
  * actions remove terminal results or patch non-terminal results, batch actions
  * remove successful queue IDs, and appeal reviews patch their matching appeal.
  * Successful decisions trigger a best-effort stats refresh; views retain
@@ -47,8 +48,12 @@ export const useModerationStore = defineStore('adminModeration', () => {
   // Queue State
   // ============================================================================
   const stats = ref<ModerationStats | null>(null)
-  const statsLoading = ref(false)
-  const statsError = ref<string | null>(null)
+  const statsRequest = createValueRequest({
+    errorMessage: 'An error occurred',
+    onError: (err) => console.error('[ModerationStore] Failed to fetch stats:', err),
+  })
+  const statsLoading = statsRequest.loading
+  const statsError = statsRequest.error
 
   const pendingCount = computed(() => stats.value?.pendingCount ?? 0)
   const underReviewCount = computed(() => stats.value?.underReviewCount ?? 0)
@@ -92,33 +97,11 @@ export const useModerationStore = defineStore('adminModeration', () => {
   // ============================================================================
   const fetchQueue = queue.fetch
 
-  let statsController: AbortController | null = null
-  let statsSequence = 0
-
   async function fetchStats(forceRefresh = false) {
     if (!forceRefresh && stats.value) return stats.value
-    statsController?.abort()
-    const controller = new AbortController()
-    statsController = controller
-    const request = ++statsSequence
-    statsLoading.value = true
-    statsError.value = null
-    try {
-      const data = await moderationQueueApi.getStats(controller.signal)
-      if (request !== statsSequence || controller.signal.aborted) return null
-      stats.value = data
-      return data
-    } catch (err: unknown) {
-      if (request !== statsSequence || controller.signal.aborted) return null
-      statsError.value = extractErrorMessage(err)
-      console.error('[ModerationStore] Failed to fetch stats:', err)
-      return null
-    } finally {
-      if (statsController === controller) {
-        statsController = null
-        statsLoading.value = false
-      }
-    }
+    const data = await statsRequest.run((signal) => moderationQueueApi.getStats(signal))
+    if (data !== null) stats.value = data
+    return data
   }
 
   async function claimItem(id: string) {
@@ -213,11 +196,8 @@ export const useModerationStore = defineStore('adminModeration', () => {
     queue.reset()
     reportsCollection.reset()
     appealsCollection.reset()
-    statsController?.abort()
-    statsController = null
-    statsSequence += 1
+    statsRequest.cancel()
     stats.value = null
-    statsLoading.value = false
     statsError.value = null
   }
 
diff --git a/apps/management/src/stores/admin/notifications.ts b/apps/management/src/stores/admin/notifications.ts
index 4d861b5f4c..614ef628f8 100644
--- a/apps/management/src/stores/admin/notifications.ts
+++ b/apps/management/src/stores/admin/notifications.ts
@@ -1,4 +1,5 @@
 import { defineStore } from 'pinia'
+import { computed } from 'vue'
 import {
   adminNotificationsApi,
   type CreateNotificationDto,
@@ -6,7 +7,6 @@ import {
   type SystemAnnouncement,
   type AdminNotificationQueryParams,
 } from '@/api/admin/notifications'
-import { extractApiErrorMessage } from '@/utils/error'
 import { createCollectionSlice } from '@/stores/createCollectionSlice'
 export const useNotificationsStore = defineStore('admin-notifications', () => {
   const collection = createCollectionSlice<
@@ -28,49 +28,29 @@ export const useNotificationsStore = defineStore('admin-notifications', () => {
   })
   const announcements = collection.items
   const total = collection.total
-  const isLoading = collection.isLoading
-  const error = collection.error
+  const mutationLoading = collection.mutationLoading
+  const isLoading = computed(() => collection.isLoading.value || mutationLoading.value)
+  const error = computed(() => collection.error.value || collection.mutationError.value)
   function fetchAnnouncements(params?: AdminNotificationQueryParams) {
     return collection.fetch(params, { rethrow: true })
   }
 
   async function createNotification(data: CreateNotificationDto) {
-    isLoading.value = true
-    error.value = null
-    try {
+    return collection.runMutation(async () => {
       await adminNotificationsApi.create(data)
-    } catch (e: unknown) {
-      error.value = extractApiErrorMessage(e, 'Failed to create notification')
-      throw e
-    } finally {
-      isLoading.value = false
-    }
+    }, 'Failed to create notification')
   }
 
   async function updateNotification(id: string, data: UpdateNotificationDto) {
-    isLoading.value = true
-    error.value = null
-    try {
+    return collection.runMutation(async () => {
       await adminNotificationsApi.update(id, data)
-    } catch (e: unknown) {
-      error.value = extractApiErrorMessage(e, 'Failed to update notification')
-      throw e
-    } finally {
-      isLoading.value = false
-    }
+    }, 'Failed to update notification')
   }
 
   async function deleteAnnouncement(id: string) {
-    isLoading.value = true
-    error.value = null
-    try {
+    return collection.runMutation(async () => {
       await adminNotificationsApi.delete(id)
-    } catch (e: unknown) {
-      error.value = extractApiErrorMessage(e, 'Failed to delete announcement')
-      throw e
-    } finally {
-      isLoading.value = false
-    }
+    }, 'Failed to delete announcement')
   }
 
   return {
diff --git a/apps/management/src/stores/createCollectionSlice.test.ts b/apps/management/src/stores/createCollectionSlice.test.ts
index 7b2cc8718f..e776687b4b 100644
--- a/apps/management/src/stores/createCollectionSlice.test.ts
+++ b/apps/management/src/stores/createCollectionSlice.test.ts
@@ -96,17 +96,18 @@ describe('createCollectionSlice', () => {
     expect(slice.isLoading.value).toBe(false)
   })
 
-  it('leaves loading untouched when cancel owns no active request', () => {
-    const load = vi.fn().mockResolvedValue({ items: [], total: 0 })
-    const slice = createCollectionSlice<string, void>({ load })
+  it('cancel preserves independent mutation loading', async () => {
+    const slice = createCollectionSlice<string, void>({ load: vi.fn().mockResolvedValue({ items: [], total: 0 }) })
+    let finish!: () => void
+    const mutation = slice.runMutation(() => new Promise<void>((resolve) => { finish = resolve }), 'Failed')
 
-    // Stores alias isLoading for mutations/exports; with no collection
-    // request active, a table transition must not report that work done.
-    slice.isLoading.value = true
     slice.cancel()
 
-    expect(slice.isLoading.value).toBe(true)
-    expect(load).not.toHaveBeenCalled()
+    expect(slice.mutationLoading.value).toBe(true)
+    expect(slice.isLoading.value).toBe(false)
+    finish()
+    await mutation
+    expect(slice.mutationLoading.value).toBe(false)
   })
 
   it('cancels before reset clears collection state', async () => {
@@ -233,4 +234,99 @@ describe('createCollectionSlice', () => {
     expect(slice.items.value).toEqual(['alternate'])
     expect(load).not.toHaveBeenCalled()
   })
+
+
+  it('forwards an external abort only to its fetch and removes the listener', async () => {
+    let resolveFirst!: (page: { items: string[]; total: number }) => void
+    let resolveSecond!: (page: { items: string[]; total: number }) => void
+    let firstSignal!: AbortSignal
+    let secondSignal!: AbortSignal
+    const external = new AbortController()
+    const addListener = vi.spyOn(external.signal, 'addEventListener')
+    const removeListener = vi.spyOn(external.signal, 'removeEventListener')
+    const load = vi.fn((_params: number, signal?: AbortSignal) => {
+      if (_params === 1) {
+        firstSignal = signal!
+        return new Promise<{ items: string[]; total: number }>((resolve) => { resolveFirst = resolve })
+      }
+      secondSignal = signal!
+      return new Promise<{ items: string[]; total: number }>((resolve) => { resolveSecond = resolve })
+    })
+    const slice = createCollectionSlice<string, number>({ load })
+
+    const first = slice.fetch(1, { signal: external.signal })
+    external.abort()
+    expect(firstSignal.aborted).toBe(true)
+    const second = slice.fetch(2)
+    expect(secondSignal.aborted).toBe(false)
+    resolveFirst({ items: ['stale'], total: 1 })
+    resolveSecond({ items: ['current'], total: 1 })
+    await Promise.all([first, second])
+
+    expect(slice.items.value).toEqual(['current'])
+    expect(addListener).toHaveBeenCalledTimes(1)
+    expect(removeListener).toHaveBeenCalledTimes(1)
+  })
+
+  it('uses each fetch error message for its own failure', async () => {
+    const failure = {}
+    const slice = createCollectionSlice<string, void>({ load: vi.fn().mockRejectedValue(failure) })
+    await slice.fetch(undefined, { errorMessage: 'Custom collection failure' })
+    expect(slice.error.value).toBe('Custom collection failure')
+  })
+
+  it('clears the sibling error channel when a new operation starts', async () => {
+    const slice = createCollectionSlice<string, void>({ load: vi.fn() })
+    expect(slice.error).not.toBe(slice.mutationError)
+
+    const exportFailure = Promise.reject(new Error('export failed'))
+    await expect(
+      slice.runMutation(() => exportFailure, 'export failed'),
+    ).rejects.toThrow('export failed')
+    expect(slice.mutationError.value).toBe('export failed')
+
+    await slice.fetch()
+    expect(slice.mutationError.value).toBeNull()
+
+    const failingLoad = createCollectionSlice<string, void>({
+      load: vi.fn().mockRejectedValue(new Error('load failed')),
+    })
+    await failingLoad.fetch()
+    expect(failingLoad.error.value).toBe('load failed')
+
+    await failingLoad.runMutation(() => Promise.resolve('ok'), 'unused')
+    expect(failingLoad.error.value).toBeNull()
+    expect(failingLoad.mutationError.value).toBeNull()
+  })
+
+  it('surfaces a newer failure after clearing the sibling channel', async () => {
+    const slice = createCollectionSlice<string, void>({
+      load: vi.fn().mockRejectedValue(new Error('load failed')),
+    })
+    await slice.fetch()
+    expect(slice.error.value).toBe('load failed')
+
+    await expect(
+      slice.runMutation(() => Promise.reject(new Error('export failed')), 'export failed'),
+    ).rejects.toThrow('export failed')
+
+    expect(slice.error.value).toBeNull()
+    expect(slice.mutationError.value).toBe('export failed')
+  })
+
+  it('clearError dismisses both error channels', async () => {
+    const slice = createCollectionSlice<string, void>({
+      load: vi.fn().mockRejectedValue(new Error('load failed')),
+    })
+    await slice.fetch()
+    await expect(
+      slice.runMutation(() => Promise.reject(new Error('export failed')), 'export failed'),
+    ).rejects.toThrow('export failed')
+
+    slice.clearError()
+
+    expect(slice.error.value).toBeNull()
+    expect(slice.mutationError.value).toBeNull()
+  })
+
 })
diff --git a/apps/management/src/stores/createCollectionSlice.ts b/apps/management/src/stores/createCollectionSlice.ts
index 75a047b7ee..90612a3098 100644
--- a/apps/management/src/stores/createCollectionSlice.ts
+++ b/apps/management/src/stores/createCollectionSlice.ts
@@ -1,3 +1,4 @@
+import { createValueRequest } from '@ulticode/request-state'
 import { ref, type Ref } from 'vue'
 import { extractApiErrorMessage } from '@/utils/error'
 
@@ -12,6 +13,9 @@ export interface CollectionSlice<T, TParams> {
   total: Ref<number>
   isLoading: Ref<boolean>
   error: Ref<string | null>
+  mutationLoading: Ref<boolean>
+  mutationError: Ref<string | null>
+  runMutation: <T>(run: () => Promise<T>, errorMessage: string) => Promise<T>
   fetch: (params?: TParams, options?: CollectionFetchOptions) => Promise<void>
   fetchWith: (
     load: CollectionLoader<T, TParams, never>,
@@ -63,10 +67,25 @@ export function createCollectionSlice<T, TParams, TMetadata = never>(
 ): CollectionSlice<T, TParams> {
   const items = ref<T[]>([]) as Ref<T[]>
   const total = ref(0)
-  const isLoading = ref(false)
   const error = ref<string | null>(null)
-  let requestSequence = 0
-  let currentController: AbortController | null = null
+  const mutationLoading = ref(false)
+  const mutationError = ref<string | null>(null)
+  let activeFetchOptions: CollectionFetchOptions | undefined
+  const requestState = createValueRequest({
+    errorMessage: 'Failed to load collection',
+    getErrorMessage: (err, fallback) =>
+      extractApiErrorMessage(err, activeFetchOptions?.errorMessage ?? fallback),
+    onError: (err) => {
+      if (isCancellationError(err)) return
+      error.value = extractApiErrorMessage(
+        err,
+        activeFetchOptions?.errorMessage ?? 'Failed to load collection',
+      )
+      console.error('Failed to load collection:', err)
+      if (activeFetchOptions?.rethrow) throw err
+    },
+  })
+  const isLoading = requestState.loading
 
   async function runFetch<TLoadMetadata>(
     load: CollectionLoader<T, TParams, TLoadMetadata>,
@@ -74,40 +93,25 @@ export function createCollectionSlice<T, TParams, TMetadata = never>(
     fetchOptions?: CollectionFetchOptions,
     applyMetadata?: (metadata: TLoadMetadata) => void,
   ): Promise<void> {
-    currentController?.abort()
-    const controller = new AbortController()
-    currentController = controller
-    const request = ++requestSequence
-    const externalSignal = fetchOptions?.signal
-    const abortFromExternal = () => controller.abort()
-    externalSignal?.addEventListener('abort', abortFromExternal, { once: true })
-    if (externalSignal?.aborted) controller.abort()
-    isLoading.value = true
+    activeFetchOptions = fetchOptions
+    // Either operation clears both error channels: combined consumers read
+    // the two distinct refs as one banner, so a new fetch must not leave a
+    // sibling mutation error stale.
     error.value = null
-
-    try {
-      const page = await load(params as TParams, controller.signal)
-      if (request !== requestSequence || controller.signal.aborted || !page) return
-      items.value = page.items
-      total.value = page.total
-      if (page.metadata !== undefined) {
-        applyMetadata?.(page.metadata)
-      }
-    } catch (err: unknown) {
-      if (request !== requestSequence || controller.signal.aborted || isCancellationError(err)) return
-      error.value = extractApiErrorMessage(
-        err,
-        fetchOptions?.errorMessage ?? 'Failed to load collection',
-      )
-      console.error('Failed to load collection:', err)
-      if (fetchOptions?.rethrow) throw err
-    } finally {
-      externalSignal?.removeEventListener('abort', abortFromExternal)
-      if (currentController === controller) {
-        currentController = null
-        isLoading.value = false
-      }
-    }
+    mutationError.value = null
+
+    await requestState.run(
+      (signal) => load(params as TParams, signal),
+      fetchOptions?.signal,
+      (page) => {
+        if (!page) return
+        items.value = page.items
+        total.value = page.total
+        if (page.metadata !== undefined) {
+          applyMetadata?.(page.metadata)
+        }
+      },
+    )
   }
 
   function fetch(params?: TParams, fetchOptions?: CollectionFetchOptions): Promise<void> {
@@ -132,18 +136,27 @@ export function createCollectionSlice<T, TParams, TMetadata = never>(
 
   function clearError(): void {
     error.value = null
+    mutationError.value = null
   }
 
-  function cancel(): void {
-    // Only release loading when this slice owns the active request: stores
-    // also alias isLoading for mutations and exports, and a table transition
-    // must not report those complete early.
-    if (currentController) {
-      currentController.abort()
-      currentController = null
-      isLoading.value = false
+  async function runMutation<T>(run: () => Promise<T>, errorMessage: string): Promise<T> {
+    mutationLoading.value = true
+    mutationError.value = null
+    error.value = null
+    try {
+      return await run()
+    } catch (err: unknown) {
+      mutationError.value = extractApiErrorMessage(err, errorMessage)
+      console.error('Collection mutation failed:', err)
+      throw err
+    } finally {
+      mutationLoading.value = false
     }
-    requestSequence += 1
+  }
+
+  function cancel(): void {
+    // Only release loading when this slice owns the active fetch request.
+    if (requestState.isActive()) requestState.cancel()
   }
 
   function reset(): void {
@@ -157,6 +170,9 @@ export function createCollectionSlice<T, TParams, TMetadata = never>(
     total,
     isLoading,
     error,
+    mutationLoading,
+    mutationError,
+    runMutation,
     fetch,
     fetchWith,
     updateItems,
diff --git a/apps/management/src/stores/createValueRequest.test.ts b/apps/management/src/stores/createValueRequest.test.ts
new file mode 100644
index 0000000000..c065647c47
--- /dev/null
+++ b/apps/management/src/stores/createValueRequest.test.ts
@@ -0,0 +1,38 @@
+import { describe, expect, it } from 'vitest'
+import { createValueRequest } from './createValueRequest'
+
+describe('createValueRequest', () => {
+  it('drops a stale response when a newer request starts', async () => {
+    const request = createValueRequest({ errorMessage: 'Failed to load value' })
+    let resolveFirst!: (value: string) => void
+    const first = request.run(() => new Promise<string>((resolve) => {
+      resolveFirst = resolve
+    }))
+
+    const second = request.run(async () => 'newer')
+    resolveFirst('older')
+
+    await expect(second).resolves.toBe('newer')
+    await expect(first).resolves.toBeNull()
+    expect(request.loading.value).toBe(false)
+  })
+
+  it('clears loading and aborts the active request on cancel', async () => {
+    const request = createValueRequest({ errorMessage: 'Failed to load value' })
+    let signal!: AbortSignal
+    const pending = request.run((requestSignal) => {
+      signal = requestSignal
+      return new Promise<string>((_resolve, reject) => {
+        requestSignal.addEventListener('abort', () => reject(new DOMException('Aborted', 'AbortError')), {
+          once: true,
+        })
+      })
+    })
+
+    request.cancel()
+
+    expect(signal.aborted).toBe(true)
+    expect(request.loading.value).toBe(false)
+    await expect(pending).resolves.toBeNull()
+  })
+})
diff --git a/apps/management/src/stores/createValueRequest.ts b/apps/management/src/stores/createValueRequest.ts
new file mode 100644
index 0000000000..401353f833
--- /dev/null
+++ b/apps/management/src/stores/createValueRequest.ts
@@ -0,0 +1,16 @@
+import { createValueRequest as createSharedValueRequest } from '@ulticode/request-state'
+import { extractApiErrorMessage } from '@/utils/error'
+
+interface CreateValueRequestOptions {
+  errorMessage: string
+  rethrow?: boolean
+  onError?: (err: unknown) => void
+}
+
+/** Newest-wins request state and cancellation policy for single-value reads. */
+export function createValueRequest(options: CreateValueRequestOptions) {
+  return createSharedValueRequest({
+    ...options,
+    getErrorMessage: extractApiErrorMessage,
+  })
+}
diff --git a/apps/management/src/views/contests/ContestDetailView.vue b/apps/management/src/views/contests/ContestDetailView.vue
index 885cbaf983..f7e4f7dd3b 100644
--- a/apps/management/src/views/contests/ContestDetailView.vue
+++ b/apps/management/src/views/contests/ContestDetailView.vue
@@ -1,9 +1,10 @@
 <script setup lang="ts">
+import { contestPermissionRules } from '@/composables/domainPermissionMaps'
+import { usePermissionMap } from '@/composables/usePermissionMap'
 import { ref, computed, onMounted } from 'vue'
 import { useRoute, useRouter } from 'vue-router'
 import { useI18n } from 'vue-i18n'
 import { useContestsStore } from '@/stores/admin/contests'
-import { useContestPermissions } from '@/composables/useContestPermissions'
 import { Button } from '@/components/ui/button'
 import { Skeleton } from '@/components/ui/skeleton'
 import { Tabs, TabsList, TabsTrigger, TabsContent } from '@/components/ui/tabs'
@@ -29,7 +30,7 @@ import ContestRankingsTab from './components/ContestRankingsTab.vue'
 const route = useRoute()
 const router = useRouter()
 const contestsStore = useContestsStore()
-const { can } = useContestPermissions()
+const can = { contest: usePermissionMap(contestPermissionRules) }
 const { t } = useI18n()
 
 const contestId = computed(() => route.params.id as string)
diff --git a/apps/management/src/views/contests/ContestsListView.vue b/apps/management/src/views/contests/ContestsListView.vue
index ffd3766dd0..f6173852b1 100644
--- a/apps/management/src/views/contests/ContestsListView.vue
+++ b/apps/management/src/views/contests/ContestsListView.vue
@@ -1,4 +1,6 @@
 <script setup lang="ts">
+import { contestPermissionRules } from '@/composables/domainPermissionMaps'
+import { usePermissionMap } from '@/composables/usePermissionMap'
 import { ref, computed, onMounted } from 'vue'
 import { toast } from 'vue-sonner'
 import { useI18n } from 'vue-i18n'
@@ -16,10 +18,9 @@ import EntityActionDialog from '@/components/shared/EntityActionDialog.vue'
 import ContestDetailDrawer from './ContestDetailDrawer.vue'
 import { createColumns } from './columns'
 import { useRemoteTable } from '@/composables/useRemoteTable'
-import { useContestPermissions } from '@/composables/useContestPermissions'
 
 const contestsStore = useContestsStore()
-const { can } = useContestPermissions()
+const can = { contest: usePermissionMap(contestPermissionRules) }
 const { t } = useI18n()
 
 const selectedContestId = ref<string | null>(null)
diff --git a/apps/management/src/views/contests/ScoringRulesView.vue b/apps/management/src/views/contests/ScoringRulesView.vue
index 69c71eb7db..06229fafba 100644
--- a/apps/management/src/views/contests/ScoringRulesView.vue
+++ b/apps/management/src/views/contests/ScoringRulesView.vue
@@ -1,4 +1,6 @@
 <script setup lang="ts">
+import { contestPermissionRules, systemPermissionRules } from '@/composables/domainPermissionMaps'
+import { usePermissionMap } from '@/composables/usePermissionMap'
 import { ref, computed, onMounted, h } from 'vue'
 import { useI18n } from 'vue-i18n'
 import type { ColumnDef } from '@tanstack/vue-table'
@@ -24,8 +26,6 @@ import {
   DropdownMenuTrigger,
 } from '@/components/ui/dropdown-menu'
 import { Switch } from '@/components/ui/switch'
-import { useContestPermissions } from '@/composables/useContestPermissions'
-import { useSystemPermissions } from '@/composables/useSystemPermissions'
 import {
   scoringRulesApi,
   type ScoringRule,
@@ -38,8 +38,8 @@ import ScoringRuleForm from './components/ScoringRuleForm.vue'
 import EntityActionDialog from '@/components/shared/EntityActionDialog.vue'
 
 const { t } = useI18n()
-const { can: contestCan } = useContestPermissions()
-const { can: systemCan } = useSystemPermissions()
+const contestCan = { contest: usePermissionMap(contestPermissionRules) }
+const systemCan = { system: usePermissionMap(systemPermissionRules) }
 
 // State
 const includeInactive = ref(false)
diff --git a/apps/management/src/views/contests/columns.test.ts b/apps/management/src/views/contests/columns.test.ts
index bb1d4458f6..622ba92efd 100644
--- a/apps/management/src/views/contests/columns.test.ts
+++ b/apps/management/src/views/contests/columns.test.ts
@@ -3,7 +3,7 @@ import { mount } from '@vue/test-utils'
 import { describe, expect, it, vi } from 'vitest'
 import type { Contest } from '@/api/admin/contests'
 import { createColumns, type ContestActions } from './columns'
-import type { ContestPermissionMap } from '@/composables/useContestPermissions'
+import type { ContestPermissionMap } from '@/composables/domainPermissionMaps'
 
 const actions: ContestActions = {
   viewContest: vi.fn(),
diff --git a/apps/management/src/views/contests/columns.ts b/apps/management/src/views/contests/columns.ts
index 823f58adc8..79a4984d75 100644
--- a/apps/management/src/views/contests/columns.ts
+++ b/apps/management/src/views/contests/columns.ts
@@ -17,7 +17,7 @@ import { createSelectionColumn } from '@/components/table/selectionColumn'
 import { createEntityActionsMenu } from '@/components/table/entityActions'
 import type { Contest } from '@/api/admin/contests'
 import { formatDate } from '@/lib/format/date'
-import type { ContestPermissionMap } from '@/composables/useContestPermissions'
+import type { ContestPermissionMap } from '@/composables/domainPermissionMaps'
 import { badge, CONTEST_TYPE_COLOR_MAP, CONTEST_STATUS_COLOR_MAP } from '@/components/ui/terminal'
 
 export interface ContestActions {
diff --git a/apps/management/src/views/forum/ForumPostDetailView.vue b/apps/management/src/views/forum/ForumPostDetailView.vue
index b567d9c8fd..e8f989056f 100644
--- a/apps/management/src/views/forum/ForumPostDetailView.vue
+++ b/apps/management/src/views/forum/ForumPostDetailView.vue
@@ -1,9 +1,10 @@
 <script setup lang="ts">
+import { forumPermissionRules } from '@/composables/domainPermissionMaps'
+import { usePermissionMap } from '@/composables/usePermissionMap'
 import { ref, computed } from 'vue'
 import { useRoute, useRouter } from 'vue-router'
 import { useI18n } from 'vue-i18n'
 import { useForumStore } from '@/stores/admin/forum'
-import { useForumPermissions } from '@/composables/useForumPermissions'
 import { Button } from '@/components/ui/button'
 import { Skeleton } from '@/components/ui/skeleton'
 import { Tabs, TabsList, TabsTrigger } from '@/components/ui/tabs'
@@ -29,7 +30,7 @@ const router = useRouter()
 const route = useRoute()
 const { t } = useI18n()
 const forumStore = useForumStore()
-const { can } = useForumPermissions()
+const can = { forum: usePermissionMap(forumPermissionRules) }
 
 const deleteDialogOpen = ref(false)
 const flagDialogOpen = ref(false)
diff --git a/apps/management/src/views/forum/ForumPostsListView.vue b/apps/management/src/views/forum/ForumPostsListView.vue
index b70a9707a0..fd1ae82b23 100644
--- a/apps/management/src/views/forum/ForumPostsListView.vue
+++ b/apps/management/src/views/forum/ForumPostsListView.vue
@@ -1,4 +1,6 @@
 <script setup lang="ts">
+import { forumPermissionRules } from '@/composables/domainPermissionMaps'
+import { usePermissionMap } from '@/composables/usePermissionMap'
 import { ref, computed, onMounted } from 'vue'
 import { useRouter } from 'vue-router'
 import { useI18n } from 'vue-i18n'
@@ -15,12 +17,11 @@ import DataTableToolbar, { type Filter } from '@/components/table/DataTableToolb
 import EntityActionDialog from '@/components/shared/EntityActionDialog.vue'
 import { createColumns } from './columns'
 import { useRemoteTable } from '@/composables/useRemoteTable'
-import { useForumPermissions } from '@/composables/useForumPermissions'
 
 const router = useRouter()
 const { t } = useI18n()
 const forumStore = useForumStore()
-const { can } = useForumPermissions()
+const can = { forum: usePermissionMap(forumPermissionRules) }
 
 
 const selectedPostId = ref<string | null>(null)
diff --git a/apps/management/src/views/forum/columns.ts b/apps/management/src/views/forum/columns.ts
index 284cd85e6b..b80407bb5d 100644
--- a/apps/management/src/views/forum/columns.ts
+++ b/apps/management/src/views/forum/columns.ts
@@ -16,7 +16,7 @@ import { createEntityActionsMenu } from '@/components/table/entityActions'
 import { badge } from '@/components/ui/terminal'
 import type { ForumPost } from '@/api/admin/forum'
 import { formatDate } from '@/lib/format/date'
-import type { ForumPermissionMap } from '@/composables/useForumPermissions'
+import type { ForumPermissionMap } from '@/composables/domainPermissionMaps'
 
 export interface ForumPostActions {
   viewPostDetails: (post: ForumPost) => void
diff --git a/apps/management/src/views/help/HelpView.vue b/apps/management/src/views/help/HelpView.vue
index b7ac4f1698..ec9b5662d3 100644
--- a/apps/management/src/views/help/HelpView.vue
+++ b/apps/management/src/views/help/HelpView.vue
@@ -7,15 +7,18 @@
  * the app version pulled from Vite's build-time env, and a small set of
  * shortcuts to common admin actions.
  */
+import {
+  userPermissionRules,
+  problemPermissionRules,
+  analyticsPermissionRules,
+} from '@/composables/domainPermissionMaps'
+import { usePermissionMap } from '@/composables/usePermissionMap'
 import { computed } from 'vue'
 import { useI18n } from 'vue-i18n'
 import { useRouter } from 'vue-router'
 import { Card, CardContent, CardDescription, CardHeader, CardTitle } from '@/components/ui/card'
 import { Button } from '@/components/ui/button'
 import { useAuthStore } from '@/stores/auth'
-import { useUserPermissions } from '@/composables/useUserPermissions'
-import { useProblemPermissions } from '@/composables/useProblemPermissions'
-import { useAnalyticsPermissions } from '@/composables/useAnalyticsPermissions'
 import {
   IconKeyboard,
   IconBolt,
@@ -31,9 +34,9 @@ defineOptions({ name: 'HelpView' })
 const { t } = useI18n()
 const router = useRouter()
 const authStore = useAuthStore()
-const { can: userCan } = useUserPermissions()
-const { can: problemCan } = useProblemPermissions()
-const { can: analyticsCan } = useAnalyticsPermissions()
+const userCan = { user: usePermissionMap(userPermissionRules) }
+const problemCan = { problem: usePermissionMap(problemPermissionRules) }
+const analyticsCan = { analytics: usePermissionMap(analyticsPermissionRules) }
 
 /** Build-time injected by Vite. Empty string when not built. */
 const appVersion = computed(() => (import.meta.env.VITE_APP_VERSION as string | undefined) || 'dev')
diff --git a/apps/management/src/views/problem-lists/ProblemListsListView.vue b/apps/management/src/views/problem-lists/ProblemListsListView.vue
index 56fec57745..14aec5c343 100644
--- a/apps/management/src/views/problem-lists/ProblemListsListView.vue
+++ b/apps/management/src/views/problem-lists/ProblemListsListView.vue
@@ -1,4 +1,6 @@
 <script setup lang="ts">
+import { problemListPermissionRules } from '@/composables/domainPermissionMaps'
+import { usePermissionMap } from '@/composables/usePermissionMap'
 import { ref, computed, onMounted } from 'vue'
 import { useRouter } from 'vue-router'
 import { useI18n } from 'vue-i18n'
@@ -12,13 +14,12 @@ import DataTable from '@/components/table/DataTable.vue'
 import DataTableToolbar, { type Filter } from '@/components/table/DataTableToolbar.vue'
 import EntityActionDialog from '@/components/shared/EntityActionDialog.vue'
 import { useRemoteTable } from '@/composables/useRemoteTable'
-import { useProblemListPermissions } from '@/composables/useProblemListPermissions'
 import { createColumns } from './columns'
 
 const router = useRouter()
 const { t } = useI18n()
 const store = useAdminProblemListsStore()
-const { can } = useProblemListPermissions()
+const can = { problemList: usePermissionMap(problemListPermissionRules) }
 
 
 const selectedListId = ref<string | null>(null)
diff --git a/apps/management/src/views/problem-lists/columns.ts b/apps/management/src/views/problem-lists/columns.ts
index 6f2f322010..096efb16bb 100644
--- a/apps/management/src/views/problem-lists/columns.ts
+++ b/apps/management/src/views/problem-lists/columns.ts
@@ -14,7 +14,7 @@ import { createEntityActionsMenu } from '@/components/table/entityActions'
 import type { ProblemList } from '@/api/admin/problem-lists'
 import { formatDate } from '@/lib/format/date'
 import { badge } from '@/components/ui/terminal'
-import type { ProblemListPermissionMap } from '@/composables/useProblemListPermissions'
+import type { ProblemListPermissionMap } from '@/composables/domainPermissionMaps'
 
 export interface ProblemListActions {
   editList: (id: string) => void
diff --git a/apps/management/src/views/problems/ProblemsListView.vue b/apps/management/src/views/problems/ProblemsListView.vue
index 6d7a1ad512..750e5f421f 100644
--- a/apps/management/src/views/problems/ProblemsListView.vue
+++ b/apps/management/src/views/problems/ProblemsListView.vue
@@ -1,4 +1,6 @@
 <script setup lang="ts">
+import { problemPermissionRules } from '@/composables/domainPermissionMaps'
+import { usePermissionMap } from '@/composables/usePermissionMap'
 import { ref, computed, onMounted } from 'vue'
 import { useRouter } from 'vue-router'
 import { useI18n } from 'vue-i18n'
@@ -34,12 +36,11 @@ import { useRemoteTable } from '@/composables/useRemoteTable'
 import { useProblemFilters, type ProblemTableFilters } from './composables/useProblemFilters'
 import { useProblemActions } from './composables/useProblemActions'
 import { useProblemColumns } from './composables/useProblemColumns'
-import { useProblemPermissions } from '@/composables/useProblemPermissions'
 
 const { t } = useI18n()
 const router = useRouter()
 const problemsStore = useProblemsStore()
-const { can } = useProblemPermissions()
+const can = { problem: usePermissionMap(problemPermissionRules) }
 
 const problemFilters = useProblemFilters()
 const { buildExportParams } = problemFilters
diff --git a/apps/management/src/views/problems/composables/useProblemColumns.test.ts b/apps/management/src/views/problems/composables/useProblemColumns.test.ts
index b226624b25..ead3f3884d 100644
--- a/apps/management/src/views/problems/composables/useProblemColumns.test.ts
+++ b/apps/management/src/views/problems/composables/useProblemColumns.test.ts
@@ -4,7 +4,7 @@ import { createI18n } from 'vue-i18n'
 import { describe, expect, it, vi } from 'vitest'
 import type { Problem } from '@/api/admin/problems'
 import { useProblemColumns, type ProblemActions } from './useProblemColumns'
-import type { ProblemPermissionMap } from '@/composables/useProblemPermissions'
+import type { ProblemPermissionMap } from '@/composables/domainPermissionMaps'
 
 const actions: ProblemActions = {
   viewProblem: vi.fn(),
diff --git a/apps/management/src/views/problems/composables/useProblemColumns.ts b/apps/management/src/views/problems/composables/useProblemColumns.ts
index f1da93ac97..7ca3de8a27 100644
--- a/apps/management/src/views/problems/composables/useProblemColumns.ts
+++ b/apps/management/src/views/problems/composables/useProblemColumns.ts
@@ -26,7 +26,7 @@ import { badge, DIFFICULTY_COLOR_MAP } from '@/components/ui/terminal'
 import { createSelectionColumn } from '@/components/table/selectionColumn'
 import { createEntityActionsMenu } from '@/components/table/entityActions'
 import { Difficulty, type Problem } from '@/api/admin/problems'
-import type { ProblemPermissionMap } from '@/composables/useProblemPermissions'
+import type { ProblemPermissionMap } from '@/composables/domainPermissionMaps'
 
 function getDifficultyIcon(difficulty: Difficulty) {
   switch (difficulty) {
diff --git a/apps/management/src/views/solutions/SolutionDetailView.vue b/apps/management/src/views/solutions/SolutionDetailView.vue
index 29f80d645d..dfa489d020 100644
--- a/apps/management/src/views/solutions/SolutionDetailView.vue
+++ b/apps/management/src/views/solutions/SolutionDetailView.vue
@@ -1,9 +1,10 @@
 <script setup lang="ts">
+import { solutionPermissionRules } from '@/composables/domainPermissionMaps'
+import { usePermissionMap } from '@/composables/usePermissionMap'
 import { ref, computed, onMounted } from 'vue'
 import { useRoute, useRouter } from 'vue-router'
 import { useI18n } from 'vue-i18n'
 import { useSolutionsStore } from '@/stores/admin/solutions'
-import { useSolutionPermissions } from '@/composables/useSolutionPermissions'
 import { Button } from '@/components/ui/button'
 import { Skeleton } from '@/components/ui/skeleton'
 import { ArrowLeft, Flag, Eye, Trash, FileText, User } from 'lucide-vue-next'
@@ -15,7 +16,7 @@ import EntityActionDialog from '@/components/shared/EntityActionDialog.vue'
 const router = useRouter()
 const route = useRoute()
 const solutionsStore = useSolutionsStore()
-const { can } = useSolutionPermissions()
+const can = { solution: usePermissionMap(solutionPermissionRules) }
 const { t } = useI18n()
 
 const isInitialLoad = ref(true)
diff --git a/apps/management/src/views/solutions/SolutionsListView.vue b/apps/management/src/views/solutions/SolutionsListView.vue
index 3968b856f2..6f88fee2c7 100644
--- a/apps/management/src/views/solutions/SolutionsListView.vue
+++ b/apps/management/src/views/solutions/SolutionsListView.vue
@@ -1,4 +1,6 @@
 <script setup lang="ts">
+import { solutionPermissionRules } from '@/composables/domainPermissionMaps'
+import { usePermissionMap } from '@/composables/usePermissionMap'
 import { ref, computed, onMounted } from 'vue'
 import { useRouter } from 'vue-router'
 import { useI18n } from 'vue-i18n'
@@ -15,11 +17,10 @@ import DataTableToolbar, { type Filter } from '@/components/table/DataTableToolb
 import EntityActionDialog from '@/components/shared/EntityActionDialog.vue'
 import { createColumns } from './columns'
 import { useRemoteTable } from '@/composables/useRemoteTable'
-import { useSolutionPermissions } from '@/composables/useSolutionPermissions'
 
 const router = useRouter()
 const solutionsStore = useSolutionsStore()
-const { can } = useSolutionPermissions()
+const can = { solution: usePermissionMap(solutionPermissionRules) }
 const { t } = useI18n()
 
 
diff --git a/apps/management/src/views/solutions/columns.ts b/apps/management/src/views/solutions/columns.ts
index a5557e2580..7f92d231a3 100644
--- a/apps/management/src/views/solutions/columns.ts
+++ b/apps/management/src/views/solutions/columns.ts
@@ -15,7 +15,7 @@ import { createEntityActionsMenu } from '@/components/table/entityActions'
 import { badge } from '@/components/ui/terminal'
 import type { SolutionListItem } from '@/api/admin/solutions'
 import { formatDate } from '@/lib/format/date'
-import type { SolutionPermissionMap } from '@/composables/useSolutionPermissions'
+import type { SolutionPermissionMap } from '@/composables/domainPermissionMaps'
 
 export interface SolutionActions {
   viewSolution: (id: string) => void
diff --git a/apps/management/src/views/tags/TagsListView.vue b/apps/management/src/views/tags/TagsListView.vue
index ec0787efcc..b8b5a6087c 100644
--- a/apps/management/src/views/tags/TagsListView.vue
+++ b/apps/management/src/views/tags/TagsListView.vue
@@ -1,4 +1,6 @@
 <script setup lang="ts">
+import { tagPermissionRules } from '@/composables/domainPermissionMaps'
+import { usePermissionMap } from '@/composables/usePermissionMap'
 import { ref, computed, onMounted, h } from 'vue'
 import { useI18n } from 'vue-i18n'
 import type { ColumnDef } from '@tanstack/vue-table'
@@ -32,11 +34,10 @@ import TagEditDialog from './TagEditDialog.vue'
 import TagMergeDialog from './TagMergeDialog.vue'
 import EntityActionDialog from '@/components/shared/EntityActionDialog.vue'
 import { useRemoteTable } from '@/composables/useRemoteTable'
-import { useTagPermissions } from '@/composables/useTagPermissions'
 
 const { t } = useI18n()
 const tagsStore = useTagsStore()
-const { can } = useTagPermissions()
+const can = { tag: usePermissionMap(tagPermissionRules) }
 
 
 const selectedTag = ref<Tag | null>(null)
diff --git a/apps/management/src/views/users/UsersListView.vue b/apps/management/src/views/users/UsersListView.vue
index 914e90c078..d1eda741f4 100644
--- a/apps/management/src/views/users/UsersListView.vue
+++ b/apps/management/src/views/users/UsersListView.vue
@@ -1,4 +1,6 @@
 <script setup lang="ts">
+import { userPermissionRules } from '@/composables/domainPermissionMaps'
+import { usePermissionMap } from '@/composables/usePermissionMap'
 import { ref, computed, onMounted } from 'vue'
 import { useI18n } from 'vue-i18n'
 import { toast } from 'vue-sonner'
@@ -30,12 +32,11 @@ import UserResetPasswordDialog from './UserResetPasswordDialog.vue'
 // Terminal UI components available for future use
 // import { TerminalBadge, DataBlock } from '@/components/ui/terminal'
 import { useRemoteTable } from '@/composables/useRemoteTable'
-import { useUserPermissions } from '@/composables/useUserPermissions'
 import { createColumns } from './columns'
 
 const { t } = useI18n()
 const usersStore = useUsersStore()
-const { can } = useUserPermissions()
+const can = { user: usePermissionMap(userPermissionRules) }
 
 const selectedUserId = ref<string | null>(null)
 const selectedUsername = ref<string | null>(null)
diff --git a/apps/management/src/views/users/columns.ts b/apps/management/src/views/users/columns.ts
index ebe3067c73..5f35f0bdaf 100644
--- a/apps/management/src/views/users/columns.ts
+++ b/apps/management/src/views/users/columns.ts
@@ -14,7 +14,7 @@ import { createEntityActionsMenu } from '@/components/table/entityActions'
 import { badge, USER_ROLE_COLOR_MAP } from '@/components/ui/terminal'
 import type { User } from '@/api/admin/users'
 import { formatDate } from '@/lib/format/date'
-import type { UserPermissionMap } from '@/composables/useUserPermissions'
+import type { UserPermissionMap } from '@/composables/domainPermissionMaps'
 
 export interface UserActions {
   viewUser: (user: User) => void
diff --git a/apps/management/tsconfig.app.json b/apps/management/tsconfig.app.json
index 8349821541..b5366b90d6 100644
--- a/apps/management/tsconfig.app.json
+++ b/apps/management/tsconfig.app.json
@@ -11,6 +11,7 @@
     "../../packages/sidebar-menu/src/**/*.vue",
     "../../packages/markdown-utils/src/**/*",
     "../../packages/http-client/src/**/*",
+    "../../packages/request-state/src/**/*",
     "../../packages/locale-preference/src/**/*",
     "../../packages/datetime-utils/src/**/*",
     "../../packages/badge-config/src/**/*",
diff --git a/packages/AGENTS.md b/packages/AGENTS.md
index 39339c5496..85f3375f6f 100644
--- a/packages/AGENTS.md
+++ b/packages/AGENTS.md
@@ -9,6 +9,7 @@ Each package owns one focused cross-app seam. Current packages and their manifes
 - `auth-core`, `auth-ui`: authentication state, CSRF, permissions, and reusable auth UI.
 - `http-client`: shared Axios behavior, retries, request deduplication, and auth-failure coordination.
 - `domain-types`, `sandbox-types`: cross-surface contracts.
+- `request-state`: focused newest-wins request-state policy shared by both apps.
 - `markdown-utils`: Markdown/KaTeX rendering and sanitization.
 - `theme`, `design-system`: theme state, bootstrap, tokens, and CSS primitives.
 - `badge-config`, `submission-status`, `sidebar-menu`, `datetime-utils`, `locale-preference`: focused presentation and preference seams.
diff --git a/packages/http-client/src/index.ts b/packages/http-client/src/index.ts
index 78b32459b0..2181642618 100644
--- a/packages/http-client/src/index.ts
+++ b/packages/http-client/src/index.ts
@@ -279,11 +279,6 @@ export function createHttpClient(config: HttpClientConfig): HttpClient {
       attemptRegistry.complete(getRequestKey(request), cfg._attempt)
     }
   }
-  const ownsPendingRequest = (request: InternalAxiosRequestConfig): boolean => {
-    if (!shouldDeduplicate(request, dedupPolicy)) return true
-    const attempt = (request as ConfigWithMetadata)._attempt
-    return attempt ? attemptRegistry.owns(getRequestKey(request), attempt) : false
-  }
   type ViteImportMeta = ImportMeta & {
     env?: {
       DEV?: boolean
@@ -414,7 +409,7 @@ export function createHttpClient(config: HttpClientConfig): HttpClient {
           retryCount < maxRetry &&
           (!error.response || error.response.status >= 500)
         ) {
-          if (!ownsPendingRequest(cfg)) {
+          if (!attemptRegistry.owns(getRequestKey(cfg), cfg._attempt)) {
             completeAttempt(cfg)
             return Promise.reject(ApiError.fromAxiosError(error))
           }
@@ -422,7 +417,7 @@ export function createHttpClient(config: HttpClientConfig): HttpClient {
           cfg._metadata = metadata
           const delay = cfg.retryDelay || 1000 * (retryCount + 1)
           await new Promise((resolve) => setTimeout(resolve, delay))
-          if (!ownsPendingRequest(cfg)) {
+          if (!attemptRegistry.owns(getRequestKey(cfg), cfg._attempt)) {
             completeAttempt(cfg)
             return Promise.reject(ApiError.fromAxiosError(error))
           }
diff --git a/packages/http-client/src/request-attempt.ts b/packages/http-client/src/request-attempt.ts
index 905d7996ad..f6478fbb6a 100644
--- a/packages/http-client/src/request-attempt.ts
+++ b/packages/http-client/src/request-attempt.ts
@@ -67,9 +67,14 @@ function createUntrackedAttempt(callerSignal?: AbortSignal): RequestAttempt {
 
 export class RequestAttemptRegistry {
   private readonly currentAttempts = new Map<string, AttemptRecord>()
+  private readonly untrackedAttempts = new WeakSet<RequestAttempt>()
 
   begin(options: BeginAttemptOptions): RequestAttempt {
-    if (!options.deduplicated) return createUntrackedAttempt(options.callerSignal)
+    if (!options.deduplicated) {
+      const attempt = createUntrackedAttempt(options.callerSignal)
+      this.untrackedAttempts.add(attempt)
+      return attempt
+    }
 
     const attempt = createAttempt(options.callerSignal)
     const current = this.currentAttempts.get(options.key)
@@ -83,8 +88,9 @@ export class RequestAttemptRegistry {
     return attempt
   }
 
-  owns(key: string, attempt: RequestAttempt): boolean {
-    return this.currentAttempts.get(key) === attempt
+  owns(key: string, attempt?: RequestAttempt): boolean {
+    if (!attempt) return false
+    return this.untrackedAttempts.has(attempt) || this.currentAttempts.get(key) === attempt
   }
 
   complete(key: string, attempt: RequestAttempt): void {
diff --git a/packages/request-state/package.json b/packages/request-state/package.json
new file mode 100644
index 0000000000..7fc46a3abe
--- /dev/null
+++ b/packages/request-state/package.json
@@ -0,0 +1,28 @@
+{
+  "name": "@ulticode/request-state",
+  "version": "0.0.1",
+  "private": true,
+  "type": "module",
+  "main": "./src/index.ts",
+  "types": "./src/index.ts",
+  "exports": {
+    ".": {
+      "import": "./src/index.ts",
+      "types": "./src/index.ts"
+    }
+  },
+  "scripts": {
+    "type-check": "tsc --noEmit",
+    "test": "vitest --run",
+    "test:watch": "vitest"
+  },
+  "peerDependencies": {
+    "vue": "^3.5.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.0",
+    "typescript": "~5.9.3",
+    "vitest": "^4.1.4",
+    "vue": "^3.5.0"
+  }
+}
diff --git a/packages/request-state/src/index.test.ts b/packages/request-state/src/index.test.ts
new file mode 100644
index 0000000000..191e6ed552
--- /dev/null
+++ b/packages/request-state/src/index.test.ts
@@ -0,0 +1,71 @@
+import { describe, expect, it, vi } from 'vitest'
+import { createValueRequest } from './index'
+
+describe('createValueRequest', () => {
+  it('returns only the newest response and keeps its loading ownership', async () => {
+    const request = createValueRequest({ errorMessage: 'failed' })
+    let resolveFirst!: (value: string) => void
+    const first = request.run(() => new Promise<string>((resolve) => { resolveFirst = resolve }))
+    const second = request.run(async () => 'newest')
+    resolveFirst('stale')
+    await expect(second).resolves.toBe('newest')
+    await expect(first).resolves.toBeNull()
+    expect(request.loading.value).toBe(false)
+  })
+
+  it('cancels the active request and ignores its late error', async () => {
+    const request = createValueRequest({ errorMessage: 'failed' })
+    let rejectLoad!: (error: Error) => void
+    let signal!: AbortSignal
+    const pending = request.run((currentSignal) => {
+      signal = currentSignal
+      return new Promise<string>((_resolve, reject) => { rejectLoad = reject })
+    })
+    request.cancel()
+    expect(signal.aborted).toBe(true)
+    rejectLoad(new Error('late'))
+    await expect(pending).resolves.toBeNull()
+    expect(request.error.value).toBeNull()
+    expect(request.loading.value).toBe(false)
+  })
+
+  it('records current errors and rethrows when requested', async () => {
+    const request = createValueRequest({ errorMessage: 'failed', rethrow: true })
+    const failure = new Error('request failed')
+    await expect(request.run(async () => { throw failure })).rejects.toBe(failure)
+    expect(request.error.value).toBe('request failed')
+    expect(request.loading.value).toBe(false)
+  })
+
+  it('forwards external abort only to its request and runs success policy while current', async () => {
+    const request = createValueRequest({ errorMessage: 'failed' })
+    const external = new AbortController()
+    const addListener = vi.spyOn(external.signal, 'addEventListener')
+    const removeListener = vi.spyOn(external.signal, 'removeEventListener')
+    let resolveFirst!: (value: string) => void
+    let resolveSecond!: (value: string) => void
+    let firstSignal!: AbortSignal
+    let secondSignal!: AbortSignal
+    const applied: string[] = []
+    const first = request.run((signal) => {
+      firstSignal = signal
+      return new Promise<string>((resolve) => { resolveFirst = resolve })
+    }, external.signal, (value) => applied.push(value))
+    expect(firstSignal.aborted).toBe(false)
+    external.abort()
+    expect(firstSignal.aborted).toBe(true)
+    const second = request.run((signal) => {
+      secondSignal = signal
+      return new Promise<string>((resolve) => { resolveSecond = resolve })
+    }, undefined, (value) => applied.push(value))
+    expect(secondSignal.aborted).toBe(false)
+    resolveFirst('stale')
+    resolveSecond('current')
+    await expect(first).resolves.toBeNull()
+    await expect(second).resolves.toBe('current')
+    expect(applied).toEqual(['current'])
+    expect(addListener).toHaveBeenCalledTimes(1)
+    expect(removeListener).toHaveBeenCalledTimes(1)
+    expect(request.isActive()).toBe(false)
+  })
+})
diff --git a/packages/request-state/src/index.ts b/packages/request-state/src/index.ts
new file mode 100644
index 0000000000..75f0202831
--- /dev/null
+++ b/packages/request-state/src/index.ts
@@ -0,0 +1,62 @@
+import { ref } from 'vue'
+
+export interface ValueRequestOptions {
+  errorMessage: string
+  getErrorMessage?: (error: unknown, fallback: string) => string
+  onError?: (error: unknown) => void
+  rethrow?: boolean
+}
+
+/** Own newest-wins cancellation and state for one single-resource request. */
+export function createValueRequest(options: ValueRequestOptions) {
+  const loading = ref(false)
+  const error = ref<string | null>(null)
+  let sequence = 0
+  let controller: AbortController | null = null
+
+  async function run<T>(
+    load: (signal: AbortSignal) => Promise<T>,
+    externalSignal?: AbortSignal,
+    onCurrent?: (value: T) => void,
+  ): Promise<T | null> {
+    controller?.abort()
+    const current = new AbortController()
+    controller = current
+    const request = ++sequence
+    const abortFromExternal = () => current.abort()
+    externalSignal?.addEventListener('abort', abortFromExternal, { once: true })
+    if (externalSignal?.aborted) current.abort()
+    loading.value = true
+    error.value = null
+
+    try {
+      const value = await load(current.signal)
+      if (request !== sequence || current.signal.aborted) return null
+      onCurrent?.(value)
+      return value
+    } catch (cause) {
+      if (request !== sequence || current.signal.aborted) return null
+      error.value =
+        options.getErrorMessage?.(cause, options.errorMessage) ??
+        (cause instanceof Error ? cause.message : options.errorMessage)
+      options.onError?.(cause)
+      if (options.rethrow) throw cause
+      return null
+    } finally {
+      externalSignal?.removeEventListener('abort', abortFromExternal)
+      if (controller === current) {
+        controller = null
+        loading.value = false
+      }
+    }
+  }
+
+  function cancel(): void {
+    sequence += 1
+    controller?.abort()
+    controller = null
+    loading.value = false
+  }
+
+  return { loading, error, run, cancel, isActive: () => controller !== null }
+}
diff --git a/packages/request-state/tsconfig.json b/packages/request-state/tsconfig.json
new file mode 100644
index 0000000000..2921d6b9de
--- /dev/null
+++ b/packages/request-state/tsconfig.json
@@ -0,0 +1,13 @@
+{
+  "compilerOptions": {
+    "target": "ES2020",
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "lib": ["ES2020", "DOM"],
+    "strict": true,
+    "noEmit": true,
+    "skipLibCheck": true,
+    "types": ["vitest/globals", "node"]
+  },
+  "include": ["src/**/*.ts"]
+}
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 811b360889..1b01787c3b 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -95,6 +95,9 @@ importers:
       '@ulticode/markdown-utils':
         specifier: workspace:*
         version: link:../../packages/markdown-utils
+      '@ulticode/request-state':
+        specifier: workspace:*
+        version: link:../../packages/request-state
       '@ulticode/sidebar-menu':
         specifier: workspace:*
         version: link:../../packages/sidebar-menu
@@ -324,6 +327,9 @@ importers:
       '@ulticode/markdown-utils':
         specifier: workspace:*
         version: link:../../packages/markdown-utils
+      '@ulticode/request-state':
+        specifier: workspace:*
+        version: link:../../packages/request-state
       '@ulticode/sidebar-menu':
         specifier: workspace:*
         version: link:../../packages/sidebar-menu
@@ -721,6 +727,21 @@ importers:
         specifier: ^4.1.4
         version: 4.1.9(@types/node@22.20.0)(@vitest/coverage-v8@4.1.9)(@vitest/ui@4.1.9)(happy-dom@15.11.7)(jsdom@25.0.1(supports-color@7.2.0))(vite@8.0.16(@types/node@22.20.0)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
 
+  packages/request-state:
+    devDependencies:
+      '@types/node':
+        specifier: ^22.10.0
+        version: 22.20.0
+      typescript:
+        specifier: ~5.9.3
+        version: 5.9.3
+      vitest:
+        specifier: ^4.1.4
+        version: 4.1.9(@types/node@22.20.0)(@vitest/coverage-v8@4.1.9)(@vitest/ui@4.1.9)(happy-dom@15.11.7)(jsdom@29.1.1)(vite@8.0.16(@types/node@22.20.0)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
+      vue:
+        specifier: ^3.5.0
+        version: 3.5.42(typescript@5.9.3)
+
   packages/sandbox-types:
     devDependencies:
       typescript:
diff --git a/services/admin/src/main/java/com/ulticode/modules/backup/service/impl/BackupObjectLifecycle.java b/services/admin/src/main/java/com/ulticode/modules/backup/service/impl/BackupObjectLifecycle.java
index 9563645c30..861b3babf6 100644
--- a/services/admin/src/main/java/com/ulticode/modules/backup/service/impl/BackupObjectLifecycle.java
+++ b/services/admin/src/main/java/com/ulticode/modules/backup/service/impl/BackupObjectLifecycle.java
@@ -22,8 +22,6 @@
 import java.io.InputStream;
 import java.nio.file.Files;
 import java.nio.file.Path;
-import java.nio.file.Paths;
-import java.nio.file.attribute.PosixFilePermissions;
 import java.security.MessageDigest;
 import java.security.NoSuchAlgorithmException;
 import java.time.Clock;
@@ -64,7 +62,7 @@ public BackupObjectLifecycle(
             BackupProcessPort backupProcessPort,
             FileStoragePort fileStorage,
             @Qualifier("adminBackupExecutor") Executor adminBackupExecutor,
-            @Value("${backup.temp-dir:${java.io.tmpdir}/ulticode-backups}") String backupTempDir,
+            @Value(BackupTempFiles.TEMP_DIR_PROPERTY) String backupTempDir,
             @Value("${backup.object-cleanup.settle-seconds:300}") int settleSeconds) {
         this.backupMapper = backupMapper;
         this.backupDeletionTombstoneMapper = backupDeletionTombstoneMapper;
@@ -161,7 +159,7 @@ private void execute(String backupId) {
                         "Failed to persist IN_PROGRESS backup state; affected rows: " + inProgressRows);
             }
 
-            tempFile = createSecureTempFile("dump-", ".sql");
+            tempFile = BackupTempFiles.createSecureTempFile(backupTempDir, "dump-", ".sql");
             if (!backupProcessPort.dump(tempFile)
                     || !Files.isRegularFile(tempFile)
                     || Files.size(tempFile) == 0) {
@@ -199,7 +197,7 @@ private void execute(String backupId) {
         } catch (Exception failure) {
             handleFailure(backup, objectKey, failure);
         } finally {
-            deleteTempFile(tempFile);
+            BackupTempFiles.deleteTempFile(tempFile);
         }
     }
 
@@ -366,6 +364,10 @@ private void recordFailure(String objectKey, RuntimeException failure) {
         }
     }
 
+    // Validation tail mirrors BackupServiceImpl.requireBackupObjectKey after its
+    // legacy blank-key check. The entry contracts stay distinct on purpose:
+    // callers guard blank keys before deletion, while download/restore maps
+    // legacy blank keys to NOT_FOUND.
     private String requireBackupObjectKey(Backup backup) {
         String objectKey = backup.getObjectKey();
         try {
@@ -379,15 +381,6 @@ private String requireBackupObjectKey(Backup backup) {
         return objectKey;
     }
 
-    private Path createSecureTempFile(String prefix, String suffix) throws IOException {
-        Path directory = Paths.get(backupTempDir).toAbsolutePath().normalize();
-        Files.createDirectories(directory);
-        restrictPermissions(directory, "rwx------");
-        Path file = Files.createTempFile(directory, prefix, suffix);
-        restrictPermissions(file, "rw-------");
-        return file;
-    }
-
     private static String sha256(Path file) throws IOException {
         MessageDigest digest;
         try {
@@ -407,25 +400,6 @@ private static String sha256(Path file) throws IOException {
         return HexFormat.of().formatHex(digest.digest());
     }
 
-    private static void restrictPermissions(Path path, String permissions) throws IOException {
-        try {
-            Files.setPosixFilePermissions(path, PosixFilePermissions.fromString(permissions));
-        } catch (UnsupportedOperationException ignored) {
-            // POSIX permissions are unavailable on some local development hosts.
-        }
-    }
-
-    private static void deleteTempFile(Path file) {
-        if (file == null) {
-            return;
-        }
-        try {
-            Files.deleteIfExists(file);
-        } catch (IOException exception) {
-            log.warn("Failed to clean up backup temp file: {}", file, exception);
-        }
-    }
-
     private static String describe(RuntimeException failure) {
         String message = failure.getMessage();
         String description = message == null || message.isBlank()
diff --git a/services/admin/src/main/java/com/ulticode/modules/backup/service/impl/BackupServiceImpl.java b/services/admin/src/main/java/com/ulticode/modules/backup/service/impl/BackupServiceImpl.java
index c52824470c..adc05aee18 100644
--- a/services/admin/src/main/java/com/ulticode/modules/backup/service/impl/BackupServiceImpl.java
+++ b/services/admin/src/main/java/com/ulticode/modules/backup/service/impl/BackupServiceImpl.java
@@ -23,7 +23,6 @@
 import java.nio.file.Files;
 import java.nio.file.Path;
 import java.nio.file.Paths;
-import java.nio.file.attribute.PosixFilePermissions;
 import java.security.DigestInputStream;
 import java.security.MessageDigest;
 import java.security.NoSuchAlgorithmException;
@@ -51,7 +50,7 @@ public class BackupServiceImpl implements BackupService {
     private final BackupObjectLifecycle backupObjectLifecycle;
     private final FileStoragePort fileStorage;
 
-    @Value("${backup.temp-dir:${java.io.tmpdir}/ulticode-backups}")
+    @Value(BackupTempFiles.TEMP_DIR_PROPERTY)
     private String backupTempDir;
 
     private static final DateTimeFormatter FILE_DATE_FORMAT = DateTimeFormatter.ofPattern("yyyyMMdd_HHmmss");
@@ -101,7 +100,7 @@ public BackupVO restoreBackup(String id, String userId) {
         String objectKey = requireBackupObjectKey(backup);
         Path tempFile = null;
         try {
-            tempFile = createSecureTempFile("restore-", ".sql");
+            tempFile = BackupTempFiles.createSecureTempFile(backupTempDir, "restore-", ".sql");
             FileStoragePort.StorageStream stored = fileStorage.openStream(objectKey)
                     .orElseThrow(() -> new BusinessException(BaseErrorCode.NOT_FOUND, "Backup object not found"));
             String checksum = copyAndChecksum(stored.content(), tempFile);
@@ -150,7 +149,7 @@ public BackupVO restoreBackup(String id, String userId) {
             throw new BusinessException(BaseErrorCode.UNKNOWN_ERROR,
                     "Database restore failed. Check server logs for details.");
         } finally {
-            deleteTempFile(tempFile);
+            BackupTempFiles.deleteTempFile(tempFile);
         }
     }
     @Override
@@ -190,6 +189,8 @@ private Path validateBackupFilePath(String filename) {
         return displayPath;
     }
 
+    // The validation tail mirrors BackupObjectLifecycle.requireBackupObjectKey;
+    // keep them aligned while the blank-key entry contracts stay distinct.
     private String requireBackupObjectKey(Backup backup) {
         String objectKey = backup.getObjectKey();
         // Legacy metadata rows stay COMPLETED with a null key until their dump is
@@ -209,34 +210,6 @@ private String requireBackupObjectKey(Backup backup) {
         return objectKey;
     }
 
-    private Path createSecureTempFile(String prefix, String suffix) throws IOException {
-        Path directory = Paths.get(backupTempDir).toAbsolutePath().normalize();
-        Files.createDirectories(directory);
-        restrictPermissions(directory, "rwx------");
-        Path file = Files.createTempFile(directory, prefix, suffix);
-        restrictPermissions(file, "rw-------");
-        return file;
-    }
-
-    private static void restrictPermissions(Path path, String permissions) throws IOException {
-        try {
-            Files.setPosixFilePermissions(path, PosixFilePermissions.fromString(permissions));
-        } catch (UnsupportedOperationException ignored) {
-            // POSIX permissions are unavailable on some local development hosts.
-        }
-    }
-
-    private static void deleteTempFile(Path file) {
-        if (file == null) {
-            return;
-        }
-        try {
-            Files.deleteIfExists(file);
-        } catch (IOException exception) {
-            log.warn("Failed to clean up backup temp file: {}", file, exception);
-        }
-    }
-
     private static String copyAndChecksum(InputStream content, Path target) throws IOException {
         MessageDigest digest;
         try {
diff --git a/services/admin/src/main/java/com/ulticode/modules/backup/service/impl/BackupTempFiles.java b/services/admin/src/main/java/com/ulticode/modules/backup/service/impl/BackupTempFiles.java
new file mode 100644
index 0000000000..0500bcc15c
--- /dev/null
+++ b/services/admin/src/main/java/com/ulticode/modules/backup/service/impl/BackupTempFiles.java
@@ -0,0 +1,46 @@
+package com.ulticode.modules.backup.service.impl;
+
+import lombok.extern.slf4j.Slf4j;
+
+import java.io.IOException;
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.nio.file.Paths;
+import java.nio.file.attribute.PosixFilePermissions;
+
+@Slf4j
+final class BackupTempFiles {
+
+    static final String TEMP_DIR_PROPERTY = "${backup.temp-dir:${java.io.tmpdir}/ulticode-backups}";
+
+    private BackupTempFiles() {
+    }
+
+    static Path createSecureTempFile(String backupTempDir, String prefix, String suffix) throws IOException {
+        Path directory = Paths.get(backupTempDir).toAbsolutePath().normalize();
+        Files.createDirectories(directory);
+        restrictPermissions(directory, "rwx------");
+        Path file = Files.createTempFile(directory, prefix, suffix);
+        restrictPermissions(file, "rw-------");
+        return file;
+    }
+
+    private static void restrictPermissions(Path path, String permissions) throws IOException {
+        try {
+            Files.setPosixFilePermissions(path, PosixFilePermissions.fromString(permissions));
+        } catch (UnsupportedOperationException ignored) {
+            // POSIX permissions are unavailable on some local development hosts.
+        }
+    }
+
+    static void deleteTempFile(Path file) {
+        if (file == null) {
+            return;
+        }
+        try {
+            Files.deleteIfExists(file);
+        } catch (IOException exception) {
+            log.warn("Failed to clean up backup temp file: {}", file, exception);
+        }
+    }
+}
diff --git a/services/app/app-web/src/main/java/com/ulticode/app/userprofile/ProfileMutationModule.java b/services/app/app-web/src/main/java/com/ulticode/app/userprofile/ProfileMutationModule.java
index 528502aa1a..d6bbc54b33 100644
--- a/services/app/app-web/src/main/java/com/ulticode/app/userprofile/ProfileMutationModule.java
+++ b/services/app/app-web/src/main/java/com/ulticode/app/userprofile/ProfileMutationModule.java
@@ -23,11 +23,21 @@
 @RequiredArgsConstructor
 public class ProfileMutationModule {
 
+    public static final String USER_STATS_CACHE = "userStats";
+    public static final String CONTEST_RANKING_CACHE = "contestRanking";
+
     private final UserProfileMapper userProfileMapper;
     private final StorageCleanupOutbox storageCleanupOutbox;
     private final UserDirectoryQueryPort userDirectoryQueryPort;
     private final SearchDocumentChangedPublisher searchPublisher;
 
+    public static ProfilePatch profilePatch(
+            String accountId, String name, String avatar, String bio, String company,
+            String github, String location, String twitter, String website, String preferredLanguage) {
+        return new ProfilePatch(
+                accountId, name, avatar, bio, company, github, location, twitter, website, preferredLanguage);
+    }
+
     @Transactional
     public ProfileWriteResult update(ProfilePatch patch) {
         Objects.requireNonNull(patch, "patch");
diff --git a/services/app/app-web/src/main/java/com/ulticode/app/userprofile/provider/ProfileWriteProvider.java b/services/app/app-web/src/main/java/com/ulticode/app/userprofile/provider/ProfileWriteProvider.java
index 953a624577..a6525da76a 100644
--- a/services/app/app-web/src/main/java/com/ulticode/app/userprofile/provider/ProfileWriteProvider.java
+++ b/services/app/app-web/src/main/java/com/ulticode/app/userprofile/provider/ProfileWriteProvider.java
@@ -9,7 +9,6 @@
 import com.ulticode.app.security.AdminActorAuthorizer;
 import com.ulticode.app.security.TrustedAdminActor;
 import com.ulticode.app.userprofile.ProfileMutationModule;
-import com.ulticode.app.userprofile.ProfilePatch;
 import com.ulticode.common.command.ActorDelegation;
 import com.ulticode.common.command.WriteCommand;
 import com.ulticode.common.error.BaseErrorCode;
@@ -40,7 +39,9 @@ public class ProfileWriteProvider implements ProfileWriteService {
     private final AdminActorAuthorizer actorAuthorizer;
 
     @Override
-    @CacheEvict(value = "contestRanking", allEntries = true)
+    @CacheEvict(value = {
+            ProfileMutationModule.USER_STATS_CACHE, ProfileMutationModule.CONTEST_RANKING_CACHE
+    }, allEntries = true)
     public RpcResult<ProfileWriteResult> updateProfile(UpdateProfileCommand command) {
         RpcResult<ProfileWriteResult> rejected = rejectUntrustedActor(command);
         if (rejected != null) {
@@ -52,7 +53,10 @@ public RpcResult<ProfileWriteResult> updateProfile(UpdateProfileCommand command)
                     OP_UPDATE,
                     command,
                     ProfileWriteResult.class,
-                    traceId -> RpcResult.success(profileMutationModule.update(toPatch(command)), traceId));
+                    traceId -> RpcResult.success(profileMutationModule.update(ProfileMutationModule.profilePatch(
+                            command.accountId(), command.name(), command.avatar(), command.bio(), command.company(),
+                            command.github(), command.location(), command.twitter(), command.website(),
+                            command.preferredLanguage())), traceId));
         } catch (BusinessException exception) {
             return mapBusinessFailure(exception, CommandReceiptExecutor.traceId(command));
         } catch (Exception exception) {
@@ -63,7 +67,7 @@ public RpcResult<ProfileWriteResult> updateProfile(UpdateProfileCommand command)
     }
 
     @Override
-    @CacheEvict(value = "contestRanking", allEntries = true)
+    @CacheEvict(value = ProfileMutationModule.CONTEST_RANKING_CACHE, allEntries = true)
     public RpcResult<ProfileWriteResult> uploadAvatar(UploadAvatarCommand command) {
         RpcResult<ProfileWriteResult> rejected = rejectUntrustedActor(command);
         if (rejected != null) {
@@ -87,19 +91,6 @@ public RpcResult<ProfileWriteResult> uploadAvatar(UploadAvatarCommand command) {
         }
     }
 
-    private static ProfilePatch toPatch(UpdateProfileCommand command) {
-        return new ProfilePatch(
-                command.accountId(),
-                command.name(),
-                command.avatar(),
-                command.bio(),
-                command.company(),
-                command.github(),
-                command.location(),
-                command.twitter(),
-                command.website(),
-                command.preferredLanguage());
-    }
 
     private <C extends WriteCommand> RpcResult<ProfileWriteResult> rejectUntrustedActor(C command) {
         if (command == null || hasMissingActorMetadata(command)) {
diff --git a/services/app/app-web/src/main/java/com/ulticode/modules/user/port/DefaultAppUserWritePort.java b/services/app/app-web/src/main/java/com/ulticode/modules/user/port/DefaultAppUserWritePort.java
index 340fbfcc27..ddebac826f 100644
--- a/services/app/app-web/src/main/java/com/ulticode/modules/user/port/DefaultAppUserWritePort.java
+++ b/services/app/app-web/src/main/java/com/ulticode/modules/user/port/DefaultAppUserWritePort.java
@@ -3,7 +3,6 @@
 import com.ulticode.app.api.dto.ProfileWriteResult;
 import com.ulticode.app.storage.StorageCleanupOutbox;
 import com.ulticode.app.userprofile.ProfileMutationModule;
-import com.ulticode.app.userprofile.ProfilePatch;
 import com.ulticode.common.error.BaseErrorCode;
 import com.ulticode.common.exception.BusinessException;
 import com.ulticode.common.storage.FileStoragePort;
@@ -43,28 +42,23 @@ public class DefaultAppUserWritePort implements AppUserWritePort {
     private int uploadSettleSeconds;
 
     @Override
-    @CacheEvict(value = {"userStats", "contestRanking"}, allEntries = true)
+    @CacheEvict(value = {
+            ProfileMutationModule.USER_STATS_CACHE, ProfileMutationModule.CONTEST_RANKING_CACHE
+    }, allEntries = true)
     public UserVO updateProfile(String userId, UpdateUserDTO updateDTO) {
         if (userId == null) {
             throw new BusinessException(BaseErrorCode.UNAUTHORIZED);
         }
-        ProfileWriteResult result = profileMutationModule.update(new ProfilePatch(
-                userId,
-                updateDTO.getName(),
-                updateDTO.getAvatar(),
-                updateDTO.getBio(),
-                updateDTO.getCompany(),
-                updateDTO.getGithub(),
-                updateDTO.getLocation(),
-                updateDTO.getTwitter(),
-                updateDTO.getWebsite(),
+        ProfileWriteResult result = profileMutationModule.update(ProfileMutationModule.profilePatch(
+                userId, updateDTO.getName(), updateDTO.getAvatar(), updateDTO.getBio(), updateDTO.getCompany(),
+                updateDTO.getGithub(), updateDTO.getLocation(), updateDTO.getTwitter(), updateDTO.getWebsite(),
                 updateDTO.getPreferredLanguage()));
         log.info("User profile updated: {}", userId);
         return toVO(result);
     }
 
     @Override
-    @CacheEvict(value = "contestRanking", allEntries = true)
+    @CacheEvict(value = ProfileMutationModule.CONTEST_RANKING_CACHE, allEntries = true)
     public String uploadAvatar(String userId, MultipartFile file) {
         if (userId == null) {
             throw new BusinessException(BaseErrorCode.UNAUTHORIZED);
diff --git a/services/app/app-web/src/test/java/com/ulticode/app/userprofile/ProfileWriteProviderTest.java b/services/app/app-web/src/test/java/com/ulticode/app/userprofile/ProfileWriteProviderTest.java
index 0c84ef8596..b2f0a6b47d 100644
--- a/services/app/app-web/src/test/java/com/ulticode/app/userprofile/ProfileWriteProviderTest.java
+++ b/services/app/app-web/src/test/java/com/ulticode/app/userprofile/ProfileWriteProviderTest.java
@@ -7,6 +7,8 @@
 import com.ulticode.app.idempotency.CommandReceiptExecutor;
 import com.ulticode.app.security.AdminActorAuthorizer;
 import com.ulticode.app.userprofile.provider.ProfileWriteProvider;
+import com.ulticode.modules.user.dto.UpdateUserDTO;
+import com.ulticode.modules.user.port.DefaultAppUserWritePort;
 import com.ulticode.common.command.ActorDelegation;
 import com.ulticode.common.error.BaseErrorCode;
 import com.ulticode.common.exception.BusinessException;
@@ -16,6 +18,7 @@
 import org.junit.jupiter.api.BeforeEach;
 import org.junit.jupiter.api.Test;
 import org.mockito.ArgumentCaptor;
+import org.springframework.cache.annotation.CacheEvict;
 
 import java.util.function.Function;
 
@@ -43,6 +46,20 @@ void setUp() {
         provider = new ProfileWriteProvider(profileMutationModule, receiptExecutor, actorAuthorizer);
     }
 
+    @Test
+    void updateAdaptersDeclareSameProfileWriteCacheEvictions() throws NoSuchMethodException {
+        CacheEvict rpc = ProfileWriteProvider.class
+                .getMethod("updateProfile", UpdateProfileCommand.class)
+                .getAnnotation(CacheEvict.class);
+        CacheEvict http = DefaultAppUserWritePort.class
+                .getMethod("updateProfile", String.class, UpdateUserDTO.class)
+                .getAnnotation(CacheEvict.class);
+
+        assertThat(rpc.value()).containsExactlyInAnyOrder(
+                ProfileMutationModule.USER_STATS_CACHE, ProfileMutationModule.CONTEST_RANKING_CACHE);
+        assertThat(http.value()).containsExactlyInAnyOrder(rpc.value());
+    }
+
     @Test
     void rejectsUntrustedProfileUpdateBeforeReceiptAndMutation() {
         when(actorAuthorizer.isAuthorized(any())).thenReturn(false);
diff --git a/services/core/src/main/java/com/ulticode/core/CoreOwnerBootProperties.java b/services/core/src/main/java/com/ulticode/core/CoreOwnerBootProperties.java
new file mode 100644
index 0000000000..c124c52a39
--- /dev/null
+++ b/services/core/src/main/java/com/ulticode/core/CoreOwnerBootProperties.java
@@ -0,0 +1,134 @@
+package com.ulticode.core;
+
+import org.springframework.core.env.Environment;
+
+import java.util.List;
+
+/** Builds the unchanged child-context property list for an Owner module. */
+final class CoreOwnerBootProperties {
+    private final Environment environment;
+
+    CoreOwnerBootProperties(Environment environment) {
+        this.environment = environment;
+    }
+
+    List<String> forModule(CoreModuleDefinition module) {
+        String prefix = module.environmentPrefix();
+        boolean admin = "admin".equals(module.name());
+        boolean search = "search".equals(module.name());
+        String storageAccessKey = admin
+                ? requiredProperty("RUSTFS_ADMIN_ACCESS_KEY")
+                : requiredProperty("RUSTFS_APP_ACCESS_KEY", "APP_STORAGE_S3_ACCESS_KEY");
+        String storageSecretKey = admin
+                ? requiredProperty("RUSTFS_ADMIN_SECRET_KEY")
+                : requiredProperty("RUSTFS_APP_SECRET_KEY", "APP_STORAGE_S3_SECRET_KEY");
+        String redisUsername = property(
+                prefix + "_REDIS_USERNAME", "ulticode-" + module.name());
+        String redisPassword = requiredProperty(
+                prefix + "_REDIS_PASSWORD", "REDIS_PASSWORD");
+        List<String> properties = new java.util.ArrayList<>(List.of(
+                "spring.application.name=ulticode-core-" + module.name(),
+                "spring.main.web-application-type=none",
+                "spring.main.banner-mode=off",
+                "spring.main.lazy-initialization=" + property(
+                        "spring.main.lazy-initialization", "false"),
+                "ulticode.app.inbox.enabled=" + property(
+                        "ulticode.app.inbox.enabled", admin ? "false" : "true"),
+                "spring.main.allow-bean-definition-overriding=false",
+                "spring.flyway.enabled=false",
+                "app.storage.type=" + property(
+                        "APP_STORAGE_TYPE", "s3"),
+                "app.storage.s3.endpoint=" + requiredProperty(
+                        "APP_STORAGE_S3_ENDPOINT"),
+                "app.storage.s3.region=" + requiredProperty(
+                        "APP_STORAGE_S3_REGION"),
+                "app.storage.s3.bucket=" + requiredProperty(
+                        "APP_STORAGE_S3_BUCKET"),
+                "app.storage.s3.access-key=" + storageAccessKey,
+                "app.storage.s3.secret-key=" + storageSecretKey,
+                "app.storage.s3.tls-enabled=" + requiredProperty(
+                        "APP_STORAGE_S3_TLS_ENABLED"),
+                "app.storage.s3.ca-certificate-path=" + property(
+                        "APP_STORAGE_S3_CA_CERTIFICATE", ""),
+                "app.storage.s3.connect-timeout-ms=" + property(
+                        "APP_STORAGE_S3_CONNECT_TIMEOUT_MS", "10000"),
+                "app.storage.s3.request-timeout-ms=" + property(
+                        "APP_STORAGE_S3_REQUEST_TIMEOUT_MS", "30000"),
+                "app.storage.s3.upload-timeout-ms=" + property(
+                        "APP_STORAGE_S3_UPLOAD_TIMEOUT_MS", "1800000"),
+                "app.storage.s3.max-concurrent-requests=" + property(
+                        "APP_STORAGE_S3_MAX_CONCURRENT_REQUESTS", "16"),
+                "app.storage.startup-probe.enabled=" + property(
+                        "APP_STORAGE_STARTUP_PROBE_ENABLED", "true"),
+                "app.storage.startup-probe.attempts=" + property(
+                        "APP_STORAGE_STARTUP_PROBE_ATTEMPTS", "30"),
+                "app.storage.startup-probe.delay-ms=" + property(
+                        "APP_STORAGE_STARTUP_PROBE_DELAY_MS", "2000"),
+                "spring.data.redis.host=" + requiredProperty(
+                        prefix + "_REDIS_HOST", "REDIS_HOST"),
+                "spring.data.redis.port=" + property(
+                        prefix + "_REDIS_PORT", property("REDIS_PORT", "6379")),
+                "spring.data.redis.username=" + redisUsername,
+                "spring.data.redis.password=" + redisPassword,
+                "REDIS_USERNAME=" + redisUsername,
+                "REDIS_PASSWORD=" + redisPassword,
+                "spring.data.redis.database=" + property(
+                        prefix + "_REDIS_DB", property("REDIS_DB", "0")),
+                "spring.data.redis.ssl.enabled=" + property(
+                        prefix + "_REDIS_SSL_ENABLED", "false"),
+                "security.internal-delegation.private-key="
+                        + (admin ? property("INTERNAL_DELEGATION_PRIVATE_KEY", "") : ""),
+                "security.internal-delegation.public-key="
+                        + (admin ? "" : property("INTERNAL_DELEGATION_PUBLIC_KEY", "")),
+                "security.internal-delegation.key-id="
+                        + property("INTERNAL_DELEGATION_KEY_ID", ""),
+                "security.internal-delegation.bootstrap-private-key="
+                        + (admin ? property("BOOTSTRAP_DELEGATION_PRIVATE_KEY", "") : ""),
+                "security.internal-delegation.bootstrap-public-key="
+                        + (admin ? "" : property("BOOTSTRAP_DELEGATION_PUBLIC_KEY", "")),
+                "security.internal-delegation.bootstrap-key-id="
+                        + property("BOOTSTRAP_DELEGATION_KEY_ID", ""),
+                "security.internal-delegation.issuer="
+                        + property("INTERNAL_DELEGATION_ISSUER", "backend-admin"),
+                "security.internal-delegation.audience=backend-" + module.name(),
+                "security.internal-delegation.ttl-seconds="
+                        + property("INTERNAL_DELEGATION_TTL_SECONDS", "30"),
+                CoreLocalContractAssembly.LOCAL_CONTRACTS_ENABLED_PROPERTY + "=" + admin,
+                "dubbo.enabled=false",
+                "dubbo.registry.address=N/A",
+                "dubbo.protocol.port=-1",
+                "dubbo.application.register-mode=none"
+        ));
+        String autoConfigurationExcludes = property("spring.autoconfigure.exclude", "");
+        if (!autoConfigurationExcludes.isBlank()) {
+            properties.add("spring.autoconfigure.exclude=" + autoConfigurationExcludes);
+        }
+        if (!search) {
+            properties.add("spring.datasource.url=" + requiredProperty(
+                    "core.datasource." + module.name() + ".url", prefix + "_DB_URL"));
+            properties.add("spring.datasource.username=" + requiredProperty(
+                    "core.datasource." + module.name() + ".username",
+                    prefix + "_DB_USER"));
+            properties.add("spring.datasource.password=" + requiredProperty(
+                    "core.datasource." + module.name() + ".password",
+                    prefix + "_DB_PASSWORD"));
+        }
+        return properties;
+    }
+
+    private String property(String key, String fallback) {
+        String value = environment.getProperty(key);
+        return value == null ? fallback : value;
+    }
+
+    private String requiredProperty(String... keys) {
+        for (String key : keys) {
+            String value = environment.getProperty(key);
+            if (value != null && !value.isBlank()) {
+                return value;
+            }
+        }
+        throw new IllegalStateException(
+                "Core Owner Module startup requires property: " + String.join(" | ", keys));
+    }
+}
diff --git a/services/core/src/main/java/com/ulticode/core/CoreOwnerContextManager.java b/services/core/src/main/java/com/ulticode/core/CoreOwnerContextManager.java
index e7e7b5cab3..50df658818 100644
--- a/services/core/src/main/java/com/ulticode/core/CoreOwnerContextManager.java
+++ b/services/core/src/main/java/com/ulticode/core/CoreOwnerContextManager.java
@@ -44,6 +44,7 @@ public enum State {
     private final CoreModuleRegistry registry;
     private final CoreOwnerClassLoaders ownerClassLoaders;
     private final org.springframework.core.env.Environment environment;
+    private final CoreOwnerBootProperties bootProperties;
     private final Map<String, State> states = new java.util.LinkedHashMap<>();
     private final Map<String, org.springframework.context.ConfigurableApplicationContext> contexts =
             new java.util.LinkedHashMap<>();
@@ -70,6 +71,7 @@ public CoreOwnerContextManager(
         this.registry = registry;
         this.ownerClassLoaders = new CoreOwnerClassLoaders();
         this.environment = environment;
+        this.bootProperties = new CoreOwnerBootProperties(environment);
         this.enabled = enabled;
         this.startupTimeoutMs = Math.max(1_000L, startupTimeoutMs);
         for (CoreModuleDefinition module : registry.modules()) {
@@ -189,7 +191,11 @@ private void startAll() {
      * attempt can slip in behind a stop snapshot. Returns null, without
      * registering, once stop is in progress. Package-private so a test can put
      * more than one attempt into the active set: the sequential production loop
-     * above can never present that shape on its own.
+     * above can never present that shape on its own. This is an internal seam —
+     * used by this module's lifecycle tests; not part of the caller interface.
+     * Preserve the lock discipline: admission shares the manager monitor with
+     * stop snapshots and READY publication; never nest that monitor above an
+     * attempt monitor.
      */
     OwnerStartup admitStartupAttempt(String moduleName) {
         OwnerStartup attempt = new OwnerStartup(moduleName, startupTimeoutMs);
@@ -223,6 +229,10 @@ private void rollbackPublishedOwnerModules() {
                 failure -> log.error("Core Owner Module rollback close failed", failure));
     }
 
+    /** Internal seam — used by this module's lifecycle tests; not part of the caller interface.
+     * Keep observation synchronized with manager publication and stop snapshots;
+     * do not introduce manager/attempt lock nesting.
+     */
     synchronized java.util.Map<String, org.springframework.context.ConfigurableApplicationContext>
             contextsSnapshot() {
         return java.util.Map.copyOf(contexts);
@@ -232,109 +242,12 @@ private void rollbackPublishedOwnerModules() {
      * The production boot adapter: creates the owner classloader, runs the
      * child context and installs both into the running attempt through its
      * internal setters. Failure cleanup and resource ownership stay with the
-     * attempt; this method only propagates the boot failure.
+     * attempt; this method only propagates the boot failure. This package-private
+     * method is an internal seam — used by this module's lifecycle tests; not
+     * part of the caller interface. Keep it outside manager/attempt lock nesting.
      */
     void bootOwnerModule(CoreModuleDefinition module, OwnerStartup attempt) {
-        String prefix = module.environmentPrefix();
-        boolean admin = "admin".equals(module.name());
-        boolean search = "search".equals(module.name());
-        String storageAccessKey = admin
-                ? requiredProperty("RUSTFS_ADMIN_ACCESS_KEY")
-                : requiredProperty("RUSTFS_APP_ACCESS_KEY", "APP_STORAGE_S3_ACCESS_KEY");
-        String storageSecretKey = admin
-                ? requiredProperty("RUSTFS_ADMIN_SECRET_KEY")
-                : requiredProperty("RUSTFS_APP_SECRET_KEY", "APP_STORAGE_S3_SECRET_KEY");
-        String redisUsername = property(
-                prefix + "_REDIS_USERNAME", "ulticode-" + module.name());
-        String redisPassword = requiredProperty(
-                prefix + "_REDIS_PASSWORD", "REDIS_PASSWORD");
-        List<String> properties = new java.util.ArrayList<>(List.of(
-                "spring.application.name=ulticode-core-" + module.name(),
-                "spring.main.web-application-type=none",
-                "spring.main.banner-mode=off",
-                "spring.main.lazy-initialization=" + property(
-                        "spring.main.lazy-initialization", "false"),
-                "ulticode.app.inbox.enabled=" + property(
-                        "ulticode.app.inbox.enabled", admin ? "false" : "true"),
-                "spring.main.allow-bean-definition-overriding=false",
-                "spring.flyway.enabled=false",
-                "app.storage.type=" + property(
-                        "APP_STORAGE_TYPE", "s3"),
-                "app.storage.s3.endpoint=" + requiredProperty(
-                        "APP_STORAGE_S3_ENDPOINT"),
-                "app.storage.s3.region=" + requiredProperty(
-                        "APP_STORAGE_S3_REGION"),
-                "app.storage.s3.bucket=" + requiredProperty(
-                        "APP_STORAGE_S3_BUCKET"),
-                "app.storage.s3.access-key=" + storageAccessKey,
-                "app.storage.s3.secret-key=" + storageSecretKey,
-                "app.storage.s3.tls-enabled=" + requiredProperty(
-                        "APP_STORAGE_S3_TLS_ENABLED"),
-                "app.storage.s3.ca-certificate-path=" + property(
-                        "APP_STORAGE_S3_CA_CERTIFICATE", ""),
-                "app.storage.s3.connect-timeout-ms=" + property(
-                        "APP_STORAGE_S3_CONNECT_TIMEOUT_MS", "10000"),
-                "app.storage.s3.request-timeout-ms=" + property(
-                        "APP_STORAGE_S3_REQUEST_TIMEOUT_MS", "30000"),
-                "app.storage.s3.upload-timeout-ms=" + property(
-                        "APP_STORAGE_S3_UPLOAD_TIMEOUT_MS", "1800000"),
-                "app.storage.s3.max-concurrent-requests=" + property(
-                        "APP_STORAGE_S3_MAX_CONCURRENT_REQUESTS", "16"),
-                "app.storage.startup-probe.enabled=" + property(
-                        "APP_STORAGE_STARTUP_PROBE_ENABLED", "true"),
-                "app.storage.startup-probe.attempts=" + property(
-                        "APP_STORAGE_STARTUP_PROBE_ATTEMPTS", "30"),
-                "app.storage.startup-probe.delay-ms=" + property(
-                        "APP_STORAGE_STARTUP_PROBE_DELAY_MS", "2000"),
-                "spring.data.redis.host=" + requiredProperty(
-                        prefix + "_REDIS_HOST", "REDIS_HOST"),
-                "spring.data.redis.port=" + property(
-                        prefix + "_REDIS_PORT", property("REDIS_PORT", "6379")),
-                "spring.data.redis.username=" + redisUsername,
-                "spring.data.redis.password=" + redisPassword,
-                "REDIS_USERNAME=" + redisUsername,
-                "REDIS_PASSWORD=" + redisPassword,
-                "spring.data.redis.database=" + property(
-                        prefix + "_REDIS_DB", property("REDIS_DB", "0")),
-                "spring.data.redis.ssl.enabled=" + property(
-                        prefix + "_REDIS_SSL_ENABLED", "false"),
-                "security.internal-delegation.private-key="
-                        + (admin ? property("INTERNAL_DELEGATION_PRIVATE_KEY", "") : ""),
-                "security.internal-delegation.public-key="
-                        + (admin ? "" : property("INTERNAL_DELEGATION_PUBLIC_KEY", "")),
-                "security.internal-delegation.key-id="
-                        + property("INTERNAL_DELEGATION_KEY_ID", ""),
-                "security.internal-delegation.bootstrap-private-key="
-                        + (admin ? property("BOOTSTRAP_DELEGATION_PRIVATE_KEY", "") : ""),
-                "security.internal-delegation.bootstrap-public-key="
-                        + (admin ? "" : property("BOOTSTRAP_DELEGATION_PUBLIC_KEY", "")),
-                "security.internal-delegation.bootstrap-key-id="
-                        + property("BOOTSTRAP_DELEGATION_KEY_ID", ""),
-                "security.internal-delegation.issuer="
-                        + property("INTERNAL_DELEGATION_ISSUER", "backend-admin"),
-                "security.internal-delegation.audience=backend-" + module.name(),
-                "security.internal-delegation.ttl-seconds="
-                        + property("INTERNAL_DELEGATION_TTL_SECONDS", "30"),
-                CoreLocalContractAssembly.LOCAL_CONTRACTS_ENABLED_PROPERTY + "=" + admin,
-                "dubbo.enabled=false",
-                "dubbo.registry.address=N/A",
-                "dubbo.protocol.port=-1",
-                "dubbo.application.register-mode=none"
-        ));
-        String autoConfigurationExcludes = property("spring.autoconfigure.exclude", "");
-        if (!autoConfigurationExcludes.isBlank()) {
-            properties.add("spring.autoconfigure.exclude=" + autoConfigurationExcludes);
-        }
-        if (!search) {
-            properties.add("spring.datasource.url=" + requiredProperty(
-                    "core.datasource." + module.name() + ".url", prefix + "_DB_URL"));
-            properties.add("spring.datasource.username=" + requiredProperty(
-                    "core.datasource." + module.name() + ".username",
-                    prefix + "_DB_USER"));
-            properties.add("spring.datasource.password=" + requiredProperty(
-                    "core.datasource." + module.name() + ".password",
-                    prefix + "_DB_PASSWORD"));
-        }
+        List<String> properties = bootProperties.forModule(module);
         java.net.URLClassLoader ownerClassLoader =
                 ownerClassLoaders.createOwnerClassLoader(module.ownerArtifactId());
         attempt.setClassLoader(ownerClassLoader);
@@ -685,22 +598,6 @@ private static void closeContext(
         }
     }
 
-    private String property(String key, String fallback) {
-        String value = environment.getProperty(key);
-        return value == null ? fallback : value;
-    }
-
-    private String requiredProperty(String... keys) {
-        for (String key : keys) {
-            String value = environment.getProperty(key);
-            if (value != null && !value.isBlank()) {
-                return value;
-            }
-        }
-        throw new IllegalStateException(
-                "Core Owner Module startup requires property: " + String.join(" | ", keys));
-    }
-
     /**
      * Pass one of the batch stop: snapshot the active attempts under the global
      * lock and deliver every cancellation signal, returning exactly the set
diff --git a/services/submission/src/main/java/com/ulticode/modules/submission/projection/DefaultSubmissionProjection.java b/services/submission/src/main/java/com/ulticode/modules/submission/projection/DefaultSubmissionProjection.java
index 0898e73913..e66e50d4b1 100644
--- a/services/submission/src/main/java/com/ulticode/modules/submission/projection/DefaultSubmissionProjection.java
+++ b/services/submission/src/main/java/com/ulticode/modules/submission/projection/DefaultSubmissionProjection.java
@@ -226,11 +226,6 @@ private void applyProblemSummary(SubmissionVO vo, ProblemFactsPort.ProblemDispla
         vo.setProblem(problemInfo);
     }
 
-    @Override
-    public SubmissionDetailVO toDetailVO(Submission submission, PerformanceStats stats) {
-        return toDetailVO(submission, stats, null);
-    }
-
     @Override
     public SubmissionDetailVO toDetailVO(
             Submission submission,
diff --git a/services/submission/src/main/java/com/ulticode/modules/submission/projection/SubmissionProjection.java b/services/submission/src/main/java/com/ulticode/modules/submission/projection/SubmissionProjection.java
index 3fc18ec61c..44bdcf4bd0 100644
--- a/services/submission/src/main/java/com/ulticode/modules/submission/projection/SubmissionProjection.java
+++ b/services/submission/src/main/java/com/ulticode/modules/submission/projection/SubmissionProjection.java
@@ -46,13 +46,6 @@ List<SubmissionVO> toVO(
             List<Submission> submissions,
             Map<Long, com.ulticode.app.api.service.ProblemFactsPort.ProblemDisplayFacts> batchFacts);
 
-    /**
-     * Convert a submission entity to its full user-facing detail VO with
-     * performance stats, applying the same P0-1 filter and enrichment as
-     * App's {@code toDetailVO}. Never {@code null}.
-     */
-    SubmissionDetailVO toDetailVO(Submission submission, PerformanceStats stats);
-
     /** Detail projection after a bounded problem-facts batch. */
     SubmissionDetailVO toDetailVO(
             Submission submission,
diff --git a/services/submission/src/main/java/com/ulticode/modules/submission/read/SubmissionReadAssembly.java b/services/submission/src/main/java/com/ulticode/modules/submission/read/SubmissionReadAssembly.java
index 8e9876b98d..96ec4834b7 100644
--- a/services/submission/src/main/java/com/ulticode/modules/submission/read/SubmissionReadAssembly.java
+++ b/services/submission/src/main/java/com/ulticode/modules/submission/read/SubmissionReadAssembly.java
@@ -10,6 +10,9 @@
 import com.ulticode.modules.submission.projection.SubmissionProjection;
 import com.ulticode.modules.submission.stats.SubmissionPerformanceStats;
 import com.ulticode.submission.api.dto.PerformanceStats;
+import com.ulticode.submission.api.dto.LearningProgressDTO;
+import com.ulticode.submission.api.dto.SubmissionHistoryDTO;
+import com.ulticode.submission.api.dto.SubmissionStatusMeta;
 import com.ulticode.submission.api.dto.SubmissionDetailVO;
 import com.ulticode.submission.api.dto.SubmissionListItemVO;
 import com.ulticode.submission.api.dto.SubmissionQueryDTO;
@@ -48,7 +51,8 @@ public class SubmissionReadAssembly {
 
     /**
      * Read submissions by id in bounded chunks while preserving the caller's
-     * first-seen order and omitting missing rows.
+     * first-seen order and omitting missing rows. Empty or null input returns
+     * a non-null empty list.
      */
     public List<SubmissionVO> toVOs(Collection<String> submissionIds) {
         List<String> requested = normalizeIds(submissionIds);
@@ -72,6 +76,27 @@ public List<SubmissionVO> toVOs(Collection<String> submissionIds) {
         return result;
     }
 
+    /** Return the mapper date aggregation unchanged; no matching dates yield its empty list. */
+    public List<String> aggregateDates(String userId, Integer year) {
+        return submissionProjection.aggregateDates(userId, year);
+    }
+
+    /** Return learning progress; empty history is represented by a zero-valued DTO. */
+    public LearningProgressDTO aggregateLearningProgress(String userId) {
+        return submissionProjection.aggregateLearningProgress(userId);
+    }
+
+    /** Return submission history; empty history is represented by a zero-valued DTO. */
+    public SubmissionHistoryDTO aggregateHistory(String userId) {
+        return submissionProjection.aggregateHistory(userId);
+    }
+
+    /** Return the non-null canonical status catalog, independent of user submissions. */
+    public List<SubmissionStatusMeta> getStatusCatalog() {
+        return submissionProjection.getStatusCatalog();
+    }
+
+    /** Return {@code null} for absent submissions, null inputs, or an ownership mismatch. */
     public SubmissionDetailVO findById(String id, String userId) {
         if (id == null) {
             return null;
@@ -90,6 +115,7 @@ public SubmissionDetailVO findById(String id, String userId) {
         return submissionProjection.toDetailVO(submission, stats, factsFor(List.of(submission)));
     }
 
+    /** Return a non-null page; no matching submissions produce an empty item list. */
     public PageResult<SubmissionVO> findByUserId(String userId, SubmissionQueryDTO query) {
         PaginationRequest pagination = pagination(query);
         IPage<Submission> result = submissionMapper.findByUserId(
@@ -100,6 +126,7 @@ public PageResult<SubmissionVO> findByUserId(String userId, SubmissionQueryDTO q
                 result.getTotal(), pagination);
     }
 
+    /** Return an empty non-null page with synthesized default size for null identifiers. */
     public PageResult<SubmissionListItemVO> findByProblemId(
             Long problemId, String userId, SubmissionQueryDTO query) {
         if (problemId == null || userId == null) {
@@ -118,6 +145,7 @@ public PageResult<SubmissionListItemVO> findByProblemId(
         return PageResult.of(items, result.getTotal(), pagination);
     }
 
+    /** Return null when identifiers are null or no best submission exists. */
     public SubmissionVO findBest(Long problemId, String userId) {
         if (problemId == null || userId == null) {
             return null;
diff --git a/services/submission/src/main/java/com/ulticode/submission/dubbo/provider/SubmissionUserQueryProvider.java b/services/submission/src/main/java/com/ulticode/submission/dubbo/provider/SubmissionUserQueryProvider.java
index e025960e23..11615d961f 100644
--- a/services/submission/src/main/java/com/ulticode/submission/dubbo/provider/SubmissionUserQueryProvider.java
+++ b/services/submission/src/main/java/com/ulticode/submission/dubbo/provider/SubmissionUserQueryProvider.java
@@ -9,7 +9,6 @@
 import com.ulticode.submission.api.dto.SubmissionVO;
 import com.ulticode.submission.api.service.SubmissionUserQueryPort;
 import com.ulticode.common.response.PageResult;
-import com.ulticode.modules.submission.projection.SubmissionProjection;
 import com.ulticode.modules.submission.read.SubmissionReadAssembly;
 import lombok.RequiredArgsConstructor;
 import org.apache.dubbo.config.annotation.DubboService;
@@ -42,27 +41,26 @@
 @RequiredArgsConstructor
 public class SubmissionUserQueryProvider implements SubmissionUserQueryPort {
 
-    private final SubmissionProjection submissionProjection;
     private final SubmissionReadAssembly readAssembly;
 
     @Override
     public List<String> aggregateDates(String userId, Integer year) {
-        return submissionProjection.aggregateDates(userId, year);
+        return readAssembly.aggregateDates(userId, year);
     }
 
     @Override
     public LearningProgressDTO aggregateLearningProgress(String userId) {
-        return submissionProjection.aggregateLearningProgress(userId);
+        return readAssembly.aggregateLearningProgress(userId);
     }
 
     @Override
     public SubmissionHistoryDTO aggregateHistory(String userId) {
-        return submissionProjection.aggregateHistory(userId);
+        return readAssembly.aggregateHistory(userId);
     }
 
     @Override
     public List<SubmissionStatusMeta> getStatusCatalog() {
-        return submissionProjection.getStatusCatalog();
+        return readAssembly.getStatusCatalog();
     }
 
     @Override
diff --git a/services/submission/src/test/java/com/ulticode/submission/dubbo/provider/SubmissionUserQueryProviderIT.java b/services/submission/src/test/java/com/ulticode/submission/dubbo/provider/SubmissionUserQueryProviderIT.java
index cab9ea7df5..cc8068acca 100644
--- a/services/submission/src/test/java/com/ulticode/submission/dubbo/provider/SubmissionUserQueryProviderIT.java
+++ b/services/submission/src/test/java/com/ulticode/submission/dubbo/provider/SubmissionUserQueryProviderIT.java
@@ -137,7 +137,7 @@ void setUp() throws Exception {
         SubmissionProjection projection = new DefaultSubmissionProjection(
                 submissionMapper, userReadPort, problemFacts, new ObjectMapper());
         SubmissionPerformanceStats performanceStats = mock(SubmissionPerformanceStats.class);
-        provider = new SubmissionUserQueryProvider(projection,
+        provider = new SubmissionUserQueryProvider(
                 new SubmissionReadAssembly(submissionMapper, projection, performanceStats, problemFacts));
     }
 
@@ -296,7 +296,7 @@ void findByUserIdEnrichesProblemFacts() {
         SubmissionReadAssembly enrichedAssembly = new SubmissionReadAssembly(
                 submissionMapper, enrichedProjection, mock(SubmissionPerformanceStats.class), problemFacts);
         SubmissionUserQueryProvider enrichedProvider =
-                new SubmissionUserQueryProvider(enrichedProjection, enrichedAssembly);
+                new SubmissionUserQueryProvider(enrichedAssembly);
 
         insertRow("sub-1", 101L, "user-1", "python", "Accepted", 12,
                 LocalDateTime.of(2026, 8, 1, 10, 0));
diff --git a/services/submission/src/test/java/com/ulticode/submission/provider/SubmissionUserQueryProviderTest.java b/services/submission/src/test/java/com/ulticode/submission/provider/SubmissionUserQueryProviderTest.java
index ece9c03cdb..0a8c1c4a4f 100644
--- a/services/submission/src/test/java/com/ulticode/submission/provider/SubmissionUserQueryProviderTest.java
+++ b/services/submission/src/test/java/com/ulticode/submission/provider/SubmissionUserQueryProviderTest.java
@@ -49,8 +49,7 @@ void setUp() {
                 projection,
                 mock(SubmissionPerformanceStats.class),
                 problemFactsPort);
-        provider = new SubmissionUserQueryProvider(
-                projection, readAssembly);
+        provider = new SubmissionUserQueryProvider(readAssembly);
     }
 
     @SuppressWarnings({"unchecked", "rawtypes"})
diff --git a/services/submission/src/test/java/com/ulticode/submission/read/SubmissionReadAssemblyTest.java b/services/submission/src/test/java/com/ulticode/submission/read/SubmissionReadAssemblyTest.java
index 7e374e2929..98a6492286 100644
--- a/services/submission/src/test/java/com/ulticode/submission/read/SubmissionReadAssemblyTest.java
+++ b/services/submission/src/test/java/com/ulticode/submission/read/SubmissionReadAssemblyTest.java
@@ -12,6 +12,9 @@
 import com.ulticode.modules.submission.stats.SubmissionPerformanceStats;
 import com.ulticode.submission.api.dto.PerformanceStats;
 import com.ulticode.submission.api.dto.SubmissionDetailVO;
+import com.ulticode.submission.api.dto.LearningProgressDTO;
+import com.ulticode.submission.api.dto.SubmissionHistoryDTO;
+import com.ulticode.submission.api.dto.SubmissionStatusMeta;
 import com.ulticode.submission.api.dto.SubmissionListItemVO;
 import com.ulticode.submission.api.dto.SubmissionQueryDTO;
 import com.ulticode.submission.api.dto.SubmissionVO;
@@ -42,6 +45,36 @@
 
 class SubmissionReadAssemblyTest {
 
+    @Test
+    void absenceContractsRemainDistinctAcrossReadOperations() {
+        SubmissionMapper mapper = mock(SubmissionMapper.class);
+        SubmissionProjection projection = mock(SubmissionProjection.class);
+        SubmissionPerformanceStats stats = mock(SubmissionPerformanceStats.class);
+        ProblemFactsPort facts = mock(ProblemFactsPort.class);
+        SubmissionReadAssembly assembly = newAssembly(mapper, projection, stats, facts);
+        LearningProgressDTO progress = new LearningProgressDTO();
+        SubmissionHistoryDTO history = new SubmissionHistoryDTO();
+        List<SubmissionStatusMeta> catalog = List.of();
+
+        when(projection.aggregateDates("user-1", 2026)).thenReturn(List.of());
+        when(projection.aggregateLearningProgress("user-1")).thenReturn(progress);
+        when(projection.aggregateHistory("user-1")).thenReturn(history);
+        when(projection.getStatusCatalog()).thenReturn(catalog);
+
+        assertThat(assembly.toVOs(null)).isEmpty();
+        assertThat(assembly.findById("missing", "user-1")).isNull();
+        assertThat(assembly.findById(null, "user-1")).isNull();
+        assertThat(assembly.findBest(101L, "user-1")).isNull();
+        var emptyProblemPage = assembly.findByProblemId(null, "user-1", null);
+        assertThat(emptyProblemPage.getItems()).isEmpty();
+        assertThat(emptyProblemPage.getPageSize()).isEqualTo(10);
+        assertThat(assembly.aggregateDates("user-1", 2026)).isEmpty();
+        assertThat(assembly.aggregateLearningProgress("user-1")).isSameAs(progress);
+        assertThat(assembly.aggregateHistory("user-1")).isSameAs(history);
+        assertThat(assembly.getStatusCatalog()).isSameAs(catalog);
+    }
+
+
     @Test
     void findByIdEnforcesOwnershipAndUsesDetailProjection() {
         SubmissionMapper submissionMapper = mock(SubmissionMapper.class);