release: v3.0.0

CHANGELOG.md

@@ -1,8 +1,10 @@
 # Changelog
 
-## 3.0.0-SNAPSHOT — In development
+## 3.0.0 — 2026-10-26
 
-3.0.0-SNAPSHOT upgrades to Java 21, Spring Boot 4 and Spring AI 2. AgentScope 2 drives ReAct and plan-step execution loops; MateClaw retains approvals, permissions, Goals, SSE and persistence. This is a development snapshot.
+3.0.0 upgrades to Java 21, Spring Boot 4 and Spring AI 2. AgentScope 2 drives ReAct and plan-step execution loops; MateClaw retains approvals, permissions, Goals, SSE and persistence.
+
+Release date: **2026-10-26**. These notes cover the 3.0.0 stable release. Source and package versions are `3.0.0`; download published packages from [GitHub Releases](https://github.com/mateaix/mateclaw/releases).
 
 - MyBatis Plus 3.5.17 with the Boot 4 starter; MCP SDK 0.18.3.
 - Native DashScope chat/embedding adapters; native speech SDK retained.
@@ -13,9 +15,17 @@
 
 [English details](mateclaw-server/src/main/resources/docs/en/changelog.md) · [中文说明](mateclaw-server/src/main/resources/docs/zh/changelog.md)
 
+## Finalization, team delivery and deployment
+
+- Long tasks check completion before returning a final answer and can continue unfinished work within runtime limits. Requests that need user input wait for a reply instead of repeatedly starting action turns (#668).
+- When reasoning consumes the response output budget, final-answer generation can retry within runtime limits. DeepSeek Flash thinking controls are applied consistently (#672).
+- Team worker progress retains full result evidence and runtime failure causes. A Team Run publishes completion after final synthesis, keeping worker output, progress and the delivered summary consistent.
+- DSH keeps its reviewed default SDK version; `0.2.1-rc.2` is an opt-in candidate. Docker runtime images pin Node.js 22 and include bubblewrap for Linux sandbox execution (#670). Candidate checks on macOS arm64 do not establish Linux or Windows acceptance; see [DSH setup and limitations](mateclaw-server/src/main/resources/docs/en/deepseek-harness.md).
+- Every backend requires a non-empty `JWT_SECRET` of at least 32 UTF-8 bytes. Desktop local mode generates and persists its secret; source and server deployments must configure and retain theirs. See [configuration](mateclaw-server/src/main/resources/docs/en/config.md).
+
 ## Cumulative changes since 2.3.0
 
-3.0.0-SNAPSHOT includes the former 2.4.0 development cycle; 2.4.0 was not published as a separate stable release. The groups below cover capabilities added before the architecture migration as well.
+3.0.0 includes the former 2.4.0 development cycle; 2.4.0 was not published as a separate stable release. The groups below cover capabilities added before the architecture migration as well.
 
 ### Workspaces and conversations
 

README.md

@@ -1,6 +1,6 @@
 <div align="center">
 
-> Current development version: **3.0.0-SNAPSHOT**. Java 21 / Spring Boot 4.1.1 / Spring AI 2.0.1 / AgentScope 2.0.4. AgentScope drives execution loops; MateClaw retains tool approvals, permissions, Goals, SSE and persistence. See Releases for stable builds.
+> **3.0.0 stable release · 2026-10-26**. Java 21 / Spring Boot 4.1.1 / Spring AI 2.0.1 / AgentScope 2.0.4. AgentScope drives execution loops; MateClaw retains tool approvals, permissions, Goals, SSE and persistence. See Releases for stable builds.
 > [3.0.0 architecture changelog](CHANGELOG.md)
 > Includes all changes since 2.3.0: structured decisions, member file isolation, DSH SDK upgrades, voice preview and structured MCP presentation.
 
@@ -35,7 +35,7 @@
 
 ---
 
-> **v2.3.0 (released 2026-09-20) — JSON acceptance and execution evidence for persistent Goals.** Users can configure required JSON fields and bind checks to current requirements and immutable artifact versions. This release also adds controlled worker intervention and skill document/folder uploads, with fixes for DSH history and output budgets, vLLM reasoning, and SSE framing. [Read the release notes](https://claw.mate.vip/docs/en/releases/2.3.0).
+> **3.0.0 — Governed execution, recoverable long tasks and team delivery.** Java 21, Spring Boot 4, Spring AI 2 and AgentScope 2 power the native runtime. Consistent context budgets, final-answer checks and team synthesis strengthen delivery while preserving approvals and workspace boundaries. [Release and upgrade notes](https://claw.mate.vip/docs/en/releases/3.0.0). Release date: **2026-10-26**.
 
 ---
 
@@ -51,13 +51,14 @@ Most AI tools die when their vendor has a bad day. Most forget you the moment th
 
 ---
 
-## What changes in 3.0.0-SNAPSHOT
+## What changes in 3.0.0
 
-3.0.0 is in development and includes the unpublished 2.4.0 development cycle. Stable downloads remain the builds listed in Releases.
+3.0.0 includes the unpublished 2.4.0 development cycle. Release date: **2026-10-26**. Download published packages from Releases.
 
 - **Native execution:** AgentScope Java **2.0.4** runs ReAct and the tool loop within each Plan-Execute step. MateClaw retains plan scheduling, tool approvals, workspace permissions, cancellation, Goal acceptance and persistence. This path does not require a beta AgentScope Harness API.
 - **Consistent context budgets:** request preparation, compaction retries and summary calls account for messages, effective tool schemas and one output reserve. Partial request options inherit model defaults; an explicitly empty tool list disables inherited callbacks. Estimates are conservative, rather than provider billing counts.
 - **Governed decisions and recovery:** typed decisions default to SHADOW mode; existing domain constraints and Goal budgets still apply. Durable checkpoints block blind replay when side effects are uncertain.
+- **Long tasks and team delivery:** unfinished work can continue within runtime limits, requests needing user input wait for a reply, and Team Runs publish completion after final synthesis. Worker progress preserves full results and failure causes.
 - **Everyday improvements:** opt-in strict member file isolation, managed DSH SDK upgrades, voice selection/preview, structured MCP results and stricter model probes.
 
 Use Java 21 for source builds. Back up the database, workspace, plugins and configuration before migration; use that backup for rollback. [Architecture and upgrade notes](mateclaw-server/src/main/resources/docs/en/changelog.md) · [Model budget rules](mateclaw-server/src/main/resources/docs/en/models.md)

README_zh.md

@@ -1,6 +1,6 @@
 <div align="center">
 
-> 当前开发版本：**3.0.0-SNAPSHOT**。Java 21 / Spring Boot 4.1.1 / Spring AI 2.0.1 / AgentScope 2.0.4。AgentScope 驱动执行循环，MateClaw 保留工具审批、权限、Goal、SSE 与持久化。正式发行版请查看 Releases。
+> **3.0.0 正式版 · 2026-10-26**。Java 21 / Spring Boot 4.1.1 / Spring AI 2.0.1 / AgentScope 2.0.4。AgentScope 驱动执行循环，MateClaw 保留工具审批、权限、Goal、SSE 与持久化。正式发行版请查看 Releases。
 > [3.0.0 架构升级日志](CHANGELOG.md)
 > 包含 2.3.0 之后全部累计更新：结构化决策、成员文件隔离、DSH SDK 升级、朗读音色试听和结构化 MCP 展示。
 
@@ -35,7 +35,7 @@
 
 ---
 
-> **v2.3.0（2026-09-20 发布）——持久目标的 JSON 验收与执行证据。** 用户可配置 JSON 必需字段，将检查结果绑定到当前要求和不可变产物版本；同时加入团队成员受控干预、技能文档及文件夹上传，并修复 DSH 历史与输出预算、vLLM 推理内容和 SSE 分帧。 [查看完整更新日志](https://claw.mate.vip/docs/zh/releases/2.3.0)。
+> **3.0.0——受治理的执行、可恢复的长任务与团队交付。** Java 21、Spring Boot 4、Spring AI 2 和 AgentScope 2 驱动原生运行时；统一上下文预算、最终答复检查和团队汇总完善交付，同时保留审批与工作空间边界。[正式版更新与升级说明](https://claw.mate.vip/docs/zh/releases/3.0.0)。发布日期：**2026-10-26**。
 
 ---
 
@@ -51,13 +51,14 @@
 
 ---
 
-## 3.0.0-SNAPSHOT 更新概览
+## 3.0.0 更新概览
 
-3.0.0 仍在开发，包含未单独正式发布的 2.4.0 开发周期更新。稳定版下载以 Releases 中的发行包为准。
+3.0.0 发布于 **2026-10-26**，包含未单独正式发布的 2.4.0 开发周期更新。发行包请从 Releases 下载。
 
 - **原生执行循环**：AgentScope Java **2.0.4** 驱动 ReAct 与 Plan-Execute 每个步骤内部的工具循环。计划调度、工具审批、工作空间权限、取消、Goal 验收和持久化继续由 MateClaw 管理；这条路径不依赖 beta 版 AgentScope Harness API。
 - **统一上下文预算**：请求准备、压缩重试和摘要调用统一计算消息、实际生效的工具 schema 与一份输出预留。请求只覆盖部分选项时继承模型默认值，显式空工具列表关闭默认回调。估算偏保守，不等同于供应商计费 token。
 - **受治理的决策与恢复**：类型化决策默认 SHADOW 模式，继续遵守领域约束和 Goal 预算；持久检查点在副作用结果不确定时阻止盲目重放。
+- **长任务与团队交付**：未完成工作可在运行时限制内继续，需要用户补充信息时等待回复；Team Run 在最终汇总完成后再发布完成状态，成员进度保留完整结果与失败原因。
 - **日常能力完善**：可选严格成员文件隔离、受管理的 DSH SDK 升级、音色选择与试听、MCP 结构化展示及更严格的模型探测。
 
 源码构建使用 Java 21。升级前备份数据库、workspace、插件与配置，回滚使用升级前备份。[架构与升级说明](mateclaw-server/src/main/resources/docs/zh/changelog.md) · [模型预算规则](mateclaw-server/src/main/resources/docs/zh/models.md)

assets/architecture-tech-en.svg

@@ -194,7 +194,7 @@
   <line x1="250" y1="438" x2="250" y2="454" stroke="#665245" stroke-width="1.5" stroke-dasharray="4,3" opacity="0.4"/>
   <line x1="710" y1="438" x2="710" y2="454" stroke="#665245" stroke-width="1.5" stroke-dasharray="4,3" opacity="0.4"/>
 
-  <text x="480" y="575" text-anchor="middle" font-size="10" fill="#9b7d6c">3.0.0-SNAPSHOT · Java 21 · Boot 4 · Spring AI 2 · AgentScope 2 · Vue 3 · Electron</text>
+  <text x="480" y="575" text-anchor="middle" font-size="10" fill="#9b7d6c">3.0.0 · Java 21 · Boot 4 · Spring AI 2 · AgentScope 2 · Vue 3 · Electron</text>
   <rect x="380" y="590" width="200" height="24" rx="12" fill="url(#primary)"/>
   <text x="480" y="607" text-anchor="middle" font-size="11" font-weight="600" fill="#fff" letter-spacing="0.5">claw.mate.vip</text>
 </svg>

assets/architecture-tech-zh.svg

@@ -198,7 +198,7 @@
   <line x1="710" y1="438" x2="710" y2="454" stroke="#665245" stroke-width="1.5" stroke-dasharray="4,3" opacity="0.4"/>
 
   <!-- Footer -->
-  <text x="480" y="575" text-anchor="middle" font-size="10" fill="#9b7d6c">3.0.0-SNAPSHOT · Java 21 · Boot 4 · Spring AI 2 · AgentScope 2 · Vue 3 · Electron</text>
+  <text x="480" y="575" text-anchor="middle" font-size="10" fill="#9b7d6c">3.0.0 · Java 21 · Boot 4 · Spring AI 2 · AgentScope 2 · Vue 3 · Electron</text>
   <rect x="380" y="590" width="200" height="24" rx="12" fill="url(#primary)"/>
   <text x="480" y="607" text-anchor="middle" font-size="11" font-weight="600" fill="#fff" letter-spacing="0.5">claw.mate.vip</text>
 </svg>

mateclaw-desktop/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mateclaw-desktop",
-  "version": "3.0.0-SNAPSHOT",
+  "version": "3.0.0",
   "description": "MateClaw Desktop - AI Assistant powered by Spring AI 2 + AgentScope 2",
   "author": "MateClaw Team",
   "license": "Apache-2.0",

mateclaw-server/src/main/resources/docs/en/changelog.md

@@ -1,10 +1,10 @@
-# 3.0.0-SNAPSHOT: execution architecture upgrade
+# 3.0.0: execution architecture upgrade
 
-Development snapshot; no stable 3.0.0 release has been published.
+Release date: **2026-10-26**. These notes cover the 3.0.0 stable release. Source and package versions are `3.0.0`; download published packages from [GitHub Releases](https://github.com/mateaix/mateclaw/releases).
 
 ## Cumulative changes since 2.3.0
 
-3.0.0-SNAPSHOT includes the former 2.4.0 development cycle; 2.4.0 was not published as a separate stable release. The groups below cover capabilities added before the architecture migration as well.
+3.0.0 includes the former 2.4.0 development cycle; 2.4.0 was not published as a separate stable release. The groups below cover capabilities added before the architecture migration as well.
 
 ### Workspaces and conversations
 
@@ -35,6 +35,14 @@ Development snapshot; no stable 3.0.0 release has been published.
 - Flyway validation failures block startup by default; history repair requires explicit opt-in, with backup and recovery guidance (#657).
 - Commercial-edition overview and links are added; commercial modules are not included in the open-source edition.
 
+## Finalization, team delivery and deployment
+
+- Long tasks check completion before returning a final answer and can continue unfinished work within runtime limits. Requests that need user input wait for a reply instead of repeatedly starting action turns (#668).
+- When reasoning consumes the response output budget, final-answer generation can retry within runtime limits. DeepSeek Flash thinking controls are applied consistently (#672).
+- Team worker progress retains full result evidence and runtime failure causes. A Team Run publishes completion after final synthesis, keeping worker output, progress and the delivered summary consistent.
+- DSH keeps its reviewed default SDK version; `0.2.1-rc.2` is an opt-in candidate. Docker runtime images pin Node.js 22 and include bubblewrap for Linux sandbox execution (#670). Candidate checks on macOS arm64 do not establish Linux or Windows acceptance; see [DSH setup and limitations](./deepseek-harness).
+- Every backend requires a non-empty `JWT_SECRET` of at least 32 UTF-8 bytes. Desktop local mode generates and persists its secret; source and server deployments must configure and retain theirs. See [configuration](./config).
+
 ## Platform and execution core
 
 Java 21, Spring Boot 4.1.1, Spring AI 2.0.1 and AgentScope Java 2.0.4. Spring AI Alibaba starter and Graph dependencies are removed. AgentScope drives ordinary ReAct and the reasoning/tool/observation loop inside each Plan-Execute step. MateClaw retains overall plan scheduling, Goal budgets and acceptance, and team coordination.

mateclaw-server/src/main/resources/docs/en/deepseek-harness.md

@@ -15,6 +15,8 @@ Use the DSH management console to install the pinned **`0.2.0-rc.1`** target. Th
 
 Run **Verify**, **Test connection**, and **Test task**. These mean different things: configuration checks, an SDK `initialize` handshake, and a real model task requiring the answer `OK`. A successful handshake alone does not establish model access. The wire server version `0.0.1` is not the npm package version; managed provenance records the pinned package separately. An external executable remains unverified unless independently checked.
 
+The Docker runtime image pins Node.js 22 and includes bubblewrap for Linux sandbox execution. Rebuild or pull the updated image before installing managed DSH packages; updating the application JAR alone does not update container dependencies. Host installations must supply their own runtime dependencies.
+
 ## SDK configuration
 
 Use an absolute executable path to `node_modules/.bin/dsh`, profile `sdk`, an existing working directory, and a dedicated home root. Optional patch paths are an ordered JSON array of absolute files. MateClaw assigns a separate `DSH_HOME` for each workspace/employee pair and launches arguments directly, without a shell.

mateclaw-server/src/main/resources/docs/en/index.md

@@ -19,13 +19,13 @@ hero:
       text: GitHub
       link: https://github.com/mateaix/mateclaw
     - theme: alt
-      text: 3.0.0 Snapshot Changelog
+      text: 3.0.0 Release Notes
       link: /en/releases/3.0.0
 
 features:
   - icon: ⚙️
-    title: 3.0.0-SNAPSHOT — Execution architecture upgrade
+    title: 3.0.0 — Execution architecture upgrade
-    details: 3.0.0-SNAPSHOT upgrades to Java 21, Spring Boot 4 and Spring AI 2. AgentScope 2 drives ReAct and plan-step execution loops; MateClaw retains approvals, permissions, Goals, SSE and persistence. This is a development snapshot.
+    details: 3.0.0 upgrades to Java 21, Spring Boot 4 and Spring AI 2. AgentScope 2 drives ReAct and plan-step execution loops; MateClaw retains approvals, permissions, Goals, SSE and persistence. Released 2026-10-26; see Releases for installers.
   - icon: ✅
     title: 2.3.0 — Managed JSON acceptance
     details: Users select required top-level fields; the server binds checks to current requirements and immutable JSON versions. Execution evidence defaults to observation, and ordinary artifact diagnostics do not replace acceptance bindings.

mateclaw-server/src/main/resources/docs/en/intro.md

@@ -7,7 +7,9 @@ head:
       content: MateClaw,multi-agent AI,self-hosted AI,AI operating system,Spring AI + AgentScope,ReAct,Plan-and-Execute,MCP,LLM Wiki,memory lifecycle,Tool Guard,open source
 ---
 
-3.0.0-SNAPSHOT upgrades to Java 21, Spring Boot 4 and Spring AI 2. AgentScope 2 drives ReAct and plan-step execution loops; MateClaw retains approvals, permissions, Goals, SSE and persistence. This is a development snapshot.
+3.0.0 upgrades to Java 21, Spring Boot 4 and Spring AI 2. AgentScope 2 drives ReAct and plan-step execution loops; MateClaw retains approvals, permissions, Goals, SSE and persistence.
+
+Release date: **2026-10-26**. These notes cover the 3.0.0 stable release. Source and package versions are `3.0.0`; download published packages from [GitHub Releases](https://github.com/mateaix/mateclaw/releases).
 
 [Upgrade guidance and changelog](./changelog)
 

mateclaw-server/src/main/resources/docs/en/quickstart.md

@@ -1,6 +1,6 @@
 # Quick Start
 
-The source development branch is `3.0.0-SNAPSHOT`; stable installers remain the versions published in Releases. Read the [upgrade guidance](./changelog#upgrade-and-validation) before migrating.
+Release date: **2026-10-26**. These notes cover the 3.0.0 stable release. Source and package versions are `3.0.0`; download published packages from [GitHub Releases](https://github.com/mateaix/mateclaw/releases). Read the [upgrade guidance](./changelog#upgrade-and-validation) before migrating.
 
 
 Sixty seconds to first message. **One path. Desktop app.**

mateclaw-server/src/main/resources/docs/en/releases.md

@@ -10,7 +10,7 @@ For historical diffs, check the corresponding git tag. For the "why" behind a fe
 
 | Version | Date | Highlights |
 |---------|------|------------|
-| [3.0.0-SNAPSHOT](./releases/3.0.0) | In development | Java 21 · Boot 4 · Spring AI 2 · AgentScope 2 execution · structured decisions · member files · DSH SDK · voices · MCP presentation and recovery |
+| [v3.0.0](./releases/3.0.0) | 2026-10-26 | Java 21 · Boot 4 · Spring AI 2 · AgentScope 2 execution · structured decisions · member files · DSH SDK · voices · MCP presentation and recovery |
 | [v2.3.0](./releases/2.3.0) | 2026-09-20 | User-configured managed JSON field acceptance and immutable artifact versions · Observe-mode execution evidence and controlled worker intervention · Approval/queued-input recovery and identity isolation · Skill document/folder uploads · DSH, reasoning-model, and SSE fixes |
 | [v2.2.0](./releases/2.2.0) | 2026-08-29 | **Runtime mainline** — employee runtime contract + provider registry + session lifecycle decouple employees from the built-in reasoning loop; **DeepSeek Harness** joins through an authenticated JSON-RPC child process while tools remain governed by host workspace policy and Tool Guard, with install/configure/verify/enable management; **durable Goals recover across bounded segments and backend restarts** (database queue · supervisor · leases · attempts · accepted-input queue · provider backoff · evidence-gated checklist completion); **bidirectional A2A** (Agent Cards · message send/stream · task get/cancel · `call_a2a_agent` · SSRF/timeout/response caps); hardened Team checkpoints, board recovery, deliverable gates, worker attachments, and long-form output; optional OfficeCLI + ACP prompt timeout + tighter workspace boundaries |
 | [v2.1.0](./releases/2.1.0) | 2026-08-15 | **Unified Team Runs** — one request, task DAG, worker execution, final synthesis, and deliverables share a `runId`; Chat delivery / Agents observation / Teams governance consume one projection, while worker conversations stay out of the normal sidebar · **closed skill-evolution loop** (cross-session recurring-request mining · reflection · constrained auto-binding · curator governance handover · origin policy · snapshots and restore points, workspace-scoped and conservative by default) · **replayable reasoning** (live `<think>` extraction · UI wall-clock duration · all/terminal display controls · plain-text trajectory export) · proactive channel push + targeted Cron delivery · context-window override/probe/catalog budgeting · progressive tool bridge + action completion policy · hardened browser refs/navigation/waits · WebChat/SSE/LLM stream cleanup and timeouts · Feishu execution progress · Qwen3-ASR HTTP · batch session deletion · date-partitioned files · 64-bit id and numeric tool-schema precision fixes |

mateclaw-server/src/main/resources/docs/en/roadmap.md

@@ -1,6 +1,6 @@
 # Roadmap
 
-3.0.0-SNAPSHOT is in development: Boot 4, Spring AI 2 and AgentScope 2 execution, retaining tool governance, history contracts and recovery boundaries. See Releases for stable builds. [Architecture changelog](./changelog)
+3.0.0 stable release · 2026-10-26: Boot 4, Spring AI 2 and AgentScope 2 execution, with long-task continuation, team synthesis and tool governance. See Releases for installers. [Architecture changelog](./changelog)
 
 
 > "People don't know what they want until you show it to them."

mateclaw-server/src/main/resources/docs/zh/changelog.md

@@ -1,10 +1,10 @@
-# 3.0.0-SNAPSHOT：执行架构升级
+# 3.0.0：执行架构升级
 
-开发快照，尚未发布正式版本。
+发布日期：**2026-10-26**。本文为 3.0.0 正式版更新说明。源码与发行包版本统一为 `3.0.0`；发行包请从 [GitHub Releases](https://github.com/mateaix/mateclaw/releases) 下载。
 
 ## 自 2.3.0 以来的累计更新
 
-3.0.0-SNAPSHOT 同时收录原 2.4.0 开发周期的更新；2.4.0 未单独作为正式发行版发布。以下按能力归类，避免把架构迁移前的功能遗漏。
+3.0.0 同时收录原 2.4.0 开发周期的更新；2.4.0 未单独作为正式发行版发布。以下按能力归类，避免把架构迁移前的功能遗漏。
 
 ### 工作空间与会话
 
@@ -35,6 +35,14 @@
 - Flyway 校验失败默认拒绝启动，历史修复必须显式选择，保留备份与恢复指导（#657）。
 - 增加商业版概览与入口；这不意味着开源版包含商业模块。
 
+## 最终答复、团队交付与部署
+
+- 长任务返回最终答复前检查完成情况，未完成工作可在运行时限制内继续；需要用户补充信息时等待回复，不反复启动行动回合（#668）。
+- 推理耗尽单次响应的输出预算后，可在运行时限制内重试生成最终答复；DeepSeek Flash 的思考开关一致生效（#672）。
+- 团队成员进度保留完整结果证据及运行失败原因；Team Run 在最终汇总完成后再发布完成状态，使成员结果、进度与最终交付一致。
+- DSH 保留经审查的默认 SDK 版本，`0.2.1-rc.2` 为可选候选版本；Docker 运行镜像锁定 Node.js 22，并包含 Linux 沙箱执行所需的 bubblewrap（#670）。macOS arm64 的候选验证不代表 Linux 或 Windows 已完成验收，参见 [DSH 配置与限制](./deepseek-harness)。
+- 所有后端均要求非空且至少 32 个 UTF-8 字节的 `JWT_SECRET`。桌面本地模式生成并持久化密钥；源码与服务器部署须自行配置并保留密钥。参见[配置说明](./config)。
+
 ## 平台与执行核心
 
 Java 21，Spring Boot 4.1.1，Spring AI 2.0.1，AgentScope Java 2.0.4。移除 Spring AI Alibaba starter 和 Graph 依赖。AgentScope 驱动普通 ReAct 和 Plan-Execute 单步内部的推理、工具、观察循环；整体计划调度、Goal 预算与验收、团队协作仍由 MateClaw 管理。

mateclaw-server/src/main/resources/docs/zh/deepseek-harness.md

@@ -15,6 +15,8 @@ DSH 是数字员工运行时。MateClaw 启动官方 `dsh --profile sdk` 进程
 
 依次运行 **校验**、**测试连接**、**测试任务**：分别检查配置、执行 SDK `initialize` 握手、调用真实模型并要求精确回答 `OK`。握手成功不等于模型可用。协议中的服务版本 `0.0.1` 不是 npm 包版本；受管理安装单独记录固定包的来源。外部可执行文件需要另行验证版本。
 
+Docker 运行镜像锁定 Node.js 22，并包含 Linux 沙箱执行所需的 bubblewrap。安装受管理 DSH 包之前请重建或拉取更新镜像；仅替换应用 JAR 不会更新容器依赖。宿主机安装需自行准备运行时依赖。
+
 ## SDK 配置
 
 可执行文件必须是 `node_modules/.bin/dsh` 的绝对路径，profile 必须为 `sdk`，工作目录必须存在，并设置专用 home 根目录。可选 patch 列表是按顺序传入的绝对文件路径 JSON 数组。MateClaw 按工作空间/员工分配独立 `DSH_HOME`，直接传递参数，不经过 shell。

mateclaw-server/src/main/resources/docs/zh/index.md

@@ -19,13 +19,13 @@ hero:
       text: GitHub
       link: https://github.com/mateaix/mateclaw
     - theme: alt
-      text: 3.0.0 快照更新日志
+      text: 3.0.0 正式版更新说明
       link: /zh/releases/3.0.0
 
 features:
   - icon: ⚙️
-    title: 3.0.0-SNAPSHOT — 执行架构升级
+    title: 3.0.0 — 执行架构升级
-    details: 3.0.0-SNAPSHOT 升级到 Java 21、Spring Boot 4 和 Spring AI 2，AgentScope 2 驱动 ReAct 与计划单步执行循环。工具审批、权限、Goal、SSE 与持久化继续由 MateClaw 统一治理；这是开发快照。
+    details: 3.0.0 升级到 Java 21、Spring Boot 4 和 Spring AI 2，AgentScope 2 驱动 ReAct 与计划单步执行循环。工具审批、权限、Goal、SSE 与持久化继续由 MateClaw 统一治理。 正式版发布日期为 2026-10-26，安装包以 Releases 为准。
   - icon: ✅
     title: 2.3.0 — 托管 JSON 验收
     details: 用户指定顶层必需字段，服务端把检查绑定到当前要求与不可变 JSON 版本。默认观察模式的执行证据用于追踪；普通产物诊断不代替验收绑定。

mateclaw-server/src/main/resources/docs/zh/intro.md

@@ -7,7 +7,9 @@ head:
       content: MateClaw,多智能体,AI操作系统,自部署AI,Spring AI + AgentScope,ReAct,Plan-and-Execute,MCP,LLM Wiki,记忆系统,Tool Guard,开源
 ---
 
-3.0.0-SNAPSHOT 升级到 Java 21、Spring Boot 4 和 Spring AI 2，AgentScope 2 驱动 ReAct 与计划单步执行循环。工具审批、权限、Goal、SSE 与持久化继续由 MateClaw 统一治理；这是开发快照。
+3.0.0 升级到 Java 21、Spring Boot 4 和 Spring AI 2，AgentScope 2 驱动 ReAct 与计划单步执行循环。工具审批、权限、Goal、SSE 与持久化继续由 MateClaw 统一治理。
+
+发布日期：**2026-10-26**。本文为 3.0.0 正式版更新说明。源码与发行包版本统一为 `3.0.0`；发行包请从 [GitHub Releases](https://github.com/mateaix/mateclaw/releases) 下载。
 
 [升级说明与 changelog](./changelog)
 

mateclaw-server/src/main/resources/docs/zh/quickstart.md

@@ -1,6 +1,6 @@
 # 快速开始
 
-源码开发分支当前为 `3.0.0-SNAPSHOT`；正式安装包仍以 Releases 中已发布的版本为准。升级前请阅读[升级说明](./changelog#升级与验证)。
+3.0.0 正式版发布日期为 **2026-10-26**；源码与发行包版本统一为 `3.0.0`，发行包请从 [GitHub Releases](https://github.com/mateaix/mateclaw/releases) 下载。升级前请阅读[升级说明](./changelog#升级与验证)。
 
 
 60 秒到第一条消息。**只有一条路：桌面端。**

mateclaw-server/src/main/resources/docs/zh/releases.md

@@ -10,7 +10,7 @@
 
 | 版本 | 日期 | 亮点 |
 |------|------|------|
-| [3.0.0-SNAPSHOT](./releases/3.0.0) | 开发中 | Java 21 · Boot 4 · Spring AI 2 · AgentScope 2 执行循环 · 结构化决策 · 成员文件隔离 · DSH SDK · 朗读音色 · MCP 展示与恢复 |
+| [v3.0.0](./releases/3.0.0) | 2026-10-26 | Java 21 · Boot 4 · Spring AI 2 · AgentScope 2 执行循环 · 结构化决策 · 成员文件隔离 · DSH SDK · 朗读音色 · MCP 展示与恢复 |
 | [v2.3.0](./releases/2.3.0) | 2026-09-20 | 用户配置的托管 JSON 字段验收与不可变产物版本 · 观察模式执行证据与受控团队干预 · 审批/排队输入恢复与身份隔离 · 技能文档/文件夹上传 · DSH、推理模型与 SSE 加固 |
 | [v2.2.0](./releases/2.2.0) | 2026-08-29 | **Runtime 主线**——员工运行时 contract + provider registry + session 生命周期，把员工与内置推理循环解耦；**DeepSeek Harness** 以认证 JSON-RPC 子进程接入，工具继续经过宿主工作空间策略与 Tool Guard，并提供安装/配置/校验/启停管理；**持久目标跨有界片段和后端重启恢复**（数据库队列 · supervisor · lease · attempt · 输入排队 · provider 退避 · checklist 证据完成门）；**A2A 双向互联**（Agent Card · message/send/stream · task 查询/取消 · `call_a2a_agent` · SSRF/超时/响应上限）；Team checkpoint / 任务板恢复 / 交付物完成门 / worker 附件与长回答加固；可选 OfficeCLI 引擎 + ACP prompt timeout + 工作空间边界收口 |
 | [v2.1.0](./releases/2.1.0) | 2026-08-15 | **统一 Team Run**——一次团队请求、任务 DAG、成员执行、最终汇总与交付物共用 `runId`，Chat 成果交付 / Agents 实时观察 / Teams 历史治理读取同一投影，成员子会话不再污染普通会话列表 · **Skill 自进化闭环**（跨会话重复请求 mining · reflection · 受约束自动绑定 · curator 治理移交 · origin 策略 · 快照与恢复点，按工作空间隔离且默认保守） · **推理轨迹可回放**（实时 `<think>` 提取 · UI 真实耗时 · 全部/最终轮次控制 · 纯文本 trajectory 导出） · 主动渠道消息 + Cron 定向投递 · 模型窗口覆盖/探测/目录预算 · 渐进式工具桥 + 行动完成约束 · 浏览器 ref/导航/等待加固 · WebChat/SSE/LLM 流回收与超时 · 飞书执行进度 · Qwen3-ASR HTTP · 会话批量删除 · 按日文件目录 · 64 位 id 与数值工具 schema 精度修复 |

mateclaw-server/src/main/resources/docs/zh/roadmap.md

@@ -1,6 +1,6 @@
 # 路线图
 
-3.0.0-SNAPSHOT 开发中：Boot 4、Spring AI 2 与 AgentScope 2 执行架构升级，保留工具治理、历史接口和恢复边界。正式发行版以 Releases 为准。 [架构升级日志](./changelog)
+3.0.0 正式版 · 2026-10-26：Boot 4、Spring AI 2 与 AgentScope 2 执行架构升级，完善长任务续跑、团队汇总与工具治理。发行包请查看 Releases。 [架构升级日志](./changelog)
 
 
 > "人们不知道自己想要什么，直到你把它摆在他们面前。"

mateclaw-server/src/test/java/vip/mate/agent/runtime/dsh/DshSdkTransportTest.java

@@ -32,7 +32,8 @@ class DshSdkTransportTest {
     @Test void rejectsWrongResponseId() throws Exception {
         Process process = process("read request; echo '{\"jsonrpc\":\"2.0\",\"id\":\"wrong\",\"result\":{}}'");
         try (var sdk = new DshSdkProcess(process, new ObjectMapper(), "")) {
-            Exception error = assertThrows(Exception.class, () -> sdk.initialize(Map.of(), Duration.ofSeconds(1)));
+            // Verify the protocol error, allowing reader scheduling under full-suite load.
+            Exception error = assertThrows(Exception.class, () -> sdk.initialize(Map.of(), Duration.ofSeconds(10)));
             assertEquals("DSH_HANDSHAKE_ID_MISMATCH", error.getMessage());
         }
     }

mateclaw-ui/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mateclaw-ui",
-  "version": "3.0.0-SNAPSHOT",
+  "version": "3.0.0",
   "private": true,
   "type": "module",
   "description": "MateClaw - Personal AI Assistant Web Console",

mateclaw-webchat/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mateclaw/webchat",
-  "version": "1.1.0-SNAPSHOT",
+  "version": "3.0.0",
   "description": "MateClaw WebChat embeddable widget",
   "type": "module",
   "main": "dist/mateclaw-webchat.umd.js",

pom.xml

@@ -23,7 +23,7 @@
 
     <properties>
         <!-- MateClaw release version shared by all Maven modules. -->
-        <revision>3.0.0-SNAPSHOT</revision>
+        <revision>3.0.0</revision>
 
         <!-- Java -->
         <java.version>21</java.version>