QwenLM/qwen-code cua-driver-rs-v0.20.3

cua-driver-rs v0.20.3

Repository: QwenLM/qwen-code

Tag: cua-driver-rs-v0.20.3

Published: 2026-09-01T07:12:34Z

Prerelease: yes

Release notes: Qwen CUA Driver prebuilt binaries (vendored under packages/cua-driver).

• macOS: codesigned + notarized universal binary + QwenCuaDriver.app
• Linux: unsigned (x86_64 + arm64, glibc 2.31 floor)
• Windows: unsigned UIAccess worker + native SDK payload

(x86_64 + arm64); deployments must sign and trust the worker on the target machine before UIAccess activation

• Node.js: the same workflow publishes @qwen-code/cua-sdk

after a clean install against these release assets and publishes the independently versioned @qwen-code/node-repl-mcp package after its MCP protocol smoke tests

Enable relative coordinates: CUA_DRIVER_RS_COORDINATE_SPACE=1 (default 0 = off; optional CUA_DRIVER_RS_COORDINATE_SCALE=1000).

Enable textual MCP payload filtering for affected model API routes: MCP_MODEL_PAYLOAD_FILTER=1 (default off).

What's Changed

• fix(core): decouple permissions.allow from tool registration via tools.eager (#10075) by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/10098
• feat(serve): make Aone a first-class platform for session PR bindings by @wenshao in https://github.com/QwenLM/qwen-code/pull/10287
• feat(web-shell): show git state hints beside branch picker actions by @wenshao in https://github.com/QwenLM/qwen-code/pull/10397
• feat(review): emit the Step 3A fan-out as a generated workflow script by @qqqys in https://github.com/QwenLM/qwen-code/pull/10119
• fix(core): keep the ask_user_question dialog behind allow rules and auto-approval by @qqqys in https://github.com/QwenLM/qwen-code/pull/10160
• fix(cli): derive bootstrap --help from shared option definitions by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/8902
• feat(serve): hide workspace Browse on headless daemon hosts by @qqqys in https://github.com/QwenLM/qwen-code/pull/9406
• fix(core): prevent Anthropic streams from hanging indefinitely by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/9945
• docs(design): OpenTUI migration design and architecture notes by @chiga0 in https://github.com/QwenLM/qwen-code/pull/10343
• feat(daemon): support scoped workspace memory tasks by @qqqys in https://github.com/QwenLM/qwen-code/pull/9895
• fix(autofix): surface thread-resolution guard refusals in the round report and wait out head-propagation lag by @wenshao in https://github.com/QwenLM/qwen-code/pull/10117
• fix(core): expose resolved agent execution mode by @DragonnZhang in https://github.com/QwenLM/qwen-code/pull/9955
• fix(core): accept contained symlinks in the older-Git archive fallback by @harjothkhara in https://github.com/QwenLM/qwen-code/pull/9969
• ci: host PR evidence outside Git by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/9985
• refactor(sdk): break auth flow client cycle by @DragonnZhang in https://github.com/QwenLM/qwen-code/pull/10039
• fix(core): stop daemon Configs and background work from hijacking the debug-log session by @tomsen02 in https://github.com/QwenLM/qwen-code/pull/9930
• perf(review): dedup candidates against the carried ledger before the verify shard by @wenshao in https://github.com/QwenLM/qwen-code/pull/10121
• feat(web-shell): add Local Control QR code entry to pane header by @wenshao in https://github.com/QwenLM/qwen-code/pull/10432
• fix(core): scan archived sessions in findSessionTitlesByPrefix by @harjothkhara in https://github.com/QwenLM/qwen-code/pull/10032
• feat(autofix): consume the review convergence signals — a circuit breaker for the takeover loop by @wenshao in https://github.com/QwenLM/qwen-code/pull/10122
• fix(core): honor agent-definition model routes for named teammates by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/10092
• refactor(core): centralize JSON tag-character escaping by @AaronZ345 in https://github.com/QwenLM/qwen-code/pull/9917
• feat(web-shell): optimize session overview table by @ytahdn in https://github.com/QwenLM/qwen-code/pull/10115
• fix(ci): route release pipeline Linux jobs to the ECS runner pool by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/10036
• refactor(cli): remove unused MemoryUsageDisplay component by @qqqys in https://github.com/QwenLM/qwen-code/pull/10238
• feat(web-shell): add per-run scheduled task sessions by @qqqys in https://github.com/QwenLM/qwen-code/pull/10233
• fix(core): propagate filesystem cleanup failures in team_delete by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/10213
• refactor(core): hold Goal sends to the caller's recursion budget, and say why the other carve-outs stay by @qqqys in https://github.com/QwenLM/qwen-code/pull/10259
• fix(test): probe the native directory picker once at daemon spawn time by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/10456
• test(sdk-java): close the connection on body-less fixture responses by @wenshao in https://github.com/QwenLM/qwen-code/pull/10472
• fix(serve): advertise the native directory picker during bootstrap by @wenshao in https://github.com/QwenLM/qwen-code/pull/10471
• fix(core): settle a cancelled workflow at once, and size the window by usable CPUs by @qqqys in https://github.com/QwenLM/qwen-code/pull/10468
• fix(web-shell): replace the boot white screen with a recoverable error state by @harjothkhara in https://github.com/QwenLM/qwen-code/pull/10215
• refactor(sdk): break ACP route table cycle by @DragonnZhang in https://github.com/QwenLM/qwen-code/pull/10040
• fix(ci): recover protected qwen leftovers before checkout by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/10214
• fix(core): Preserve fire-and-forget hooks after exit by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/10288
• fix(web-shell): keep pinned sessions visible in their sidebar group sections by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/10416
• fix(sdk-python): support large stream-json messages by @lwind233 in https://github.com/QwenLM/qwen-code/pull/9337
• feat(serve): stop enforcing public-only extension network policy by @callmeYe in https://github.com/QwenLM/qwen-code/pull/10156
• refactor(core): Extract MCP server config into a dedicated module by @DragonnZhang in https://github.com/QwenLM/qwen-code/pull/9496
• feat(core): address other sessions by name from send_message and list_agents by @qqqys in https://github.com/QwenLM/qwen-code/pull/10158
• fix(test): make the queued-submission drain reachable through a...