Original release notes
Qwen CUA Driver prebuilt binaries
(vendored under packages/cua-driver).
- macOS: codesigned + notarized universal binary +
QwenCuaDriver.app - Linux: unsigned (x86_64 + arm64, glibc 2.31 floor)
- Windows: unsigned (x86_64 + arm64)
- Node.js: the same workflow publishes the single
@qwen-code/cua-sdknpm package after a clean install against these release assets
Enable relative coordinates: CUA_DRIVER_RS_COORDINATE_SPACE=1
(default 0 = off; optional CUA_DRIVER_RS_COORDINATE_SCALE=1000).
Enable textual MCP payload filtering for affected model API routes:
MCP_MODEL_PAYLOAD_FILTER=1 (default off).
What's Changed
feat(web-shell): approval and ask-user dialogs as in-flow sheets; fix background-agent false failure by @ytahdn in #9351 feat(serve): Add live-state session activity watermark by @doudouOUC in #9396 perf(web-shell): keep streaming output responsive by @ytahdn in #9405 feat(serve): measure ACP child peak old-generation heap by @doudouOUC in #9380 feat(review): wire --resume through /review, review run and the CI retry by @wenshao in #9153 feat(review): record each round's posting volume in the ledger marker by @wenshao in #9413 feat(review): teach verifiers four run disciplines from a live two-arm verification by @wenshao in #9447 feat(daemon): add batch extension activation APIs by @callmeYe in #8788 fix(triage): diff the flake-gate file list against the pinned base OID by @yiliang114 in #9464 fix(cli): surface the daemon duplicate tool-call breaker as a visible loop-detected stop by @doudouOUC in #9435 feat(providers): add qwen3.8-max to Token Plan model list by @qqqys in #9383 fix(cli): prevent /rewind from dropping conversation history after /compress-fast by @yiliang114 in #9331 fix(core): reject run_in_background: false for named teammates by @yiliang114 in #9433 fix(review): clamp the posting volume at its origin, not only where it is written by @wenshao in #9460 feat(extensions): support authenticated HTTPS Git installs by @callmeYe in #9458 fix(core): clarify list_agents excludes Agent Team teammates by @yiliang114 in #9432 fix(core): reject upstream fail-fast placeholder responses by @yiliang114 in #8938 fix(core): isolate image payload eviction state by @yiliang114 in #9423 fix(core): treat duplicate provider tool-call ids as replays only when arguments match by @doudouOUC in #9436 feat(telemetry): link daemon HTTP request spans to inbound W3C traceparent by @chiga0 in #9391 feat(web-shell): add transcript contract prevalidation by @water-in-stone in #9388 fix(triage): compute the flake-gate diff before the env -i re-exec by @yiliang114 in #9468 fix(sdk): route unrecognized diagnostics onto a bounded transcript sidechannel by @yiliang114 in #9202 fix(ci): clone qwen-autofix into a recovery workflow entity by @wenshao in #9482 refactor(cli): consolidate shared helpers ahead of the legacy audit skill by @wenshao in #9345 fix(ci): no-op touch to re-register the autofix workflow triggers by @wenshao in #9479 fix(review): keep the blocker in a COMMENT body every softening path reaches by @wenshao in #9416 feat(web-shell): Consume live-state session activity timestamps by @doudouOUC in #9476 refactor(review): define each certification-bar atom exactly once by @wenshao<
