Qwen Code cua-driver-rs 0.20.3

Qwen CUA Driver prebuilt binaries

(vendored under packages/cua-driver).

• macOS: codesigned + notarized universal binary + QwenCuaDriver.app
• Linux: unsigned (x86_64 + arm64, glibc 2.31 floor)
• Windows: unsigned UIAccess worker + native SDK payload (x86_64 + arm64); deployments must sign and trust the worker on the target machine before UIAccess activation
• Node.js: the same workflow publishes @qwen-code/cua-sdk after a clean install against these release assets and publishes the independently versioned @qwen-code/node-repl-mcp package after its MCP protocol smoke tests

Enable relative coordinates: CUA_DRIVER_RS_COORDINATE_SPACE=1

(default 0 = off; optional CUA_DRIVER_RS_COORDINATE_SCALE=1000).

Enable textual MCP payload filtering for affected model API routes:

MCP_MODEL_PAYLOAD_FILTER=1 (default off).

What's Changed

fix(core): decouple permissions.allow from tool registration via tools.eager (#10075) by @yiliang114 in #10098 feat(serve): make Aone a first-class platform for session PR bindings by @wenshao in #10287 feat(web-shell): show git state hints beside branch picker actions by @wenshao in #10397 feat(review): emit the Step 3A fan-out as a generated workflow script by @qqqys in #10119 fix(core): keep the ask_user_question dialog behind allow rules and auto-approval by @qqqys in #10160 fix(cli): derive bootstrap --help from shared option definitions by @yiliang114 in #8902 feat(serve): hide workspace Browse on headless daemon hosts by @qqqys in #9406 fix(core): prevent Anthropic streams from hanging indefinitely by @yiliang114 in #9945 docs(design): OpenTUI migration design and architecture notes by @chiga0 in #10343 feat(daemon): support scoped workspace memory tasks by @qqqys in #9895 fix(autofix): surface thread-resolution guard refusals in the round report and wait out head-propagation lag by @wenshao in #10117 fix(core): expose resolved agent execution mode by @DragonnZhang in #9955 fix(core): accept contained symlinks in the older-Git archive fallback by @harjothkhara in #9969 ci: host PR evidence outside Git by @yiliang114 in #9985 refactor(sdk): break auth flow client cycle by @DragonnZhang in #10039 fix(core): stop daemon Configs and background work from hijacking the debug-log session by @tomsen02 in #9930 perf(review): dedup candidates against the carried ledger before the verify shard by @wenshao in #10121 feat(web-shell): add Local Control QR code entry to pane header by @wenshao in #10432 fix(core): scan archived sessions in findSessionTitlesByPrefix by @harjothkhara in #10032 feat(autofix): consume the review convergence signals - a circuit breaker for the takeover loop by @wenshao in #10122 fix(core): honor agent-definition model routes for named teammates by @yiliang114 in #10092 refactor(core): centralize JSON tag-character escaping by @AaronZ345 in #9917 feat(web-shell): optimize session overview table by @ytahdn in #10115 fix(ci): route release pipeline Linux jobs to the ECS runner pool by @yiliang114 in #10036 refactor(cli): remove unused MemoryUsageDisplay component by @qqqys in #10238 feat(web-shell): add per-run scheduled task sessions by @qqqys in #10233 fix(core): propagate filesystem cleanup failures in team_delete by @yiliang114 in #10213 refactor(core): hold Goal sends to the caller's recursion budget, and say why the other carve-outs stay by @qqqys in <a class="issue-link js-issue-link" data-error-text="