Original release notes
Qwen CUA Driver prebuilt binaries
(vendored under packages/cua-driver).
- macOS: codesigned + notarized universal binary +
QwenCuaDriver.app - Linux: unsigned (x86_64 + arm64, glibc 2.31 floor)
- Windows: unsigned UIAccess worker + native SDK payload (x86_64 + arm64); deployments must sign and trust the worker on the target machine before UIAccess activation
- Node.js: the same workflow publishes
@qwen-code/cua-sdkafter a clean install against these release assets and publishes the independently versioned@qwen-code/node-repl-mcppackage after its MCP protocol smoke tests
Enable relative coordinates: CUA_DRIVER_RS_COORDINATE_SPACE=1
(default 0 = off; optional CUA_DRIVER_RS_COORDINATE_SCALE=1000).
Enable textual MCP payload filtering for affected model API routes:
MCP_MODEL_PAYLOAD_FILTER=1 (default off).
What's Changed
fix(review): keep unplanned chunks out of coverage, and read the denominator from the plan by @wenshao in #12370 feat(review): record what a plan was computed from, and report drift by @wenshao in #12369 fix(core): accept nullable pagination when reading notebooks by @DragonnZhang in #12421 fix(cli): clean up stale session debug logs by @doudouOUC in #12374 feat(java): Add managed tool execution state by @doudouOUC in #12391 fix(web-shell): isolate npm pack diagnostics from verifier output by @dvd233 in #12367 feat(serve): support SSH workspaces without a remote daemon by @wenshao in #12255 feat(web-shell): enable expiring QR pairing on non-loopback listeners by @wenshao in #12322 fix(live): spend JPEG quality, not pixels, when a shared screen will not fit by @qqqys in #12397 fix(web-shell): expose markdown message completion state by @callmeYe in #12431 fix(web-shell): verify wildcard export targets against the packed file list by @yiliang114 in #12364 fix(web-shell): recover queued prompt binding after refresh failure by @elizabethbrunette21 in #12279 fix(desktop): restore window zoom in the Tauri shell by @yiliang114 in #12410 test(scripts): warm the pinned corepack pnpm cache before workers fork (#12436) by @qwen-code-dev-bot in #12446 feat(mobile): add encrypted, isolated connection profiles (Phase 2) by @jabrailkhalil in #12121 fix(web-shell): preserve reference tags across reloads by @ytahdn in #12404 feat(java): Add runtime broker service core by @doudouOUC in #12438 fix(web-shell): browse remote workspace folders without page refresh by @yiliang114 in #12412 fix(cli): close the remaining OpenTUI parity gaps against ink by @chiga0 in #12309 fix(core): warn when tools.eager entries match no discovered tool by @yiliang114 in #12451 chore(cli): bump the OpenTUI renderer to 0.5.10 by @chiga0 in #12321 fix(web-shell): open a Live session on a daemon serving one project by @qqqys in #12441 feat(cli): Add managed runtime attestation contract by @doudouOUC in #12447 fix(web-shell): show edit diffs before approval by @yiliang114 in #12443 feat(serve): Add opt-in fixed ACP child heap enforcement by @doudouOUC in #12353 feat(cli): Move bwrap sandboxing to tool execution by @doudouOUC in #12267 feat(serve): add --token-qr escape hatch and address-only QR fallback by @wenshao in #12266 chore(sdk-java): bump fastjson2 to 2.0.65 by @wenshao in <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="5538885101" data-permission-text
