Qwen Code cua-driver-rs-v0.20.11

Qwen CUA Driver prebuilt binaries (vendored under packages/cua-driver).

• macOS: codesigned + notarized universal binary + QwenCuaDriver.app
• Linux: unsigned (x86_64 + arm64, glibc 2.31 floor)
• Windows: unsigned UIAccess worker + native SDK payload (x86_64 + arm64); deployments must sign and trust the worker on the target machine before UIAccess activation
• Node.js: the same workflow publishes @qwen-code/cua-sdk after a clean install against these release assets and publishes the independently versioned @qwen-code/node-repl-mcp package after its MCP protocol smoke tests

Enable relative coordinates: CUA_DRIVER_RS_COORDINATE_SPACE=1 (default 0 = off; optional CUA_DRIVER_RS_COORDINATE_SCALE=1000).

Enable textual MCP payload filtering for affected model API routes: MCP_MODEL_PAYLOAD_FILTER=1 (default off).

<!-- Release notes generated using configuration in .github/release.yml at 5e562efe554214d2e458ef83d6f3d45afddd850e -->

What's Changed

• fix(review): keep unplanned chunks out of coverage, and read the denominator from the plan by @wenshao in https://github.com/QwenLM/qwen-code/pull/12370

• feat(review): record what a plan was computed from, and report drift by @wenshao in https://github.com/QwenLM/qwen-code/pull/12369

• fix(core): accept nullable pagination when reading notebooks by @DragonnZhang in https://github.com/QwenLM/qwen-code/pull/12421

• fix(cli): clean up stale session debug logs by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12374

• feat(java): Add managed tool execution state by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12391

• fix(web-shell): isolate npm pack diagnostics from verifier output by @dvd233 in https://github.com/QwenLM/qwen-code/pull/12367

• feat(serve): support SSH workspaces without a remote daemon by @wenshao in https://github.com/QwenLM/qwen-code/pull/12255

• feat(web-shell): enable expiring QR pairing on non-loopback listeners by @wenshao in https://github.com/QwenLM/qwen-code/pull/12322

• fix(live): spend JPEG quality, not pixels, when a shared screen will not fit by @qqqys in https://github.com/QwenLM/qwen-code/pull/12397

• fix(web-shell): expose markdown message completion state by @callmeYe in https://github.com/QwenLM/qwen-code/pull/12431

• fix(web-shell): verify wildcard export targets against the packed file list by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12364

• fix(web-shell): recover queued prompt binding after refresh failure by @elizabethbrunette21 in https://github.com/QwenLM/qwen-code/pull/12279

• fix(desktop): restore window zoom in the Tauri shell by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12410

• test(scripts): warm the pinned corepack pnpm cache before workers fork (#12436) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/12446

• feat(mobile): add encrypted, isolated connection profiles (Phase 2) by @jabrailkhalil in https://github.com/QwenLM/qwen-code/pull/12121

• fix(web-shell): preserve reference tags across reloads by @ytahdn in https://github.com/QwenLM/qwen-code/pull/12404

• feat(java): Add runtime broker service core by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12438

• fix(web-shell): browse remote workspace folders without page refresh by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12412

• fix(cli): close the remaining OpenTUI parity gaps against ink by @chiga0 in https://github.com/QwenLM/qwen-code/pull/12309

• fix(core): warn when tools.eager entries match no discovered tool by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12451

• chore(cli): bump the OpenTUI renderer to 0.5.10 by @chiga0 in https://github.com/QwenLM/qwen-code/pull/12321

• fix(web-shell): open a Live session on a daemon serving one project by @qqqys in https://github.com/QwenLM/qwen-code/pull/12441

• feat(cli): Add managed runtime attestation contract by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12447

• fix(web-shell): show edit diffs before approval by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12443

• feat(serve): Add opt-in fixed ACP child heap enforcement by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12353

• feat(cli): Move bwrap sandboxing to tool execution by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12267

• feat(serve): add --token-qr escape hatch and address-only QR fallback by @wenshao in https://github.com/QwenLM/qwen-code/pull/12266

• chore(sdk-java): bump fastjson2 to 2.0.65 by @wenshao in https://github.com/QwenLM/qwen-code/pull/12465

• docs: update README hero image by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12474

• feat(java): Persist managed tool executions with JDBC by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12445

• fix(core,docs): correct what the deferred-tool bridge made stale or untested by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12355

• docs(plans): record why CI test time is bound by module import, not scheduling by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/10909

• perf(core): move the Agent tool's prompt-writing guidance into a bundled skill by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12323

• fix(vscode-ide-companion): regenerate NOTICES.txt after release dependency reorder (#12479) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/12483

• chore(vscode-ide-companion): regenerate NOTICES.txt after dependency reorder (#12481) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/12485

• fix(java): Fence stale tool dispatch owners by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12477

• fix(java): Make JDBC lease clocks timezone and storage safe by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12478

• fix(cli): hide external editor option when the configured editor is unavailable by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12498