Qwen Code cua-driver-rs-v0.20.3

Qwen CUA Driver prebuilt binaries (vendored under packages/cua-driver).

• macOS: codesigned + notarized universal binary + QwenCuaDriver.app
• Linux: unsigned (x86_64 + arm64, glibc 2.31 floor)
• Windows: unsigned UIAccess worker + native SDK payload (x86_64 + arm64); deployments must sign and trust the worker on the target machine before UIAccess activation
• Node.js: the same workflow publishes @qwen-code/cua-sdk after a clean install against these release assets and publishes the independently versioned @qwen-code/node-repl-mcp package after its MCP protocol smoke tests

Enable relative coordinates: CUA_DRIVER_RS_COORDINATE_SPACE=1 (default 0 = off; optional CUA_DRIVER_RS_COORDINATE_SCALE=1000).

Enable textual MCP payload filtering for affected model API routes: MCP_MODEL_PAYLOAD_FILTER=1 (default off).

<!-- Release notes generated using configuration in .github/release.yml at 33a75a6b0a1a6b4b405caa6f1bf1f9f47f122e5c -->

What's Changed

• fix(core): decouple permissions.allow from tool registration via tools.eager (#10075) by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/10098

• feat(serve): make Aone a first-class platform for session PR bindings by @wenshao in https://github.com/QwenLM/qwen-code/pull/10287

• feat(web-shell): show git state hints beside branch picker actions by @wenshao in https://github.com/QwenLM/qwen-code/pull/10397

• feat(review): emit the Step 3A fan-out as a generated workflow script by @qqqys in https://github.com/QwenLM/qwen-code/pull/10119

• fix(core): keep the ask_user_question dialog behind allow rules and auto-approval by @qqqys in https://github.com/QwenLM/qwen-code/pull/10160

• fix(cli): derive bootstrap --help from shared option definitions by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/8902

• feat(serve): hide workspace Browse on headless daemon hosts by @qqqys in https://github.com/QwenLM/qwen-code/pull/9406

• fix(core): prevent Anthropic streams from hanging indefinitely by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/9945

• docs(design): OpenTUI migration design and architecture notes by @chiga0 in https://github.com/QwenLM/qwen-code/pull/10343

• feat(daemon): support scoped workspace memory tasks by @qqqys in https://github.com/QwenLM/qwen-code/pull/9895

• fix(autofix): surface thread-resolution guard refusals in the round report and wait out head-propagation lag by @wenshao in https://github.com/QwenLM/qwen-code/pull/10117

• fix(core): expose resolved agent execution mode by @DragonnZhang in https://github.com/QwenLM/qwen-code/pull/9955

• fix(core): accept contained symlinks in the older-Git archive fallback by @harjothkhara in https://github.com/QwenLM/qwen-code/pull/9969

• ci: host PR evidence outside Git by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/9985

• refactor(sdk): break auth flow client cycle by @DragonnZhang in https://github.com/QwenLM/qwen-code/pull/10039

• fix(core): stop daemon Configs and background work from hijacking the debug-log session by @tomsen02 in https://github.com/QwenLM/qwen-code/pull/9930

• perf(review): dedup candidates against the carried ledger before the verify shard by @wenshao in https://github.com/QwenLM/qwen-code/pull/10121

• feat(web-shell): add Local Control QR code entry to pane header by @wenshao in https://github.com/QwenLM/qwen-code/pull/10432

• fix(core): scan archived sessions in findSessionTitlesByPrefix by @harjothkhara in https://github.com/QwenLM/qwen-code/pull/10032

• feat(autofix): consume the review convergence signals — a circuit breaker for the takeover loop by @wenshao in https://github.com/QwenLM/qwen-code/pull/10122

• fix(core): honor agent-definition model routes for named teammates by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/10092

• refactor(core): centralize JSON tag-character escaping by @AaronZ345 in https://github.com/QwenLM/qwen-code/pull/9917

• feat(web-shell): optimize session overview table by @ytahdn in https://github.com/QwenLM/qwen-code/pull/10115

• fix(ci): route release pipeline Linux jobs to the ECS runner pool by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/10036

• refactor(cli): remove unused MemoryUsageDisplay component by @qqqys in https://github.com/QwenLM/qwen-code/pull/10238

• feat(web-shell): add per-run scheduled task sessions by @qqqys in https://github.com/QwenLM/qwen-code/pull/10233

• fix(core): propagate filesystem cleanup failures in team_delete by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/10213

• refactor(core): hold Goal sends to the caller's recursion budget, and say why the other carve-outs stay by @qqqys in https://github.com/QwenLM/qwen-code/pull/10259

• fix(test): probe the native directory picker once at daemon spawn time by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/10456

• test(sdk-java): close the connection on body-less fixture responses by @wenshao in https://github.com/QwenLM/qwen-code/pull/10472

• fix(serve): advertise the native directory picker during bootstrap by @wenshao in https://github.com/QwenLM/qwen-code/pull/10471

• fix(core): settle a cancelled workflow at once, and size the window by usable CPUs by @qqqys in https://github.com/QwenLM/qwen-code/pull/10468

• fix(web-shell): replace the boot white screen with a recoverable error state by @harjothkhara in https://github.com/QwenLM/qwen-code/pull/10215

• refactor(sdk): break ACP route table cycle by @DragonnZhang in https://github.com/QwenLM/qwen-code/pull/10040

• fix(ci): recover protected qwen leftovers before checkout by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/10214

• fix(core): Preserve fire-and-forget hooks after exit by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/10288

• fix(web-shell): keep pinned sessions visible in their sidebar group sections by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/10416