Qwen Code's CUA driver ships notarized on macOS but requires deployers to sign the Windows UIAccess worker themselves

GitHub·low signalXBlueskyLinkedInCopy link

cua-driver-rs-v0.20.3, published 2026-09-01, ships the Qwen computer-use driver as a codesigned and notarized universal macOS binary plus QwenCuaDriver.app, unsigned Linux builds on a glibc 2.31 floor, and an unsigned Windows UIAccess worker that deployments must sign and trust on the target machine before UIAccess activation. Two opt-in environment flags are documented: CUA_DRIVER_RS_COORDINATE_SPACE=1 for relative coordinates and MCP_MODEL_PAYLOAD_FILTER=1 for textual MCP payload filtering. The release also decouples permissions.allow from tool registration via tools.eager (#10098) and keeps the ask_user_question dialog behind allow rules and auto-approval (#10160).