Fetching from the wire…
Public story · 2026-08-24 · high
cua-driver-rs ships as a standalone npm package with signed macOS builds, unsigned Linux binaries, and two new environment flags.
Why now: The release posted August 24, hours before this ran.
Qwen pulled the computer-use driver out of qwen-code and released it as its own binary and npm package. Version 0.20.0 of cua-driver-rs, published August 24, ships a codesigned and notarized macOS universal binary plus a QwenCuaDriver.app, per the release notes. It also ships unsigned Linux builds for x86_64 and arm64, requiring at least glibc 2.31, along with Windows builds. A single @qwen-code/cua-sdk npm package wraps all of it.
That matters for anyone building agents that click around a screen instead of just calling APIs. Computer-use drivers are the layer that translates model output into mouse and keyboard actions. This one used to live inside qwen-code as an internal dependency, and pulling it into its own package with its own release cadence and signed binaries is what you do when you expect other projects to import it directly.
Two new environment flags came with the split. CUA_DRIVER_RS_COORDINATE_SPACE=1 switches the driver to relative coordinates instead of absolute screen pixels, useful for running an agent across displays with different resolutions or scaling. MCP_MODEL_PAYLOAD_FILTER=1 filters MCP payloads down to text, which reads as a fix for tool calls that were passing along more than models needed.
Only the macOS binary and app bundle got the signing and notarization treatment. The Linux builds ship unsigned, a real constraint for anyone deploying in an environment with code-signing requirements. The release notes don't say whether Windows builds are signed, or whether signed Linux builds are coming, so treat both as open questions.
Each link below shares sources, entities, or timing with this story.
One Claude Code release fixed two independent permission-check bypasses on the same day. That's the story. Version 2.1.221, shipped August 4, patches a Bash tool bypass where zsh could execute hidden commands embedded inside [[ ]] regex conditionals. The approval prompt never...
A spec is a press release until someone who didn't write it implements it. GitHub made Agent Plugins 1.0 generally available on August 12 across VS Code, Copilot CLI, the Copilot SDK, and the Copilot app on all plans. The spec, published August 6, was co-authored by AWS, Anysp...
Three separate Anthropic changes over about two weeks point the same direction, and none of them announced themselves as a strategy. Claude Code 2.1.238 added claude self-hosted-runner --defer-shutdown-max-min, which keeps serving attached sessions on SIGTERM, parks whatever's...
Roughly 245 commits, adding session forking, archive/restore from the TUI resume picker, full conversation export to Markdown or clipboard, and Amazon Bedrock Runtime as a built-in provider with AWS profile and region support. Hooks can now run commands asynchronously and invo...
Issue #78431, filed August 11 against v2.1.212, with a second reporter confirming via session logs: curl -s -H "User-Agent: ashurbanipal-publish-check (email@redacted)" five occurrences in one hour (GitHub). It's following the polite-crawler convention of identifying yourself...
The .github/workflows directory holds bump-plugin-shas.yml, owner-liveness-sweep.yml, validate-plugins.yml and close-external-prs.yml, and the commit history shows them doing real work (GitHub). An August 19 commit added a deterministic static pin check for auto-exec MCP launc...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.