qwen-code/.github
顾盼 e8342715e5
feat(core): migrate Computer Use to cua-driver (cross-platform) (#5051)
Migrate the built-in Computer Use tool surface from open-computer-use
(npm/npx) to cua-driver-rs (native Rust driver, trycua/cua).

- Replace the 9-tool ocu surface with the full 35-tool cua-driver surface
  (page/CDP, cursor, session, recording, config, app lifecycle, …),
  generated from the live `cua-driver mcp` tools/list — pinned to v0.5.2.
- Per-platform signed + notarized binary distribution: download into
  ~/.qwen/computer-use/ with SHA-256 integrity verification, a three-tier
  Windows unzip fallback, headers/idle timeouts, and a bounded retry loop.
- macOS TCC permission flow via CuaDriver.app (com.trycua.driver), polled
  one-at-a-time through the no-gate status daemon.
- Mirror cua-driver assets on the qwen-code-assets OSS bucket with a
  push-to-main sync workflow guarded by checksums.
- Gate high-risk tools (kill_app, launch_app, start_recording, set_config,
  replay_trajectory, page JS execution) to an explicit confirmation type so
  AUTO_EDIT cannot silently auto-approve them; AUTO defers to the classifier,
  YOLO auto-approves.
2026-06-14 09:26:09 +08:00
..
actions/post-coverage-comment chore(ci): Ensure action and community workflows are consistent and not vulnerable to injection attacks (#6107) 2025-08-13 02:36:37 +00:00
ISSUE_TEMPLATE chore: re-organize labels for better triage results (#819) 2025-10-17 19:49:11 +08:00
scripts Sync upstream Gemini-CLI v0.8.2 (#838) 2025-10-23 09:27:04 +08:00
workflows feat(core): migrate Computer Use to cua-driver (cross-platform) (#5051) 2026-06-14 09:26:09 +08:00
dependabot.yml Limit dependabot PRs to security updates (#6657) 2025-08-20 22:24:43 +00:00
pull_request_template.md docs(agents,pr-template): add Working Principles and restructure PR template (#4496) 2026-05-25 19:15:35 +08:00
release.yml chore: add .github/release.yml to support skip-changelog label (#4327) 2026-05-20 22:30:52 +08:00