[Codename-11]

Summary

Prepare CLI+UI 0.4.0-beta.10 with the merged CUA token and Activity-label fixes from #635, #696, and #697. Refs #680 and #682.

Changes

• Synchronize CLI and Windows tray version metadata at 0.4.0-beta.10.
• Promote only the desktop fixes into the release changelog and rewrite CLI release notes.
• Preserve Android/Plugin versions and Bun 1.3.14. The Windows Insider startup failure in Windows: hermes-relay.exe crashes instantly with 0xC0000409 (STATUS_STACK_BUFFER_OVERRUN) in ntdll.dll on Windows 11 Insider Preview Build 26200 #496 remains a known issue.

Verification

• Release-track metadata and CLI/tray synchronization passed.
• CLI suite: 205 passed, one opt-in native test skipped. The combined native CUA flow was separately verified before release preparation.
• CLI type-check/TypeScript build, tray formatting/frontend build, and website asset freshness checks passed.
• Compiled Windows smoke passed using verified Bun 1.3.14 and an isolated profile: version, help, doctor, workspace, and update check.
• Hosted exact-head required checks and release artifact/installer gates are pending; publication uses the trusted prerelease approval workflow after merge.

Screenshots

No new visual change in release preparation. #697 includes rendered Activity evidence.

Compatibility / risk

CLI+UI-only beta release. No Android/Plugin publication, runtime upgrade, settings migration, or local installation. The immutable beta tag is selected from tested dev by the approval workflow; main is not promoted for this prerelease.

Lineage / contributor credit

• Source PRs: fix(desktop): accept CUA Driver 0.20 element token format #635, fix(desktop): accept hexadecimal CUA snapshot generations #696, fix(desktop): label recorded computer-control backends accurately #697. Contributor history remains intact.

Checklist

• Release-prep branch targets dev.
• Desktop validation and proof limits are listed.
• Android, translation, and server/plugin checks are N/A for the metadata-only diff.
• Website asset checks passed; no screenshot refresh was needed for root version metadata.
• Conventional release commit and public release notes/changelog are prepared.