Codename-11 · Oct 8, 2026 · Oct 8, 2026
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -13,10 +13,6 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/), and this
 
 ### Fixed
 
-- Desktop Activity identifies structured CUA snapshots and system captures correctly, and no longer assumes compatibility input or background dispatch when an event records neither. (#682)
-- Desktop CUA element actions continue working after snapshot generations reach hexadecimal digits. (#680)
-
-- Desktop computer control accepts the current CUA Driver element token format. Element actions such as click, set value, and scroll no longer fail with a transport error when CUA Driver 0.20 or newer returns `<snapshot>:<index>` element handles; the legacy token form remains accepted.
 - Secure Link supports paired-device listing, session shortening, and revocation with the existing Relay authorization rules.
 - Android pauses both wake-word listener modes before voice capture and resumes listening after voice exits, preventing microphone conflicts. (#681)
 - Android Relay sessions distinguish shortening from operator-approved renewal, retain actionable update failures, and expose accessible pairing duration controls. (#659)
@@ -28,6 +24,13 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/), and this
 
 - Android keeps user-started Dashboard browser sign-in connected through its callback and session verification, then ends the foreground service. Callback pages identify the selected sign-in provider.
 
+## [0.4.0-beta.10] - 2026-10-08
+
+### Fixed
+
+- Structured CUA clicks, value changes, and scrolling accept current driver handles, including hexadecimal snapshot generations. (#680)
+- Windows Activity identifies CUA snapshots and system captures correctly and avoids assuming a backend or dispatch mode when neither was recorded. (#682)
+
 ## [0.4.0-beta.9] - 2026-10-07
 
 ### Added

diff --git a/CLI_RELEASE_NOTES.md b/CLI_RELEASE_NOTES.md
@@ -1,28 +1,30 @@
 # Hermes-Relay CLI+UI v__VERSION__
 
-**Release Date:** 2026-10-07
+**Release Date:** 2026-10-08
 
 ## Summary
 
-Pair the CLI or Windows management UI with a complete Dashboard invite, retaining its connection routes and Secure Link certificate trust.
+Structured computer control accepts current CUA Driver element handles, and Windows Activity shows the backend actually recorded for each operation.
 
 **Beta phase.** Assets remain unsigned. Standalone CLI binaries ship for Windows x64, Linux x64/arm64, and macOS x64/arm64; the management UI is Windows-only.
 
-## Added
+## Fixed
 
-- Paste and import a full Dashboard pairing invite in the Windows management UI. The existing `hermes-relay pair --pair-qr` command remains available.
-- Native import preserves route candidates and Secure Link certificate trust and keeps one-use invite contents out of command arguments and activity logs.
+- CUA clicks, value changes, and element scrolling accept snapshot handles, including hexadecimal generations after the first nine snapshots. Legacy handles remain supported. (#680)
+- Activity correctly identifies CUA snapshots and system captures. Entries without backend or dispatch metadata no longer appear as compatibility input in the background. (#682)
 
-## Changed
+## Known issue
 
-- CLI pairing displays advertised routes with protocols and ports and gives actionable direct-route guidance when Dashboard authentication is unsupported.
+The startup crash reported on Windows Insider build 26200.8875 remains under investigation in #496. This release does not change the pinned Bun runtime.
 
 ## Compatibility
 
 Dashboard CLI+UI pairing requires Plugin 1.13.0 or newer. Existing direct URL-and-code pairing and saved hosts remain supported.
 
 ## Install
 
+**Windows CLI + management UI:** download [hermes-relay-windows-x64-setup.exe](https://github.com/Codename-11/hermes-relay/releases/download/__TAG__/hermes-relay-windows-x64-setup.exe). Release assets are covered by `SHA256SUMS.txt`.
+
 **Windows CLI + management tray (PowerShell):**
 
 ```powershell

diff --git a/desktop/package-lock.json b/desktop/package-lock.json
diff --git a/desktop/package.json b/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@hermes-relay/cli",
-  "version": "0.4.0-beta.9",
+  "version": "0.4.0-beta.10",
   "description": "Thin-client CLI for Hermes-Relay — talk to a remote Hermes agent over WSS with pairing auth, stream-renders tool calls and responses to plain stdout.",
   "type": "module",
   "bin": {

diff --git a/desktop/src/version.ts b/desktop/src/version.ts
@@ -1,2 +1,2 @@
 // Regenerated from package.json by gen:version script. Do not edit by hand.
-export const VERSION = "0.4.0-beta.9" as const
+export const VERSION = "0.4.0-beta.10" as const
diff --git a/desktop/tray/Cargo.lock b/desktop/tray/Cargo.lock
diff --git a/desktop/tray/Cargo.toml b/desktop/tray/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "hermes-relay-tray"
-version = "0.4.0-beta.9"
+version = "0.4.0-beta.10"
 description = "Compact Windows management UI for Hermes-Relay CLI"
 authors = ["Axiom Labs"]
 edition = "2021"

diff --git a/desktop/tray/package-lock.json b/desktop/tray/package-lock.json
diff --git a/desktop/tray/package.json b/desktop/tray/package.json
@@ -1,7 +1,7 @@
 {
   "name": "@hermes-relay/tray-ui",
   "private": true,
-  "version": "0.4.0-beta.9",
+  "version": "0.4.0-beta.10",
   "type": "module",
   "scripts": {
     "dev": "vite --host 127.0.0.1",

diff --git a/desktop/tray/tauri.conf.json b/desktop/tray/tauri.conf.json
@@ -1,7 +1,7 @@
 {
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "Hermes-Relay CLI UI",
-  "version": "0.4.0-beta.9",
+  "version": "0.4.0-beta.10",
   "identifier": "com.axiomlabs.hermes-relay-tray",
   "build": {
     "beforeDevCommand": "npm run dev",