diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 596b1de5a1..895841d81f 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,4 +1,4 @@
 {
-  "libs/cua-driver": "0.12.6",
+  "libs/cua-driver": "0.13.0",
   "libs/lume": "0.4.0"
 }
diff --git a/docs/content/docs/reference/cua-driver/cli-reference.mdx b/docs/content/docs/reference/cua-driver/cli-reference.mdx
index 82b9232ce1..79a0c77cd1 100644
--- a/docs/content/docs/reference/cua-driver/cli-reference.mdx
+++ b/docs/content/docs/reference/cua-driver/cli-reference.mdx
@@ -7,7 +7,7 @@ description: Command-line interface specification for Cua Driver
   AUTO-GENERATED FILE - DO NOT EDIT DIRECTLY
   Generated by: npx tsx scripts/docs-generators/cua-driver.ts
   Source: cua-driver dump-docs
-  Version: 0.12.6
+  Version: 0.13.0
 */}
 
 Cross-platform computer-use automation driver. Install via the official script:
@@ -16,7 +16,7 @@ Cross-platform computer-use automation driver. Install via the official script:
 curl -fsSL https://cua.ai/driver/install.sh | bash
 ```
 
-Documented against Cua Driver **0.12.6**. Run `cua-driver --version` for your installed version.
+Documented against Cua Driver **0.13.0**. Run `cua-driver --version` for your installed version.
 
 The macOS-only `cua-driver permissions` command is documented separately in [macOS permissions](/reference/cua-driver/macos-permissions).
 
diff --git a/docs/content/docs/reference/cua-driver/mcp-tools.mdx b/docs/content/docs/reference/cua-driver/mcp-tools.mdx
index 003fff4eec..7ba4265573 100644
--- a/docs/content/docs/reference/cua-driver/mcp-tools.mdx
+++ b/docs/content/docs/reference/cua-driver/mcp-tools.mdx
@@ -7,7 +7,7 @@ description: Reference for every MCP tool Cua Driver exposes
   AUTO-GENERATED FILE - DO NOT EDIT DIRECTLY
   Generated by: npx tsx scripts/docs-generators/cua-driver.ts
   Source: cua-driver dump-docs
-  Version: 0.12.6
+  Version: 0.13.0
 */}
 
 import { Callout } from 'fumadocs-ui/components/callout';
diff --git a/libs/cua-driver/python/pyproject.toml b/libs/cua-driver/python/pyproject.toml
index 06bad8e8f0..93e25b5b28 100644
--- a/libs/cua-driver/python/pyproject.toml
+++ b/libs/cua-driver/python/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "cua-driver"
-version = "0.12.6"
+version = "0.13.0"
 description = "Rust-backed Cua Driver SDK and bundled executable for client applications"
 readme = "README.md"
 license = { text = "MIT" }
diff --git a/libs/cua-driver/python/src/cua_driver/__init__.py b/libs/cua-driver/python/src/cua_driver/__init__.py
index 76009dbea0..9ba0cdc501 100644
--- a/libs/cua-driver/python/src/cua_driver/__init__.py
+++ b/libs/cua-driver/python/src/cua_driver/__init__.py
@@ -4,7 +4,7 @@
 through their runtime's MCP client instead of importing a language MCP facade.
 """
 
-__version__ = "0.12.6"  # x-release-please-version
+__version__ = "0.13.0"  # x-release-please-version
 
 from ._native import (
     ActionCompletion,
diff --git a/libs/cua-driver/rust/CHANGELOG.md b/libs/cua-driver/rust/CHANGELOG.md
index 2910989b9d..f7d4c90e0f 100644
--- a/libs/cua-driver/rust/CHANGELOG.md
+++ b/libs/cua-driver/rust/CHANGELOG.md
@@ -1,5 +1,52 @@
 # Changelog
 
+## [0.13.0](https://github.com/trycua/cua/compare/cua-driver-rs-v0.12.6...cua-driver-rs-v0.13.0) (2026-07-28)
+
+
+### ⚠ BREAKING CHANGES
+
+* **cua-driver:** simplify permissions and add session identity ([#2616](https://github.com/trycua/cua/issues/2616))
+* **cua-driver:** ship semantic cursor themes
+
+### Features
+
+* **cua-driver:** add local consent UI and complete Wayland certification ([#2597](https://github.com/trycua/cua/issues/2597)) ([e9852cb](https://github.com/trycua/cua/commit/e9852cb68494e9f521c7734206f638773dbc3299))
+* **cua-driver:** browser_type can replace a field's content, not only append ([#2624](https://github.com/trycua/cua/issues/2624)) ([eb0b5a0](https://github.com/trycua/cua/commit/eb0b5a0c72cd1203e1dcaab768cdf37c33868302))
+* **cua-driver:** centralize protected resource grants per runtime ([#2577](https://github.com/trycua/cua/issues/2577)) ([dfb3781](https://github.com/trycua/cua/commit/dfb3781460f04f9b523871b2f478233a59e5d364))
+* **cua-driver:** enforce consequential and privileged actions ([#2585](https://github.com/trycua/cua/issues/2585)) ([df368a7](https://github.com/trycua/cua/commit/df368a7698a07ec9ba7e10952d483457c22841ff))
+* **cua-driver:** enforce desktop input grants ([#2580](https://github.com/trycua/cua/issues/2580)) ([2b5e938](https://github.com/trycua/cua/commit/2b5e938d7014ccdced5abe6d1c4d493063f67b56))
+* **cua-driver:** enforce exact file transfer grants ([#2581](https://github.com/trycua/cua/issues/2581)) ([3f74894](https://github.com/trycua/cua/commit/3f748946ecc176d2d7a71add246c5647acca2be3))
+* **cua-driver:** enforce private observation grants ([#2579](https://github.com/trycua/cua/issues/2579)) ([6052381](https://github.com/trycua/cua/commit/6052381e97446cca3338221eb888c49e57356890))
+* **cua-driver:** expose trusted protected-consent hosts ([#2578](https://github.com/trycua/cua/issues/2578)) ([fd4069e](https://github.com/trycua/cua/commit/fd4069ec6de49e9fa499e3057e874b9dae1d9665))
+* **cua-driver:** implement SDK-owned runtime RFC ([#2561](https://github.com/trycua/cua/issues/2561)) ([1760f25](https://github.com/trycua/cua/commit/1760f253d3c4d76618a8c97a04f2c100ffc491ac))
+* **cua-driver:** make permission adapter inventory mode-aware ([#2576](https://github.com/trycua/cua/issues/2576)) ([83a2f6f](https://github.com/trycua/cua/commit/83a2f6fad7b2f3349be40433e343cd8f934495eb))
+* **cua-driver:** make SDK-owned runtime the default ([#2545](https://github.com/trycua/cua/issues/2545)) ([a62e821](https://github.com/trycua/cua/commit/a62e8219255f15f6ed747c03337198d6fe32912f))
+* **cua-driver:** ship semantic cursor themes ([e06e922](https://github.com/trycua/cua/commit/e06e9229ba65529f1594b11a6834cc2738117045))
+* **cua-driver:** ship vector semantic cursor themes ([#2603](https://github.com/trycua/cua/issues/2603)) ([e2c52d5](https://github.com/trycua/cua/commit/e2c52d50ba331798a3da4871fdad3bbcdd399633))
+* **cua-driver:** simplify permissions and add session identity ([#2616](https://github.com/trycua/cua/issues/2616)) ([8dac16e](https://github.com/trycua/cua/commit/8dac16e2c22a24687983e0e169a4dc2329e6cadb))
+* **cua-driver:** support multiple direct runtimes per process ([#2575](https://github.com/trycua/cua/issues/2575)) ([5f786b0](https://github.com/trycua/cua/commit/5f786b058162bc69caacaa00c05f6fcca85d9d3d))
+
+
+### Bug Fixes
+
+* **cua-driver:** accept letter keys on Windows ([#2551](https://github.com/trycua/cua/issues/2551)) ([506a4ed](https://github.com/trycua/cua/commit/506a4ede22dfe791b3630640bc0c24e0f03c6d96))
+* **cua-driver:** activate Chromium checkboxes safely on Linux ([#2633](https://github.com/trycua/cua/issues/2633)) ([1f16242](https://github.com/trycua/cua/commit/1f16242750df58b6af4b7b44f4f3a317a66a4bb1))
+* **cua-driver:** avoid leaking XInput masters without uinput ([36e8d5a](https://github.com/trycua/cua/commit/36e8d5ad480096d0e5b576912674bdc3b9a89267))
+* **cua-driver:** carry full 32-bit snapshot generation in element tokens ([#2608](https://github.com/trycua/cua/issues/2608)) ([fcac692](https://github.com/trycua/cua/commit/fcac692b6d6531a32f3ebc5d7a9ba675d90ec86a))
+* **cua-driver:** clarify foreground escalation guidance ([b4f6ffc](https://github.com/trycua/cua/commit/b4f6ffca79b4f746e28b30eaa041c534704ee372))
+* **cua-driver:** declare WinRects support for GNOME Shell 49 and 50 ([#2565](https://github.com/trycua/cua/issues/2565)) ([776dadd](https://github.com/trycua/cua/commit/776daddcbc7dba345343f0e0f709bd9c486ec087))
+* **cua-driver:** keep press_key modifiers on native Wayland ([#2573](https://github.com/trycua/cua/issues/2573)) ([669c917](https://github.com/trycua/cua/commit/669c9177895c4998aa2d393f01e262d506384eb0))
+* **cua-driver:** pick the AT-SPI action by name, not by position ([#2574](https://github.com/trycua/cua/issues/2574)) ([ee77164](https://github.com/trycua/cua/commit/ee77164b285d9ba313bdd7da03b32449722d8ce4))
+* **cua-driver:** prefer foreground delivery in refusal guidance ([#2623](https://github.com/trycua/cua/issues/2623)) ([6d97684](https://github.com/trycua/cua/commit/6d97684fc4beebbb4ea3d658fa49817f9b7cd0f8))
+* **cua-driver:** preserve Windows autostart path quoting ([cf07c2c](https://github.com/trycua/cua/commit/cf07c2c9ef7b17808d4152d91bb6c5ee22b733ab))
+* **cua-driver:** recover invalid Windows bounds ([#2601](https://github.com/trycua/cua/issues/2601)) ([0026845](https://github.com/trycua/cua/commit/0026845a096fd5a960e6f97742fbaedb054998be))
+* **cua-driver:** redial Chrome after native consent ([#2635](https://github.com/trycua/cua/issues/2635)) ([fdebc59](https://github.com/trycua/cua/commit/fdebc59791ae2a8c6bc25f29770dc21f3c5faea7))
+* **cua-driver:** refuse disabled macOS AX actions ([#2637](https://github.com/trycua/cua/issues/2637)) ([8f9c2df](https://github.com/trycua/cua/commit/8f9c2dfd422a14a29fa49870e26f790c0c0ef211))
+* **cua-driver:** reject browser-origin MCP HTTP requests ([#2378](https://github.com/trycua/cua/issues/2378)) ([fccac48](https://github.com/trycua/cua/commit/fccac4852e7d1141ab0b03202c9093d5e826d448))
+* **cua-driver:** restore macOS background pixel clicks ([1fbcacf](https://github.com/trycua/cua/commit/1fbcacf6f5ecdec31414a364c3c4450dfce82e70))
+* **cua-driver:** restore v0.12.5 and v0.12.6 installs ([#2598](https://github.com/trycua/cua/issues/2598)) ([fc17069](https://github.com/trycua/cua/commit/fc17069b69786f81ae0ff50eefeabe328b06dc4b))
+* **cua-driver:** verify set_value writes with an AXValue read-back ([#2621](https://github.com/trycua/cua/issues/2621)) ([e143b95](https://github.com/trycua/cua/commit/e143b9565069aa35c9ff21fec171858d8a264b06))
+
 ## [0.12.6](https://github.com/trycua/cua/compare/cua-driver-rs-v0.12.5...cua-driver-rs-v0.12.6) (2026-07-24)
 
 
diff --git a/libs/cua-driver/rust/Cargo.lock b/libs/cua-driver/rust/Cargo.lock
index 1ac8e54236..675331d80b 100644
--- a/libs/cua-driver/rust/Cargo.lock
+++ b/libs/cua-driver/rust/Cargo.lock
@@ -939,7 +939,7 @@ dependencies = [
 
 [[package]]
 name = "cua-driver"
-version = "0.12.6"
+version = "0.13.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -974,7 +974,7 @@ dependencies = [
 
 [[package]]
 name = "cua-driver-bindgen"
-version = "0.12.6"
+version = "0.13.0"
 dependencies = [
  "cbindgen",
  "uniffi",
@@ -982,7 +982,7 @@ dependencies = [
 
 [[package]]
 name = "cua-driver-contract"
-version = "0.12.6"
+version = "0.13.0"
 dependencies = [
  "schemars",
  "serde",
@@ -992,7 +992,7 @@ dependencies = [
 
 [[package]]
 name = "cua-driver-core"
-version = "0.12.6"
+version = "0.13.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -1019,7 +1019,7 @@ dependencies = [
 
 [[package]]
 name = "cua-driver-sdk"
-version = "0.12.6"
+version = "0.13.0"
 dependencies = [
  "async-trait",
  "core-foundation",
@@ -1041,7 +1041,7 @@ dependencies = [
 
 [[package]]
 name = "cua-driver-testkit"
-version = "0.12.6"
+version = "0.13.0"
 dependencies = [
  "core-foundation",
  "libc",
@@ -1055,7 +1055,7 @@ dependencies = [
 
 [[package]]
 name = "cua-driver-uia"
-version = "0.12.6"
+version = "0.13.0"
 dependencies = [
  "anyhow",
  "cua-driver-core",
@@ -1070,7 +1070,7 @@ dependencies = [
 
 [[package]]
 name = "cursor-overlay"
-version = "0.12.6"
+version = "0.13.0"
 dependencies = [
  "anyhow",
  "cua-driver-contract",
@@ -1087,7 +1087,7 @@ dependencies = [
 
 [[package]]
 name = "cursor-theme-cli"
-version = "0.12.6"
+version = "0.13.0"
 dependencies = [
  "anyhow",
  "cursor-overlay",
@@ -2597,7 +2597,7 @@ checksum = "a89322df9ebe1c1578d689c92318e070967d1042b512afbe49518723f4e6d5cd"
 
 [[package]]
 name = "pip-preview"
-version = "0.12.6"
+version = "0.13.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -2657,7 +2657,7 @@ checksum = "b4596b6d070b27117e987119b4dac604f3c58cfb0b191112e24771b2faeac1a6"
 
 [[package]]
 name = "platform-linux"
-version = "0.12.6"
+version = "0.13.0"
 dependencies = [
  "anyhow",
  "ashpd",
@@ -2700,7 +2700,7 @@ dependencies = [
 
 [[package]]
 name = "platform-macos"
-version = "0.12.6"
+version = "0.13.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -2734,7 +2734,7 @@ dependencies = [
 
 [[package]]
 name = "platform-windows"
-version = "0.12.6"
+version = "0.13.0"
 dependencies = [
  "anyhow",
  "async-trait",
diff --git a/libs/cua-driver/rust/Cargo.toml b/libs/cua-driver/rust/Cargo.toml
index 6cdd7deb9c..e00c724c9f 100644
--- a/libs/cua-driver/rust/Cargo.toml
+++ b/libs/cua-driver/rust/Cargo.toml
@@ -17,7 +17,7 @@ members = [
 ]
 
 [workspace.package]
-version = "0.12.6"
+version = "0.13.0"
 edition = "2021"
 authors = ["trycua"]
 license = "MIT"
diff --git a/libs/cua-driver/rust/Skills/cua-driver/SKILL.md b/libs/cua-driver/rust/Skills/cua-driver/SKILL.md
index a6047f635a..944433f4a0 100644
--- a/libs/cua-driver/rust/Skills/cua-driver/SKILL.md
+++ b/libs/cua-driver/rust/Skills/cua-driver/SKILL.md
@@ -1,7 +1,7 @@
 ---
 name: cua-driver
 description: Drive a native GUI app (macOS, Windows, Linux) via the cua-driver CLI (default) or MCP server; snapshot its accessibility tree, click/type/scroll by element_index or pixel coordinates, and verify via re-snapshot without bringing the target to the foreground. Use when the user asks you to operate, drive, automate, or perform a GUI task in a real application on the host.
-version: 0.12.6 # x-release-please-version
+version: 0.13.0 # x-release-please-version
 metadata:
   openclaw:
     requires:
diff --git a/libs/cua-driver/rust/VERSION b/libs/cua-driver/rust/VERSION
index dabff2f138..54d1a4f2a4 100644
--- a/libs/cua-driver/rust/VERSION
+++ b/libs/cua-driver/rust/VERSION
@@ -1 +1 @@
-0.12.6
+0.13.0
diff --git a/libs/cua-driver/scripts/_install-rust.sh b/libs/cua-driver/scripts/_install-rust.sh
index 804250c09c..d7586484d5 100644
--- a/libs/cua-driver/scripts/_install-rust.sh
+++ b/libs/cua-driver/scripts/_install-rust.sh
@@ -512,7 +512,7 @@ done
 # the baked line hasn't been updated yet (dev / pre-release checkouts).
 #
 # ~~~ BAKED_VERSION: auto-updated in the release PR — do not edit ~~~
-CUA_DRIVER_RS_BAKED_VERSION="0.12.6" # x-release-please-version
+CUA_DRIVER_RS_BAKED_VERSION="0.13.0" # x-release-please-version
 # ~~~ END_BAKED_VERSION ~~~
 
 if [[ -n "${CUA_DRIVER_RS_VERSION:-}" ]]; then
diff --git a/libs/cua-driver/scripts/install.ps1 b/libs/cua-driver/scripts/install.ps1
index bf5b5089a8..f29684b912 100644
--- a/libs/cua-driver/scripts/install.ps1
+++ b/libs/cua-driver/scripts/install.ps1
@@ -114,7 +114,7 @@ $ThemeBinaryName = "cua-cursor-theme.exe"
 # where the baked line hasn't been updated yet.
 #
 # ~~~ BAKED_VERSION: auto-updated in the release PR — do not edit ~~~
-$Script:CuaDriverRsBakedVersion = "0.12.6" # x-release-please-version
+$Script:CuaDriverRsBakedVersion = "0.13.0" # x-release-please-version
 # ~~~ END_BAKED_VERSION ~~~
 $CursorThemeRequiredFrom = [version]"0.12.7"
 
diff --git a/libs/cua-driver/typescript/package-lock.json b/libs/cua-driver/typescript/package-lock.json
index b6ee9e65cf..cda89b2153 100644
--- a/libs/cua-driver/typescript/package-lock.json
+++ b/libs/cua-driver/typescript/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@trycua/cua-driver",
-  "version": "0.12.6",
+  "version": "0.13.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@trycua/cua-driver",
-      "version": "0.12.6",
+      "version": "0.13.0",
       "license": "MIT",
       "repository": {
         "type": "git",
diff --git a/libs/cua-driver/typescript/package.json b/libs/cua-driver/typescript/package.json
index bf2bb3ccc8..2716f8c64e 100644
--- a/libs/cua-driver/typescript/package.json
+++ b/libs/cua-driver/typescript/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@trycua/cua-driver",
-  "version": "0.12.6",
+  "version": "0.13.0",
   "description": "Rust-backed Cua Driver SDK and embedded Node host",
   "type": "module",
   "license": "MIT",