DeskBox 1.5.3

DeskBox 1.5.3 improves startup reliability and notification activation. Direct installations gain a standard startup method with an optional scheduled task, and both distribution channels register notifications before decoding activation arguments.

Released on September 16, 2026.

Highlights

• Choose a startup method on direct installations. New installations default to the standard Windows Run entry, which shows up in Windows "Startup apps". Existing installations retain their active method. Scheduled tasks remain optional; a failed task registration falls back only after the standard entry is verified and alternative entries are cleaned up. Failed switches preserve the previous registration, Windows opt-outs are respected, and choosing a method while startup is off does not enable it.
• Preserve Unicode task paths. Task definitions and rollback snapshots are read directly as Unicode through Task Scheduler COM. Chinese account names and installation paths no longer depend on guessing a redirected console code page — "start with Windows" can be enabled reliably on non-ASCII accounts (reported through the in-app feedback channel).
• Fix notification activation initialization. The notification manager is registered before rich activation arguments are read, startup-task detection uses the platform activation API, early notifications use the durable activation queue until the main instance is ready, and unsupported or failed notification registration keeps ordinary startup available.
• Recover from early startup failures. Tray creation retries while the desktop shell starts, and fatal initialization failures terminate instead of leaving a headless process that swallows every later launch while holding the instance lock (issue #373). The startup watchdog also covers constructor initialization, and the logon task requests automatic retries for failed launches.
• Keep diagnostic checks readable. Boolean verification results such as path matching and execution-limit checks survive diagnostics redaction, while actual paths and account identifiers remain hidden.

See CHANGELOG.md for the complete list.

Downloads and verification

GitHub Releases installers

The direct installers are Native AOT builds with the matching private Windows App Runtime bundled for offline installation. They are not Authenticode-signed; verify the SHA-256 checksums after downloading. Matching .sha256 sidecars accompany both installers.

Microsoft Store upload

This combined .msixupload is the only file from this section intended for Partner Center. It contains DeskBox_1.5.3.0_x64_arm64.msixbundle and the matching x64 and ARM64 .appxsym files. The internal bundle is version 1.5.3.0 and has SHA-256 A51C31A248ACB87EDA89477C31BB2F438371810B104901639153802D3AE07DB8. The single-architecture .msixupload outputs are intermediate build evidence, not the final submission artifact.

Both direct installers and the combined Store upload were produced from the source tree of commit 24494db58abf87e705f9b3041f4e5ac72a7a7718.

Validation

• x64 regression suite: 3582/3582 passed (2026-09-16).
• Unicode task integration probe: the production UTF-8 manifest, STA/MTA callers, Unicode paths, snapshot restoration and Native AOT verified on Windows 11.
• Independent Native AOT MSIX probe: COM cold activation, a callback to the same running process, and cross-process envelope forwarding passed, preserving snooze=30m selection input.
• Direct x64/ARM64 Native AOT payload and installer checks passed for both architectures; the source remained unchanged during both publishes.
• Combined Store container and both architecture audits passed; bundle identity/version, architecture coverage, symbol files and inner-package hashes verified.
• Windows 10 login checks passed on 2026-09-16 (standard and scheduled-task startup, method switching, tray visibility at ordinary-user integrity).

中文说明

DeskBox 1.5.3 改善开机自启与通知激活的可靠性。直装版增加标准自启和可选的计划任务，两种发行渠道都会先注册通知，再读取通知激活参数。

2026 年 9 月 16 日发布。

主要更新

• 直装版可选择自启方式。 新安装默认使用标准 Windows Run 启动项（可在 Windows"启动应用"中管理），已有安装保留实际生效的方式。计划任务作为可选项；注册失败时，只有标准入口验证和替代入口清理成功才报告回退成功。切换失败保留旧注册，尊重 Windows 禁用状态，关闭自启时改选方式只保存偏好。
• 完整读取 Unicode 任务路径。 计划任务定义与回滚快照直接通过 Task Scheduler COM 读取，不再猜测重定向输出的代码页——非 ASCII（如中文）账户名和安装路径下"开机自启"可以可靠开启（经应用内反馈渠道报告）。
• 修复通知激活初始化顺序。 先注册通知管理器，再读取激活参数；自启来源识别使用平台激活 API。初始化期间的通知先进入持久队列，等主实例就绪后处理；通知不受支持或注册失败时仍保留普通启动。
• 改善登录早期的启动恢复。 桌面外壳启动期间重试托盘创建；不可恢复的初始化失败会退出，不再残留占用实例锁、吞掉后续所有启动的无界面进程（issue #373）。看门狗覆盖构造阶段，登录任务对失败启动登记自动重试。
• 保留有用的诊断检查结果。 路径匹配、执行时限等布尔检查结果不再被误脱敏，实际路径与账户信息仍会隐藏。

完整条目见 CHANGELOG.md。

下载与校验

GitHub Releases 安装包

两个直接安装包均为 Native AOT 构建，内置匹配架构的私有 Windows App Runtime，可离线安装。安装包未进行 Authenticode 签名，各附带一个 .sha256 校验文件，下载后请校验。

Microsoft Store 上传包

Partner Center 只需要上传这个合并后的 .msixupload。其中包含 DeskBox_1.5.3.0_x64_arm64.msixbundle 和匹配的 x64、ARM64 .appxsym。内部 bundle 版本为 1.5.3.0，SHA-256 为 A51C31A248ACB87EDA89477C31BB2F438371810B104901639153802D3AE07DB8。单架构 .msixupload 仅用于构建取证，不是提交物。

直装安装包与商店合并包均产自提交 24494db58abf87e705f9b3041f4e5ac72a7a7718 的源码树。

验证状态

• 2026-09-16 x64 全量回归测试 3582/3582 通过。
• 本机 Windows 11 的 Unicode 任务探针通过了原应用 UTF-8 清单、STA/MTA 线程、中文路径、快照恢复和 Native AOT 验证。
• 独立 Native AOT MSIX 探针通过 COM 冷启动、同一进程运行中回调和跨进程参数转发，保留 snooze=30m 选择输入。
• x64/ARM64 直接安装包及 Native AOT 载荷双架构均通过，两次发布编译期间源码保持不变。
• 合并商店容器及双架构审计通过，已核对身份、版本、双架构覆盖、符号文件及内部包哈希。
• Windows 10 登录检查已于 2026-09-16 通过（标准与计划任务自启、方式切换、普通权限托盘）。