Scrobblix Windows beta 12 - Startup and artwork diagnostics (unsigned preview)

Unsigned Windows x64 diagnostic prerelease. This is not a startup-speed or missing-artwork fix.

What changed

• Add one-shot XAML root-loaded and first-render-tick diagnostic milestones. Elapsed values start at App construction, include instrumentation/logger overhead and do not measure OS loader time or confirm pixels reached the display.
• Keep up to 16 valid known startup milestones per inspected log separately from its 750-line tail, so busy playback logs do not immediately remove startup evidence. Existing limits remain: up to five selected log files, each at most 8 MiB. Older/unselected/oversized log evidence is not guaranteed.
• Add fixed privacy-safe artwork reason codes for local key/result/image-URL availability, source class and HTTP/content-type rejection classes. Configured keys are not necessarily valid; available metadata/image URLs are not successful downloads or provider acknowledgements. Concurrent events have no track/job correlation.
• Strengthen native startup qualification to use only the launched PID's new log and require unique, ordered, bounded milestones, with LF/CRLF malformed/duplicate regression cases.

Image validation, artwork fallback policy, scrobble submission, queue reconciliation and listening-data schema are unchanged. The support ZIP still excludes raw messages, listening history, tracks, artwork, credentials, URLs and full paths. It is exported locally only when requested and is not uploaded automatically.

Install and identify

Close Scrobblix before running Scrobblix-Windows-x64-Setup.exe. Keep the existing local profile; do not reset or delete the data folder. This remains unsigned and Windows may show a warning. Manual update only.

Release tag: windows-v0.1.0-beta.12. Internal packaging defaults still show installer 0.1.0.10 and app 1.0.0. About > Source revision must show 101e3c5.

Verification and limits

Canonical main source 101e3c5, PR #176. Full Windows CI, native fresh/legacy startup, PowerShell parser regressions, portable startup and installer/profile-preserving upgrade qualification passed in https://github.com/frpboy/Scrobblix/actions/runs/42990323024 . Actual native About, Home and installer/upgrade captures were visually checked. Saturation, privacy-canary and synthetic HTTP diagnostics tests pass.

This build makes the next private diagnostic export more useful. It does not establish the cause of any real-device blank-window delay or absent cover, clear unknown outcomes, or prove all real-device scrobbles delivered. Real-account/device soak, credential migration and interrupted rollback remain separate qualification work. Existing releases are unchanged.

Installer bytes: 92,338,499. SHA-256: d440530a17556a7194e021d940204703e90fd0069f5f0629493f1fefb7bb1299.

Scrobblix Windows beta 11 - Queue evidence clarity (unsigned preview)

Unsigned Windows x64 development preview. Manual update only.

Queue reconciliation clarity

• Show the original persisted play start separately from the mutable queue due time, including seconds and local UTC offset.
• Distinguish provider-accepted actions from acceptance confirmed locally by the user, and show when historical evidence is unspecified.
• Unknown-outcome guidance no longer assumes a connection failure. Confirmation requires the exact play, not an earlier repeat of the track. Missing start times are clearly marked.

No queue rows are cleared, retried or reconciled by this update. Local user confirmation is not a new provider acknowledgement. Existing ambiguous outcomes still need careful checking before any retry.

Download and update

Use Scrobblix-Windows-x64-Setup.exe. Close Scrobblix before updating. Keep the existing local profile; do not delete its data folder. This preview remains unsigned and Windows may show a warning.

Release tag is windows-v0.1.0-beta.11. Packaging defaults still report installer build 0.1.0.10 and app version 1.0.0; identify this build by About > Source revision: 20d3430.

Verification

Canonical main source: 20d3430, PR #175.
Full Windows CI, native WinUI reconciliation captures, portable startup and installer/profile-preserving upgrade qualification passed in https://github.com/frpboy/Scrobblix/actions/runs/42977156253 . Native rendered queue and installer/upgrade captures were visually checked. Earlier PR CI had one transient wizard-visibility timeout and passed on an unchanged retry; final PR and canonical runs passed on their first attempts.

This is a UI/evidence-clarity fix, not proof that every real-device scrobble was delivered. Real-account/device soak, credential migration and interrupted rollback remain separate qualification work. Existing releases are unchanged.

Installer bytes: 92,324,946. SHA-256: 45e3d1fae9442b756e566b18b5ba6db7546bf843d53367eed8d3ce1b291351a4.

Scrobblix Windows 0.1.0-beta.9 - single installer preview

Scrobblix Windows 0.1.0-beta.9: single installer preview

Download Scrobblix-Windows-x64-Setup.exe. This is one real per-user installer, not a ZIP to extract. It includes the existing desktop app, private runtimes, optional companion files and notices. No separate runtime download is performed by setup.

Install or switch from beta 8 ZIP

1. Exit Scrobblix from its system tray, including any copy started from an older extracted folder.
2. Run Setup.exe and follow the wizard. It installs into %LOCALAPPDATA%\Programs\Scrobblix, adds a Start menu shortcut and registers with Windows Installed Apps. No admin elevation, startup registration or browser extension registration is added.
3. Open Scrobblix from Start. Existing history, account settings and queue remain in the same local profile. Keep the old ZIP folder until you check the installed app; setup does not remove it.

Requires x64-compatible Windows build 26100 or newer, matching this app's current target. The installer and app are unsigned previews. Windows may warn about the publisher or reputation. This release does not include a signing certificate or a promise of SmartScreen reputation.

Data and uninstall

Setup and uninstall do not reset the queue, retry outcome-unknown submissions, delete the local history/profile, or call Windows Credential Locker APIs. Program-only uninstall intentionally retains local data and credentials. Setup and uninstall refuse while the app holds its running-instance gate; they do not force-close it. Browser companion activation remains a separate optional setup action.

Verified artifact

Source: 66b7223e2c61107d3f19f1b63f004e44c248de07 (reviewed PR #168).

Canonical CI: https://github.com/frpboy/Scrobblix/actions/runs/42787752796

The exact attached installer passed normal tests, portable startup, actual fresh installation and launch, exact installed payload hashes, Start menu/Installed Apps registration, blocked upgrade/uninstall while the app runs, a synthetic beta8-payload baseline installer-to-current upgrade, retained synthetic history/accounts/queue/loved and two held Unknown rows, and program-only uninstall with an unrelated-file sentinel preserved. Actual wizard, fresh installed app and upgraded app screenshots were inspected. The baseline installer was constructed for this test from the verified beta8 ZIP with the same new recipe; no earlier public installer is implied.

Limits: real-user Credential Locker preservation is source-scope assurance, not an exercised credential migration test. No real-user provider calls, long soak, interrupted-upgrade rollback, atomic-update guarantee or broad device/DPI/accessibility qualification is claimed. The internal desktop assembly version remains 1.0.0; the installer package version is 0.1.0.9 and the GitHub preview tag is beta.9. Existing releases are unchanged.

SHA-256: 931f27a12450271c47deb227cb2fd3f11ca3286f3cecf03c0f95ff0ce44bc384

Scrobblix Windows v0.1.0-beta.8 - unsigned development preview

Windows x64 unsigned development preview

This is an unsigned portable ZIP, not a signed installer or stable production release. Android is unchanged. Older releases and assets remain available.

New in beta 8

• Seali-style About page in the Windows navigation: developer/portfolio/GitHub/LinkedIn/email, Telegram support, a single Sponsor entry with Buy Me a Coffee and Patreon, manual releases link, and Scrobblix-specific Apache-2.0 license and dependency credits.
• About shows the assembly version and recorded source revision. The assembly version is currently 1.0.0; the release identifier is windows-v0.1.0-beta.8. Verify the source revision below to identify these exact bytes.
• Queue guidance no longer unconditionally claims Last.fm delivery is off for an already connected account. It points to Settings and individual action outcomes. This corrects misleading text, not delivery state.
• Retains beta 7's browser-based Last.fm setup, unchanged/hidden-history performance fixes and bounded privacy-safe diagnostic timing.

Download and update

Download the Windows ZIP and verify SHA256SUMS.txt. Exit the old app using its system-tray menu. Extract all files to a new folder, then run desktop/Scrobblix.Desktop.exe. Do not copy the EXE alone or run inside the ZIP. The private .NET and Windows App SDK runtimes are included.

Keep the previous extracted folder, %LOCALAPPDATA%\Scrobblix and Windows Credential Locker intact. Do not uninstall, reset data, clear the queue or manually retry outcome-unknown actions. Do not disable Windows security protections; report a block rather than bypassing it. Open About from the left navigation to see this addition.

Qualification

Canonical source: 9decebcc3066c71db4b9d25a541cd21c4743321f. Exact canonical Windows CI passed all normal jobs, including actual WinUI About/Queue/consent/artwork/history fixtures, real extracted-ZIP startup and private runtime loading. The same exact ZIP passed synthetic legacy-profile preservation checks; the seeded migration/history/account/queue/loved records stayed unchanged. The real window remained responsive for 20 seconds in CI; cleanup was forced, not a long-run or graceful-shutdown test.

Limits

Real-PC startup/lag, affected-track artwork, live browser consent and fresh Last.fm acknowledgements remain unverified. Historical Accepted rows and a local Connected label are not proof a new play was accepted. Unknown outcomes stay held to avoid duplicates. The About addition and Queue copy change do not alter accounts, listening history, submission workers or retry rules. This release contains no private listening history, support recordings or credentials. Updates remain manual; no automatic updater was added.

Scrobblix Windows v0.1.0-beta.7 - unsigned development preview

Windows x64 development preview

This is an unsigned ZIP, not a signed installer or stable production release. Android uses a separate release track and is unchanged.

Changes

• Browser-based Last.fm setup without requiring listeners to register a developer API application. Existing own-API credentials remain an optional advanced mode.
• Avoid rebuilding 500 unchanged history rows on dashboard refresh and defer hidden history rows until History is opened. Search and CSV retain the latest full records.
• Privacy-safe diagnostics identify the source build and retain bounded startup timing plus auth/artwork outcome codes.

Download and update

Download Scrobblix-Windows-x64-windows-v0.1.0-beta.7.zip and verify its checksum in SHA256SUMS.txt. Exit the old app from its tray menu, extract all files into a new folder, then open desktop/Scrobblix.Desktop.exe. Do not run it inside the ZIP or copy the EXE alone. Private .NET/Windows App SDK runtimes are included. Do not disable Windows security protections; report any block rather than bypassing it.

Keep %LOCALAPPDATA%\Scrobblix and Windows Credential Locker intact. Do not reset data, uninstall, clear the queue or manually retry outcome-unknown actions. Keep the previous extracted app folder until this preview is checked. In Settings, choose Connect Last.fm, approve in the browser, then return and choose Finish approval. Never share API keys, session keys or secrets in support messages.

Qualification and limits

Built from canonical commit 07c65b77e19339d88aca922e95f5d051e176e822. Exact Windows CI passed, including native broker synthetic contracts, actual WinUI states, extracted-ZIP startup and private runtime loading. The same delivered ZIP passed a synthetic legacy-profile check with stored migration/history/account/queue/loved rows unchanged.

On that CI machine, five synthetic 500-row no-artwork rebuilds took 1245.7081 ms versus 1.3064 ms for five unchanged refreshes, with before/after pixel parity and search/export assertions. This measures avoided history work only, not total app latency or performance on another PC.

Real-device startup and responsiveness, affected-track artwork, browser consent and actual Last.fm acknowledgement still need verification. This release does not claim that all lag or missing artwork is fixed. Ambiguous submission outcomes remain held to avoid duplicates. No real listening data, credentials or private support files are included.

Scrobblix Windows 0.1.0-beta.10 - shell logo and Finish choices

Scrobblix Windows 0.1.0-beta.10: shell logo and Finish choices

Download Scrobblix-Windows-x64-Setup.exe. Verify it against SHA256SUMS.txt before running. This is a single per-user installer with private runtimes, not a ZIP to extract.

What changed

• Scrobblix's purple logo is embedded in the desktop EXE and used explicitly for the Start shortcut and Setup icon, fixing the generic Windows icon.
• The final wizard page has a Finish button and separate Run Scrobblix and Visit GitHub checkboxes. Run is checked and GitHub is unchecked by default. Finish performs only selected actions. Silent setup performs neither action.
• The installer releases its shared safety gate after file installation, before a selected app launch. Running-app upgrade/uninstall refusal remains in place.

Install or upgrade

1. Verify the downloaded EXE against this release's SHA256SUMS.txt. Do not run a mismatched download.
2. Exit all Scrobblix copies from the system tray, including copies launched from old ZIP folders.
3. Run Setup.exe. It installs to %LOCALAPPDATA%\Programs\Scrobblix, adds a Start shortcut and registers with Installed Apps. No admin elevation, separate runtime download, startup registration or browser-extension registration is added.
4. Choose the final checkboxes and click Finish, or open Scrobblix from Start later. Keep any old extracted folder until you check the installed app.

Requires x64-compatible Windows build 26100 or newer. This release remains unsigned. SignPath Foundation declined the preliminary application because the project does not yet have enough public trust/visibility signals. No signing subscription or paid plan was activated. Do not bypass Windows security protections.

Data and qualification

Setup and program-only uninstall retain the existing local history, settings, queue and Credential Locker data. They do not retry outcome-unknown submissions or force-close a running app. Uninstall is not a history/account deletion operation. Browser Companion setup remains optional and separate.

Source: 1744eceb3dc6a69dacbea988eba1847b954f29d1 (merged PRs #172 and #173).
Canonical CI: https://github.com/frpboy/Scrobblix/actions/runs/42806526690

The exact attached installer passed full CI, portable private-runtime startup, fresh installation and launch, installed payload hash verification, Start shortcut/Installed Apps registration, running-app upgrade/uninstall refusal, a synthetic beta8-payload baseline upgrade, retained synthetic history/accounts/queue/loved records and two held Unknown rows, and program-only uninstall with an unrelated-file sentinel retained. The actual normal Finish wizard passed all four checkbox combinations: app process appeared only when Run was selected and the correct GitHub URL was passed to ShellExec only when Visit GitHub was selected. Silent installation launched neither. Actual final Finish, desktop/taskbar and extracted EXE-icon pixels were inspected. The registered Start shortcut's logo was visually verified on the equivalent PR172 product build; this canonical run's shortcut binding assertion passed, but its Explorer screenshot was still loading and is not claimed as fresh visual proof.

Limits: launching the selected GitHub URL is verified, not successful browser page loading; the fresh CI browser displayed its first-run welcome. Real-user Credential Locker migration, interrupted-upgrade rollback, long soak and broad device/DPI/accessibility qualification were not exercised. The desktop assembly version remains 1.0.0; installer package version is 0.1.0.10 and this release tag is beta.10. This does not fix the separate metadata-disable-switch or installer-privacy-presentation gaps disclosed in the Windows privacy notice. Existing release assets, including beta.9, are unchanged.

SHA-256: 4c11450b64c769b5ac9b3e42ba595fc05310ae717235999aebb4dcac632c31a5

Scrobblix Android 0.1.0-alpha.2 - early development alpha

Scrobblix Android 0.1.0-alpha.2

An early development alpha, not a stable or production-ready release. The app still labels itself "Development preview · not a release". That label is unchanged in this APK.

Changes since Android alpha.1

• Media-session selection prefers a playing session with usable artist/title metadata instead of an unrelated or incomplete session.
• Last.fm browser-authorization responses fail closed when an error is present, including conflicting token/error responses and malformed error values.
• The existing connection service was restored separately. That service restoration and this APK's tests do not establish real Last.fm sign-in or scrobble delivery.

Package

• GitHub tag: android-v0.1.0-alpha.2
• Android 8.0 or later (minimum API 26; target API 36).
• Package: com.frpboy.scrobblix
• Version: 0.1.0-alpha.2, code 7.
• Source commit: 5c54607c57b07d2e5e7f3dc6db46d09f36c71291
• APK: Scrobblix-Android-v0.1.0-alpha.2.apk, 8,618,057 bytes.
• SHA-256: c1c69853f090588a757b45ea6b571426263f7258388b19b20f79913d0304b083
• Signing certificate SHA-256: a9b37328df9b9c166ceb41247cf9fd394427676832ab391c10f7494a711f7cde, unchanged from Android alpha.1.

What was checked

The exact published alpha.1 APK was installed on fresh disposable Android API 26 and API 36 emulators, then updated in place with this exact owner-signed alpha.2 APK using Android's normal replacement install. No uninstall or data reset was used.

• Both versions are non-debug releases with the same package and signing certificate. Version code increased from 6 to 7.
• Application UID and first-install time stayed unchanged.
• Synthetic local history, preferences, source restrictions, account and encrypted credential remained readable after the update.
• Tracking stayed paused. One synthetic unknown-outcome queue action remained non-retryable, with its existing send count unchanged. No submission was replayed.
• IPv4 and IPv6 guest network egress was blocked before installation and checked throughout. No real Last.fm account, listening or provider delivery was used.
• Actual alpha.2 Activity screenshots and accessibility XML were captured and inspected at native 320x640 on both APIs. They show the paused Listen screen and privacy disclosure. This is limited visual review, not full visual QA.
• Temporary test transport credentials and environment were removed after the run. No owner signing key was uploaded to CI.

Exact signed upgrade verification: https://github.com/frpboy/Scrobblix/actions/runs/42765644989

Normal Android and Windows checks also passed on the canonical source:
https://github.com/frpboy/Scrobblix/actions/runs/42764274289
https://github.com/frpboy/Scrobblix/actions/runs/42764274539

Install carefully

This APK is an in-place update for the same-package, same-certificate Android alpha.1. The upgrade was checked with synthetic data on isolated emulators, not on your phone. Preserve your existing installation and data. If Android reports a conflict, stop rather than uninstalling or clearing data to force installation.

Scrobblix Test previews use a separate package and signing identity. This APK is not their in-place upgrade.

Keep Android's normal security protections enabled. Do not disable Play Protect or other checks. If Android blocks installation, stop rather than bypassing the warning.

Notification access is optional and off by default for a fresh installation. Android notification access is broad; review the app's explanation before enabling it. Screenshot restrictions have been removed, so account/history information may be visible in screenshots and the app switcher.

Still unverified or unfinished

• Real-account Last.fm authorization and completed-scrobble delivery.
• Real-player listening, background execution, longer sessions and battery behavior.
• Upgrade behavior with your existing real account/history on your own device.
• Full visual and accessibility coverage at native phone sizes, rotation and large text.
• Play Store submission or release.

Do not rely on this alpha as the only record of listening. The emulator checks do not establish real-device authorization or delivery. Existing Android alpha.1 and Windows release assets are unchanged.

Scrobblix Android 0.1.0-alpha.1 - early development alpha

Scrobblix Android 0.1.0-alpha.1

An early development alpha for fresh-install testing, not a stable release. The app still labels itself "Development preview · not a release". That label is unchanged in this APK.

Package

GitHub tag: android-v0.1.0-alpha.1. The package version remains 0.1.0-alpha.1.

• Android 8.0 or later (minimum API 26; target API 36).
• Package: com.frpboy.scrobblix
• Version: 0.1.0-alpha.1, code 6.
• Source commit: acf3d1bfc7c395bedff3a854b05e1b6be870b50e
• APK: Scrobblix-Android-v0.1.0-alpha.1.apk, 8,632,540 bytes.
• SHA-256: 8b9770217774ad02123826940f9d8749160808564b81de78d6d6676bfdce50bc
• Signing certificate SHA-256: a9b37328df9b9c166ceb41247cf9fd394427676832ab391c10f7494a711f7cde

What was checked on this exact APK

• Fresh installation and cold start on disposable Android API 26 and API 36 emulators, with the app process alive after 10 seconds.
• Tracking-paused and media-access-off text, no connected account, and an unchecked tracking toggle bound to the "Track listening" row after one bounded content scroll on each API.
• IPv4 and IPv6 guest network egress blocked before installation and during these checks. No Last.fm account was authorized and no music listening or provider delivery was exercised.
• Owned test app/emulators stopped after the checks. These tests did not uninstall or reset an existing user installation.
• Separate actual screenshots were inspected: API 26's 320x640 initial viewport and API 36's 960x1920 expanded viewport. The API 26 switch was below the screenshot's fold. The native 320x640 post-scroll states were checked through accessibility XML, not new screenshots. This is limited visual review, not full visual QA.

Verification: https://github.com/frpboy/Scrobblix/actions/runs/42748421642

Install carefully

This alpha is verified for fresh installation. It is not an instruction to remove an existing app or erase its data.

Scrobblix Test previews use a separate package and signing identity. This APK must not be presented as their in-place upgrade. Do not uninstall an existing preview just to make this APK install. If Android reports a conflict, stop and preserve the existing installation and data.

Keep Android's normal security protections enabled. Do not disable Play Protect or other checks. If Android blocks installation, stop rather than bypass the warning.

Notification access is optional and off by default. Android notification access is broad; review the app's explanation before enabling it. Screenshot restrictions have been removed, so account/history information may be visible in screenshots and the app switcher.

Not yet verified for this alpha

• In-place upgrade and preservation of existing app data on an owner's device.
• Last.fm authorization, completed-scrobble delivery and reliability, including previously reported unknown/held submissions.
• Real-player listening, background execution, longer sessions and battery behavior.
• Full visual and accessibility coverage at native phone sizes, rotation and large text.
• Play Store submission or release.

These are untested or unfinished areas, not a claim that every feature is broken. Do not rely on this alpha as the only record of listening. It is not full beta or production-ready software.

Scrobblix v0.1.0-beta.6 - Preview

Warning

Unsigned preview build — not a signed installer or production release. Scrobblix has not yet completed all real-Windows, listening/queue, signing, upgrade/rollback, and distribution qualification gates.

Included downloads

• Windows Test Bundle — unpackaged desktop app, native messaging host, Chromium/Firefox companion files, helper scripts, and setup notes. Follow the included README-TESTING.txt.
• Browser Companion — separate browser/native-host development package. Browser store signing/publication is not implied.
• SHA256SUMS.txt — SHA-256 hashes for both ZIP downloads.

Data retention in this build

Scrobblix automatically cleans raw playback diagnostic data older than 30 days at app startup and every 24 hours while it is running. If the app is closed, cleanup waits until the next launch. Your listening history and scrobbles are never deleted by this cleanup.

The Windows x64 bundle includes its .NET and Windows App SDK runtimes. Extract all files before running desktop/Scrobblix.Desktop.exe; do not copy the EXE alone. Review the repository's release process and known limitations before testing. Do not use a preview build as evidence of stable-release readiness.

What's Changed

• test: qualify native Windows playback session detection by @frpboy in #144
• 🎨 Palette: Add hover and focus-visible states to custom site remove button by @frpboy in #149
• 🛡️ Sentinel: validate artwork URL targets for SSRF prevention by @frpboy in #151
• ⚡ Bolt: optimize custom site sender authorization checks by @frpboy in #150
• Integrate reviewed Android diagnostics and current-main qualification by @frpboy in #154
• 🛡️ Sentinel: enhance artwork URL SSRF syntax validation by @frpboy in #155
• Document checked status and add fail-closed Markdown CI route by @frpboy in #156
• build(deps): bump actions/setup-dotnet from 6.0.0 to 6.1.0 by @dependabot[bot] in #157
• Bump Microsoft.WindowsAppSDK from 2.6.4 to 2.6.5 by @dependabot[bot] in #159
• build(deps): bump softprops/action-gh-release from 3.0.3 to 3.0.4 by @dependabot[bot] in #158

Full Changelog: v0.1.0-beta.5...v0.1.0-beta.6

Scrobblix v0.1.0-beta.5 - Local storage compatibility (unsigned preview)

Scrobblix v0.1.0-beta.5

Unsigned Windows x64 preview. This is a development test bundle, not a signed installer or a production release.

Local storage compatibility

Fixes a startup checksum mismatch when an existing database was created by an LF-line-ending build and a later build embeds the same SQL with CRLF line endings. Only the exact known LF and CRLF migration hashes are accepted. Changed SQL and unknown or inconsistent migration histories are still rejected.

Existing history, account references, queued actions, loved tracks and migration records are not reset or rewritten by this fix. Windows tests compare those rows before and after reopening, and the exact packaged ZIP is tested with a synthetic legacy LF database as well as a fresh profile.

A reported startup banner matches this checksum-error category, but the original stored hash has not been inspected. This release is not proof that every checksum mismatch, player-detection issue or device-specific problem is fixed. If the same error remains, keep your data intact and report the message. Do not reset or delete the database.

Run this preview

Close Scrobblix, extract the entire Windows bundle to a new folder and run desktop/Scrobblix.Desktop.exe. Keep your existing app-data folder intact. Do not run inside the ZIP or copy just the EXE. Private .NET and Windows App SDK runtimes are included. Do not disable security protections if Windows blocks this unsigned preview.

No Last.fm credentials or hosted backend are included. This change does not configure Last.fm or change its authorization requirements. The optional browser companion remains a development package.