Proof Portal

Omarchy

ProbeLabs73 findings · 87 requirements

A proof layer — requirements, tests and verified fixes — for two of Omarchy's subsystems: the application menu (launcher scripts, QML model, JSONC config, search and selection) and the lock screen (lock scripts, QML, PAM authentication). Scope is deliberately limited to those components of omacom/omarchy; the rest of the distribution is not covered.

Issue Catalogue

Known issues are the live problems to act on — the default view. Browse fixed defects, accepted risks, trace gaps and failing checks by kind, or switch to All for every finding.

Open known issues by severity

73 open

All73

Known Issues73

Problem Reports0

Accepted Risks0

Checks0

Known Issues: Confirmed, current problems in the system — the open failure modes to act on.

73 open known issues

	Kind	Finding	Status		Context
High	Known issue	Exported bash functions execute as root inside apply-lock despite the trusted-PATH replacement KI-APPLY-LOCK-EXPORTED-FUNCTIONS-ROOT	Open	Inception	RequirementWhen omarchy-apply-lock runs with EUID 0, it shall replace…SW-REQ-260912-EKJP	Investigate
High	Known issue	Lock engages when password PAM disappears during the stabilize window; the stranded watchdog stands down KI-LOCK-PAM-FLIP-ENGAGES-LOCK	Open	Inception	RequirementsWhen the lock IPC handler receives a lock request and…SW-REQ-260912-J8SX When the user locks the session, the system shall engage…SYS-REQ-260912-T0XP	Investigate
Medium	Known issue	Comma in a binding description shifts every later CSV field: truncated label, wrong dispatcher, failed dispatch KI-MENU-KEYBINDINGS-CSV-DESC-COMMA	Open	Inception	RequirementBinds Hyprland reports as dispatcher __lua are shown with…SW-REQ-260922-0W96	Investigate
Medium	Known issue	Compositor-side lock loss with a request outstanding is treated as a finished unlock; no re-lock KI-LOCK-SPONTANEOUS-UNLOCK-FAIL-OPEN	Reviewed	Inception	RequirementWhen the user locks the session, the system shall engage…SYS-REQ-260912-T0XP	Investigate
Medium	Known issue	Failed PKEXEC_UID/user mapping silently degrades target_user to root, configuring PAM for the wrong account KI-APPLY-LOCK-TARGET-USER-DEGRADES-ROOT	Open	Inception	RequirementWhen omarchy-apply-lock runs with EUID 0, it shall replace…SW-REQ-260912-EKJP	Investigate
Medium	Known issue	Fingerprint gate fail-open: substring grep treats not-enrolled or failed fprintd-list probes as enrolled KI-APPLY-LOCK-FPRINT-GATE-FAIL-OPEN	Open	Inception	Requirementsomarchy-apply-lock shall test fingerprint enrollment by…SW-REQ-260912-S154 When the target user has no enrolled fingerprint or…SW-REQ-260912-Y0WT	Investigate
Medium	Known issue	Lock-service fingerprint probe fail-open: substring grep treats zero-enrollment fprintd-list output as configured KI-LOCK-FPRINT-PROBE-FAIL-OPEN	Open	Inception	RequirementWhen the user locks the session, the system shall engage…SYS-REQ-260912-T0XP	Investigate
Medium	Known issue	Lua bind scan aborts on the first throwing require; every later Lua bind silently vanishes from the menu cache KI-MENU-KEYBINDINGS-SCAN-DOFILE-ABORT	Open	Inception	RequirementBinds Hyprland reports as dispatcher __lua are shown with…SW-REQ-260922-0W96	Investigate
Medium	Known issue	Lua function binds (Select all, Universal copy/paste/cut, Zoom in, Reset zoom) render in the menu but dispatch nothing KI-MENU-KEYBINDINGS-FUNC-BIND-NO-DISPATCH	Open	Inception	RequirementBinds Hyprland reports as dispatcher __lua are shown with…SW-REQ-260922-0W96	Investigate
Medium	Known issue	Non-positive sleep-lock budget for logind windows <= 1s: suspend proceeds with no lock attempt KI-SLEEP-LOCK-BUDGET-NONPOSITIVE	Open	Inception	Requirementomarchy-system-sleep-lock shall derive the wait budget from…SW-REQ-260912-FAWV	Investigate
Medium	Known issue	omarchy-apply-lock rewrites the lock PAM stacks in place; an interrupted run leaves a torn stack on the live path KI-APPLY-LOCK-PAM-NONATOMIC-WRITE	Reviewed	Inception	RequirementsThe system shall install the PAM password stack for the…SYS-REQ-260912-JW2J When the target user has no enrolled fingerprint or…SW-REQ-260912-Y0WT	Investigate
Medium	Known issue	omarchy-menu-select blocks forever inside the omarchy-shell summon call when the IPC never returns KI-MENU-SELECT-SUMMON-UNBOUNDED	Open	Inception	RequirementThe select payload carries mode=select, prompt, options,…SW-REQ-260922-Q6ZS	Investigate
Medium	Known issue	omarchy-menu-select hangs forever when the summoned menu dies before writing done_file KI-MENU-SELECT-POLL-DEADLOCK	Reviewed	Inception	RequirementsThe select payload carries mode=select, prompt, options,…SW-REQ-260922-Q6ZS When the done file exists but the selection file is empty…SW-REQ-260922-9ABD +5 more	Investigate
Medium	Known issue	omarchy-system-lock exits 0 when lock engagement fails, leaving the dismissed Lock row silent KI-260930-2FBE	Reviewed	Inception	RequirementThe menu Lock row invokes the lock component's CLI entry…SYS-REQ-260927-WC89	Investigate
Medium	Known issue	parse_keycodes rewrites code:N/mouse:N tokens anywhere in a record, corrupting descriptions and commands KI-MENU-KEYBINDINGS-CODE-REWRITE-OVERREACH	Open	Inception	RequirementBinds Hyprland reports as dispatcher __lua are shown with…SW-REQ-260922-0W96	Investigate
Medium	Known issue	stripJsonc comma regex rewrites strings that carry a comma before } or ] (omacom/omarchy#13250) KI-MENU-JSONC-COMMA-IN-STRING	Open	Inception	RequirementThe parser strips full-line // comments and trailing commas…SW-REQ-260922-E4J2	Investigate
Medium	Known issue	Successful hyprctl dispatch with a stderr warning is treated as a refusal and the exec command runs twice KI-MENU-KEYBINDINGS-STDERR-FAILS-DISPATCH	Open	Inception	RequirementBinds Hyprland reports as dispatcher __lua are shown with…SW-REQ-260922-0W96	Investigate
Medium	Known issue	Unicode or control whitespace between JSONC tokens empties the whole menu file KI-MENU-JSONC-UNICODE-WHITESPACE	Open	Inception	RequirementsThe parser strips full-line // comments and trailing commas…SW-REQ-260922-E4J2 Unparseable input (after stripping), non-object JSON, and…SW-REQ-260922-3T3F	Investigate
Medium	Known issue	vipsthumbnail still-image lane has no timeout; a stalled conversion wedges its fan-out lane indefinitely KI-MENU-IMAGES-VIPS-NO-TIMEOUT	Reviewed	Inception	RequirementThe pipeline detects video paths by extension and…SW-REQ-260929-THMB	Investigate
Medium	Known issue	Warm keybindings cache serves a stale Lua command after the user edits only the command a __lua bind runs KI-MENU-KEYBINDINGS-STALE-LUA-CACHE	Open	Inception	RequirementBinds Hyprland reports as dispatcher __lua are shown with…SW-REQ-260922-0W96	Investigate
Low	Known issue	A flat menu containing an entry id 'items' is parsed as a wrapper and every sibling entry is silently discarded KI-MENU-ITEMS-KEY-AMBIGUITY	Open	Inception	RequirementThe parser strips full-line // comments and trailing commas…SW-REQ-260922-E4J2	Investigate
Low	Known issue	A menu summon leaves a pending uninstall question on top of the new prompt KI-MENU-OPEN-LEAVES-CONFIRM	Open	Inception	RequirementDelete with the cursor on an app row opens an uninstall…SW-REQ-260922-8CQ4	Investigate
Low	Known issue	A whitespace-only filter is not a search for rebuildDisplay but is truthy for the detail gates KI-MENU-DETAIL-WHITESPACE-QUERY	Open	Inception	RequirementWhen the rows do not fit, the list height ends mid-rowSW-REQ-260922-B757	Investigate
Low	Known issue	A whole-line comment in a CR-only menu file swallows the rest of the file KI-MENU-JSONC-CR-LINE-ENDINGS	Open	Inception	RequirementThe parser strips full-line // comments and trailing commas…SW-REQ-260922-E4J2	Investigate
Low	Known issue	Abnormal PAM error increments failedAttempts twice (onError and onCompleted both run handlePasswordFailure) KI-LOCK-PAM-ERROR-DOUBLE-COUNT	Open	Inception	RequirementWhen the user locks the session, the system shall engage…SYS-REQ-260912-T0XP	Investigate
Low	Known issue	Activating an app row while appLibrary is null closes the menu and skips the launch KI-MENU-APP-ACTIVATE-NULL-LIBRARY	Open	Inception	RequirementmergeAppRows and swapProviderRows return fresh maps that…SW-REQ-260922-Z680	Investigate
Low	Known issue	Apps submenu sorts with code-unit < on lowercased labels while search sorts with localeCompare KI-MENU-APPS-SORT-LOCALE	Open	Inception	RequirementmergeAppRows and swapProviderRows return fresh maps that…SW-REQ-260922-Z680	Investigate
Low	Known issue	argv budget with a leading zero (08/09) bypasses the validation guard via an octal arithmetic error KI-SLEEP-LOCK-BUDGET-ARG-OCTAL	Open	Inception	Requirementomarchy-system-sleep-lock shall derive the wait budget from…SW-REQ-260912-FAWV	Investigate
Low	Known issue	childCount counts when-hidden children and duplicate itemOrder entries, so the submenu badge disagrees with what renders KI-MENU-CARET-COUNT-HIDDEN-CHILDREN	Open	Inception	RequirementScores tier exact label, whole-word app name, label prefix,…SW-REQ-260922-SJ7P	Investigate
Low	Known issue	Contracted exit codes lost when the usage/diagnostic write fails: unknown verb exits 1, help exits 1 KI-MENU-CLI-EXIT-CODE-WRITE-RACES	Open	Inception	Requirementtoggle, summon, close, refresh, and ping each exec the…SW-REQ-260922-T257	Investigate
Low	Known issue	dmenu request lifecycle drops waiters on re-summon, on a busy resultProc, and for doneFile-only requests KI-MENU-REQUEST-LIFECYCLE	Open	Inception	RequirementsfinishRequest with a selection writes the value to the…SW-REQ-260922-FGZQ finishRequest with a null selection (Escape/cancel) creates…SW-REQ-260922-C8HX +2 more	Investigate
Low	Known issue	Escape in input mode clears the entered text instead of cancelling the request KI-MENU-INPUT-ESCAPE-CLEARS-FILTER	Open	Inception	RequirementfinishRequest with a selection writes the value to the…SW-REQ-260922-FGZQ	Investigate
Low	Known issue	Failed jq payload build still execs the menu IPC with an empty payload and exits 0 KI-MENU-CLI-JQ-FAIL-LOOKS-SUCCESS	Open	Inception	Requirementstoggle, summon, close, refresh, and ping each exec the…SW-REQ-260922-T257 An unknown verb prints 'omarchy-menuSW-REQ-260922-SNZG	Investigate
Low	Known issue	Failed menu FileView reloads are asymmetric: user handler wipes last good items, default keeps stale set KI-MENU-FILEVIEW-FAILURE-ASYMMETRY	Open	Inception	Requirementopen(payload) dispatches on modeSW-REQ-260922-50RE	Investigate
Low	Known issue	Failed second mktemp leaks the selection handshake temp file: cleanup trap installed only after both files exist KI-MENU-SELECT-HANDSHAKE-TMP-LEAK	Open	Inception	RequirementThe select payload carries mode=select, prompt, options,…SW-REQ-260922-Q6ZS	Investigate
Low	Known issue	Failed/empty readlink result stored as backgroundPath, wiping a good lock-screen wallpaper KI-LOCK-EMPTY-READLINK-WIPES-WALLPAPER	Reviewed	Inception	RequirementWhen the user locks the session, the system shall engage…SYS-REQ-260912-T0XP	Investigate
Low	Known issue	Failed/killed providers commit their partial stdout and stay marked loaded; apps provider loads with no AppLibrary KI-MENU-PROVIDER-PARTIAL-COMMIT	Open	Inception	RequirementsswapProviderRows drops exactly the rows carrying the re-run…SW-REQ-260922-EFNR mergeAppRows and swapProviderRows return fresh maps that…SW-REQ-260922-Z680	Investigate
Low	Known issue	fingerprintPam.start() returning false disables fingerprint auth for the rest of the lock with no retry KI-LOCK-FPRINT-START-FAIL-NO-RETRY	Reviewed	Inception	RequirementWhen the user locks the session, the system shall engage…SYS-REQ-260912-T0XP	Investigate
Low	Known issue	foldedListHeight returns a height above the available cap; availableRowsHeight never clamps at zero KI-MENU-FOLD-HEIGHT-EXCEEDS-AVAILABLE	Open	Inception	RequirementWhen the rows do not fit, the list height ends mid-rowSW-REQ-260922-B757	Investigate
Low	Known issue	Geometry flags silently coerce non-numeric and flag-like values: --width abc summons width 0 KI-MENU-SELECT-GEOMETRY-INT-COERCION	Open	Inception	RequirementThe select payload carries mode=select, prompt, options,…SW-REQ-260922-Q6ZS	Investigate
Low	Known issue	goBack refuses to retrace while activeMenu is root, stranding navStack after a drill that landed on root KI-MENU-GOBACK-ROOT-STRAND	Open	Inception	RequirementWhen a route resolves to an action item with a non-empty…SW-REQ-260922-N3RM	Investigate
Low	Known issue	Guard batches carry no generation token: a batch computed for the previous items publishes onto the new set KI-MENU-GUARD-BATCH-STALE-APPLY	Open	Inception	RequirementThe generated guard script holds exactly one if-line per…SW-REQ-260922-MQ37	Investigate
Low	Known issue	Guard ids interpolated unquoted into the shared bash batch: metacharacter ids break the protocol or execute commands KI-MENU-GUARD-ID-INJECTION-BATCH-ABORT	Open	Inception	RequirementsThe generated guard script holds exactly one if-line per…SW-REQ-260922-MQ37 When no item declares a guard, the guard script is empty…SW-REQ-260922-Y58B	Investigate
Low	Known issue	Header invariant 'every call bounded by the budget remainder' unenforced on three external calls KI-SLEEP-LOCK-DEADLINE-INVARIANT-GAPS	Open	Inception	Requirementsomarchy-system-sleep-lock shall derive the wait budget from…SW-REQ-260912-FAWV When the budget expires before the session reports secure,…SW-REQ-260912-H2YF	Investigate
Low	Known issue	In-place video wallpaper overwrite during a running poster job keeps the stale poster frame KI-LOCK-STALE-POSTER-INPLACE-OVERWRITE	Reviewed	Inception	RequirementWhen the user locks the session, the system shall engage…SYS-REQ-260912-T0XP	Investigate
Low	Known issue	isDescendantOf reports every non-root id as a descendant of root, including ids absent from the menu KI-MENU-ISDESCENDANT-ROOT-ALWAYS	Open	Inception	RequirementA row matches only when every query term appears in its…SW-REQ-260922-DQ9P	Investigate
Low	Known issue	Keybindings menu build has no deadline on hyprctl binds or xkbcli compile-keymap; a stalled callee blocks the menu KI-MENU-KEYBINDINGS-NO-TIMEOUT	Reviewed	Inception	RequirementA code:N binding shows the keysym resolved from the…SW-REQ-260922-9DMS	Investigate
Low	Known issue	Map reads walk Object.prototype: item(), results maps, providersLoaded treat constructor/toString as real entries KI-MENU-ITEM-PROTOTYPE-LEAK	Open	Inception	RequirementsAn exact id match wins over every aliasSW-REQ-260922-PRNV open(payload) dispatches on modeSW-REQ-260922-50RE	Investigate
Low	Known issue	Menu guard batch runs as one bash child with no deadline; a blocking guard freezes guard answers for the session KI-MENU-GUARD-BATCH-NO-DEADLINE	Reviewed	Inception	RequirementAll when/checked/disabled expressions evaluate in one…SYS-REQ-260922-47T8	Investigate
Low	Known issue	mergeAppRows/swapProviderRows keep stale .order values and mutate caller-owned rows in place KI-MENU-MERGE-STALE-ORDER-ALIASED-ROWS	Open	Inception	RequirementmergeAppRows and swapProviderRows return fresh maps that…SW-REQ-260922-Z680	Investigate

Showing 50 of 73

Proof

History & reports