Proof Portal

Omarchy

ProbeLabsviewing a historical run

A proof layer — requirements, tests and verified fixes — for two of Omarchy's subsystems: the application menu (launcher scripts, QML model, JSONC config, search and selection) and the lock screen (lock scripts, QML, PAM authentication). Scope is deliberately limited to those components of omacom/omarchy; the rest of the distribution is not covered.

Viewing historical run 9f26c21Oct 1, 2026, 08:58 PMpr/13968Back to current

Issue Catalogue

The issue catalogue as recorded at the pinned historical run — known issues, defects, trace gaps and failing checks reconstructed from that audit.

Open known issues by severity

64 open

All74

Known Issues67

Problem Reports3

Accepted Risks0

Checks4

Known Issues: Confirmed, current problems in the system — the open failure modes to act on.

64 open known issues · 3 fixed/withdrawn hidden — toggle All to include.

	Kind	Finding	Status		Context
High	Known issue	Exported bash functions execute as root inside apply-lock despite the trusted-PATH replacement KI-APPLY-LOCK-EXPORTED-FUNCTIONS-ROOT	Open	Inception	RequirementWhen omarchy-apply-lock runs with EUID 0, it shall replace…SW-REQ-260912-EKJP	Investigate
High	Known issue	Lock engages when password PAM disappears during the stabilize window; the stranded watchdog stands down KI-LOCK-PAM-FLIP-ENGAGES-LOCK	Open	Inception	RequirementsWhen the lock IPC handler receives a lock request and…SW-REQ-260912-J8SX When the user locks the session, the system shall engage…SYS-REQ-260912-T0XP	Investigate
Medium	Known issue	Comma in a binding description shifts every later CSV field: truncated label, wrong dispatcher, failed dispatch KI-MENU-KEYBINDINGS-CSV-DESC-COMMA	Open	Inception	RequirementBinds Hyprland reports as dispatcher __lua are shown with…SW-REQ-260922-0W96	Investigate
Medium	Known issue	Compositor-side lock loss with a request outstanding is treated as a finished unlock; no re-lock KI-LOCK-SPONTANEOUS-UNLOCK-FAIL-OPEN	Reviewed	Inception	RequirementWhen the user locks the session, the system shall engage…SYS-REQ-260912-T0XP	Investigate
Medium	Known issue	Failed PKEXEC_UID/user mapping silently degrades target_user to root, configuring PAM for the wrong account KI-APPLY-LOCK-TARGET-USER-DEGRADES-ROOT	Open	Inception	RequirementWhen omarchy-apply-lock runs with EUID 0, it shall replace…SW-REQ-260912-EKJP	Investigate
Medium	Known issue	Fingerprint gate fail-open: substring grep treats not-enrolled or failed fprintd-list probes as enrolled KI-APPLY-LOCK-FPRINT-GATE-FAIL-OPEN	Open	Inception	Requirementsomarchy-apply-lock shall test fingerprint enrollment by…SW-REQ-260912-S154 When the target user has no enrolled fingerprint or…SW-REQ-260912-Y0WT	Investigate
Medium	Known issue	Lock-service fingerprint probe fail-open: substring grep treats zero-enrollment fprintd-list output as configured KI-LOCK-FPRINT-PROBE-FAIL-OPEN	Open	Inception	RequirementWhen the user locks the session, the system shall engage…SYS-REQ-260912-T0XP	Investigate
Medium	Known issue	Lua bind scan aborts on the first throwing require; every later Lua bind silently vanishes from the menu cache KI-MENU-KEYBINDINGS-SCAN-DOFILE-ABORT	Open	Inception	RequirementBinds Hyprland reports as dispatcher __lua are shown with…SW-REQ-260922-0W96	Investigate
Medium	Known issue	Lua function binds (Select all, Universal copy/paste/cut, Zoom in, Reset zoom) render in the menu but dispatch nothing KI-MENU-KEYBINDINGS-FUNC-BIND-NO-DISPATCH	Open	Inception	RequirementBinds Hyprland reports as dispatcher __lua are shown with…SW-REQ-260922-0W96	Investigate
Medium	Known issue	Non-positive sleep-lock budget for logind windows <= 1s: suspend proceeds with no lock attempt KI-SLEEP-LOCK-BUDGET-NONPOSITIVE	Open	Inception	Requirementomarchy-system-sleep-lock shall derive the wait budget from…SW-REQ-260912-FAWV	Investigate
Medium	Known issue	omarchy-menu-select blocks forever inside the omarchy-shell summon call when the IPC never returns KI-MENU-SELECT-SUMMON-UNBOUNDED	Open	Inception	RequirementThe select payload carries mode=select, prompt, options,…SW-REQ-260922-Q6ZS	Investigate
Medium	Known issue	omarchy-menu-select hangs forever when the summoned menu dies before writing done_file KI-MENU-SELECT-POLL-DEADLOCK	Reviewed	Inception	RequirementsThe select payload carries mode=select, prompt, options,…SW-REQ-260922-Q6ZS When the done file exists but the selection file is empty…SW-REQ-260922-9ABD +5 more	Investigate
Medium	Known issue	omarchy-system-lock exits 0 when lock engagement fails, leaving the dismissed Lock row silent KI-260930-2FBE	Reviewed	Inception	RequirementThe menu Lock row invokes the lock component's CLI entry…SYS-REQ-260927-WC89	Investigate
Medium	Known issue	parse_keycodes rewrites code:N/mouse:N tokens anywhere in a record, corrupting descriptions and commands KI-MENU-KEYBINDINGS-CODE-REWRITE-OVERREACH	Open	Inception	RequirementBinds Hyprland reports as dispatcher __lua are shown with…SW-REQ-260922-0W96	Investigate
Medium	Known issue	Successful hyprctl dispatch with a stderr warning is treated as a refusal and the exec command runs twice KI-MENU-KEYBINDINGS-STDERR-FAILS-DISPATCH	Open	Inception	RequirementBinds Hyprland reports as dispatcher __lua are shown with…SW-REQ-260922-0W96	Investigate
Medium	Known issue	vipsthumbnail still-image lane has no timeout; a stalled conversion wedges its fan-out lane indefinitely KI-MENU-IMAGES-VIPS-NO-TIMEOUT	Reviewed	Inception	RequirementThe pipeline detects video paths by extension and…SW-REQ-260929-THMB	Investigate
Medium	Known issue	Warm keybindings cache serves a stale Lua command after the user edits only the command a __lua bind runs KI-MENU-KEYBINDINGS-STALE-LUA-CACHE	Open	Inception	RequirementBinds Hyprland reports as dispatcher __lua are shown with…SW-REQ-260922-0W96	Investigate
Low	Known issue	A flat menu containing an entry id 'items' is parsed as a wrapper and every sibling entry is silently discarded KI-MENU-ITEMS-KEY-AMBIGUITY	Open	Inception	RequirementThe parser strips // comments and trailing commas outside…SW-REQ-260922-E4J2	Investigate
Low	Known issue	A new menu summon re-opens with the stale uninstall confirmation still up KI-MENU-OPEN-LEAVES-CONFIRM	Open	Inception	RequirementDelete with the cursor on an app row opens an uninstall…SW-REQ-260922-8CQ4	Investigate
Low	Known issue	A whitespace-only filter is not a search for rebuildDisplay but is truthy for the detail gates KI-MENU-DETAIL-WHITESPACE-QUERY	Open	Inception	RequirementWhen the rows do not fit, the list height ends mid-rowSW-REQ-260922-B757	Investigate
Low	Known issue	Abnormal PAM error increments failedAttempts twice (onError and onCompleted both run handlePasswordFailure) KI-LOCK-PAM-ERROR-DOUBLE-COUNT	Open	Inception	RequirementWhen the user locks the session, the system shall engage…SYS-REQ-260912-T0XP	Investigate
Low	Known issue	Activating an app row while appLibrary is null closes the menu and skips the launch KI-MENU-APP-ACTIVATE-NULL-LIBRARY	Open	Inception	RequirementmergeAppRows and swapProviderRows return fresh maps that…SW-REQ-260922-Z680	Investigate
Low	Known issue	Apps submenu sorts with code-unit < on lowercased labels while search sorts with localeCompare KI-MENU-APPS-SORT-LOCALE	Open	Inception	RequirementmergeAppRows and swapProviderRows return fresh maps that…SW-REQ-260922-Z680	Investigate
Low	Known issue	argv budget with a leading zero (08/09) bypasses the validation guard via an octal arithmetic error KI-SLEEP-LOCK-BUDGET-ARG-OCTAL	Open	Inception	Requirementomarchy-system-sleep-lock shall derive the wait budget from…SW-REQ-260912-FAWV	Investigate
Low	Known issue	childCount counts when-hidden children and duplicate itemOrder entries, so the submenu badge disagrees with what renders KI-MENU-CARET-COUNT-HIDDEN-CHILDREN	Open	Inception	RequirementScores tier exact label, whole-word app name, label prefix,…SW-REQ-260922-SJ7P	Investigate
Low	Known issue	Contracted exit codes lost when the usage/diagnostic write fails: unknown verb exits 1, help exits 1 KI-MENU-CLI-EXIT-CODE-WRITE-RACES	Open	Inception	Requirementtoggle, summon, close, refresh, and ping each exec the…SW-REQ-260922-T257	Investigate
Low	Known issue	dmenu request lifecycle drops waiters on re-summon, on a busy resultProc, and for doneFile-only requests KI-MENU-REQUEST-LIFECYCLE	Open	Inception	RequirementsfinishRequest with a selection writes the value to the…SW-REQ-260922-FGZQ finishRequest with a null selection (Escape/cancel) creates…SW-REQ-260922-C8HX +2 more	Investigate
Low	Known issue	Escape in input mode clears the entered text instead of cancelling the request KI-MENU-INPUT-ESCAPE-CLEARS-FILTER	Open	Inception	RequirementfinishRequest with a selection writes the value to the…SW-REQ-260922-FGZQ	Investigate
Low	Known issue	Failed jq payload build still execs the menu IPC with an empty payload and exits 0 KI-MENU-CLI-JQ-FAIL-LOOKS-SUCCESS	Open	Inception	Requirementstoggle, summon, close, refresh, and ping each exec the…SW-REQ-260922-T257 An unknown verb prints 'omarchy-menuSW-REQ-260922-SNZG	Investigate
Low	Known issue	Failed menu FileView reloads are asymmetric: user handler wipes last good items, default keeps stale set KI-MENU-FILEVIEW-FAILURE-ASYMMETRY	Open	Inception	Requirementopen(payload) dispatches on modeSW-REQ-260922-50RE	Investigate
Low	Known issue	Failed second mktemp leaks the selection handshake temp file: cleanup trap installed only after both files exist KI-MENU-SELECT-HANDSHAKE-TMP-LEAK	Open	Inception	RequirementThe select payload carries mode=select, prompt, options,…SW-REQ-260922-Q6ZS	Investigate
Low	Known issue	Failed/empty readlink result stored as backgroundPath, wiping a good lock-screen wallpaper KI-LOCK-EMPTY-READLINK-WIPES-WALLPAPER	Reviewed	Inception	RequirementWhen the user locks the session, the system shall engage…SYS-REQ-260912-T0XP	Investigate
Low	Known issue	Failed/killed providers commit their partial stdout and stay marked loaded; apps provider loads with no AppLibrary KI-MENU-PROVIDER-PARTIAL-COMMIT	Open	Inception	RequirementsswapProviderRows drops exactly the rows carrying the re-run…SW-REQ-260922-EFNR mergeAppRows and swapProviderRows return fresh maps that…SW-REQ-260922-Z680	Investigate
Low	Known issue	fingerprintPam.start() returning false disables fingerprint auth for the rest of the lock with no retry KI-LOCK-FPRINT-START-FAIL-NO-RETRY	Reviewed	Inception	RequirementWhen the user locks the session, the system shall engage…SYS-REQ-260912-T0XP	Investigate
Low	Known issue	foldedListHeight returns a height above the available cap; availableRowsHeight never clamps at zero KI-MENU-FOLD-HEIGHT-EXCEEDS-AVAILABLE	Open	Inception	RequirementWhen the rows do not fit, the list height ends mid-rowSW-REQ-260922-B757	Investigate
Low	Known issue	Geometry flags silently coerce non-numeric and flag-like values: --width abc summons width 0 KI-MENU-SELECT-GEOMETRY-INT-COERCION	Open	Inception	RequirementThe select payload carries mode=select, prompt, options,…SW-REQ-260922-Q6ZS	Investigate
Low	Known issue	goBack refuses to retrace while activeMenu is root, stranding navStack after a drill that landed on root KI-MENU-GOBACK-ROOT-STRAND	Open	Inception	RequirementWhen a route resolves to an action item with a non-empty…SW-REQ-260922-N3RM	Investigate
Low	Known issue	Guard batches carry no generation token: a batch computed for the previous items publishes onto the new set KI-MENU-GUARD-BATCH-STALE-APPLY	Open	Inception	RequirementThe generated guard script holds exactly one if-line per…SW-REQ-260922-MQ37	Investigate
Low	Known issue	Guard ids interpolated unquoted into the shared bash batch: metacharacter ids break the protocol or execute commands KI-MENU-GUARD-ID-INJECTION-BATCH-ABORT	Open	Inception	RequirementsThe generated guard script holds exactly one if-line per…SW-REQ-260922-MQ37 When no item declares a guard, the guard script is empty…SW-REQ-260922-Y58B	Investigate
Low	Known issue	Header invariant 'every call bounded by the budget remainder' unenforced on three external calls KI-SLEEP-LOCK-DEADLINE-INVARIANT-GAPS	Open	Inception	Requirementsomarchy-system-sleep-lock shall derive the wait budget from…SW-REQ-260912-FAWV When the budget expires before the session reports secure,…SW-REQ-260912-H2YF	Investigate
Low	Known issue	In-place video wallpaper overwrite during a running poster job keeps the stale poster frame KI-LOCK-STALE-POSTER-INPLACE-OVERWRITE	Reviewed	Inception	RequirementWhen the user locks the session, the system shall engage…SYS-REQ-260912-T0XP	Investigate
Low	Known issue	isDescendantOf reports every non-root id as a descendant of root, including ids absent from the menu KI-MENU-ISDESCENDANT-ROOT-ALWAYS	Open	Inception	RequirementA row matches only when every query term appears in its…SW-REQ-260922-DQ9P	Investigate
Low	Known issue	Map reads walk Object.prototype: item(), results maps, providersLoaded treat constructor/toString as real entries KI-MENU-ITEM-PROTOTYPE-LEAK	Open	Inception	RequirementsAn exact id match wins over every aliasSW-REQ-260922-PRNV open(payload) dispatches on modeSW-REQ-260922-50RE	Investigate
Low	Known issue	mergeAppRows/swapProviderRows keep stale .order values and mutate caller-owned rows in place KI-MENU-MERGE-STALE-ORDER-ALIASED-ROWS	Open	Inception	RequirementmergeAppRows and swapProviderRows return fresh maps that…SW-REQ-260922-Z680	Investigate
Low	Known issue	mergeMenuSources stores prototype-named ids but drops them from itemOrder - the row is written and never rendered KI-MENU-MERGE-PROTOTYPE-IDS	Open	Inception	RequirementA user entry overrides the default per key while keeping…SW-REQ-260922-7NPE	Investigate
Low	Known issue	Non-numeric dmenu width/maxHeight become NaN and collapse the card layout KI-MENU-DMENU-NAN-GEOMETRY	Open	Inception	RequirementfinishRequest with a selection writes the value to the…SW-REQ-260922-FGZQ	Investigate
Low	Known issue	normalize-before-merge wipes unspecified defaults: a label-only user entry erases action/aliases/guards KI-MENU-MERGE-OVERRIDE-WIPES-DEFAULTS	Open	Inception	RequirementA user entry overrides the default per key while keeping…SW-REQ-260922-7NPE	Investigate
Low	Known issue	normalizeItem edge cases: null parent kept, boolean guards preserved, action:0 mis-kinded, numeric labels KI-MENU-NORMALIZE-EDGE-CASES	Open	Inception	RequirementAn entry with action is an action, with target a link,…SW-REQ-260922-46HY	Investigate
Low	Known issue	open() throws on a JSON null payload: parse succeeds, the catch does not run, the property read throws KI-MENU-OPEN-NULL-PAYLOAD	Open	Inception	Requirementopen(payload) dispatches on modeSW-REQ-260922-50RE	Investigate
Low	Known issue	Opening a select menu walks its rows quadratically (omacom/omarchy#10601) KI-MENU-OPEN-QUADRATIC	Open	Inception	RequirementWhen the rows do not fit, the list height ends mid-rowSW-REQ-260922-B757	Investigate

Showing 50 of 64

Proof

History & reports