Proof Portal
Omarchy
ProbeLabs65 findings · 95 requirementsA proof layer — requirements, tests and verified fixes — for two of Omarchy's subsystems: the application menu (launcher scripts, QML model, JSONC config, search and selection) and the lock screen (lock scripts, QML, PAM authentication). Scope is deliberately limited to those components of omacom/omarchy; the rest of the distribution is not covered.
omarchy-agent launches claude with --permission-mode auto instead of a true bypass
Reported by EthMil · filed Aug 27, 2026 · open at source
At a glance
- 1 · What is claimed?
- Only the report text below — no validator has restated it as checkable claims yet.
- 2 · What does it affect?
- AreaOutside the audited area· Decided by agents · verified
- 3 · Is it reproducible?
- No validation has been run yet.
- 4 · What remains unclear?
- Not validated yet: no claims, no reproducer.
- 5 · What happens next?
- Decided by agents and verified by a second, independent agent — see the decision.
Original report
What happened
The agent keybinding (SUPER+SHIFT+CTRL+A, omarchy-agent --pick) no longer opens Claude Code with full bypass permissions.
In /usr/share/omarchy/bin/omarchy-agent, the per-agent command table sets:
claude)
command=(claude --permission-mode auto)
...auto is a real Claude Code permission mode, but it is not a full bypass — it still prompts for at least some actions. Every other agent in the same table gets a genuine "never ask" flag, matching the script's own comment above the table ("each one starts with its own spelling of 'don't stop to ask'"):
| agent | flag |
|---|---|
| opencode | --auto |
| gemini | --yolo |
| copilot | --allow-all |
| crush | --yolo |
| claude | `--permission-mode auto` |
| grok | --permission-mode bypassPermissions |
| codex | --approve-for-me |
| omp | --auto-approve |
claude is the odd one out — it doesn't fully bypass permission prompts the way every sibling entry does. Given the comment's stated intent, and that grok's own launch already uses --permission-mode bypassPermissions, this looks like auto should be bypassPermissions for claude too (or claude --dangerously-skip-permissions).
What was expected
The Claude entry in omarchy-agent should launch with full bypass, consistent with every other agent in that table and the script's stated design intent.
Steps to reproduce
omarchy default agent claude- Press
SUPER+SHIFT+CTRL+A(or runomarchy-agent) - Observe Claude Code launches with
--permission-mode auto, not a full bypass
System details
- Omarchy version: 4.0.1-1
- File:
/usr/share/omarchy/bin/omarchy-agent
View raw text
## What happened
The agent keybinding (`SUPER+SHIFT+CTRL+A`, `omarchy-agent --pick`) no longer opens Claude Code with full bypass permissions.
In `/usr/share/omarchy/bin/omarchy-agent`, the per-agent command table sets:
```bash
claude)
command=(claude --permission-mode auto)
...
```
`auto` is a real Claude Code permission mode, but it is not a full bypass — it still prompts for at least some actions. Every other agent in the same table gets a genuine "never ask" flag, matching the script's own comment above the table ("each one starts with its own spelling of 'don't stop to ask'"):
| agent | flag |
|---|---|
| opencode | `--auto` |
| gemini | `--yolo` |
| copilot | `--allow-all` |
| crush | `--yolo` |
| **claude** | **`--permission-mode auto`** |
| grok | `--permission-mode bypassPermissions` |
| codex | `--approve-for-me` |
| omp | `--auto-approve` |
`claude` is the odd one out — it doesn't fully bypass permission prompts the way every sibling entry does. Given the comment's stated intent, and that `grok`'s own launch already uses `--permission-mode bypassPermissions`, this looks like `auto` should be `bypassPermissions` for `claude` too (or `claude --dangerously-skip-permissions`).
## What was expected
The Claude entry in `omarchy-agent` should launch with full bypass, consistent with every other agent in that table and the script's stated design intent.
## Steps to reproduce
1. `omarchy default agent claude`
2. Press `SUPER+SHIFT+CTRL+A` (or run `omarchy-agent`)
3. Observe Claude Code launches with `--permission-mode auto`, not a full bypass
## System details
- Omarchy version: 4.0.1-1
- File: `/usr/share/omarchy/bin/omarchy-agent`Validation
Not checked yet. A validator will restate this report as checkable claims, map it to the project's requirements and write a reproducer that the proof engine runs.
Linked
Not linked to any known issue, other report or change yet.
Decision
Decisions are recorded by our staff — or, where this project allows it, by agents: checked by a second, independent agent, or by a single agent where the project's policy says so. Any decision reached so far is shown below.
- Out of scopeDecided by agents · verified · 2026-10-09 09:34 UTC