Proof Portal
Project overview
Omarchy
ProbeLabs65 findings · 95 requirementsA proof layer — requirements, tests and verified fixes — for two of Omarchy's subsystems: the application menu (launcher scripts, QML model, JSONC config, search and selection) and the lock screen (lock scripts, QML, PAM authentication). Scope is deliberately limited to those components of omacom/omarchy; the rest of the distribution is not covered.
Inbox
Problems reported from outside the audit — kept verbatim, then checked: is the claim real, what does it touch, can it be reproduced? Validated reports are shown in full; items still under responsible disclosure appear only as a count until they are released.
Every report in every tab.
- R-473omarchy-weather-location breaks when wttr.in returns coordinates instead of a city nameby gexavi· closed — duplicate at sourcebugduplicate
Out of area
Fixed - R-483hibernation remove leaves resume kernel parameters in the UKI (Limine drop-in not removed)by maandrij· closed — duplicate at sourcebugduplicate
Out of area
Fixed - R-487Super+Alt+number shows an error for unavailable group windowsby nojaf· open at sourcebug
Out of area
Fixed - Fixed
- R-510Proposal: Show active keybindings in menu rowsby Marentius· open at sourceenhancementFixed
- R-529mise wrappers made before --quiet pollute stdout, and the regeneration migration can no longer parse themby jayrascodes· open at sourcebug
Out of area
Fixed - R-531Captive portal sign-in button uses a hardcoded URL most portals won't recognizeby daffelito· open at sourcebug
Out of area
Fixed - R-5090Clock calendar popup misaligns weekdays after DST transition (America/Santiago)by EstebanCygnus· closed — completed at sourceFixed
- R-544omarchy-install-hermes-cli installs via pipx/PyPI, which Hermes' own docs list as unsupportedby vaibhavb· open at sourcebug
Out of area
Fixed - R-549`omarchy setup security fingerprint` silently evicts a working libfprint fork, then "succeeds" against the stale daemonby StuartRP· open at sourcebug
Out of area
Fixed - R-551mise wrappers perform global install/config writes on every command invocationby LoonanChauvette· open at sourcebug
Out of area
Fixed - R-5085Clock calendar popup shows wrong weekday after a spring-forward-at-midnight DST transition (e.g. Chile, Sept 2026)by rdelpiano· closed — completed at sourceFixed
- R-576omarchy-menu-images reuses stale thumbnails after an image is overwritten in placeby 17lijunyi· open at sourcebugFixed
- R-5080Calendar grid is off by one day in timezones whose DST transition is at midnightby mquezada· closed — completed at sourceFixed
- R-5073Hybrid Intel+NVIDIA laptops: nvidia.lua forces LIBVA_DRIVER_NAME=nvidia even when the dGPU drives no displayby Romulus828· closed — completed at sourceFixed
- R-5065nvidia.lua forces LIBVA_DRIVER_NAME=nvidia on hybrid AMD+NVIDIA laptops, breaking Chromium/Brave videoby Yarlord· closed — completed at sourceFixed
- R-598omarchy-menu search field ignores IME composition (Korean/CJK via Fcitx5) — Keys.onPressed path bypasses Qt input methodby TAE58· open at sourcebugFixed
- R-602Universal Fix for Wedged-Style Popup Panels in Third-Party Pluginsby M0VO· open at sourcebug
Out of area
Fixed - R-611Clock calendar popup: hero date text clips on long month + 2-digit day (e.g. "September 13")by Yacl222· open at sourcebug
Out of area
Fixed - R-612launcher.hides entry "hermes" removes Hermes Desktop from the launcher even when the hermes-desktop package is not installedby pablo-io· open at sourcebug
Out of area
Fixed - R-5051Hybrid laptops: LIBVA_DRIVER_NAME=nvidia breaks all hardware video decoding when the compositor renders on the iGPUby Johary-hub· closed — completed at sourceFixed
- R-635Lid close suspends mid-task: skip suspend for working agents and on demandby colorfulfool· open at sourceenhancement
Out of area
Fixed - R-5050Menu extensions: overriding an existing id resets its icon and labelby ahmadtv· closed — completed at sourceFixed
- R-636Screen recording: stopping twice posts two "saved" toasts and a broken thumbnailby ahmadtv· open at sourcebug
Out of area
Fixed - R-5047Lock screen: endless 250 ms fingerprint retry against a wedged fprintd device, never recoversby niclogin· closed — completed at sourceFixed
- R-5046LIBVA_DRIVER_NAME=nvidia forced on hybrid laptops where the panel is driven by the iGPU — video plays audio with a black pictureby elliott-ringasund· closed — completed at sourceFixed
- R-5030idle.lock: large values overflow the lock Timer's 32-bit interval, causing an infinite 1kHz warning loop and ~1GB/session log growthby bob-wright8778· closed — completed at sourceFixed
- R-678Default editor Zed not detected: menu/launcher check `zeditor` but Arch provides `zed`by onyvaxyz· open at sourcebugFixed
- R-681omarchy update does not detect package corruption after an interrupted pacman transactionby facusaldaa· open at source
Out of area
Fixed - R-5013Emoji picker's synthetic paste (Shift+Insert) doesn't work in Zen Browserby jstmrby· closed — completed at sourceFixed
- R-705Feature request: generic biometric (face) unlock hook in the lock screen, similar to fingerprint supportby Wakko13· open at sourceenhancementFixed
- R-711Menu user extension can't partially override defaults — hidden fields (label/provider/action/aliases) get clobberedby silvioscs· open at sourcebug
Known issueKI-MENU-MERGE-OVERRIDE-WIPES-DEFAULTS
+1 also reported· show· hide
R-711 is the earliest report of this defect; this report says the same thing.
- Menu extension overrides wipe unspecified fields (icon, label, when) instead of merging R-427filed Sep 17, 2026Closed upstream on 2026-10-12 by the bot omarchybot, as a duplicate (target not recorded).
Fixed - R-720Learn -> Bash [The site can't be reached]by schad-x· open at sourcebugFixed
- R-724nvidia.lua forces LIBVA_DRIVER_NAME=nvidia on hybrid laptops where the iGPU drives the displays, breaking browser video (repro of #11168 on Arrow Lake + Blackwell)by kimm-stensborg· open at sourcebug
Out of area
Fixed - R-727Let plugins declare menu entries in their manifestby ReidenXerx· open at sourceenhancementFixed
- R-5005Shell: idle lock timer interval overflows 32-bit int, spamming logs until /run/user tmpfs fillsby leftydevkit· closed — completed at sourceFixed
- R-731Idle service wakes the display while the session is lockedby kurtome· open at sourcebug
+1 also reported· show· hide
R-731 is where this defect is tracked; this report says the same thing.
Fixed - R-734Clock calendar popup misaligned by one day after DST spring-forward (America/Santiago)by axelgalea· closed — completed at sourcebug
Out of area
Fixed - R-735Toggling nightlight through shourtcuts can couse it to go haywireby enrikhazizi· open at sourcebug
Out of area
Fixed - R-5002Keybindings menu (Super+K) spins at 100% CPU: Lua mock incompatible with Lua 5.4+ ipairsby yzzztech· closed — completed at sourceFixed
- R-759fix-powerprofilesctl-shebang runs only at install time, so every power-profiles-daemon upgrade silently reverts itby blurxy· open at sourcebugFixed
- R-7674.0.3: a third-party panel's failed write to the now read-only centerHoverRevealSuppressed locks the whole sessionby weedwhitesandwine· open at sourcebug
Out of area
Fixed - R-4981Super+K keybindings menu hangs forever when user config iterates hl.get_monitors() with ipairsby RodriMora· closed — completed at sourceFixed
- R-4974omarchy-hyprland-monitor-external-active counts Hyprland's FALLBACK output → laptop panel stuck off after undock-by-unplugby qtn10· closed — completed at sourceFixed
- R-4964The lock screen flashes on and re-blanks in a loop while the screen is still locked.by ianvanhoof· closed — completed at sourcebugFixed
- R-815Incorrect terminal class/app_id for wezterm in terminals.luaby cameronr· open at sourcebug
Out of area
Fixed - R-828Wi-Fi panel is unreachable from Setup/Apps once the bar widget is removedby smfworks· open at sourceenhancementFixed
- R-4958omarchy-menu-keybindings hangs indefinitely when cache needs regenerationby zonk911· closed — duplicate at sourceFixed
- R-4954Lock screen loses keyboard focus after suspend/resume, requires mouse click to type passwordby kolachaitu· closed — completed at sourceFixed
- R-840Add a Slack web app with slack:// link handlingby BrunooMoniz· open at sourceenhancementFixed
- R-4952omarchy-menu-keybindings leaks stuck lua processes (infinite loop in noop stub) hammering CPUby BigKelLearns· closed — completed at sourceFixed
- R-861omarchy-system-sleep-lock posts a new critical notification per failure, so a repeating fault leaves unbounded reboot-persistent toastsby Mahdi-Si· open at sourcebugFixed
- R-866omarchy-theme-set-browser hangs even when the pgrep guard is a true positive: Chromium running, `--refresh-platform-policy` never exitsby hiendinhngoc· open at sourcebug
Out of area
Fixed - R-874Lock screen keeps committing frames while the output is DPMS-off, so GPU memory grows unbounded for the whole lockby TechCascadeLtd· open at sourcebugFixed
- R-882omarchy-hyprland-monitor-external-active is fooled by the synthetic FALLBACK monitor, so the internal panel never recovers when the external monitor is unpluggedby gtf-inet· open at sourcebug
Out of area
Fixed - R-4932clamshell forces an unreferenced omarchy_monitor_scale onto the panel on every idle-wakeby seth-wood· closed — completed at sourceFixed
- R-901File Manager is not a Defaults category (hardcoded to Nautilus, ignores xdg-mime)by mrocha-montes· open at sourceenhancementFixed
- R-904Session lock silently lost on output re-add: desktop exposed without authentication (and quickshell SIGABRT on the same path)by nikitaprokopov· open at sourcebug
Known issueKI-LOCK-SPONTANEOUS-UNLOCK-FAIL-OPEN
Fixed - R-4920Lock screen password field loses keyboard focus after resume; only a mouse click restores itby Adam-Ben-Shoham· closed — completed at sourceFixed
- Fixed
- R-4912Emoji picker insert fails in Zen/Firefox: Shift+Insert pastes PRIMARY, not clipboardby sarniva· closed — completed at sourceFixed
- R-920Ollama install menu picks CUDA/CPU on AMD systems: `nvidia-smi` presence ≠ NVIDIA GPU, and the `rocminfo` branch never firesby bel-maty· open at sourcebugFixed
- R-922omarchy-hibernation-remove leaves stale resume.conf, breaking re-setupby jorgenfoss· closed — duplicate at sourcebugduplicate
Out of area
Fixed - R-929Menu search ranks Omarchy actions above installed appsby numanzahid· open at sourcebugenhancement
+1 also reported· show· hide
R-929 is the earliest report of this defect; this report says the same thing.
- Menu search: installed app loses short-prefix ranking to same-labeled menu actions (e.g. "chr" for Google Chrome) R-614filed Sep 13, 2026Open upstream.
Fixed - R-942Stalled lock latches lockRequested, so every later lock() returns "ok" without locking — machine suspends unlockedby mchldotdev· open at sourcebug
+1 also reported· show· hide
R-942 is the earliest report of this defect; this report says the same thing.
- [Bug] `omarchy-system-sleep-lock` hangs for 12000ms on suspend due to stuck `lock-pending: screen-stabilizing` state R-5322filed Oct 11, 2026Open upstream.
Fixed - R-943Lock screen flickers on every keystroke: each wake re-applies a monitor scale from monitors.lua that the compositor doesn't use, with no backoffby tallsam· open at sourcebug
+1 also reported· show· hide
R-943 is where this defect is tracked; this report says the same thing.
- Internal display flashes to 2x scale on lock-screen mouse move / resume (desc: output rules unmatched) R-1655filed Aug 19, 2026Open upstream.
Fixed - R-944Transparent bar keeps the previous theme's text colour: the refresh request is dropped while a sample is in flightby 9r0j3c70521· open at sourcebug
Out of area
Fixed - R-951Clamshell gate makes pam_exec log an error on every sudo and polkit auth (16% of all error-priority journal lines)by wbnns· open at sourceenhancement
Out of area
Fixed - R-4893Lock-on-suspend runs after PrepareForSleep(true), so pam_fprintd can never install fprintd's sleep delay inhibitorby wbnns· closed — not planned at sourceFixed
- R-4887omarchy-menu-keybindings hangs (100% CPU) when a user config iterates hl.get_loaded_plugins()by evariste1963· closed — completed at sourceFixed
- Fixed
- R-4873omarchy-brightness-keyboard off saves 0 over the good value, making restore permanently restore darknessby joshdaws· closed — completed at sourceFixed
- R-989omarchy-setup-security-fingerprint doesn't add the clamshell gate to the lock screen's fingerprint PAM configby 1818TusculumSt· open at sourcebug
+2 also reported· show· hide
R-989 is the earliest report of this defect; these reports say the same thing.
- setup security fingerprint wipes the clamshell gate from omarchy-lock-fingerprint R-968filed Sep 4, 2026Closed upstream on 2026-10-11 by the bot omarchybot, as a duplicate (target not recorded).
- Lock-screen fingerprint stack lacks the clamshell gate that omarchy-setup-security-fingerprint writes for sudo/polkit — endless verify-timeout storm on lid-closed machines R-5142filed Oct 4, 2026Open upstream.
Fixed - R-4865Update default agent: Replace legacy Gemini (NPM) with native Antigravity (agy)by overclock98· closed — completed at sourceFixed
- R-4863Brave Origin window class not matched by browser.lua opacity regex, stays translucent even when focusedby pkovzz· closed — completed at sourceFixed
- R-1025Lock screen re-arms fingerprint PAM indefinitely — 6,451 cycles / 6,454 USB resets over 53hby surfstyk· closed — duplicate at sourcebugduplicateFixed
- R-1029Lock screen keeps fingerprint PAM armed for the whole lock, wedging USB imaging readersby voglster· open at sourcebug
Duplicate ofLock screen fingerprint sensor only ever runs ONE pam session per lock R-443— where this defect is tracked
+1 duplicate report here· show· hide
Every defect they describe is already reported in this tab, and this report leads their main one. This tab lists one row per report that brings a defect of its own.
- Lock screen: fingerprint reader disabled by libfprint thermal guard after ~3 min, then 250 ms retry loop R-2143filed Oct 1, 2026· open upstream
Fixed - R-1031Lock screen retries fingerprint PAM every 250ms with no backoff, preventing fprintd recoveryby kirkules1000010· closed — completed at sourcebugFixed
- R-1044Confirm destructive power actions in the system menuby ferlemes· open at sourceenhancementFixed
- R-1046idle.lock above ~24.8 days overflows the QTimer interval negative: ~400 warnings/sec exhausts shmem and crash-loops wayland-wm-app-daemonby rnieuwen· open at sourcebug
Out of area
Fixed - R-4837Rapid lock-screen fingerprint retries can leave the reader unusableby NeroSong· closed — completed at sourcebugFixed
- R-4832omarchy-system-lock reports success when shell IPC never requests a lockby bigminer· closed — not planned at sourceFixed
- R-1075Quickshell SIGABRT ("Tried to show lockscreen surfaces without active lock") when a plugin live-reloads while the screen is lockedby ninepointlabs· closed — completed at sourcebug
+4 also reported· show· hide
R-1075 is where this defect is tracked; these reports say the same thing.
- Plugin hot-reload while locked destroys the lock client; Quickshell then SIGABRTs R-1147filed Aug 31, 2026Open upstream.
- quickshell crashes with "Tried to show lockscreen surfaces without active lock" during plugin reload R-911filed Sep 6, 2026Open upstream.
- Editing any ~/.config/omarchy/plugins file while locked aborts the shell (SIGABRT: "Tried to show lockscreen surfaces without active lock") R-849filed Sep 7, 2026Closed upstream on 2026-10-11 by the bot omarchybot, as a duplicate (target not recorded).
- Cloned omarchy.lock: built-in lock still loads at shell startup, two session locks race and Quickshell crashes R-5315filed Oct 10, 2026Open upstream.
Fixed - R-1077omarchy weather location shows truncated coordinates instead of a city name when wttr.in falls back to raw lat/lonby Elderswift· open at sourcebug
Out of area
Fixed - R-4825Lock screen password field loses keyboard focus after DPMS blank (hybrid NVIDIA GPU)by SamW7890· closed — completed at sourceFixed
- R-1097Lock screen retries fingerprint auth every 250ms forever with no backoff — ~226 PAM sessions/minute while lockedby charliebarmore· closed — completed at sourcebugFixed
- R-1100Calendar grid duplicates September 5 and shifts dates in month viewby Arturo387· closed — completed at sourcebug
Out of area
Fixed - R-4811Omarchy installs the retired Gemini CLI and offers no Antigravity CLI pathby ScytheAkira· closed — completed at sourceFixed
- R-1113CJK font fallback always selects Korean variant regardless of localeby usutani· open at sourcebug
Out of area
Fixed - R-1121omarchy-shell: stale Quickshell polkit registration blocks pkexec until shell restartby VillainRU· open at sourcebug
Out of area
Fixed - R-1130omarchy-update-mise forces MISE_MINIMUM_RELEASE_AGE=0 and ignores npm min-release-ageby berenddeboer· open at source
Out of area
Fixed - R-1136Support non-interactive updates: omarchy update --yes flagby hummbl-dev· open at sourceenhancement
Out of area
Fixed - R-1149System menu is not dismissed by clicks on another monitorby JoNil· open at sourcebugFixed
- R-4792Lock screen password field loses keyboard focus race — forcePasswordFocus() fires before WlSessionLock.secure becomes trueby work-aalp· closed — completed at sourcebugFixed
- R-4788omarchy-menu-keybindings: Infinite loop during cache generation due to ipairs on noop objectby rendarth· closed — completed at sourceFixed
- R-1157PipeWire runs without realtime priority on a stock install (rtkit is not included)by michelbob· open at sourcebug
Out of area
Fixed - R-4781Add support for Antigravity (agy) agent and note deprecated Gemini CLIby slawkor· closed — not planned at sourceFixed
- R-4779Lock screen clobbers saved keyboard backlight level: omarchy-brightness-keyboard off re-saves 0, so restore-on-wake brings back 0by symbolofraisins· closed — completed at sourceFixed
- R-1178Bluetooth widget device list reshuffles under pointer during discovery, causing misclicksby daffelito· open at sourcebug
Out of area
Fixed - Fixed