Proof Portal
Project overview
Omarchy
ProbeLabs65 findings · 95 requirementsA proof layer — requirements, tests and verified fixes — for two of Omarchy's subsystems: the application menu (launcher scripts, QML model, JSONC config, search and selection) and the lock screen (lock scripts, QML, PAM authentication). Scope is deliberately limited to those components of omacom/omarchy; the rest of the distribution is not covered.
Inbox
Problems reported from outside the audit — kept verbatim, then checked: is the claim real, what does it touch, can it be reproduced? Validated reports are shown in full; items still under responsible disclosure appear only as a count until they are released.
Issues already closed where they were filed (for example on GitHub) with nothing decided here. Kept as history so a new report can be matched to the earliest one; they are not worked, even if an agent left a proposal or a question on one.
- R-5026Top Bar Click/Input Offset After Monitor Geometry Changesby Rambo176· closed — completed at sourcebugReceived
- R-5025Menu plugins loaded through the panel model lose shell.appLibrary (apps submenu empty)by ebin-alex· closed — completed at sourceReceived
- R-5024omarchy install service sunshine fails: enables unit by its alias before the alias existsby noonat· closed — completed at sourceReceived
- R-5023Cloned menu plugins show an empty Apps submenu (manifestHasKind rejects model-delivered manifests)by sfk8815-create· closed — completed at sourceReceived
- R-5022Bluetooth panel pairing silently fails for devices requiring passkey confirmationby mhbnielsen· closed — completed at sourceReceived
- R-5021T2 iMac20,1 stuck at loading bar after linux-t2 7.2.4 (amdgpu SMU regression)by milimat0810· closed — not planned at sourceReceived
- R-5020DaVinci Resolve Download Manager locks window focusby AksharP5· closed — completed at sourceReceived
- R-5019Windows VM launch fails silently when ~/Windows has the setgid bit (chmod 0700 preserves setgid)by madmanmatt· closed — completed at sourceReceived
- R-5018windows vm launch fails: chmod 0700 no longer clears setgid on ~/Windows (coreutils 9.11), which dockur resets to 2777by yeet-bits· closed — completed at sourceReceived
- R-5017Codex agents widget: "limits unavailable" — collector passes removed `-a untrusted` approval valueby cstljuan· closed — completed at sourceReceived
- R-5016Omarchy shell crashes repeatedly when idle/screensaver triggers due to FALLBACK monitorby aaronfreeman· closed — completed at sourceReceived
- R-5015aquamarine 0.15.0: external monitor never recovers after being turned off (NVIDIA repro), please hold or patch aquamarineby Tigres2526· closed — completed at sourcebugReceived
- R-5014KeyboardPanel: a throwing plugin close() locks the whole shell's mouse inputby aligu7· closed — completed at sourceReceived
- R-5013Emoji picker's synthetic paste (Shift+Insert) doesn't work in Zen Browserby jstmrby· closed — completed at sourceFixed
- R-5012omarchy-launch-webapp falls back to chromium.desktop without checking it exists (plus allowlist needs constant updates)by thedavidweng· closed — completed at sourceReceived
- R-5011omarchy install service sunshine aborts: enables an alias systemd only creates on enableby lawanner04· closed — completed at sourceReceived
- R-5010Universal copy/paste/cut (SUPER+C/V/X) fails on non-Latin keyboard layoutsby airenare· closed — completed at sourceReceived
- R-50094.0.3: third-party/cloned menu plugins get shell.appLibrary = null, so the Apps submenu is emptyby DanielSRojo· closed — completed at sourceReceived
- R-5008Cloned omarchy.menu gets shell.appLibrary = null, Apps submenu always emptyby aendom· closed — completed at sourceReceived
- R-5007nvidia.lua forces LIBVA_DRIVER_NAME=nvidia on hybrid laptops rendering on the iGPU, breaking video playback in Chromiumby importantlabs· closed — not planned at sourceReceived
- R-5006Passwordless cleartext default keyring is destroyed by any app that stores a multi-line secret, leaving an unlock prompt on every autologin bootby duckzooka· closed — completed at sourceReceived
- R-5005Shell: idle lock timer interval overflows 32-bit int, spamming logs until /run/user tmpfs fillsby leftydevkit· closed — completed at sourceFixed
- R-5004omarchy-theme-set-browser blocks forever when brave-bin and brave-origin-bin are both installedby haydenmckay· closed — completed at sourceReceived
- R-5003Apps menu (Super+Space > Apps) always shows "Nothing here yet", regression in 4.0.3-1by derekios88· closed — completed at sourceReceived
- R-5002Keybindings menu (Super+K) spins at 100% CPU: Lua mock incompatible with Lua 5.4+ ipairsby yzzztech· closed — completed at sourceFixed
- R-745Unable to run update on new installationby pnunn· closed — not planned at sourcebugReceived
- R-5001~/.config/chromium-flags.conf is force-injected into every chromium launch, crashing headless/automation invocations (Playwright etc.) with SIGTRAPby dutchbase· closed — completed at sourceReceived
- R-5000Super+J sends unsupported togglesplit message in scrolling layoutby theontho· closed — completed at sourceReceived
- R-4999omarchy install service sunshine: enables sunshine.service, but the package ships app-dev.lizardbyte.app.Sunshine.serviceby rhwaddell· closed — completed at sourceReceived
- R-4998Third-party menus lose app-library access after Instantiator manifest conversionby DanielLemky· closed — completed at sourceReceived
- R-4997Third-party menu plugins receive a null shell.appLibrary, so replacement launchers show an empty Apps listby TheHatBoxGhost· closed — completed at sourceReceived
- R-4996omarchy-update-dev fails with unbound variable OMARCHY_PATH under sudoby henriquemeira· closed — completed at sourceReceived
- R-4995Battery service forks powerprofilesctl get every 2 s for the whole session (~5% of a core, on battery too)by vstoyanov· closed — completed at sourceReceived
- R-4994Cloned bar option fails to load (required props), and stock-bar fallback never engages (errorString ReferenceError)by TheeHk-blip· closed — completed at sourceReceived
- R-4993App launch OSD popup ('Launching <app>...') can get permanently stuck on screenby Louis454545· closed — completed at sourceReceived
- R-4992Default-editor setting has no effect on file-manager/XDG MIME default (still opens Neovim)by pop400· closed — completed at sourceReceived
- R-4991Cloned menu plugins get null shell.appLibrary — Apps submenu is emptyby KalEl117· closed — completed at sourceReceived
- R-4990appLibrary not granted to third-party plugins with kind "menu" (4.0.3)by julihermes· closed — completed at sourceReceived
- R-4989Black screen or plymouthd crash under Proxmox with GPU passthrough, can boot with serial console helpby romixlab· closed — completed at sourcebugReceived
- R-4988Bug: Array.isArray fails on manifest.kinds QJSValue, causing PluginShellApi revocation for 3rd-party menu pluginsby ankardo· closed — completed at sourceReceived
- R-4987omarchy windows vm: fails to launch after first run — setgid/shared dir rejected (chmod 0700 doesn't clear setgid)by iainlennox· closed — completed at sourceReceived
- R-4986Cloned menu plugin loses its appLibrary capability on plugin re-instantiation — Apps submenu is always emptyby Dazzle-sys· closed — completed at sourceReceived
- R-4985Dell XPS 13 DX13260 (1028:0e53): intermittent sof_sdw card-instantiation failure (-16 EBUSY) + CS35L56 amps can't read tuning IDs even when files existby aarondouglasrich· closed — completed at sourceReceived
- R-4984omarchy-windows-vm: setgid on ~/Windows silently blocks every launch (chmod 0700 cannot clear setgid on a directory)by ids444· closed — completed at sourceReceived
- R-4983Manual errorby lucserre· closed — completed at sourcebugReceived
- R-49824.0.3: third-party plugins get appLibrary=null and a manifest stripped of __sourceDir, both silentlyby trustimagetiago· closed — completed at sourceReceived
- R-4981Super+K keybindings menu hangs forever when user config iterates hl.get_monitors() with ipairsby RodriMora· closed — completed at sourceFixed
- R-49804.0.3: third-party plugins cannot read their own shell.json entry, and lock clones cannot reach their own serviceby pata27· closed — completed at sourceReceived
- R-4979Top Bar Click Areas Become Vertically Misaligned After Tray/Widget Changesby Rambo176· closed — completed at sourcebugReceived
- R-4978Cloned menu plugin gets null appLibrary, Apps submenu always emptyby syvanpera· closed — completed at sourceReceived
- R-4977Network widget reports "Ping: Timeout" and "Packet Loss: 100%" on networks that block ICMP — probe uses `ping` instead of a TCP-based checkby rahmatov-abdullaxon· closed — completed at sourcebugReceived
- R-4976[Regression] linux-ptl 7.2.3: IPU7 / OV08X40 sensor missing from media graph on Dell XPS 14 DA14260by milep· closed — completed at sourcebugReceived
- R-4975Cloned omarchy.menu plugin shows empty Apps submenuby AndreyCJ· closed — completed at sourceReceived
- R-4974omarchy-hyprland-monitor-external-active counts Hyprland's FALLBACK output → laptop panel stuck off after undock-by-unplugby qtn10· closed — completed at sourceFixed
- R-4973Cloned menu plugin (menu+bar-widget kinds) loses appLibrary after plugin rescan, Apps list goes emptyby hermes-os· closed — completed at sourceReceived
- R-4972omarchy toggle bar: on/off arguments are invertedby fubartutu· closed — completed at sourceReceived
- R-4971Cloned omarchy.menu shows empty Apps launcher (appLibrary null) on 4.0.3by profemzy· closed — duplicate at sourceReceived
- R-4970Third-party menu clones get null appLibrary in 4.0.3, Apps submenu emptyby crueber· closed — completed at sourceReceived
- R-4969omarchy install service sunshine fails: unit sunshine.service does not existby uceraksu· closed — completed at sourceReceived
- R-4968Bar toggle on/off behavior is invertedby carlospp95· closed — completed at sourceReceived
- R-4967Apps menu empty ("Nothing here yet") after upgrading to 4.0.3by michalmielczynski· closed — completed at sourceReceived
- R-4966Apps submenu empty for cloned/third-party menu plugins (shell.appLibrary null) since 4.0.3by Doghouse-Mike· closed — completed at sourceReceived
- R-808Regression (4.0.2→4.0.3): publicPluginManifest() strips __sourceDir, breaking third-party plugins that locate their own filesby redglover· closed — completed at sourcebugReceived
- R-4965Idle screensaver/lock triggers during windowed Firefox video playbackby victoralekseev5597· closed — completed at sourceReceived
- R-4964The lock screen flashes on and re-blanks in a loop while the screen is still locked.by ianvanhoof· closed — completed at sourcebugFixed
- R-809Wayland SDL application causes immediate lock when it exitsby Thomas-Bard· closed — completed at sourcebugReceived
- R-810Apple Silicon: speakersafetyd's post-resume PCM reinit wedges/crashes wireplumber, leaving audio stuck muted (no resume-fix, unlike wifi/HID/NVMe)by doomnote· closed — not planned at sourcebugcompatibilityReceived
- R-811Wi-Fi resume fix (fix-wifi-resume.sh) excludes BCM4388 (14e4:4434), but it wedges on real lid-close suspend tooby doomnote· closed — not planned at sourcebugcompatibilityReceived
- R-4963omarchy-windows-vm fails silently when ~/Windows carries the setgid bitby pbecks1963· closed — completed at sourceReceived
- R-4962AMD display freeze retains valid mode and active CRTC, bypassing monitor recovery; DPMS restores sessionby theinventor· closed — completed at sourceReceived
- R-4961Macbook air 7,2 early 2015 still no go on built in wifiby mikeproctor· closed — completed at sourcebugReceived
- R-4960Cloned bar plugin never loads: required properties can't be set by pluginBarLoader, and the error is swallowedby kesavsabari· closed — completed at sourceReceived
- R-4959Cloning a service+bar-widget plugin silently breaks its widget: firstPartyServiceFor() ignores clonedFromby nanfxqs· closed — completed at sourceReceived
- R-4958omarchy-menu-keybindings hangs indefinitely when cache needs regenerationby zonk911· closed — duplicate at sourceFixed
- R-4957Cloning the built-in bar leaves no bar: Loader.Error handler throws ReferenceError, skipping the default-bar fallbackby james-engelbrecht· closed — completed at sourceReceived
- R-4956Widgets cannot be dragged back into an emptied bar sectionby james-engelbrecht· closed — completed at sourceReceived
- R-4955Windows VM permanently fails to start after first run: chmod 0700 cannot clear the setgid bit the container sets on ~/Windowsby cmillwat· closed — completed at sourceReceived
- R-4954Lock screen loses keyboard focus after suspend/resume, requires mouse click to type passwordby kolachaitu· closed — completed at sourceFixed
- R-4953omarchy bar set --json cannot persist array settings (tray pinned ["steam"] stored as "steam")by mscurtescu· closed — duplicate at sourceReceived
- R-4952omarchy-menu-keybindings leaks stuck lua processes (infinite loop in noop stub) hammering CPUby BigKelLearns· closed — completed at sourceFixed
- R-4951omarchy-network-speedtest leaves orphaned curl workers running against fast.com after the panel is closedby londospark· closed — completed at sourceReceived
- R-4950Stable mirror frozen since Aug 25 keeps default Chromium on 151 while 152.0.7977.82 fixes an in-the-wild exploit (CVE-2026-85046)by JohnAtl· closed — completed at sourceReceived
- R-4949omarchy-agent-usage-codex passes a removed --ask-for-approval value, so Codex limits never loadby CougarM· closed — completed at sourceReceived
- R-4948System Tray / Bar Click Areas Become Misaligned After Tray Model Changesby Rambo176· closed — completed at sourcebugReceived
- R-854Stable installer (master) still writes apple-bce, breaking every T2 Mac installby joelgranik· closed — not planned at sourcebugcompatibilityReceived
- R-4947Cloning a first-party service plugin silently breaks its bar indicator: serviceFor() does not resolve clonesby kstorm12· closed — completed at sourceReceived
- R-4946Dark themes with a tinted near-black background render Chromium chrome as loud saturated blue (BrowserThemeColor is a seed, not a paint color)by 1azza· closed — completed at sourceReceived
- R-4945omarchy-theme-set-browser hangs (and stalls omarchy update) when brave-bin is installed but only Brave Origin is runningby bierlingm· closed — completed at sourceReceived
- R-4944Workspace bar widget highlights the same workspace on all monitors instead of each monitor's own active workspaceby cjoprey· closed — completed at sourceReceived
- R-4943Quickshell aborts while showing lockscreen surfaces without an active lockby clutchwtn· closed — completed at sourceReceived
- R-4942omarchy toggle bar on/off arguments are invertedby macbe· closed — completed at sourceReceived
- R-4941Plugin hot reload re-runs cached QML: Qt.clearComponentCache does not exist in Quickshellby janrenz· closed — completed at sourceReceived
- R-4940`omarchy windows vm launch` fails silently when the shared folder has the setgid bitby willbearfruits· closed — completed at sourceReceived
- R-4939Update: Intermittent top-bar mouse hit-area / click-position issueby Rambo176· closed — completed at sourcebugReceived
- R-4938Orphan inotifywait processes accumulate watching ~/.config/omarchy/pluginsby zhainan99· closed — completed at sourceReceived
- R-4937Grey-screen video playback in Chromium/Discord on hybrid AMD+NVIDIA (forced LIBVA_DRIVER_NAME=nvidia)by RibatTRW· closed — completed at sourceReceived
- R-4936Screensaver doesn't wake on bare Ctrl tap or mouse click (only real keystrokes)by victoralekseev5597· closed — completed at sourceReceived
- R-4935Plugin hot-reload never clears the component cache: the Qt.clearComponentCache guard is always falseby pmbemax· closed — completed at sourceReceived
- R-4934Custom "bar" plugin fails to load — cloning the built-in bar (omarchy plugin clone omarchy.bar) breaks the shellby toppzi· closed — completed at sourceReceived
- R-4933Dell XPS 13 DX13260 (1028:0e53): no sound at all after dell-xps13-sidecar-amps workaround — CS35L56 firmware never downloads despite blobs being presentby MBvisti· closed — completed at sourceReceived