Proof Portal
Project overview
Omarchy
ProbeLabs65 findings · 95 requirementsA proof layer — requirements, tests and verified fixes — for two of Omarchy's subsystems: the application menu (launcher scripts, QML model, JSONC config, search and selection) and the lock screen (lock scripts, QML, PAM authentication). Scope is deliberately limited to those components of omacom/omarchy; the rest of the distribution is not covered.
Inbox
Problems reported from outside the audit — kept verbatim, then checked: is the claim real, what does it touch, can it be reproduced? Validated reports are shown in full; items still under responsible disclosure appear only as a count until they are released.
- R-654Fingerprint unlock fails after every suspend (fprintd device stuck busy) and the shell retries every 250ms until unlockby callumau· closed — completed at sourcebugReceived
- R-5042Cloning the menu plugin breaks the Apps submenu (appLibrary not wired for cloned menu plugins in 4.0.3)by RubenMovsesyan· closed — completed at sourceReceived
- R-5041Withdrawnby LeoSanz· closed — completed at sourceReceived
- R-5040Plugin hot reload never applies QML edits: Qt.clearComponentCache guard is always falseby diogo7dias· closed — completed at sourceReceived
- R-5039Plugin watcher outlives a shell crash, leaking an inotifywait each time until inotify instances are exhaustedby chadmandoo· closed — completed at sourceReceived
- R-5038Bluetooth bar panel leaks discovery session, breaking LE device auto-reconnectby jturan· closed — not planned at sourceReceived
- R-5037No sound from internal speakers on Dell XPS 13 DX13260 (Panther Lake, CS42L43+CS35L56A) — speaker-ID/tuning read failureby Nitad· closed — completed at sourceReceived
- R-5036numlock_by_default silently breaks letter keys on old Apple Bluetooth keyboards (hid-apple numpad emulation)by roju· closed — completed at sourceReceived
- R-5035Bluetooth popup shows "No adapter" and hides the power switch after turning Bluetooth offby demenydavid· closed — completed at sourceReceived
- R-5034IPU7 camera HAL requires missing libjsoncpp.so.26 on current Archby jamielmccormick· closed — not planned at sourceReceived
- R-5033Dell XPS 13 DX13260 (0E54): silent speakers due to missing Cirrus firmware linksby zspetersen· closed — completed at sourceReceived
- R-671Hibernate resume hangs with dead input on MacBookPro11,5 (pre-T2)by rand0mdud3· open at sourcebugmaccompatibilityReceived
- R-5032install service sunshine: systemctl enable fails (unit ships under app-* name with Alias), script aborts before opening firewall portsby lw396· closed — completed at sourceReceived
- R-5031Chromium crashes (SIGTRAP) on normal desktop launch — flags duplicated 2-3x from chromium-flags.confby zaid-kamil· closed — completed at sourceReceived
- R-5029No speaker audio on Dell XPS 13 DX13260 (2026) — CS35L56 amp firmware never loadsby Gundrak· closed — not planned at sourceReceived
- R-5028Document: default binds already work in any keyboard layoutby WokoFlipper· closed — completed at sourceReceived
- R-682Fingerprint auth prompt is easy to miss: add visual/audio attention cueby WokoFlipper· open at sourceenhancementReceived
- R-5027Cloning omarchy.menu leaves the Apps submenu empty; the clone's Menu.qml never rendersby maxdmayhew· closed — completed at sourceReceived
- R-5026Top Bar Click/Input Offset After Monitor Geometry Changesby Rambo176· closed — completed at sourcebugReceived
- R-5025Menu plugins loaded through the panel model lose shell.appLibrary (apps submenu empty)by ebin-alex· closed — completed at sourceReceived
- R-5024omarchy install service sunshine fails: enables unit by its alias before the alias existsby noonat· closed — completed at sourceReceived
- R-5023Cloned menu plugins show an empty Apps submenu (manifestHasKind rejects model-delivered manifests)by sfk8815-create· closed — completed at sourceReceived
- R-5022Bluetooth panel pairing silently fails for devices requiring passkey confirmationby mhbnielsen· closed — completed at sourceReceived
- R-5021T2 iMac20,1 stuck at loading bar after linux-t2 7.2.4 (amdgpu SMU regression)by milimat0810· closed — not planned at sourceReceived
- R-5020DaVinci Resolve Download Manager locks window focusby AksharP5· closed — completed at sourceReceived
- R-5019Windows VM launch fails silently when ~/Windows has the setgid bit (chmod 0700 preserves setgid)by madmanmatt· closed — completed at sourceReceived
- R-5018windows vm launch fails: chmod 0700 no longer clears setgid on ~/Windows (coreutils 9.11), which dockur resets to 2777by yeet-bits· closed — completed at sourceReceived
- R-5017Codex agents widget: "limits unavailable" — collector passes removed `-a untrusted` approval valueby cstljuan· closed — completed at sourceReceived
- R-5016Omarchy shell crashes repeatedly when idle/screensaver triggers due to FALLBACK monitorby aaronfreeman· closed — completed at sourceReceived
- R-5015aquamarine 0.15.0: external monitor never recovers after being turned off (NVIDIA repro), please hold or patch aquamarineby Tigres2526· closed — completed at sourcebugReceived
- R-5014KeyboardPanel: a throwing plugin close() locks the whole shell's mouse inputby aligu7· closed — completed at sourceReceived
- R-5012omarchy-launch-webapp falls back to chromium.desktop without checking it exists (plus allowlist needs constant updates)by thedavidweng· closed — completed at sourceReceived
- R-5011omarchy install service sunshine aborts: enables an alias systemd only creates on enableby lawanner04· closed — completed at sourceReceived
- R-710Feature: Configurable menu width (wider/Raycast-style layout)by tariqbaater· open at sourceenhancementReceived
- R-5010Universal copy/paste/cut (SUPER+C/V/X) fails on non-Latin keyboard layoutsby airenare· closed — completed at sourceReceived
- R-50094.0.3: third-party/cloned menu plugins get shell.appLibrary = null, so the Apps submenu is emptyby DanielSRojo· closed — completed at sourceReceived
- R-5008Cloned omarchy.menu gets shell.appLibrary = null, Apps submenu always emptyby aendom· closed — completed at sourceReceived
- R-5007nvidia.lua forces LIBVA_DRIVER_NAME=nvidia on hybrid laptops rendering on the iGPU, breaking video playback in Chromiumby importantlabs· closed — not planned at sourceReceived
- R-5006Passwordless cleartext default keyring is destroyed by any app that stores a multi-line secret, leaving an unlock prompt on every autologin bootby duckzooka· closed — completed at sourceReceived
- R-5004omarchy-theme-set-browser blocks forever when brave-bin and brave-origin-bin are both installedby haydenmckay· closed — completed at sourceReceived
- R-5003Apps menu (Super+Space > Apps) always shows "Nothing here yet", regression in 4.0.3-1by derekios88· closed — completed at sourceReceived
- R-745Unable to run update on new installationby pnunn· closed — not planned at sourcebugReceived
- R-5001~/.config/chromium-flags.conf is force-injected into every chromium launch, crashing headless/automation invocations (Playwright etc.) with SIGTRAPby dutchbase· closed — completed at sourceReceived
- R-5000Super+J sends unsupported togglesplit message in scrolling layoutby theontho· closed — completed at sourceReceived
- R-4999omarchy install service sunshine: enables sunshine.service, but the package ships app-dev.lizardbyte.app.Sunshine.serviceby rhwaddell· closed — completed at sourceReceived
- R-4998Third-party menus lose app-library access after Instantiator manifest conversionby DanielLemky· closed — completed at sourceReceived
- R-4997Third-party menu plugins receive a null shell.appLibrary, so replacement launchers show an empty Apps listby TheHatBoxGhost· closed — completed at sourceReceived
- R-4996omarchy-update-dev fails with unbound variable OMARCHY_PATH under sudoby henriquemeira· closed — completed at sourceReceived
- R-4995Battery service forks powerprofilesctl get every 2 s for the whole session (~5% of a core, on battery too)by vstoyanov· closed — completed at sourceReceived
- R-4994Cloned bar option fails to load (required props), and stock-bar fallback never engages (errorString ReferenceError)by TheeHk-blip· closed — completed at sourceReceived
- R-4993App launch OSD popup ('Launching <app>...') can get permanently stuck on screenby Louis454545· closed — completed at sourceReceived
- R-4992Default-editor setting has no effect on file-manager/XDG MIME default (still opens Neovim)by pop400· closed — completed at sourceReceived
- R-4991Cloned menu plugins get null shell.appLibrary — Apps submenu is emptyby KalEl117· closed — completed at sourceReceived
- R-4990appLibrary not granted to third-party plugins with kind "menu" (4.0.3)by julihermes· closed — completed at sourceReceived
- R-4989Black screen or plymouthd crash under Proxmox with GPU passthrough, can boot with serial console helpby romixlab· closed — completed at sourcebugReceived
- R-4988Bug: Array.isArray fails on manifest.kinds QJSValue, causing PluginShellApi revocation for 3rd-party menu pluginsby ankardo· closed — completed at sourceReceived
- R-4987omarchy windows vm: fails to launch after first run — setgid/shared dir rejected (chmod 0700 doesn't clear setgid)by iainlennox· closed — completed at sourceReceived
- R-4986Cloned menu plugin loses its appLibrary capability on plugin re-instantiation — Apps submenu is always emptyby Dazzle-sys· closed — completed at sourceReceived
- R-4985Dell XPS 13 DX13260 (1028:0e53): intermittent sof_sdw card-instantiation failure (-16 EBUSY) + CS35L56 amps can't read tuning IDs even when files existby aarondouglasrich· closed — completed at sourceReceived
- R-4984omarchy-windows-vm: setgid on ~/Windows silently blocks every launch (chmod 0700 cannot clear setgid on a directory)by ids444· closed — completed at sourceReceived
- R-4983Manual errorby lucserre· closed — completed at sourcebugReceived
- R-49824.0.3: third-party plugins get appLibrary=null and a manifest stripped of __sourceDir, both silentlyby trustimagetiago· closed — completed at sourceReceived
- R-49804.0.3: third-party plugins cannot read their own shell.json entry, and lock clones cannot reach their own serviceby pata27· closed — completed at sourceReceived
- R-779Multi-monitor hotplug while locked traps input on unrendered surface and deadlocks power button (HandlePowerKey=ignore)by LoupiBe· open at sourcebugReceived
- R-4979Top Bar Click Areas Become Vertically Misaligned After Tray/Widget Changesby Rambo176· closed — completed at sourcebugReceived
- R-4978Cloned menu plugin gets null appLibrary, Apps submenu always emptyby syvanpera· closed — completed at sourceReceived
- R-4977Network widget reports "Ping: Timeout" and "Packet Loss: 100%" on networks that block ICMP — probe uses `ping` instead of a TCP-based checkby rahmatov-abdullaxon· closed — completed at sourcebugReceived
- R-4976[Regression] linux-ptl 7.2.3: IPU7 / OV08X40 sensor missing from media graph on Dell XPS 14 DA14260by milep· closed — completed at sourcebugReceived
- R-4975Cloned omarchy.menu plugin shows empty Apps submenuby AndreyCJ· closed — completed at sourceReceived
- R-789omarchy-launch-shell exits silently when compositor_alive() false-negatives during output reconfiguration, leaving no barby matti-lamppu· open at sourcebugReceived
- R-4973Cloned menu plugin (menu+bar-widget kinds) loses appLibrary after plugin rescan, Apps list goes emptyby hermes-os· closed — completed at sourceReceived
- R-4972omarchy toggle bar: on/off arguments are invertedby fubartutu· closed — completed at sourceReceived
- R-4971Cloned omarchy.menu shows empty Apps launcher (appLibrary null) on 4.0.3by profemzy· closed — duplicate at sourceReceived
- R-4970Third-party menu clones get null appLibrary in 4.0.3, Apps submenu emptyby crueber· closed — completed at sourceReceived
- R-4969omarchy install service sunshine fails: unit sunshine.service does not existby uceraksu· closed — completed at sourceReceived
- R-4968Bar toggle on/off behavior is invertedby carlospp95· closed — completed at sourceReceived
- R-804Shell leaks VRAM on failed EGL context creation, causing Super+Space/menu to silently stop working (NVIDIA, low VRAM)by wbohannon· open at sourcebugReceived
- R-4967Apps menu empty ("Nothing here yet") after upgrading to 4.0.3by michalmielczynski· closed — completed at sourceReceived
- R-4966Apps submenu empty for cloned/third-party menu plugins (shell.appLibrary null) since 4.0.3by Doghouse-Mike· closed — completed at sourceReceived
- R-808Regression (4.0.2→4.0.3): publicPluginManifest() strips __sourceDir, breaking third-party plugins that locate their own filesby redglover· closed — completed at sourcebugReceived
- R-4965Idle screensaver/lock triggers during windowed Firefox video playbackby victoralekseev5597· closed — completed at sourceReceived
- R-809Wayland SDL application causes immediate lock when it exitsby Thomas-Bard· closed — completed at sourcebugReceived
- R-810Apple Silicon: speakersafetyd's post-resume PCM reinit wedges/crashes wireplumber, leaving audio stuck muted (no resume-fix, unlike wifi/HID/NVMe)by doomnote· closed — not planned at sourcebugcompatibilityReceived
- R-811Wi-Fi resume fix (fix-wifi-resume.sh) excludes BCM4388 (14e4:4434), but it wedges on real lid-close suspend tooby doomnote· closed — not planned at sourcebugcompatibilityReceived
- R-4963omarchy-windows-vm fails silently when ~/Windows carries the setgid bitby pbecks1963· closed — completed at sourceReceived
- R-4962AMD display freeze retains valid mode and active CRTC, bypassing monitor recovery; DPMS restores sessionby theinventor· closed — completed at sourceReceived
- R-4961Macbook air 7,2 early 2015 still no go on built in wifiby mikeproctor· closed — completed at sourcebugReceived
- R-4960Cloned bar plugin never loads: required properties can't be set by pluginBarLoader, and the error is swallowedby kesavsabari· closed — completed at sourceReceived
- R-4959Cloning a service+bar-widget plugin silently breaks its widget: firstPartyServiceFor() ignores clonedFromby nanfxqs· closed — completed at sourceReceived
- R-829Sublime Text can't be set as default editor (menu checks for 'sublime_text' binary, package ships 'subl')by alFrame· open at sourcebug
+3 also reported· show· hide
R-829 is the earliest report of this defect; these reports say the same thing.
- Sublime Text default-editor option never works: guard/fallback check the wrong command name R-758filed Sep 9, 2026Closed upstream on 2026-10-11 by the bot omarchybot; the closing comment says it was fixed by PR #9656, as a duplicate (target not recorded).
- Sublime Text default editor never works: Omarchy expects a 'sublime_text' command but the package only ships 'subl' R-229filed Sep 21, 2026Open upstream.
- Sublime Text hidden from Default Editor menu and omarchy-launch-editor silently falls back to nvim R-5194filed Oct 7, 2026Open upstream.
Received - R-830Fingerprint unlock rejected on first attempt after resume (Goodix, race with sleep-lock inhibitor)by ukkit· open at sourcebug
+3 also reported· show· hide
R-830 is where this defect is tracked; these reports say the same thing.
- Quickshell lock crashes in PamSubprocess during overlapping fingerprint retries R-1610filed Aug 20, 2026Open upstream.
- Lock-screen fingerprint retries with no backoff, overheats/disables sensor overnight; polkit fingerprint never actually captures R-2099filed Sep 29, 2026Open upstream.
- Lock fingerprint retry loop never backs off on instant PAM errors R-5309filed Oct 10, 2026Open upstream.
Received - R-4957Cloning the built-in bar leaves no bar: Loader.Error handler throws ReferenceError, skipping the default-bar fallbackby james-engelbrecht· closed — completed at sourceReceived
- R-4956Widgets cannot be dragged back into an emptied bar sectionby james-engelbrecht· closed — completed at sourceReceived
- R-4955Windows VM permanently fails to start after first run: chmod 0700 cannot clear the setgid bit the container sets on ~/Windowsby cmillwat· closed — completed at sourceReceived
- R-4953omarchy bar set --json cannot persist array settings (tray pinned ["steam"] stored as "steam")by mscurtescu· closed — duplicate at sourceReceived
- R-4951omarchy-network-speedtest leaves orphaned curl workers running against fast.com after the panel is closedby londospark· closed — completed at sourceReceived
- R-4950Stable mirror frozen since Aug 25 keeps default Chromium on 151 while 152.0.7977.82 fixes an in-the-wild exploit (CVE-2026-85046)by JohnAtl· closed — completed at sourceReceived
- R-4949omarchy-agent-usage-codex passes a removed --ask-for-approval value, so Codex limits never loadby CougarM· closed — completed at sourceReceived
- R-4948System Tray / Bar Click Areas Become Misaligned After Tray Model Changesby Rambo176· closed — completed at sourcebugReceived
- R-854Stable installer (master) still writes apple-bce, breaking every T2 Mac installby joelgranik· closed — not planned at sourcebugcompatibilityReceived