Proof Portal
Project overview
Omarchy
ProbeLabs65 findings · 95 requirementsA proof layer — requirements, tests and verified fixes — for two of Omarchy's subsystems: the application menu (launcher scripts, QML model, JSONC config, search and selection) and the lock screen (lock scripts, QML, PAM authentication). Scope is deliberately limited to those components of omacom/omarchy; the rest of the distribution is not covered.
Inbox
Problems reported from outside the audit — kept verbatim, then checked: is the claim real, what does it touch, can it be reproduced? Validated reports are shown in full; items still under responsible disclosure appear only as a count until they are released.
Issues already closed where they were filed (for example on GitHub) with nothing decided here. Kept as history so a new report can be matched to the earliest one; they are not worked, even if an agent left a proposal or a question on one.
- R-4839omarchy-update-available is not concurrency-safe: overlapping runs report a false "up to date", hiding the bar's update icon on multi-monitor setupsby jg-partisia· closed — not planned at sourceReceived
- R-4838Plugin hot reload never clears the QML component cache: Qt.clearComponentCache is not a QML API, so the guard at shell.qml:757 is always falseby johnstoj· closed — completed at sourceReceived
- R-4837Rapid lock-screen fingerprint retries can leave the reader unusableby NeroSong· closed — completed at sourcebugFixed
- R-4836Nautilus doesn't follow the theme paletteby suleman-dawood· closed — completed at sourcebugReceived
- R-4835Plugin hot-reload while the session is locked aborts Quickshell, and the lock screen never recoversby AndrewGaspar· closed — not planned at sourceReceived
- R-4834omarchy-windows-vm: launch fails when the dockur container re-adds setgid to ~/Windowsby Rana-Droid-7· closed — completed at sourceReceived
- R-4833Quickshell crashes (SIGABRT) on plugin hot-reload: "Tried to show lockscreen surfaces without active lock"by houz42· closed — completed at sourceReceived
- R-4832omarchy-system-lock reports success when shell IPC never requests a lockby bigminer· closed — not planned at sourceFixed
- R-4831quickshell (Omarchy shell) aborts: "Tried to show lockscreen surfaces without active lock"by lama7· closed — completed at sourceReceived
- R-4830SUPER + J (togglesplit) raises "no such layoutmsg for scrolling" on scrolling-layout workspacesby johnwu· closed — completed at sourceReceived
- R-4829Bluetooth power-off is presented as “No adapter” and removes the control to turn it back onby sangjaepark0000· closed — completed at sourceReceived
- R-4828omarchy install service sunshine aborts before firewall/webapp/autostart: systemctl --user enable --now sunshine cannot resolve the Alias= on a fresh installby mfbergmann· closed — completed at sourceReceived
- R-1075Quickshell SIGABRT ("Tried to show lockscreen surfaces without active lock") when a plugin live-reloads while the screen is lockedby ninepointlabs· closed — completed at sourcebug
+4 also reported· show· hide
R-1075 is where this defect is tracked; these reports say the same thing.
- Plugin hot-reload while locked destroys the lock client; Quickshell then SIGABRTs R-1147filed Aug 31, 2026Open upstream.
- quickshell crashes with "Tried to show lockscreen surfaces without active lock" during plugin reload R-911filed Sep 6, 2026Open upstream.
- Editing any ~/.config/omarchy/plugins file while locked aborts the shell (SIGABRT: "Tried to show lockscreen surfaces without active lock") R-849filed Sep 7, 2026Closed upstream on 2026-10-11 by the bot omarchybot, as a duplicate (target not recorded).
- Cloned omarchy.lock: built-in lock still loads at shell startup, two session locks race and Quickshell crashes R-5315filed Oct 10, 2026Open upstream.
Fixed - R-4827Display flashing in Chromium on X.com on hybrid Intel+NVIDIA laptop (LIBVA_DRIVER_NAME=nvidia forces NVIDIA VA-API while Chromium renders on iGPU)by joebdrx· closed — completed at sourceReceived
- R-4826omarchy-install-hermes-cli readiness probe never passes — --oneshot is top-level in hermes --help, not under hermes chatby swzv· closed — completed at sourceReceived
- R-4825Lock screen password field loses keyboard focus after DPMS blank (hybrid NVIDIA GPU)by SamW7890· closed — completed at sourceFixed
- R-4824Bar: custom command modules log a "moduleName" read-only TypeError on every loadby chrisekelley· closed — completed at sourceReceived
- R-4823omarchy-windows-vm: setgid on ~/Windows silently blocks every privileged VM actionby ACooperDev· closed — completed at sourceReceived
- R-1088omarchy-agent-usage-claude logs one stderr line per unreadable transcript, filling $XDG_RUNTIME_DIR and killing the compositor with SIGBUSby StefanMaron· closed — completed at sourcebugReceived
- R-4822omarchy plugin clone omarchy.bar produces no visible bar panelby rjltrevisan· closed — completed at sourceReceived
- R-4821Agent skill docs reference basecamp/omarchy; `gh search` fails against the renamed repoby phren0logy· closed — completed at sourceReceived
- R-4820omarchy default editor sublime_text silently falls back to nvimby Dr-DeBugg· closed — not planned at sourceReceived
- R-1097Lock screen retries fingerprint auth every 250ms forever with no backoff — ~226 PAM sessions/minute while lockedby charliebarmore· closed — completed at sourcebugFixed
- R-4819quickshell crash (SIGSEGV) during PipeWire audio device switch — QML Repeater binding updateby kczimm· closed — completed at sourceReceived
- R-4818Sublime Text install does not expose sublime_text on PATH, so Defaults → Editor never lists itby luviathanx· closed — completed at sourceReceived
- R-4817omarchy windows vm launch fails ("Failed to start Windows VM!"): numeric chmod 0700 cannot clear the setgid bit on ~/Windowsby zakkoo· closed — completed at sourceReceived
- R-4816Network widget misreports Wi-Fi when TUN interface is activeby unship· closed — completed at sourceReceived
- R-4815Display panel: clicking a display row does nothing — toggleDisplay() still uses `hyprctl keyword`, which Hyprland 0.56's Lua parser rejectsby jondan1986· closed — not planned at sourceReceived
- R-4814Copying from Terminal and closing it deletes copyby Adamwelt· closed — completed at sourcebugReceived
- R-4813Popup window not working on braveby Adamwelt· closed — completed at sourcebugReceived
- R-4812Power panel (SUPER+CTRL+P) does not open: QML binding loop in Panel.qmlby nojaf· closed — completed at sourceReceived
- R-4811Omarchy installs the retired Gemini CLI and offers no Antigravity CLI pathby ScytheAkira· closed — completed at sourceFixed
- R-4810Cloning omarchy.bar (or any third-party kind: bar plugin) never renders — required properties + broken Loader.Error fallbackby cubicruler· closed — completed at sourceReceived
- R-4809Cloned bar plugin never loads: required properties are never setby Yves848· closed — completed at sourceReceived
- R-4808Screensaver only dismisses on keyboard input, not mouse movementby Andre1Becker· closed — completed at sourceReceived
- R-4807Cloning the bar plugin leaves the system with no bar (required properties + broken error fallback)by aspinalljohn· closed — completed at sourceReceived
- R-4806omarchy-battery-status shows UPower's fixed ThinkPad default (75/80) instead of the real active charge thresholdby ScytheAkira· closed — completed at sourceReceived
- R-4805omarchy-windows-vm launch fails silently when ~/Windows has the setgid bit (numeric chmod can't clear it)by andyxqq· closed — completed at sourceReceived
- R-4804omarchy-launch-or-focus / omarchy-launch-spotify match window titles, so any window with the app name in its title hijacks the keybindingby chriguschneider· closed — completed at sourceReceived
- R-4803omarchy-windows-vm install: fails to write config when mount source dir has setgid bit (chmod 0700 doesn't clear S_ISGID)by evanhfw· closed — completed at sourceReceived
- R-4802Surface internal display defaults to 60 Hz when 120 Hz is availableby Rohansguliani· closed — completed at sourceReceived
- R-4801Bluetooth panel cannot re-enable an rfkill-blocked adapterby jimbosbagoftricks· closed — completed at sourceReceived
- R-4800Bluetooth panel cannot re-enable an rfkill-blocked adapterby jimbosbagoftricks· closed — completed at sourceReceived
- R-4799windows-vm: readiness wait returns ~9s before the guest accepts RDP, so launch connects too early and auto-stops the VMby Syn-sys· closed — completed at sourceReceived
- R-4798system-sleep hooks installed by omarchy-hibernation-setup and omarchy-toggle-hybrid-gpu are never executed (cp -p preserves mode 644)by oovets· closed — completed at sourceReceived
- R-4797omarchy-hw-fingerprint doesn't detect Dell ControlVault 3 (Broadcom BCM58200, vendor 0a5c)by JeronimoColon· closed — completed at sourceReceived
- R-4796omarchy-cmd-terminal-cwd resolves the wrong directory with Ghostty, the default terminalby kurtome· closed — completed at sourceReceived
- R-4795Editing idle.screensaver/idle.lock in shell.json silently disables idle detection until the shell is restartedby kurtome· closed — completed at sourceReceived
- R-1141Lock screen: one unreachable fprintd-list probe disables fingerprint for the rest of the lockby osborng· closed — completed at sourcebugReceived
- R-1145Stuck capture.sh silently stops text clipboard history (no timeout on wl-paste)by mzijlstra-hia· closed — completed at sourcebugReceived
- R-4794Thunderbird leaves dwindle tiles stuck at stale sizes after another window closesby gigerIT· closed — completed at sourceReceived
- R-4793SDDM greeter's Hyprland config ignores system keyboard layout, causing password mismatches for non-US layoutsby winless-code· closed — completed at sourceReceived
- R-4792Lock screen password field loses keyboard focus race — forcePasswordFocus() fires before WlSessionLock.secure becomes trueby work-aalp· closed — completed at sourcebugFixed
- R-4791Media bar widget goes blank when a long-titled track is followed by a short-titled one (marquee never resets x)by ParzivalVulpine· closed — not planned at sourceReceived
- R-4790omarchy font set resets foot terminal font size to 9, discarding a previously-set sizeby Fiorina161· closed — completed at sourceReceived
- R-4789Omarchy 4.0.2 package omits omarchy-debug while bundled tools require omarchy debugby nontradition· closed — completed at sourceReceived
- R-4788omarchy-menu-keybindings: Infinite loop during cache generation due to ipairs on noop objectby rendarth· closed — completed at sourceFixed
- R-4787v4.0.2 package missing hover-revealed notification close button (#6946)by johnpippett· closed — completed at sourceReceived
- R-4786CapsLock brokenby zaneschepke· closed — completed at sourcebugReceived
- R-4785Selecting a Bluetooth headset input can leave it in A2DP with a silent microphoneby filipechagas· closed — completed at sourceReceived
- R-4784Web app installer writes an unquoted URL to Exec=, producing an invalid .desktop for URLs with a query stringby Yannick-Pinta· closed — completed at sourceReceived
- R-4783windows-vm: chmod 0700 preserves directory setgid bit, causing launch to fail safety checkby VillainRU· closed — completed at sourceReceived
- R-4782All omarchy-settings commands are unreachable via the omarchy dispatcher (missing symlinks in OMARCHY_BIN_DIR)by alexmirkovic99-hue· closed — completed at sourceReceived
- R-4781Add support for Antigravity (agy) agent and note deprecated Gemini CLIby slawkor· closed — not planned at sourceFixed
- R-4780omarchy-agent-usage-codex: RPC probe fails on current Codex CLI (-a untrusted no longer valid)by ddiall· closed — completed at sourceReceived
- R-4779Lock screen clobbers saved keyboard backlight level: omarchy-brightness-keyboard off re-saves 0, so restore-on-wake brings back 0by symbolofraisins· closed — completed at sourceFixed
- R-4778VS Code/Cursor never reloads generated "Omarchy" color theme — theme changes don't propagate and re-selecting it applies a stale paletteby Macho0x· closed — completed at sourceReceived
- R-1173Windows VM 4.0.2: launch fails silently after polkit auth (setgid chmod check can never pass)by bpidperygora· closed — completed at sourcebugReceived
- R-4777Bluetooth bar widget disappears and cannot be re-enabled when rfkill-disabledby higgsboson909· closed — completed at sourceReceived
- R-4776omarchy install service sunshine aborts: 'Unit sunshine.service does not exist' (upstream unit renamed)by brendanhalfpenny· closed — completed at sourceReceived
- R-4775omarchy toggle bar on/off arguments are inverted — 'on' hides the barby brendanhalfpenny· closed — completed at sourceReceived
- R-4774[quickshell] SIGSEGV in QQuickTextPrivate::updateLayout when clipboard contains HTML <img> tagsby krreeshhh· closed — completed at sourceFixed
- R-4773omarchy-hook runs hooks with bash, ignoring shebang and executable bit — non-bash hook silently hung omarchy-updateby lvkz-okcapsule· closed — completed at sourceReceived
- R-4772Lock screen password field doesn't have keyboard focus until clickedby r3d3n0d0· closed — completed at sourceFixed
- R-4771omarchy-agent-usage-codex: hardcoded --ask-for-approval value 'untrusted' rejected by current codex-cliby sal-he· closed — completed at sourceReceived
- R-4770Quickshell SIGSEGV in QQuickTextPrivate::updateLayout after invalid StyledText image URLby Mayor-OZ· closed — completed at sourceReceived
- R-4769Quickshell SIGSEGV in QQuickTextPrivate::updateLayout after invalid StyledText image URLby Mayor-OZ· closed — completed at sourceReceived
- R-4768omarchy-shell (quickshell 0.3.1) crashes with EGL 0x3000/'fatal error: Invalid argument' when monitor powers off on idle (DPMS), then crash-loopsby natoftheboonies· closed — completed at sourceReceived
- R-4767omarchy-network-status: 100% packet loss when 1.1.1.1 is unreachableby 0zgenius· closed — completed at sourceReceived
- R-4766install service sunshine can never succeed: enables the unit by its alias nameby hakkon· closed — completed at sourceReceived
- R-4765Restarting audio services crashes QuickShell in QQuickRepeater::regenerateby kstimpson85· closed — completed at sourceReceived
- R-4764omarchy-hw-touchpad fails to detect touchpads whose libinput name doesn't contain "touchpad"/"trackpad" (e.g. synaptics-tm3053-004)by ealarcony· closed — completed at sourceReceived
- R-4763Agents widget: Codex limits never load — collector passes removed `-a untrusted` to app-serverby emergencerising-maker· closed — completed at sourceReceived
- R-4762Voxtype pause_media silently fails: playerctl not installed by omarchy-voxtype-installby montanasnow· closed — completed at sourceReceived
- R-4761default-keyring.sh writes an unparseable stub keyring, wiping Chrome/Docker secrets on every loginby gurupak· closed — completed at sourceReceived
- R-4760Dismissing the Speed Test panel orphans 8 upload workers that keep saturating the uplinkby orospakr· closed — not planned at sourceReceived
- R-4759No warning when all Chromium-family browsers are removed breaks webapp launchersby linuts· closed — completed at sourceReceived
- R-4758omarchy-hw-touchpad fails to detect Apple bcm5974 trackpad (name-pattern match too strict)by fcofont· closed — completed at sourceReceived
- R-4757os.execute() always fails with ECHILD inside Hyprland's embedded Lua config (breaks nvidia.lua auto-detection)by drumstin· closed — completed at sourceReceived
- R-4756Issues that forced me to switch back to Windowsby sudo-WearTherinG· closed — completed at sourcebugReceived
- R-4755Clamshell layout resets to extended after idleby paulo-phbit· closed — completed at sourceReceived
- R-4754[Bug] Super+J dispatches unsupported togglesplit in Scrolling workspacesby robinwibom· closed — completed at sourceReceived
- R-4753Cloning the top-level bar plugin (omarchy.bar) breaks the bar on all monitorsby Santym8· closed — completed at sourceReceived
- R-4752Please - Add Google Antigravity CLI (agy) as a supported default AI agentby Peterontheblock· closed — completed at sourcebugFixed
- R-4751Cloned omarchy.bar cannot load as a bar option: required properties never initialized by pluginBarLoaderby hshshshs12· closed — completed at sourceReceived
- R-4750Docker migration removes socket access without an apparent sudoless-Docker setup promptby mattrayner· closed — completed at sourceFixed
- R-4749omarchy install service sunshine always fails: enables 'sunshine.service' but package ships 'app-dev.lizardbyte.app.Sunshine.service'by molesza· closed — completed at sourceReceived
- R-4748nvidia.lua sets LIBVA_DRIVER_NAME=nvidia on hybrid Intel+NVIDIA laptops; Brave/Chromium video playback stalls the GPU processby ferriskleier· closed — completed at sourceReceived
- R-4747omarchy-update-restart: confirm_reboot has no unattended guard, still hangs under -yby PixelatedContinuum· closed — duplicate at sourceReceived
- R-4746omarchy-menu-keybindings (Super+K) hangs at 100% CPU when a Lua config calls ipairs(hl.get_*())by FernandoJVideira· closed — completed at sourceFixed