Proof Portal
Project overview
Omarchy
ProbeLabs65 findings · 95 requirementsA proof layer — requirements, tests and verified fixes — for two of Omarchy's subsystems: the application menu (launcher scripts, QML model, JSONC config, search and selection) and the lock screen (lock scripts, QML, PAM authentication). Scope is deliberately limited to those components of omacom/omarchy; the rest of the distribution is not covered.
Inbox
Problems reported from outside the audit — kept verbatim, then checked: is the claim real, what does it touch, can it be reproduced? Validated reports are shown in full; items still under responsible disclosure appear only as a count until they are released.
- R-5308Thunderbolt status tells users to enable a firmware security level this BIOS does not haveby hhdri· open at source
Out of area
Fixed - R-5304omarchy-pkg-aur-install hangs after transaction: foreground updatedb scans FUSE/network mountsby dekritpn· open at sourcebug
Out of area
Fixed - R-5303App library rescans hidden entries on every save of any file in $HOME (no debounce, ~105 processes per scan)by benedikt-personal· open at source
Out of area
Fixed - R-5287Stale sessionLock.locked wedges all future locks (sibling of #6888)by dsundt· open at source
Duplicate ofLockService reports self-contradictory state: isLocked=true while status shows locked components all false R-5240— the earliest report
Fixed - R-5283dev: migration 1790344599 fails — omarchy-settings does not ship the Thunderbolt authorization user unit, aborting updatesby vituxdxd· open at source
Out of area
Fixed - R-5280(dev channel) Failed update: migration 1789433473 USB authorizationby Jon-5· closed — completed at sourceFixed
- R-5279Cloned menu plugins get appLibrary: null, so the Apps submenu is empty (4.0.4)by raming8080· open at source
Duplicate ofCloned menu gets null appLibrary — manifestHasKind Array.isArray fails on QVariantList kinds R-5209— where this defect is tracked
Fixed - R-5256Low battery notification never auto-dismisses and survives shell restarts (critical urgency ignores expire timeout)by elonmask· open at source
Out of area
Fixed - R-5249Lock screen password field stops accepting input after lid close/reopen (suspend/resume); session stays locked, forces rebootby jff· open at source
Duplicate of[Quattro] Lock password field can lose focus after suspend resume R-1214— where this defect is tracked
Fixed - R-5248Lock command silently succeeds without locking when omarchy-lock-password PAM service is missingby cklxx· open at source
Known issueKI-260930-2FBE
Fixed - R-5247Add Portuguese (Brazil) localization and keyboard managementby alltomatos· open at sourceFixed
- R-5240LockService reports self-contradictory state: isLocked=true while status shows locked components all falseby jfdnet· open at source
+1 also reported· show· hide
R-5240 is the earliest report of this defect; this report says the same thing.
- Stale sessionLock.locked wedges all future locks (sibling of #6888) R-5287filed Oct 10, 2026Open upstream.
Fixed - R-5209Cloned menu gets null appLibrary — manifestHasKind Array.isArray fails on QVariantList kindsby CJ-Montero· open at source
+4 also reported· show· hide
R-5209 is where this defect is tracked; these reports say the same thing.
- Third-party menu plugins (e.g. omarchy.menu clones) get an empty Apps list: manifests passed through the panel Instantiator lose array types R-860filed Sep 7, 2026Open upstream.
- Third-party (cloned) menu plugin: Apps submenu stays empty — shell never grants appLibrary R-494filed Sep 16, 2026Open upstream.
- Third-party menu-kind plugin gets shell.appLibrary === null, leaving Apps submenu empty R-394filed Sep 17, 2026Closed upstream on 2026-10-12 by the bot omarchybot, as a duplicate (target not recorded).
- Cloned menu plugins get appLibrary: null, so the Apps submenu is empty (4.0.4) R-5279filed Oct 9, 2026Open upstream.
Fixed - Fixed
- R-5205omarchy-windows-vm: chmod 0700 doesn't clear setgid, causing silent 'Failed to start Windows VM'by AlienWithGlasses· open at source
Out of area
Fixed - R-5200Feature request: explicit position/insertion-point control for omarchy-menu.jsonc extension entriesby alFrame· open at sourceFixed
- R-5186omarchy-menu-select waiter never exits if the shell drops the menuby undergroundpost· open at source
Known issueKI-MENU-SELECT-POLL-DEADLOCK
duplicateofSuperseding a pending omarchy-menu-select leaks a permanent 20 fork/sec busy-wait loop R-1570· describes KI-MENU-SELECT-POLL-DEADLOCK· every defect it describes is already reported
Fixed - R-5185Lock screen powers the display off after a hard-coded 5 s, which makes KVM switchers scan away and drop USBby aravind-r2r-tech· open at sourceFixed
- R-5178Lock screen loops shell crash and monitor power-cycle when HDMI output drops after DPMS offby ryanbed· open at source
Duplicate ofomarchy-shell lock screen crash-loops (~every 18s) after locking, due to DPMS-off R-1659— where this defect is tracked
Fixed - R-5177Multi-monitor: screensaver self-dismisses when the launcher moves focus to a monitor that already has a windowby caspeeey· open at source
Out of area
Fixed - R-5173Lock's unconditional DPMS blank drops both HDMI outputs on NVIDIA 610.57.04 — session stranded at `no-real-screen` until rebootby aishag80g-stack· open at sourceFixed
- R-5168Clipboard history paste (ALT+V) closes WeChat (XWayland); history paste uses wtype Shift+Insert while SUPER+V does notby BeforeUgone123· open at source
Out of area
Fixed - R-5154omarchy-menu-keybindings lua bind scan spins at 100% CPU when user config iterates a mocked hl APIby zz8011· open at source
Duplicate ofomarchy-menu-keybindings hangs forever when a user Lua config iterates hl.get_monitors() R-1816— the earliest report
Fixed - R-5142Lock-screen fingerprint stack lacks the clamshell gate that omarchy-setup-security-fingerprint writes for sudo/polkit — endless verify-timeout storm on lid-closed machinesby dsundt· open at source
Duplicate ofomarchy-setup-security-fingerprint doesn't add the clamshell gate to the lock screen's fingerprint PAM config R-989— the earliest report
Fixed - R-5141Lock screen retries fingerprint every 250ms forever when pam_fprintd fails instantly (e.g. after suspend mid-verify)by mdsilvers· closed — completed at sourceFixed
- R-5140Bar clock stays on the pre-suspend minute after resume or lid openby AndrijaSkontra· open at source
Out of area
Fixed - R-5137omarchy-menu-keybindings hangs forever when user Lua config iterates an hl.get_*() resultby KouenNoTen· open at sourceFixed
- R-2236Lock screen re-blanks 5 s after wake, before slow-syncing displays have presented a frameby taiku666· open at source
Duplicate of[Quattro] Lock screen re-blanks slow DPMS monitors after fixed 5-second wake timeout R-1584— where this defect is tracked
Fixed - R-2229omarchy-windows-vm launch fails silently after the first run — setgid on the shared mount breaks an exact `== 700` mode checkby RobGanon· open at source
Out of area
Fixed - R-2227Theme switch keeps the previous theme's wallpaper when both themes use the same file nameby kravens· open at source
Out of area
Fixed - R-2226Menu: first item is clipped/scrolled off on initial display in scrollable lists (omarchy-menu-select / SUPER+K)by b-lov· open at sourceFixed
- R-2219omarchy-launch-webapp fails silently for browsers missing from its allowlist (e.g. Zen)by TowhidMolla-Dev· open at source· edited (2 revisions)
Out of area
Fixed - R-2217Menu: on a non-English desktop, Apps lists names that start with an accented letter after Zby buger· open at source
Known issueKI-MENU-APPS-SORT-LOCALE
Fixed - R-2216Menu: Remove > Theme does nothing when no theme has been installed by handby buger· open at source
Known issueKI-MENU-REMOVE-THEME-NO-THEMES
Fixed - R-2208Update hooks doc gives the wrong sudo authorization timing for post-updateby Ashwinhegde19· open at source
Out of area
Fixed - R-2205Lock screen: after a wrong password, the failure message replaces the field with no visible prompt — screen looks unusable, input actually worksby folknology· open at sourceFixed
- R-2201Guide Japanese users to fcitx5-mozc after install (docs/guidance only)by usutani· open at source
Out of area
Fixed - Fixed
- R-2185Lock screen ignores keyboard after lid close/resume until clickedby nateyoungrig· open at source
Duplicate of[Quattro] Lock password field can lose focus after suspend resume R-1214— where this defect is tracked
Fixed - R-2184Background reveal animates on only one monitor: the first screen that loads the image starts the shared revealby xPsycho999· open at source
Out of area
Fixed - R-2178Menu: a route summoned while the shell starts opens the main menu insteadby buger· open at source· edited (3 revisions)
Known issueKI-MENU-PENDING-INITIAL-MENU-DEAD
Fixed - R-2177Menu: an uninstall confirmation left open stays over the next prompt, and Enter meant for the prompt uninstalls the appby buger· open at source· edited (3 revisions)
Known issueKI-MENU-OPEN-LEAVES-CONFIRM
Fixed - R-2166Keyboard backlight stays off after unlock: a repeated lock-screen blank saves 0 over the user's levelby mcgalleg· open at source
Duplicate ofKeyboard backlight restore fails after lock (brightnessctl saves 0 after Dell stop_timeout) R-1877— the earliest report
Fixed - R-2161Hybrid Intel+NVIDIA laptops: global LIBVA_DRIVER_NAME=nvidia breaks Chromium video (black YouTube picture)by lAvArt· closed — completed at sourceFixed
- R-2158mise wrapper stubs from before the --quiet template fix pollute stdout; no migration refreshes themby howiehu· open at source
Out of area
Fixed - R-2156Screensaver is not dismissed by touch input (only keyboard)by Hydramus· open at sourcebug
Out of area
Fixed - R-2151Super + K hangs and spawns CPU-bound Lua processes when config iterates hl.get_workspaces()by jermartinz· open at sourcebug
Duplicate ofomarchy-menu-keybindings hangs forever when a user Lua config iterates hl.get_monitors() R-1816— the earliest report
Fixed - R-2145Lock screen: PAM info messages from the fingerprint stack are never surfaced (no fingerprint text element exists)by awluko· open at sourcebugFixed
- R-2143Lock screen: fingerprint reader disabled by libfprint thermal guard after ~3 min, then 250 ms retry loopby gfotakis· open at sourcebug
Duplicate ofLock screen fingerprint sensor only ever runs ONE pam session per lock R-443— where this defect is tracked
Fixed - R-2139Idle timeouts above ~24.8 days overflow the Qt timer and flood the shell log until /run/user fills upby Coding-Sparrow· open at sourcebug
Out of area
Fixed - R-2137Lock screen retries fingerprint auth every 250ms with no backoff when the reader is unavailableby titteerbot· closed — not planned at sourceFixed
- R-2134Menu: Left/Backspace from a submenu always returns to the first row, discarding the parent selection (8 open PRs, no issue)by rkondratowicz· open at sourcebugFixed
- R-2129Unplugging a monitor destroys overlay surfaces until the shell restartsby shawnyeager· open at source· edited (3 revisions)bug
Duplicate ofShell restart after an update leaves overlapping quickshell generations; menu keybind dies silently while IPC still answers R-2159— where this defect is tracked
Fixed - R-2119omarchy toggle bar on hides the bar instead of showing itby evgen867777-coder· open at source· edited (2 revisions)bug
Out of area
Fixed - R-2112Lock screen wakes in a loop on monitors that drop HDMI hotplug in standbyby lucasmendesdeliver· open at sourcebug
+4 also reported· show· hide
R-2112 is where this defect is tracked; these reports say the same thing.
- Lock screen alternates black <-> lock UI every ~13.5s on AMD iGPU over HDMI R-1329filed Aug 28, 2026Open upstream.
- Display flickers off/on repeatedly after idle lock on AMD APU + HDMI/DP (DPMS flap loop) R-1285filed Aug 29, 2026Open upstream.
- Locked screen DPMS repeatedly wakes/re-blanks every ~15s on dual-monitor setup R-834filed Sep 8, 2026Open upstream.
- Lock screen blank loops indefinitely on displays that drop HDMI HPD in power save R-677filed Sep 11, 2026Open upstream.
Fixed - R-2108A user's own binds in ~/.config/hypr/bindings.lua never reach the keybindings menu's Lua scanby linyiru· closed — duplicate at sourceFixed
- R-2107nvidia.lua exports NVIDIA GL/VAAPI env even when the iGPU owns the display, blacking out video on Waylandby Starfarer4· open at sourcebugcompatibility
Out of area
Fixed - R-2097Internal laptop display never recovers after external monitor unplug: external-active check doesn't exclude Hyprland's FALLBACK placeholder outputby Kilohertz77· open at sourcebug
Out of area
Fixed - R-2089omarchy-sleep-lock.service logs status=1/FAILURE on every sleep transition (systemd-inhibit restart races logind sleep state)by Taydevil· open at sourcebug
Duplicate ofomarchy-sleep-lock.service fails on every suspend/resume: systemd-inhibit 'already running' R-131— where this defect is tracked
Fixed - R-2Clock panel calendar repeats a day and shifts the month after a midnight DST transitionby Andreslvc· closed — completed at sourcebugFixed
- R-6Hybrid Intel+NVIDIA: forced NVIDIA VA-API (LIBVA_DRIVER_NAME=nvidia) crashes browser GPU process on video playbackby HatlerRyan· open at sourcebugcompatibility
Out of area
Fixed - R-7omarchy hibernation remove leaves resume.conf behind, so a later setup keeps a stale resume_offsetby STRd6· open at sourcebug
Out of area
Fixed - R-12Menu (Super+Space) needs several presses to open after focus moves to another monitorby ctarx· open at sourcebugFixed
- R-14bin scripts: user-visible OSD strings are hardcoded English, no i18n pathby WokoFlipper· open at sourceenhancement
Out of area
Fixed - R-15Hybrid AMD+NVIDIA laptops: global LIBVA_DRIVER_NAME=nvidia makes Firefox decode video on the CPUby littleme02· open at sourcebugcompatibility
Out of area
Fixed - R-26Bar clock shows pre-suspend time for up to a minute after resumeby zoan37· open at sourcebug
Out of area
Fixed - R-28Menu JSONC: an inline `//` comment tail silently empties every entry in that menu fileby buger· open at source· edited (5 revisions)
Known issueKI-MENU-JSONC-INLINE-COMMENT
Fixed - R-29Menu JSONC: a top-level array root is silently read as menu rows with ids "0", "1", …by buger· open at source· edited (5 revisions)bug
Known issueKI-MENU-JSONC-ARRAY-ROOT
Fixed - R-35`omarchy toggle bar on` hides the bar: on/off arguments are invertedby Vairo0-0· open at sourcebug
Out of area
Fixed - R-43omarchy-channel-set asks for the sudo password on every step; the switch never establishes its own authorizationby nightdevil00· open at sourcebug
Out of area
Fixed - R-57Clock panel: hero date clipped by the card border when [font] base-size is below 12by St1aan· open at sourcebug
Out of area
Fixed - R-64omarchy-update -y hangs forever at orphan-pkgs: gum confirm ignores OMARCHY_UPDATE_UNATTENDEDby nanstey· open at sourcebug
Out of area
Fixed - R-84Undocking with the lid closed suspends with no active output: black screen after resume (clamshell race)by azzouzidk· open at sourcebug
Duplicate ofQuickshell lock freezes on display wake after 4.0.3: session stays locked with no lock surface (no-real-screen) R-578— the earliest report
Fixed - R-100`omarchy toggle bar on` hides the bar (on/off are inverted)by olibob· open at sourcebug
Out of area
Fixed - R-102Menu JSONC: labels containing `, ]` or `, }` are silently corrupted by the trailing-comma stripperby buger· open at source· edited (4 revisions)bug
Known issueKI-MENU-JSONC-COMMA-IN-STRING
Fixed - R-106monitor-scaling up/down persists the scale change to the wrong monitor's config when per-monitor rules are usedby phortonssf· open at sourcebug
Out of area
Fixed - R-113Apps section of the Quickshell menu shows "Nothing here yet" despite installed apps being present (e.g. LibreOffice)by csmithnaill· open at sourcebugFixed
- R-130UK timezone and keyboard selected at install, but locale stays en_USby markallisongit· open at sourceenhancement
Out of area
Fixed - R-131omarchy-sleep-lock.service fails on every suspend/resume: systemd-inhibit 'already running'by Riao9· open at sourcebug
+7 also reported· show· hide
R-131 is where this defect is tracked; these reports say the same thing.
- omarchy-sleep-lock.service fails on resume: Restart=always re-runs systemd-inhibit while logind's sleep operation is still in flight R-1720filed Aug 17, 2026Open upstream.
- omarchy-sleep-lock.service fails intermittently on repeated suspend/resume cycles ("inhibition already running") R-1496filed Aug 24, 2026Open upstream.
- Boot with the lid closed on a dock: logind suspends before the dock is detected, the suspend wedges, and NetworkManager is stranded ASLEEP for the whole session R-1311filed Aug 28, 2026Open upstream.
- Legion Pro 7 with RTX 5080 hard-freezes after resume from deep suspend R-1063filed Sep 2, 2026Open upstream.
- Desktop becomes unresponsive after S3 resume: NVIDIA 610.57.04 modeset lock blocks Hyprland R-867filed Sep 7, 2026Open upstream.
- omarchy-sleep-lock.service restart-loops during every suspend/resume R-333filed Sep 19, 2026Closed upstream on 2026-10-12 by the bot omarchybot, as a duplicate (target not recorded).
- omarchy-sleep-lock.service logs status=1/FAILURE on every sleep transition (systemd-inhibit restart races logind sleep state) R-2089filed Sep 29, 2026Open upstream.
Fixed - R-149Hybrid GPU: nvidia.lua exports NVIDIA env vars even when the display runs on the iGPU → Chromium video flicker (reverse PRIME)by camargo-advanced· open at sourcebug
Out of area
Fixed - R-154Clock calendar repeats a day and shifts weekdays in timezones with a midnight DST switch (e.g. America/Santiago)by Bozahita· closed — completed at sourcebug
Out of area
Fixed - R-156Lock screen re-blanks a slow-waking external monitor before it shows a picture (5 s blank timer), so wake needs several triesby nearcritical· closed — duplicate at sourcebugcompatibilityFixed
- R-166omarchy-launch-editor --inline passes no wait flag to GUI editors, so `git commit` records the unedited messageby pjover· open at sourcebug
Out of area
Fixed - R-169Bar: allow the bar to be inset from the screen edges so it lines up with tiled windowsby DukeOfContention· open at sourceenhancement
Out of area
Fixed - R-177Keyboard layout and keyboard backlight don't persist across suspend/resumeby efecege· open at sourcebugFixed
- R-185Idle lock: second monitor gets no working lock surface and never unlocks — 500ms sessionLockStabilizeTimer races output geometry (1500ms fixes it)by joshkelly· open at sourcebugFixed
- R-186Workspace layout toggle (dwindle/scrolling) never applies to named workspaces — rule keyed by negative workspace id never matchesby JackMordaunt· open at sourcebug
Out of area
Fixed - R-188Keyboard backlight stays off after unlock: second `omarchy-brightness-keyboard off` saves 0 as the restore valueby zaptel· open at sourcebug
Duplicate ofKeyboard backlight restore fails after lock (brightnessctl saves 0 after Dell stop_timeout) R-1877— the earliest report
Fixed - R-196notifications: critical-urgency toasts never expire and resurrect on every rebootby PrashPoorai· open at sourcebug
Out of area
Fixed - R-197Clock calendar duplicates a day and shifts the month grid by one across a forward-DST transitionby NicohBu· closed — completed at sourcebug
Out of area
Fixed - R-216omarchy-menu-keybindings: embedded lua runs the Hyprland config and balloons to ~18GB, OOM-kills, and takes Hyprland down (NVIDIA teardown SIGSEGV)by luke-andrade7· open at sourcebugFixed
- R-243Bitwarden installation fails due to nodejs / nodejs-lts-jod conflictby dzintars-co· open at sourcebugFixed
- R-253Post-resume fingerprint failure: lock screen activates fprintd inside logind's PrepareForSleep window, and the inhibitor-less daemon outlives the suspendby ilajosmanov· closed — completed at sourcebugFixed
- R-254Hybrid laptops: `nvidia.lua` sets `LIBVA_DRIVER_NAME=nvidia` session-wide even when the iGPU is the compositing device, breaking Chromium videoby ironxp· open at sourcebugcompatibility
Out of area
Fixed - R-259LIBVA_DRIVER_NAME=nvidia breaks all video playback on muxless hybrid laptops where the iGPU drives the displayby DavidEvansDev· open at sourcebugcompatibility
Out of area
Fixed - R-260omarchy-menu-file returns 0 files when ~/Pictures/~/Videos are symlinks (transcode panel never opens)by LucasHSantana· open at sourcebugFixed
- R-263Bar Nerd Font icons render tiny with Iosevka Nerd Font Mono (except Bluetooth and menu)by Nikit-Singh· open at sourcebug
Out of area
Fixed - R-264Hibernate pre-sleep hook kills keyboard backlight permanently (no post-resume restore)by xRiErOS· open at sourcebug
Out of area
Fixed - R-265Screensaver doesn't dismiss on pointer/touchpad movement (only keyboard input or focus change)by Mik-pe· open at sourcebug
Out of area
Fixed - R-283Internal laptop display does not automatically re-enable after external monitor is disconnectedby bokology· open at sourcebug
Out of area
Fixed