Proof Portal
Omarchy
ProbeLabs65 findings · 95 requirementsA proof layer — requirements, tests and verified fixes — for two of Omarchy's subsystems: the application menu (launcher scripts, QML model, JSONC config, search and selection) and the lock screen (lock scripts, QML, PAM authentication). Scope is deliberately limited to those components of omacom/omarchy; the rest of the distribution is not covered.
Inbox
Problems reported from outside the audit — kept verbatim, then checked: is the claim real, what does it touch, can it be reproduced? Validated reports are shown in full; items still under responsible disclosure appear only as a count until they are released.
- R-5247Add Portuguese (Brazil) localization and keyboard managementby alltomatos· open at sourceFixed
- R-5240LockService reports self-contradictory state: isLocked=true while status shows locked components all falseby jfdnet· open at source
+1 also reported· show· hide
R-5240 is the earliest report of this defect; this report says the same thing.
- Stale sessionLock.locked wedges all future locks (sibling of #6888) R-5287filed Oct 10, 2026Open upstream.
Fixed - R-5209Cloned menu gets null appLibrary — manifestHasKind Array.isArray fails on QVariantList kindsby CJ-Montero· open at source
+4 also reported· show· hide
R-5209 is where this defect is tracked; these reports say the same thing.
- Third-party menu plugins (e.g. omarchy.menu clones) get an empty Apps list: manifests passed through the panel Instantiator lose array types R-860filed Sep 7, 2026Open upstream.
- Third-party (cloned) menu plugin: Apps submenu stays empty — shell never grants appLibrary R-494filed Sep 16, 2026Open upstream.
- Third-party menu-kind plugin gets shell.appLibrary === null, leaving Apps submenu empty R-394filed Sep 17, 2026Closed upstream on 2026-10-12 by the bot omarchybot, as a duplicate (target not recorded).
- Cloned menu plugins get appLibrary: null, so the Apps submenu is empty (4.0.4) R-5279filed Oct 9, 2026Open upstream.
Fixed - R-5200Feature request: explicit position/insertion-point control for omarchy-menu.jsonc extension entriesby alFrame· open at sourceFixed
- R-5185Lock screen powers the display off after a hard-coded 5 s, which makes KVM switchers scan away and drop USBby aravind-r2r-tech· open at sourceFixed
- R-5173Lock's unconditional DPMS blank drops both HDMI outputs on NVIDIA 610.57.04 — session stranded at `no-real-screen` until rebootby aishag80g-stack· open at sourceFixed
- R-5137omarchy-menu-keybindings hangs forever when user Lua config iterates an hl.get_*() resultby KouenNoTen· open at sourceFixed
- R-2226Menu: first item is clipped/scrolled off on initial display in scrollable lists (omarchy-menu-select / SUPER+K)by b-lov· open at sourceFixed
- R-2205Lock screen: after a wrong password, the failure message replaces the field with no visible prompt — screen looks unusable, input actually worksby folknology· open at sourceFixed
- R-2145Lock screen: PAM info messages from the fingerprint stack are never surfaced (no fingerprint text element exists)by awluko· open at sourcebugFixed
- R-2134Menu: Left/Backspace from a submenu always returns to the first row, discarding the parent selection (8 open PRs, no issue)by rkondratowicz· open at sourcebugFixed
- R-2112Lock screen wakes in a loop on monitors that drop HDMI hotplug in standbyby lucasmendesdeliver· open at sourcebug
+4 also reported· show· hide
R-2112 is where this defect is tracked; these reports say the same thing.
- Lock screen alternates black <-> lock UI every ~13.5s on AMD iGPU over HDMI R-1329filed Aug 28, 2026Open upstream.
- Display flickers off/on repeatedly after idle lock on AMD APU + HDMI/DP (DPMS flap loop) R-1285filed Aug 29, 2026Open upstream.
- Locked screen DPMS repeatedly wakes/re-blanks every ~15s on dual-monitor setup R-834filed Sep 8, 2026Open upstream.
- Lock screen blank loops indefinitely on displays that drop HDMI HPD in power save R-677filed Sep 11, 2026Open upstream.
Fixed - R-12Menu (Super+Space) needs several presses to open after focus moves to another monitorby ctarx· open at sourcebugFixed
- R-113Apps section of the Quickshell menu shows "Nothing here yet" despite installed apps being present (e.g. LibreOffice)by csmithnaill· open at sourcebugFixed
- R-131omarchy-sleep-lock.service fails on every suspend/resume: systemd-inhibit 'already running'by Riao9· open at sourcebug
+7 also reported· show· hide
R-131 is where this defect is tracked; these reports say the same thing.
- omarchy-sleep-lock.service fails on resume: Restart=always re-runs systemd-inhibit while logind's sleep operation is still in flight R-1720filed Aug 17, 2026Open upstream.
- omarchy-sleep-lock.service fails intermittently on repeated suspend/resume cycles ("inhibition already running") R-1496filed Aug 24, 2026Open upstream.
- Boot with the lid closed on a dock: logind suspends before the dock is detected, the suspend wedges, and NetworkManager is stranded ASLEEP for the whole session R-1311filed Aug 28, 2026Open upstream.
- Legion Pro 7 with RTX 5080 hard-freezes after resume from deep suspend R-1063filed Sep 2, 2026Open upstream.
- Desktop becomes unresponsive after S3 resume: NVIDIA 610.57.04 modeset lock blocks Hyprland R-867filed Sep 7, 2026Open upstream.
- omarchy-sleep-lock.service restart-loops during every suspend/resume R-333filed Sep 19, 2026Closed upstream on 2026-10-12 by the bot omarchybot, as a duplicate (target not recorded).
- omarchy-sleep-lock.service logs status=1/FAILURE on every sleep transition (systemd-inhibit restart races logind sleep state) R-2089filed Sep 29, 2026Open upstream.
Fixed - R-177Keyboard layout and keyboard backlight don't persist across suspend/resumeby efecege· open at sourcebugFixed
- R-185Idle lock: second monitor gets no working lock surface and never unlocks — 500ms sessionLockStabilizeTimer races output geometry (1500ms fixes it)by joshkelly· open at sourcebugFixed
- R-216omarchy-menu-keybindings: embedded lua runs the Hyprland config and balloons to ~18GB, OOM-kills, and takes Hyprland down (NVIDIA teardown SIGSEGV)by luke-andrade7· open at sourcebugFixed
- R-243Bitwarden installation fails due to nodejs / nodejs-lts-jod conflictby dzintars-co· open at sourcebugFixed
- R-260omarchy-menu-file returns 0 files when ~/Pictures/~/Videos are symlinks (transcode panel never opens)by LucasHSantana· open at sourcebugFixed
- R-286Hard lockout after Hyprland crash while idle-locked — lockdead screen has no local recoveryby Dkrynen· open at sourcebugFixed
- R-323Don't DPMS-off Apple Studio Display on lock — USB4 tunnel dies until power cycleby codeface-io· open at sourcebugcompatibility
+4 also reported· show· hide
R-323 is where this defect is tracked; these reports say the same thing.
- [Bug]: Intel Arc (xe driver) fails to wake up 240Hz DSC DisplayPort monitors after DPMS / sleep idle R-921filed Sep 5, 2026Open upstream.
- Lock → unlock leaves Nvidia/DP monitor stuck at 640x480 until power cycle R-883filed Sep 7, 2026Open upstream.
- External HDMI monitor stays black after idle wake until reboot R-527filed Sep 15, 2026Open upstream.
- External-only HDMI display becomes unusable after idle lock/DPMS wake with eDP-1 disabled R-461filed Sep 16, 2026Open upstream.
Fixed - R-371Emoji picker (SUPER+CTRL+E) fails to insert into browsers; works in terminalsby AndrijaSkontra· open at sourcebug
+1 also reported· show· hide
R-371 is where this defect is tracked; this report says the same thing.
- Emoji picker does not insert selected emoji R-963filed Sep 4, 2026Open upstream.
Fixed - R-510Proposal: Show active keybindings in menu rowsby Marentius· open at sourceenhancementFixed
- R-576omarchy-menu-images reuses stale thumbnails after an image is overwritten in placeby 17lijunyi· open at sourcebugFixed
- R-598omarchy-menu search field ignores IME composition (Korean/CJK via Fcitx5) — Keys.onPressed path bypasses Qt input methodby TAE58· open at sourcebugFixed
- R-678Default editor Zed not detected: menu/launcher check `zeditor` but Arch provides `zed`by onyvaxyz· open at sourcebugFixed
- R-705Feature request: generic biometric (face) unlock hook in the lock screen, similar to fingerprint supportby Wakko13· open at sourceenhancementFixed
- R-720Learn -> Bash [The site can't be reached]by schad-x· open at sourcebugFixed
- R-727Let plugins declare menu entries in their manifestby ReidenXerx· open at sourceenhancementFixed
- R-731Idle service wakes the display while the session is lockedby kurtome· open at sourcebug
+1 also reported· show· hide
R-731 is where this defect is tracked; this report says the same thing.
Fixed - R-759fix-powerprofilesctl-shebang runs only at install time, so every power-profiles-daemon upgrade silently reverts itby blurxy· open at sourcebugFixed
- R-828Wi-Fi panel is unreachable from Setup/Apps once the bar widget is removedby smfworks· open at sourceenhancementFixed
- R-840Add a Slack web app with slack:// link handlingby BrunooMoniz· open at sourceenhancementFixed
- R-861omarchy-system-sleep-lock posts a new critical notification per failure, so a repeating fault leaves unbounded reboot-persistent toastsby Mahdi-Si· open at sourcebugFixed
- R-874Lock screen keeps committing frames while the output is DPMS-off, so GPU memory grows unbounded for the whole lockby TechCascadeLtd· open at sourcebugFixed
- R-901File Manager is not a Defaults category (hardcoded to Nautilus, ignores xdg-mime)by mrocha-montes· open at sourceenhancementFixed
- R-920Ollama install menu picks CUDA/CPU on AMD systems: `nvidia-smi` presence ≠ NVIDIA GPU, and the `rocminfo` branch never firesby bel-maty· open at sourcebugFixed
- R-929Menu search ranks Omarchy actions above installed appsby numanzahid· open at sourcebugenhancement
+1 also reported· show· hide
R-929 is the earliest report of this defect; this report says the same thing.
- Menu search: installed app loses short-prefix ranking to same-labeled menu actions (e.g. "chr" for Google Chrome) R-614filed Sep 13, 2026Open upstream.
Fixed - R-942Stalled lock latches lockRequested, so every later lock() returns "ok" without locking — machine suspends unlockedby mchldotdev· open at sourcebug
+1 also reported· show· hide
R-942 is the earliest report of this defect; this report says the same thing.
- [Bug] `omarchy-system-sleep-lock` hangs for 12000ms on suspend due to stuck `lock-pending: screen-stabilizing` state R-5322filed Oct 11, 2026Open upstream.
Fixed - R-943Lock screen flickers on every keystroke: each wake re-applies a monitor scale from monitors.lua that the compositor doesn't use, with no backoffby tallsam· open at sourcebug
+1 also reported· show· hide
R-943 is where this defect is tracked; this report says the same thing.
- Internal display flashes to 2x scale on lock-screen mouse move / resume (desc: output rules unmatched) R-1655filed Aug 19, 2026Open upstream.
Fixed - R-989omarchy-setup-security-fingerprint doesn't add the clamshell gate to the lock screen's fingerprint PAM configby 1818TusculumSt· open at sourcebug
+2 also reported· show· hide
R-989 is the earliest report of this defect; these reports say the same thing.
- setup security fingerprint wipes the clamshell gate from omarchy-lock-fingerprint R-968filed Sep 4, 2026Closed upstream on 2026-10-11 by the bot omarchybot, as a duplicate (target not recorded).
- Lock-screen fingerprint stack lacks the clamshell gate that omarchy-setup-security-fingerprint writes for sudo/polkit — endless verify-timeout storm on lid-closed machines R-5142filed Oct 4, 2026Open upstream.
Fixed - R-1044Confirm destructive power actions in the system menuby ferlemes· open at sourceenhancementFixed
- R-1149System menu is not dismissed by clicks on another monitorby JoNil· open at sourcebugFixed
- R-1212[Quattro] Idle screensaver-to-lock transition flashes the password promptby ClGratton· open at sourcebugFixed
- R-1214[Quattro] Lock password field can lose focus after suspend resumeby ClGratton· open at sourcebug
+8 also reported· show· hide
R-1214 is where this defect is tracked; these reports say the same thing.
- Lock screen visible but keyboard input dead after lid-open resume (reproduces on Quattro, follow-up to #2991) R-1571filed Aug 22, 2026Open upstream.
- Lock screen freezes / keyboard input unresponsive after suspend-resume until DRM/VT switch R-712filed Sep 10, 2026Open upstream.
- [Bug] Password input field is not focused on lock screen after suspend/wake R-319filed Sep 19, 2026Closed upstream on 2026-10-12 by the bot omarchybot, as a duplicate (target not recorded).
- Lock screen password field loses keyboard focus after DPMS wake R-300filed Sep 20, 2026Open upstream.
- Intermittent unresponsive/blank lock screen after s2idle resume on ThinkPad L13 Yoga Gen 3 R-173filed Sep 23, 2026Open upstream.
- Lock screen ignores keyboard after lid close/resume until clicked R-2185filed Oct 2, 2026Open upstream.
- Hibernate resume UX: black screens, lock screen not auto-focusing, no progress indication R-5189filed Oct 7, 2026Open upstream.
- Lock screen password field stops accepting input after lid close/reopen (suspend/resume); session stays locked, forces reboot R-5249filed Oct 8, 2026Open upstream.
Fixed - R-1248omarchy-menu-keybindings: code: binds always displayed with US symbol names (xkbcli compile-keymap ignores the active layout)by danicatalan00· open at sourcebug
+2 also reported· show· hide
R-1248 is where this defect is tracked; these reports say the same thing.
- SUPER (SHIFT) + equal keyboard shortcuts don't resize windows (Belgian keyboard) R-2029filed Jan 9, 2026Open upstream.
- [JIS keyboard] Window resize shortcuts are misleading because they use US physical key labels R-907filed Sep 6, 2026Open upstream.
Fixed - R-1278[Quattro] Encrypted hibernate asks for both LUKS and session passwordsby ClGratton· open at sourcebugFixed
- R-1346Add a way to hide/remove the hard-coded "Copy URL" / "Download Video" web-app rows from the SUPER K keybindings menuby lde-alen· open at sourceenhancementFixed
- R-1363powerprofilesctl crashes (SIGABRT) when power-profiles-daemon is masked — hit on every power event with TLPby ogrt· open at sourcebugFixed
- R-1391No way to share the clipboard as a QR code from Trigger > Shareby Chessing234· open at sourceenhancementFixed
- R-1390No one-shot presentation mode (stay awake + DND + hide bar)by Chessing234· open at sourceenhancementFixed
- R-1393omarchy-menu-images runs awk against index.tsv once per thumbnailby Chessing234· open at sourceenhancementFixed
- R-1436omarchy share clipboard sends an empty file when the clipboard holds an image (e.g. a screenshot)by dima-engineer· open at sourcebugFixed
- R-1447[Quattro] Screen lock moves the default audio sink to the internal speakers: DPMS-off drops HDMI port availability and flips the ALSA card profileby manozzo· open at sourcebugFixed
- R-1487Keybindings cache key includes volatile "active keymap" state, causing repeated 540ms cold rebuildsby estradanic· open at sourcebugFixed
- R-1503`omarchy update` lock leaks through AUR daemons (adb), so later updates report one is already runningby kdriedger· open at sourcebugFixed
- R-1576Lid-close suspend freezes the backgrounded `1password --lock` helper, which dumps core (SIGTRAP) on resumeby bmcswee· open at sourcebugFixed
- R-1584[Quattro] Lock screen re-blanks slow DPMS monitors after fixed 5-second wake timeoutby tuladhar· open at sourcebug
+4 also reported· show· hide
R-1584 is where this defect is tracked; these reports say the same thing.
- Lock screen re-blanks ~1s after DPMS wake on slow-sync monitor, making unlock blind typing R-1678filed Aug 18, 2026Open upstream.
- Locked session re-arms a hardcoded 5s display-blank timer, so slow displays can never finish waking R-1289filed Aug 29, 2026Closed upstream on 2026-10-09 by the bot omarchybot, as a duplicate (target not recorded).
- Lock screen re-blanks 5 s after wake, before slow-syncing displays have presented a frame R-2236filed Oct 4, 2026Open upstream.
- Lock screen idleBlankTimer blanks display after only 5s on wake from suspend, racing dock/monitor hotplugs R-5310filed Oct 10, 2026Open upstream.
Fixed - R-1590omarchy-hibernation-available returns success when the kernel has hibernation disabled, making the Hibernate menu entry a silent no-opby mnemonicspace· open at sourcebugFixed
- R-1608Display never blanks after lock: blank/wake silently stops working in a long-running shellby mkraku· open at sourcebugFixed
- R-1615Add Cursor CLI as default agent option in menuby GimpyHand· open at sourceenhancementFixed
- R-1616Search ranks `Remove › Development › Rust` above the RustDesk app — Enter runs the removalby RodriMora· open at sourcebugFixed
- R-1617Menu prompts don't allow "+" characterby ty-davis· open at sourcebug
+1 also reported· show· hide
R-1617 is the earliest report of this defect; this report says the same thing.
- Numpad keys do nothing in the Omarchy menu search field R-5321filed Oct 11, 2026Open upstream.
Fixed - R-1618keybindings --print uses a different format than hl.unbind / o.bindby temper303· open at sourcebugFixed
- R-1644User password update in menu leaves old root password activeby Matredit· open at sourcebugenhancementFixed
- R-1652Menu empty-state text overflows the container on long queriesby jampierzuniga· open at sourcebug
+1 also reported· show· hide
R-1652 is where this defect is tracked; this report says the same thing.
- overflowing text when search item too long R-1715filed Aug 17, 2026Open upstream.
Fixed - R-1653No way to opt out of lock-time display blanking in 4.0 (OMARCHY_LOCK_ONLY dropped, no shell.json equivalent)by gigq· open at sourceenhancementFixed
- R-1676omarchy-system-sleep-monitor calls bare dbus-monitor, which Homebrew's shadowing PATH entry breaks — omarchy-sleep-lock.service restart-loops forever and pre-suspend lock never firesby aislandener· open at sourcebugFixed
- R-1681Few omarchy-menu toggle does not work as toggleby PrithvirajSinghChauhan8444· open at sourcebugFixed
- R-1693Omarchy menu scroll speed is too slow with touchpadby Anshshivhare23· open at sourceenhancementFixed
- R-1697Emoji picker inserts into the wrong window when the card spans two windowsby Guts444· open at sourcebug
+2 also reported· show· hide
R-1697 is the earliest report of this defect; these reports say the same thing.
- When using mouse on the Emoji Picker, emoji isn't shown anywhere R-1684filed Aug 18, 2026Open upstream.
- Emoji picker mouse selection can paste into the app underneath instead of the originating composer R-837filed Sep 8, 2026Closed upstream on 2026-10-11 by the bot omarchybot, as a duplicate of #7350 (R-1697). GitHub close reason: duplicate.
Fixed - R-1764omarchy theme remove rejects the quoted display name its own help text documentsby omarchybot· open at sourcebugFixed
- R-1767test/shell leaks two orphaned inotifywait processes per run, holding the harness's file descriptorsby omarchybot· open at sourcebugFixed
- R-1768137 assertions across seven test files fail with no output at allby omarchybot· open at sourcebugFixed
- R-1769ripgrep is an unchecked test dependency, and without it nine guards report ok instead of failingby omarchybot· open at sourcebugFixed
- R-1777omarchy transcode fails with an internal usage message when ~/Pictures and ~/Videos are emptyby omarchybot· open at sourcebugFixed
- R-1792Clicking workspaces in BarWidget is sluggish vs keybindsby ohai89· open at sourcebugFixed
- R-1816omarchy-menu-keybindings hangs forever when a user Lua config iterates hl.get_monitors()by e-defix· open at sourcebug
+4 also reported· show· hide
R-1816 is the earliest report of this defect; these reports say the same thing.
- Keybindings menu (SUPER+K) hangs forever if hyprland.lua iterates a hyprlua getter R-498filed Sep 16, 2026Closed upstream on 2026-10-12 by the bot omarchybot, as a duplicate (target not recorded).
- omarchy-menu-keybindings: mock 'noop' table causes unbounded infinite loop and 100% CPU when config iterates with ipairs R-474filed Sep 16, 2026Open upstream.
- Super + K hangs and spawns CPU-bound Lua processes when config iterates hl.get_workspaces() R-2151filed Oct 1, 2026Open upstream.
- omarchy-menu-keybindings lua bind scan spins at 100% CPU when user config iterates a mocked hl API R-5154filed Oct 5, 2026Open upstream.
Fixed - R-1820Menu launcher lost Walker's web-search fallback for no-match queriesby Balmisjutas· open at sourceenhancementFixed
- R-1855Stranded-lock recovery never completes: requestSessionLock() early-returns on sessionLock.secure, so the session stays on "lockscreen app died" foreverby jfbourdeau· open at sourcebug
+2 also reported· show· hide
R-1855 is the earliest report of this defect; these reports say the same thing.
- _syncServices() destroys keepLoaded services the builtin-defaults window marks disabled — any third-party lock plugin strands the session on resume R-659filed Sep 11, 2026Open upstream.
- Lock service can wedge forever in "lock-pending: screen-stabilizing" when a plugin reload races the stranded-lock retake; restart-shell still refuses in that state R-490filed Sep 16, 2026Open upstream.
Fixed - R-1857Quattro upgrade leaves broken app-menu icons and a ghost Alacritty launcherby cempack· open at sourcebugFixed
- R-1866Lock screen auto-focus not workingby Obamium3157· open at sourcebugFixed