Repository navigation
Releases
Hello Lock 0.6.3 for Omarchy
- The Caps Lock badge and the failure hint now work on keyboards with no Caps
Lock LED. Caps Lock is read fromhyprctl devices -j(the main keyboard,
else any keyboard that reports it) on the existing 400 ms refresh; the LED is
still the fallback when hyprctl is unavailable or lists no keyboards. No
change to the password, fingerprint or PAM code.
Works on Omarchy 4.0.x and 4.5. Update with omarchy plugin update hello-lock, then restart the shell.
Hello Lock 0.6.2 for Omarchy
- Waking from sleep no longer flashes the desktop before the lock screen.
Locking for suspend (lid closed, sleep from the menu) now skips the
power-down effect: its desktop capture finished after resume and the effect
replayed the old desktop over the lock screen.bin/hello-snapshotasks
logind whether the system is preparing for sleep, and the service drops any
capture that lands more than 2.5 s after the lock started (a suspend
happened in between). Locking by hand still plays the effect.
Works on Omarchy 4.0.x and 4.5. Update with omarchy plugin update hello-lock, then restart the shell.
Hello Lock 0.6.1 for Omarchy
Omarchy 4.5 compatibility; still works on Omarchy 4.0.6. No change to the
password, fingerprint or PAM code, or to the lock/unlock lifecycle.
- Menu: Omarchy 4.5 renamed the menu's Style section to Appearance, which hid
Hello Lock'sstyle.lockscreenentry.bin/hello-menunow reads the section
from the installed Omarchy's own menu ($OMARCHY_PATH/default/omarchy/omarchy-menu.jsonc)
and writesappearance.lockscreenorstyle.lockscreento match (Style when
that file can't be read, as before). Its own entry under either key counts as
on. Newhello-menu migraterenames only the key of Hello Lock's own entry,
with the usual private backup, when the installed section is known and nobody
else's entry holds it; the service runs it on load in place ofsecure(which
it still does first).removetakes Hello Lock's entry from either section.
Newhello-menu sectionprints Appearance or Style; Settings and the setup
use it for their wording. After updating to Omarchy 4.5, expect one automatic
edit of~/.config/omarchy/extensions/omarchy-menu.jsoncwhen the shell
loads Hello Lock (backed up first). hello-lock-doctorreports where the menu entry is and warns when Hello
Lock's own entry is under a section the installed Omarchy doesn't have.- Video wallpapers (new in Omarchy 4.5) couldn't be drawn as an image, so the
lock showed a flat colour. When Omarchy'sshell/plugins/lock/poster.sh
exists, the lock, its preview, the unlock splash and the setup now show the
video's cached still frame from that script, as the stock 4.5 lock does
(the plain background colour shows until it is ready or if it fails).
Without the script (Omarchy 4.0) the wallpaper path is used as before. - README: Appearance → Lock Screen (Style on Omarchy 4.0); the fingerprint flow
is described as derived from Omarchy 4.0.6 rather than identical to the
current Omarchy's; supported Omarchy versions noted.
Verified live on a fresh Omarchy 4.5.0 install (lock, wrong-password rejection, unlock, Appearance menu entry); Omarchy 4.0.6 behaviour is covered by the test suite.
Update with omarchy plugin update hello-lock, then restart the shell.
Hello Lock 0.6.0 for Omarchy
Hello Lock 0.6.0 brings the Settings Studio, synth typing sounds and refined unlock motion to the Omarchy plugin, with immediate post-PAM unlock, optional overlay timing, explicit Settings reload and a shared visual platform. Lock-loss recovery is included; compositor-forced release can still expose a gap before recovery.
This is the Omarchy plugin source release. The marketplace update request #13795 passed compatibility validation. Its security baseline reports no findings and requires maintainer review of the optional installer/service-management capabilities. GitHub publication is not marketplace approval; the previous marketplace snapshot remains authoritative until promotion succeeds. A shell restart is required after plugin code updates; ordinary Settings saves apply through explicit reload.
- Installation/removal and features
- 45-second visual demo
- Full changelog
- Standalone technical preview downloads — a separate password-only Hyprland/Sway host, not the Omarchy plugin installation.
Validation: 128 Python tests, both JavaScript suites and plugin validation passed. The service implementation matches the separately recorded real guest PAM/lock-loss test; physical fingerprints and physical monitor coverage remain unverified. The separate AI review covers the standalone scope, not a human audit of the whole Omarchy shell.
Exact source commit: 1959e1ff99785df6fabf47a9853ea43950ce711d.
Standalone technical preview 1
Hello Lock can now run without Omarchy in a supported Hyprland or Sway session. This technical preview includes standalone Settings/visual previews and a real PAM password locker, saved branding rotation, optional sound/status/weather, automatic motion, private best-effort CRT capture and opt-in idle/logind integration.
Downloads and setup
Download the native package for your tested configuration, SHA256SUMS, and SETUP.md. Verify the selected file with sha256sum --ignore-missing -c SHA256SUMS before installation.
- Arch / CachyOS:
.pkg.tar.zst(tested with Hyprland). - Fedora 44:
.rpm(tested with Sway pixman/QXL/Mesa). - Debian format:
.debis experimental; Debian/Ubuntu runtime is unverified, with compatible Quickshell dependency/image-validation blockers. - Tarball: filesystem payload for inspection/staging, not an unattended installer.
- Demo:
hello-lock-standalone-demo.mp4shows real visual previews and the standalone Studio; authentication was tested separately, not filmed.
Native version 0.5.3-0.preview1 is independent of the Omarchy plugin version. These are the exact package files tested in guests, not renamed or rebuilt versions. Dependencies are declared by each native package. Packages install the managed hello-lock PAM include policy but do not edit the login policy, enable idle, replace another locker or configure your compositor. Review SETUP.md before enabling real locking. Preferences are retained on removal.
Evidence and limitations
- Arch / Hyprland: 34 checks passed.
- Genuine CachyOS / Hyprland: 34 checks passed.
- Fedora 44 / Sway: 32 checks passed.
Disposable guests exercised native package installation/removal, real wrong/correct PAM passwords, recovery, capture cleanup, idle/logind and kernel-confirmed s2idle. TEST-RESULTS.json contains exact versions, assertions and runtime-payload identity.
A compositor-forced release may expose a gap before userspace recovery. This preview is not proof of uninterrupted protection. Fedora evidence uses the documented software renderer; earlier default-renderer failures are not all root-caused. Physical GPU/hotplug/fingerprints, deep S3, physical audio, live weather and Debian/Ubuntu runtime remain unverified. Forecast/audio policy transports were fixtures. Standalone supports one hidden PAM password prompt, not arbitrary MFA. A separate AI review found no reproducible new defect in scope; it is not a human security audit.
Support scope · Detailed setup/removal · Review and evidence
Source commit: 1959e1ff99785df6fabf47a9853ea43950ce711d. Runtime payload SHA-256: df0aea3ac37bbf4ee913579859851421872c01522f5c06a24f956d04293032a4.