thunar plus thunar-volman, thunar-archive-plugin, tumbler and
ffmpegthumbnailer. nautilus stays in the list and keeps its preload
service for now, so both file managers are installed side by side.
swaylock reads ~/.swaylock/config, $XDG_CONFIG_HOME/swaylock/config and
SYSCONFDIR/swaylock/config — never /etc/xdg/, where the generic XDG sweep
put it. The config was made effective by seeding it into user homes, but
both seeds are conditional, so a machine that pulled no moonarch-git
update since swaylock arrived ran with no config at all: no wallpaper,
no Catppuccin ring.
The config now lives in defaults/etc/swaylock/config and is owned at
/etc/swaylock/config, which the package alone makes effective. Home
copies still win by search order, so the .install hook retires the
pristine ones; an edited copy stays.
Upstream swaylock has no blur (effect-blur is swaylock-effects only), so
the blur is baked into a second image: wallpaper-blur.jpg, generated with
downsample-blur-upsample. Regenerate it when the wallpaper changes.
moonarch-doctor gains check_swaylock_config, which names the config file
that actually wins and fails when none exists.
An open popout only closed on a backdrop click, Escape, a toggle, or
another screen claiming the slot. Focus moving away without a click —
Alt+Tab, a focus keybind, a workspace switch, a newly mapped window —
left it standing over the desktop.
Three signals, all needed:
- the host surface losing the keyboard, read from Qt's Window.active
(PanelWindow exports no focus state); the only one that catches a
focus grab by another layer surface
- niri focusing an actual window, filtered on id >= 0: niri drops window
focus to none while the popout holds the keyboard, so reacting to every
change would make each open close itself
- the focused workspace changing, via the new Niri.focusedWorkspaceId;
workspace ids are unique across outputs, so a monitor switch counts too
No exception for pkexec/keyring prompts raised by popout actions: they
take the focus, so the popout closes and the new state shows on the next
open. Rationale and measurements in DECISIONS.md.
"self" fails with "Caller does not belong to any known session" — the
shell process is not always counted as a session member. "auto" resolves
to the current session and otherwise to the user's graphical session;
verified on systemd 261 to hit session 3, wayland, class user.
Five rows over a model, registered from Launcher.qml under "power" with
the borrowed anchor the clipboard popout uses, so shell.qml and every
user copy of it stay unchanged. Mod+Escape calls the popout by IPC.
Logout goes through `loginctl terminate-session self`, which needs no
XDG_SESSION_ID in the shell environment. Glyph codepoints were read out
of UbuntuSansNerdFont-Regular.ttf.
The reserve Waybar's power button keeps the IPC call and says in its
tooltip that it needs the Quickshell bar; there is no way to reach a
Quickshell popout from a session where Quickshell was killed.
Greeter and lock screen move to the official repos. The greeter keeps
running inside its own niri instance, so niri-greeter.kdl only changes
which binary it spawns; regreet.toml and regreet.css return from f79128b^
with current theme and font names.
swaylock replaces moonlock in the stasis lid and lock_screen actions. Its
config is seeded to the user home, because swaylock never reads /etc/xdg
and the system-wide path does not work on NixOS.
moonlock stays installed: moonset invokes it by name and has no
lock_command option yet.
Super+C opened walker's clipboard provider — the last keybind that still
reached walker at all. ClipboardPopout takes over and shells out to
cliphist: list on every open (cliphist has no change signal, so the open
is the refresh point), decode | wl-copy on Enter or click, and delete
with the entry's raw list line on stdin. Every call carries -db-path,
because the history lives in the session db that cliphist-text.service
creates, not in cliphist's ~/.cache default; every shell argument is
positional, so no clipboard content becomes part of a script.
Delete is Ctrl+D, not Del: focus sits in the search field, where Del is
a character delete. It is also what walker's provider used. A footer
hint spells the keys out, since a destructive shortcut is not guessable.
Image entries have no text preview, only a "[[ binary data 6 KiB png
128x128 ]]" placeholder. That placeholder now yields both the thumbnail
extension and a readable "png · 128x128 · 6 KiB" label, and the entry is
decoded to $XDG_RUNTIME_DIR/moonarch-clip for an Image to load — one
decode process per row, so rows do not serialize. The directory is
tmpfs, so thumbnails expire with the session like the history itself.
The popout is keybind-only, but register() needs an on-screen item for
the anchor rect, so it registers from Launcher.qml and borrows that one.
That also leaves shell.qml — and therefore every user copy of it —
unchanged. walker stays installed: moonarch-sink-switcher,
moonarch-cpugov and moonarch-vpn use it as a dmenu, and those are live
in the Waybar reserve config.
The clock's click toggled the date between short and long form, which the
tooltip already showed in full. It now opens a calendar popout instead.
CalendarPopout uses MonthGrid + WeekNumberColumn + DayOfWeekRow from
QtQuick.Controls (already imported by TrayMenu) so the locale rules —
week start, ISO week numbers, weekday and month names — come from Qt
rather than being re-implemented; only the delegates are ours. Leading
and trailing days stay visible but dimmed, since the grid always renders
six weeks and hiding them would leave the week-number column labelling
blank rows.
Clock takes the full bar height on `height`, not `implicitHeight`: on a
Text root that property is read-only, and the assignment fails the config
load outright.
The output/input switchers were hidden below two devices, so a machine
with a single sink showed no device list at all — indistinguishable from
a broken popout. The list doubles as the readout of which device is
active, so show it whenever there is at least one node.
Cameras are off after every boot and get switched on per camera from the
bar. This inverts the privacy problem instead of chasing it: the previous
entry point, detecting camera *use*, cannot see raw V4L2 access at all,
and inotify on /dev/video* cannot tell a real capture from a device query.
An unauthorized camera cannot be opened in the first place.
Mechanism is `authorized` on the USB device. Measured: writing 0 drops the
/dev/videoN nodes and the PipeWire node, writing 1 brings them back and
uvcvideo rebinds itself.
A camera is identified by USB interface class 0x0e in the descriptor blob,
which stays complete while the device is deauthorized (the interface
directories do not) — so no state of our own is needed to keep a
switched-off camera listable and switchable.
The privileged helper re-derives every precondition from kernel data: id
shape, resolved path under /sys/devices, DEVTYPE=usb_device, and a video
interface class. It cannot be used to deauthorize a hub, keyboard or disk.
Switching a camera on authorizes the whole USB device, so the popout names
every other function it carries and flags in red what does not belong on a
camera. Shown rather than blocked: the internal camera carries a DFU
interface and multimedia devices commonly expose HID for their buttons, so
a class filter would lock out legitimate hardware.
Device-supplied labels are rendered as plain text and stripped of the
invisible and directional Unicode range, so a name cannot masquerade as
another device's.
A hot-plugged camera stays on — plugging one in is a deliberate act.
The indicator never became visible. Three causes, each measured with
throwaway probe configs against quickshell 0.3.0:
- Link groups report state Unlinked (-1) unless bound by a
PwObjectTracker, so the "is the link active" guard rejected
everything. Node properties need the same binding.
- PwNodeType flags share bits between in- and out-streams
(AudioInStream 13, AudioOutStream 21), so the bitwise test also
matched playback — browser audio alone set micActive.
- Video streams are left as Untracked with isStream false, so no
screencast or camera could ever match.
Match media.class of active link endpoints instead, the signal waybar's
privacy module uses. Desktop-audio recording is excluded via the peer
class Audio/Sink, since quickshell does not expose stream.monitor.
Raw V4L2 camera use stays undetectable (no pipewire node exists);
rationale for not observing /dev/video* is in DECISIONS.md.
moduleHeight (24) becomes the primary vertical token and barHeight is
derived as moduleHeight + moduleMarginV * 2. Previously ModuleBox sized
its pill as barHeight - moduleMarginV * 2, so lowering the bar shrank
every pill by the same amount — the margin is absolute and does not
scale. Bar height is now set via moduleMarginV while the pills hold.
Widget implicitHeight stays on barHeight: ModuleBox has no clip, so the
items overflow the pill and keep the whole bar height clickable, which
matters because the display edge stops the pointer.
Also fixes pre-existing vertical centering. anchors.verticalCenter
centers the Text layout box (ascent + descent) and rounds down on an odd
layout height, which put the network and bluetooth glyphs 1 px above the
bar mid and several others off by 0.5 px. Replaced across 13 widgets with
height: parent.height + verticalAlignment: Text.AlignVCenter, which
centers by font metrics. Workspace dots move from a hardcoded 22 to
moduleHeight.
Verified by pixel measurement: all 7 pills on rows 6-29 (mid 17.50 = bar
mid) and all 14 glyphs with even ink height exactly on 17.50. The
remaining 7 have odd ink height, where 17.50 is not representable on the
pixel grid; two of those are Image, where verticalAlignment does not
apply.
When both a wired and a wifi connection are up, NetworkManager routes
over ethernet (lower metric) and nm-applet shows the wired icon. The
network indicator and popout checked wifi first, so an ethernet-connected
machine with wifi still associated wrongly showed the wifi glyph and
SSID. Check wiredDev first in the icon, tooltip, popout activeDev, and
compact connection text.
Fresh-path test after the r152 rebuild: with ~/.config/Kvantum moved
aside, a niri-spawned VLC still rendered Catppuccin — Kvantum reads
/etc/xdg/Kvantum/kvantum.kvconfig, so the glob deploy suffices and no
user-home seed is needed.
The host's Loader keeps the LauncherPopout instance alive across
close/reopen, so a stale query from the previous open lingered in the
search field. Reset the input in focusFirst() (called by PopoutHost on
every open); the text reset cascades through onTextChanged -> query ->
currentIndex.
Qt apps (e.g. VLC) rendered in the default Fusion style — GTK theming
does not cover Qt. Add the Kvantum style engine + Catppuccin Mocha
Lavender theme, wired via QT_STYLE_OVERRIDE, which covers both Qt5 and
Qt6 (QT_QPA_PLATFORMTHEME can select only one plugin at a time).
Also move all GUI-toolkit env vars (QT_*/GDK/SDL/CLUTTER) from zshrc to
niri's environment{} block: niri is systemd-started, so zsh exports
never reached niri-spawned GUI apps (verified via /proc/environ), only
terminal-launched ones — the app launcher included.
- packages: kvantum, kvantum-qt5, qt6ct + kvantum-theme-catppuccin-git (AUR)
- niri config.kdl: environment{} block; zshrc: GUI-toolkit vars removed
- qt6ct.conf (style=kvantum, icon_theme=Colloid), Kvantum/kvantum.kvconfig
(theme=catppuccin-mocha-lavender, the Lavender accent)
- CLAUDE.md + DECISIONS.md
Replace walker on Mod+Space with the quickshell launcher popout
(qs ipc call popout toggle launcher). walker stays installed and keeps
Super+C clipboard plus its run/calc modes (no longer keybound).
The popout used Exclusive layer-shell keyboard focus while open. On the overlay layer that sits above all normal windows, so a keyring/PSK/polkit prompt spawned by a popout action (e.g. selecting a VPN) mapped unfocused and stayed untypeable — focus was stuck on quickshell.
Switch to OnDemand. Verified on niri 26.04: a keybind-opened popout still grabs the keyboard on open (Escape/Tab/arrow navigation preserved) while an externally-mapped toplevel can steal focus. General fix — covers every popout and every prompt type, no per-action handler.
Its tray icon is redundant next to the quickshell network widget, but
nm-applet is the session's NM secret agent: agent-owned VPN passwords
(keyring) are delivered — and saved on GUI import — only through it.
Documents the rejected alternatives (indicator flag, tray filter,
system-owned secrets, standalone agents) so this isn't re-litigated.
The bar icon only knew off/no-connection/signal strength: an NM (re)connect
read as "no connection", an active VPN was invisible, and a wired-only
machine showed a dead wifi glyph.
- Connecting: cycle the strength ramp (nm-applet style) while the wifi
device is in ConnectionState.Connecting (covers reconnects too)
- VPN: swap to MDI wifi-strength-N-lock glyphs; wired+VPN uses
security-network (MDI has no ethernet-lock); tooltip lists active VPNs
- Wired: ethernet glyph, ranked above wifi-off so ethernet-only machines
show their connection
VPN state moves from NetworkPopout (2s poll while shown) into a shared
NetworkService singleton — the indicator needs it permanently, and an
always-on poll is wasteful. Event-driven via a long-running `nmcli monitor`
(300ms debounce, events burst) with a 60s fallback poll. Rationale:
DECISIONS.md (2026-07-08).
New Launcher bar widget (first in the left cluster) opening a LauncherPopout
over DesktopEntries — search field + keyboard-navigable app list, launches via
entry.execute(). Icon-click only for now; Mod+Space stays on walker (drun-only
scope, walker keeps dmenu/run/calc).
Placing a popout in the left cluster forced the shared host anchor to become
side-aware: left-cluster triggers left-align (body grows rightward), right
cluster keeps the original right-align — otherwise a left-anchored popout
renders off-screen. The anchor rect now carries the trigger's left edge + width
(PopoutState.openByName, Tray).
Clickable bar widgets gain a hover affordance via opacity (0.8), not color:
the icon color already encodes status (muted/off/active/critical), so a
color-based hover would clobber that signal. Launcher keeps an accent hover as
it carries no status color.
Rework the minimal wifi-list popout into a full network panel:
- compact current-connection line (SSID + signal, or Wired/off state)
- VPN section toggling connections via nmcli (Networking API has no VPN state)
- collapsible available-networks list; scanner now gated on shown AND expanded
- collapsible IP details (address/gateway/DNS) via nmcli device show
- nm-connection-editor launcher
Add a shared Divider component for popout section rules and register it in qmldir.
Rebind Super+N from moonarch-vpn to the quickshell network popout toggle.
Popouts can now be opened by niri keybind and driven entirely without a
mouse — the whole point of the keybinds.
- keybind: PopoutRouter singleton + IpcHandler (target "popout") route
toggle/open/close to the focused monitor's PopoutState via
Niri.activeOutput; each widget registers its popout by name and its
click handler toggles by name. Mod+A now opens the audio popout
(replacing walker's audio menu).
- navigation: shared controls (Toggle/ListRow/VolumeSlider) and the new
IconButton are focusable (activeFocusOnTab, focus ring, Space/Enter,
slider Left/Right); PopoutPanel focuses the first control on open and
maps Up/Down onto Qt's Tab chain; an open popout grabs the keyboard.
- ad-hoc glyph buttons (audio mute, media transport, notif dismiss, BT
forget) folded into IconButton; destructive actions turn red.
Tray stays mouse-only (per-icon menu, not keybind-addressable).
Each bar owns a per-screen PopoutState, so on multi-monitor a popout
could stay open on one screen while another opened on the next — and
per-screen `shown` drives global services (bluetooth discovery, wifi
scan), so closing one screen's popout could kill the service under the
other's still-open popout.
A small PopoutBus singleton holds an `owner` token: open() claims it,
and any state that loses ownership folds up. Per-screen state (and thus
per-screen anchoring/rendering) stays; only cross-screen exclusivity is
added.
The composition + composable-popouts refactor (450580a, 89988c1) left
three rough edges:
- 6 popouts still read the removed PopoutState.currentName in their
`shown` gate (undefined === "x" → permanently false), so wifi scan,
bluetooth discovery, threshold reread, governor refresh, toast-silence
and tray drill-down reset never fired again. Only the current component
is ever instantiated, so `hasCurrent` alone is the correct gate.
- ModuleBox stopped self-hiding when empty: the Battery box on a desktop
(no battery) and an empty tray rendered a bare rounded pill. Gate the
shared container on `inner.implicitWidth > 0` so the fix covers both.
- CLAUDE.md customization example missed `import Quickshell` (unloadable
as written) and called a Row's rejected centerIn anchor "harmless"
(Row warns at runtime and ignores it).
The composition refactor left Popouts.qml a hardcoded switch, so a
user-composed widget could join the bar but couldn't open a popout in
the shared animated overlay — second-class, and a widget without a
popout is useless for most cases. quickshell's native PopupWindow would
be composable but drops the unfold/morph animation; keep the animation,
make the registry composable instead (caelestia's central Panels.qml
registry was considered and rejected — it fits a few author-owned edge
drawers, not many user-composable per-widget popouts).
PopoutState.open() now takes a Component instead of a name; each widget
carries its popout inline and hands it to the shared host, which renders
whatever is current. Popouts.qml is gone — no central registry, a user
widget brings its own popout and it renders in the same morphing frame.
Verified: qmllint clean, and an end-to-end config where a user widget
opens its own popout on startup instantiates with no errors or binding
loops. Visual/animation not machine-verifiable.
The user-extension layer (moonarch.json + UserConfig singleton +
per-widget enabled() gates + UserWidgets slot) was a bespoke graft.
quickshell has no native settings/toggle/override concept — a config
is composable QML, and $XDG_CONFIG_HOME wins over $XDG_CONFIG_DIRS
(verified in the docs and src/launch/command.cpp).
Ship the bar as a named config (/etc/xdg/quickshell/moonarch/, launched
`-c moonarch`) of importable components; the composition (which widgets,
in what order) lives in shell.qml. Users customize by copying shell.qml
to ~/.config/quickshell/moonarch/ (wins by XDG precedence) and editing
it — reorder, add, and replace all fall out of plain composition, which
also retires the deferred reorder/user-popout/override items.
Also fixes the ModuleBox childrenRect binding loop (Item -> Row).
BREAKING CHANGE: ~/.config/quickshell/moonarch.json and UserWidgets.qml
are no longer read; per-widget toggles are gone in favor of composition.
Verified: qmllint clean (only quickshell C++ type-resolution artifacts),
quickshell loads the default config and a cross-dir composed config with
no binding loops or errors.
The quickshell pilot proved out in daily use; promote it from manual
pilot to the session default. Additive — no hard deletes: Waybar and
swaync stay installed as reserves.
- niri spawns `quickshell` instead of `moonarch-waybar`; Alt+W toggles
quickshell ⇄ Waybar for the rare fallback
- swaync's spawn-at-startup is commented out so it releases
org.freedesktop.Notifications for quickshell's own server (verified:
quickshell owns the name; flip the comment to return to swaync)
- quickshell added to packages/official.txt (config ships automatically
via moonarch-git's defaults/xdg install loop)
Remaining: push → CI rebuilds moonarch-git → pacman -Syu; niri changes
take effect on relogin.
quickshell has no native config merge, so the system bar could only be
adopted wholesale (fork it, lose system updates). This adds an in-repo
extension path: users toggle widgets and add their own without forking.
- UserConfig singleton reads ~/.config/quickshell/moonarch.json
({"widgets":{"<key>":false}}); absent/broken = all on, live-reloaded
- qmldir (generated) exposes singletons + components so user QML can
import "file:///etc/xdg/quickshell" and reuse Theme/ModuleBox/…
- Bar gates its 16 widgets on UserConfig.enabled(key) and loads an
optional UserWidgets.qml into a right-cluster slot
- verified against quickshell 0.3.0: toggles hide widgets, user widget
themes correctly, empty/broken config keeps everything on, no binding loops
Pilot only — qmldir must ship when the pilot is packaged. See DECISIONS.md.
It polled GameMode's ClientCount via a busctl fork every 5s, running
regardless of visibility — 24/7 on every machine, worst of all mid-game,
for a value that is 0 almost all the time. Event-driven (persistent
busctl monitor on GameRegistered/GameUnregistered) would fix the waste
but isn't worth it for an indicator only shown while a fullscreen game
runs — when the bar usually isn't visible anyway. Status stays available
via `gamemoded -s`. See DECISIONS.md.
Firefox drops mpris:length on pause (seek slider jumped to 0) and exposes
artUrl only intermittently for YouTube (popout showed no cover); playerctld's
proxy player mirrors or lingers as a titleless ghost in the widget.
- popout caches the last known length per track so the seek slider stays put
- popout derives a YouTube thumbnail from the track URL as an artUrl fallback,
with a music-glyph placeholder when neither is available
- widget skips the playerctld proxy and requires a real trackTitle, so a
metadata-less browser tab no longer leaks the app name into the bar
Network and Bluetooth showed the connected check on the right, while
Audio and CpuGov use a leading check column. Move both to the same
left-aligned 12px marker slot so every popout has one bundled left edge.
Bluetooth keeps connecting…/pairing… in the right cluster — those are
transient status text, not the connected bool the marker represents.
Indicator and popout tracked governor state separately, so switching the
profile in the popout left the bar icon/tooltip stale. Add CpuGovService
(singleton, like NightlightService) as the single source of the
auto-cpufreq force profile; both bind to it, so a switch — or an
out-of-band walker change — refreshes both at once.
Indicator now reads the force profile (auto-cpufreq --get-state) instead
of scaling_governor, which flips with load under "default" and mismarked
Auto. Drops the dead "balanced" case; "default" maps to the Auto glyph.
Brings the bar pilot to Waybar parity (minus taskbar/power). New indicators
and popouts: nightlight, cpu governor, gamemode, updates, privacy, backlight,
and mpris media controls.
Nightlight is reimplemented natively — quickshell runs wlsunset as a child
Process (toggle = running, temperature via restart, state persisted to an XDG
state file), replacing the fragile systemd-service-as-toggle. Privacy detects
mic/screenshare via active PipeWire links (not idle stream presence) to avoid
false positives from the always-on rnnoise input. cpugov/updates reuse the
existing moonarch helper scripts for their privileged/cached logic.
Also: PopoutPanel.panelWidth is now per-popout overridable, VolumeSlider gained
a release signal (apply-on-release), and the right cluster is regrouped by
function (media, tray, alerts, connectivity, output, modes, battery).
Still a pilot: not deployed, packaged, or niri-spawned.
ExecStartPost signalled Waybar via `pkill -RTMIN+11 waybar`; with no Waybar
running (e.g. a quickshell-only session) pkill exits 1, which failed the unit
and — via Restart=on-failure — spun wlsunset in a ~3s restart loop that
flickered the screen and could not be switched off (stuck "activating").
Prefix the ExecStartPost with `-` so a missing Waybar is non-fatal. The
refresh signal still fires when Waybar is present.
Exploratory step toward consolidating the shell stack onto quickshell/QML
— one toolkit and one Catppuccin theme instead of Waybar plus separate
daemons. Runs manually via `quickshell -p`, alongside the still-deployed
Waybar; deliberately kept out of the deploy path (not niri-spawned, not
packaged, not in the package lists) until daily-drive acceptance.
Includes: Catppuccin Theme singleton, Niri IPC service, shared popout
framework, bar widgets (clock, workspaces, window title, tray drill-down,
network/bluetooth/audio/battery incl. conservation toggle, idle inhibitor),
themed tooltips, and a NotificationServer-based daemon (toasts + center +
DND + IPC). The notification daemon cannot coexist with swaync (single bus
owner), so swaync stays the deployed daemon; quickshell's is opt-in.
Rationale and tradeoffs recorded in DECISIONS.md.
stasis ignores browser audio (pactl, browser-excluded), so windowed/muted browser video let the screen sleep. Add wayland-pipewire-idle-inhibit (AUR + user service) holding a Wayland idle-inhibitor while audio plays. Enabled on fresh installs and checked by moonarch-doctor.
Add /etc/xdg-desktop-portal/niri-portals.conf with Inhibit=none. The gtk
portal reports Inhibit success even though nothing implements it under Niri,
so Firefox/Waterfox skips the native Wayland idle-inhibit. With no backend the
browser falls back to zwp_idle_inhibit, which Niri honors.
monitor_media detects media via pactl sink-inputs and excludes browser
audio by design; it does not catch windowed browser video. ignore_remote_media
only affects remote players (Spotify-remote, Chromecast).
Nerd Fonts renamed "Ubuntu" -> "UbuntuSans"; Waybar's dead family name token-matched to Hack. Correct the explicit name and ship owned conf.d defaults mapping the generic families to the moonarch fonts.
- waybar/style.css: "Ubuntu Nerd Font" -> "UbuntuSans Nerd Font"
- conf.d/65-moonarch-fonts.conf: sans-serif/monospace, binding="strong" (weak prefer ranks behind the generic fallback)
- document fontconfig defaults in CLAUDE.md and DECISIONS.md
Coordinated fix with moonarch-pkgbuilds: post-install.sh enabled
wlsunset by default, while the PKGBUILD shipped a global-scope
WantedBy symlink. Together that made the toggle's user-scope disable
a no-op — filter persisted across reboots regardless of user intent.
Removing wlsunset from USER_SERVICES makes "off" the install default;
the toggle now works in user scope only, where disable can take effect.
The wheel-write-via-udev approach for charge_control_end_threshold has
been broken since 2026-04-08: the audit-remediation commit added
ACTION=="add" to the rule, but the threshold attribute doesn't exist
yet at the add event on Lenovo, so chmod fails silently and permissions
are never set. moonarch-batsaver-toggle has been returning Permission
denied since.
Replace the udev-rule approach with a pkexec helper:
defaults/bin/moonarch-batsaver-apply privileged: validate + write
defaults/bin/moonarch-batsaver-toggle user: read sysfs, dispatch via pkexec
defaults/bin/moonarch-batsaver-restore boot-time root restore (extracted
from inline ExecStart for clarity)
Default Standard-pkexec prompt — password cached per session for the
~5min auth window; no polkit no-password rule, no privilege escalation
surface from misvalidated input. Same pattern Battery-Health-Charging
GNOME extension uses.
The boot-time restore service now skips the kernel write when the
sysfs value already matches the saved state (Lenovo drivers reject
same-value writes with EINVAL).
DECISIONS.md documents the failure analysis and trade-offs.
CLAUDE.md updated to describe the new flow.
moonarch-doctor: udev-effectiveness check removed.
Workflow had no path filter — every push to main fired the pkgver-bump
which in turn triggered the heavy build-and-publish pipeline in
moonarch-pkgbuilds, even for changes that the moonarch-git PKGBUILD
does not package: README/DECISIONS edits, post-install.sh, lib.sh,
or workflow tweaks themselves.
Restrict the trigger to defaults/, packages/, and the two scripts
that PKGBUILD actually installs (moonarch-update, moonarch-doctor).
Comment lists explicitly what the filter excludes so the next reader
doesn't have to reverse-engineer it.
Earlier ClaudeCode sessions had wired a `~/.zshrc.d/*.zsh` snippet loop
plus a `~/.zshrc.local` fallback into defaults/shell/zshrc and made
post-install.sh create the directory unconditionally — neither is a zsh
convention nor documented anywhere. Remove both, simplify post-install
to write only `source /etc/zsh/zshrc.moonarch`, drop stale rustup
next-step hint, drop dead `confirm()` in lib.sh (orphan since
transform.sh deletion 2026-04-21).
moonarch-doctor: replace useless existence checks (zshrc.moonarch,
/usr/share/moonarch/) with real signal. User-service and helper-script
lists now derive from `pacman -Qql moonarch-git` (drift-proof) plus an
explicit list of post-install-enabled externals (currently `stasis`).
New udev-effectiveness check for charge_control_end_threshold —
verifies group=wheel + group-writable, surfaces broken rules instead
of staying silent.
Translate two German ABOUTME comments (moonarch-waybar-cpugov,
moonarch-waybar-gpustat) to English for consistency.
Newer nmcli no longer parses '--' as end-of-options for 'connection up',
it treats it as the connection name and fails with "Unbekannte
Verbindung »--«". The 'id' keyword is the canonical way to mark the
following argument as the connection name.
Browsers only raise org.freedesktop.ScreenSaver.Inhibit during fullscreen
playback; a windowed YouTube tab sent no inhibit, so stasis ran the full
idle plan to suspend despite active video. Letting browser MPRIS count
as a media player closes the gap without the wake-lock hacks.
See DECISIONS.md (2026-04-24).
nevaforget