Sync config from arch

- hypr/apps.lua
- hypr/autostart.lua
- hypr/envs.lua
- hypr/hyprland.lua
- hypr/hyprsunset.conf
- hypr/input.lua
- hypr/looknfeel.lua
- hypr/omasettings.lua
- hypr/xdph.conf
- omarchy/branding/about.txt
- omarchy/branding/screensaver.txt
- omarchy/extensions/omarchy-menu.jsonc
- omarchy/hooks/battery-low.d/play-warning-sound.sample
- omarchy/hooks/font-set.d/show-font-notification.sample
- omarchy/hooks/post-boot.d/weather.sample
- omarchy/hooks/post-update.d/install-voxtype.hook
- omarchy/hooks/post-update.d/setup-agent.hook
- omarchy/hooks/post-update.d/setup-fingerprint.hook
- omarchy/hooks/post-update.d/show-update-notification.sample
- omarchy/hooks/pre-refresh-pacman.d/add-custom-repo.sample
- omarchy/hooks/theme-set.d/show-theme-notification.sample
- omarchy/shell.json
- omarchy/shell.toml
- omarchy/theme.name
- omarchy/themes/azure-glow/README.md
- omarchy/themes/azure-glow/alacritty.toml
- omarchy/themes/azure-glow/btop.theme
- omarchy/themes/azure-glow/hyprland.conf
- omarchy/themes/azure-glow/hyprlock.conf
- omarchy/themes/azure-glow/icons.theme
- … 269 more

plugins/omaplug/tests/security-regression-test.py

@@ -0,0 +1,40 @@
+#!/usr/bin/env python3
+"""Isolated filesystem regressions; never touches installed plugins."""
+import os
+from pathlib import Path
+import subprocess
+import tempfile
+import unittest
+
+ROOT = Path(__file__).resolve().parents[1]
+
+
+class StateSafety(unittest.TestCase):
+    def setUp(self):
+        self.tmp = tempfile.TemporaryDirectory(prefix="omaplug-security-")
+        self.addCleanup(self.tmp.cleanup)
+        self.path = Path(self.tmp.name)
+        self.env = dict(os.environ, XDG_RUNTIME_DIR=str(self.path))
+        (self.path / "omaplug").mkdir(mode=0o700)
+        (self.path / "plugins").mkdir()
+        self.victim = self.path / "victim"
+        self.victim.write_text("keep me")
+
+    def run_helper(self, *args):
+        return subprocess.run(args, env=self.env, capture_output=True, timeout=10)
+
+    def test_cache_symlink_never_truncates_target(self):
+        (self.path / "omaplug/auto-check.cache.tmp").symlink_to(self.victim)
+        self.run_helper("bash", str(ROOT / "auto-check-coordinator.sh"), str(self.path / "plugins"))
+        self.assertEqual(self.victim.read_text(), "keep me")
+
+    def test_update_status_symlink_is_rejected(self):
+        status = self.path / "update.status"
+        status.symlink_to(self.victim)
+        result = self.run_helper("bash", str(ROOT / "update-helper.sh"), str(status), "test", "invalid/id")
+        self.assertNotEqual(result.returncode, 0)
+        self.assertEqual(self.victim.read_text(), "keep me")
+
+
+if __name__ == "__main__":
+    unittest.main()