Roadmap

MamboDot should reproduce intentional workstation configuration without treating volatile application state as configuration. Safe deployment, session environment, displays, the active AGS shell, post-cutover stabilization, reviewed workstation coverage, and user-tool environment hardening are implemented.

Configuration ownership

Use GNU Stow for portable, user-owned text configuration:

Coverage now includes reviewed Arch/AUR/Flatpak and enabled-service manifests, a read-only machine doctor with bounded managed-dotfile drift checks, Git identity and defaults, every installed Code OSS extension ID, stable Dolphin, KDE, FeatherPad, qimgv, and Input Remapper leaf settings, Fcitx5 preferences, Feh launcher visibility, ROG Control Center shell-ownership preferences, and the FA507XV SDDM/Fcitx/PAM/Polkit host policy. Browser and Electron profiles, Bitwarden vault state, credentials, histories, learned input data, generated daemon state, and mixed runtime preference files remain local. Additional application settings should be added only when a stable leaf file has a clear owner and does not dirty the repository during ordinary use.

AGS desktop shell

The active shell uses the already-installed AGS 3, Astal, GTK4, and Gio stack without another launcher framework:

• A hotplug-aware 40-pixel bar is created for each monitor and shows its clickable ten-workspace block, focused title, clock, process-owned idle-inhibitor and status glyphs, tray, network, audio, and battery state without hardware polling scripts. Newly joined outputs initialize on the first workspace in their block, background application urgency remains visible on the matching workspace button until it is visited, and workspace buttons cannot retain a false hover colour through GTK focus.

• A keyboard-first launcher provides Apps, Run, Windows, Power, and binary-safe Clipboard modes, follows the focused monitor while dimming every output, accepts validated AGS requests, switches modes with Alt-Shift-1 through Alt-Shift-5, exposes complete app and 5,000-entry Cliphist result sets through a virtualized scrolling list with native keyboard selection, refreshes installed applications on open, supports dedicated-GPU application launch, focuses mapped Hyprland clients, executes commands without a shell, and confirms disruptive power actions.

• A focused-monitor keybind sheet renders the maintained keybind documentation directly, so the overlay adds no second shortcut registry.

• Astal owns notification delivery independently of AGS restarts. AGS renders square top-right popups with actions, applies do-not-disturb in the frontend, and retains bounded process-local history without persisting notification bodies.

• The interface follows MamboSite's dark semantic palette, MamboFont-first typography, opaque bar groups, square controls, strong two-pixel structure, distinct sidebar accents, and short eased state transitions.

The workspace buttons and Windows launcher mode deliberately send Hyprland's current Lua hl.dsp.focus(...) expressions. Astal's convenience focus methods still emit legacy dispatcher strings that Lua-configured Hyprland 0.55 rejects.

The sidebars run with the active shell:

• The left overlay uses a dense two-column 1080p layout for battery health/rate, CPU policy and load, CPU/iGPU/dGPU temperatures and utilization, active-dGPU VRAM and power, fan RPM and curve ownership, memory, NVMe read/write rate, and storage/DIMM temperatures. It controls persistent 60/80/full charge limits, firmware thermal profiles, confirmed graphics modes, display and keyboard brightness, and panel overdrive; full charging is the current default, while event-driven low-battery and rapid-AC-cycle warnings remain active outside the panel. Full fan-curve editing opens ROG Control Center. Raw PWM, CPU-governor, and TDP writes stay out of AGS. Brightness writes target the FA507XV backlight through brightnessctl's native systemd-logind path, without a new host permission.

• The right overlay exposes Wi-Fi, Bluetooth, audio, Astal do-not-disturb, active notifications and history, a native calendar, and today's read-only schedule. Native NetworkManager, Blueman, PulseAudio, and Obsidian applications remain the advanced settings surfaces.

• Both sidebars follow the focused monitor, slide through Hyprland's native layer animation, exclude one another and the launcher, close on Escape or outside click, and poll only while visible.

The schedule reader resolves a local daily note such as Periodic/2026-09-18-W38-D5.md, tolerates legacy padded ISO-week filenames, reads only the exact ## Schedule section, and accepts bullets shaped as - HH:mm - HH:mm event. Periodic Notes and the weekly generator both use the unpadded W format. The reader does not edit or index the vault.

After propagating the session environment, Hyprland starts one Stow-managed systemd user target. It supervises Astal, AGS, Fcitx5, and both Cliphist watchers, while every shell keybinding targets AGS. The former Waybar, Rofi, and Mako packages and configuration were retired after the active shell's daily-use soak and diagnosis of the latest long resume; a physical post-fix hibernate remains an explicit manual check.

Delivery phases

1. Foundation — implemented: guarded Stow link/unlink commands, no adoption, focused deployment tests, safer Hyprland reload behavior, native helper notifications, corrected workspace interchange, and monitor-origin geometry.

2. Session environment — implemented: use the standard SDDM/Hyprland login path, propagate its environment once to D-Bus and systemd, keep session identity out of Zsh, remove the fake KDE session, supervise the packaged Polkit agent through its user service, and pass the startup Hyprlock password to GNOME Keyring through explicit FA507XV policy.

3. Displays — implemented: use Hyprland's catch-all preferred-mode, automatic-placement rule for current and hot-plugged outputs, apply one Hyprpaper fallback to every output, and size floating-window helpers from the active monitor instead of a fixed resolution.

4. AGS core — implemented: add a Stow-managed, hotplug-aware per-monitor bar and focused-monitor Apps/Run/Windows/Power launcher with a validated request interface; bundle-check and live-test them before session activation.

5. Sidebars — implemented: add focused-monitor left laptop controls and a right quick-control, calendar, notification-history, and Obsidian day-planner overlay with visibility-scoped polling and native layer animations.

6. Cutover — implemented: move notification ownership to Astal, add binary-safe Clipboard mode, switch startup and keybindings to AGS, validate the full shell under a guarded live preview, and retain the old shell temporarily during the daily-use soak.

7. Shell stabilization — implemented: make every bar group opaque, distinguish both sidebar controls, launch desktop applications with the GJS-compatible empty file list, and move clickable workspace and window focus to Hyprland's Lua dispatcher syntax.

8. Coverage — implemented: add reviewed package/service manifests, a read-only machine doctor, and only the stable Code OSS, Dolphin, KDE, Fcitx5, XDG, and host settings that survive the ownership rules above.

9. Environment and tooling — implemented: give Hyprland applications and every Zsh the same deduplicated user-tool path, propagate it to D-Bus and systemd, and make Code OSS extension synchronization fail visibly instead of hiding query or installation errors.

10. Keybind reference — implemented: add a square AGS overlay on SUPER / that renders the maintained keybind tables, closes with Escape or an outside click, and remains mutually exclusive with the launcher and sidebars.

11. Power and idle controls — implemented: verify all seven fixed Power actions and host prerequisites, clear GRUB's one-shot Windows entry if reboot fails, keep failures in Power mode, and expose visible idle inhibition to every AGS bar without stopping Hypridle.

12. Shell density and hardware detail — implemented: enlarge bar text and glyphs without changing its 40-pixel reservation, dim all active outputs behind the focused launcher, move mode shortcuts to Alt-Shift, and replace the laptop stack with a live two-column dashboard and safe supported ASUS controls.

13. Deep launcher lists — implemented: show and keyboard-navigate the complete refreshed desktop-application list, search every retained clipboard entry, virtualize the shared scrolling result view, and raise native Cliphist retention to 5,000 entries without adding a second history store.

14. Git coverage — implemented: Stow the stable global identity, default branch, and helper selection while keeping credential payloads, GitHub authentication, SSH keys, and repository-local settings outside MamboDot.

15. Power-policy ownership — implemented: disable the conflicting auto-cpufreq service, keep asusd as the sole platform-profile and energy-preference owner, and verify that Quiet remains at power after the former writer's update interval.

16. Session supervision — implemented: move AGS, Astal notification ownership, Fcitx5, and both 5,000-entry Cliphist watchers into Stow-managed systemd user units, bracket one shell target with Hyprland's propagated startup and shutdown events, and route refresh and recovery through that target.

17. Runtime containment — implemented: launch long-lived AGS children in transient app.slice scopes so shell restarts do not terminate or account them, and discard Astal daemon stdout so notification bodies do not enter the journal while stderr remains available for diagnosis.

18. Application leaf coverage — implemented: track ROG Control Center's foreground and tray ownership preferences plus Feh's visible desktop entry while leaving generated Aura, device, and session state local.

19. Hibernate-resume reliability — implemented: lock and stop AGS before sleep, start a fresh supervised instance after resume, retry clean early exits, default idle inhibition to on, and refresh the surviving Hyprlock clock without replacing the secure lock client.

20. Workspace awareness — implemented: initialize each newly added monitor on the first workspace in its ten-workspace block without stealing focus, and mark application urgency on background workspace buttons until that workspace is visited.

21. FeatherPad coverage — implemented: Stow the stable editor preferences while keeping recent-file persistence disabled and guarding the leaf against session-history capture.

22. Final application leaves — implemented: track the hardware-specific NordicMouse Sideway mapping and qimgv colour theme while excluding generated Input Remapper files and qimgv version, window, and cache state.

23. Host power ownership — implemented: remove the disabled auto-cpufreq rollback package after a twenty-day asusd-only soak, without claiming an unmeasured battery or performance improvement; record unsupported thermald and the stale TLP enablement link as explicit privileged host cleanup rather than hiding them from the operator.

24. Fallback retirement — implemented: guard Astal's nullable urgency event observed after resume, remove the linked Waybar/Rofi/Mako configuration and packages after the daily-use soak, and keep AGS/Astal as the single supervised shell and notification path; the next physical hibernate validates the new guard in situ.

25. Shell, battery, and wireless reliability — implemented: prevent workspace buttons from retaining focus colour, make the idle indicator follow a directly owned logind inhibitor descriptor and retry failed acquisition, add event-driven low-battery and rapid AC-cycle warnings, make full charging the persistent default option, and disable Wi-Fi power saving on the RTL8852BE host without tracking connection credentials.

26. Bitwarden system authentication — implemented: install Bitwarden's official Flatpak Polkit action, require a release containing the corrected Flatpak Polkit subject, add Howdy with password fallback to the shared Polkit PAM service, restrict the sandboxed authentication helper to Video4Linux devices, and close Bitwarden before hibernation rather than weakening memfd_secret protection on unencrypted swap.

27. Session authentication and fullscreen compatibility — implemented: ignore empty wake submissions and add Howdy with password fallback to Hyprlock, make maximized workspaces edge-to-edge for IME-safe Pinyin and Mozc input, keep Obsidian in that client-fullscreen state, and unmap the AGS bar whenever the active workspace is fullscreen, including when AGS starts after hibernation.

28. Post-upgrade session compatibility — implemented: migrate the Hyprland group-lock binding to its table API, make the main fullscreen binding IME-safe, keep Fcitx5 supervised across output loss, guard AGS against the transient null workspace exposed by output hot-plug, and document rebuilding Howdy's native Python dependency after a shared-library ABI change.

29. Launcher and secure hibernation compatibility — implemented: defer the modifier-only AGS launcher until SUPER is released, retain ordinary SUPER chords, verify the Bitwarden Polkit/Howdy route separately from its required first process unlock, and wait for Bitwarden's memfd_secret holder to release before hibernating.

No broad repository delivery phase remains. Linux Bitwarden still requires a master-password or PIN unlock after every application process start; Howdy applies only to later locks in that process. Two optional root cleanups remain on this host: remove unsupported thermald, and unlink the inert TLP enablement entry before any future TLP installation. Future coverage stays incremental: add only stable, credential-free leaves that ordinary application use does not rewrite. Never add auto-cpufreq, power-profiles-daemon, or TLP alongside the selected asusd owner. See the ASUS Linux Arch guide before changing ownership.

← Back