Fix Hermes Desktop keyring detection on Hyprland

Default Electron to the gnome-libsecret password store so Hermes can use GNOME Keyring for secure remote tokens. Declare libsecret as a runtime dependency.

pkgbuilds/hermes-desktop/PKGBUILD

@@ -19,7 +19,7 @@
 
 pkgname=hermes-desktop
 pkgver=2026.8.18
-pkgrel=1
+pkgrel=2
 pkgdesc='Native desktop shell for Hermes Agent'
 arch=('x86_64')
 url='https://github.com/NousResearch/hermes-agent'
@@ -43,6 +43,7 @@ depends=(
   'libdrm'
   'libglvnd'
   'libnotify'
+  'libsecret'
   'libx11'
   'libxcb'
   'libxcomposite'
@@ -81,7 +82,7 @@ source=("${pkgname}-${pkgver}.tar.gz::${url}/archive/refs/tags/v${pkgver}.tar.gz
         'hermes-desktop.desktop'
         'hermes-desktop.png')
 sha256sums=('1e3d39d3638ec15fa9d31af262568a953e9272090deb1c50c44cd401175f5b80'
-            '6c6b59bd168d6ae34b7e9fcfcabc26ced8bccdd837bc2d09e687839ded6a9452'
+            'f5833b969ce451aadee9f08d92db55cce3c7c9213175080590bf37444854d676'
             '3ef685bfcf366776b025d26c37d32854d8d4aa2023b2bd07c8e08b001ef1e8c4'
             'd60d164e24fdcf6532133b8ea43c77a201e4b9e9dbc396187b58d51d8590ef52')
 

pkgbuilds/hermes-desktop/hermes-desktop.sh

@@ -10,6 +10,12 @@ set -euo pipefail
 # arrangement upstream ships, and the only one that starts.
 export HERMES_DESKTOP_IGNORE_EXISTING=1
 
+# Chromium cannot reliably infer the Secret Service password-store backend
+# from a Hyprland session, even when GNOME Keyring is already providing it.
+# Keep an explicit user choice (such as KWallet), otherwise select the
+# libsecret backend that this package depends on.
+export HERMES_DESKTOP_PASSWORD_STORE="${HERMES_DESKTOP_PASSWORD_STORE:-gnome-libsecret}"
+
 # Reconcile every launch rather than trusting whatever installed us. A plain
 # `pacman -S hermes-desktop`, or an install interrupted partway, leaves any
 # Hermes the terminal agent had built still sitting there, and by then the