From 8afb18209511eb1b4faec367b002b2958e04fbac Mon Sep 17 00:00:00 2001
From: Stephen Chin <steveonjava@gmail.com>
Date: Sat, 2 May 2026 12:30:34 -0700
Subject: [PATCH] fix(hermesagent): shim handles hermes user invocation

runuser requires root. When the hermes user calls the shim directly
(e.g. via su - hermes), exec the binary directly instead.
---
 install/hermesagent-install.sh | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/install/hermesagent-install.sh b/install/hermesagent-install.sh
index 2aa66b41..9c4dcf12 100644
--- a/install/hermesagent-install.sh
+++ b/install/hermesagent-install.sh
@@ -120,7 +120,11 @@ msg_info "Creating Hermes Shim"
 cat <<'EOF' >/usr/bin/hermes
 #!/bin/bash
 cd /home/hermes
-exec runuser -u hermes -- /home/hermes/.local/bin/hermes "$@"
+if [[ "$(id -u)" -eq 0 ]]; then
+  exec runuser -u hermes -- /home/hermes/.local/bin/hermes "$@"
+else
+  exec /home/hermes/.local/bin/hermes "$@"
+fi
 EOF
 chmod +x /usr/bin/hermes
 msg_ok "Created Hermes Shim"