chutes-sign-in

Chutes Sign-In for Hermes [BETA]

Status: BETA only for dev-server verification. Live register → vendor → rotate was exercised on 2026-04-13 against a scratch Next.js App Router project. verify_siwc.py steps 1-3 are verified; step 4 still requires running the user's dev server and remains BETA. Shared scripts and references live in the Claude-plugin tree; this file is the Hermes entry point.

When to use this skill

A Hermes user wants to:

• Turn their Next.js App Router app into a Chutes OAuth relying party.
• Register a new OAuth app on Chutes and store its cid_ / csc_ safely.
• Vendor the upstream chutesai/Sign-in-with-Chutes Next.js package.
• Manage scopes (openid profile chutes:invoke default; account:read / billing:read opt-in).
• Rotate a client secret without leaking it.
• Understand PKCE, token introspection, and logout/revoke semantics.

If the user just wants to call Chutes inference as Hermes' model backend — without letting end-users sign in — that's the hub chutes-ai skill, not this one.

Walkthrough (Hermes-facing)

The full walkthrough and scripts live at plugins/chutes-ai/skills/chutes-sign-in/. Hermes users run the same scripts from the repo root:

# 1. Register the OAuth app
python plugins/chutes-ai/skills/chutes-sign-in/scripts/register_oauth_app.py \
  --name "My Hermes App" \
  --homepage-url https://myapp.example.com \
  --redirect-uri http://localhost:3000/api/auth/chutes/callback \
  --scope openid --scope profile --scope chutes:invoke \
  --profile oauth.my-app

# 2. Vendor the upstream Next.js package into the target app
python plugins/chutes-ai/skills/chutes-sign-in/scripts/install_siwc.py \
  --target /path/to/next-app --profile oauth.my-app

# 3. Verify
python plugins/chutes-ai/skills/chutes-sign-in/scripts/verify_siwc.py \
  --target /path/to/next-app --profile oauth.my-app

# 4. Rotate (when needed)
python plugins/chutes-ai/skills/chutes-sign-in/scripts/rotate_secret.py \
  --profile oauth.my-app