gitacc-switcher 1.1.0__tar.gz → 1.2.0__tar.gz

{gitacc_switcher-1.1.0/gitacc_switcher.egg-info → gitacc_switcher-1.2.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gitacc-switcher
-Version: 1.1.0
+Version: 1.2.0
 Summary: Git Account Switcher - Manage multiple Git SSH accounts easily
 Home-page: https://github.com/ktechhub/gitacc_switcher
 Author: ktechhub
@@ -46,6 +46,7 @@ A Python CLI tool to easily switch between multiple Git SSH accounts. Manage mul
 - Switch between accounts easily — one command, no fuss
 - Generate SSH keys automatically (rsa, ed25519, ecdsa, and more)
 - Optional passphrase support for SSH keys
+- Opt-in SSH commit signing per account
 - Colored terminal output with active account indicator
 - Pre-commit hook to prevent commits with the wrong account
 - Shell autocomplete for bash and zsh
@@ -87,7 +88,7 @@ gitacc verify                 # manual check
 
 ## Commands
 
-### `gitacc add [--type TYPE]`
+### `gitacc add [--type TYPE] [--sign]`
 
 Add a new Git account. Prompts for:
 - Account identifier (used in key filename and as a reference)
@@ -100,8 +101,15 @@ Available key types: `rsa` (default), `ed25519`, `ecdsa`, `ecdsa-sk`, `ed25519-s
 ```bash
 gitacc add
 gitacc add --type ed25519
+gitacc add --sign           # opt in to SSH commit signing for this account
 ```
 
+Pass `--sign` to opt this account into SSH commit signing. When you later `gitacc switch` to it,
+`user.signingkey` is set to the account's public key and `gpg.format=ssh` / `commit.gpgsign=true`
+are enabled (locally too, with `--local`), so every commit made under this identity is signed.
+Switching to an account without `--sign` clears any signing config left by a previous account.
+Toggle it later with `gitacc update <account> --sign` / `--no-sign`.
+
 ### `gitacc switch <account> [--local]` / `gitacc <account>`
 
 Switch to a registered account. Clears all keys from the SSH agent, loads only this account's key, and sets `git config --global user.name/email`.
@@ -139,7 +147,7 @@ gitacc remove mywork
 gitacc remove          # prompts for account name
 ```
 
-### `gitacc update <account> [--name NAME] [--email EMAIL]`
+### `gitacc update <account> [--name NAME] [--email EMAIL] [--sign | --no-sign]`
 
 Update the Git display name and/or email for an existing account. Prompts for any field not provided as a flag.
 
@@ -147,6 +155,8 @@ Update the Git display name and/or email for an existing account. Prompts for an
 gitacc update mywork --name "Jane Doe"
 gitacc update mywork --email "jane@newcompany.com"
 gitacc update mywork   # prompts for both
+gitacc update mywork --sign      # enable SSH commit signing for this account
+gitacc update mywork --no-sign   # disable it
 ```
 
 ### `gitacc init <account>`
@@ -213,6 +223,7 @@ gitacc --version
     email = jane@company.com
     private_key = /home/jane/.ssh/id_ed25519_mywork
     public_key = /home/jane/.ssh/id_ed25519_mywork.pub
+    sign = false
 ```
 
 ## Requirements

{gitacc_switcher-1.1.0 → gitacc_switcher-1.2.0}/README.md

@@ -13,6 +13,7 @@ A Python CLI tool to easily switch between multiple Git SSH accounts. Manage mul
 - Switch between accounts easily — one command, no fuss
 - Generate SSH keys automatically (rsa, ed25519, ecdsa, and more)
 - Optional passphrase support for SSH keys
+- Opt-in SSH commit signing per account
 - Colored terminal output with active account indicator
 - Pre-commit hook to prevent commits with the wrong account
 - Shell autocomplete for bash and zsh
@@ -54,7 +55,7 @@ gitacc verify                 # manual check
 
 ## Commands
 
-### `gitacc add [--type TYPE]`
+### `gitacc add [--type TYPE] [--sign]`
 
 Add a new Git account. Prompts for:
 - Account identifier (used in key filename and as a reference)
@@ -67,8 +68,15 @@ Available key types: `rsa` (default), `ed25519`, `ecdsa`, `ecdsa-sk`, `ed25519-s
 ```bash
 gitacc add
 gitacc add --type ed25519
+gitacc add --sign           # opt in to SSH commit signing for this account
 ```
 
+Pass `--sign` to opt this account into SSH commit signing. When you later `gitacc switch` to it,
+`user.signingkey` is set to the account's public key and `gpg.format=ssh` / `commit.gpgsign=true`
+are enabled (locally too, with `--local`), so every commit made under this identity is signed.
+Switching to an account without `--sign` clears any signing config left by a previous account.
+Toggle it later with `gitacc update <account> --sign` / `--no-sign`.
+
 ### `gitacc switch <account> [--local]` / `gitacc <account>`
 
 Switch to a registered account. Clears all keys from the SSH agent, loads only this account's key, and sets `git config --global user.name/email`.
@@ -106,7 +114,7 @@ gitacc remove mywork
 gitacc remove          # prompts for account name
 ```
 
-### `gitacc update <account> [--name NAME] [--email EMAIL]`
+### `gitacc update <account> [--name NAME] [--email EMAIL] [--sign | --no-sign]`
 
 Update the Git display name and/or email for an existing account. Prompts for any field not provided as a flag.
 
@@ -114,6 +122,8 @@ Update the Git display name and/or email for an existing account. Prompts for an
 gitacc update mywork --name "Jane Doe"
 gitacc update mywork --email "jane@newcompany.com"
 gitacc update mywork   # prompts for both
+gitacc update mywork --sign      # enable SSH commit signing for this account
+gitacc update mywork --no-sign   # disable it
 ```
 
 ### `gitacc init <account>`
@@ -180,6 +190,7 @@ gitacc --version
     email = jane@company.com
     private_key = /home/jane/.ssh/id_ed25519_mywork
     public_key = /home/jane/.ssh/id_ed25519_mywork.pub
+    sign = false
 ```
 
 ## Requirements

{gitacc_switcher-1.1.0 → gitacc_switcher-1.2.0}/gitacc_switcher/__init__.py

@@ -1,4 +1,4 @@
 """Git Account Switcher - Manage multiple Git SSH accounts easily."""
 
-__version__ = "1.1.0"
+__version__ = "1.2.0"
 __author__ = "ktechhub"

{gitacc_switcher-1.1.0 → gitacc_switcher-1.2.0}/gitacc_switcher/account_manager.py

@@ -18,11 +18,14 @@ class AccountManager:
         self.ssh_manager = SSHManager()
         self.hook_manager = HookManager()
 
-    def add_account(self, key_type: str = "rsa") -> bool:
+    def add_account(self, key_type: str = "rsa", sign: bool = False) -> bool:
         """Add a new Git account.
 
         Args:
             key_type: SSH key type (default: rsa)
+            sign: Opt-in to SSH commit signing with this account's key when
+                switched to (sets user.signingkey, gpg.format=ssh,
+                commit.gpgsign=true)
 
         Returns:
             True if successful, False otherwise
@@ -93,7 +96,7 @@ class AccountManager:
 
         # Add to .gitacc file
         success = self.config_manager.add_account(
-            account_name, git_name, email, private_key, public_key
+            account_name, git_name, email, private_key, public_key, sign=sign
         )
         if not success:
             echo_color("r", "Failed to save account info!")
@@ -233,6 +236,24 @@ class AccountManager:
             echo_color("r", "Failed to set Git config!")
             return False
 
+        # Apply (or clear) this account's SSH commit-signing preference
+        sign_enabled = str(account_info.get("sign", "false")).lower() == "true"
+        public_key = account_info.get("public_key")
+        if local:
+            if sign_enabled and public_key:
+                signing_success = self.config_manager.set_git_signing_config_local(
+                    public_key
+                )
+            else:
+                signing_success = self.config_manager.unset_git_signing_config_local()
+        else:
+            if sign_enabled and public_key:
+                signing_success = self.config_manager.set_git_signing_config(public_key)
+            else:
+                signing_success = self.config_manager.unset_git_signing_config()
+        if not signing_success:
+            echo_color("y", "Warning: Could not update commit-signing config.")
+
         scope = "this repository only" if local else "globally"
         echo_color(
             "g",
@@ -250,6 +271,7 @@ class AccountManager:
             self.ssh_manager.kill_ssh_agent()
 
         self.config_manager.unset_git_config()
+        self.config_manager.unset_git_signing_config()
         echo_color("g", "Logged out successfully!")
         return True
 
@@ -285,13 +307,16 @@ class AccountManager:
         account_name: str,
         new_git_name: Optional[str] = None,
         new_email: Optional[str] = None,
+        new_sign: Optional[bool] = None,
     ) -> bool:
-        """Update the Git name and/or email for an existing account.
+        """Update the Git name, email, and/or commit-signing preference for an
+        existing account.
 
         Args:
             account_name: Account identifier to update
             new_git_name: New Git name (if None, will prompt)
             new_email: New email (if None, will prompt)
+            new_sign: New commit-signing preference (if None, leave unchanged)
 
         Returns:
             True if successful, False otherwise
@@ -340,6 +365,18 @@ class AccountManager:
             )
             changed = True
 
+        if new_sign is not None:
+            current_sign = str(account_info.get("sign", "false")).lower() == "true"
+            if new_sign != current_sign:
+                if not self.config_manager.update_account_field(
+                    account_name, "sign", "true" if new_sign else "false"
+                ):
+                    echo_color("r", "Failed to update commit-signing setting!")
+                    return False
+                state = "enabled" if new_sign else "disabled"
+                echo_color("g", f'Commit signing {state} for "{account_name}"')
+                changed = True
+
         if not changed:
             echo_color("y", "No changes made.")
 

{gitacc_switcher-1.1.0 → gitacc_switcher-1.2.0}/gitacc_switcher/cli.py

@@ -67,6 +67,7 @@ Examples:
   gitacc add                    Add a new Git account
   gitacc add --type ed25519     Add account with specific SSH key type
                                 Available types: {key_types}
+  gitacc add --sign             Add account with SSH commit signing enabled
   gitacc switch myaccount       Switch to an account
   gitacc switch myaccount -l    Switch to an account for this repo only
   gitacc myaccount              Switch to an account (short form)
@@ -93,6 +94,13 @@ Examples:
             choices=get_ssh_key_types(),
             help="SSH key type (default: rsa). Available: dsa, ecdsa, ecdsa-sk, ed25519, ed25519-sk, rsa",
         )
+        parser.add_argument(
+            "--sign",
+            dest="sign",
+            action="store_true",
+            help="Sign commits with this account's SSH key when switched to "
+            "(sets user.signingkey, gpg.format=ssh, commit.gpgsign=true)",
+        )
         parser.set_defaults(func=self._handle_add)
 
     def _add_remove_command(self, subparsers: argparse._SubParsersAction) -> None:
@@ -195,6 +203,22 @@ Examples:
             dest="new_email",
             help="New email address (will prompt if not provided)",
         )
+        sign_group = parser.add_mutually_exclusive_group()
+        sign_group.add_argument(
+            "--sign",
+            dest="sign",
+            action="store_const",
+            const=True,
+            default=None,
+            help="Enable SSH commit signing for this account",
+        )
+        sign_group.add_argument(
+            "--no-sign",
+            dest="sign",
+            action="store_const",
+            const=False,
+            help="Disable SSH commit signing for this account",
+        )
         if argcomplete:
             account_arg.completer = lambda **kwargs: get_account_names()
         parser.set_defaults(func=self._handle_update)
@@ -318,7 +342,9 @@ Examples:
 
     def _handle_add(self, args: argparse.Namespace) -> int:
         """Handle the 'add' command."""
-        success = self.account_manager.add_account(key_type=args.key_type)
+        success = self.account_manager.add_account(
+            key_type=args.key_type, sign=getattr(args, "sign", False)
+        )
         return 0 if success else 1
 
     def _handle_remove(self, args: argparse.Namespace) -> int:
@@ -383,7 +409,10 @@ Examples:
     def _handle_update(self, args: argparse.Namespace) -> int:
         """Handle the 'update' command."""
         success = self.account_manager.update_account(
-            args.account_name, args.new_git_name, args.new_email
+            args.account_name,
+            args.new_git_name,
+            args.new_email,
+            new_sign=getattr(args, "sign", None),
         )
         return 0 if success else 1
 

{gitacc_switcher-1.1.0 → gitacc_switcher-1.2.0}/gitacc_switcher/config_manager.py

@@ -93,6 +93,122 @@ class ConfigManager:
         except subprocess.CalledProcessError:
             return False
 
+    def set_git_signing_config(self, signing_key: str) -> bool:
+        """Set Git global SSH commit signing config using an account's SSH key.
+
+        Args:
+            signing_key: Path to the SSH public key to sign commits with
+
+        Returns:
+            True if successful, False otherwise
+        """
+        try:
+            subprocess.run(
+                ["git", "config", "--global", "user.signingkey", signing_key],
+                check=True,
+                capture_output=True,
+            )
+            subprocess.run(
+                ["git", "config", "--global", "gpg.format", "ssh"],
+                check=True,
+                capture_output=True,
+            )
+            subprocess.run(
+                ["git", "config", "--global", "commit.gpgsign", "true"],
+                check=True,
+                capture_output=True,
+            )
+            return True
+        except subprocess.CalledProcessError:
+            return False
+
+    def unset_git_signing_config(self) -> bool:
+        """Unset Git global SSH commit signing config.
+
+        Returns:
+            True if successful, False otherwise
+        """
+        try:
+            subprocess.run(
+                ["git", "config", "--global", "--unset", "user.signingkey"],
+                capture_output=True,
+            )
+            subprocess.run(
+                ["git", "config", "--global", "--unset", "gpg.format"],
+                capture_output=True,
+            )
+            subprocess.run(
+                ["git", "config", "--global", "--unset", "commit.gpgsign"],
+                capture_output=True,
+            )
+            return True
+        except subprocess.CalledProcessError:
+            return False
+
+    def set_git_signing_config_local(
+        self, signing_key: str, repo_path: Optional[Path] = None
+    ) -> bool:
+        """Set Git local (repository-scoped) SSH commit signing config.
+
+        Args:
+            signing_key: Path to the SSH public key to sign commits with
+            repo_path: Path to repository (default: current directory)
+
+        Returns:
+            True if successful, False otherwise
+        """
+        try:
+            subprocess.run(
+                ["git", "config", "user.signingkey", signing_key],
+                cwd=repo_path,
+                check=True,
+                capture_output=True,
+            )
+            subprocess.run(
+                ["git", "config", "gpg.format", "ssh"],
+                cwd=repo_path,
+                check=True,
+                capture_output=True,
+            )
+            subprocess.run(
+                ["git", "config", "commit.gpgsign", "true"],
+                cwd=repo_path,
+                check=True,
+                capture_output=True,
+            )
+            return True
+        except subprocess.CalledProcessError:
+            return False
+
+    def unset_git_signing_config_local(self, repo_path: Optional[Path] = None) -> bool:
+        """Unset Git local (repository-scoped) SSH commit signing config.
+
+        Args:
+            repo_path: Path to repository (default: current directory)
+
+        Returns:
+            True if successful, False otherwise
+        """
+        try:
+            subprocess.run(
+                ["git", "config", "--unset", "user.signingkey"],
+                cwd=repo_path,
+                capture_output=True,
+            )
+            subprocess.run(
+                ["git", "config", "--unset", "gpg.format"],
+                cwd=repo_path,
+                capture_output=True,
+            )
+            subprocess.run(
+                ["git", "config", "--unset", "commit.gpgsign"],
+                cwd=repo_path,
+                capture_output=True,
+            )
+            return True
+        except subprocess.CalledProcessError:
+            return False
+
     def get_current_git_config(self) -> Dict[str, Optional[str]]:
         """Get current Git global config.
 
@@ -187,6 +303,7 @@ class ConfigManager:
         email: str,
         private_key: str,
         public_key: str,
+        sign: bool = False,
     ) -> bool:
         """Add account to .gitacc file.
 
@@ -196,6 +313,8 @@ class ConfigManager:
             email: Git user email
             private_key: Path to private SSH key
             public_key: Path to public SSH key
+            sign: Whether to sign commits with this account's SSH key when
+                switched to (sets user.signingkey/gpg.format/commit.gpgsign)
 
         Returns:
             True if successful, False otherwise
@@ -207,6 +326,7 @@ class ConfigManager:
                 f.write(f"\temail = {email}\n")
                 f.write(f"\tprivate_key = {private_key}\n")
                 f.write(f"\tpublic_key = {public_key}\n")
+                f.write(f"\tsign = {'true' if sign else 'false'}\n")
             return True
         except Exception:
             return False

{gitacc_switcher-1.1.0 → gitacc_switcher-1.2.0/gitacc_switcher.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gitacc-switcher
-Version: 1.1.0
+Version: 1.2.0
 Summary: Git Account Switcher - Manage multiple Git SSH accounts easily
 Home-page: https://github.com/ktechhub/gitacc_switcher
 Author: ktechhub
@@ -46,6 +46,7 @@ A Python CLI tool to easily switch between multiple Git SSH accounts. Manage mul
 - Switch between accounts easily — one command, no fuss
 - Generate SSH keys automatically (rsa, ed25519, ecdsa, and more)
 - Optional passphrase support for SSH keys
+- Opt-in SSH commit signing per account
 - Colored terminal output with active account indicator
 - Pre-commit hook to prevent commits with the wrong account
 - Shell autocomplete for bash and zsh
@@ -87,7 +88,7 @@ gitacc verify                 # manual check
 
 ## Commands
 
-### `gitacc add [--type TYPE]`
+### `gitacc add [--type TYPE] [--sign]`
 
 Add a new Git account. Prompts for:
 - Account identifier (used in key filename and as a reference)
@@ -100,8 +101,15 @@ Available key types: `rsa` (default), `ed25519`, `ecdsa`, `ecdsa-sk`, `ed25519-s
 ```bash
 gitacc add
 gitacc add --type ed25519
+gitacc add --sign           # opt in to SSH commit signing for this account
 ```
 
+Pass `--sign` to opt this account into SSH commit signing. When you later `gitacc switch` to it,
+`user.signingkey` is set to the account's public key and `gpg.format=ssh` / `commit.gpgsign=true`
+are enabled (locally too, with `--local`), so every commit made under this identity is signed.
+Switching to an account without `--sign` clears any signing config left by a previous account.
+Toggle it later with `gitacc update <account> --sign` / `--no-sign`.
+
 ### `gitacc switch <account> [--local]` / `gitacc <account>`
 
 Switch to a registered account. Clears all keys from the SSH agent, loads only this account's key, and sets `git config --global user.name/email`.
@@ -139,7 +147,7 @@ gitacc remove mywork
 gitacc remove          # prompts for account name
 ```
 
-### `gitacc update <account> [--name NAME] [--email EMAIL]`
+### `gitacc update <account> [--name NAME] [--email EMAIL] [--sign | --no-sign]`
 
 Update the Git display name and/or email for an existing account. Prompts for any field not provided as a flag.
 
@@ -147,6 +155,8 @@ Update the Git display name and/or email for an existing account. Prompts for an
 gitacc update mywork --name "Jane Doe"
 gitacc update mywork --email "jane@newcompany.com"
 gitacc update mywork   # prompts for both
+gitacc update mywork --sign      # enable SSH commit signing for this account
+gitacc update mywork --no-sign   # disable it
 ```
 
 ### `gitacc init <account>`
@@ -213,6 +223,7 @@ gitacc --version
     email = jane@company.com
     private_key = /home/jane/.ssh/id_ed25519_mywork
     public_key = /home/jane/.ssh/id_ed25519_mywork.pub
+    sign = false
 ```
 
 ## Requirements

{gitacc_switcher-1.1.0 → gitacc_switcher-1.2.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "gitacc-switcher"
-version = "1.1.0"
+version = "1.2.0"
 description = "Git Account Switcher - Manage multiple Git SSH accounts easily"
 readme = "README.md"
 requires-python = ">=3.7"

{gitacc_switcher-1.1.0 → gitacc_switcher-1.2.0}/setup.py

@@ -9,7 +9,7 @@ long_description = readme_file.read_text() if readme_file.exists() else ""
 
 setup(
     name="gitacc-switcher",
-    version="1.1.0",
+    version="1.2.0",
     description="Git Account Switcher - Manage multiple Git SSH accounts easily",
     long_description=long_description,
     long_description_content_type="text/markdown",

{gitacc_switcher-1.1.0 → gitacc_switcher-1.2.0}/tests/test_account_manager.py

@@ -90,6 +90,59 @@ class TestSwitchAccount:
             "Work User", "work@company.com"
         )
 
+    def test_unsigned_account_unsets_signing_config(self, manager, tmp_path):
+        key = tmp_path / "id_rsa_work"
+        key.write_text("key")
+        account = {**WORK_ACCOUNT, "private_key": str(key), "sign": "false"}
+        manager.config_manager.get_account.return_value = account
+        manager.ssh_manager.is_ssh_agent_running.return_value = True
+        manager.ssh_manager.clear_all_keys.return_value = True
+        manager.ssh_manager.add_key_to_agent.return_value = (True, None)
+        manager.config_manager.set_git_config.return_value = True
+        with patch("subprocess.run") as mock_run:
+            mock_run.return_value = MagicMock(returncode=0, stdout="1 key\n")
+            result = manager.switch_account("work")
+        assert result is True
+        manager.config_manager.unset_git_signing_config.assert_called_once()
+        manager.config_manager.set_git_signing_config.assert_not_called()
+
+    def test_signed_account_sets_signing_config(self, manager, tmp_path):
+        key = tmp_path / "id_rsa_work"
+        key.write_text("key")
+        account = {**WORK_ACCOUNT, "private_key": str(key), "sign": "true"}
+        manager.config_manager.get_account.return_value = account
+        manager.ssh_manager.is_ssh_agent_running.return_value = True
+        manager.ssh_manager.clear_all_keys.return_value = True
+        manager.ssh_manager.add_key_to_agent.return_value = (True, None)
+        manager.config_manager.set_git_config.return_value = True
+        with patch("subprocess.run") as mock_run:
+            mock_run.return_value = MagicMock(returncode=0, stdout="1 key\n")
+            result = manager.switch_account("work")
+        assert result is True
+        manager.config_manager.set_git_signing_config.assert_called_once_with(
+            "/home/user/.ssh/id_rsa_work.pub"
+        )
+        manager.config_manager.unset_git_signing_config.assert_not_called()
+
+    def test_signed_account_local_sets_local_signing_config(self, manager, tmp_path):
+        key = tmp_path / "id_rsa_work"
+        key.write_text("key")
+        account = {**WORK_ACCOUNT, "private_key": str(key), "sign": "true"}
+        manager.config_manager.get_account.return_value = account
+        manager.config_manager.is_git_repo.return_value = True
+        manager.ssh_manager.is_ssh_agent_running.return_value = True
+        manager.ssh_manager.clear_all_keys.return_value = True
+        manager.ssh_manager.add_key_to_agent.return_value = (True, None)
+        manager.config_manager.set_git_config_local.return_value = True
+        with patch("subprocess.run") as mock_run:
+            mock_run.return_value = MagicMock(returncode=0, stdout="1 key\n")
+            result = manager.switch_account("work", local=True)
+        assert result is True
+        manager.config_manager.set_git_signing_config_local.assert_called_once_with(
+            "/home/user/.ssh/id_rsa_work.pub"
+        )
+        manager.config_manager.set_git_signing_config.assert_not_called()
+
     def test_clears_all_keys_before_adding(self, manager, tmp_path):
         key = tmp_path / "id_rsa_work"
         key.write_text("key")
@@ -159,6 +212,11 @@ class TestLogout:
         manager.logout()
         manager.config_manager.unset_git_config.assert_called_once()
 
+    def test_unsets_signing_config(self, manager):
+        manager.ssh_manager.is_ssh_agent_running.return_value = False
+        manager.logout()
+        manager.config_manager.unset_git_signing_config.assert_called_once()
+
 
 class TestUpdateAccount:
     def test_update_name(self, manager):
@@ -216,6 +274,58 @@ class TestUpdateAccount:
         manager.config_manager.get_account.return_value = None
         assert manager.update_account("nobody", "name", "email") is False
 
+    def test_enables_signing(self, manager):
+        manager.config_manager.get_account.return_value = {
+            "name": "Work User",
+            "email": "work@co.com",
+            "sign": "false",
+        }
+        manager.config_manager.update_account_field.return_value = True
+        result = manager.update_account(
+            "work", new_git_name="Work User", new_email="work@co.com", new_sign=True
+        )
+        assert result is True
+        manager.config_manager.update_account_field.assert_called_once_with(
+            "work", "sign", "true"
+        )
+
+    def test_disables_signing(self, manager):
+        manager.config_manager.get_account.return_value = {
+            "name": "Work User",
+            "email": "work@co.com",
+            "sign": "true",
+        }
+        manager.config_manager.update_account_field.return_value = True
+        result = manager.update_account(
+            "work", new_git_name="Work User", new_email="work@co.com", new_sign=False
+        )
+        assert result is True
+        manager.config_manager.update_account_field.assert_called_once_with(
+            "work", "sign", "false"
+        )
+
+    def test_no_sign_change_does_not_write(self, manager):
+        manager.config_manager.get_account.return_value = {
+            "name": "Work User",
+            "email": "work@co.com",
+            "sign": "true",
+        }
+        manager.update_account(
+            "work", new_git_name="Work User", new_email="work@co.com", new_sign=True
+        )
+        manager.config_manager.update_account_field.assert_not_called()
+
+    def test_sign_none_leaves_setting_unchanged(self, manager):
+        manager.config_manager.get_account.return_value = {
+            "name": "Work User",
+            "email": "work@co.com",
+            "sign": "true",
+        }
+        manager.update_account(
+            "work", new_git_name="Work User", new_email="work@co.com", new_sign=None
+        )
+        manager.config_manager.update_account_field.assert_not_called()
+
 
 class TestRemoveAccount:
     def test_returns_false_for_missing_account(self, manager):
@@ -294,3 +404,25 @@ class TestAddAccount:
             "gitacc_switcher.account_manager.ask_yes_no", return_value=True
         ), patch("getpass.getpass", side_effect=["pass1", "pass2"]):
             assert manager.add_account() is False
+
+    def test_sign_flag_passed_to_config_manager(self, manager, tmp_path):
+        self._setup_add(manager, tmp_path)
+        inputs = ["mywork", "My Work", "work@co.com"]
+        with patch("builtins.input", side_effect=inputs), patch(
+            "gitacc_switcher.account_manager.ask_yes_no", return_value=False
+        ):
+            result = manager.add_account(sign=True)
+        assert result is True
+        _, kwargs = manager.config_manager.add_account.call_args
+        assert kwargs["sign"] is True
+
+    def test_sign_defaults_to_false(self, manager, tmp_path):
+        self._setup_add(manager, tmp_path)
+        inputs = ["mywork", "My Work", "work@co.com"]
+        with patch("builtins.input", side_effect=inputs), patch(
+            "gitacc_switcher.account_manager.ask_yes_no", return_value=False
+        ):
+            result = manager.add_account()
+        assert result is True
+        _, kwargs = manager.config_manager.add_account.call_args
+        assert kwargs["sign"] is False

{gitacc_switcher-1.1.0 → gitacc_switcher-1.2.0}/tests/test_cli.py

@@ -33,6 +33,14 @@ class TestParserCommands:
         with pytest.raises(SystemExit):
             cli.parser.parse_args(["add", "--type", "invalid"])
 
+    def test_add_sign_defaults_to_false(self, cli):
+        args = cli.parser.parse_args(["add"])
+        assert args.sign is False
+
+    def test_add_sign_flag(self, cli):
+        args = cli.parser.parse_args(["add", "--sign"])
+        assert args.sign is True
+
     def test_switch_parses_account(self, cli):
         args = cli.parser.parse_args(["switch", "mywork"])
         assert args.command == "switch"
@@ -73,6 +81,19 @@ class TestParserCommands:
         assert args.account_name == "mywork"
         assert args.new_git_name is None
         assert args.new_email is None
+        assert args.sign is None
+
+    def test_update_sign_flag(self, cli):
+        args = cli.parser.parse_args(["update", "mywork", "--sign"])
+        assert args.sign is True
+
+    def test_update_no_sign_flag(self, cli):
+        args = cli.parser.parse_args(["update", "mywork", "--no-sign"])
+        assert args.sign is False
+
+    def test_update_sign_and_no_sign_mutually_exclusive(self, cli):
+        with pytest.raises(SystemExit):
+            cli.parser.parse_args(["update", "mywork", "--sign", "--no-sign"])
 
     def test_update_with_name_flag(self, cli):
         args = cli.parser.parse_args(["update", "mywork", "--name", "New Name"])
@@ -110,6 +131,13 @@ class TestHandlers:
         cli.account_manager.add_account.return_value = False
         assert cli._handle_add(argparse.Namespace(key_type="rsa")) == 1
 
+    def test_handle_add_passes_sign_flag(self, cli):
+        cli.account_manager.add_account.return_value = True
+        cli._handle_add(argparse.Namespace(key_type="rsa", sign=True))
+        cli.account_manager.add_account.assert_called_once_with(
+            key_type="rsa", sign=True
+        )
+
     def test_handle_switch_success(self, cli):
         cli.account_manager.switch_account.return_value = True
         args = argparse.Namespace(account_name="work", local=False)
@@ -160,6 +188,16 @@ class TestHandlers:
         )
         assert cli._handle_update(args) == 1
 
+    def test_handle_update_passes_sign_flag(self, cli):
+        cli.account_manager.update_account.return_value = True
+        args = argparse.Namespace(
+            account_name="work", new_git_name=None, new_email=None, sign=True
+        )
+        cli._handle_update(args)
+        cli.account_manager.update_account.assert_called_once_with(
+            "work", None, None, new_sign=True
+        )
+
 
 # ---------------------------------------------------------------------------
 # List shows active account marker

{gitacc_switcher-1.1.0 → gitacc_switcher-1.2.0}/tests/test_config_manager.py

@@ -109,6 +109,14 @@ class TestAddAccount:
         config.add_account("personal", "Personal", "p@p.com", "/k2", "/k2.pub")
         assert len(config.read_accounts()) == 2
 
+    def test_defaults_sign_to_false(self, config):
+        config.add_account("test", "Test User", "t@t.com", "/k", "/k.pub")
+        assert config.get_account("test")["sign"] == "false"
+
+    def test_persists_sign_true_when_enabled(self, config):
+        config.add_account("test", "Test User", "t@t.com", "/k", "/k.pub", sign=True)
+        assert config.get_account("test")["sign"] == "true"
+
 
 class TestRemoveAccount:
     def test_removes_account(self, config_with_accounts):
@@ -205,6 +213,91 @@ class TestSetGitConfigLocal:
             assert config.set_git_config_local("Test", "test@test.com") is False
 
 
+class TestSetGitSigningConfig:
+    def test_sets_signingkey_format_and_gpgsign(self, config):
+        with patch("subprocess.run") as mock_run:
+            mock_run.return_value = MagicMock(returncode=0)
+            result = config.set_git_signing_config("/home/user/.ssh/id_rsa.pub")
+        assert result is True
+        assert mock_run.call_count == 3
+        calls = [call.args[0] for call in mock_run.call_args_list]
+        assert [
+            "git",
+            "config",
+            "--global",
+            "user.signingkey",
+            "/home/user/.ssh/id_rsa.pub",
+        ] in calls
+        assert ["git", "config", "--global", "gpg.format", "ssh"] in calls
+        assert ["git", "config", "--global", "commit.gpgsign", "true"] in calls
+
+    def test_returns_false_on_error(self, config):
+        with patch(
+            "subprocess.run", side_effect=subprocess.CalledProcessError(1, "git")
+        ):
+            assert config.set_git_signing_config("/k.pub") is False
+
+
+class TestUnsetGitSigningConfig:
+    def test_unsets_all_signing_keys(self, config):
+        with patch("subprocess.run") as mock_run:
+            mock_run.return_value = MagicMock(returncode=0)
+            result = config.unset_git_signing_config()
+        assert result is True
+        assert mock_run.call_count == 3
+        calls = [call.args[0] for call in mock_run.call_args_list]
+        assert ["git", "config", "--global", "--unset", "user.signingkey"] in calls
+        assert ["git", "config", "--global", "--unset", "gpg.format"] in calls
+        assert ["git", "config", "--global", "--unset", "commit.gpgsign"] in calls
+
+    def test_succeeds_even_when_key_was_unset(self, config):
+        # git config --unset on a missing key returns non-zero, but we don't
+        # pass check=True for unset, so this should not raise/fail.
+        with patch("subprocess.run") as mock_run:
+            mock_run.return_value = MagicMock(returncode=5)
+            assert config.unset_git_signing_config() is True
+
+
+class TestSetGitSigningConfigLocal:
+    def test_calls_git_config_without_global_flag(self, config):
+        with patch("subprocess.run") as mock_run:
+            mock_run.return_value = MagicMock(returncode=0)
+            result = config.set_git_signing_config_local("/k.pub")
+        assert result is True
+        for call in mock_run.call_args_list:
+            assert "--global" not in call.args[0]
+
+    def test_passes_repo_path_as_cwd(self, config, tmp_path):
+        with patch("subprocess.run") as mock_run:
+            mock_run.return_value = MagicMock(returncode=0)
+            config.set_git_signing_config_local("/k.pub", tmp_path)
+        for call in mock_run.call_args_list:
+            assert call.kwargs["cwd"] == tmp_path
+
+    def test_returns_false_on_error(self, config):
+        with patch(
+            "subprocess.run", side_effect=subprocess.CalledProcessError(1, "git")
+        ):
+            assert config.set_git_signing_config_local("/k.pub") is False
+
+
+class TestUnsetGitSigningConfigLocal:
+    def test_calls_git_config_without_global_flag(self, config):
+        with patch("subprocess.run") as mock_run:
+            mock_run.return_value = MagicMock(returncode=0)
+            result = config.unset_git_signing_config_local()
+        assert result is True
+        for call in mock_run.call_args_list:
+            assert "--global" not in call.args[0]
+
+    def test_passes_repo_path_as_cwd(self, config, tmp_path):
+        with patch("subprocess.run") as mock_run:
+            mock_run.return_value = MagicMock(returncode=0)
+            config.unset_git_signing_config_local(tmp_path)
+        for call in mock_run.call_args_list:
+            assert call.kwargs["cwd"] == tmp_path
+
+
 class TestGetCurrentGitConfig:
     def test_returns_name_and_email_keys(self, config):
         with patch("subprocess.run") as mock_run: