Adds a click-to-suppress toggle to the graph signing indicator

Makes the commit box's signing indicator a clickable toggle that
temporarily commits without signing — in-memory and per-repository for
the webview session, never changing Git config or VS Code settings. The
key icon dims with a diagonal slash when suppressed (state carried by
`aria-pressed`, not color alone) and the tooltip explains how to
re-enable. Suppression survives selection changes and panel hide/show,
and applies to both the commit box and the Compose apply path.

Adds a `graph/wip/signing/toggled` telemetry event.

Author: ianhattendorf

CHANGELOG.md

@@ -10,7 +10,7 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/) and this p
 
 - Adds ConfigCat-based feature flag service for A/B testing and experimentation support ([#5092](https://github.com/gitkraken/vscode-gitlens/issues/5092))
 - Adds an optional `avatar` URL template to custom remotes in the `gitlens.remotes` setting — enables corporate and self-hosted setups to resolve commit-author avatars via a templated URL with `${email}`, `${emailName}`, `${domain}`, and `${size}` tokens; identity values are component-encoded before interpolation to keep attacker-controllable commit emails from injecting URL-structural characters, and templates configured via workspace settings require explicit user approval on first use in a trusted workspace (revocable via _GitLens: Reset > Approved Avatar URL Templates..._) ([#302](https://github.com/gitkraken/vscode-gitlens/issues/302), [#5155](https://github.com/gitkraken/vscode-gitlens/pull/5155)) — thanks to [PR #1636](https://github.com/gitkraken/vscode-gitlens/pull/1636) by Tmk ([@tmkx](https://github.com/tmkx))
-- Adds a commit signing indicator to the _Commit Graph_'s working changes (WIP) commit box — a key icon appears when commits will be signed (via the repo's `commit.gpgsign` Git config or VS Code's `git.enableCommitSigning` setting), with the signing format (GPG, SSH, X.509, or OpenPGP) shown on hover
+- Adds a commit signing indicator to the _Commit Graph_'s working changes (WIP) commit box — a key icon appears when commits will be signed (via the repo's `commit.gpgsign` Git config or VS Code's `git.enableCommitSigning` setting), with the signing format (GPG, SSH, X.509, or OpenPGP) shown on hover; click it to temporarily commit without signing (in-memory, per-repository, for the session — never changes your Git config or settings) and click again to re-enable
 
 ### Changed
 

docs/telemetry-events.md

@@ -3096,6 +3096,26 @@ background-upgraded the extension while the host kept running the old build
 }
 ```
 
+### graph/wip/signing/toggled
+
+> Sent when the user toggles the temporary commit-signing suppression in the Graph's WIP panel
+
+```typescript
+{
+  'context.repository.closed': boolean,
+  'context.repository.folder.scheme': string,
+  'context.repository.id': string,
+  'context.repository.provider.id': string,
+  'context.repository.scheme': string,
+  'context.webview.host': 'view' | 'editor' | 'panel',
+  'context.webview.id': string,
+  'context.webview.instanceId': string,
+  'context.webview.type': string,
+  // Commit-signing state after the toggle (`false` = temporarily suppressed)
+  'enabled': boolean
+}
+```
+
 ### graphDetails/closed
 
 > Sent when the integrated graph details panel is collapsed

src/constants.telemetry.ts

@@ -284,6 +284,8 @@ export interface TelemetryEvents extends WebviewShowAbortedEvents, WebviewShownE
 	'graph/wip/commit/succeeded': GraphWipCommitSucceededEvent;
 	/** Sent when a commit from the Graph's WIP panel fails (e.g. a hook rejection or signing failure) */
 	'graph/wip/commit/failed': GraphWipCommitFailedEvent;
+	/** Sent when the user toggles the temporary commit-signing suppression in the Graph's WIP panel */
+	'graph/wip/signing/toggled': GraphWipSigningToggledEvent;
 
 	/** Sent when a virtual-FS-backed file (e.g. a Graph Compose proposed commit) is opened */
 	'graph/virtualFile/opened': GraphVirtualFileOpenedEvent;
@@ -1417,6 +1419,11 @@ interface GraphDetailsCompareGenerateChangelogEvent extends GraphContextEventDat
 	includeWorkingTree: boolean;
 }
 
+interface GraphWipSigningToggledEvent extends GraphContextEventData {
+	/** Commit-signing state after the toggle (`false` = temporarily suppressed) */
+	enabled: boolean;
+}
+
 interface GraphVirtualFileOpenedEvent extends GraphContextEventData {
 	/** Which open operation the user triggered */
 	mode: GraphVirtualFileMode;

src/webviews/apps/plus/graph/components/__tests__/detailsActions.test.ts

@@ -195,6 +195,7 @@ suite('DetailsActions', () => {
 			commits: composeResult.result.commits,
 			base: composeResult.result.baseCommit,
 			includedCommitIds: undefined,
+			suppressSigning: false,
 		});
 		assert.strictEqual(state.activeMode.get(), null);
 		assert.strictEqual(state.activeModeContext.get(), null);
@@ -229,9 +230,35 @@ suite('DetailsActions', () => {
 			commits: composeResult.result.commits,
 			base: composeResult.result.baseCommit,
 			includedCommitIds: ['c1'],
+			suppressSigning: false,
 		});
 	});
 
+	test('composeCommitAll forwards suppressSigning when the repo signing is suppressed', async () => {
+		const state = createDetailsState();
+		state.activeMode.set('compose');
+		state.activeModeContext.set('wip');
+		state.suppressedSigningRepos.set(new Set(['/repo']));
+
+		let committedPlan: { suppressSigning?: boolean } | undefined;
+		const resources = createResources();
+		resources.compose.mutate(composeResult);
+
+		const actions = new DetailsActions(
+			state,
+			createServices(async (_repoPath, plan) => {
+				committedPlan = plan as { suppressSigning?: boolean };
+				return { success: true };
+			}),
+			resources,
+		);
+		actions.fetchDetails = async () => undefined;
+
+		await actions.composeCommitAll('/repo', 'abc');
+
+		assert.strictEqual(committedPlan?.suppressSigning, true);
+	});
+
 	test('toggleCompareWorkingTree invalidates side data and refetches summary with the toggle enabled', async () => {
 		const state = createDetailsState();
 		state.branchCompareLeftRef.set('main');

src/webviews/apps/plus/graph/components/detailsActions.ts

@@ -415,6 +415,8 @@ export class DetailsActions {
 	 *   {@link clearEnrichmentCaches}.
 	 * - Capability flags (`preferences`, `orgSettings`, `aiModel`, etc.) and pure UI toggles
 	 *   are not repo-scoped — they intentionally survive switches.
+	 * - `suppressedSigningRepos` is keyed by repoPath and must survive switches for the whole
+	 *   session (it's the commit box's signing toggle); never cleared here.
 	 */
 	resetRepoScopedState(repoPath?: string): void {
 		const s = this.state;
@@ -2589,6 +2591,7 @@ export class DetailsActions {
 				commits: composeValue.result.commits,
 				base: composeValue.result.baseCommit,
 				includedCommitIds: includedCommitIds,
+				suppressSigning: this.state.suppressedSigningRepos.get().has(repoPath),
 			});
 			if ('error' in result && result.error) {
 				this.resources.compose.mutate({ error: { message: result.error.message } });
@@ -3018,10 +3021,19 @@ export class DetailsActions {
 		this.state.committing.set(true);
 		// Suppress host WIP pushes for this repo until the commit settles (see `applyPushedWip`).
 		this._committingRepoPath = repoPath;
+		// When the user has temporarily suppressed signing for this repo, pass `sign: false` so the
+		// host adds `--no-gpg-sign` (defeating repo `commit.gpgsign` and the host override). Otherwise
+		// leave it undefined so signing follows the configured behavior.
+		const sign = this.state.suppressedSigningRepos.get().has(repoPath) ? false : undefined;
+
 		try {
 			// `commit` returns a discriminated result and never throws for git failures — the host
 			// classifies the error and presents the modal/full-output document itself.
-			const result = await this.services.repository.commit(repoPath, message, { amend: isAmend, all: all });
+			const result = await this.services.repository.commit(repoPath, message, {
+				amend: isAmend,
+				all: all,
+				sign: sign,
+			});
 			if (result.status === 'committed') {
 				this.state.commitMessage.set('');
 				this.state.commitMessageDirty.set(false);

src/webviews/apps/plus/graph/components/detailsState.ts

@@ -527,10 +527,19 @@ export function createDetailsState() {
 	const { resetAll: resetDurable, ...durableSignals } = durable;
 	const { resetAll: resetTransient, ...transientSignals } = transient;
 
+	// Session layer — repoPaths whose commit signing the user has temporarily suppressed via the
+	// commit box's signing toggle (in-memory only, never persisted). Deliberately created outside
+	// both signal groups so `resetDurable()`/`resetTransient()`/`resetAll()` leave it untouched: the
+	// suppression must survive selection changes, repo switches, and panel hide/show for the whole
+	// webview session, clearing only on webview reload / VS Code restart.
+	const suppressedSigningRepos = new Signal.State<ReadonlySet<string>>(new Set());
+
 	return {
 		...durableSignals,
 		...transientSignals,
 
+		suppressedSigningRepos: suppressedSigningRepos,
+
 		/** Reset the durable (fetched) layer. Primarily used on panel teardown. */
 		resetDurable: resetDurable,
 

src/webviews/apps/plus/graph/components/gl-commit-box.css.ts

@@ -35,14 +35,34 @@ export const commitBoxStyles = css`
 		gap: 0.4rem;
 	}
 
-	.signing-indicator {
-		display: inline-flex;
+	.signing-toggle {
 		color: var(--vscode-descriptionForeground);
 	}
 
-	.signing-indicator:focus-visible {
-		outline: 0.1rem solid var(--vscode-focusBorder);
-		outline-offset: 0.2rem;
+	.signing-toggle__icon {
+		position: relative;
+		display: inline-flex;
+	}
+
+	/* Suppressed state — dim the key and draw a diagonal slash through it. State is conveyed by the
+	   slash shape + the button's aria-pressed, never by color alone. The slash lives on the wrapper
+	   span (owned by this component's shadow tree), not on code-icon, whose own shadow styles use
+	   ::before/::after for some glyphs. */
+	.signing-toggle.is-suppressed .signing-toggle__icon {
+		opacity: 0.6;
+	}
+
+	.signing-toggle.is-suppressed .signing-toggle__icon::after {
+		content: '';
+		position: absolute;
+		left: -10%;
+		top: 50%;
+		width: 120%;
+		height: 0.15rem;
+		background: currentColor;
+		transform: rotate(-45deg);
+		transform-origin: center;
+		pointer-events: none;
 	}
 
 	.compose-icon {

src/webviews/apps/plus/graph/components/gl-commit-box.ts

@@ -59,6 +59,9 @@ export class GlCommitBox extends LitElement {
 	@property({ type: Object })
 	signing?: WipSigning;
 
+	@property({ type: Boolean })
+	signingSuppressed = false;
+
 	override render() {
 		return html`
 			<div class="options">
@@ -80,12 +83,24 @@ export class GlCommitBox extends LitElement {
 	private renderSigningIndicator() {
 		if (!this.signing?.enabled) return nothing;
 
-		const label = `Commits will be signed using ${getSigningFormatLabel(this.signing.format)}`;
+		const formatLabel = getSigningFormatLabel(this.signing.format);
+		const suppressed = this.signingSuppressed;
+		const tooltip = suppressed
+			? `Commit signing temporarily off — click to re-enable ${formatLabel} signing`
+			: `Commits will be signed using ${formatLabel} — click to temporarily commit without signing`;
 		return html`
-			<gl-tooltip content=${label} placement="bottom">
-				<span class="signing-indicator" tabindex="0" role="img" aria-label=${label}>
-					<code-icon icon="key"></code-icon>
-				</span>
+			<gl-tooltip content=${tooltip} placement="bottom">
+				<gl-button
+					class="signing-toggle ${suppressed ? 'is-suppressed' : ''}"
+					appearance="toolbar"
+					density="compact"
+					aria-pressed=${suppressed ? 'false' : 'true'}
+					aria-label="Commit signing (${formatLabel})"
+					?disabled=${this.committing}
+					@click=${this.onToggleSigning}
+				>
+					<span class="signing-toggle__icon"><code-icon icon="key"></code-icon></span>
+				</gl-button>
 			</gl-tooltip>
 		`;
 	}
@@ -245,6 +260,12 @@ export class GlCommitBox extends LitElement {
 	private onCompose() {
 		this.dispatchEvent(new CustomEvent('compose', { bubbles: true, composed: true }));
 	}
+
+	private onToggleSigning() {
+		if (this.committing) return;
+
+		this.dispatchEvent(new CustomEvent('signing-toggle', { bubbles: true, composed: true }));
+	}
 }
 
 function getSigningFormatLabel(format: WipSigning['format']): string {

src/webviews/apps/plus/graph/components/gl-graph-details-panel.ts

@@ -1908,12 +1908,15 @@ export class GlGraphDetailsPanel extends SignalWatcher(LitElement) {
 										.aiEnabled=${this._state.preferences.get()?.aiEnabled ?? false}
 										.commitError=${this._state.commitError.get()}
 										.signing=${wip.signing}
+										.signingSuppressed=${this.effectiveRepoPath != null &&
+										this._state.suppressedSigningRepos.get().has(this.effectiveRepoPath)}
 										@message-change=${this.handleCommitMessageChange}
 										@amend-change=${this.handleAmendChange}
 										@commit=${this.handleCommit}
 										@generate-message=${this.handleGenerateMessage}
 										@add-coauthors=${this.handleAddCoauthors}
 										@compose=${this.handleCompose}
+										@signing-toggle=${this.handleSigningToggle}
 									></gl-commit-box>
 								`
 							: html`
@@ -2935,6 +2938,23 @@ export class GlGraphDetailsPanel extends SignalWatcher(LitElement) {
 		}
 	};
 
+	private handleSigningToggle = () => {
+		const repoPath = this.effectiveRepoPath;
+		if (repoPath == null) return;
+
+		// Copy-on-write toggle of the per-repo suppression set (the signal holds a ReadonlySet).
+		const current = this._state.suppressedSigningRepos.get();
+		const next = new Set(current);
+		const suppressed = !next.has(repoPath);
+		if (suppressed) {
+			next.add(repoPath);
+		} else {
+			next.delete(repoPath);
+		}
+		this._state.suppressedSigningRepos.set(next);
+		this._actions.sendTelemetryEvent('graph/wip/signing/toggled', { enabled: !suppressed });
+	};
+
 	private handleCommit = () => void this._actions.commit(this.effectiveRepoPath, this.sha);
 
 	private handleGenerateMessage = () => this._workflow.runGenerateMessage(this.effectiveRepoPath);