From ef521426c53f5fefb936f93ac2c82b2df67c3a98 Mon Sep 17 00:00:00 2001
From: "prompt.ac/@jeffrey" <mail@aesthetic.computer>
Date: Sun, 24 May 2026 14:21:15 -0400
Subject: [PATCH] SCORE.md: document ac-passphrase for GPG signing in
 non-interactive shells

Recipe: prompt the user via the Slab menubar daemon socket, warm
gpg-agent in loopback mode, then commit normally. Lets Claude Code
sessions sign commits when pinentry has no tty.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 SCORE.md | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/SCORE.md b/SCORE.md
index cd87ed17b0..921aec7572 100644
--- a/SCORE.md
+++ b/SCORE.md
@@ -261,6 +261,14 @@ The development environment uses Emacs with named terminal buffers. Use Emacs MC
 #### Authentication & Tokens
 - `ac-login` — Login to AC
 - `ac-token` — Manage auth tokens
+- `slab/bin/ac-passphrase <label> [timeout]` — request a passphrase from the Slab menubar daemon (socket at `~/.ac-daemon.sock`). Returns the secret on stdout, caches by label (default 600s TTL). Requires the Slab menubar app to be running. Use this when GPG / SSH / any signing operation fails with `No pinentry` in a non-interactive shell. Recipe to warm gpg-agent and then commit:
+  ```zsh
+  pp=$(slab/bin/ac-passphrase "git commit signing")
+  [ -z "$pp" ] && exit 1
+  echo test | gpg --pinentry-mode loopback --passphrase "$pp" --batch -s -o /dev/null 2>&1
+  unset pp
+  git commit -m "..."   # signs cleanly via cached agent
+  ```
 
 #### Host Access (Docker)
 When running inside a Docker container on Jeffrey's MacBook (or any local Docker host), SSH to the host machine via:
-- 
2.51.2