v4.0.7: finish the Phase 1 boundary with a command shell

The terminal command line moves to client::shell: a typed line becomes a core Command or an adapter action (connect, login, register, set-credential, host maintenance). ClientCore loses submit_line and the last TUI-shaped effects (Interactive, SetPrompt, ListHosts, ForgetHost, AnimateRoulette); the adapter animates roulette from the Result view.

Adds forget-login, which drops the stored credential for the pinned key and keeps trust, distinct from logout (session only) and forget-host (trust too).

1 files changed, 2 insertions, 1 deletions

diff --git a/AGENTS.md b/AGENTS.md
index efa8b74..3908c2d 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -103,7 +103,8 @@
   by host.
 - `forget_host` removes one address. Drop the credential only when no address
   with that fingerprint remains, or two addresses for one server would stop
-  sharing a login.
+  sharing a login. `forget-login` is the narrower action: it drops the
+  credential and keeps the pinned key.
 - `save_host` must not wipe the fingerprint column. Use `ON CONFLICT ...
   DO UPDATE SET last_used` — never `INSERT OR REPLACE`.
 - The client transport lives in `client::transport`. It records the key during