v4.0.7: finish the Phase 1 boundary with a command shell

The terminal command line moves to client::shell: a typed line becomes a core Command or an adapter action (connect, login, register, set-credential, host maintenance). ClientCore loses submit_line and the last TUI-shaped effects (Interactive, SetPrompt, ListHosts, ForgetHost, AnimateRoulette); the adapter animates roulette from the Result view.

Adds forget-login, which drops the stored credential for the pinned key and keeps trust, distinct from logout (session only) and forget-host (trust too).

1 files changed, 15 insertions, 0 deletions

diff --git a/src/client/database.rs b/src/client/database.rs
index c4601b5..40ee8b4 100644
--- a/src/client/database.rs
+++ b/src/client/database.rs
@@ -151,6 +151,21 @@ pub fn forget_host(conn: &Connection, host: &str) -> Result<ForgetOutcome, rusql
     })
 }
 
+/// Forget the saved login for a server identity ("forget saved login").
+///
+/// Trust is untouched: the pinned key stays in `hosts`, so the next connection
+/// only asks for a password. Returns whether a credential was actually stored.
+pub fn forget_credentials(
+    conn: &Connection,
+    fingerprint: &str,
+) -> Result<bool, rusqlite::Error> {
+    let removed = conn.execute(
+        "DELETE FROM credentials WHERE fingerprint = ?1",
+        [fingerprint],
+    )?;
+    Ok(removed > 0)
+}
+
 /// List all remembered hosts with their fingerprints.
 pub fn get_all_hosts(conn: &Connection) -> Vec<(String, Option<String>)> {
     let mut stmt = conn