## Version
ngit 3.0.3
## Problem
Running `ngit account logout` leaves my account and its usable remote-signer session available. Even `--force` does not remove it.
After logging out, `ngit account whoami` still lists my account with:
```text
signers:
remote signer session via npub
```
Trying to remove it explicitly also has no visible effect:
```bash
ngit --signer hzrd149 account logout --forget
```
Apparently, `logout --forget` only removes credentials associated with an active login. Once ordinary logout has cleared that login, forgetting the remaining credentials requires logging back in first.
## Steps to reproduce
1. Log in with a remote signer.
2. Run `ngit account logout`.
3. Run `ngit account whoami`—the account and signer remain available.
4. Run `ngit --signer hzrd149 account logout --forget`.
5. Run `ngit account whoami`—the account and signer still remain available.
## Expected behavior
`ngit account logout` should fully log me out into a clean state:
- Remove the login selection and locally stored signing credentials/session.
- Leave no usable signer for that account unless I authenticate again.
- Clearly report what was removed and whether another login remains active.
If retaining credentials is useful, make that an explicit option such as `--keep-credentials`, rather than the default meaning of “logout.”
At minimum, `logout --forget` must be able to remove a selected account after it has been logged out, without requiring a login/logout workaround. A silent no-op is especially confusing.
This request concerns local credentials; it does not require remotely revoking the connection in the signer.
ngit 3.0.3
## Problem
Running `ngit account logout` leaves my account and its usable remote-signer session available. Even `--force` does not remove it.
After logging out, `ngit account whoami` still lists my account with:
```text
signers:
remote signer session via npub
```
Trying to remove it explicitly also has no visible effect:
```bash
ngit --signer hzrd149 account logout --forget
```
Apparently, `logout --forget` only removes credentials associated with an active login. Once ordinary logout has cleared that login, forgetting the remaining credentials requires logging back in first.
## Steps to reproduce
1. Log in with a remote signer.
2. Run `ngit account logout`.
3. Run `ngit account whoami`—the account and signer remain available.
4. Run `ngit --signer hzrd149 account logout --forget`.
5. Run `ngit account whoami`—the account and signer still remain available.
## Expected behavior
`ngit account logout` should fully log me out into a clean state:
- Remove the login selection and locally stored signing credentials/session.
- Leave no usable signer for that account unless I authenticate again.
- Clearly report what was removed and whether another login remains active.
If retaining credentials is useful, make that an explicit option such as `--keep-credentials`, rather than the default meaning of “logout.”
At minimum, `logout --forget` must be able to remove a selected account after it has been logged out, without requiring a login/logout workaround. A silent no-op is especially confusing.
This request concerns local credentials; it does not require remotely revoking the connection in the signer.