destroy --purge: also wipe agent state dirs

new --purge flag on the destroy verb (cli + admin socket + dashboard).
default destroy still keeps /var/lib/hyperhive/{agents,applied}/<name>/
so recreating with the same name reuses prior config + creds.
with --purge, both dirs go too (config history, claude creds, /state/
notes). no undo. dashboard adds a separate PURG3 button with an
explicit confirmation copy; the existing DESTR0Y button keeps the
soft semantics.

claude.md dashboard-action-surface section updated; todo entry
dropped.

TODO.md

@@ -42,11 +42,18 @@ Pick anything from here when relevant. Cross-cutting design notes live in
   channel from the harness: idle when waiting on the inbox, thinking
   while claude's stream is open, compacting when `/compact` is in
   flight. Replaces the binary "harness alive — turn loop running" line.
-- **Terminal: slash commands + tab-completion.** Operator-facing
-  in-terminal commands: `/help`, `/model`, `/compact`, `/clear`. Tab
-  completes command names + model names (cf. bitburner-agent's pattern).
-- **Terminal: multi-line input.** Replace the single-line `<input>` with
-  an auto-growing textarea; Enter sends, Shift+Enter newlines.
+- **Terminal: slash commands beyond /help and /clear.** Operator-facing
+  in-terminal commands still to add: `/model`, `/compact`, `/cancel`.
+  Each needs harness-side support (model override, force compaction,
+  cancel current claude turn).
+- **Terminal: bigger.** The 32em max-height is cramped on a 1080p+
+  screen. Grow it (e.g. `min(70vh, 60em)`) so the live tail is the
+  main visual element of the page rather than a strip.
+- **Terminal: sticky-bottom auto-scroll.** Today every appended row
+  scrolls to bottom, so the view shifts while the operator is reading
+  scrolled-up. Track whether the user is *already* at the bottom
+  (within a small threshold), and only auto-scroll when that's true.
+  Show a small "↓ N new" indicator when not at bottom; click to jump.
 - **Terminal: cancel-current-turn button.** Explicit "kill claude
   process for this turn" control. Harness needs to track the
   in-flight claude child PID and offer a `/cancel` endpoint that sends
@@ -57,9 +64,6 @@ Pick anything from here when relevant. Cross-cutting design notes live in
   same session id. Surfaces as a slash command in the terminal + a
   toolbar button while the state badge is `idle`. Sets state to
   `compacting` during the run.
-- **Visuals.** Frosted-glass backdrop blur on the terminal wrap,
-  per-event fade-in slide-up animation on new rows, badge pulse
-  animation on state-badge transitions.
 - **xterm.js terminal** embedded per-agent, attached to a PTY exposed by
   the harness. Pairs well with the unprivileged-container work — would let
   the operator drop into the container without `nixos-container root-login`.
@@ -115,9 +119,6 @@ Pick anything from here when relevant. Cross-cutting design notes live in
 - **Container crash events.** Watch `container@*.service` via D-Bus, push
   `HelperEvent::ContainerCrash` to the manager's inbox so the manager can
   react (restart, escalate, etc.).
-- **`destroy --purge`.** Today `destroy` keeps state by design; add an
-  opt-in flag (CLI + dashboard) to also wipe `/var/lib/hyperhive/agents/<name>/`
-  and `/var/lib/hyperhive/applied/<name>/`.
 
 ## Cleanup / docs