feat(cli): Add /auth logout command to clear credentials and auth state (#13383)

packages/cli/src/ui/commands/authCommand.ts

@@ -4,12 +4,18 @@
  * SPDX-License-Identifier: Apache-2.0
  */
 
-import type { OpenDialogActionReturn, SlashCommand } from './types.js';
+import type {
+  OpenDialogActionReturn,
+  SlashCommand,
+  LogoutActionReturn,
+} from './types.js';
 import { CommandKind } from './types.js';
+import { clearCachedCredentialFile } from '@google/gemini-cli-core';
+import { SettingScope } from '../../config/settings.js';
 
-export const authCommand: SlashCommand = {
-  name: 'auth',
-  description: 'Change the auth method',
+const authLoginCommand: SlashCommand = {
+  name: 'login',
+  description: 'Login or change the auth method',
   kind: CommandKind.BUILT_IN,
   autoExecute: true,
   action: (_context, _args): OpenDialogActionReturn => ({
@@ -17,3 +23,34 @@ export const authCommand: SlashCommand = {
     dialog: 'auth',
   }),
 };
+
+const authLogoutCommand: SlashCommand = {
+  name: 'logout',
+  description: 'Log out and clear all cached credentials',
+  kind: CommandKind.BUILT_IN,
+  action: async (context, _args): Promise<LogoutActionReturn> => {
+    await clearCachedCredentialFile();
+    // Clear the selected auth type so user sees the auth selection menu
+    context.services.settings.setValue(
+      SettingScope.User,
+      'security.auth.selectedType',
+      undefined,
+    );
+    // Strip thoughts from history instead of clearing completely
+    context.services.config?.getGeminiClient()?.stripThoughtsFromHistory();
+    // Return logout action to signal explicit state change
+    return {
+      type: 'logout',
+    };
+  },
+};
+
+export const authCommand: SlashCommand = {
+  name: 'auth',
+  description: 'Manage authentication',
+  kind: CommandKind.BUILT_IN,
+  subCommands: [authLoginCommand, authLogoutCommand],
+  action: (context, args) =>
+    // Default to login if no subcommand is provided
+    authLoginCommand.action!(context, args),
+};