/logout

description: Sign out of one or all Salesforce orgs (sf org logout). Confirms before destructive action.
allowed-tools:
  - Bash
argument-hint: "[--target-org <alias>] [--all]"

Log out of one or more Salesforce orgs.

Workflow:

1. **Parse arguments** ($ARGUMENTS):

• `--target-org <alias>` → log out of a specific org
• `--all` → log out of every authenticated org
• No arguments → list current orgs and ask which to log out of

2. **If no arguments:** call `sf org list --skip-connection-status --json` (skip the per-org token refresh), present the orgs in a numbered list, and ask the user which to log out of.

3. **Confirm before action:** show the alias(es) about to be logged out and require explicit "yes" confirmation. This is destructive and the user will need to re-authenticate to use the org again.

4. **Run the logout:**

   sf org logout --target-org <alias> --no-prompt
   # or
   sf org logout --all --no-prompt

5. **Report:** confirm which orgs are now logged out. If the project's current `target-org` was logged out, suggest the user pick a new default via `/salesforce-development:set-default <alias>` or authenticate fresh via `/salesforce-development:login`.

Rules:

• ALWAYS confirm before logging out
• NEVER log out without explicit user input (no auto-cleanup)
• If the user logs out of the target-org, their next deploy/data command will fail until they reconfigure