teams-cli 0.1.5__tar.gz → 0.1.7__tar.gz

{teams_cli-0.1.5 → teams_cli-0.1.7}/.github/workflows/ci.yml

@@ -17,24 +17,24 @@ jobs:
         os: [ubuntu-latest, macos-latest, windows-latest]
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c
         with:
           toolchain: 1.96.0
           components: rustfmt, clippy
-      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6
+      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
       - run: cargo test --locked --all-targets
 
   quality:
     name: Formatting and lints
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c
         with:
           toolchain: 1.96.0
           components: rustfmt, clippy
-      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6
+      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
       - run: cargo fmt -- --check
       - run: cargo clippy --locked --all-targets -- -D warnings
 
@@ -42,12 +42,12 @@ jobs:
     name: Dependency audit
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c
         with:
           toolchain: 1.96.0
           components: rustfmt, clippy
-      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6
+      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
       - name: Install cargo-audit
         run: cargo install cargo-audit --version 0.22.2 --locked
       - name: Audit Cargo.lock

teams_cli-0.1.7/.github/workflows/dependencies.yml

@@ -0,0 +1,28 @@
+name: Dependency health
+
+on:
+  schedule:
+    - cron: "7 6 * * 1"
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  id-token: write
+  packages: read
+  pull-requests: read
+
+jobs:
+  update:
+    uses: rvben/upd/.github/workflows/dependency-health.yml@ecb605d32c4edc8dee4091aeb30b3d37ebdd290a # v0.10.0
+    with:
+      langs: rust,actions
+      lock: true
+      min-age: 7d
+      max-bump: minor
+      prepare-command: >-
+        rustup toolchain install 1.96.0 --profile minimal --component clippy,rustfmt &&
+        rustup default 1.96.0
+      validation-command: make check
+      fail-on-blocked: false
+      branch: deps/upd
+      commit-message: "chore(deps): weekly dependency update"

{teams_cli-0.1.5 → teams_cli-0.1.7}/.github/workflows/release.yml

@@ -23,7 +23,7 @@ jobs:
     name: Verify release version
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Match tag to package version
         env:
           REQUESTED_VERSION: ${{ inputs.version }}
@@ -69,13 +69,13 @@ jobs:
       id-token: write
       attestations: write
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c
         with:
           toolchain: 1.96.0
           components: rustfmt, clippy
           targets: ${{ matrix.target }}
-      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6
+      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
         with:
           key: ${{ matrix.target }}
       - run: cargo build --locked --release --target ${{ matrix.target }}
@@ -89,10 +89,10 @@ jobs:
           rm -rf dist/package
       - name: Attest build provenance
         if: ${{ inputs.dry_run != true }}
-        uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6
+        uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2
         with:
           subject-path: dist/*.tar.gz
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: binary-${{ matrix.target }}
           path: dist/*.tar.gz
@@ -119,7 +119,7 @@ jobs:
             manylinux: auto
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
         with:
           maturin-version: v1.14.1
@@ -127,12 +127,12 @@ jobs:
           target: ${{ matrix.target }}
           manylinux: ${{ matrix.manylinux }}
           args: --release --locked --compatibility pypi --out dist
-      - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d
+      - uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
         if: ${{ inputs.dry_run == true }}
       - name: Validate wheel metadata
         if: ${{ inputs.dry_run == true }}
         run: uvx --from twine==6.2.0 twine check --strict dist/*.whl
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: wheel-${{ matrix.target }}
           path: dist/*.whl
@@ -143,7 +143,7 @@ jobs:
     needs: [version, verify]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c
         with:
           toolchain: 1.96.0
@@ -158,12 +158,12 @@ jobs:
           command: sdist
           args: --out dist
       - run: cp target/package/*.crate dist/
-      - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d
+      - uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
         if: ${{ inputs.dry_run == true }}
       - name: Validate source distribution metadata
         if: ${{ inputs.dry_run == true }}
         run: uvx --from twine==6.2.0 twine check --strict dist/*.tar.gz
-      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: source-distributions
           path: dist/*
@@ -178,13 +178,13 @@ jobs:
       id-token: write
       attestations: write
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           pattern: binary-*
           path: dist
           merge-multiple: true
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: source-distributions
           path: dist
@@ -198,7 +198,7 @@ jobs:
         run: sha256sum ./*.tar.gz ./*.crate ./*.json > SHA256SUMS
       - name: Attest artifacts and SBOM
         if: ${{ inputs.dry_run != true }}
-        uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6
+        uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2
         with:
           subject-path: dist/*
           sbom-path: dist/teams-cli.cdx.json
@@ -217,7 +217,7 @@ jobs:
     permissions:
       id-token: write
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c
         with:
           toolchain: 1.96.0
@@ -239,7 +239,7 @@ jobs:
       - name: Get temporary crates.io token
         if: steps.crate.outputs.exists != 'true'
         id: crates-auth
-        uses: rust-lang/crates-io-auth-action@c6f97d42243bad5fab37ca0427f495c86d5b1a18
+        uses: rust-lang/crates-io-auth-action@c6f97d42243bad5fab37ca0427f495c86d5b1a18 # v1.0.5
       - if: steps.crate.outputs.exists != 'true'
         run: cargo publish --locked
         env:
@@ -258,18 +258,18 @@ jobs:
     permissions:
       id-token: write
     steps:
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           pattern: wheel-*
           path: dist
           merge-multiple: true
-      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: source-distributions
           path: source
       - name: Collect Python distributions
         run: find source -name '*.tar.gz' -exec cp {} dist/ \;
-      - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33
+      - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
         with:
           packages-dir: dist
 
@@ -283,7 +283,7 @@ jobs:
         with:
           toolchain: 1.96.0
           components: rustfmt, clippy
-      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: "3.x"
       - name: Install and run the crates.io package

{teams_cli-0.1.5 → teams_cli-0.1.7}/CHANGELOG.md

@@ -7,6 +7,22 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.1.7](https://github.com/rvben/teams-cli/compare/v0.1.6...v0.1.7) - 2026-09-27
+
+### Fixed
+
+- **deps**: update rustls to 0.23.45 for RUSTSEC-2026-0285 ([d2338ff](https://github.com/rvben/teams-cli/commit/d2338ff8abf676501931c5ba7225097bb154f39c))
+
+## [0.1.6](https://github.com/rvben/teams-cli/compare/v0.1.5...v0.1.6) - 2026-09-03
+
+### Added
+
+- **auth**: standardize authentication workflow ([bb0019f](https://github.com/rvben/teams-cli/commit/bb0019f0ceb86dbb963f3499348c58a95922081e))
+
+### Fixed
+
+- **auth**: tolerate missing Linux credential service ([7764383](https://github.com/rvben/teams-cli/commit/776438359f3c913d0514de921042d770c6a88bf0))
+
 ## [0.1.5](https://github.com/rvben/teams-cli/compare/v0.1.4...v0.1.5) - 2026-08-26
 
 ### Added

{teams_cli-0.1.5 → teams_cli-0.1.7}/Cargo.lock

@@ -316,9 +316,9 @@ checksum = "f079e83a288787bcd14a6aea84cee5c87a67c5a3e660c30f557a3d24761b3527"
 
 [[package]]
 name = "chacha20"
-version = "0.10.1"
+version = "0.10.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d524456ba66e72eb8b115ff89e01e497f8e6d11d78b70b1aa13c0fbd97540a81"
+checksum = "65c35e4b699c7e15ccbe7ee35c005e4fc0a278d22238a2857e6ce2dadeda1b06"
 dependencies = [
  "cfg-if",
  "cpufeatures 0.3.0",
@@ -2557,9 +2557,9 @@ dependencies = [
 
 [[package]]
 name = "rustls"
-version = "0.23.43"
+version = "0.23.45"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0283386ce02abc0151e1761d08802dfe86c173b0b494af5cbc086574e453da06"
+checksum = "0d41d731c7d2f962d1ccc364cec258de3c0e93b38c2fb3ba97ac74513048d634"
 dependencies = [
  "aws-lc-rs",
  "once_cell",
@@ -2964,7 +2964,7 @@ dependencies = [
 
 [[package]]
 name = "teams-cli"
-version = "0.1.5"
+version = "0.1.7"
 dependencies = [
  "assert_cmd",
  "base64 0.23.1",
@@ -2997,7 +2997,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd"
 dependencies = [
  "fastrand",
- "getrandom 0.4.3",
+ "getrandom 0.3.4",
  "once_cell",
  "rustix",
  "windows-sys 0.61.2",

{teams_cli-0.1.5 → teams_cli-0.1.7}/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "teams-cli"
-version = "0.1.5"
+version = "0.1.7"
 edition = "2024"
 rust-version = "1.90"
 description = "A Microsoft Teams CLI and TUI designed equally for humans and agents"

{teams_cli-0.1.5 → teams_cli-0.1.7}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: teams-cli
-Version: 0.1.5
+Version: 0.1.7
 Classifier: Programming Language :: Rust
 Classifier: Programming Language :: Python :: Implementation :: CPython
 License-File: LICENSE
@@ -115,8 +115,14 @@ teams auth login --channel-history  # once, with administrator approval
 teams messages list --team TEAM_ID --channel CHANNEL_ID
 teams messages send --chat CHAT_ID --body "On it."
 printf 'Status update' | teams messages send --chat CHAT_ID --body -
+teams auth status
+teams auth status --offline
+teams profile list
+teams profile use work
+teams profile remove old --yes
 teams config show
-teams doctor
+teams config path
+teams doctor --offline
 ```
 
 Collection commands expose `--limit` and `--fields`; Graph-native collections use `--cursor`, while joined teams and channels use `--offset` because those endpoints do not accept `$top`. With a terminal they render concise text; when stdout is piped they emit JSON envelopes with continuation metadata and `truncated`.

{teams_cli-0.1.5 → teams_cli-0.1.7}/README.md

@@ -99,8 +99,14 @@ teams auth login --channel-history  # once, with administrator approval
 teams messages list --team TEAM_ID --channel CHANNEL_ID
 teams messages send --chat CHAT_ID --body "On it."
 printf 'Status update' | teams messages send --chat CHAT_ID --body -
+teams auth status
+teams auth status --offline
+teams profile list
+teams profile use work
+teams profile remove old --yes
 teams config show
-teams doctor
+teams config path
+teams doctor --offline
 ```
 
 Collection commands expose `--limit` and `--fields`; Graph-native collections use `--cursor`, while joined teams and channels use `--offset` because those endpoints do not accept `$top`. With a terminal they render concise text; when stdout is piped they emit JSON envelopes with continuation metadata and `truncated`.

{teams_cli-0.1.5 → teams_cli-0.1.7}/src/auth.rs

@@ -104,12 +104,29 @@ fn load(profile_name: &str) -> Result<TokenBundle, AppError> {
 pub fn logout(profile_name: &str) -> Result<(), AppError> {
     match entry(profile_name)?.delete_credential() {
         Ok(()) | Err(keyring::Error::NoEntry) => Ok(()),
+        Err(e) if secret_service_is_unavailable(&e) => Ok(()),
         Err(e) => Err(AppError::Unexpected(format!(
             "could not remove stored credentials: {e}"
         ))),
     }
 }
 
+#[cfg(target_os = "linux")]
+fn secret_service_is_unavailable(error: &keyring::Error) -> bool {
+    match error {
+        keyring::Error::PlatformFailure(source) => {
+            let message = source.to_string();
+            message.contains("org.freedesktop.secrets") && message.contains("not provided")
+        }
+        _ => false,
+    }
+}
+
+#[cfg(not(target_os = "linux"))]
+fn secret_service_is_unavailable(_error: &keyring::Error) -> bool {
+    false
+}
+
 pub async fn access_token(profile_name: &str, profile: &Profile) -> Result<String, AppError> {
     if let Ok(token) = std::env::var("TEAMS_ACCESS_TOKEN") {
         return Ok(token);
@@ -385,4 +402,14 @@ mod tests {
     fn channel_history_is_explicitly_opted_in() {
         assert!(scopes(true).contains(CHANNEL_HISTORY_SCOPE));
     }
+
+    #[cfg(target_os = "linux")]
+    #[test]
+    fn missing_secret_service_is_treated_as_an_empty_store() {
+        let error = keyring::Error::PlatformFailure(Box::new(std::io::Error::other(
+            "The name org.freedesktop.secrets was not provided by any .service files",
+        )));
+
+        assert!(super::secret_service_is_unavailable(&error));
+    }
 }

{teams_cli-0.1.5 → teams_cli-0.1.7}/src/cli.rs

@@ -20,6 +20,9 @@ pub struct Cli {
     /// Suppress progress and informational messages
     #[arg(long, global = true)]
     pub quiet: bool,
+    /// Skip confirmation prompts for destructive operations
+    #[arg(long, short = 'y', global = true)]
+    pub yes: bool,
     /// Alias for --output json
     #[arg(long, global = true, hide = true)]
     pub json: bool,
@@ -36,6 +39,11 @@ pub enum Command {
         #[command(subcommand)]
         command: AuthCommand,
     },
+    /// List, select, or remove configuration profiles
+    Profile {
+        #[command(subcommand)]
+        command: ProfileCommand,
+    },
     /// Inspect resolved, secret-free configuration
     Config {
         #[command(subcommand)]
@@ -63,7 +71,11 @@ pub enum Command {
     /// Open the keyboard-first terminal interface
     Tui(TuiArgs),
     /// Check configuration, credential storage, and Graph access
-    Doctor,
+    Doctor {
+        /// Check local state without contacting Microsoft Graph
+        #[arg(long)]
+        offline: bool,
+    },
     /// Describe supported and deliberately unsupported capabilities
     Capabilities,
     /// Emit the offline CLI Spec v0.3 contract
@@ -118,8 +130,22 @@ pub enum AuthCommand {
     },
     /// Remove locally stored credentials
     Logout,
-    /// Show local authentication status without network access
-    Status,
+    /// Verify authentication and show the selected profile's status
+    Status {
+        /// Inspect local credential state without contacting Microsoft Graph
+        #[arg(long)]
+        offline: bool,
+    },
+}
+
+#[derive(Debug, Subcommand)]
+pub enum ProfileCommand {
+    /// List configured profiles and identify the active one
+    List,
+    /// Select the default profile for future commands
+    Use { name: String },
+    /// Remove a profile and its stored credential
+    Remove { name: String },
 }
 
 #[derive(Debug, Subcommand)]

{teams_cli-0.1.5 → teams_cli-0.1.7}/src/config.rs

@@ -44,6 +44,15 @@ struct ConfigFile {
     profiles: BTreeMap<String, Profile>,
 }
 
+#[derive(Debug, Serialize)]
+pub struct ProfileSummary {
+    pub name: String,
+    pub active: bool,
+    pub tenant: String,
+    pub client_id: String,
+    pub read_only: bool,
+}
+
 pub fn path() -> PathBuf {
     if let Some(base) = std::env::var_os("XDG_CONFIG_HOME").filter(|v| !v.is_empty()) {
         PathBuf::from(base).join("teams").join("config.toml")
@@ -61,6 +70,11 @@ pub fn save(profile_name: &str, profile: Profile) -> Result<PathBuf, AppError> {
     let mut config = read_file()?;
     config.profiles.insert(profile_name.to_string(), profile);
     config.active_profile = Some(profile_name.to_string());
+    write_file(&path, &config)?;
+    Ok(path)
+}
+
+fn write_file(path: &std::path::Path, config: &ConfigFile) -> Result<(), AppError> {
     let parent = path
         .parent()
         .ok_or_else(|| AppError::Unexpected("configuration path has no parent".into()))?;
@@ -77,8 +91,8 @@ pub fn save(profile_name: &str, profile: Profile) -> Result<PathBuf, AppError> {
         use std::os::unix::fs::PermissionsExt;
         std::fs::set_permissions(temp.path(), std::fs::Permissions::from_mode(0o600))?;
     }
-    temp.persist(&path).map_err(|error| error.error)?;
-    Ok(path)
+    temp.persist(path).map_err(|error| error.error)?;
+    Ok(())
 }
 
 pub fn load(requested: Option<&str>) -> Result<(String, Profile), AppError> {
@@ -159,6 +173,46 @@ pub fn configured_profile(requested: Option<&str>) -> Option<(String, Profile)>
     load(requested).ok()
 }
 
+pub fn profile_summaries() -> Result<Vec<ProfileSummary>, AppError> {
+    let config = read_file()?;
+    Ok(config
+        .profiles
+        .iter()
+        .map(|(name, profile)| ProfileSummary {
+            name: name.clone(),
+            active: config.active_profile.as_deref() == Some(name.as_str()),
+            tenant: profile.tenant.clone(),
+            client_id: profile.client_id.clone(),
+            read_only: profile.read_only,
+        })
+        .collect())
+}
+
+pub fn use_profile(name: &str) -> Result<(), AppError> {
+    let path = path();
+    let mut config = read_file()?;
+    if !config.profiles.contains_key(name) {
+        return Err(AppError::InvalidInput(format!(
+            "profile '{name}' is not configured"
+        )));
+    }
+    config.active_profile = Some(name.into());
+    write_file(&path, &config)
+}
+
+pub fn remove_profile(name: &str) -> Result<bool, AppError> {
+    let path = path();
+    let mut config = read_file()?;
+    let removed = config.profiles.remove(name).is_some();
+    if removed {
+        if config.active_profile.as_deref() == Some(name) {
+            config.active_profile = config.profiles.keys().next().cloned();
+        }
+        write_file(&path, &config)?;
+    }
+    Ok(removed)
+}
+
 fn read_file() -> Result<ConfigFile, AppError> {
     match std::fs::read_to_string(path()) {
         Ok(body) => toml::from_str(&body)

{teams_cli-0.1.5 → teams_cli-0.1.7}/src/main.rs

@@ -7,7 +7,7 @@ use serde_json::Value;
 use teams_cli::auth;
 use teams_cli::cli::{
     AuthCommand, ChannelsCommand, ChatsCommand, Cli, Command, ConfigCommand, InitArgs,
-    MessagesCommand, OffsetPageArgs, PageArgs, TuiArgs,
+    MessagesCommand, OffsetPageArgs, PageArgs, ProfileCommand, TuiArgs,
 };
 use teams_cli::config::{self, Profile};
 use teams_cli::error::AppError;
@@ -51,6 +51,7 @@ async fn main() {
 
 async fn dispatch(cli: Cli, out: Output) -> Result<(), AppError> {
     let profile_arg = cli.profile.as_deref();
+    let yes = cli.yes;
     let command = match cli.command {
         Some(command) => command,
         None if io::stdin().is_terminal() && io::stdout().is_terminal() && !config::exists() => {
@@ -78,6 +79,7 @@ async fn dispatch(cli: Cli, out: Output) -> Result<(), AppError> {
     match command {
         Command::Init(args) => init(profile_arg.unwrap_or("default"), args, out).await,
         Command::Auth { command } => auth_command(profile_arg, command, out).await,
+        Command::Profile { command } => profile_command(command, yes, out),
         Command::Config { command } => config_command(profile_arg, command, out),
         Command::Whoami => {
             let client = client(profile_arg).await?;
@@ -154,7 +156,7 @@ async fn dispatch(cli: Cli, out: Output) -> Result<(), AppError> {
             })
         }
         Command::Tui(args) => tui_command(profile_arg, args).await,
-        Command::Doctor => doctor(profile_arg, out).await,
+        Command::Doctor { offline } => doctor(profile_arg, offline, out).await,
         Command::Capabilities => capabilities(out),
         Command::Schema { command } => {
             let value = schema::generate(command.as_deref());
@@ -307,7 +309,7 @@ async fn auth_command(
             let value = serde_json::json!({"profile":name,"signed_in":false});
             out.value(&value, || format!("Signed out profile '{name}'."))
         }
-        AuthCommand::Status => {
+        AuthCommand::Status { offline } => {
             let configured = config::configured_profile(profile_arg);
             let name = configured
                 .as_ref()
@@ -316,7 +318,12 @@ async fn auth_command(
             let signed_in = auth::has_token(name);
             let scopes = auth::granted_scopes(name);
             let channel_history = auth::channel_history_granted(name);
-            let value = serde_json::json!({"profile":name,"configured":configured.is_some(),"signed_in":signed_in,"config_path":config::path(),"read_only":configured.as_ref().is_some_and(|(_, profile)| profile.read_only),"granted_scopes":scopes,"channel_history":channel_history});
+            let identity = if !offline && configured.is_some() && signed_in {
+                Some(client(Some(name)).await?.me().await?)
+            } else {
+                None
+            };
+            let value = serde_json::json!({"profile":name,"configured":configured.is_some(),"signed_in":signed_in,"verified":identity.is_some(),"identity":identity,"config_path":config::path(),"read_only":configured.as_ref().is_some_and(|(_, profile)| profile.read_only),"granted_scopes":scopes,"channel_history":channel_history});
             out.value(&value, || {
                 format!(
                     "Profile: {name}\nConfigured: {}\nSigned in: {}\nRead only: {}\nChannel history: {}\nConfig: {}",
@@ -331,6 +338,59 @@ async fn auth_command(
     }
 }
 
+fn profile_command(command: ProfileCommand, yes: bool, out: Output) -> Result<(), AppError> {
+    match command {
+        ProfileCommand::List => {
+            let profiles = config::profile_summaries()?;
+            out.value(
+                &serde_json::json!({"items": profiles, "total": profiles.len()}),
+                || {
+                    if profiles.is_empty() {
+                        "No profiles configured. Run `teams init`.".into()
+                    } else {
+                        profiles
+                            .iter()
+                            .map(|profile| {
+                                format!(
+                                    "{} {}  {}",
+                                    if profile.active { "*" } else { " " },
+                                    profile.name,
+                                    profile.tenant
+                                )
+                            })
+                            .collect::<Vec<_>>()
+                            .join("\n")
+                    }
+                },
+            )
+        }
+        ProfileCommand::Use { name } => {
+            config::use_profile(&name)?;
+            out.value(
+                &serde_json::json!({"profile": name, "active": true}),
+                || format!("Active profile set to '{name}'."),
+            )
+        }
+        ProfileCommand::Remove { name } => {
+            if !yes {
+                return Err(AppError::InvalidInput(
+                    "profile removal requires --yes".into(),
+                ));
+            }
+            auth::logout(&name)?;
+            if !config::remove_profile(&name)? {
+                return Err(AppError::InvalidInput(format!(
+                    "profile '{name}' is not configured"
+                )));
+            }
+            out.value(
+                &serde_json::json!({"profile": name, "removed": true}),
+                || format!("Removed profile '{name}'."),
+            )
+        }
+    }
+}
+
 async fn client(profile_arg: Option<&str>) -> Result<GraphClient, AppError> {
     let (name, profile) = config::load(profile_arg)?;
     let token = auth::access_token(&name, &profile).await?;
@@ -541,7 +601,7 @@ struct Check {
     detail: String,
 }
 
-async fn doctor(profile_arg: Option<&str>, out: Output) -> Result<(), AppError> {
+async fn doctor(profile_arg: Option<&str>, offline: bool, out: Output) -> Result<(), AppError> {
     let mut checks = Vec::new();
     let configured = config::configured_profile(profile_arg);
     checks.push(Check {
@@ -593,7 +653,7 @@ async fn doctor(profile_arg: Option<&str>, out: Output) -> Result<(), AppError>
     });
     let mut identity_ok = false;
     let mut teams_ok = false;
-    let (identity_detail, teams_detail) = if configured.is_some() && signed_in {
+    let (identity_detail, teams_detail) = if !offline && configured.is_some() && signed_in {
         match client(profile_arg).await {
             Ok(client) => {
                 let identity_detail = match client.me().await {
@@ -623,21 +683,38 @@ async fn doctor(profile_arg: Option<&str>, out: Output) -> Result<(), AppError>
             }
         }
     } else {
-        let detail = "skipped until setup is complete".to_string();
+        let detail = if offline {
+            "network check skipped"
+        } else {
+            "skipped until setup is complete"
+        }
+        .to_string();
         (detail.clone(), detail)
     };
     checks.push(Check {
         name: "microsoft_identity",
-        status: if identity_ok { "pass" } else { "fail" },
+        status: if offline {
+            "skip"
+        } else if identity_ok {
+            "pass"
+        } else {
+            "fail"
+        },
         detail: identity_detail,
     });
     checks.push(Check {
         name: "microsoft_teams",
-        status: if teams_ok { "pass" } else { "fail" },
+        status: if offline {
+            "skip"
+        } else if teams_ok {
+            "pass"
+        } else {
+            "fail"
+        },
         detail: teams_detail,
     });
     let healthy = checks.iter().all(|check| check.status != "fail");
-    let value = serde_json::json!({"checks":checks,"healthy":healthy});
+    let value = serde_json::json!({"checks":checks,"healthy":healthy,"offline":offline});
     out.value(&value, || {
         checks
             .iter()

{teams_cli-0.1.5 → teams_cli-0.1.7}/src/schema.rs

@@ -130,20 +130,57 @@ pub fn generate(command_filter: Option<&str>) -> Value {
             "idempotent",
             vec![field("profile", "string"), field("signed_in", "boolean")],
         ),
+        {
+            let mut value = single(
+                "auth status",
+                "Verify authentication and inspect credential state",
+                "read_only",
+                vec![
+                    field("profile", "string"),
+                    field("configured", "boolean"),
+                    field("signed_in", "boolean"),
+                    field("verified", "boolean"),
+                    nullable_field("identity", "object"),
+                    field("config_path", "string"),
+                    field("read_only", "boolean"),
+                    nullable_array_field("granted_scopes", "string"),
+                    nullable_field("channel_history", "boolean"),
+                ],
+            );
+            value["args"] = json!([arg(
+                "--offline",
+                "boolean",
+                "Inspect local credential state without contacting Microsoft Graph"
+            )]);
+            value
+        },
         single(
-            "auth status",
-            "Inspect local configuration and credential presence without network access",
+            "profile list",
+            "List configured profiles and identify the active one",
             "read_only",
-            vec![
-                field("profile", "string"),
-                field("configured", "boolean"),
-                field("signed_in", "boolean"),
-                field("config_path", "string"),
-                field("read_only", "boolean"),
-                nullable_array_field("granted_scopes", "string"),
-                nullable_field("channel_history", "boolean"),
-            ],
+            vec![array_field("items", "object"), field("total", "integer")],
         ),
+        {
+            let mut value = single(
+                "profile use",
+                "Select the default profile for future commands",
+                "idempotent",
+                vec![field("profile", "string"), field("active", "boolean")],
+            );
+            value["args"] = json!([required_arg("name", "string", "Profile name")]);
+            value
+        },
+        {
+            let mut value = single(
+                "profile remove",
+                "Remove a profile and its stored credential",
+                "idempotent",
+                vec![field("profile", "string"), field("removed", "boolean")],
+            );
+            value["args"] = json!([required_arg("name", "string", "Profile name")]);
+            value["confirmation_bypass_arg"] = json!("--yes");
+            value
+        },
         single(
             "config show",
             "Print the resolved profile without credentials",
@@ -246,12 +283,20 @@ pub fn generate(command_filter: Option<&str>) -> Value {
             value
         },
         json!({"name":"tui", "description":"Open the keyboard-first terminal interface", "effects":"read_only", "output_kind":"opaque", "media_type":"text/plain", "requires_tty":true, "args":[arg("--demo", "boolean", "Use deterministic sample data"), arg("--snapshot", "boolean", "Print one ANSI-free demo frame")]}),
-        single(
-            "doctor",
-            "Check configuration, credential storage, Microsoft identity, and Teams provisioning",
-            "read_only",
-            vec![array_field("checks", "object"), field("healthy", "boolean")],
-        ),
+        {
+            let mut value = single(
+                "doctor",
+                "Check configuration, credential storage, Microsoft identity, and Teams provisioning",
+                "read_only",
+                vec![array_field("checks", "object"), field("healthy", "boolean")],
+            );
+            value["args"] = json!([arg(
+                "--offline",
+                "boolean",
+                "Check local state without contacting Microsoft Graph"
+            )]);
+            value
+        },
         single(
             "capabilities",
             "Describe supported and deliberately unsupported capabilities",
@@ -287,7 +332,8 @@ pub fn generate(command_filter: Option<&str>) -> Value {
         "global_args": [
             {"name":"--output", "short":"-o", "type":"string", "enum":["auto","text","json"], "default":"auto", "description":"Output format"},
             {"name":"--profile", "type":"string", "description":"Configuration profile"},
-            {"name":"--quiet", "type":"boolean", "description":"Suppress informational stderr output"}
+            {"name":"--quiet", "type":"boolean", "description":"Suppress informational stderr output"},
+            {"name":"--yes", "short":"-y", "type":"boolean", "description":"Skip confirmation prompts for destructive operations"}
         ],
         "commands": commands,
         "errors": error::ALL.iter().map(|e| json!({"kind":e.kind,"exit_code":e.exit_code,"retryable":e.retryable,"description":e.description})).collect::<Vec<_>>(),

{teams_cli-0.1.5 → teams_cli-0.1.7}/tests/cli.rs

@@ -142,6 +142,58 @@ fn init_can_create_a_read_only_profile_and_config_show_resolves_it() {
         .stdout(predicate::str::contains("\"read_only\": true"));
 }
 
+#[test]
+fn profile_lifecycle_and_offline_auth_status_are_local() {
+    let temp = tempfile::tempdir().unwrap();
+    for name in ["work", "sandbox"] {
+        Command::cargo_bin("teams")
+            .unwrap()
+            .env("XDG_CONFIG_HOME", temp.path())
+            .args(["--profile", name, "init", "--no-login"])
+            .assert()
+            .success();
+    }
+
+    Command::cargo_bin("teams")
+        .unwrap()
+        .env("XDG_CONFIG_HOME", temp.path())
+        .args(["profile", "use", "work"])
+        .assert()
+        .success();
+
+    let list = Command::cargo_bin("teams")
+        .unwrap()
+        .env("XDG_CONFIG_HOME", temp.path())
+        .args(["--output", "json", "profile", "list"])
+        .output()
+        .unwrap();
+    assert!(list.status.success());
+    let value: Value = serde_json::from_slice(&list.stdout).unwrap();
+    assert_eq!(value["total"], 2);
+    assert!(
+        value["items"]
+            .as_array()
+            .unwrap()
+            .iter()
+            .any(|profile| { profile["name"] == "work" && profile["active"] == true })
+    );
+
+    Command::cargo_bin("teams")
+        .unwrap()
+        .env("XDG_CONFIG_HOME", temp.path())
+        .args(["auth", "status", "--offline"])
+        .assert()
+        .success()
+        .stdout(predicate::str::contains("\"verified\": false"));
+
+    Command::cargo_bin("teams")
+        .unwrap()
+        .env("XDG_CONFIG_HOME", temp.path())
+        .args(["profile", "remove", "sandbox", "--yes"])
+        .assert()
+        .success();
+}
+
 #[test]
 fn suite_exit_codes_and_error_kinds_are_stable() {
     let schema: Value = serde_json::from_slice(

teams_cli-0.1.5/.github/dependabot.yml

@@ -1,6 +0,0 @@
-version: 2
-updates:
-  - package-ecosystem: github-actions
-    directory: /
-    schedule:
-      interval: weekly