adanos-cli 1.20.2__tar.gz → 1.20.4__tar.gz

{adanos_cli-1.20.2 → adanos_cli-1.20.4}/.github/workflows/cli-binaries.yml

@@ -5,6 +5,9 @@ on:
     types:
       - published
 
+env:
+  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: "true"
+
 jobs:
   build:
     name: Build CLI Binary (${{ matrix.target }})
@@ -37,7 +40,7 @@ jobs:
         run: python scripts/build_cli_binary.py --output-dir dist-binaries
 
       - name: Upload binary artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: cli-binary-${{ matrix.target }}
           if-no-files-found: error
@@ -55,7 +58,7 @@ jobs:
           ref: ${{ github.event.release.tag_name }}
 
       - name: Download binary artifacts
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@v7
         with:
           path: release-artifacts
 
@@ -79,10 +82,9 @@ jobs:
           ls -la release-upload
 
       - name: Publish release assets
-        uses: softprops/action-gh-release@v2
-        with:
-          tag_name: ${{ github.event.release.tag_name }}
-          files: release-upload/*
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: gh release upload "${{ github.event.release.tag_name }}" release-upload/* --clobber
 
   homebrew-formula:
     name: Generate Homebrew Formula
@@ -90,13 +92,15 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: write
+    env:
+      HOMEBREW_TAP_TOKEN: ${{ secrets.HOMEBREW_TAP_TOKEN }}
     steps:
       - uses: actions/checkout@v5
         with:
           ref: ${{ github.event.release.tag_name }}
 
       - name: Download binary artifacts
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@v7
         with:
           path: formula-artifacts
 
@@ -129,13 +133,36 @@ jobs:
             --output dist/homebrew/adanos-cli.rb
 
       - name: Upload Homebrew formula artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: homebrew-formula
           path: dist/homebrew/adanos-cli.rb
 
       - name: Attach Homebrew formula to release
-        uses: softprops/action-gh-release@v2
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: gh release upload "${{ github.event.release.tag_name }}" dist/homebrew/adanos-cli.rb --clobber
+
+      - name: Checkout Homebrew tap repository
+        if: ${{ env.HOMEBREW_TAP_TOKEN != '' }}
+        uses: actions/checkout@v5
         with:
-          tag_name: ${{ github.event.release.tag_name }}
-          files: dist/homebrew/adanos-cli.rb
+          repository: adanos-software/homebrew-tap
+          token: ${{ env.HOMEBREW_TAP_TOKEN }}
+          path: homebrew-tap
+
+      - name: Publish formula to Homebrew tap
+        if: ${{ env.HOMEBREW_TAP_TOKEN != '' }}
+        run: |
+          mkdir -p homebrew-tap/Formula
+          cp dist/homebrew/adanos-cli.rb homebrew-tap/Formula/adanos-cli.rb
+          cd homebrew-tap
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git add Formula/adanos-cli.rb
+          if git diff --cached --quiet; then
+            echo "Homebrew tap already up to date."
+            exit 0
+          fi
+          git commit -m "Update adanos-cli formula for ${{ github.event.release.tag_name }}"
+          git push origin HEAD:main

{adanos_cli-1.20.2 → adanos_cli-1.20.4}/CHANGELOG.md

@@ -5,6 +5,17 @@ All notable changes to `adanos-cli` will be documented in this file.
 Format: [Keep a Changelog](https://keepachangelog.com/en/1.1.0/)
 Versioning: [Semantic Versioning](https://semver.org/spec/v2.0.0.html)
 
+## [1.20.4] - 2026-03-17
+
+### Added
+- Added `adanos onboard recover --email ...` so existing users can trigger the secure email-based recovery flow from the CLI without exposing recovery tokens in terminal output.
+
+## [1.20.3] - 2026-03-16
+
+### Fixed
+- Standalone release binaries now boot through a package-safe PyInstaller entry point instead of failing on relative imports.
+- Shell installer checksum verification now accepts the `release-upload/` paths emitted by the binary release workflow.
+
 ## [1.20.2] - 2026-03-15
 
 ### Changed

{adanos_cli-1.20.2 → adanos_cli-1.20.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: adanos-cli
-Version: 1.20.2
+Version: 1.20.4
 Summary: CLI for the Adanos Finance Sentiment API
 Project-URL: Homepage, https://adanos.org
 Project-URL: API_Docs, https://api.adanos.org/docs
@@ -43,6 +43,31 @@ The CLI is versioned independently from the API backend. It targets the public A
 pipx install adanos-cli
 ```
 
+### cURL
+
+```bash
+curl -fsSL https://raw.githubusercontent.com/adanos-software/adanos-cli/main/install.sh | bash
+```
+
+The shell installer downloads the latest standalone binary for:
+- macOS arm64
+- macOS x86_64
+- Linux x86_64
+
+By default it installs to `~/.local/bin`. Override with `ADANOS_INSTALL_DIR=/your/path`.
+
+### Homebrew (macOS / Linux)
+
+```bash
+brew install adanos-software/tap/adanos-cli
+```
+
+### PowerShell (Windows)
+
+```powershell
+irm https://raw.githubusercontent.com/adanos-software/adanos-cli/main/install.ps1 | iex
+```
+
 ### Plain pip
 
 ```bash
@@ -110,6 +135,12 @@ Persist a key locally:
 adanos login --api-key sk_live_xxx
 ```
 
+Request a recovery email for an existing account:
+
+```bash
+adanos onboard recover --email you@example.com
+```
+
 Use profiles:
 
 ```bash
@@ -198,7 +229,7 @@ Tagged releases build standalone archives for:
 - macOS x86_64
 - Linux x86_64
 
-The repo also generates a Homebrew formula artifact for each tagged binary release.
+The repo also generates a Homebrew formula artifact for each tagged binary release and can publish it to `adanos-software/homebrew-tap` when `HOMEBREW_TAP_TOKEN` is configured.
 
 PyPI publishing also happens from this repo, not from the API monorepo.
 

{adanos_cli-1.20.2 → adanos_cli-1.20.4}/README.md

@@ -17,6 +17,31 @@ The CLI is versioned independently from the API backend. It targets the public A
 pipx install adanos-cli
 ```
 
+### cURL
+
+```bash
+curl -fsSL https://raw.githubusercontent.com/adanos-software/adanos-cli/main/install.sh | bash
+```
+
+The shell installer downloads the latest standalone binary for:
+- macOS arm64
+- macOS x86_64
+- Linux x86_64
+
+By default it installs to `~/.local/bin`. Override with `ADANOS_INSTALL_DIR=/your/path`.
+
+### Homebrew (macOS / Linux)
+
+```bash
+brew install adanos-software/tap/adanos-cli
+```
+
+### PowerShell (Windows)
+
+```powershell
+irm https://raw.githubusercontent.com/adanos-software/adanos-cli/main/install.ps1 | iex
+```
+
 ### Plain pip
 
 ```bash
@@ -84,6 +109,12 @@ Persist a key locally:
 adanos login --api-key sk_live_xxx
 ```
 
+Request a recovery email for an existing account:
+
+```bash
+adanos onboard recover --email you@example.com
+```
+
 Use profiles:
 
 ```bash
@@ -172,7 +203,7 @@ Tagged releases build standalone archives for:
 - macOS x86_64
 - Linux x86_64
 
-The repo also generates a Homebrew formula artifact for each tagged binary release.
+The repo also generates a Homebrew formula artifact for each tagged binary release and can publish it to `adanos-software/homebrew-tap` when `HOMEBREW_TAP_TOKEN` is configured.
 
 PyPI publishing also happens from this repo, not from the API monorepo.
 

adanos_cli-1.20.4/install.ps1

@@ -0,0 +1,40 @@
+$ErrorActionPreference = "Stop"
+
+$packageName = "adanos-cli"
+
+function Write-Info($message) {
+    Write-Host $message
+}
+
+function Get-PythonCommand {
+    foreach ($candidate in @("py", "python", "python3")) {
+        if (Get-Command $candidate -ErrorAction SilentlyContinue) {
+            return $candidate
+        }
+    }
+    throw "Python is required. Install Python 3.10+ and re-run this script."
+}
+
+$python = Get-PythonCommand
+$pipx = Get-Command pipx -ErrorAction SilentlyContinue
+
+if (-not $pipx) {
+    Write-Info "Installing pipx..."
+    & $python -m pip install --user --upgrade pip pipx
+    & $python -m pipx ensurepath | Out-Null
+}
+
+$pipx = Get-Command pipx -ErrorAction SilentlyContinue
+
+if ($pipx) {
+    Write-Info "Installing $packageName with pipx..."
+    & $pipx.Source install --force $packageName
+} else {
+    Write-Info "pipx is not available in the current session. Falling back to pip --user."
+    & $python -m pip install --user --upgrade $packageName
+}
+
+Write-Info ""
+Write-Info "Installed $packageName."
+Write-Info "Verify with:"
+Write-Info "  adanos --version"

adanos_cli-1.20.4/install.sh

@@ -0,0 +1,110 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+REPO="adanos-software/adanos-cli"
+LATEST_BASE_URL="https://github.com/${REPO}/releases/latest/download"
+DEFAULT_INSTALL_DIR="${HOME}/.local/bin"
+INSTALL_DIR="${ADANOS_INSTALL_DIR:-$DEFAULT_INSTALL_DIR}"
+
+log() {
+  printf '%s\n' "$*"
+}
+
+fail() {
+  printf 'error: %s\n' "$*" >&2
+  exit 1
+}
+
+require_cmd() {
+  command -v "$1" >/dev/null 2>&1 || fail "missing required command: $1"
+}
+
+detect_asset() {
+  local os arch
+  os="$(uname -s)"
+  arch="$(uname -m)"
+
+  case "$os" in
+    Darwin)
+      case "$arch" in
+        arm64|aarch64) printf 'adanos-darwin-arm64.tar.gz' ;;
+        x86_64|amd64) printf 'adanos-darwin-x86_64.tar.gz' ;;
+        *) fail "unsupported macOS architecture: ${arch}" ;;
+      esac
+      ;;
+    Linux)
+      case "$arch" in
+        x86_64|amd64) printf 'adanos-linux-x86_64.tar.gz' ;;
+        *) fail "unsupported Linux architecture: ${arch}" ;;
+      esac
+      ;;
+    *)
+      fail "unsupported operating system: ${os}"
+      ;;
+  esac
+}
+
+verify_checksum() {
+  local archive_path checksums_path asset_name expected actual
+  archive_path="$1"
+  checksums_path="$2"
+  asset_name="$3"
+
+  expected="$(awk -v asset="$asset_name" '$2 ~ ("(^|/)" asset "$") {print $1; exit}' "$checksums_path")"
+  [ -n "$expected" ] || fail "could not find checksum for ${asset_name}"
+
+  if command -v shasum >/dev/null 2>&1; then
+    actual="$(shasum -a 256 "$archive_path" | awk '{print $1}')"
+  elif command -v sha256sum >/dev/null 2>&1; then
+    actual="$(sha256sum "$archive_path" | awk '{print $1}')"
+  else
+    fail "missing checksum tool (shasum or sha256sum)"
+  fi
+
+  [ "$actual" = "$expected" ] || fail "checksum mismatch for ${asset_name}"
+}
+
+print_path_hint() {
+  case ":${PATH}:" in
+    *":${INSTALL_DIR}:"*) ;;
+    *)
+      log
+      log "Add this to your shell profile if needed:"
+      log "  export PATH=\"${INSTALL_DIR}:\$PATH\""
+      ;;
+  esac
+}
+
+main() {
+  require_cmd curl
+  require_cmd tar
+  require_cmd mktemp
+  require_cmd install
+
+  local asset_name tmp_dir archive_path checksums_path
+  asset_name="$(detect_asset)"
+  tmp_dir="$(mktemp -d)"
+  archive_path="${tmp_dir}/${asset_name}"
+  checksums_path="${tmp_dir}/SHA256SUMS.txt"
+
+  log "Downloading ${asset_name}..."
+  curl -fsSL "${LATEST_BASE_URL}/${asset_name}" -o "$archive_path"
+  curl -fsSL "${LATEST_BASE_URL}/SHA256SUMS.txt" -o "$checksums_path"
+
+  verify_checksum "$archive_path" "$checksums_path" "$asset_name"
+
+  mkdir -p "${INSTALL_DIR}"
+  tar -xzf "$archive_path" -C "$tmp_dir"
+  install -m 0755 "${tmp_dir}/adanos" "${INSTALL_DIR}/adanos"
+
+  rm -rf "$tmp_dir"
+
+  log
+  log "Installed adanos to ${INSTALL_DIR}/adanos"
+  print_path_hint
+  log
+  log "Verify with:"
+  log "  adanos --version"
+}
+
+main "$@"

{adanos_cli-1.20.2 → adanos_cli-1.20.4}/scripts/build_cli_binary.py

@@ -15,7 +15,7 @@ from pathlib import Path
 
 REPO_ROOT = Path(__file__).resolve().parent.parent
 CLI_SRC = REPO_ROOT / "src"
-CLI_ENTRYPOINT = CLI_SRC / "adanos_cli" / "__main__.py"
+CLI_ENTRYPOINT = REPO_ROOT / "scripts" / "pyinstaller_entrypoint.py"
 PACKAGE_INIT = CLI_SRC / "adanos_cli" / "__init__.py"
 
 

{adanos_cli-1.20.2 → adanos_cli-1.20.4}/scripts/generate_homebrew_formula.py

@@ -19,7 +19,7 @@ def render_formula(
 ) -> str:
     return f"""class AdanosCli < Formula
   desc "Comprehensive CLI for the Adanos Finance Sentiment API"
-  homepage "https://api.adanos.org"
+  homepage "https://adanos.org"
   version "{version}"
 
   on_macos do
@@ -42,7 +42,7 @@ def render_formula(
   end
 
   test do
-    assert_match "adanos", shell_output("#{bin}/adanos --help")
+    assert_match "adanos", shell_output("#{{bin}}/adanos --help")
   end
 end
 """

adanos_cli-1.20.4/scripts/pyinstaller_entrypoint.py

@@ -0,0 +1,8 @@
+#!/usr/bin/env python3
+"""PyInstaller entry point for the standalone adanos binary."""
+
+from adanos_cli.main import main
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())

{adanos_cli-1.20.2 → adanos_cli-1.20.4}/src/adanos_cli/__init__.py

@@ -1,4 +1,4 @@
 """Adanos CLI package."""
 
 __all__ = ["__version__"]
-__version__ = "1.20.2"
+__version__ = "1.20.4"

{adanos_cli-1.20.2 → adanos_cli-1.20.4}/src/adanos_cli/main.py

@@ -67,6 +67,7 @@ from .watchlists import (
 
 SUPPORT_CONTACT_EMAIL = "support@adanos.org"
 PAID_ACCOUNT_TYPES = {"hobby", "professional"}
+DEFAULT_RECOVERY_REQUEST_URL = "https://adanos.org/api/recover"
 
 
 def _load_sdk_client_class() -> Any:
@@ -95,7 +96,9 @@ def _print_onboarding_guide(base_url: str, *, has_api_key: bool = False) -> None
     print("3) Manual alternative:")
     print('   adanos onboard register --name "Your Name" --email "you@example.com" --purpose "CLI usage for stocks and crypto"')
     print("   adanos onboard redeem --token <delivery_token> --save")
-    print("4) Start using the API:")
+    print("4) If you lost access to an existing key:")
+    print('   adanos onboard recover --email "you@example.com"')
+    print("5) Start using the API:")
     print('   adanos ask "How does TSLA look?"')
     print(f"API base URL: {base_url}")
 
@@ -916,6 +919,14 @@ def _request_onboard_redeem(base_url: str, token: str) -> tuple[int, dict[str, A
     return response.status_code, data, message
 
 
+def _request_onboard_recover(recovery_url: str, payload: dict[str, str]) -> tuple[int, dict[str, Any] | None, str]:
+    with httpx.Client(timeout=30.0) as http:
+        response = http.post(recovery_url, json=payload)
+    data = _decode_json_dict(response)
+    message = _extract_error_message(response)
+    return response.status_code, data, message
+
+
 def _request_account_status(
     base_url: str, api_key: str, *, timeout_s: float = 30.0
 ) -> tuple[int, dict[str, Any] | None, str, dict[str, str]]:
@@ -1628,6 +1639,46 @@ def _run_onboard_redeem(args: Namespace, base_url: str, *, json_mode: bool) -> i
     return 0
 
 
+def _run_onboard_recover(args: Namespace, *, json_mode: bool) -> int:
+    recovery_url = str(args.recovery_url or DEFAULT_RECOVERY_REQUEST_URL).strip()
+    status_code, data, message = _request_onboard_recover(recovery_url, {"email": args.email})
+    if status_code not in {200, 202}:
+        _emit_error(
+            json_mode=json_mode,
+            code="onboard_recover_failed",
+            message=message if message else "Recovery request failed",
+            hint="Retry later or open https://adanos.org/key to use the hosted recovery form.",
+            status_code=status_code,
+        )
+        return 1
+
+    if not isinstance(data, dict) or data.get("success") is not True:
+        _emit_error(
+            json_mode=json_mode,
+            code="onboard_recover_failed",
+            message="Response did not include structured recovery data",
+            status_code=status_code,
+        )
+        return 1
+
+    if json_mode:
+        print_json(
+            with_json_metadata(
+                data,
+                kind="onboard_recovery",
+                command="onboard",
+                subcommand="recover",
+            )
+        )
+    else:
+        print("Recovery request accepted.")
+        print(str(data.get("message") or "If an account exists, further recovery instructions will be sent separately."))
+        print("Next step:")
+        print("  Check your email for the secure recovery link.")
+
+    return 0
+
+
 def _run_onboard_wizard(args: Namespace, base_url: str, *, json_mode: bool, runtime_has_key: bool) -> int:
     if json_mode:
         _emit_error(
@@ -1789,6 +1840,12 @@ def _build_parser() -> argparse.ArgumentParser:
     p_onboard_redeem.add_argument("--json", action="store_true")
     p_onboard_redeem.set_defaults(_handler="onboard_redeem")
 
+    p_onboard_recover = onboard_subs.add_parser("recover", help="Request a recovery email for an existing API key")
+    p_onboard_recover.add_argument("--email", required=True, help="Registered email address for the API account")
+    p_onboard_recover.add_argument("--recovery-url", help=argparse.SUPPRESS)
+    p_onboard_recover.add_argument("--json", action="store_true")
+    p_onboard_recover.set_defaults(_handler="onboard_recover")
+
     p_onboard.set_defaults(_handler="onboard_guide")
 
     p_auth = subs.add_parser("auth", help="Manage local auth profiles and active credentials")
@@ -2111,6 +2168,7 @@ def _requires_api_key(args: Namespace) -> bool:
         "onboard_wizard",
         "onboard_register",
         "onboard_redeem",
+        "onboard_recover",
         "auth_login",
         "auth_logout",
         "auth_list",
@@ -3354,6 +3412,7 @@ def _main_impl(raw_argv: list[str], *, argv_supplied: bool) -> int:
                                 "adanos onboard wizard",
                                 'adanos onboard register --name "Your Name" --email "you@example.com" --purpose "CLI usage for stocks and crypto"',
                                 "adanos onboard redeem --token <delivery_token> --save",
+                                'adanos onboard recover --email "you@example.com"',
                             ],
                         },
                     },
@@ -3380,6 +3439,9 @@ def _main_impl(raw_argv: list[str], *, argv_supplied: bool) -> int:
     if handler == "onboard_redeem":
         return _run_onboard_redeem(args, runtime_cfg.base_url, json_mode=args.json)
 
+    if handler == "onboard_recover":
+        return _run_onboard_recover(args, json_mode=args.json)
+
     if _requires_api_key(args) and not runtime_cfg.api_key:
         if args.json:
             _emit_error(

{adanos_cli-1.20.2 → adanos_cli-1.20.4}/tests/test_distribution.py

@@ -2,13 +2,19 @@
 
 from __future__ import annotations
 
+import os
+import stat
+import subprocess
 import sys
+from pathlib import Path
 
 from adanos_cli import __version__
 import scripts.generate_homebrew_formula as homebrew_formula
 from scripts.build_cli_binary import CLI_ENTRYPOINT, CLI_SRC, build_pyinstaller_command, detect_target, read_package_version
 from scripts.generate_homebrew_formula import render_formula
 
+REPO_ROOT = Path(__file__).resolve().parents[1]
+
 
 def test_render_formula_includes_all_targets() -> None:
     formula = render_formula(
@@ -62,6 +68,13 @@ def test_build_pyinstaller_command_uses_repo_local_paths(tmp_path) -> None:
     assert "stocksentiment" in command
 
 
+def test_pyinstaller_entrypoint_imports_main() -> None:
+    entrypoint = CLI_ENTRYPOINT.read_text(encoding="utf-8")
+
+    assert "from adanos_cli.main import main" in entrypoint
+    assert "raise SystemExit(main())" in entrypoint
+
+
 def test_render_formula_includes_install_and_test_blocks() -> None:
     formula = render_formula(
         version="1.20.0",
@@ -74,8 +87,9 @@ def test_render_formula_includes_install_and_test_blocks() -> None:
     )
 
     assert "class AdanosCli < Formula" in formula
+    assert 'homepage "https://adanos.org"' in formula
     assert "def install" in formula
-    assert 'assert_match "adanos"' in formula
+    assert 'assert_match "adanos", shell_output("#{bin}/adanos --help")' in formula
 
 
 def test_homebrew_formula_main_writes_output_file(tmp_path, monkeypatch) -> None:
@@ -108,3 +122,63 @@ def test_homebrew_formula_main_writes_output_file(tmp_path, monkeypatch) -> None
 
     assert output_path.exists()
     assert 'version "1.20.0"' in output_path.read_text(encoding="utf-8")
+
+
+def test_install_shell_script_uses_latest_release_assets() -> None:
+    script = (REPO_ROOT / "install.sh").read_text(encoding="utf-8")
+
+    assert "adanos-software/adanos-cli" in script
+    assert "releases/latest/download" in script
+    assert "SHA256SUMS.txt" in script
+    assert "adanos-darwin-arm64.tar.gz" in script
+    assert "adanos-darwin-x86_64.tar.gz" in script
+    assert "adanos-linux-x86_64.tar.gz" in script
+    assert "ADANOS_INSTALL_DIR" in script
+
+
+def test_install_powershell_script_bootstraps_pipx() -> None:
+    script = (REPO_ROOT / "install.ps1").read_text(encoding="utf-8")
+
+    assert "adanos-cli" in script
+    assert "pipx" in script
+    assert "install --force" in script
+    assert "Verify with:" in script
+
+
+def test_readme_documents_shell_homebrew_and_powershell_install() -> None:
+    readme = (REPO_ROOT / "README.md").read_text(encoding="utf-8")
+
+    assert "curl -fsSL https://raw.githubusercontent.com/adanos-software/adanos-cli/main/install.sh | bash" in readme
+    assert "brew install adanos-software/tap/adanos-cli" in readme
+    assert "irm https://raw.githubusercontent.com/adanos-software/adanos-cli/main/install.ps1 | iex" in readme
+
+
+def test_install_shell_script_accepts_release_upload_checksum_prefix(tmp_path) -> None:
+    archive_path = tmp_path / "adanos-darwin-arm64.tar.gz"
+    archive_path.write_bytes(b"fake-archive")
+
+    checksum = subprocess.check_output(
+        ["shasum", "-a", "256", str(archive_path)],
+        text=True,
+    ).split()[0]
+    checksums_path = tmp_path / "SHA256SUMS.txt"
+    checksums_path.write_text(
+        f"{checksum}  release-upload/{archive_path.name}\n",
+        encoding="utf-8",
+    )
+
+    script_text = (REPO_ROOT / "install.sh").read_text(encoding="utf-8")
+    script_without_main = script_text.rsplit('main "$@"', 1)[0]
+    harness_path = tmp_path / "install-harness.sh"
+    harness_path.write_text(
+        script_without_main
+        + f'\nverify_checksum "{archive_path}" "{checksums_path}" "{archive_path.name}"\n',
+        encoding="utf-8",
+    )
+    harness_path.chmod(harness_path.stat().st_mode | stat.S_IXUSR)
+
+    subprocess.run(
+        ["bash", str(harness_path)],
+        check=True,
+        env={**os.environ, "HOME": str(tmp_path)},
+    )

{adanos_cli-1.20.2 → adanos_cli-1.20.4}/tests/test_onboarding.py

@@ -76,6 +76,7 @@ def test_onboard_guide_is_cli_first(capsys) -> None:
     assert "adanos login --api-key sk_live_xxx" in out
     assert "adanos onboard wizard" in out
     assert "adanos onboard register" in out
+    assert "adanos onboard recover" in out
     assert "curl -s" not in out
 
 
@@ -158,6 +159,48 @@ def test_onboard_register_returns_token_and_next_step(capsys) -> None:
     assert f"adanos onboard redeem --token {token} --save" in out
 
 
+@respx.mock
+def test_onboard_recover_requests_email_confirmation(capsys) -> None:
+    respx.post("https://adanos.org/api/recover").mock(
+        return_value=httpx.Response(
+            200,
+            json={
+                "success": True,
+                "action": "accepted",
+                "message": "If an active account exists for this email, further recovery instructions will be sent separately.",
+            },
+        )
+    )
+
+    rc = cli_main.main(["onboard", "recover", "--email", "alex@example.com"])
+    out = capsys.readouterr().out
+    assert rc == 0
+    assert "Recovery request accepted." in out
+    assert "Check your email for the secure recovery link." in out
+
+
+@respx.mock
+def test_onboard_recover_json_outputs_structured_response(capsys) -> None:
+    respx.post("https://adanos.org/api/recover").mock(
+        return_value=httpx.Response(
+            200,
+            json={
+                "success": True,
+                "action": "accepted",
+                "message": "If an active account exists for this email, further recovery instructions will be sent separately.",
+            },
+        )
+    )
+
+    rc = cli_main.main(["--output", "json", "onboard", "recover", "--email", "alex@example.com", "--json"])
+    captured = capsys.readouterr()
+    assert rc == 0
+    payload = json.loads(captured.out)
+    assert payload["kind"] == "onboard_recovery"
+    assert payload["success"] is True
+    assert payload["action"] == "accepted"
+
+
 @respx.mock
 def test_onboard_redeem_save_writes_config(tmp_path, monkeypatch) -> None:
     token = "kt_a8Kj2mNpQrStUvWxYz1234567890AbCdEfGhIjKlMnO"