From a1c1b5a6dc92cea24dfd3fbf37d540659de46e13 Mon Sep 17 00:00:00 2001 From: liyb Date: Sun, 23 Aug 2026 15:41:03 +0800 Subject: [PATCH] docs: publish release checksum --- README.md | 11 +++++++++++ llms-install.md | 4 +++- 2 files changed, 14 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 0320325..f5a72e3 100644 --- a/README.md +++ b/README.md @@ -32,6 +32,17 @@ with specialized model gateways. npx -y https://github.com/sandbaseai/cli/releases/download/v0.1.17/sandbaseai-cli-0.1.17.tgz connect ``` +For a reproducible install, verify the immutable release archive before +running it. The SHA-256 for `sandbaseai-cli-0.1.17.tgz` is +`1ad535b2899ca460b57b3c268aef278fee28fd28e649a89b92951514fd71fffa`. + +```sh +curl -fL -o sandbaseai-cli-0.1.17.tgz \ + https://github.com/sandbaseai/cli/releases/download/v0.1.17/sandbaseai-cli-0.1.17.tgz +echo '1ad535b2899ca460b57b3c268aef278fee28fd28e649a89b92951514fd71fffa sandbaseai-cli-0.1.17.tgz' | shasum -a 256 -c - +npx -y ./sandbaseai-cli-0.1.17.tgz connect +``` + Approve the browser authorization once; each supported client can then discover, inspect, and run available SandBase models and APIs through the local MCP bridge. diff --git a/llms-install.md b/llms-install.md index 95c2ff6..2cf34c4 100644 --- a/llms-install.md +++ b/llms-install.md @@ -27,6 +27,9 @@ Use the immutable v0.1.17 GitHub Release while npm `latest` is being updated: npx -y https://github.com/sandbaseai/cli/releases/download/v0.1.17/sandbaseai-cli-0.1.17.tgz connect --client ``` +For an offline/integrity check, the archive's SHA-256 is +`1ad535b2899ca460b57b3c268aef278fee28fd28e649a89b92951514fd71fffa`. + Common client IDs include `codex`, `claude-code`, `cursor`, `gemini-cli`, `windsurf`, and `opencode`. To configure every supported client detected on the machine, omit `--client `. @@ -57,4 +60,3 @@ This removes only the SandBase-owned configuration. It leaves unrelated and user-managed MCP entries unchanged. Source: https://github.com/sandbaseai/cli -