On this page

Hugging Bay command-line tools

hbay is the native compiled CLI for model downloads and local inference. hugging-bay-cli is the Node supply-chain tool.

Native hbay

Native hbay is available for Linux and macOS. Windows is not published.

curl -fsSL "https://huggingbay.xyz/cli/install.sh" | RELEASE_BASE_URL="https://storage.googleapis.com/hb-desktop-releases-barneyserver/hbay/hbay-0.2.1-native-5789eb6b6-20261024" sh
export PATH="$HOME/.local/bin:$PATH"
hbay --version
hbay --help
hbay catalog qwen --task chat --max-ram 8

This pins hbay 0.2.1 for Linux x86_64/aarch64 or Apple silicon macOS; Intel Mac retains 0.2.0. The server's default release base can select an earlier version. The installer verifies the release signature and archive SHA-256 before installation. Requires curl and OpenSSL 3 or newer.

/install.sh and /cli/install.sh serve the same native installer source and return 503 when the release base is not configured. The shell source verifies an Ed25519 signature on SHA256SUMS with an embedded public key before checking the archive hash. It requires curl and OpenSSL 3 or newer.

hugging-bay-cli (Node supply-chain tool)

Use an existing source checkout with Node.js 22.12 or newer:

node apps/web/bin/hugging-bay-cli.mjs --help
node apps/web/bin/hugging-bay-cli.mjs lock <artifactId>
node apps/web/bin/hugging-bay-cli.mjs restore --lock bay.lock

The private web package maps hugging-bay-cli to this tool. The source hbay alias remains for one release as a notice shim, preserving arguments, stdin, signals and exits. This source change does not publish a new Node package.

Earlier Node packages

The retained publication observations below refer to the earlier Node tool named hbay. Historical filenames do not identify a native hbay release.

Requires Node.js 20 or newer and Python 3.9 or newer. The archive contains bin/ and lib/ without a top-level folder, so create a new directory and extract into it. If hbay-0.1.3 already exists from an earlier run, remove it or pick another directory name first. Keep the complete extracted folder together.

Verify and run the earlier portable Node CLI

curl -fsSLO https://huggingbay.xyz/dl/hbay-0.1.3.tar.gz
echo "e9b342312e5148ca695fbdf255f22592a3e77ef52362848cfa2fcd6409439be8  hbay-0.1.3.tar.gz" | shasum -a 256 -c - && mkdir hbay-0.1.3 && tar -xzf hbay-0.1.3.tar.gz -C hbay-0.1.3 && node hbay-0.1.3/bin/hbay.mjs --help

Versioned evidence: checksums, signed release manifest, provenance and SBOM. The manifest includes this release's public signing key and signed key endpoint.

Earlier Node Homebrew 0.1.3

Verify before use

Homebrew verifies the formula SHA-256 during installation. To independently check the published release tarball:

curl -fsSLO https://huggingbay.xyz/dl/hbay-0.1.3.tar.gz
echo "e9b342312e5148ca695fbdf255f22592a3e77ef52362848cfa2fcd6409439be8  hbay-0.1.3.tar.gz" | shasum -a 256 -c -

Compare against the public checksums, signed release manifest, provenance, and SBOM. The Homebrew formula is the public version source.

Python SDK on PyPI

Install: python -m pip install 'hugging-bay==0.4.12'. Use from hugging_bay import Client. Python 3.9+; pip installs dependencies including httpx and cryptography. Guide: https://huggingbay.xyz/python-sdk. The legacy /sdk/hugging_bay.py URL is package source only, not a standalone SDK or CLI.

Install manifest: install.json and install page.