Repository navigation
Fixes CLI login failures reporting service response has no valid vault revision when an intermediary weakens or removes HTTP ETags.
- The service now sends an independent
X-Hush-Revisionheader andCache-Control: no-store, no-transform. - The CLI prefers this revision header and remains compatible with legacy strong and weak ETags. Both formats normalize to the same revision before snapshot comparison.
- Missing, malformed, and out-of-range revisions still fail closed. Device-key decryption and authentication checks remain required.
- Adds regression coverage for key retrieval, ETag removal, mixed response representations, and revision headers on service reads and writes.
Self-hosted deployments should update the service and CLI together. Existing enrollment is preserved; rerun hush login after upgrading without running hush init or hush logout.
curl -fsSL https://raw.githubusercontent.com/txchen/hush/master/install.sh | bash
hush version
hush login