bytifi 0.2.1 → 0.2.3

package/README.md

@@ -59,7 +59,7 @@ bytifi upload ./logs.txt --concurrency 8 --json > upload.json
 bytifi upload ./photo.png -q
 ```
 
-All uploads are gzip-compressed per chunk before encryption. Files over **10 MB** use multipart upload automatically.
+Files up to **10 MB** are gzip-compressed per chunk before encryption. Larger files use multipart upload with fixed-size encrypted parts (no compression — gzip can expand ISO/zip data past the server part limit).
 
 Upload accepts **one file at a time**. Quote paths that contain spaces. Avoid shell globs like `**` — your shell may expand them into dozens of paths.
 
@@ -155,33 +155,6 @@ JSON output for decrypt includes `outputPath`, `originalName`, `size`, `mimeType
 
 Files over ~100 MB encrypted use multipart upload automatically. Progress prints to stderr unless `--json` or `--quiet` is set.
 
-## How it works
-
-**Upload**
-
-1. Gzip-compresses each chunk, then encrypts locally with AES-GCM (meta `version: 2`)
-2. Uploads encrypted bytes via multipart pipeline for files >10 MB
-3. Prints a share URL including `#token=...`
-
-## Compatibility
-
-| Scenario | Works? |
-|----------|--------|
-| Old links (no compression) | Yes — everywhere |
-| New CLI upload + new CLI decrypt | Yes |
-| New CLI upload + **updated website** decrypt | Yes — **deploy Bytifi-Website** after upgrading CLI |
-| New CLI upload + old website (not deployed) | **Broken in browser** — garbled download |
-| New CLI upload + old CLI (≤0.1.5) decrypt | **Broken** — upgrade CLI |
-| Website upload (no compression) | Yes — unchanged |
-
-Compressed files larger than one chunk use **part-based storage**; decrypt via share link or CLI part download.
-
-**Decrypt**
-
-1. Reads link metadata from `/api/link/:token`, from `--upload-json`, or from `--meta`
-2. Downloads the encrypted file (unless you pass a local encrypted file)
-3. Decrypts locally and writes the original file to disk
-
 ## Development
 
 ```bash

package/bin/bytifi.js

@@ -8,7 +8,10 @@ import { decryptFile } from '../lib/decrypt.js'
 import { BytifiApiError, BytifiNetworkError, uploadFile } from '../lib/upload.js'
 
 const require = createRequire(import.meta.url)
-const { version } = require('../package.json')
+const version =
+  typeof __BYTIFI_VERSION__ !== 'undefined'
+    ? __BYTIFI_VERSION__
+    : require('../package.json').version
 
 function printHelp() {
   process.stdout.write(`Bytifi CLI v${version} — encrypt, upload, and decrypt files

package/lib/crypto.js

@@ -20,7 +20,14 @@ export function buildChunkIv(noncePrefix, chunkIndex) {
   return iv
 }
 
-export function resolveCompressionMode() {
+export function resolveCompressionMode(originalSize = 0) {
+  // Multipart uploads use fixed 32 MB encrypted parts on the server. Gzip can
+  // expand incompressible data (ISO, zip, etc.) past that limit and fail part
+  // validation, so only gzip-compress direct uploads.
+  if (originalSize > MULTIPART_THRESHOLD_BYTES) {
+    return 'none'
+  }
+
   return 'gzip'
 }
 
@@ -63,11 +70,16 @@ export function buildClientEncryptionMeta({
   noncePrefix,
   originalSize,
   mimeType,
+  compression = 'gzip',
 }) {
+  const compressionMeta = compression === 'gzip'
+    ? { algorithm: 'gzip', scope: 'chunk' }
+    : { algorithm: 'none', scope: 'chunk' }
+
   return {
-    version: 2,
+    version: compression === 'gzip' ? 2 : 1,
     algorithm: 'AES-GCM',
-    compression: { algorithm: 'gzip', scope: 'chunk' },
+    compression: compressionMeta,
     chunkSize: plainChunkSize,
     chunkCount,
     noncePrefix: toBase64Url(noncePrefix),
@@ -100,6 +112,7 @@ export function createEncryptionContext({
   if (tokenBytes.length !== 32) throw new Error('Encryption token must be 32 bytes.')
   if (noncePrefix.length !== 8) throw new Error('Nonce prefix must be 8 bytes.')
 
+  const compression = resolveCompressionMode(originalSize)
   const { chunkCount, encryptedSize } = calculateEncryptedSize(originalSize, plainChunkSize)
   const meta = buildClientEncryptionMeta({
     plainChunkSize,
@@ -107,6 +120,7 @@ export function createEncryptionContext({
     noncePrefix,
     originalSize,
     mimeType,
+    compression,
   })
 
   return {
@@ -120,7 +134,7 @@ export function createEncryptionContext({
     mimeType,
     originalSize,
     plainChunkSize,
-    compression: 'gzip',
+    compression,
   }
 }
 
@@ -166,7 +180,10 @@ export async function encryptChunkFromFile(fileHandle, chunkIndex, context) {
     context.plainChunkSize,
   )
 
-  let payload = await compressPlainChunk(plainChunk)
+  let payload = plainChunk
+  if (context.compression === 'gzip') {
+    payload = await compressPlainChunk(plainChunk)
+  }
 
   return encryptChunk(payload, context.tokenBytes, context.noncePrefix, chunkIndex)
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bytifi",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "description": "Official Bytifi CLI — encrypt, upload, and decrypt files from the terminal",
   "type": "module",
   "bin": {
@@ -16,8 +16,8 @@
   "scripts": {
     "upload": "node bin/bytifi.js upload",
     "decrypt": "node bin/bytifi.js decrypt",
-    "build:bundle": "esbuild bin/bytifi.js --bundle --platform=node --format=cjs --outfile=dist/bytifi-bundle.cjs",
-    "build:win": "npm run build:bundle && pkg dist/bytifi-bundle.cjs --targets node22-win-x64 --output dist/bytifi.exe --compress GZip"
+    "build:bundle": "node scripts/build-bundle.mjs",
+    "build:win": "npm run build:bundle && pkg dist/bytifi-bundle.cjs --targets node22-win-x64 --output dist/bytifi.exe --compress GZip --public --public-packages \"*\""
   },
   "repository": {
     "type": "git",