bytifi 0.2.2 → 0.2.3

package/README.md

@@ -59,7 +59,7 @@ bytifi upload ./logs.txt --concurrency 8 --json > upload.json
 bytifi upload ./photo.png -q
 ```
 
-All uploads are gzip-compressed per chunk before encryption. Files over **10 MB** use multipart upload automatically.
+Files up to **10 MB** are gzip-compressed per chunk before encryption. Larger files use multipart upload with fixed-size encrypted parts (no compression — gzip can expand ISO/zip data past the server part limit).
 
 Upload accepts **one file at a time**. Quote paths that contain spaces. Avoid shell globs like `**` — your shell may expand them into dozens of paths.
 

package/lib/crypto.js

@@ -20,7 +20,14 @@ export function buildChunkIv(noncePrefix, chunkIndex) {
   return iv
 }
 
-export function resolveCompressionMode() {
+export function resolveCompressionMode(originalSize = 0) {
+  // Multipart uploads use fixed 32 MB encrypted parts on the server. Gzip can
+  // expand incompressible data (ISO, zip, etc.) past that limit and fail part
+  // validation, so only gzip-compress direct uploads.
+  if (originalSize > MULTIPART_THRESHOLD_BYTES) {
+    return 'none'
+  }
+
   return 'gzip'
 }
 
@@ -63,11 +70,16 @@ export function buildClientEncryptionMeta({
   noncePrefix,
   originalSize,
   mimeType,
+  compression = 'gzip',
 }) {
+  const compressionMeta = compression === 'gzip'
+    ? { algorithm: 'gzip', scope: 'chunk' }
+    : { algorithm: 'none', scope: 'chunk' }
+
   return {
-    version: 2,
+    version: compression === 'gzip' ? 2 : 1,
     algorithm: 'AES-GCM',
-    compression: { algorithm: 'gzip', scope: 'chunk' },
+    compression: compressionMeta,
     chunkSize: plainChunkSize,
     chunkCount,
     noncePrefix: toBase64Url(noncePrefix),
@@ -100,6 +112,7 @@ export function createEncryptionContext({
   if (tokenBytes.length !== 32) throw new Error('Encryption token must be 32 bytes.')
   if (noncePrefix.length !== 8) throw new Error('Nonce prefix must be 8 bytes.')
 
+  const compression = resolveCompressionMode(originalSize)
   const { chunkCount, encryptedSize } = calculateEncryptedSize(originalSize, plainChunkSize)
   const meta = buildClientEncryptionMeta({
     plainChunkSize,
@@ -107,6 +120,7 @@ export function createEncryptionContext({
     noncePrefix,
     originalSize,
     mimeType,
+    compression,
   })
 
   return {
@@ -120,7 +134,7 @@ export function createEncryptionContext({
     mimeType,
     originalSize,
     plainChunkSize,
-    compression: 'gzip',
+    compression,
   }
 }
 
@@ -166,7 +180,10 @@ export async function encryptChunkFromFile(fileHandle, chunkIndex, context) {
     context.plainChunkSize,
   )
 
-  let payload = await compressPlainChunk(plainChunk)
+  let payload = plainChunk
+  if (context.compression === 'gzip') {
+    payload = await compressPlainChunk(plainChunk)
+  }
 
   return encryptChunk(payload, context.tokenBytes, context.noncePrefix, chunkIndex)
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bytifi",
-  "version": "0.2.2",
+  "version": "0.2.3",
   "description": "Official Bytifi CLI — encrypt, upload, and decrypt files from the terminal",
   "type": "module",
   "bin": {