browser-cookie-bridge 1.0.0 → 1.2.0

package/macos-app/Sources/BraveCodexSyncApp/SyncModel.swift

@@ -1,5 +1,6 @@
 import AppKit
 import Foundation
+import Security
 
 extension Notification.Name {
   static let menuBarVisibilityChanged = Notification.Name("BraveCodexSync.menuBarVisibilityChanged")
@@ -60,6 +61,12 @@ final class SyncModel: ObservableObject {
   @Published var selectedSourceID = "brave"
   @Published var selectedTargetID = "codex"
   @Published var codexRunning = false
+  @Published var sourceBrowserRunning = false
+  @Published var browserlessConfigured = false
+  @Published var browserlessProfileName = "browser-cookie-bridge"
+  @Published var browserlessRegion = "sfo"
+  @Published var browserlessOnlyDomains = ""
+  @Published var showingBrowserlessSetup = false
   @Published var primaryStatus = "Ready to sync"
   @Published var secondaryStatus = "Choose what to move, then start a transfer"
 
@@ -69,7 +76,7 @@ final class SyncModel: ObservableObject {
   private var launchAgent: URL { home.appending(path: "Library/LaunchAgents/com.apoorvdarshan.brave-codex-cookie-sync.plist") }
   private var loginSyncAgent: URL { home.appending(path: "Library/LaunchAgents/com.apoorvdarshan.brave-codex-cookie-sync.login-sync.plist") }
   private var appLoginAgent: URL { home.appending(path: "Library/LaunchAgents/com.apoorvdarshan.brave-codex-cookie-sync.app-login.plist") }
-  private var codexStatusTimer: Timer?
+  private var endpointStatusTimer: Timer?
   private var updateTimer: Timer?
   private var didCheckAfterLaunch = false
   private var didConsumeUpdateResult = false
@@ -82,10 +89,24 @@ final class SyncModel: ObservableObject {
     browsers.first(where: { $0.id == selectedTargetID })
   }
 
-  var targetName: String { selectedTargetBrowser?.name ?? "ChatGPT Codex" }
+  var isBrowserlessTarget: Bool { selectedTargetID == "browserless" }
+  var targetName: String {
+    isBrowserlessTarget ? "Browserless Cloud" : selectedTargetBrowser?.name ?? "ChatGPT Codex"
+  }
   var codexBlocked: Bool { selectedTargetID == "codex" && codexRunning }
+  var browserlessBlocked: Bool {
+    isBrowserlessTarget && (!browserlessConfigured || sourceBrowserRunning || selectedSourceID == "comet")
+  }
+  var syncBlocked: Bool { codexBlocked || browserlessBlocked }
   var sourceIcon: NSImage { browserIcon(selectedBrowser) }
-  var targetIcon: NSImage { selectedTargetBrowser.map(browserIcon) ?? codexIcon }
+  var targetIcon: NSImage {
+    isBrowserlessTarget ? browserlessIcon : selectedTargetBrowser.map(browserIcon) ?? codexIcon
+  }
+  var browserlessIcon: NSImage {
+    bundledIcon("browserless")
+      ?? NSImage(systemSymbolName: "cloud.fill", accessibilityDescription: "Browserless Cloud")
+      ?? NSImage()
+  }
   var codexIcon: NSImage {
     bundledIcon("chatgpt-codex")
       ?? chatGPTResource("app.icns")
@@ -116,11 +137,12 @@ final class SyncModel: ObservableObject {
   }
 
   init() {
+    bootstrapBundledRuntimeIfNeeded()
     let calendar = Calendar.current
     scheduleTime = calendar.date(bySettingHour: 9, minute: 0, second: 0, of: Date()) ?? Date()
-    updateCodexRunningStatus()
-    codexStatusTimer = Timer.scheduledTimer(withTimeInterval: 2, repeats: true) { [weak self] _ in
-      Task { @MainActor in self?.updateCodexRunningStatus() }
+    updateEndpointRunningStatus()
+    endpointStatusTimer = Timer.scheduledTimer(withTimeInterval: 2, repeats: true) { [weak self] _ in
+      Task { @MainActor in self?.updateEndpointRunningStatus() }
     }
     updateTimer = Timer.scheduledTimer(withTimeInterval: 24 * 60 * 60, repeats: true) { [weak self] _ in
       Task { @MainActor in
@@ -130,6 +152,51 @@ final class SyncModel: ObservableObject {
     }
   }
 
+  private func bootstrapBundledRuntimeIfNeeded() {
+    guard let resources = Bundle.main.resourceURL else { return }
+    let bundledRuntime = resources.appending(path: "runtime")
+    let bundledNode = bundledRuntime.appending(path: "node/bin/node")
+    let bundledCLI = bundledRuntime.appending(path: "bin/brave-codex-cookie-sync.js")
+    guard FileManager.default.isExecutableFile(atPath: bundledNode.path),
+          FileManager.default.fileExists(atPath: bundledCLI.path) else { return }
+
+    if Bundle.main.bundlePath.hasPrefix("/Volumes/") {
+      state = .warning
+      primaryStatus = "Move the app to Applications"
+      secondaryStatus = "Drag Browser Cookie Bridge onto Applications in the DMG window, then open it there"
+      return
+    }
+
+    let process = Process()
+    let output = Pipe()
+    process.executableURL = bundledNode
+    process.arguments = [
+      bundledCLI.path,
+      "bootstrap-bundled",
+      "--app-path", Bundle.main.bundlePath,
+    ]
+    process.standardOutput = output
+    process.standardError = output
+
+    do {
+      try process.run()
+      process.waitUntilExit()
+      guard process.terminationStatus != 0 else { return }
+      let data = output.fileHandleForReading.readDataToEndOfFile()
+      let message = String(decoding: data, as: UTF8.self)
+        .split(separator: "\n")
+        .map(String.init)
+        .last(where: { !$0.isEmpty })
+      state = .error
+      primaryStatus = "Could not prepare the local runtime"
+      secondaryStatus = message ?? "Move the app to Applications and reopen it"
+    } catch {
+      state = .error
+      primaryStatus = "Could not prepare the local runtime"
+      secondaryStatus = error.localizedDescription
+    }
+  }
+
   func refresh() {
     dailyEnabled = FileManager.default.fileExists(atPath: launchAgent.path)
     loginSyncEnabled = FileManager.default.fileExists(atPath: loginSyncAgent.path)
@@ -145,7 +212,7 @@ final class SyncModel: ObservableObject {
       let configuredSource = config.sourceBrowser ?? "brave"
       selectedSourceID = browsers.contains(where: { $0.id == configuredSource }) ? configuredSource : "brave"
       let configuredTarget = config.targetBrowser ?? "codex"
-      selectedTargetID = configuredTarget == "codex" || browsers.contains(where: { $0.id == configuredTarget })
+      selectedTargetID = configuredTarget == "codex" || configuredTarget == "browserless" || browsers.contains(where: { $0.id == configuredTarget })
         ? configuredTarget
         : "codex"
       if selectedTargetID == selectedSourceID { selectedTargetID = "codex" }
@@ -153,12 +220,16 @@ final class SyncModel: ObservableObject {
       historyEnabled = config.imports?.history ?? false
       menuBarEnabled = config.ui?.menuBar ?? true
       autoCheckUpdates = config.ui?.autoCheckUpdates ?? true
+      browserlessProfileName = config.browserless?.profileName ?? "browser-cookie-bridge"
+      browserlessRegion = config.browserless?.region ?? "sfo"
+      browserlessOnlyDomains = (config.browserless?.onlyDomains ?? []).joined(separator: ", ")
     }
+    browserlessConfigured = BrowserlessCredentialStore.read() != nil
     NotificationCenter.default.post(name: .menuBarVisibilityChanged, object: menuBarEnabled)
     extensionsReady = requiredExtensionIDs.allSatisfy {
       FileManager.default.fileExists(atPath: support.appending(path: "extension-\($0)/manifest.json").path)
     }
-    updateCodexRunningStatus()
+    updateEndpointRunningStatus()
     consumeUpdateResultIfNeeded()
     if autoCheckUpdates && !didCheckAfterLaunch {
       didCheckAfterLaunch = true
@@ -173,11 +244,12 @@ final class SyncModel: ObservableObject {
   }
 
   func selectTarget(_ id: String) {
-    let validTarget = id == "codex" || browsers.contains(where: { $0.id == id })
+    let validTarget = id == "codex" || id == "browserless" || browsers.contains(where: { $0.id == id })
     guard validTarget, id != selectedTargetID, id != selectedSourceID else { return }
     selectedTargetID = id
     persistPreferences(successMessage: "Import destination changed to \(targetName)")
-    updateCodexRunningStatus()
+    updateEndpointRunningStatus()
+    if id == "browserless" && !browserlessConfigured { showingBrowserlessSetup = true }
   }
 
   func setCookiesEnabled(_ enabled: Bool) {
@@ -190,6 +262,33 @@ final class SyncModel: ObservableObject {
     persistPreferences(successMessage: enabled ? "History URL import enabled" : "History import disabled")
   }
 
+  func saveBrowserlessSettings(token: String, profileName: String, region: String, onlyDomains: String) {
+    let cleanedToken = token.trimmingCharacters(in: .whitespacesAndNewlines)
+    let cleanedName = profileName.trimmingCharacters(in: .whitespacesAndNewlines)
+    guard !cleanedName.isEmpty, !cleanedToken.isEmpty || BrowserlessCredentialStore.read() != nil else {
+      postNativeAlert(title: "Browserless connection incomplete", message: "Enter an API token and cloud profile name.", kind: .warning)
+      return
+    }
+    do {
+      if !cleanedToken.isEmpty { try BrowserlessCredentialStore.save(cleanedToken) }
+      browserlessConfigured = true
+      browserlessProfileName = cleanedName
+      browserlessRegion = region
+      browserlessOnlyDomains = onlyDomains
+      showingBrowserlessSetup = false
+      persistPreferences(successMessage: "Browserless connected — uploads remain manual")
+    } catch {
+      postNativeAlert(title: "Could not save Browserless token", message: error.localizedDescription, kind: .error)
+    }
+  }
+
+  func disconnectBrowserless() {
+    BrowserlessCredentialStore.delete()
+    browserlessConfigured = false
+    showingBrowserlessSetup = false
+    updateEndpointRunningStatus()
+  }
+
   func setMenuBarEnabled(_ enabled: Bool) {
     menuBarEnabled = enabled
     NotificationCenter.default.post(name: .menuBarVisibilityChanged, object: enabled)
@@ -204,11 +303,12 @@ final class SyncModel: ObservableObject {
 
   func checkForUpdates(showAlert: Bool = false) {
     guard !isCheckingForUpdates, !isInstallingUpdate else { return }
-    guard let url = URL(string: "https://registry.npmjs.org/browser-cookie-bridge/latest") else { return }
+    guard let url = URL(string: "https://api.github.com/repos/apoorvdarshan/browser-cookie-bridge/releases/latest") else { return }
     isCheckingForUpdates = true
     postUpdateState()
     var request = URLRequest(url: url, cachePolicy: .reloadIgnoringLocalCacheData, timeoutInterval: 15)
     request.setValue("Browser-Cookie-Bridge/\(currentVersion)", forHTTPHeaderField: "User-Agent")
+    request.setValue("application/vnd.github+json", forHTTPHeaderField: "Accept")
     URLSession.shared.dataTask(with: request) { [weak self] data, response, error in
       Task { @MainActor in
         guard let self else { return }
@@ -292,8 +392,8 @@ final class SyncModel: ObservableObject {
       }
       return
     }
-    updateCodexRunningStatus()
-    guard !codexBlocked else {
+    updateEndpointRunningStatus()
+    guard !syncBlocked else {
       if showMenuBarAlert {
         postNativeAlert(title: primaryStatus, message: secondaryStatus, kind: .warning)
       }
@@ -301,17 +401,33 @@ final class SyncModel: ObservableObject {
     }
     isSyncing = true
     state = .syncing
-    primaryStatus = "Transferring selected data"
+    primaryStatus = isBrowserlessTarget ? "Uploading authenticated state" : "Transferring selected data"
     secondaryStatus = selectedTargetID == "codex"
       ? "Backing up Codex and merging \(selectedBrowser.name) locally…"
-      : "Waiting for \(selectedBrowser.name) and \(targetName)…"
-    runCLI(["sync", "--timeout", "300"]) { [weak self] success, output in
+      : isBrowserlessTarget
+        ? "Sending \(selectedBrowser.name) to Browserless \(browserlessRegion.uppercased()) only for this request…"
+        : "Waiting for \(selectedBrowser.name) and \(targetName)…"
+    var environment: [String: String] = [:]
+    var arguments = ["sync", "--timeout", "300"]
+    if isBrowserlessTarget {
+      guard let token = BrowserlessCredentialStore.read() else {
+        isSyncing = false
+        browserlessConfigured = false
+        updateEndpointRunningStatus()
+        return
+      }
+      environment["BROWSERLESS_TOKEN"] = token
+      arguments.append("--allow-cloud-upload")
+    }
+    runCLI(arguments, environment: environment) { [weak self] success, output in
       guard let self else { return }
       self.isSyncing = false
       let partial = success && (output.contains("Partially synced:") || output.contains("with warnings"))
       if success {
         self.state = partial ? .warning : .success
-        self.primaryStatus = self.selectedTargetID == "codex"
+        self.primaryStatus = self.isBrowserlessTarget
+          ? "Browserless profile uploaded"
+          : self.selectedTargetID == "codex"
           ? (partial ? "Codex sync completed with warnings" : "Codex sessions updated")
           : (partial ? "Partially synced" : "Transfer complete")
         self.secondaryStatus = self.lastMeaningfulLine(output) ?? "\(self.selectedBrowser.name) and \(self.targetName) are up to date"
@@ -320,9 +436,11 @@ final class SyncModel: ObservableObject {
         self.primaryStatus = "Sync did not finish"
         self.secondaryStatus = self.lastMeaningfulLine(output) ?? (self.selectedTargetID == "codex"
           ? "Quit Codex completely, then try again"
+          : self.isBrowserlessTarget
+            ? "Check the API token, close the source browser, and try again"
           : "Keep both browsers open and check the extensions")
       }
-      self.updateCodexRunningStatus()
+      self.updateEndpointRunningStatus()
       if showMenuBarAlert {
         self.postNativeAlert(
           title: self.primaryStatus,
@@ -334,6 +452,10 @@ final class SyncModel: ObservableObject {
   }
 
   func setDailyEnabled(_ enabled: Bool) {
+    guard !isBrowserlessTarget else {
+      postNativeAlert(title: "Cloud uploads are manual-only", message: "Browser Cookie Bridge will never schedule Browserless uploads in the background.", kind: .information)
+      return
+    }
     dailyEnabled = enabled
     applySchedule(enabled)
   }
@@ -343,6 +465,10 @@ final class SyncModel: ObservableObject {
   }
 
   func setLoginSyncEnabled(_ enabled: Bool) {
+    guard !isBrowserlessTarget else {
+      postNativeAlert(title: "Cloud uploads are manual-only", message: "Login sync does not send authenticated state to Browserless.", kind: .information)
+      return
+    }
     loginSyncEnabled = enabled
     isWorking = true
     runCLI([enabled ? "enable-login-sync" : "disable-login-sync"]) { [weak self] success, output in
@@ -406,7 +532,10 @@ final class SyncModel: ObservableObject {
       "--cookies", cookiesEnabled ? "on" : "off",
       "--history", historyEnabled ? "on" : "off",
       "--menu-bar", menuBarEnabled ? "on" : "off",
-      "--auto-check-updates", autoCheckUpdates ? "on" : "off"
+      "--auto-check-updates", autoCheckUpdates ? "on" : "off",
+      "--browserless-profile", browserlessProfileName,
+      "--browserless-region", browserlessRegion,
+      "--browserless-domains", browserlessOnlyDomains,
     ]
     runCLI(arguments) { [weak self] success, output in
       guard let self else { return }
@@ -414,7 +543,9 @@ final class SyncModel: ObservableObject {
       if success {
         self.state = .ready
         self.primaryStatus = successMessage
-        self.secondaryStatus = "This choice is saved for manual and daily syncs"
+        self.secondaryStatus = self.isBrowserlessTarget
+          ? "Cloud uploads run only after you click Upload"
+          : "This choice is saved for manual and daily syncs"
       } else {
         self.state = .error
         self.primaryStatus = "Could not save import settings"
@@ -424,7 +555,7 @@ final class SyncModel: ObservableObject {
       self.extensionsReady = self.requiredExtensionIDs.allSatisfy {
         FileManager.default.fileExists(atPath: self.support.appending(path: "extension-\($0)/manifest.json").path)
       }
-      self.updateCodexRunningStatus()
+      self.updateEndpointRunningStatus()
     }
   }
 
@@ -453,7 +584,7 @@ final class SyncModel: ObservableObject {
     }
   }
 
-  private func runCLI(_ arguments: [String], completion: @escaping @MainActor (Bool, String) -> Void) {
+  private func runCLI(_ arguments: [String], environment: [String: String] = [:], completion: @escaping @MainActor (Bool, String) -> Void) {
     guard let config = loadConfig() else {
       completion(false, "Configuration missing. Run install-app again.")
       return
@@ -462,6 +593,7 @@ final class SyncModel: ObservableObject {
     let output = Pipe()
     process.executableURL = URL(fileURLWithPath: config.nodePath)
     process.arguments = [runtimeCLI.path] + arguments
+    process.environment = ProcessInfo.processInfo.environment.merging(environment) { _, new in new }
     process.standardOutput = output
     process.standardError = output
     process.terminationHandler = { process in
@@ -504,23 +636,44 @@ final class SyncModel: ObservableObject {
   }
 
   private var requiredExtensionIDs: [String] {
-    selectedTargetID == "codex" ? [] : [selectedSourceID, selectedTargetID]
+    selectedTargetID == "codex" || selectedTargetID == "browserless" ? [] : [selectedSourceID, selectedTargetID]
   }
 
-  private func updateCodexRunningStatus() {
+  private func updateEndpointRunningStatus() {
     let wasRunning = codexRunning
     codexRunning = NSWorkspace.shared.runningApplications.contains {
       $0.bundleIdentifier == "com.openai.codex"
     }
-    guard selectedTargetID == "codex", !isSyncing else { return }
-    if codexRunning {
+    sourceBrowserRunning = NSWorkspace.shared.runningApplications.contains {
+      $0.bundleIdentifier == selectedBrowser.bundleIdentifier
+    }
+    guard !isSyncing else { return }
+    if selectedTargetID == "codex" && codexRunning {
       state = .warning
       primaryStatus = "Quit Codex before syncing"
       secondaryStatus = "Close ChatGPT Codex completely so its local cookie database can be updated safely"
-    } else if wasRunning && primaryStatus == "Quit Codex before syncing" {
+    } else if selectedTargetID == "codex" && wasRunning && primaryStatus == "Quit Codex before syncing" {
       state = .ready
       primaryStatus = "Ready to sync directly"
       secondaryStatus = "Codex is closed — a backup will be created before anything changes"
+    } else if isBrowserlessTarget {
+      if selectedSourceID == "comet" {
+        state = .warning
+        primaryStatus = "Comet capture is not supported"
+        secondaryStatus = "Choose Brave, Chrome, Edge, Arc, Vivaldi, or Opera for Browserless"
+      } else if !browserlessConfigured {
+        state = .warning
+        primaryStatus = "Connect Browserless"
+        secondaryStatus = "Your API token will be stored in macOS Keychain, never in the app configuration"
+      } else if sourceBrowserRunning {
+        state = .warning
+        primaryStatus = "Quit \(selectedBrowser.name) before uploading"
+        secondaryStatus = "Browserless captures a temporary copy of the closed profile, including local storage and IndexedDB"
+      } else {
+        state = .ready
+        primaryStatus = "Ready for an explicit cloud upload"
+        secondaryStatus = "Only this click sends authenticated state to Browserless \(browserlessRegion.uppercased())"
+      }
     }
   }
 
@@ -575,6 +728,16 @@ final class SyncModel: ObservableObject {
 
 private struct PackageRelease: Decodable {
   let version: String
+
+  private enum CodingKeys: String, CodingKey {
+    case tagName = "tag_name"
+  }
+
+  init(from decoder: Decoder) throws {
+    let values = try decoder.container(keyedBy: CodingKeys.self)
+    let tag = try values.decode(String.self, forKey: .tagName)
+    version = tag.hasPrefix("v") ? String(tag.dropFirst()) : tag
+  }
 }
 
 private struct UpdateResult: Decodable {
@@ -590,6 +753,7 @@ private struct AppConfig: Decodable {
   let targetBrowser: String?
   let imports: Imports?
   let ui: UISettings?
+  let browserless: BrowserlessSettings?
 
   struct Schedule: Decodable {
     let hour: Int
@@ -606,4 +770,60 @@ private struct AppConfig: Decodable {
     let openAtLogin: Bool?
     let autoCheckUpdates: Bool?
   }
+
+  struct BrowserlessSettings: Decodable {
+    let profileName: String?
+    let region: String?
+    let onlyDomains: [String]?
+  }
+}
+
+private enum BrowserlessCredentialStore {
+  private static let service = "com.apoorvdarshan.browser-cookie-bridge.browserless"
+  private static let account = "api-token"
+
+  static func save(_ token: String) throws {
+    let identity: [String: Any] = [
+      kSecClass as String: kSecClassGenericPassword,
+      kSecAttrService as String: service,
+      kSecAttrAccount as String: account,
+    ]
+    let update: [String: Any] = [kSecValueData as String: Data(token.utf8)]
+    let updateStatus = SecItemUpdate(identity as CFDictionary, update as CFDictionary)
+    if updateStatus == errSecSuccess { return }
+    guard updateStatus == errSecItemNotFound else {
+      throw NSError(domain: NSOSStatusErrorDomain, code: Int(updateStatus), userInfo: nil)
+    }
+    let item: [String: Any] = identity.merging([
+      kSecAttrAccessible as String: kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly,
+      kSecValueData as String: Data(token.utf8),
+    ]) { _, new in new }
+    let status = SecItemAdd(item as CFDictionary, nil)
+    guard status == errSecSuccess else {
+      throw NSError(domain: NSOSStatusErrorDomain, code: Int(status), userInfo: nil)
+    }
+  }
+
+  static func read() -> String? {
+    let query: [String: Any] = [
+      kSecClass as String: kSecClassGenericPassword,
+      kSecAttrService as String: service,
+      kSecAttrAccount as String: account,
+      kSecReturnData as String: true,
+      kSecMatchLimit as String: kSecMatchLimitOne,
+    ]
+    var result: CFTypeRef?
+    guard SecItemCopyMatching(query as CFDictionary, &result) == errSecSuccess,
+          let data = result as? Data else { return nil }
+    return String(data: data, encoding: .utf8)
+  }
+
+  static func delete() {
+    let query: [String: Any] = [
+      kSecClass as String: kSecClassGenericPassword,
+      kSecAttrService as String: service,
+      kSecAttrAccount as String: account,
+    ]
+    SecItemDelete(query as CFDictionary)
+  }
 }

package/package.json

@@ -1,28 +1,29 @@
 {
   "name": "browser-cookie-bridge",
-  "version": "1.0.0",
-  "description": "Private local cookie and session transfer for macOS",
+  "version": "1.2.0",
+  "description": "Local-first cookie and session transfer for macOS with optional Browserless upload",
   "type": "module",
   "bin": {
     "browser-cookie-bridge": "./bin/brave-codex-cookie-sync.js"
   },
   "scripts": {
     "test": "node --test test/*.test.js",
-    "check": "node --check bin/brave-codex-cookie-sync.js && node --check src/app-installer.js && node --check src/broker.js && node --check src/chromium-reader.js && node --check src/cli.js && node --check src/codex-direct-import.js && node --check src/config.js && node --check src/paths.js && node --check src/scheduler.js && node --check src/updater.js && node --check extension-template/background.js && node --check web/server.js && node --check web/script.js",
+    "check": "node --check bin/brave-codex-cookie-sync.js && node --check src/app-installer.js && node --check src/browserless.js && node --check src/browserless-runner.js && node --check src/broker.js && node --check src/chromium-reader.js && node --check src/cli.js && node --check src/codex-direct-import.js && node --check src/config.js && node --check src/paths.js && node --check src/scheduler.js && node --check src/updater.js && node --check scripts/build-dmg.js && node --check extension-template/background.js && node --check web/server.js && node --check web/script.js",
     "release:check": "node scripts/check-release-version.js",
     "build:app": "node bin/brave-codex-cookie-sync.js install-app --no-open",
+    "build:dmg": "node scripts/build-dmg.js",
     "web": "node web/server.js",
     "web:deploy": "wrangler deploy --config web/wrangler.jsonc"
   },
   "engines": {
-    "node": ">=22.5"
+    "node": ">=24"
   },
   "license": "MIT",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/apoorvdarshan/browser-cookie-bridge.git"
   },
-  "homepage": "https://github.com/apoorvdarshan/browser-cookie-bridge#readme",
+  "homepage": "https://cookiebridge.apoorvdarshan.com/",
   "bugs": {
     "url": "https://github.com/apoorvdarshan/browser-cookie-bridge/issues"
   },
@@ -30,6 +31,17 @@
     "access": "public",
     "registry": "https://registry.npmjs.org/"
   },
+  "keywords": [
+    "browser",
+    "cookies",
+    "sessions",
+    "macos",
+    "chromium",
+    "brave",
+    "browserless",
+    "codex"
+  ],
+  "funding": "https://ko-fi.com/apoorvdarshan",
   "files": [
     "bin",
     "src",
@@ -39,6 +51,10 @@
     "macos-app/Resources",
     "macos-app/Sources",
     "README.md",
-    "LICENSE"
-  ]
+    "LICENSE",
+    "THIRD_PARTY_NOTICES.md"
+  ],
+  "dependencies": {
+    "@browserless.io/cli": "0.3.0"
+  }
 }

package/src/browserless-runner.js

@@ -0,0 +1,13 @@
+import { pathToFileURL } from "node:url";
+
+const [, , cliPath, ...argumentsWithoutToken] = process.argv;
+const token = process.env.BROWSERLESS_TOKEN?.trim();
+if (!cliPath) throw new Error("Browserless CLI path is missing.");
+if (!token) throw new Error("Browserless API token is missing.");
+
+// Read the Keychain-supplied token once, then remove it before the official CLI
+// launches a temporary browser. Mutating process.argv does not alter the OS
+// command line that started this process, so the token is not exposed by `ps`.
+delete process.env.BROWSERLESS_TOKEN;
+process.argv = [process.execPath, cliPath, ...argumentsWithoutToken, "--token", token];
+await import(pathToFileURL(cliPath).href);

package/src/browserless.js

@@ -0,0 +1,108 @@
+import path from "node:path";
+import { spawn } from "node:child_process";
+import { projectRoot } from "./paths.js";
+
+const SUPPORTED_SOURCES = new Set(["brave", "chrome", "edge", "arc", "vivaldi", "opera"]);
+const REGIONS = new Set(["sfo", "lon", "ams"]);
+
+export async function uploadBrowserlessProfile({
+  browser,
+  localProfile,
+  profileName,
+  region = "sfo",
+  onlyDomains = [],
+  token = process.env.BROWSERLESS_TOKEN,
+  root = projectRoot(),
+  runner = runCLI,
+} = {}) {
+  if (!SUPPORTED_SOURCES.has(browser)) {
+    throw new Error(`${browser === "comet" ? "Comet" : browser} is not supported by Browserless profile capture yet.`);
+  }
+  if (!localProfile) throw new Error("The local browser profile could not be determined.");
+  if (!profileName?.trim()) throw new Error("Choose a Browserless cloud profile name.");
+  if (!REGIONS.has(region)) throw new Error("Browserless region must be sfo, lon, or ams.");
+  if (!token?.trim()) throw new Error("Connect Browserless first. The API token is missing from macOS Keychain.");
+
+  const cliPath = path.join(root, "node_modules", "@browserless.io", "cli", "build", "cli.js");
+  const runnerPath = path.join(root, "src", "browserless-runner.js");
+  const environment = {
+    ...process.env,
+    BROWSERLESS_TOKEN: token.trim(),
+    BROWSERLESS_ACCEPT_TERMS: "1",
+    BROWSERLESS_TELEMETRY_DISABLED: "1",
+    BROWSERLESS_DISABLE_KEYCHAIN: "1",
+    DO_NOT_TRACK: "1",
+  };
+  const client = ["--region", region, "--json"];
+  const shown = await runner(cliPath, ["profile", "show", profileName.trim(), ...client], environment, runnerPath);
+  const operation = shown.status === 0 ? "refresh" : isMissingProfile(shown.output) ? "upload" : null;
+  if (!operation) throw new Error(lastLine(shown.output) || "Browserless could not validate the cloud profile.");
+
+  const capture = [
+    "profile", operation,
+    "--browser", browser,
+    "--profile", localProfile,
+    "--name", profileName.trim(),
+    ...client,
+    "--accept-terms",
+    "--auto-fit",
+  ];
+  for (const domain of onlyDomains) capture.push("--only-domain", domain);
+  const result = await runner(cliPath, capture, environment, runnerPath);
+  if (result.status !== 0) throw new Error(lastLine(result.output) || "Browserless profile upload failed.");
+
+  const details = parseJSON(result.output);
+  const cookies = details?.cookieCount;
+  const origins = details?.originCount;
+  const counts = Number.isInteger(cookies) && Number.isInteger(origins)
+    ? ` (${cookies} cookies, ${origins} origins)`
+    : "";
+  return {
+    operation,
+    profileName: details?.name || profileName.trim(),
+    cookieCount: cookies,
+    originCount: origins,
+    summary: `Browserless profile ${operation === "refresh" ? "updated" : "created"}: ${details?.name || profileName.trim()}${counts}`,
+  };
+}
+
+function runCLI(cliPath, args, environment, runnerPath) {
+  return new Promise((resolve, reject) => {
+    const child = spawn(process.execPath, [runnerPath, cliPath, ...args], {
+      env: environment,
+      stdio: ["ignore", "pipe", "pipe"],
+    });
+    let stdout = "";
+    let stderr = "";
+    child.stdout.on("data", (chunk) => { stdout += chunk; });
+    child.stderr.on("data", (chunk) => { stderr += chunk; });
+    child.on("error", reject);
+    child.on("close", (status) => resolve({ status: status ?? 1, output: `${stderr}${stdout}` }));
+  });
+}
+
+function isMissingProfile(output) {
+  return /(?:not found|does not exist|404)/i.test(output);
+}
+
+function parseJSON(output) {
+  const start = output.indexOf("{");
+  const end = output.lastIndexOf("}");
+  if (start !== -1 && end > start) {
+    try {
+      const parsed = JSON.parse(output.slice(start, end + 1));
+      if (parsed && typeof parsed === "object") return parsed;
+    } catch {}
+  }
+  for (const line of output.split("\n").reverse()) {
+    try {
+      const parsed = JSON.parse(line);
+      if (parsed && typeof parsed === "object") return parsed;
+    } catch {}
+  }
+  return null;
+}
+
+function lastLine(output) {
+  return output.split("\n").map((line) => line.trim()).filter(Boolean).at(-1)?.replace(/^Error:\s*/, "");
+}