browser-cookie-bridge 1.1.0 → 1.2.0

package/README.md

@@ -4,16 +4,16 @@
 
 <h1>Browser Cookie Bridge</h1>
 
-<strong>Move cookies and signed-in sessions between browsers—locally on your Mac.</strong>
+<strong>Move signed-in sessions locally—or explicitly upload one to Browserless Cloud.</strong>
 
-<p>Brave, Chrome, Edge, Arc, Vivaldi, Opera, and Comet · browser-to-browser transfer · import into ChatGPT Codex.</p>
+<p>Brave, Chrome, Edge, Arc, Vivaldi, Opera, and Comet · ChatGPT Codex import · optional Browserless authenticated profiles.</p>
 
 <p>
   <img src="https://img.shields.io/badge/macOS-13.5%2B-111111?logo=apple&logoColor=white" alt="macOS 13.5+" />
   <img src="https://img.shields.io/badge/Swift-6-8E2735?logo=swift&logoColor=white" alt="Swift 6" />
-  <img src="https://img.shields.io/badge/Node.js-22.5%2B-3C873A?logo=nodedotjs&logoColor=white" alt="Node.js 22.5+" />
+  <img src="https://img.shields.io/badge/Node.js-24%2B-3C873A?logo=nodedotjs&logoColor=white" alt="Node.js 24+" />
   <a href="https://www.npmjs.com/package/browser-cookie-bridge"><img src="https://img.shields.io/npm/v/browser-cookie-bridge?logo=npm&color=CB3837" alt="browser-cookie-bridge on npm" /></a>
-  <img src="https://img.shields.io/badge/local--first-no%20cloud-C68B3C" alt="Local-first, no cloud" />
+  <img src="https://img.shields.io/badge/local--first-cloud%20optional-C68B3C" alt="Local-first, cloud optional" />
   <img src="https://img.shields.io/github/stars/apoorvdarshan/browser-cookie-bridge?logo=github&color=C68B3C" alt="GitHub stars" />
   <a href="https://www.producthunt.com/products/browser-cookie-bridge"><img src="https://img.shields.io/badge/Product%20Hunt-View%20launch-DA552F?logo=producthunt&logoColor=white" alt="Browser Cookie Bridge on Product Hunt" /></a>
   <img src="https://img.shields.io/badge/license-MIT-3DA639" alt="MIT License" />
@@ -44,24 +44,25 @@
 
 ---
 
-> **Version 1.1.0 adds self-contained DMG downloads.** Importing into ChatGPT Codex is an intentionally unsupported direct integration and requires Codex to be completely closed.
+> **Version 1.2.0 adds an optional Browserless Cloud destination.** It is destination-only, manual-only, and visually separated from local transfers. Importing into ChatGPT Codex remains an intentionally unsupported direct integration and requires Codex to be completely closed.
 
 ## Why Browser Cookie Bridge
 
 Signing into the same sites across several browsers is repetitive. Export files are awkward, password managers do not move active sessions, and ChatGPT Codex does not currently offer a Brave import button.
 
-Browser Cookie Bridge gives those local browser profiles a small, native control panel. Pick where data comes from, pick where it goes, choose cookies or history, and sync. Transfers stay on the Mac you are using.
+Browser Cookie Bridge gives those browser profiles a small, native control panel. Local browser and Codex transfers stay on the Mac. If you explicitly select Browserless Cloud and click Upload, the app can instead send authenticated profile state to your own Browserless account.
 
 ## Features
 
 - 🍪 **Cookie and session transfer** — cookies are enabled by default, including supported domain, path, expiry, security, `SameSite`, and partition attributes.
 - 🌐 **Seven Chromium browsers** — Brave, Chrome, Edge, Arc, Vivaldi, Opera, and Perplexity Comet can be sources or destinations.
 - ✨ **ChatGPT Codex import** — merge selected local browser data into Codex's built-in browser; Codex is destination-only.
+- ☁️ **Optional Browserless upload** — create or refresh a Browserless authenticated profile with cookies, local storage, and IndexedDB; Browserless is destination-only and manual-only.
 - 🕘 **Background automation** — sync when you sign in, at a fixed daily time, or whenever you choose.
 - ◉ **Native menu-bar app** — closing the window removes the Dock icon while the helper continues running.
 - 🧯 **Backup and rollback** — Codex's database is backed up, modified on a separate copy, integrity-checked, and restored if replacement fails.
 - ⬆️ **Built-in updates** — checks for GitHub releases, verifies the DMG checksum, installs in place, and relaunches the app.
-- 🔒 **Local-first** — no account, analytics, cloud service, cookie logs, or remote relay.
+- 🔒 **Local-first** — local paths use no account, analytics, cookie logs, or remote relay; the separate Browserless path runs only after explicit selection and confirmation.
 
 ## What it transfers
 
@@ -69,6 +70,7 @@ Browser Cookie Bridge gives those local browser profiles a small, native control
 |---|---:|---|
 | **Cookies and sessions** | ✅ Default | Transfers supported cookie values and attributes |
 | **History URLs** | ◐ Optional | Original visit times and page titles cannot be preserved |
+| **Local storage and IndexedDB** | ◐ Browserless only | Included only in an explicit Browserless authenticated-profile upload |
 | **Passwords** | — Never | Chromium extensions cannot read the browser password store |
 | **Bookmarks, autofill, payments** | — Never | Not requested or accessed |
 | **iCloud Keychain** | — Never | Remains completely separate |
@@ -80,7 +82,7 @@ Some websites bind sessions to a specific device or browser and may ask you to s
 - **macOS 13.5+**
 - A supported Chromium browser, or ChatGPT Codex as the destination
 
-The DMG is self-contained. Node.js 22.5+ and Xcode Command Line Tools are required only for npm or source installation.
+The DMG is self-contained. Node.js 24+ and Xcode Command Line Tools are required only for npm or source installation.
 
 ## Installation
 
@@ -140,12 +142,25 @@ Browser-to-browser transfers use a small unpacked extension at each selected end
 
 Generated extensions live under `~/Library/Application Support/BraveCodexCookieSync/` and contain a random, user-only local broker token. Do not share those folders.
 
+### Browser → Browserless Cloud (optional)
+
+This path uses the official Browserless CLI and is deliberately separate from local sync.
+
+1. Select **Browserless Cloud** as the destination.
+2. Enter your Browserless API token, cloud profile name, region, and optional domain allowlist. The token is stored in macOS Keychain; it is never written to the app configuration or command arguments.
+3. Quit the selected source browser so its profile can be copied consistently.
+4. Review the cloud warning and click **Upload now**.
+
+The upload creates the named Browserless profile the first time and refreshes it on later runs. It may contain cookies, local storage, and IndexedDB; history and saved passwords are excluded. Browserless uploads never run from Daily sync or Sync at login. Browser Cookie Bridge disables Browserless CLI telemetry for this integration. Comet is not currently supported by the Browserless capture CLI.
+
+The official CLI records the Browserless upload-disclaimer acceptance timestamp in `~/.browserless/config.json`. Browser Cookie Bridge does not store its API token there.
+
 ## Usage
 
 | Control | What it does |
 |---|---|
 | **Export from** | Selects the browser whose data will be read |
-| **Import into** | Selects a different browser or ChatGPT Codex |
+| **Import into** | Selects a different browser, ChatGPT Codex, or optional Browserless Cloud |
 | **Cookies** | Moves cookies and supported session attributes; on by default |
 | **History URLs** | Adds visited URLs without their original timestamps or titles |
 | **Daily sync** | Runs at one fixed local time; off by default |
@@ -154,7 +169,7 @@ Generated extensions live under `~/Library/Application Support/BraveCodexCookieS
 | **Show in menu bar** | Keeps sync, status, updates, and support actions close at hand |
 | **Check for updates** | Finds a newer GitHub release, verifies its DMG, and offers install + relaunch |
 
-Automation always uses the source, destination, and data choices currently saved in the app. A scheduled Codex sync safely exits without making changes when Codex is open.
+Automation uses the saved source, destination, and data choices for local transfers. A scheduled Codex sync safely exits without making changes when Codex is open. Browserless cloud uploads are always manual and require an explicit upload action.
 
 ## CLI
 
@@ -162,7 +177,7 @@ Automation always uses the source, destination, and data choices currently saved
 browser-cookie-bridge install-app [--no-open]
 browser-cookie-bridge setup [--hour 9] [--minute 0] [--no-schedule]
 browser-cookie-bridge preferences --source brave --target codex --cookies on --history off
-browser-cookie-bridge sync [--timeout 300]
+browser-cookie-bridge sync [--timeout 300] [--allow-cloud-upload]
 browser-cookie-bridge doctor
 browser-cookie-bridge enable-login-sync
 browser-cookie-bridge disable-login-sync
@@ -171,7 +186,7 @@ browser-cookie-bridge disable-app-login
 browser-cookie-bridge remove-schedule
 ```
 
-Supported source IDs are `brave`, `chrome`, `edge`, `arc`, `vivaldi`, `opera`, and `comet`. Target IDs are the same plus `codex`. The same browser cannot be both endpoints.
+Supported source IDs are `brave`, `chrome`, `edge`, `arc`, `vivaldi`, `opera`, and `comet`. Target IDs are the same plus `codex` and `browserless`. The same browser cannot be both endpoints. Browserless requires `BROWSERLESS_TOKEN` and the explicit `--allow-cloud-upload` flag; the native app supplies the token from Keychain without placing it in the OS command line or app configuration.
 
 ## How it works
 
@@ -179,6 +194,7 @@ Supported source IDs are `brave`, `chrome`, `edge`, `arc`, `vivaldi`, `opera`, a
 |---|---|
 | **Browser → browser** | Unpacked extensions connect to a short-lived broker on IPv4 loopback. Selected data stays in memory and is never written to logs. |
 | **Browser → Codex** | The app reads the selected local Chromium profile, creates a consistent Codex SQLite backup, merges into a working copy, validates it, then replaces the destination atomically. |
+| **Browser → Browserless** | The bundled official Browserless CLI copies a closed local profile, captures cookies/local storage/IndexedDB, and uploads it directly to the selected Browserless region. |
 
 The broker validates a random token and extension origin, limits payload size, and normally exits after five minutes. Only the endpoints selected in the app respond to a transfer.
 
@@ -190,6 +206,7 @@ The broker validates a random token and extension origin, limits payload size, a
 - The app refuses unknown Codex database schemas instead of guessing.
 - Imported Codex rows use an empty `encrypted_value` because OpenAI's Safe Storage key is protected by a private macOS Keychain access group. Those imported rows can therefore remain readable to software running as your macOS user until the website refreshes them.
 - Anyone who can use your logged-in macOS account or modify a generated extension may be able to access transferred browser sessions.
+- The optional Browserless destination sends authenticated state to Browserless under their terms and privacy practices. Its API token is stored in macOS Keychain, uploads are manual, and Browserless CLI telemetry is disabled by the app.
 
 Cookies are credentials. Review the source, protect your macOS account, and transfer only between profiles you trust.
 
@@ -237,4 +254,4 @@ npm run web
 
 [MIT](LICENSE) © 2026 [Apoorv Darshan](https://github.com/apoorvdarshan)
 
-<sub>Not affiliated with Brave, Google, Microsoft, The Browser Company, Vivaldi, Opera, Perplexity, or OpenAI. Their names and marks belong to their respective owners.</sub>
+<sub>Not affiliated with Brave, Google, Microsoft, The Browser Company, Vivaldi, Opera, Perplexity, OpenAI, or Browserless. Their names and marks belong to their respective owners.</sub>

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,11 @@
+# Third-party notices
+
+Browser Cookie Bridge includes the official Browserless CLI for the optional, user-initiated Browserless Cloud destination.
+
+## @browserless.io/cli
+
+- Version: 0.3.0
+- License: MIT
+- Source: https://github.com/browserless/browserless-cli
+
+The Browserless CLI's license and the licenses shipped with its npm dependencies remain included inside `node_modules` in self-contained app builds. Browser Cookie Bridge disables Browserless CLI telemetry for uploads started through this app.

package/extension-template/manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "Browser Cookie Bridge",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "Transfers selected browser data locally between supported browsers and into ChatGPT Codex.",
   "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5o6lDkXzU/23Jm2QRk4mfuxNnr3VlEIjRHcZr93Gdo7PI7asHJQhigaMGT6UOz0lkaTn1F+TGIPlsJo9GNBSsxbCfxWoBSXcFQFrPolY5LEfKaMtZQQ6eb4UAnp+bbUwb1den4On0piWU47Yzl6i0Jcdg4EG5H1kCSF/6nJsbKgF7OTaR/3drULu40yRvflzSXRhly3UDO7c5mgHJsaMwVV+VILsxbcPOoRINjuo3zDC737HFs67dpf38xF3tjSVL0HURAWKKobMvfABiDfVEm5O0Lvf+57d1Ib12QLT2qtVXNDy3iYwX+w2S0wH2vIMsfvoFPlRdmeqft70kZOqXwIDAQAB",
   "permissions": ["alarms", "cookies", "history"],

package/macos-app/Info.plist

@@ -10,8 +10,8 @@
   <key>CFBundleInfoDictionaryVersion</key><string>6.0</string>
   <key>CFBundleName</key><string>Browser Cookie Bridge</string>
   <key>CFBundlePackageType</key><string>APPL</string>
-  <key>CFBundleShortVersionString</key><string>1.1.0</string>
-  <key>CFBundleVersion</key><string>25</string>
+  <key>CFBundleShortVersionString</key><string>1.2.0</string>
+  <key>CFBundleVersion</key><string>26</string>
   <key>LSMinimumSystemVersion</key><string>13.5</string>
   <key>NSHighResolutionCapable</key><true/>
 </dict>

package/macos-app/Resources/BrowserIcons/browserless.svg

@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<svg xmlns="http://www.w3.org/2000/svg" width="256px" height="256px" viewBox="0 0 256 256">
+  <style>.s0{fill:black}@media (prefers-color-scheme:dark){.s0{fill:white}}</style>
+  <path class="s0" d="M 60.96875 0 C 61.0625 0.03125 67.5625 3.75 89.75 16.625 L 89.75 119.5625 C 89.75 217.46875 89.78125 222.5 90.1875 222.375 C 90.4375 222.3125 107.625 213.875 166.21875 185.125 L 166.25 169.6875 C 166.25 157.4375 166.1875 154.28125 165.9375 154.34375 C 165.78125 154.40625 155.03125 159.34375 142.0625 165.34375 C 129.09375 171.34375 118.4375 176.21875 118.375 176.1875 C 118.3125 176.15625 118.3125 144.09375 118.375 33.78125 L 147.25 50.78125 L 147.53125 114.875 L 195.375 142.71875 L 195.5 203.625 L 142.21875 229.75 C 112.9375 244.125 88.75 255.90625 88.53125 255.9375 C 88.3125 256 81.90625 251.875 60.46875 237.625 L 60.5 163.5 C 60.5 122.71875 60.5625 69.28125 60.6875 44.6875 C 60.75 20.09375 60.90625 0 60.96875 0 Z" />
+</svg>
+

package/macos-app/Sources/BraveCodexSyncApp/BraveCodexSyncApp.swift

@@ -213,6 +213,9 @@ struct ContentView: View {
     .sheet(isPresented: $showingSetup) {
       ExtensionSetupSheet().environmentObject(model)
     }
+    .sheet(isPresented: $model.showingBrowserlessSetup) {
+      BrowserlessSetupSheet().environmentObject(model)
+    }
   }
 
   private var header: some View {
@@ -238,7 +241,10 @@ struct ContentView: View {
 
   private var footer: some View {
     HStack(spacing: 10) {
-      Label("Data stays on this Mac", systemImage: "lock.shield.fill")
+      Label(
+        model.isBrowserlessTarget ? "Cloud upload only when you choose it" : "Data stays on this Mac",
+        systemImage: model.isBrowserlessTarget ? "cloud.fill" : "lock.shield.fill"
+      )
         .foregroundStyle(.secondary)
       Spacer()
       if let version = model.availableUpdateVersion {
@@ -262,7 +268,7 @@ struct ContentView: View {
       .buttonStyle(.plain)
       .foregroundStyle(.secondary)
       .help("Refresh status")
-      if model.selectedTargetID != "codex" {
+      if model.selectedTargetID != "codex" && !model.isBrowserlessTarget {
         Button("Extension setup…") { showingSetup = true }
           .controlSize(.small)
       }
@@ -295,26 +301,32 @@ struct SyncPanel: View {
               .help(model.secondaryStatus)
           }
           Spacer()
-          Button { model.syncNow() } label: {
+          Button {
+            if model.isBrowserlessTarget && !model.browserlessConfigured {
+              model.showingBrowserlessSetup = true
+            } else {
+              model.syncNow()
+            }
+          } label: {
             HStack(spacing: 7) {
               if model.isSyncing { ProgressView().controlSize(.small) }
-              else { Image(systemName: model.codexBlocked ? "xmark.circle.fill" : "arrow.triangle.2.circlepath") }
-              Text(model.isSyncing ? "Syncing…" : (model.codexBlocked ? "Close Codex first" : "Sync now"))
+              else { Image(systemName: syncButtonIcon) }
+              Text(syncButtonTitle)
             }
-            .frame(minWidth: model.codexBlocked ? 116 : 92)
+            .frame(minWidth: model.syncBlocked ? 116 : 92)
           }
           .buttonStyle(.borderedProminent)
           .tint(Theme.accent)
-          .disabled(model.isSyncing || model.codexBlocked)
+          .disabled(model.isSyncing || (model.syncBlocked && !(model.isBrowserlessTarget && !model.browserlessConfigured)))
           .keyboardShortcut(.return, modifiers: .command)
         }
-        .padding(model.codexBlocked ? 7 : 0)
+        .padding(model.syncBlocked ? 7 : 0)
         .background(
-          model.codexBlocked ? Theme.active.opacity(0.10) : Color.clear,
+          model.syncBlocked ? Theme.active.opacity(0.10) : Color.clear,
           in: RoundedRectangle(cornerRadius: 9, style: .continuous)
         )
         .overlay {
-          if model.codexBlocked {
+          if model.syncBlocked {
             RoundedRectangle(cornerRadius: 9, style: .continuous)
               .stroke(Theme.active.opacity(0.38), lineWidth: 1)
           }
@@ -323,6 +335,20 @@ struct SyncPanel: View {
     }
   }
 
+  private var syncButtonTitle: String {
+    if model.isSyncing { return model.isBrowserlessTarget ? "Uploading…" : "Syncing…" }
+    if model.codexBlocked { return "Close Codex first" }
+    if model.isBrowserlessTarget && !model.browserlessConfigured { return "Connect Browserless" }
+    if model.isBrowserlessTarget && model.selectedSourceID == "comet" { return "Choose another browser" }
+    if model.isBrowserlessTarget && model.sourceBrowserRunning { return "Close \(model.selectedBrowser.name) first" }
+    return model.isBrowserlessTarget ? "Upload now" : "Sync now"
+  }
+
+  private var syncButtonIcon: String {
+    if model.syncBlocked { return model.isBrowserlessTarget && !model.browserlessConfigured ? "key.fill" : "xmark.circle.fill" }
+    return model.isBrowserlessTarget ? "icloud.and.arrow.up.fill" : "arrow.triangle.2.circlepath"
+  }
+
 }
 
 struct SourcePicker: View {
@@ -378,7 +404,12 @@ struct TargetPicker: View {
       VStack(spacing: 5) {
         HStack(spacing: 5) {
           ForEach(Array(model.browsers.prefix(4))) { browser in targetButton(browser) }
-          Color.clear.frame(width: 19, height: 40)
+          EndpointButton(
+            icon: model.browserlessIcon,
+            name: "Browserless Cloud",
+            selected: model.selectedTargetID == "browserless",
+            disabled: model.isWorking || model.isSyncing || model.selectedSourceID == "comet"
+          ) { model.selectTarget("browserless") }
         }
         HStack(spacing: 5) {
           ForEach(Array(model.browsers.dropFirst(4))) { browser in targetButton(browser) }
@@ -449,44 +480,69 @@ struct PreferencesPanel: View {
     Surface(padding: 0) {
       VStack(spacing: 0) {
         SectionLabel(title: "Sync data", detail: "Saved automatically")
-        PreferenceRow(icon: "network", color: Theme.accent, title: "Cookies", detail: "Site sessions and sign-ins") {
-          Toggle("", isOn: Binding(get: { model.cookiesEnabled }, set: { model.setCookiesEnabled($0) }))
-            .labelsHidden().toggleStyle(.switch).tint(Theme.active).disabled(model.isWorking)
-        }
-        RowDivider()
-        PreferenceRow(icon: "clock.arrow.circlepath", color: Theme.accent, title: "History URLs", detail: "Original visit times are not preserved") {
-          Toggle("", isOn: Binding(get: { model.historyEnabled }, set: { model.setHistoryEnabled($0) }))
-            .labelsHidden().toggleStyle(.switch).tint(Theme.active).disabled(model.isWorking)
-        }
-        RowDivider()
-        PreferenceRow(icon: "key.slash", color: .secondary, title: "Passwords", detail: "Browser extensions cannot access passwords", muted: true) {
-          Text("Unavailable")
-            .font(.system(size: 10, weight: .semibold))
-            .foregroundStyle(.tertiary)
-            .padding(.horizontal, 8).padding(.vertical, 4)
-            .background(Color.secondary.opacity(0.08), in: Capsule())
+        if model.isBrowserlessTarget {
+          PreferenceRow(icon: "person.crop.circle.badge.checkmark", color: Theme.accent, title: "Authenticated state", detail: "Cookies, local storage, and IndexedDB") {
+            FixedBadge("Included")
+          }
+          RowDivider()
+          PreferenceRow(icon: "clock.arrow.circlepath", color: .secondary, title: "History URLs", detail: "Not included in Browserless profiles", muted: true) {
+            FixedBadge("Excluded")
+          }
+          RowDivider()
+          PreferenceRow(icon: "key.slash", color: .secondary, title: "Saved passwords", detail: "Never read or uploaded", muted: true) {
+            FixedBadge("Excluded")
+          }
+          RowDivider()
+          PreferenceRow(icon: "cloud.fill", color: Theme.accent, title: "Browserless connection", detail: model.browserlessConfigured ? "\(model.browserlessProfileName) · \(model.browserlessRegion.uppercased()) · token in Keychain" : "Not connected") {
+            Button(model.browserlessConfigured ? "Configure…" : "Connect…") {
+              model.showingBrowserlessSetup = true
+            }
+            .controlSize(.small)
+          }
+        } else {
+          PreferenceRow(icon: "network", color: Theme.accent, title: "Cookies", detail: "Site sessions and sign-ins") {
+            Toggle("", isOn: Binding(get: { model.cookiesEnabled }, set: { model.setCookiesEnabled($0) }))
+              .labelsHidden().toggleStyle(.switch).tint(Theme.active).disabled(model.isWorking)
+          }
+          RowDivider()
+          PreferenceRow(icon: "clock.arrow.circlepath", color: Theme.accent, title: "History URLs", detail: "Original visit times are not preserved") {
+            Toggle("", isOn: Binding(get: { model.historyEnabled }, set: { model.setHistoryEnabled($0) }))
+              .labelsHidden().toggleStyle(.switch).tint(Theme.active).disabled(model.isWorking)
+          }
+          RowDivider()
+          PreferenceRow(icon: "key.slash", color: .secondary, title: "Passwords", detail: "Browser extensions cannot access passwords", muted: true) {
+            FixedBadge("Unavailable")
+          }
         }
 
         SectionLabel(title: "Automation", detail: "Runs in the background", separated: true)
-        PreferenceRow(icon: "clock.badge.checkmark", color: Theme.accent, title: "Daily sync", detail: model.dailyEnabled ? "At the selected local time" : "Off") {
-          HStack(spacing: 8) {
-            DatePicker("", selection: $model.scheduleTime, displayedComponents: .hourAndMinute)
-              .labelsHidden()
-              .datePickerStyle(.field)
-              .controlSize(.regular)
-              .disabled(!model.dailyEnabled || model.isWorking)
-              .frame(width: 112, alignment: .center)
-              .onChange(of: model.scheduleTime) { _ in
-                if model.dailyEnabled && !model.isWorking { model.saveSchedule() }
-              }
-            Toggle("", isOn: Binding(get: { model.dailyEnabled }, set: { model.setDailyEnabled($0) }))
-              .labelsHidden().toggleStyle(.switch).tint(Theme.active).disabled(model.isWorking)
+        PreferenceRow(icon: "clock.badge.checkmark", color: Theme.accent, title: "Daily sync", detail: model.isBrowserlessTarget ? "Unavailable for cloud uploads" : (model.dailyEnabled ? "At the selected local time" : "Off")) {
+          if model.isBrowserlessTarget {
+            FixedBadge("Manual only")
+          } else {
+            HStack(spacing: 8) {
+              DatePicker("", selection: $model.scheduleTime, displayedComponents: .hourAndMinute)
+                .labelsHidden()
+                .datePickerStyle(.field)
+                .controlSize(.regular)
+                .disabled(!model.dailyEnabled || model.isWorking)
+                .frame(width: 112, alignment: .center)
+                .onChange(of: model.scheduleTime) { _ in
+                  if model.dailyEnabled && !model.isWorking { model.saveSchedule() }
+                }
+              Toggle("", isOn: Binding(get: { model.dailyEnabled }, set: { model.setDailyEnabled($0) }))
+                .labelsHidden().toggleStyle(.switch).tint(Theme.active).disabled(model.isWorking)
+            }
           }
         }
         RowDivider()
-        PreferenceRow(icon: "sunrise.fill", color: Theme.accent, title: "Sync at login", detail: model.loginSyncEnabled ? "Once whenever you sign in" : "Off") {
-          Toggle("", isOn: Binding(get: { model.loginSyncEnabled }, set: { model.setLoginSyncEnabled($0) }))
-            .labelsHidden().toggleStyle(.switch).tint(Theme.active).disabled(model.isWorking)
+        PreferenceRow(icon: "sunrise.fill", color: Theme.accent, title: "Sync at login", detail: model.isBrowserlessTarget ? "Unavailable for cloud uploads" : (model.loginSyncEnabled ? "Once whenever you sign in" : "Off")) {
+          if model.isBrowserlessTarget {
+            FixedBadge("Manual only")
+          } else {
+            Toggle("", isOn: Binding(get: { model.loginSyncEnabled }, set: { model.setLoginSyncEnabled($0) }))
+              .labelsHidden().toggleStyle(.switch).tint(Theme.active).disabled(model.isWorking)
+          }
         }
         RowDivider()
         PreferenceRow(icon: "power", color: Theme.accent, title: "Open at login", detail: "Start the app after you sign in") {
@@ -525,6 +581,121 @@ struct PreferencesPanel: View {
   }
 }
 
+struct FixedBadge: View {
+  let title: String
+
+  init(_ title: String) { self.title = title }
+
+  var body: some View {
+    Text(title)
+      .font(.system(size: 10, weight: .semibold))
+      .foregroundStyle(.tertiary)
+      .padding(.horizontal, 8).padding(.vertical, 4)
+      .background(Color.secondary.opacity(0.08), in: Capsule())
+  }
+}
+
+struct BrowserlessSetupSheet: View {
+  @EnvironmentObject private var model: SyncModel
+  @Environment(\.dismiss) private var dismiss
+  @State private var token = ""
+  @State private var profileName = "browser-cookie-bridge"
+  @State private var region = "sfo"
+  @State private var onlyDomains = ""
+  @State private var cloudConsent = false
+
+  var body: some View {
+    VStack(alignment: .leading, spacing: 17) {
+      HStack(alignment: .top, spacing: 12) {
+        Image(nsImage: model.browserlessIcon)
+          .resizable()
+          .scaledToFit()
+          .frame(width: 24, height: 24)
+          .frame(width: 40, height: 40)
+          .background(Theme.accent.opacity(0.11), in: RoundedRectangle(cornerRadius: 11, style: .continuous))
+        VStack(alignment: .leading, spacing: 3) {
+          Text("Connect Browserless Cloud")
+            .font(.system(size: 18, weight: .bold, design: .rounded))
+          Text("Optional authenticated-profile upload")
+            .font(.system(size: 11.5)).foregroundStyle(.secondary)
+        }
+        Spacer()
+        FixedBadge(model.browserlessConfigured ? "Connected" : "Not connected")
+      }
+
+      VStack(alignment: .leading, spacing: 12) {
+        LabeledContent("API token") {
+          SecureField(model.browserlessConfigured ? "Saved in Keychain — leave blank to keep" : "Browserless API token", text: $token)
+            .textFieldStyle(.roundedBorder)
+            .frame(width: 270)
+        }
+        LabeledContent("Cloud profile") {
+          TextField("browser-cookie-bridge", text: $profileName)
+            .textFieldStyle(.roundedBorder)
+            .frame(width: 270)
+        }
+        LabeledContent("Region") {
+          Picker("", selection: $region) {
+            Text("San Francisco (SFO)").tag("sfo")
+            Text("London (LON)").tag("lon")
+            Text("Amsterdam (AMS)").tag("ams")
+          }
+          .labelsHidden()
+          .frame(width: 270)
+        }
+        LabeledContent("Only domains") {
+          TextField("Optional: example.com, app.example.com", text: $onlyDomains)
+            .textFieldStyle(.roundedBorder)
+            .frame(width: 270)
+        }
+      }
+      .font(.system(size: 11.5, weight: .medium))
+      .padding(14)
+      .background(Color(nsColor: .controlBackgroundColor).opacity(0.72), in: RoundedRectangle(cornerRadius: 12, style: .continuous))
+      .overlay(RoundedRectangle(cornerRadius: 12, style: .continuous).stroke(Color.primary.opacity(0.08)))
+
+      HStack(alignment: .top, spacing: 10) {
+        Image(systemName: "exclamationmark.cloud.fill")
+          .foregroundStyle(Theme.active)
+        Text("This destination is not local. Clicking Upload sends cookies, local storage, and IndexedDB from a temporary profile copy to Browserless. Upload only profiles you are authorized to share; use the domain allowlist for sensitive profiles. Background and login sync never perform cloud uploads. CLI telemetry is disabled.")
+          .font(.system(size: 10.5))
+          .foregroundStyle(.secondary)
+          .fixedSize(horizontal: false, vertical: true)
+      }
+      .padding(12)
+      .background(Theme.active.opacity(0.08), in: RoundedRectangle(cornerRadius: 10, style: .continuous))
+
+      Toggle("I understand the upload contents, have authority to share them, and accept responsibility for the Browserless copy.", isOn: $cloudConsent)
+        .toggleStyle(.checkbox)
+        .font(.system(size: 10.5, weight: .medium))
+
+      HStack {
+        Link("Get a Browserless API token", destination: URL(string: "https://www.browserless.io/account")!)
+          .font(.system(size: 10.5, weight: .medium))
+        Link("Privacy", destination: URL(string: "https://www.browserless.io/privacy-policy")!)
+          .font(.system(size: 10.5, weight: .medium))
+        if model.browserlessConfigured {
+          Button("Disconnect", role: .destructive) { model.disconnectBrowserless() }
+        }
+        Spacer()
+        Button("Cancel") { dismiss() }
+        Button("Save connection") {
+          model.saveBrowserlessSettings(token: token, profileName: profileName, region: region, onlyDomains: onlyDomains)
+        }
+        .keyboardShortcut(.defaultAction)
+        .disabled(profileName.trimmingCharacters(in: .whitespacesAndNewlines).isEmpty || !cloudConsent)
+      }
+    }
+    .padding(22)
+    .frame(width: 520)
+    .onAppear {
+      profileName = model.browserlessProfileName
+      region = model.browserlessRegion
+      onlyDomains = model.browserlessOnlyDomains
+    }
+  }
+}
+
 struct ExtensionSetupSheet: View {
   @EnvironmentObject private var model: SyncModel
   @Environment(\.dismiss) private var dismiss

package/macos-app/Sources/BraveCodexSyncApp/SyncModel.swift

@@ -1,5 +1,6 @@
 import AppKit
 import Foundation
+import Security
 
 extension Notification.Name {
   static let menuBarVisibilityChanged = Notification.Name("BraveCodexSync.menuBarVisibilityChanged")
@@ -60,6 +61,12 @@ final class SyncModel: ObservableObject {
   @Published var selectedSourceID = "brave"
   @Published var selectedTargetID = "codex"
   @Published var codexRunning = false
+  @Published var sourceBrowserRunning = false
+  @Published var browserlessConfigured = false
+  @Published var browserlessProfileName = "browser-cookie-bridge"
+  @Published var browserlessRegion = "sfo"
+  @Published var browserlessOnlyDomains = ""
+  @Published var showingBrowserlessSetup = false
   @Published var primaryStatus = "Ready to sync"
   @Published var secondaryStatus = "Choose what to move, then start a transfer"
 
@@ -69,7 +76,7 @@ final class SyncModel: ObservableObject {
   private var launchAgent: URL { home.appending(path: "Library/LaunchAgents/com.apoorvdarshan.brave-codex-cookie-sync.plist") }
   private var loginSyncAgent: URL { home.appending(path: "Library/LaunchAgents/com.apoorvdarshan.brave-codex-cookie-sync.login-sync.plist") }
   private var appLoginAgent: URL { home.appending(path: "Library/LaunchAgents/com.apoorvdarshan.brave-codex-cookie-sync.app-login.plist") }
-  private var codexStatusTimer: Timer?
+  private var endpointStatusTimer: Timer?
   private var updateTimer: Timer?
   private var didCheckAfterLaunch = false
   private var didConsumeUpdateResult = false
@@ -82,10 +89,24 @@ final class SyncModel: ObservableObject {
     browsers.first(where: { $0.id == selectedTargetID })
   }
 
-  var targetName: String { selectedTargetBrowser?.name ?? "ChatGPT Codex" }
+  var isBrowserlessTarget: Bool { selectedTargetID == "browserless" }
+  var targetName: String {
+    isBrowserlessTarget ? "Browserless Cloud" : selectedTargetBrowser?.name ?? "ChatGPT Codex"
+  }
   var codexBlocked: Bool { selectedTargetID == "codex" && codexRunning }
+  var browserlessBlocked: Bool {
+    isBrowserlessTarget && (!browserlessConfigured || sourceBrowserRunning || selectedSourceID == "comet")
+  }
+  var syncBlocked: Bool { codexBlocked || browserlessBlocked }
   var sourceIcon: NSImage { browserIcon(selectedBrowser) }
-  var targetIcon: NSImage { selectedTargetBrowser.map(browserIcon) ?? codexIcon }
+  var targetIcon: NSImage {
+    isBrowserlessTarget ? browserlessIcon : selectedTargetBrowser.map(browserIcon) ?? codexIcon
+  }
+  var browserlessIcon: NSImage {
+    bundledIcon("browserless")
+      ?? NSImage(systemSymbolName: "cloud.fill", accessibilityDescription: "Browserless Cloud")
+      ?? NSImage()
+  }
   var codexIcon: NSImage {
     bundledIcon("chatgpt-codex")
       ?? chatGPTResource("app.icns")
@@ -119,9 +140,9 @@ final class SyncModel: ObservableObject {
     bootstrapBundledRuntimeIfNeeded()
     let calendar = Calendar.current
     scheduleTime = calendar.date(bySettingHour: 9, minute: 0, second: 0, of: Date()) ?? Date()
-    updateCodexRunningStatus()
-    codexStatusTimer = Timer.scheduledTimer(withTimeInterval: 2, repeats: true) { [weak self] _ in
-      Task { @MainActor in self?.updateCodexRunningStatus() }
+    updateEndpointRunningStatus()
+    endpointStatusTimer = Timer.scheduledTimer(withTimeInterval: 2, repeats: true) { [weak self] _ in
+      Task { @MainActor in self?.updateEndpointRunningStatus() }
     }
     updateTimer = Timer.scheduledTimer(withTimeInterval: 24 * 60 * 60, repeats: true) { [weak self] _ in
       Task { @MainActor in
@@ -191,7 +212,7 @@ final class SyncModel: ObservableObject {
       let configuredSource = config.sourceBrowser ?? "brave"
       selectedSourceID = browsers.contains(where: { $0.id == configuredSource }) ? configuredSource : "brave"
       let configuredTarget = config.targetBrowser ?? "codex"
-      selectedTargetID = configuredTarget == "codex" || browsers.contains(where: { $0.id == configuredTarget })
+      selectedTargetID = configuredTarget == "codex" || configuredTarget == "browserless" || browsers.contains(where: { $0.id == configuredTarget })
         ? configuredTarget
         : "codex"
       if selectedTargetID == selectedSourceID { selectedTargetID = "codex" }
@@ -199,12 +220,16 @@ final class SyncModel: ObservableObject {
       historyEnabled = config.imports?.history ?? false
       menuBarEnabled = config.ui?.menuBar ?? true
       autoCheckUpdates = config.ui?.autoCheckUpdates ?? true
+      browserlessProfileName = config.browserless?.profileName ?? "browser-cookie-bridge"
+      browserlessRegion = config.browserless?.region ?? "sfo"
+      browserlessOnlyDomains = (config.browserless?.onlyDomains ?? []).joined(separator: ", ")
     }
+    browserlessConfigured = BrowserlessCredentialStore.read() != nil
     NotificationCenter.default.post(name: .menuBarVisibilityChanged, object: menuBarEnabled)
     extensionsReady = requiredExtensionIDs.allSatisfy {
       FileManager.default.fileExists(atPath: support.appending(path: "extension-\($0)/manifest.json").path)
     }
-    updateCodexRunningStatus()
+    updateEndpointRunningStatus()
     consumeUpdateResultIfNeeded()
     if autoCheckUpdates && !didCheckAfterLaunch {
       didCheckAfterLaunch = true
@@ -219,11 +244,12 @@ final class SyncModel: ObservableObject {
   }
 
   func selectTarget(_ id: String) {
-    let validTarget = id == "codex" || browsers.contains(where: { $0.id == id })
+    let validTarget = id == "codex" || id == "browserless" || browsers.contains(where: { $0.id == id })
     guard validTarget, id != selectedTargetID, id != selectedSourceID else { return }
     selectedTargetID = id
     persistPreferences(successMessage: "Import destination changed to \(targetName)")
-    updateCodexRunningStatus()
+    updateEndpointRunningStatus()
+    if id == "browserless" && !browserlessConfigured { showingBrowserlessSetup = true }
   }
 
   func setCookiesEnabled(_ enabled: Bool) {
@@ -236,6 +262,33 @@ final class SyncModel: ObservableObject {
     persistPreferences(successMessage: enabled ? "History URL import enabled" : "History import disabled")
   }
 
+  func saveBrowserlessSettings(token: String, profileName: String, region: String, onlyDomains: String) {
+    let cleanedToken = token.trimmingCharacters(in: .whitespacesAndNewlines)
+    let cleanedName = profileName.trimmingCharacters(in: .whitespacesAndNewlines)
+    guard !cleanedName.isEmpty, !cleanedToken.isEmpty || BrowserlessCredentialStore.read() != nil else {
+      postNativeAlert(title: "Browserless connection incomplete", message: "Enter an API token and cloud profile name.", kind: .warning)
+      return
+    }
+    do {
+      if !cleanedToken.isEmpty { try BrowserlessCredentialStore.save(cleanedToken) }
+      browserlessConfigured = true
+      browserlessProfileName = cleanedName
+      browserlessRegion = region
+      browserlessOnlyDomains = onlyDomains
+      showingBrowserlessSetup = false
+      persistPreferences(successMessage: "Browserless connected — uploads remain manual")
+    } catch {
+      postNativeAlert(title: "Could not save Browserless token", message: error.localizedDescription, kind: .error)
+    }
+  }
+
+  func disconnectBrowserless() {
+    BrowserlessCredentialStore.delete()
+    browserlessConfigured = false
+    showingBrowserlessSetup = false
+    updateEndpointRunningStatus()
+  }
+
   func setMenuBarEnabled(_ enabled: Bool) {
     menuBarEnabled = enabled
     NotificationCenter.default.post(name: .menuBarVisibilityChanged, object: enabled)
@@ -339,8 +392,8 @@ final class SyncModel: ObservableObject {
       }
       return
     }
-    updateCodexRunningStatus()
-    guard !codexBlocked else {
+    updateEndpointRunningStatus()
+    guard !syncBlocked else {
       if showMenuBarAlert {
         postNativeAlert(title: primaryStatus, message: secondaryStatus, kind: .warning)
       }
@@ -348,17 +401,33 @@ final class SyncModel: ObservableObject {
     }
     isSyncing = true
     state = .syncing
-    primaryStatus = "Transferring selected data"
+    primaryStatus = isBrowserlessTarget ? "Uploading authenticated state" : "Transferring selected data"
     secondaryStatus = selectedTargetID == "codex"
       ? "Backing up Codex and merging \(selectedBrowser.name) locally…"
-      : "Waiting for \(selectedBrowser.name) and \(targetName)…"
-    runCLI(["sync", "--timeout", "300"]) { [weak self] success, output in
+      : isBrowserlessTarget
+        ? "Sending \(selectedBrowser.name) to Browserless \(browserlessRegion.uppercased()) only for this request…"
+        : "Waiting for \(selectedBrowser.name) and \(targetName)…"
+    var environment: [String: String] = [:]
+    var arguments = ["sync", "--timeout", "300"]
+    if isBrowserlessTarget {
+      guard let token = BrowserlessCredentialStore.read() else {
+        isSyncing = false
+        browserlessConfigured = false
+        updateEndpointRunningStatus()
+        return
+      }
+      environment["BROWSERLESS_TOKEN"] = token
+      arguments.append("--allow-cloud-upload")
+    }
+    runCLI(arguments, environment: environment) { [weak self] success, output in
       guard let self else { return }
       self.isSyncing = false
       let partial = success && (output.contains("Partially synced:") || output.contains("with warnings"))
       if success {
         self.state = partial ? .warning : .success
-        self.primaryStatus = self.selectedTargetID == "codex"
+        self.primaryStatus = self.isBrowserlessTarget
+          ? "Browserless profile uploaded"
+          : self.selectedTargetID == "codex"
           ? (partial ? "Codex sync completed with warnings" : "Codex sessions updated")
           : (partial ? "Partially synced" : "Transfer complete")
         self.secondaryStatus = self.lastMeaningfulLine(output) ?? "\(self.selectedBrowser.name) and \(self.targetName) are up to date"
@@ -367,9 +436,11 @@ final class SyncModel: ObservableObject {
         self.primaryStatus = "Sync did not finish"
         self.secondaryStatus = self.lastMeaningfulLine(output) ?? (self.selectedTargetID == "codex"
           ? "Quit Codex completely, then try again"
+          : self.isBrowserlessTarget
+            ? "Check the API token, close the source browser, and try again"
           : "Keep both browsers open and check the extensions")
       }
-      self.updateCodexRunningStatus()
+      self.updateEndpointRunningStatus()
       if showMenuBarAlert {
         self.postNativeAlert(
           title: self.primaryStatus,
@@ -381,6 +452,10 @@ final class SyncModel: ObservableObject {
   }
 
   func setDailyEnabled(_ enabled: Bool) {
+    guard !isBrowserlessTarget else {
+      postNativeAlert(title: "Cloud uploads are manual-only", message: "Browser Cookie Bridge will never schedule Browserless uploads in the background.", kind: .information)
+      return
+    }
     dailyEnabled = enabled
     applySchedule(enabled)
   }
@@ -390,6 +465,10 @@ final class SyncModel: ObservableObject {
   }
 
   func setLoginSyncEnabled(_ enabled: Bool) {
+    guard !isBrowserlessTarget else {
+      postNativeAlert(title: "Cloud uploads are manual-only", message: "Login sync does not send authenticated state to Browserless.", kind: .information)
+      return
+    }
     loginSyncEnabled = enabled
     isWorking = true
     runCLI([enabled ? "enable-login-sync" : "disable-login-sync"]) { [weak self] success, output in
@@ -453,7 +532,10 @@ final class SyncModel: ObservableObject {
       "--cookies", cookiesEnabled ? "on" : "off",
       "--history", historyEnabled ? "on" : "off",
       "--menu-bar", menuBarEnabled ? "on" : "off",
-      "--auto-check-updates", autoCheckUpdates ? "on" : "off"
+      "--auto-check-updates", autoCheckUpdates ? "on" : "off",
+      "--browserless-profile", browserlessProfileName,
+      "--browserless-region", browserlessRegion,
+      "--browserless-domains", browserlessOnlyDomains,
     ]
     runCLI(arguments) { [weak self] success, output in
       guard let self else { return }
@@ -461,7 +543,9 @@ final class SyncModel: ObservableObject {
       if success {
         self.state = .ready
         self.primaryStatus = successMessage
-        self.secondaryStatus = "This choice is saved for manual and daily syncs"
+        self.secondaryStatus = self.isBrowserlessTarget
+          ? "Cloud uploads run only after you click Upload"
+          : "This choice is saved for manual and daily syncs"
       } else {
         self.state = .error
         self.primaryStatus = "Could not save import settings"
@@ -471,7 +555,7 @@ final class SyncModel: ObservableObject {
       self.extensionsReady = self.requiredExtensionIDs.allSatisfy {
         FileManager.default.fileExists(atPath: self.support.appending(path: "extension-\($0)/manifest.json").path)
       }
-      self.updateCodexRunningStatus()
+      self.updateEndpointRunningStatus()
     }
   }
 
@@ -500,7 +584,7 @@ final class SyncModel: ObservableObject {
     }
   }
 
-  private func runCLI(_ arguments: [String], completion: @escaping @MainActor (Bool, String) -> Void) {
+  private func runCLI(_ arguments: [String], environment: [String: String] = [:], completion: @escaping @MainActor (Bool, String) -> Void) {
     guard let config = loadConfig() else {
       completion(false, "Configuration missing. Run install-app again.")
       return
@@ -509,6 +593,7 @@ final class SyncModel: ObservableObject {
     let output = Pipe()
     process.executableURL = URL(fileURLWithPath: config.nodePath)
     process.arguments = [runtimeCLI.path] + arguments
+    process.environment = ProcessInfo.processInfo.environment.merging(environment) { _, new in new }
     process.standardOutput = output
     process.standardError = output
     process.terminationHandler = { process in
@@ -551,23 +636,44 @@ final class SyncModel: ObservableObject {
   }
 
   private var requiredExtensionIDs: [String] {
-    selectedTargetID == "codex" ? [] : [selectedSourceID, selectedTargetID]
+    selectedTargetID == "codex" || selectedTargetID == "browserless" ? [] : [selectedSourceID, selectedTargetID]
   }
 
-  private func updateCodexRunningStatus() {
+  private func updateEndpointRunningStatus() {
     let wasRunning = codexRunning
     codexRunning = NSWorkspace.shared.runningApplications.contains {
       $0.bundleIdentifier == "com.openai.codex"
     }
-    guard selectedTargetID == "codex", !isSyncing else { return }
-    if codexRunning {
+    sourceBrowserRunning = NSWorkspace.shared.runningApplications.contains {
+      $0.bundleIdentifier == selectedBrowser.bundleIdentifier
+    }
+    guard !isSyncing else { return }
+    if selectedTargetID == "codex" && codexRunning {
       state = .warning
       primaryStatus = "Quit Codex before syncing"
       secondaryStatus = "Close ChatGPT Codex completely so its local cookie database can be updated safely"
-    } else if wasRunning && primaryStatus == "Quit Codex before syncing" {
+    } else if selectedTargetID == "codex" && wasRunning && primaryStatus == "Quit Codex before syncing" {
       state = .ready
       primaryStatus = "Ready to sync directly"
       secondaryStatus = "Codex is closed — a backup will be created before anything changes"
+    } else if isBrowserlessTarget {
+      if selectedSourceID == "comet" {
+        state = .warning
+        primaryStatus = "Comet capture is not supported"
+        secondaryStatus = "Choose Brave, Chrome, Edge, Arc, Vivaldi, or Opera for Browserless"
+      } else if !browserlessConfigured {
+        state = .warning
+        primaryStatus = "Connect Browserless"
+        secondaryStatus = "Your API token will be stored in macOS Keychain, never in the app configuration"
+      } else if sourceBrowserRunning {
+        state = .warning
+        primaryStatus = "Quit \(selectedBrowser.name) before uploading"
+        secondaryStatus = "Browserless captures a temporary copy of the closed profile, including local storage and IndexedDB"
+      } else {
+        state = .ready
+        primaryStatus = "Ready for an explicit cloud upload"
+        secondaryStatus = "Only this click sends authenticated state to Browserless \(browserlessRegion.uppercased())"
+      }
     }
   }
 
@@ -647,6 +753,7 @@ private struct AppConfig: Decodable {
   let targetBrowser: String?
   let imports: Imports?
   let ui: UISettings?
+  let browserless: BrowserlessSettings?
 
   struct Schedule: Decodable {
     let hour: Int
@@ -663,4 +770,60 @@ private struct AppConfig: Decodable {
     let openAtLogin: Bool?
     let autoCheckUpdates: Bool?
   }
+
+  struct BrowserlessSettings: Decodable {
+    let profileName: String?
+    let region: String?
+    let onlyDomains: [String]?
+  }
+}
+
+private enum BrowserlessCredentialStore {
+  private static let service = "com.apoorvdarshan.browser-cookie-bridge.browserless"
+  private static let account = "api-token"
+
+  static func save(_ token: String) throws {
+    let identity: [String: Any] = [
+      kSecClass as String: kSecClassGenericPassword,
+      kSecAttrService as String: service,
+      kSecAttrAccount as String: account,
+    ]
+    let update: [String: Any] = [kSecValueData as String: Data(token.utf8)]
+    let updateStatus = SecItemUpdate(identity as CFDictionary, update as CFDictionary)
+    if updateStatus == errSecSuccess { return }
+    guard updateStatus == errSecItemNotFound else {
+      throw NSError(domain: NSOSStatusErrorDomain, code: Int(updateStatus), userInfo: nil)
+    }
+    let item: [String: Any] = identity.merging([
+      kSecAttrAccessible as String: kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly,
+      kSecValueData as String: Data(token.utf8),
+    ]) { _, new in new }
+    let status = SecItemAdd(item as CFDictionary, nil)
+    guard status == errSecSuccess else {
+      throw NSError(domain: NSOSStatusErrorDomain, code: Int(status), userInfo: nil)
+    }
+  }
+
+  static func read() -> String? {
+    let query: [String: Any] = [
+      kSecClass as String: kSecClassGenericPassword,
+      kSecAttrService as String: service,
+      kSecAttrAccount as String: account,
+      kSecReturnData as String: true,
+      kSecMatchLimit as String: kSecMatchLimitOne,
+    ]
+    var result: CFTypeRef?
+    guard SecItemCopyMatching(query as CFDictionary, &result) == errSecSuccess,
+          let data = result as? Data else { return nil }
+    return String(data: data, encoding: .utf8)
+  }
+
+  static func delete() {
+    let query: [String: Any] = [
+      kSecClass as String: kSecClassGenericPassword,
+      kSecAttrService as String: service,
+      kSecAttrAccount as String: account,
+    ]
+    SecItemDelete(query as CFDictionary)
+  }
 }

package/package.json

@@ -1,14 +1,14 @@
 {
   "name": "browser-cookie-bridge",
-  "version": "1.1.0",
-  "description": "Private local cookie and session transfer for macOS",
+  "version": "1.2.0",
+  "description": "Local-first cookie and session transfer for macOS with optional Browserless upload",
   "type": "module",
   "bin": {
     "browser-cookie-bridge": "./bin/brave-codex-cookie-sync.js"
   },
   "scripts": {
     "test": "node --test test/*.test.js",
-    "check": "node --check bin/brave-codex-cookie-sync.js && node --check src/app-installer.js && node --check src/broker.js && node --check src/chromium-reader.js && node --check src/cli.js && node --check src/codex-direct-import.js && node --check src/config.js && node --check src/paths.js && node --check src/scheduler.js && node --check src/updater.js && node --check scripts/build-dmg.js && node --check extension-template/background.js && node --check web/server.js && node --check web/script.js",
+    "check": "node --check bin/brave-codex-cookie-sync.js && node --check src/app-installer.js && node --check src/browserless.js && node --check src/browserless-runner.js && node --check src/broker.js && node --check src/chromium-reader.js && node --check src/cli.js && node --check src/codex-direct-import.js && node --check src/config.js && node --check src/paths.js && node --check src/scheduler.js && node --check src/updater.js && node --check scripts/build-dmg.js && node --check extension-template/background.js && node --check web/server.js && node --check web/script.js",
     "release:check": "node scripts/check-release-version.js",
     "build:app": "node bin/brave-codex-cookie-sync.js install-app --no-open",
     "build:dmg": "node scripts/build-dmg.js",
@@ -16,7 +16,7 @@
     "web:deploy": "wrangler deploy --config web/wrangler.jsonc"
   },
   "engines": {
-    "node": ">=22.5"
+    "node": ">=24"
   },
   "license": "MIT",
   "repository": {
@@ -38,6 +38,7 @@
     "macos",
     "chromium",
     "brave",
+    "browserless",
     "codex"
   ],
   "funding": "https://ko-fi.com/apoorvdarshan",
@@ -50,6 +51,10 @@
     "macos-app/Resources",
     "macos-app/Sources",
     "README.md",
-    "LICENSE"
-  ]
+    "LICENSE",
+    "THIRD_PARTY_NOTICES.md"
+  ],
+  "dependencies": {
+    "@browserless.io/cli": "0.3.0"
+  }
 }

package/src/browserless-runner.js

@@ -0,0 +1,13 @@
+import { pathToFileURL } from "node:url";
+
+const [, , cliPath, ...argumentsWithoutToken] = process.argv;
+const token = process.env.BROWSERLESS_TOKEN?.trim();
+if (!cliPath) throw new Error("Browserless CLI path is missing.");
+if (!token) throw new Error("Browserless API token is missing.");
+
+// Read the Keychain-supplied token once, then remove it before the official CLI
+// launches a temporary browser. Mutating process.argv does not alter the OS
+// command line that started this process, so the token is not exposed by `ps`.
+delete process.env.BROWSERLESS_TOKEN;
+process.argv = [process.execPath, cliPath, ...argumentsWithoutToken, "--token", token];
+await import(pathToFileURL(cliPath).href);

package/src/browserless.js

@@ -0,0 +1,108 @@
+import path from "node:path";
+import { spawn } from "node:child_process";
+import { projectRoot } from "./paths.js";
+
+const SUPPORTED_SOURCES = new Set(["brave", "chrome", "edge", "arc", "vivaldi", "opera"]);
+const REGIONS = new Set(["sfo", "lon", "ams"]);
+
+export async function uploadBrowserlessProfile({
+  browser,
+  localProfile,
+  profileName,
+  region = "sfo",
+  onlyDomains = [],
+  token = process.env.BROWSERLESS_TOKEN,
+  root = projectRoot(),
+  runner = runCLI,
+} = {}) {
+  if (!SUPPORTED_SOURCES.has(browser)) {
+    throw new Error(`${browser === "comet" ? "Comet" : browser} is not supported by Browserless profile capture yet.`);
+  }
+  if (!localProfile) throw new Error("The local browser profile could not be determined.");
+  if (!profileName?.trim()) throw new Error("Choose a Browserless cloud profile name.");
+  if (!REGIONS.has(region)) throw new Error("Browserless region must be sfo, lon, or ams.");
+  if (!token?.trim()) throw new Error("Connect Browserless first. The API token is missing from macOS Keychain.");
+
+  const cliPath = path.join(root, "node_modules", "@browserless.io", "cli", "build", "cli.js");
+  const runnerPath = path.join(root, "src", "browserless-runner.js");
+  const environment = {
+    ...process.env,
+    BROWSERLESS_TOKEN: token.trim(),
+    BROWSERLESS_ACCEPT_TERMS: "1",
+    BROWSERLESS_TELEMETRY_DISABLED: "1",
+    BROWSERLESS_DISABLE_KEYCHAIN: "1",
+    DO_NOT_TRACK: "1",
+  };
+  const client = ["--region", region, "--json"];
+  const shown = await runner(cliPath, ["profile", "show", profileName.trim(), ...client], environment, runnerPath);
+  const operation = shown.status === 0 ? "refresh" : isMissingProfile(shown.output) ? "upload" : null;
+  if (!operation) throw new Error(lastLine(shown.output) || "Browserless could not validate the cloud profile.");
+
+  const capture = [
+    "profile", operation,
+    "--browser", browser,
+    "--profile", localProfile,
+    "--name", profileName.trim(),
+    ...client,
+    "--accept-terms",
+    "--auto-fit",
+  ];
+  for (const domain of onlyDomains) capture.push("--only-domain", domain);
+  const result = await runner(cliPath, capture, environment, runnerPath);
+  if (result.status !== 0) throw new Error(lastLine(result.output) || "Browserless profile upload failed.");
+
+  const details = parseJSON(result.output);
+  const cookies = details?.cookieCount;
+  const origins = details?.originCount;
+  const counts = Number.isInteger(cookies) && Number.isInteger(origins)
+    ? ` (${cookies} cookies, ${origins} origins)`
+    : "";
+  return {
+    operation,
+    profileName: details?.name || profileName.trim(),
+    cookieCount: cookies,
+    originCount: origins,
+    summary: `Browserless profile ${operation === "refresh" ? "updated" : "created"}: ${details?.name || profileName.trim()}${counts}`,
+  };
+}
+
+function runCLI(cliPath, args, environment, runnerPath) {
+  return new Promise((resolve, reject) => {
+    const child = spawn(process.execPath, [runnerPath, cliPath, ...args], {
+      env: environment,
+      stdio: ["ignore", "pipe", "pipe"],
+    });
+    let stdout = "";
+    let stderr = "";
+    child.stdout.on("data", (chunk) => { stdout += chunk; });
+    child.stderr.on("data", (chunk) => { stderr += chunk; });
+    child.on("error", reject);
+    child.on("close", (status) => resolve({ status: status ?? 1, output: `${stderr}${stdout}` }));
+  });
+}
+
+function isMissingProfile(output) {
+  return /(?:not found|does not exist|404)/i.test(output);
+}
+
+function parseJSON(output) {
+  const start = output.indexOf("{");
+  const end = output.lastIndexOf("}");
+  if (start !== -1 && end > start) {
+    try {
+      const parsed = JSON.parse(output.slice(start, end + 1));
+      if (parsed && typeof parsed === "object") return parsed;
+    } catch {}
+  }
+  for (const line of output.split("\n").reverse()) {
+    try {
+      const parsed = JSON.parse(line);
+      if (parsed && typeof parsed === "object") return parsed;
+    } catch {}
+  }
+  return null;
+}
+
+function lastLine(output) {
+  return output.split("\n").map((line) => line.trim()).filter(Boolean).at(-1)?.replace(/^Error:\s*/, "");
+}

package/src/cli.js

@@ -9,6 +9,7 @@ import {
   isCodexRunning,
 } from "./codex-direct-import.js";
 import { readChromiumProfile } from "./chromium-reader.js";
+import { uploadBrowserlessProfile } from "./browserless.js";
 import { installConfig, installRuntime, readConfig, updatePreferences } from "./config.js";
 import {
   braveCookiePaths,
@@ -44,7 +45,7 @@ Commands:
   install-app [--no-open]
   bootstrap-bundled --app-path /Applications/Browser Cookie Bridge.app
   preferences --source brave --target codex --cookies on --history off --menu-bar on --auto-check-updates on
-  sync [--timeout 300]
+  sync [--timeout 300] [--allow-cloud-upload]
   doctor
   enable-login-sync
   disable-login-sync
@@ -123,6 +124,9 @@ function preferences(args) {
     menuBar: booleanFlag(args, "--menu-bar", existing.ui?.menuBar === true),
     openAtLogin: booleanFlag(args, "--open-at-login", existing.ui?.openAtLogin !== false),
     autoCheckUpdates: booleanFlag(args, "--auto-check-updates", existing.ui?.autoCheckUpdates !== false),
+    browserlessProfileName: stringFlag(args, "--browserless-profile", existing.browserless?.profileName || "browser-cookie-bridge"),
+    browserlessRegion: stringFlag(args, "--browserless-region", existing.browserless?.region || "sfo"),
+    browserlessOnlyDomains: optionalStringFlag(args, "--browserless-domains", (existing.browserless?.onlyDomains || []).join(",")),
   });
   console.log(
     `Saved: source=${config.sourceBrowser}, target=${config.targetBrowser}, cookies=${config.imports.cookies ? "on" : "off"}, history=${config.imports.history ? "on" : "off"}, menu-bar=${config.ui.menuBar ? "on" : "off"}, open-at-login=${config.ui.openAtLogin ? "on" : "off"}, auto-check-updates=${config.ui.autoCheckUpdates ? "on" : "off"}`,
@@ -239,6 +243,10 @@ function setup(args) {
   if (config.targetBrowser === "codex") {
     console.log(`Source browser: ${config.sourceBrowser} (read locally; no extension required)`);
     console.log("Target integration: direct local Codex merge (Codex must be closed)");
+  } else if (config.targetBrowser === "browserless") {
+    console.log(`Source browser: ${config.sourceBrowser} (captured locally by the Browserless CLI)`);
+    console.log(`Cloud destination: Browserless ${config.browserless?.region || "sfo"} / ${config.browserless?.profileName || "browser-cookie-bridge"}`);
+    console.log("Browserless uploads are manual-only and require --allow-cloud-upload.");
   } else {
     console.log(`Source extension (${config.sourceBrowser}): ${installedExtensionDir(undefined, config.sourceBrowser)}`);
     console.log(`Target extension (${config.targetBrowser}): ${installedExtensionDir(undefined, config.targetBrowser)}`);
@@ -255,7 +263,25 @@ async function sync(args) {
   assertMacOS();
   const seconds = integerFlag(args, "--timeout", 300, 5, 3600);
   const config = readConfig();
-  const isCodexTarget = (config.targetBrowser || "codex") === "codex";
+  const target = config.targetBrowser || "codex";
+  const isCodexTarget = target === "codex";
+  if (target === "browserless") {
+    if (!args.includes("--allow-cloud-upload")) {
+      throw new Error("Browserless cloud uploads are manual-only. Start one from the app or pass --allow-cloud-upload explicitly.");
+    }
+    const source = config.sourceBrowser || "brave";
+    const local = readChromiumProfile({ browser: source, imports: { cookies: false, history: false } });
+    console.log(`Preparing ${source} profile ${local.profileName} for an explicit Browserless cloud upload…`);
+    const result = await uploadBrowserlessProfile({
+      browser: source,
+      localProfile: local.profileName,
+      profileName: config.browserless?.profileName || "browser-cookie-bridge",
+      region: config.browserless?.region || "sfo",
+      onlyDomains: config.browserless?.onlyDomains || [],
+    });
+    console.log(result.summary);
+    return result;
+  }
   if (isCodexTarget) {
     if (isCodexRunning()) throw new Error(CODEX_RUNNING_ERROR);
     const payload = readChromiumProfile({
@@ -331,6 +357,8 @@ function doctor() {
   console.log(
     target === "codex"
       ? "Target integration: direct local Codex merge (Codex must be closed)"
+      : target === "browserless"
+        ? `Target integration: optional Browserless cloud upload (${config?.browserless?.region || "sfo"}); manual only`
       : `Target extension: ${status(installedExtensionDir(home, target))}`,
   );
   console.log(`Daily schedule: ${status(launchAgentPath(home))}`);
@@ -355,6 +383,8 @@ function enableLoginSync() {
   const config = readConfig();
   console.log(config.targetBrowser === "codex"
     ? "A sync starts when you sign in and updates Codex only when Codex is closed."
+    : config.targetBrowser === "browserless"
+      ? "Browserless uploads remain manual-only; login sync will not send data to the cloud."
     : "A sync starts when you sign in and waits up to five minutes for both browser extensions.");
 }
 
@@ -373,6 +403,9 @@ function setAppLogin(enabled) {
     menuBar: existing.ui?.menuBar === true,
     openAtLogin: enabled,
     autoCheckUpdates: existing.ui?.autoCheckUpdates !== false,
+    browserlessProfileName: existing.browserless?.profileName,
+    browserlessRegion: existing.browserless?.region,
+    browserlessOnlyDomains: existing.browserless?.onlyDomains,
   });
   if (enabled) {
     const appPath = installedAppPath();
@@ -422,6 +455,11 @@ function stringFlag(args, name, fallback) {
   return value;
 }
 
+function optionalStringFlag(args, name, fallback) {
+  const index = args.indexOf(name);
+  return index === -1 ? fallback : (args[index + 1] ?? "");
+}
+
 function existing(paths) {
   return paths.filter((candidate) => fs.existsSync(candidate));
 }

package/src/config.js

@@ -35,7 +35,7 @@ export function installConfig({ home, hour = 9, minute = 0, nodePath = process.e
   const sourceBrowser = SOURCE_BROWSERS.includes(existing.sourceBrowser) ? existing.sourceBrowser : "brave";
   const configuredTarget = TARGET_BROWSERS.includes(existing.targetBrowser) ? existing.targetBrowser : "codex";
   const config = {
-    version: 1,
+    version: 2,
     token: existing.token || crypto.randomBytes(32).toString("base64url"),
     port: existing.port || DEFAULT_PORT,
     nodePath,
@@ -51,6 +51,11 @@ export function installConfig({ home, hour = 9, minute = 0, nodePath = process.e
       openAtLogin: existing.ui?.openAtLogin !== false,
       autoCheckUpdates: existing.ui?.autoCheckUpdates !== false,
     },
+    browserless: {
+      profileName: cleanProfileName(existing.browserless?.profileName) || "browser-cookie-bridge",
+      region: ["sfo", "lon", "ams"].includes(existing.browserless?.region) ? existing.browserless.region : "sfo",
+      onlyDomains: cleanDomains(existing.browserless?.onlyDomains),
+    },
     schedule: { hour, minute },
     createdAt: existing.createdAt || new Date().toISOString(),
     updatedAt: new Date().toISOString(),
@@ -63,7 +68,19 @@ export function installConfig({ home, hour = 9, minute = 0, nodePath = process.e
   return config;
 }
 
-export function updatePreferences({ home, cookies, history, sourceBrowser, targetBrowser, menuBar, openAtLogin, autoCheckUpdates }) {
+export function updatePreferences({
+  home,
+  cookies,
+  history,
+  sourceBrowser,
+  targetBrowser,
+  menuBar,
+  openAtLogin,
+  autoCheckUpdates,
+  browserlessProfileName,
+  browserlessRegion,
+  browserlessOnlyDomains,
+}) {
   const config = readConfig(home);
   if (!SOURCE_BROWSERS.includes(sourceBrowser)) {
     throw new Error(`Unsupported source browser: ${sourceBrowser}`);
@@ -82,6 +99,13 @@ export function updatePreferences({ home, cookies, history, sourceBrowser, targe
     openAtLogin: Boolean(openAtLogin),
     autoCheckUpdates: Boolean(autoCheckUpdates),
   };
+  const region = browserlessRegion ?? config.browserless?.region ?? "sfo";
+  if (!["sfo", "lon", "ams"].includes(region)) throw new Error("Browserless region must be sfo, lon, or ams");
+  config.browserless = {
+    profileName: cleanProfileName(browserlessProfileName ?? config.browserless?.profileName) || "browser-cookie-bridge",
+    region,
+    onlyDomains: cleanDomains(browserlessOnlyDomains ?? config.browserless?.onlyDomains),
+  };
   config.updatedAt = new Date().toISOString();
   writePrivateJson(configPath(home), config);
   return config;
@@ -92,10 +116,11 @@ export function installRuntime(home, source = projectRoot()) {
   if (path.resolve(source) === path.resolve(target)) return target;
 
   fs.mkdirSync(target, { recursive: true, mode: 0o700 });
-  for (const name of ["bin", "src", "extension-template"]) {
+  for (const name of ["bin", "src", "extension-template", "node_modules"]) {
     fs.rmSync(path.join(target, name), { recursive: true, force: true });
     fs.cpSync(path.join(source, name), path.join(target, name), { recursive: true, force: true });
   }
+  fs.rmSync(path.join(target, "node_modules", ".bin"), { recursive: true, force: true });
   const appSource = path.join(source, "macos-app");
   const appTarget = path.join(target, "macos-app");
   fs.rmSync(appTarget, { recursive: true, force: true });
@@ -108,13 +133,22 @@ export function installRuntime(home, source = projectRoot()) {
       fs.copyFileSync(path.join(appSource, name), path.join(appTarget, name));
     }
   }
-  for (const name of ["package.json", "README.md", "LICENSE"]) {
+  for (const name of ["package.json", "README.md", "LICENSE", "THIRD_PARTY_NOTICES.md"]) {
     fs.copyFileSync(path.join(source, name), path.join(target, name));
   }
   fs.chmodSync(path.join(target, "bin", "brave-codex-cookie-sync.js"), 0o700);
   return target;
 }
 
+function cleanProfileName(value) {
+  return typeof value === "string" ? value.trim().slice(0, 100) : "";
+}
+
+function cleanDomains(value) {
+  const items = Array.isArray(value) ? value : typeof value === "string" ? value.split(",") : [];
+  return [...new Set(items.map((item) => String(item).trim().toLowerCase()).filter(Boolean))].slice(0, 50);
+}
+
 function installExtension(config, home, browser, role) {
   const source = path.join(projectRoot(), "extension-template");
   const target = installedExtensionDir(home, browser);

package/src/paths.js

@@ -10,7 +10,7 @@ export const DEFAULT_PORT = 43128;
 export const EXTENSION_ID = "ihanfnkcipmlhmokbcinlkdfcfheofjb";
 export const EXTENSION_ORIGIN = `chrome-extension://${EXTENSION_ID}`;
 export const SOURCE_BROWSERS = ["brave", "chrome", "edge", "arc", "vivaldi", "opera", "comet"];
-export const TARGET_BROWSERS = [...SOURCE_BROWSERS, "codex"];
+export const TARGET_BROWSERS = [...SOURCE_BROWSERS, "codex", "browserless"];
 
 export function projectRoot() {
   return path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");