browser-cookie-bridge 1.4.0 → 1.4.2

package/README.md

@@ -16,6 +16,7 @@
   <img src="https://img.shields.io/badge/local--first-cloud%20optional-C68B3C" alt="Local-first, cloud optional" />
   <img src="https://img.shields.io/github/stars/apoorvdarshan/browser-cookie-bridge?logo=github&color=C68B3C" alt="GitHub stars" />
   <a href="https://www.producthunt.com/products/browser-cookie-bridge"><img src="https://img.shields.io/badge/Product%20Hunt-View%20launch-DA552F?logo=producthunt&logoColor=white" alt="Browser Cookie Bridge on Product Hunt" /></a>
+  <a href="https://tally.so/r/J9j0D4"><img src="https://img.shields.io/badge/Windows-Join%20waitlist-8E2735?logo=windows&logoColor=white" alt="Join the Browser Cookie Bridge Windows waitlist" /></a>
   <img src="https://img.shields.io/badge/license-MIT-3DA639" alt="MIT License" />
 </p>
 
@@ -28,6 +29,7 @@
   <a href="CONTRIBUTING.md">Contribute</a> ·
   <a href="https://github.com/apoorvdarshan/browser-cookie-bridge/issues/new?template=bug_report.yml">Report a bug</a> ·
   <a href="https://www.producthunt.com/products/browser-cookie-bridge">Product Hunt</a> ·
+  <a href="https://tally.so/r/J9j0D4">Windows waitlist</a> ·
   <a href="#support">Support</a>
 </p>
 
@@ -52,6 +54,10 @@ Signing into the same sites across several browsers is repetitive. Export files
 
 Browser Cookie Bridge gives those browser profiles a small, native control panel. Local browser and Codex transfers stay on the Mac. If you explicitly select Browserless Cloud and click Upload, the app can instead send authenticated profile state to your own Browserless account.
 
+## Windows waitlist
+
+Browser Cookie Bridge currently ships for macOS. A separate Windows app is being explored, with demand guiding whether it moves into active development. If you use Windows, [join the early-access waitlist](https://tally.so/r/J9j0D4) and tell us which browsers and transfer paths matter to you.
+
 ## Features
 
 - 🍪 **Cookie and session transfer** — cookies are enabled by default, including supported domain, path, expiry, security, `SameSite`, and partition attributes.
@@ -92,7 +98,7 @@ The DMG is self-contained. Node.js 24+ and Xcode Command Line Tools are required
 - **[Apple silicon DMG](https://github.com/apoorvdarshan/browser-cookie-bridge/releases/latest/download/Browser-Cookie-Bridge-arm64.dmg)** — M1, M2, M3, M4, and newer
 - **[Intel DMG](https://github.com/apoorvdarshan/browser-cookie-bridge/releases/latest/download/Browser-Cookie-Bridge-x64.dmg)** — Intel-based Macs
 
-Open the DMG, drag **Browser Cookie Bridge** onto **Applications**, then open it from Applications. The current public build is checksum-verified and ad-hoc signed but not Apple-notarized, so macOS may require **Control-click → Open** on first launch. It does not require Node.js, Xcode, Terminal, or an administrator password.
+Open the DMG, drag **Browser Cookie Bridge** onto **Applications**, then open it from Applications. Current DMGs are checksum-verified, Developer ID-signed, and Apple-notarized for a standard macOS first-launch experience. The app does not require Node.js, Xcode, Terminal, or an administrator password.
 
 ### Via npm
 
@@ -102,7 +108,7 @@ Run the published package directly:
 npx browser-cookie-bridge install-app
 ```
 
-No administrator password is needed. The app is built from source on your Mac and installed in your user Applications folder unless an existing writable system Applications copy is being updated.
+No administrator password is needed. The app is built from source on your Mac and installed in your user Applications folder. If a signed `/Applications/Browser Cookie Bridge.app` already exists, the CLI preserves it instead of replacing its Developer ID signature with an ad-hoc local build; use the app's built-in updater for signed releases.
 
 Both installation methods use the same bundle identifier and the same settings under `~/Library/Application Support/BraveCodexCookieSync`. Installing the DMG after npm does not create a separate product identity: the system Applications copy becomes canonical, and a stale matching user Applications copy is moved to the Trash on launch. Future updates replace that same app in place.
 
@@ -117,7 +123,7 @@ npm test
 npm run build:app
 ```
 
-The final command compiles the native SwiftUI app, enables **Open at login**, **Sync at login**, and the **menu-bar helper**, then launches it. A first install uses `~/Applications/Browser Cookie Bridge.app` without requesting administrator access. If an existing `/Applications/Browser Cookie Bridge.app` is present, later builds and updates keep using that system Applications copy instead of creating a duplicate. Daily sync stays off until you enable it.
+The final command compiles the native SwiftUI app, enables **Open at login**, **Sync at login**, and the **menu-bar helper**, then launches it. A first install uses `~/Applications/Browser Cookie Bridge.app` without requesting administrator access. If an existing signed `/Applications/Browser Cookie Bridge.app` is present, the CLI keeps that system copy canonical and leaves app updates to the signed-DMG updater. Developers who intentionally need to replace it with a local ad-hoc build can pass `--replace-system-from-source`. Daily sync stays off until you enable it.
 
 ## Setup
 
@@ -180,7 +186,7 @@ Automation uses the saved source, destination, and data choices for local transf
 ## CLI
 
 ```bash
-browser-cookie-bridge install-app [--no-open]
+browser-cookie-bridge install-app [--no-open] [--replace-system-from-source]
 browser-cookie-bridge setup [--hour 9] [--minute 0] [--no-schedule]
 browser-cookie-bridge preferences --source brave --target codex --cookies on --history off --auto-restart-codex off
 browser-cookie-bridge sync [--timeout 300] [--allow-cloud-upload]
@@ -257,6 +263,16 @@ The product landing page, documentation overview, Privacy Policy, and Terms are
 npm run web
 ```
 
+## Star History
+
+<a href="https://github.com/apoorvdarshan/browser-cookie-bridge/stargazers">
+  <picture>
+    <source media="(prefers-color-scheme: dark)" srcset="https://cookiebridge.apoorvdarshan.com/api/star-history.svg?theme=dark&amp;v=1" />
+    <source media="(prefers-color-scheme: light)" srcset="https://cookiebridge.apoorvdarshan.com/api/star-history.svg?theme=light&amp;v=1" />
+    <img alt="Browser Cookie Bridge GitHub star history" src="https://cookiebridge.apoorvdarshan.com/api/star-history.svg?theme=light&amp;v=1" />
+  </picture>
+</a>
+
 ## License
 
 [MIT](LICENSE) © 2026 [Apoorv Darshan](https://github.com/apoorvdarshan)

package/extension-template/manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "Browser Cookie Bridge",
-  "version": "1.4.0",
+  "version": "1.4.2",
   "description": "Transfers selected browser data locally between supported browsers and into ChatGPT Codex.",
   "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5o6lDkXzU/23Jm2QRk4mfuxNnr3VlEIjRHcZr93Gdo7PI7asHJQhigaMGT6UOz0lkaTn1F+TGIPlsJo9GNBSsxbCfxWoBSXcFQFrPolY5LEfKaMtZQQ6eb4UAnp+bbUwb1den4On0piWU47Yzl6i0Jcdg4EG5H1kCSF/6nJsbKgF7OTaR/3drULu40yRvflzSXRhly3UDO7c5mgHJsaMwVV+VILsxbcPOoRINjuo3zDC737HFs67dpf38xF3tjSVL0HURAWKKobMvfABiDfVEm5O0Lvf+57d1Ib12QLT2qtVXNDy3iYwX+w2S0wH2vIMsfvoFPlRdmeqft70kZOqXwIDAQAB",
   "permissions": ["alarms", "cookies", "history"],

package/macos-app/Info.plist

@@ -10,8 +10,8 @@
   <key>CFBundleInfoDictionaryVersion</key><string>6.0</string>
   <key>CFBundleName</key><string>Browser Cookie Bridge</string>
   <key>CFBundlePackageType</key><string>APPL</string>
-  <key>CFBundleShortVersionString</key><string>1.4.0</string>
-  <key>CFBundleVersion</key><string>28</string>
+  <key>CFBundleShortVersionString</key><string>1.4.2</string>
+  <key>CFBundleVersion</key><string>30</string>
   <key>LSMinimumSystemVersion</key><string>13.5</string>
   <key>NSHighResolutionCapable</key><true/>
 </dict>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "browser-cookie-bridge",
-  "version": "1.4.0",
+  "version": "1.4.2",
   "description": "Local-first cookie and session transfer for macOS with optional Browserless upload",
   "type": "module",
   "bin": {
@@ -8,9 +8,10 @@
   },
   "scripts": {
     "test": "node --test test/*.test.js",
+    "test:web-worker": "node --test web/worker/*.test.mjs",
     "check": "node --check bin/brave-codex-cookie-sync.js && node --check src/app-installer.js && node --check src/browserless.js && node --check src/browserless-preflight.js && node --check src/browserless-runner.js && node --check src/broker.js && node --check src/chromium-reader.js && node --check src/cli.js && node --check src/codex-direct-import.js && node --check src/config.js && node --check src/paths.js && node --check src/scheduler.js && node --check src/updater.js && node --check scripts/build-dmg.js && node --check extension-template/background.js && node --check web/server.js && node --check web/script.js",
     "release:check": "node scripts/check-release-version.js",
-    "build:app": "node bin/brave-codex-cookie-sync.js install-app --no-open",
+    "build:app": "node bin/brave-codex-cookie-sync.js install-app --no-open --replace-system-from-source",
     "build:dmg": "node scripts/build-dmg.js",
     "web": "node web/server.js",
     "web:deploy": "wrangler deploy --config web/wrangler.jsonc"

package/src/app-installer.js

@@ -2,11 +2,25 @@ import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import { spawnSync } from "node:child_process";
-import { appSupportDir, installedAppPath, projectRoot } from "./paths.js";
+import {
+  appSupportDir,
+  installedAppPath,
+  projectRoot,
+  systemInstalledAppPath,
+} from "./paths.js";
 
-export function installApp({ home = os.homedir(), open = true } = {}) {
+export function installApp({ home = os.homedir(), open = true, preserveSystemApp = true } = {}) {
   if (process.platform !== "darwin") throw new Error("The desktop app supports macOS only.");
 
+  const destination = installedAppPath(home);
+  const isSystemInstall = path.resolve(destination) === path.resolve(systemInstalledAppPath());
+  if (isSystemInstall && preserveSystemApp) {
+    console.log(`Preserving the signed installation at ${destination}`);
+    console.log("Use Check for Updates in the app to install signed releases.");
+    if (open) run("open", [destination]);
+    return destination;
+  }
+
   const packagePath = path.join(projectRoot(), "macos-app");
   run("swift", ["build", "-c", "release", "--package-path", packagePath]);
   const binPath = run("swift", [
@@ -32,7 +46,6 @@ export function installApp({ home = os.homedir(), open = true } = {}) {
 
   run("codesign", ["--force", "--deep", "--sign", "-", staging]);
 
-  const destination = installedAppPath(home);
   fs.mkdirSync(path.dirname(destination), { recursive: true, mode: 0o755 });
   fs.rmSync(destination, { recursive: true, force: true });
   fs.cpSync(staging, destination, { recursive: true, force: true });

package/src/cli.js

@@ -24,6 +24,7 @@ import {
   systemInstalledAppPath,
   userInstalledAppPath,
   APP_ID,
+  APP_BUNDLE_ID,
   SOURCE_BROWSERS,
   TARGET_BROWSERS,
 } from "./paths.js";
@@ -43,7 +44,7 @@ Local cookie and session transfer between Chromium browsers and into ChatGPT Cod
 
 Commands:
   setup [--hour 9] [--minute 0] [--no-schedule]
-  install-app [--no-open]
+  install-app [--no-open] [--replace-system-from-source]
   bootstrap-bundled --app-path /Applications/Browser Cookie Bridge.app
   preferences --source brave --target codex --cookies on --history off --menu-bar on --auto-check-updates on --auto-restart-codex off
   sync [--timeout 300] [--allow-cloud-upload]
@@ -147,8 +148,11 @@ function installDesktopApp(args) {
     hour: existing?.schedule?.hour ?? 9,
     minute: existing?.schedule?.minute ?? 0,
   });
-  console.log("Building the native macOS app…");
-  const destination = installApp({ open: !args.includes("--no-open") });
+  console.log("Preparing the native macOS app…");
+  const destination = installApp({
+    open: !args.includes("--no-open"),
+    preserveSystemApp: !args.includes("--replace-system-from-source"),
+  });
   if (config.ui.openAtLogin) {
     installAppLogin({ appPath: destination, bootstrapNow: false });
   } else {
@@ -214,7 +218,7 @@ function archiveDuplicateUserApp(currentAppPath) {
   if (!fs.existsSync(duplicate)) return;
   const infoPath = path.join(duplicate, "Contents", "Info.plist");
   const info = fs.existsSync(infoPath) ? fs.readFileSync(infoPath, "utf8") : "";
-  if (!info.includes(`<string>${APP_ID}</string>`)) return;
+  if (!info.includes(`<string>${APP_BUNDLE_ID}</string>`)) return;
 
   const trash = path.join(os.homedir(), ".Trash");
   fs.mkdirSync(trash, { recursive: true, mode: 0o700 });

package/src/paths.js

@@ -4,6 +4,7 @@ import path from "node:path";
 import { fileURLToPath } from "node:url";
 
 export const APP_ID = "com.apoorvdarshan.brave-codex-cookie-sync";
+export const APP_BUNDLE_ID = "com.apoorvdarshan.browser-cookie-bridge";
 export const LOGIN_SYNC_APP_ID = `${APP_ID}.login-sync`;
 export const APP_LOGIN_APP_ID = `${APP_ID}.app-login`;
 export const DEFAULT_PORT = 43128;
@@ -48,10 +49,22 @@ export function systemInstalledAppPath() {
   return path.join("/Applications", "Browser Cookie Bridge.app");
 }
 
+export function isAppBundleWithIdentifier(appPath, identifier = APP_BUNDLE_ID) {
+  const infoPath = path.join(appPath, "Contents", "Info.plist");
+  if (!fs.existsSync(infoPath)) return false;
+  try {
+    const info = fs.readFileSync(infoPath, "utf8");
+    const escaped = identifier.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+    return new RegExp(`<key>CFBundleIdentifier</key>\\s*<string>${escaped}</string>`).test(info);
+  } catch {
+    return false;
+  }
+}
+
 export function installedAppPath(home = os.homedir()) {
   const systemApp = systemInstalledAppPath();
   const isCurrentUser = path.resolve(home) === path.resolve(os.homedir());
-  return isCurrentUser && fs.existsSync(systemApp) ? systemApp : userInstalledAppPath(home);
+  return isCurrentUser && isAppBundleWithIdentifier(systemApp) ? systemApp : userInstalledAppPath(home);
 }
 
 export function braveCookiePaths(home = os.homedir()) {