browser-cookie-bridge 1.4.1 → 1.4.2

package/README.md

@@ -108,7 +108,7 @@ Run the published package directly:
 npx browser-cookie-bridge install-app
 ```
 
-No administrator password is needed. The app is built from source on your Mac and installed in your user Applications folder unless an existing writable system Applications copy is being updated.
+No administrator password is needed. The app is built from source on your Mac and installed in your user Applications folder. If a signed `/Applications/Browser Cookie Bridge.app` already exists, the CLI preserves it instead of replacing its Developer ID signature with an ad-hoc local build; use the app's built-in updater for signed releases.
 
 Both installation methods use the same bundle identifier and the same settings under `~/Library/Application Support/BraveCodexCookieSync`. Installing the DMG after npm does not create a separate product identity: the system Applications copy becomes canonical, and a stale matching user Applications copy is moved to the Trash on launch. Future updates replace that same app in place.
 
@@ -123,7 +123,7 @@ npm test
 npm run build:app
 ```
 
-The final command compiles the native SwiftUI app, enables **Open at login**, **Sync at login**, and the **menu-bar helper**, then launches it. A first install uses `~/Applications/Browser Cookie Bridge.app` without requesting administrator access. If an existing `/Applications/Browser Cookie Bridge.app` is present, later builds and updates keep using that system Applications copy instead of creating a duplicate. Daily sync stays off until you enable it.
+The final command compiles the native SwiftUI app, enables **Open at login**, **Sync at login**, and the **menu-bar helper**, then launches it. A first install uses `~/Applications/Browser Cookie Bridge.app` without requesting administrator access. If an existing signed `/Applications/Browser Cookie Bridge.app` is present, the CLI keeps that system copy canonical and leaves app updates to the signed-DMG updater. Developers who intentionally need to replace it with a local ad-hoc build can pass `--replace-system-from-source`. Daily sync stays off until you enable it.
 
 ## Setup
 
@@ -186,7 +186,7 @@ Automation uses the saved source, destination, and data choices for local transf
 ## CLI
 
 ```bash
-browser-cookie-bridge install-app [--no-open]
+browser-cookie-bridge install-app [--no-open] [--replace-system-from-source]
 browser-cookie-bridge setup [--hour 9] [--minute 0] [--no-schedule]
 browser-cookie-bridge preferences --source brave --target codex --cookies on --history off --auto-restart-codex off
 browser-cookie-bridge sync [--timeout 300] [--allow-cloud-upload]

package/extension-template/manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "Browser Cookie Bridge",
-  "version": "1.4.1",
+  "version": "1.4.2",
   "description": "Transfers selected browser data locally between supported browsers and into ChatGPT Codex.",
   "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5o6lDkXzU/23Jm2QRk4mfuxNnr3VlEIjRHcZr93Gdo7PI7asHJQhigaMGT6UOz0lkaTn1F+TGIPlsJo9GNBSsxbCfxWoBSXcFQFrPolY5LEfKaMtZQQ6eb4UAnp+bbUwb1den4On0piWU47Yzl6i0Jcdg4EG5H1kCSF/6nJsbKgF7OTaR/3drULu40yRvflzSXRhly3UDO7c5mgHJsaMwVV+VILsxbcPOoRINjuo3zDC737HFs67dpf38xF3tjSVL0HURAWKKobMvfABiDfVEm5O0Lvf+57d1Ib12QLT2qtVXNDy3iYwX+w2S0wH2vIMsfvoFPlRdmeqft70kZOqXwIDAQAB",
   "permissions": ["alarms", "cookies", "history"],

package/macos-app/Info.plist

@@ -10,8 +10,8 @@
   <key>CFBundleInfoDictionaryVersion</key><string>6.0</string>
   <key>CFBundleName</key><string>Browser Cookie Bridge</string>
   <key>CFBundlePackageType</key><string>APPL</string>
-  <key>CFBundleShortVersionString</key><string>1.4.1</string>
-  <key>CFBundleVersion</key><string>29</string>
+  <key>CFBundleShortVersionString</key><string>1.4.2</string>
+  <key>CFBundleVersion</key><string>30</string>
   <key>LSMinimumSystemVersion</key><string>13.5</string>
   <key>NSHighResolutionCapable</key><true/>
 </dict>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "browser-cookie-bridge",
-  "version": "1.4.1",
+  "version": "1.4.2",
   "description": "Local-first cookie and session transfer for macOS with optional Browserless upload",
   "type": "module",
   "bin": {
@@ -11,7 +11,7 @@
     "test:web-worker": "node --test web/worker/*.test.mjs",
     "check": "node --check bin/brave-codex-cookie-sync.js && node --check src/app-installer.js && node --check src/browserless.js && node --check src/browserless-preflight.js && node --check src/browserless-runner.js && node --check src/broker.js && node --check src/chromium-reader.js && node --check src/cli.js && node --check src/codex-direct-import.js && node --check src/config.js && node --check src/paths.js && node --check src/scheduler.js && node --check src/updater.js && node --check scripts/build-dmg.js && node --check extension-template/background.js && node --check web/server.js && node --check web/script.js",
     "release:check": "node scripts/check-release-version.js",
-    "build:app": "node bin/brave-codex-cookie-sync.js install-app --no-open",
+    "build:app": "node bin/brave-codex-cookie-sync.js install-app --no-open --replace-system-from-source",
     "build:dmg": "node scripts/build-dmg.js",
     "web": "node web/server.js",
     "web:deploy": "wrangler deploy --config web/wrangler.jsonc"

package/src/app-installer.js

@@ -2,11 +2,25 @@ import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import { spawnSync } from "node:child_process";
-import { appSupportDir, installedAppPath, projectRoot } from "./paths.js";
+import {
+  appSupportDir,
+  installedAppPath,
+  projectRoot,
+  systemInstalledAppPath,
+} from "./paths.js";
 
-export function installApp({ home = os.homedir(), open = true } = {}) {
+export function installApp({ home = os.homedir(), open = true, preserveSystemApp = true } = {}) {
   if (process.platform !== "darwin") throw new Error("The desktop app supports macOS only.");
 
+  const destination = installedAppPath(home);
+  const isSystemInstall = path.resolve(destination) === path.resolve(systemInstalledAppPath());
+  if (isSystemInstall && preserveSystemApp) {
+    console.log(`Preserving the signed installation at ${destination}`);
+    console.log("Use Check for Updates in the app to install signed releases.");
+    if (open) run("open", [destination]);
+    return destination;
+  }
+
   const packagePath = path.join(projectRoot(), "macos-app");
   run("swift", ["build", "-c", "release", "--package-path", packagePath]);
   const binPath = run("swift", [
@@ -32,7 +46,6 @@ export function installApp({ home = os.homedir(), open = true } = {}) {
 
   run("codesign", ["--force", "--deep", "--sign", "-", staging]);
 
-  const destination = installedAppPath(home);
   fs.mkdirSync(path.dirname(destination), { recursive: true, mode: 0o755 });
   fs.rmSync(destination, { recursive: true, force: true });
   fs.cpSync(staging, destination, { recursive: true, force: true });

package/src/cli.js

@@ -24,6 +24,7 @@ import {
   systemInstalledAppPath,
   userInstalledAppPath,
   APP_ID,
+  APP_BUNDLE_ID,
   SOURCE_BROWSERS,
   TARGET_BROWSERS,
 } from "./paths.js";
@@ -43,7 +44,7 @@ Local cookie and session transfer between Chromium browsers and into ChatGPT Cod
 
 Commands:
   setup [--hour 9] [--minute 0] [--no-schedule]
-  install-app [--no-open]
+  install-app [--no-open] [--replace-system-from-source]
   bootstrap-bundled --app-path /Applications/Browser Cookie Bridge.app
   preferences --source brave --target codex --cookies on --history off --menu-bar on --auto-check-updates on --auto-restart-codex off
   sync [--timeout 300] [--allow-cloud-upload]
@@ -147,8 +148,11 @@ function installDesktopApp(args) {
     hour: existing?.schedule?.hour ?? 9,
     minute: existing?.schedule?.minute ?? 0,
   });
-  console.log("Building the native macOS app…");
-  const destination = installApp({ open: !args.includes("--no-open") });
+  console.log("Preparing the native macOS app…");
+  const destination = installApp({
+    open: !args.includes("--no-open"),
+    preserveSystemApp: !args.includes("--replace-system-from-source"),
+  });
   if (config.ui.openAtLogin) {
     installAppLogin({ appPath: destination, bootstrapNow: false });
   } else {
@@ -214,7 +218,7 @@ function archiveDuplicateUserApp(currentAppPath) {
   if (!fs.existsSync(duplicate)) return;
   const infoPath = path.join(duplicate, "Contents", "Info.plist");
   const info = fs.existsSync(infoPath) ? fs.readFileSync(infoPath, "utf8") : "";
-  if (!info.includes(`<string>${APP_ID}</string>`)) return;
+  if (!info.includes(`<string>${APP_BUNDLE_ID}</string>`)) return;
 
   const trash = path.join(os.homedir(), ".Trash");
   fs.mkdirSync(trash, { recursive: true, mode: 0o700 });

package/src/paths.js

@@ -4,6 +4,7 @@ import path from "node:path";
 import { fileURLToPath } from "node:url";
 
 export const APP_ID = "com.apoorvdarshan.brave-codex-cookie-sync";
+export const APP_BUNDLE_ID = "com.apoorvdarshan.browser-cookie-bridge";
 export const LOGIN_SYNC_APP_ID = `${APP_ID}.login-sync`;
 export const APP_LOGIN_APP_ID = `${APP_ID}.app-login`;
 export const DEFAULT_PORT = 43128;
@@ -48,10 +49,22 @@ export function systemInstalledAppPath() {
   return path.join("/Applications", "Browser Cookie Bridge.app");
 }
 
+export function isAppBundleWithIdentifier(appPath, identifier = APP_BUNDLE_ID) {
+  const infoPath = path.join(appPath, "Contents", "Info.plist");
+  if (!fs.existsSync(infoPath)) return false;
+  try {
+    const info = fs.readFileSync(infoPath, "utf8");
+    const escaped = identifier.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+    return new RegExp(`<key>CFBundleIdentifier</key>\\s*<string>${escaped}</string>`).test(info);
+  } catch {
+    return false;
+  }
+}
+
 export function installedAppPath(home = os.homedir()) {
   const systemApp = systemInstalledAppPath();
   const isCurrentUser = path.resolve(home) === path.resolve(os.homedir());
-  return isCurrentUser && fs.existsSync(systemApp) ? systemApp : userInstalledAppPath(home);
+  return isCurrentUser && isAppBundleWithIdentifier(systemApp) ? systemApp : userInstalledAppPath(home);
 }
 
 export function braveCookiePaths(home = os.homedir()) {