browser-cookie-bridge 1.5.1 → 1.5.2

package/README.md

@@ -48,13 +48,13 @@
 
 ---
 
-> **Version 1.5.1 restores the [Product Hunt](https://www.producthunt.com/products/browser-cookie-bridge-2) launch link.** Version 1.5.0 added experimental Cursor browser import and encrypted Grok Bot `.bcbx` export. Cursor is destination-only and currently imports cookie sessions into its dedicated browser partition. Grok Bot writes a one-time encrypted transfer file with a bundled importer and a one-time key: attach the `.bcbx` file to any Grok Bot, paste the prompt, and enter the key privately when asked. Cookie values must never be logged or pasted into chat. The optional Codex restart flow from 1.4.0 is unchanged and remains off by default.
+> **Version 1.5.2:** Grok Bot `.bcbx` bundles embed the decryption key, so import needs no passphrase—treat the file as credentials because anyone with it can decrypt the cookies. Version 1.5.1 restored the [Product Hunt](https://www.producthunt.com/products/browser-cookie-bridge-2) launch link. Version 1.5.0 added experimental Cursor browser import and encrypted Grok Bot `.bcbx` export. Cursor is destination-only and currently imports cookie sessions into its dedicated browser partition. Attach the `.bcbx` file to any Grok Bot and paste the prompt; the bundled importer decrypts automatically. Cookie values must never be logged or pasted into chat. The optional Codex restart flow from 1.4.0 is unchanged and remains off by default.
 
 ## Why Browser Cookie Bridge
 
 Signing into the same sites across several browsers is repetitive. Export files are awkward, password managers do not move active sessions, and embedded app browsers do not always offer an import button.
 
-Browser Cookie Bridge gives those browser profiles a small, native control panel. Local browser, Codex, and Cursor transfers stay on the Mac. Grok Bot uses a one-time encrypted transfer file that you attach yourself. If you explicitly select Browserless Cloud and click Upload, the app can instead send authenticated profile state to your own Browserless account.
+Browser Cookie Bridge gives those browser profiles a small, native control panel. Local browser, Codex, and Cursor transfers stay on the Mac. Grok Bot uses an encrypted transfer file with an embedded decryption key that you attach yourself. If you explicitly select Browserless Cloud and click Upload, the app can instead send authenticated profile state to your own Browserless account.
 
 ## Windows waitlist
 
@@ -66,7 +66,7 @@ Browser Cookie Bridge currently ships for macOS. A separate Windows app is being
 - 🗃️ **Optional full site data for Codex** — replace Codex's compatible Local Storage, IndexedDB, Session Storage, service-worker, and related origin stores from a closed source profile, with backup and rollback. Off by default.
 - 🌐 **Seven Chromium browsers** — Brave, Chrome, Edge, Arc, Vivaldi, Opera, and Perplexity Comet can be sources or destinations.
 - ✨ **ChatGPT Codex and experimental Cursor import** — merge cookie sessions into either app's built-in browser; Codex also supports optional history and full site data. Both are destination-only. Cursor import is experimental: it writes only to Cursor's dedicated `Partitions/cursor-browser` profile and refuses unknown schemas.
-- 🤖 **Encrypted Grok Bot transfer (`.bcbx`)** — export cookie sessions into a local encrypted bundle with a one-time key and bundled importer. The destination tile uses the official Grok Bot app icon. Attach the file to any Grok Bot; the importer runs on the cloud computer only. Manual only.
+- 🤖 **Encrypted Grok Bot transfer (`.bcbx`)** — export cookie sessions into a local encrypted bundle with an embedded decryption key and bundled importer. The destination tile uses the official Grok Bot app icon. Attach the file to any Grok Bot; the importer runs on the cloud computer only. Manual only.
 - 🔁 **Optional Codex restart** — manual Sync can force quit a running Codex instance and reopen it only after a successful local transfer; off by default.
 - 🔄 **Optional two-app restart** — Full site data can force quit the selected source browser and Codex, then reopen only the apps that were running after a successful transfer; off by default.
 - ☁️ **Optional Browserless upload** — create or refresh a Browserless authenticated profile with cookies, local storage, and IndexedDB; see a local size preflight, live progress, cancellation, and post-upload verification.
@@ -164,21 +164,21 @@ An open destination app blocks the transfer. The optional **Restart Codex automa
 
 No browser extension is needed for this path.
 
-Grok Bot cannot receive a local database merge. The app writes a one-time encrypted transfer file that you attach to any Grok Bot.
+Grok Bot cannot receive a local database merge. The app writes an encrypted transfer file that you attach to any Grok Bot.
 
 1. Select a source browser and **Grok Bot** as the destination. The tile uses the official Grok Bot app icon.
 2. Keep **Cookies** on. History URLs and Full site data are excluded from Grok Bot transfer files.
 3. Optionally limit the export with **Only these domains**. Leave it blank to include every readable cookie.
 4. Press **Create transfer file** and choose where to save `GrokBot-Import.bcbx`.
-5. The result sheet shows the one-time decryption key and the prompt to paste. Use **Reveal file** or **Copy prompt**. Keep the key off chat logs; do not paste cookie values into chat.
-6. Attach the `.bcbx` file to any Grok Bot, paste the prompt, then enter the one-time key privately through Agent Computer when asked.
+5. The result sheet shows a sensitivity warning and the prompt to paste. Use **Reveal file** or **Copy prompt**. Do not paste cookie values into chat.
+6. Attach the `.bcbx` file to any Grok Bot and paste the prompt. The bundled importer decrypts automatically—no separate key entry.
 
-The bundle is a zip-compatible `.bcbx` file containing `manifest.json`, encrypted `payload.enc`, `import.mjs`, and `PROMPT.txt`. Cookies are encrypted with AES-256-GCM using a scrypt-derived key. The file is written with user-only permissions (`0600`). Daily sync and Sync at login never create Grok Bot bundles.
+The bundle is a zip-compatible `.bcbx` file containing `manifest.json`, encrypted `payload.enc`, `decryption.key`, `import.mjs`, and `PROMPT.txt`. Cookies are encrypted with AES-256-GCM using a scrypt-derived key; the same key is stored in `decryption.key` inside the bundle so the importer can decrypt without user input. Treat the file as credentials—anyone with the bundle can read the cookies. The file is written with user-only permissions (`0600`). Daily sync and Sync at login never create Grok Bot bundles.
 
 On the Grok Bot cloud computer the bundled importer:
 
 1. Expects you to unzip `GrokBot-Import.bcbx` and run `node import.mjs`.
-2. Prompts for the one-time decryption key. Do not print cookie names or values.
+2. Reads the embedded decryption key and decrypts the payload automatically. Do not print cookie names or values.
 3. Injects cookies into the cloud browser and reports only how many cookies were imported.
 4. Deletes the unzipped files and the bundle copy.
 
@@ -243,7 +243,7 @@ browser-cookie-bridge disable-app-login
 browser-cookie-bridge remove-schedule
 ```
 
-Supported source IDs are `brave`, `chrome`, `edge`, `arc`, `vivaldi`, `opera`, and `comet`. Target IDs are the same plus `codex`, `cursor`, `browserless`, and `grok-bot`. The same browser cannot be both endpoints. Cursor import currently supports cookies only. Grok Bot export requires `--output /path/GrokBot-Import.bcbx` and writes cookies only; `--grok-bot-domains` optionally limits the bundle. The CLI prints a one-time decryption key after export—keep it private and never paste cookie values into chat. Browserless requires `BROWSERLESS_TOKEN` and the explicit `--allow-cloud-upload` flag; the native app supplies the token from Keychain without placing it in the OS command line or app configuration.
+Supported source IDs are `brave`, `chrome`, `edge`, `arc`, `vivaldi`, `opera`, and `comet`. Target IDs are the same plus `codex`, `cursor`, `browserless`, and `grok-bot`. The same browser cannot be both endpoints. Cursor import currently supports cookies only. Grok Bot export requires `--output /path/GrokBot-Import.bcbx` and writes cookies only; `--grok-bot-domains` optionally limits the bundle. The bundle includes an embedded decryption key—treat it as credentials and never paste cookie values into chat. Browserless requires `BROWSERLESS_TOKEN` and the explicit `--allow-cloud-upload` flag; the native app supplies the token from Keychain without placing it in the OS command line or app configuration.
 
 ## How it works
 
@@ -251,16 +251,16 @@ Supported source IDs are `brave`, `chrome`, `edge`, `arc`, `vivaldi`, `opera`, a
 |---|---|
 | **Browser → browser** | Unpacked extensions connect to a short-lived broker on IPv4 loopback. Selected data stays in memory and is never written to logs. |
 | **Browser → Codex / Cursor** | The app reads the selected local Chromium profile, creates a consistent destination SQLite backup, merges cookies into a working copy, validates it, then replaces only the embedded browser's cookie database atomically. Codex also supports optional history and full site data. Cursor import is experimental and limited to the dedicated browser-partition cookie store. |
-| **Browser → Grok Bot** | The app reads the selected local Chromium profile, encrypts cookie sessions into a `.bcbx` bundle with a one-time key, and writes that file locally. You attach it to a Grok Bot; the bundled importer decrypts and injects cookies on the cloud computer only. |
+| **Browser → Grok Bot** | The app reads the selected local Chromium profile, encrypts cookie sessions into a `.bcbx` bundle with an embedded decryption key, and writes that file locally. You attach it to a Grok Bot; the bundled importer decrypts and injects cookies on the cloud computer only. |
 | **Browser → Browserless** | The bundled official Browserless CLI copies a closed local profile, captures cookies/local storage/IndexedDB, and uploads it directly to the selected Browserless region. |
 
 The broker validates a random token and extension origin, limits payload size, and normally exits after five minutes. Only the endpoints selected in the app respond to a transfer.
 
 ## Security & privacy
 
-- Cookie values and history URLs are never logged. Never paste cookie values or Grok Bot decryption keys into chat.
+- Cookie values and history URLs are never logged. Never paste cookie values into chat.
 - Browser-to-browser data is held only in broker memory.
-- Grok Bot `.bcbx` files are encrypted locally with AES-256-GCM. Treat the bundle and its one-time key as credentials. Enter the key privately through Agent Computer when the importer asks; do not ask Grok Bot to print cookie names or values. The bundled importer reports only import counts, then deletes the unzipped files and the bundle copy.
+- Grok Bot `.bcbx` files encrypt cookie payloads with AES-256-GCM but include the decryption key inside the bundle (`decryption.key`). Treat the entire file as credentials—anyone with the bundle can read the cookies. Do not share it or paste cookie values into chat. The bundled importer decrypts automatically, reports only import counts, then deletes the unzipped files and the bundle copy. Legacy v1 bundles without an embedded key still prompt for a separate passphrase.
 - Direct-import backups are stored with user-only permissions under `~/Library/Application Support/BraveCodexCookieSync/backups/codex` or `backups/cursor`; the newest 14 per destination are retained.
 - Full site-data import is opt-in for Codex and requires both Codex and the source browser to be closed. It replaces compatible origin-storage directories rather than attempting an unsafe LevelDB merge; the previous directories are included in the same backup.
 - The app refuses unknown destination database schemas instead of guessing and writes only to Cursor's dedicated `Partitions/cursor-browser` profile, never Cursor's main application cookie store.

package/extension-template/manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "Browser Cookie Bridge",
-  "version": "1.5.1",
+  "version": "1.5.2",
   "description": "Transfers selected browser data locally between supported browsers and embedded app browsers.",
   "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5o6lDkXzU/23Jm2QRk4mfuxNnr3VlEIjRHcZr93Gdo7PI7asHJQhigaMGT6UOz0lkaTn1F+TGIPlsJo9GNBSsxbCfxWoBSXcFQFrPolY5LEfKaMtZQQ6eb4UAnp+bbUwb1den4On0piWU47Yzl6i0Jcdg4EG5H1kCSF/6nJsbKgF7OTaR/3drULu40yRvflzSXRhly3UDO7c5mgHJsaMwVV+VILsxbcPOoRINjuo3zDC737HFs67dpf38xF3tjSVL0HURAWKKobMvfABiDfVEm5O0Lvf+57d1Ib12QLT2qtVXNDy3iYwX+w2S0wH2vIMsfvoFPlRdmeqft70kZOqXwIDAQAB",
   "permissions": ["alarms", "cookies", "history"],

package/macos-app/Info.plist

@@ -10,8 +10,8 @@
   <key>CFBundleInfoDictionaryVersion</key><string>6.0</string>
   <key>CFBundleName</key><string>Browser Cookie Bridge</string>
   <key>CFBundlePackageType</key><string>APPL</string>
-  <key>CFBundleShortVersionString</key><string>1.5.1</string>
-  <key>CFBundleVersion</key><string>37</string>
+  <key>CFBundleShortVersionString</key><string>1.5.2</string>
+  <key>CFBundleVersion</key><string>39</string>
   <key>LSMinimumSystemVersion</key><string>13.5</string>
   <key>NSHighResolutionCapable</key><true/>
 </dict>

package/macos-app/Sources/BraveCodexSyncApp/BraveCodexSyncApp.swift

@@ -949,7 +949,7 @@ struct ExtensionSetupSheet: View {
       Text(model.isDirectTarget
         ? "\(model.targetName) uses a direct local merge, so no extension is required. Quit \(model.targetName) before syncing. Password access is never requested."
         : model.isGrokBotTarget
-          ? "Grok Bot uses a one-time encrypted transfer file, so no extension is required. Create the .bcbx bundle, attach it to any Grok Bot, and paste the prompt."
+          ? "Grok Bot uses an encrypted transfer file with an embedded decryption key, so no extension is required. Create the .bcbx bundle, attach it to any Grok Bot, and paste the prompt."
         : "In both endpoints, enable Developer mode and choose Load unpacked. Password access is never requested.")
         .font(.system(size: 10.5))
         .foregroundStyle(.secondary)
@@ -1188,12 +1188,13 @@ struct GrokBotResultSheet: View {
       }
 
       VStack(alignment: .leading, spacing: 8) {
-        Text("One-time decryption key")
+        Text("Sensitive transfer file")
           .font(.system(size: 11, weight: .semibold))
           .foregroundStyle(.secondary)
-        Text(model.grokBotPassphrase)
-          .font(.system(size: 15, weight: .semibold, design: .monospaced))
-          .textSelection(.enabled)
+        Text("The .bcbx bundle includes the decryption key. Anyone with the file can read your cookies—treat it like a password and do not share it.")
+          .font(.system(size: 11))
+          .foregroundStyle(.secondary)
+          .fixedSize(horizontal: false, vertical: true)
           .padding(10)
           .frame(maxWidth: .infinity, alignment: .leading)
           .background(Color.primary.opacity(0.04), in: RoundedRectangle(cornerRadius: 10, style: .continuous))

package/macos-app/Sources/BraveCodexSyncApp/SyncModel.swift

@@ -100,7 +100,6 @@ final class SyncModel: ObservableObject {
   @Published var grokBotOnlyDomains = ""
   @Published var showingBrowserlessSetup = false
   @Published var showingGrokBotResult = false
-  @Published var grokBotPassphrase = ""
   @Published var grokBotPrompt = ""
   @Published var grokBotOutputPath = ""
   @Published var browserlessAssessment: BrowserlessProfileAssessment?
@@ -754,7 +753,6 @@ final class SyncModel: ObservableObject {
       } else if success {
         self.state = partial ? .warning : .success
         if self.isGrokBotTarget, let result = self.parseGrokBotResult(from: output) {
-          self.grokBotPassphrase = result.passphrase
           self.grokBotPrompt = result.prompt
           self.grokBotOutputPath = result.outputPath
           self.showingGrokBotResult = true
@@ -1167,7 +1165,6 @@ final class SyncModel: ObservableObject {
 
   private struct GrokBotResultPayload: Decodable {
     let outputPath: String
-    let passphrase: String
     let prompt: String
   }
 
@@ -1230,7 +1227,7 @@ final class SyncModel: ObservableObject {
       } else {
         state = .ready
         primaryStatus = "Ready to create a Grok Bot transfer file"
-        secondaryStatus = "Creates an encrypted .bcbx bundle with a one-time key and bundled importer"
+        secondaryStatus = "Creates an encrypted .bcbx bundle with an embedded decryption key and bundled importer"
       }
     } else if isBrowserlessTarget {
       if selectedSourceID == "comet" {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "browser-cookie-bridge",
-  "version": "1.5.1",
+  "version": "1.5.2",
   "description": "Local-first cookie and session transfer for macOS with optional Browserless upload",
   "type": "module",
   "bin": {

package/src/cli.js

@@ -312,7 +312,6 @@ async function sync(args, { signal } = {}) {
     console.log(grokBotSummary(result));
     console.log(`BCB_GROK_RESULT ${JSON.stringify({
       outputPath: result.outputPath,
-      passphrase: result.passphrase,
       cookieCount: result.cookieCount,
       domainCount: result.domainCount,
       domains: result.domains,

package/src/grok-bot-export.js

@@ -7,13 +7,15 @@ import { createZipArchive, readZipArchive } from "./zip-store.js";
 
 export const BUNDLE_EXTENSION = "bcbx";
 export const DEFAULT_BUNDLE_NAME = "GrokBot-Import.bcbx";
+export const BUNDLE_FORMAT_VERSION = 2;
+export const EMBEDDED_KEY_FILENAME = "decryption.key";
+
 export const GROK_BOT_PROMPT = `On your Grok Bot cloud computer only — do not access my local Mac and do not print cookie values.
 
 1. Save the attached GrokBot-Import.bcbx to the cloud computer.
 2. Unzip it: unzip -o GrokBot-Import.bcbx -d bcb-import && cd bcb-import
 3. Run: node import.mjs
-4. When prompted, ask me to take over and type the one-time decryption key privately through Agent Computer.
-5. Report only how many cookies were imported per domain, then delete the bcb-import folder and any copies of the bundle.`;
+4. Report only how many cookies were imported per domain, then delete the bcb-import folder and any copies of the bundle.`;
 
 const KDF = { name: "scrypt", N: 16384, r: 8, p: 1, keyLength: 32 };
 const SAME_SITE = {
@@ -50,7 +52,9 @@ export function buildGrokBotBundle({
   const domains = uniqueDomains(exportCookies);
   const manifest = {
     format: "browser-cookie-bridge-grok-bot",
-    version: 1,
+    version: BUNDLE_FORMAT_VERSION,
+    keyDelivery: "embedded",
+    keyFile: EMBEDDED_KEY_FILENAME,
     createdAt: now.toISOString(),
     sourceBrowser,
     cookieCount: exportCookies.length,
@@ -66,6 +70,7 @@ export function buildGrokBotBundle({
   const archive = createZipArchive([
     { name: "manifest.json", data: Buffer.from(`${JSON.stringify(manifest, null, 2)}\n`, "utf8") },
     { name: "payload.enc", data: payloadBody },
+    { name: EMBEDDED_KEY_FILENAME, data: Buffer.from(`${passphrase}\n`, "utf8") },
     { name: "import.mjs", data: Buffer.from(importerSource, "utf8") },
     { name: "PROMPT.txt", data: Buffer.from(`${GROK_BOT_PROMPT}\n`, "utf8") },
   ]);
@@ -138,6 +143,7 @@ export function parseGrokBotBundle(buffer) {
   return {
     manifest,
     payload: entries.get("payload.enc"),
+    embeddedKey: entries.get(EMBEDDED_KEY_FILENAME)?.toString("utf8").trim() || "",
     importer: entries.get("import.mjs")?.toString("utf8") || "",
     prompt: entries.get("PROMPT.txt")?.toString("utf8") || "",
   };
@@ -148,7 +154,7 @@ export function grokBotSummary(result) {
   const skipped = result.sourceCookieSkipped
     ? ` ${result.sourceCookieSkipped} source cookie${result.sourceCookieSkipped === 1 ? " was" : "s were"} unreadable or unsupported.`
     : "";
-  return `Grok Bot transfer file created: ${result.cookieCount} cookies across ${domainNote} from ${result.sourceBrowser}.${skipped} Attach ${path.basename(result.outputPath)} to any Grok Bot, paste the prompt, then enter the one-time key privately when asked.`;
+  return `Grok Bot transfer file created: ${result.cookieCount} cookies across ${domainNote} from ${result.sourceBrowser}.${skipped} Attach ${path.basename(result.outputPath)} to any Grok Bot and paste the prompt. The bundle includes the decryption key—treat the file as credentials and do not share it.`;
 }
 
 export function filterCookies(cookies, onlyDomains = []) {

package/src/grok-bot-importer.mjs

@@ -11,6 +11,7 @@ import { fileURLToPath } from "node:url";
 import { stdin as input, stdout as output } from "node:process";
 
 const CDP_PORTS = [9222, 9223, 9224, 9228, 9229, 9400];
+const EMBEDDED_KEY_FILENAME = "decryption.key";
 const SAME_SITE = {
   unspecified: "Lax",
   no_restriction: "None",
@@ -29,7 +30,7 @@ export async function main(argv = process.argv.slice(2)) {
 
   const manifest = JSON.parse(fs.readFileSync(manifestPath, "utf8"));
   validateManifest(manifest);
-  const passphrase = await readPassphrase();
+  const passphrase = await resolveDecryptionKey({ manifest, bundleDir });
   const cookies = decryptPayload({
     manifest,
     encrypted: fs.readFileSync(payloadPath),
@@ -42,9 +43,12 @@ export async function main(argv = process.argv.slice(2)) {
 }
 
 export function validateManifest(manifest) {
-  if (manifest?.format !== "browser-cookie-bridge-grok-bot" || manifest?.version !== 1) {
+  if (manifest?.format !== "browser-cookie-bridge-grok-bot") {
     throw new Error("Unsupported Browser Cookie Bridge Grok Bot bundle.");
   }
+  if (manifest?.version !== 1 && manifest?.version !== 2) {
+    throw new Error("Unsupported Browser Cookie Bridge Grok Bot bundle version.");
+  }
   for (const key of ["salt", "iv", "authTag"]) {
     if (typeof manifest[key] !== "string" || !manifest[key]) {
       throw new Error(`Bundle manifest is missing ${key}.`);
@@ -52,6 +56,26 @@ export function validateManifest(manifest) {
   }
 }
 
+export async function resolveDecryptionKey({ manifest, bundleDir }) {
+  if (manifest.version === 2) {
+    if (manifest.keyDelivery !== "embedded") {
+      throw new Error("Unsupported Grok Bot bundle key delivery method.");
+    }
+    const keyFile = typeof manifest.keyFile === "string" && manifest.keyFile
+      ? manifest.keyFile
+      : EMBEDDED_KEY_FILENAME;
+    const keyPath = path.join(bundleDir, keyFile);
+    if (!fs.existsSync(keyPath)) {
+      throw new Error(`Embedded decryption key file is missing: ${keyFile}`);
+    }
+    const key = fs.readFileSync(keyPath, "utf8").trim();
+    if (!key) throw new Error("Embedded decryption key file is empty.");
+    return key;
+  }
+
+  return readPassphrase();
+}
+
 export function decryptPayload({ manifest, encrypted, passphrase }) {
   const key = crypto.scryptSync(
     passphrase,
@@ -164,7 +188,7 @@ function reportSummary(result, domains) {
 }
 
 function cleanup(bundleDir, bundlePath) {
-  for (const name of ["manifest.json", "payload.enc", "import.mjs", "PROMPT.txt"]) {
+  for (const name of ["manifest.json", "payload.enc", EMBEDDED_KEY_FILENAME, "import.mjs", "PROMPT.txt"]) {
     fs.rmSync(path.join(bundleDir, name), { force: true });
   }
   fs.rmSync(bundlePath, { force: true });