LineBridge v0.7.14

LineBridge v0.7.14 adds reusable Codex MCP integration and a native macOS configuration-preservation fix.

• linebridge codex preview/install/verify/uninstall supports explicit project or user scope, reviewed consent digests, and preservation of unrelated configuration. The default exposes seven read tools.
• linebridge mcp provides a stdio adapter that reuses an existing protected LineBridge profile. Tokens are not written to Codex configuration. Gateway grants remain authoritative; the adapter does not enroll credentials, start LineBridge, create tunnels, or authorize sends.
• macOS configuration updates preserve OS-created com.apple.provenance exactly. Existing-file replacement is refused if the candidate metadata differs. ACLs, BSD flags, quarantine and other extended attributes continue to fail closed.

Validation was performed locally on an Apple Silicon Mac: full regression suite, service/MCP smoke, fresh npm archive installation, native arm64 portable smoke, and x64 portable runtime/tray smoke under the existing Rosetta installation. Disposable native Mac Codex configuration tests cover install, verify, replace, uninstall, metadata preservation and refusal cases; installed Codex 0.160.1 parses the generated configuration. MCP protocol tests use synthetic in-memory credentials. No production Codex configuration, profile or gateway grant was installed or changed by these checks.

Downloads include macOS arm64 and x64 archives, matching SHA-256 manifests/build metadata, and the Node-dependent npm archive for GitHub download. This release has no Windows binary; Windows native validation was not performed, and older Windows assets were not reused. Intel validation used Rosetta, not physical Intel hardware. GitHub Actions workflows remain disabled.

Keep the complete portable folder together and preserve the existing data directory, vault and OS-protected profiles when upgrading. The macOS tray is ad-hoc signed, without Developer ID signing or Apple notarization. Native Codex desktop activation, project trust and new credential enrollment are outside this release's acceptance checks.

See Codex integration documentation and packaging and upgrade instructions.