Repository navigation
Mac desktop app (preview, unsigned)
Mightling-1.7.0-arm64-preview.dmg (Apple silicon) and Mightling-1.7.0-x64-preview.dmg (Intel) are a preview of the desktop app for macOS 12 or later, a client of a Mightling node on your network. They are signed ad hoc only, with no Apple Developer ID and no notarization, so macOS refuses to open the app the first time. Drag Mightling to Applications, try to open it once, then allow it in System Settings → Privacy & Security → Open Anyway (on macOS 14 and earlier, Control-click the app and choose Open instead). Or, in Terminal: xattr -dr com.apple.quarantine /Applications/Mightling.app. Check the dmg against SHA256SUMS first; steps in docs/desktop.md.
Windows desktop app (preview, unsigned)
Mightling-Setup-1.7.0-arm64.exe (Windows on Arm) and Mightling-Setup-1.7.0-x64.exe (x86-64) install a preview of the desktop app for Windows 11, with ling.exe inside, for you alone (no administrator), with a Start menu entry; Windows' Apps list uninstalls it. They are not signed: SmartScreen warns the first time (More info, then Run anyway), and Smart App Control must be off. Check the installer against SHA256SUMS first.
The desktop app's Work view does what the Codex app's does. The composer (@ files, $ skills, / commands, a model and effort picker, Plan mode, follow-ups), the review pane (the uncommitted, staged, commit and branch scopes; stage, unstage and revert by file or hunk; comments for the agent; a generated commit message; commit, push and a pull-request page), worktrees with hand-off to the local checkout and local environments, terminal tabs, threads with pins, sections and search, a goal row, /review, skills, MCP servers, plugins and hooks, subagents and memories, the Scheduled view of Night Shift, and notifications. Beside the thread: a file tree and file tabs, search files (Ctrl+P, name:line), an artifacts viewer (Markdown, images, PDF, HTML without scripts), a preview tab for pages on this machine or the local network (a site on the internet asks first, and /airgapped on keeps it to this machine), and an Activity view across threads. Revert under a turn asks first, undoes the turn's file changes in its repository and then removes the turn from the thread; if the files cannot be undone, nothing changes. Off until you turn them on in Settings: a pet, suggested follow-up prompts, a pull-request tab through your own gh, and a read-only board of what subagents posted for each other. Another agent's configuration can be imported (its plugins are not). On a Mac, the shortcuts use the Command key.
The desktop app on Windows. A preview for Windows 11 on Arm and x86-64, now with an installer (Mightling-Setup-1.7.0-<arch>.exe, the note above): it installs for you alone, with no administrator, adds a Start menu entry, and Settings → Apps removes it. It is a client of a Mightling node on your network, with ling.exe inside. ling update and install.ps1 update the command-line client only; run the next release's installer to update the app.
The Mac preview is steadier. It no longer runs the Mac's stub git (whose dialog offered the Command Line Tools in any folder; install them for the review pane and worktrees), never waits on a keychain prompt at start, and stays responsive while macOS asks for access to a folder under Documents, Desktop or Downloads; it quits on SIGTERM. Still signed ad hoc and not notarized: the note above says how to open it the first time.
The Onyx web chat is retired. ling web and the desktop app have taken over its jobs, image search and voice included. On a machine that still has its containers, ling-admin offers once to remove them, and ling-admin chat remove does it at any time (Onyx's images are about 4.9 GB); the deployment folder is left for you to delete.
Night Shift can try a task more than once. /night add --best-of N runs the task N times in separate worktrees and keeps the attempt its chooser picks; one attempt stays the default.
Several Signal bridges on one machine. ling signal setup --name work links a second account, each bridge its own system account and service; the first is default. The egress audit names every bridge that is on.
Two nodes on one network. A client that remembers a node no longer gives it up because another node answered first, a node whose model server is stopped is not chosen, and on Wi-Fi with power saving the remembered node is found by browsing rather than at an address it no longer has.
An unpacked Linux build starts. The release's .deb writes the AppArmor profile Chromium's sandbox needs; a zip or a copied Mightling-linux-<arch>/ folder had none and stopped with No usable sandbox!. Such a build now carries install-sandbox-profile.sh beside the binary: run it once before the first start (docs/desktop.md). ling-admin desktop install writes the profile for a checkout's build before its first run.
/import is hidden in ling. Its plugin step could add a marketplace hosted on GitHub, which the egress audit does not cover.
Full Changelog: v1.6.4...v1.7.0