v0.7.0

0.7.0 (2026-09-29)

⚠ BREAKING CHANGES

• missions are no longer visible to every authenticated caller -- only to identities sharing one of the mission's groups (every existing mission and identity is in ANON, so nothing changes until groups are configured). The Subscriber role name serialises unchanged; a new "readonly_subscriber" role value may appear in mission JSON.
• events without a no longer bind a device's uid; events impersonating another device are dropped instead of disconnecting the sender.
• the enrollment port no longer accepts plain HTTP; clients and tools must use https:// (microtak-admin-cli enroll needs --ca for a server using its own CA). A reverse proxy in front of 8446 must connect to it over HTTPS.
• enrollment_mode = "auto" no longer accepts enrollments before the admin has enrolled; the admin device must enroll with the bootstrap token from data_dir/bootstrap-token. admin_common_name now defaults to "admin". An existing identity can no longer be re-enrolled with an invite token or in Open mode. The plain-TCP relay (8087) must be enabled explicitly with plain_tcp_enabled = true.

Features

• groups (channels) and group-scoped missions, mirroring the official TAK Server (#11) (15e437c)
• serve enrollment over TLS only, with certificates that fit grid-down (#8) (2730821)
• standard QR enrollment -- tokens as Basic password, bound to a device name (#9) (64471ec)

Bug Fixes

• bind only a device's own SA; relay chat and markers intact (#10) (5ee00f5)
• close enrollment identity takeover and CA-issuance holes (#6) (f653a10)

v0.6.0

0.6.0 (2026-09-24)

Features

• add certificate authority and mTLS transport (ee9dba9)
• add device registry and Marti certificate enrollment endpoint (0a36cc1)
• add mission (Data Sync) metadata store and HTTP API (43048a9)
• add optional TOML config file (3762660)
• assemble full server and make edgetakd functional (e69f00d)
• backup: add periodic local + offsite backup (683f64d)
• close TC-MARTI-10 -- mTLS-authenticate the missions API (83af5fe)
• cot: model detail sub-elements (contact, GeoChat, addressing) (8390756)
• deploy: add Dockerfile, docker-compose.yml, and a Helm chart (076de19)
• deploy: make docker-compose ports/domain configurable via .env (d35f4c8)
• enrollment: add opt-in enrollment invite tokens and admin API (affcc6c)
• enrollment: switch enrollment gating to Auto/Open, secure by default (669a894)
• initial CoT event model with tests (0255f96)
• marti: enforce identity binding on the missions API (07d2da8)
• marti: implement clientEndPoints backed by live connections (27ed981)
• marti: implement DataSync file content storage (aab81a7)
• missions: add MISSION_OWNER/SUBSCRIBER-style roles (c7018d2)
• nix: add flake.nix with a NixOS module (530292c)
• persist CA, device registry, and mission store across restarts (e76261e)
• real TAK-Server/CloudTAK wire compatibility (OAuth login, discovery endpoints) (0f3bbf5)
• transport: add CoT stream decoder and plain-TCP relay (6bb39a3)
• transport: route GeoChat individual and team addressing (4be1706)
• transport: wire device registry into mTLS transport (e7a34be)

Bug Fixes

• ci: chain Docker publish from release-please via workflow_call (1bed781)
• transport: share one broadcast bus between plain-TCP and mTLS relays (95a076d)

Refactoring

• deploy: rename Docker/Helm artifacts to MicroTAK (dba6005)
• marti: generalize enrollment's HTTP listener (4b1d412)
• persist device registry and mission store as event logs (37d4864)
• prepare pki and enrollment for full server assembly (210765e)
• rename project from EdgeTAK to MicroTAK (microtak-server) (e351ef7)
• share CN extraction, inject PeerIdentity into Marti API requests (45cb890)

Documentation

• add architecture and test-plan documentation (a63e0e9)
• add the MicroTAK ecosystem packaging plan (apt, Nix, AUR) (e4d0b04)
• document app assembly, hub fix, and E2E suite (4c72e4e)
• document mission (Data Sync) API and its unauthenticated-HTTP gap (7088f6b)
• log user/device mgmt, backup, packaging, and web client roadmap items (ab575bb)
• mark transport/TLS/enrollment test cases as implemented (04cfd46)
• readme: add system requirements section (5a72ab5)
• readme: rewrite for humans, not as a status log (3e474fd)
• record backup implementation and add TEST-PLAN §14 (2e7f148)
• record clientEndPoints (TC-MARTI-09) closure (03bc60a)
• record DataSync content storage (TC-MARTI-07/08) closure (bdcbd1a)
• record enrollment lockdown / admin API design and test catalog (e25a400)
• record measured resource requirements (100 clients, Pi Zero) (4efa74c)
• record microtak-server/microtak-sync/microtak-node project split (fdcb4fd)
• record mission roles (Owner/Subscriber) design and test catalog (a4aa3b8)
• record persistence, config file, and Reticulum mesh-sync research finding (8ad495c)
• record radio/protocol bridge integration pattern decision (98bf662)
• record TC-MARTI-10 closure (missions API now mTLS-authenticated) (1b3c03b)
• record test-suite red-team review findings (8077037)
• resolve the Reticulum Rust-integration open question (5bf1b40)
• update test plan for registry/enrollment, deprioritize web client (223dcab)

v0.5.0

0.5.0 (2026-09-23)

Features

• enrollment: switch enrollment gating to Auto/Open, secure by default (307e631)
• nix: add flake.nix with a NixOS module (905424c)

Documentation

• add the MicroTAK ecosystem packaging plan (apt, Nix, AUR) (eea5f75)
• readme: add system requirements section (168392e)
• readme: rewrite for humans, not as a status log (92e01d3)

v0.4.0

0.4.0 (2026-09-23)

Features

• enrollment: add opt-in enrollment invite tokens and admin API (f052cc6)
• missions: add MISSION_OWNER/SUBSCRIBER-style roles (54e09dd)

Documentation

• record enrollment lockdown / admin API design and test catalog (19312bf)
• record measured resource requirements (100 clients, Pi Zero) (8bd1965)
• record mission roles (Owner/Subscriber) design and test catalog (72bc2b5)

v0.3.0

0.3.0 (2026-09-23)

Features

• add certificate authority and mTLS transport (ee9dba9)
• add device registry and Marti certificate enrollment endpoint (0a36cc1)
• add mission (Data Sync) metadata store and HTTP API (43048a9)
• add optional TOML config file (3762660)
• assemble full server and make edgetakd functional (e69f00d)
• backup: add periodic local + offsite backup (683f64d)
• close TC-MARTI-10 -- mTLS-authenticate the missions API (83af5fe)
• cot: model detail sub-elements (contact, GeoChat, addressing) (8390756)
• deploy: add Dockerfile, docker-compose.yml, and a Helm chart (076de19)
• initial CoT event model with tests (0255f96)
• marti: enforce identity binding on the missions API (07d2da8)
• marti: implement clientEndPoints backed by live connections (27ed981)
• marti: implement DataSync file content storage (aab81a7)
• persist CA, device registry, and mission store across restarts (e76261e)
• transport: add CoT stream decoder and plain-TCP relay (6bb39a3)
• transport: route GeoChat individual and team addressing (4be1706)
• transport: wire device registry into mTLS transport (e7a34be)

Bug Fixes

• ci: chain Docker publish from release-please via workflow_call (e81bf14)
• transport: share one broadcast bus between plain-TCP and mTLS relays (95a076d)

Refactoring

• deploy: rename Docker/Helm artifacts to MicroTAK (dba6005)
• marti: generalize enrollment's HTTP listener (4b1d412)
• persist device registry and mission store as event logs (37d4864)
• prepare pki and enrollment for full server assembly (210765e)
• rename project from EdgeTAK to MicroTAK (microtak-server) (e351ef7)
• share CN extraction, inject PeerIdentity into Marti API requests (45cb890)

Documentation

• add architecture and test-plan documentation (a63e0e9)
• document app assembly, hub fix, and E2E suite (4c72e4e)
• document mission (Data Sync) API and its unauthenticated-HTTP gap (7088f6b)
• log user/device mgmt, backup, packaging, and web client roadmap items (ab575bb)
• mark transport/TLS/enrollment test cases as implemented (04cfd46)
• record backup implementation and add TEST-PLAN §14 (2e7f148)
• record clientEndPoints (TC-MARTI-09) closure (03bc60a)
• record DataSync content storage (TC-MARTI-07/08) closure (bdcbd1a)
• record microtak-server/microtak-sync/microtak-node project split (fdcb4fd)
• record persistence, config file, and Reticulum mesh-sync research finding (8ad495c)
• record radio/protocol bridge integration pattern decision (98bf662)
• record TC-MARTI-10 closure (missions API now mTLS-authenticated) (1b3c03b)
• record test-suite red-team review findings (8077037)
• resolve the Reticulum Rust-integration open question (5bf1b40)
• update test plan for registry/enrollment, deprioritize web client (223dcab)

microtak-server: v0.2.0

0.2.0 (2026-09-23)

Features

• add certificate authority and mTLS transport (ee9dba9)
• add device registry and Marti certificate enrollment endpoint (0a36cc1)
• add mission (Data Sync) metadata store and HTTP API (43048a9)
• add optional TOML config file (3762660)
• assemble full server and make edgetakd functional (e69f00d)
• backup: add periodic local + offsite backup (683f64d)
• close TC-MARTI-10 -- mTLS-authenticate the missions API (83af5fe)
• cot: model detail sub-elements (contact, GeoChat, addressing) (8390756)
• deploy: add Dockerfile, docker-compose.yml, and a Helm chart (076de19)
• initial CoT event model with tests (0255f96)
• marti: enforce identity binding on the missions API (07d2da8)
• marti: implement clientEndPoints backed by live connections (27ed981)
• marti: implement DataSync file content storage (aab81a7)
• persist CA, device registry, and mission store across restarts (e76261e)
• transport: add CoT stream decoder and plain-TCP relay (6bb39a3)
• transport: route GeoChat individual and team addressing (4be1706)
• transport: wire device registry into mTLS transport (e7a34be)

Bug Fixes

• transport: share one broadcast bus between plain-TCP and mTLS relays (95a076d)

Refactoring

• deploy: rename Docker/Helm artifacts to MicroTAK (dba6005)
• marti: generalize enrollment's HTTP listener (4b1d412)
• persist device registry and mission store as event logs (37d4864)
• prepare pki and enrollment for full server assembly (210765e)
• rename project from EdgeTAK to MicroTAK (microtak-server) (e351ef7)
• share CN extraction, inject PeerIdentity into Marti API requests (45cb890)

Documentation

• add architecture and test-plan documentation (a63e0e9)
• document app assembly, hub fix, and E2E suite (4c72e4e)
• document mission (Data Sync) API and its unauthenticated-HTTP gap (7088f6b)
• log user/device mgmt, backup, packaging, and web client roadmap items (ab575bb)
• mark transport/TLS/enrollment test cases as implemented (04cfd46)
• record backup implementation and add TEST-PLAN §14 (2e7f148)
• record clientEndPoints (TC-MARTI-09) closure (03bc60a)
• record DataSync content storage (TC-MARTI-07/08) closure (bdcbd1a)
• record microtak-server/microtak-sync/microtak-node project split (fdcb4fd)
• record persistence, config file, and Reticulum mesh-sync research finding (8ad495c)
• record radio/protocol bridge integration pattern decision (98bf662)
• record TC-MARTI-10 closure (missions API now mTLS-authenticated) (1b3c03b)
• record test-suite red-team review findings (8077037)
• resolve the Reticulum Rust-integration open question (5bf1b40)
• update test plan for registry/enrollment, deprioritize web client (223dcab)