Repository navigation
Immutable
release. Only release title and notes can be modified.
0.7.0 (2026-09-29)
⚠ BREAKING CHANGES
- missions are no longer visible to every authenticated caller -- only to identities sharing one of the mission's groups (every existing mission and identity is in ANON, so nothing changes until groups are configured). The Subscriber role name serialises unchanged; a new "readonly_subscriber" role value may appear in mission JSON.
- events without a no longer bind a device's uid; events impersonating another device are dropped instead of disconnecting the sender.
- the enrollment port no longer accepts plain HTTP; clients and tools must use https:// (microtak-admin-cli enroll needs --ca for a server using its own CA). A reverse proxy in front of 8446 must connect to it over HTTPS.
- enrollment_mode = "auto" no longer accepts enrollments before the admin has enrolled; the admin device must enroll with the bootstrap token from data_dir/bootstrap-token. admin_common_name now defaults to "admin". An existing identity can no longer be re-enrolled with an invite token or in Open mode. The plain-TCP relay (8087) must be enabled explicitly with plain_tcp_enabled = true.
Features
- groups (channels) and group-scoped missions, mirroring the official TAK Server (#11) (15e437c)
- serve enrollment over TLS only, with certificates that fit grid-down (#8) (2730821)
- standard QR enrollment -- tokens as Basic password, bound to a device name (#9) (64471ec)