Changelog¶

v1.2.0 (2026-03-29)¶

Interactive TUI built with Ink (React for CLIs) — full infrastructure management without an AI agent
Dashboard-first interface showing all Cloudflare zones and Fleet apps
Domain onboarding wizard with confirmation before destructive actions
Zone detail view with DNS records and protection audit
Bulk protection audit across all zones
Fleet apps viewer
Settings screen with masked credential display
Setup wizard with three experience levels (learner/comfortable/professional)
Learner mode encourages source code review before entering API keys
Adaptive credential input with contextual help
MCP-over-stdio client — TUI communicates with Java MCP server via JSON-RPC, zero API duplication
Config system — own config file (~/.infrastructure-mcp.json) with fallback to Claude Code's ~/.claude.json
Table component with Unicode box-drawing, dynamic column widths, and proper alignment

DNS record retry logic — retries up to 3 times with backoff on transient 403 errors during zone onboarding
Free WAF Managed Ruleset — automatically discovers and deploys Cloudflare's free managed WAF rules
Bot Fight Mode — proper API call via PUT /zones/{zone_id}/bot_management with JS detection and AI bot blocking
Managed Transforms — enables remove_x-powered-by_header, add_visitor_location_headers, and add_security_headers
URL Normalization — Cloudflare-type normalization on incoming requests
New zone settings: privacy_pass, browser_cache_ttl (4 hours), ip_geolocation
HSTS improvements: max_age increased to 1 year (31,536,000s), preload: true added
onboard_domain fix — skips Namecheap steps when migrateRecords: false (supports non-Namecheap domains)
MkDocs documentation site at infrastructure-mcp.hesketh.pro

DNS migration no longer silently fails on newly created zones (transient 403 retry)
onboard_domain no longer errors when domain is not registered at Namecheap

Global API Key authentication — supports CLOUDFLARE_API_KEY + CLOUDFLARE_EMAIL as an alternative to scoped API tokens
Interactive setup TUI (--setup flag)

Initial release.