v0.8.0

CLI-only expansion of the pfsense-mcp-security operator tooling (ADR-021/ADR-033). No MCP capability change: the public MCP tool contract remains byte-identical to v0.7.2 -- still 95 pfSense READ tools + 1 official-guidance tool, 0 default-reachable WRITE. None of this release's new functionality is reachable from, or wired into, pfsense_mcp.server/the MCP tool registry/normal application startup; it is exclusively the separate pfsense-mcp-security CLI entry point.

Added

• pfsense-mcp-security setup -- a guided, non-mutating discovery + plan-only wizard (interactive by default, or --non-interactive for deterministic automation), plus setup apply, a wholly separate, explicit command that can apply a generated plan: read_only performs one read-only connectivity check; write_protected composes the existing bootstrap orchestration to provision the one fixed ADR-033 service account. Includes inline RECOVERY_REQUIRED delegation, PFSENSE_SETUP_APPLY_CONFIRM_TOKEN for CI-friendly non-interactive confirmation, and setup write-client-config (merge-only MCP client config writing, gated behind its own explicit --confirm).
• pfsense-mcp-security recover -- standalone ADR-033 recovery-execution orchestration. Read-only inspection by default; execution requires both --execute <ACTION> and the exact incident-bound confirmation token.

Fixed

• bootstrap (and setup apply --capability-posture write_protected) restart classification -- a prior operation journal is no longer unconditionally treated as requiring recovery attention on every subsequent run. One fresh, read-only, GET-only live observation is now attempted first; only an exact match against every expected binding field resolves to a clean, already-complete restart. A strictly fail-closed correctness improvement, not a relaxation.

Full detail: CHANGELOG.md and docs/ACCEPTANCE_v0.8.0.md.