Skip to main content

Changelog

All notable changes to OnlyFence are documented here. The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

0.4.0 - 2026-03-26​

Config tamper protection and restart command to prevent prompt-injected agents from silently changing guardrails.

Added​

  • Config Tamper Protection — HMAC-signed config snapshot written at daemon startup, verified on next fence start to detect tampering (modified, deleted, or forged) with PBKDF2-hardened key derivation
  • Restart Command — fence restart replaces fence reload, performing full stop+start with config diff display and password confirmation
  • Git-style Config Diff — colored diff output (red/green/yellow) for config changes, auto-disabling colors when not a TTY
  • Centralized Password Resolution — unified password sourcing (env, --password-file, prompt) across all commands for Docker/k8s consistency

Changed​

  • Daemon Lifecycle — extracted shared daemon lifecycle helpers for reuse across start/restart commands
  • Config Set Warning — fence config set warns when daemon is running that restart is needed

Removed​

  • Reload Command — removed fence reload (hot-reload) and IPC reload handler in favor of safer full restart
  • IPC Brute-Force Lockout — removed lockout mechanism (no longer needed with restart model)

Fixed​

  • Detach mode password resolution for fence start --detach
  • promptYesNo accepting mouse scroll escape sequences as input

0.3.0 - 2026-03-26​

Documentation site, SEO optimization, and contributor experience improvements.

Added​

  • Docusaurus Documentation Site — full Docusaurus site replacing standalone landing page, with 16 documentation pages covering installation, CLI reference, agent integration, deployment, architecture, security, FAQ, and contributing
  • Docs CI/CD Workflow — GitHub Actions workflow with Docker build for automated docs deployment on semver tags
  • Contributor Guide — website contributor guide with design system documentation

Changed​

  • Landing Page Migration — converted standalone landing page to a React component within Docusaurus, preserving all animations and interactions
  • Docs Docker Image Tagging — switched from commit SHA to semver tag for Keel auto-deploy

0.2.0 - 2026-03-25​

Daemon tier, AlphaLend lending, activity query engine, wallet import by private key, expanded token registry, unified activities table, and TUI polish.

Added​

  • Daemon Tier — background daemon with security hardening for persistent agent operation
  • Activity Query Engine — structured DSL for agent-driven data access across all activity types
  • Import by Private Key — wallet import via raw private key in addition to mnemonic
  • AlphaLend Integration — lending/borrowing support via AlphaLend protocol
  • LP Pro Price Service — replaced Noodles/CoinGecko with LP Pro for prices and metadata
  • Expanded Token Registry — Sui token registry expanded from 6 to 97 tokens
  • Raw Coin Type Support — accept raw coin types directly in swap and query commands
  • TUI Visual Polish — Panel component and visual beautification for terminal dashboard
  • Claude Code Skill — prompt to install Claude Code skill during setup
  • Account Balance Widget — balance widget on TUI dashboard
  • Landing Page — project landing page

Changed​

  • Unified Activities Table — trades and lending unified into single activities table with ActivityLog
  • SDK Transaction Signing — use SDK built-in transaction signing instead of manual signature construction
  • Bare Semver Convention — use bare semver everywhere, dropped v-prefix convention

Fixed​

  • Install script auto-setup and release pipeline
  • Mnemonic input handling in wallet setup command
  • PR CI workflow

0.1.0 - 2026-03-18​

Initial release of OnlyFence — agent wallet guardrails for DeFi.

Added​

  • Policy Engine — composable pipeline with short-circuit evaluation
    • Token allowlist check (per-chain approved tokens)
    • Spending limit check (per-trade USD cap + rolling 24h volume)
  • Swap Execution — end-to-end swap via 7K Aggregator on Sui
    • Optimal routing across Cetus, DeepBook, Bluefin, FlowX, Turbos
    • Dry-run simulation before signing
    • Slippage configuration
  • Transaction Pipeline — generic executePipeline orchestrator
  • Wallet Management
    • BIP-39 mnemonic generation and Ed25519 key derivation
    • Encrypted keystore (password-protected at rest)
    • Session-based unlock/lock model
    • Watch-only wallet support
    • Wallet aliases with auto-generation, switch, and rename
  • Interactive TUI — full-screen terminal dashboard (React/Ink)
  • CLI Commands — swap, query, wallet, config, unlock/lock
  • Trade Logging — every trade attempt logged to SQLite
  • Oracle Integration — real-time USD pricing with retry logic
  • Observability — structured logging with Pino, Sentry integration
  • Auto-Update — version checking and self-update mechanism