v0.8.2 — non-broadcasting simulation

Fixed

--simulate was broadcasting real transactions. Two separate paths were affected:

• fibx aave <action> --simulate never checked the flag at all. It went straight to execution, so a dry run of aave supply 1 ETH --simulate actually supplied 1 ETH.
• fibx trade --simulate broadcast a real ERC-20 approval when allowance was insufficient, in order to make its gas estimate possible.

Both now return a preview without sending anything. Where a gas estimate can be produced without broadcasting first it still is; a swap that needs an approval reports requiresApproval: true instead of inventing a fee.

/deletekey in the Telegram bot left the wallet JWT on disk. It removed the database row and killed the MCP process but not the session file. It now removes the user's managed HOME as well, and reports honestly when cleanup is incomplete.

Native-token detection in the Aave paths compared the symbol the user typed against the chain's native symbol. It now compares resolved token addresses.

Added

• Privy signing policies on newly created agent wallets: per-chain allow rules with a native value cap, and a deny rule for private key export.
• One-shot price alerts in the Telegram bot (/alert ETH above 4000), no login or AI key required.
• wallet-info agent skill, and quote documented as the auth-free entry point.
• 72 tests across the CLI, server and bot, where there were none.

Changed

Documentation no longer describes preflight checks as "simulation", destructiveHint as an enforced confirmation, or the wallet policy as a guarantee that survives full server compromise. The Privy app credentials authorize policy administration as well as signing, so the policy is defense in depth on the normal signing path.

Registry

Published to the official MCP registry as finance.fibrous/fibx, verified against the fibrous.finance domain.