v0.4.2

0.4.2 (2026-06-21)

Features

• config: eager .env bootstrap and host-port auto-detect (#54) (b6c57cf)
• core: fail-open metrics server, scrape isolation, and self-health (#43) (cb421b6)
• dashboard: harden the in-process bot server to match the fleet plane (#44) (b96a838)
• dashboard: optional bearer auth for the /metrics endpoint (#56) (c1ad15c)
• fleet: accept multiple tokens for zero-downtime rotation (#40) (eb99c92)
• fleet: per-identity lease secrets (un-shareable, rotatable identity) (#41) (92b4863)
• fleet: read-side rate limit and optional audit log (#42) (db2f5d1)
• history: drop counter, resilient sink worker, idempotent Argus(bot) (#45) (a2efd36)
• history: sink circuit breaker drives live argus_subsystem_up{sink} (#51) (7d5b2d2)
• logging: opt-in JSON logging for the bot side (#52) (692d903)
• observability: optional Prometheus Pushgateway push (no inbound port) (#58) (4819152)
• observability: ship Prometheus alert/recording rules and a health dashboard (#46) (9b9367c)
• observability: SLO burn-rate alerts and a golden-signals dashboard row (#53) (b9ec60c)

Bug Fixes

• fleet: default member identity to cluster_id; fix copy-paste quickstart (#38) (791c587)
• fleet: write state and identity files owner-only (0600) (#39) (89f9fea)

Documentation

• clarify cluster_id is always distinct, ports only differ when co-located (#36) (2d5d040)
• hosting: recipes for Pterodactyl, PebbleHost, Ori, and Railway (#55) (b90503d)
• lead with push (no inbound port) for Docker bot hosts (#57) (af21611)
• readme: add a How Argus works section with an architecture diagram (#49) (36c3dbf)