chore: bump argus-apm to 0.4.0

Author: sharon77242

CHANGELOG.md

@@ -9,13 +9,25 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+---
+
+## [0.4.0] — 2026-05-02
+
 ### Added
 - **gRPC instrumentation** — `@grpc/grpc-js` driver patch (`drivers/grpc.ts`).
   Auto-patches all four call types on `Client.prototype`:
   - **Unary** (`makeUnaryRequest`) and **client-streaming** (`makeClientStreamRequest`) — wraps the callback to capture wall-clock duration and forward errors to `diagnostics_channel`.
   - **Server-streaming** (`makeServerStreamRequest`) and **bidi-streaming** (`makeBidiStreamRequest`) — listens for the stream's `status` (completion) and `error` events; a `published` flag prevents double-publishing when both events fire for the same call.
   The RPC method path (e.g. `/package.Service/Method`) is used as the query key, making gRPC calls visible in slow-query logs, the cache monitor, and OTLP exports.
   17 drivers total (up from 16). Wired into `applyDriverPatches()` under a new `// RPC` section; silently skipped when `@grpc/grpc-js` is not installed.
+- **`CrossSignalRuleEngine`** — extracted class (R.3–R.7 rules) now exported directly; independently testable.
+- **`CROSS_SIGNAL_THRESHOLDS`** — exported const with all cross-signal rule threshold defaults.
+- **`WindowedMonitorBase`** — exported abstract class; `GcMonitor` and `CacheMonitor` now extend it.
+
+### Changed
+- Architecture: `CrossSignalRuleEngine` extracted from `ArgusAgent`; `GcMonitor` / `CacheMonitor` refactored onto `WindowedMonitorBase`.
+- Safety: silent `.catch()` blocks replaced with `this.emit("warn", err)`; `routeTracker` non-null assertion replaced with defensive check; global-regex `lastIndex` reset added in `IndexHintAnalyzer`, `MigrationScanner`, and `ArgusAgent`.
+- Tests: 627 → 644 passing — scenario tests (worker-only, cache-degradation, crash-recovery), OTLP edge cases (circular payload, ECONNREFUSED, timeout), licensing boundary tests (JWT expiry ±1 s, clock-skew at 60 s boundary), `CrossSignalRuleEngine` unit tests.
 
 ---
 
@@ -217,5 +229,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Docker demo app (`quotes-demo-app/`) with `docker compose` one-liner.
 - 485 tests across 102 suites mirroring the source tree.
 
-[Unreleased]: https://github.com/sharon77242/Argus/compare/v0.1.0...HEAD
+[Unreleased]: https://github.com/sharon77242/Argus/compare/v0.4.0...HEAD
+[0.4.0]: https://github.com/sharon77242/Argus/compare/v0.3.2...v0.4.0
+[0.3.2]: https://github.com/sharon77242/Argus/compare/v0.3.0...v0.3.2
+[0.3.0]: https://github.com/sharon77242/Argus/compare/v0.1.0...v0.3.0
 [0.1.0]: https://github.com/sharon77242/Argus/releases/tag/v0.1.0

packages/agent/package.json

@@ -1,6 +1,6 @@
 {
   "name": "argus-apm",
-  "version": "0.3.2",
+  "version": "0.4.0",
   "description": "Privacy-first performance diagnostics for Node.js — Argus",
   "main": "dist/cjs/index.cjs",
   "module": "dist/esm/index.js",