Promote develop to main: runtime metrics and hub convergence

[ptr727]

Promotion of develop to main. Twelve commits since the last promotion: the runtime-metrics feature, the #880 convergence work, a docs change, and five Dependabot bumps.

Referencing #880 rather than closing it - the hub still has open dispositions there and it is the live coordination channel for them. It gets closed by hand once those land.

What is in it

Runtime metrics (the functional change, and why the floor moved to 3.22)

• Publish runtime metrics and byte-weighted progress via System.Diagnostics.Metrics #865 - always-on metrics published via System.Diagnostics.Metrics under the PlexCleaner.Process meter, readable with dotnet-counters and no extra infrastructure. Inert until a listener observes them, so there is no configuration flag and negligible idle cost.
• Add per-file partial-credit progress to the runtime metrics #868, Switch runtime metrics to operation-weighted progress #869 - progress became operation-weighted: each heavy full-file operation counts the file's size as work when it starts and as work done when it finishes, so a run mixing tiny and huge files reports actual work completed. Aggregate only, with bounded state/tool tags and no filename tags.
• The Docker image ships a counters wrapper, so reading them is docker exec <container> counters.

Hub convergence (#880) - 086cb8b, ba3b01a, f91af07

• Governance: Repository Boundaries and Write Safety and Verification Discipline vendored, Git and Commit Rules refreshed, and the AGENTS.md structure re-derived against the canonical.
• Release pipeline: the validate-release entry gate now asserts branch/version consistency in both directions before anything builds, the canonical github-release job brings the release-asset-* cleanup, and the Docker job can no longer push on a partial run.
• Config: .markdownlint-cli2.jsonc and repo-config/configure.sh re-vendored (the latter gaining the read-only check mode), Docker/README.md on reference-style links, BUILD_CONFIGURATION defaulting to Release, set -Eeuo pipefail standardized, and the publisher pinning ref: github.sha.

Other - #866 (self-contained agent docs), plus Dependabot: #870, #872, #874, #876, #878.

Release impact

version.json is already at 3.22 (raised in #865 for the metrics feature), and README + HISTORY both carry the 3.22 notes, so no version edit is needed here. main currently releases 3.21.x; the next dispatch or scheduled run after this merges publishes 3.22.x as stable and refreshes latest.

Note this promotion is the first to run under the re-vendored release task, so the publish that follows it exercises validate-release and the new artifact cleanup against main for the first time. The main arm of the gate (a public release must carry no prerelease suffix) has not run outside smoke yet, where it self-skips by design.

Verification

Every commit here came through CI on develop with a Copilot review on its head SHA. The full lint gate (markdownlint-cli2, actionlint, editorconfig-checker, cspell) and the husky pre-commit gate are clean on the tip. The validate-release smoke self-skip was confirmed from its job log rather than inferred from a green check.

Merge-commit only, and never with --delete-branch - the head of a promotion PR is develop itself.

[Copilot]

Pull request overview

Promotes develop to main, bringing the 3.22 runtime-metrics feature, the #880 hub convergence workflow/governance updates, documentation refreshes, and Dependabot bumps into the stable branch and next scheduled/dispatch release train.

Changes:

• Add always-on runtime metrics (System.Diagnostics.Metrics) with operation-weighted progress and per-tool/per-outcome instrumentation.
• Converge CI/CD release orchestration on the updated entry gate + artifact-cleanup model (pin publish to github.sha, validate branch/version classification, avoid partial Docker pushes).
• Refresh governance/config/docs (AGENTS/WORKFLOW/CODESTYLE/markdownlint) and bump dependency versions.

Reviewed changes

Copilot reviewed 37 out of 37 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
WORKFLOW.md	Updates workflow spec (shell strictness, LF note, publish ref pinning, validate-release gate, artifact cleanup).
version.json	Bumps version floor from 3.21 to 3.22.
repo-config/README.md	Documents new configure.sh apply / check modes and added security feature management.
repo-config/configure.sh	Adds read-only check mode, safer ruleset lookup, and applies Dependabot security settings.
README.md	Updates release summary to 3.22 and adds a Runtime Metrics section + ref-style link normalization.
HISTORY.md	Adds 3.22 release notes covering runtime metrics behavior and instruments.
ARCHITECTURE.md	Documents runtime metrics architecture, hooks, and progress semantics.
AGENTS.md	Adds foundational principles, write-safety + verification discipline sections, and refreshes governance structure.
CODESTYLE.md	Clarifies markdownlint expectations (MD033 enabled) and cspell CI scope wording.
.markdownlint-cli2.jsonc	Enables MD033 again (keeps MD013 disabled) and updates commentary.
Directory.Packages.props	Bumps AwesomeAssertions, ptr727.LanguageTags, and ptr727.Utilities versions.
PlexCleaner/Metrics.cs	Introduces the process-wide meter and run-scoped gauges/counters for runtime metrics.
PlexCleaner/ProcessDriver.cs	Adds per-run file/byte aggregation and per-file metrics accounting around task execution.
PlexCleaner/Process.cs	Records per-outcome state/modified/verifyfailed metrics at the point state is known.
PlexCleaner/MediaTool.cs	Adds tool-duration recording and a new stdout-streaming execution path.
PlexCleaner/FfProbeTool.cs	Adds tool-duration recording and brackets heavy ops with OpStarted/OpCompleted/OpAborted.
PlexCleaner/FfMpegTool.cs	Adds ffmpeg progress parsing helper and brackets heavy ops for operation-weighted progress.
PlexCleaner/FfMpegBuilder.cs	Adds -progress pipe:1 builder helper for future progress parsing use.
PlexCleaner/HandBrakeTool.cs	Adds HandBrake JSON progress parsing helper and brackets heavy ops for progress weighting.
PlexCleaner/HandBrakeBuilder.cs	Adds --json builder helper for future progress parsing use.
PlexCleaner/PlexCleaner.csproj	Enables EventSourceSupport for NativeAOT builds to allow metrics consumption.
PlexCleaner/Program.cs	Disposes Metrics on program exit.
PlexCleaner/ProcessFile.cs	Minor formatting-only change (blank line).
PlexCleanerTests/MetricsTests.cs	Adds sequential tests for progress/ETA math, flag enumeration, and meter observability.
PlexCleanerTests/ToolProgressParsingTests.cs	Adds tests for ffmpeg/HandBrake progress-line parsing helpers.
Docker/Dockerfile	Switches default BUILD_CONFIGURATION to Release and installs counters wrapper.
Docker/counters.sh	Adds counters wrapper to read runtime metrics inside the container.
Docker/README.md	Converts to reference-style links + adds organized link definitions.
.github/workflows/publish-release.yml	Pins publish ref to github.sha and grants actions: write for artifact cleanup.
.github/workflows/build-release-task.yml	Adds validate-release gate, improves docker push gating, and adds release-asset cleanup.
.github/workflows/get-version-task.yml	Updates comments and bumps checkout pin.
.github/workflows/validate-task.yml	Bumps action pins, standardizes set -Eeuo pipefail, and updates uv setup action.
.github/workflows/test-pull-request.yml	Standardizes set -Eeuo pipefail.
.github/workflows/merge-bot-pull-request.yml	Standardizes set -Eeuo pipefail.
.github/workflows/build-executable-task.yml	Bumps checkout pin and adds set -Eeuo pipefail for publish step.
.github/workflows/build-docker-task.yml	Bumps checkout pin.
.github/copilot-instructions.md	Removes external-repo pointer; routes shared-convention discrepancies to maintainer.

[Copilot]

Pull request overview

Copilot reviewed 37 out of 37 changed files in this pull request and generated no new comments.

[Copilot]

Pull request overview

Copilot reviewed 37 out of 37 changed files in this pull request and generated 1 comment.

[Copilot]

Pull request overview

Copilot reviewed 37 out of 37 changed files in this pull request and generated 1 comment.

[Copilot]

Pull request overview

Copilot reviewed 37 out of 37 changed files in this pull request and generated no new comments.

Comments suppressed due to low confidence (2)

Docker/counters.sh:9

• This script starts with set -euo pipefail, but the repo's bash-safety convention is set -Eeuo pipefail (include -E so an ERR trap would inherit into functions/subshells). Update this to match the documented standard used across workflows/scripts.

set -euo pipefail

ARCHITECTURE.md:83

• The new Runtime Metrics section describes progress.ratio as byte-weighted and credited at completion, but the implementation in Metrics.cs is operation-weighted (work.total/work.completed grows as operations are discovered). This documentation should match the actual metrics model to avoid misleading readers.

- Hooks: `ProcessDriver.ProcessFiles` (the choke point every command and monitor cycle funnels through) drives the file/byte/in-flight instruments and the byte-weighted `progress.ratio`. `Process.ProcessFiles` records the per-`SidecarFile.StatesType` outcomes. `MediaTool` execution paths record `tool.duration`.
- Progress is weighted by input bytes (summed once up front and credited at completion from the same map), not file count.