fix(ci): retain analyzer rules across isolated casing passes

Refs #3. Match the verified MarkdownViewr mitigation for the terminal PSScriptAnalyzer 1.25.0 Stack empty crash. All configured rules pass locally on every build script.

Co-Authored-By: Codex (GPT-6) <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>

.gitea/workflows/build.yaml

@@ -1,66 +0,0 @@
-name: build
-on:
-  push:
-    branches: ['**']
-    tags: ['v*']
-jobs:
-  windows:
-    uses: self:KofTwentyTwo/ci-workflows/.gitea/workflows/windows.yaml@v1
-    secrets: inherit
-    with:
-      commands: |
-        dotnet restore Kof22App.slnx -p:Platform=x64 --locked-mode
-        dotnet build Kof22App.slnx -p:Platform=x64 -warnaserror --no-restore
-        # The WinUI app project is built directly so the format workspace can load its generated XAML code.
-        dotnet build src/Kof22App/Kof22App.csproj -p:Platform=x64 -warnaserror --no-restore
-        $env:Platform = 'x64'
-        dotnet format Kof22App.slnx --verify-no-changes --severity warn --no-restore
-        Remove-Item Env:Platform
-        dotnet test tests/Kof22App.Core.Tests --no-build --settings coverage.runsettings --collect:"XPlat Code Coverage" --logger trx --results-directory TestResults
-        dotnet test tests/Kof22App.Cli.Tests --no-build --settings coverage.runsettings --collect:"XPlat Code Coverage" --logger trx --results-directory TestResults
-        pwsh -NoProfile -File ./build/Assert-Coverage.ps1 -ResultsDirectory TestResults -Packages Kof22App.Core,kof22-app
-        # Template: pack, install into a private hive, instantiate with and without the CLI, then build, format, test and gate coverage.
-        $temp = $env:RUNNER_TEMP ?? [IO.Path]::GetTempPath()
-        $hive = Join-Path $temp "template-hive-$env:GITHUB_RUN_ID"
-        dotnet pack templates/KofTwentyTwo.Templates.WindowsApp.csproj -c Release -p:Version=0.1.0 -p:RestoreLockedMode=true -o artifacts/template
-        dotnet new install artifacts/template/KofTwentyTwo.Templates.WindowsApp.0.1.0.nupkg --debug:custom-hive $hive
-        foreach ($cli in 'true', 'false') {
-          $directory = "artifacts/template-probe-$cli"
-          $name = if ($cli -eq 'true') { 'TemplateProbe.WithCli' } else { 'TemplateProbe.NoCli' }
-          dotnet new k22-winapp -n $name --appId "probe-$cli" --displayName "Probe $cli" --cli $cli -o $directory --debug:custom-hive $hive
-          dotnet restore "$directory/$name.slnx" -p:Platform=x64 --locked-mode
-          dotnet build "$directory/$name.slnx" -p:Platform=x64 -warnaserror --no-restore
-          dotnet format "$directory/$name.slnx" --verify-no-changes --severity warn --no-restore
-          dotnet test "$directory/tests/$name.Core.Tests" --no-build --settings "$directory/coverage.runsettings" --collect:'XPlat Code Coverage' --results-directory "$directory/TestResults"
-          if ($cli -eq 'true') {
-            dotnet test "$directory/tests/$name.Cli.Tests" --no-build --settings "$directory/coverage.runsettings" --collect:'XPlat Code Coverage' --results-directory "$directory/TestResults"
-          }
-          pwsh -NoProfile -File "$directory/build/Assert-Coverage.ps1" -ResultsDirectory "$directory/TestResults"
-        }
-        # PowerShell build scripts: analyzer and Pester boundary tests with pinned modules saved to the job's temp directory.
-        $modules = Join-Path $temp "psmodules-$env:GITHUB_RUN_ID"
-        New-Item -ItemType Directory -Force -Path $modules | Out-Null
-        Save-PSResource -Name PSScriptAnalyzer -Version 1.25.0 -Repository PSGallery -TrustRepository -Path $modules
-        Save-PSResource -Name Pester -Version 5.7.1 -Repository PSGallery -TrustRepository -Path $modules
-        Import-Module (Join-Path $modules PSScriptAnalyzer/1.25.0/PSScriptAnalyzer.psd1)
-        Import-Module (Join-Path $modules Pester/5.7.1/Pester.psd1)
-        foreach ($file in Get-ChildItem -LiteralPath build -Recurse -File | Where-Object Extension -In '.ps1', '.psm1', '.psd1') {
-          # One file at a time: recursive analysis can crash inside 1.25.0.
-          $findings = @(Invoke-ScriptAnalyzer -Path $file.FullName -Settings ./PSScriptAnalyzerSettings.psd1)
-          if ($findings.Count -gt 0) { $findings | Format-Table; throw "Script analysis failed: $($file.Name)" }
-        }
-        # The Pester suites assert on child processes' exit codes themselves.
-        $PSNativeCommandUseErrorActionPreference = $false
-        $pester = New-PesterConfiguration
-        $pester.Run.Path = @('build/Assert-Coverage.Tests.ps1', 'build/GitHubRepository.Tests.ps1', 'build/Distribution.Tests.ps1', 'build/InstalledUpdates.Tests.ps1', 'build/PackageBytes.Tests.ps1', 'build/ReleaseSigning.Tests.ps1')
-        $pester.Run.PassThru = $true
-        if ((Invoke-Pester -Configuration $pester).Result -ne 'Passed') { throw 'Pester tests failed' }
-  scripts:
-    uses: self:KofTwentyTwo/ci-workflows/.gitea/workflows/node.yaml@v1
-    with:
-      node-version: '24'
-      install: npm ci --ignore-scripts
-      commands: |
-        npm run lint
-        npm test
-        npm audit signatures

.github/workflows/scripts.yml

@@ -54,7 +54,12 @@ jobs:
           # Analyze each file separately: recursive analysis can crash inside 1.25.0.
           foreach($script in Get-ChildItem -LiteralPath build -Recurse -File | Where-Object Extension -In '.ps1', '.psm1', '.psd1')
           {
-             $findings = @(Invoke-ScriptAnalyzer -Path $script.FullName -Settings ./PSScriptAnalyzerSettings.psd1)
+             # Run casing separately: the combined analyzer pass crashes in 1.25.0.
+             # Both passes together retain every configured rule and severity.
+             $findings = @(
+                Invoke-ScriptAnalyzer -Path $script.FullName -Settings ./PSScriptAnalyzerSettings.psd1 -IncludeRule PSUseCorrectCasing
+                Invoke-ScriptAnalyzer -Path $script.FullName -Settings ./PSScriptAnalyzerSettings.psd1 -ExcludeRule PSUseCorrectCasing
+             )
              if($findings.Count -gt 0) { $findings | Format-Table; throw "Script analysis failed: $($script.Name)" }
           }
       - name: Verify script boundary tests

README.md

@@ -43,6 +43,7 @@ The command-line tool ships in each release as a self-contained single-file
   startup update check on or off. Choices are saved immediately.
 - **Help → Activity log:** a live view of the app's log, with an errors-only filter and a
   shortcut to the log folder.
+- **Help → View on GitHub / Submit an issue… / Community support…:** this app's repository, bug/feature templates and GitHub Discussions.
 - **Help → Check for updates** and **Help → About**.
 <!--#if (cli) -->
 - **Command line:** `kof22-app greet --name Ada`, `kof22-app --version`, `kof22-app --help`.

TEMPLATE.md

@@ -7,6 +7,13 @@ repository files, and the shared CI, security, and release workflows. It impleme
 
 This file is not copied into generated apps.
 
+## Default Help menu
+
+Generated apps include gclo's repository, issue-template and community-support
+commands. Their URLs use the generated `AppInfo.RepositoryUrl`, so `--owner` and
+`-n` point to the new project. Repository setup enables and validates GitHub
+Discussions; this is required for Community support to work.
+
 ## Create an app
 
 ```powershell

build/GitHubRepository.Tests.ps1

@@ -135,6 +135,16 @@ Describe 'Generated repository administration' `
          @($script:Writes | Where-Object { $_ -match 'POST|environments/release$' }).Count | Should -Be 0
       }
 
+      It 'requires community Discussions and detects disabled support without writing' `
+      {
+         Invoke-GitHubRepositorySetup -Plan $script:Plan -Mode Apply -CheckSha ('a' * 40) -Confirm:$false
+         $script:State[$script:Root].has_discussions | Should -BeTrue
+         $script:State[$script:Root].has_discussions = $false
+         $script:Writes.Clear()
+         { Invoke-GitHubRepositorySetup -Plan $script:Plan -Mode Validate } | Should -Throw '*Configuration mismatch: repos/Example/Notes*'
+         $script:Writes.Count | Should -Be 0
+      }
+
       It 'previews all mutations without writing' `
       {
          Invoke-GitHubRepositorySetup -Plan $script:Plan -Mode Apply -CheckSha ('a' * 40) -WhatIf

build/GitHubRepository.psm1

@@ -60,7 +60,7 @@ function Get-GitHubRepositoryPlan
       @{ Method = 'PATCH'; Path = $root; Body = @{
             allow_squash_merge = $true; allow_merge_commit = $false; allow_rebase_merge = $false
             squash_merge_commit_title = 'PR_TITLE'; squash_merge_commit_message = 'PR_BODY'
-            delete_branch_on_merge = $true; has_issues = $true; has_wiki = $false
+            delete_branch_on_merge = $true; has_issues = $true; has_discussions = $true; has_wiki = $false
             homepage              = "https://github.com/$Repository#readme"
             security_and_analysis = @{
                secret_scanning = @{ status = 'enabled' }; secret_scanning_push_protection = @{ status = 'enabled' }

global.json

@@ -1,6 +1,6 @@
 {
   "sdk": {
-    "version": "10.0.403",
+    "version": "10.0.100",
     "rollForward": "latestFeature"
   }
 }

src/Kof22App.Cli/packages.lock.json

@@ -10,9 +10,9 @@
       },
       "Microsoft.NET.ILLink.Tasks": {
         "type": "Direct",
-        "requested": "[10.0.14, )",
-        "resolved": "10.0.14",
-        "contentHash": "YlTamXppEQls6DYWt7RdUuwWDb0lyw/vXCaGeQpLCpsLmfwGuCkOz/vIGgMTV7ECsJcavkCOkxZXv9s8rdAHkQ=="
+        "requested": "[10.0.12, )",
+        "resolved": "10.0.12",
+        "contentHash": "xi+BDjFpW+Sb+MHFHaH6Y/gV9I8BluFwRXc1QyCdoZbIK26eNiBeFuMTe/FMwc33G1wdHCyDg7CVTmb8OdQrMQ=="
       },
       "kof22app.core": {
         "type": "Project",

src/Kof22App.Core/AppIdentity.cs

@@ -52,6 +52,16 @@ public static class AppIdentity
 
 
 
+   /// <summary>The app's bug/feature templates, independent of any upstream project credited in About.</summary>
+   public static Uri IssuesUrl { get; } = new(Info.RepositoryUrl!.AbsoluteUri.TrimEnd('/') + "/issues/new/choose");
+
+
+
+   /// <summary>Community questions and tips in the app's own repository.</summary>
+   public static Uri SupportUrl { get; } = new(Info.RepositoryUrl!.AbsoluteUri.TrimEnd('/') + "/discussions");
+
+
+
    /// <summary>Loads and saves <see cref="AppSettings"/> at <see cref="AppPaths.SettingsFile"/>.</summary>
    public static SettingsStore<AppSettings> SettingsStore { get; } = new(Paths.SettingsFile, AppSettingsContext.Default.AppSettings);
 

src/Kof22App.Core/packages.lock.json

@@ -22,9 +22,9 @@
       },
       "Microsoft.NET.ILLink.Tasks": {
         "type": "Direct",
-        "requested": "[10.0.14, )",
-        "resolved": "10.0.14",
-        "contentHash": "YlTamXppEQls6DYWt7RdUuwWDb0lyw/vXCaGeQpLCpsLmfwGuCkOz/vIGgMTV7ECsJcavkCOkxZXv9s8rdAHkQ=="
+        "requested": "[10.0.12, )",
+        "resolved": "10.0.12",
+        "contentHash": "xi+BDjFpW+Sb+MHFHaH6Y/gV9I8BluFwRXc1QyCdoZbIK26eNiBeFuMTe/FMwc33G1wdHCyDg7CVTmb8OdQrMQ=="
       }
     },
     "net10.0/win-arm64": {},

src/Kof22App/MainWindow.Help.cs

@@ -0,0 +1,45 @@
+/*
+ * Copyright (c) 2026 James Maes
+ * SPDX-License-Identifier: MIT
+ */
+
+using Microsoft.UI.Xaml;
+
+
+namespace Kof22App;
+
+/// <summary>Opens only the app's fixed public Help destinations after deliberate native menu actions.</summary>
+public sealed partial class MainWindow
+{
+   /// <summary>Shows this Windows app's repository in the user's default browser.</summary>
+   private async void GitHub_Click(object sender, RoutedEventArgs args) => await OpenHelpPageAsync(AppIdentity.Info.RepositoryUrl!);
+
+
+
+   /// <summary>Offers the app's issue templates without sending private document data.</summary>
+   private async void SubmitIssue_Click(object sender, RoutedEventArgs args) => await OpenHelpPageAsync(AppIdentity.IssuesUrl);
+
+
+
+   /// <summary>Opens community questions and tips in this app's repository.</summary>
+   private async void CommunitySupport_Click(object sender, RoutedEventArgs args) => await OpenHelpPageAsync(AppIdentity.SupportUrl);
+
+
+
+   /// <summary>A missing browser or OS launch failure is visible; no document path/content is included.</summary>
+   private async Task OpenHelpPageAsync(Uri target)
+   {
+      try
+      {
+         if(!await global::Windows.System.Launcher.LaunchUriAsync(target))
+         {
+            StatusText.Text = "The link could not be opened. Check your default browser.";
+         }
+      }
+      catch(Exception exception) when(exception is System.Runtime.InteropServices.COMException or InvalidOperationException or ArgumentException)
+      {
+         StatusText.Text = "The link could not be opened. Check your default browser.";
+         App.Log.Warning(FormattableString.Invariant($"A Help link could not be opened ({exception.GetType().Name}, 0x{exception.HResult:X8})."));
+      }
+   }
+}

src/Kof22App/MainWindow.xaml

@@ -26,7 +26,11 @@
             <ToggleMenuFlyoutItem x:Name="SplashToggle" Text="Show splash at startup" Click="Splash_Click" />
             <ToggleMenuFlyoutItem x:Name="UpdateCheckToggle" Text="Check for updates at startup" Click="UpdateCheck_Click" />
          </MenuBarItem>
-         <MenuBarItem Title="Help">
+         <MenuBarItem Title="Help" AccessKey="H">
+            <MenuFlyoutItem Text="View on GitHub" AccessKey="G" AutomationProperties.AutomationId="MenuGitHub" Click="GitHub_Click" />
+            <MenuFlyoutItem Text="Submit an issue…" AccessKey="I" AutomationProperties.AutomationId="MenuSubmitIssue" ToolTipService.ToolTip="Report a bug or request a feature on GitHub" Click="SubmitIssue_Click" />
+            <MenuFlyoutItem Text="Community support…" AccessKey="S" AutomationProperties.AutomationId="MenuCommunitySupport" ToolTipService.ToolTip="Ask a question or share tips in GitHub Discussions" Click="CommunitySupport_Click" />
+            <MenuFlyoutSeparator />
             <MenuFlyoutItem x:Name="CheckForUpdatesMenuItem" Text="Check for updates" Click="CheckForUpdates_Click" />
             <MenuFlyoutItem x:Name="ActivityLogMenuItem" Text="Activity log" Click="ActivityLog_Click" />
             <MenuFlyoutSeparator />

tests/Kof22App.Core.Tests/AppIdentityTests.cs

@@ -20,6 +20,8 @@ public class AppIdentityTests
       Assert.EndsWith("_DATA_DIR", AppIdentity.Info.DataDirectoryVariable, StringComparison.Ordinal);
       Assert.NotNull(AppIdentity.Info.RepositoryUrl);
       Assert.NotEmpty(AppIdentity.Info.Attributions);
+      Assert.Equal("https://github.com/KofTwentyTwo/windows-app-template/issues/new/choose", AppIdentity.IssuesUrl.AbsoluteUri);
+      Assert.Equal("https://github.com/KofTwentyTwo/windows-app-template/discussions", AppIdentity.SupportUrl.AbsoluteUri);
    }
 
 

tests/Kof22App.UiTests/AppSession.cs

@@ -151,7 +151,12 @@ public sealed class AppSession : IDisposable
    /// expand (its flyout opens before the menu is ready), so the menu is re-opened
    /// until the item appears.
    /// </summary>
-   public void InvokeMenuItem(string menuName, string itemAutomationId)
+   public void InvokeMenuItem(string menuName, string itemAutomationId) => Invoke(OpenMenuItem(menuName, itemAutomationId));
+
+
+
+   /// <summary>Opens an owned native menu and returns its item without launching an external destination.</summary>
+   public AutomationElement OpenMenuItem(string menuName, string itemAutomationId)
    {
       MainWindow.SetForeground();
       AutomationElement menu = WaitFor(
@@ -171,7 +176,7 @@ public sealed class AppSession : IDisposable
          Wait.UntilInputIsProcessed();
          item = Retry.WhileNull(() => FindInApp(cf => cf.ByAutomationId(itemAutomationId)), timeout: TimeSpan.FromSeconds(3), interval: s_pollInterval, ignoreException: true).Result;
       }
-      Invoke(item ?? throw new TimeoutException($"Menu item '{itemAutomationId}' never appeared under '{menuName}'. (app exited: {App.HasExited})"));
+      return item ?? throw new TimeoutException($"Menu item '{itemAutomationId}' never appeared under '{menuName}'. (app exited: {App.HasExited})");
    }
 
 

tests/Kof22App.UiTests/AppTests.cs

@@ -36,6 +36,23 @@ public class AppTests
 
 
 
+   /// <summary>The real Help menu exposes the app's repository, issue reporting and community commands without launching a browser.</summary>
+   [Fact]
+   public void Help_PublicDestinations_AreAvailableInTheNativeMenu()
+   {
+      using var session = new AppSession();
+      _ = session.OpenMenuItem("Help", "MenuGitHub");
+      foreach((string identity, string label) in new[] { ("MenuGitHub", "GitHub"), ("MenuSubmitIssue", "issue"), ("MenuCommunitySupport", "support") })
+      {
+         AutomationElement item = session.WaitForElement(identity);
+         Assert.True(item.IsEnabled);
+         Assert.False(item.IsOffscreen);
+         Assert.Contains(label, item.Name, StringComparison.OrdinalIgnoreCase);
+      }
+   }
+
+
+
    /// <summary>About: shows the build version.</summary>
    [Fact]
    public void About_ShowsTheBuildVersion()