Advanced Paste additional customizations and PhiSilica provider

.github/actions/spell-check/allow/code.txt

@@ -309,6 +309,12 @@ pwa
 AOT
 Aot
 ify
+LAF
+Laf
+languagemodel
+philm
+phisilica
+SCL
 TFM
 
 # YML

.github/actions/spell-check/patterns.txt

@@ -313,6 +313,9 @@ ms-windows-store://\S+
 # ANSI color codes
 (?:\\(?:u00|x)1[Bb]|\\03[1-7]|\x1b|\\u\{1[Bb]\})\[\d+(?:;\d+)*m
 
+# Phi Silica internal token/ID literals
+<PhiSilicaLafToken\b[^>]*>[^<]+</PhiSilicaLafToken>
+\bdjwsxzxb4ksa8\b
 # Special licenses text from RNNoise (BSD-style disclaimer: ``AS IS'')
 ``AS IS''
 

.pipelines/v2/release.yml

@@ -102,7 +102,7 @@ extends:
                 useManagedIdentity: $(SigningUseManagedIdentity)
                 clientId: $(SigningOriginalClientId)
               # Have msbuild use the release nuget config profile
-              additionalBuildOptions: /p:RestoreConfigFile="$(Build.SourcesDirectory)\.pipelines\release-nuget.config" /p:EnableCmdPalAOT=true
+              additionalBuildOptions: /p:RestoreConfigFile="$(Build.SourcesDirectory)\.pipelines\release-nuget.config" /p:EnableCmdPalAOT=true /p:PhiSilicaLafToken=$(PhiSilicaLafToken) /p:PhiSilicaLafAttestation="$(PhiSilicaLafAttestation)"
               beforeBuildSteps:
                 # Install the Terrapin retrieval tool, which replaces vcpkg's download handler
                 # to redirect it to a safe Microsoft-controlled location

.pipelines/v2/templates/job-build-project.yml

@@ -266,6 +266,17 @@ jobs:
         VCWhereExtraVersionTarget: '-prerelease'
 
   - ${{ if eq(parameters.official, true) }}:
+    # M.W.T.V Setup.ps1 sets the pipeline-level XES_APPXMANIFESTVERSION env var
+    # from the supplied -ProjectDirectory's custom.props. Whichever invocation
+    # runs last wins. cmdpal MUST run last because $(CmdPalVersion) (used by the
+    # VNext installer and CmdPal's AppxPackageTestDir) falls back to that env
+    # var; if AP wins, CmdPal's folder name and MSIX filename disagree on
+    # VersionMinor and the installer fails with WIX0103. Each project's own
+    # custom.props is still applied at MSBuild time, so AP versioning is
+    # unaffected by the order.
+    - template: .\steps-setup-versioning.yml
+      parameters:
+        directory: $(build.sourcesdirectory)\src\modules\AdvancedPaste
     - template: .\steps-setup-versioning.yml
       parameters:
         directory: $(build.sourcesdirectory)\src\modules\cmdpal

Directory.Build.props

@@ -3,6 +3,7 @@
     <RepoRoot>$(MSBuildThisFileDirectory)</RepoRoot>
   </PropertyGroup>
   <Import Project="$(RepoRoot)src\Version.props" />
+  <Import Project="$(RepoRoot)src\PhiSilicaLaf.props" />
   <PropertyGroup>
     <Copyright>Copyright (C) Microsoft Corporation. All rights reserved.</Copyright>
     <AssemblyCopyright>Copyright (C) Microsoft Corporation. All rights reserved.</AssemblyCopyright>

Directory.Packages.props

@@ -78,10 +78,16 @@
     <PackageVersion Include="Microsoft.Windows.CsWinRT" Version="2.2.0" />
     <PackageVersion Include="Microsoft.Windows.ImplementationLibrary" Version="1.0.250325.1"/>
     <PackageVersion Include="Microsoft.Windows.SDK.BuildTools" Version="10.0.26100.6901" />
-    <PackageVersion Include="Microsoft.WindowsAppSDK" Version="2.0.1" />
-    <PackageVersion Include="Microsoft.WindowsAppSDK.Foundation" Version="2.0.20" />
-    <PackageVersion Include="Microsoft.WindowsAppSDK.AI" Version="2.0.185" />
-    <PackageVersion Include="Microsoft.WindowsAppSDK.Runtime" Version="2.0.1" />
+    <!-- WinApp SDK pinned to the coherent STABLE 2.2.0 line (these are exactly what the stable
+         meta 2.2.0 resolves transitively). All STABLE (no -experimental) so the AI projection
+         matches the OS Windows AI runtime and Phi Silica works — the experimental 2.2.6 AI fails
+         EnsureReadyAsync with E_NOINTERFACE. Stable Foundation 2.1.0 already contains WinAppSDK
+         PR #6376 (MRT PRI lookup under sparse package identity, required for AdvancedPaste's
+         custom-named PRI), so nothing needs to be experimental. Keep these four in lockstep. -->
+    <PackageVersion Include="Microsoft.WindowsAppSDK" Version="2.2.0" />
+    <PackageVersion Include="Microsoft.WindowsAppSDK.Foundation" Version="2.1.0" />
+    <PackageVersion Include="Microsoft.WindowsAppSDK.AI" Version="2.2.3" />
+    <PackageVersion Include="Microsoft.WindowsAppSDK.Runtime" Version="2.2.0" />
     <PackageVersion Include="Microsoft.Xaml.Behaviors.WinUI.Managed" Version="2.0.9" />
     <PackageVersion Include="Microsoft.Xaml.Behaviors.Wpf" Version="1.1.39" />
     <PackageVersion Include="ModernWpfUI" Version="0.9.4" />

doc/devdocs/modules/advancedpaste-phisilica-local-testing.md

@@ -0,0 +1,100 @@
+# Advanced Paste – Phi Silica local testing
+
+How to build, register, and test **Phi Silica** in **Advanced Paste (AP)** on a dev machine,
+plus the few things that actually break it.
+
+## How it fits together
+
+AP ships as an **unpackaged, self-contained WinUI 3 exe** (`PowerToys.AdvancedPaste.exe`).
+The Windows AI `LanguageModel` (Phi Silica) API is a **Limited Access Feature (LAF)**. For it
+to work, all of these must line up:
+
+1. **Package identity** — AP runs with identity granted by the sparse MSIX
+   `Microsoft.PowerToys.SparseApp`.
+2. **Matching LAF creds** — the token/attestation baked into the exe match the registered
+   sparse package's publisher.
+3. **AI metadata deployed** — the `Microsoft.Windows.AI*.winmd` files ship next to the exe;
+   the AI runtime resolves them **at runtime**.
+4. **Model ready** — supported hardware and the on-device model downloaded
+   (`GetReadyState() == Ready`).
+
+Two identities — the baked token must match the registered package's publisher:
+
+| Build | Publisher Id | LAF creds |
+|-------|--------------|-----------|
+| **Dev** | `djwsxzxb4ksa8` | dev default in [`src/PhiSilicaLaf.props`](../../../src/PhiSilicaLaf.props) |
+| **Prod** | `8wekyb3d8bbwe` | secret, injected only by `.pipelines/v2/release.yml` |
+
+Non-secret pairing check: the exe's baked **Attestation** must equal the registered package's
+**PublisherId**.
+
+## Build + register (dev loop)
+
+```powershell
+$repo = "X:\GitHub\PowerToys"; $Plat = "ARM64"; $Cfg = "Debug"   # or x64 / Release
+
+# Build AP only (C#; reuses existing C++ outputs):
+dotnet restore "$repo\src\modules\AdvancedPaste\AdvancedPaste\AdvancedPaste.csproj" /p:Platform=$Plat
+& "$repo\tools\build\build.cmd" -Path "$repo\src\modules\AdvancedPaste\AdvancedPaste" `
+    -Platform $Plat -Configuration $Cfg /p:BuildProjectReferences=false
+
+# Register the dev sparse package (creates + trusts a dev cert, grants identity):
+pwsh -ExecutionPolicy Bypass -File "$repo\src\PackageIdentity\BuildSparsePackage.ps1" `
+    -Platform $Plat -Configuration $Cfg -DevRegister
+# Expect: PublisherId djwsxzxb4ksa8, IsDevelopmentMode True
+```
+
+## Check the API
+
+`PowerToys.AdvancedPaste.exe` is a **GUI-subsystem** app — run directly in a console it prints
+nothing and returns no exit code. **Redirect** stdout/stderr and wait:
+
+```powershell
+$exe = "$repo\$Plat\$Cfg\WinUI3Apps\PowerToys.AdvancedPaste.exe"
+$o = "$env:TEMP\ap.out"; $e = "$env:TEMP\ap.err"
+$p = Start-Process $exe '--check-phi-silica' -Wait -PassThru -WindowStyle Hidden `
+        -RedirectStandardOutput $o -RedirectStandardError $e
+"exit=$($p.ExitCode)  stdout=$((Get-Content $o -Raw).Trim())"
+Get-Content $e -Raw   # stderr: [phi-silica] LAF unlock status: <…>; ReadyState: <…>
+```
+
+| `--check-phi-silica` | `--prepare-phi-silica` (downloads the model) |
+|----------------------|----------------------------------------------|
+| `0` Available · `1` NotReady · `2` NotSupported / unlock failed | `0` Ready · `1` Failed · `2` NotSupported |
+
+`--check` only reads state; use `--prepare` to trigger the model download (`EnsureReadyAsync`).
+On failure it prints the `HRESULT` to stderr.
+
+Confirm the running AP has identity:
+
+```powershell
+$apPid = (Get-Process PowerToys.AdvancedPaste -EA SilentlyContinue | Select-Object -First 1).Id
+if ($apPid) { & "$repo\src\PackageIdentity\Check-ProcessIdentity.ps1" -ProcessId $apPid }
+# Expect a PFN ending in the publisher id that matches the baked attestation
+```
+
+## What actually breaks it
+
+- **Missing `.winmd` (most important).** The Windows AI runtime resolves
+  `Microsoft.Windows.AI*.winmd` from the app folder at runtime. If they aren't deployed,
+  `GetReadyState()` returns `NotReady` and `EnsureReadyAsync()` fails with
+  `RO_E_METADATA_NAME_NOT_FOUND` (`0x8000000F`) — even though identity, token, and the AI DLLs
+  are all correct. The build emits these winmd into `WinUI3Apps\`; the **installer must harvest
+  them** (`*.winmd` is in the inclusion list of
+  [`generateAllFileComponents.ps1`](../../../installer/PowerToysSetupVNext/generateAllFileComponents.ps1)).
+  Classic symptom: "works from the build output but not from the installer" → check that the
+  installed `WinUI3Apps\` contains `Microsoft.Windows.AI*.winmd`.
+- **Dev/prod mismatch.** A dev-cred exe running against a prod sparse package (or vice versa)
+  makes the LAF unlock silently return `Unavailable`. Keep the exe and the registered package
+  the same flavor, and verify with the attestation == publisherId check above.
+- **Forgot to redirect.** `--check-phi-silica` in a console prints nothing — that's the
+  GUI-subsystem quirk, not a result.
+
+## Cleanup
+
+```powershell
+pwsh -ExecutionPolicy Bypass -File "$repo\src\PackageIdentity\BuildSparsePackage.ps1" -Unregister
+```
+
+⚠️ This removes any `Microsoft.PowerToys.SparseApp` registration, **including a prod one** from
+an installer — reinstall/repair PowerToys to restore it.

doc/devdocs/modules/advancedpaste.md

@@ -33,7 +33,81 @@
 
 ## Debugging
 
-TODO: Add debugging information
+Advanced Paste is an unpackaged, self-contained WinUI 3 app (`PowerToys.AdvancedPaste.exe`). To call Windows AI APIs (Phi Silica / `Microsoft.Windows.AI.Text.LanguageModel`) it acquires **package identity** at runtime via a shared sparse MSIX package (`Microsoft.PowerToys.SparseApp`).
+
+### Running and attaching the debugger
+
+1. Set the **Runner** project (`src/runner`) as the startup project in Visual Studio.
+2. Launch the Runner (F5). This starts the PowerToys tray icon and loads all module interfaces.
+3. Open Settings (right-click tray icon → Settings) and enable the **Advanced Paste** module if it isn't already. The module launches `PowerToys.AdvancedPaste.exe` in the background immediately.
+4. In Visual Studio, go to **Debug → Attach to Process** (`Ctrl+Alt+P`) and attach to `PowerToys.AdvancedPaste.exe` (select **Managed (.NET Core)** debugger).
+
+Alternatively, use the VS Code launch configuration **"Run AdvancedPaste"** from [.vscode/launch.json](/.vscode/launch.json) to launch the exe directly — but note that without the Runner, IPC and hotkeys won't work.
+
+### Sparse package identity (local development)
+
+#### Why is this needed?
+
+- The `LanguageModel` API requires a Limited Access Feature (LAF) unlock, which only succeeds when the calling process has a matching package identity.
+- Advanced Paste is an unpackaged, self-contained WinUI 3 app. The sparse package grants it identity without converting it to a full MSIX.
+- The csproj uses `<ProjectPriFileName>PowerToys.AdvancedPaste.pri</ProjectPriFileName>` (matching the convention of other WinUI3 apps like ImageResizer). This requires WindowsAppSDK Foundation >= 2.0.22 ([PR #6376](https://github.com/microsoft/WindowsAppSDK/pull/6376)) which fixes MRT PRI lookup under sparse identity so `Application.LoadComponent` resolves custom-named PRI files instead of hard-coding `resources.pri`.
+
+#### One-step dev setup
+
+```powershell
+pwsh src/PackageIdentity/BuildSparsePackage.ps1 -Platform ARM64 -Configuration Debug -DevRegister
+```
+
+`-DevRegister`:
+1. Generates a dev certificate under `src/PackageIdentity/.user/` (first run only).
+2. Auto-imports that certificate into `CurrentUser\TrustedPeople` and `CurrentUser\Root` so the OS grants sparse identity to AP (without trust, `GetPackageFamilyName` returns `APPMODEL_ERROR_NO_PACKAGE` and LAF unlock silently fails).
+3. Removes any prior registration.
+4. Rewrites the publisher in a temp copy of `AppxManifest.xml` to match the dev cert subject.
+5. Registers via `Add-AppxPackage -Register … -ExternalLocation X:\…\<Platform>\<Config>\WinUI3Apps`.
+
+After registration verify:
+
+```powershell
+$pkg = Get-AppxPackage -Name '*SparseApp*'
+$pkg.PackageFamilyName    # Microsoft.PowerToys.SparseApp_djwsxzxb4ksa8
+$pkg.PublisherId          # djwsxzxb4ksa8
+$pkg.IsDevelopmentMode    # True
+```
+
+Confirm AP picks up sparse identity at runtime:
+
+```powershell
+& 'ARM64\Debug\WinUI3Apps\PowerToys.AdvancedPaste.exe' --check-phi-silica
+# Exit 0 = Available, 1 = NotReady, 2 = NotSupported
+```
+
+Re-register after rebuilding AP, changing `src/PackageIdentity/AppxManifest.xml`, or switching platforms/configurations by re-running the same command. Unregister with `-Unregister`.
+
+#### Troubleshooting
+
+| Problem | Cause | Fix |
+|---------|-------|-----|
+| `GetPackageFamilyName` returns `APPMODEL_ERROR_NO_PACKAGE` (15700) at runtime; LAF unlock returns `Unavailable` | Dev certificate not trusted (or sparse package not registered) | Re-run `BuildSparsePackage.ps1 -DevRegister` — auto-imports the cert into `TrustedPeople` and `Root`. |
+| `Microsoft.UI.Xaml.dll` crash with `0xC000027B` / `REGDB_E_CLASSNOTREG` on AP or Settings startup | `<Application>` `Executable` path in `src/PackageIdentity/AppxManifest.xml` does not resolve under the registered `ExternalLocation` (`<Config>\WinUI3Apps\`) | Confirm every `Executable` is relative to `WinUI3Apps\` (per #47177) and the file exists under the build output. |
+| AP launches but never shows a window when triggered via hotkey | Runner's pipe-server wait timed out before AP's cold-start finished bootstrapping WinAppSDK + DI host | Already mitigated by the 15 s pipe timeout in `AdvancedPasteProcessManager.cpp`; warm-start launches connect in well under 1 s. |
+| `XamlParseException` / `ms-appx:///Microsoft.UI.Xaml/Themes/…` not found | WindowsAppSDK Foundation < 2.0.22; MRT can't resolve custom PRI name under sparse identity | Ensure `Microsoft.WindowsAppSDK.Foundation` >= 2.0.22 in `Directory.Packages.props`. |
+
+### How Settings UI checks Phi Silica availability
+
+Settings UI does not have sparse package identity. To check whether Phi Silica is available, it launches Advanced Paste as a short-lived subprocess:
+
+```
+PowerToys.AdvancedPaste.exe --check-phi-silica
+```
+
+`Program.Main` recognizes this flag, calls `PhiSilicaLafHelper.TryUnlock()` + `LanguageModel.GetReadyState()`, prints one of `Available` / `NotReady` / `NotSupported` to stdout, and exits with the matching code (0/1/2). Settings reads stdout with a 10 s wait. Because each call is a fresh process, transient `Unavailable` results are not cached across checks.
+
+### See also
+
+- [Phi Silica local testing & troubleshooting runbook](advancedpaste-phisilica-local-testing.md) — layer-by-layer diagnostics for Phi Silica availability
+- [`src/PackageIdentity/readme.md`](/src/PackageIdentity/readme.md) — full sparse package documentation
+- [microsoft/microsoft-ui-xaml#10856](https://github.com/microsoft/microsoft-ui-xaml/issues/10856) — original WinUI sparse-identity PRI bug
+- [microsoft/WindowsAppSDK#6376](https://github.com/microsoft/WindowsAppSDK/pull/6376) — MRT sparse PRI fix (Foundation >= 2.0.22)
 
 ## Settings
 

installer/PowerToysSetupVNext/generateAllFileComponents.ps1

@@ -28,7 +28,12 @@ Function Generate-FileList() {
 
     $fileExclusionList = @("*.pdb", "*.lastcodeanalysissucceeded", "createdump.exe", "powertoys.exe")
 
-    $fileInclusionList = @("*.dll", "*.exe", "*.json", "*.msix", "*.png", "*.gif", "*.ico", "*.cur", "*.svg", "index.html", "reg.js", "gitignore.js", "srt.js", "monacoSpecialLanguages.js", "customTokenThemeRules.js", "*.pri", "*.yml")
+    # *.winmd: WinRT metadata for the Windows App SDK AI APIs (Phi Silica, Imaging, etc.). The AI
+    # runtime resolves these from the app directory at runtime, so they must ship with the product.
+    # Without them GetReadyState() reports NotReady and EnsureReadyAsync() fails with
+    # RO_E_METADATA_NAME_NOT_FOUND (0x8000000F). The build already emits them into the app output
+    # (e.g. WinUI3Apps); they were previously dropped here because the harvest didn't include them.
+    $fileInclusionList = @("*.dll", "*.exe", "*.json", "*.msix", "*.png", "*.gif", "*.ico", "*.cur", "*.svg", "index.html", "reg.js", "gitignore.js", "srt.js", "monacoSpecialLanguages.js", "customTokenThemeRules.js", "*.pri", "*.yml", "*.winmd")
 
     # MFC DLLs leak into the output via WindowsAppSDKSelfContained but no PowerToys binary imports them.
     # Verified with dumpbin /dependents across all 2176 binaries — zero consumers.

src/PackageIdentity/AppxManifest.xml

@@ -58,6 +58,16 @@
         AppListEntry="none">
       </uap:VisualElements>
     </Application>
+    <Application Id="PowerToys.AdvancedPasteUI" Executable="PowerToys.AdvancedPaste.exe" EntryPoint="Windows.FullTrustApplication">
+      <uap:VisualElements
+        DisplayName="PowerToys.AdvancedPaste"
+        Description="PowerToys Advanced Paste"
+        BackgroundColor="transparent"
+        Square150x150Logo="Images\Square150x150Logo.png"
+        Square44x44Logo="Images\Square44x44Logo.png"
+        AppListEntry="none">
+      </uap:VisualElements>
+    </Application>
     <Application Id="PowerToys.CmdPalExtension" Executable="Microsoft.CmdPal.Ext.PowerToys.exe" EntryPoint="Windows.FullTrustApplication">
       <uap:VisualElements
         DisplayName="PowerToys.CommandPaletteExtension"