replace nob with ms' build, move disk creation to build.bat, major comment cleanup, remove old and stupid tests, overhaul interrupt management with per-CPU vector allocation, affinity migration and safe teardown, add proper IOAPIC routing and PCI MSI/MSI-X/INTx support, migrate drivers to the new interrupt API, integrate ACPICA with a proper OS services layer, move ACPI firmware events, power button handling and S5 shutdown into acpi.sys, add parallel driver startup and atomic publication, replace PnP arrays with dynamic lists, redesign service startup again to be asynchronous, add delayed startup mode for services, allow omitting keys in services.ini, fix acpi ec deferred work handling, fix kernel threads having garbage exit code.

code/services.ini

@@ -1,49 +1,30 @@
-; nt-lite user-mode system services.
-;
-; init.exe loads this mandatory file from the bootstrap system volume.
-; [service.<id>]  Service identity; the <id> suffix is case-sensitive.
-; image=          Executable path relative to the bootstrap system volume.
-; start=          auto starts at boot; disabled prevents automatic startup.
-; critical=       Whether service failure is fatal to system startup (true/false).
-; restart=        Restart policy (never or on-failure; current adapters restrict usage).
-; ready_timeout_ms= Milliseconds allowed for the service READY handshake.
-; stop_timeout_ms=  Milliseconds allowed for graceful service shutdown.
-; requires=       Comma-separated service IDs that must start first; empty is allowed.
-; grants=         Comma-separated capability sources delegated at startup; empty is allowed.
-; exports=        Names of handles this service must transfer at READY; empty is allowed.
-;                 Source names are boot.<name> or <service-id>.<ready-export>.
-; Each service key is mandatory. Comments occupy separate lines.
-; RSSRV defines publisher names and their allowed paths; init only forwards handles.
+; [session] image= sets the interactive shell under /SystemRoot.
+; [service.id] image= sets the executable; name= sets its display name.
+; start=auto (default), delayed (after shell), disabled; critical=true requires auto.
+; requires= providers reaching READY; after= providers reaching settlement.
+; restart=never (default), on-failure, always; limit=3 attempts per 300000 ms by default.
+; restart_limit=3, restart_window_ms=300000, restart_delay_ms=0.
+; ready_timeout_ms=5000, stop_timeout_ms=5000; other omitted lists are empty.
+; privileges= ambient privilege names; grants= boot.name or provider.export sources.
+; exports= READY handle names. Namespace-root and registration grants share one critical auto owner.
+
+[session]
+image=apps/shell_native.exe
 
 [service.rssrv]
 image=system/rssrv.exe
-start=auto
 critical=true
-restart=never
-ready_timeout_ms=5000
-stop_timeout_ms=5000
-requires=
 grants=boot.namespace-root,boot.volume-manager,boot.input-manager,boot.display-policy,boot.resource-registration
 exports=session-control,desktop-publisher,posix-publisher
 
 [service.posix]
 image=system/posixsrv.exe
-start=auto
-critical=false
-restart=never
-ready_timeout_ms=5000
-stop_timeout_ms=5000
 requires=rssrv
 grants=rssrv.posix-publisher
 exports=public
 
 [service.dwm]
 image=system/dwm.exe
-start=auto
-critical=false
-restart=never
-ready_timeout_ms=5000
-stop_timeout_ms=5000
 requires=rssrv
 grants=boot.display-present,rssrv.session-control,rssrv.desktop-publisher
 exports=desktop