isolate POSIX builds from the host UCRT, wire lwext4 and ntfs-3g as ext4.sys and ntfs.sys, split the FAT driver into directory/file/async/driver/mount units, add posixsrv and dwm plus input/console/desktop syscall clients and a pile of new smoke targets, rename serial.sys to cereal.sys, name HDA/USB/lwIP/AHCI workers, harden ATA probing/reset/removal around actual hardware deadlines, absent-channel detection, diagnostics and explicit worker lifetime, redo ACPI S5 shutdown around GAS/MMIO and HW-reduced firmware, scan SSDTs for _S5 and deal with Intel SMI sleep trapping, make serial and SMP timeouts use real monotonic deadlines, add thread names and fix terminal thread teardown, scheduler and APC prepare/commit races, make advisory file locks queryable and preserve split ranges and add mutable file append state, add shared-memory pipes with kernel-assisted wait/wake, introduce capability-scoped input and display managers, split surface map rights into read/write, add explicit unmap and replace present with commit/generation/damage tracking while keeping physical presentation under the display manager, decouple native exception classes from Win32 exception numbers and translate them in kernel32, add opaque process startup data, bump the resource protocol to v3 with namespace directories, symlinks and enumeration and service control to v2 with generic READY handle exports, add the new POSIX errno/status surface and rebuild fds around posixsrv-owned shared open descriptions, descriptor-local flags, exact inheritance snapshots, dup/fcntl/record locks and shared-ring pipes, add waitpid, POSIX credentials/groups/sessions/passwd/group lookups and move sockets onto stable open descriptions, port the shells and apps to the new console/input services and surface commit API, teach init to load services.ini and start/supervise RSSRV, DWM and generic services under restricted capabilities while publishing their endpoints through RSSRV, split RSSRV into namespace, volume, display, session, input, console and resource components and make /SystemRoot a real symlink to the independently published system volume, shift the syscall table again, expand lock/resource/surface/POSIX/service/thread smoke coverage, make docs scream ASK QUESTIONS and DISCUSS at LLMs, replace MIT No Attribution with WTFPL+.

code/public/ntlite/handle.h

@@ -26,7 +26,8 @@ typedef uint32_t SYS_RIGHTS;
 #define SYS_PROCESS_RIGHT_BUILD         0x00000400u
 
 // Thread-specific rights.
-#define SYS_THREAD_RIGHT_RESUME 0x00000100u
+#define SYS_THREAD_RIGHT_RESUME          0x00000100u
+#define SYS_THREAD_RIGHT_SET_INFORMATION 0x00000200u
 
 // Mutex-specific rights.
 #define SYS_MUTEX_RIGHT_RELEASE 0x00000100u
@@ -58,6 +59,17 @@ typedef uint32_t SYS_RIGHTS;
 #define SYS_VOLUME_MANAGER_RIGHT_OPEN      0x00000200u
 #define SYS_VOLUME_MANAGER_RIGHT_WAIT      0x00000400u
 
+// Input-manager rights. The bootstrap manager capability is delegated to RSSRV.
+#define SYS_INPUT_MANAGER_RIGHT_READ       0x00000100u
+#define SYS_INPUT_MANAGER_RIGHT_CONFIGURE  0x00000200u
+
+// Display-manager rights. The bootstrap manager capability is delegated to RSSRV.
+#define SYS_DISPLAY_MANAGER_RIGHT_ENUMERATE 0x00000100u
+#define SYS_DISPLAY_MANAGER_RIGHT_MODESET   0x00000200u
+#define SYS_DISPLAY_MANAGER_RIGHT_PRESENT   0x00000400u
+#define SYS_DISPLAY_MANAGER_RIGHT_CURSOR    0x00000800u
+#define SYS_DISPLAY_MANAGER_RIGHT_CONSOLE   0x00001000u
+
 // Directory-specific rights.
 #define SYS_DIR_RIGHT_ENUMERATE 0x00000100u
 #define SYS_DIR_RIGHT_OPEN      0x00000200u
@@ -77,12 +89,18 @@ typedef uint32_t SYS_RIGHTS;
 #define SYS_SOCKET_RIGHT_POLL       0x00008000u
 #define SYS_SOCKET_RIGHT_SET_OPTION 0x00010000u
 
+// Pipe-endpoint rights.
+#define SYS_PIPE_RIGHT_READ  0x00000100u
+#define SYS_PIPE_RIGHT_WRITE 0x00000200u
+#define SYS_PIPE_RIGHT_POLL  0x00000400u
+
 // File-mapping rights.
 #define SYS_FILE_MAPPING_RIGHT_MAP 0x00000100u
 
 // Surface rights.
-#define SYS_SURFACE_RIGHT_MAP     0x00000100u
-#define SYS_SURFACE_RIGHT_PRESENT 0x00000200u
+#define SYS_SURFACE_RIGHT_MAP_READ       0x00000100u
+#define SYS_SURFACE_RIGHT_MAP_WRITE      0x00000200u
+#define SYS_SURFACE_RIGHT_COMMIT         0x00000400u
 
 // Input-queue rights.
 #define SYS_INPUT_QUEUE_RIGHT_READ 0x00000100u