clean up and standardize types across the codebase, unify atomic operations, improve UTF-8 handling throughout the system, remove obsolete input and named queue interfaces, redesign process preparation and creation, tighten IPC and service boundaries, improve error handling and reliability, minor documentation cleanup, fix doom surfaces, fix panic in ini parsing.

code/public/ntlite/security.h

@@ -14,7 +14,6 @@ typedef uint32_t SYS_SERVICE_CLAIMS;
 #define SYS_PRIV_PROCESS_ENUMERATE         0x00000002u
 #define SYS_PRIV_THREAD_ENUMERATE_ANY      0x00000004u
 #define SYS_PRIV_KERNEL_DIAGNOSTICS        0x00000008u
-#define SYS_PRIV_GLOBAL_INPUT              0x00000010u
 #define SYS_PRIV_AUDIO_ACCESS              0x00000020u
 #define SYS_PRIV_AUDIO_MASTER_CONTROL      0x00000040u
 #define SYS_PRIV_CONSOLE_ACCESS            0x00000080u
@@ -24,9 +23,7 @@ typedef uint32_t SYS_SERVICE_CLAIMS;
 #define SYS_PRIV_RAW_STORAGE               0x00000800u
 #define SYS_PRIV_FILESYSTEM_PROVIDER       0x00001000u
 #define SYS_PRIV_NETWORK_ACCESS            0x00002000u
-// Allows publication into the legacy global named-queue registry; opening an explicitly published queue stays public.
-#define SYS_PRIV_NAMED_QUEUE_PUBLISH       0x00004000u
-#define SYS_PRIV_ALL                       0x00007FFFu
+#define SYS_PRIV_ALL                       0x00003FEFu
 
 // Service claims constrain which well-known service identities a privileged context may register.
 #define SYS_SERVICE_CLAIM_RESOURCE         0x00000001u