replace ad hoc driver loading with a proper driver manager, new DDK, new PnP manager with device matching, asynchronous startup, resource ownership and removal, add shared PCI capability helpers, replace typed, rigid services with a proper service manager, implement proper system shutdown and restart, shutting down unloads drivers and shuts down services, add simple power button, remove heavyweight boot self-tests and SMP stress runs, add monotonic timestamps to kernel debug output, fruitless USB and PS/2 fixes, make test builds opt in.

code/public/ntlite/resource.h

@@ -22,6 +22,7 @@
 #define NTL_RESOURCE_OP_ENUMERATE           6u
 #define NTL_RESOURCE_OP_CREATE_DIRECTORY    7u
 #define NTL_RESOURCE_OP_CREATE_SYMBOLIC_LINK 8u
+#define NTL_RESOURCE_OP_CREATE_PUBLISHER     9u
 
 #define NTL_RESOURCE_KIND_INVALID             0u
 #define NTL_RESOURCE_KIND_CAPABILITY          1u
@@ -79,6 +80,9 @@ typedef struct NTL_RESOURCE_ENUM_ENTRY {
 // Connects one session to the globally registered resource service.
 NTL_RESOURCE_API KSTATUS NtlResourceConnect(SYS_HANDLE* sessionOut);
 NTL_RESOURCE_API KSTATUS NtlResourceOpenSystemRoot(SYS_RIGHTS desiredRights, SYS_HANDLE* handleOut);
+// Creates an exact-path, bind/unbind-only publication listener through namespace-admin authority.
+NTL_RESOURCE_API KSTATUS NtlResourceCreatePublisher(SYS_HANDLE adminSession, SYS_STRING_VIEW path,
+                                                    SYS_HANDLE* listenerOut);
 // Connects one session through an explicitly delegated resource-listener capability.
 NTL_RESOURCE_API KSTATUS NtlResourceConnectListener(SYS_HANDLE listenerHandle, SYS_HANDLE* sessionOut);
 // Resolves one canonical global resource name to an attenuated capability. Symbolic links are followed.