cleanup: comments in capabilities modules, default capabilities.toml, login

programs/src/login/login_input.cpp

@@ -45,19 +45,9 @@ void build_console_args(LoginState* ls, char* out, int cap) {
 }
 
 void launch_session(LoginState* ls) {
-    // Authentication already succeeded and the session is set, so the password
-    // is no longer needed. Wipe it before the session runs rather than waiting
-    // for finish_desktop_session, so it does not sit in the heap for the whole
-    // session.
     montauk::memset(ls->password, 0, sizeof(ls->password));
     ls->password_len = 0;
 
-    // A session may pass on what it holds and no more. Authority is never
-    // propagated implicitly by spawn(): the desktop and the console both
-    // consult 0:/config/capabilities.toml to decide which program receives
-    // which subset, and the kernel clamps that to this set.  A standard
-    // session is delegable for the same reason an admin one is -- otherwise
-    // its own terminal could not hand the shell the suspend it already has.
     montauk::abi::SpawnCapabilities caps{};
     caps.effective = montauk::user::is_admin(ls->username)
         ? montauk::abi::CAP_ADMIN_SESSION

programs/src/login/main.cpp

@@ -113,10 +113,6 @@ extern "C" void _start() {
         while (montauk::is_key_available()) {
             montauk::abi::KeyEvent key;
             montauk::getkey(&key);
-            // Deliberately untranslated: the login screen is US-English only
-            // until it grows its own layout switcher. There is no user yet, so
-            // there is no per-user layout to apply, and silently picking one
-            // would leave no way to type a password in a different layout.
             handle_key(ls, key);
             key_changed = true;
         }
@@ -128,16 +124,6 @@ extern "C" void _start() {
             first_frame = false;
         }
 
-        // Event-driven wait: input_wait returns the instant the mouse or
-        // keyboard ISR reports activity, so the cursor tracks the device with
-        // no fixed-timer latency. timeoutMs is only an upper bound. Matches
-        // the desktop's run loop; a plain sleep_ms() here cannot wake early
-        // and makes every gesture start ~16 ms late.
-        //
-        // The login screen has no periodic UI (no clock, no caret blink, no
-        // animation), so when idle it never needs to wake without input: pass
-        // UINT64_MAX to block indefinitely and consume 0% CPU until the next
-        // mouse/keyboard event, instead of waking ~62x/sec for nothing.
         uint64_t wait_ms = fast_mouse_path ? 1
                          : ((mouse_changed || key_changed) ? 4 : UINT64_MAX);
         input_serial = montauk::input_wait(input_serial, wait_ms);