Logically invalidate HANDLE immediately. Native teardown may be deferred until submitted work which captured HANDLE has completed.

Asks the DEVICE for a handle to newly created instance of some object fulfilling the DESCRIPTOR.

Backend-owned state for adopting decoded hardware frames into DEVICE. Every native plane owner retains this object until the HAL has completed its physical retirement. Asking to release the importer closes admission at once, but its backend state remains live until the last such owner callback runs.

Build and return one complete DECODED-VIDEO-PICTURE. FRAME remains borrowed from the decoder. An implementation must retain every native plane for the lifetime of the returned picture and must release every part of an incomplete candidate before propagating an error.

An explicitly owned AVFrame.

Build a picture transactionally from PLANE-COUNT native plane textures. MAKE-PLANE-TEXTURE is called with each zero-based plane index and returns an owned HAL texture. This function creates the corresponding views. If either step fails, all views built so far are destroyed before every owned texture.

Durably enqueue native ownership, then logically invalidate RESOURCE. INVALIDATE is called only after LEDGER owns the complete teardown. Queue implementations call this while holding the lock which also guards LEDGER.

Release IMPORTER's backend-native state after its last owner retires.

Retain IMPORTER and return an idempotent native-owner release callback. The callback first runs RELEASE-NATIVE-OWNER. Only its successful completion drops the importer retainer. If importer closure was already requested, the same callback then performs (or retries) that closure. This ordering lets a HAL retirement…

Attempt the eligible FIFO prefix in LEDGER at COMPLETED-FRONTIER. Only a successful eligible prefix leaves the ledger. The first ineligible or failed entry is a FIFO barrier: it and the entire unattempted suffix remain ahead of ownership transferred recursively by teardown callbacks.

Transfer OWNER's native teardown to DEVICE, then invalidate OWNER. Backend methods may transfer ownership to a durable device queue before INVALIDATE and attempt it immediately. The default has no such queue: native TEARDOWN must return successfully before INVALIDATE is called.

One atomically publishable and explicitly owned decoded picture.

A video file playing on one world rectangle.

Adopt and atomically publish SCREEN's current decoded hardware frame. The complete candidate is built before SCREEN changes. If adoption signals, the preceding picture remains published; after publication its replacement is retired with warnings so teardown trouble cannot roll the screen backward.

Incomplete construction candidates whose logical release needs a retry.

Test whether two compatible scalars are equal.

Logical negation of one test or raw truth value.

Release PICTURE's views before any of its textures. Idempotent. Failed handles remain attached for a later release attempt. Textures are not retired at all until every view is gone, preserving the dependency order even when one view's destruction reports a failure.

All named failures from a completed release sequence.

Exceptional startup-owned screens whose logical release needs a retry.

Request release of IMPORTER's backend-owned persistent state. The request is idempotent. Native state is released only after every adopted plane owner has completed physical retirement in the HAL.