@blamejs/blamejs-shop 0.4.102 → 0.4.104

package/CHANGELOG.md

@@ -8,6 +8,10 @@ upgrading across more than a few patches at a time.
 
 ## v0.4.x
 
+- v0.4.104 (2026-06-25) — **Compare-and-swap atomic claims across the framework now decide won/lost through the shared row-count primitive instead of hand-rolled checks.** Throughout the framework, an atomic claim on a single-statement-per-request backend is a guarded write — UPDATE ... WHERE the row is still in its expected state, or a conditional INSERT — whose affected-row count decides whether this caller won the race (exactly one row) or lost and must no-op. That won/lost decision was hand-rolled at each site as a Number(result.rowCount || 0) === 1 check, which silently treats a result carrying no recognizable row-count as a lost race. Every such site (104 across commissions, redemption caps, inventory and stock-transfer claims, fulfillment and replenishment leases, gift-card and loyalty ledger writes, webhook delivery leases, and more) now routes that decision through the framework's shared row-count primitive, which owns the exactly-one-row check and the cross-adapter row-count field naming, and surfaces an indeterminate result instead of silently counting it as lost. On the production database path the affected-row count is always reported, so there is no behavior change; the change centralizes the interpretation and makes an otherwise-silent indeterminate result observable. No configuration changes and no schema changes. **Changed:** *Atomic compare-and-swap claims use the shared row-count primitive for their won/lost decision* — Compare-and-swap atomic claims — the guarded UPDATE / conditional INSERT pattern used wherever two requests can race the same row on a backend without interactive transactions — previously decided won-versus-lost with a hand-written row-count comparison at each call site, and a result that carried no recognizable row-count was silently taken as a lost race. These claims now make that decision through the framework's shared row-count primitive, which centralizes the exactly-one-row check and the adapter-specific row-count field naming and raises an error on an indeterminate result rather than treating it as a loss. Because the production database always reports the affected-row count, the won/lost outcome is unchanged on every real path; the benefit is one consistent, audited interpretation and a previously-silent indeterminate result now surfacing. A hand-rolled cross-adapter row-count extraction in the webhook delivery-retry lease is removed in favor of the same primitive.
+
+- v0.4.103 (2026-06-25) — **A return refund that exceeds the order's remaining refundable balance is now refused cleanly, instead of failing at the payment provider.** The direct refund console refuses an over-refund up front: it compares the requested amount against the order's remaining refundable balance and returns a clear 'more than is still refundable' error before any money moves. The provider-backed return (RMA) refund path skipped that check — it issued the RMA's approved amount straight to the payment provider, relying on the provider to reject anything past the captured charge. The result was a late, opaque provider-failure error (and a returns workflow left mid-flight) instead of the clean, actionable refusal the console gives. The RMA refund path now applies the same remaining-balance guard before calling the provider: an approved amount greater than what remains refundable — including a return stacked on top of an earlier partial refund — is refused with the same clear message, the return is left in its received state so the operator can re-approve a corrected amount, and the payment provider is never dialed. A refund of an already-refunded return continues to return the existing conflict response. No configuration changes. **Fixed:** *Return (RMA) refunds honor the order's remaining-balance cap before reaching the payment provider* — A provider-backed return refund issued the return's approved amount directly to Stripe or PayPal with no remaining-balance check, so an amount larger than what was still refundable on the order — for example a return approved for more than the order total, or stacked on top of an earlier partial refund — failed only at the payment provider, surfacing as an opaque provider-failure error rather than the clean refusal the direct refund console returns. The return refund path now compares the approved amount against the order's remaining refundable balance first: an over-cap amount is refused with a clear message, the return stays in its received state so a corrected amount can be re-approved, and the provider is never called. A refund attempt on an already-refunded return still returns the existing conflict response.
+
 - v0.4.102 (2026-06-25) — **Vendored framework refreshed to 0.15.26.** Updates the vendored blamejs framework to 0.15.26. The substantive upstream change is a worker-thread handle leak fix in the sandbox primitive: b.sandbox.run now awaits the worker's termination before resolving, so repeatedly running sandboxed code in a long-lived process no longer accumulates leaked MessagePort handles that keep the event loop alive and slow graceful shutdown. The follow-up 0.15.26 build is upstream test-harness correctness only and ships a library byte-for-byte identical to 0.15.25. No runtime API changes and no behavior change for this storefront, which does not run untrusted code through the sandbox primitive; no operator action required. **Changed:** *Vendored framework refreshed to 0.15.26* — Refreshes the vendored blamejs framework to 0.15.26. Upstream 0.15.25 fixes a worker-thread MessagePort leak in the sandbox primitive (b.sandbox.run now waits for the worker to terminate before resolving), and 0.15.26 is a test-harness-only build whose shipped library is identical to 0.15.25. There are no runtime API changes; this storefront does not expose the sandbox primitive on any request path, so there is no operator-visible behavior change and no action required.
 
 - v0.4.101 (2026-06-25) — **Bulk cart operations now use the same per-line quantity ceiling as a normal add-to-cart, so a large line is no longer un-bulk-addable or silently reduced.** The cart enforces a per-line quantity ceiling on every add-to-cart. The bulk-operations surface (bulk add and reorder) carried its own copy of that ceiling that had drifted ten times lower than the cart's. The mismatch meant a line legitimately built up to the cart's ceiling through normal add-to-cart could not be added to in bulk (the whole bulk batch was rejected), and a reorder of such a line silently clamped its quantity down instead of preserving it. Bulk operations now source the ceiling directly from the cart primitive, so the two always agree: the same quantity that add-to-cart accepts is accepted in bulk, and a reorder no longer quietly reduces a line. No configuration changes. **Fixed:** *Bulk add and reorder share the cart's per-line quantity ceiling* — Bulk cart operations validated and clamped line quantities against their own ceiling, which was ten times lower than the one the cart applies on a normal add-to-cart. As a result a line whose quantity was legitimately built up to the cart's ceiling could not be bulk-added to — the entire batch was refused — and a reorder of that line silently clamped its quantity down rather than keeping it. The bulk surface now reads the ceiling from the cart primitive itself, so bulk add accepts exactly what add-to-cart accepts and a reorder preserves a line's quantity instead of reducing it.

package/lib/admin.js

@@ -4784,6 +4784,12 @@ function mount(router, deps) {
       if (!e) return null;
       if (e.code === "RMA_NOT_FOUND") return { status: 404, slug: "return-not-found" };
       if (e.code === "RMA_TRANSITION_REFUSED") return { status: 409, slug: "return-transition-refused" };
+      // A refund-cap refusal raised by the provider-refund pre-check (the same
+      // over-refund / nothing-remaining guards the direct console maps to 422)
+      // is the operator's problem — a clean 422, not a 502 provider failure.
+      if (e._refundCode === "over-refund" || e._refundCode === "nothing-remaining") {
+        return { status: 422, slug: e._refundCode };
+      }
       return null;
     }
 
@@ -5173,11 +5179,55 @@ function mount(router, deps) {
       // stamped at claim time is the operator's own text when supplied, else
       // a stable marker; the live provider refund id is on the audit row +
       // the JSON response, so it stays reconcilable without a second write.
+      // Claiming first also keeps an already-refunded RMA a clean 409
+      // (the atomic claim refuses it) rather than masking it behind the
+      // amount guard below.
       var claimed = await returns.refund(rma.id, {
         operator_notes: (body.operator_notes && body.operator_notes.length)
           ? body.operator_notes
           : "provider refund issued",
       });
+
+      // Over-refund guard — claim succeeded, but the approved amount must
+      // still fit the order's remaining refundable balance. Mirror the
+      // direct console's over-refund cap BEFORE the provider is dialed, so
+      // an RMA refund_amount_minor that exceeds what remains (already fully
+      // refunded, or stacked past the order total via a prior console/RMA
+      // refund) is refused cleanly (422) instead of failing late at the PSP
+      // as a 502. recordPartialRefund (below) folds each RMA refund into
+      // refundedTotalMinor, so `remaining` reflects prior console AND RMA
+      // refunds alike. On refusal the just-taken claim is RELEASED (back to
+      // received, retryable with a corrected amount) so the RMA never
+      // strands in `refunded` with no money moved. An unset
+      // refund_amount_minor means "refund what remains" — the provider caps
+      // it at the capturable balance, so it proceeds unless nothing remains.
+      // The whole guard runs inside a try/catch that RELEASES the claim on
+      // ANY throw — whether the deliberate over-cap refusal below OR a
+      // transient failure of the balance read itself. Without that, a
+      // refundedTotalMinor read that rejects after the claim moved the RMA to
+      // `refunded` would exit before the provider-call release path, stranding
+      // the RMA behind a 409 with no money moved.
+      try {
+        var rmaAlreadyMinor   = await order.refundedTotalMinor(order2.id);
+        var rmaRemainingMinor = (Number(order2.grand_total_minor) || 0) - rmaAlreadyMinor;
+        if (rmaRemainingMinor <= 0 ||
+            (rma.refund_amount_minor != null && rma.refund_amount_minor > rmaRemainingMinor)) {
+          var capErr = (rmaRemainingMinor <= 0)
+            ? new TypeError("This order is already fully refunded — nothing remains to refund.")
+            : new TypeError("That RMA refund of " + pricing.format(rma.refund_amount_minor, order2.currency) +
+                            " is more than the " + pricing.format(rmaRemainingMinor, order2.currency) +
+                            " still refundable on this order.");
+          capErr._refundCode = (rmaRemainingMinor <= 0) ? "nothing-remaining" : "over-refund";
+          throw capErr;
+        }
+      } catch (guardErr) {
+        // Release the just-taken claim (back to received, retryable) so
+        // neither the over-cap refusal nor a transient read failure leaves
+        // the RMA stranded in `refunded`. No money has moved yet.
+        try { await returns.releaseRefundClaim(rma.id); }
+        catch (_relErr) { /* drop-silent — guardErr below is the actionable one */ }
+        throw guardErr;
+      }
       var idem = "rma-refund:" + rma.id;
       var refund;
       var providerRefund;

package/lib/affiliates.js

@@ -925,7 +925,7 @@ function create(opts) {
         "WHERE id = ?3 AND status = 'pending'",
         [paidAt, reference, id],
       );
-      if (Number(paidUpd.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(paidUpd).won) {
         var racedPaid = await _getCommissionRaw(id);
         var refusedPaid = new Error(
           "affiliates.markCommissionPaid: refused — commission is " +
@@ -979,7 +979,7 @@ function create(opts) {
         "WHERE id = ?3 AND status = 'pending'",
         [ts, reason, id],
       );
-      if (Number(voidUpd.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(voidUpd).won) {
         var racedVoid = await _getCommissionRaw(id);
         var refusedVoid = new Error(
           "affiliates.markCommissionVoided: refused — commission is " +

package/lib/api-keys.js

@@ -580,7 +580,7 @@ function create(opts) {
         "token_hash_previous = ?2, token_hash = ?3 WHERE id = ?4 AND status = 'active'",
         [ts, current.token_hash, placeholderHash, id],
       );
-      if (Number(rotateClaim.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(rotateClaim).won) {
         var lost = await _getRaw(id);
         var refusedRotate = new Error(
           "apiKeys.rotate: refused — key is " + (lost ? lost.status : "gone")

package/lib/asset-manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.4.102",
+  "version": "0.4.104",
   "assets": {
     "css/admin.css": {
       "integrity": "sha384-imfe0otYErcB8rr2h6KLSGTtStirysptpXETSPY4zLv3bZoIT75Lo1dOvkOav+xL",

package/lib/auto-discount.js

@@ -1170,7 +1170,7 @@ function create(opts) {
       "ON CONFLICT(rule_slug, order_id) DO NOTHING",
       [id, slug, orderId, customerId, savings, appliedAt],
     );
-    if (Number(ins.rowCount || 0) === 1) {
+    if (b.sql.casWon(ins).won) {
       await query(
         "UPDATE auto_discount_rules SET redemptions_used = redemptions_used + 1, updated_at = ?1 WHERE slug = ?2",
         [_now(), slug],
@@ -1252,7 +1252,7 @@ function create(opts) {
       "WHERE slug = ?2 AND (max_redemptions_total IS NULL OR redemptions_used < max_redemptions_total)",
       [ts, slug],
     );
-    if (Number(counter.rowCount || 0) === 0) {
+    if (!b.sql.casWon(counter).won) {
       return { claimed: false, reason: "total-cap" };
     }
 
@@ -1297,7 +1297,7 @@ function create(opts) {
       }
       throw e;
     }
-    if (Number(ins.rowCount || 0) === 0) {
+    if (!b.sql.casWon(ins).won) {
       // Per-customer cap refused — return the total-cap reservation.
       await query(
         "UPDATE auto_discount_rules SET redemptions_used = " +
@@ -1326,7 +1326,7 @@ function create(opts) {
       "UPDATE auto_discount_applications SET order_id = ?1 WHERE rule_slug = ?2 AND order_id = ?3",
       [orderId, slug, claimRef],
     );
-    return Number(res.rowCount || 0) === 1;
+    return b.sql.casWon(res).won;
   }
 
   async function releaseClaim(input) {

package/lib/auto-replenish.js

@@ -770,7 +770,7 @@ function create(opts) {
           "AND (last_run_at IS NULL OR last_run_at <= ?3)",
           [now, policy.slug, now - interval],
         );
-        if (Number(claim.rowCount || 0) !== 1) continue;   // lost the claim / not yet due
+        if (!b.sql.casWon(claim).won) continue;   // lost the claim / not yet due
         var runRow = await _runPolicyOnce(policy, now);
         summaries.push(_shapeRun(runRow));
       }

package/lib/backorder.js

@@ -332,7 +332,7 @@ function create(opts) {
         "WHERE id = ?2 AND status = 'pending'",
         [ts, line.id],
       );
-      if (Number(fulfillClaim.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(fulfillClaim).won) {
         throw new TypeError("backorder.fulfillBackorder: line is no longer pending " +
           "(concurrently fulfilled or cancelled)");
       }
@@ -377,7 +377,7 @@ function create(opts) {
         "WHERE id = ?3 AND status = 'pending'",
         [reason, ts, line.id],
       );
-      if (Number(cancelClaim.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(cancelClaim).won) {
         throw new TypeError("backorder.cancelBackorder: line is no longer pending " +
           "(concurrently fulfilled or cancelled)");
       }

package/lib/carrier-accounts.js

@@ -591,7 +591,7 @@ function create(opts) {
         "WHERE id = ?6 AND status IN ('active','rotating') AND api_key_hash = ?7",
         [hashKey, prevHash, hashSec, now, now, id, prevHash],
       );
-      if (Number(claim.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(claim).won) {
         var lost = await _getRaw(id);
         var conflict = new Error(
           (lost && lost.status === "disabled")

package/lib/cart-bulk-ops.js

@@ -536,7 +536,7 @@ function create(opts) {
         "UPDATE carts SET status = 'abandoned', updated_at = ?1 WHERE id = ?2 AND status = 'active'",
         [ts, input.cart_id],
       );
-      if (Number(claim.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(claim).won) {
         throw new TypeError("cartBulkOps.splitCart: cart " + input.cart_id + " already split/modified");
       }
       var children = [];

package/lib/cart.js

@@ -450,7 +450,7 @@ function create(opts) {
         [ts, cartId],
       );
       var cart = (await query("SELECT * FROM carts WHERE id = ?1", [cartId])).rows[0] || null;
-      return { claimed: Number(r.rowCount || 0) === 1, cart: cart };
+      return { claimed: b.sql.casWon(r).won, cart: cart };
     },
 
     // Release a checkout claim back to 'active' so the buyer can retry. The
@@ -470,7 +470,7 @@ function create(opts) {
         "UPDATE carts SET status = 'active', updated_at = ?1 WHERE id = ?2 AND status = 'converted'",
         [ts, cartId],
       );
-      return Number(r.rowCount || 0) === 1;
+      return b.sql.casWon(r).won;
     },
 
     // ---- abandoned-cart visibility (operator dashboard) ---------------

package/lib/catalog.js

@@ -743,7 +743,7 @@ function _inventoryModule(query, opts) {
         "WHERE sku = ?3 AND (stock_on_hand - stock_held) >= ?1",
         [need, ts, sku],
       );
-      if (rDown.rowCount === 1) {
+      if (b.sql.casWon(rDown).won) {
         await _afterMutation(sku);
         return { adjusted: true, sku: sku, delta: delta };
       }
@@ -796,7 +796,7 @@ function _inventoryModule(query, opts) {
         "WHERE sku = ?3 AND (stock_on_hand - stock_held) >= ?1",
         [qty, ts, sku],
       );
-      if (r.rowCount === 1) {
+      if (b.sql.casWon(r).won) {
         // Hold lowers available; a low-stock threshold may now trip.
         await _afterMutation(sku);
         return { held: true, sku: sku, qty: qty };
@@ -829,7 +829,7 @@ function _inventoryModule(query, opts) {
         "WHERE sku = ?3 AND stock_held >= ?1 AND stock_on_hand >= ?1",
         [qty, ts, sku],
       );
-      if (r.rowCount === 1) {
+      if (b.sql.casWon(r).won) {
         await _afterMutation(sku);
         return { decremented: true, sku: sku, qty: qty };
       }

package/lib/click-and-collect.js

@@ -493,7 +493,7 @@ function create(opts) {
             input.scheduled_window_start, input.scheduled_window_end, now, now,
             bucketStart, bucketEnd, capacity],
         );
-        if (Number(ins.rowCount || 0) === 0) {
+        if (!b.sql.casWon(ins).won) {
           throw new TypeError("click-and-collect.scheduleAtLocation: location_code " +
             JSON.stringify(input.location_code) + " is at capacity for the requested window");
         }
@@ -592,7 +592,7 @@ function create(opts) {
         "WHERE order_id = ?5 AND status = 'ready'",
         [input.picked_up_at, sigHash, proofKind, now, orderId],
       );
-      if (Number(pickupClaim.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(pickupClaim).won) {
         throw new TypeError("click-and-collect.markPickedUp: schedule is no longer ready " +
           "(concurrently picked up)");
       }

package/lib/customer-merge.js

@@ -707,7 +707,7 @@ function create(opts) {
         "executed_at = ?1, executed_by = ?2 WHERE id = ?3 AND status = 'proposed'",
         [ts, executedBy, mergeId],
       );
-      if (Number(claim.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(claim).won) {
         // Lost the race (or the row left 'proposed' between our read
         // and the claim). Re-read: an already-executed row is the
         // winner's result; anything else is a genuine state error.
@@ -818,7 +818,7 @@ function create(opts) {
         "AND EXISTS (SELECT 1 FROM customer_merge_redirects WHERE source_customer_id = ?4)",
         [now, reason, mergeId, row.source_customer_id],
       );
-      if (Number(claim.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(claim).won) {
         var raceErr = new Error("customerMerge.rollbackMerge: merge_id " + mergeId +
           " is no longer executed (or its merge is still finalizing); only fully-executed merges can be rolled back");
         raceErr.code = "CUSTOMER_MERGE_NOT_EXECUTED";

package/lib/customer-surveys.js

@@ -758,7 +758,7 @@ function create(opts) {
       "WHERE id = ?2 AND status = 'issued'",
       [nowTs, invitation.id],
     );
-    if (Number(claim.rowCount || 0) !== 1) {
+    if (!b.sql.casWon(claim).won) {
       var raced = new Error("customerSurveys.submitResponse: invitation already responded");
       raced.code = "SURVEY_INVITATION_ALREADY_RESPONDED";
       throw raced;

package/lib/cycle-counting.js

@@ -627,7 +627,7 @@ function create(opts) {
         "WHERE slug = ?4 AND status IN ('scheduled', 'in_progress')",
         [varianceCount, varianceValueMinor, ts, input.slug],
       );
-      if (Number(claim.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(claim).won) {
         // Lost the claim — a concurrent (or prior) finalize already advanced
         // this count and owns the adjustment writes. Touch no shelves; return
         // the totals computed from the now-frozen lines.

package/lib/dropship-forwarding.js

@@ -358,7 +358,7 @@ function create(opts) {
       " WHERE id = ?" + p + " AND status = ?" + (p + 1),
       params,
     );
-    if (Number(upd.rowCount || 0) !== 1) {
+    if (!b.sql.casWon(upd).won) {
       var raced = new Error("dropship-forwarding: forwarding " + forwardingId +
         " changed state concurrently (no longer " + current.status + ") — transition refused");
       raced.code = "DROPSHIP_FORWARDING_TRANSITION_REFUSED";

package/lib/dunning.js

@@ -411,7 +411,7 @@ function create(opts) {
       "WHERE id = ?1 AND status = 'active' AND next_action_at = ?2",
       [enrollment.id, observedNextAt],
     );
-    if (Number(claim.rowCount || 0) !== 1) {
+    if (!b.sql.casWon(claim).won) {
       // Lost the race — another tick already claimed this row (or it
       // was unset to a terminal status between the snapshot and now).
       // Skip the side-effect; return the current row state.

package/lib/email-campaigns.js

@@ -853,7 +853,7 @@ function create(opts) {
       "VALUES (?1, ?2, ?3, 'claimed', NULL, ?4)",
       [b.uuid.v7(), slug, emailHash, Date.now()],
     );
-    return r.rowCount === 1;
+    return b.sql.casWon(r).won;
   }
 
   async function _finalizeSend(slug, emailHash, outcome, failReason) {
@@ -1200,7 +1200,7 @@ function create(opts) {
         "WHERE slug = ?2 AND status = 'scheduled'",
         [Date.now(), slug],
       );
-      if (Number(claim.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(claim).won) {
         var raceErr = new TypeError(
           "emailCampaigns.sendNow: campaign '" + slug + "' is already being sent"
         );
@@ -1260,7 +1260,7 @@ function create(opts) {
           "WHERE slug = ?2 AND status = 'scheduled'",
           [Date.now(), row.slug],
         );
-        if (Number(claim.rowCount || 0) !== 1) continue;
+        if (!b.sql.casWon(claim).won) continue;
         var stats = await _drainSend(row);
         var midRow = await _getRow(row.slug);
         await _fire(midRow, "complete");
@@ -1582,7 +1582,7 @@ function create(opts) {
           "WHERE slug = ?2 AND status = 'scheduled'",
           [Date.now(), slug],
         );
-        if (Number(claim.rowCount || 0) !== 1) {
+        if (!b.sql.casWon(claim).won) {
           var raceErr = new TypeError(
             "emailCampaigns.broadcast: campaign '" + slug + "' is already being sent"
           );

package/lib/giftcards.js

@@ -322,7 +322,7 @@ function create(opts) {
         "updated_at = ?2 WHERE id = ?3 AND balance_minor >= ?1 AND status = 'active'",
         [input.amount_minor, ts, row.id],
       );
-      if (dec.rowCount === 0) {
+      if (!b.sql.casWon(dec).won) {
         // Race: another redemption beat us to the balance. Refuse
         // with the same shape as the up-front insufficient check so
         // the caller doesn't have to distinguish "checked then
@@ -407,7 +407,7 @@ function create(opts) {
           "UPDATE giftcard_redemptions SET reversed_at = ?1 WHERE id = ?2 AND reversed_at IS NULL",
           [ts, red.id],
         );
-        if (Number(claim.rowCount || 0) === 0) continue;   // lost the claim
+        if (!b.sql.casWon(claim).won) continue;   // lost the claim
         // Restore the spendable balance on the card row. Capped at the card's
         // issued_minor by the schema CHECK; the amount restored is exactly
         // what this redemption debited, so it can't exceed the face value.
@@ -446,7 +446,7 @@ function create(opts) {
         "UPDATE giftcard_redemptions SET order_id = ?1 WHERE id = ?2 AND order_id IS NULL",
         [orderId, redemptionId],
       );
-      return Number(res.rowCount || 0) === 1;
+      return b.sql.casWon(res).won;
     },
 
     // Reverse ONE redemption by its own id — the compensation edge for a
@@ -472,7 +472,7 @@ function create(opts) {
         "UPDATE giftcard_redemptions SET reversed_at = ?1 WHERE id = ?2 AND reversed_at IS NULL",
         [ts, red.id],
       );
-      if (Number(claim.rowCount || 0) === 0) return null;   // lost the claim
+      if (!b.sql.casWon(claim).won) return null;   // lost the claim
       await query(
         "UPDATE giftcards SET balance_minor = balance_minor + ?1, " +
         "status = CASE WHEN status = 'redeemed' THEN 'active' ELSE status END, " +
@@ -554,7 +554,7 @@ function create(opts) {
           "WHERE id = ?4 AND reversed_minor = ?5",
           [target, nowFull ? 1 : 0, ts, red.id, already],
         );
-        if (Number(claim.rowCount || 0) === 0) continue;   // lost the claim to a concurrent reversal
+        if (!b.sql.casWon(claim).won) continue;   // lost the claim to a concurrent reversal
         // Restore the spendable balance on the card row. Capped at the card's
         // issued_minor by the schema CHECK; the cumulative reversed_minor is
         // bounded by amount_minor, so it can't exceed the face value.
@@ -592,7 +592,7 @@ function create(opts) {
       // the row (no schema column) but accepted so a future audit-log
       // primitive can ride alongside without a surface change.
       void opts2.reason;
-      if (Number(upd.rowCount || 0) === 1) {
+      if (b.sql.casWon(upd).won) {
         var after = await query("SELECT * FROM giftcards WHERE id = ?1", [id]);
         return after.rows[0] || null;
       }

package/lib/inventory-allocations.js

@@ -381,7 +381,7 @@ function create(opts) {
       "committed_order_id = ?2 WHERE id = ?3 AND status = 'held'",
       [ts, input.order_id, input.hold_id],
     );
-    if (Number(claim.rowCount || 0) !== 1) {
+    if (!b.sql.casWon(claim).won) {
       throw new TypeError("inventory-allocations.commitHold: hold " + existing.id +
         " is no longer held (committed by a concurrent call)");
     }

package/lib/inventory-audits.js

@@ -642,7 +642,7 @@ function create(opts) {
         "WHERE id = ?4 AND status IN ('open', 'in_progress')",
         [varianceCount, varianceValueMinor, ts, auditId],
       );
-      if (Number(claim.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(claim).won) {
         // Lost the claim — a concurrent (or prior) finalize already
         // advanced this audit and owns the adjustment writes. Touch no
         // shelves; return the totals computed from the now-frozen lines.

package/lib/inventory-receive.js

@@ -351,7 +351,7 @@ function create(opts) {
         "UPDATE inventory_receipts SET status = 'applied', updated_at = ?1 WHERE id = ?2 AND status = 'pending'",
         [ts, receiptId],
       );
-      if (Number(claim.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(claim).won) {
         // A concurrent call won the claim and is restocking (or already did).
         // Replay-safe no-op so the loser doesn't double-apply.
         return { id: receiptId, applied_count: 0, stock_changes: [] };
@@ -422,7 +422,7 @@ function create(opts) {
         "UPDATE inventory_receipts SET status = 'reversed', updated_at = ?1 WHERE id = ?2 AND status = 'applied'",
         [claimTs, receiptId],
       );
-      if (Number(claim.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(claim).won) {
         throw new TypeError("inventory-receive.reverse: receipt " + receiptId +
           " is no longer applied (reversed by a concurrent call)");
       }

package/lib/inventory-writeoffs.js

@@ -555,7 +555,7 @@ function create(opts) {
         "reverse_reason = ?2 WHERE id = ?3 AND status = 'recorded'",
         [ts, reason, id],
       );
-      if (Number(claim.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(claim).won) {
         throw new TypeError("inventory-writeoffs.reverseWriteoff: writeoff " + id +
           " is no longer recorded (reversed by a concurrent call)");
       }

package/lib/invoice-renderer.js

@@ -319,7 +319,7 @@ function create(opts) {
         "WHERE series = ?3 AND next_value = ?4",
         [current + 1, Date.now(), series, current],
       );
-      if (Number(info.rowCount) === 1) return current;
+      if (b.sql.casWon(info).won) return current;
     }
     throw new Error("invoiceRenderer: sequence advance for series " + JSON.stringify(series) + " contended 16 times");
   }

package/lib/knowledge-base.js

@@ -928,7 +928,7 @@ function create(opts) {
         "VALUES (?1, ?2, ?3, ?4, ?5)",
         [b.uuid.v7(), slug, sessionHash, vote, ts],
       );
-      var changed = inserted && (inserted.rowCount === 1 || inserted.changes === 1);
+      var changed = inserted && b.sql.casWon(inserted).won;
       if (changed) {
         var col = vote === "helpful" ? "helpful_count" : "not_helpful_count";
         await query(

package/lib/loyalty-redemption.js

@@ -533,7 +533,7 @@ function create(opts) {
       "WHERE customer_id = ?2 AND reward_slug = ?3 AND status IN ('active','consumed')) < ?7",
       [redemptionId, customerId, rewardSlug, reward.point_cost, ts, expiresAt, reward.max_per_customer],
     );
-    if (Number(claim.rowCount || 0) !== 1) {
+    if (!b.sql.casWon(claim).won) {
       // Lost the cap claim — another redeem filled the last slot between
       // the pre-check and here. Return the points and refuse, so a raced
       // caller is never charged for a redemption it didn't get.
@@ -648,7 +648,7 @@ function create(opts) {
       "WHERE id = ?3 AND status = 'active'",
       [ts, orderId, redemptionId],
     );
-    if (Number(r.rowCount || 0) === 0) {
+    if (!b.sql.casWon(r).won) {
       // Lost the race — re-read so the caller gets the row's actual
       // post-race state. Refuse with the same FSM error so the call
       // surface is identical whether the loser noticed pre- or
@@ -691,7 +691,7 @@ function create(opts) {
       "WHERE id = ?2 AND status = 'active'",
       [reason, redemptionId],
     );
-    if (Number(r.rowCount || 0) === 0) {
+    if (!b.sql.casWon(r).won) {
       var raceAfter = await getRedemption(redemptionId);
       var raceErr = new Error("loyaltyRedemption.cancelRedemption: redemption status is '" + (raceAfter && raceAfter.status) + "', only 'active' may be cancelled with a point refund");
       raceErr.code = "REDEMPTION_NOT_ACTIVE";

package/lib/loyalty.js

@@ -329,7 +329,7 @@ function create(opts) {
         "updated_at = ?2 WHERE customer_id = ?3 AND balance_points >= ?1",
         [points, ts, customerId],
       );
-      if (dec.rowCount === 0) {
+      if (!b.sql.casWon(dec).won) {
         var raced = new Error("loyalty.redeem: insufficient balance");
         raced.code = "LOYALTY_INSUFFICIENT_BALANCE";
         throw raced;
@@ -366,7 +366,7 @@ function create(opts) {
         "WHERE id = ?2 AND transaction_type = 'redeem' AND order_id IS NULL",
         [oid, tid],
       );
-      return Number(res.rowCount || 0) === 1;
+      return b.sql.casWon(res).won;
     },
 
     // Reverse ONE redeem burn by its ledger row id — the compensation edge
@@ -394,7 +394,7 @@ function create(opts) {
         "WHERE id = ?2 AND restored_points = 0",
         [spent, row.id],
       );
-      if (Number(claim.rowCount || 0) === 0) return { restored_points: 0 };   // lost the claim
+      if (!b.sql.casWon(claim).won) return { restored_points: 0 };   // lost the claim
       await _ensureAccountRow(row.customer_id, ts);
       await query(
         "UPDATE loyalty_accounts SET balance_points = balance_points + ?1, " +
@@ -473,7 +473,7 @@ function create(opts) {
           "WHERE id = ?2 AND restored_points = ?3",
           [target, row.id, already],
         );
-        if (Number(claim.rowCount || 0) === 0) continue;   // lost the claim
+        if (!b.sql.casWon(claim).won) continue;   // lost the claim
         await _ensureAccountRow(row.customer_id, ts);
         // Credit BALANCE only — lifetime is untouched (a redeem never moved
         // lifetime; restoring it mustn't either). Relative-atomic so a
@@ -529,7 +529,7 @@ function create(opts) {
         "updated_at = ?3 WHERE customer_id = ?4 AND balance_points + ?1 >= 0",
         [delta, lifetimeDelta, ts, customerId],
       );
-      if (Number(upd.rowCount || 0) === 0) {
+      if (!b.sql.casWon(upd).won) {
         var ins = new Error("loyalty.adjust: adjustment would underflow balance");
         ins.code = "LOYALTY_INSUFFICIENT_BALANCE";
         throw ins;

package/lib/operator-approvals.js

@@ -737,7 +737,7 @@ function create(opts) {
       "executed_at = ?2, result_json = ?3, updated_at = ?2 WHERE id = ?4 AND status = 'approved'",
       [executedBy, ts, resultJson, requestId],
     );
-    if (Number(claim.rowCount || 0) !== 1) {
+    if (!b.sql.casWon(claim).won) {
       var raced = new Error("operatorApprovals.markExecuted: request " +
         JSON.stringify(requestId) + " is no longer approved — execution refused");
       raced.code = "APPROVAL_EXECUTE_RACE";

package/lib/operator-help-center.js

@@ -844,7 +844,7 @@ function create(opts) {
         "VALUES (?1, ?2, ?3, ?4, ?5)",
         [b.uuid.v7(), slug, operatorId, vote, ts],
       );
-      var changed = inserted && (inserted.rowCount === 1 || inserted.changes === 1);
+      var changed = inserted && (b.sql.casWon(inserted).won);
       if (changed) {
         var col = vote === "helpful" ? "helpful_count" : "not_helpful_count";
         await query(

package/lib/order-exchanges.js

@@ -300,7 +300,7 @@ function create(opts) {
         "WHERE id = ?3 AND status = 'pending'",
         [approverId, ts, exchangeId],
       );
-      if (Number(claim.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(claim).won) {
         var refused = new Error(
           "order-exchanges: transition 'approveExchange' refused from state '" +
           existing.status + "' (lost the race to a concurrent transition)"

package/lib/order-export.js

@@ -600,7 +600,7 @@ function create(opts) {
         "WHERE id = ?2 AND status = ?3",
         [ts, exportId, row.status],
       );
-      if (Number(upd.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(upd).won) {
         var raced = new Error("order-export.cancelExport: " + exportId +
           " changed state concurrently (no longer " + row.status + ") — refused");
         raced.code = "ORDER_EXPORT_CANCEL_REFUSED";
@@ -664,7 +664,7 @@ function create(opts) {
         "WHERE id = ?2 AND status = ?3",
         [ts, exportId, row.status],
       );
-      if (Number(upd.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(upd).won) {
         var raced = new Error("order-export.markExportRunning: " + exportId +
           " changed state concurrently (no longer " + row.status + ") — refused");
         raced.code = "ORDER_EXPORT_START_REFUSED";
@@ -703,7 +703,7 @@ function create(opts) {
         "byte_size = ?2, file_sha3_512 = ?3, completed_at = ?4 WHERE id = ?5 AND status = ?6",
         [input.row_count, input.byte_size, input.file_sha3_512, ts, input.export_id, row.status],
       );
-      if (Number(upd.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(upd).won) {
         var raced = new Error("order-export.markExportComplete: " + input.export_id +
           " changed state concurrently (no longer " + row.status + ") — refused");
         raced.code = "ORDER_EXPORT_COMPLETE_REFUSED";
@@ -744,7 +744,7 @@ function create(opts) {
         "WHERE id = ?3 AND status = ?4",
         [errorText, ts, input.export_id, row.status],
       );
-      if (Number(upd.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(upd).won) {
         var raced = new Error("order-export.markExportFailed: " + input.export_id +
           " changed state concurrently (no longer " + row.status + ") — refused");
         raced.code = "ORDER_EXPORT_FAIL_REFUSED";

package/lib/payment-retries.js

@@ -602,7 +602,7 @@ function create(opts) {
           "WHERE id = ?1 AND status = 'active' AND next_retry_at = ?2",
           [enrollment.id, enrollment.next_retry_at],
         );
-        if (Number(claim.rowCount || 0) !== 1) continue;   // another tick claimed it
+        if (!b.sql.casWon(claim).won) continue;   // another tick claimed it
 
         // Pre-charge prep. The claim above nulled next_retry_at to take
         // the row out of the due set; a throw HERE (a missing policy /
@@ -707,7 +707,7 @@ function create(opts) {
         "WHERE id = ?2 AND status = 'active' AND attempt_count = ?3",
         [nextAttempt, enrollment.id, attemptCount],
       );
-      if (Number(outcomeClaim.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(outcomeClaim).won) {
         return await _refetchEnrollment(enrollment.id);
       }
 

package/lib/pick-lists.js

@@ -565,7 +565,7 @@ function create(opts) {
         "WHERE id = ?2 AND status IN ('generated', 'in_progress')",
         [ts, listId],
       );
-      if (Number(claim.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(claim).won) {
         // Lost the race (or the row left an eligible state between the
         // read and the claim). Surface the same terminal-state refusal
         // a sequential caller would see — the shipments belong to the

package/lib/plan-changes.js

@@ -485,7 +485,7 @@ function create(opts) {
           "WHERE id = ?2 AND status = 'pending'",
           [now, row.id],
         );
-        if (Number(claim.rowCount || 0) !== 1) continue;   // another run claimed it
+        if (!b.sql.casWon(claim).won) continue;   // another run claimed it
 
         await query(
           "UPDATE subscriptions SET plan_id = ?1, updated_at = ?2 WHERE id = ?3",

package/lib/preorder.js

@@ -265,7 +265,7 @@ function create(opts) {
       "WHERE id = ?2 AND status = 'active'",
       [ts, reservation.id],
     );
-    if (Number(claim.rowCount || 0) !== 1) {
+    if (!b.sql.casWon(claim).won) {
       // Lost the race — a concurrent converter already claimed this
       // reservation. Skip the side-effect; the winner mints the order.
       return { won: false, orderId: null };
@@ -436,7 +436,7 @@ function create(opts) {
         "AND (max_units_available IS NULL OR units_reserved + ?1 <= max_units_available)",
         [input.quantity, ts, input.campaign_slug],
       );
-      if (Number(claim.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(claim).won) {
         throw new TypeError("preorder.reserve: would exceed max_units_available " +
           "(cap=" + campaign.max_units_available + ", reserved=" + campaign.units_reserved +
           ", requested=" + input.quantity + ")");
@@ -529,7 +529,7 @@ function create(opts) {
         "cancel_reason = ?2 WHERE id = ?3 AND status = 'active'",
         [ts, reason, reservation.id],
       );
-      if (Number(claim.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(claim).won) {
         throw new TypeError("preorder.cancelReservation: reservation " +
           JSON.stringify(reservation.id) + " was already cancelled or converted concurrently");
       }
@@ -621,7 +621,7 @@ function create(opts) {
         "WHERE slug = ?2 AND status = 'active'",
         [ts, input.slug],
       );
-      if (Number(claim.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(claim).won) {
         throw new TypeError("preorder.launchCampaign: campaign " +
           JSON.stringify(input.slug) + " was already launched concurrently");
       }

package/lib/print-on-demand.js

@@ -332,7 +332,7 @@ function create(opts) {
       " WHERE id = ?" + p + " AND status = ?" + (p + 1),
       params,
     );
-    if (Number(upd.rowCount || 0) !== 1) {
+    if (!b.sql.casWon(upd).won) {
       var raced = new Error("print-on-demand: fulfillment " + fulfillmentId +
         " changed state concurrently (no longer " + current.status + ") — transition refused");
       raced.code = "POD_FULFILLMENT_TRANSITION_REFUSED";

package/lib/print-queue.js

@@ -374,7 +374,7 @@ function create(opts) {
         "claimed_at = ?2 WHERE id = ?3 AND status = 'queued'",
         [input.station_id, ts, jobId],
       );
-      if (upd.rowCount === 0) return null;
+      if (!b.sql.casWon(upd).won) return null;
       return await _getRow(jobId);
     },
 
@@ -452,7 +452,7 @@ function create(opts) {
         [ts, reason, jobId],
       );
       var failed = await _getRow(jobId);
-      if (Number(upd.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(upd).won) {
         // Another caller already transitioned this job out of
         // in_progress. Return its current state; do not re-insert a
         // retry row (that's the exactly-once side-effect we're

package/lib/purchase-orders.js

@@ -643,7 +643,7 @@ function create(opts) {
             [cAdd, ts, cLine.id, cPrior],
           );
         }
-        if (Number(lineClaim.rowCount || 0) !== 1) {
+        if (!b.sql.casWon(lineClaim).won) {
           // Lost the race on this line (a concurrent receipt already
           // advanced it past the value we observed) — roll back the
           // line claims we already won this call, self-targeting the

package/lib/push-notifications.js

@@ -823,7 +823,7 @@ function create(opts) {
             "failed_at = ?2 WHERE id = ?3 AND status = 'queued'",
             ["provider_unavailable_at_dispatch", now, row.id],
           );
-          if (Number(lostFail.rowCount || 0) !== 1) continue;
+          if (!b.sql.casWon(lostFail).won) continue;
           advanced.push(await _getNotification(row.id));
           continue;
         }
@@ -834,7 +834,7 @@ function create(opts) {
           "WHERE id = ?2 AND status = 'queued'",
           [now, row.id],
         );
-        if (Number(claimed.rowCount || 0) !== 1) continue;
+        if (!b.sql.casWon(claimed).won) continue;
         advanced.push(await _getNotification(row.id));
       }
       return advanced;

package/lib/quotes.js

@@ -683,7 +683,7 @@ function create(opts) {
       [shipping, tax, total, currency, validUntil, operatorNotes,
        delivery, payment, ts, quoteId, fromStatus],
     );
-    if (Number(claim.rowCount || 0) !== 1) {
+    if (!b.sql.casWon(claim).won) {
       var raced = new Error("quotes." + verbLabel + ": refused — quote " + quoteId +
         " is no longer in the " + fromStatus + " state (settled by a concurrent call)");
       raced.code = "QUOTE_TRANSITION_REFUSED";
@@ -880,7 +880,7 @@ function create(opts) {
         "accepted_by_customer = ?2, updated_at = ?1 WHERE id = ?3 AND status = 'responded'",
         [ts, acceptedBy, quoteId],
       );
-      if (Number(claim.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(claim).won) {
         var raced = new Error("quotes.customerAccept: refused — quote " + quoteId +
           " is no longer responded (accepted, rejected, or withdrawn by a concurrent call)");
         raced.code = "QUOTE_TRANSITION_REFUSED";
@@ -913,7 +913,7 @@ function create(opts) {
         "reject_reason = ?2, updated_at = ?1 WHERE id = ?3 AND status = 'responded'",
         [ts, reason, quoteId],
       );
-      if (Number(claim.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(claim).won) {
         var raced = new Error("quotes.customerReject: refused — quote " + quoteId +
           " is no longer responded (settled by a concurrent call)");
         raced.code = "QUOTE_TRANSITION_REFUSED";
@@ -954,7 +954,7 @@ function create(opts) {
         "cancel_reason = ?2, updated_at = ?1 WHERE id = ?3 AND status IN ('requested', 'responded')",
         [ts, reason, quoteId],
       );
-      if (Number(claim.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(claim).won) {
         var raced = new Error("quotes.cancelQuote: refused — quote " + quoteId +
           " is no longer cancellable (accepted, rejected, or settled by a concurrent call)");
         raced.code = "QUOTE_TRANSITION_REFUSED";
@@ -998,7 +998,7 @@ function create(opts) {
         "WHERE id = ?2 AND status = 'accepted'",
         [ts, quoteId],
       );
-      if (Number(claim.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(claim).won) {
         var raced = new Error("quotes.convertToOrder: refused — quote " + quoteId +
           " is no longer accepted (converted by a concurrent call)");
         raced.code = "QUOTE_TRANSITION_REFUSED";
@@ -1326,7 +1326,7 @@ function create(opts) {
           "AND valid_until IS NOT NULL AND valid_until <= ?3",
           [asOf, r.rows[i].id, asOf],
         );
-        if (Number(claim.rowCount || 0) === 1) expired += 1;
+        if (b.sql.casWon(claim).won) expired += 1;
         else skipped += 1;
       }
       return { scanned: r.rows.length, expired: expired, skipped: skipped };
@@ -1361,7 +1361,7 @@ function create(opts) {
         "UPDATE quotes SET status = 'expired', updated_at = ?1 WHERE id = ?2 AND status = 'responded'",
         [asOf, quoteId],
       );
-      if (Number(claim.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(claim).won) {
         var raced = new Error("quotes.markExpired: refused — quote " + quoteId +
           " is no longer responded (settled by a concurrent call)");
         raced.code = "QUOTE_TRANSITION_REFUSED";

package/lib/referrals.js

@@ -409,7 +409,7 @@ function create(opts) {
           "WHERE id = ?3 AND signed_up_customer_id IS NULL",
           [ts, customerId, invitationId],
         );
-        if (Number(claim.rowCount || 0) === 0) continue;   // lost the claim — try the next pending row
+        if (!b.sql.casWon(claim).won) continue;
         var updated = await query(
           "SELECT id, referral_code_id, signed_up_customer_id, signed_up_at, reward_status " +
           "FROM referral_invitations WHERE id = ?1",
@@ -466,7 +466,7 @@ function create(opts) {
         "WHERE id = ?3 AND first_purchase_at IS NULL",
         [ts, orderId, inv.id],
       );
-      if (Number(claim.rowCount || 0) === 0) {
+      if (!b.sql.casWon(claim).won) {
         // Lost the claim — another concurrent call already recorded the
         // first qualifying purchase. Re-read so the loser reports the
         // winner's pinned values, not a stale snapshot.
@@ -554,7 +554,7 @@ function create(opts) {
         "WHERE id = ?2 AND reversed_at IS NULL",
         [ts, inv.id],
       );
-      if (Number(claim.rowCount || 0) === 0) return null;   // lost the claim
+      if (!b.sql.casWon(claim).won) return null;
       // Decrement the referrer's leaderboard count, floored at zero (the
       // `> 0` guard plus the schema CHECK keep it non-negative even if the
       // count drifted).

package/lib/reorder-reminders.js

@@ -536,7 +536,7 @@ function create(opts) {
           "WHERE id = ?2 AND status = 'active' AND next_remind_at = ?3",
           [nextRemindAt, enrollment.id, enrollment.next_remind_at],
         );
-        if (Number(claim.rowCount || 0) !== 1) {
+        if (!b.sql.casWon(claim).won) {
           // Another tick already advanced this row's cursor (or it was
           // cancelled between the SELECT and now) — it owns the send.
           // Skip without dispatching so the customer is nudged once.

package/lib/returns.js

@@ -348,7 +348,7 @@ function create(opts) {
         "updated_at = ?3 WHERE id = ?5 AND status = 'pending'",
         [input.refund_amount_minor, refundCurrency, ts, operatorNotes, rmaId],
       );
-      if (Number(upd.rowCount || 0) === 0) {
+      if (!b.sql.casWon(upd).won) {
         var current = await this._currentStatus(rmaId);
         _assertTransition(current, "approve");
         var raced = new Error("returns: approve already claimed for rma " + rmaId);
@@ -376,7 +376,7 @@ function create(opts) {
         "updated_at = ?3 WHERE id = ?4 AND status = 'approved'",
         [rxAt, operatorNotes, ts, rmaId],
       );
-      if (Number(upd.rowCount || 0) === 0) {
+      if (!b.sql.casWon(upd).won) {
         var current = await this._currentStatus(rmaId);
         _assertTransition(current, "markReceived");
         var raced = new Error("returns: markReceived already claimed for rma " + rmaId);
@@ -412,7 +412,7 @@ function create(opts) {
         "updated_at = ?3 WHERE id = ?4 AND status = 'received'",
         [rfAt, operatorNotes, ts, rmaId],
       );
-      if (Number(upd.rowCount || 0) === 0) {
+      if (!b.sql.casWon(upd).won) {
         // Either the RMA doesn't exist or it isn't in 'received'. Read the
         // current status to surface the right typed refusal (RMA_NOT_FOUND
         // vs RMA_TRANSITION_REFUSED) so the caller's mapping is unchanged.
@@ -444,7 +444,7 @@ function create(opts) {
         "updated_at = ?1 WHERE id = ?2 AND status = 'refunded'",
         [ts, rmaId],
       );
-      return Number(upd.rowCount || 0) === 1;
+      return b.sql.casWon(upd).won;
     },
 
     reject: async function (rmaId, input) {

package/lib/seller-signup.js

@@ -874,7 +874,7 @@ function create(opts) {
         "OR (status = 'approved' AND vendor_slug IS NULL AND approved_at = ?4))",
         [ts, approvedBy, applicationId, app.approved_at],
       );
-      if (Number(claim.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(claim).won) {
         var raced = new Error(
           "seller-signup.approveApplication: refused — application is not in an approvable state (concurrent approval)"
         );

package/lib/shipping-insurance.js

@@ -621,7 +621,7 @@ function create(opts) {
       "resolved_at = ?2, updated_at = ?2 WHERE id = ?3 AND status = 'filed'",
       [input.payout_minor, now, claimId],
     );
-    if (Number(approvedUpd.rowCount || 0) !== 1) {
+    if (!b.sql.casWon(approvedUpd).won) {
       var racedApprove = await _getClaimRow(claimId);
       throw new TypeError("shippingInsurance.markClaimApproved: claim " + claimId +
         " is " + (racedApprove ? racedApprove.status : "gone") +
@@ -658,7 +658,7 @@ function create(opts) {
       "resolved_at = ?2, updated_at = ?2 WHERE id = ?3 AND status = 'filed'",
       [denialReason, now, claimId],
     );
-    if (Number(deniedUpd.rowCount || 0) !== 1) {
+    if (!b.sql.casWon(deniedUpd).won) {
       var racedDeny = await _getClaimRow(claimId);
       throw new TypeError("shippingInsurance.markClaimDenied: claim " + claimId +
         " is " + (racedDeny ? racedDeny.status : "gone") +

package/lib/sms-dispatcher.js

@@ -880,7 +880,7 @@ function create(opts) {
             "failed_at = ?2 WHERE id = ?3 AND status = 'queued'",
             ["no_provider_at_dispatch", now, row.id],
           );
-          if (Number(lostFail.rowCount || 0) !== 1) continue;
+          if (!b.sql.casWon(lostFail).won) continue;
           advanced.push(await _getMessage(row.id));
           continue;
         }
@@ -892,7 +892,7 @@ function create(opts) {
           "sent_at = ?2 WHERE id = ?3 AND status = 'queued'",
           [providerSlug, now, row.id],
         );
-        if (Number(claimed.rowCount || 0) !== 1) continue;
+        if (!b.sql.casWon(claimed).won) continue;
         advanced.push(await _getMessage(row.id));
       }
       return advanced;

package/lib/split-shipments.js

@@ -616,7 +616,7 @@ function create(opts) {
         "WHERE id = ?2 AND status = 'proposed'",
         [ts, input.plan.id],
       );
-      if (Number(claim.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(claim).won) {
         // Lost the race (or the row was concurrently cancelled/executed
         // between the read above and the claim). Re-read so the message
         // reflects the row's actual current status.

package/lib/stock-alerts.js

@@ -623,7 +623,7 @@ function create(opts) {
             "WHERE id = ?3 AND notified_at IS NULL",
             [now, _hashUnsubToken(rowUnsubToken), row.id],
           );
-          if (!claim || Number(claim.rowCount) !== 1) continue;
+          if (!claim || !b.sql.casWon(claim).won) continue;
           row.notified_at = now;
           row.unsubscribe_token = rowUnsubToken;
           fired.push(row);

package/lib/stock-transfers.js

@@ -497,7 +497,7 @@ function create(opts) {
         "carrier = ?2, tracking_number = ?3 WHERE id = ?4 AND status = 'open'",
         [shippedAt, carrier, tracking, id],
       );
-      if (Number(claim.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(claim).won) {
         throw new TypeError("stock-transfers.markShipped: transfer " + id +
           " is no longer open (shipped by a concurrent call)");
       }
@@ -602,7 +602,7 @@ function create(opts) {
         "WHERE id = ?2 AND status IN ('shipped', 'in_transit')",
         [receivedAt, id],
       );
-      if (Number(claim.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(claim).won) {
         throw new TypeError("stock-transfers.markReceived: transfer " + id +
           " is no longer shipped or in_transit (received by a concurrent call)");
       }
@@ -667,7 +667,7 @@ function create(opts) {
         "WHERE id = ?2 AND status = 'received'",
         [ts, id],
       );
-      if (Number(claim.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(claim).won) {
         throw new TypeError("stock-transfers.reconcile: transfer " + id +
           " is no longer received (already reconciled by a concurrent call) — refusing to double-credit");
       }
@@ -756,7 +756,7 @@ function create(opts) {
         "WHERE id = ?2 AND status IN ('open', 'shipped', 'in_transit', 'received')",
         [reason, id],
       );
-      if (Number(claim.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(claim).won) {
         throw new TypeError("stock-transfers.markException: transfer " + id +
           " is no longer in a non-terminal state (settled by a concurrent call)");
       }

package/lib/subscription-gifts.js

@@ -476,7 +476,7 @@ function create(opts) {
       "WHERE id = ?2 AND status IN ('pending','delivered')",
       [now, existing.id],
     );
-    if (Number(claim.rowCount || 0) !== 1) {
+    if (!b.sql.casWon(claim).won) {
       // Lost the race — re-read so we surface the actual post-race status.
       var after = await _getRaw(existing.id);
       var raceErr = new Error(
@@ -557,7 +557,7 @@ function create(opts) {
       "WHERE id = ?3 AND status IN ('pending','delivered')",
       [ts, reason, giftId],
     );
-    if (Number(r.rowCount || 0) === 0) {
+    if (!b.sql.casWon(r).won) {
       var after = await _getRaw(giftId);
       var raceErr = new Error(
         "subscriptionGifts.cancelGift: gift status changed to '" +

package/lib/suggestion-box.js

@@ -602,7 +602,7 @@ function create(opts) {
       "VALUES (?1, ?2, ?3, ?4, ?5)",
       [voteId, sid, sessionHash, vote, ts],
     );
-    var changed = ins && (Number(ins.rowCount) === 1 || Number(ins.changes) === 1);
+    var changed = ins && b.sql.casWon(ins).won;
     if (!changed) {
       // Existing vote — surface "already voted" so the client can
       // render a UI confirmation rather than silently no-op.
@@ -768,7 +768,7 @@ function create(opts) {
       "WHERE id = ?3 AND status <> 'duplicate' AND archived_at IS NULL",
       [cid, ts, sid],
     );
-    if (Number(claim.rowCount || 0) !== 1) {
+    if (!b.sql.casWon(claim).won) {
       // Lost the race (a concurrent linkDuplicates already flipped the
       // source) — or it was archived between the read and the claim.
       // Re-read to distinguish: a row now in 'duplicate' is the

package/lib/webhooks.js

@@ -589,9 +589,16 @@ function create(opts) {
           "WHERE id = ?2 AND next_retry_at IS NOT NULL AND next_retry_at <= ?3 AND delivered_at IS NULL",
           [now + RETRY_CLAIM_LEASE_MS, row.id, now],
         );
-        var claimed = claim && (claim.rowCount != null ? claim.rowCount
-          : (claim.meta && claim.meta.changes != null ? claim.meta.changes : claim.changes));
-        if (Number(claimed || 0) !== 1) continue;   // lost the claim to a concurrent tick
+        // casWon inspects only top-level count fields (rowCount / changes /
+        // affectedRows). This module accepts an injected opts.query that may be
+        // a raw-D1 runner reporting the count under a nested meta.changes, so
+        // surface that as a top-level rowCount before the verdict — otherwise
+        // a successful claim with only meta.changes would be read as
+        // indeterminate and abort the tick, leaving the delivery merely leased.
+        if (claim && claim.rowCount == null && claim.meta && typeof claim.meta.changes === "number") {
+          claim.rowCount = claim.meta.changes;
+        }
+        if (!b.sql.casWon(claim).won) continue;   // lost the claim to a concurrent tick
         var d = await _attempt(row.id, endpoint, row.event_type, row.payload_json);
         attempted.push(d);
       }

package/lib/wishlist-alerts.js

@@ -650,7 +650,7 @@ function create(opts) {
       + ")",
       [id, customerId, policySlug, sku, now, dedupeSince, capActive, weekSince, capValue],
     );
-    return Number(r.rowCount || 0) === 1;
+    return b.sql.casWon(r).won;
   }
 
   // Walk every wishlist entry that has a non-null variant_id. Whole-

package/lib/wishlist-digest.js

@@ -929,7 +929,7 @@ function create(opts) {
         "WHERE id = ?2 AND status = 'active' AND next_dispatch_at = ?3",
         [nextDispatchAt, enrollment.id, observedNext],
       );
-      if (Number(claim.rowCount || 0) !== 1) {
+      if (!b.sql.casWon(claim).won) {
         // Another tick already claimed this period — don't double-send.
         continue;
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blamejs/blamejs-shop",
-  "version": "0.4.102",
+  "version": "0.4.104",
   "description": "Open-source framework built on blamejs. Vendored stack, zero npm runtime deps, PQC-first crypto, security-on by default.",
   "main": "lib/index.js",
   "scripts": {