Locks and returns every row of an order, any status; the refund path partitions them.
Optionaloptions: CallOptionsLocks and returns up to limit of one seller's pending rows — positive shares first, then
recovery rows, each oldest first. Positives lead so a deep recovery backlog can never crowd
every share out of the claim window and stall the seller's drain.
Optionaloptions: CallOptionsFlips pending rows terminal, recording the settling posting as settledTxnId.
Optionaloptions: CallOptionsFlips pending rows terminal, recording the settling posting as settledTxnId.
Optionaloptions: CallOptionsThe seller's pending rows summed, negatives included. Negative means refund debt the drain has not yet recovered; payout admission subtracts it from payable earned credit.
Optionaloptions: CallOptionsDistinct sellers with pending rows, up to limit — the drain's work list.
Optionaloptions: CallOptionsJoins the operation's transaction. A duplicate (orderId, sellerId, seq) is a fault, never an overwrite — recovery rows take fresh seqs instead.
Optionaloptions: CallOptionsThe pending backlog: the positive pending rows' total (equal to the ACCRUAL shards' summed balance at any quiescent point — the prover check) and the oldest pending row's age.
Optionaloptions: CallOptions
The parked-share ledger behind the accrual split.
putjoins the operation's transaction; the claim methods take row locks with commit-release semantics, so a row is claimed by exactly one of a refund and a drain and whichever commits first flips the status the other respects.