Recommended states
The exact fulfillment transition is merchant-specific, but every transition should be idempotent. Store the
intentId as soon as the first correlated webhook arrives and retain the merchant’s own merchantOrderId throughout.
Create a new checkout session for a retry or expired session rather than reusing browser credentials outside their lifetime.