Interface ReplayStore

Dedups raw inbound provider webhooks by provider event id, in a key space separate from the domain IdempotencyStore. The ingress claims the id only after verifying the delivery, so a forged delivery never burns it and a later genuine redelivery still processes.

interface ReplayStore {
    claim(
        eventId: string,
        options?: CallOptions,
    ): Promise<{ claimed: boolean }>;
}