Forgets everything (the visitor ended the call and chose to start over, or the credential is spent).
The remembered bundle, or null when there is none, it is malformed, or it has expired (and then it is cleared).
The JWT to reuse, or null when none is remembered or it has expired.
Remembers the held JWT, keeping whatever else is remembered.
Remembers the session this tab just ran, keeping the JWT.
Distinguishes widgets on one origin (the api-url plus the widget key or agent), so two deployments never read each other's bundle.