// Body of an IIFE — caller defines `payload` from JSON.parse(<...>)
// before invoking this snippet. Restores localStorage + sessionStorage
// only; cookies are restored by the host-side cookie store API, which
// (unlike document.cookie) sees HttpOnly entries.
if
if
return 'ok';