acai-demo-sdk

Shared Try Demo feature package: session-end redirect claim, expiry polling, persona switching against auth-sso-server's /demo/* endpoints, and the DemoModeBar UI. Each consuming app supplies its own cookie adapter and post-switch navigation.

Also carries the backend clone/teardown contract types (acai-demo-sdk/contracts) — type-only, no React dependency, safe to import from a NestJS backend.

0.3.0 (breaking for 0.x consumers)

• The demo JWT now lives in its own cookie, demo_accessToken (DEMO_ACCESS_TOKEN_COOKIE), never the real-login accessToken. Write/clear it only through this package (writeDemoCookie, clearDemoState, endDemoSessionRedirect); read the token an API client should send with getActiveAccessToken() (demo first, then real). Proxies/middleware use pickAccessToken() from acai-demo-sdk/middleware-token.
• POST /demo/start returns a pollToken; every GET /demo/status/:id sends it as x-demo-poll-token. It lives in sessionStorage only and reaches /demo-entry in the URL fragment (consumeDemoEntryFragment()).
• useDemoSession keeps callbacks in refs, applies a server-time offset, re-confirms expiry against /status (the server is the authority), backs off on 429/5xx (reconnecting), and exposes isSwitching / reconnecting / error. DemoModeBar takes switching / reconnecting.
• acai-demo-sdk/env: assertProductionUrl() for next.config so a production build never ships a localhost SSO URL.