@uniweb/api 0.2.12 → 0.3.0

package/README.md

@@ -17,9 +17,9 @@ Ask before you draw. This is a synchronous read of the site's own configuration,
 a probe — there is nothing to await.
 
 ```jsx
-import { isEnabled } from '@uniweb/api'
+import { isApiEnabled } from '@uniweb/kit'
 
-if (!isEnabled(website)) return <StaticVersion />
+if (!isApiEnabled()) return <StaticVersion />
 ```
 
 ⛔ **And when the answer is no, draw nothing** — not a disabled button, and not an

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@uniweb/api",
-  "version": "0.2.12",
+  "version": "0.3.0",
   "description": "The client for a Uniweb site's own backend — session, records, entities — imported by a foundation the way it imports @uniweb/kit.",
   "type": "module",
   "exports": {
@@ -34,7 +34,7 @@
     "node": ">=20.19"
   },
   "dependencies": {
-    "@uniweb/core": "^0.24.2"
+    "@uniweb/core": "^0.24.3"
   },
   "peerDependencies": {
     "react": "^19.0.0"

package/src/client.js

@@ -44,16 +44,34 @@ export function resolveBase(website) {
 }
 
 /**
- * Does this site have a backend the package can talk to?
+ * Does this site have an app backend — the `api` service?
  *
  * The question to ask before drawing a sign-in affordance or any control only a
  * backend can answer. False means: draw nothing, or the static alternative the
  * site already carries.
  *
- * @param {object} website
+ * ⭐ **The website argument is OPTIONAL and defaults to the active one**, so this
+ * is the same call as `@uniweb/kit`'s `isApiEnabled()` — one predicate per
+ * service, no arguments, the website resolved for you. Pass one explicitly only
+ * when you already hold it, or are working outside a render.
+ *
+ * ⛔ **THE DEFAULT IS NOT A CONVENIENCE, IT CLOSES A TRAP.** For one commit this
+ * took a REQUIRED website while every doc and template showed the no-argument
+ * spelling — so `import { isApiEnabled } from '@uniweb/api'` followed by
+ * `isApiEnabled()` resolved `undefined`, returned `false` forever, and drew no
+ * sign-in UI on a site that had a backend. Silent, and indistinguishable from a
+ * site with no backend: exactly the invisible absence this predicate exists to
+ * prevent. Caught in review the same day; pinned by `tests/enabled.test.js`.
+ *
+ * ⛔ **Renamed from `isEnabled` (2026-09-10).** The old name said nothing about
+ * its subject and collided with three unrelated `isEnabled`s in the framework —
+ * including the field `useSearch()` returns, which made `uniweb doctor` read a
+ * search control as gated when it was gated on this instead.
+ *
+ * @param {object} [website] - defaults to the active website
  * @returns {boolean}
  */
-export function isEnabled(website) {
+export function isApiEnabled(website = getUniweb()?.activeWebsite ?? null) {
   return resolveBase(website) !== null
 }
 

package/src/index.js

@@ -13,7 +13,7 @@
 export {
   SERVICE_NAME,
   resolveBase,
-  isEnabled,
+  isApiEnabled,
   probeSession,
   signIn,
   completeChallenge,

package/src/mock/index.js

@@ -38,11 +38,14 @@ import { DEFAULT_SEED } from './seed.js'
  *
  * @param {object} [options]
  * @param {object} [options.seed] - accounts, schemas and entities to start from
+ * @param {string} [options.signedInAs] - a seeded `username` to start signed in as, for a
+ *        demo whose subject is the signed-in view. Development-only by construction, since
+ *        this whole module is; throws if the username is not seeded.
  * @param {string} [options.prefix] - the path the API is mounted under (default `/api`)
  * @returns {{ fetch: (request: Request) => Promise<Response>, store: MockStore }}
  */
-export function createMockBackend({ seed = DEFAULT_SEED, prefix = '/api' } = {}) {
-  const store = new MockStore(seed)
+export function createMockBackend({ seed = DEFAULT_SEED, prefix = '/api', signedInAs = null } = {}) {
+  const store = new MockStore(seed, { signedInAs })
 
   const json = (status, body) =>
     new Response(body === undefined ? null : JSON.stringify(body), {

package/src/mock/store.js

@@ -33,8 +33,10 @@ export class MockStore {
    * @param {object[]} [seed.accounts] - `{ username, password, handle, roles?, units? }`
    * @param {object} [seed.schemas] - `{ '@/session': { creatable_by?, append_only? } }`
    * @param {object[]} [seed.entities] - `{ uuid?, model, data?, items? }`
+   * @param {object} [options]
+   * @param {string} [options.signedInAs] - start with this account already signed in.
    */
-  constructor(seed = {}) {
+  constructor(seed = {}, { signedInAs = null } = {}) {
     this.accounts = (seed.accounts || []).map((a) => ({
       uuid: a.uuid || nextId('acct'),
       username: a.username,
@@ -52,6 +54,26 @@ export class MockStore {
     /** The one session. A mock serves one developer, so one is the honest number. */
     this.session = null
     this.resets = new Map()
+
+    // ⭐ `signedInAs` — start already signed in, for a demo whose whole point is the
+    // signed-in view. Without it a visitor must type credentials before seeing
+    // anything, which for a lived-in demo is the experience itself.
+    //
+    // ⛔ THROWS on an unknown username rather than leaving the session null. A typo
+    // here produces "why am I not logged in?" — a question with no visible cause, in
+    // the one place where the answer is a string three lines away. The mock is
+    // development-only, so failing at construction costs nothing and a silent
+    // anonymous session costs an afternoon.
+    if (signedInAs) {
+      const account = this.accounts.find((a) => a.username === signedInAs)
+      if (!account) {
+        const known = this.accounts.map((a) => a.username).join(', ') || '(none)'
+        throw new Error(
+          `[uniweb/api mock] signedInAs: '${signedInAs}' is not a seeded account. Seeded: ${known}`
+        )
+      }
+      this.session = { account, at: now() }
+    }
   }
 
   seedEntity({ uuid, model, data = {}, items = [], owner = null }) {