@gopherium/react-auth 0.16.1 → 0.18.0

package/README.md

@@ -86,6 +86,28 @@ const password = usePasswordField({ length: 24, userInputs: [name, email] })
 <PasswordField password={password} generateFirst labelPosition="top" readOnly={sending} />
 ```
 
+`required` and `customValidity` take the shapes `@wordpress/ui`'s
+`ValidatedInputControl` takes. `required` adds "(Required)" to the
+label. A message shows under the field and its meter, in red with the
+warning icon, once the field is left, an `invalid` event fires or the
+form's `reportValidity()` runs. While it is `invalid` the field has
+`aria-invalid` and the browser holds the form back. When the app sets
+a message after a send, it calls the form's `reportValidity()` in an
+effect that runs after that render, so the message shows at once.
+
+An Add User form leaves `required` out, as WordPress's Add User shows
+no "(required)" by the password it always generates. It catches an
+empty password with `customValidity`, as it does for Email and Name.
+
+```tsx
+<PasswordField
+  password={password}
+  generateFirst
+  labelPosition="top"
+  customValidity={message === undefined ? undefined : { type: 'invalid', message }}
+/>
+```
+
 ## Users page
 
 The app holds the view in its address with godmin's `useListView`, as
@@ -110,8 +132,9 @@ const list = useListView<View>(usersListDefaults({ perPage: settings?.pageSize }
   size or `sizesFailed`.
 - A row the server marks `editable: false`, and the reader's own row,
   offer no action.
-- `errorMessages` gives words to the error codes only the app's
-  transport answers. The codes authkit answers carry WordPress's words.
+- `errorMessages` gives words to the error codes only the app answers,
+  from its server or its own transport. The codes authkit answers carry
+  WordPress's words.
 - `columns` adds a column after Role as data: a label and, for each
   account id, the text, the words a screen reader hears and an optional
   link element. Pass its id to `usersListDefaults` as well, to show it.
@@ -130,7 +153,15 @@ const list = useListView<View>(usersListDefaults({ perPage: settings?.pageSize }
   `@gopherium/gottext`, `@wordpress/dataviews`, `@wordpress/components`
   and `@wordpress/date`, and godmin's `Toaster` above the page, whose
   toasts show each name whole. The app loads the DataViews and
-  components stylesheets.
+  components stylesheets, and `@gopherium/react-auth/wpds/style.css`,
+  which clips a long email under the name and sizes `RoleSelect` on a
+  phone.
+- `/testing` loads by `import` only. `installTestEnvironment` puts
+  Node's `File` and `FormData` on the global, so under jsdom
+  `new FormData(form)`, which a React form action calls, and
+  `FileReader` on a `File` throw a `TypeError`, `XMLHttpRequest` sends
+  a form or a `File` as placeholder text, and a `File` does not mix
+  with a `Blob`.
 - The account step loads zxcvbn, about 400 kB gzipped, as its own chunk
   the first time it renders. Vite reports that chunk as larger than
   500 kB.

package/dist/admin/index.js

@@ -48,6 +48,16 @@ function typedError(refused, errors = roleErrors) {
     const typed = errors.get(refused.code ?? '');
     return typed && new typed(refused.message);
 }
+/**
+ * Returns the plain error naming a refused write's status, with the server's code when it sent one.
+ * @param refused - The code and message the response carries.
+ * @param failed - The name the error gives the write and the status the server answered.
+ * @returns The error.
+ */
+function plainError(refused, failed) {
+    const error = new Error(`${failed.write} failed with status ${failed.status}`);
+    return refused.code === undefined ? error : Object.assign(error, { code: refused.code });
+}
 /**
  * Returns the error a refused account write throws.
  * @param response - The refused HTTP response.
@@ -63,7 +73,7 @@ async function writeError(response, post) {
     if (response.status === 422) {
         return new ValidationError(refused.message, refused);
     }
-    return new Error(`${post.write} failed with status ${response.status}`);
+    return plainError(refused, { write: post.write, status: response.status });
 }
 /**
  * Posts an account write over REST and returns the body it answers.
@@ -166,7 +176,8 @@ async function restSetUserDisabled(id, disabled) {
     }
     if (!response.ok) {
         const refused = await refusalOf(response, __('the account could not be updated', DOMAIN));
-        throw typedError(refused, disableErrors) ?? new Error(`updating user failed with status ${response.status}`);
+        const failed = { write: 'updating user', status: response.status };
+        throw typedError(refused, disableErrors) ?? plainError(refused, failed);
     }
 }
 /**
@@ -187,7 +198,8 @@ async function restSetUserRole(id, role) {
         throw new UnauthorizedError('session expired');
     }
     const refused = await refusalOf(response, __('the account could not be updated', DOMAIN));
-    throw typedError(refused, roleChangeErrors) ?? new Error(`updating role failed with status ${response.status}`);
+    const failed = { write: 'updating role', status: response.status };
+    throw typedError(refused, roleChangeErrors) ?? plainError(refused, failed);
 }
 /**
  * Returns every user account.

package/dist/testing/index.d.ts

@@ -7,7 +7,7 @@ export { createdAccount, firstAccountClosed, firstAccountCodeRefused, firstAccou
 export { disabledOk, disabledRefused, resendDelivered, resendRefused, resendUndelivered, roleRefused, usersFailure, usersOk, } from './users.js';
 export declare const server: import("msw/node").SetupServer;
 /**
- * Installs the msw server lifecycle and DOM cleanup as vitest hooks.
+ * Installs Node's file classes, plus the msw server lifecycle and DOM cleanup as vitest hooks.
  */
 export declare function installTestEnvironment(): void;
 /**

package/dist/testing/index.js

@@ -1,4 +1,6 @@
 // SPDX-License-Identifier: Apache-2.0
+import { File as NodeFile } from 'node:buffer';
+import { setTimeout as realTimeout } from 'node:timers';
 import '@testing-library/jest-dom/vitest';
 import { cleanup } from '@testing-library/react';
 import { HttpResponse, http } from 'msw';
@@ -9,13 +11,28 @@ export { http, HttpResponse } from 'msw';
 export { createdAccount, firstAccountClosed, firstAccountCodeRefused, firstAccountOk, firstAccountRateLimited, firstAccountStarting, setupCodeClosed, setupCodeOk, setupCodeRateLimited, setupCodeRefused, setupCodeStarting, setupStatus, } from './setup.js';
 export { disabledOk, disabledRefused, resendDelivered, resendRefused, resendUndelivered, roleRefused, usersFailure, usersOk, } from './users.js';
 export const server = setupServer();
+/** NodeFormData is the FormData class Node's fetch sends a file from. */
+const { constructor: NodeFormData } = await new Response(new URLSearchParams()).formData();
+/** isNodeFile reports whether a value is one of Node's files. */
+const isNodeFile = Function.prototype[Symbol.hasInstance].bind(NodeFile);
 /**
- * Installs the msw server lifecycle and DOM cleanup as vitest hooks.
+ * Waits one event loop turn on the real clock.
+ * @returns A promise that settles after the turn.
+ */
+function realTurn() {
+    return new Promise((resolve) => realTimeout(resolve));
+}
+/**
+ * Installs Node's file classes, plus the msw server lifecycle and DOM cleanup as vitest hooks.
  */
 export function installTestEnvironment() {
-    beforeAll(() => server.listen({ onUnhandledRequest: 'error' }));
-    afterEach(() => {
+    Object.defineProperty(File, Symbol.hasInstance, { value: isNodeFile });
+    Object.assign(globalThis, { File: NodeFile, FormData: NodeFormData });
+    beforeAll(() => server.listen({ onUnhandledFrame: 'error' }));
+    afterEach(async () => {
         cleanup();
+        await realTurn();
+        await realTurn();
         server.resetHandlers();
     });
     afterAll(() => server.close());

package/dist/wpds/PasswordField.d.ts

@@ -1,7 +1,10 @@
-import type { ReactNode } from 'react';
+import { ControlWithError } from '@wordpress/ui';
+import type { ComponentProps, ReactNode } from 'react';
 import type { PasswordFieldState } from './usePasswordField.js';
 /** Where a label sits as DataForm names it: beside its field as the installer's, or above it as a godmin form's. */
 type LabelPosition = 'side' | 'top';
+/** The message about the password, in the shape the WPDS ValidatedInputControl takes it. */
+type CustomValidity = ComponentProps<typeof ControlWithError>['customValidity'];
 /**
  * Renders the Password row with its meter and show or hide button, then the weak password row when one is needed.
  * @param password - The password and its setters, from usePasswordField.
@@ -9,13 +12,17 @@ type LabelPosition = 'side' | 'top';
  * @param readOnly - Whether the password and its confirmation stay as they are, such as while the form is sent.
  * @param help - The line under the field, such as the installer's line asking to store the password.
  * @param labelPosition - Each label beside its field as the installer's, the default, or above it as a godmin form's.
+ * @param required - Marks the label (Required) and holds the form back while the field is empty.
+ * @param customValidity - The message under the field, an invalid one holding the form back.
  * @returns The password rows.
  */
-export declare function PasswordField({ password, generateFirst, readOnly, help, labelPosition, }: {
+export declare function PasswordField({ password, generateFirst, readOnly, help, labelPosition, required, customValidity, }: {
     password: PasswordFieldState;
     generateFirst?: boolean;
     readOnly?: boolean;
     help?: ReactNode;
     labelPosition?: LabelPosition;
+    required?: boolean;
+    customValidity?: CustomValidity;
 }): import("react").JSX.Element;
 export {};

package/dist/wpds/PasswordField.js

@@ -1,8 +1,8 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 // SPDX-License-Identifier: Apache-2.0
 import { __ } from '@wordpress/i18n';
-import { Button, CheckboxControl, Field, Input, Stack, Text } from '@wordpress/ui';
-import { useId, useState } from 'react';
+import { Button, CheckboxControl, ControlWithError, Field, Input, Stack, Text } from '@wordpress/ui';
+import { useId, useRef, useState } from 'react';
 import { DOMAIN } from '../domain.js';
 import { levelOf } from './strength.js';
 import { needsConfirmation, toneOf } from './usePasswordField.js';
@@ -35,6 +35,15 @@ function meterWord(strength) {
 function withTone(block, tone) {
     return tone === undefined ? block : `${block} ${block}--${tone}`;
 }
+/**
+ * Returns the classes of the meter box, as WordPress marks its own.
+ * @param strength - What the meter knows of the password.
+ * @returns The box class with the empty mark for an empty field, or with the level's tone once scored.
+ */
+function meterClass(strength) {
+    const box = withTone('gopherium-setup__meter', toneOf(strength));
+    return strength === 'empty' ? `${box} gopherium-setup__meter--empty` : box;
+}
 /**
  * Reports whether a key types a character, the only keys Caps Lock is read from.
  * @param event - The key the person pressed.
@@ -70,7 +79,7 @@ function MaskToggle({ masked, onToggle }) {
  * @returns The meter box element.
  */
 function MeterBox({ id, strength }) {
-    return (_jsx("div", { id: id, "aria-live": "polite", className: withTone('gopherium-setup__meter', toneOf(strength)), children: meterWord(strength) }));
+    return (_jsx("div", { id: id, "aria-live": "polite", className: meterClass(strength), children: meterWord(strength) }));
 }
 /**
  * Renders the line that warns while Caps Lock is on, empty while it is off.
@@ -81,23 +90,27 @@ function CapsLockLine({ on }) {
     return (_jsx("div", { "aria-live": "assertive", className: "gopherium-setup__caps", children: on ? (_jsxs(_Fragment, { children: [CAPS_ARROW, _jsx("span", { className: "gopherium-setup__caps-text", children: __('Caps lock is on.', DOMAIN) })] })) : null }));
 }
 /**
- * Renders the password row with the meter box, the Caps Lock line and the help line when it has one.
+ * Renders the label and the field column of the password row: the meter box, the Caps Lock line and the help line.
+ * @param label - The label, which ControlWithError marks (Required) when the field is required.
+ * @param required - Whether the field must hold a password, set by ControlWithError.
+ * @param invalid - Whether the message about the password says it is invalid.
+ * @param inputRef - Takes the password input, the element ControlWithError checks.
  * @param password - The password and its setters.
  * @param generateFirst - Whether the Generate password button comes before the field.
  * @param readOnly - Whether the password stays as it is.
  * @param help - The line under the field, if any.
  * @param layout - How the row lays out its label and field.
- * @returns The row element.
+ * @returns The label and the field column.
  */
-function PasswordRow({ password, generateFirst, readOnly, help, layout, }) {
+function PasswordCells({ label, required, invalid, inputRef, password, generateFirst, readOnly, help, layout, }) {
     const [capsLock, setCapsLock] = useState(false);
     const meterId = useId();
     const helpId = useId();
-    return (_jsxs(Field.Root, { className: layout.row, render: layout.root, children: [_jsx(Field.Label, { className: layout.label, children: __('Password', DOMAIN) }), _jsxs("div", { children: [generateFirst ? _jsx(GenerateButton, { disabled: readOnly, onGenerate: password.generate }) : null, _jsxs("div", { className: "gopherium-setup__password", children: [_jsxs("div", { className: "gopherium-setup__password-field", children: [_jsx(Input, { type: password.masked ? 'password' : 'text', className: withTone('gopherium-setup__input', toneOf(password.strength)), value: password.value, readOnly: readOnly, onChange: (event) => password.change(event.target.value), onKeyDown: (event) => {
+    return (_jsxs(_Fragment, { children: [_jsx(Field.Label, { className: layout.label, children: label }), _jsxs("div", { children: [generateFirst ? _jsx(GenerateButton, { disabled: readOnly, onGenerate: password.generate }) : null, _jsxs("div", { className: "gopherium-setup__password", children: [_jsxs("div", { className: "gopherium-setup__password-field", children: [_jsx(Input, { ref: inputRef, type: password.masked ? 'password' : 'text', className: withTone('gopherium-setup__input', toneOf(password.strength)), value: password.value, readOnly: readOnly, required: required, onChange: (event) => password.change(event.target.value), onKeyDown: (event) => {
                                             if (isPrintable(event)) {
                                                 setCapsLock(event.getModifierState('CapsLock'));
                                             }
-                                        }, autoComplete: "new-password", spellCheck: false, "aria-describedby": help === undefined ? meterId : `${meterId} ${helpId}` }), _jsx(MeterBox, { id: meterId, strength: password.strength }), _jsx(CapsLockLine, { on: capsLock })] }), _jsx(MaskToggle, { masked: password.masked, onToggle: () => password.mask(!password.masked) })] }), help === undefined ? null : _jsx(Text, { render: _jsx("p", { id: helpId, className: "gopherium-setup__help" }), children: help })] })] }));
+                                        }, autoComplete: "new-password", spellCheck: false, "aria-invalid": invalid || undefined, "aria-describedby": help === undefined ? meterId : `${meterId} ${helpId}` }), _jsx(MeterBox, { id: meterId, strength: password.strength }), _jsx(CapsLockLine, { on: capsLock })] }), _jsx(MaskToggle, { masked: password.masked, onToggle: () => password.mask(!password.masked) })] }), help === undefined ? null : _jsx(Text, { render: _jsx("p", { id: helpId, className: "gopherium-setup__help" }), children: help })] })] }));
 }
 /**
  * Renders the row asking to confirm the use of a weak password.
@@ -122,9 +135,12 @@ function ConfirmRow({ checked, readOnly, onCheckedChange, layout, }) {
  * @param readOnly - Whether the password and its confirmation stay as they are, such as while the form is sent.
  * @param help - The line under the field, such as the installer's line asking to store the password.
  * @param labelPosition - Each label beside its field as the installer's, the default, or above it as a godmin form's.
+ * @param required - Marks the label (Required) and holds the form back while the field is empty.
+ * @param customValidity - The message under the field, an invalid one holding the form back.
  * @returns The password rows.
  */
-export function PasswordField({ password, generateFirst = false, readOnly = false, help, labelPosition = 'side', }) {
+export function PasswordField({ password, generateFirst = false, readOnly = false, help, labelPosition = 'side', required, customValidity, }) {
     const layout = ROW_LAYOUTS[labelPosition];
-    return (_jsxs(_Fragment, { children: [_jsx(PasswordRow, { password: password, generateFirst: generateFirst, readOnly: readOnly, help: help, layout: layout }), needsConfirmation(password.strength) ? (_jsx(ConfirmRow, { checked: password.confirmed, readOnly: readOnly, onCheckedChange: password.confirm, layout: layout })) : null] }));
+    const input = useRef(null);
+    return (_jsxs(_Fragment, { children: [_jsx(ControlWithError, { required: required, customValidity: customValidity, getValidityTarget: () => input.current, render: _jsx(Field.Root, { className: layout.row, render: layout.root }), children: _jsx(PasswordCells, { label: __('Password', DOMAIN), invalid: customValidity?.type === 'invalid', inputRef: input, password: password, generateFirst: generateFirst, readOnly: readOnly, help: help, layout: layout }) }), needsConfirmation(password.strength) ? (_jsx(ConfirmRow, { checked: password.confirmed, readOnly: readOnly, onCheckedChange: password.confirm, layout: layout })) : null] }));
 }

package/dist/wpds/style.css

@@ -81,6 +81,7 @@
 .gopherium-setup__row {
 	display: grid;
 	grid-template-columns: 115px minmax(0, 1fr);
+	row-gap: 4px;
 	column-gap: 20px;
 	padding: 10px 20px 10px 0;
 }
@@ -96,6 +97,10 @@
 	font-size: var(--wpds-typography-font-size-lg);
 }
 
+.gopherium-setup__password + .gopherium-setup__help {
+	margin-top: var(--wpds-dimension-gap-sm);
+}
+
 .gopherium-setup .gopherium-setup__help {
 	margin: 4px 0 0;
 	color: var(--wpds-color-foreground-content-neutral-weak);
@@ -146,11 +151,12 @@
 .gopherium-setup__meter {
 	box-sizing: border-box;
 	width: 100%;
-	margin: -1px 0 5px;
+	margin: -1px 0 0;
 	padding: 3px 5px;
 	border: var(--wpds-border-width-xs) solid var(--wpds-color-stroke-surface-neutral);
 	border-radius: var(--wpds-border-radius-sm);
 	color: var(--wpds-color-foreground-content-neutral);
+	font-size: var(--wpds-typography-font-size-md);
 	font-weight: normal;
 	line-height: 1.3;
 	text-align: center;
@@ -181,23 +187,34 @@
 	opacity: 1;
 }
 
+.gopherium-setup__meter.gopherium-setup__meter--empty:not(.gopherium-setup__row *) {
+	position: absolute;
+	width: 1px;
+	height: 1px;
+	margin: -1px;
+	padding: 0;
+	border: 0;
+	overflow: hidden;
+	clip-path: inset(50%);
+}
+
 .gopherium-setup__input input {
 	font-family: var(--wpds-typography-font-family-mono);
 }
 
-.gopherium-setup__input--short:not(:focus-within) {
+.gopherium-setup__input--short:not(:focus-within, :has(:invalid[data-validity-visible])) {
 	border-color: var(--wpds-color-stroke-surface-error-strong);
 }
 
-.gopherium-setup__input--bad:not(:focus-within) {
+.gopherium-setup__input--bad:not(:focus-within, :has(:invalid[data-validity-visible])) {
 	border-color: var(--wpds-color-stroke-surface-error);
 }
 
-.gopherium-setup__input--good:not(:focus-within) {
+.gopherium-setup__input--good:not(:focus-within, :has(:invalid[data-validity-visible])) {
 	border-color: var(--wpds-color-stroke-surface-caution);
 }
 
-.gopherium-setup__input--strong:not(:focus-within) {
+.gopherium-setup__input--strong:not(:focus-within, :has(:invalid[data-validity-visible])) {
 	border-color: var(--wpds-color-stroke-surface-success);
 }
 
@@ -207,13 +224,14 @@
 
 .gopherium-setup__caps {
 	position: relative;
-	top: -8px;
+	top: -3px;
 	display: flex;
 	align-items: flex-start;
 	padding: 6px 10px;
 	border: var(--wpds-border-width-xs) solid var(--wpds-color-stroke-surface-caution);
 	background-color: var(--wpds-color-background-surface-caution-weak);
 	color: var(--wpds-color-foreground-content-neutral);
+	font-size: var(--wpds-typography-font-size-md);
 	line-height: 1.3;
 }
 
@@ -222,6 +240,18 @@
 	font-size: 14px;
 }
 
+.gopherium-setup__row .gopherium-setup__meter {
+	margin-bottom: 5px;
+}
+
+.gopherium-setup__row .gopherium-setup__caps {
+	top: -8px;
+}
+
+.gopherium-setup__meter--empty:not(.gopherium-setup__row *) + .gopherium-setup__caps {
+	top: -1px;
+}
+
 .gopherium-setup__caps-icon {
 	display: flex;
 	flex: none;
@@ -237,6 +267,28 @@
 	text-align: start;
 }
 
+.gopherium-user-field__email {
+	display: block;
+	max-width: 100%;
+	overflow: hidden;
+	text-overflow: ellipsis;
+	white-space: nowrap;
+}
+
+.gopherium-setup__row > p {
+	grid-column: -2 / -1;
+}
+
+.gopherium-role-select [role="combobox"] {
+	font-size: max(var(--wpds-typography-font-size-md), 16px);
+}
+
+@media (min-width: 600px) {
+	.gopherium-role-select [role="combobox"] {
+		font-size: var(--wpds-typography-font-size-md);
+	}
+}
+
 @media screen and (max-width: 782px) {
 	.gopherium-setup__row {
 		grid-template-columns: minmax(0, 1fr);

package/dist/wpds/users/RoleSelect.js

@@ -14,5 +14,5 @@ export function RoleSelect({ grantable, value, onChange, roleLabels, placeholder
         .reverse()
         .map((role) => ({ value: role, label: roleLabelOf(role, roleLabels) }));
     const items = placeholder === undefined ? roles : [{ value: null, label: placeholder }, ...roles];
-    return (_jsx(SelectControl, { label: __('Role', DOMAIN), items: items, value: items.find((item) => (item.value ?? '') === value) ?? null, placeholder: placeholder, onValueChange: (item) => onChange(item?.value ?? '') }));
+    return (_jsx(SelectControl, { className: "gopherium-role-select", label: __('Role', DOMAIN), items: items, value: items.find((item) => (item.value ?? '') === value) ?? null, placeholder: placeholder, onValueChange: (item) => onChange(item?.value ?? '') }));
 }

package/dist/wpds/users/defaults.js

@@ -6,8 +6,8 @@
  */
 export function usersListDefaults({ perPage, columns = [] } = {}) {
     return {
-        fields: ['status', 'role', ...columns, 'created'],
-        phoneFields: ['status', 'role', 'created'],
+        fields: ['status', 'role', ...columns],
+        phoneFields: ['status', 'role'],
         titleField: 'name',
         descriptionField: 'email',
         mediaField: 'avatar',

package/dist/wpds/users/fields.js

@@ -1,9 +1,9 @@
-import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 // SPDX-License-Identifier: Apache-2.0
 import { InitialsAvatar } from '@gopherium/godmin';
 import { listDate } from '@gopherium/godmin/dates';
 import { __, _x } from '@wordpress/i18n';
-import { Badge, VisuallyHidden } from '@wordpress/ui';
+import { Badge, Tooltip, VisuallyHidden } from '@wordpress/ui';
 import { cloneElement } from 'react';
 import { DOMAIN } from '../../domain.js';
 import { roleCellOf, roleLabelOf } from './words.js';
@@ -55,11 +55,18 @@ function nameField() {
     };
 }
 /**
- * Returns the email field, the line under the name.
+ * Returns the email field, the line under the name, clipped with an ellipsis at the column edge, whole in a tooltip.
  * @returns The field.
  */
 function emailField() {
-    return { id: 'email', label: __('Email', DOMAIN), type: 'text', enableGlobalSearch: true, filterBy: false };
+    return {
+        id: 'email',
+        label: __('Email', DOMAIN),
+        type: 'text',
+        enableGlobalSearch: true,
+        filterBy: false,
+        render: ({ item }) => (_jsxs(Tooltip.Root, { children: [_jsx(Tooltip.Trigger, { render: _jsx("span", { className: "gopherium-user-field__email", children: item.email }) }), _jsx(Tooltip.Popup, { children: item.email })] })),
+    };
 }
 /**
  * Returns the avatar field, the picture the server sends or the initial of the name.

package/dist/wpds/users/words.js

@@ -42,7 +42,7 @@ function codeMessages() {
     };
 }
 /**
- * Returns the code an error carries, as every typed error of the admin calls does.
+ * Returns the code an error carries, as every typed admin error does, and a plain write error when the server sent one.
  * @param error - What a write failed with.
  * @returns The code, none for an error carrying no code.
  */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gopherium/react-auth",
-  "version": "0.16.1",
+  "version": "0.18.0",
   "description": "Session authentication for React apps backed by gouncer's authkit.",
   "license": "Apache-2.0",
   "type": "module",
@@ -64,9 +64,9 @@
     "@wordpress/icons": ">=18.0.0 <19.0.0",
     "@wordpress/theme": ">=2.3.0 <3.0.0",
     "@wordpress/ui": ">=0.24.0 <0.25.0",
-    "msw": "^2.15.0",
+    "msw": "^3.0.0",
     "react": "^19.2.7",
-    "vitest": "^4.1.10 || ^5.0.0"
+    "vitest": "^5.0.4"
   },
   "peerDependenciesMeta": {
     "@gopherium/godmin": {
@@ -115,10 +115,11 @@
     "@testing-library/react": "^16.3.2",
     "@testing-library/user-event": "^14.6.1",
     "@types/gettext-parser": "9.0.0",
+    "@types/node": "^26.1.1",
     "@types/react": "^19.2.17",
     "@types/zxcvbn": "4.4.5",
     "@vitejs/plugin-react": "^6.0.3",
-    "@vitest/coverage-v8": "^5.0.3",
+    "@vitest/coverage-v8": "^5.0.5",
     "@wordpress/a11y": "4.57.0",
     "@wordpress/components": "42.0.0",
     "@wordpress/dataviews": "20.0.0",
@@ -135,13 +136,13 @@
     "gettext-extractor": "4.0.6",
     "gettext-parser": "9.1.1",
     "jsdom": "^30.1.2",
-    "msw": "^2.15.0",
+    "msw": "^3.0.3",
     "oxlint": "^1.71.0",
     "react": "^19.2.7",
     "react-dom": "^19.2.7",
     "typescript": "~6.0.2",
     "typescript-eslint": "^8.46.4",
     "vite": "^8.1.4",
-    "vitest": "^5.0.3"
+    "vitest": "^5.0.5"
   }
 }