@stonecrop/casl-middleware 0.11.7 → 0.11.9

package/dist/casl-middleware.tsbuildinfo

@@ -1 +1 @@
-{"version":"5.9.3"}
+{"version":"6.0.3"}

package/dist/src/middleware/ability.d.ts

@@ -20,7 +20,7 @@ export type AbilityBuilderFunction = (user?: Context['user']) => Promise<AppAbil
 /**
  * Default ability builder - only provides minimal public access
  */
-export declare const defaultAbilityBuilder: (user?: Context["user"]) => AppAbility;
+export declare const defaultAbilityBuilder: (_user?: Context["user"]) => AppAbility;
 /**
  * Create ability using a provided builder function
  * @param user - User information for building the ability

package/dist/src/middleware/ability.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ability.d.ts","sourceRoot":"","sources":["../../../src/middleware/ability.ts"],"names":[],"mappings":"AAAA,OAAO,EAEN,WAAW,EAIX,MAAM,eAAe,CAAA;AAEtB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,UAAU,CAAA;AAEvC;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,GAAI,QAAQ,GAAG,KAAG,MAc/C,CAAA;AAwBD;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAA;AAExD;;;GAGG;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,UAAU,CAAC,GAAG,UAAU,CAAA;AAIjG;;GAEG;AACH,eAAO,MAAM,qBAAqB,GAAI,OAAO,OAAO,CAAC,MAAM,CAAC,KAAG,UAU9D,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,aAAa,GACzB,OAAO,OAAO,CAAC,MAAM,CAAC,EACtB,YAAW,sBAA8C,KACvD,OAAO,CAAC,UAAU,CAEpB,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,4BAA4B,GACxC,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,EAAE,CAAC,KAC7C,sBAwBF,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,+BAA+B,GAAI,QAAQ;IACvD,KAAK,EAAE,MAAM,CACZ,MAAM,EACN,KAAK,CAAC;QACL,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;QACzB,OAAO,EAAE,MAAM,CAAA;QACf,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;QAC1B,UAAU,CAAC,EAAE,GAAG,CAAA;QAChB,QAAQ,CAAC,EAAE,OAAO,CAAA;KAClB,CAAC,CACF,CAAA;IACD,YAAY,CAAC,EAAE,KAAK,CAAC;QACpB,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;QACzB,OAAO,EAAE,MAAM,CAAA;QACf,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;QAC1B,UAAU,CAAC,EAAE,GAAG,CAAA;KAChB,CAAC,CAAA;CACF,KAAG,sBA0CH,CAAA;AAED,eAAO,MAAM,oBAAoB,GAAI,CAAC,SAAS,WAAW,EACzD,WAAW,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KACtC,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAEhC,CAAA"}
+{"version":3,"file":"ability.d.ts","sourceRoot":"","sources":["../../../src/middleware/ability.ts"],"names":[],"mappings":"AAAA,OAAO,EAEN,WAAW,EAIX,MAAM,eAAe,CAAA;AAEtB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,UAAU,CAAA;AAEvC;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,GAAI,QAAQ,GAAG,KAAG,MAc/C,CAAA;AAwBD;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAA;AAExD;;;GAGG;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,UAAU,CAAC,GAAG,UAAU,CAAA;AAIjG;;GAEG;AACH,eAAO,MAAM,qBAAqB,GAAI,QAAQ,OAAO,CAAC,MAAM,CAAC,KAAG,UAU/D,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,aAAa,GACzB,OAAO,OAAO,CAAC,MAAM,CAAC,EACtB,YAAW,sBAA8C,KACvD,OAAO,CAAC,UAAU,CAEpB,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,4BAA4B,GACxC,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,EAAE,CAAC,KAC7C,sBAwBF,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,+BAA+B,GAAI,QAAQ;IACvD,KAAK,EAAE,MAAM,CACZ,MAAM,EACN,KAAK,CAAC;QACL,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;QACzB,OAAO,EAAE,MAAM,CAAA;QACf,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;QAC1B,UAAU,CAAC,EAAE,GAAG,CAAA;QAChB,QAAQ,CAAC,EAAE,OAAO,CAAA;KAClB,CAAC,CACF,CAAA;IACD,YAAY,CAAC,EAAE,KAAK,CAAC;QACpB,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;QACzB,OAAO,EAAE,MAAM,CAAA;QACf,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;QAC1B,UAAU,CAAC,EAAE,GAAG,CAAA;KAChB,CAAC,CAAA;CACF,KAAG,sBA0CH,CAAA;AAED,eAAO,MAAM,oBAAoB,GAAI,CAAC,SAAS,WAAW,EACzD,WAAW,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KACtC,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAEhC,CAAA"}

package/dist/{middleware → src/middleware}/ability.js

@@ -45,7 +45,7 @@ const Ability = PureAbility;
 /**
  * Default ability builder - only provides minimal public access
  */
-export const defaultAbilityBuilder = (user) => {
+export const defaultAbilityBuilder = (_user) => {
     const { can, build } = new AbilityBuilder(Ability);
     can('read', 'Query');
     return build({

package/dist/src/middleware/jwt.d.ts

@@ -65,7 +65,7 @@ export declare const createJWT: (user: User, config: {
 /**
  * Integration with CASL ability builder
  */
-export declare const createJWTAbilityBuilder: (config?: JWTConfig) => (user?: User) => Promise<import("./ability").AppAbility>;
+export declare const createJWTAbilityBuilder: (_config?: JWTConfig) => (user?: User) => Promise<import("./ability").AppAbility>;
 /**
  * Postgraphile-specific JWT plugin
  */
@@ -74,7 +74,7 @@ export declare const createPostgraphileJWTPlugin: (config: JWTConfig) => {
     version: string;
     grafast: {
         hooks: {
-            context(ctx: any, build: any): Promise<any>;
+            context(ctx: any, _build: any): Promise<any>;
         };
     };
 };

package/dist/src/middleware/jwt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../../../src/middleware/jwt.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,cAAc,CAAA;AAE9B,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAA;AAG7C,MAAM,WAAW,SAAS;IACzB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,GAAG,CAAC,SAAS,EAAE,CAAA;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,KAAK,IAAI,GAAG,SAAS,CAAA;IAChD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,UAAW,SAAQ,GAAG,CAAC,UAAU;IACjD,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAChB,WAAW,CAAC,EAAE,KAAK,CAAC;QACnB,MAAM,EAAE,MAAM,CAAA;QACd,OAAO,EAAE,MAAM,CAAA;QACf,UAAU,CAAC,EAAE,GAAG,CAAA;KAChB,CAAC,CAAA;IACF,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;CAClB;AAeD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,eAAO,MAAM,mBAAmB,GAAI,SAAQ,SAAc,MAoB3C,SAAS,OAAO,EAAE,MAAM,MAAM,OAAO,CAAC,GAAG,CAAC,iBAoExD,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,SAAS,GACrB,MAAM,IAAI,EACV,QAAQ;IACP,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;CACtC,KACC,MAiBF,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,uBAAuB,GAAI,SAAQ,SAAc,MAC/C,OAAO,IAAI,4CAsBzB,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,2BAA2B,GAAI,QAAQ,SAAS;;;;;yBAQtC,GAAG,SAAS,GAAG;;;CAwBrC,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,uBAAuB,GAAI,QAAQ,SAAS,MAI1C,KAAK,GAAG,EAAE,KAAK,GAAG,EAAE,MAAM,GAAG,kBA4B3C,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,iBAAiB;IAC7B;;OAEG;4BAEI,IAAI,UACF;QACP,YAAY,EAAE,MAAM,CAAA;QACpB,aAAa,EAAE,MAAM,CAAA;QACrB,eAAe,CAAC,EAAE,MAAM,CAAA;QACxB,gBAAgB,CAAC,EAAE,MAAM,CAAA;KACzB;;;;IAkCF;;OAEG;uCAEY,MAAM,UACZ;QACP,YAAY,EAAE,MAAM,CAAA;QACpB,aAAa,EAAE,MAAM,CAAA;QACrB,WAAW,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;QACjD,eAAe,CAAC,EAAE,MAAM,CAAA;KACxB;;;;CAyCF,CAAA"}
+{"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../../../src/middleware/jwt.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,cAAc,CAAA;AAE9B,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAA;AAG7C,MAAM,WAAW,SAAS;IACzB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,GAAG,CAAC,SAAS,EAAE,CAAA;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,KAAK,IAAI,GAAG,SAAS,CAAA;IAChD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,UAAW,SAAQ,GAAG,CAAC,UAAU;IACjD,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAChB,WAAW,CAAC,EAAE,KAAK,CAAC;QACnB,MAAM,EAAE,MAAM,CAAA;QACd,OAAO,EAAE,MAAM,CAAA;QACf,UAAU,CAAC,EAAE,GAAG,CAAA;KAChB,CAAC,CAAA;IACF,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;CAClB;AAeD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,eAAO,MAAM,mBAAmB,GAAI,SAAQ,SAAc,MAoB3C,SAAS,OAAO,EAAE,MAAM,MAAM,OAAO,CAAC,GAAG,CAAC,iBAoExD,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,SAAS,GACrB,MAAM,IAAI,EACV,QAAQ;IACP,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;CACtC,KACC,MAiBF,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,uBAAuB,GAAI,UAAS,SAAc,MAChD,OAAO,IAAI,4CAsBzB,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,2BAA2B,GAAI,QAAQ,SAAS;;;;;yBAQtC,GAAG,UAAU,GAAG;;;CAwBtC,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,uBAAuB,GAAI,QAAQ,SAAS,MAI1C,KAAK,GAAG,EAAE,KAAK,GAAG,EAAE,MAAM,GAAG,kBA4B3C,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,iBAAiB;IAC7B;;OAEG;4BAEI,IAAI,UACF;QACP,YAAY,EAAE,MAAM,CAAA;QACpB,aAAa,EAAE,MAAM,CAAA;QACrB,eAAe,CAAC,EAAE,MAAM,CAAA;QACxB,gBAAgB,CAAC,EAAE,MAAM,CAAA;KACzB;;;;IAkCF;;OAEG;uCAEY,MAAM,UACZ;QACP,YAAY,EAAE,MAAM,CAAA;QACpB,aAAa,EAAE,MAAM,CAAA;QACrB,WAAW,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;QACjD,eAAe,CAAC,EAAE,MAAM,CAAA;KACxB;;;;CAyCF,CAAA"}

package/dist/{middleware → src/middleware}/jwt.js

@@ -96,13 +96,13 @@ export const createJWTMiddleware = (config = {}) => {
             }
             // Re-throw with more specific error messages
             if (error.name === 'TokenExpiredError') {
-                throw new Error('Token has expired');
+                throw new Error('Token has expired', { cause: error });
             }
             else if (error.name === 'JsonWebTokenError') {
-                throw new Error('Invalid token');
+                throw new Error('Invalid token', { cause: error });
             }
             else if (error.name === 'NotBeforeError') {
-                throw new Error('Token not active yet');
+                throw new Error('Token not active yet', { cause: error });
             }
             throw error;
         }
@@ -131,7 +131,7 @@ export const createJWT = (user, config) => {
 /**
  * Integration with CASL ability builder
  */
-export const createJWTAbilityBuilder = (config = {}) => {
+export const createJWTAbilityBuilder = (_config = {}) => {
     return async (user) => {
         // If user has direct permissions in JWT, use those
         const jwtPermissions = user?.permissions;
@@ -162,7 +162,7 @@ export const createPostgraphileJWTPlugin = (config) => {
         // Hook into Postgraphile's context building
         grafast: {
             hooks: {
-                async context(ctx, build) {
+                async context(ctx, _build) {
                     const middleware = createJWTMiddleware(config);
                     // Create a simple context object that the middleware can work with
                     const context = {
@@ -283,7 +283,7 @@ export const refreshTokenUtils = {
         }
         catch (error) {
             if (error.name === 'TokenExpiredError') {
-                throw new Error('Refresh token expired');
+                throw new Error('Refresh token expired', { cause: error });
             }
             throw error;
         }

package/dist/src/middleware/yoga.d.ts

@@ -10,6 +10,6 @@ export declare const yogaCaslPlugin: Plugin<Context>;
  * @public
  */
 export declare const createYogaPlugin: (options?: MiddlewareOptions) => {
-    onExecute: ({ args }: any) => Promise<void>;
+    onExecute: (_: any) => Promise<void>;
 };
 //# sourceMappingURL=yoga.d.ts.map

package/dist/src/middleware/yoga.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"yoga.d.ts","sourceRoot":"","sources":["../../../src/middleware/yoga.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAI1C,OAAO,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAA;AAO1D,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,OAAO,CAO1C,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,GAAI,UAAS,iBAAsB;0BAIlC,GAAG;CAMhC,CAAA"}
+{"version":3,"file":"yoga.d.ts","sourceRoot":"","sources":["../../../src/middleware/yoga.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAI1C,OAAO,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAA;AAO1D,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,OAAO,CAO1C,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,GAAI,UAAS,iBAAsB;mBAIzC,GAAG;CAMzB,CAAA"}

package/dist/{middleware → src/middleware}/yoga.js

@@ -5,7 +5,7 @@ const getLoggedInUser = () => {
     return { id: '1', roles: ['editor'] };
 };
 export const yogaCaslPlugin = {
-    onContextBuilding: async ({ context, extendContext }) => {
+    onContextBuilding: async ({ extendContext }) => {
         // Make this async
         const user = getLoggedInUser();
         const ability = await createAbility(user); // Await here
@@ -21,9 +21,9 @@ export const yogaCaslPlugin = {
  * @public
  */
 export const createYogaPlugin = (options = {}) => {
-    const middleware = createCaslMiddleware(options);
+    const _middleware = createCaslMiddleware(options);
     return {
-        onExecute: async ({ args }) => {
+        onExecute: async (_) => {
             // TODO: Implement Yoga plugin
             // This would integrate with GraphQL Yoga's plugin system
             console.log('Yoga plugin not yet implemented');

package/dist/tsdoc-metadata.json

@@ -5,7 +5,7 @@
   "toolPackages": [
     {
       "packageName": "@microsoft/api-extractor",
-      "packageVersion": "7.57.0"
+      "packageVersion": "7.58.7"
     }
   ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stonecrop/casl-middleware",
-  "version": "0.11.7",
+  "version": "0.11.9",
   "license": "MIT",
   "type": "module",
   "author": {
@@ -31,7 +31,7 @@
   "sideEffects": false,
   "dependencies": {
     "@casl/ability": "^6.8.0",
-    "graphql": "^16.12.0",
+    "graphql": "^16.13.2",
     "graphql-tag": "^2.12.6",
     "jsonwebtoken": "^9.0.3"
   },
@@ -39,23 +39,27 @@
     "@graphql-tools/merge": "^9.1.7",
     "@graphql-tools/schema": "^10.0.31",
     "@graphql-tools/utils": "^11.0.0",
-    "@rushstack/heft": "^1.2.0",
-    "@types/node": "^22.19.5",
-    "@vitest/coverage-istanbul": "^4.0.18",
-    "eslint": "^9.39.2",
+    "@rushstack/heft": "^1.2.17",
+    "@types/node": "^22.19.17",
+    "@vitest/coverage-istanbul": "^4.1.5",
+    "@eslint/js": "^10.0.1",
+    "eslint": "^10.3.0",
+    "eslint-config-prettier": "^10.1.8",
+    "globals": "^17.6.0",
+    "typescript-eslint": "^8.59.1",
     "graphql-middleware": "^6.1.35",
     "graphql-yoga": "^5.18.0",
-    "jsdom": "^28.1.0",
-    "postgraphile": "^5.0.0-rc.7",
-    "typescript": "^5.9.3",
-    "vite": "^7.3.1",
-    "vitest": "^4.0.18",
+    "jsdom": "^29.1.1",
+    "postgraphile": "^5.0.1",
+    "typescript": "^6.0.3",
+    "vite": "^7.3.2",
+    "vitest": "^4.1.5",
     "@types/jsonwebtoken": "~9.0.10",
     "stonecrop-rig": "0.7.0"
   },
   "peerDependencies": {
     "graphql-yoga": "^5.18.0",
-    "postgraphile": "^5.0.0-rc.7"
+    "postgraphile": "^5.0.1"
   },
   "description": "CASL authorization middleware for GraphQL servers",
   "keywords": [

package/src/middleware/ability.ts

@@ -69,7 +69,7 @@ const Ability = PureAbility as AbilityClass<AppAbility>
 /**
  * Default ability builder - only provides minimal public access
  */
-export const defaultAbilityBuilder = (user?: Context['user']): AppAbility => {
+export const defaultAbilityBuilder = (_user?: Context['user']): AppAbility => {
 	const { can, build } = new AbilityBuilder<AppAbility>(Ability)
 
 	can('read', 'Query')

package/src/middleware/jwt.ts

@@ -147,11 +147,11 @@ export const createJWTMiddleware = (config: JWTConfig = {}) => {
 
 			// Re-throw with more specific error messages
 			if (error.name === 'TokenExpiredError') {
-				throw new Error('Token has expired')
+				throw new Error('Token has expired', { cause: error })
 			} else if (error.name === 'JsonWebTokenError') {
-				throw new Error('Invalid token')
+				throw new Error('Invalid token', { cause: error })
 			} else if (error.name === 'NotBeforeError') {
-				throw new Error('Token not active yet')
+				throw new Error('Token not active yet', { cause: error })
 			}
 
 			throw error
@@ -193,7 +193,7 @@ export const createJWT = (
 /**
  * Integration with CASL ability builder
  */
-export const createJWTAbilityBuilder = (config: JWTConfig = {}) => {
+export const createJWTAbilityBuilder = (_config: JWTConfig = {}) => {
 	return async (user?: User) => {
 		// If user has direct permissions in JWT, use those
 		const jwtPermissions = (user as any)?.permissions
@@ -229,7 +229,7 @@ export const createPostgraphileJWTPlugin = (config: JWTConfig) => {
 		// Hook into Postgraphile's context building
 		grafast: {
 			hooks: {
-				async context(ctx: any, build: any) {
+				async context(ctx: any, _build: any) {
 					const middleware = createJWTMiddleware(config)
 
 					// Create a simple context object that the middleware can work with
@@ -386,7 +386,7 @@ export const refreshTokenUtils = {
 			return { accessToken, user }
 		} catch (error: any) {
 			if (error.name === 'TokenExpiredError') {
-				throw new Error('Refresh token expired')
+				throw new Error('Refresh token expired', { cause: error })
 			}
 			throw error
 		}

package/src/middleware/postgraphile.ts

@@ -67,7 +67,7 @@ export const pglCaslPlugin: GraphileConfig.Plugin = extendSchema(build => {
 
 						return sideEffect(
 							[$userId as ExecutableStep, $roles as ExecutableStep],
-							async ([userId, roles]: [string, string[]]) => {
+							async ([userId, roles]: readonly [string, string[]]) => {
 								// Make this async
 								try {
 									const ability = await createAbility({ id: userId, roles }) // Await here

package/src/middleware/yoga.ts

@@ -10,7 +10,7 @@ const getLoggedInUser = () => {
 }
 
 export const yogaCaslPlugin: Plugin<Context> = {
-	onContextBuilding: async ({ context, extendContext }) => {
+	onContextBuilding: async ({ extendContext }) => {
 		// Make this async
 		const user = getLoggedInUser()
 		const ability = await createAbility(user) // Await here
@@ -27,10 +27,10 @@ export const yogaCaslPlugin: Plugin<Context> = {
  * @public
  */
 export const createYogaPlugin = (options: MiddlewareOptions = {}) => {
-	const middleware = createCaslMiddleware(options)
+	const _middleware = createCaslMiddleware(options)
 
 	return {
-		onExecute: async ({ args }: any) => {
+		onExecute: async (_: any) => {
 			// TODO: Implement Yoga plugin
 			// This would integrate with GraphQL Yoga's plugin system
 			console.log('Yoga plugin not yet implemented')