From 01e5a08478c8f583271d95a6914703f25a8f2889 Mon Sep 17 00:00:00 2001
From: siisee11 <siisee111@gmail.com>
Date: Fri, 26 Jun 2026 11:11:58 +0900
Subject: [PATCH] fix(server): align organization access control type

---
 packages/server/src/auth.ts | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/packages/server/src/auth.ts b/packages/server/src/auth.ts
index c838d8a3..c472794b 100644
--- a/packages/server/src/auth.ts
+++ b/packages/server/src/auth.ts
@@ -47,6 +47,15 @@ const AUTH_SESSION_UPDATE_AGE_SECONDS =
 const AUTH_SESSION_EXPIRES_IN_SECONDS =
   AUTH_SESSION_EXPIRES_IN_DAYS * SECONDS_PER_DAY;
 const AUTH_SESSION_COOKIE_CACHE_MAX_AGE_SECONDS = 15 * SECONDS_PER_MINUTE;
+type OrganizationPluginOptions = NonNullable<
+  Parameters<typeof organization>[0]
+>;
+type OrganizationAccessControlOption = NonNullable<
+  OrganizationPluginOptions["ac"]
+>;
+
+const authOrganizationAccessControl =
+  organizationAccessControl as OrganizationAccessControlOption;
 
 // ============================================================================
 // Database-Backed Session Cache Configuration
@@ -150,7 +159,7 @@ export function createAuth(config: AuthConfig) {
         verificationUri: "/api/device",
       }),
       organization({
-        ac: organizationAccessControl,
+        ac: authOrganizationAccessControl,
         allowUserToCreateOrganization: true,
         // Comment: Org deletion is operator-assisted only because Better Auth's
         // default endpoint hard-deletes all org-owned rows transitively.