fix(server): align organization access control type

[siisee11]

One-Line Summary

OneQuery auth typechecks cleanly when consumed from Velen’s workspace type graph.

User-Facing Changes

• No runtime behavior changes.
• Velen can update its OneQuery submodule without @velen/web:typecheck failing on organization({ ac }) type compatibility.

Why This Changed

Velen typechecks vendored OneQuery source through a different workspace graph than OneQuery’s own CI. The precise createAccessControl(...) generic is accepted by OneQuery directly, but Velen’s fresh affected typecheck reported it as incompatible with Better Auth’s plugin option shape.

How It Changed

• Derives the expected ac option type from Parameters<typeof organization>[0].
• Casts the existing organizationAccessControl to that option type before passing it to organization(...).
• Keeps the runtime access-control object unchanged.

Bug Fixes

• Fixes Velen PR CI failing in @velen/web:typecheck on vendor/onequery/packages/server/src/auth.ts.

Verification

• bunx turbo typecheck --json --filter=@onequery/server --filter=@velen/web --force
• bun run --cwd vendor/onequery/packages/server vitest run src/services/data-source-query/validate-sql.test.ts
• bun run format

Video / Screenshot (Optional)

• N/A

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	onequery-landing	01e5a08	Commit Preview URL Branch Preview URL	Jun 26 2026, 02:18 AM