diff --git a/src/app/api/machines/sessions/route.ts b/src/app/api/machines/sessions/route.ts
index 3bb793e..3dfe5ac 100644
--- a/src/app/api/machines/sessions/route.ts
+++ b/src/app/api/machines/sessions/route.ts
@@ -81,7 +81,7 @@ export async function POST(request: Request) {
       const rec = toPairs(raw)
       const name = String(rec.name)
       const value = String(rec.value)
-      const options: Parameters<typeof response.cookies.set>[1] = {
+      const options: Parameters<typeof response.cookies.set>[2] = {
         httpOnly: Boolean(rec["httponly"]) || /httponly/i.test(raw),
         secure: /;\s*secure/i.test(raw),
         path: typeof rec["path"] === "string" ? (rec["path"] as string) : "/",
diff --git a/src/app/machines/handshake/route.ts b/src/app/machines/handshake/route.ts
index 4f103f2..cb779d9 100644
--- a/src/app/machines/handshake/route.ts
+++ b/src/app/machines/handshake/route.ts
@@ -87,7 +87,7 @@ export async function GET(request: NextRequest) {
       const rec = toPairs(raw)
       const name = String(rec.name)
       const value = String(rec.value)
-      const options: Parameters<typeof response.cookies.set>[1] = {
+      const options: Parameters<typeof response.cookies.set>[2] = {
         httpOnly: Boolean(rec["httponly"]) || /httponly/i.test(raw),
         secure: /;\s*secure/i.test(raw),
         path: typeof rec["path"] === "string" ? (rec["path"] as string) : "/",