gencow 0.1.10 → 0.1.11

package/bin/gencow.mjs

@@ -1764,8 +1764,22 @@ ${BOLD}Examples:${RESET}
             error(`Login failed: ${errData.message || errData.error || res.statusText}`);
             process.exit(1);
         }
-        const data = await res.json();
-        const apiKey = data.token;
+        // Extract signed session token from Set-Cookie header
+        // better-auth returns unsigned token in JSON body, but signed token in cookie
+        const cookies = res.headers.getSetCookie?.() || [];
+        let apiKey = null;
+        for (const cookie of cookies) {
+            const match = cookie.match(/better-auth\.session_token=([^;]+)/);
+            if (match) {
+                apiKey = decodeURIComponent(match[1]);
+                break;
+            }
+        }
+        if (!apiKey) {
+            // Fallback to JSON body token
+            const data = await res.json().catch(() => ({}));
+            apiKey = data.token;
+        }
         if (!apiKey) {
             error("Login failed: No token in response");
             process.exit(1);

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "gencow",
-    "version": "0.1.10",
+    "version": "0.1.11",
     "description": "Gencow — Backend OS for AI Agents",
     "type": "module",
     "bin": {

package/server/index.js

@@ -7214,7 +7214,24 @@ function betterAuthMiddleware() {
               };
             }
           } catch (e) {
-            authError = e instanceof Error ? e : new Error(String(e));
+            try {
+              const session2 = await authInstance.api.getSession({
+                headers: new Headers({
+                  cookie: `better-auth.session_token=${token}`
+                })
+              });
+              if (session2?.user) {
+                currentUser = {
+                  id: session2.user.id,
+                  email: session2.user.email,
+                  name: session2.user.name ?? void 0
+                };
+              } else {
+                authError = e instanceof Error ? e : new Error(String(e));
+              }
+            } catch {
+              authError = e instanceof Error ? e : new Error(String(e));
+            }
           }
         }
         if (!currentUser && !authError) {