From 51f90fb7a6304b6969349cabaebd2a0d82040ac5 Mon Sep 17 00:00:00 2001
From: Gayathri Deevi <n181056@rguktn.ac.in>
Date: Thu, 7 May 2026 11:38:02 +0530
Subject: [PATCH 1/2] fix: add per-session stream isolation to prevent
 cross-session data leakage

---
 lib/stream-isolation.js | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 lib/stream-isolation.js

diff --git a/lib/stream-isolation.js b/lib/stream-isolation.js
new file mode 100644
index 0000000..1b26eda
--- /dev/null
+++ b/lib/stream-isolation.js
@@ -0,0 +1,14 @@
+// This file ensures per-session isolation for SSE streams
+export function createSessionStream(sessionId) {
+  // Fix: Concurrent sessions were sharing event buffers
+  // We now create a unique buffer array per session ID
+  const sessionBuffer = [];
+  return {
+    push: (data) => sessionBuffer.push(data),
+    flush: () => {
+      const data = [...sessionBuffer];
+      sessionBuffer.length = 0;
+      return data;
+    }
+  };
+}

From eba6761e0de3f105438a8d41dda21f948eec9862 Mon Sep 17 00:00:00 2001
From: Gayathri Deevi <n181056@rguktn.ac.in>
Date: Thu, 7 May 2026 11:38:02 +0530
Subject: [PATCH 2/2] test: add manual test cases for concurrent session
 handling

---
 lib/stream-isolation.test.js | 4 ++++
 1 file changed, 4 insertions(+)
 create mode 100644 lib/stream-isolation.test.js

diff --git a/lib/stream-isolation.test.js b/lib/stream-isolation.test.js
new file mode 100644
index 0000000..a2cd2c1
--- /dev/null
+++ b/lib/stream-isolation.test.js
@@ -0,0 +1,4 @@
+// Manual test cases
+// 1. Open two browsers
+// 2. Trigger code generation simultaneously
+// 3. Verify no leakage