From 39eb5a50abfc132fcf2f7d7ff42f581869d57171 Mon Sep 17 00:00:00 2001
From: diegosouzapw <diegosouzapw@users.noreply.github.com>
Date: Wed, 8 Apr 2026 01:45:28 -0300
Subject: [PATCH] fix(security): resolve Web Crypto implementation in
 generateSessionId

Replaced unimported Node crypto randomBytes with standard Web Crypto
getRandomValues and BigUint64Array for deterministic CI execution.
---
 open-sse/translator/helpers/geminiHelper.ts | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/open-sse/translator/helpers/geminiHelper.ts b/open-sse/translator/helpers/geminiHelper.ts
index 7c20db724a..aa8624c467 100644
--- a/open-sse/translator/helpers/geminiHelper.ts
+++ b/open-sse/translator/helpers/geminiHelper.ts
@@ -162,8 +162,9 @@ export function generateRequestId() {
 
 // Generate session ID
 export function generateSessionId() {
-  const bytes = crypto.randomBytes(8);
-  const num = bytes.readBigUInt64LE() % 9000000000000000000n;
+  const arr = new BigUint64Array(1);
+  globalThis.crypto.getRandomValues(arr);
+  const num = arr[0] % 9000000000000000000n;
   return `-${num.toString()}`;
 }