From 4435bcb6f4161ecb8f6cdf993f40a6dc5a30ad2b Mon Sep 17 00:00:00 2001
From: Meta Vens <rwvens@hotmail.com>
Date: Tue, 25 Aug 2026 01:55:24 +0200
Subject: [PATCH] Bound approved party identity input

---
 crates/ghostlight-dungeon/src/compiler.rs | 26 +++++++++++++++++++++--
 1 file changed, 24 insertions(+), 2 deletions(-)

diff --git a/crates/ghostlight-dungeon/src/compiler.rs b/crates/ghostlight-dungeon/src/compiler.rs
index f7fca61..cd7b8c2 100644
--- a/crates/ghostlight-dungeon/src/compiler.rs
+++ b/crates/ghostlight-dungeon/src/compiler.rs
@@ -9,7 +9,7 @@ use crate::{
         ModelPort, ModelStageReceipt, ModelStageRequest, run_validated_stage,
         run_validated_stage_with_timeout,
     },
-    session_zero::{ApprovedCampaignBrief, actor_from_character},
+    session_zero::{ApprovedCampaignBrief, MAX_SESSION_ZERO_MEMBERS, actor_from_character},
     vault::{VaultProvider, VaultQuery},
 };
 use anyhow::{Result, anyhow};
@@ -23,6 +23,8 @@ use std::{
 };
 use uuid::Uuid;
 
+const MAX_PARTY_IDENTITY_CHARS: usize = MAX_SESSION_ZERO_MEMBERS * 1_000;
+
 #[derive(Clone, Debug, Serialize, Deserialize, JsonSchema, PartialEq)]
 pub struct OpeningRequest {
     pub setting: String,
@@ -463,7 +465,7 @@ impl WorldCompiler {
         private_operational_context: Option<&serde_json::Value>,
     ) -> Result<(WorldCompilePreview, Vec<ModelStageReceipt>)> {
         validate_user_text("campaign name", &start.campaign_name, 80)?;
-        validate_user_text("player identity", &start.who, 500)?;
+        validate_user_text("player identity", &start.who, MAX_PARTY_IDENTITY_CHARS)?;
         validate_user_text("starting location", &start.where_, 500)?;
         validate_user_text("starting time", &start.when, 500)?;
         validate_user_text("player goal", &start.goal, 1_000)?;
@@ -3378,6 +3380,26 @@ fn validate_opening_playability(campaign: &Campaign) -> Result<()> {
 mod tests {
     use super::*;
 
+    #[test]
+    fn party_identity_bound_covers_long_approved_names_without_truncation() {
+        let name = "N".repeat(144);
+        let premise = "P".repeat(308);
+        let identity = format!(
+            "A cooperative party whose public starting identities are: {name} — {premise}. Private histories, secrets, and individual knowledge are deliberately withheld from world generation."
+        );
+        assert_eq!(identity.chars().count(), 616);
+        assert!(validate_user_text("player identity", &identity, 500).is_err());
+        validate_user_text("player identity", &identity, MAX_PARTY_IDENTITY_CHARS).unwrap();
+        assert!(
+            validate_user_text(
+                "player identity",
+                &"x".repeat(MAX_PARTY_IDENTITY_CHARS + 1),
+                MAX_PARTY_IDENTITY_CHARS,
+            )
+            .is_err()
+        );
+    }
+
     #[test]
     fn agency_compiler_cannot_disguise_private_knowledge_as_a_channel() {
         let mut campaign = crate::resolution::tests::campaign(0, 1);