1 files changed, 35 insertions, 0 deletions
diff --git a/packages/meshbay-node/tests/test_chat_is_bounded.py b/packages/meshbay-node/tests/test_chat_is_bounded.py
index 3332601..c48f26d 100644
--- a/packages/meshbay-node/tests/test_chat_is_bounded.py
+++ b/packages/meshbay-node/tests/test_chat_is_bounded.py
@@ -204,3 +204,38 @@ async def test_one_member_at_their_limit_has_not_spent_anyone_elses(ctx, store):
     await _flood(bob, ctx, 1)
     assert not _errors(bob), "one member's flood silenced another"
     assert _acks(bob)
+
+
+# ── the fields beside the ciphertext ─────────────────────────────────────────
+
+async def test_the_clear_fields_are_what_they_claim_and_no_larger(ctx, store):
+    """
+    `sender_name` and `thread_id` travel in clear beside the sealed envelope,
+    which carries its own. They are stored on the operator's disk and relayed
+    to every member, so a megabyte of name or a list for a thread id is dropped,
+    not kept.
+    """
+    alice = _session(ctx, store, user="alice", conn="c1")
+    bob = _session(ctx, store, user="bob", conn="c2")
+    msg = _message(alice, size=64)
+    msg["sender_name"] = "x" * (1024 * 1024)
+    msg["thread_id"] = list(range(10_000))
+    alice._do_chat_message(msg)
+    await _drain(ctx)
+
+    stored = (await store.get_recent(limit=1))[0]
+    assert stored.sender_name in ("", None)
+    assert stored.thread_id is None
+    relayed = [m for m in bob.sent if m.get("type") == "chat_msg"]
+    assert relayed and relayed[-1]["sender_name"] == "" and relayed[-1]["thread_id"] is None
+
+
+async def test_ordinary_clear_fields_pass_unchanged(ctx, store):
+    alice = _session(ctx, store, user="alice", conn="c1")
+    msg = _message(alice, size=64)
+    msg["sender_name"] = "Alice"
+    msg["thread_id"] = "42"
+    alice._do_chat_message(msg)
+    await _drain(ctx)
+    stored = (await store.get_recent(limit=1))[0]
+    assert (stored.sender_name, stored.thread_id) == ("Alice", "42")