Add maxLength constraints to workflow metadata fields

pkg/parser/schema_test.go

@@ -1227,6 +1227,57 @@ func TestValidateMainWorkflowFrontmatterWithSchema(t *testing.T) {
 			wantErr:     true,
 			errContains: "additional properties",
 		},
+		{
+			name: "invalid name too long (257 chars)",
+			frontmatter: map[string]any{
+				"on":   "workflow_dispatch",
+				"name": strings.Repeat("a", 257),
+			},
+			wantErr:     true,
+			errContains: "maxLength",
+		},
+		{
+			name: "valid name at max length (256 chars)",
+			frontmatter: map[string]any{
+				"on":   "workflow_dispatch",
+				"name": strings.Repeat("a", 256),
+			},
+			wantErr: false,
+		},
+		{
+			name: "invalid description too long (10001 chars)",
+			frontmatter: map[string]any{
+				"on":          "workflow_dispatch",
+				"description": strings.Repeat("a", 10001),
+			},
+			wantErr:     true,
+			errContains: "maxLength",
+		},
+		{
+			name: "valid description at max length (10000 chars)",
+			frontmatter: map[string]any{
+				"on":          "workflow_dispatch",
+				"description": strings.Repeat("a", 10000),
+			},
+			wantErr: false,
+		},
+		{
+			name: "invalid tracker-id too long (129 chars)",
+			frontmatter: map[string]any{
+				"on":         "workflow_dispatch",
+				"tracker-id": strings.Repeat("a", 129),
+			},
+			wantErr:     true,
+			errContains: "maxLength",
+		},
+		{
+			name: "valid tracker-id at max length (128 chars)",
+			frontmatter: map[string]any{
+				"on":         "workflow_dispatch",
+				"tracker-id": strings.Repeat("a", 128),
+			},
+			wantErr: false,
+		},
 	}
 
 	for _, tt := range tests {

pkg/parser/schemas/main_workflow_schema.json

@@ -10,11 +10,13 @@
     "name": {
       "type": "string",
       "minLength": 1,
+      "maxLength": 256,
       "description": "Workflow name that appears in the GitHub Actions interface. If not specified, defaults to the filename without extension.",
       "examples": ["Copilot Agent PR Analysis", "Dev Hawk", "Smoke Claude"]
     },
     "description": {
       "type": "string",
+      "maxLength": 10000,
       "description": "Optional workflow description that is rendered as a comment in the generated GitHub Actions YAML file (.lock.yml)",
       "examples": ["Quickstart for using the GitHub Actions library"]
     },
@@ -26,6 +28,7 @@
     "tracker-id": {
       "type": "string",
       "minLength": 8,
+      "maxLength": 128,
       "pattern": "^[a-zA-Z0-9_-]+$",
       "description": "Optional tracker identifier to tag all created assets (issues, discussions, comments, pull requests). Must be at least 8 characters and contain only alphanumeric characters, hyphens, and underscores. This identifier will be inserted in the body/description of all created assets to enable searching and retrieving assets associated with this workflow.",
       "examples": ["workflow-2024-q1", "team-alpha-bot", "security_audit_v2"]