fix(agents): guard int->int32 conversions to satisfy gosec G115

The Agent Studio SDK takes pagination and filter values as int32 while
our flags are parsed as int. Add a shared.Int32 helper that clamps to the
int32 range and use it at every conversion site, replacing the bare
int32() casts that tripped gosec's G115 integer-overflow check.

Author: tkrugg

pkg/cmd/agents/conversations/list.go

@@ -106,10 +106,10 @@ func runListCmd(opts *ListOptions) error {
 
 	req := client.NewApiListAgentConversationsRequest(opts.AgentID)
 	if opts.Page > 0 {
-		req = req.WithPage(int32(opts.Page))
+		req = req.WithPage(shared.Int32(opts.Page))
 	}
 	if opts.PerPage > 0 {
-		req = req.WithLimit(int32(opts.PerPage))
+		req = req.WithLimit(shared.Int32(opts.PerPage))
 	}
 	if opts.StartDate != "" {
 		req = req.WithStartDate(opts.StartDate)
@@ -121,7 +121,7 @@ func runListCmd(opts *ListOptions) error {
 		req = req.WithIncludeFeedback(true)
 	}
 	if opts.feedbackVoteSet {
-		req = req.WithFeedbackVote(int32(opts.FeedbackVote))
+		req = req.WithFeedbackVote(shared.Int32(opts.FeedbackVote))
 	}
 
 	opts.IO.StartProgressIndicatorWithLabel("Fetching conversations")

pkg/cmd/agents/feedback/create.go

@@ -86,7 +86,7 @@ func runCreateCmd(opts *CreateOptions) error {
 	body := &agentStudio.FeedbackCreationRequest{
 		MessageId: opts.MessageID,
 		AgentId:   opts.AgentID,
-		Vote:      agentStudio.VoteEnum(opts.Vote),
+		Vote:      agentStudio.VoteEnum(shared.Int32(opts.Vote)),
 		Tags:      opts.Tags,
 	}
 	if opts.Notes != "" {

pkg/cmd/agents/keys/list.go

@@ -57,10 +57,10 @@ func runListCmd(opts *ListOptions) error {
 	}
 	req := client.NewApiListSecretKeysRequest()
 	if opts.Page > 0 {
-		req = req.WithPage(int32(opts.Page))
+		req = req.WithPage(shared.Int32(opts.Page))
 	}
 	if opts.Limit > 0 {
-		req = req.WithLimit(int32(opts.Limit))
+		req = req.WithLimit(shared.Int32(opts.Limit))
 	}
 	opts.IO.StartProgressIndicatorWithLabel("Fetching secret keys")
 	res, err := client.ListSecretKeys(req, agentStudio.WithContext(shared.OrBackground(opts.Ctx)))

pkg/cmd/agents/list/list.go

@@ -10,6 +10,7 @@ import (
 	"github.com/dustin/go-humanize"
 	"github.com/spf13/cobra"
 
+	"github.com/algolia/cli/pkg/cmd/agents/shared"
 	"github.com/algolia/cli/pkg/cmdutil"
 	"github.com/algolia/cli/pkg/config"
 	"github.com/algolia/cli/pkg/iostreams"
@@ -95,10 +96,10 @@ func runListCmd(opts *ListOptions) error {
 
 	req := client.NewApiListAgentsRequest()
 	if opts.Page > 0 {
-		req = req.WithPage(int32(opts.Page))
+		req = req.WithPage(shared.Int32(opts.Page))
 	}
 	if opts.PerPage > 0 {
-		req = req.WithLimit(int32(opts.PerPage))
+		req = req.WithLimit(shared.Int32(opts.PerPage))
 	}
 	if opts.ProviderID != "" {
 		req = req.WithProviderId(opts.ProviderID)

pkg/cmd/agents/providers/list.go

@@ -80,10 +80,10 @@ func runListCmd(opts *ListOptions) error {
 
 	req := client.NewApiListProvidersRequest()
 	if opts.Page > 0 {
-		req = req.WithPage(int32(opts.Page))
+		req = req.WithPage(shared.Int32(opts.Page))
 	}
 	if opts.PerPage > 0 {
-		req = req.WithLimit(int32(opts.PerPage))
+		req = req.WithLimit(shared.Int32(opts.PerPage))
 	}
 
 	opts.IO.StartProgressIndicatorWithLabel("Fetching providers")

pkg/cmd/agents/shared/safecast.go

@@ -0,0 +1,17 @@
+package shared
+
+import "math"
+
+// Int32 safely converts an int to an int32, clamping to the int32 range so the
+// conversion can never overflow. The Agent Studio SDK takes pagination and
+// filter values as int32 while our flags are parsed as int; this keeps gosec
+// (G115) satisfied without scattering //nolint directives across call sites.
+func Int32(v int) int32 {
+	if v > math.MaxInt32 {
+		return math.MaxInt32
+	}
+	if v < math.MinInt32 {
+		return math.MinInt32
+	}
+	return int32(v)
+}