Fix parameter validation to reject over-limit values instead of clamping

[Copilot]

Line 502 in ParamValidator.scala clamped values exceeding max limits instead of throwing exceptions, contradicting the updated test expectations that require rejection.

Change:

• validIntWithRange: Changed else if (int > max) max to else if (int > max) throw ValidationException(rule)

Context:
When max limits were reduced (e.g., maxPageSize 500→100), tests were updated to expect InvalidSearchParams for over-limit values, but the implementation still silently clamped to max.

// Before: silently clamps 999999 to 100
validIntWithRange("999999", "page_size")  // returns 100

// After: throws ValidationException
validIntWithRange("999999", "page_size")  // throws "page_size must be an integer between 0 and 100"

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[Copilot]

Just as a heads up, I was blocked by some firewall rules while working on your feedback. Expand below for details.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• repo.scala-sbt.org
  • Triggering command: /usr/bin/java java -Dfile.encoding=UTF-8 -Xms1024m -Xmx1024m -Xss4M -XX:ReservedCodeCacheSize=128m -Dsbt.script=/tmp/sbt/bin/sbt -Dscala.ext.dirs=/home/REDACTED/.sbt/1.0/java9-rt-ext-eclipse_adoptium_17_0_17 -jar /tmp/sbt/bin/sbt-launch.jar testOnly *ParamValidatorTest (dns block)
• repo.typesafe.com
  • Triggering command: /usr/bin/java java -Dfile.encoding=UTF-8 -Xms1024m -Xmx1024m -Xss4M -XX:ReservedCodeCacheSize=128m -Dsbt.script=/tmp/sbt/bin/sbt -Dscala.ext.dirs=/home/REDACTED/.sbt/1.0/java9-rt-ext-eclipse_adoptium_17_0_17 -jar /tmp/sbt/bin/sbt-launch.jar testOnly *ParamValidatorTest (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)