fix(core): Validate issue event time params

Route issue event time filters through shared validation before building the SDK query so conflicting or unpaired ranges fail before a request is sent.

Co-Authored-By: GPT-5 Codex <noreply@openai.com>

Author: dcramer

packages/mcp-core/src/api-client/client.test.ts

@@ -1119,6 +1119,72 @@ describe("API query builders", () => {
       );
       expect(globalThis.fetch).not.toHaveBeenCalled();
     });
+
+    it("should build issue event requests with stats period", async () => {
+      const apiService = new SentryApiService({
+        host: "sentry.io",
+        accessToken: "test-token",
+      });
+
+      globalThis.fetch = makeSdkMock([]);
+
+      await apiService.listEventsForIssue({
+        organizationSlug: "test-org",
+        issueId: "123",
+        query: "level:error",
+        sort: "-timestamp",
+        statsPeriod: "7d",
+        limit: 25,
+      });
+
+      const url = extractFetchUrl(
+        (globalThis.fetch as ReturnType<typeof vi.fn>).mock.calls[0],
+      );
+      const parsedUrl = new URL(url);
+      expect(parsedUrl.searchParams.get("statsPeriod")).toBe("7d");
+      expect(parsedUrl.searchParams.get("start")).toBeNull();
+      expect(parsedUrl.searchParams.get("end")).toBeNull();
+    });
+
+    it("should reject conflicting issue event time parameters", async () => {
+      const apiService = new SentryApiService({
+        host: "sentry.io",
+        accessToken: "test-token",
+      });
+
+      globalThis.fetch = makeSdkMock([]);
+
+      await expect(
+        apiService.listEventsForIssue({
+          organizationSlug: "test-org",
+          issueId: "123",
+          statsPeriod: "24h",
+          start: "2025-01-01T00:00:00Z",
+          end: "2025-01-02T00:00:00Z",
+        }),
+      ).rejects.toThrow("Cannot use both statsPeriod and start/end parameters");
+      expect(globalThis.fetch).not.toHaveBeenCalled();
+    });
+
+    it("should require paired issue event start and end parameters", async () => {
+      const apiService = new SentryApiService({
+        host: "sentry.io",
+        accessToken: "test-token",
+      });
+
+      globalThis.fetch = makeSdkMock([]);
+
+      await expect(
+        apiService.listEventsForIssue({
+          organizationSlug: "test-org",
+          issueId: "123",
+          start: "2025-01-01T00:00:00Z",
+        }),
+      ).rejects.toThrow(
+        "Both start and end parameters must be provided together",
+      );
+      expect(globalThis.fetch).not.toHaveBeenCalled();
+    });
   });
 
   describe("Web URL builders", () => {

packages/mcp-core/src/api-client/client.ts

@@ -2144,6 +2144,9 @@ export class SentryApiService {
     },
     opts?: RequestOptions,
   ) {
+    const timeParams = new URLSearchParams();
+    this.applyTimeParams(timeParams, statsPeriod, start, end);
+
     const result = await sdkListAnIssueSEvents({
       ...this.getSdkConfig(opts),
       path: {
@@ -2154,9 +2157,7 @@ export class SentryApiService {
         query,
         per_page: limit,
         sort,
-        statsPeriod,
-        start,
-        end,
+        ...Object.fromEntries(timeParams),
         full,
       } as Record<string, unknown>,
     } as Parameters<typeof sdkListAnIssueSEvents>[0]);