Add audit start and end dates to audits

ISO audits often span a window distinct from certificate validity.
Store optional audit_start_date and audit_end_date on the audit
record and expose them through GraphQL, MCP, CLI, n8n, and console.

Signed-off-by: Cursor Agent <cursoragent@cursor.com>

Co-authored-by: Bryan FRIMIN <bryan@frimin.fr>

pkg/server/api/console/v1/audit_resolvers.go

@@ -384,6 +384,8 @@ func (r *mutationResolver) CreateAudit(ctx context.Context, input types.CreateAu
 		Name:                       input.Name,
 		ValidFrom:                  input.ValidFrom,
 		ValidUntil:                 input.ValidUntil,
+		AuditStartDate:             input.AuditStartDate,
+		AuditEndDate:               input.AuditEndDate,
 		State:                      input.State,
 		CompliancePortalVisibility: input.CompliancePortalVisibility,
 	}
@@ -439,6 +441,8 @@ func (r *mutationResolver) UpdateAudit(ctx context.Context, input types.UpdateAu
 		Name:                       gqlutils.UnwrapOmittable(input.Name),
 		ValidFrom:                  input.ValidFrom,
 		ValidUntil:                 input.ValidUntil,
+		AuditStartDate:             input.AuditStartDate,
+		AuditEndDate:               input.AuditEndDate,
 		State:                      input.State,
 		CompliancePortalVisibility: input.CompliancePortalVisibility,
 	}

pkg/server/api/console/v1/graphql/audit.graphql

@@ -151,6 +151,8 @@ type Audit implements Node {
     framework: Framework @goField(forceResolver: true)
     validFrom: Datetime
     validUntil: Datetime
+    auditStartDate: Datetime
+    auditEndDate: Datetime
     reportFile: File @goField(forceResolver: true)
     state: AuditState!
 
@@ -275,6 +277,8 @@ input CreateAuditInput {
     name: String
     validFrom: Datetime
     validUntil: Datetime
+    auditStartDate: Datetime
+    auditEndDate: Datetime
     state: AuditState
     compliancePortalVisibility: CompliancePortalVisibility
     file: Upload
@@ -285,6 +289,8 @@ input UpdateAuditInput {
     name: String @goField(omittable: true)
     validFrom: Datetime
     validUntil: Datetime
+    auditStartDate: Datetime
+    auditEndDate: Datetime
     state: AuditState
     compliancePortalVisibility: CompliancePortalVisibility
 }

pkg/server/api/console/v1/types/audit.go

@@ -76,6 +76,8 @@ func NewAudit(a *coredata.Audit) *Audit {
 		},
 		ValidFrom:                  a.ValidFrom,
 		ValidUntil:                 a.ValidUntil,
+		AuditStartDate:             a.AuditStartDate,
+		AuditEndDate:               a.AuditEndDate,
 		State:                      a.State,
 		Name:                       a.Name,
 		CompliancePortalVisibility: a.CompliancePortalVisibility,

pkg/server/api/mcp/v1/schema.resolvers.go

@@ -1499,6 +1499,8 @@ func (r *Resolver) AddAuditTool(ctx context.Context, req *mcp.CallToolRequest, i
 			Name:           input.Name,
 			ValidFrom:      input.ValidFrom,
 			ValidUntil:     input.ValidUntil,
+			AuditStartDate: input.AuditStartDate,
+			AuditEndDate:   input.AuditEndDate,
 			State:          input.State,
 			FrameworkID:    input.FrameworkID,
 		},
@@ -1527,6 +1529,8 @@ func (r *Resolver) UpdateAuditTool(ctx context.Context, req *mcp.CallToolRequest
 			Name:                       UnwrapOmittable(input.Name),
 			ValidFrom:                  input.ValidFrom,
 			ValidUntil:                 input.ValidUntil,
+			AuditStartDate:             input.AuditStartDate,
+			AuditEndDate:               input.AuditEndDate,
 			State:                      input.State,
 			CompliancePortalVisibility: input.CompliancePortalVisibility,
 		},

pkg/server/api/mcp/v1/specification.yaml

@@ -4674,6 +4674,18 @@ components:
             - "null"
           format: date-time
           description: Valid until date
+        audit_start_date:
+          type:
+            - string
+            - "null"
+          format: date-time
+          description: Audit start date
+        audit_end_date:
+          type:
+            - string
+            - "null"
+          format: date-time
+          description: Audit end date
         state:
           $ref: "#/components/schemas/AuditState"
           description: Audit state
@@ -4791,6 +4803,14 @@ components:
           type: string
           format: date-time
           description: Valid until date
+        audit_start_date:
+          type: string
+          format: date-time
+          description: Audit start date
+        audit_end_date:
+          type: string
+          format: date-time
+          description: Audit end date
         state:
           $ref: "#/components/schemas/AuditState"
           description: Audit state
@@ -4827,6 +4847,18 @@ components:
             - "null"
           format: date-time
           description: Valid until date
+        audit_start_date:
+          type:
+            - string
+            - "null"
+          format: date-time
+          description: Audit start date
+        audit_end_date:
+          type:
+            - string
+            - "null"
+          format: date-time
+          description: Audit end date
         state:
           anyOf:
             - $ref: "#/components/schemas/AuditState"

pkg/server/api/mcp/v1/types/audit.go

@@ -36,6 +36,8 @@ func NewAudit(a *coredata.Audit, file *coredata.File) *Audit {
 		HasReport:                  a.ReportFileID != nil,
 		ValidFrom:                  a.ValidFrom,
 		ValidUntil:                 a.ValidUntil,
+		AuditStartDate:             a.AuditStartDate,
+		AuditEndDate:               a.AuditEndDate,
 		CreatedAt:                  a.CreatedAt,
 		UpdatedAt:                  a.UpdatedAt,
 	}