From 2e5097c457beecbf14f87d6ca76c9fa54aee656f Mon Sep 17 00:00:00 2001
From: Danijel Martinek <danijel@fraqtal.xyz>
Date: Mon, 11 May 2026 16:19:15 +0200
Subject: [PATCH] fix(core-testing): RecordingAuditLog uses inline type alias
 (boundary: tooling cannot depend on core)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .../recording-audit-log.test.ts               |  6 ++--
 .../instrumentation/recording-audit-log.ts    | 32 ++++++++++++++++++-
 2 files changed, 35 insertions(+), 3 deletions(-)

diff --git a/packages/core-testing/src/instrumentation/recording-audit-log.test.ts b/packages/core-testing/src/instrumentation/recording-audit-log.test.ts
index 27a90d6..e1ab838 100644
--- a/packages/core-testing/src/instrumentation/recording-audit-log.test.ts
+++ b/packages/core-testing/src/instrumentation/recording-audit-log.test.ts
@@ -1,8 +1,10 @@
 import { describe, it, expect } from "vitest";
 import { RecordingAuditLog } from "./recording-audit-log";
-import type { AuditEntry } from "@repo/core-shared/audit";
 
-const sample: AuditEntry = {
+// Inline type to avoid importing from @repo/core-shared (boundary: tooling cannot depend on core)
+type SampleEntry = Parameters<RecordingAuditLog["record"]>[0];
+
+const sample: SampleEntry = {
   actorId: "user_1",
   actorType: "user",
   actorRoles: [],
diff --git a/packages/core-testing/src/instrumentation/recording-audit-log.ts b/packages/core-testing/src/instrumentation/recording-audit-log.ts
index 735e83a..9f3a51f 100644
--- a/packages/core-testing/src/instrumentation/recording-audit-log.ts
+++ b/packages/core-testing/src/instrumentation/recording-audit-log.ts
@@ -1,4 +1,34 @@
-import type { AuditEntry } from "@repo/core-shared/audit";
+// Local type alias mirroring `AuditEntry` from `@repo/core-shared/audit`.
+// Kept inline to avoid a build-graph cycle between core-testing (tooling)
+// and core-shared (core). Same pattern used by recording-event-bus,
+// recording-realtime-broadcaster, and recording-metrics.
+
+type AuditAction =
+  | "VIEW"
+  | "CREATE"
+  | "UPDATE"
+  | "DELETE"
+  | "EXPORT"
+  | "PERMISSION_CHANGE";
+
+type AuditEntry = {
+  actorId: string;
+  actorType: "user" | "system" | "service";
+  actorRoles: string[];
+  action: AuditAction;
+  resource: { type: string; id?: string };
+  changedFields?: string[];
+  at: Date;
+  scope: { feature: string; environment: string; tenant: string };
+  reason?: string;
+  correlationId?: string;
+  requestId?: string;
+  from: { ipTruncated: string; userAgent: string };
+  containsPii: boolean;
+  piiCategories?: string[];
+  outcome: "success" | "denied" | "error";
+  errorCode?: string;
+};
 
 /**
  * Test-side recording double for IAuditLog. Mirrors Payload semantics in