1.0.13

src/routes/api/registries/+server.ts

@@ -2,6 +2,7 @@ import { json } from '@sveltejs/kit';
 import type { RequestHandler } from './$types';
 import { getRegistries, createRegistry, setDefaultRegistry } from '$lib/server/db';
 import { authorize } from '$lib/server/authorize';
+import { auditRegistry } from '$lib/server/audit';
 
 export const GET: RequestHandler = async ({ cookies }) => {
 	const auth = await authorize(cookies);
@@ -23,7 +24,8 @@ export const GET: RequestHandler = async ({ cookies }) => {
 	}
 };
 
-export const POST: RequestHandler = async ({ request, cookies }) => {
+export const POST: RequestHandler = async (event) => {
+	const { request, cookies } = event;
 	const auth = await authorize(cookies);
 	if (auth.authEnabled && !await auth.can('registries', 'create')) {
 		return json({ error: 'Permission denied' }, { status: 403 });
@@ -49,6 +51,9 @@ export const POST: RequestHandler = async ({ request, cookies }) => {
 			await setDefaultRegistry(registry.id);
 		}
 
+		// Audit log
+		await auditRegistry(event, 'create', registry.id, registry.name);
+
 		// Don't expose password in response
 		const { password, ...safeRegistry } = registry;
 		return json({ ...safeRegistry, hasCredentials: !!password }, { status: 201 });