Registry API
Approvals and audit
Package approvals by registry admins, and the audit log of every action.
A package approval is a registry admin’s approval of one package version, recorded with the actor’s name. It is separate from a local approval, which happens on one machine. The audit log records who did what to which package or workspace, and whether it was allowed.
Operations
| Request | What it does |
|---|---|
| POST /v1/approvals/packages | Approve package versionin spec |
| GET /v1/approvals | List pending approvalsin spec |
| GET /v1/audit | List audit eventsin spec |
Operations are the routes the server registers; this site checks its list against the route definitions. Operations marked “in spec” are also described in the committed OpenAPI file (apps/api/openapi.json), which does not yet cover every route. Only the public catalog and the health check work without a token.