Initial commit

routes/api/audit/users/+server.ts

@@ -0,0 +1,26 @@
+import { json } from '@sveltejs/kit';
+import { authorize, enterpriseRequired } from '$lib/server/authorize';
+import { getAuditLogUsers } from '$lib/server/db';
+import type { RequestHandler } from './$types';
+
+export const GET: RequestHandler = async ({ cookies }) => {
+	const auth = await authorize(cookies);
+
+	// Audit log is Enterprise-only
+	if (!auth.isEnterprise) {
+		return json(enterpriseRequired(), { status: 403 });
+	}
+
+	// Check permission
+	if (!await auth.canViewAuditLog()) {
+		return json({ error: 'Permission denied' }, { status: 403 });
+	}
+
+	try {
+		const users = await getAuditLogUsers();
+		return json(users);
+	} catch (error) {
+		console.error('Error fetching audit log users:', error);
+		return json({ error: 'Failed to fetch audit log users' }, { status: 500 });
+	}
+};