GitHub, cost, security

GitHub App integration

Controller: GitHubController (api/integrations/github) — JWT (setup callback anonymous)

Used by sessions and agent runs to list installations/repos/branches and clone via the GitHub App.

Method	Path	Purpose
GET	/status	App configured?
GET	/installations	Linked installations + repos
GET	/discover	Relinkable prior installs
POST	/link	Relink installation
GET	/connect	Start GitHub App install
GET	/setup	Anon callback (installation_id, state)
GET	/repos	Repos available for agent clone
GET	/repos/{owner}/{repo}/branches?installationId=	Branches
DELETE	/{installationId}/disconnect	Unlink

---

Cost, dashboard & logs

Cost — CostController (api/Cost) — JWT

Method	Path	Query
GET	/api/cost/by-request-type	projectId?, days?
GET	/api/cost/by-provider	idem
GET	/api/cost/by-project	idem
GET	/api/cost/by-request	pagination
GET	/api/cost/summary

Dashboard — DashboardController (api/Dashboard) — JWT

Method	Path	Purpose
GET	/api/dashboard/prompt-stats	Prompt usage
GET	/api/dashboard/token-usage	Tokens
GET	/api/dashboard/provider-stats	Per provider
GET	/api/dashboard/summary	Overview
GET	/api/dashboard/logs	Log list
GET	/api/dashboard/logs/{id}	Log detail

API-key scoped logs also available at GET /api/ai/logs.

---

Security, AD & health

Security — SecurityController (api/security)

Method	Path	Auth	Purpose
GET	/api/security/status	AdminOnly	Security mode, audit, CSP, payload writer status
POST	/api/security/csp-report	Anonymous	Browser CSP violation reports (204)

Health

curl -s https://your-kroov-host/health
# { "status": "healthy" }

---