# kosa8 prompt

Give a coding agent one task, run in a sandbox that is removed when it finishes

## Usage

```
kosa8 prompt [flags] TASK...
```

Runs an agent once, headless, on TASK, inside a fresh sandbox that sees only the
workspace (default: the current directory). Its network is the kit's allow-list,
its API key stays in kosa8's broker on the host, and every action is in the
audit log. The agent's output is printed as it runs; the exit status is the agent's.

TASK is the rest of the command line, or standard input when TASK is - or is
left out and input is piped.

Agents: claude (the default, or $KOSA8_AGENT), codex, gemini, opencode, copilot,
shell, or a kit of your own with a `prompt:` command (`kosa8 agent init`).

## Flags

| Flag | Type | What it does | Default |
|---|---|---|---|
| `--agent, -a` | string | the agent's kit (default $KOSA8_AGENT, else claude) |  |
| `--allow-unpinned` | bool | run a kit whose setup installs software that is not pinned to a version and digest |  |
| `--dry-run` | bool | show what would run without creating the sandbox |  |
| `--keep` | bool | keep the sandbox after the agent exits |  |
| `--name` | string | sandbox name |  |
| `--no-network` | bool | deny all network access, overriding the kit |  |
| `--workspace, -w` | string | host directory the agent may see and change (default: current directory) |  |

## Example

```
  kosa8 prompt "add a test for parseConfig and make it pass"
  kosa8 prompt -a codex -w ~/src/api "why does TestLogin flake?"
  git diff | kosa8 prompt --no-network -a claude -
  kosa8 prompt --dry-run "upgrade the lodash dependency"
```

---
Source: https://docs.kosa8.com/reference/prompt/