kosa8 docs

Commands / kosa8 approve

kosa8 approve

See what an action would do, and decide what may run unprompted

kosa8 proposes, you approve. Every mutating action the assistant takes is shown first — the real command, the sandbox it runs in, the host paths it would reach — and waits for an answer.

Actions are classified by blast radius: read-only runs unprompted, work inside an existing sandbox asks once per session, and anything destructive or anything that widens the sandbox boundary asks every time. Those last two cannot be auto-approved, by design: a setting that can switch off every control is not a control.

Permission you give the assistant mid-conversation lasts for that conversation only. It is never written to disk, so closing the session is all it takes to revoke it.

Subcommands

kosa8 approve allowLet a trusted kind of action run without asking kosa8 approve checkShow what an action would do and whether it needs approval kosa8 approve denyRefuse a kind of action outright, without even prompting kosa8 approve lsShow what may run without asking kosa8 approve revokeGo back to being asked about a kind of action