apx

module

v0.0.4 Latest Latest Go to latest Published: Nov 22, 2025 License: MIT

Details

Run codex from OpenAI in sandbox

# Just run
apx codex
# Pass args
apx -- codex -m "gpt-5"

✅ - Support implemented

❌ - Not implemented, planned

Name	OS	Status	Description
Seatbelt	MacOS	✅	Native macos sandbox via sandbox-exec, supported by kernel natively
Landlock+seccomp	Linux	❌	Supported by kernel (5.13+) restrictions for process over files access (via Landlock) and network (via seccomp)
Docker	Linux+MacOS	❌	Isolation via docker containers

When some app or cli fails with permission denied without specific details, os-specific tools can help with debug.

Via log:

For Seatbelt

sudo log stream --style compact --info --predicate 'subsystem == "com.apple.sandbox" OR process == "sandboxd" OR eventMessage CONTAINS[c] "deny"'