Every tool you wish you had is one prompt away. One file. Double-click. It’s an app.
It works on your files, and it can’t send them anywhere you didn’t allow.
Completely free and open source.
MIT license and code on GitHub. macOS and Linux.
3 to sort
Personal Apps
“Here’s my data. Build me a dashboard.” One file. Double-click. It’s an app.
Tell your AI what you need. It writes the whole app as a single HTML file.
Keep it, copy it, send it to a friend. Use it for a minute or for years. Done with it? Delete it.
It opens, edits and saves the files on your computer. No uploading, no downloading.
Everything it saves is a plain file that opens in any other app.
Start
Download it. On first open, say yes to the papp skill so your AI can write apps.
Any coding agent that can write files, such as Claude Code or Codex. Say what you need:
Write me a papp that shows my ~/Notes folder as cards.
Open the .papp file it wrote. Read the popup, click Allow. That’s it.
Inert by design
A mock of a page that wants out. Every button is something a page could try. Try them all.
0 tries · 0 out
Questions
No. You say what you want, and your AI writes the app. You read the popup and decide what it may touch.
Any coding agent that can write files, such as Claude Code or Codex. Apargon installs the papp skill for it, and it knows the rest.
An HTML file with its own extension, so a double-click opens it in Apargon, not in your browser. The name stands for personal app: each file is one.
Not on its own. Your operating system blocks the internet for the app and for every program it starts. An app can ask for one server, and the popup tells you first. If you let an app run a program, or give it full Node, that program may still reach the internet through other apps, and the popup says so. SECURITY.md lists everything Apargon does not enforce.
Only to check GitHub for a new version, at most once a day. Turn it off in Permissions → Check for Updates Automatically. No telemetry, no crash reports.
Yes, it’s one file. When someone opens an app they downloaded, the popup shows the site it came from first. If the app asks for a lot, they tick “I trust where this page came from” before it opens.
If it asks for something new, Apargon asks you again and marks what changed. Apargon does not check the rest of the file, so an edit that asks for nothing new opens without a popup.
Open another file or a website, or reach a server it did not name. Notifications, the clipboard, sound, location, the camera, the microphone and the screen each need a tag, and the popup shows it. Closing its window quits it.
Not yet. On Linux there is a .deb for x86-64, tested on a headless Ubuntu 24.04 server but not yet on a desktop.
Nothing. Apargon is completely free and open source, under the MIT license. There is no paid version and nothing to buy inside it. The code is on GitHub.
Completely free and open source, under the MIT license. Read every line on GitHub.
Also for Intel Mac · Linux (.deb)