dfm — Developer Foundation Model

A coding agent that runs entirely on your Mac. DFM edits, builds, tests, repairs and verifies code using on-device models: Apple FM for routing and short text, and a local MLX model for code. Repository knowledge comes from RepoCanon, RepoKG and, optionally, Reflex.

DFM sends no code or prompts to hosted models. Other network access (GitHub, package registries) is off or requires approval, per policy.

Status: early (0.0.1). Commands and configuration may change.

Requirements

• macOS on Apple Silicon, Python 3.12+, uv, Git.
• Memory for the local model: the recommended 27B model (4-bit) needs about 18.5 GB at its default context, so 32 GB or more is recommended. dfm setup picks a model that fits.
• Optional: Apple Intelligence, for Apple FM.

Quick start

Install dfm as a command (the package is dfm-agent; the command is dfm):

uv tool install "dfm-agent[mlx]"           # from PyPI, once released
uv tool install "git+https://github.com/NehharShah/dfm[mlx]"   # or straight from GitHub
dfm doctor                                 # check this machine
dfm setup                                  # choose a local model
dfm implement "fix the failing test"

Omit [mlx] to install without the local coder. Upgrade with uv tool upgrade dfm-agent. To run from a checkout instead, see CONTRIBUTING.md.

How it works

• The model proposes one action at a time (read, search, patch, run, test). DFM executes it, reruns the tests after every edit, and reports only what a command verified.
• Every command is classified and checked against policy, then runs in a per-command macOS sandbox. Destructive, production and mainnet actions require a typed confirmation. DFM does not commit, push or rewrite history.
• Repository files, issues and CI logs reach the model as untrusted data, with secrets redacted.
• Memory checks, thermal pacing, reasoning budgets and a persistent prompt cache keep the model usable alongside other apps.

Modes: ask, plan, implement, review, security-review, ci, fix-pr, implement-issue, benchmark. Full list: command reference.

Documentation

Guide · Architecture · Commands · Configuration · Policy · Threat model · Troubleshooting · Design decisions

Contributing and security

See CONTRIBUTING.md and AGENTS.md. Report vulnerabilities privately as described in SECURITY.md. Changes: CHANGELOG.md.

License and notices

DFM is released under the MIT License and is provided "as is", without warranty of any kind. DFM runs commands and changes files on your machine. Its safeguards reduce risk but do not eliminate it. Review its changes before you commit them.

Models are third-party software under their own licenses, and you are responsible for complying with the license of any model you download. RepoCanon, RepoKG and Reflex are separate projects under their own licenses.

Apple, Apple Intelligence, Apple Silicon and macOS are trademarks of Apple Inc. DFM is an independent project and is not affiliated with or endorsed by Apple.