dfm — Developer Foundation Model

A coding agent that runs entirely on your Mac. DFM edits, builds, tests, repairs and verifies code using on-device models: Apple FM for routing and short text, and a local MLX model for code. Repository knowledge comes from RepoCanon, RepoKG and, optionally, Reflex.

DFM sends no code or prompts to hosted models. Other network access (GitHub, package registries) is off or requires approval, per policy.

Status: early (0.0.1). Commands and configuration may change.

Requirements

• macOS on Apple Silicon, Python 3.12+, uv, Git.
• Memory for the local model: the recommended 27B model (4-bit) needs about 18.5 GB at its default context, so 32 GB or more is recommended. dfm setup picks a model that fits.
• Optional: Apple Intelligence, for Apple FM.

Quick start

git clone https://github.com/NehharShah/dfm && cd dfm
uv sync --extra mlx
uv run dfm doctor                          # check this machine
uv run dfm setup                           # choose a local model
uv run dfm                                 # interactive session in this repository

Or install it as a command: uv tool install dfm-agent (from PyPI).

dfm in a repository starts an interactive session: type what you want done, watch each step run, and /undo the last request if you don't want it. Single commands such as dfm implement "fix the failing test" do one task and exit.

How it works

• The model proposes one action at a time (read, search, patch, run, test). DFM executes it, reruns the tests after every edit, and reports only what a command verified.
• Every command is classified and checked against policy, then runs in a per-command macOS sandbox. Destructive, production and mainnet actions require a typed confirmation. DFM does not commit, push or rewrite history.
• Repository files, issues and CI logs reach the model as untrusted data, with secrets redacted.
• Memory checks, thermal pacing, reasoning budgets and a persistent prompt cache keep the model usable alongside other apps.

Modes: ask, plan, implement, review, security-review, ci, fix-pr, implement-issue, benchmark. Full list: command reference.

Documentation

Guide · Architecture · Commands · Configuration · Policy · Threat model · Troubleshooting · Design decisions

Contributing and security

See CONTRIBUTING.md and AGENTS.md. Report vulnerabilities privately as described in SECURITY.md. Changes: CHANGELOG.md.

License and notices

DFM is released under the MIT License and is provided "as is", without warranty of any kind. DFM runs commands and changes files on your machine. Its safeguards reduce risk but do not eliminate it. Review its changes before you commit them.

Models are third-party software under their own licenses, and you are responsible for complying with the license of any model you download. RepoCanon, RepoKG and Reflex are separate projects under their own licenses.

Apple, Apple Intelligence, Apple Silicon and macOS are trademarks of Apple Inc. DFM is an independent project and is not affiliated with or endorsed by Apple.