Skip to content

AFM v0.5.5 - Security Enhancement: Localhost-Only Binding

Choose a tag to compare

@scouzi1966 scouzi1966 released this 26 Aug 03:04
· 661 commits to main since this release

πŸ”’ AFM v0.5.5 - Security Enhancement: Localhost-Only Binding

πŸ›‘οΈ Security Improvements

  • Localhost-Only Binding: Server now binds exclusively to localhost (127.0.0.1) for enhanced security
  • Network Isolation: Prevents external network access to the AFM server
  • Zero Configuration: No additional setup required - security enabled by default

πŸ”§ What Changed

  • Server Binding: Changed from 0.0.0.0 to 127.0.0.1 (localhost only)
  • Security by Default: Eliminates potential exposure to local network
  • Maintains Functionality: All existing features work identically on localhost

🎯 Why This Matters

  • Privacy Protection: Your AFM server is no longer accessible from other devices on your network
  • Attack Surface Reduction: Minimizes potential security vulnerabilities
  • Best Practice Compliance: Follows security principle of least privilege

πŸ“‹ Full Feature Set

  • LoRA Adapter Support: -a flag for fine-tuned models
  • Conversation Continuity: Follow-up messages maintain context
  • Streaming Support: Real-time response streaming
  • Vision OCR: afm vision for document processing
  • Single Prompt Mode: Direct command execution
  • Custom Instructions: -i flag for personalized behavior
  • πŸ†• Localhost-Only Security: Enhanced network isolation

πŸ“₯ Install with Homebrew

# Add the tap (first time only)
brew tap scouzi1966/afm

# Install or upgrade AFM
brew install afm
# OR upgrade existing:
brew upgrade afm

# Verify installation
afm --version  # Should show v0.5.5

πŸ“₯ Manual Installation

# Download the release
curl -L -o afm-v0.5.5-arm64.tar.gz https://github.com/scouzi1966/maclocal-api/releases/download/v0.5.5/afm-v0.5.5-arm64.tar.gz

# Extract and install
tar -xzf afm-v0.5.5-arm64.tar.gz
sudo cp afm /usr/local/bin/

# Verify installation
afm --version  # Should show v0.5.5

πŸ”— Usage Examples

# Server with LoRA adapter (now localhost-only)
afm -a "my_model.fmadapter" -p 9999

# Server with custom instructions + adapter
afm -i "You are a coding expert" -a "code_model.fmadapter"

# Single prompt with adapter
afm -s "Explain quantum computing" -a "physics_model.fmadapter"

# Vision OCR
afm vision -f document.pdf

# Check all options
afm --help

πŸ“‹ Requirements

  • macOS 26+ with Apple Intelligence
  • Apple Silicon Mac (M1/M2/M3/M4)
  • Swift runtime (included in modern macOS)
  • LoRA Adapters: .fmadapter files (optional)

πŸ”„ Upgrade Notes

  • From v0.5.4: Enhanced security with localhost-only binding
  • From v0.5.3: Conversation continuity + security improvements
  • From earlier versions: Full feature upgrade recommended
  • Breaking Change: Server no longer accessible from other network devices (by design)

🌐 Network Access

  • Before v0.5.5: Server accessible from any device on your local network
  • v0.5.5+: Server accessible only from localhost (127.0.0.1)
  • Client Applications: Must connect to http://127.0.0.1:PORT instead of your machine's IP

This release prioritizes security while maintaining all existing functionality, ensuring your AFM server operates with enhanced privacy protection.

Full documentation: https://github.com/scouzi1966/maclocal-api