[BunsDev]

Modex can now explicitly select a Strata/Responses connection and exact model for ordinary text-and-tool turns through an isolated native Codex child. Local targets preserve their connection revision and context, never route through cloud accounts or credit fallback, and suppress Auto/Jev, generated titles/follow-ups, images and external tool connections. Target changes clear native/account handles; restart resume fails closed.

Stacked on #401 at 59bb12b399f843fc2e4ba4fd30afab97e3764bcf; its source branch is untouched. This branch also incorporates main 21e50ba4bd7bfbad3b27af6dd13c183f67cb80a5, including the already-landed #406 test. The Strata implementation is signed commit 12850128d8b8d7e786ba32981fe183e5cb45ba97. Refs #376 and #379; this pilot does not close the broader local-model acceptance graph.

Validation:

• Final build and typecheck passed; final focused Electron selection, delayed-selection/keyboard and connection-IPC journeys passed 3/3.
• Final executed unit stages: 2,134 passed, 22 skipped, one timed-out/cancelled. The root command remains failed in the unchanged attachment-upload test at apps/desktop/test/browser-dev.test.mjs:177; its 15-second timeout and assertions were preserved. It passed 1/1 from an untouched baseline archive, but the worktree discrepancy is unresolved.
• Full UI run: 452 desktop passes, seven skips, and seven site passes. That run began before the final local-selection fence/tool-filter refinements; the final 3/3 local journeys are separate evidence.
• The installed Codex 0.164.0 completed a real native shell read against a scripted loopback Responses fixture, with exact model/provider selection, no offered image tool and no server credential in tool output/model input. This is native-harness evidence with a scripted model, not real Strata inference.

The real Strata product probe is blocked: four pre-existing asset files cannot be read, including the tokenizer vocabulary. The owned verification process stopped before inference, and its exit/absent listener were confirmed. No model download, saved runtime/global CLI configuration change, merge or release occurred. Plan, images, external tools, fresh-process resume, offline qualification and broader runtime acceptance remain unavailable or unverified.

Independent review found the selection-send race, missing returned-provider validation and mapped-loopback queue aliases; each received a failing regression and repair. The checkpoint preserves first failures, retries, native limits and the continuation steps. Keep this PR draft until the unit timeout and actual Strata verification are resolved; no merge or release is requested.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
modex	Ready	Preview	Oct 24, 2026 1:16pm UTC

[BunsDev]

Closing this draft: its base lm2-land (#401) was superseded by #403, so it can't land as stacked. LM-3 restarts from main on lm3-codex (#379) and carries over this draft's main-side design: the isolated LocalExecution service with a private Codex home and env allowlist, exact provider/model pinning with the native confirmation check and no stale-auth retry, runner admission without cloud accounts, Auto, Jev, titles, follow-ups or credit fallback, per-service capacity, and the refusal of project .codex directories and restart resume. The renderer controls stay out of LM-3; they belong to LM-4 (#381). The scripted-Responses wire receipt is kept as the model for LM-3's fixture. The branch and its receipts stay available on GitHub.