[BunsDev]

Part of #380 (LM-5). Fixture- and wire-level evidence for AC1 (compaction), AC3, AC4 and AC5, plus four small repairs. main/index.ts still constructs no LocalExecution, so product behaviour is unchanged. This PR is code and waits for Val: don't enqueue it.

Review follow-ups resolved

Both findings confirmed at b6d18767f44fc068b9383190cb169a288aa8b123 were repaired through #480, merged into this branch as signed commit 7cc57139d7598df25b685d8070f81e2e8f2d18c8. The merge tree exactly matches the reviewed repair head.

• AC3 now races the first server arrival against early turn completion and propagates test cancellation, reporting the result and reaching cleanup. An already-aborted first-turn negative control hung before the repair, then failed promptly with the interrupted result afterward; the normal wire fixture passed.
• AC1 and AC4 network claims now describe only the recording fixture's observations. Other destinations were not monitored.

The repair passed build and full unit validation (2,281 passes, 35 skips), with independent review finding no blockers. Hosted validation passed at 7cc57139d7598df25b685d8070f81e2e8f2d18c8: all checks succeeded, including macOS job 124887542663 with 481 desktop E2E passes, 4 skips and 7 site passes. These are CI and fixture results, not live local-runtime or human acceptance. The explicit Val approval gate above remains in force.

Repairs (each regression failed before its fix)

• Truthful local 500. codex-cli 0.166.0 words any HTTP 500 as "We're currently experiencing high demand…" (codexErrorInfo: internalServerError). LocalExecution now reports the local server's internal error instead, and says nothing was retried or switched.
• stream_max_retries admitted only at 0. Admission checked only request_max_retries. With retries on, Codex re-sends the whole request after a dropped stream, a 500 or a 503.
• Compaction keys governed. compact_prompt, model_auto_compact_token_limit_scope, model_post_turn_compact_threshold_percent and model_async_compact_threshold_percent can no longer come from another layer.
• Local target only from this Mac's window. updateThread stripped local keys only for by === "paired-desktop". It now keeps them only for by === "desktop".

Wire evidence (installed codex-cli 0.166.0, scripted loopback server, no model)

• AC1: auto-compaction runs inline to the configured /v1/responses for the selected model, with the bearer token. The recording fixture saw no other endpoint; other destinations were not monitored.
• AC3: a turn queued behind another profile of the same server and then stopped sends that server zero requests.
• AC4: overflow (HTTP and stream), OOM 500, 503, a dropped stream, a killed child and Stop each end failed or interrupted, with exactly two requests observed at the recording fixture and one tool run.
• [P1][LM-3] Run Codex against isolated local connection profiles #379 wire receipt on 0.166.0: matches 0.164.0 (same tools; a 307 is followed with the body and without the token).

Review record: docs/reviews/2026-11-01-lm5-fixtures.md, with receipts in docs/reviews/2026-11-01-lm5-fixtures/.

Verification

• pnpm build && pnpm test exit 0 (desktop: 2,098 pass, 29 skip, 0 fail).
• Focused suites: local-run-policy 16/16, local-model-execution 15/15, runner-local-models 15/15.
• MODEX_LM3_WIRE=1 node --test --test-force-exit dist/test/local-codex-native.test.js: 9 + AC1 compaction + AC3 pass; AC1 live skipped.
• Negative controls are listed in the review record.

Not done here (Val)

• AC2 offline canary;
• AC4 on a real runtime;
• AC1 live;
• managed-Mac policy check;
• product admission.

🤖 Generated with Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
modex	Ready	Preview	Nov 1, 2026 3:10pm UTC

[github-code-quality]

Code coverage overview

Languages: TypeScript

TypeScript / code-coverage-agent

main 9ecccc9	lm5-fixtures 7cc5713	+/-
66%	66%	0%

ℹ️ Calculations represent line coverage. Results may change as calculations are updated.

---

_{Updated November 01, 2026 15:57 UTC}

[BunsDev]

Closeout coordination for #475: the current user goal explicitly authorizes signed protected delivery after review/checks, while retaining separate product-admission, real-runtime, human and release gates. I am auditing 7cc57139d7598df25b685d8070f81e2e8f2d18c8 against current main and the newer local lm5-fixtures-rebased candidate 7a38090c4366fb42ee2d12df03405ec338a56f9c. Existing fixture/wire receipts will remain distinct from inference and offline acceptance.

The original branches, worktrees and claims remain untouched. Any needed integration will use the new helper-owned issue-closeout checkout, with fresh validation on its exact integrated revision. Please identify any newer owner-controlled work, prerequisite or unresolved review concern before integration. No product execution admission or release action is implied by this coordination.