Laguna S 2.1: Local Agentic Coding Model Guide
> A practical Laguna S 2.1 guide covering open weights, benchmarks, local inference, hosted APIs, tool calling, security, and verification-first coding agents.
🎧 Listen — ~10 min
Ready · Laguna S 2.1: Local Agentic Codi
The short answer
Poolside’s Laguna S 2.1 is a 118-billion-parameter mixture-of-experts coding model with about 8 billion active parameters per token and a context window of up to 1 million tokens. It is released as open weights under the OpenMDW-1.1 license, with official BF16, FP8, INT4, NVFP4, GGUF, and MLX variants listed by Poolside. The model is designed for long-horizon software-engineering agents rather than general chat.
For developers, the practical decision is straightforward: use a hosted endpoint for quick experiments, or deploy a quantized checkpoint when code privacy, predictable throughput, and local control matter more than maximum frontier score. Laguna S 2.1 is not the highest-scoring model in Poolside’s own comparison: its published Terminal-Bench 2.1 score is 70.2%, below GPT-5.6 Sol, Kimi K3, and Claude Fable 5. Its appeal is the combination of open weights, sparse activation, long context, agent-oriented training, and inspectable evaluation trajectories.
What Laguna S 2.1 is
Laguna S 2.1 uses a sparse MoE design: the total model is large, but only a subset of parameters is activated for each token. Poolside describes the release as 118B total parameters with 8B activated parameters per token. That distinction matters for inference economics, although total memory still depends on the stored checkpoint, quantization, runtime overhead, and KV cache.
Poolside says the model supports up to 1M tokens in thinking and no-thinking modes. The model is tuned around tool use, verification, persistence, and multi-step coding tasks. Its release includes full trajectories for the final evaluation trials, allowing readers to inspect tool calls and intermediate work rather than relying only on a headline score.
OpenRouter’s current model page provides a hosted, OpenAI-compatible route. It lists a 1,048,576-token context window, tool calling, and separate input, output, and cache-read prices. It also warns that hosted free usage may be used for model improvement, so teams should review provider data policies before sending proprietary code.
How the architecture changes the deployment decision
Visual 1 — Original deployment flow. The important boundary is the agent harness: Laguna is a model component, not a complete production coding system. The harness still owns permissions, tool schemas, test execution, logging, retries, and stop conditions.
A sparse model can reduce active compute, but developers should not translate “8B active” directly into “runs like an 8B model.” You still need to store a roughly 118B-parameter checkpoint unless using an aggressively quantized format, and long contexts can make KV-cache memory the dominant cost. Measure with the exact runtime, quantization, context length, and concurrency you intend to operate.
Benchmark results: useful, but not interchangeable
Poolside’s July 21, 2026 evaluation page reports these results for Laguna S 2.1:
| Evaluation | Reported result | What it tells you |
|---|---|---|
| Terminal-Bench 2.1 | 70.2% | Long-horizon terminal tasks in Poolside’s agent harness |
| SWE-Bench Multilingual | 78.5% | Multilingual software-engineering issue resolution |
| SWE-Bench Pro, public dataset | 59.4% | Public software-engineering tasks |
| DeepSWE | 40.4% | Harder long-horizon coding tasks; harness differences matter |
| SWE Atlas, codebase Q&A | 46.2% | Repository understanding and codebase questions |
| Toolathlon Verified | 49.7% | Tool-use tasks under the reported evaluation setup |
Visual 2 — Benchmark comparison table. These are reported figures, not an independent reproduction. Poolside notes that it takes the maximum of vendor-reported, benchmark-author, and third-party figures for several comparison models. It also says DeepSWE results use its own harness rather than the standard mini-swe-agent leaderboard setup. Treat cross-model rankings as directional until you run your own workload.
The most important operational lesson is not the single 70.2% number. Poolside reports that enabling thinking raises Terminal-Bench 2.1 from 60.4% to 70.2% and DeepSWE from 16.5% to 40.4%, with higher token use. That creates a direct quality-versus-cost decision for agent builders. If your task has reliable tests and short repair loops, no-thinking mode may be enough. If the task requires planning across a large repository, thinking mode may justify its additional latency and token consumption.
A verification-first way to try it
Start with a disposable repository and a narrow task that has an objective test. Do not begin by granting an agent unrestricted access to production credentials or a broad filesystem.
- Choose the delivery path. Use the hosted OpenAI-compatible endpoint for an initial capability test. Use a local checkpoint when source code must stay inside your network or when you need to tune batching and telemetry.
- Pin the model and runtime. Record the exact checkpoint, quantization, serving engine, context limit, prompt template, and agent harness version.
- Define a tool contract. Give the model only the shell, file, test, and search tools it needs. Reject unknown tool names and validate every argument server-side.
- Require evidence. The agent should run the relevant tests, show changed files, and report failures before it can declare success.
- Measure a small task set. Track pass rate, wall-clock time, output tokens, tool-call count, retries, malformed tool arguments, and human intervention.
- Expand permissions gradually. Separate read-only exploration from write operations, and keep network access disabled unless the task requires it.
A minimal request through an OpenAI-compatible provider looks like this:
1import os
2from openai import OpenAI
3
4client = OpenAI(
5 api_key=os.environ["OPENROUTER_API_KEY"],
6 base_url="https://openrouter.ai/api/v1",
7)
8
9response = client.chat.completions.create(
10 model="poolside/laguna-s-2.1",
11 messages=[
12 {
13 "role": "system",
14 "content": "You are a coding agent. Explain the plan, make the smallest change, and run tests.",
15 },
16 {
17 "role": "user",
18 "content": "Inspect the repository and add a regression test for the failing parser case.",
19 },
20 ],
21 temperature=0.2,
22)
23
24print(response.choices[0].message.content)This is a verified request shape for an OpenAI-compatible chat endpoint, not a complete autonomous agent. Tool calling, sandbox execution, patch application, and test loops must be implemented by the surrounding harness. OpenRouter’s model page says Laguna supports tools and tool_choice, but does not enforce response_format; validate structured output yourself instead of assuming JSON compliance.
Local inference considerations
Poolside lists multiple weight formats and says Laguna S 2.1 is supported across common ecosystems including vLLM, SGLang, Transformers, Llama, Ollama, and llama.cpp. Availability and performance can change by checkpoint, fork, and hardware, so pin a tested artifact rather than copying an old community command.
The model’s total size makes ordinary laptop deployment unrealistic in many configurations. Quantization can make it more approachable: Poolside and ecosystem pages describe NVFP4 and GGUF variants, while MindStudio reports more than 80 tokens per second on an Nvidia DGX Spark using speculative decoding. That throughput is a platform-specific report, not a universal benchmark. Expect materially different results on a Mac, a single consumer GPU, or CPU-only hardware.
For a serious evaluation, compare:
- time to first token and steady-state tokens per second;
- peak memory with your real context length;
- prompt-processing time for large repositories;
- completion-token use with thinking enabled and disabled;
- tool-call validity and retry rate;
- pass rate on your own tests, not only public benchmarks.
Security and privacy checklist
An open-weight model is not automatically a safe agent. The model can generate shell commands, modify files, and interact with external systems only because the harness gives it those capabilities. Use a container or VM, non-root credentials, an allowlisted working directory, outbound network controls, and explicit approval for destructive operations.
Treat tool arguments as untrusted input. Validate paths after resolving symlinks, restrict command execution, cap output size, and log every tool call. Do not expose cloud credentials in environment variables visible to the model. For hosted inference, read the provider’s retention and training policy; OpenRouter specifically presents a warning for free usage. For self-hosting, secure model artifacts, inference logs, cached prompts, and evaluation trajectories as potentially sensitive code data.
What Poolside’s transparency makes possible
Poolside publishes the full final-evaluation trajectories at trajectories.poolside.ai. This is a valuable visual and technical reference: developers can inspect how the agent plans, calls tools, verifies results, and sometimes gets stuck. The release page also includes a browser-engine case study and a harness-optimization case study, but those are demonstrations from the vendor—not independent proof that every repository will see the same outcome.
Visual 3 — Inspectable agent behavior. Use the official Laguna S 2.1 release and trajectory links to review representative runs before designing your own evaluation. Compare the model’s intermediate actions with the final test result; a plausible narrative is not evidence of a correct patch.
That transparency is especially useful because Poolside discloses limitations: the model may overfit to its native harness, can struggle with different tool schemas, may produce malformed nested tool arguments, and does not expose a configurable thinking-effort dial beyond thinking on or off. Those limitations should shape integration tests.
Laguna S 2.1 versus a closed frontier model
| Decision factor | Laguna S 2.1 | Closed frontier API |
|---|---|---|
| Weights | Open-weight, OpenMDW-1.1 | Provider controlled |
| Deployment | Local, hosted, or integrated provider | Usually hosted |
| Privacy control | Strongest when self-hosted | Depends on provider policy |
| Benchmark ceiling | Competitive, but below the leading published scores | Often higher on frontier tasks |
| Cost control | Hardware ownership plus engineering overhead | Metered usage and service limits |
| Customization | Checkpoint, runtime, quantization, harness | Prompting, tools, provider features |
| Operational burden | You own serving, updates, and safeguards | Provider owns serving layer |
The right comparison is not “open versus closed” in the abstract. Run the same repository tasks through both systems, keep the harness constant, and compare verified outcomes per dollar or per hour. A model that is slightly weaker but can inspect private code locally may be the better engineering choice; a closed model may win when task success and latency dominate and data policy is acceptable.
Common failure modes
The agent edits code but skips the test
Make test execution a required tool step and block the success state until the command returns an acceptable result. If a test cannot run, the agent should report that limitation rather than fabricate confidence.
Tool arguments fail validation
Keep schemas small, reject unknown fields, and return a concise machine-readable error. Add retry limits so a malformed call does not consume an unlimited context window.
Long context becomes slow or expensive
Start with repository summaries and targeted file retrieval. A 1M-token context window is a capacity ceiling, not a reason to paste an entire monorepo into every request.
Local throughput looks unlike the demo
Reproduce the same quantization, hardware, speculative-decoding configuration, prompt length, and concurrency before comparing numbers. Report both prompt processing and generation speed.
FAQ
Is Laguna S 2.1 open source?
It is released as open weights under Poolside’s OpenMDW-1.1 license. “Open weights” does not mean every training dataset, infrastructure component, or hosted service is open source.
Is it suitable for coding agents?
Yes, that is its primary design target. It supports tool-oriented coding workflows, but the agent harness remains responsible for sandboxing, tool validation, tests, and recovery.
Can it run on a laptop?
Some quantized variants may fit specialized high-memory systems, but the full model is not a typical laptop deployment. Benchmark the exact artifact and hardware before promising local performance.
Should I use thinking mode?
Use it when long-horizon planning and verification improve success enough to justify extra tokens and latency. Measure both modes on your own tasks.
Conclusion
Laguna S 2.1 is an unusually practical open-weight coding-model release: sparse activation, long context, multiple quantization formats, hosted access, and unusually inspectable evaluation evidence. Its strongest case is not that it beats every frontier model. It is that teams can own the deployment boundary and study how an agent works.
For a safe pilot, start with a small benchmark repository, a locked-down harness, objective tests, and both thinking modes. Then compare it with your current provider using the same prompts, tools, and success criteria. Developers evaluating local AI hardware can also use the GPU-versus-Mac memory-bandwidth guide, while teams building private local workflows may find the Unsloth Desktop local-AI workspace guide useful context. For agent orchestration patterns, see the OpenAI Codex harness guide.
Sources and visual credits
- Poolside: Introducing Laguna S 2.1 — primary release, architecture, benchmarks, limitations, and trajectories.
- VentureBeat: Poolside drops Laguna S 2.1 — independent reporting and deployment context.
- OpenRouter: Laguna S 2.1 model page — hosted API, pricing, context, tool-calling, and policy details.
- MindStudio: Laguna S 2.1 local coding model — independent deployment discussion and hardware-specific throughput report.
- Visual credits: original Mermaid deployment diagram and comparison tables by the author; official Poolside benchmark and trajectory references linked above; no unofficial screenshots or invented benchmark charts used.
Keep reading
Related reading
⚡ Daily AI Model Drop — Get Kimi K3 benchmarks before Twitter
Join 2,400+ AI engineers. 1 email/day, no spam, unsubscribe anytime