Roadmap item 6: Add inactive alternative producer config payload (Codex CLI producer)

[yihanzhu]

Adds the immutable producer-config payload for the alternative profile before that profile is assembled, so the assembly PR can pin a main-reachable Git object for it, the same way #231 did for the default profile. The alternative profile binds the Codex CLI producer normalizer (openai provider), so its preference differs from the default and needs its own payload.

The payload stays inactive: it grants no capability and invokes no model, credential, provider, or target.

Proof run on d46eb83:

• bash scripts/test/alternative-producer-config.test.sh (2/2) and bash scripts/test/default-producer-config.test.sh (2/2)
• shellcheck -x -S style scripts/test/alternative-producer-config.test.sh (ShellCheck 0.11.0)
• bash scripts/test/portable-core-schema.test.sh → failures: 0
• bash scripts/check-rename.sh

Construction mode: inactive output, no human gate. Roadmap item 6 wiring for the alternative harness.

🤖 Generated with Claude Code

[cloudflare-workers-and-pages]

Deploying ystack with    Cloudflare Pages

Latest commit:	d7646ed
Status:	✅  Deploy successful!
Preview URL:	https://321fd3c5.fabrica-6yx.pages.dev
Branch Preview URL:	https://ystack-roadmap-6-alternative.fabrica-6yx.pages.dev

View logs

[yihanzhu]

Codex reviewer (cross-vendor, read-only)

Reviewed-head: 1bed887
Reviewed-base: 0fbe68e
reviewer: gpt-5.5 @ high

Posted verbatim by codex-review.sh (codex exec review --json --base refs/codex-review/246-32686/base in an isolated temp worktree, sandbox forced read-only). Comments only — Codex never pushes, approves, or merges.

The patch adds a new first-sorted CI test that assumes a cached pinned jq binary already exists. On clean CI runners this breaks the test suite, so the change is not correct as-is.

Review comment:

• [P1] Make the new config test bootstrap jq — /var/folders/rm/bkx4f4b91vqfn79vk02pcd140000gn/T/tmp.ck1ahEe6N7/scripts/test/alternative-producer-config.test.sh:19-21
  On a clean CI runner this new test is the first *.test.sh alphabetically, because run-all.sh executes sorted filenames, but it only checks for ${TMPDIR:-/tmp}/ystack-portable-core-jq16/$asset and fails instead of downloading it. Since no earlier test has populated that cache, the required test suite will fail before reaching the existing jq-bootstrapping tests; the repo requires CI to stay green as a hard gate (AGENTS.md:86-87).

[yihanzhu]

Codex reviewer (cross-vendor, read-only)

Reviewed-head: d7646ed
Reviewed-base: 0fbe68e
reviewer: gpt-5.5 @ high

Posted verbatim by codex-review.sh (codex exec review --json --base refs/codex-review/246-35250/base in an isolated temp worktree, sandbox forced read-only). Comments only — Codex never pushes, approves, or merges.

The added inactive alternative producer config, restore documentation, manifest entry, and focused test are consistent with the existing default producer config pattern. I did not identify any discrete correctness, security, or CI-breaking issues in the diff.