Mount request context providers for routed CLI and rendered scripts

[ScriptedAlchemy]

Problem

Request context providers do not have mounting parity across framework-rendered surfaces.

The "Request context providers" section of docs/entry-conventions.md states that conventional providers mount for generated MCP and event routes. Routed CLI commands and rendered scripts can execute the same component tree without those provider values.

examples/audiobook-curator demonstrates the asymmetry: its catalog reads request-time library tooling context from a conventional provider when rendered as an MCP resource, while the same provider-dependent component tree cannot rely on that context when projected to routed CLI or rendered-script execution.

This makes rendering behavior depend on the entry surface even though all surfaces use the Agent request context.

Proposal

Run conventional request providers for routed CLI commands and rendered scripts using the same generated provider registry and deterministic ordering as generated MCP and event routes.

Each provider should receive the existing { invocation, signal } contract. Its returned value should mount at the same camel-cased key under (await agent()).providers, with provider failures retaining the current fail-closed behavior.

Why

• Gives shared component trees one request-context contract across framework surfaces.
• Prevents silent loss of provider-backed diagnostics in CLI and scripts.
• Avoids route-specific fallback wiring solely because the transport changed.
• Makes MCP-to-CLI projection preserve application context as well as route logic.

Acceptance criteria

• Routed CLI and rendered-script requests execute conventional providers once per request.
• Provider ordering, key derivation, cancellation, and fail-closed behavior match generated MCP routes.
• invocation.kind remains surface-specific so providers can intentionally branch.
• Route-unit and executable tests cover provider values on MCP, routed CLI, and rendered scripts.
• Existing routes without providers remain behavior-compatible.

[ScriptedAlchemy]

Partially resolved by #319 (merged as 009d6ffdb; implementation 5317ce619). Conventional providers now mount for projected MCP commands, rendered routed CLI commands, and rendered scripts with deterministic ordering, cancellation, processLifetime, and fail-closed behavior matching generated MCP workers. This does not yet mount providers for plain .ts routed CLI commands, so the issue should remain open for that remaining surface.

[ScriptedAlchemy]

Closed-issue audit (lane G1): PARTIAL → fixed in #366

This issue was closed on 2026-09-02 while its own delivery note (#319) said it should stay open: plain .ts routed CLI commands did not mount conventional providers — generatedCliBinEntrySource's plain execute called runAgentRequest with no providers, so (await agent()).providers was empty on that surface while MCP, event, projected-MCP, rendered-CLI, and rendered-script scopes mounted the registry.

Re-auditing the surfaces #319 did claim exposed a second gap: the rendered-session bridge never posted invocation to its react-server worker, so providers behind rendered CLI commands and rendered scripts received invocation: undefined (a provider reading invocation.kind threw Cannot read properties of undefined). There was no executable-level test for provider values on any CLI/script surface, only generated-source string pins.

Fixed in #366, squash merge a0562e6f46be94910f181499cc3b4c364d00937c:

• Plain routed CLI runs the same ordered, fail-closed provider loop before every request (packages/agent-bundle/src/build/entry-shell.ts, shared providerExecutionSource helper across all three generated scopes); package-build.ts passes model.providers; GeneratedCliExecuteContext gains args so the provider invocation is { kind: 'cli', props: { args, command } } like the rendered path.
• The rendered-session bridge forwards invocation to the worker.
• docs/entry-conventions.md provider section/table now lists plain routed CLI and the surface-specific invocation.kind.

Acceptance ledger after #366

• ✅ Routed CLI (plain + rendered) and rendered-script requests execute providers once per request.
• ✅ Ordering, key derivation, cancellation (signal), fail-closed behavior match generated MCP routes (same codegen helper).
• ✅ invocation.kind stays surface-specific (cli / script / tool) — now actually observable on rendered surfaces.
• ✅ Executable coverage: packages/agent-bundle/tests/cli-routes-build.test.ts builds a src/providers/library-tooling.ts and asserts the value on a plain tooling command, the rendered report command ('cli:ffprobe 6.1'), and the rendered summarize script ('script:ffprobe 6.1'); entry-shell.test.ts pins the plain-CLI codegen and the bridge's invocation forwarding.
• ✅ Routes without providers stay behavior-compatible (plain CLI mounts only the framework-owned processLifetime).

Gates on the merged head: typecheck ✓, lint 0/0 ✓, unit 2667/0 ✓, route-unit 35 ✓, projection 63 ✓, full pnpm build && pnpm test:integration:run 73 files / 938 passed / 0 failed ✓, PR CI all green. Leaving closed.