fix: return event rewrites and context without rendering

[ScriptedAlchemy]

Handlers can return updatedInput from a continuing tool/before result and additionalContext from a continuing or denying result, without starting a Flight worker. Reuse the rendered event projector so host permissions and context restrictions stay consistent; snapshot strict JSON rewrites and reject illegal fields. Update English and Chinese authoring docs and add one patch changeset.

Closes #872.

Validation against current origin/main:

• pnpm build, pnpm typecheck, pnpm lint: passed.
• AGENT_BUNDLE_TEST_TIME_SCALE=4 pnpm test:unit --pool.maxWorkers 4: 4,311 passed, 6 skipped.
• pnpm test:route-unit: 91 passed; pnpm test:projection: 197 passed.
• Full integration pool with repository-pinned host CLIs: 1,165 passed, 4 skipped. Includes the generated-hook regression with the deferred executor removed.
• pnpm test:packed: 47 passed, 1 skipped. Pinned-CLI packed host proof: 6 passed.
• pnpm docs:site:build: passed, language parity passed, 34,853 internal links and zero broken links.
• Independent GPT-5.6 Sol review: no remaining blockers after correcting admission of updatedInput: undefined on other event families.
• GitHub CI, docs, preview, and changeset checks: green on 62bd459247.

Host proofs use repository pins (Claude 2.1.260, Codex 0.147.0) in an isolated prefix.

[changeset-bot]

🦋 Changeset detected

Latest commit: 62bd459

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 2 packages

Name	Type
agent-bundle	Patch
create-agent-bundle	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[pkg-pr-new]

npm i https://pkg.pr.new/ScriptedAlchemy/agent-bundle@873

npm i https://pkg.pr.new/ScriptedAlchemy/agent-bundle/create-agent-bundle@873

npm i https://pkg.pr.new/ScriptedAlchemy/agent-bundle/rsc-markdown-stream@873

npm i https://pkg.pr.new/ScriptedAlchemy/agent-bundle/@agent-bundle/runtime@873

commit: 62bd459

[ScriptedAlchemy]

Independent review (GPT-5.6 Sol; author GPT-6) found an explicitly undefined updatedInput field was admitted outside tool/before. Fixed by using event-specific allowed fields and covered both defined and undefined rejection. Follow-up review at 62bd459247 found no remaining blockers. Positive deny/context and Amp rewrite assertions were added. No open review threads.

Local host proofs initially used auto-updated Claude 2.1.289, while repository evidence pins 2.1.260. Verification now uses isolated CLI pins installed with the repository script; no host-proof contract or installed user CLI was changed.