@punica/editor 1.28.1 → 1.29.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@punica/editor",
-  "version": "1.28.1",
+  "version": "1.29.0",
   "description": "Punica Editor",
   "private": false,
   "type": "module",
@@ -26,6 +26,7 @@
     "check:permissions": "node scripts/check-permissions.mjs",
     "check:empty-states": "node scripts/check-empty-states.mjs",
     "check:capability-handlers": "node scripts/check-capability-handlers.mjs",
+    "check:duplicate-capabilities": "node scripts/check-duplicate-capabilities.mjs",
     "check:instruction-classes": "node scripts/check-instruction-classes.mjs",
     "report:capability-actions": "node scripts/report-capability-actions.mjs",
     "test": "vitest run",

package/types/punica.module.kernel.events.d.ts

@@ -225,6 +225,21 @@ declare module 'punica' {
        * the time range; `limit` keeps the tail-most N matches.
        */
       replay(opts: EventReplayOptions): Promise<EventReplayResult>;
+
+      /**
+       * Write every queued event to the store now; resolves when the
+       * write has finished.
+       *
+       * Persistence is batched (ten events or five seconds), which is
+       * right for a session and wrong for a process about to exit. A
+       * one-shot CLI command or a headless server on SIGINT calls this
+       * so its own audit records reach disk. Idempotent; a no-op when
+       * the queue is empty.
+       *
+       * Optional so a host or test double implementing `EventsApi`
+       * against an older substrate still type-checks.
+       */
+      flush?(): Promise<void>;
     }
 
     /**

package/types/punica.module.runtime.host.d.ts

@@ -369,13 +369,30 @@ declare module 'punica' {
         /** Filesystem surface scoped to the data directory. */
         dataFs: HostDataFs;
         /**
-         * Optional managed-process surface (Electron). Hosts that cannot spawn
-         * processes (browser) omit it; the facade throws a clear error on use.
+         * Optional managed-process surface (Electron). A **host provider** that
+         * cannot spawn processes (browser) omits it.
+         *
+         * **Do not feature-detect this on `punica.runtime.host`.** Unlike
+         * `mcpServer` and `system` below, the facade exposes `servers` as a
+         * plain always-present key rather than a getter, so
+         * `if (!punica.runtime.host?.servers)` is `false` on every host and a
+         * guard written that way never fires — measured against the shipped
+         * bundle on 2026-09-04, with `extension-llms-onnx-runtime/src/server.ts`
+         * as the live example. That is deliberate: the design here is *call it
+         * and get a clear error* rather than *ask first*, and the facade's own
+         * message already names the surface and the reason. Optional on this
+         * interface therefore describes what a provider may omit, not what a
+         * caller can see.
          */
         servers?: HostServerApi;
         /**
-         * Optional JSON-over-HTTP surface (Electron). Hosts without network
-         * access omit it; the facade throws a clear error on use.
+         * Optional JSON-over-HTTP surface (Electron). A **host provider**
+         * without network access omits it.
+         *
+         * **Do not feature-detect this on `punica.runtime.host`** — same reason
+         * as `servers` above: the facade exposes it as a plain key and the call
+         * throws with a clear message. Its two sub-surfaces `download` and
+         * `onDownloadProgress` *are* getters, so those two can be asked about.
          */
         http?: HostHttpApi;
         /**