@gea-ai/extensions-sdk 0.1.260825-alpha.4 → 0.1.260825-alpha.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +7 -0
  2. package/package.json +2 -2
package/README.md CHANGED
@@ -694,6 +694,13 @@ resource handles from that bootstrap and exposes them as typed `app.resources`
694
694
  when the frontend uses `useExtensionApp()` from a runtime created with the
695
695
  declaration.
696
696
 
697
+ Declared resource handles are an authoring and lifecycle convenience, not an
698
+ additional permission boundary. The curated `app.gea.context` methods may also
699
+ operate on existing Context resources. Every call runs as the current signed-in
700
+ user and keeps the target Context route's ordinary API-scope, organization,
701
+ workspace, resource, and row-scope authorization; an Extension never gains
702
+ permissions that the user does not already have.
703
+
697
704
  > **Warning:** Syncing a declaration that removes resources may deactivate
698
705
  > their bindings immediately, including bindings used by the currently
699
706
  > published extension. The underlying workspace resources and their data are
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@gea-ai/extensions-sdk",
3
- "version": "0.1.260825-alpha.4",
3
+ "version": "0.1.260825-alpha.5",
4
4
  "private": false,
5
5
  "homepage": "https://musegea.com/developers/extensions",
6
6
  "license": "Apache-2.0",
@@ -52,7 +52,7 @@
52
52
  "dependencies": {
53
53
  "@tanstack/react-query": "^5.101.0",
54
54
  "zod": "4.3.6",
55
- "@gea-ai/contract": "0.1.260825-alpha.4"
55
+ "@gea-ai/contract": "0.1.260825-alpha.5"
56
56
  },
57
57
  "devDependencies": {
58
58
  "@types/react": "^19.2.0",