Skip to main content

Utilities, Identity Hardening & the Blocks CLI

osSeptember 13, 2026

Release Notes​

This release brings tenant-aware branding to Identity, richer schema and analytics controls to Data, a PDF ingestion engine and a redesigned plan catalogue to Utilities, and a major maturation of the Blocks CLI — now at 0.5.0 with project source control built in.

Identity​

  • Tenant-branded OIDC — The OIDC sign-in experience is now rendered from template data and branded per tenant across every flow. Branding is served from the database with the logo delivered over a CDN, supports light and dark themes, and the old per-client branding fields have been migrated out behind a protected management API.

  • Flexible activation — The activation password step is now configurable; when no password is collected, accounts activate on arrival. The signup page is served directly from the initiate endpoint with a flow=signup parameter.

  • Clearer SSO failures — A refused SSO sign-in is now surfaced in a blocking modal instead of failing silently.

  • Scoped tokens & filtering — Organization-scoped tokens can be minted with client credentials, and the users list can be filtered by role and organization.

Data​

  • Schema index management — A new Indexes tab lets you manage schema indexes directly, with the default ItemId index shown correctly, an accordion UI for index display, and a utility to flatten indexable field names. The tab appears only where the schema type supports it.

  • Directory access levels — A new ObjectAccessLevel governs directory and file access, and manage-access actions are restricted on protected default directories.

  • Graph Log analytics — Graph Log history and analytics can now optionally include Blocks Console operations, and impersonated tokens store their context in the activity record for a clearer audit trail.

Workflow​

  • Export & import — Workflows can now be exported and imported, making it easy to move automation between projects and environments.

  • Mail configuration — Workflows can retrieve mail-server configuration and present a summary, and both the HTTP Request and data-action nodes can authenticate with client credentials or Blocks authentication.

Deployment​

  • Project source control backend — Deployment now exposes GitHub push-credential and create-repo endpoints, the backend that powers the CLI's new blocks git source-control commands.

Utilities​

  • PDF ingestion — A new PDF ingestion engine performs managed, in-process inspection of uploaded PDFs — readability, geometry, digital signature, and PDF/A conformance — through a per-file ingestion pipeline that reports a status verdict per file.

  • Protected billing endpoints — Subscription and payment endpoints are now guarded with [ProtectedEndPoint], machine callers are identified by their client id, and subscription reads carry quantity bounds.

  • Redesigned plan catalogue — The plan catalogue has a modern, animated visual design with improved presentation and accessibility.

Localization​

  • WordPress integration guide — A new guide page documents configuring the Localization WordPress plugin.

CLI​

The CLI matured rapidly from its August debut, moving from 0.3.0 to 0.5.0.

  • Project source control (blocks git) — New in 0.5.0: source control for the project's own code through the GitHub account connected in the Blocks portal — status, init, clone, connect, pull, push, and disconnect. Push credentials are fetched per command and never written to disk.

  • New command families — captcha and secrets families were added, along with 18 release commands covering the full deployment surface.

  • Safer edits — Save and update commands now read the current record and merge changes over it, so omitting a flag no longer wipes stored fields; an endpoint-verification tool checks every CLI route against the live service controllers.

  • Reliability & help — A generated blocks help reference, a passive update check that asks before upgrading, and fail-closed native credential storage round out the release.

Developer SDKs​

  • genesis-os (React) v4.3.7 — Continued refinement of the shared OS app-shell and components across service applications.

  • Blocks Genesis (.NET) v4.1.7 — Ongoing v4.1 line updates to the .NET bootstrap SDK.