Utilities, Identity Hardening & the Blocks CLI

This release brings tenant-aware branding to Identity, richer schema and analytics controls to Data, a PDF ingestion engine and a redesigned plan catalogue to Utilities, and a major maturation of the Blocks CLI: / now at 0.5.0 with project source control built in.

Identity

• Tenant-branded OIDC — The OIDC sign-in experience is now rendered from template data and branded per tenant across every flow. Branding is served from the database with the logo delivered over a CDN, supports light and dark themes, and the old per-client branding fields have been migrated out behind a protected management API.

• Flexible activation — The activation password step is now configurable; when no password is collected, accounts activate on arrival. The signup page is served directly from the initiate endpoint with a flow=signup parameter.

• Clearer SSO failures — A refused SSO sign-in is now surfaced in a blocking modal instead of failing silently.

• Scoped tokens & filtering — Organization-scoped tokens can be minted with client credentials, and the users list can be filtered by role and organization.

Data

• Schema index management — A new Indexes tab lets you manage schema indexes directly, with the default ItemId index shown correctly and an accordion UI for index display.

• Graph Log analytics — Graph Log history and analytics can now optionally include Blocks Console operations, and impersonated tokens store their context in the activity record for a clearer audit trail.

Workflow

• Export & import — Workflows can now be exported and imported, making it easy to move automation between projects and environments.

• Mail configuration — Workflows can retrieve mail-server configuration and present a summary, and both the HTTP Request and data-action nodes can authenticate with client credentials or Blocks authentication.

Deployment

• Project source control backend — Deployment now exposes GitHub push-credential and create-repo endpoints, the backend that powers the CLI's new blocks git source-control commands.

Utilities

• PDF ingestion — A new PDF ingestion engine performs managed, in-process inspection of uploaded PDFs — readability, geometry, digital signature, and PDF/A conformance — through a per-file ingestion pipeline that reports a status verdict per file.

• Protected billing endpoints — Subscription and payment endpoints are now guarded with [ProtectedEndPoint], machine callers are identified by their client id, and subscription reads carry quantity bounds.

• Redesigned plan catalogue — The plan catalogue has a modern, animated visual design with improved presentation and accessibility.

Localization

• WordPress integration guide — A new guide page documents configuring the Localization WordPress plugin.

CLI

The CLI matured rapidly from its August debut, moving from 0.2.12 to 0.5.0.

• Project source control (blocks git) — New in 0.5.0: source control for the project's own code through the GitHub account connected in the Blocks portal — status, init, clone, connect, pull, push, and disconnect. Push credentials are fetched per command and never written to disk.

• New command families — captcha and secrets families were added, along with 18 release commands covering the full deployment surface.

• Safer edits — Save and update commands now read the current record and merge changes over it, so omitting a flag no longer wipes stored fields; an endpoint-verification tool checks every CLI route against the live service controllers.

• Reliability & help — A generated blocks help reference, a passive update check that asks before upgrading, and fail-closed native credential storage round out the release.

Developer SDKs

• genesis-os (React) v4.3.7 — Continued refinement of the shared OS app-shell and components across service applications.

• Blocks Genesis (.NET) v4.1.7 — Ongoing v4.1 line updates to the .NET bootstrap SDK.