ideon

Added

• 3D Scene block: a new block type for the canvas, supporting primitives, models, and hotspots (#128).
• OIDC authentication fully configurable through environment variables (OIDC_ISSUER, OIDC_CLIENT_ID, OIDC_CLIENT_SECRET): if all three are set at startup, the OIDC provider is enabled and the management UI card turns gray with a "Set by environment variables" badge (#136).

Fixed

• Fixed MCP tools returning no projects when PostgreSQL runs under a non-superuser role with row-level security enabled; MCP requests now run inside withAuthenticatedSession and use getDb() so RLS evaluates against the API key's user (#141).
• Fixed OIDC sign-in failing with invalid_state when the identity provider requires the state parameter, such as Pocket ID 2.10+; Auth.js now sends and validates state alongside PKCE on the authorization request and callback (#142).

Security

• The Docker image now runs on Node 24.22.2, which includes the fix for CVE-2026-111497 (remote code execution via Brotli decoding) along with V8 stability and performance backports, and the base image is pinned to that exact version so future builds no longer drift (#140).

Ideon 1.0 makes the workspace trustworthy infrastructure: every project carries a complete, tamper-evident record, and any state can be sealed, exported, and verified independently — by anyone, without Ideon.

Added

• Added official records — seal a project state as an immutable, hash-chained reference and download the formal dossier as a ZIP archive.
• Added a Provenance action in the block context menu — right-click any block to see where it came from and what happened to it in the sealed record.
• Added a project audit trail — lifecycle changes, saved states, rewinds, and rejected write attempts are recorded as chained and tamper-evident events.
• Added database blocks — a spreadsheet-style block with columns, rows, sorting, filtering, and relation cells that link to other blocks (#126).
• Added a center anchor marker to sub-canvases so flows can be routed through the canvas center (#135).
• Added Git repository sync so canvas structure, positions, notes, and diagrams can be versioned and restored or synchronized safely (#125).
• Improved Markdown tables in canvas notes so comparison matrices remain readable and collaborative while editing (#121).
• Added Mermaid diagram blocks with collaborative source editing, canvas previews, and PNG export (#118).

Security

• Server-enforced access control on the versioning API — collaborators can no longer restore, rename, or delete project history regardless of client state; only the project owner can rewind, rename, or remove states.

Removed

• Removed SAML SSO support — enterprise sign-in via SAML identity providers is no longer included; external identity providers remain available through OAuth providers and generic OIDC.

Fixed

• Fixed login failures caused by Auth.js UntrustedHost errors (#133).
• Atomic rewind — restoring a past state rewrites the project in a single transaction and propagates to every connected client, with a confirmation dialog that flags unsaved local changes before applying.

Added

• Added SQL syntax support to Snippet blocks so database queries and scripts can be written and highlighted more cleanly in the canvas (#131).
• Added official MCP skill documentation and examples for canvas automation so IDE and agent workflows can integrate with Ideon more easily (#120).

Development is picking back up ! After a short break, Ideon is actively moving forward again. More updates and improvements are on the way.

Added

• Sub-Canvases: Break large projects into focused sub-canvases, giving each area of work its own space while keeping related blocks and ideas organized and easy to navigate.