Release 1.34.0

1.34.0 (2026-10-20)

✨ Features

• agent: add agent request signature primitives (1160719)
• files: files sources with Archive, Snapshots and Sync methods (1c6283b)

🐛 Bug Fixes

• add single global role allow-list and narrow system permissions (71162d2)
• agent: authenticate agent callbacks with signed requests (7fcfffa)
• agent: sanitize agent-reported versions printed in outdated-agent banners (a377d4f)
• agent: scope agent callbacks to the reporting agent's databases (b6665ff)
• agent: withhold storage credentials from agents that cannot decrypt them (7c1c1bc)
• auth: create the bootstrap passkey account only after verification (754debe)
• auth: restrict sessionless passkey registration to first-account setup (ecc74b9)
• deny OIDC login when provisioned role is not a supported global role (cc608ea)
• display small upload sizes accurately (86e4cf7)
• files (25a5655)
• generate upload UUID over HTTP (f0ac455)
• refactoring (e647973)
• refactoring (27b84a6)
• refactoring (828d936)
• refactoring (7ad531d)
• refactoring (98e78ee)
• reject unsupported multi-role values in Better Auth user hooks (6d587d3)
• settings: scope settings updates to the system row (3ab05a9)
• show no-active-organization page instead of 404 in organization routes (a1845c3)
• sync files (1a882c1)
• version agent (7159334)

🔧 Chores

• server modules cleanup (4893079)