Release v5.2.8 (#3375)

Upgrades to Better Auth 1.7, expands Custom Styles coverage of item headers, and adds a human-approval step to the AI agent's resume edits.

Breaking for self-hosters using a custom OAuth provider: the callback path changes from /api/auth/oauth2/callback/custom to /api/auth/callback/custom, and installs using OAUTH_DISCOVERY_URL need one additional UPDATE after upgrading. Both are documented in docs/self-hosting/sso.mdx.

- Better Auth 1.7, with the account issuer migration and the jwks alg/crv columns the 1.7 jwt plugin requires
- Agent edits gated behind an approval step, with crash-safe runs and context pruning
- item-header now covers every section header row on every template; adds the item-header-row part
- Fixes provider unlinking, auth error messages, and version conflicts on freshly created resumes
- New /auth/error page, translated across all 53 target locales
- DeepSeek Harness plugin moved into packages/dsh-plugin
- Dependency bumps across the workspace

apps/web/locales/am-ET.po

@@ -679,6 +679,11 @@ msgstr "ሽልማቶች"
 msgid "Azerbaijani"
 msgstr "አዘርባይጃንኛ"
 
+#. Action returning a signed-in user to the page where they manage linked providers
+#: src/features/auth/pages/error.tsx
+msgid "Back to authentication settings"
+msgstr "ወደ የማረጋገጫ ቅንብሮች ተመለስ"
+
 #. Secondary navigation button on 2FA verification screen
 #: src/features/auth/pages/verify-2fa.tsx
 msgid "Back to Login"
@@ -688,6 +693,11 @@ msgstr "ወደ መግቢያ ተመለስ"
 msgid "Back to resumes"
 msgstr "ወደ የስራ ልምድ ማስረጃዎች ተመለስ"
 
+#. Action returning the visitor to the sign-in page after a failed sign-in
+#: src/features/auth/pages/error.tsx
+msgid "Back to sign in"
+msgstr "ወደ መግቢያ ተመለስ"
+
 #: src/routes/builder/$resumeId/-sidebar/right/sections/design.tsx
 msgid "Background Color"
 msgstr "የመደብ ቀለም"
@@ -1498,6 +1508,11 @@ msgstr "መግለጫ"
 msgid "Design"
 msgstr "ዲዛይን"
 
+#. Label above the raw error text forwarded by the identity provider
+#: src/features/auth/pages/error.tsx
+msgid "Details from the provider:"
+msgstr "ከአቅራቢው የተገኘ ዝርዝር፡"
+
 #. Destructive action button to turn off two-factor authentication
 #: src/dialogs/auth/disable-two-factor.tsx
 #: src/features/settings/authentication/components/two-factor.tsx
@@ -2981,6 +2996,10 @@ msgstr "ኔትዎርክ"
 msgid "Never expires"
 msgstr "መቼም አያልቅም።"
 
+#: src/features/auth/pages/error.tsx
+msgid "New account sign-ups are currently disabled on this server."
+msgstr "በዚህ አገልጋይ ላይ አዲስ መለያ መመዝገብ በአሁኑ ጊዜ ተሰናክሏል።"
+
 #: src/features/command-palette/pages/navigation.tsx
 #: src/features/command-palette/pages/resumes.tsx
 msgid "New Application"
@@ -4209,6 +4228,11 @@ msgstr "በ GitHub፣ Google ወይም በብጁ OAuth አቅራቢ ግባ።"
 msgid "Sign up"
 msgstr "መመዝገብ"
 
+#. Title on the page shown after a failed or cancelled OAuth sign-in
+#: src/features/auth/pages/error.tsx
+msgid "Sign-in didn't complete"
+msgstr "መግባት አልተጠናቀቀም"
+
 #: src/features/auth/components/social-auth.tsx
 #: src/features/auth/pages/login.tsx
 msgid "Signing in..."
@@ -4295,6 +4319,10 @@ msgstr "ሌላ ነገር…"
 msgid "Something went wrong"
 msgstr "የሆነ ችግር ተፈጥሯል"
 
+#: src/features/auth/pages/error.tsx
+msgid "Something went wrong while signing you in. Please try again."
+msgstr "ስንገባዎት የሆነ ችግር ተፈጥሯል። እባክዎ እንደገና ይሞክሩ።"
+
 #: src/features/applications/components/application-actions-menu.tsx
 #: src/features/applications/components/application-detail-sheet.tsx
 #: src/routes/builder/$resumeId/-sidebar/right/sections/sharing.tsx
@@ -4570,6 +4598,18 @@ msgstr "ታይኛ"
 msgid "Thank you to our sponsors"
 msgstr "ለስፖንሰሮቻችን እናመሰግናለን"
 
+#: src/features/auth/pages/error.tsx
+msgid "That provider account is already linked to a different user."
+msgstr "ያ የአቅራቢ መለያ አስቀድሞ ከሌላ ተጠቃሚ ጋር ተያይዟል።"
+
+#: src/features/auth/pages/error.tsx
+msgid "That provider account uses a different email address than your account."
+msgstr "ያ የአቅራቢ መለያ ከመለያዎ የተለየ የኢሜይል አድራሻ ይጠቀማል።"
+
+#: src/features/auth/pages/error.tsx
+msgid "That sign-in provider is no longer available on this server."
+msgstr "ያ የመግቢያ አቅራቢ በዚህ አገልጋይ ላይ ከእንግዲህ አይገኝም።"
+
 #: src/routes/agent/-components/agent-chat.tsx
 msgid "The agent needs your input."
 msgstr "ወኪሉ የእርስዎን ግብዓት ይፈልጋል።"
@@ -4582,6 +4622,10 @@ msgstr "API ቁልፉ በተሳካ ሁኔታ ተሰርዟል።"
 msgid "The API key will no longer be able to access your data after deletion. This action cannot be undone."
 msgstr "API ቁልፉ ከተሰረዘ በኋላ ለመረጃዎ መዳረስ አይችልም። ይህ ሥራ መቀለብ አይቻልም።"
 
+#: src/features/auth/pages/error.tsx
+msgid "The application that sent you here made an invalid authorization request."
+msgstr "እዚህ የላከዎት መተግበሪያ ልክ ያልሆነ የፈቃድ ጥያቄ አቅርቧል።"
+
 #. Empty-state message when no command palette results match the search query
 #: src/features/command-palette/index.tsx
 msgid "The command you're looking for doesn't exist."
@@ -4600,6 +4644,18 @@ msgstr "የሚፈልጉት ገጽ ተዛውሮ ወይም ከአሁን በኋላ
 msgid "The password you entered is incorrect"
 msgstr "ያስገቡት የይለፍ ቃል ትክክል አይደለም"
 
+#: src/features/auth/pages/error.tsx
+msgid "The provider didn't share an email address, which is required to sign in."
+msgstr "አቅራቢው ለመግባት የሚያስፈልገውን የኢሜይል አድራሻ አላጋራም።"
+
+#: src/features/auth/pages/error.tsx
+msgid "The provider rejected this sign-in attempt. Please start again."
+msgstr "አቅራቢው ይህን የመግቢያ ሙከራ ውድቅ አድርጎታል። እባክዎ እንደገና ይጀምሩ።"
+
+#: src/features/auth/pages/error.tsx
+msgid "The provider's response could not be verified. Please start again."
+msgstr "የአቅራቢው ምላሽ ሊረጋገጥ አልቻለም። እባክዎ እንደገና ይጀምሩ።"
+
 #: src/features/resume/preview/preview.browser.tsx
 msgid "The resume preview could not be updated. The last valid preview is still shown."
 msgstr "የሪሴምዩ ቅድመ እይታ ሊዘመን አልቻለም። የመጨረሻው ትክክለኛ ቅድመ እይታ አሁንም ይታያል።"
@@ -4765,6 +4821,10 @@ msgstr "ይህ ክፍል እንደ ባዶ ርዕስ ይሰጣል።"
 msgid "This section sits in the sidebar."
 msgstr "ይህ ክፍል በጎን አሞሌው ላይ ተቀምጧል."
 
+#: src/features/auth/pages/error.tsx
+msgid "This sign-in attempt expired or was already used. Please start again."
+msgstr "ይህ የመግቢያ ሙከራ ጊዜው አልፎበታል ወይም አስቀድሞ ጥቅም ላይ ውሏል። እባክዎ እንደገና ይጀምሩ።"
+
 #: src/features/auth/pages/register.tsx
 msgid "This step is optional, but recommended."
 msgstr "ይህ እርስዎ መፈለጌ ቢሆንም የሚመከር ደረጃ ነው።"
@@ -5310,6 +5370,14 @@ msgstr "ቅርጸቱን በራስ-ሰር ማግኘት አልቻልንም፤ እ
 msgid "We couldn't find that page"
 msgstr "ያንን ገጽ ማግኘት አልቻልንም"
 
+#: src/features/auth/pages/error.tsx
+msgid "We couldn't link that provider account. Please try again."
+msgstr "ያንን የአቅራቢ መለያ ማያያዝ አልቻልንም። እባክዎ እንደገና ይሞክሩ።"
+
+#: src/features/auth/pages/error.tsx
+msgid "We couldn't read your profile from the provider."
+msgstr "መገለጫዎን ከአቅራቢው ማንበብ አልቻልንም።"
+
 #: src/routes/agent/-components/tool-part-card.tsx
 msgid "Web search"
 msgstr "የድር ፍለጋ"
@@ -5400,6 +5468,10 @@ msgstr "በመግባትም ተጠቃሚ ስምዎን መጠቀም ትችላላ
 msgid "You can share your resume via a unique public URL, protect it with a password, or download it as a PDF to share directly. The choice is yours!"
 msgstr "የየታሪክዎን በተለየ የህዝብ አገናኝ ይካፈሉት፣ በይለፍ ቃል ይከላከሉት፣ ወይም በቀጥታ ለመካፈል እንደ PDF ያውርዱት። ምርጫው የእርስዎ ነው!"
 
+#: src/features/auth/pages/error.tsx
+msgid "You cancelled the sign-in before it finished."
+msgstr "ከመጠናቀቁ በፊት መግባቱን ሰርዘዋል።"
+
 #: src/hooks/use-form-blocker.tsx
 msgid "You have unsaved changes that will be lost."
 msgstr "ያልተቀመጡ ለውጦች አሉዎት።"
@@ -5441,6 +5513,10 @@ msgstr "መረጃዎ ደህና ይጠበቃል፣ ለማንም አይጋለጥ
 msgid "Your data is stored securely and is never shared with third parties. You can also self-host Reactive Resume on your own servers for complete control over your data."
 msgstr "መረጃዎ በደህና ይከማቻል እና ከሶስተኛ ወገኖች ጋር አይተካፈልም። ደግሞም በራስዎ ሰርቨር ላይ Reactive Resumeን በመጫን በመረጃዎ ላይ ሙሉ ቁጥጥር ማግኘት ትችላላችሁ።"
 
+#: src/features/auth/pages/error.tsx
+msgid "Your email address isn't verified with the provider."
+msgstr "የኢሜይል አድራሻዎ በአቅራቢው አልተረጋገጠም።"
+
 #: src/features/resume/builder/draft.ts
 msgid "Your latest changes could not be saved."
 msgstr "የቅርብ ጊዜ ለውጦችዎ ሊቀመጡ አልቻሉም።"
@@ -5546,4 +5622,3 @@ msgstr "አጉር"
 #: src/libs/locale.ts
 msgid "Zulu"
 msgstr "ዙሉ"
-