Release v5.2.8 (#3375)

Upgrades to Better Auth 1.7, expands Custom Styles coverage of item headers, and adds a human-approval step to the AI agent's resume edits.

Breaking for self-hosters using a custom OAuth provider: the callback path changes from /api/auth/oauth2/callback/custom to /api/auth/callback/custom, and installs using OAUTH_DISCOVERY_URL need one additional UPDATE after upgrading. Both are documented in docs/self-hosting/sso.mdx.

- Better Auth 1.7, with the account issuer migration and the jwks alg/crv columns the 1.7 jwt plugin requires
- Agent edits gated behind an approval step, with crash-safe runs and context pruning
- item-header now covers every section header row on every template; adds the item-header-row part
- Fixes provider unlinking, auth error messages, and version conflicts on freshly created resumes
- New /auth/error page, translated across all 53 target locales
- DeepSeek Harness plugin moved into packages/dsh-plugin
- Dependency bumps across the workspace

apps/web/locales/da-DK.po

@@ -679,6 +679,11 @@ msgstr "Priser"
 msgid "Azerbaijani"
 msgstr "Aserbajdsjansk"
 
+#. Action returning a signed-in user to the page where they manage linked providers
+#: src/features/auth/pages/error.tsx
+msgid "Back to authentication settings"
+msgstr "Tilbage til godkendelsesindstillinger"
+
 #. Secondary navigation button on 2FA verification screen
 #: src/features/auth/pages/verify-2fa.tsx
 msgid "Back to Login"
@@ -688,6 +693,11 @@ msgstr "Tilbage til login"
 msgid "Back to resumes"
 msgstr "Tilbage til CV'er"
 
+#. Action returning the visitor to the sign-in page after a failed sign-in
+#: src/features/auth/pages/error.tsx
+msgid "Back to sign in"
+msgstr "Tilbage til log ind"
+
 #: src/routes/builder/$resumeId/-sidebar/right/sections/design.tsx
 msgid "Background Color"
 msgstr "Baggrundsfarve"
@@ -1498,6 +1508,11 @@ msgstr "Beskrivelse"
 msgid "Design"
 msgstr "Design"
 
+#. Label above the raw error text forwarded by the identity provider
+#: src/features/auth/pages/error.tsx
+msgid "Details from the provider:"
+msgstr "Detaljer fra udbyderen:"
+
 #. Destructive action button to turn off two-factor authentication
 #: src/dialogs/auth/disable-two-factor.tsx
 #: src/features/settings/authentication/components/two-factor.tsx
@@ -2981,6 +2996,10 @@ msgstr "Netværk"
 msgid "Never expires"
 msgstr "Udløber aldrig"
 
+#: src/features/auth/pages/error.tsx
+msgid "New account sign-ups are currently disabled on this server."
+msgstr "Oprettelse af nye konti er i øjeblikket deaktiveret på denne server."
+
 #: src/features/command-palette/pages/navigation.tsx
 #: src/features/command-palette/pages/resumes.tsx
 msgid "New Application"
@@ -4209,6 +4228,11 @@ msgstr "Log ind med GitHub, Google eller en brugerdefineret OAuth-udbyder."
 msgid "Sign up"
 msgstr "Tilmeld dig"
 
+#. Title on the page shown after a failed or cancelled OAuth sign-in
+#: src/features/auth/pages/error.tsx
+msgid "Sign-in didn't complete"
+msgstr "Login blev ikke gennemført"
+
 #: src/features/auth/components/social-auth.tsx
 #: src/features/auth/pages/login.tsx
 msgid "Signing in..."
@@ -4295,6 +4319,10 @@ msgstr "Noget andet…"
 msgid "Something went wrong"
 msgstr "Noget gik galt"
 
+#: src/features/auth/pages/error.tsx
+msgid "Something went wrong while signing you in. Please try again."
+msgstr "Noget gik galt, da du skulle logges ind. Prøv venligst igen."
+
 #: src/features/applications/components/application-actions-menu.tsx
 #: src/features/applications/components/application-detail-sheet.tsx
 #: src/routes/builder/$resumeId/-sidebar/right/sections/sharing.tsx
@@ -4570,6 +4598,18 @@ msgstr "Thai"
 msgid "Thank you to our sponsors"
 msgstr "Tak til vores sponsorer"
 
+#: src/features/auth/pages/error.tsx
+msgid "That provider account is already linked to a different user."
+msgstr "Den udbyderkonto er allerede knyttet til en anden bruger."
+
+#: src/features/auth/pages/error.tsx
+msgid "That provider account uses a different email address than your account."
+msgstr "Den udbyderkonto bruger en anden e-mailadresse end din konto."
+
+#: src/features/auth/pages/error.tsx
+msgid "That sign-in provider is no longer available on this server."
+msgstr "Den login-udbyder er ikke længere tilgængelig på denne server."
+
 #: src/routes/agent/-components/agent-chat.tsx
 msgid "The agent needs your input."
 msgstr "Agenten har brug for din input."
@@ -4582,6 +4622,10 @@ msgstr "API-nøglen er blevet slettet."
 msgid "The API key will no longer be able to access your data after deletion. This action cannot be undone."
 msgstr "API-nøglen vil ikke længere kunne få adgang til dine data efter sletning. Denne handling kan ikke fortrydes."
 
+#: src/features/auth/pages/error.tsx
+msgid "The application that sent you here made an invalid authorization request."
+msgstr "Appen, der sendte dig hertil, lavede en ugyldig godkendelsesanmodning."
+
 #. Empty-state message when no command palette results match the search query
 #: src/features/command-palette/index.tsx
 msgid "The command you're looking for doesn't exist."
@@ -4600,6 +4644,18 @@ msgstr "Den side, du leder efter, er muligvis blevet flyttet eller findes ikke l
 msgid "The password you entered is incorrect"
 msgstr "Den adgangskode, du indtastede, er forkert"
 
+#: src/features/auth/pages/error.tsx
+msgid "The provider didn't share an email address, which is required to sign in."
+msgstr "Udbyderen delte ikke en e-mailadresse, som kræves for at logge ind."
+
+#: src/features/auth/pages/error.tsx
+msgid "The provider rejected this sign-in attempt. Please start again."
+msgstr "Udbyderen afviste dette login-forsøg. Start venligst forfra."
+
+#: src/features/auth/pages/error.tsx
+msgid "The provider's response could not be verified. Please start again."
+msgstr "Udbyderens svar kunne ikke bekræftes. Start venligst forfra."
+
 #: src/features/resume/preview/preview.browser.tsx
 msgid "The resume preview could not be updated. The last valid preview is still shown."
 msgstr "Forhåndsvisningen af CV'et kunne ikke opdateres. Den sidste gyldige forhåndsvisning vises stadig."
@@ -4765,6 +4821,10 @@ msgstr "Dette afsnit gengives som en tom overskrift."
 msgid "This section sits in the sidebar."
 msgstr "Denne sektion sidder i sidebjælken."
 
+#: src/features/auth/pages/error.tsx
+msgid "This sign-in attempt expired or was already used. Please start again."
+msgstr "Dette login-forsøg er udløbet eller allerede brugt. Start venligst forfra."
+
 #: src/features/auth/pages/register.tsx
 msgid "This step is optional, but recommended."
 msgstr "Dette trin er valgfrit, men anbefales."
@@ -5310,6 +5370,14 @@ msgstr "Vi kunne ikke registrere formatet automatisk – vælg det venligst oven
 msgid "We couldn't find that page"
 msgstr "Vi kunne ikke finde den side"
 
+#: src/features/auth/pages/error.tsx
+msgid "We couldn't link that provider account. Please try again."
+msgstr "Vi kunne ikke knytte den udbyderkonto. Prøv venligst igen."
+
+#: src/features/auth/pages/error.tsx
+msgid "We couldn't read your profile from the provider."
+msgstr "Vi kunne ikke læse din profil fra udbyderen."
+
 #: src/routes/agent/-components/tool-part-card.tsx
 msgid "Web search"
 msgstr "Websøgning"
@@ -5400,6 +5468,10 @@ msgstr "Du kan også bruge dit brugernavn til at logge ind."
 msgid "You can share your resume via a unique public URL, protect it with a password, or download it as a PDF to share directly. The choice is yours!"
 msgstr "Du kan dele dit CV via en unik offentlig URL, beskytte det med en adgangskode eller downloade det som PDF for at dele det direkte. Valget er dit!"
 
+#: src/features/auth/pages/error.tsx
+msgid "You cancelled the sign-in before it finished."
+msgstr "Du annullerede login, før det var færdigt."
+
 #: src/hooks/use-form-blocker.tsx
 msgid "You have unsaved changes that will be lost."
 msgstr "Du har ikke-gemte ændringer, der vil gå tabt."
@@ -5441,6 +5513,10 @@ msgstr "Dine data er sikre og bliver aldrig delt eller solgt til nogen."
 msgid "Your data is stored securely and is never shared with third parties. You can also self-host Reactive Resume on your own servers for complete control over your data."
 msgstr "Dine data lagres sikkert og deles aldrig med tredjeparter. Du kan også selv-hoste Reactive Resume på dine egne servere for fuld kontrol over dine data."
 
+#: src/features/auth/pages/error.tsx
+msgid "Your email address isn't verified with the provider."
+msgstr "Din e-mailadresse er ikke bekræftet hos udbyderen."
+
 #: src/features/resume/builder/draft.ts
 msgid "Your latest changes could not be saved."
 msgstr "Dine seneste ændringer kunne ikke gemmes."
@@ -5546,4 +5622,3 @@ msgstr "Zoom ud"
 #: src/libs/locale.ts
 msgid "Zulu"
 msgstr "Zulu"
-