Release v5.2.8 (#3375)

Upgrades to Better Auth 1.7, expands Custom Styles coverage of item headers, and adds a human-approval step to the AI agent's resume edits.

Breaking for self-hosters using a custom OAuth provider: the callback path changes from /api/auth/oauth2/callback/custom to /api/auth/callback/custom, and installs using OAUTH_DISCOVERY_URL need one additional UPDATE after upgrading. Both are documented in docs/self-hosting/sso.mdx.

- Better Auth 1.7, with the account issuer migration and the jwks alg/crv columns the 1.7 jwt plugin requires
- Agent edits gated behind an approval step, with crash-safe runs and context pruning
- item-header now covers every section header row on every template; adds the item-header-row part
- Fixes provider unlinking, auth error messages, and version conflicts on freshly created resumes
- New /auth/error page, translated across all 53 target locales
- DeepSeek Harness plugin moved into packages/dsh-plugin
- Dependency bumps across the workspace

apps/web/locales/id-ID.po

@@ -679,6 +679,11 @@ msgstr "Penghargaan"
 msgid "Azerbaijani"
 msgstr "Azerbaijani"
 
+#. Action returning a signed-in user to the page where they manage linked providers
+#: src/features/auth/pages/error.tsx
+msgid "Back to authentication settings"
+msgstr "Kembali ke pengaturan autentikasi"
+
 #. Secondary navigation button on 2FA verification screen
 #: src/features/auth/pages/verify-2fa.tsx
 msgid "Back to Login"
@@ -688,6 +693,11 @@ msgstr "Kembali ke Login"
 msgid "Back to resumes"
 msgstr "Kembali ke resume"
 
+#. Action returning the visitor to the sign-in page after a failed sign-in
+#: src/features/auth/pages/error.tsx
+msgid "Back to sign in"
+msgstr "Kembali ke masuk"
+
 #: src/routes/builder/$resumeId/-sidebar/right/sections/design.tsx
 msgid "Background Color"
 msgstr "Warna Latar Belakang"
@@ -1498,6 +1508,11 @@ msgstr "Deskripsi"
 msgid "Design"
 msgstr "Desain"
 
+#. Label above the raw error text forwarded by the identity provider
+#: src/features/auth/pages/error.tsx
+msgid "Details from the provider:"
+msgstr "Detail dari penyedia:"
+
 #. Destructive action button to turn off two-factor authentication
 #: src/dialogs/auth/disable-two-factor.tsx
 #: src/features/settings/authentication/components/two-factor.tsx
@@ -2981,6 +2996,10 @@ msgstr "Jaringan"
 msgid "Never expires"
 msgstr "Tidak pernah kadaluarsa"
 
+#: src/features/auth/pages/error.tsx
+msgid "New account sign-ups are currently disabled on this server."
+msgstr "Pendaftaran akun baru saat ini dinonaktifkan di server ini."
+
 #: src/features/command-palette/pages/navigation.tsx
 #: src/features/command-palette/pages/resumes.tsx
 msgid "New Application"
@@ -4209,6 +4228,11 @@ msgstr "Masuk dengan GitHub, Google atau penyedia OAuth kustom."
 msgid "Sign up"
 msgstr "Daftar"
 
+#. Title on the page shown after a failed or cancelled OAuth sign-in
+#: src/features/auth/pages/error.tsx
+msgid "Sign-in didn't complete"
+msgstr "Proses masuk tidak selesai"
+
 #: src/features/auth/components/social-auth.tsx
 #: src/features/auth/pages/login.tsx
 msgid "Signing in..."
@@ -4295,6 +4319,10 @@ msgstr "Lainnya…"
 msgid "Something went wrong"
 msgstr "Terjadi kesalahan."
 
+#: src/features/auth/pages/error.tsx
+msgid "Something went wrong while signing you in. Please try again."
+msgstr "Terjadi kesalahan saat memasukkan Anda. Silakan coba lagi."
+
 #: src/features/applications/components/application-actions-menu.tsx
 #: src/features/applications/components/application-detail-sheet.tsx
 #: src/routes/builder/$resumeId/-sidebar/right/sections/sharing.tsx
@@ -4570,6 +4598,18 @@ msgstr "Thai"
 msgid "Thank you to our sponsors"
 msgstr "Terima kasih kepada para sponsor kami."
 
+#: src/features/auth/pages/error.tsx
+msgid "That provider account is already linked to a different user."
+msgstr "Akun penyedia tersebut sudah tertaut dengan pengguna lain."
+
+#: src/features/auth/pages/error.tsx
+msgid "That provider account uses a different email address than your account."
+msgstr "Akun penyedia tersebut menggunakan alamat email yang berbeda dari akun Anda."
+
+#: src/features/auth/pages/error.tsx
+msgid "That sign-in provider is no longer available on this server."
+msgstr "Penyedia masuk tersebut tidak lagi tersedia di server ini."
+
 #: src/routes/agent/-components/agent-chat.tsx
 msgid "The agent needs your input."
 msgstr "Agen tersebut membutuhkan masukan Anda."
@@ -4582,6 +4622,10 @@ msgstr "API key telah berhasil dihapus."
 msgid "The API key will no longer be able to access your data after deletion. This action cannot be undone."
 msgstr "API key tidak akan lagi dapat mengakses data Anda setelah dihapus. Tindakan ini tidak dapat dibatalkan."
 
+#: src/features/auth/pages/error.tsx
+msgid "The application that sent you here made an invalid authorization request."
+msgstr "Aplikasi yang mengirim Anda ke sini membuat permintaan otorisasi yang tidak valid."
+
 #. Empty-state message when no command palette results match the search query
 #: src/features/command-palette/index.tsx
 msgid "The command you're looking for doesn't exist."
@@ -4600,6 +4644,18 @@ msgstr "Halaman yang Anda cari mungkin telah dipindahkan atau sudah tidak ada la
 msgid "The password you entered is incorrect"
 msgstr "Kata sandi yang Anda masukkan salah"
 
+#: src/features/auth/pages/error.tsx
+msgid "The provider didn't share an email address, which is required to sign in."
+msgstr "Penyedia tidak membagikan alamat email, yang diperlukan untuk masuk."
+
+#: src/features/auth/pages/error.tsx
+msgid "The provider rejected this sign-in attempt. Please start again."
+msgstr "Penyedia menolak upaya masuk ini. Silakan mulai lagi."
+
+#: src/features/auth/pages/error.tsx
+msgid "The provider's response could not be verified. Please start again."
+msgstr "Respons penyedia tidak dapat diverifikasi. Silakan mulai lagi."
+
 #: src/features/resume/preview/preview.browser.tsx
 msgid "The resume preview could not be updated. The last valid preview is still shown."
 msgstr "Pratinjau resume tidak dapat diperbarui. Pratinjau valid terakhir masih ditampilkan."
@@ -4765,6 +4821,10 @@ msgstr "Bagian ini ditampilkan sebagai judul kosong."
 msgid "This section sits in the sidebar."
 msgstr "Bagian ini berada di sidebar."
 
+#: src/features/auth/pages/error.tsx
+msgid "This sign-in attempt expired or was already used. Please start again."
+msgstr "Upaya masuk ini kedaluwarsa atau sudah digunakan. Silakan mulai lagi."
+
 #: src/features/auth/pages/register.tsx
 msgid "This step is optional, but recommended."
 msgstr "Langkah ini opsional, tetapi direkomendasikan."
@@ -5310,6 +5370,14 @@ msgstr "Kami tidak dapat mendeteksi format secara otomatis — silakan pilih for
 msgid "We couldn't find that page"
 msgstr "Kami tidak dapat menemukan halaman itu."
 
+#: src/features/auth/pages/error.tsx
+msgid "We couldn't link that provider account. Please try again."
+msgstr "Kami tidak dapat menautkan akun penyedia tersebut. Silakan coba lagi."
+
+#: src/features/auth/pages/error.tsx
+msgid "We couldn't read your profile from the provider."
+msgstr "Kami tidak dapat membaca profil Anda dari penyedia."
+
 #: src/routes/agent/-components/tool-part-card.tsx
 msgid "Web search"
 msgstr "Pencarian web"
@@ -5400,6 +5468,10 @@ msgstr "Anda juga dapat menggunakan nama pengguna untuk masuk."
 msgid "You can share your resume via a unique public URL, protect it with a password, or download it as a PDF to share directly. The choice is yours!"
 msgstr "Anda dapat membagikan resume Anda melalui URL publik unik, melindunginya dengan kata sandi, atau mengunduhnya sebagai PDF untuk dibagikan langsung. Pilihan ada di tangan Anda!"
 
+#: src/features/auth/pages/error.tsx
+msgid "You cancelled the sign-in before it finished."
+msgstr "Anda membatalkan proses masuk sebelum selesai."
+
 #: src/hooks/use-form-blocker.tsx
 msgid "You have unsaved changes that will be lost."
 msgstr "Anda memiliki perubahan yang belum disimpan yang akan hilang."
@@ -5441,6 +5513,10 @@ msgstr "Data Anda aman, dan tidak pernah dibagikan atau dijual kepada siapa pun.
 msgid "Your data is stored securely and is never shared with third parties. You can also self-host Reactive Resume on your own servers for complete control over your data."
 msgstr "Data Anda disimpan dengan aman dan tidak pernah dibagikan dengan pihak ketiga. Anda juga dapat self-host Reactive Resume di server Anda sendiri untuk kontrol penuh atas data Anda."
 
+#: src/features/auth/pages/error.tsx
+msgid "Your email address isn't verified with the provider."
+msgstr "Alamat email Anda belum diverifikasi dengan penyedia."
+
 #: src/features/resume/builder/draft.ts
 msgid "Your latest changes could not be saved."
 msgstr "Perubahan terbaru Anda tidak dapat disimpan."
@@ -5546,4 +5622,3 @@ msgstr "Perkecil"
 #: src/libs/locale.ts
 msgid "Zulu"
 msgstr "Zulu"
-