Release v5.2.8 (#3375)

Upgrades to Better Auth 1.7, expands Custom Styles coverage of item headers, and adds a human-approval step to the AI agent's resume edits.

Breaking for self-hosters using a custom OAuth provider: the callback path changes from /api/auth/oauth2/callback/custom to /api/auth/callback/custom, and installs using OAUTH_DISCOVERY_URL need one additional UPDATE after upgrading. Both are documented in docs/self-hosting/sso.mdx.

- Better Auth 1.7, with the account issuer migration and the jwks alg/crv columns the 1.7 jwt plugin requires
- Agent edits gated behind an approval step, with crash-safe runs and context pruning
- item-header now covers every section header row on every template; adds the item-header-row part
- Fixes provider unlinking, auth error messages, and version conflicts on freshly created resumes
- New /auth/error page, translated across all 53 target locales
- DeepSeek Harness plugin moved into packages/dsh-plugin
- Dependency bumps across the workspace

apps/web/locales/lt-LT.po

@@ -679,6 +679,11 @@ msgstr "Apdovanojimai"
 msgid "Azerbaijani"
 msgstr "Azerbaidžaniečių"
 
+#. Action returning a signed-in user to the page where they manage linked providers
+#: src/features/auth/pages/error.tsx
+msgid "Back to authentication settings"
+msgstr "Grįžti į tapatybės nustatymo parametrus"
+
 #. Secondary navigation button on 2FA verification screen
 #: src/features/auth/pages/verify-2fa.tsx
 msgid "Back to Login"
@@ -688,6 +693,11 @@ msgstr "Grįžti į prisijungimą"
 msgid "Back to resumes"
 msgstr "Atgal į gyvenimo aprašymus"
 
+#. Action returning the visitor to the sign-in page after a failed sign-in
+#: src/features/auth/pages/error.tsx
+msgid "Back to sign in"
+msgstr "Grįžti į prisijungimą"
+
 #: src/routes/builder/$resumeId/-sidebar/right/sections/design.tsx
 msgid "Background Color"
 msgstr "Fono spalva"
@@ -1498,6 +1508,11 @@ msgstr "Aprašymas"
 msgid "Design"
 msgstr "Dizainas"
 
+#. Label above the raw error text forwarded by the identity provider
+#: src/features/auth/pages/error.tsx
+msgid "Details from the provider:"
+msgstr "Informacija iš tiekėjo:"
+
 #. Destructive action button to turn off two-factor authentication
 #: src/dialogs/auth/disable-two-factor.tsx
 #: src/features/settings/authentication/components/two-factor.tsx
@@ -2981,6 +2996,10 @@ msgstr "Tinklas"
 msgid "Never expires"
 msgstr "Niekada nesibaigia"
 
+#: src/features/auth/pages/error.tsx
+msgid "New account sign-ups are currently disabled on this server."
+msgstr "Naujų paskyrų registracija šiame serveryje šiuo metu išjungta."
+
 #: src/features/command-palette/pages/navigation.tsx
 #: src/features/command-palette/pages/resumes.tsx
 msgid "New Application"
@@ -4209,6 +4228,11 @@ msgstr "Prisijunkite naudodami „GitHub“, „Google“ arba pasirinktą OAuth
 msgid "Sign up"
 msgstr "Registruotis"
 
+#. Title on the page shown after a failed or cancelled OAuth sign-in
+#: src/features/auth/pages/error.tsx
+msgid "Sign-in didn't complete"
+msgstr "Prisijungimas nebaigtas"
+
 #: src/features/auth/components/social-auth.tsx
 #: src/features/auth/pages/login.tsx
 msgid "Signing in..."
@@ -4295,6 +4319,10 @@ msgstr "Kažkas kita…"
 msgid "Something went wrong"
 msgstr "Kažkas nutiko ne taip"
 
+#: src/features/auth/pages/error.tsx
+msgid "Something went wrong while signing you in. Please try again."
+msgstr "Jungiant įvyko klaida. Bandykite dar kartą."
+
 #: src/features/applications/components/application-actions-menu.tsx
 #: src/features/applications/components/application-detail-sheet.tsx
 #: src/routes/builder/$resumeId/-sidebar/right/sections/sharing.tsx
@@ -4570,6 +4598,18 @@ msgstr "Tajų"
 msgid "Thank you to our sponsors"
 msgstr "Dėkojame mūsų rėmėjams"
 
+#: src/features/auth/pages/error.tsx
+msgid "That provider account is already linked to a different user."
+msgstr "Ta tiekėjo paskyra jau susieta su kitu naudotoju."
+
+#: src/features/auth/pages/error.tsx
+msgid "That provider account uses a different email address than your account."
+msgstr "Ta tiekėjo paskyra naudoja kitą el. pašto adresą nei jūsų paskyra."
+
+#: src/features/auth/pages/error.tsx
+msgid "That sign-in provider is no longer available on this server."
+msgstr "To prisijungimo tiekėjo šiame serveryje nebėra."
+
 #: src/routes/agent/-components/agent-chat.tsx
 msgid "The agent needs your input."
 msgstr "Agentui reikia jūsų indėlio."
@@ -4582,6 +4622,10 @@ msgstr "API raktas sėkmingai ištrintas."
 msgid "The API key will no longer be able to access your data after deletion. This action cannot be undone."
 msgstr "Po ištrynimo šis API raktas nebegalės pasiekti jūsų duomenų. Šio veiksmo anuliuoti neįmanoma."
 
+#: src/features/auth/pages/error.tsx
+msgid "The application that sent you here made an invalid authorization request."
+msgstr "Programa, atsiuntusi jus čia, pateikė netinkamą prieigos užklausą."
+
 #. Empty-state message when no command palette results match the search query
 #: src/features/command-palette/index.tsx
 msgid "The command you're looking for doesn't exist."
@@ -4600,6 +4644,18 @@ msgstr "Puslapis, kurio ieškote, galėjo būti perkeltas arba jo nebėra."
 msgid "The password you entered is incorrect"
 msgstr "Neteisingas slaptažodis"
 
+#: src/features/auth/pages/error.tsx
+msgid "The provider didn't share an email address, which is required to sign in."
+msgstr "Tiekėjas nepateikė el. pašto adreso, kuris būtinas prisijungiant."
+
+#: src/features/auth/pages/error.tsx
+msgid "The provider rejected this sign-in attempt. Please start again."
+msgstr "Tiekėjas atmetė šį prisijungimo bandymą. Pradėkite iš naujo."
+
+#: src/features/auth/pages/error.tsx
+msgid "The provider's response could not be verified. Please start again."
+msgstr "Nepavyko patikrinti tiekėjo atsakymo. Pradėkite iš naujo."
+
 #: src/features/resume/preview/preview.browser.tsx
 msgid "The resume preview could not be updated. The last valid preview is still shown."
 msgstr "Nepavyko atnaujinti gyvenimo aprašymo peržiūros. Vis dar rodoma paskutinė galiojanti peržiūra."
@@ -4765,6 +4821,10 @@ msgstr "Šis skyrius pateikiamas kaip tuščia antraštė."
 msgid "This section sits in the sidebar."
 msgstr "Ši dalis yra šoninėje juostoje."
 
+#: src/features/auth/pages/error.tsx
+msgid "This sign-in attempt expired or was already used. Please start again."
+msgstr "Šio prisijungimo bandymo galiojimas baigėsi arba jis jau panaudotas. Pradėkite iš naujo."
+
 #: src/features/auth/pages/register.tsx
 msgid "This step is optional, but recommended."
 msgstr "Šis žingsnis neprivalomas, bet rekomenduojamas."
@@ -5310,6 +5370,14 @@ msgstr "Nepavyko automatiškai aptikti formato – pasirinkite jį aukščiau."
 msgid "We couldn't find that page"
 msgstr "Nepavyko rasti to puslapio"
 
+#: src/features/auth/pages/error.tsx
+msgid "We couldn't link that provider account. Please try again."
+msgstr "Nepavyko susieti tos tiekėjo paskyros. Bandykite dar kartą."
+
+#: src/features/auth/pages/error.tsx
+msgid "We couldn't read your profile from the provider."
+msgstr "Nepavyko nuskaityti jūsų profilio iš tiekėjo."
+
 #: src/routes/agent/-components/tool-part-card.tsx
 msgid "Web search"
 msgstr "Žiniatinklio paieška"
@@ -5400,6 +5468,10 @@ msgstr "Prisijungti taip pat galite naudodami vartotojo vardą."
 msgid "You can share your resume via a unique public URL, protect it with a password, or download it as a PDF to share directly. The choice is yours!"
 msgstr "Gyvenimo aprašymu galite dalintis per unikalų viešą URL, apsaugoti jį slaptažodžiu arba atsisiųsti kaip PDF ir dalintis tiesiogiai. Pasirinkimas – jūsų!"
 
+#: src/features/auth/pages/error.tsx
+msgid "You cancelled the sign-in before it finished."
+msgstr "Atšaukėte prisijungimą jam dar nepasibaigus."
+
 #: src/hooks/use-form-blocker.tsx
 msgid "You have unsaved changes that will be lost."
 msgstr "Turite neišsaugotų pakeitimų, kurie bus prarasti."
@@ -5441,6 +5513,10 @@ msgstr "Jūsų duomenys yra saugūs ir niekada nebendrinami ar neparduodami joki
 msgid "Your data is stored securely and is never shared with third parties. You can also self-host Reactive Resume on your own servers for complete control over your data."
 msgstr "Jūsų duomenys saugiai laikomi ir niekada nebendrinami su trečiosiomis šalimis. Taip pat galite savarankiškai talpinti „Reactive Resume“ savo serveriuose ir visiškai kontroliuoti savo duomenis."
 
+#: src/features/auth/pages/error.tsx
+msgid "Your email address isn't verified with the provider."
+msgstr "Jūsų el. pašto adresas nepatvirtintas pas tiekėją."
+
 #: src/features/resume/builder/draft.ts
 msgid "Your latest changes could not be saved."
 msgstr "Nepavyko išsaugoti naujausių pakeitimų."
@@ -5546,4 +5622,3 @@ msgstr "Tolinti"
 #: src/libs/locale.ts
 msgid "Zulu"
 msgstr "Zulų"
-