Release v5.2.8 (#3375)

Upgrades to Better Auth 1.7, expands Custom Styles coverage of item headers, and adds a human-approval step to the AI agent's resume edits.

Breaking for self-hosters using a custom OAuth provider: the callback path changes from /api/auth/oauth2/callback/custom to /api/auth/callback/custom, and installs using OAUTH_DISCOVERY_URL need one additional UPDATE after upgrading. Both are documented in docs/self-hosting/sso.mdx.

- Better Auth 1.7, with the account issuer migration and the jwks alg/crv columns the 1.7 jwt plugin requires
- Agent edits gated behind an approval step, with crash-safe runs and context pruning
- item-header now covers every section header row on every template; adds the item-header-row part
- Fixes provider unlinking, auth error messages, and version conflicts on freshly created resumes
- New /auth/error page, translated across all 53 target locales
- DeepSeek Harness plugin moved into packages/dsh-plugin
- Dependency bumps across the workspace

apps/web/locales/lv-LV.po

@@ -679,6 +679,11 @@ msgstr "Apbalvojumi"
 msgid "Azerbaijani"
 msgstr "Azerbaidžāņu"
 
+#. Action returning a signed-in user to the page where they manage linked providers
+#: src/features/auth/pages/error.tsx
+msgid "Back to authentication settings"
+msgstr "Atpakaļ uz autentifikācijas iestatījumiem"
+
 #. Secondary navigation button on 2FA verification screen
 #: src/features/auth/pages/verify-2fa.tsx
 msgid "Back to Login"
@@ -688,6 +693,11 @@ msgstr "Atpakaļ uz pieteikšanos"
 msgid "Back to resumes"
 msgstr "Atpakaļ pie CV"
 
+#. Action returning the visitor to the sign-in page after a failed sign-in
+#: src/features/auth/pages/error.tsx
+msgid "Back to sign in"
+msgstr "Atpakaļ uz pieteikšanos"
+
 #: src/routes/builder/$resumeId/-sidebar/right/sections/design.tsx
 msgid "Background Color"
 msgstr "Fona krāsa"
@@ -1498,6 +1508,11 @@ msgstr "Apraksts"
 msgid "Design"
 msgstr "Dizains"
 
+#. Label above the raw error text forwarded by the identity provider
+#: src/features/auth/pages/error.tsx
+msgid "Details from the provider:"
+msgstr "Informācija no pakalpojumu sniedzēja:"
+
 #. Destructive action button to turn off two-factor authentication
 #: src/dialogs/auth/disable-two-factor.tsx
 #: src/features/settings/authentication/components/two-factor.tsx
@@ -2981,6 +2996,10 @@ msgstr "Tīkls"
 msgid "Never expires"
 msgstr "Nekad nebeidzas"
 
+#: src/features/auth/pages/error.tsx
+msgid "New account sign-ups are currently disabled on this server."
+msgstr "Jaunu kontu reģistrācija šajā serverī pašlaik ir atspējota."
+
 #: src/features/command-palette/pages/navigation.tsx
 #: src/features/command-palette/pages/resumes.tsx
 msgid "New Application"
@@ -4209,6 +4228,11 @@ msgstr "Piesakieties ar GitHub, Google vai pielāgotu OAuth pakalpojumu sniedzē
 msgid "Sign up"
 msgstr "Reģistrēties"
 
+#. Title on the page shown after a failed or cancelled OAuth sign-in
+#: src/features/auth/pages/error.tsx
+msgid "Sign-in didn't complete"
+msgstr "Pieteikšanās netika pabeigta"
+
 #: src/features/auth/components/social-auth.tsx
 #: src/features/auth/pages/login.tsx
 msgid "Signing in..."
@@ -4295,6 +4319,10 @@ msgstr "Kaut kas cits…"
 msgid "Something went wrong"
 msgstr "Kaut kas nogāja greizi"
 
+#: src/features/auth/pages/error.tsx
+msgid "Something went wrong while signing you in. Please try again."
+msgstr "Piesakoties radās kļūda. Lūdzu, mēģiniet vēlreiz."
+
 #: src/features/applications/components/application-actions-menu.tsx
 #: src/features/applications/components/application-detail-sheet.tsx
 #: src/routes/builder/$resumeId/-sidebar/right/sections/sharing.tsx
@@ -4570,6 +4598,18 @@ msgstr "Taju"
 msgid "Thank you to our sponsors"
 msgstr "Paldies mūsu sponsoriem"
 
+#: src/features/auth/pages/error.tsx
+msgid "That provider account is already linked to a different user."
+msgstr "Šis pakalpojumu sniedzēja konts jau ir saistīts ar citu lietotāju."
+
+#: src/features/auth/pages/error.tsx
+msgid "That provider account uses a different email address than your account."
+msgstr "Šis pakalpojumu sniedzēja konts izmanto citu e-pasta adresi nekā jūsu konts."
+
+#: src/features/auth/pages/error.tsx
+msgid "That sign-in provider is no longer available on this server."
+msgstr "Šis pieteikšanās pakalpojumu sniedzējs šajā serverī vairs nav pieejams."
+
 #: src/routes/agent/-components/agent-chat.tsx
 msgid "The agent needs your input."
 msgstr "Aģentam ir nepieciešama jūsu ieguldījums."
@@ -4582,6 +4622,10 @@ msgstr "API atslēga veiksmīgi dzēsta."
 msgid "The API key will no longer be able to access your data after deletion. This action cannot be undone."
 msgstr "Pēc dzēšanas šī API atslēga vairs nevarēs piekļūt jūsu datiem. Šī darbība nav atsaucama."
 
+#: src/features/auth/pages/error.tsx
+msgid "The application that sent you here made an invalid authorization request."
+msgstr "Lietotne, kas jūs atsūtīja šeit, veica nederīgu autorizācijas pieprasījumu."
+
 #. Empty-state message when no command palette results match the search query
 #: src/features/command-palette/index.tsx
 msgid "The command you're looking for doesn't exist."
@@ -4600,6 +4644,18 @@ msgstr "Iespējams, ka meklētā lapa ir pārvietota vai vairs nepastāv."
 msgid "The password you entered is incorrect"
 msgstr "Ievadītā parole ir nepareiza"
 
+#: src/features/auth/pages/error.tsx
+msgid "The provider didn't share an email address, which is required to sign in."
+msgstr "Pakalpojumu sniedzējs nenorādīja e-pasta adresi, kas nepieciešama pieteikšanās veikšanai."
+
+#: src/features/auth/pages/error.tsx
+msgid "The provider rejected this sign-in attempt. Please start again."
+msgstr "Pakalpojumu sniedzējs noraidīja šo pieteikšanās mēģinājumu. Lūdzu, sāciet no jauna."
+
+#: src/features/auth/pages/error.tsx
+msgid "The provider's response could not be verified. Please start again."
+msgstr "Pakalpojumu sniedzēja atbildi neizdevās pārbaudīt. Lūdzu, sāciet no jauna."
+
 #: src/features/resume/preview/preview.browser.tsx
 msgid "The resume preview could not be updated. The last valid preview is still shown."
 msgstr "CV priekšskatījumu nevarēja atjaunināt. Joprojām tiek rādīts pēdējais derīgais priekšskatījums."
@@ -4765,6 +4821,10 @@ msgstr "Šī sadaļa tiek attēlota kā tukšs virsraksts."
 msgid "This section sits in the sidebar."
 msgstr "Šī sadaļa atrodas sānjoslā."
 
+#: src/features/auth/pages/error.tsx
+msgid "This sign-in attempt expired or was already used. Please start again."
+msgstr "Šī pieteikšanās mēģinājuma termiņš ir beidzies vai tas jau ir izmantots. Lūdzu, sāciet no jauna."
+
 #: src/features/auth/pages/register.tsx
 msgid "This step is optional, but recommended."
 msgstr "Šis solis nav obligāts, taču ieteicams."
@@ -5310,6 +5370,14 @@ msgstr "Mēs nevarējām automātiski noteikt formātu — lūdzu, izvēlieties
 msgid "We couldn't find that page"
 msgstr "Mēs nevarējām atrast šo lapu."
 
+#: src/features/auth/pages/error.tsx
+msgid "We couldn't link that provider account. Please try again."
+msgstr "Mums neizdevās saistīt šo pakalpojumu sniedzēja kontu. Lūdzu, mēģiniet vēlreiz."
+
+#: src/features/auth/pages/error.tsx
+msgid "We couldn't read your profile from the provider."
+msgstr "Mums neizdevās nolasīt jūsu profilu no pakalpojumu sniedzēja."
+
 #: src/routes/agent/-components/tool-part-card.tsx
 msgid "Web search"
 msgstr "Meklēšana tīmeklī"
@@ -5400,6 +5468,10 @@ msgstr "Pieteikšanās laikā varat izmantot arī savu lietotājvārdu."
 msgid "You can share your resume via a unique public URL, protect it with a password, or download it as a PDF to share directly. The choice is yours!"
 msgstr "Varat kopīgot savu CV, izmantojot unikālu publisku URL, aizsargāt to ar paroli vai lejupielādēt kā PDF un kopīgot tieši. Izvēle ir jūsu rokās!"
 
+#: src/features/auth/pages/error.tsx
+msgid "You cancelled the sign-in before it finished."
+msgstr "Jūs atcēlāt pieteikšanos, pirms tā tika pabeigta."
+
 #: src/hooks/use-form-blocker.tsx
 msgid "You have unsaved changes that will be lost."
 msgstr "Jums ir nesaglabātas izmaiņas, kas tiks zaudētas."
@@ -5441,6 +5513,10 @@ msgstr "Jūsu dati ir droši un nekad netiek kopīgoti vai pārdoti nevienam."
 msgid "Your data is stored securely and is never shared with third parties. You can also self-host Reactive Resume on your own servers for complete control over your data."
 msgstr "Jūsu dati tiek glabāti droši un nekad netiek kopīgoti ar trešajām pusēm. Reactive Resume varat arī pašhostēt uz saviem serveriem, lai pilnībā kontrolētu savus datus."
 
+#: src/features/auth/pages/error.tsx
+msgid "Your email address isn't verified with the provider."
+msgstr "Jūsu e-pasta adrese nav apstiprināta pie pakalpojumu sniedzēja."
+
 #: src/features/resume/builder/draft.ts
 msgid "Your latest changes could not be saved."
 msgstr "Jūsu jaunākās izmaiņas nevarēja saglabāt."
@@ -5546,4 +5622,3 @@ msgstr "Tālināt"
 #: src/libs/locale.ts
 msgid "Zulu"
 msgstr "Zulu"
-