Release v5.2.8 (#3375)

Upgrades to Better Auth 1.7, expands Custom Styles coverage of item headers, and adds a human-approval step to the AI agent's resume edits.

Breaking for self-hosters using a custom OAuth provider: the callback path changes from /api/auth/oauth2/callback/custom to /api/auth/callback/custom, and installs using OAUTH_DISCOVERY_URL need one additional UPDATE after upgrading. Both are documented in docs/self-hosting/sso.mdx.

- Better Auth 1.7, with the account issuer migration and the jwks alg/crv columns the 1.7 jwt plugin requires
- Agent edits gated behind an approval step, with crash-safe runs and context pruning
- item-header now covers every section header row on every template; adds the item-header-row part
- Fixes provider unlinking, auth error messages, and version conflicts on freshly created resumes
- New /auth/error page, translated across all 53 target locales
- DeepSeek Harness plugin moved into packages/dsh-plugin
- Dependency bumps across the workspace

apps/web/locales/sk-SK.po

@@ -679,6 +679,11 @@ msgstr "Ocenenia"
 msgid "Azerbaijani"
 msgstr "Azerbajdžančina"
 
+#. Action returning a signed-in user to the page where they manage linked providers
+#: src/features/auth/pages/error.tsx
+msgid "Back to authentication settings"
+msgstr "Späť na nastavenia overovania"
+
 #. Secondary navigation button on 2FA verification screen
 #: src/features/auth/pages/verify-2fa.tsx
 msgid "Back to Login"
@@ -688,6 +693,11 @@ msgstr "Späť na prihlásenie"
 msgid "Back to resumes"
 msgstr "Späť na životopisy"
 
+#. Action returning the visitor to the sign-in page after a failed sign-in
+#: src/features/auth/pages/error.tsx
+msgid "Back to sign in"
+msgstr "Späť na prihlásenie"
+
 #: src/routes/builder/$resumeId/-sidebar/right/sections/design.tsx
 msgid "Background Color"
 msgstr "Farba pozadia"
@@ -1498,6 +1508,11 @@ msgstr "Popis"
 msgid "Design"
 msgstr "Dizajn"
 
+#. Label above the raw error text forwarded by the identity provider
+#: src/features/auth/pages/error.tsx
+msgid "Details from the provider:"
+msgstr "Podrobnosti od poskytovateľa:"
+
 #. Destructive action button to turn off two-factor authentication
 #: src/dialogs/auth/disable-two-factor.tsx
 #: src/features/settings/authentication/components/two-factor.tsx
@@ -2981,6 +2996,10 @@ msgstr "Sieť"
 msgid "Never expires"
 msgstr "Nikdy nevyprší"
 
+#: src/features/auth/pages/error.tsx
+msgid "New account sign-ups are currently disabled on this server."
+msgstr "Registrácia nových účtov je na tomto serveri momentálne vypnutá."
+
 #: src/features/command-palette/pages/navigation.tsx
 #: src/features/command-palette/pages/resumes.tsx
 msgid "New Application"
@@ -4209,6 +4228,11 @@ msgstr "Prihlás sa cez GitHub, Google alebo vlastného OAuth poskytovateľa."
 msgid "Sign up"
 msgstr "Zaregistrovať sa"
 
+#. Title on the page shown after a failed or cancelled OAuth sign-in
+#: src/features/auth/pages/error.tsx
+msgid "Sign-in didn't complete"
+msgstr "Prihlásenie sa nedokončilo"
+
 #: src/features/auth/components/social-auth.tsx
 #: src/features/auth/pages/login.tsx
 msgid "Signing in..."
@@ -4295,6 +4319,10 @@ msgstr "Niečo iné…"
 msgid "Something went wrong"
 msgstr "Niečo sa pokazilo"
 
+#: src/features/auth/pages/error.tsx
+msgid "Something went wrong while signing you in. Please try again."
+msgstr "Pri prihlasovaní sa niečo pokazilo. Skúste to prosím znova."
+
 #: src/features/applications/components/application-actions-menu.tsx
 #: src/features/applications/components/application-detail-sheet.tsx
 #: src/routes/builder/$resumeId/-sidebar/right/sections/sharing.tsx
@@ -4570,6 +4598,18 @@ msgstr "Thajčina"
 msgid "Thank you to our sponsors"
 msgstr "Ďakujeme našim sponzorom"
 
+#: src/features/auth/pages/error.tsx
+msgid "That provider account is already linked to a different user."
+msgstr "Tento účet poskytovateľa je už prepojený s iným používateľom."
+
+#: src/features/auth/pages/error.tsx
+msgid "That provider account uses a different email address than your account."
+msgstr "Tento účet poskytovateľa používa inú e-mailovú adresu než váš účet."
+
+#: src/features/auth/pages/error.tsx
+msgid "That sign-in provider is no longer available on this server."
+msgstr "Tento poskytovateľ prihlásenia už na tomto serveri nie je dostupný."
+
 #: src/routes/agent/-components/agent-chat.tsx
 msgid "The agent needs your input."
 msgstr "Agent potrebuje váš názor."
@@ -4582,6 +4622,10 @@ msgstr "API kľúč bol úspešne vymazaný."
 msgid "The API key will no longer be able to access your data after deletion. This action cannot be undone."
 msgstr "Po vymazaní už tento API kľúč nebude môcť pristupovať k tvojim dátam. Túto akciu nemožno vrátiť späť."
 
+#: src/features/auth/pages/error.tsx
+msgid "The application that sent you here made an invalid authorization request."
+msgstr "Aplikácia, ktorá vás sem poslala, odoslala neplatnú žiadosť o autorizáciu."
+
 #. Empty-state message when no command palette results match the search query
 #: src/features/command-palette/index.tsx
 msgid "The command you're looking for doesn't exist."
@@ -4600,6 +4644,18 @@ msgstr "Stránka, ktorú hľadáte, mohla byť presunutá alebo už neexistuje."
 msgid "The password you entered is incorrect"
 msgstr "Zadané heslo je nesprávne"
 
+#: src/features/auth/pages/error.tsx
+msgid "The provider didn't share an email address, which is required to sign in."
+msgstr "Poskytovateľ nezdieľal e-mailovú adresu, ktorá je na prihlásenie potrebná."
+
+#: src/features/auth/pages/error.tsx
+msgid "The provider rejected this sign-in attempt. Please start again."
+msgstr "Poskytovateľ odmietol tento pokus o prihlásenie. Začnite prosím znova."
+
+#: src/features/auth/pages/error.tsx
+msgid "The provider's response could not be verified. Please start again."
+msgstr "Odpoveď poskytovateľa sa nepodarilo overiť. Začnite prosím znova."
+
 #: src/features/resume/preview/preview.browser.tsx
 msgid "The resume preview could not be updated. The last valid preview is still shown."
 msgstr "Ukážku životopisu sa nepodarilo aktualizovať. Stále sa zobrazuje posledná platná ukážka."
@@ -4765,6 +4821,10 @@ msgstr "Táto sekcia sa vykreslí ako prázdny nadpis."
 msgid "This section sits in the sidebar."
 msgstr "Táto sekcia sa nachádza na bočnom paneli."
 
+#: src/features/auth/pages/error.tsx
+msgid "This sign-in attempt expired or was already used. Please start again."
+msgstr "Platnosť tohto pokusu o prihlásenie vypršala alebo už bol použitý. Začnite prosím znova."
+
 #: src/features/auth/pages/register.tsx
 msgid "This step is optional, but recommended."
 msgstr "Tento krok je voliteľný, ale odporúčaný."
@@ -5310,6 +5370,14 @@ msgstr "Formát sa nám nepodarilo automaticky rozpoznať – vyberte ho vyšši
 msgid "We couldn't find that page"
 msgstr "Túto stránku sme nenašli"
 
+#: src/features/auth/pages/error.tsx
+msgid "We couldn't link that provider account. Please try again."
+msgstr "Tento účet poskytovateľa sa nepodarilo prepojiť. Skúste to prosím znova."
+
+#: src/features/auth/pages/error.tsx
+msgid "We couldn't read your profile from the provider."
+msgstr "Nepodarilo sa nám načítať váš profil od poskytovateľa."
+
 #: src/routes/agent/-components/tool-part-card.tsx
 msgid "Web search"
 msgstr "Vyhľadávanie na webe"
@@ -5400,6 +5468,10 @@ msgstr "Na prihlásenie môžeš použiť aj svoje používateľské meno."
 msgid "You can share your resume via a unique public URL, protect it with a password, or download it as a PDF to share directly. The choice is yours!"
 msgstr "Svoj životopis môžeš zdieľať pomocou unikátnej verejnej URL adresy, chrániť ho heslom alebo ho stiahnuť ako PDF a zdieľať priamo. Voľba je na tebe!"
 
+#: src/features/auth/pages/error.tsx
+msgid "You cancelled the sign-in before it finished."
+msgstr "Prihlásenie ste zrušili skôr, než sa dokončilo."
+
 #: src/hooks/use-form-blocker.tsx
 msgid "You have unsaved changes that will be lost."
 msgstr "Máte neuložené zmeny, ktoré budú stratené."
@@ -5441,6 +5513,10 @@ msgstr "Tvoje dáta sú v bezpečí a nikdy sa s nikým nezdieľajú ani nepred
 msgid "Your data is stored securely and is never shared with third parties. You can also self-host Reactive Resume on your own servers for complete control over your data."
 msgstr "Tvoje dáta sú bezpečne uložené a nikdy sa nezdieľajú s tretími stranami. Reactive Resume si môžeš tiež hostovať na vlastných serveroch a mať nad dátami úplnú kontrolu."
 
+#: src/features/auth/pages/error.tsx
+msgid "Your email address isn't verified with the provider."
+msgstr "Vaša e-mailová adresa nie je u poskytovateľa overená."
+
 #: src/features/resume/builder/draft.ts
 msgid "Your latest changes could not be saved."
 msgstr "Vaše posledné zmeny sa nepodarilo uložiť."
@@ -5546,4 +5622,3 @@ msgstr "Oddialiť"
 #: src/libs/locale.ts
 msgid "Zulu"
 msgstr "Zulu"
-