Release v5.2.8 (#3375)

Upgrades to Better Auth 1.7, expands Custom Styles coverage of item headers, and adds a human-approval step to the AI agent's resume edits.

Breaking for self-hosters using a custom OAuth provider: the callback path changes from /api/auth/oauth2/callback/custom to /api/auth/callback/custom, and installs using OAUTH_DISCOVERY_URL need one additional UPDATE after upgrading. Both are documented in docs/self-hosting/sso.mdx.

- Better Auth 1.7, with the account issuer migration and the jwks alg/crv columns the 1.7 jwt plugin requires
- Agent edits gated behind an approval step, with crash-safe runs and context pruning
- item-header now covers every section header row on every template; adds the item-header-row part
- Fixes provider unlinking, auth error messages, and version conflicts on freshly created resumes
- New /auth/error page, translated across all 53 target locales
- DeepSeek Harness plugin moved into packages/dsh-plugin
- Dependency bumps across the workspace

apps/web/locales/uz-UZ.po

@@ -679,6 +679,11 @@ msgstr "Mukofotlar"
 msgid "Azerbaijani"
 msgstr "Ozarbayjon tili"
 
+#. Action returning a signed-in user to the page where they manage linked providers
+#: src/features/auth/pages/error.tsx
+msgid "Back to authentication settings"
+msgstr "Autentifikatsiya sozlamalariga qaytish"
+
 #. Secondary navigation button on 2FA verification screen
 #: src/features/auth/pages/verify-2fa.tsx
 msgid "Back to Login"
@@ -688,6 +693,11 @@ msgstr "Kirishga qaytish"
 msgid "Back to resumes"
 msgstr "Rezyumelarga qaytish"
 
+#. Action returning the visitor to the sign-in page after a failed sign-in
+#: src/features/auth/pages/error.tsx
+msgid "Back to sign in"
+msgstr "Kirishga qaytish"
+
 #: src/routes/builder/$resumeId/-sidebar/right/sections/design.tsx
 msgid "Background Color"
 msgstr "Orqa fon rangi"
@@ -1498,6 +1508,11 @@ msgstr "Ta'rif"
 msgid "Design"
 msgstr "Dizayn"
 
+#. Label above the raw error text forwarded by the identity provider
+#: src/features/auth/pages/error.tsx
+msgid "Details from the provider:"
+msgstr "Provayderdan tafsilotlar:"
+
 #. Destructive action button to turn off two-factor authentication
 #: src/dialogs/auth/disable-two-factor.tsx
 #: src/features/settings/authentication/components/two-factor.tsx
@@ -2981,6 +2996,10 @@ msgstr "Tarmoq"
 msgid "Never expires"
 msgstr "Hech qachon muddati tugamaydi"
 
+#: src/features/auth/pages/error.tsx
+msgid "New account sign-ups are currently disabled on this server."
+msgstr "Bu serverda yangi hisob qaydnomalarini ro‘yxatdan o‘tkazish hozircha o‘chirilgan."
+
 #: src/features/command-palette/pages/navigation.tsx
 #: src/features/command-palette/pages/resumes.tsx
 msgid "New Application"
@@ -4209,6 +4228,11 @@ msgstr "GitHub, Google yoki maxsus OAuth provayderi bilan kirishingiz mumkin."
 msgid "Sign up"
 msgstr "Roʻyxatdan oʻtish"
 
+#. Title on the page shown after a failed or cancelled OAuth sign-in
+#: src/features/auth/pages/error.tsx
+msgid "Sign-in didn't complete"
+msgstr "Kirish yakunlanmadi"
+
 #: src/features/auth/components/social-auth.tsx
 #: src/features/auth/pages/login.tsx
 msgid "Signing in..."
@@ -4295,6 +4319,10 @@ msgstr "Boshqa narsa…"
 msgid "Something went wrong"
 msgstr "Nimadir noto'g'ri ketdi"
 
+#: src/features/auth/pages/error.tsx
+msgid "Something went wrong while signing you in. Please try again."
+msgstr "Kirish paytida xatolik yuz berdi. Iltimos, qayta urinib ko‘ring."
+
 #: src/features/applications/components/application-actions-menu.tsx
 #: src/features/applications/components/application-detail-sheet.tsx
 #: src/routes/builder/$resumeId/-sidebar/right/sections/sharing.tsx
@@ -4570,6 +4598,18 @@ msgstr "Tay tili"
 msgid "Thank you to our sponsors"
 msgstr "Homiylarimizga rahmat"
 
+#: src/features/auth/pages/error.tsx
+msgid "That provider account is already linked to a different user."
+msgstr "Bu provayder hisobi allaqachon boshqa foydalanuvchiga bog‘langan."
+
+#: src/features/auth/pages/error.tsx
+msgid "That provider account uses a different email address than your account."
+msgstr "Bu provayder hisobi sizning hisobingizdan boshqa e-pochta manzilidan foydalanadi."
+
+#: src/features/auth/pages/error.tsx
+msgid "That sign-in provider is no longer available on this server."
+msgstr "Bu kirish provayderi ushbu serverda endi mavjud emas."
+
 #: src/routes/agent/-components/agent-chat.tsx
 msgid "The agent needs your input."
 msgstr "Agent sizning fikringizni bilishi kerak."
@@ -4582,6 +4622,10 @@ msgstr "API kaliti muvaffaqiyatli oʻchirildi."
 msgid "The API key will no longer be able to access your data after deletion. This action cannot be undone."
 msgstr "Oʻchirilgandan soʻng API kaliti endi maʼlumotlaringizga kira olmaydi. Bu amalni bekor qilib boʻlmaydi."
 
+#: src/features/auth/pages/error.tsx
+msgid "The application that sent you here made an invalid authorization request."
+msgstr "Sizni bu yerga yuborgan ilova noto‘g‘ri avtorizatsiya so‘rovini yubordi."
+
 #. Empty-state message when no command palette results match the search query
 #: src/features/command-palette/index.tsx
 msgid "The command you're looking for doesn't exist."
@@ -4600,6 +4644,18 @@ msgstr "Siz izlayotgan sahifa boshqa joyga ko'chirilgan yoki endi mavjud emas bo
 msgid "The password you entered is incorrect"
 msgstr "Kiritilgan parol noto'g'ri"
 
+#: src/features/auth/pages/error.tsx
+msgid "The provider didn't share an email address, which is required to sign in."
+msgstr "Provayder kirish uchun zarur bo‘lgan e-pochta manzilini ulashmadi."
+
+#: src/features/auth/pages/error.tsx
+msgid "The provider rejected this sign-in attempt. Please start again."
+msgstr "Provayder bu kirish urinishini rad etdi. Iltimos, qaytadan boshlang."
+
+#: src/features/auth/pages/error.tsx
+msgid "The provider's response could not be verified. Please start again."
+msgstr "Provayder javobini tasdiqlab bo‘lmadi. Iltimos, qaytadan boshlang."
+
 #: src/features/resume/preview/preview.browser.tsx
 msgid "The resume preview could not be updated. The last valid preview is still shown."
 msgstr "Rezyume oldindan ko'rish versiyasini yangilab bo'lmadi. Oxirgi haqiqiy oldindan ko'rish versiyasi hali ham ko'rsatilmoqda."
@@ -4765,6 +4821,10 @@ msgstr "Ushbu bo'lim bo'sh sarlavha sifatida ko'rsatiladi."
 msgid "This section sits in the sidebar."
 msgstr "Ushbu bo'lim yon panelda joylashgan."
 
+#: src/features/auth/pages/error.tsx
+msgid "This sign-in attempt expired or was already used. Please start again."
+msgstr "Bu kirish urinishi muddati tugagan yoki allaqachon ishlatilgan. Iltimos, qaytadan boshlang."
+
 #: src/features/auth/pages/register.tsx
 msgid "This step is optional, but recommended."
 msgstr "Bu bosqich ixtiyoriy, ammo tavsiya etiladi."
@@ -5310,6 +5370,14 @@ msgstr "Formatni avtomatik ravishda aniqlay olmadik — iltimos, uni yuqoridan t
 msgid "We couldn't find that page"
 msgstr "Biz o'sha sahifani topa olmadik"
 
+#: src/features/auth/pages/error.tsx
+msgid "We couldn't link that provider account. Please try again."
+msgstr "Bu provayder hisobini bog‘lay olmadik. Iltimos, qayta urinib ko‘ring."
+
+#: src/features/auth/pages/error.tsx
+msgid "We couldn't read your profile from the provider."
+msgstr "Profilingizni provayderdan o‘qiy olmadik."
+
 #: src/routes/agent/-components/tool-part-card.tsx
 msgid "Web search"
 msgstr "Veb-qidiruv"
@@ -5400,6 +5468,10 @@ msgstr "Login uchun foydalanuvchi nomingizdan ham foydalanishingiz mumkin."
 msgid "You can share your resume via a unique public URL, protect it with a password, or download it as a PDF to share directly. The choice is yours!"
 msgstr "Rezyumeni noyob ommaviy URL orqali ulashishingiz, parol bilan himoyalashingiz yoki to‘g‘ridan-to‘g‘ri ulashish uchun PDF sifatida yuklab olishingiz mumkin. Tanlov sizda!"
 
+#: src/features/auth/pages/error.tsx
+msgid "You cancelled the sign-in before it finished."
+msgstr "Siz kirishni yakunlanishidan oldin bekor qildingiz."
+
 #: src/hooks/use-form-blocker.tsx
 msgid "You have unsaved changes that will be lost."
 msgstr "Saqlanmagan oʻzgarishlar yoʻqoladi."
@@ -5441,6 +5513,10 @@ msgstr "Maʼlumotlaringiz xavfsiz va hech qachon boshqalarga berilmaydi yoki sot
 msgid "Your data is stored securely and is never shared with third parties. You can also self-host Reactive Resume on your own servers for complete control over your data."
 msgstr "Maʼlumotlaringiz xavfsiz saqlanadi va uchinchi tomonlarga hech qachon ulashilmaydi. Shuningdek, rezyume qurilmasini o‘z serverlaringizda mustaqil joylashtirishingiz va maʼlumotlaringiz ustidan to‘liq nazorat qilishingiz mumkin."
 
+#: src/features/auth/pages/error.tsx
+msgid "Your email address isn't verified with the provider."
+msgstr "E-pochta manzilingiz provayderda tasdiqlanmagan."
+
 #: src/features/resume/builder/draft.ts
 msgid "Your latest changes could not be saved."
 msgstr "So'nggi o'zgarishlaringizni saqlab bo'lmadi."
@@ -5546,4 +5622,3 @@ msgstr "Kichraytirish"
 #: src/libs/locale.ts
 msgid "Zulu"
 msgstr "Zulu"
-