chore: update prisma version and enhance schema validations

- Changed prisma version in package.json and package-lock.json to a fixed version.
- Improved validation for hwidDeviceLimit in CreateUserCommand and UpdateUserCommand to enforce non-negative integers.
- Updated userUuid in HwidUserDeviceSchema to require a valid UUID format.
- Enhanced customResponseHeaders validation in SubscriptionSettingsSchema to ensure valid header names.
- Refactored HwidUserDeviceEntity to use public access modifiers for properties.
- Simplified hwid existence check in HwidUserDevicesRepository by using count method.
- Removed unused createHwidUserDevice method from SubscriptionService and replaced it with upsert logic.

Author: kastov

.github/workflows/release-to-panel.yml

@@ -85,7 +85,7 @@ jobs:
 
             ### 📋 Changes
             - [View full changelog](https://github.com/remnawave/frontend/releases/tag/${{ steps.frontend-tag.outputs.release }})
-            - [Compare changes (${steps.frontend-prev-tag.outputs.tag}...${{ steps.frontend-tag.outputs.release }})](https://github.com/remnawave/frontend/compare/${{steps.frontend-prev-tag.outputs.tag}}...${{ steps.frontend-tag.outputs.release }})
+            - [Compare changes (${{ steps.frontend-prev-tag.outputs.tag }}...${{ steps.frontend-tag.outputs.release }})](https://github.com/remnawave/frontend/compare/${{steps.frontend-prev-tag.outputs.tag}}...${{ steps.frontend-tag.outputs.release }})
 
             ---
 

libs/contract/commands/users/create-user.command.ts

@@ -109,7 +109,13 @@ export namespace CreateUserCommand {
         telegramId: z.optional(z.number().int()),
         email: z.string().email('Invalid email format').optional(),
 
-        hwidDeviceLimit: z.optional(z.number().int()),
+        hwidDeviceLimit: z.optional(
+            z
+                .number({ invalid_type_error: 'Device limit must be a number' })
+                .int('Device limit must be an integer')
+                .min(0, 'Device limit must be greater than 0')
+                .describe('Device limit'),
+        ),
 
         activateAllInbounds: z.boolean().optional(),
     });

libs/contract/commands/users/update-user.command.ts

@@ -51,7 +51,9 @@ export namespace UpdateUserCommand {
         description: z.optional(z.string().nullable()),
         telegramId: z.optional(z.number().int().nullable()),
         email: z.optional(z.string().email('Invalid email format').nullable()),
-        hwidDeviceLimit: z.optional(z.number().int().nullable()),
+        hwidDeviceLimit: z.optional(
+            z.number().int().min(0, 'Device limit must be non-negative').nullable(),
+        ),
     });
 
     export type Request = z.infer<typeof RequestSchema>;

libs/contract/models/hwid-user-device.schema.ts

@@ -2,7 +2,7 @@ import { z } from 'zod';
 
 export const HwidUserDeviceSchema = z.object({
     hwid: z.string(),
-    userUuid: z.string(),
+    userUuid: z.string().uuid(),
     platform: z.nullable(z.string()),
     osVersion: z.nullable(z.string()),
     deviceModel: z.nullable(z.string()),

libs/contract/models/subscription-settings.schema.ts

@@ -22,7 +22,12 @@ export const SubscriptionSettingsSchema = z.object({
     limitedUsersRemarks: z.array(z.string()),
     disabledUsersRemarks: z.array(z.string()),
 
-    customResponseHeaders: z.nullable(z.record(z.string(), z.string())),
+    customResponseHeaders: z.nullable(
+        z.record(
+            z.string().regex(/^[!#$%&'*+-.^_`|~0-9a-zA-Z]+$/, 'Invalid header name'),
+            z.string(),
+        ),
+    ),
 
     createdAt: z
         .string()

libs/contract/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnawave/backend-contract",
-  "version": "0.4.4",
+  "version": "0.4.5",
   "public": true,
   "license": "AGPL-3.0-only",
   "description": "A contract library for Remnawave Backend. It can be used in backend and frontend.",

package-lock.json

@@ -97,7 +97,7 @@
     "passport-jwt": "4.0.1",
     "pkg-types": "2.1.0",
     "pm2": "5.4.3",
-    "prisma": "^6.5.0",
+    "prisma": "6.5.0",
     "prom-client": "^15.1.3",
     "reflect-metadata": "0.2.2",
     "rxjs": "7.8.2",

package.json

@@ -27,7 +27,7 @@ export class UpsertHwidUserDeviceHandler
                 isOk: true,
                 response: result,
             };
-        } catch (error: unknown) {
+        } catch (error) {
             this.logger.error(error);
             return {
                 isOk: false,

src/modules/hwid-user-devices/commands/upsert-hwid-user-device/upsert-hwid-user-device.handler.ts

@@ -1,18 +1,18 @@
 import { HwidUserDevices } from '@prisma/client';
 
 export class HwidUserDeviceEntity implements HwidUserDevices {
-    hwid: string;
-    userUuid: string;
-    platform: string | null;
-    osVersion: string | null;
-    deviceModel: string | null;
-    userAgent: string | null;
+    public hwid: string;
+    public userUuid: string;
+    public platform: string | null;
+    public osVersion: string | null;
+    public deviceModel: string | null;
+    public userAgent: string | null;
 
-    createdAt: Date;
-    updatedAt: Date;
+    public createdAt: Date;
+    public updatedAt: Date;
 
-    constructor(history: Partial<HwidUserDevices>) {
-        Object.assign(this, history);
+    constructor(hwidUserDevice: Partial<HwidUserDevices>) {
+        Object.assign(this, hwidUserDevice);
         return this;
     }
 }