@oneuptime/common 12.0.23 → 12.0.25

package/Server/Services/DetectionRuleService.ts

@@ -4,6 +4,10 @@ import CreateBy from "../Types/Database/CreateBy";
 import UpdateBy from "../Types/Database/UpdateBy";
 import { OnCreate, OnUpdate } from "../Types/Database/Hooks";
 import BadDataException from "../../Types/Exception/BadDataException";
+import {
+  DETECTION_MATCH_COUNT_THRESHOLD_MAX,
+  DETECTION_MATCH_COUNT_THRESHOLD_MIN,
+} from "../../Types/SecurityEvent/DetectionFindingConstants";
 import SigmaRuleParser from "../../Utils/SecurityEvent/Sigma/SigmaRuleParser";
 import SigmaClickhouseCompiler from "../Utils/SecurityEvent/Sigma/SigmaClickhouseCompiler";
 
@@ -25,23 +29,69 @@ export class Service extends DatabaseService<Model> {
     SigmaClickhouseCompiler.compileYaml(ruleYaml);
   }
 
-  private validateEvaluationInterval(interval: number | undefined): void {
-    if (interval === undefined) {
+  // undefined always passes: an omitted field means "keep the default".
+  private validateIntegerInRange(data: {
+    value: number | undefined;
+    min: number;
+    max: number;
+    message: string;
+  }): void {
+    if (data.value === undefined) {
       return;
     }
 
-    if (!Number.isInteger(interval) || interval < 1 || interval > 1440) {
-      throw new BadDataException(
-        "Evaluation interval must be a whole number of minutes between 1 and 1440.",
-      );
+    if (
+      !Number.isInteger(data.value) ||
+      data.value < data.min ||
+      data.value > data.max
+    ) {
+      throw new BadDataException(data.message);
     }
   }
 
+  private validateEvaluationInterval(interval: number | undefined): void {
+    this.validateIntegerInRange({
+      value: interval,
+      min: 1,
+      max: 1440,
+      message:
+        "Evaluation interval must be a whole number of minutes between 1 and 1440.",
+    });
+  }
+
+  private validateMatchCountThreshold(threshold: number | undefined): void {
+    this.validateIntegerInRange({
+      value: threshold,
+      min: DETECTION_MATCH_COUNT_THRESHOLD_MIN,
+      max: DETECTION_MATCH_COUNT_THRESHOLD_MAX,
+      message: `Match count threshold must be a whole number between ${DETECTION_MATCH_COUNT_THRESHOLD_MIN} and ${DETECTION_MATCH_COUNT_THRESHOLD_MAX}.`,
+    });
+  }
+
   protected override async onBeforeCreate(
     createBy: CreateBy<Model>,
   ): Promise<OnCreate<Model>> {
     this.validateSigmaRule(createBy.data.sigmaRuleYaml);
     this.validateEvaluationInterval(createBy.data.evaluationIntervalInMinutes);
+    this.validateMatchCountThreshold(createBy.data.matchCountThreshold);
+
+    /*
+     * groupByField / distinctCountField are looked up verbatim: an
+     * unknown name silently becomes an attributes[] lookup that yields
+     * '' on every row, and for a distinct-count rule that means it never
+     * fires again with no error anywhere. Trimming here kills the whole
+     * whitespace-from-a-paste class of that outage; '' is preserved as
+     * the documented "feature off" value so clearing the field still
+     * works.
+     */
+    if (createBy.data.groupByField !== undefined) {
+      createBy.data.groupByField = createBy.data.groupByField.trim();
+    }
+
+    if (createBy.data.distinctCountField !== undefined) {
+      createBy.data.distinctCountField =
+        createBy.data.distinctCountField.trim();
+    }
 
     /*
      * Default the rule name from the Sigma title so pasting a rule is a
@@ -67,6 +117,23 @@ export class Service extends DatabaseService<Model> {
       updateBy.data.evaluationIntervalInMinutes as number | undefined,
     );
 
+    this.validateMatchCountThreshold(
+      updateBy.data.matchCountThreshold as number | undefined,
+    );
+
+    // Same trim as onBeforeCreate — see the rationale there.
+    if (updateBy.data.groupByField !== undefined) {
+      updateBy.data.groupByField = (
+        updateBy.data.groupByField as string
+      ).trim();
+    }
+
+    if (updateBy.data.distinctCountField !== undefined) {
+      updateBy.data.distinctCountField = (
+        updateBy.data.distinctCountField as string
+      ).trim();
+    }
+
     return { updateBy, carryForward: null };
   }
 }

package/Server/Services/Index.ts

@@ -22,8 +22,18 @@ import GreenlockCertificateService from "./GreenlockCertificateService";
 // Greenlock
 import GreenlockChallengeService from "./GreenlockChallengeService";
 import IncidentCustomFieldService from "./IncidentCustomFieldService";
+import IncidentOnCallRuleService from "./IncidentOnCallRuleService";
+import IncidentPrivacyRuleService from "./IncidentPrivacyRuleService";
+import IncidentPostmortemTemplateService from "./IncidentPostmortemTemplateService";
+import IncidentNoteTemplateService from "./IncidentNoteTemplateService";
+import IncidentLabelRuleService from "./IncidentLabelRuleService";
+import IncidentGroupingRuleService from "./IncidentGroupingRuleService";
+import IncidentTemplateService from "./IncidentTemplateService";
+import IncidentTemplateOwnerTeamService from "./IncidentTemplateOwnerTeamService";
+import IncidentTemplateOwnerUserService from "./IncidentTemplateOwnerUserService";
 import IncidentInternalNoteService from "./IncidentInternalNoteService";
 import IncidentOwnerTeamService from "./IncidentOwnerTeamService";
+import IncidentOwnerRuleService from "./IncidentOwnerRuleService";
 import IncidentOwnerUserService from "./IncidentOwnerUserService";
 import IncidentRoleService from "./IncidentRoleService";
 import IncidentMemberService from "./IncidentMemberService";
@@ -36,7 +46,15 @@ import IncidentStateTimelineService from "./IncidentStateTimelineService";
 //Labels.
 import LabelService from "./LabelService";
 import KubernetesClusterService from "./KubernetesClusterService";
+import KubernetesClusterOwnerRuleService from "./KubernetesClusterOwnerRuleService";
+import KubernetesClusterOwnerUserService from "./KubernetesClusterOwnerUserService";
+import KubernetesClusterOwnerTeamService from "./KubernetesClusterOwnerTeamService";
+import KubernetesClusterLabelRuleService from "./KubernetesClusterLabelRuleService";
 import DockerHostService from "./DockerHostService";
+import DockerHostOwnerRuleService from "./DockerHostOwnerRuleService";
+import DockerHostOwnerUserService from "./DockerHostOwnerUserService";
+import DockerHostOwnerTeamService from "./DockerHostOwnerTeamService";
+import DockerHostLabelRuleService from "./DockerHostLabelRuleService";
 import NetworkDeviceService from "./NetworkDeviceService";
 import NetworkDeviceOwnerTeamService from "./NetworkDeviceOwnerTeamService";
 import NetworkDeviceOwnerUserService from "./NetworkDeviceOwnerUserService";
@@ -55,6 +73,10 @@ import NetworkDeviceLinkRuleService from "./NetworkDeviceLinkRuleService";
 import NetworkTopologySuppressionService from "./NetworkTopologySuppressionService";
 import NetworkSiteAssignmentRuleService from "./NetworkSiteAssignmentRuleService";
 import PodmanHostService from "./PodmanHostService";
+import PodmanHostOwnerRuleService from "./PodmanHostOwnerRuleService";
+import PodmanHostOwnerUserService from "./PodmanHostOwnerUserService";
+import PodmanHostOwnerTeamService from "./PodmanHostOwnerTeamService";
+import PodmanHostLabelRuleService from "./PodmanHostLabelRuleService";
 import ProxmoxClusterService from "./ProxmoxClusterService";
 import DockerSwarmClusterService from "./DockerSwarmClusterService";
 import CephClusterService from "./CephClusterService";
@@ -91,15 +113,22 @@ import MetricBaselineService from "./MetricBaselineService";
 import SpanCountBaselineService from "./SpanCountBaselineService";
 import LogCountBaselineService from "./LogCountBaselineService";
 import MonitorCustomFieldService from "./MonitorCustomFieldService";
+import MonitorLabelRuleService from "./MonitorLabelRuleService";
+import MonitorTemplateService from "./MonitorTemplateService";
 import MonitorGroupOwnerTeamService from "./MonitorGroupOwnerTeamService";
 import MonitorGroupOwnerUserService from "./MonitorGroupOwnerUserService";
 import MonitorGroupResourceService from "./MonitorGroupResourceService";
 import MonitorGroupService from "./MonitorGroupService";
 import MonitorOwnerTeamService from "./MonitorOwnerTeamService";
+import MonitorOwnerRuleService from "./MonitorOwnerRuleService";
 import MonitorOwnerUserService from "./MonitorOwnerUserService";
 import MonitorProbeService from "./MonitorProbeService";
 import MonitorSecretService from "./MonitorSecretService";
 import RunbookCredentialService from "./RunbookCredentialService";
+import RunbookOwnerRuleService from "./RunbookOwnerRuleService";
+import RunbookOwnerUserService from "./RunbookOwnerUserService";
+import RunbookOwnerTeamService from "./RunbookOwnerTeamService";
+import RunbookLabelRuleService from "./RunbookLabelRuleService";
 import RunbookSecretService from "./RunbookSecretService";
 import AIInsightService from "./AIInsightService";
 
@@ -110,6 +139,11 @@ import MonitorStatusService from "./MonitorStatusService";
 import MonitorStatusTimelineService from "./MonitorStatusTimelineService";
 import NotificationService from "./NotificationService";
 import OnCallDutyPolicyCustomFieldService from "./OnCallDutyPolicyCustomFieldService";
+import OnCallDutyPolicyOwnerRuleService from "./OnCallDutyPolicyOwnerRuleService";
+import OnCallDutyPolicyOwnerUserService from "./OnCallDutyPolicyOwnerUserService";
+import OnCallDutyPolicyOwnerTeamService from "./OnCallDutyPolicyOwnerTeamService";
+import OnCallDutyPolicyLabelRuleService from "./OnCallDutyPolicyLabelRuleService";
+import OnCallDutyPolicyFeedService from "./OnCallDutyPolicyFeedService";
 import OnCallDutyPolicyEscalationRuleScheduleService from "./OnCallDutyPolicyEscalationRuleScheduleService";
 import OnCallDutyPolicyEscalationRuleService from "./OnCallDutyPolicyEscalationRuleService";
 import OnCallDutyPolicyEscalationRuleTeamService from "./OnCallDutyPolicyEscalationRuleTeamService";
@@ -117,11 +151,17 @@ import OnCallDutyPolicyEscalationRuleUserService from "./OnCallDutyPolicyEscalat
 import OnCallDutyPolicyExecutionLogService from "./OnCallDutyPolicyExecutionLogService";
 import OnCallDutyPolicyExecutionLogTimelineService from "./OnCallDutyPolicyExecutionLogTimelineService";
 import OnCallDutyPolicyScheduleLayerService from "./OnCallDutyPolicyScheduleLayerService";
+import OnCallDutyPolicyScheduleOwnerRuleService from "./OnCallDutyPolicyScheduleOwnerRuleService";
+import OnCallDutyPolicyScheduleOwnerUserService from "./OnCallDutyPolicyScheduleOwnerUserService";
+import OnCallDutyPolicyScheduleOwnerTeamService from "./OnCallDutyPolicyScheduleOwnerTeamService";
+import OnCallDutyPolicyScheduleLabelRuleService from "./OnCallDutyPolicyScheduleLabelRuleService";
 import OnCallDutyPolicyScheduleLayerUserService from "./OnCallDutyPolicyScheduleLayerUserService";
 import OnCallDutyPolicyScheduleService from "./OnCallDutyPolicyScheduleService";
 // On-Call Duty
 import OnCallDutyPolicyService from "./OnCallDutyPolicyService";
 import ProbeService from "./ProbeService";
+import ProbeOwnerTeamService from "./ProbeOwnerTeamService";
+import ProbeOwnerUserService from "./ProbeOwnerUserService";
 import AIAgentService from "./AIAgentService";
 import AIAgentOwnerUserService from "./AIAgentOwnerUserService";
 import AIAgentOwnerTeamService from "./AIAgentOwnerTeamService";
@@ -132,6 +172,10 @@ import ProjectUserProfileService from "./ProjectUserProfileService";
 import ProfileService from "./ProfileService";
 import ProfileSampleService from "./ProfileSampleService";
 import RumSessionService from "./RumSessionService";
+import RumApplicationLabelRuleService from "./RumApplicationLabelRuleService";
+import RumApplicationOwnerRuleService from "./RumApplicationOwnerRuleService";
+import RumApplicationOwnerUserService from "./RumApplicationOwnerUserService";
+import RumApplicationOwnerTeamService from "./RumApplicationOwnerTeamService";
 import RumSessionChunkService from "./RumSessionChunkService";
 import RumSessionReplayViewService from "./RumSessionReplayViewService";
 import RumSessionErasureRequestService from "./RumSessionErasureRequestService";
@@ -152,8 +196,11 @@ import RecommendationDismissalService from "./RecommendationDismissalService";
 import ResellerPlanService from "./ResellerPlanService";
 import ResellerService from "./ResellerService";
 import ScheduledMaintenanceCustomFieldService from "./ScheduledMaintenanceCustomFieldService";
+import ScheduledMaintenanceNoteTemplateService from "./ScheduledMaintenanceNoteTemplateService";
+import ScheduledMaintenanceLabelRuleService from "./ScheduledMaintenanceLabelRuleService";
 import ScheduledMaintenanceInternalNoteService from "./ScheduledMaintenanceInternalNoteService";
 import ScheduledMaintenanceOwnerTeamService from "./ScheduledMaintenanceOwnerTeamService";
+import ScheduledMaintenanceOwnerRuleService from "./ScheduledMaintenanceOwnerRuleService";
 import ScheduledMaintenanceOwnerUserService from "./ScheduledMaintenanceOwnerUserService";
 import ScheduledMaintenancePublicNoteService from "./ScheduledMaintenancePublicNoteService";
 // ScheduledMaintenances
@@ -161,6 +208,8 @@ import ScheduledMaintenanceService from "./ScheduledMaintenanceService";
 import ScheduledMaintenanceStateService from "./ScheduledMaintenanceStateService";
 import ScheduledMaintenanceStateTimelineService from "./ScheduledMaintenanceStateTimelineService";
 import ServiceOwnerTeamService from "./ServiceOwnerTeamService";
+import ServiceOwnerRuleService from "./ServiceOwnerRuleService";
+import ServiceLabelRuleService from "./ServiceLabelRuleService";
 import ServiceOwnerUserService from "./ServiceOwnerUserService";
 import ServiceService from "./ServiceService";
 import ShortLinkService from "./ShortLinkService";
@@ -172,15 +221,22 @@ import SmsService from "./SmsService";
 import TelegramService from "./TelegramService";
 import SpanService from "./SpanService";
 import StatusPageAnnouncementService from "./StatusPageAnnouncementService";
+import StatusPageLabelRuleService from "./StatusPageLabelRuleService";
 import StatusPageAnnouncementTemplateService from "./StatusPageAnnouncementTemplateService";
 import StatusPageCustomFieldService from "./StatusPageCustomFieldService";
 import DashboardDomainService from "./DashboardDomainService";
+import DashboardOwnerRuleService from "./DashboardOwnerRuleService";
+import DashboardOwnerUserService from "./DashboardOwnerUserService";
+import DashboardOwnerTeamService from "./DashboardOwnerTeamService";
+import DashboardLabelRuleService from "./DashboardLabelRuleService";
+import DashboardService from "./DashboardService";
 import StatusPageDomainService from "./StatusPageDomainService";
 import StatusPageFooterLinkService from "./StatusPageFooterLinkService";
 import StatusPageGroupService from "./StatusPageGroupService";
 import StatusPageHeaderLinkService from "./StatusPageHeaderLinkService";
 import StatusPageHistoryChartBarColorRuleService from "./StatusPageHistoryChartBarColorRuleService";
 import StatusPageOwnerTeamService from "./StatusPageOwnerTeamService";
+import StatusPageOwnerRuleService from "./StatusPageOwnerRuleService";
 import StatusPageOwnerUserService from "./StatusPageOwnerUserService";
 import StatusPagePrivateUserService from "./StatusPagePrivateUserService";
 import StatusPagePrivateUserSessionService from "./StatusPagePrivateUserSessionService";
@@ -218,6 +274,10 @@ import UserTelegramService from "./UserTelegramService";
 import UserSlackService from "./UserSlackService";
 import UserMicrosoftTeamsService from "./UserMicrosoftTeamsService";
 import WorkflowLogService from "./WorkflowLogService";
+import WorkflowOwnerRuleService from "./WorkflowOwnerRuleService";
+import WorkflowOwnerUserService from "./WorkflowOwnerUserService";
+import WorkflowOwnerTeamService from "./WorkflowOwnerTeamService";
+import WorkflowLabelRuleService from "./WorkflowLabelRuleService";
 // Workflows.
 import WorkflowService from "./WorkflowService";
 import WorkflowVariablesService from "./WorkflowVariableService";
@@ -234,11 +294,15 @@ import ScheduledMaintenanceTemplateOwnerUserService from "./ScheduledMaintenance
 
 // Alert Services
 import AlertStateService from "./AlertStateService";
+import AlertOnCallRuleService from "./AlertOnCallRuleService";
+import AlertPrivacyRuleService from "./AlertPrivacyRuleService";
+import AlertLabelRuleService from "./AlertLabelRuleService";
 import AlertService from "./AlertService";
 import AlertCustomFieldService from "./AlertCustomFieldService";
 import AlertStateTimelineService from "./AlertStateTimelineService";
 import AlertInternalNoteService from "./AlertInternalNoteService";
 import AlertOwnerTeamService from "./AlertOwnerTeamService";
+import AlertOwnerRuleService from "./AlertOwnerRuleService";
 import AlertOwnerUserService from "./AlertOwnerUserService";
 import AlertSeverityService from "./AlertSeverityService";
 import DetectionRuleService from "./DetectionRuleService";
@@ -247,20 +311,28 @@ import AlertNoteTemplateService from "./AlertNoteTemplateService";
 
 // AlertEpisode Services
 import AlertEpisodeService from "./AlertEpisodeService";
+import AlertEpisodeOnCallRuleService from "./AlertEpisodeOnCallRuleService";
+import AlertEpisodePrivacyRuleService from "./AlertEpisodePrivacyRuleService";
+import AlertEpisodeLabelRuleService from "./AlertEpisodeLabelRuleService";
 import AlertEpisodeFeedService from "./AlertEpisodeFeedService";
 import AlertEpisodeInternalNoteService from "./AlertEpisodeInternalNoteService";
 import AlertEpisodeMemberService from "./AlertEpisodeMemberService";
 import AlertEpisodeOwnerTeamService from "./AlertEpisodeOwnerTeamService";
+import AlertEpisodeOwnerRuleService from "./AlertEpisodeOwnerRuleService";
 import AlertEpisodeOwnerUserService from "./AlertEpisodeOwnerUserService";
 import AlertEpisodeStateTimelineService from "./AlertEpisodeStateTimelineService";
 
 // IncidentEpisode Services
 import IncidentEpisodeService from "./IncidentEpisodeService";
+import IncidentEpisodeOnCallRuleService from "./IncidentEpisodeOnCallRuleService";
+import IncidentEpisodePrivacyRuleService from "./IncidentEpisodePrivacyRuleService";
+import IncidentEpisodeLabelRuleService from "./IncidentEpisodeLabelRuleService";
 import IncidentEpisodeFeedService from "./IncidentEpisodeFeedService";
 import IncidentEpisodeInternalNoteService from "./IncidentEpisodeInternalNoteService";
 import IncidentEpisodeMemberService from "./IncidentEpisodeMemberService";
 import IncidentEpisodeRoleMemberService from "./IncidentEpisodeRoleMemberService";
 import IncidentEpisodeOwnerTeamService from "./IncidentEpisodeOwnerTeamService";
+import IncidentEpisodeOwnerRuleService from "./IncidentEpisodeOwnerRuleService";
 import IncidentEpisodeOwnerUserService from "./IncidentEpisodeOwnerUserService";
 import IncidentEpisodeStateTimelineService from "./IncidentEpisodeStateTimelineService";
 import IncidentEpisodePublicNoteService from "./IncidentEpisodePublicNoteService";
@@ -306,9 +378,41 @@ import OnCallDutyPolicyTimeLogService from "./OnCallDutyPolicyTimeLogService";
 import ProjectSCIMLogService from "./ProjectSCIMLogService";
 import StatusPageSCIMLogService from "./StatusPageSCIMLogService";
 import DeletedProjectService from "./DeletedProjectService";
+import CodeRepositoryService from "./CodeRepositoryService";
+import WebhookLogService from "./WebhookLogService";
+import HostLabelRuleService from "./HostLabelRuleService";
+import HostOwnerRuleService from "./HostOwnerRuleService";
+import HostOwnerTeamService from "./HostOwnerTeamService";
+import HostOwnerUserService from "./HostOwnerUserService";
+import IncomingCallPolicyService from "./IncomingCallPolicyService";
+import PushNotificationLogService from "./PushNotificationLogService";
+import RunnerOwnerTeamService from "./RunnerOwnerTeamService";
+import RunnerOwnerUserService from "./RunnerOwnerUserService";
+import CloudResourceLabelRuleService from "./CloudResourceLabelRuleService";
+import CloudResourceOwnerRuleService from "./CloudResourceOwnerRuleService";
+import CloudResourceOwnerTeamService from "./CloudResourceOwnerTeamService";
+import CloudResourceOwnerUserService from "./CloudResourceOwnerUserService";
+import ServerlessFunctionLabelRuleService from "./ServerlessFunctionLabelRuleService";
+import ServerlessFunctionOwnerRuleService from "./ServerlessFunctionOwnerRuleService";
+import ServerlessFunctionOwnerTeamService from "./ServerlessFunctionOwnerTeamService";
+import ServerlessFunctionOwnerUserService from "./ServerlessFunctionOwnerUserService";
+import IncomingCallPolicyEscalationRuleService from "./IncomingCallPolicyEscalationRuleService";
+import IncomingCallPolicyLabelRuleService from "./IncomingCallPolicyLabelRuleService";
+import IncomingCallPolicyOwnerRuleService from "./IncomingCallPolicyOwnerRuleService";
+import IncomingCallPolicyOwnerTeamService from "./IncomingCallPolicyOwnerTeamService";
+import IncomingCallPolicyOwnerUserService from "./IncomingCallPolicyOwnerUserService";
+import IoTFleetLabelRuleService from "./IoTFleetLabelRuleService";
+import IoTFleetOwnerRuleService from "./IoTFleetOwnerRuleService";
+import IoTFleetOwnerTeamService from "./IoTFleetOwnerTeamService";
+import IoTFleetOwnerUserService from "./IoTFleetOwnerUserService";
 
 const services: Array<BaseService> = [
   OnCallDutyPolicyTimeLogService,
+  OnCallDutyPolicyOwnerRuleService,
+  OnCallDutyPolicyOwnerUserService,
+  OnCallDutyPolicyOwnerTeamService,
+  OnCallDutyPolicyLabelRuleService,
+  OnCallDutyPolicyFeedService,
   AcmeCertificateService,
   DeletedProjectService,
   PromoCodeService,
@@ -345,8 +449,18 @@ const services: Array<BaseService> = [
   GreenlockChallengeService,
 
   IncidentCustomFieldService,
+  IncidentOnCallRuleService,
+  IncidentPrivacyRuleService,
+  IncidentPostmortemTemplateService,
+  IncidentNoteTemplateService,
+  IncidentLabelRuleService,
+  IncidentGroupingRuleService,
+  IncidentTemplateService,
+  IncidentTemplateOwnerTeamService,
+  IncidentTemplateOwnerUserService,
   IncidentInternalNoteService,
   IncidentOwnerTeamService,
+  IncidentOwnerRuleService,
   IncidentOwnerUserService,
   IncidentRoleService,
   IncidentMemberService,
@@ -359,7 +473,15 @@ const services: Array<BaseService> = [
 
   LabelService,
   KubernetesClusterService,
+  KubernetesClusterOwnerRuleService,
+  KubernetesClusterOwnerUserService,
+  KubernetesClusterOwnerTeamService,
+  KubernetesClusterLabelRuleService,
   DockerHostService,
+  DockerHostOwnerRuleService,
+  DockerHostOwnerUserService,
+  DockerHostOwnerTeamService,
+  DockerHostLabelRuleService,
   NetworkDeviceService,
   NetworkDeviceOwnerTeamService,
   NetworkDeviceOwnerUserService,
@@ -378,6 +500,10 @@ const services: Array<BaseService> = [
   NetworkTopologySuppressionService,
   NetworkSiteAssignmentRuleService,
   PodmanHostService,
+  PodmanHostOwnerRuleService,
+  PodmanHostOwnerUserService,
+  PodmanHostOwnerTeamService,
+  PodmanHostLabelRuleService,
   ProxmoxClusterService,
   DockerSwarmClusterService,
   CephClusterService,
@@ -401,7 +527,10 @@ const services: Array<BaseService> = [
 
   MailService,
   MonitorCustomFieldService,
+  MonitorLabelRuleService,
+  MonitorTemplateService,
   MonitorOwnerTeamService,
+  MonitorOwnerRuleService,
   MonitorOwnerUserService,
   MonitorProbeService,
   MonitorService,
@@ -409,6 +538,10 @@ const services: Array<BaseService> = [
   MonitorStatusTimelineService,
   MonitorSecretService,
   RunbookCredentialService,
+  RunbookOwnerRuleService,
+  RunbookOwnerUserService,
+  RunbookOwnerTeamService,
+  RunbookLabelRuleService,
   RunbookSecretService,
   AIInsightService,
   MonitorFeedService,
@@ -427,6 +560,8 @@ const services: Array<BaseService> = [
   ProjectService,
   ProjectSmtpConfigService,
   ProbeService,
+  ProbeOwnerTeamService,
+  ProbeOwnerUserService,
   AIAgentService,
   AIAgentOwnerUserService,
   AIAgentOwnerTeamService,
@@ -439,8 +574,11 @@ const services: Array<BaseService> = [
   GlobalOidcProjectService,
 
   ScheduledMaintenanceCustomFieldService,
+  ScheduledMaintenanceNoteTemplateService,
+  ScheduledMaintenanceLabelRuleService,
   ScheduledMaintenanceInternalNoteService,
   ScheduledMaintenanceOwnerTeamService,
+  ScheduledMaintenanceOwnerRuleService,
   ScheduledMaintenanceOwnerUserService,
   ScheduledMaintenancePublicNoteService,
   ScheduledMaintenanceService,
@@ -456,14 +594,21 @@ const services: Array<BaseService> = [
   TelegramService,
 
   StatusPageAnnouncementService,
+  StatusPageLabelRuleService,
   StatusPageAnnouncementTemplateService,
   StatusPageCustomFieldService,
   DashboardDomainService,
+  DashboardOwnerRuleService,
+  DashboardOwnerUserService,
+  DashboardOwnerTeamService,
+  DashboardLabelRuleService,
+  DashboardService,
   StatusPageDomainService,
   StatusPageFooterLinkService,
   StatusPageGroupService,
   StatusPageHeaderLinkService,
   StatusPageOwnerTeamService,
+  StatusPageOwnerRuleService,
   StatusPageOwnerUserService,
   StatusPagePrivateUserService,
   StatusPagePrivateUserSessionService,
@@ -502,6 +647,10 @@ const services: Array<BaseService> = [
   UserWebAuthnService,
 
   WorkflowLogService,
+  WorkflowOwnerRuleService,
+  WorkflowOwnerUserService,
+  WorkflowOwnerTeamService,
+  WorkflowLabelRuleService,
   WorkflowService,
   WorkflowVariablesService,
 
@@ -513,6 +662,10 @@ const services: Array<BaseService> = [
 
   // On Call Duty Policy Schedule
   OnCallDutyPolicyScheduleService,
+  OnCallDutyPolicyScheduleOwnerRuleService,
+  OnCallDutyPolicyScheduleOwnerUserService,
+  OnCallDutyPolicyScheduleOwnerTeamService,
+  OnCallDutyPolicyScheduleLabelRuleService,
   OnCallDutyPolicyScheduleLayerUserService,
   OnCallDutyPolicyScheduleLayerService,
   OnCallDutyPolicyEscalationRuleScheduleService,
@@ -522,7 +675,9 @@ const services: Array<BaseService> = [
   ProjectUserProfileService,
 
   ServiceService,
+  ServiceLabelRuleService,
   ServiceOwnerTeamService,
+  ServiceOwnerRuleService,
   ServiceOwnerUserService,
 
   TelemetryExceptionService,
@@ -536,11 +691,15 @@ const services: Array<BaseService> = [
   ScheduledMaintenanceTemplateOwnerUserService,
 
   AlertStateService,
+  AlertOnCallRuleService,
+  AlertPrivacyRuleService,
+  AlertLabelRuleService,
   AlertService,
   AlertCustomFieldService,
   AlertStateTimelineService,
   AlertInternalNoteService,
   AlertOwnerTeamService,
+  AlertOwnerRuleService,
   AlertOwnerUserService,
   AlertSeverityService,
   DetectionRuleService,
@@ -550,20 +709,28 @@ const services: Array<BaseService> = [
 
   // AlertEpisode Services
   AlertEpisodeService,
+  AlertEpisodeOnCallRuleService,
+  AlertEpisodePrivacyRuleService,
+  AlertEpisodeLabelRuleService,
   AlertEpisodeFeedService,
   AlertEpisodeInternalNoteService,
   AlertEpisodeMemberService,
   AlertEpisodeOwnerTeamService,
+  AlertEpisodeOwnerRuleService,
   AlertEpisodeOwnerUserService,
   AlertEpisodeStateTimelineService,
 
   // IncidentEpisode Services
   IncidentEpisodeService,
+  IncidentEpisodeOnCallRuleService,
+  IncidentEpisodePrivacyRuleService,
+  IncidentEpisodeLabelRuleService,
   IncidentEpisodeFeedService,
   IncidentEpisodeInternalNoteService,
   IncidentEpisodeMemberService,
   IncidentEpisodeRoleMemberService,
   IncidentEpisodeOwnerTeamService,
+  IncidentEpisodeOwnerRuleService,
   IncidentEpisodeOwnerUserService,
   IncidentEpisodeStateTimelineService,
   IncidentEpisodePublicNoteService,
@@ -602,8 +769,46 @@ const services: Array<BaseService> = [
 
   // Session replay control tables (the recordings themselves are in ClickHouse).
   RumSessionReplayViewService,
+  RumApplicationLabelRuleService,
+  RumApplicationOwnerRuleService,
+  RumApplicationOwnerUserService,
+  RumApplicationOwnerTeamService,
   RumSessionErasureRequestService,
   RumSessionPinService,
+
+  /*
+   * Workflow-enabled models whose services had never been registered here,
+   * so their components showed up in the editor palette but threw
+   * "Component <id> not found" at execution time. Kept together because
+   * none of these families has an existing entry to sit next to.
+   */
+  CloudResourceLabelRuleService,
+  CloudResourceOwnerRuleService,
+  CloudResourceOwnerTeamService,
+  CloudResourceOwnerUserService,
+  CodeRepositoryService,
+  HostLabelRuleService,
+  HostOwnerRuleService,
+  HostOwnerTeamService,
+  HostOwnerUserService,
+  IncomingCallPolicyService,
+  IncomingCallPolicyEscalationRuleService,
+  IncomingCallPolicyLabelRuleService,
+  IncomingCallPolicyOwnerRuleService,
+  IncomingCallPolicyOwnerTeamService,
+  IncomingCallPolicyOwnerUserService,
+  IoTFleetLabelRuleService,
+  IoTFleetOwnerRuleService,
+  IoTFleetOwnerTeamService,
+  IoTFleetOwnerUserService,
+  PushNotificationLogService,
+  RunnerOwnerTeamService,
+  RunnerOwnerUserService,
+  ServerlessFunctionLabelRuleService,
+  ServerlessFunctionOwnerRuleService,
+  ServerlessFunctionOwnerTeamService,
+  ServerlessFunctionOwnerUserService,
+  WebhookLogService,
 ];
 
 export const AnalyticsServices: Array<

package/Server/Services/NetworkDeviceDiscoveryScanService.ts

@@ -6,6 +6,7 @@ import UpdateBy from "../Types/Database/UpdateBy";
 import CaptureSpan from "../Utils/Telemetry/CaptureSpan";
 import BadDataException from "../../Types/Exception/BadDataException";
 import ScanTargetUtil from "../../Utils/NetworkDiscovery/ScanTargetUtil";
+import ScanNameUtil from "../../Utils/NetworkDiscovery/ScanNameUtil";
 
 export class Service extends DatabaseService<Model> {
   public constructor() {
@@ -33,6 +34,25 @@ export class Service extends DatabaseService<Model> {
   ): Promise<OnCreate<Model>> {
     this.validateScanTarget(createBy.data.cidr);
 
+    /*
+     * The name is normalized as well as validated — collapsed onto one line,
+     * trimmed, and a blank one dropped entirely — so the column holds either a
+     * name or nothing. An empty string stored here would read as a name to
+     * every `scan.name ?` in the product and render as a blank line above the
+     * scan target. See ScanNameUtil.
+     */
+    this.validateScanName(createBy.data.name);
+
+    /*
+     * Written through a cast because `exactOptionalPropertyTypes` forbids
+     * assigning `undefined` to an optional property — and dropping a blank
+     * name is exactly that assignment. Undefined rather than null: a model
+     * instance starts with every column undefined, so this leaves the row in
+     * the state a scan created without a name would already have been in.
+     */
+    (createBy.data as unknown as Record<string, unknown>)["name"] =
+      ScanNameUtil.normalize(createBy.data.name) ?? undefined;
+
     return { createBy, carryForward: null };
   }
 
@@ -54,6 +74,27 @@ export class Service extends DatabaseService<Model> {
       );
     }
 
+    /*
+     * The name IS user-updatable — renaming a scan is the whole point of
+     * letting it be named — so this path is the one the form actually takes,
+     * not just a guard against root writers.
+     *
+     * Cleared with null rather than left as "": the form sends back an empty
+     * box as an empty string, and the operator who emptied it meant "this scan
+     * has no name", which is what NULL says. `undefined` would not do — the
+     * key is present in the update, and an undefined value is a column TypeORM
+     * would try to write.
+     */
+    if (dataKeys.includes("name")) {
+      const data: Record<string, unknown> = updateBy.data as Record<
+        string,
+        unknown
+      >;
+
+      this.validateScanName(data["name"]);
+      data["name"] = ScanNameUtil.normalize(data["name"]);
+    }
+
     return { updateBy, carryForward: null };
   }
 
@@ -75,6 +116,24 @@ export class Service extends DatabaseService<Model> {
       throw new BadDataException(validationError);
     }
   }
+
+  /*
+   * Same contract as validateScanTarget above: the value is passed through
+   * untouched, because it arrives straight from the request JSON and may be a
+   * number, an object or an array rather than a string. ScanNameUtil type-
+   * guards internally and reports a non-string as such.
+   *
+   * An ABSENT or blank name is not an error — the column is optional, and a
+   * scan with no name reads as it always did, by its target.
+   */
+  private validateScanName(name: unknown): void {
+    const validationError: string | null =
+      ScanNameUtil.getValidationError(name);
+
+    if (validationError) {
+      throw new BadDataException(validationError);
+    }
+  }
 }
 
 export default new Service();