@ganju/utils 0.0.17 → 0.0.18

package/dist/schema.js

@@ -638,12 +638,71 @@ const DATA_QUERY_RUN_BODY = zod_1.z.strictObject({
     limit: zod_1.z.number().int().min(1).max(500).optional(),
     timeZone: zod_1.z.string().max(100).optional()
 });
+// A trigger, as the dashboard, the API and ganju.json's "triggers" write it:
+// a table, an event, an optional condition and exactly one action. The
+// object checks the rest (columns, fields used in texts) against the schema.
+const DATA_TRIGGER_NAME = zod_1.z
+    .string()
+    .regex(/^[a-z][a-z0-9_-]{0,62}$/, 'Lowercase letters, digits, _ and -, starting with a letter');
+const DATA_TRIGGER_TEMPLATE = zod_1.z.strictObject({
+    name: zod_1.z.string().min(1).max(512),
+    language: zod_1.z.string().min(1).max(20),
+    // Each {{n}} of the template in order: fixed text or a {{field}} of the row.
+    params: zod_1.z.array(zod_1.z.string().max(1024)).max(20).optional()
+});
+const DATA_TRIGGER_INPUT = zod_1.z.strictObject({
+    name: DATA_TRIGGER_NAME.optional(),
+    description: zod_1.z.string().max(300).nullish(),
+    table: DATA_IDENTIFIER,
+    on: zod_1.z.enum(['insert', 'update', 'delete']),
+    // { column: { changedTo | changedFrom | equals: value, changed: true } },
+    // combined with { all: [...] } or { any: [...] }.
+    when: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).nullish(),
+    enabled: zod_1.z.boolean().optional(),
+    // false: refuse to save over an existing trigger of this name.
+    replace: zod_1.z.boolean().optional(),
+    // Runs a minute; past it events wait in the queue. 60 by default.
+    rateLimit: zod_1.z.number().int().min(1).max(600).optional(),
+    function: zod_1.z.string().min(1).max(64).optional(),
+    webhook: zod_1.z.url().max(2000).optional(),
+    chat: zod_1.z
+        .strictObject({
+        channelId: zod_1.z.string().min(1).max(100),
+        chatId: zod_1.z.union([zod_1.z.string().min(1).max(200), zod_1.z.number().int()]),
+        text: zod_1.z.string().min(1).max(2000)
+    })
+        .optional(),
+    email: zod_1.z
+        .strictObject({
+        to: zod_1.z.union([zod_1.z.email(), zod_1.z.array(zod_1.z.email()).min(1).max(10)]),
+        subject: zod_1.z.string().min(1).max(200).optional(),
+        text: zod_1.z.string().min(1).max(2000)
+    })
+        .optional(),
+    customer: zod_1.z
+        .strictObject({
+        text: zod_1.z.string().min(1).max(2000),
+        template: DATA_TRIGGER_TEMPLATE.optional()
+    })
+        .optional()
+});
+const DATA_TRIGGER_PATCH = zod_1.z.strictObject({ enabled: zod_1.z.boolean() });
+const DATA_TRIGGER_DEPLOY_BODY = zod_1.z.strictObject({
+    triggers: zod_1.z.array(DATA_TRIGGER_INPUT).max(50)
+});
+const DATA_TRIGGER_RUN_LIST_QUERY = zod_1.z.object({
+    limit: zod_1.z.coerce.number().int().min(1).max(50).optional()
+});
 const DATA_TABLE_PARAMS = DATA_DATABASE_GET.extend({ table: DATA_IDENTIFIER });
 const DATA_COLUMN_PARAMS = DATA_TABLE_PARAMS.extend({
     column: DATA_IDENTIFIER
 });
 const DATA_ROW_PARAMS = DATA_TABLE_PARAMS.extend({ id: DATA_ROW_ID });
 const DATA_QUERY_PATH_PARAMS = DATA_DATABASE_GET.extend({ name: DATA_IDENTIFIER });
+const DATA_TRIGGER_PATH_PARAMS = DATA_DATABASE_GET.extend({ name: DATA_TRIGGER_NAME });
+const DATA_TRIGGER_RUN_PARAMS = DATA_TRIGGER_PATH_PARAMS.extend({
+    runId: zod_1.z.string().min(1).max(64)
+});
 const ARTIFACT_UPLOAD_RESOURCE_FILE = zod_1.z.object({
     resourceId: zod_1.z.uuid(),
     projectId: zod_1.z.uuid(),
@@ -1197,6 +1256,9 @@ const CUSTOM_CODE_TOOL = zod_1.z.object({
     // is the owner's code. Narrowing matters most for a function a channel bot
     // calls after reading customer text, and the broker enforces it, since
     // anything in the script can be edited.
+    // false: deployed and run by triggers, but never offered to the assistant
+    // (left out of tools/list, and not counted toward its tools).
+    expose: zod_1.z.boolean().optional(),
     data: zod_1.z
         .strictObject({
         access: zod_1.z.enum(['read', 'write']).optional(),
@@ -1437,6 +1499,20 @@ const CUSTOM_CODE_BROKER_DATA = zod_1.z.object({
     op: zod_1.z.enum(['describe', 'query', 'write', 'run']),
     args: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).default({})
 });
+// ctx.channels: a message to a customer the bot has spoken with, or a post
+// to a chat the bot is in. `call` names the function, as for ctx.data.
+const CUSTOM_CODE_BROKER_CHANNELS_SEND = zod_1.z.object({
+    call: zod_1.z.string().min(1).max(4000),
+    participantId: zod_1.z.string().min(1).max(100),
+    text: zod_1.z.string().min(1).max(4000).optional(),
+    template: DATA_TRIGGER_TEMPLATE.optional()
+});
+const CUSTOM_CODE_BROKER_CHANNELS_POST = zod_1.z.object({
+    call: zod_1.z.string().min(1).max(4000),
+    channelId: zod_1.z.string().min(1).max(100),
+    chatId: zod_1.z.union([zod_1.z.string().min(1).max(200), zod_1.z.number().int()]),
+    text: zod_1.z.string().min(1).max(4000)
+});
 const CUSTOM_CODE_BROKER_RESOURCE_SEARCH = zod_1.z.object({
     query: zod_1.z.string().min(1).max(2000),
     limit: zod_1.z.number().int().positive().max(20).default(5)
@@ -1769,6 +1845,12 @@ exports.Schema = {
     DATA_QUERY_INPUT,
     DATA_QUERY_RUN_BODY,
     DATA_QUERY_PATH_PARAMS,
+    DATA_TRIGGER_INPUT,
+    DATA_TRIGGER_PATCH,
+    DATA_TRIGGER_DEPLOY_BODY,
+    DATA_TRIGGER_RUN_LIST_QUERY,
+    DATA_TRIGGER_PATH_PARAMS,
+    DATA_TRIGGER_RUN_PARAMS,
     DATA_COLUMN_PARAMS,
     DATA_ROW_PARAMS,
     ARTIFACT_REMOVE_RESOURCE,
@@ -1833,6 +1915,8 @@ exports.Schema = {
     CUSTOM_CODE_BROKER_CONNECTION,
     CUSTOM_CODE_BROKER_SECRET,
     CUSTOM_CODE_BROKER_DATA,
+    CUSTOM_CODE_BROKER_CHANNELS_SEND,
+    CUSTOM_CODE_BROKER_CHANNELS_POST,
     CUSTOM_CODE_BROKER_RESOURCE_SEARCH,
     CUSTOM_CODE_BROKER_RESOURCE_READ,
     CUSTOM_CODE_BROKER_RESOURCE_CREATE,

package/dist/sdkConstants.d.ts

@@ -10,6 +10,8 @@ export declare const CUSTOM_CODE_BROKER_PATH_RESOURCES_CREATE = "/resources/crea
 export declare const CUSTOM_CODE_BROKER_PATH_RESOURCES_DELETE = "/resources/delete";
 export declare const CUSTOM_CODE_BROKER_PATH_SEND_FILE = "/send-file";
 export declare const CUSTOM_CODE_BROKER_PATH_DATA = "/data";
+export declare const CUSTOM_CODE_BROKER_PATH_CHANNELS_SEND = "/channels/send";
+export declare const CUSTOM_CODE_BROKER_PATH_CHANNELS_POST = "/channels/post";
 export declare const CUSTOM_CODE_BINDING_VERSION = "GANJU_SCRIPT_VERSION";
 export declare const CUSTOM_CODE_HEALTH_TOOL = "__ganju_health";
 export declare const CUSTOM_CODE_MAX_LOGS = 50;

package/dist/sdkConstants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sdkConstants.d.ts","sourceRoot":"","sources":["../src/sdkConstants.ts"],"names":[],"mappings":"AAgBA,eAAO,MAAM,yBAAyB,qBAAqB,CAAC;AAC5D,eAAO,MAAM,0BAA0B,iBAAiB,CAAC;AAKzD,eAAO,MAAM,yBAAyB,kCAAkC,CAAC;AACzE,eAAO,MAAM,kCAAkC,gBAAgB,CAAC;AAChE,eAAO,MAAM,8BAA8B,YAAY,CAAC;AACxD,eAAO,MAAM,wCAAwC,sBAAsB,CAAC;AAC5E,eAAO,MAAM,sCAAsC,oBAAoB,CAAC;AACxE,eAAO,MAAM,sCAAsC,oBAAoB,CAAC;AACxE,eAAO,MAAM,wCAAwC,sBAAsB,CAAC;AAC5E,eAAO,MAAM,wCAAwC,sBAAsB,CAAC;AAC5E,eAAO,MAAM,iCAAiC,eAAe,CAAC;AAC9D,eAAO,MAAM,4BAA4B,UAAU,CAAC;AAYpD,eAAO,MAAM,2BAA2B,yBAAyB,CAAC;AAOlE,eAAO,MAAM,uBAAuB,mBAAmB,CAAC;AAKxD,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC,eAAO,MAAM,0BAA0B,OAAQ,CAAC"}
+{"version":3,"file":"sdkConstants.d.ts","sourceRoot":"","sources":["../src/sdkConstants.ts"],"names":[],"mappings":"AAgBA,eAAO,MAAM,yBAAyB,qBAAqB,CAAC;AAC5D,eAAO,MAAM,0BAA0B,iBAAiB,CAAC;AAKzD,eAAO,MAAM,yBAAyB,kCAAkC,CAAC;AACzE,eAAO,MAAM,kCAAkC,gBAAgB,CAAC;AAChE,eAAO,MAAM,8BAA8B,YAAY,CAAC;AACxD,eAAO,MAAM,wCAAwC,sBAAsB,CAAC;AAC5E,eAAO,MAAM,sCAAsC,oBAAoB,CAAC;AACxE,eAAO,MAAM,sCAAsC,oBAAoB,CAAC;AACxE,eAAO,MAAM,wCAAwC,sBAAsB,CAAC;AAC5E,eAAO,MAAM,wCAAwC,sBAAsB,CAAC;AAC5E,eAAO,MAAM,iCAAiC,eAAe,CAAC;AAC9D,eAAO,MAAM,4BAA4B,UAAU,CAAC;AACpD,eAAO,MAAM,qCAAqC,mBAAmB,CAAC;AACtE,eAAO,MAAM,qCAAqC,mBAAmB,CAAC;AAYtE,eAAO,MAAM,2BAA2B,yBAAyB,CAAC;AAOlE,eAAO,MAAM,uBAAuB,mBAAmB,CAAC;AAKxD,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC,eAAO,MAAM,0BAA0B,OAAQ,CAAC"}

package/dist/sdkConstants.js

@@ -11,7 +11,7 @@
 // The rule for this file: nothing lands here unless the SDK reads it at runtime,
 // and it imports nothing.
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.CUSTOM_CODE_MAX_LOG_LENGTH = exports.CUSTOM_CODE_MAX_LOGS = exports.CUSTOM_CODE_HEALTH_TOOL = exports.CUSTOM_CODE_BINDING_VERSION = exports.CUSTOM_CODE_BROKER_PATH_DATA = exports.CUSTOM_CODE_BROKER_PATH_SEND_FILE = exports.CUSTOM_CODE_BROKER_PATH_RESOURCES_DELETE = exports.CUSTOM_CODE_BROKER_PATH_RESOURCES_CREATE = exports.CUSTOM_CODE_BROKER_PATH_RESOURCES_LIST = exports.CUSTOM_CODE_BROKER_PATH_RESOURCES_READ = exports.CUSTOM_CODE_BROKER_PATH_RESOURCES_SEARCH = exports.CUSTOM_CODE_BROKER_PATH_SECRET = exports.CUSTOM_CODE_BROKER_PATH_CONNECTION = exports.CUSTOM_CODE_BROKER_ORIGIN = exports.CUSTOM_CODE_BINDING_BROKER = exports.CUSTOM_CODE_BINDING_TOKEN = void 0;
+exports.CUSTOM_CODE_MAX_LOG_LENGTH = exports.CUSTOM_CODE_MAX_LOGS = exports.CUSTOM_CODE_HEALTH_TOOL = exports.CUSTOM_CODE_BINDING_VERSION = exports.CUSTOM_CODE_BROKER_PATH_CHANNELS_POST = exports.CUSTOM_CODE_BROKER_PATH_CHANNELS_SEND = exports.CUSTOM_CODE_BROKER_PATH_DATA = exports.CUSTOM_CODE_BROKER_PATH_SEND_FILE = exports.CUSTOM_CODE_BROKER_PATH_RESOURCES_DELETE = exports.CUSTOM_CODE_BROKER_PATH_RESOURCES_CREATE = exports.CUSTOM_CODE_BROKER_PATH_RESOURCES_LIST = exports.CUSTOM_CODE_BROKER_PATH_RESOURCES_READ = exports.CUSTOM_CODE_BROKER_PATH_RESOURCES_SEARCH = exports.CUSTOM_CODE_BROKER_PATH_SECRET = exports.CUSTOM_CODE_BROKER_PATH_CONNECTION = exports.CUSTOM_CODE_BROKER_ORIGIN = exports.CUSTOM_CODE_BINDING_BROKER = exports.CUSTOM_CODE_BINDING_TOKEN = void 0;
 // Bindings injected into every user script at upload time. The token is a
 // secret_text binding rotated on each publish; the broker is a service binding.
 // Names are part of the SDK's contract with the script, so they can't be
@@ -31,6 +31,8 @@ exports.CUSTOM_CODE_BROKER_PATH_RESOURCES_CREATE = '/resources/create';
 exports.CUSTOM_CODE_BROKER_PATH_RESOURCES_DELETE = '/resources/delete';
 exports.CUSTOM_CODE_BROKER_PATH_SEND_FILE = '/send-file';
 exports.CUSTOM_CODE_BROKER_PATH_DATA = '/data';
+exports.CUSTOM_CODE_BROKER_PATH_CHANNELS_SEND = '/channels/send';
+exports.CUSTOM_CODE_BROKER_PATH_CHANNELS_POST = '/channels/post';
 // Injected at upload time and echoed back by the health probe below. Uploading a
 // script into the dispatch namespace is not read-your-writes: dispatching to the
 // name immediately afterwards can still reach the previous edition. Tool names

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ganju/utils",
-  "version": "0.0.17",
+  "version": "0.0.18",
   "description": "Shared constants, schemas and helpers for Ganju",
   "license": "Apache-2.0",
   "author": "MontoyaAndres <andresmontoyafcb@gmail.com>",

package/src/constants.ts

@@ -23,6 +23,8 @@ import {
   CUSTOM_CODE_BROKER_PATH_RESOURCES_DELETE,
   CUSTOM_CODE_BROKER_PATH_SEND_FILE,
   CUSTOM_CODE_BROKER_PATH_DATA,
+  CUSTOM_CODE_BROKER_PATH_CHANNELS_SEND,
+  CUSTOM_CODE_BROKER_PATH_CHANNELS_POST,
   CUSTOM_CODE_HEALTH_TOOL,
   CUSTOM_CODE_MAX_LOGS,
   CUSTOM_CODE_MAX_LOG_LENGTH
@@ -2422,9 +2424,17 @@ const BILLING_METER_EMBEDDED = 'ganju_embedded_storage';
 // of ours quotes.
 const BILLING_METER_TOOL_CALLS = 'ganju_custom_tool_calls';
 
+// Project data, reported in full (not past an allowance) and attached at $0:
+// measured before they are priced. Storage is the period's peak in whole MB,
+// rows and trigger runs are counts.
+const BILLING_METER_DATA_STORAGE = 'ganju_data_storage';
+const BILLING_METER_DATA_ROWS_WRITTEN = 'ganju_data_rows_written';
+const BILLING_METER_DATA_ROWS_READ = 'ganju_data_rows_read';
+const BILLING_METER_DATA_TRIGGER_RUNS = 'ganju_data_trigger_runs';
+
 // The metadata property every meter aggregates (`sum` over it). Ingested events
 // carry the increment under this key, so it has to agree with the aggregation
-// configured on all four meters — which is why it lives beside their names
+// configured on every meter — which is why it lives beside their names
 // rather than at the call site.
 const BILLING_METER_UNITS_KEY = 'units';
 
@@ -2599,6 +2609,10 @@ export const constants = {
   BILLING_METER_SHARED_MESSAGES,
   BILLING_METER_EMBEDDED,
   BILLING_METER_TOOL_CALLS,
+  BILLING_METER_DATA_STORAGE,
+  BILLING_METER_DATA_ROWS_WRITTEN,
+  BILLING_METER_DATA_ROWS_READ,
+  BILLING_METER_DATA_TRIGGER_RUNS,
   BILLING_METER_UNITS_KEY,
   POLAR_API_BASE,
   POLAR_SANDBOX_API_BASE,
@@ -3097,6 +3111,8 @@ export const constants = {
   CUSTOM_CODE_BROKER_PATH_RESOURCES_DELETE,
   CUSTOM_CODE_BROKER_PATH_SEND_FILE,
   CUSTOM_CODE_BROKER_PATH_DATA,
+  CUSTOM_CODE_BROKER_PATH_CHANNELS_SEND,
+  CUSTOM_CODE_BROKER_PATH_CHANNELS_POST,
   CUSTOM_CODE_OUTBOUND_PARAM_ARTIFACT_ID,
   CUSTOM_CODE_OUTBOUND_PARAM_ALLOWED_HOSTS,
   CUSTOM_CODE_PLATFORM_HOSTS,

package/src/customCodeToken.ts

@@ -193,6 +193,9 @@ export interface CustomCodeCallPayload {
   versionId: string;
   tool: string;
   exp: number;
+  // A run a database trigger started: its writes are the trigger's, never
+  // matched by that same trigger, and fire others one level deeper.
+  trigger?: { id: string; depth: number };
 }
 
 const callSecret = (secret: string) => `${secret}:call`;
@@ -207,7 +210,8 @@ export const mintCustomCodeCallToken = async (
     artifactId: payload.artifactId,
     versionId: payload.versionId,
     tool: payload.tool,
-    exp: Math.ceil((issuedAt + payload.ttlMs) / 1000)
+    exp: Math.ceil((issuedAt + payload.ttlMs) / 1000),
+    ...(payload.trigger ? { trigger: payload.trigger } : {})
   };
   const encodedPayload = toBase64Url(
     bytesToBase64(encoder.encode(JSON.stringify(body)))
@@ -246,6 +250,15 @@ export const verifyCustomCodeCallToken = async (
     ) {
       return null;
     }
+    const trigger = candidate.trigger;
+    if (
+      trigger !== undefined &&
+      (typeof trigger?.id !== 'string' ||
+        !Number.isInteger(trigger.depth) ||
+        trigger.depth < 1)
+    ) {
+      return null;
+    }
     return candidate as CustomCodeCallPayload;
   } catch {
     return null;

package/src/data.ts

@@ -106,3 +106,43 @@ export {
   dataAdminToolDefinition
 } from './dataTools';
 export type { DataToolDefinition, DataAdminAction } from './dataTools';
+export {
+  DATA_TRIGGER_EVENTS,
+  DATA_TRIGGER_ACTIONS,
+  DATA_MAX_TRIGGERS,
+  DATA_TRIGGER_MAX_DEPTH,
+  DATA_TRIGGER_DEFAULT_RATE,
+  DATA_TRIGGER_MAX_RATE,
+  DATA_OUTBOX_BATCH,
+  DATA_TRIGGER_MAX_MESSAGE_BYTES,
+  utf8Bytes,
+  conditionMatches,
+  renderTriggerText,
+  normaliseTrigger,
+  listTriggers,
+  getTrigger,
+  saveTrigger,
+  dropTrigger,
+  setTriggerEnabled,
+  replaceManagedTriggers,
+  collectTriggerEvents,
+  readOutbox,
+  deleteOutbox,
+  outboxSize,
+  clearOutbox,
+  triggersUsingColumn,
+  renameColumnInTriggers
+} from './dataTriggers';
+export type {
+  DataTrigger,
+  DataTriggerAction,
+  DataTriggerActionType,
+  DataTriggerCondition,
+  DataTriggerEvent,
+  DataTriggerEventMessage,
+  DataTriggerInput,
+  DataTriggerTemplate,
+  DataTriggerTest,
+  DataTriggerWithSecret,
+  SavedTrigger
+} from './dataTriggers';

package/src/dataApi.ts

@@ -16,7 +16,13 @@ export interface DataApiRoute {
   path: string;
   summary: string;
   description?: string;
-  tag: 'Database' | 'Tables' | 'Rows' | 'Queries' | 'History and export';
+  tag:
+    | 'Database'
+    | 'Tables'
+    | 'Rows'
+    | 'Queries'
+    | 'Triggers'
+    | 'History and export';
   body?: z.ZodType;
   query?: z.ZodObject;
   // What a 200/201 answers with, in a sentence.
@@ -49,7 +55,11 @@ const {
   DATA_EXPORT_FILE_QUERY,
   DATA_CHANGE_LIST_QUERY,
   DATA_QUERY_INPUT,
-  DATA_QUERY_RUN_BODY
+  DATA_QUERY_RUN_BODY,
+  DATA_TRIGGER_INPUT,
+  DATA_TRIGGER_PATCH,
+  DATA_TRIGGER_DEPLOY_BODY,
+  DATA_TRIGGER_RUN_LIST_QUERY
 } = Schema;
 
 export const DATA_API_ROUTES = {
@@ -303,6 +313,71 @@ export const DATA_API_ROUTES = {
     body: DATA_QUERY_RUN_BODY,
     returns: '{ query, rows, truncated? }'
   },
+  listTriggers: {
+    method: 'get',
+    path: '/trigger',
+    tag: 'Triggers',
+    summary: 'Triggers',
+    description:
+      'Each with its table, event, condition and action. `pending` counts events not yet handed to the queue. Webhook secrets are never listed.',
+    returns: '{ triggers, pending }'
+  },
+  saveTrigger: {
+    method: 'post',
+    path: '/trigger',
+    tag: 'Triggers',
+    summary: 'Save a trigger',
+    description:
+      'Runs one action when rows of `table` are inserted, updated or deleted, and `when` holds: `{ "status": { "changedTo": "READY" } }` fires on the transition only; `changedFrom`, `changed: true` and `equals` test a column too, and `all` / `any` combine them. The action is one of `function` (a function of this project, given `{ event, table, row, previous, actor, eventId, triggerId }`), `webhook` (an https URL, sent a POST signed in `x-ganju-signature`), `chat` (`{ channelId, chatId, text }`), `email` (`{ to, subject, text }`) or `customer` (`{ text, template? }`, to the row\'s customer on a customer-scoped table). Texts take `{{field}}` from the row, inserted as plain text. Saving under an existing name replaces it, unless `replace` is false; with no `name`, it always creates a new trigger, named from the table, event and action and numbered past those taken. Left out, `enabled` keeps a saved trigger on or off as it was. A new webhook answers with its signing `secret`, shown this once. Delivery is at least once: every event carries an `eventId`.',
+    body: DATA_TRIGGER_INPUT,
+    returns: '{ trigger, secret? }',
+    status: 201
+  },
+  updateTrigger: {
+    method: 'patch',
+    path: '/trigger/:name',
+    tag: 'Triggers',
+    summary: 'Turn a trigger on or off',
+    description:
+      'Turning one back on clears why Ganju turned it off (20 failed runs in a row).',
+    body: DATA_TRIGGER_PATCH,
+    returns: '{ trigger }'
+  },
+  dropTrigger: {
+    method: 'delete',
+    path: '/trigger/:name',
+    tag: 'Triggers',
+    summary: 'Delete a trigger',
+    returns: '{ dropped }'
+  },
+  deployTriggers: {
+    method: 'post',
+    path: '/trigger/deploy',
+    tag: 'Triggers',
+    summary: 'Deploy the triggers of ganju.json',
+    description:
+      "What `ganju deploy` sends: every trigger listed is saved as managed by the CLI, and the CLI's earlier ones not listed are deleted. Triggers made in the dashboard are left alone. All or nothing. New webhooks' secrets come back once, by name.",
+    body: DATA_TRIGGER_DEPLOY_BODY,
+    returns: '{ triggers, removed, secrets }'
+  },
+  listTriggerRuns: {
+    method: 'get',
+    path: '/trigger/:name/run',
+    tag: 'Triggers',
+    summary: "A trigger's recent runs",
+    description:
+      'Newest first, up to 50: `ok`, `failed` with its error, `skipped`, or `running`.',
+    query: DATA_TRIGGER_RUN_LIST_QUERY,
+    returns: '{ runs }'
+  },
+  retryTriggerRun: {
+    method: 'post',
+    path: '/trigger/:name/run/:runId/retry',
+    tag: 'Triggers',
+    summary: 'Run a failed event again',
+    description: 'The same event, with the same `eventId`.',
+    returns: '{ run }'
+  },
   startExport: {
     method: 'post',
     path: '/export',
@@ -448,6 +523,7 @@ export const dataOpenApi = (serverUrl: string) => {
       { name: 'Tables' },
       { name: 'Rows' },
       { name: 'Queries' },
+      { name: 'Triggers' },
       { name: 'History and export' }
     ],
     paths,

package/src/dataDdl.ts

@@ -1,6 +1,7 @@
 // The SQL a project's database runs to build and change its tables. Pure
 // string building: every name in here passed identifierIssue or is one of
 // ours, and every owner-supplied value is a literal escaped by sqlLiteral.
+import { changeCaptureTriggers } from './dataTriggers';
 import { quoteIdentifier as q } from './dataIdentifiers';
 import type {
   DataColumn,
@@ -339,7 +340,8 @@ const historyTriggers = (table: DataTable): NamedStatement[] => {
 
 export const desiredTriggers = (table: DataTable): NamedStatement[] => [
   ...ftsTriggers(table),
-  ...historyTriggers(table)
+  ...historyTriggers(table),
+  ...changeCaptureTriggers(table)
 ];
 
 // Type changes

package/src/dataEngine.ts

@@ -3,6 +3,7 @@
 // the tests and the tool-design eval. The runner executes; everything about
 // which SQL is allowed and how results look is decided here.
 import { identifierIssue, quoteIdentifier as q } from './dataIdentifiers';
+import { collectTriggerEvents, renameColumnInTriggers, triggersUsingColumn } from './dataTriggers';
 import {
   DATA_NOW_SQL,
   NUMERIC_TYPES,
@@ -188,6 +189,44 @@ export const INTERNAL_MIGRATIONS: readonly (readonly string[])[] = [
       updated_at TEXT NOT NULL DEFAULT (${DATA_NOW_SQL}),
       updated_by TEXT
     ) WITHOUT ROWID`
+  ],
+  // Triggers: the owner's rules, the rows a write changed while one listens
+  // (emptied before the write commits), and the events waiting for the queue.
+  [
+    `CREATE TABLE IF NOT EXISTS _ganju_triggers (
+      id TEXT PRIMARY KEY,
+      name TEXT NOT NULL UNIQUE,
+      description TEXT,
+      table_id INTEGER NOT NULL,
+      event TEXT NOT NULL,
+      condition TEXT,
+      action TEXT NOT NULL,
+      enabled INTEGER NOT NULL DEFAULT 1,
+      disabled_reason TEXT,
+      managed TEXT,
+      rate_limit INTEGER NOT NULL DEFAULT 60,
+      secret TEXT,
+      created_at TEXT NOT NULL DEFAULT (${DATA_NOW_SQL}),
+      updated_at TEXT NOT NULL DEFAULT (${DATA_NOW_SQL}),
+      updated_by TEXT
+    ) WITHOUT ROWID`,
+    'CREATE INDEX IF NOT EXISTS _ganju_triggers_table ON _ganju_triggers(table_id, event)',
+    `CREATE TABLE IF NOT EXISTS _ganju_changes (
+      id INTEGER PRIMARY KEY,
+      table_id INTEGER NOT NULL,
+      event TEXT NOT NULL,
+      row_id INTEGER NOT NULL,
+      actor TEXT,
+      old TEXT,
+      new TEXT
+    )`,
+    `CREATE TABLE IF NOT EXISTS _ganju_outbox (
+      seq INTEGER PRIMARY KEY,
+      id TEXT NOT NULL UNIQUE,
+      trigger_id TEXT NOT NULL,
+      message TEXT NOT NULL,
+      created_at TEXT NOT NULL DEFAULT (${DATA_NOW_SQL})
+    )`
   ]
 ];
 
@@ -1796,6 +1835,8 @@ export const write = (
   assertWritable(runner, caller, addsData);
   return runner.transaction(() => {
     setContextActor(runner, caller.actor);
+    // Rows left by a change that wasn't a write (a schema change) fire nothing.
+    runner.all('DELETE FROM _ganju_changes');
     const results: WriteResult[] = [];
     operations.forEach((op, index) => {
       try {
@@ -1812,6 +1853,7 @@ export const write = (
         throw error;
       }
     });
+    collectTriggerEvents(runner, schema, caller);
     return { ok: true as const, results };
   });
 };
@@ -2288,6 +2330,8 @@ export const dropTable = (
     dropTriggers(runner, table);
     runner.all(`DROP TABLE IF EXISTS ${q(ftsTableName(table))}`);
     runner.all(`DROP TABLE ${q(table.name)}`);
+    // Its triggers go with it; a later table of the same name starts with none.
+    runner.all('DELETE FROM _ganju_triggers WHERE table_id = ?', [table.id]);
     runner.all('UPDATE _ganju_tables SET display_column_id = NULL WHERE id = ?', [table.id]);
     runner.all('DELETE FROM _ganju_columns WHERE table_id = ?', [table.id]);
     runner.all('DELETE FROM _ganju_tables WHERE id = ?', [table.id]);
@@ -2662,6 +2706,20 @@ export const copyTableStep = (
   }
 };
 
+// Triggers name columns in their conditions and texts, checked only when
+// saved: a column one of them uses can't be dropped under it.
+const assertNoTriggerUses = (runner: SqlRunner, table: DataTable, column: string) => {
+  const triggers = triggersUsingColumn(runner, table.id, column);
+  if (triggers.length === 0) return;
+  throw new DataError(
+    triggers.length === 1
+      ? `${table.name}.${column} can't be dropped while the trigger ${triggers[0]} uses it; change or delete that trigger first.`
+      : `${table.name}.${column} can't be dropped while the triggers ${triggers.join(', ')} use it; change or delete those triggers first.`,
+    'constraint',
+    { triggers }
+  );
+};
+
 export const updateColumn = (
   runner: SqlRunner,
   schema: DataSchema,
@@ -2690,6 +2748,16 @@ export const updateColumn = (
   }
 
   if (columnChangeNeedsRebuild(schema, table.name, column.name, patch)) {
+    // A rename renames the column in its triggers too; a copy can't, so the
+    // two go one after the other.
+    const triggers = draft.name !== column.name ? triggersUsingColumn(runner, table.id, column.name) : [];
+    if (triggers.length) {
+      throw new DataError(
+        `${table.name}.${column.name} is used by triggers (${triggers.join(', ')}): rename it on its own, then make the other changes.`,
+        'constraint',
+        { triggers }
+      );
+    }
     return rebuildTable(
       runner,
       schema,
@@ -2707,6 +2775,7 @@ export const updateColumn = (
       runner.all(
         `ALTER TABLE ${q(table.name)} RENAME COLUMN ${q(column.name)} TO ${q(draft.name)}`
       );
+      renameColumnInTriggers(runner, table.id, column.name, draft.name);
     }
     updateColumnMeta(runner, schema, table, column.id, draft);
     touchTable(runner, table.id);
@@ -2729,6 +2798,7 @@ export const dropColumn = (
   if (table.columns.length === 1) {
     throw new DataError(`${table.name} needs at least one column; drop the table instead.`);
   }
+  assertNoTriggerUses(runner, table, column.name);
   if (dropColumnNeedsRebuild(schema, table.name, column.name)) {
     return rebuildTable(
       runner,

package/src/dataRpc.ts

@@ -10,6 +10,7 @@ import type {
   DataTableCopy
 } from './dataTypes';
 import type { DataQuery } from './dataQueries';
+import type { DataTrigger, DataTriggerWithSecret, SavedTrigger } from './dataTriggers';
 
 export type ExportFormat = 'jsonl' | 'csv';
 
@@ -124,6 +125,20 @@ export interface ProjectDatabaseRpc {
     caller: DataCaller,
     args: { name: string; params?: Record<string, unknown>; limit?: number }
   ): R<{ query: string; rows: Record<string, unknown>[]; truncated?: string }>;
+  // Triggers. `pending` counts events waiting for the queue.
+  listTriggers(caller: DataCaller): R<{ triggers: DataTrigger[]; pending: number }>;
+  getTrigger(nameOrId: string): R<DataTriggerWithSecret>;
+  saveTrigger(caller: DataCaller, input: unknown): R<SavedTrigger>;
+  dropTrigger(caller: DataCaller, name: string): R<{ dropped: string }>;
+  setTriggerEnabled(
+    caller: DataCaller,
+    args: { name: string; enabled: boolean; reason?: string | null }
+  ): R<DataTrigger>;
+  replaceManagedTriggers(
+    caller: DataCaller,
+    inputs: unknown
+  ): R<{ triggers: DataTrigger[]; removed: string[]; secrets: Record<string, string> }>;
+  clearOutbox(args: { before: number }): R<{ cleared: number }>;
   exportStart(
     caller: DataCaller,
     args?: { format?: ExportFormat }