All twelve actions.

filter — keep events that match

control · may drop the event

Evaluate one or more conditions against the event. If they fail (per the AND/OR combinator), the pipeline short-circuits — no destinations are hit, the delivery is marked delivered.

• combinatorand | or — how multiple conditions combine
• conditionslist of { field, op, value }. Ops: == != > < >= <= contains in

field is a $-rooted ref. value is a string; numeric ops coerce both sides via Number().

dedupe — drop if seen recently

control · may drop the event

Reads the resolved key off the event and drops the event if it's been seen inside the configured window. Same idea as the idempotency key at ingest, but evaluated per pipeline against any event field.

• key$-rooted ref (e.g. $event.payload.user_id)
• windowduration string — 5m, 1h, 24h, 7d

throttle — rate-limit per key

control · may drop the event

Counts events per key per window. Once the configured max is hit, further events either drop or have their delivery delayed to the next window.

• key$-rooted ref to bucket on
• maxevents per window before throttling kicks in
• windowduration string
• modedrop | delay

Delay mode pushes the next attempt forward without counting it as a retry — see /docs/deliveries.

enrich.entity — lookup against your identity graph

enrichment · adds new fields

Resolves a key field to an external_id, looks up the matching entities row, merges its traits onto $entity.<kind>. Missing rows are silent no-ops; downstream templates read undefined.

• kindwhich entity kind to look up (e.g. user, account)
• externalIdField$-rooted ref whose value matches the entity's external_id

Read /docs/entities for how to populate the table in the first place.

enrich.person — profile waterfall

enrichment · adds new fields

Walks the providers list to assemble a person profile. `entity` looks up your identity graph by (kind, email) and merges traits. `internal` derives from public signal: email parse, name from the local-part, personal/disposable domain classification, optional Gravatar. First hit wins per field. Lands on $enrich.person.

• field$-rooted ref to an email field
• providersordered waterfall: 'entity' | 'internal'
• kindentity kind to look up against when 'entity' is active (default 'person')
• cacheForduration string — cache TTL for the internal tier (default 24h). Entity tier reads live on every event.

Entity-tier traits are read live, so upsert.entity earlier in the same pipeline is visible here without a cache flush. Only the slower internal-tier derivations cache.

enrich.company — profile waterfall

enrichment · adds new fields

Same shape as enrich.person but keyed by domain. Accepts an email (takes the part after @) or a bare domain. `entity` looks up your identity graph; `internal` derives public signal from the domain — homepage title and description, branding, the email provider (Google Workspace, Microsoft 365, etc.). Lands on $enrich.company.

• field$-rooted ref to an email or domain
• providersordered waterfall, same provider set as enrich.person
• kindentity kind to look up against when 'entity' is active (default 'company')
• cacheForduration string — cache TTL for the internal tier (default 24h)

The entity tier looks up by the resolved domain, so an entity row with external_id='acme.com' matches every email from that domain.

classify — LLM labels with enum schema

enrichment · adds new fields

Sends the input to an LLM under a schema that constrains each dimension to its configured values. The output is validated against the schema before it lands on $classify.<dimension>, so downstream steps see a label from your enum or nothing.

• inputstring with $-rooted refs interpolated (e.g. $event.payload.subject)
• dimensionslist of { name, values } — each is one independent label slot
• modelfast | balanced | accurate — speed/quality tradeoff
• systemPromptoptional system prompt; defaults to a generic classifier prompt

summarize — LLM short summary

enrichment · adds new fields

Sends the configured input to an LLM and returns a sentence-bounded summary in your chosen style. Lands on $summarize.text.

• field$-rooted ref to the text to summarize
• sentencestarget sentence count
• style'' | formal | casual | bullets
• modelfast | balanced | accurate

translate — LLM translation

enrichment · adds new fields

Sends the source text and target language to an LLM and returns the translation only, no preamble. Lands on $translate.text.

• field$-rooted ref to the source text
• sourceISO code, or empty for auto-detect
• targetISO code
• modelfast | balanced | accurate

redact.pii — per-destination PII matrix

mutation · rewrites in place

Applied per destination, not per pipeline. The configured matrix maps each PII type (email, phone, ip, credit_card) to a per-destination action: preserve, mask, hash, or drop. Detection is regex-based on string values in the payload.

• rulesRecord<PiiType, Record<destinationId, RedactAction>>. The '*' key is the default for any destination not explicitly listed.

name and address PII types sit in the matrix but require NER to detect from values alone — currently no-ops.

upsert.entity — write to your identity graph

mutation · rewrites in place

Maps event fields onto trait names; upserts the entities row keyed by (kind, externalIdField). Traits deep-merge one level: partial updates don't blank out fields a prior write set.

• kindentity kind to write to
• externalIdField$-rooted ref whose value becomes the row's external_id
• traitFieldsRecord<trait_name, $-rooted-ref-to-source>. The dashboard auto-fills the source to $event.payload.<trait_name> as you type.

The just-written traits are visible on $entity.<kind> for any later step in the same pipeline — no need to follow with enrich.entity.

transform — the JSON-ish escape hatch

mutation · rewrites in place

Renders a custom template into the outbound body. $-rooted refs are substituted with JSON-encoded values; now() yields an ISO timestamp; bare object keys are auto-quoted so the result parses as JSON.

• templatestring. See /docs/templates for the full dialect.