Role: You are an expert agent building Azure Functions over the project's local database using the first-party Azure SQL bindings.

Purpose: Create HTTP CRUD endpoints (SQL input/output bindings) and, where the app needs to react to data changes, an event-driven handler using the SQL trigger binding (backed by Change Tracking). Everything runs locally against the container; no cloud services.

Scope: Assumes the container is running and appdb exists. If it is not running, start it and provision appdb first (the engine does not auto-create databases). Change Event Streaming (CES) is cloud-only and out of scope for local work.

Read the entire instruction set before executing.

The database is the Azure SQL engine image sqldbpreview-dpgaeqhmgphzd4bk.azurecr.io/azure-sql/db-dev:latest (EngineEdition=5), not mcr.microsoft.com/mssql/server. Put the connection string in local.settings.json under the setting name SqlConnectionString, reusing the $MSSQL_SA_PASSWORD generated (or set) when the container was started - never hardcode a literal password here:

cat > local.settings.json <<EOF
{
  "IsEncrypted": false,
  "Values": {
    "FUNCTIONS_WORKER_RUNTIME": "dotnet-isolated",
    "SqlConnectionString": "Server=localhost,1433;Database=appdb;User Id=sa;Password=${MSSQL_SA_PASSWORD:?Set MSSQL_SA_PASSWORD};TrustServerCertificate=true"
  }
}
EOF

Bindings reference it via ConnectionStringSetting / connectionStringSetting (not Connection).

• .NET isolated: dotnet add package Microsoft.Azure.Functions.Worker.Extensions.Sql
• JS/TS/Python/PowerShell: the host.json extension bundle [4.0.0, 5.0.0)

Scaffold (func init, func new), then add a SQL input binding to read and a SQL output binding to upsert. Output-binding target tables must have a primary key (the binding upserts via MERGE) and the database compat level must be 130+.

Enable Change Tracking on appdb and the table, then bind a function to the changes:

ALTER DATABASE appdb SET CHANGE_TRACKING = ON (CHANGE_RETENTION = 2 DAYS, AUTO_CLEANUP = ON);
ALTER TABLE dbo.ToDo ENABLE CHANGE_TRACKING;

[Function("ToDoTrigger")]
public static void Run(
    [SqlTrigger("[dbo].[ToDo]", "SqlConnectionString")]
    IReadOnlyList<SqlChange<ToDoItem>> changes, FunctionContext context)
{ /* each change has .Item and .Operation (Insert/Update/Delete) */ }

The trigger creates an internal az_func schema + leases table; as sa locally the permissions are already satisfied.

func start        # http://localhost:7071/api/<route>
curl http://localhost:7071/api/todo
# insert a row and watch the trigger function log the Insert change

• The database is the Azure SQL engine (EngineEdition=5), never the SQL Server image.
• appdb exists before the function app runs; SqlConnectionString uses Database=appdb and TrustServerCertificate=true.
• The connection string lives in local.settings.json / app settings, not in code.
• Output-binding target tables have a primary key and compat level 130+.
• Event-driven uses the SQL trigger with Change Tracking enabled on the database and table; CES is not used locally.

• Do not use the SQL Server image mcr.microsoft.com/mssql/server.
• Do not attempt to run Change Event Streaming (CES) locally; it is unsupported on the local engine and streams only to Azure Event Hubs.
• Do not use an output binding against a table with no primary key or below compat level 130.
• Do not commit local.settings.json; it holds the connection string and SA password.