minimise chat email webhook payload

Author: dnywh

supabase/migrations/20260511085844_minimise_chat_email_webhook_payload.sql

@@ -0,0 +1,60 @@
+-- The chat email Edge Function only needs the inserted message id. Keep the
+-- trigger payload minimal so message content and participant ids are not sent
+-- through the webhook request body.
+
+create or replace function private.notify_new_chat_message()
+returns trigger
+language plpgsql
+security definer
+set search_path = ''
+as $$
+declare
+  webhook_secret text;
+begin
+  if to_regprocedure('net.http_post(text,jsonb,jsonb,jsonb,integer)') is null then
+    raise warning 'Skipping chat message email webhook because pg_net is unavailable.';
+    return new;
+  end if;
+
+  if to_regclass('vault.decrypted_secrets') is not null then
+    execute
+      'select decrypted_secret from vault.decrypted_secrets where name = $1 limit 1'
+      into webhook_secret
+      using 'PEELS_CHAT_MESSAGE_WEBHOOK_SECRET';
+  end if;
+
+  if webhook_secret is null or webhook_secret = '' then
+    raise warning 'Skipping chat message email webhook because PEELS_CHAT_MESSAGE_WEBHOOK_SECRET is not set in Vault.';
+    return new;
+  end if;
+
+  begin
+    perform net.http_post(
+      url := 'http://kong:8000/functions/v1/send-email-for-new-chat-message',
+      body := jsonb_build_object(
+        'type', tg_op,
+        'table', tg_table_name,
+        'schema', tg_table_schema,
+        'record', jsonb_build_object('id', new.id),
+        'old_record', null
+      ),
+      params := '{}'::jsonb,
+      headers := jsonb_build_object(
+        'Content-Type', 'application/json',
+        'x-peels-webhook-secret', webhook_secret
+      ),
+      timeout_milliseconds := 5000
+    );
+  exception
+    when others then
+      raise warning 'Skipping chat message email webhook because the request failed: %', sqlerrm;
+  end;
+
+  return new;
+end;
+$$;
+
+alter function private.notify_new_chat_message() owner to postgres;
+
+revoke all privileges on function private.notify_new_chat_message()
+  from anon, authenticated, public;