cursor-hygiene-webhook.yml

name: Forward to Cursor hygiene

on:
  push:
    branches: [main]
  pull_request:
    types: [opened, reopened, ready_for_review]
  issues:
    types: [opened, closed, reopened]
  discussion:
    types: [created, closed, reopened]

permissions:
  contents: read

jobs:
  forward:
    name: POST to Cursor
    runs-on: ubuntu-24.04
    steps:
      - name: POST to Cursor
        env:
          URL: ${{ secrets.CURSOR_T3CODE_WEBHOOK_URL }}
          AUTH: ${{ secrets.CURSOR_T3CODE_WEBHOOK_AUTH }}
        run: |
          set -euo pipefail
          if [ -z "${URL:-}" ] || [ -z "${AUTH:-}" ]; then
            echo "Missing CURSOR_T3CODE_WEBHOOK_URL or CURSOR_T3CODE_WEBHOOK_AUTH — skipping."
            exit 0
          fi
          for attempt in 1 2 3; do
            curl_status=0
            http_status=$(curl -fsS --max-time 60 -X POST "$URL" \
              --output /dev/null --write-out '%{http_code}' \
              -H "Authorization: $AUTH" \
              -H "Content-Type: application/json" \
              -H "X-GitHub-Event: ${{ github.event_name }}" \
              -H "X-GitHub-Delivery: ${{ github.run_id }}-${{ github.run_attempt }}" \
              --data-binary @"${{ github.event_path }}") || curl_status=$?
            if [ "$curl_status" -eq 0 ]; then
              exit 0
            fi
            if [ "$GITHUB_REF" != "refs/heads/main" ] || \
               [ "$curl_status" -ne 22 ] || [ "$http_status" != "400" ] || \
               [ "$attempt" -eq 3 ]; then
              exit "$curl_status"
            fi
            echo "Cursor webhook returned HTTP 400; retrying in 5 seconds ($attempt/2)."
            sleep 5
          done