specweave 1.0.351 → 1.0.352

package/plugins/specweave-ado/lib/ado-hierarchical-sync.js

@@ -33,16 +33,15 @@ async function buildHierarchicalWIQL(organization, pat, containers) {
         );
       }
     }
+    if (container.filters) {
+      const containerFilterClauses = buildFilterClauses(container.filters);
+      if (containerFilterClauses.length > 0) {
+        parts.push(...containerFilterClauses);
+      }
+    }
     projectClauses.push(`(${parts.join(" AND ")})`);
   }
   let whereClause = projectClauses.join(" OR ");
-  const filters = containers[0]?.filters;
-  if (filters) {
-    const filterClauses = buildFilterClauses(filters);
-    if (filterClauses.length > 0) {
-      whereClause = `(${whereClause}) AND ${filterClauses.join(" AND ")}`;
-    }
-  }
   return `
     SELECT [System.Id], [System.Title], [System.Description], [System.State],
            [System.CreatedDate], [System.ChangedDate], [System.WorkItemType],
@@ -91,11 +90,18 @@ function addTimeRangeFilter(wiql, timeRange) {
   }
   const { since, until } = calculateTimeRange(timeRange);
   const timeFilter = `[System.CreatedDate] >= '${since}' AND [System.CreatedDate] <= '${until}'`;
-  if (wiql.includes("ORDER BY")) {
-    return wiql.replace("ORDER BY", `AND ${timeFilter} ORDER BY`);
-  } else {
+  const orderByRegex = /\bORDER\s+BY\b/i;
+  const match = wiql.match(orderByRegex);
+  if (match && match.index !== void 0) {
+    const before = wiql.substring(0, match.index).trimEnd();
+    const after = wiql.substring(match.index);
+    return `${before} AND ${timeFilter} ${after}`;
+  }
+  const whereRegex = /\bWHERE\b/i;
+  if (whereRegex.test(wiql)) {
     return `${wiql} AND ${timeFilter}`;
   }
+  return `${wiql} WHERE ${timeFilter}`;
 }
 function calculateTimeRange(timeRange) {
   const now = /* @__PURE__ */ new Date();
@@ -179,6 +185,10 @@ async function fetchWorkItemsFiltered(config, pat, timeRange) {
   const baseWiql = await buildHierarchicalWIQL(organization, pat, containers);
   const wiql = addTimeRangeFilter(baseWiql, timeRange);
   console.log("\u{1F50D} Fetching work items (FILTERED strategy):", wiql);
+  const uniqueProjects = new Set(containers.map((c) => c.id));
+  if (uniqueProjects.size > 1) {
+    return executeQueryOrgLevel(organization, pat, wiql);
+  }
   const project = containers[0].id;
   return executeQuery(organization, project, pat, wiql);
 }
@@ -208,7 +218,34 @@ async function executeQuery(organization, project, pat, wiql) {
   });
   return response.value || [];
 }
-function makeRequest(url, pat, method = "GET", body) {
+async function executeQueryOrgLevel(organization, pat, wiql) {
+  const baseUrl = `https://dev.azure.com/${organization}`;
+  const queryUrl = `${baseUrl}/_apis/wit/wiql?api-version=7.1`;
+  const queryResult = await makeRequest(queryUrl, pat, "POST", { query: wiql });
+  if (!queryResult.workItems || queryResult.workItems.length === 0) {
+    return [];
+  }
+  const ids = queryResult.workItems.map((wi) => wi.id);
+  const batchUrl = `${baseUrl}/_apis/wit/workitemsbatch?api-version=7.1`;
+  const response = await makeRequest(batchUrl, pat, "POST", {
+    ids,
+    fields: [
+      "System.Id",
+      "System.Title",
+      "System.Description",
+      "System.State",
+      "System.CreatedDate",
+      "System.ChangedDate",
+      "System.WorkItemType",
+      "System.AreaPath",
+      "System.IterationPath",
+      "System.Tags"
+    ]
+  });
+  return response.value || [];
+}
+const DEFAULT_REQUEST_TIMEOUT_MS = 3e4;
+function makeRequest(url, pat, method = "GET", body, timeoutMs = DEFAULT_REQUEST_TIMEOUT_MS) {
   return new Promise((resolve, reject) => {
     const { hostname, pathname, search } = new URL(url);
     const authHeader = "Basic " + Buffer.from(`:${pat}`).toString("base64");
@@ -223,7 +260,8 @@ function makeRequest(url, pat, method = "GET", body) {
       hostname,
       path: pathname + search,
       method,
-      headers
+      headers,
+      timeout: timeoutMs
     };
     const req = https.request(options, (res) => {
       let data = "";
@@ -243,6 +281,10 @@ function makeRequest(url, pat, method = "GET", body) {
         }
       });
     });
+    req.on("timeout", () => {
+      req.destroy();
+      reject(new Error(`ADO request timed out after ${timeoutMs}ms: ${method} ${url}`));
+    });
     req.on("error", (error) => {
       reject(error);
     });

package/plugins/specweave-ado/lib/ado-hierarchical-sync.ts

@@ -81,6 +81,14 @@ export async function buildHierarchicalWIQL(
       }
     }
 
+    // Per-container filters (each container applies its own filters)
+    if (container.filters) {
+      const containerFilterClauses = buildFilterClauses(container.filters);
+      if (containerFilterClauses.length > 0) {
+        parts.push(...containerFilterClauses);
+      }
+    }
+
     // Combine parts with AND
     projectClauses.push(`(${parts.join(' AND ')})`);
   }
@@ -88,15 +96,6 @@ export async function buildHierarchicalWIQL(
   // Build WHERE clause with project clauses
   let whereClause = projectClauses.join(' OR ');
 
-  // Add global filters (apply to all projects)
-  const filters = containers[0]?.filters;
-  if (filters) {
-    const filterClauses = buildFilterClauses(filters);
-    if (filterClauses.length > 0) {
-      whereClause = `(${whereClause}) AND ${filterClauses.join(' AND ')}`;
-    }
-  }
-
   // Build complete WIQL query
   return `
     SELECT [System.Id], [System.Title], [System.Description], [System.State],
@@ -185,15 +184,29 @@ function addTimeRangeFilter(wiql: string, timeRange: string): string {
 
   const { since, until } = calculateTimeRange(timeRange as TimeRangePreset);
 
-  // Add time range to WHERE clause
   const timeFilter = `[System.CreatedDate] >= '${since}' AND [System.CreatedDate] <= '${until}'`;
 
-  // Insert before ORDER BY if present, otherwise append
-  if (wiql.includes('ORDER BY')) {
-    return wiql.replace('ORDER BY', `AND ${timeFilter} ORDER BY`);
-  } else {
+  // Find the last ORDER BY outside of string literals (case-insensitive)
+  // Strategy: find ORDER BY keyword, ensuring it's not inside single quotes
+  const orderByRegex = /\bORDER\s+BY\b/i;
+  const match = wiql.match(orderByRegex);
+
+  if (match && match.index !== undefined) {
+    // Insert AND timeFilter before ORDER BY
+    const before = wiql.substring(0, match.index).trimEnd();
+    const after = wiql.substring(match.index);
+    return `${before} AND ${timeFilter} ${after}`;
+  }
+
+  // No ORDER BY — check if there's a WHERE clause
+  const whereRegex = /\bWHERE\b/i;
+  if (whereRegex.test(wiql)) {
+    // Append to existing WHERE clause
     return `${wiql} AND ${timeFilter}`;
   }
+
+  // No WHERE clause at all — add one
+  return `${wiql} WHERE ${timeFilter}`;
 }
 
 /**
@@ -364,9 +377,15 @@ async function fetchWorkItemsFiltered(
 
   console.log('🔍 Fetching work items (FILTERED strategy):', wiql);
 
-  // Use first project for API endpoint (WIQL can query across projects)
-  const project = containers[0].id;
+  // Detect multi-project: if containers span more than one project, use org-level endpoint
+  const uniqueProjects = new Set(containers.map(c => c.id));
+  if (uniqueProjects.size > 1) {
+    // Cross-project: use org-level WIQL endpoint
+    return executeQueryOrgLevel(organization, pat, wiql);
+  }
 
+  // Single-project: use project-scoped endpoint
+  const project = containers[0].id;
   return executeQuery(organization, project, pat, wiql);
 }
 
@@ -419,13 +438,58 @@ async function executeQuery(
 }
 
 /**
- * Make HTTPS request to ADO API
+ * Execute WIQL query at org level (cross-project)
+ */
+async function executeQueryOrgLevel(
+  organization: string,
+  pat: string,
+  wiql: string
+): Promise<WorkItem[]> {
+  const baseUrl = `https://dev.azure.com/${organization}`;
+
+  // Execute query at org level
+  const queryUrl = `${baseUrl}/_apis/wit/wiql?api-version=7.1`;
+  const queryResult: any = await makeRequest(queryUrl, pat, 'POST', { query: wiql });
+
+  if (!queryResult.workItems || queryResult.workItems.length === 0) {
+    return [];
+  }
+
+  // Get full work item details (batch request at org level)
+  const ids = queryResult.workItems.map((wi: any) => wi.id);
+  const batchUrl = `${baseUrl}/_apis/wit/workitemsbatch?api-version=7.1`;
+
+  const response: any = await makeRequest(batchUrl, pat, 'POST', {
+    ids,
+    fields: [
+      'System.Id',
+      'System.Title',
+      'System.Description',
+      'System.State',
+      'System.CreatedDate',
+      'System.ChangedDate',
+      'System.WorkItemType',
+      'System.AreaPath',
+      'System.IterationPath',
+      'System.Tags',
+    ],
+  });
+
+  return response.value || [];
+}
+
+/** Default request timeout in ms (configurable via ado.requestTimeoutMs) */
+const DEFAULT_REQUEST_TIMEOUT_MS = 30000;
+
+/**
+ * Make HTTPS request to ADO API with timeout
  */
 function makeRequest(
   url: string,
   pat: string,
   method: string = 'GET',
-  body?: any
+  body?: any,
+  timeoutMs: number = DEFAULT_REQUEST_TIMEOUT_MS
 ): Promise<any> {
   return new Promise((resolve, reject) => {
     const { hostname, pathname, search } = new URL(url);
@@ -446,6 +510,7 @@ function makeRequest(
       path: pathname + search,
       method,
       headers,
+      timeout: timeoutMs,
     };
 
     const req = https.request(options, (res) => {
@@ -470,6 +535,11 @@ function makeRequest(
       });
     });
 
+    req.on('timeout', () => {
+      req.destroy();
+      reject(new Error(`ADO request timed out after ${timeoutMs}ms: ${method} ${url}`));
+    });
+
     req.on('error', (error) => {
       reject(error);
     });

package/plugins/specweave-ado/lib/ado-profile-resolver.js

@@ -26,7 +26,7 @@ class AdoProfileResolver {
       };
     }
     const incrementProfile = await this.getIncrementProfile(incrementId);
-    const globalDefaultProfile = config.sync?.defaultProfile;
+    const globalDefaultProfile = config.sync?.activeProfile ?? config.sync?.defaultProfile;
     const profileName = incrementProfile || globalDefaultProfile;
     if (!profileName) {
       return {

package/plugins/specweave-ado/lib/ado-profile-resolver.ts

@@ -108,6 +108,7 @@ interface ConfigProfile {
  * Sync config from config.json
  */
 interface SyncConfig {
+  activeProfile?: string;
   defaultProfile?: string;
   profiles?: Record<string, ConfigProfile>;
 }
@@ -158,7 +159,8 @@ export class AdoProfileResolver {
     const incrementProfile = await this.getIncrementProfile(incrementId);
 
     // Determine which profile to use
-    const globalDefaultProfile = config.sync?.defaultProfile;
+    // Read both activeProfile (canonical) and defaultProfile (legacy) with fallback
+    const globalDefaultProfile = config.sync?.activeProfile ?? config.sync?.defaultProfile;
     const profileName = incrementProfile || globalDefaultProfile;
 
     if (!profileName) {

package/plugins/specweave-ado/lib/ado-spec-sync.js

@@ -163,7 +163,8 @@ class AdoSpecSync {
         value: this.mapPriorityToAdo(spec.metadata.priority)
       }
     ];
-    const response = await this.client.post("/wit/workitems/$Feature?api-version=7.0", payload);
+    const encodedType = encodeURIComponent(workItemType);
+    const response = await this.client.post(`/wit/workitems/$${encodedType}?api-version=7.0`, payload);
     const featureData = response.data;
     console.log(`   \u2705 Created ADO Feature #${featureData.id}: ${featureData._links.html.href}`);
     return {
@@ -173,29 +174,41 @@ class AdoSpecSync {
     };
   }
   /**
-   * Update existing ADO Feature
+   * Update existing ADO Feature (conditional — only writes changed fields)
    */
   async updateAdoFeature(featureId, spec) {
     const featureTitle = `[${spec.metadata.id.toUpperCase()}] ${spec.metadata.title}`;
     const featureDescription = this.generateFeatureDescription(spec);
-    const payload = [
-      {
+    const current = await this.fetchAdoFeature(featureId);
+    const payload = [];
+    if (current.fields["System.Title"] !== featureTitle) {
+      payload.push({
         op: "replace",
         path: "/fields/System.Title",
         value: featureTitle
-      },
-      {
+      });
+    } else {
+      console.log(`   \u2139\uFE0F  Title unchanged, skipping`);
+    }
+    if (current.fields["System.Description"] !== featureDescription) {
+      payload.push({
         op: "replace",
         path: "/fields/System.Description",
         value: featureDescription
-      }
-    ];
+      });
+    } else {
+      console.log(`   \u2139\uFE0F  Description unchanged, skipping`);
+    }
+    if (payload.length === 0) {
+      console.log(`   \u2139\uFE0F  No changes detected for ADO Feature #${featureId}`);
+      return current;
+    }
     const response = await this.client.patch(
       `/wit/workitems/${featureId}?api-version=7.0`,
       payload
     );
     const featureData = response.data;
-    console.log(`   \u2705 Updated ADO Feature #${featureId}`);
+    console.log(`   \u2705 Updated ADO Feature #${featureId} (${payload.length} field(s) changed)`);
     return {
       id: featureData.id,
       url: featureData._links.html.href,

package/plugins/specweave-ado/lib/ado-spec-sync.ts

@@ -255,7 +255,8 @@ export class AdoSpecSync {
       }
     ];
 
-    const response = await this.client.post('/wit/workitems/$Feature?api-version=7.0', payload);
+    const encodedType = encodeURIComponent(workItemType);
+    const response = await this.client.post(`/wit/workitems/$${encodedType}?api-version=7.0`, payload);
     const featureData = response.data;
 
     console.log(`   ✅ Created ADO Feature #${featureData.id}: ${featureData._links.html.href}`);
@@ -268,24 +269,41 @@ export class AdoSpecSync {
   }
 
   /**
-   * Update existing ADO Feature
+   * Update existing ADO Feature (conditional — only writes changed fields)
    */
   private async updateAdoFeature(featureId: number, spec: SpecContent): Promise<AdoFeature> {
     const featureTitle = `[${spec.metadata.id.toUpperCase()}] ${spec.metadata.title}`;
     const featureDescription = this.generateFeatureDescription(spec);
 
-    const payload = [
-      {
+    // Fetch current values to avoid overwriting ADO-side edits
+    const current = await this.fetchAdoFeature(featureId);
+
+    const payload: any[] = [];
+
+    if (current.fields['System.Title'] !== featureTitle) {
+      payload.push({
         op: 'replace',
         path: '/fields/System.Title',
         value: featureTitle
-      },
-      {
+      });
+    } else {
+      console.log(`   ℹ️  Title unchanged, skipping`);
+    }
+
+    if (current.fields['System.Description'] !== featureDescription) {
+      payload.push({
         op: 'replace',
         path: '/fields/System.Description',
         value: featureDescription
-      }
-    ];
+      });
+    } else {
+      console.log(`   ℹ️  Description unchanged, skipping`);
+    }
+
+    if (payload.length === 0) {
+      console.log(`   ℹ️  No changes detected for ADO Feature #${featureId}`);
+      return current;
+    }
 
     const response = await this.client.patch(
       `/wit/workitems/${featureId}?api-version=7.0`,
@@ -293,7 +311,7 @@ export class AdoSpecSync {
     );
     const featureData = response.data;
 
-    console.log(`   ✅ Updated ADO Feature #${featureId}`);
+    console.log(`   ✅ Updated ADO Feature #${featureId} (${payload.length} field(s) changed)`);
 
     return {
       id: featureData.id,

package/plugins/specweave-ado/lib/conflict-resolver.js

@@ -3,6 +3,7 @@ import * as path from "path";
 import * as yaml from "yaml";
 const STATUS_MAPPING = {
   ado: {
+    // Agile process template
     "New": "draft",
     "Active": "in-progress",
     "Resolved": "implemented",
@@ -10,7 +11,20 @@ const STATUS_MAPPING = {
     "In Review": "in-qa",
     "In QA": "in-qa",
     "Blocked": "blocked",
-    "Removed": "cancelled"
+    "Removed": "cancelled",
+    // Scrum process template
+    "Approved": "draft",
+    "Committed": "in-progress",
+    "Done": "complete",
+    // CMMI process template
+    "Proposed": "draft",
+    // 'Active' already mapped above (shared with CMMI)
+    // 'Resolved' already mapped above (shared with CMMI)
+    // 'Closed' already mapped above (shared with CMMI)
+    // Basic process template
+    "To Do": "draft",
+    "Doing": "in-progress"
+    // 'Done' already mapped above (shared with Basic)
   },
   jira: {
     "To Do": "draft",
@@ -30,6 +44,8 @@ const STATUS_MAPPING = {
   }
 };
 const REVERSE_STATUS_MAPPING = {
+  // Default reverse mapping uses Agile states (most common)
+  // Callers should use process-template-aware mapping when template is known
   ado: {
     "draft": "New",
     "in-progress": "Active",

package/plugins/specweave-ado/lib/conflict-resolver.ts

@@ -87,6 +87,7 @@ export interface ExternalStatus {
 
 const STATUS_MAPPING = {
   ado: {
+    // Agile process template
     'New': 'draft' as SpecStatus,
     'Active': 'in-progress' as SpecStatus,
     'Resolved': 'implemented' as SpecStatus,
@@ -94,7 +95,20 @@ const STATUS_MAPPING = {
     'In Review': 'in-qa' as SpecStatus,
     'In QA': 'in-qa' as SpecStatus,
     'Blocked': 'blocked' as SpecStatus,
-    'Removed': 'cancelled' as SpecStatus
+    'Removed': 'cancelled' as SpecStatus,
+    // Scrum process template
+    'Approved': 'draft' as SpecStatus,
+    'Committed': 'in-progress' as SpecStatus,
+    'Done': 'complete' as SpecStatus,
+    // CMMI process template
+    'Proposed': 'draft' as SpecStatus,
+    // 'Active' already mapped above (shared with CMMI)
+    // 'Resolved' already mapped above (shared with CMMI)
+    // 'Closed' already mapped above (shared with CMMI)
+    // Basic process template
+    'To Do': 'draft' as SpecStatus,
+    'Doing': 'in-progress' as SpecStatus,
+    // 'Done' already mapped above (shared with Basic)
   },
   jira: {
     'To Do': 'draft' as SpecStatus,
@@ -115,6 +129,8 @@ const STATUS_MAPPING = {
 };
 
 const REVERSE_STATUS_MAPPING = {
+  // Default reverse mapping uses Agile states (most common)
+  // Callers should use process-template-aware mapping when template is known
   ado: {
     'draft': 'New',
     'in-progress': 'Active',

package/plugins/specweave-ado/lib/enhanced-ado-sync.js

@@ -130,10 +130,20 @@ function buildTaskMapping(increments, organization, project) {
     title: task.title,
     userStories: task.userStories
   }));
+  // Derive repository name from git remote or fall back to project name
+  let repoName = project;
+  try {
+    const { execSync } = require("child_process");
+    const remoteUrl = execSync("git remote get-url origin", { encoding: "utf-8" }).trim();
+    const match = remoteUrl.match(/\/([^/]+?)(?:\.git)?$/);
+    if (match) repoName = match[1];
+  } catch {
+    // Fallback to project name if git is unavailable
+  }
   return {
     incrementId: firstIncrement.id,
     tasks,
-    tasksUrl: `https://dev.azure.com/${organization}/${project}/_git/repo?path=/.specweave/increments/${firstIncrement.id}/tasks.md`
+    tasksUrl: `https://dev.azure.com/${organization}/${project}/_git/${repoName}?path=/.specweave/increments/${firstIncrement.id}/tasks.md`
   };
 }
 async function findArchitectureDocs(rootDir, specId) {

package/plugins/specweave-ado/lib/per-us-sync.js

@@ -1,9 +1,16 @@
 import { consoleLogger } from "../../../src/utils/logger.js";
+const WORK_ITEM_TYPE_BY_TEMPLATE = {
+  agile: "User Story",
+  scrum: "Product Backlog Item",
+  cmmi: "Requirement",
+  basic: "Issue"
+};
 class PerUSAdoSync {
   constructor(adoClient, projectMappings, options = {}) {
     this.adoClient = adoClient;
     this.projectMappings = projectMappings;
     this.logger = options.logger ?? consoleLogger;
+    this.workItemType = options.workItemType ?? WORK_ITEM_TYPE_BY_TEMPLATE[options.processTemplate?.toLowerCase() ?? ""] ?? "User Story";
   }
   /**
    * Sync all user stories to their respective ADO projects
@@ -133,7 +140,7 @@ class PerUSAdoSync {
     } else {
       const newItem = await this.adoClient.createWorkItem(
         mapping.project,
-        "User Story",
+        this.workItemType,
         title,
         description,
         areaPath

package/plugins/specweave-ado/lib/per-us-sync.ts

@@ -81,6 +81,16 @@ export interface AdoClient {
   getWorkItemUrl(project: string, workItemId: number): string;
 }
 
+/**
+ * Default work item type by process template
+ */
+const WORK_ITEM_TYPE_BY_TEMPLATE: Record<string, string> = {
+  agile: 'User Story',
+  scrum: 'Product Backlog Item',
+  cmmi: 'Requirement',
+  basic: 'Issue',
+};
+
 /**
  * Per-US ADO Sync
  *
@@ -91,15 +101,20 @@ export class PerUSAdoSync {
   private projectMappings: ProjectMappings;
   private adoClient: AdoClient;
   private logger: Logger;
+  private workItemType: string;
 
   constructor(
     adoClient: AdoClient,
     projectMappings: ProjectMappings,
-    options: { logger?: Logger } = {}
+    options: { logger?: Logger; workItemType?: string; processTemplate?: string } = {}
   ) {
     this.adoClient = adoClient;
     this.projectMappings = projectMappings;
     this.logger = options.logger ?? consoleLogger;
+    // Explicit workItemType takes priority, then process template lookup, then default
+    this.workItemType = options.workItemType
+      ?? WORK_ITEM_TYPE_BY_TEMPLATE[options.processTemplate?.toLowerCase() ?? '']
+      ?? 'User Story';
   }
 
   /**
@@ -268,7 +283,7 @@ export class PerUSAdoSync {
       // Create new work item
       const newItem = await this.adoClient.createWorkItem(
         mapping.project,
-        'User Story',
+        this.workItemType,
         title,
         description,
         areaPath

package/plugins/specweave-github/hooks/github-auto-create-handler.sh

@@ -74,14 +74,38 @@ else
   [[ "$GH_ENABLED" != "true" ]] && { log "GitHub sync not enabled"; exit 0; }
 fi
 
-# Check auto-create enabled (either autoSync OR auto_create_github_issue)
+# Check auto-create enabled
+# Two flags control auto-creation behavior:
+#   - sync.autoSync (boolean): Global auto-sync toggle. When true, enables ALL auto-sync
+#     operations including issue creation, progress sync, and status updates.
+#   - hooks.post_increment_planning.auto_create_github_issue (boolean): Fine-grained toggle
+#     for ONLY the auto-create-issue behavior in post-increment-planning hooks.
+#
+# Precedence: auto_create_github_issue (specific) > autoSync (global)
+# If BOTH are set, auto_create_github_issue takes precedence for issue creation.
+# If ONLY autoSync is true, issue creation is enabled (as part of the global auto-sync).
 AUTO_SYNC=$(jq -r '.sync.autoSync // false' "$CONFIG_PATH" 2>/dev/null)
 AUTO_CREATE=$(jq -r '.hooks.post_increment_planning.auto_create_github_issue // false' "$CONFIG_PATH" 2>/dev/null)
+
+# Warn if only one flag is set (likely misconfiguration)
+if [[ "$AUTO_SYNC" == "true" ]] && [[ "$AUTO_CREATE" == "false" ]]; then
+  log "Warning: sync.autoSync=true but auto_create_github_issue=false. Issue creation enabled via autoSync. Set auto_create_github_issue=true to be explicit."
+elif [[ "$AUTO_SYNC" == "false" ]] && [[ "$AUTO_CREATE" == "true" ]]; then
+  log "Warning: auto_create_github_issue=true but sync.autoSync=false. Only issue creation is enabled; other sync operations are disabled."
+fi
+
 if [[ "$AUTO_SYNC" != "true" ]] && [[ "$AUTO_CREATE" != "true" ]]; then
   log "Auto-sync disabled (autoSync=$AUTO_SYNC, auto_create=$AUTO_CREATE)"
   exit 0
 fi
 
+# Log which flag triggered activation
+if [[ "$AUTO_CREATE" == "true" ]]; then
+  log "Auto-create enabled via hooks.post_increment_planning.auto_create_github_issue"
+else
+  log "Auto-create enabled via sync.autoSync (global toggle)"
+fi
+
 # Get owner/repo
 OWNER=$(jq -r '.sync.github.owner // ""' "$CONFIG_PATH" 2>/dev/null)
 REPO=$(jq -r '.sync.github.repo // ""' "$CONFIG_PATH" 2>/dev/null)
@@ -115,7 +139,9 @@ fi
 if [[ "${SPECWEAVE_SKIP_DEBOUNCE:-0}" != "1" ]]; then
   DEBOUNCE_FILE="$STATE_DIR/.github-auto-create-pending-$INC_ID"
   if [[ -f "$DEBOUNCE_FILE" ]]; then
-    SIGNAL_AGE=$(($(date +%s) - $(stat -f "%m" "$DEBOUNCE_FILE" 2>/dev/null || echo 0)))
+    # POSIX-portable: use perl for mtime (works on macOS and Linux)
+    FILE_MTIME=$(perl -e 'print((stat($ARGV[0]))[9])' "$DEBOUNCE_FILE" 2>/dev/null || echo 0)
+    SIGNAL_AGE=$(($(date +%s) - FILE_MTIME))
     if (( SIGNAL_AGE < 30 )); then
       log "Debounce: signal age ${SIGNAL_AGE}s < 30s. Deferring."
       exit 0

package/plugins/specweave-github/hooks/post-task-completion.sh

@@ -80,10 +80,13 @@ for i in {1..15}; do
     break
   fi
 
-  # Check for stale lock
+  # Check for stale lock (POSIX-portable: works on macOS and Linux)
   if [[ -d "$LOCK_FILE" ]]; then
-    LOCK_AGE=$(($(date +%s) - $(stat -f "%m" "$LOCK_FILE" 2>/dev/null || echo 0)))
-    if (( LOCK_AGE > LOCK_TIMEOUT )); then
+    # Use find -mmin which works on both macOS and Linux
+    LOCK_TIMEOUT_MIN=$(( (LOCK_TIMEOUT + 59) / 60 ))  # Convert seconds to minutes (ceil)
+    [[ $LOCK_TIMEOUT_MIN -lt 1 ]] && LOCK_TIMEOUT_MIN=1
+    STALE=$(find "$LOCK_FILE" -maxdepth 0 -mmin +${LOCK_TIMEOUT_MIN} 2>/dev/null)
+    if [[ -n "$STALE" ]]; then
       rmdir "$LOCK_FILE" 2>/dev/null || true
       continue
     fi