specweave 0.33.4 → 0.33.6

package/plugins/specweave-github/lib/github-feature-sync.ts

@@ -19,6 +19,7 @@ import { UserStoryIssueBuilder } from './user-story-issue-builder.js';
 import { CompletionCalculator } from './completion-calculator.js';
 import { DuplicateDetector } from './duplicate-detector.js';
 import { execFileNoThrow } from '../../../src/utils/execFileNoThrow.js';
+import { getGitHubAuthFromProject } from '../../../src/utils/auth-helpers.js';
 
 interface FeatureFrontmatter {
   id: string;
@@ -51,6 +52,7 @@ export class GitHubFeatureSync {
   private specsDir: string;
   private projectRoot: string;
   private calculator: CompletionCalculator;
+  private token?: string;
 
   // SYNC LOCK: Prevent concurrent syncs of the same feature
   // Maps featureId → last sync timestamp
@@ -62,6 +64,19 @@ export class GitHubFeatureSync {
     this.specsDir = specsDir;
     this.projectRoot = projectRoot;
     this.calculator = new CompletionCalculator(projectRoot);
+    // Get token from .env for gh CLI passthrough
+    this.token = getGitHubAuthFromProject(projectRoot).token;
+  }
+
+  /**
+   * Get environment object with GH_TOKEN for gh CLI commands.
+   * This ensures the token from .env is passed to all gh operations,
+   * regardless of `gh auth` status.
+   */
+  private getGhEnv(): NodeJS.ProcessEnv {
+    return this.token
+      ? { ...process.env, GH_TOKEN: this.token }
+      : process.env;
   }
 
   /**
@@ -393,7 +408,7 @@ export class GitHubFeatureSync {
       'repos/:owner/:repo/milestones',
       '--jq',
       `.[] | select(.title == "${title}") | {number, html_url}`,
-    ]);
+    ], { env: this.getGhEnv() });
 
     // DEBUG: Log detection result
     console.log(`   🔍 Milestone detection: exitCode=${existingResult.exitCode}, stdout length=${existingResult.stdout.length}`);
@@ -426,7 +441,7 @@ export class GitHubFeatureSync {
       `description=${description}`,
       '-f',
       'state=open',
-    ]);
+    ], { env: this.getGhEnv() });
 
     if (result.exitCode !== 0) {
       throw new Error(`Failed to create Milestone: ${result.stderr || result.stdout}`);
@@ -467,7 +482,7 @@ export class GitHubFeatureSync {
       '--milestone',
       milestoneTitle,
       ...issueContent.labels.flatMap((label) => ['--label', label]),
-    ]);
+    ], { env: this.getGhEnv() });
 
     if (result.exitCode !== 0) {
       throw new Error(`Failed to create GitHub Issue: ${result.stderr || result.stdout}`);
@@ -493,7 +508,7 @@ export class GitHubFeatureSync {
         issueNumber.toString(),
         '--comment',
         this.calculator.buildCompletionComment(completion),
-      ]);
+      ], { env: this.getGhEnv() });
       console.log(
         `      ✅ Created and verified complete: ${completion.acsCompleted}/${completion.acsTotal} ACs, ${completion.tasksCompleted}/${completion.tasksTotal} tasks`
       );
@@ -535,7 +550,7 @@ export class GitHubFeatureSync {
       issueContent.title,
       '--body',
       issueContent.body,
-    ]);
+    ], { env: this.getGhEnv() });
 
     // ✅ VERIFICATION GATE: Calculate ACTUAL completion from checkboxes
     const completion = await this.calculator.calculateCompletion(userStoryPath);
@@ -554,7 +569,7 @@ export class GitHubFeatureSync {
           issueNumber.toString(),
           '--comment',
           this.calculator.buildCompletionComment(completion),
-        ]);
+        ], { env: this.getGhEnv() });
         console.log(
           `      ✅ Verified complete: ${completion.acsCompleted}/${completion.acsTotal} ACs, ${completion.tasksCompleted}/${completion.tasksTotal} tasks`
         );
@@ -569,7 +584,7 @@ export class GitHubFeatureSync {
           issueNumber.toString(),
           '--comment',
           this.calculator.buildReopenComment(completion, 'Work verification failed'),
-        ]);
+        ], { env: this.getGhEnv() });
         console.log(
           `      ⚠️ Reopened: ${completion.blockingAcs.length + completion.blockingTasks.length} items incomplete`
         );
@@ -597,6 +612,9 @@ export class GitHubFeatureSync {
       overallComplete: boolean;
       acsPercentage: number;
       tasksPercentage: number;
+      acsTotal?: number;
+      tasksTotal?: number;
+      frontmatterStatus?: string;
     }
   ): Promise<void> {
     try {
@@ -615,6 +633,29 @@ export class GitHubFeatureSync {
         newStatusLabel = 'status:complete'; // Repository uses "complete" not "completed"
       } else if (completion.acsPercentage > 0 || completion.tasksPercentage > 0) {
         newStatusLabel = 'status:active'; // Repository uses "active" not "in-progress"
+      } else if (
+        // v0.35.1 FIX: For external-origin USs without ACs/tasks, use frontmatter status
+        // This fixes issue #889 where external USs always showed "not_started"
+        (completion.acsTotal === 0 || completion.acsTotal === undefined) &&
+        (completion.tasksTotal === 0 || completion.tasksTotal === undefined) &&
+        completion.frontmatterStatus
+      ) {
+        // Map frontmatter status to GitHub label
+        switch (completion.frontmatterStatus) {
+          case 'complete':
+          case 'completed':
+            newStatusLabel = 'status:complete';
+            break;
+          case 'active':
+          case 'in-progress':
+            newStatusLabel = 'status:active';
+            break;
+          case 'planning':
+          case 'not-started':
+          default:
+            newStatusLabel = 'status:not_started';
+        }
+        console.log(`      ℹ️  Using frontmatter status (no ACs/tasks): ${completion.frontmatterStatus} → ${newStatusLabel}`);
       } else {
         newStatusLabel = 'status:not_started';
       }
@@ -637,7 +678,7 @@ export class GitHubFeatureSync {
           issueNumber.toString(),
           '--remove-label',
           ...statusLabels,
-        ]);
+        ], { env: this.getGhEnv() });
       }
 
       // Step 2: Add new status label
@@ -647,7 +688,7 @@ export class GitHubFeatureSync {
         issueNumber.toString(),
         '--add-label',
         newStatusLabel,
-      ]);
+      ], { env: this.getGhEnv() });
 
       if (result.exitCode === 0) {
         console.log(`      🏷️  Updated label: ${newStatusLabel}`);
@@ -686,7 +727,7 @@ export class GitHubFeatureSync {
         'repos/:owner/:repo/issues/' + issueNumber + '/comments',
         '--jq',
         '.[-1] | {body: .body, created_at: .created_at}',  // Get last comment only
-      ]);
+      ], { env: this.getGhEnv() });
 
       let lastCommentBody = '';
       if (commentsResult.exitCode === 0 && commentsResult.stdout.trim()) {
@@ -727,7 +768,7 @@ export class GitHubFeatureSync {
         issueNumber.toString(),
         '--body',
         newCommentBody,
-      ]);
+      ], { env: this.getGhEnv() });
       console.log(
         `      📊 Progress: ${completion.acsPercentage.toFixed(0)}% ACs, ${completion.tasksPercentage.toFixed(0)}% tasks (updated)`
       );

package/plugins/specweave-github/lib/github-hierarchical-sync.js

@@ -4,6 +4,11 @@ import {
   isCustomStrategy
 } from "../../../src/core/types/sync-profile.js";
 import { execFileNoThrow } from "../../../src/utils/execFileNoThrow.js";
+import { getGitHubAuthFromProject } from "../../../src/utils/auth-helpers.js";
+function getGhEnv() {
+  const { token } = getGitHubAuthFromProject(process.cwd());
+  return token ? { ...process.env, GH_TOKEN: token } : process.env;
+}
 async function buildHierarchicalSearchQuery(containers) {
   const parts = [];
   for (const container of containers) {
@@ -150,7 +155,7 @@ async function executeSearch(query) {
     "--limit",
     "1000"
     // Max results
-  ]);
+  ], { env: getGhEnv() });
   if (result.status !== 0) {
     throw new Error(`Failed to search issues: ${result.stderr || result.stdout}`);
   }

package/plugins/specweave-github/lib/github-hierarchical-sync.ts

@@ -19,6 +19,17 @@ import {
 import { GitHubIssue } from './types.js';
 import { getBoardNumbers } from './github-board-resolver.js';
 import { execFileNoThrow } from '../../../src/utils/execFileNoThrow.js';
+import { getGitHubAuthFromProject } from '../../../src/utils/auth-helpers.js';
+
+/**
+ * Get environment object with GH_TOKEN for gh CLI commands.
+ */
+function getGhEnv(): NodeJS.ProcessEnv {
+  const { token } = getGitHubAuthFromProject(process.cwd());
+  return token
+    ? { ...process.env, GH_TOKEN: token }
+    : process.env;
+}
 
 /**
  * Build hierarchical GitHub search query from containers
@@ -304,7 +315,7 @@ async function executeSearch(query: string): Promise<GitHubIssue[]> {
     'number,title,body,state,url,labels,milestone,repository',
     '--limit',
     '1000', // Max results
-  ]);
+  ], { env: getGhEnv() });
 
   if (result.status !== 0) {
     throw new Error(`Failed to search issues: ${result.stderr || result.stdout}`);

package/plugins/specweave-github/lib/github-increment-sync-cli.js

@@ -4,6 +4,11 @@ import * as fs from "fs/promises";
 import * as path from "path";
 import { IncrementIssueBuilder } from "./increment-issue-builder.js";
 import { execFileNoThrow } from "../../../src/utils/execFileNoThrow.js";
+import { getGitHubAuthFromProject } from "../../../src/utils/auth-helpers.js";
+function getGhEnv() {
+  const { token } = getGitHubAuthFromProject(process.cwd());
+  return token ? { ...process.env, GH_TOKEN: token } : process.env;
+}
 async function loadGitHubConfig() {
   const projectRoot = process.cwd();
   const configPath = path.join(projectRoot, ".specweave/config.json");
@@ -117,7 +122,7 @@ async function createOrGetMilestone(owner, repo, featureId, title, existingMiles
       `repos/${owner}/${repo}/milestones/${existingMilestone}`,
       "--jq",
       ".number"
-    ]);
+    ], { env: getGhEnv() });
     if (verifyResult.exitCode === 0) {
       return {
         number: existingMilestone,
@@ -130,7 +135,7 @@ async function createOrGetMilestone(owner, repo, featureId, title, existingMiles
     `repos/${owner}/${repo}/milestones`,
     "--jq",
     `.[] | select(.title | contains("${featureId}")) | .number`
-  ]);
+  ], { env: getGhEnv() });
   if (searchResult.exitCode === 0 && searchResult.stdout.trim()) {
     const milestoneNumber2 = parseInt(searchResult.stdout.trim().split("\n")[0], 10);
     return {
@@ -150,7 +155,7 @@ async function createOrGetMilestone(owner, repo, featureId, title, existingMiles
     `description=Feature milestone for ${featureId}`,
     "--jq",
     ".number"
-  ]);
+  ], { env: getGhEnv() });
   if (createResult.exitCode !== 0) {
     throw new Error(`Failed to create milestone: ${createResult.stderr || createResult.stdout}`);
   }
@@ -163,14 +168,30 @@ async function createOrGetMilestone(owner, repo, featureId, title, existingMiles
 function buildUserStoryIssueBody(story, tasks, incrementData, githubRepo) {
   const incrementId = incrementData.frontmatter.increment;
   let body = "";
-  body += `**Feature**: ${incrementData.frontmatter.feature_id || "N/A"}
+  const completedACs = story.acceptanceCriteria.filter((ac) => ac.completed).length;
+  const totalACs = story.acceptanceCriteria.length;
+  const storyTasks = tasks.filter(
+    (t) => t.userStories.includes(story.id) || t.userStories.some((us) => us.includes(story.id.replace("US-", "")))
+  );
+  const completedTasks = storyTasks.filter((t) => t.completed).length;
+  const totalTasks = storyTasks.length;
+  const overallPercentage = totalACs + totalTasks > 0 ? Math.round((completedACs + completedTasks) / (totalACs + totalTasks) * 100) : 0;
+  body += `## Progress
+
+`;
+  body += `**Acceptance Criteria**: ${completedACs}/${totalACs} (${totalACs > 0 ? Math.round(completedACs / totalACs * 100) : 0}%)
 `;
-  body += `**Status**: ${story.acceptanceCriteria.every((ac) => ac.completed) ? "complete" : "in-progress"}
+  body += `**Tasks**: ${completedTasks}/${totalTasks} (${totalTasks > 0 ? Math.round(completedTasks / totalTasks * 100) : 0}%)
 `;
-  body += `**Priority**: ${story.priority || incrementData.frontmatter.priority || "P2"}
+  body += `**Overall**: ${overallPercentage}%
+
 `;
-  body += `
----
+  const filledBlocks = Math.floor(overallPercentage / 5);
+  const emptyBlocks = 20 - filledBlocks;
+  body += `${"\u2588".repeat(filledBlocks)}${"\u2591".repeat(emptyBlocks)} ${overallPercentage}%
+
+`;
+  body += `---
 
 `;
   body += `## User Story
@@ -216,17 +237,14 @@ function buildUserStoryIssueBody(story, tasks, incrementData, githubRepo) {
   body += `---
 
 `;
-  const storyTasks = tasks.filter(
-    (t) => t.userStories.includes(story.id) || t.userStories.some((us) => us.includes(story.id.replace("US-", "")))
-  );
   if (storyTasks.length > 0) {
     body += `## Implementation Tasks
 
 `;
-    const completedTasks = storyTasks.filter((t) => t.completed).length;
-    const totalTasks = storyTasks.length;
-    const taskPercentage = totalTasks > 0 ? Math.round(completedTasks / totalTasks * 100) : 0;
-    body += `Progress: ${completedTasks}/${totalTasks} tasks (${taskPercentage}%)
+    const completedTasks2 = storyTasks.filter((t) => t.completed).length;
+    const totalTasks2 = storyTasks.length;
+    const taskPercentage = totalTasks2 > 0 ? Math.round(completedTasks2 / totalTasks2 * 100) : 0;
+    body += `Progress: ${completedTasks2}/${totalTasks2} tasks (${taskPercentage}%)
 
 `;
     for (const task of storyTasks) {
@@ -268,7 +286,7 @@ async function syncUserStoryIssue(owner, repo, featureId, story, tasks, incremen
       title,
       "--body",
       body
-    ]);
+    ], { env: getGhEnv() });
     if (updateResult.exitCode !== 0) {
       throw new Error(`Failed to update issue #${existingIssueNumber}: ${updateResult.stderr}`);
     }
@@ -292,7 +310,7 @@ async function syncUserStoryIssue(owner, repo, featureId, story, tasks, incremen
   if (labels.length > 0) {
     createArgs.push("--label", labels.join(","));
   }
-  const createResult = await execFileNoThrow("gh", createArgs);
+  const createResult = await execFileNoThrow("gh", createArgs, { env: getGhEnv() });
   if (createResult.exitCode !== 0) {
     throw new Error(`Failed to create issue: ${createResult.stderr || createResult.stdout}`);
   }

package/plugins/specweave-github/lib/github-increment-sync-cli.ts

@@ -23,6 +23,17 @@ import * as fs from 'fs/promises';
 import * as path from 'path';
 import { IncrementIssueBuilder, UserStory, Task, IncrementData } from './increment-issue-builder.js';
 import { execFileNoThrow } from '../../../src/utils/execFileNoThrow.js';
+import { getGitHubAuthFromProject } from '../../../src/utils/auth-helpers.js';
+
+/**
+ * Get environment object with GH_TOKEN for gh CLI commands.
+ */
+function getGhEnv(): NodeJS.ProcessEnv {
+  const { token } = getGitHubAuthFromProject(process.cwd());
+  return token
+    ? { ...process.env, GH_TOKEN: token }
+    : process.env;
+}
 
 interface GitHubConfig {
   owner: string;
@@ -213,7 +224,7 @@ async function createOrGetMilestone(
     const verifyResult = await execFileNoThrow('gh', [
       'api', `repos/${owner}/${repo}/milestones/${existingMilestone}`,
       '--jq', '.number'
-    ]);
+    ], { env: getGhEnv() });
     if (verifyResult.exitCode === 0) {
       return {
         number: existingMilestone,
@@ -226,7 +237,7 @@ async function createOrGetMilestone(
   const searchResult = await execFileNoThrow('gh', [
     'api', `repos/${owner}/${repo}/milestones`,
     '--jq', `.[] | select(.title | contains("${featureId}")) | .number`
-  ]);
+  ], { env: getGhEnv() });
 
   if (searchResult.exitCode === 0 && searchResult.stdout.trim()) {
     const milestoneNumber = parseInt(searchResult.stdout.trim().split('\n')[0], 10);
@@ -244,7 +255,7 @@ async function createOrGetMilestone(
     '-f', `title=${milestoneTitle}`,
     '-f', `description=Feature milestone for ${featureId}`,
     '--jq', '.number'
-  ]);
+  ], { env: getGhEnv() });
 
   if (createResult.exitCode !== 0) {
     throw new Error(`Failed to create milestone: ${createResult.stderr || createResult.stdout}`);
@@ -269,12 +280,34 @@ function buildUserStoryIssueBody(
   const incrementId = incrementData.frontmatter.increment;
   let body = '';
 
-  // Header with metadata
-  body += `**Feature**: ${incrementData.frontmatter.feature_id || 'N/A'}\n`;
-  body += `**Status**: ${story.acceptanceCriteria.every(ac => ac.completed) ? 'complete' : 'in-progress'}\n`;
-  body += `**Priority**: ${story.priority || incrementData.frontmatter.priority || 'P2'}\n`;
+  // ❌ REMOVED: Metadata header (Feature, Status, Priority)
+  // WHY: GitHub has NATIVE fields for this (labels, milestones)
+  // Body should contain ONLY actual work content (ACs, tasks, user story)
+  // See: .specweave/docs/internal/troubleshooting/CRITICAL-remove-metadata-header-from-github-issues.md
 
-  body += `\n---\n\n`;
+  // Progress section (consistency with user-story-issue-builder.ts)
+  const completedACs = story.acceptanceCriteria.filter(ac => ac.completed).length;
+  const totalACs = story.acceptanceCriteria.length;
+  const storyTasks = tasks.filter(t =>
+    t.userStories.includes(story.id) ||
+    t.userStories.some(us => us.includes(story.id.replace('US-', '')))
+  );
+  const completedTasks = storyTasks.filter(t => t.completed).length;
+  const totalTasks = storyTasks.length;
+  const overallPercentage = (totalACs + totalTasks) > 0
+    ? Math.round(((completedACs + completedTasks) / (totalACs + totalTasks)) * 100)
+    : 0;
+
+  body += `## Progress\n\n`;
+  body += `**Acceptance Criteria**: ${completedACs}/${totalACs} (${totalACs > 0 ? Math.round((completedACs / totalACs) * 100) : 0}%)\n`;
+  body += `**Tasks**: ${completedTasks}/${totalTasks} (${totalTasks > 0 ? Math.round((completedTasks / totalTasks) * 100) : 0}%)\n`;
+  body += `**Overall**: ${overallPercentage}%\n\n`;
+
+  // Progress bar
+  const filledBlocks = Math.floor(overallPercentage / 5);
+  const emptyBlocks = 20 - filledBlocks;
+  body += `${'█'.repeat(filledBlocks)}${'░'.repeat(emptyBlocks)} ${overallPercentage}%\n\n`;
+  body += `---\n\n`;
 
   // User Story description
   body += `## User Story\n\n`;
@@ -307,12 +340,7 @@ function buildUserStoryIssueBody(
 
   body += `---\n\n`;
 
-  // Tasks for this user story
-  const storyTasks = tasks.filter(t =>
-    t.userStories.includes(story.id) ||
-    t.userStories.some(us => us.includes(story.id.replace('US-', '')))
-  );
-
+  // Tasks for this user story (already calculated above for Progress section)
   if (storyTasks.length > 0) {
     body += `## Implementation Tasks\n\n`;
     const completedTasks = storyTasks.filter(t => t.completed).length;
@@ -369,7 +397,7 @@ async function syncUserStoryIssue(
       '--repo', `${owner}/${repo}`,
       '--title', title,
       '--body', body
-    ]);
+    ], { env: getGhEnv() });
 
     if (updateResult.exitCode !== 0) {
       throw new Error(`Failed to update issue #${existingIssueNumber}: ${updateResult.stderr}`);
@@ -394,7 +422,7 @@ async function syncUserStoryIssue(
     createArgs.push('--label', labels.join(','));
   }
 
-  const createResult = await execFileNoThrow('gh', createArgs);
+  const createResult = await execFileNoThrow('gh', createArgs, { env: getGhEnv() });
 
   if (createResult.exitCode !== 0) {
     throw new Error(`Failed to create issue: ${createResult.stderr || createResult.stdout}`);

package/plugins/specweave-github/lib/github-issue-updater.js

@@ -1,6 +1,11 @@
 import * as fs from "../../../src/utils/fs-native.js";
 import path from "path";
 import { execFileNoThrow } from "../../../src/utils/execFileNoThrow.js";
+import { getGitHubAuthFromProject } from "../../../src/utils/auth-helpers.js";
+function getGhEnv() {
+  const { token } = getGitHubAuthFromProject(process.cwd());
+  return token ? { ...process.env, GH_TOKEN: token } : process.env;
+}
 async function updateIssueLivingDocs(issueNumber, livingDocs, owner, repo) {
   console.log(`\u{1F4DD} Updating GitHub issue #${issueNumber} with living docs...`);
   const currentBody = await getIssueBody(issueNumber, owner, repo);
@@ -166,7 +171,7 @@ async function getIssueBody(issueNumber, owner, repo) {
     "body",
     "-q",
     ".body"
-  ]);
+  ], { env: getGhEnv() });
   if (result.exitCode !== 0) {
     throw new Error(`Failed to get issue body: ${result.stderr}`);
   }
@@ -181,7 +186,7 @@ async function updateIssueBody(issueNumber, body, owner, repo) {
     `${owner}/${repo}`,
     "--body",
     body
-  ]);
+  ], { env: getGhEnv() });
   if (result.exitCode !== 0) {
     throw new Error(`Failed to update issue body: ${result.stderr}`);
   }
@@ -195,7 +200,7 @@ async function postComment(issueNumber, comment, owner, repo) {
     `${owner}/${repo}`,
     "--body",
     comment
-  ]);
+  ], { env: getGhEnv() });
   if (result.exitCode !== 0) {
     throw new Error(`Failed to post comment: ${result.stderr}`);
   }

package/plugins/specweave-github/lib/github-issue-updater.ts

@@ -10,6 +10,19 @@
 import * as fs from '../../../src/utils/fs-native.js';
 import path from 'path';
 import { execFileNoThrow } from '../../../src/utils/execFileNoThrow.js';
+import { getGitHubAuthFromProject } from '../../../src/utils/auth-helpers.js';
+
+/**
+ * Get environment object with GH_TOKEN for gh CLI commands.
+ * This ensures the token from .env is passed to all gh operations,
+ * regardless of `gh auth` status.
+ */
+function getGhEnv(): NodeJS.ProcessEnv {
+  const { token } = getGitHubAuthFromProject(process.cwd());
+  return token
+    ? { ...process.env, GH_TOKEN: token }
+    : process.env;
+}
 
 export interface LivingDocsSection {
   specs: string[];
@@ -296,7 +309,7 @@ async function getIssueBody(
     'body',
     '-q',
     '.body'
-  ]);
+  ], { env: getGhEnv() });
 
   if (result.exitCode !== 0) {
     throw new Error(`Failed to get issue body: ${result.stderr}`);
@@ -322,7 +335,7 @@ async function updateIssueBody(
     `${owner}/${repo}`,
     '--body',
     body
-  ]);
+  ], { env: getGhEnv() });
 
   if (result.exitCode !== 0) {
     throw new Error(`Failed to update issue body: ${result.stderr}`);
@@ -346,7 +359,7 @@ async function postComment(
     `${owner}/${repo}`,
     '--body',
     comment
-  ]);
+  ], { env: getGhEnv() });
 
   if (result.exitCode !== 0) {
     throw new Error(`Failed to post comment: ${result.stderr}`);

package/plugins/specweave-github/lib/github-spec-sync.js

@@ -2,11 +2,21 @@ import { SpecMetadataManager } from "../../../src/core/specs/spec-metadata-manag
 import { SpecParser } from "../../../src/core/specs/spec-parser.js";
 import { execFileNoThrow } from "../../../src/utils/execFileNoThrow.js";
 import { ProjectContextManager } from "../../../src/core/sync/project-context.js";
+import { getGitHubAuthFromProject } from "../../../src/utils/auth-helpers.js";
 class GitHubSpecSync {
   constructor(projectRoot = process.cwd()) {
     this.projectRoot = projectRoot;
     this.specManager = new SpecMetadataManager(projectRoot);
     this.projectContextManager = new ProjectContextManager(projectRoot);
+    this.token = getGitHubAuthFromProject(projectRoot).token;
+  }
+  /**
+   * Get environment object with GH_TOKEN for gh CLI commands.
+   * This ensures the token from .env is passed to all gh operations,
+   * regardless of `gh auth` status.
+   */
+  getGhEnv() {
+    return this.token ? { ...process.env, GH_TOKEN: this.token } : process.env;
   }
   /**
    * Detect project from spec file path
@@ -408,7 +418,7 @@ ${acList}
       "-f",
       `query=${query}`,
       ...Object.entries(variables).flatMap(([key, value]) => ["-F", `${key}=${value}`])
-    ]);
+    ], { env: this.getGhEnv() });
     if (result.error) {
       throw new Error(`GraphQL query failed: ${result.error}`);
     }
@@ -457,7 +467,7 @@ ${acList}
       "number,title,body,state,labels",
       "--limit",
       "1"
-    ]);
+    ], { env: this.getGhEnv() });
     if (result.error || !result.stdout) {
       return null;
     }
@@ -481,7 +491,7 @@ ${acList}
       issue.labels.join(","),
       "--json",
       "number,title,body,state"
-    ]);
+    ], { env: this.getGhEnv() });
     if (result.error) {
       throw new Error(`Failed to create issue: ${result.error}`);
     }
@@ -503,7 +513,7 @@ ${acList}
     } else if (updates.state === "open") {
       args.push("--state", "open");
     }
-    const result = await execFileNoThrow("gh", args);
+    const result = await execFileNoThrow("gh", args, { env: this.getGhEnv() });
     if (result.error) {
       throw new Error(`Failed to update issue #${issueNumber}: ${result.error}`);
     }

package/plugins/specweave-github/lib/github-spec-sync.ts

@@ -37,6 +37,7 @@ import {
 import { execFileNoThrow } from '../../../src/utils/execFileNoThrow.js';
 import { ProjectContextManager } from '../../../src/core/sync/project-context.js';
 import { SyncProfile, GitHubConfig } from '../../../src/core/types/sync-profile.js';
+import { getGitHubAuthFromProject } from '../../../src/utils/auth-helpers.js';
 
 export interface GitHubProject {
   id: number;
@@ -89,11 +90,25 @@ export class GitHubSpecSync {
   private specManager: SpecMetadataManager;
   private projectContextManager: ProjectContextManager;
   private projectRoot: string;
+  private token?: string;
 
   constructor(projectRoot: string = process.cwd()) {
     this.projectRoot = projectRoot;
     this.specManager = new SpecMetadataManager(projectRoot);
     this.projectContextManager = new ProjectContextManager(projectRoot);
+    // Get token from .env for gh CLI passthrough
+    this.token = getGitHubAuthFromProject(projectRoot).token;
+  }
+
+  /**
+   * Get environment object with GH_TOKEN for gh CLI commands.
+   * This ensures the token from .env is passed to all gh operations,
+   * regardless of `gh auth` status.
+   */
+  private getGhEnv(): NodeJS.ProcessEnv {
+    return this.token
+      ? { ...process.env, GH_TOKEN: this.token }
+      : process.env;
   }
 
   /**
@@ -618,7 +633,7 @@ ${acList}
       '-f',
       `query=${query}`,
       ...Object.entries(variables).flatMap(([key, value]) => ['-F', `${key}=${value}`])
-    ]);
+    ], { env: this.getGhEnv() });
 
     if (result.error) {
       throw new Error(`GraphQL query failed: ${result.error}`);
@@ -682,7 +697,7 @@ ${acList}
       'number,title,body,state,labels',
       '--limit',
       '1'
-    ]);
+    ], { env: this.getGhEnv() });
 
     if (result.error || !result.stdout) {
       return null;
@@ -713,7 +728,7 @@ ${acList}
       issue.labels.join(','),
       '--json',
       'number,title,body,state'
-    ]);
+    ], { env: this.getGhEnv() });
 
     if (result.error) {
       throw new Error(`Failed to create issue: ${result.error}`);
@@ -747,7 +762,7 @@ ${acList}
       args.push('--state', 'open');
     }
 
-    const result = await execFileNoThrow('gh', args);
+    const result = await execFileNoThrow('gh', args, { env: this.getGhEnv() });
 
     if (result.error) {
       throw new Error(`Failed to update issue #${issueNumber}: ${result.error}`);