@codyswann/lisa 2.132.4 → 2.132.6

package/expo/copy-overwrite/tsconfig.expo.json

@@ -1,17 +1,15 @@
 {
-  "extends": ["expo/tsconfig.base", "@codyswann/lisa/tsconfig/base"],
+  "extends": [
+    "expo/tsconfig.base",
+    "@codyswann/lisa/tsconfig/base",
+    "./tsconfig.local.json"
+  ],
   "compilerOptions": {
     "strict": true,
     "jsx": "react-native",
     "noEmit": true,
     "declaration": false,
     "allowImportingTsExtensions": true,
-    "paths": {
-      "@/graphql/*": ["./generated/*"],
-      "@/*": ["./*"]
-    },
     "moduleSuffixes": [".ios", ".android", ".native", ".web", ""]
-  },
-  "include": ["**/*.ts", "**/*.tsx", "nativewind-env.d.ts"],
-  "exclude": ["node_modules", "dist", "web-build", "components/ui"]
+  }
 }

package/expo/package-lisa/package.lisa.json

@@ -55,12 +55,68 @@
     },
     "dependencies": {
       "@apollo/client": "^3.10.8",
+      "@hookform/resolvers": "^3.9.0",
+      "apollo-link-sentry": "^4.0.0",
+      "base-64": "^1.0.0",
+      "date-fns": "^3.6.0",
+      "date-fns-tz": "^3.1.3",
+      "events": "^3.3.0",
+      "graphql": "^16.12.0",
+      "i18n-js": "^4.5.1",
+      "patch-package": "^8.0.0",
+      "react-hook-form": "^7.70.0",
+      "tailwindcss": "^3.4.7",
+      "tar": ">=7.5.11",
+      "text-encoding-polyfill": "^0.6.7",
+      "usehooks-ts": "^3.1.1",
+      "zod": "^4.3.5"
+    },
+    "devDependencies": {
+      "@babel/core": "^7.20.0",
+      "@babel/plugin-proposal-export-namespace-from": "^7.18.9",
+      "@codyswann/lisa": "^2.106.0",
+      "@graphql-codegen/cli": "^6.1.0",
+      "@graphql-codegen/typescript": "^4.1.6",
+      "@graphql-codegen/typescript-operations": "^4.4.2",
+      "@graphql-codegen/typescript-react-apollo": "^4.3.4",
+      "@lhci/cli": "^0.15.1",
+      "@playwright/test": "^1.57.0",
+      "@types/base-64": "^1.0.2",
+      "@types/eslint-plugin-jsx-a11y": "^6.10.1",
+      "@types/eslint-plugin-tailwindcss": "^3.17.0",
+      "babel-plugin-module-resolver": "^5.0.2",
+      "baseline-browser-mapping": "^2.9.2",
+      "jest": "^30.0.0",
+      "ts-jest": "^29.4.6",
+      "@types/jest": "^30.0.0",
+      "@jest/test-sequencer": "^30.2.0",
+      "jest-environment-jsdom": "^30.2.0",
+      "serve": "^14.2.0",
+      "eslint-plugin-oxlint": "^1.62.0",
+      "oxlint": "^1.62.0",
+      "oxlint-tsgolint": "^0.22.1"
+    },
+    "resolutions": {
+      "@isaacs/brace-expansion": "^5.0.1",
+      "eslint-plugin-react-hooks": "^7.0.0",
+      "fast-xml-parser": "^5.3.6",
+      "tar": ">=7.5.11"
+    },
+    "overrides": {
+      "@isaacs/brace-expansion": "^5.0.1",
+      "eslint-plugin-react-hooks": "^7.0.0",
+      "fast-xml-parser": "^5.3.6",
+      "zod-validation-error": "^4.0.0",
+      "tar": ">=7.5.11"
+    }
+  },
+  "defaults": {
+    "dependencies": {
       "@expo/html-elements": "^0.12.5",
       "@expo/metro-runtime": "~6.1.2",
       "@gluestack-ui/core": "^3.0.10",
       "@gluestack-ui/utils": "^3.0.7",
       "@gorhom/bottom-sheet": "^5.2.6",
-      "@hookform/resolvers": "^3.9.0",
       "@legendapp/motion": "^2.4.0",
       "@react-native-async-storage/async-storage": "2.2.0",
       "@react-native-masked-view/masked-view": "^0.3.2",
@@ -69,11 +125,6 @@
       "@sentry/react-native": "~7.11.0",
       "@shopify/flash-list": "2.0.2",
       "@shopify/react-native-skia": "2.6.2",
-      "apollo-link-sentry": "^4.0.0",
-      "base-64": "^1.0.0",
-      "date-fns": "^3.6.0",
-      "date-fns-tz": "^3.1.3",
-      "events": "^3.3.0",
       "expo": "~56.0.0",
       "expo-application": "~56.0.3",
       "expo-battery": "~56.0.4",
@@ -95,14 +146,10 @@
       "expo-status-bar": "~56.0.4",
       "expo-system-ui": "~56.0.5",
       "expo-updates": "~56.0.17",
-      "graphql": "^16.12.0",
-      "i18n-js": "^4.5.1",
       "lucide-react-native": "^0.562.0",
       "nativewind": "^4.2.1",
-      "patch-package": "^8.0.0",
       "react": "19.2.3",
       "react-dom": "19.2.3",
-      "react-hook-form": "^7.70.0",
       "react-native": "0.85.3",
       "react-native-gesture-handler": "~2.31.1",
       "react-native-keyboard-controller": "1.21.6",
@@ -110,59 +157,18 @@
       "react-native-safe-area-context": "^5.6.2",
       "react-native-screens": "4.25.2",
       "react-native-svg": "^15.15.1",
-      "react-native-web": "^0.21.2",
-      "tailwindcss": "^3.4.7",
-      "tar": ">=7.5.11",
-      "text-encoding-polyfill": "^0.6.7",
-      "usehooks-ts": "^3.1.1",
-      "zod": "^4.3.5"
+      "react-native-web": "^0.21.2"
     },
     "devDependencies": {
-      "@babel/core": "^7.20.0",
-      "@babel/plugin-proposal-export-namespace-from": "^7.18.9",
-      "@codyswann/lisa": "^2.106.0",
-      "@graphql-codegen/cli": "^6.1.0",
-      "@graphql-codegen/typescript": "^4.1.6",
-      "@graphql-codegen/typescript-operations": "^4.4.2",
-      "@graphql-codegen/typescript-react-apollo": "^4.3.4",
-      "@lhci/cli": "^0.15.1",
-      "@playwright/test": "^1.57.0",
       "@react-native-community/cli": "^20.0.2",
       "@react-native-community/cli-platform-android": "^20.0.2",
       "@react-native-community/cli-platform-ios": "^20.0.2",
       "@testing-library/react-native": "^13.0.0",
-      "@types/base-64": "^1.0.2",
-      "@types/eslint-plugin-jsx-a11y": "^6.10.1",
-      "@types/eslint-plugin-tailwindcss": "^3.17.0",
       "@types/react": "~19.2.15",
       "@types/react-dom": "~19.2.3",
-      "babel-plugin-module-resolver": "^5.0.2",
-      "baseline-browser-mapping": "^2.9.2",
       "expo-atlas": "^0.4.0",
-      "jest": "^30.0.0",
-      "ts-jest": "^29.4.6",
-      "@types/jest": "^30.0.0",
-      "@jest/test-sequencer": "^30.2.0",
-      "jest-environment-jsdom": "^30.2.0",
       "jest-expo": "~56.0.4",
-      "react-test-renderer": "19.2.3",
-      "serve": "^14.2.0",
-      "eslint-plugin-oxlint": "^1.62.0",
-      "oxlint": "^1.62.0",
-      "oxlint-tsgolint": "^0.22.1"
-    },
-    "resolutions": {
-      "@isaacs/brace-expansion": "^5.0.1",
-      "eslint-plugin-react-hooks": "^7.0.0",
-      "fast-xml-parser": "^5.3.6",
-      "tar": ">=7.5.11"
-    },
-    "overrides": {
-      "@isaacs/brace-expansion": "^5.0.1",
-      "eslint-plugin-react-hooks": "^7.0.0",
-      "fast-xml-parser": "^5.3.6",
-      "zod-validation-error": "^4.0.0",
-      "tar": ">=7.5.11"
+      "react-test-renderer": "19.2.3"
     }
   }
 }

package/package.json

@@ -83,7 +83,7 @@
     "lodash": ">=4.18.1"
   },
   "name": "@codyswann/lisa",
-  "version": "2.132.4",
+  "version": "2.132.6",
   "description": "Claude Code governance framework that applies guardrails, guidance, and automated enforcement to projects",
   "main": "dist/index.js",
   "exports": {

package/plugins/lisa/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.132.4",
+  "version": "2.132.6",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.132.4",
+  "version": "2.132.6",
   "description": "Universal governance: agents, skills, commands, hooks, and rules for all projects.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa/skills/git-submit-pr/SKILL.md

@@ -13,6 +13,7 @@ Recognized optional hints:
 - `work_item_ref=<ref>` — source tracker item for native development linkage. Examples: `CodySwannGT/lisa#614`, `https://github.com/CodySwannGT/lisa/issues/614`, `ENG-123`, `PROJ-456`.
 - `target_branch=<branch>` or `base=<branch>` — intended PR base branch, used to decide whether a GitHub closing keyword is safe.
 - `tracker_provider=<github|linear|jira|none>` — explicit provider when the ref shape is ambiguous.
+- `pr_url=<url>` — live pull request URL, only needed when updating tracker backlinks from an existing PR context.
 
 ## Workflow
 
@@ -31,6 +32,7 @@ Recognized optional hints:
    - If exists: Update description with latest changes
    - If not: Create PR with comprehensive description (not a draft)
    - Include native development linkage for the source work item when `work_item_ref` can be inferred from `$ARGUMENTS`, the current branch name, an existing PR body, or the issue/ticket context passed by the caller.
+   - After the PR exists, ensure the source work item has a backlink to the PR: invoke `lisa:tracker-sync` with the work item, milestone `pr-ready`, the live `pr_url`, and `tracker_provider` when known. This makes ticket -> PR linkage mandatory, not just a best-effort milestone comment.
    - After the PR exists, re-resolve the live Pull Request node id and, when `github.projects.v2` is enabled, invoke `lisa:github-project-v2` with `operation: ensure-item` and `content_node_id: <pull-request-node-id>` so linked pull requests join the configured shared Project without replacing the PR as the durable review/merge surface.
 5. **Auto-merge**: Choose merge strategy by PR type:
    - **Promotion PRs** (env → env, e.g. `dev` → `staging`): use `gh pr merge --auto --merge` (never squash). Squashing flattens the constituent `chore(release): X.Y.Z [skip ci]` commits into one commit titled with the PR title, stripping the `[skip ci]` markers and breaking the release workflow's promotion-detection regex — the destination branch then double-bumps its version. `--merge` keeps each `chore(release)` commit (and its `[skip ci]` marker) intact under a clean merge commit subject the workflow can recognize.
@@ -62,6 +64,18 @@ Add provider-appropriate linkage to the PR title and/or body without changing th
 
 When updating an existing PR, preserve any existing linkage line unless the new `work_item_ref` is more specific. Do not duplicate equivalent references.
 
+### Work Item Backlink
+
+After creating or updating the PR, always make the reverse link durable on the source work item when `work_item_ref` is available:
+
+1. Resolve the live PR URL with `gh pr view <pr-number> --json url --jq .url`.
+2. Invoke `lisa:tracker-sync` with the original work item ref, milestone `pr-ready`, `pr_url=<url>`, and `tracker_provider=<provider>` when known.
+3. The vendor sync skill must prefer the provider's native development-link primitive where one is available and verifiable.
+4. If native linkage is unavailable, unconfigured, or cannot be verified, the vendor sync skill must create or update a single managed `[lisa-pr-link]` comment on the work item containing the PR URL. The fallback comment is not optional; it is the ticket-side half of the two-way link.
+5. When the PR later merges, invoke `lisa:tracker-sync` again with milestone `pr-merged`, the same `pr_url`, and the merge SHA when available, so the managed backlink reflects the final state.
+
+Do not report PR submission as fully synced while the PR body references the ticket but the ticket has neither a verified native PR link nor the managed backlink comment.
+
 ### GitHub ProjectV2 Coordination
 
 After PR creation or update, resolve the live Pull Request node id:

package/plugins/lisa/skills/github-sync/SKILL.md

@@ -10,6 +10,8 @@ Sync current plan progress to a GitHub Issue: `$ARGUMENTS`
 
 If no argument is provided, search for an issue ref (`org/repo#<number>` or `https://github.com/<org>/<repo>/issues/<n>` URL) in the active plan file (most recently modified `.md` in `plans/`).
 
+Optional arguments include `pr_url=<url>` for the live pull request and `merge_sha=<sha>` once merged.
+
 ## Workflow
 
 ### Step 1: Identify Issue and Context
@@ -50,6 +52,16 @@ If no argument is provided, search for an issue ref (`org/repo#<number>` or `htt
 
 3. **Report** to the user what was synced.
 
+### Step 3b: Ensure PR Backlink
+
+When `$ARGUMENTS` includes `pr_url=<url>` for `PR ready` or `PR merged`, ensure the GitHub Issue has a durable ticket -> PR link:
+
+1. Prefer GitHub's native development link by making sure the PR body contains `Refs #<n>` / `Closes #<n>` (or the fully qualified cross-repo form) and verify with `gh issue view <number> --json timelineItems` or an equivalent GitHub read that exposes the linked PR.
+2. If native linkage cannot be verified, post or update a single managed issue comment starting with `[lisa-pr-link]`. Include the PR URL, milestone (`pr-ready` or `pr-merged`), and merge SHA when available.
+3. Keep the fallback idempotent: search existing comments for `[lisa-pr-link]` and the PR URL; update/replace that managed comment where the provider allows updates, otherwise skip when the current body already matches. Do not append duplicate backlink comments on reruns.
+
+This fallback is required even though GitHub usually links PRs natively from PR body keywords; the issue must show the PR from at least one ticket-side surface.
+
 ### Step 4: Suggest Status Transition
 
 Based on the milestone, suggest (but do NOT automatically perform) a label transition:

package/plugins/lisa/skills/implement/SKILL.md

@@ -71,6 +71,7 @@ When the request came from a tracker work item, preserve its native identifier f
 - Capture `tracker_provider` and `work_item_ref` from the resolved input before creating or reusing a branch. Examples: `github` + `CodySwannGT/lisa#614`, `linear` + `ENG-123`, `jira` + `ENG-123`.
 - If a new branch is needed and the provider can link branches by identifier, include the identifier in the branch name before the human-readable slug. Linear and JIRA integrations commonly link from branch names; GitHub issue linkage is PR-body driven, but including the issue number in the branch name is still useful. Keep branch names URL-safe, for example `codex/ENG-123-add-checkout-copy` or `codex/614-add-checkout-copy`.
 - Pass the work-item ref and target branch to `lisa:git-submit-pr` when opening or updating the PR, for example `work_item_ref=CodySwannGT/lisa#614 target_branch=<base resolved from the ticket's environment above>` (not hardcoded `main`). The PR workflow owns provider-specific body text and must decide whether to use a closing keyword or a non-closing reference.
+- After `lisa:git-submit-pr` returns a PR URL, ensure the reverse backlink is present on the source work item by running `lisa:tracker-sync <work_item_ref> pr-ready pr_url=<url> tracker_provider=<provider>`. The sync path must prefer native provider linkage and fall back to one managed `[lisa-pr-link]` comment when native linkage is unavailable or cannot be verified.
 - If the provider has no native branch or PR development-linkage surface, continue without linkage and mention that the provider was skipped.
 
 Using the general-purpose agent in Team Lead session, Determine which flow applies:
@@ -159,8 +160,9 @@ Before shutting down the team, execute the Verify flow:
 5. Commit ALL outstanding changes in logical batches on the branch (minus sensitive data/information) — not just changes made by the agent team. This includes pre-existing uncommitted changes that were on the branch before the plan started. Do NOT filter commits to only "task-related" files. If it shows up in git status, it gets committed (unless it contains secrets).
 6. Push the changes - if any pre-push hook blocks you, create a task for the agent team to fix the error/problem whether it was pre-existing or not
 7. Open a pull request with auto-merge on via `lisa:git-submit-pr`, targeting the **base branch resolved from the ticket's environment** (`target_branch=<base>`, per the branch step above), and including the work-item ref when one exists so the PR can be linked natively to the source issue.
+7a. Confirm two-way linkage before treating PR submission as complete: the PR body/title/branch must reference the work item, and the work item must have either a verified native PR link or a single managed `[lisa-pr-link]` fallback comment from `lisa:tracker-sync`.
 8. PR Watch Loop: Monitor the PR using `git-submit-pr`'s drive-to-merge behavior. Create a task for the agent team to resolve any code review comments by either implementing the suggestions or commenting why they should not be implemented and close the comment. Fix any failing checks and repush. If the PR is `BEHIND`, blocked by stale review state, or cannot enable auto-merge, follow the harness-agnostic `git-submit-pr` re-sync, review-gate, and direct-merge fallback loop until the PR is actually merged or a blocking failure is surfaced.
-9. Merge the PR
+9. Merge the PR, then refresh the ticket-side backlink with `lisa:tracker-sync <work_item_ref> pr-merged pr_url=<url> merge_sha=<sha> tracker_provider=<provider>` when a work item exists.
 10. Monitor the deploy action that triggers automatically from the successful merge
 11. If deploy fails, create a task for the agent team to fix the failure, open a new PR and then go back to step 7
 12. Remote verification: `verification-specialist` verifies in target environment (same checks as local verification, but on remote), and refreshes the verdict (step 2a) to reflect the remote result.

package/plugins/lisa/skills/jira-sync/SKILL.md

@@ -12,6 +12,8 @@ Sync current plan progress to JIRA ticket: $ARGUMENTS
 
 If no argument provided, search for a ticket URL in the active plan file (most recently modified `.md` in `plans/`).
 
+Optional arguments include `pr_url=<url>` for the live pull request and `merge_sha=<sha>` once merged.
+
 ## Workflow
 
 ### Step 1: Identify Ticket and Context
@@ -48,6 +50,16 @@ Before adding a comment, check for an existing milestone comment to avoid duplic
    - Add PR link to a custom field or comment
 5. **Report** what was synced to the user
 
+### Step 3b: Ensure PR Backlink
+
+When `$ARGUMENTS` includes `pr_url=<url>` for `PR ready` or `PR merged`, ensure the JIRA ticket has a durable ticket -> PR link:
+
+1. Prefer the JIRA development-link surface when the site's GitHub/JIRA integration or remote-link API is available through `lisa:atlassian-access`; verify by re-reading the ticket's remote links / development metadata.
+2. If native linkage is unavailable, unconfigured, cross-system, or cannot be verified, create or update a single managed JIRA comment containing the PR URL. The comment must start with `[lisa-pr-link]` and include the milestone (`pr-ready` or `pr-merged`) and merge SHA when available.
+3. Keep the fallback idempotent: read existing comments, find the `[lisa-pr-link]` comment for the same PR URL, and update/skip it instead of appending duplicates. If the current access layer cannot update comments in place, skip when an identical managed comment already exists and otherwise add exactly one replacement comment with the stable marker.
+
+The PR body/branch issue key is the PR -> ticket side. This step is the required ticket -> PR side.
+
 ### Step 4: Suggest Status Transition
 
 Based on the milestone, suggest (but don't automatically perform) a status transition:

package/plugins/lisa/skills/linear-sync/SKILL.md

@@ -31,6 +31,7 @@ This skill **suggests** transitions but does not auto-transition the native Line
 
 - `<IDENTIFIER>` is the Linear Issue identifier (e.g. `ENG-123`). If not provided, the skill searches the active plan file for a linked Linear Issue.
 - `<milestone>` is one of `plan-created`, `implementation-in-progress`, `pr-ready`, `pr-merged`.
+- Optional tokens include `pr_url=<url>` for the live pull request and `merge_sha=<sha>` once merged.
 
 ## Phase 1 — Resolve Issue
 
@@ -66,6 +67,16 @@ Next: implementation begins. Suggested status: **Todo** (label: `status:ready`).
 
 Call `mcp__linear-server__save_comment({issueId: <id>, body: <comment>})`.
 
+## Phase 3b — Ensure PR Backlink
+
+When `$ARGUMENTS` includes `pr_url=<url>` for `pr-ready` or `pr-merged`, ensure the Linear Issue has a durable ticket -> PR link:
+
+1. Prefer Linear's native GitHub attachment / pull request link when the integration has attached the PR through the branch name, PR title, or PR body issue identifier. Verify by re-reading the Issue and its attachments / relations where the Linear access layer exposes them.
+2. If native linkage is unavailable, unconfigured, cross-system, or cannot be verified, create or update a single managed Linear comment containing the PR URL. The comment must start with `[lisa-pr-link]` and include the milestone (`pr-ready` or `pr-merged`) and merge SHA when available.
+3. Keep the fallback idempotent: read existing comments where the access layer exposes them, find the `[lisa-pr-link]` comment for the same PR URL, and update/skip it instead of appending duplicates. If comment update is unavailable, skip when an identical managed comment already exists and otherwise add exactly one replacement comment with the stable marker.
+
+The PR branch/title/body identifier is the PR -> Linear side. This phase is the required Linear -> PR side.
+
 ## Phase 4 — Update Status Label (when caller requests)
 
 If the caller passes `--update-label`, update the `status:*` label set via `mcp__linear-server__save_issue`:
@@ -113,3 +124,4 @@ When the caller passes `--rollup`, this skill **derives a parent/container's `st
 - Never post empty or minimal comments — if a milestone has no meaningful content, skip the post.
 - Do not delete prior milestone comments. They are the audit trail.
 - If `save_comment` fails, retry once. If it fails again, surface the error.
+- Pull request backlinks are mandatory when `pr_url=<url>` is present: native first, managed-comment fallback, never silently dropped.

package/plugins/lisa/skills/tracker-sync/SKILL.md

@@ -20,7 +20,7 @@ See the `config-resolution` rule for configuration and dispatch table.
    - Anything else → stop and report `"Unknown tracker '<value>' in .lisa.config.json. Expected 'jira', 'github', or 'linear'."`
 3. Pass through the output.
 
-`$ARGUMENTS` is forwarded verbatim, including the optional `--rollup` flag (see "Parent status rollup" below) and `--update-label`. The shim never interprets these — the vendor skill does.
+`$ARGUMENTS` is forwarded verbatim, including the optional `--rollup` flag (see "Parent status rollup" below), `--update-label`, `pr_url=<url>`, and `merge_sha=<sha>`. The shim never interprets these — the vendor skill does.
 
 If `$ARGUMENTS` is empty, all vendor skills auto-detect a ticket reference from the active plan file (most recently modified `.md` in `plans/`).
 
@@ -45,8 +45,20 @@ The state machine (first match wins, evaluated over the **required** leaves only
 
 **Safe-by-default when not yet supported.** A vendor sync path that has not implemented native rollup MUST be a documented no-op that surfaces the derived state as a suggestion/comment rather than guessing a transition — never an unsafe default. Without `--rollup`, the sync skills behave exactly as before (milestone comment on the work item; no parent derivation).
 
+## Pull request backlinking
+
+When `$ARGUMENTS` includes `pr_url=<url>` with milestone `pr-ready` or `pr-merged`, the dispatch target must ensure ticket -> PR linkage, not just post a generic progress note:
+
+1. Prefer the provider's native development-link primitive when Lisa can write and verify it for that provider.
+2. Verify the native link using the provider read surface when available.
+3. If the native link is unavailable, unconfigured, cross-system, or cannot be verified, create or update one managed backlink comment on the work item containing the PR URL and current milestone.
+4. Keep the comment idempotent by using a stable marker such as `[lisa-pr-link]`; reruns update or skip the existing managed comment rather than appending duplicates.
+
+This is the reverse half of `lisa:git-submit-pr`'s PR body linkage. A PR that mentions a ticket is not considered fully synced until the ticket also has either a verified native PR link or the managed fallback comment.
+
 ## Rules
 
 - Idempotent updates — running sync at the same milestone twice should not produce duplicate comments. Vendor skills enforce this.
 - Never auto-transition the underlying state. Linear's label-based transition (`status:*`) is the canonical signal and is updated only when the caller passes `--update-label`. Native states stay as suggestions.
 - Parent rollup derives state from children per the `leaf-only-lifecycle` rule; it never sets a parent to `ready` and never resolves a dev/staging `done` in this single-environment repo.
+- Pull request backlinks are mandatory when `pr_url=<url>` is present: native first, managed-comment fallback, never silently dropped.

package/plugins/lisa-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.132.4",
+  "version": "2.132.6",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-agy/skills/git-submit-pr/SKILL.md

@@ -13,6 +13,7 @@ Recognized optional hints:
 - `work_item_ref=<ref>` — source tracker item for native development linkage. Examples: `CodySwannGT/lisa#614`, `https://github.com/CodySwannGT/lisa/issues/614`, `ENG-123`, `PROJ-456`.
 - `target_branch=<branch>` or `base=<branch>` — intended PR base branch, used to decide whether a GitHub closing keyword is safe.
 - `tracker_provider=<github|linear|jira|none>` — explicit provider when the ref shape is ambiguous.
+- `pr_url=<url>` — live pull request URL, only needed when updating tracker backlinks from an existing PR context.
 
 ## Workflow
 
@@ -31,6 +32,7 @@ Recognized optional hints:
    - If exists: Update description with latest changes
    - If not: Create PR with comprehensive description (not a draft)
    - Include native development linkage for the source work item when `work_item_ref` can be inferred from `$ARGUMENTS`, the current branch name, an existing PR body, or the issue/ticket context passed by the caller.
+   - After the PR exists, ensure the source work item has a backlink to the PR: invoke `lisa:tracker-sync` with the work item, milestone `pr-ready`, the live `pr_url`, and `tracker_provider` when known. This makes ticket -> PR linkage mandatory, not just a best-effort milestone comment.
    - After the PR exists, re-resolve the live Pull Request node id and, when `github.projects.v2` is enabled, invoke `lisa:github-project-v2` with `operation: ensure-item` and `content_node_id: <pull-request-node-id>` so linked pull requests join the configured shared Project without replacing the PR as the durable review/merge surface.
 5. **Auto-merge**: Choose merge strategy by PR type:
    - **Promotion PRs** (env → env, e.g. `dev` → `staging`): use `gh pr merge --auto --merge` (never squash). Squashing flattens the constituent `chore(release): X.Y.Z [skip ci]` commits into one commit titled with the PR title, stripping the `[skip ci]` markers and breaking the release workflow's promotion-detection regex — the destination branch then double-bumps its version. `--merge` keeps each `chore(release)` commit (and its `[skip ci]` marker) intact under a clean merge commit subject the workflow can recognize.
@@ -62,6 +64,18 @@ Add provider-appropriate linkage to the PR title and/or body without changing th
 
 When updating an existing PR, preserve any existing linkage line unless the new `work_item_ref` is more specific. Do not duplicate equivalent references.
 
+### Work Item Backlink
+
+After creating or updating the PR, always make the reverse link durable on the source work item when `work_item_ref` is available:
+
+1. Resolve the live PR URL with `gh pr view <pr-number> --json url --jq .url`.
+2. Invoke `lisa:tracker-sync` with the original work item ref, milestone `pr-ready`, `pr_url=<url>`, and `tracker_provider=<provider>` when known.
+3. The vendor sync skill must prefer the provider's native development-link primitive where one is available and verifiable.
+4. If native linkage is unavailable, unconfigured, or cannot be verified, the vendor sync skill must create or update a single managed `[lisa-pr-link]` comment on the work item containing the PR URL. The fallback comment is not optional; it is the ticket-side half of the two-way link.
+5. When the PR later merges, invoke `lisa:tracker-sync` again with milestone `pr-merged`, the same `pr_url`, and the merge SHA when available, so the managed backlink reflects the final state.
+
+Do not report PR submission as fully synced while the PR body references the ticket but the ticket has neither a verified native PR link nor the managed backlink comment.
+
 ### GitHub ProjectV2 Coordination
 
 After PR creation or update, resolve the live Pull Request node id:

package/plugins/lisa-agy/skills/github-sync/SKILL.md

@@ -10,6 +10,8 @@ Sync current plan progress to a GitHub Issue: `$ARGUMENTS`
 
 If no argument is provided, search for an issue ref (`org/repo#<number>` or `https://github.com/<org>/<repo>/issues/<n>` URL) in the active plan file (most recently modified `.md` in `plans/`).
 
+Optional arguments include `pr_url=<url>` for the live pull request and `merge_sha=<sha>` once merged.
+
 ## Workflow
 
 ### Step 1: Identify Issue and Context
@@ -50,6 +52,16 @@ If no argument is provided, search for an issue ref (`org/repo#<number>` or `htt
 
 3. **Report** to the user what was synced.
 
+### Step 3b: Ensure PR Backlink
+
+When `$ARGUMENTS` includes `pr_url=<url>` for `PR ready` or `PR merged`, ensure the GitHub Issue has a durable ticket -> PR link:
+
+1. Prefer GitHub's native development link by making sure the PR body contains `Refs #<n>` / `Closes #<n>` (or the fully qualified cross-repo form) and verify with `gh issue view <number> --json timelineItems` or an equivalent GitHub read that exposes the linked PR.
+2. If native linkage cannot be verified, post or update a single managed issue comment starting with `[lisa-pr-link]`. Include the PR URL, milestone (`pr-ready` or `pr-merged`), and merge SHA when available.
+3. Keep the fallback idempotent: search existing comments for `[lisa-pr-link]` and the PR URL; update/replace that managed comment where the provider allows updates, otherwise skip when the current body already matches. Do not append duplicate backlink comments on reruns.
+
+This fallback is required even though GitHub usually links PRs natively from PR body keywords; the issue must show the PR from at least one ticket-side surface.
+
 ### Step 4: Suggest Status Transition
 
 Based on the milestone, suggest (but do NOT automatically perform) a label transition:

package/plugins/lisa-agy/skills/implement/SKILL.md

@@ -71,6 +71,7 @@ When the request came from a tracker work item, preserve its native identifier f
 - Capture `tracker_provider` and `work_item_ref` from the resolved input before creating or reusing a branch. Examples: `github` + `CodySwannGT/lisa#614`, `linear` + `ENG-123`, `jira` + `ENG-123`.
 - If a new branch is needed and the provider can link branches by identifier, include the identifier in the branch name before the human-readable slug. Linear and JIRA integrations commonly link from branch names; GitHub issue linkage is PR-body driven, but including the issue number in the branch name is still useful. Keep branch names URL-safe, for example `codex/ENG-123-add-checkout-copy` or `codex/614-add-checkout-copy`.
 - Pass the work-item ref and target branch to `lisa:git-submit-pr` when opening or updating the PR, for example `work_item_ref=CodySwannGT/lisa#614 target_branch=<base resolved from the ticket's environment above>` (not hardcoded `main`). The PR workflow owns provider-specific body text and must decide whether to use a closing keyword or a non-closing reference.
+- After `lisa:git-submit-pr` returns a PR URL, ensure the reverse backlink is present on the source work item by running `lisa:tracker-sync <work_item_ref> pr-ready pr_url=<url> tracker_provider=<provider>`. The sync path must prefer native provider linkage and fall back to one managed `[lisa-pr-link]` comment when native linkage is unavailable or cannot be verified.
 - If the provider has no native branch or PR development-linkage surface, continue without linkage and mention that the provider was skipped.
 
 Using the general-purpose agent in Team Lead session, Determine which flow applies:
@@ -159,8 +160,9 @@ Before shutting down the team, execute the Verify flow:
 5. Commit ALL outstanding changes in logical batches on the branch (minus sensitive data/information) — not just changes made by the agent team. This includes pre-existing uncommitted changes that were on the branch before the plan started. Do NOT filter commits to only "task-related" files. If it shows up in git status, it gets committed (unless it contains secrets).
 6. Push the changes - if any pre-push hook blocks you, create a task for the agent team to fix the error/problem whether it was pre-existing or not
 7. Open a pull request with auto-merge on via `lisa:git-submit-pr`, targeting the **base branch resolved from the ticket's environment** (`target_branch=<base>`, per the branch step above), and including the work-item ref when one exists so the PR can be linked natively to the source issue.
+7a. Confirm two-way linkage before treating PR submission as complete: the PR body/title/branch must reference the work item, and the work item must have either a verified native PR link or a single managed `[lisa-pr-link]` fallback comment from `lisa:tracker-sync`.
 8. PR Watch Loop: Monitor the PR using `git-submit-pr`'s drive-to-merge behavior. Create a task for the agent team to resolve any code review comments by either implementing the suggestions or commenting why they should not be implemented and close the comment. Fix any failing checks and repush. If the PR is `BEHIND`, blocked by stale review state, or cannot enable auto-merge, follow the harness-agnostic `git-submit-pr` re-sync, review-gate, and direct-merge fallback loop until the PR is actually merged or a blocking failure is surfaced.
-9. Merge the PR
+9. Merge the PR, then refresh the ticket-side backlink with `lisa:tracker-sync <work_item_ref> pr-merged pr_url=<url> merge_sha=<sha> tracker_provider=<provider>` when a work item exists.
 10. Monitor the deploy action that triggers automatically from the successful merge
 11. If deploy fails, create a task for the agent team to fix the failure, open a new PR and then go back to step 7
 12. Remote verification: `verification-specialist` verifies in target environment (same checks as local verification, but on remote), and refreshes the verdict (step 2a) to reflect the remote result.

package/plugins/lisa-agy/skills/jira-sync/SKILL.md

@@ -12,6 +12,8 @@ Sync current plan progress to JIRA ticket: $ARGUMENTS
 
 If no argument provided, search for a ticket URL in the active plan file (most recently modified `.md` in `plans/`).
 
+Optional arguments include `pr_url=<url>` for the live pull request and `merge_sha=<sha>` once merged.
+
 ## Workflow
 
 ### Step 1: Identify Ticket and Context
@@ -48,6 +50,16 @@ Before adding a comment, check for an existing milestone comment to avoid duplic
    - Add PR link to a custom field or comment
 5. **Report** what was synced to the user
 
+### Step 3b: Ensure PR Backlink
+
+When `$ARGUMENTS` includes `pr_url=<url>` for `PR ready` or `PR merged`, ensure the JIRA ticket has a durable ticket -> PR link:
+
+1. Prefer the JIRA development-link surface when the site's GitHub/JIRA integration or remote-link API is available through `lisa:atlassian-access`; verify by re-reading the ticket's remote links / development metadata.
+2. If native linkage is unavailable, unconfigured, cross-system, or cannot be verified, create or update a single managed JIRA comment containing the PR URL. The comment must start with `[lisa-pr-link]` and include the milestone (`pr-ready` or `pr-merged`) and merge SHA when available.
+3. Keep the fallback idempotent: read existing comments, find the `[lisa-pr-link]` comment for the same PR URL, and update/skip it instead of appending duplicates. If the current access layer cannot update comments in place, skip when an identical managed comment already exists and otherwise add exactly one replacement comment with the stable marker.
+
+The PR body/branch issue key is the PR -> ticket side. This step is the required ticket -> PR side.
+
 ### Step 4: Suggest Status Transition
 
 Based on the milestone, suggest (but don't automatically perform) a status transition:

package/plugins/lisa-agy/skills/linear-sync/SKILL.md

@@ -31,6 +31,7 @@ This skill **suggests** transitions but does not auto-transition the native Line
 
 - `<IDENTIFIER>` is the Linear Issue identifier (e.g. `ENG-123`). If not provided, the skill searches the active plan file for a linked Linear Issue.
 - `<milestone>` is one of `plan-created`, `implementation-in-progress`, `pr-ready`, `pr-merged`.
+- Optional tokens include `pr_url=<url>` for the live pull request and `merge_sha=<sha>` once merged.
 
 ## Phase 1 — Resolve Issue
 
@@ -66,6 +67,16 @@ Next: implementation begins. Suggested status: **Todo** (label: `status:ready`).
 
 Call `mcp__linear-server__save_comment({issueId: <id>, body: <comment>})`.
 
+## Phase 3b — Ensure PR Backlink
+
+When `$ARGUMENTS` includes `pr_url=<url>` for `pr-ready` or `pr-merged`, ensure the Linear Issue has a durable ticket -> PR link:
+
+1. Prefer Linear's native GitHub attachment / pull request link when the integration has attached the PR through the branch name, PR title, or PR body issue identifier. Verify by re-reading the Issue and its attachments / relations where the Linear access layer exposes them.
+2. If native linkage is unavailable, unconfigured, cross-system, or cannot be verified, create or update a single managed Linear comment containing the PR URL. The comment must start with `[lisa-pr-link]` and include the milestone (`pr-ready` or `pr-merged`) and merge SHA when available.
+3. Keep the fallback idempotent: read existing comments where the access layer exposes them, find the `[lisa-pr-link]` comment for the same PR URL, and update/skip it instead of appending duplicates. If comment update is unavailable, skip when an identical managed comment already exists and otherwise add exactly one replacement comment with the stable marker.
+
+The PR branch/title/body identifier is the PR -> Linear side. This phase is the required Linear -> PR side.
+
 ## Phase 4 — Update Status Label (when caller requests)
 
 If the caller passes `--update-label`, update the `status:*` label set via `mcp__linear-server__save_issue`:
@@ -113,3 +124,4 @@ When the caller passes `--rollup`, this skill **derives a parent/container's `st
 - Never post empty or minimal comments — if a milestone has no meaningful content, skip the post.
 - Do not delete prior milestone comments. They are the audit trail.
 - If `save_comment` fails, retry once. If it fails again, surface the error.
+- Pull request backlinks are mandatory when `pr_url=<url>` is present: native first, managed-comment fallback, never silently dropped.

package/plugins/lisa-agy/skills/tracker-sync/SKILL.md

@@ -20,7 +20,7 @@ See the `config-resolution` rule for configuration and dispatch table.
    - Anything else → stop and report `"Unknown tracker '<value>' in .lisa.config.json. Expected 'jira', 'github', or 'linear'."`
 3. Pass through the output.
 
-`$ARGUMENTS` is forwarded verbatim, including the optional `--rollup` flag (see "Parent status rollup" below) and `--update-label`. The shim never interprets these — the vendor skill does.
+`$ARGUMENTS` is forwarded verbatim, including the optional `--rollup` flag (see "Parent status rollup" below), `--update-label`, `pr_url=<url>`, and `merge_sha=<sha>`. The shim never interprets these — the vendor skill does.
 
 If `$ARGUMENTS` is empty, all vendor skills auto-detect a ticket reference from the active plan file (most recently modified `.md` in `plans/`).
 
@@ -45,8 +45,20 @@ The state machine (first match wins, evaluated over the **required** leaves only
 
 **Safe-by-default when not yet supported.** A vendor sync path that has not implemented native rollup MUST be a documented no-op that surfaces the derived state as a suggestion/comment rather than guessing a transition — never an unsafe default. Without `--rollup`, the sync skills behave exactly as before (milestone comment on the work item; no parent derivation).
 
+## Pull request backlinking
+
+When `$ARGUMENTS` includes `pr_url=<url>` with milestone `pr-ready` or `pr-merged`, the dispatch target must ensure ticket -> PR linkage, not just post a generic progress note:
+
+1. Prefer the provider's native development-link primitive when Lisa can write and verify it for that provider.
+2. Verify the native link using the provider read surface when available.
+3. If the native link is unavailable, unconfigured, cross-system, or cannot be verified, create or update one managed backlink comment on the work item containing the PR URL and current milestone.
+4. Keep the comment idempotent by using a stable marker such as `[lisa-pr-link]`; reruns update or skip the existing managed comment rather than appending duplicates.
+
+This is the reverse half of `lisa:git-submit-pr`'s PR body linkage. A PR that mentions a ticket is not considered fully synced until the ticket also has either a verified native PR link or the managed fallback comment.
+
 ## Rules
 
 - Idempotent updates — running sync at the same milestone twice should not produce duplicate comments. Vendor skills enforce this.
 - Never auto-transition the underlying state. Linear's label-based transition (`status:*`) is the canonical signal and is updated only when the caller passes `--update-label`. Native states stay as suggestions.
 - Parent rollup derives state from children per the `leaf-only-lifecycle` rule; it never sets a parent to `ready` and never resolves a dev/staging `done` in this single-environment repo.
+- Pull request backlinks are mandatory when `pr_url=<url>` is present: native first, managed-comment fallback, never silently dropped.

package/plugins/lisa-cdk/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.132.4",
+  "version": "2.132.6",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.132.4",
+  "version": "2.132.6",
   "description": "AWS CDK-specific Lisa plugin.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-agy/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.132.4",
+  "version": "2.132.6",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-copilot/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.132.4",
+  "version": "2.132.6",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa-cdk-cursor/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa-cdk",
-  "version": "2.132.4",
+  "version": "2.132.6",
   "description": "AWS CDK-specific plugin",
   "author": {
     "name": "Cody Swann"