gitpr-cli 1.4.0__py3-none-any.whl → 1.4.1__py3-none-any.whl

{gitpr_cli-1.4.0.dist-info → gitpr_cli-1.4.1.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gitpr-cli
-Version: 1.4.0
+Version: 1.4.1
 Summary: AI-powered PR automation, commit messages, and code review (Gemini, DeepSeek, and Ollama)
 Author-email: Natan Fiuza <contato@natanfiuza.dev.br>
 Requires-Python: >=3.10
@@ -170,6 +170,7 @@ You can pass the following *flags* for specific actions:
 * `gitpr risk`: **Local Risk Scoring for Diffs.** Computes a deterministic, explainable risk score (0.0 to 100.0) and badge (`LOW 🟢`, `MEDIUM 🟡`, `HIGH 🟠`, `CRITICAL 🔴`) using local repository signals (critical paths, missing tests, migrations, bug history, and static findings). Use `--file <path>`, `--format json`, `--base <ref>`, or `--no-history`. Automatically included in code reviews (`GITPR_RISK_INCLUDE_IN_REVIEW=true`). 📖 [Full docs](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/risk-scoring.md)
 * `gitpr policy`: **Shared quality policy for the repository.** Adopts a versioned YAML **Policy Pack** — review skills, linter rules, severity overrides, critical paths, risk weights and PR/commit conventions — and records the choice in `.gitpr/policy.lock.yml`, so the review, the linter and the risk score all run under the same policy, with a checksum per pack. `list`, `validate`, `show`, `use`, `init`, `install`, `off`. 📖 [Full docs](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/policy-packs.md)
 * `gitpr baseline`: **Baseline and auditable suppressions for legacy adoption.** Records the findings a repository already has in `.gitpr/baseline.json`, so a run classifies every finding as `new`, `existing`, `resolved`, `ignored` or `accepted_debt` and **only `new` blocks**. Every suppression carries a reason, and accepted debt carries an owner and an optional deadline. `create`, `show`, `validate`, `update`, `suppress`, `unsuppress`. 📖 [Full docs](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/baseline-suppressions.md)
+* `gitpr check`: **Unified CI check command.** Consolidates static linter, secret scanning, external bridges (Semgrep, Gitleaks, Bandit), optional AI code review, risk scoring, and baseline into a single CI pipeline command. Emits machine-readable artifacts in **SARIF 2.1.0**, **JSON**, or **JUnit XML** with deterministic exit codes (`0`, `1`, `2`). 📖 [Full docs](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/check-ci.md)
 * `-c` or `--commit`: Runs a local `git diff` and displays **only the suggested commit message**.
 * `-r` or `--review`: Performs a detailed **Code Review** of local changes. Use with `--mentor` to append pedagogical mentoring explanations for each finding.
 * `-f` or `--fullreview`: Performs a **Full Code Review** analyzing all changes since the remote branch. Use with `--mentor` to append pedagogical mentoring explanations.
@@ -458,6 +459,8 @@ Once configured, use natural language in your editor's AI chat:
 | `analyze_unstaged_diff` | Unstaged diff only (working tree vs index) |
 | `list_fix_candidates` | Fix candidates of the last review: patch, classification, id (read-only) |
 | `review_remote_pr` | AI review of a pull request already open on the forge, fetched by number (read-only) |
+| `run_check` | Structured CI/Editor quality gate returning normalized findings and pass/fail status |
+| `publish_pull_request` | Publish or update a Pull Request on the remote forge from title and body |
 
 ### Direct CLI Invocation
 
@@ -478,6 +481,8 @@ This is useful for scripting, CI/CD pipelines, and one-off queries where you don
 
 📖 **Full documentation:** [docs/mcp-integration.md](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/mcp-integration.md) — available in 5 languages (EN, PT-BR, PT-PT, ES, FR).
 
+> 🧩 **Official VS Code & Cursor Extension** — Prefer native editor commands, SCM toolbar buttons, and inline `Problems` diagnostics? Install the thin-client extension in [`extensions/vscode/`](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/editor-extension.md), powered by `gitpr-mcp`.
+
 > 💬 **MCP Prompts** — GitPR also exposes 7 pre-defined message templates (prompts) for common flows like "Review PR", "Generate Commit Message", and "Create Issue from Diff". See the [MCP Prompts guide](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/mcp-prompts.md) for the full list.
 
 ## 🎯 Smart Excludes (Token Optimization)
@@ -570,6 +575,7 @@ If you want to implement GitPR as an automated quality barrier in your team, che
 
 ### Configuration & Infrastructure
 
+* [**Editor Extension (VS Code & Cursor)**](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/editor-extension.md) — Thin-client VSIX extension driving `gitpr-mcp` over stdio for SCM commit generation, Markdown code reviews, two-step PR publishing, and inline `Problems` diagnostics.
 * [**Interactive Configuration TUI (gitpr config)**](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/config-tui.md) — Master-detail terminal interface to view, edit, and validate settings in `~/.gitpr/.env`.
 * [**Multi-Forge SCM Integration**](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/scm-multiforge.md) — Unified SCM provider layer for GitHub, GitLab, Bitbucket Cloud, and Azure DevOps with `--init` wizard.
 * [**Suggested Reviewers**](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/suggested-reviewers.md) — Automatic reviewer suggestion via Git blame of added lines mapped to forge logins.

{gitpr_cli-1.4.0.dist-info → gitpr_cli-1.4.1.dist-info}/RECORD

@@ -1,4 +1,4 @@
-gitpr_cli-1.4.0.dist-info/licenses/LICENSE,sha256=UQzLC6mwqb-ZNDkBBAqOxC-SMQcEID0gaM6oFcu6u48,27030
+gitpr_cli-1.4.1.dist-info/licenses/LICENSE,sha256=UQzLC6mwqb-ZNDkBBAqOxC-SMQcEID0gaM6oFcu6u48,27030
 src/__init__.py,sha256=WZW9x8P5CYnru29UiarFa8q1nQzuwYWyIodSOlruCWI,29
 src/ai_providers.py,sha256=QyFEOsXyA59lZziO5bl-4nlYFJpxBcxU9aLhcTBnkWE,14633
 src/blame_engine.py,sha256=Zov1hxrt7Dcmf56ovJKz3QmHIfzDKtSub2iItXeg9-A,17104
@@ -8,7 +8,7 @@ src/chat_memory.py,sha256=PcohnyspAfIwwwbsp9U2Wk_1AylJMFEMoWqRSJe_w30,8949
 src/commit_classifier.py,sha256=pgZRj8JvkCBgwgzDFNjjNKJKzddVB4HoPBcFM1F0zjE,6742
 src/config.py,sha256=5bs6jxxg-CwmtGfJB2eoMUbwRddOnc_MCcadOOcMbHg,53637
 src/config_schema.py,sha256=z-JC5rULAVkaQG4ppmVcdeNKLGpuXFqglzvCBgZjHVo,43308
-src/core.py,sha256=rw_S8_QEv6kljpC6X4CEJLPjKtd91SogtH5G9-c2_PA,84823
+src/core.py,sha256=IO7HM3LaKNfs0rKWnDafAQLxrM3O7nwEWTJ6JJttyPM,85522
 src/diff_parser.py,sha256=62X69ves4tlzNgVKXNsfWdOMwqn2h16RkUOPqszMU7k,11252
 src/doc_links.py,sha256=DuovU-RF9kjbisBdEoGAsuavQ2y0MYDhqy6Sz6vbrGI,1157
 src/github_api.py,sha256=ILm7e03UP80swc3XuJvIJJvhLp81-V_3kQQ1EuAcN8Q,3836
@@ -17,8 +17,8 @@ src/issue_engine.py,sha256=XwW9C5uX84eOWWZMerm0DvE8LpLRcjhrLsXtt7yftak,10872
 src/ledger.py,sha256=s10Sm0qcA1b916X7m8d2osDThCmSK0UQnmUrkyj8Eao,43663
 src/linter_engine.py,sha256=hIxht8M09Fnm6NiJZOqjI6dyqnFoHUDVA8Ve4dWZV4s,25214
 src/linter_wizard.py,sha256=7J_nQFghVwCaKG6QI3K45KcOaxHSH1oTCAvP_6tnCQM,7424
-src/main.py,sha256=jgRHRpbTYkhCaamnXJacThdXPih2iE3005GVhbqYWW8,210498
-src/mcp_server.py,sha256=rLkN8rJAjqSaguCXksbQsLBYu8XKkWdXKps_zl6dwOQ,99398
+src/main.py,sha256=wekm-Q0IBFU6c-rQXoz_56Yxygs-jmNrxHXusbMkBgw,214065
+src/mcp_server.py,sha256=gi4LmMYVN4CZWHQgb-5aV5UD2O-tRYzc_BqNg7t-EFA,111654
 src/metrics.py,sha256=M4Yqa__giuhmkElT-XOWrTfHGsjK_URVLhIZvErD2f0,39560
 src/net.py,sha256=f0MOkXyIxi4HVetsybtWpV_yHjiC17T2JMWySBdoV2I,2774
 src/release_engine.py,sha256=xgsoZUYnFohxemwzRSPymoLvgYsK0Y4HRRtZaItkZEg,37433
@@ -29,7 +29,7 @@ src/security_ruleset.py,sha256=L754S4RlVoZGWm0nuCoeli9-49mKydZpwi31V319DQ0,4337
 src/spinner.py,sha256=63pEotiDa3TVwBr-sn0MJoDPQ_uWJTTwINXieJIDDKc,8964
 src/suggest_reviewers.py,sha256=-wRe0HYksx4FWQZ-eDvU9Ghdk5gqtEt457KQP7sE31Y,5181
 src/tui_issue.py,sha256=WEFxT4kzWQ_KbSDsOnS_iuYXasZySB-68jryGNm0peg,10331
-src/updater.py,sha256=mjlTehzEo4u23dOezGA-iMrw1GzAENUqQuZx7JZJLHs,4771
+src/updater.py,sha256=nRI22O8pIku2xu2eWxZOR-eyswPw5DtV4youbyTwtpA,4771
 src/usage_log.py,sha256=FdfSmZKL_I5BcG750rD4gl3pNHx0jqV8Shij5XkAnzc,4381
 src/version_bump.py,sha256=OjqJe9OL1-1dT5od7-SgU5ZN_dTtR_aKX_oSjSY64YQ,2954
 src/application/__init__.py,sha256=0GADzpCB3CdCzw-d3az0DVOtTvXfCppt-0hY-Js5a1U,29
@@ -44,7 +44,9 @@ src/application/use_cases/generate_mentor_explanation.py,sha256=KNj5cDm-i7aPJxxb
 src/application/use_cases/generate_pr_explanation.py,sha256=5BYUPgGBdR29P-9zt75IcKO4KOwGhZnapws7Y6A4574,3202
 src/application/use_cases/generate_test_file.py,sha256=WlHnhwCWHe-XBrL9m1xvJOkn1wqr8vnsE3s3x9wgUi0,8615
 src/application/use_cases/install_policy_pack.py,sha256=U1XvkHt0elXvyM2VRc6TPNukhUomSI2BSWj09hmLC_8,2745
+src/application/use_cases/publish_pull_request.py,sha256=DPK8ERbO2fsjoWUhcLQs10z1WhHVhsfTvtGumn50uIA,9369
 src/application/use_cases/resolve_effective_policy.py,sha256=nTbjRR4di1GnCRV7l3yDNw27CQV3heAd45sftHxNyNc,7563
+src/application/use_cases/run_check.py,sha256=NEhuOZmdWgPFrOPWNku6MwS1Lp0OArk3OMd78M8_EcE,15246
 src/application/use_cases/suppress_finding.py,sha256=juj2jjk2BLjrAcx6WTKJNr5VMTJQ4Gb3GaEjDNGjM64,17809
 src/application/use_cases/validate_policy_pack.py,sha256=g8jt8HYUcGae69tzfT84A22usbvF9JB3T2ZoG5oyw0A,9643
 src/branding/__init__.py,sha256=6ORCsJHtd422jUiQNMCf6eL8kwW4QMf6dJ9Z4Gf9bEc,80
@@ -62,6 +64,10 @@ src/domain/baseline/baseline_fingerprint.py,sha256=06i-rxVcElr0md4eveKycl7etsHaE
 src/domain/baseline/baseline_manifest.py,sha256=jYy_AHBNP6adFr8FNfZtqQmdZteGNzTlToXHg-BP3RI,10429
 src/domain/baseline/baseline_types.py,sha256=_su74m5HuBu0Z5jxm_elva_CX7EP_6025lbX5EjH2o8,11220
 src/domain/baseline/suppression_policy.py,sha256=GNZ0WN7ww4HcUq82vtiqd8Ere7EuP51VuSCoPzEkLOU,22489
+src/domain/check/__init__.py,sha256=Ngd91XHlsZVj7NByY5DzLhI75W9ZqvpAOmt6GQ2crM8,681
+src/domain/check/check_config.py,sha256=C2RB2CHkpRhEpb8QI7MEuSmwD5LskVNSVj2doz6b818,3679
+src/domain/check/check_output.py,sha256=5W7q0S8ojeoXBDbhgdfTLk8bOYvZmO2rbMMNNzyMi8A,3834
+src/domain/check/check_types.py,sha256=k3UvkjWNsFt-7PTHQzE1F-6SXRni72XHHyXS761g1t4,5056
 src/domain/finding/__init__.py,sha256=Y9n2tmT8zybkv3zkBAoI_2k8C4ode2CWHm6l28BhH9w,166
 src/domain/finding/finding_types.py,sha256=Nocd7SmXMAk3q0gVM6yeh2AW6rmJS6CxOCOIQsmsF-Y,833
 src/domain/linter/__init__.py,sha256=WoLci3LhRc7S2IlytrveRPbEQVrAwI4bqazVmGP08Ak,236
@@ -96,6 +102,10 @@ src/fix/rollback_fix.py,sha256=rMBYewuvlhJOFdo-Ke_SPfu1O-yd6NJzEYiO5o-LcKk,2501
 src/infrastructure/__init__.py,sha256=zTIcY3cscsdkXogSGXoJbH0mVGFbKYTRK32fg26wr9U,81
 src/infrastructure/baseline/__init__.py,sha256=VCnAq7MgyvIAwjd2jznSEvyY42Xg5tmnz4VWBxFA5YI,614
 src/infrastructure/baseline/local_baseline_repository.py,sha256=lE9f2D-6XBPRNi5e32jUA6aG6TUxgAN12ihz-tH3KaM,13460
+src/infrastructure/ci/__init__.py,sha256=weQNs0JnGo0nAB_NKvDzcUvOWx_pQQyWucd63Q0ShLA,334
+src/infrastructure/ci/junit_builder.py,sha256=u3DE_nUq0yntvNHRufFUu35aIkgLKfvj-Tz2a2lWBXk,3819
+src/infrastructure/ci/masking.py,sha256=uzH9uanMzye-kKH0IOfKqdEFUAPcCev17BhGSPzqBoc,2153
+src/infrastructure/ci/sarif_builder.py,sha256=XLkmX5j_dmOWy3ycT98WbP35tuYjDgRwaxenhN9jiIE,5233
 src/infrastructure/git/__init__.py,sha256=j9zQUXKNp5NcOzTK-qHGNh75YkufGlw5rgH1wgRknX4,87
 src/infrastructure/git/identity.py,sha256=fClwWTkGIypquE19dUjwwDQCifdsGQmmRMgVobuBIa8,5722
 src/infrastructure/git/patch_applier.py,sha256=RgbrpAp-6x401Eydz6yLMTOXKn5E9LQzV9ZB_n7E90M,7988
@@ -150,14 +160,14 @@ src/ui/issue_app.py,sha256=eINMmamloeopbtwyS1rCPwosaHeZW5oLebnEV4TfamY,9281
 src/ui/linter_app.py,sha256=Y5vwU7D5PQIR_HaY6t40jZy7Guc8z2w-auyosCQqoro,1566
 src/ui/metrics_app.py,sha256=r5JSS70Fkir0qQ4Q03T6c1R2-WGrvYMNTlHMhjAR2Tc,16303
 src/ui/metrics_migration_app.py,sha256=-56HhWZhtVpGCO53NhUnOpZI9bDesfwy2_w7f31cMsU,5923
-src/ui/pr_publish_app.py,sha256=cZ9xr1TSZF6fjvQPlAdSjzSNykufHF1l7hsmo3Ib2j0,67311
+src/ui/pr_publish_app.py,sha256=KAtq0aKtSx7d_J4mTaOBAjIK0z_ftJRsNGGbIo0ZhL8,69540
 src/ui/pr_publish_help.py,sha256=fBiUtD97ngxbSfAvPVGGXU19r5kbALCKyi4QeKqyQ2c,1891
 src/ui/demo/__init__.py,sha256=PGXenIwpS1lVDE164CZ55q8_65XtJq5H300NIpnqOh0,58
 src/ui/demo/demo_app.py,sha256=EDeuqxh_v9KrPhib49TyirmFlHZN7I5NQkg9AjDGhcs,3074
 src/ui/demo/demo_help_screen.py,sha256=m8SuvhzGmkMsahUBA6Aq7ull4W65nS0KOX4hLx-GGps,2056
 src/ui/demo/demo_screens.py,sha256=3Ntp-A7OB43yEtniRqV1UKWc-p5lHRyxeadpe8bxJpM,1937
-gitpr_cli-1.4.0.dist-info/METADATA,sha256=UElFetNIOs54YQZ92CqK1LxNKFSAp-0VG-azLmnsgF0,51335
-gitpr_cli-1.4.0.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
-gitpr_cli-1.4.0.dist-info/entry_points.txt,sha256=TstGnMUzdOI5qNmpM97EPDBPuMqOZxoo6EoLxHSOMSQ,71
-gitpr_cli-1.4.0.dist-info/top_level.txt,sha256=74rtVfumQlgAPzR5_2CgYN24MB0XARCg0t-gzk6gTrM,4
-gitpr_cli-1.4.0.dist-info/RECORD,,
+gitpr_cli-1.4.1.dist-info/METADATA,sha256=sNb--Fg6TdLtXclPH_pTKhQvVNAmG4irqz8wDlhATUs,52571
+gitpr_cli-1.4.1.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
+gitpr_cli-1.4.1.dist-info/entry_points.txt,sha256=TstGnMUzdOI5qNmpM97EPDBPuMqOZxoo6EoLxHSOMSQ,71
+gitpr_cli-1.4.1.dist-info/top_level.txt,sha256=74rtVfumQlgAPzR5_2CgYN24MB0XARCg0t-gzk6gTrM,4
+gitpr_cli-1.4.1.dist-info/RECORD,,

src/application/use_cases/publish_pull_request.py

@@ -0,0 +1,270 @@
+"""Use case: Publish a pull request directly to the configured SCM forge.
+
+Shared by the CLI ``--no-edit`` flow and the MCP ``publish_pull_request`` tool.
+Never commits or pushes; checks for existing PRs or unpushed branches when
+requested, maps forge errors into structured outcomes, and applies defense-in-depth
+secret masking on error messages.
+"""
+
+from dataclasses import dataclass
+import subprocess
+from typing import Optional
+
+import src.domain.check.check_types  # noqa: F401 - avoid circular import through src.infrastructure.ci
+from src.i18n import __
+from src.infrastructure.ci.masking import mask_sensitive_text
+from src.infrastructure.scm import (
+    PullRequestRequest,
+    PullRequestResult,
+    RepoRef,
+    ScmProvider,
+    ScmProviderError,
+    provider_display_name,
+)
+
+
+@dataclass
+class PublishPrOutcome:
+    """Structured result of a pull request publication attempt.
+
+    status is one of:
+    - "success"        : PR created on the forge (url and number populated)
+    - "already_exists" : an open PR already exists for source_branch (url and number populated)
+    - "needs_push"     : source_branch is not on origin or has unpushed commits
+    - "auth_required"  : missing or invalid/expired SCM token (HTTP 401/403)
+    - "error"          : any other validation or API error
+    """
+
+    status: str
+    url: str = ""
+    number: int = 0
+    provider: str = ""
+    source_branch: str = ""
+    target_branch: str = ""
+    http_status: int = 0
+    message: str = ""
+
+
+def format_recommended_commit_body(commit_message: str, pr_body: str) -> str:
+    """Formats the full PR body with the recommended commit message header (used by --no-edit)."""
+    return (
+        __("**Recommended Commit Message:**\n")
+        + "```text\n"
+        + f"{commit_message}\n"
+        + "```\n\n---\n\n"
+        + pr_body
+    )
+
+
+def _branch_needs_push(source_branch: str, repo_path: Optional[str] = None) -> bool:
+    """True when origin/<source_branch> does not exist or local HEAD is ahead of it."""
+    if not source_branch or source_branch == "HEAD":
+        return False
+    remote_ref = f"refs/remotes/origin/{source_branch}"
+    try:
+        proc = subprocess.run(
+            ["git", "rev-parse", "--verify", remote_ref],
+            capture_output=True,
+            stdin=subprocess.DEVNULL,
+            text=True,
+            encoding="utf-8",
+            errors="replace",
+            cwd=repo_path or None,
+        )
+        if proc.returncode != 0:
+            return True
+        ahead = subprocess.run(
+            ["git", "rev-list", "--count", f"origin/{source_branch}..HEAD"],
+            capture_output=True,
+            stdin=subprocess.DEVNULL,
+            text=True,
+            encoding="utf-8",
+            errors="replace",
+            cwd=repo_path or None,
+        )
+        if ahead.returncode == 0:
+            count = int((ahead.stdout or "0").strip() or "0")
+            return count > 0
+    except (OSError, ValueError):
+        return False
+    return False
+
+
+def publish_pull_request_use_case(
+    provider: ScmProvider,
+    repo_ref: RepoRef,
+    title: str,
+    description: str,
+    source_branch: str,
+    target_branch: str,
+    draft: bool = False,
+    check_remote_state: bool = False,
+    repo_path: Optional[str] = None,
+) -> PublishPrOutcome:
+    """Creates a pull request on *provider* and returns a structured PublishPrOutcome.
+
+    When *check_remote_state* is True (MCP flow), verifies that a token is present,
+    checks whether the branch needs to be pushed first, and checks whether an open
+    PR already exists for *source_branch* before attempting creation.
+    """
+    label = provider_display_name(provider)
+    clean_title = (title or "").strip()
+    clean_body = (description or "").strip()
+
+    if not clean_title:
+        return PublishPrOutcome(
+            status="error",
+            provider=provider.name,
+            source_branch=source_branch,
+            target_branch=target_branch,
+            message=__("Pull request title must not be empty."),
+        )
+
+    if not clean_body:
+        return PublishPrOutcome(
+            status="error",
+            provider=provider.name,
+            source_branch=source_branch,
+            target_branch=target_branch,
+            message=__("PR description must not be empty."),
+        )
+
+    if not getattr(provider, "token", ""):
+        return PublishPrOutcome(
+            status="auth_required",
+            provider=provider.name,
+            source_branch=source_branch,
+            target_branch=target_branch,
+            http_status=401,
+            message=__(
+                "{provider} token is not configured. Run 'gitpr' in a terminal to authenticate.",
+                provider=label,
+            ),
+        )
+
+    if check_remote_state:
+        try:
+            existing: Optional[PullRequestResult] = provider.check_existing_pull_request(
+                repo_ref, source_branch
+            )
+        except ScmProviderError as exc:
+            if exc.http_status in (401, 403):
+                return PublishPrOutcome(
+                    status="auth_required",
+                    provider=provider.name,
+                    source_branch=source_branch,
+                    target_branch=target_branch,
+                    http_status=exc.http_status,
+                    message=mask_sensitive_text(
+                        __(
+                            "{provider} token expired or invalid. Run 'gitpr' in a terminal to re-authenticate.",
+                            provider=label,
+                        )
+                    ),
+                )
+            existing = None
+        except Exception:
+            existing = None
+
+        if existing is not None:
+            return PublishPrOutcome(
+                status="already_exists",
+                url=existing.url,
+                number=existing.number,
+                provider=provider.name,
+                source_branch=source_branch,
+                target_branch=existing.target_branch or target_branch,
+                message=__(
+                    "An open Pull Request already exists for branch '{branch}': {url}",
+                    branch=source_branch,
+                    url=existing.url,
+                ),
+            )
+
+        if _branch_needs_push(source_branch, repo_path=repo_path):
+            return PublishPrOutcome(
+                status="needs_push",
+                provider=provider.name,
+                source_branch=source_branch,
+                target_branch=target_branch,
+                message=__(
+                    "Branch '{branch}' has not been pushed to origin or has unpushed commits.",
+                    branch=source_branch,
+                ),
+            )
+
+    try:
+        result = provider.create_pull_request(
+            repo_ref,
+            PullRequestRequest(
+                title=clean_title,
+                description=clean_body,
+                source_branch=source_branch,
+                target_branch=target_branch,
+                draft=bool(draft),
+            ),
+        )
+    except ScmProviderError as exc:
+        masked_msg = mask_sensitive_text(exc.message)
+        if exc.http_status == 401:
+            return PublishPrOutcome(
+                status="auth_required",
+                provider=provider.name,
+                source_branch=source_branch,
+                target_branch=target_branch,
+                http_status=exc.http_status,
+                message=masked_msg,
+            )
+        lower_msg = masked_msg.lower()
+        if exc.http_status in (400, 409, 422) and "already exists" in lower_msg:
+            return PublishPrOutcome(
+                status="already_exists",
+                provider=provider.name,
+                source_branch=source_branch,
+                target_branch=target_branch,
+                http_status=exc.http_status,
+                message=masked_msg,
+            )
+        if exc.http_status in (400, 404, 422) and (
+            "head" in lower_msg or "source" in lower_msg or "branch" in lower_msg
+        ) and _branch_needs_push(source_branch, repo_path=repo_path):
+            return PublishPrOutcome(
+                status="needs_push",
+                provider=provider.name,
+                source_branch=source_branch,
+                target_branch=target_branch,
+                http_status=exc.http_status,
+                message=masked_msg,
+            )
+        return PublishPrOutcome(
+            status="error",
+            provider=provider.name,
+            source_branch=source_branch,
+            target_branch=target_branch,
+            http_status=exc.http_status,
+            message=masked_msg,
+        )
+    except Exception as exc:
+        return PublishPrOutcome(
+            status="error",
+            provider=provider.name,
+            source_branch=source_branch,
+            target_branch=target_branch,
+            http_status=0,
+            message=mask_sensitive_text(str(exc)),
+        )
+
+    return PublishPrOutcome(
+        status="success",
+        url=result.url,
+        number=result.number,
+        provider=provider.name,
+        source_branch=source_branch,
+        target_branch=target_branch,
+        http_status=201,
+        message=__(
+            "PR successfully created on {provider}: {pr_url}",
+            provider=label,
+            pr_url=result.url,
+        ),
+    )