gitpr-cli 1.4.0__tar.gz → 1.4.1__tar.gz

{gitpr_cli-1.4.0/gitpr_cli.egg-info → gitpr_cli-1.4.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gitpr-cli
-Version: 1.4.0
+Version: 1.4.1
 Summary: AI-powered PR automation, commit messages, and code review (Gemini, DeepSeek, and Ollama)
 Author-email: Natan Fiuza <contato@natanfiuza.dev.br>
 Requires-Python: >=3.10
@@ -170,6 +170,7 @@ You can pass the following *flags* for specific actions:
 * `gitpr risk`: **Local Risk Scoring for Diffs.** Computes a deterministic, explainable risk score (0.0 to 100.0) and badge (`LOW 🟢`, `MEDIUM 🟡`, `HIGH 🟠`, `CRITICAL 🔴`) using local repository signals (critical paths, missing tests, migrations, bug history, and static findings). Use `--file <path>`, `--format json`, `--base <ref>`, or `--no-history`. Automatically included in code reviews (`GITPR_RISK_INCLUDE_IN_REVIEW=true`). 📖 [Full docs](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/risk-scoring.md)
 * `gitpr policy`: **Shared quality policy for the repository.** Adopts a versioned YAML **Policy Pack** — review skills, linter rules, severity overrides, critical paths, risk weights and PR/commit conventions — and records the choice in `.gitpr/policy.lock.yml`, so the review, the linter and the risk score all run under the same policy, with a checksum per pack. `list`, `validate`, `show`, `use`, `init`, `install`, `off`. 📖 [Full docs](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/policy-packs.md)
 * `gitpr baseline`: **Baseline and auditable suppressions for legacy adoption.** Records the findings a repository already has in `.gitpr/baseline.json`, so a run classifies every finding as `new`, `existing`, `resolved`, `ignored` or `accepted_debt` and **only `new` blocks**. Every suppression carries a reason, and accepted debt carries an owner and an optional deadline. `create`, `show`, `validate`, `update`, `suppress`, `unsuppress`. 📖 [Full docs](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/baseline-suppressions.md)
+* `gitpr check`: **Unified CI check command.** Consolidates static linter, secret scanning, external bridges (Semgrep, Gitleaks, Bandit), optional AI code review, risk scoring, and baseline into a single CI pipeline command. Emits machine-readable artifacts in **SARIF 2.1.0**, **JSON**, or **JUnit XML** with deterministic exit codes (`0`, `1`, `2`). 📖 [Full docs](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/check-ci.md)
 * `-c` or `--commit`: Runs a local `git diff` and displays **only the suggested commit message**.
 * `-r` or `--review`: Performs a detailed **Code Review** of local changes. Use with `--mentor` to append pedagogical mentoring explanations for each finding.
 * `-f` or `--fullreview`: Performs a **Full Code Review** analyzing all changes since the remote branch. Use with `--mentor` to append pedagogical mentoring explanations.
@@ -458,6 +459,8 @@ Once configured, use natural language in your editor's AI chat:
 | `analyze_unstaged_diff` | Unstaged diff only (working tree vs index) |
 | `list_fix_candidates` | Fix candidates of the last review: patch, classification, id (read-only) |
 | `review_remote_pr` | AI review of a pull request already open on the forge, fetched by number (read-only) |
+| `run_check` | Structured CI/Editor quality gate returning normalized findings and pass/fail status |
+| `publish_pull_request` | Publish or update a Pull Request on the remote forge from title and body |
 
 ### Direct CLI Invocation
 
@@ -478,6 +481,8 @@ This is useful for scripting, CI/CD pipelines, and one-off queries where you don
 
 📖 **Full documentation:** [docs/mcp-integration.md](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/mcp-integration.md) — available in 5 languages (EN, PT-BR, PT-PT, ES, FR).
 
+> 🧩 **Official VS Code & Cursor Extension** — Prefer native editor commands, SCM toolbar buttons, and inline `Problems` diagnostics? Install the thin-client extension in [`extensions/vscode/`](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/editor-extension.md), powered by `gitpr-mcp`.
+
 > 💬 **MCP Prompts** — GitPR also exposes 7 pre-defined message templates (prompts) for common flows like "Review PR", "Generate Commit Message", and "Create Issue from Diff". See the [MCP Prompts guide](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/mcp-prompts.md) for the full list.
 
 ## 🎯 Smart Excludes (Token Optimization)
@@ -570,6 +575,7 @@ If you want to implement GitPR as an automated quality barrier in your team, che
 
 ### Configuration & Infrastructure
 
+* [**Editor Extension (VS Code & Cursor)**](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/editor-extension.md) — Thin-client VSIX extension driving `gitpr-mcp` over stdio for SCM commit generation, Markdown code reviews, two-step PR publishing, and inline `Problems` diagnostics.
 * [**Interactive Configuration TUI (gitpr config)**](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/config-tui.md) — Master-detail terminal interface to view, edit, and validate settings in `~/.gitpr/.env`.
 * [**Multi-Forge SCM Integration**](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/scm-multiforge.md) — Unified SCM provider layer for GitHub, GitLab, Bitbucket Cloud, and Azure DevOps with `--init` wizard.
 * [**Suggested Reviewers**](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/suggested-reviewers.md) — Automatic reviewer suggestion via Git blame of added lines mapped to forge logins.

gitpr_cli-1.4.0/PKG-INFO → gitpr_cli-1.4.1/README.md

@@ -1,23 +1,3 @@
-Metadata-Version: 2.4
-Name: gitpr-cli
-Version: 1.4.0
-Summary: AI-powered PR automation, commit messages, and code review (Gemini, DeepSeek, and Ollama)
-Author-email: Natan Fiuza <contato@natanfiuza.dev.br>
-Requires-Python: >=3.10
-Description-Content-Type: text/markdown
-License-File: LICENSE
-Requires-Dist: click>=8.0.0
-Requires-Dist: google-genai
-Requires-Dist: openai
-Requires-Dist: python-dotenv
-Requires-Dist: cryptography
-Requires-Dist: pyyaml
-Requires-Dist: textual
-Requires-Dist: requests
-Requires-Dist: mcp>=1.0.0
-Requires-Dist: packaging>=23.0
-Dynamic: license-file
-
 
 # **GitPR CLI 🚀**
 
@@ -170,6 +150,7 @@ You can pass the following *flags* for specific actions:
 * `gitpr risk`: **Local Risk Scoring for Diffs.** Computes a deterministic, explainable risk score (0.0 to 100.0) and badge (`LOW 🟢`, `MEDIUM 🟡`, `HIGH 🟠`, `CRITICAL 🔴`) using local repository signals (critical paths, missing tests, migrations, bug history, and static findings). Use `--file <path>`, `--format json`, `--base <ref>`, or `--no-history`. Automatically included in code reviews (`GITPR_RISK_INCLUDE_IN_REVIEW=true`). 📖 [Full docs](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/risk-scoring.md)
 * `gitpr policy`: **Shared quality policy for the repository.** Adopts a versioned YAML **Policy Pack** — review skills, linter rules, severity overrides, critical paths, risk weights and PR/commit conventions — and records the choice in `.gitpr/policy.lock.yml`, so the review, the linter and the risk score all run under the same policy, with a checksum per pack. `list`, `validate`, `show`, `use`, `init`, `install`, `off`. 📖 [Full docs](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/policy-packs.md)
 * `gitpr baseline`: **Baseline and auditable suppressions for legacy adoption.** Records the findings a repository already has in `.gitpr/baseline.json`, so a run classifies every finding as `new`, `existing`, `resolved`, `ignored` or `accepted_debt` and **only `new` blocks**. Every suppression carries a reason, and accepted debt carries an owner and an optional deadline. `create`, `show`, `validate`, `update`, `suppress`, `unsuppress`. 📖 [Full docs](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/baseline-suppressions.md)
+* `gitpr check`: **Unified CI check command.** Consolidates static linter, secret scanning, external bridges (Semgrep, Gitleaks, Bandit), optional AI code review, risk scoring, and baseline into a single CI pipeline command. Emits machine-readable artifacts in **SARIF 2.1.0**, **JSON**, or **JUnit XML** with deterministic exit codes (`0`, `1`, `2`). 📖 [Full docs](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/check-ci.md)
 * `-c` or `--commit`: Runs a local `git diff` and displays **only the suggested commit message**.
 * `-r` or `--review`: Performs a detailed **Code Review** of local changes. Use with `--mentor` to append pedagogical mentoring explanations for each finding.
 * `-f` or `--fullreview`: Performs a **Full Code Review** analyzing all changes since the remote branch. Use with `--mentor` to append pedagogical mentoring explanations.
@@ -458,6 +439,8 @@ Once configured, use natural language in your editor's AI chat:
 | `analyze_unstaged_diff` | Unstaged diff only (working tree vs index) |
 | `list_fix_candidates` | Fix candidates of the last review: patch, classification, id (read-only) |
 | `review_remote_pr` | AI review of a pull request already open on the forge, fetched by number (read-only) |
+| `run_check` | Structured CI/Editor quality gate returning normalized findings and pass/fail status |
+| `publish_pull_request` | Publish or update a Pull Request on the remote forge from title and body |
 
 ### Direct CLI Invocation
 
@@ -478,6 +461,8 @@ This is useful for scripting, CI/CD pipelines, and one-off queries where you don
 
 📖 **Full documentation:** [docs/mcp-integration.md](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/mcp-integration.md) — available in 5 languages (EN, PT-BR, PT-PT, ES, FR).
 
+> 🧩 **Official VS Code & Cursor Extension** — Prefer native editor commands, SCM toolbar buttons, and inline `Problems` diagnostics? Install the thin-client extension in [`extensions/vscode/`](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/editor-extension.md), powered by `gitpr-mcp`.
+
 > 💬 **MCP Prompts** — GitPR also exposes 7 pre-defined message templates (prompts) for common flows like "Review PR", "Generate Commit Message", and "Create Issue from Diff". See the [MCP Prompts guide](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/mcp-prompts.md) for the full list.
 
 ## 🎯 Smart Excludes (Token Optimization)
@@ -570,6 +555,7 @@ If you want to implement GitPR as an automated quality barrier in your team, che
 
 ### Configuration & Infrastructure
 
+* [**Editor Extension (VS Code & Cursor)**](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/editor-extension.md) — Thin-client VSIX extension driving `gitpr-mcp` over stdio for SCM commit generation, Markdown code reviews, two-step PR publishing, and inline `Problems` diagnostics.
 * [**Interactive Configuration TUI (gitpr config)**](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/config-tui.md) — Master-detail terminal interface to view, edit, and validate settings in `~/.gitpr/.env`.
 * [**Multi-Forge SCM Integration**](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/scm-multiforge.md) — Unified SCM provider layer for GitHub, GitLab, Bitbucket Cloud, and Azure DevOps with `--init` wizard.
 * [**Suggested Reviewers**](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/suggested-reviewers.md) — Automatic reviewer suggestion via Git blame of added lines mapped to forge logins.

gitpr_cli-1.4.0/README.md → gitpr_cli-1.4.1/gitpr_cli.egg-info/PKG-INFO

@@ -1,3 +1,23 @@
+Metadata-Version: 2.4
+Name: gitpr-cli
+Version: 1.4.1
+Summary: AI-powered PR automation, commit messages, and code review (Gemini, DeepSeek, and Ollama)
+Author-email: Natan Fiuza <contato@natanfiuza.dev.br>
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: click>=8.0.0
+Requires-Dist: google-genai
+Requires-Dist: openai
+Requires-Dist: python-dotenv
+Requires-Dist: cryptography
+Requires-Dist: pyyaml
+Requires-Dist: textual
+Requires-Dist: requests
+Requires-Dist: mcp>=1.0.0
+Requires-Dist: packaging>=23.0
+Dynamic: license-file
+
 
 # **GitPR CLI 🚀**
 
@@ -150,6 +170,7 @@ You can pass the following *flags* for specific actions:
 * `gitpr risk`: **Local Risk Scoring for Diffs.** Computes a deterministic, explainable risk score (0.0 to 100.0) and badge (`LOW 🟢`, `MEDIUM 🟡`, `HIGH 🟠`, `CRITICAL 🔴`) using local repository signals (critical paths, missing tests, migrations, bug history, and static findings). Use `--file <path>`, `--format json`, `--base <ref>`, or `--no-history`. Automatically included in code reviews (`GITPR_RISK_INCLUDE_IN_REVIEW=true`). 📖 [Full docs](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/risk-scoring.md)
 * `gitpr policy`: **Shared quality policy for the repository.** Adopts a versioned YAML **Policy Pack** — review skills, linter rules, severity overrides, critical paths, risk weights and PR/commit conventions — and records the choice in `.gitpr/policy.lock.yml`, so the review, the linter and the risk score all run under the same policy, with a checksum per pack. `list`, `validate`, `show`, `use`, `init`, `install`, `off`. 📖 [Full docs](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/policy-packs.md)
 * `gitpr baseline`: **Baseline and auditable suppressions for legacy adoption.** Records the findings a repository already has in `.gitpr/baseline.json`, so a run classifies every finding as `new`, `existing`, `resolved`, `ignored` or `accepted_debt` and **only `new` blocks**. Every suppression carries a reason, and accepted debt carries an owner and an optional deadline. `create`, `show`, `validate`, `update`, `suppress`, `unsuppress`. 📖 [Full docs](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/baseline-suppressions.md)
+* `gitpr check`: **Unified CI check command.** Consolidates static linter, secret scanning, external bridges (Semgrep, Gitleaks, Bandit), optional AI code review, risk scoring, and baseline into a single CI pipeline command. Emits machine-readable artifacts in **SARIF 2.1.0**, **JSON**, or **JUnit XML** with deterministic exit codes (`0`, `1`, `2`). 📖 [Full docs](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/check-ci.md)
 * `-c` or `--commit`: Runs a local `git diff` and displays **only the suggested commit message**.
 * `-r` or `--review`: Performs a detailed **Code Review** of local changes. Use with `--mentor` to append pedagogical mentoring explanations for each finding.
 * `-f` or `--fullreview`: Performs a **Full Code Review** analyzing all changes since the remote branch. Use with `--mentor` to append pedagogical mentoring explanations.
@@ -438,6 +459,8 @@ Once configured, use natural language in your editor's AI chat:
 | `analyze_unstaged_diff` | Unstaged diff only (working tree vs index) |
 | `list_fix_candidates` | Fix candidates of the last review: patch, classification, id (read-only) |
 | `review_remote_pr` | AI review of a pull request already open on the forge, fetched by number (read-only) |
+| `run_check` | Structured CI/Editor quality gate returning normalized findings and pass/fail status |
+| `publish_pull_request` | Publish or update a Pull Request on the remote forge from title and body |
 
 ### Direct CLI Invocation
 
@@ -458,6 +481,8 @@ This is useful for scripting, CI/CD pipelines, and one-off queries where you don
 
 📖 **Full documentation:** [docs/mcp-integration.md](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/mcp-integration.md) — available in 5 languages (EN, PT-BR, PT-PT, ES, FR).
 
+> 🧩 **Official VS Code & Cursor Extension** — Prefer native editor commands, SCM toolbar buttons, and inline `Problems` diagnostics? Install the thin-client extension in [`extensions/vscode/`](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/editor-extension.md), powered by `gitpr-mcp`.
+
 > 💬 **MCP Prompts** — GitPR also exposes 7 pre-defined message templates (prompts) for common flows like "Review PR", "Generate Commit Message", and "Create Issue from Diff". See the [MCP Prompts guide](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/mcp-prompts.md) for the full list.
 
 ## 🎯 Smart Excludes (Token Optimization)
@@ -550,6 +575,7 @@ If you want to implement GitPR as an automated quality barrier in your team, che
 
 ### Configuration & Infrastructure
 
+* [**Editor Extension (VS Code & Cursor)**](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/editor-extension.md) — Thin-client VSIX extension driving `gitpr-mcp` over stdio for SCM commit generation, Markdown code reviews, two-step PR publishing, and inline `Problems` diagnostics.
 * [**Interactive Configuration TUI (gitpr config)**](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/config-tui.md) — Master-detail terminal interface to view, edit, and validate settings in `~/.gitpr/.env`.
 * [**Multi-Forge SCM Integration**](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/scm-multiforge.md) — Unified SCM provider layer for GitHub, GitLab, Bitbucket Cloud, and Azure DevOps with `--init` wizard.
 * [**Suggested Reviewers**](https://github.com/gitpr-cli/gitpr.git/blob/main/docs/suggested-reviewers.md) — Automatic reviewer suggestion via Git blame of added lines mapped to forge logins.

{gitpr_cli-1.4.0 → gitpr_cli-1.4.1}/gitpr_cli.egg-info/SOURCES.txt

@@ -52,7 +52,9 @@ src/application/use_cases/generate_mentor_explanation.py
 src/application/use_cases/generate_pr_explanation.py
 src/application/use_cases/generate_test_file.py
 src/application/use_cases/install_policy_pack.py
+src/application/use_cases/publish_pull_request.py
 src/application/use_cases/resolve_effective_policy.py
+src/application/use_cases/run_check.py
 src/application/use_cases/suppress_finding.py
 src/application/use_cases/validate_policy_pack.py
 src/branding/__init__.py
@@ -70,6 +72,10 @@ src/domain/baseline/baseline_fingerprint.py
 src/domain/baseline/baseline_manifest.py
 src/domain/baseline/baseline_types.py
 src/domain/baseline/suppression_policy.py
+src/domain/check/__init__.py
+src/domain/check/check_config.py
+src/domain/check/check_output.py
+src/domain/check/check_types.py
 src/domain/finding/__init__.py
 src/domain/finding/finding_types.py
 src/domain/linter/__init__.py
@@ -104,6 +110,10 @@ src/fix/rollback_fix.py
 src/infrastructure/__init__.py
 src/infrastructure/baseline/__init__.py
 src/infrastructure/baseline/local_baseline_repository.py
+src/infrastructure/ci/__init__.py
+src/infrastructure/ci/junit_builder.py
+src/infrastructure/ci/masking.py
+src/infrastructure/ci/sarif_builder.py
 src/infrastructure/git/__init__.py
 src/infrastructure/git/identity.py
 src/infrastructure/git/patch_applier.py
@@ -169,6 +179,7 @@ tests/test_blame_engine_ranges.py
 tests/test_blame_metrics.py
 tests/test_changelog_builder.py
 tests/test_chat_backend.py
+tests/test_check_cli.py
 tests/test_commit_classifier.py
 tests/test_config_app.py
 tests/test_config_cli.py
@@ -205,6 +216,7 @@ tests/test_risk_cli.py
 tests/test_security_ruleset.py
 tests/test_skill_command.py
 tests/test_skill_context.py
+tests/test_skill_templates.py
 tests/test_smart_excludes.py
 tests/test_suggest_reviewers.py
 tests/test_tests_command.py

gitpr_cli-1.4.1/src/application/use_cases/publish_pull_request.py

@@ -0,0 +1,270 @@
+"""Use case: Publish a pull request directly to the configured SCM forge.
+
+Shared by the CLI ``--no-edit`` flow and the MCP ``publish_pull_request`` tool.
+Never commits or pushes; checks for existing PRs or unpushed branches when
+requested, maps forge errors into structured outcomes, and applies defense-in-depth
+secret masking on error messages.
+"""
+
+from dataclasses import dataclass
+import subprocess
+from typing import Optional
+
+import src.domain.check.check_types  # noqa: F401 - avoid circular import through src.infrastructure.ci
+from src.i18n import __
+from src.infrastructure.ci.masking import mask_sensitive_text
+from src.infrastructure.scm import (
+    PullRequestRequest,
+    PullRequestResult,
+    RepoRef,
+    ScmProvider,
+    ScmProviderError,
+    provider_display_name,
+)
+
+
+@dataclass
+class PublishPrOutcome:
+    """Structured result of a pull request publication attempt.
+
+    status is one of:
+    - "success"        : PR created on the forge (url and number populated)
+    - "already_exists" : an open PR already exists for source_branch (url and number populated)
+    - "needs_push"     : source_branch is not on origin or has unpushed commits
+    - "auth_required"  : missing or invalid/expired SCM token (HTTP 401/403)
+    - "error"          : any other validation or API error
+    """
+
+    status: str
+    url: str = ""
+    number: int = 0
+    provider: str = ""
+    source_branch: str = ""
+    target_branch: str = ""
+    http_status: int = 0
+    message: str = ""
+
+
+def format_recommended_commit_body(commit_message: str, pr_body: str) -> str:
+    """Formats the full PR body with the recommended commit message header (used by --no-edit)."""
+    return (
+        __("**Recommended Commit Message:**\n")
+        + "```text\n"
+        + f"{commit_message}\n"
+        + "```\n\n---\n\n"
+        + pr_body
+    )
+
+
+def _branch_needs_push(source_branch: str, repo_path: Optional[str] = None) -> bool:
+    """True when origin/<source_branch> does not exist or local HEAD is ahead of it."""
+    if not source_branch or source_branch == "HEAD":
+        return False
+    remote_ref = f"refs/remotes/origin/{source_branch}"
+    try:
+        proc = subprocess.run(
+            ["git", "rev-parse", "--verify", remote_ref],
+            capture_output=True,
+            stdin=subprocess.DEVNULL,
+            text=True,
+            encoding="utf-8",
+            errors="replace",
+            cwd=repo_path or None,
+        )
+        if proc.returncode != 0:
+            return True
+        ahead = subprocess.run(
+            ["git", "rev-list", "--count", f"origin/{source_branch}..HEAD"],
+            capture_output=True,
+            stdin=subprocess.DEVNULL,
+            text=True,
+            encoding="utf-8",
+            errors="replace",
+            cwd=repo_path or None,
+        )
+        if ahead.returncode == 0:
+            count = int((ahead.stdout or "0").strip() or "0")
+            return count > 0
+    except (OSError, ValueError):
+        return False
+    return False
+
+
+def publish_pull_request_use_case(
+    provider: ScmProvider,
+    repo_ref: RepoRef,
+    title: str,
+    description: str,
+    source_branch: str,
+    target_branch: str,
+    draft: bool = False,
+    check_remote_state: bool = False,
+    repo_path: Optional[str] = None,
+) -> PublishPrOutcome:
+    """Creates a pull request on *provider* and returns a structured PublishPrOutcome.
+
+    When *check_remote_state* is True (MCP flow), verifies that a token is present,
+    checks whether the branch needs to be pushed first, and checks whether an open
+    PR already exists for *source_branch* before attempting creation.
+    """
+    label = provider_display_name(provider)
+    clean_title = (title or "").strip()
+    clean_body = (description or "").strip()
+
+    if not clean_title:
+        return PublishPrOutcome(
+            status="error",
+            provider=provider.name,
+            source_branch=source_branch,
+            target_branch=target_branch,
+            message=__("Pull request title must not be empty."),
+        )
+
+    if not clean_body:
+        return PublishPrOutcome(
+            status="error",
+            provider=provider.name,
+            source_branch=source_branch,
+            target_branch=target_branch,
+            message=__("PR description must not be empty."),
+        )
+
+    if not getattr(provider, "token", ""):
+        return PublishPrOutcome(
+            status="auth_required",
+            provider=provider.name,
+            source_branch=source_branch,
+            target_branch=target_branch,
+            http_status=401,
+            message=__(
+                "{provider} token is not configured. Run 'gitpr' in a terminal to authenticate.",
+                provider=label,
+            ),
+        )
+
+    if check_remote_state:
+        try:
+            existing: Optional[PullRequestResult] = provider.check_existing_pull_request(
+                repo_ref, source_branch
+            )
+        except ScmProviderError as exc:
+            if exc.http_status in (401, 403):
+                return PublishPrOutcome(
+                    status="auth_required",
+                    provider=provider.name,
+                    source_branch=source_branch,
+                    target_branch=target_branch,
+                    http_status=exc.http_status,
+                    message=mask_sensitive_text(
+                        __(
+                            "{provider} token expired or invalid. Run 'gitpr' in a terminal to re-authenticate.",
+                            provider=label,
+                        )
+                    ),
+                )
+            existing = None
+        except Exception:
+            existing = None
+
+        if existing is not None:
+            return PublishPrOutcome(
+                status="already_exists",
+                url=existing.url,
+                number=existing.number,
+                provider=provider.name,
+                source_branch=source_branch,
+                target_branch=existing.target_branch or target_branch,
+                message=__(
+                    "An open Pull Request already exists for branch '{branch}': {url}",
+                    branch=source_branch,
+                    url=existing.url,
+                ),
+            )
+
+        if _branch_needs_push(source_branch, repo_path=repo_path):
+            return PublishPrOutcome(
+                status="needs_push",
+                provider=provider.name,
+                source_branch=source_branch,
+                target_branch=target_branch,
+                message=__(
+                    "Branch '{branch}' has not been pushed to origin or has unpushed commits.",
+                    branch=source_branch,
+                ),
+            )
+
+    try:
+        result = provider.create_pull_request(
+            repo_ref,
+            PullRequestRequest(
+                title=clean_title,
+                description=clean_body,
+                source_branch=source_branch,
+                target_branch=target_branch,
+                draft=bool(draft),
+            ),
+        )
+    except ScmProviderError as exc:
+        masked_msg = mask_sensitive_text(exc.message)
+        if exc.http_status == 401:
+            return PublishPrOutcome(
+                status="auth_required",
+                provider=provider.name,
+                source_branch=source_branch,
+                target_branch=target_branch,
+                http_status=exc.http_status,
+                message=masked_msg,
+            )
+        lower_msg = masked_msg.lower()
+        if exc.http_status in (400, 409, 422) and "already exists" in lower_msg:
+            return PublishPrOutcome(
+                status="already_exists",
+                provider=provider.name,
+                source_branch=source_branch,
+                target_branch=target_branch,
+                http_status=exc.http_status,
+                message=masked_msg,
+            )
+        if exc.http_status in (400, 404, 422) and (
+            "head" in lower_msg or "source" in lower_msg or "branch" in lower_msg
+        ) and _branch_needs_push(source_branch, repo_path=repo_path):
+            return PublishPrOutcome(
+                status="needs_push",
+                provider=provider.name,
+                source_branch=source_branch,
+                target_branch=target_branch,
+                http_status=exc.http_status,
+                message=masked_msg,
+            )
+        return PublishPrOutcome(
+            status="error",
+            provider=provider.name,
+            source_branch=source_branch,
+            target_branch=target_branch,
+            http_status=exc.http_status,
+            message=masked_msg,
+        )
+    except Exception as exc:
+        return PublishPrOutcome(
+            status="error",
+            provider=provider.name,
+            source_branch=source_branch,
+            target_branch=target_branch,
+            http_status=0,
+            message=mask_sensitive_text(str(exc)),
+        )
+
+    return PublishPrOutcome(
+        status="success",
+        url=result.url,
+        number=result.number,
+        provider=provider.name,
+        source_branch=source_branch,
+        target_branch=target_branch,
+        http_status=201,
+        message=__(
+            "PR successfully created on {provider}: {pr_url}",
+            provider=label,
+            pr_url=result.url,
+        ),
+    )