From 5c128531243a63509451bf22691164ff43768a3b Mon Sep 17 00:00:00 2001
From: pseudo <cdodge@pseudoseed.com>
Date: Thu, 13 Aug 2026 22:27:13 -0600
Subject: [PATCH 01/15] chore(porch): bugfix-1455 init bugfix

---
 .../status.yaml                                    | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 codev/projects/bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml

diff --git a/codev/projects/bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml b/codev/projects/bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml
new file mode 100644
index 000000000..8d10e6c25
--- /dev/null
+++ b/codev/projects/bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml
@@ -0,0 +1,14 @@
+id: bugfix-1455
+title: pr-create-is-not-a-forge-conce
+protocol: bugfix
+phase: investigate
+plan_phases: []
+current_plan_phase: null
+gates:
+  pr:
+    status: pending
+iteration: 1
+build_complete: false
+history: []
+started_at: '2026-08-14T04:27:13.239Z'
+updated_at: '2026-08-14T04:27:13.241Z'

From 949d355986a3af0e37394b298b735c3d7cf8719e Mon Sep 17 00:00:00 2001
From: pseudo <cdodge@pseudoseed.com>
Date: Thu, 13 Aug 2026 22:34:29 -0600
Subject: [PATCH 02/15] chore(porch): bugfix-1455 init bugfix

---
 .../status.yaml                                    | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 codev/projects/bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml

diff --git a/codev/projects/bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml b/codev/projects/bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml
new file mode 100644
index 000000000..7819a8a8c
--- /dev/null
+++ b/codev/projects/bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml
@@ -0,0 +1,14 @@
+id: bugfix-1455
+title: pr-create-is-not-a-forge-conce
+protocol: bugfix
+phase: investigate
+plan_phases: []
+current_plan_phase: null
+gates:
+  pr:
+    status: pending
+iteration: 1
+build_complete: false
+history: []
+started_at: '2026-08-14T04:34:29.595Z'
+updated_at: '2026-08-14T04:34:29.596Z'

From a6bbaed6b91ece70e0c682c6fe948f78af1f07fa Mon Sep 17 00:00:00 2001
From: pseudo <cdodge@pseudoseed.com>
Date: Thu, 13 Aug 2026 22:53:12 -0600
Subject: [PATCH 03/15] chore(porch): bugfix-1455 fix phase-transition

---
 .../bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml    | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/codev/projects/bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml b/codev/projects/bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml
index 7819a8a8c..b88eaec54 100644
--- a/codev/projects/bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml
+++ b/codev/projects/bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml
@@ -1,7 +1,7 @@
 id: bugfix-1455
 title: pr-create-is-not-a-forge-conce
 protocol: bugfix
-phase: investigate
+phase: fix
 plan_phases: []
 current_plan_phase: null
 gates:
@@ -11,4 +11,4 @@ iteration: 1
 build_complete: false
 history: []
 started_at: '2026-08-14T04:34:29.595Z'
-updated_at: '2026-08-14T04:34:29.596Z'
+updated_at: '2026-08-14T04:53:12.811Z'

From 908a25c3d47c90ecae7a0b89c07fd3f6ff0658ca Mon Sep 17 00:00:00 2001
From: pseudo <cdodge@pseudoseed.com>
Date: Thu, 13 Aug 2026 23:35:52 -0600
Subject: [PATCH 04/15] [Bugfix #1455] Fix: route PR creation through a
 pr-create forge concept
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

`pr-create` was the one forge operation with no concept behind it. It was
absent from KNOWN_CONCEPTS, no provider shipped a script for it, and every
protocol prompt wrote `gh pr create` literally — so a project with
`forge.provider: gitea` fully configured still shelled out to `gh` at the
single most important write in the protocol, and only worked if someone kept
a `gh`→forge shim on PATH.

Contract (env in, JSON out — the shape every other concept uses, so it stays
callable from executeForgeCommand):
  in:  CODEV_PR_TITLE, CODEV_PR_BODY, and optional CODEV_PR_BASE / _HEAD /
       _REPO / _DRAFT
  out: {"number": <int>, "url": "<web url>"}

- scripts/forge/github/pr-create.sh — `gh pr create` with the flags it already
  took, so nothing changes for GitHub users.
- scripts/forge/gitea/pr-create.sh — `tea pulls create --description` (not
  `--body`), tea's rendered output pushed to stderr, and the new PR looked up
  via `tea pulls list --output json` instead of parsing that rendered view.
- scripts/forge/gitlab/pr-create.sh — `glab mr create`, marked UNVERIFIED
  (`glab` is not installed here); without it the gitlab preset falls through
  to `gh`, which is this bug.
- porch substitutes `{{pr_create_command}}` into phase prompts, mirroring the
  existing `pr-merge` injection, and falls back to "open the PR manually" when
  the concept is disabled.

Verified end to end against a live Forgejo with tea 0.14.2: the created PR's
body, read back from the server, is byte-identical to the input (428 bytes,
quotes/backticks/$VAR/backslash/fenced block all intact), and base, head and
title match. On 0.14.2 with a single login and an explicit --head, `tea pulls
create` needs no --repo/--login and does not prompt.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
---
 .claude/skills/forge/SKILL.md                 |   1 +
 .codex/skills/forge/SKILL.md                  |   1 +
 codev-skeleton/protocols/air/prompts/pr.md    |   7 +-
 .../protocols/aspir/prompts/review.md         |   7 +-
 codev-skeleton/protocols/bugfix/prompts/pr.md |   7 +-
 codev-skeleton/protocols/bugfix/protocol.md   |   3 +-
 .../protocols/maintain/prompts/review.md      |   7 +-
 .../protocols/pir/prompts/review.md           |  16 +-
 .../protocols/spir/prompts/review.md          |   7 +-
 codev/protocols/air/prompts/pr.md             |   7 +-
 codev/protocols/aspir/prompts/review.md       |   7 +-
 codev/protocols/bugfix/prompts/pr.md          |   7 +-
 codev/protocols/bugfix/protocol.md            |   3 +-
 codev/protocols/maintain/prompts/review.md    |   7 +-
 codev/protocols/pir/prompts/review.md         |  16 +-
 codev/protocols/spir/prompts/review.md        |   7 +-
 codev/resources/commands/forge.md             |   1 +
 codev/state/bugfix-1455_thread.md             | 121 +++++++++
 .../codev/scripts/forge/gitea/pr-create.sh    |  55 ++++
 .../codev/scripts/forge/github/pr-create.sh   |  39 +++
 .../codev/scripts/forge/gitlab/pr-create.sh   |  45 +++
 .../bugfix-1455-pr-create-concept.test.ts     | 256 ++++++++++++++++++
 .../bugfix-685-close-keyword.test.ts          |  12 +-
 packages/codev/src/__tests__/forge.test.ts    |   9 +-
 .../bugfix-1455-pr-create-prompt.test.ts      |  93 +++++++
 packages/codev/src/commands/porch/prompts.ts  |  17 +-
 packages/codev/src/lib/forge-contracts.ts     |  15 +
 packages/codev/src/lib/forge.ts               |   2 +-
 28 files changed, 729 insertions(+), 46 deletions(-)
 create mode 100644 codev/state/bugfix-1455_thread.md
 create mode 100755 packages/codev/scripts/forge/gitea/pr-create.sh
 create mode 100755 packages/codev/scripts/forge/github/pr-create.sh
 create mode 100755 packages/codev/scripts/forge/gitlab/pr-create.sh
 create mode 100644 packages/codev/src/__tests__/bugfix-1455-pr-create-concept.test.ts
 create mode 100644 packages/codev/src/commands/porch/__tests__/bugfix-1455-pr-create-prompt.test.ts

diff --git a/.claude/skills/forge/SKILL.md b/.claude/skills/forge/SKILL.md
index be2c2062f..f24b4ae37 100644
--- a/.claude/skills/forge/SKILL.md
+++ b/.claude/skills/forge/SKILL.md
@@ -16,6 +16,7 @@ Forge concept commands decouple codev from direct `gh` CLI calls. Each GitHub op
 | `user-identity` | — | Get current user's handle (plain text) |
 | `team-activity` | `CODEV_GRAPHQL_QUERY` | Run a batched GraphQL query |
 | `on-it-timestamps` | `CODEV_ISSUE_NUMBERS`, `CODEV_GRAPHQL_QUERY`, `CODEV_REPO_OWNER`, `CODEV_REPO_NAME` | Get "on it" comment timestamps |
+| `pr-create` | `CODEV_PR_TITLE`, `CODEV_PR_BODY`, `CODEV_PR_BASE` (optional), `CODEV_PR_HEAD` (optional), `CODEV_PR_REPO` (optional), `CODEV_PR_DRAFT` (optional) | Open a PR; prints `{"number", "url"}` |
 | `pr-merge` | `CODEV_PR_NUMBER` | Merge a PR |
 | `pr-search` | `CODEV_SEARCH_QUERY` | Search PRs (JSON array) |
 | `pr-view` | `CODEV_PR_NUMBER`, `CODEV_INCLUDE_COMMENTS` (optional) | View PR details (JSON or text) |
diff --git a/.codex/skills/forge/SKILL.md b/.codex/skills/forge/SKILL.md
index be2c2062f..f24b4ae37 100644
--- a/.codex/skills/forge/SKILL.md
+++ b/.codex/skills/forge/SKILL.md
@@ -16,6 +16,7 @@ Forge concept commands decouple codev from direct `gh` CLI calls. Each GitHub op
 | `user-identity` | — | Get current user's handle (plain text) |
 | `team-activity` | `CODEV_GRAPHQL_QUERY` | Run a batched GraphQL query |
 | `on-it-timestamps` | `CODEV_ISSUE_NUMBERS`, `CODEV_GRAPHQL_QUERY`, `CODEV_REPO_OWNER`, `CODEV_REPO_NAME` | Get "on it" comment timestamps |
+| `pr-create` | `CODEV_PR_TITLE`, `CODEV_PR_BODY`, `CODEV_PR_BASE` (optional), `CODEV_PR_HEAD` (optional), `CODEV_PR_REPO` (optional), `CODEV_PR_DRAFT` (optional) | Open a PR; prints `{"number", "url"}` |
 | `pr-merge` | `CODEV_PR_NUMBER` | Merge a PR |
 | `pr-search` | `CODEV_SEARCH_QUERY` | Search PRs (JSON array) |
 | `pr-view` | `CODEV_PR_NUMBER`, `CODEV_INCLUDE_COMMENTS` (optional) | View PR details (JSON or text) |
diff --git a/codev-skeleton/protocols/air/prompts/pr.md b/codev-skeleton/protocols/air/prompts/pr.md
index f9e4f7abe..ea2690092 100644
--- a/codev-skeleton/protocols/air/prompts/pr.md
+++ b/codev-skeleton/protocols/air/prompts/pr.md
@@ -18,7 +18,8 @@ Open the PR with the review embedded in its body, optionally run CMAP, and notif
 The body must carry `Closes #<N>` for the driving issue — one per issue if several — so GitHub auto-closes it on merge. **Exception:** a partial fix uses `Refs #<N>` or `Part of #<N>` instead. Substitute the real number for `<N>`; leave no `{{...}}` tag or `<N>` placeholder in the committed body.
 
 ```bash
-gh pr create --title "[Air #<N>] feat: <brief description>" --body "$(cat <<'EOF'
+CODEV_PR_TITLE="[Air #<N>] feat: <brief description>" \
+CODEV_PR_BODY="$(cat <<'EOF'
 ## Summary
 
 <1-2 sentence description of the feature>
@@ -43,9 +44,11 @@ Closes #<N>  <!-- Substitute <N>; use "Refs #<N>" for a partial fix -->
 
 <anything the reviewer should focus on, or "Standard implementation — no special concerns">
 EOF
-)"
+)" {{pr_create_command}}
 ```
 
+Porch substitutes `{{pr_create_command}}` with your forge's `pr-create` concept command (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
+
 ## Optional CMAP review
 
 CMAP is your judgement call for AIR. Skip it for simple changes (config, small UI); run it for features touching core logic or several modules:
diff --git a/codev-skeleton/protocols/aspir/prompts/review.md b/codev-skeleton/protocols/aspir/prompts/review.md
index fa2112549..ef8c82e59 100644
--- a/codev-skeleton/protocols/aspir/prompts/review.md
+++ b/codev-skeleton/protocols/aspir/prompts/review.md
@@ -44,7 +44,8 @@ The review's `## Architecture Updates` and `## Lessons Learned Updates` sections
 The PR body must carry `Closes #<N>` (feature) or `Fixes #<N>` (bug) for the driving issue — one keyword per issue if several — so GitHub auto-closes on merge. **Exception:** a PR that only partially addresses its issue uses `Refs #<N>` or `Part of #<N>` instead, leaving the issue open for the follow-up.
 
 ```bash
-gh pr create --title "[Spec {{project_id}}] {{title}}" --body "$(cat <<'EOF'
+CODEV_PR_TITLE="[Spec {{project_id}}] {{title}}" \
+CODEV_PR_BODY="$(cat <<'EOF'
 ## Summary
 [what was implemented]
 
@@ -62,9 +63,11 @@ codev/specs/{{artifact_name}}.md
 ## Review
 codev/reviews/{{artifact_name}}.md
 EOF
-)"
+)" {{pr_create_command}}
 ```
 
+Porch substitutes `{{pr_create_command}}` with your forge's `pr-create` concept command (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
+
 ## Signals
 
 - Review document complete:
diff --git a/codev-skeleton/protocols/bugfix/prompts/pr.md b/codev-skeleton/protocols/bugfix/prompts/pr.md
index 4dd89ff5c..0133573e1 100644
--- a/codev-skeleton/protocols/bugfix/prompts/pr.md
+++ b/codev-skeleton/protocols/bugfix/prompts/pr.md
@@ -16,7 +16,8 @@ Open the PR, run CMAP review on it, address feedback, and hand off to the archit
 The PR body must carry `Fixes #<N>` for the driving issue — one per issue if several — so GitHub auto-closes it on merge. **Exception:** a PR that only partially addresses the issue uses `Refs #<N>` or `Part of #<N>` instead, leaving it open for the follow-up. Substitute the real number for `<N>`; leave no `{{...}}` tag or `<N>` placeholder in the committed body.
 
 ```bash
-gh pr create --title "Fix #<N>: <brief description>" --body "$(cat <<'EOF'
+CODEV_PR_TITLE="Fix #<N>: <brief description>" \
+CODEV_PR_BODY="$(cat <<'EOF'
 ## Summary
 
 <1-2 sentence description of the bug and fix>
@@ -37,9 +38,11 @@ Fixes #<N>  <!-- Substitute <N>; use "Refs #<N>" for a partial fix -->
 - [ ] Build passes
 - [ ] All tests pass
 EOF
-)"
+)" {{pr_create_command}}
 ```
 
+Porch substitutes `{{pr_create_command}}` with your forge's `pr-create` concept command (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
+
 ## Run CMAP review
 
 BUGFIX runs its own 3-way consultation on the PR (porch does not do it for you). Dispatch all three in the background:
diff --git a/codev-skeleton/protocols/bugfix/protocol.md b/codev-skeleton/protocols/bugfix/protocol.md
index 5854a9434..c1462e87a 100644
--- a/codev-skeleton/protocols/bugfix/protocol.md
+++ b/codev-skeleton/protocols/bugfix/protocol.md
@@ -27,7 +27,8 @@ refactor surrounding code, fix unrelated bugs (file separate issues), or add fea
 [Bugfix #42] Test: regression for unencoded username
 ```
 
-**PR** — open with `gh pr create`, body carrying Summary, Root Cause, Fix and Test Plan plus
+**PR** — open with the `pr-create` forge concept command the PR-phase prompt hands you (`gh
+pr create` on GitHub), body carrying Summary, Root Cause, Fix and Test Plan plus
 `Fixes #<N>` so the issue closes on merge. Run one CMAP pass (Gemini, Codex, Claude), record
 each verdict, and address or rebut every `REQUEST_CHANGES`. Notify the architect with the
 verdicts, then `porch done <id>` and wait.
diff --git a/codev-skeleton/protocols/maintain/prompts/review.md b/codev-skeleton/protocols/maintain/prompts/review.md
index c61e05fd5..5cf345a83 100644
--- a/codev-skeleton/protocols/maintain/prompts/review.md
+++ b/codev-skeleton/protocols/maintain/prompts/review.md
@@ -46,7 +46,8 @@ If the run was not tied to any issue, the `Closes` line can be omitted.
 ```bash
 git push origin HEAD
 
-gh pr create --title "[Maintain] Codebase maintenance run NNNN" --body "$(cat <<'PREOF'
+CODEV_PR_TITLE="[Maintain] Codebase maintenance run NNNN" \
+CODEV_PR_BODY="$(cat <<'PREOF'
 ## Summary
 
 <2-3 bullet points of what was done>
@@ -66,9 +67,11 @@ Closes #<N>  <!-- Only if this run was triggered by a GitHub issue. Use "Refs #<
 - [x] All tests pass
 - [x] Documentation links resolve
 PREOF
-)"
+)" {{pr_create_command}}
 ```
 
+Porch substitutes `{{pr_create_command}}` with your forge's `pr-create` concept command (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
+
 ## Signals
 
 When PR is created:
diff --git a/codev-skeleton/protocols/pir/prompts/review.md b/codev-skeleton/protocols/pir/prompts/review.md
index 3966f7b79..d838f499c 100644
--- a/codev-skeleton/protocols/pir/prompts/review.md
+++ b/codev-skeleton/protocols/pir/prompts/review.md
@@ -108,13 +108,15 @@ git push
 PR_TITLE="<concise description of the change>"
 BRANCH="$(git branch --show-current)"
 
-gh pr create \
-  --base main \
-  --head "$BRANCH" \
-  --title "$PR_TITLE" \
-  --body-file codev/reviews/{{artifact_name}}.md
+CODEV_PR_TITLE="$PR_TITLE" \
+CODEV_PR_BODY="$(cat codev/reviews/{{artifact_name}}.md)" \
+CODEV_PR_BASE=main \
+CODEV_PR_HEAD="$BRANCH" \
+{{pr_create_command}}
 ```
 
+Porch substitutes `{{pr_create_command}}` with your forge's `pr-create` concept command (`gh pr create` by default) and it prints `{"number": <int>, "url": "<url>"}`. The body goes in as an environment variable, not `--body-file` — read the created PR back and confirm the body arrived intact before moving on.
+
 **Verify the PR body contains `Fixes #{{issue.number}}`** (it should — the review file has it at the top). If somehow missing, edit and re-apply:
 
 ```bash
@@ -154,7 +156,7 @@ For any `REQUEST_CHANGES`:
 
 1. Read the finding in full (`codev/projects/{{project_id}}-*/{{project_id}}-<model>.txt`).
 2. **Assess it honestly:**
-   - **Real defect** (correctness / cancellation / security / data-loss): fix it in code, add a regression test that fails without the fix, commit + push (the PR updates automatically — no new `gh pr create`). Then document the finding, your fix, and the pinning test in the review file's **"Things to Look At During PR Review"** section.
+   - **Real defect** (correctness / cancellation / security / data-loss): fix it in code, add a regression test that fails without the fix, commit + push (the PR updates automatically — no second PR). Then document the finding, your fix, and the pinning test in the review file's **"Things to Look At During PR Review"** section.
    - **False positive / out of scope**: write a brief rebuttal in that same section explaining why no change is warranted.
 3. Do **not** re-run `porch done` expecting another consultation pass — `max_iterations: 1` means it will not re-review. Proceed to step 7.
 
@@ -257,7 +259,7 @@ Together with the `--pr` record from step 4a and the `--merged` record from step
   ```
 - Resolve conflicts (do NOT use destructive shortcuts)
 - Force-push with lease: `git push --force-with-lease`
-- Re-run `gh pr create`
+- Re-run the PR creation command from step 4
 
 **If porch's consultation fails (e.g., model unavailable):**
 - `porch done` will report the failure. Inspect `codev/projects/{{project_id}}-*/{{project_id}}-<model>.txt` for the failure details.
diff --git a/codev-skeleton/protocols/spir/prompts/review.md b/codev-skeleton/protocols/spir/prompts/review.md
index b08cea345..574db63a9 100644
--- a/codev-skeleton/protocols/spir/prompts/review.md
+++ b/codev-skeleton/protocols/spir/prompts/review.md
@@ -44,7 +44,8 @@ The review's `## Architecture Updates` and `## Lessons Learned Updates` sections
 The PR body must carry `Closes #<N>` (feature) or `Fixes #<N>` (bug) for the driving issue — one keyword per issue if several — so GitHub auto-closes on merge. **Exception:** a PR that only partially addresses its issue uses `Refs #<N>` or `Part of #<N>` instead, leaving the issue open for the follow-up.
 
 ```bash
-gh pr create --title "[Spec {{project_id}}] {{title}}" --body "$(cat <<'EOF'
+CODEV_PR_TITLE="[Spec {{project_id}}] {{title}}" \
+CODEV_PR_BODY="$(cat <<'EOF'
 ## Summary
 [what was implemented]
 
@@ -62,9 +63,11 @@ codev/specs/{{artifact_name}}.md
 ## Review
 codev/reviews/{{artifact_name}}.md
 EOF
-)"
+)" {{pr_create_command}}
 ```
 
+Porch substitutes `{{pr_create_command}}` with your forge's `pr-create` concept command (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
+
 ## Signals
 
 - Review document complete:
diff --git a/codev/protocols/air/prompts/pr.md b/codev/protocols/air/prompts/pr.md
index f9e4f7abe..ea2690092 100644
--- a/codev/protocols/air/prompts/pr.md
+++ b/codev/protocols/air/prompts/pr.md
@@ -18,7 +18,8 @@ Open the PR with the review embedded in its body, optionally run CMAP, and notif
 The body must carry `Closes #<N>` for the driving issue — one per issue if several — so GitHub auto-closes it on merge. **Exception:** a partial fix uses `Refs #<N>` or `Part of #<N>` instead. Substitute the real number for `<N>`; leave no `{{...}}` tag or `<N>` placeholder in the committed body.
 
 ```bash
-gh pr create --title "[Air #<N>] feat: <brief description>" --body "$(cat <<'EOF'
+CODEV_PR_TITLE="[Air #<N>] feat: <brief description>" \
+CODEV_PR_BODY="$(cat <<'EOF'
 ## Summary
 
 <1-2 sentence description of the feature>
@@ -43,9 +44,11 @@ Closes #<N>  <!-- Substitute <N>; use "Refs #<N>" for a partial fix -->
 
 <anything the reviewer should focus on, or "Standard implementation — no special concerns">
 EOF
-)"
+)" {{pr_create_command}}
 ```
 
+Porch substitutes `{{pr_create_command}}` with your forge's `pr-create` concept command (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
+
 ## Optional CMAP review
 
 CMAP is your judgement call for AIR. Skip it for simple changes (config, small UI); run it for features touching core logic or several modules:
diff --git a/codev/protocols/aspir/prompts/review.md b/codev/protocols/aspir/prompts/review.md
index fa2112549..ef8c82e59 100644
--- a/codev/protocols/aspir/prompts/review.md
+++ b/codev/protocols/aspir/prompts/review.md
@@ -44,7 +44,8 @@ The review's `## Architecture Updates` and `## Lessons Learned Updates` sections
 The PR body must carry `Closes #<N>` (feature) or `Fixes #<N>` (bug) for the driving issue — one keyword per issue if several — so GitHub auto-closes on merge. **Exception:** a PR that only partially addresses its issue uses `Refs #<N>` or `Part of #<N>` instead, leaving the issue open for the follow-up.
 
 ```bash
-gh pr create --title "[Spec {{project_id}}] {{title}}" --body "$(cat <<'EOF'
+CODEV_PR_TITLE="[Spec {{project_id}}] {{title}}" \
+CODEV_PR_BODY="$(cat <<'EOF'
 ## Summary
 [what was implemented]
 
@@ -62,9 +63,11 @@ codev/specs/{{artifact_name}}.md
 ## Review
 codev/reviews/{{artifact_name}}.md
 EOF
-)"
+)" {{pr_create_command}}
 ```
 
+Porch substitutes `{{pr_create_command}}` with your forge's `pr-create` concept command (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
+
 ## Signals
 
 - Review document complete:
diff --git a/codev/protocols/bugfix/prompts/pr.md b/codev/protocols/bugfix/prompts/pr.md
index 4dd89ff5c..0133573e1 100644
--- a/codev/protocols/bugfix/prompts/pr.md
+++ b/codev/protocols/bugfix/prompts/pr.md
@@ -16,7 +16,8 @@ Open the PR, run CMAP review on it, address feedback, and hand off to the archit
 The PR body must carry `Fixes #<N>` for the driving issue — one per issue if several — so GitHub auto-closes it on merge. **Exception:** a PR that only partially addresses the issue uses `Refs #<N>` or `Part of #<N>` instead, leaving it open for the follow-up. Substitute the real number for `<N>`; leave no `{{...}}` tag or `<N>` placeholder in the committed body.
 
 ```bash
-gh pr create --title "Fix #<N>: <brief description>" --body "$(cat <<'EOF'
+CODEV_PR_TITLE="Fix #<N>: <brief description>" \
+CODEV_PR_BODY="$(cat <<'EOF'
 ## Summary
 
 <1-2 sentence description of the bug and fix>
@@ -37,9 +38,11 @@ Fixes #<N>  <!-- Substitute <N>; use "Refs #<N>" for a partial fix -->
 - [ ] Build passes
 - [ ] All tests pass
 EOF
-)"
+)" {{pr_create_command}}
 ```
 
+Porch substitutes `{{pr_create_command}}` with your forge's `pr-create` concept command (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
+
 ## Run CMAP review
 
 BUGFIX runs its own 3-way consultation on the PR (porch does not do it for you). Dispatch all three in the background:
diff --git a/codev/protocols/bugfix/protocol.md b/codev/protocols/bugfix/protocol.md
index 5854a9434..c1462e87a 100644
--- a/codev/protocols/bugfix/protocol.md
+++ b/codev/protocols/bugfix/protocol.md
@@ -27,7 +27,8 @@ refactor surrounding code, fix unrelated bugs (file separate issues), or add fea
 [Bugfix #42] Test: regression for unencoded username
 ```
 
-**PR** — open with `gh pr create`, body carrying Summary, Root Cause, Fix and Test Plan plus
+**PR** — open with the `pr-create` forge concept command the PR-phase prompt hands you (`gh
+pr create` on GitHub), body carrying Summary, Root Cause, Fix and Test Plan plus
 `Fixes #<N>` so the issue closes on merge. Run one CMAP pass (Gemini, Codex, Claude), record
 each verdict, and address or rebut every `REQUEST_CHANGES`. Notify the architect with the
 verdicts, then `porch done <id>` and wait.
diff --git a/codev/protocols/maintain/prompts/review.md b/codev/protocols/maintain/prompts/review.md
index c61e05fd5..5cf345a83 100644
--- a/codev/protocols/maintain/prompts/review.md
+++ b/codev/protocols/maintain/prompts/review.md
@@ -46,7 +46,8 @@ If the run was not tied to any issue, the `Closes` line can be omitted.
 ```bash
 git push origin HEAD
 
-gh pr create --title "[Maintain] Codebase maintenance run NNNN" --body "$(cat <<'PREOF'
+CODEV_PR_TITLE="[Maintain] Codebase maintenance run NNNN" \
+CODEV_PR_BODY="$(cat <<'PREOF'
 ## Summary
 
 <2-3 bullet points of what was done>
@@ -66,9 +67,11 @@ Closes #<N>  <!-- Only if this run was triggered by a GitHub issue. Use "Refs #<
 - [x] All tests pass
 - [x] Documentation links resolve
 PREOF
-)"
+)" {{pr_create_command}}
 ```
 
+Porch substitutes `{{pr_create_command}}` with your forge's `pr-create` concept command (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
+
 ## Signals
 
 When PR is created:
diff --git a/codev/protocols/pir/prompts/review.md b/codev/protocols/pir/prompts/review.md
index 3966f7b79..d838f499c 100644
--- a/codev/protocols/pir/prompts/review.md
+++ b/codev/protocols/pir/prompts/review.md
@@ -108,13 +108,15 @@ git push
 PR_TITLE="<concise description of the change>"
 BRANCH="$(git branch --show-current)"
 
-gh pr create \
-  --base main \
-  --head "$BRANCH" \
-  --title "$PR_TITLE" \
-  --body-file codev/reviews/{{artifact_name}}.md
+CODEV_PR_TITLE="$PR_TITLE" \
+CODEV_PR_BODY="$(cat codev/reviews/{{artifact_name}}.md)" \
+CODEV_PR_BASE=main \
+CODEV_PR_HEAD="$BRANCH" \
+{{pr_create_command}}
 ```
 
+Porch substitutes `{{pr_create_command}}` with your forge's `pr-create` concept command (`gh pr create` by default) and it prints `{"number": <int>, "url": "<url>"}`. The body goes in as an environment variable, not `--body-file` — read the created PR back and confirm the body arrived intact before moving on.
+
 **Verify the PR body contains `Fixes #{{issue.number}}`** (it should — the review file has it at the top). If somehow missing, edit and re-apply:
 
 ```bash
@@ -154,7 +156,7 @@ For any `REQUEST_CHANGES`:
 
 1. Read the finding in full (`codev/projects/{{project_id}}-*/{{project_id}}-<model>.txt`).
 2. **Assess it honestly:**
-   - **Real defect** (correctness / cancellation / security / data-loss): fix it in code, add a regression test that fails without the fix, commit + push (the PR updates automatically — no new `gh pr create`). Then document the finding, your fix, and the pinning test in the review file's **"Things to Look At During PR Review"** section.
+   - **Real defect** (correctness / cancellation / security / data-loss): fix it in code, add a regression test that fails without the fix, commit + push (the PR updates automatically — no second PR). Then document the finding, your fix, and the pinning test in the review file's **"Things to Look At During PR Review"** section.
    - **False positive / out of scope**: write a brief rebuttal in that same section explaining why no change is warranted.
 3. Do **not** re-run `porch done` expecting another consultation pass — `max_iterations: 1` means it will not re-review. Proceed to step 7.
 
@@ -257,7 +259,7 @@ Together with the `--pr` record from step 4a and the `--merged` record from step
   ```
 - Resolve conflicts (do NOT use destructive shortcuts)
 - Force-push with lease: `git push --force-with-lease`
-- Re-run `gh pr create`
+- Re-run the PR creation command from step 4
 
 **If porch's consultation fails (e.g., model unavailable):**
 - `porch done` will report the failure. Inspect `codev/projects/{{project_id}}-*/{{project_id}}-<model>.txt` for the failure details.
diff --git a/codev/protocols/spir/prompts/review.md b/codev/protocols/spir/prompts/review.md
index b08cea345..574db63a9 100644
--- a/codev/protocols/spir/prompts/review.md
+++ b/codev/protocols/spir/prompts/review.md
@@ -44,7 +44,8 @@ The review's `## Architecture Updates` and `## Lessons Learned Updates` sections
 The PR body must carry `Closes #<N>` (feature) or `Fixes #<N>` (bug) for the driving issue — one keyword per issue if several — so GitHub auto-closes on merge. **Exception:** a PR that only partially addresses its issue uses `Refs #<N>` or `Part of #<N>` instead, leaving the issue open for the follow-up.
 
 ```bash
-gh pr create --title "[Spec {{project_id}}] {{title}}" --body "$(cat <<'EOF'
+CODEV_PR_TITLE="[Spec {{project_id}}] {{title}}" \
+CODEV_PR_BODY="$(cat <<'EOF'
 ## Summary
 [what was implemented]
 
@@ -62,9 +63,11 @@ codev/specs/{{artifact_name}}.md
 ## Review
 codev/reviews/{{artifact_name}}.md
 EOF
-)"
+)" {{pr_create_command}}
 ```
 
+Porch substitutes `{{pr_create_command}}` with your forge's `pr-create` concept command (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
+
 ## Signals
 
 - Review document complete:
diff --git a/codev/resources/commands/forge.md b/codev/resources/commands/forge.md
index 478c2db0e..f449a0bea 100644
--- a/codev/resources/commands/forge.md
+++ b/codev/resources/commands/forge.md
@@ -70,6 +70,7 @@ Set a concept to `null` to disable it. The feature that uses it will gracefully
 | `issue-list` | — | JSON array | List issues |
 | `issue-comment` | `CODEV_ISSUE_ID`, `CODEV_COMMENT_BODY` | — | Post issue comment |
 | `pr-exists` | `CODEV_BRANCH_NAME` | truthy/falsy | Check if PR exists for branch |
+| `pr-create` | `CODEV_PR_TITLE`, `CODEV_PR_BODY`, `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO`, `CODEV_PR_DRAFT` | JSON `{number, url}` | Open a PR (title + body required, rest optional) |
 | `pr-merge` | `CODEV_PR_NUMBER` | — | Merge a PR |
 | `pr-search` | `CODEV_SEARCH_QUERY` | JSON array | Search PRs |
 | `pr-view` | `CODEV_PR_NUMBER`, `CODEV_INCLUDE_COMMENTS` | JSON or text | View PR details |
diff --git a/codev/state/bugfix-1455_thread.md b/codev/state/bugfix-1455_thread.md
new file mode 100644
index 000000000..07e401aec
--- /dev/null
+++ b/codev/state/bugfix-1455_thread.md
@@ -0,0 +1,121 @@
+# bugfix-1455 — `pr-create` is not a forge concept
+
+Issue #1455. BUGFIX protocol, strict mode. Upstream contribution: origin is the fork
+`pseudoseed/codev`, PR targets `cluesmith/codev`.
+
+## Environment notes (from the architect briefing)
+
+- `command -v gh` → `/Users/chris/dev/codev-1455/.local/bin/gh` (verified). A bare `gh` on this
+  machine would hit a Forgejo shim injected on PATH by `~/.zshrc`; the repo-local passthrough
+  wins. Re-verify before trusting any `gh` output.
+- `tea` 0.14.2 installed, one configured login (`pseudoseed` → https://git.pseudoseed.com,
+  default). The gitea script can and will be tested end to end against live Forgejo.
+- `.local/` is in `.git/info/exclude`; `.codev/config.json` is gitignored. Diff must contain
+  only the fix.
+
+## Investigate phase — findings
+
+**Reproduced** (temporary vitest harness against `src/lib/forge.ts`, since removed):
+
+```
+concepts: issue-view, pr-list, issue-list, issue-search, issue-comment, pr-exists,
+          recently-closed, recently-merged, user-identity, team-activity,
+          on-it-timestamps, pr-merge, pr-search, pr-view, pr-diff, auth-status, repo-archive
+gitea pr-merge : .../scripts/forge/gitea/pr-merge.sh
+gitea pr-create: null          <-- unroutable, even with provider fully configured
+```
+
+**Root cause**, four linked gaps:
+
+1. `packages/codev/src/lib/forge.ts:64` — `KNOWN_CONCEPTS` has no `pr-create`. Everything else
+   is derived from that list: `getDefaultCommands()`, `buildPresetFromScripts()`,
+   `resolveAllConcepts()` (doctor), and `validateForgeConfig()`. So `getForgeCommand('pr-create')`
+   returns `null` for every provider, and a hand-written `forge["pr-create"]` override is
+   reported by `codev doctor` as an *unknown concept* — and is never read by anything.
+2. `packages/codev/scripts/forge/{github,gitea,gitlab}/` — no `pr-create.sh` exists.
+3. Prompts hardcode `gh pr create` in 14 files (7 per tree):
+   `{codev,codev-skeleton}/protocols/{air/prompts/pr.md, aspir/prompts/review.md,
+   bugfix/prompts/pr.md, bugfix/protocol.md, maintain/prompts/review.md,
+   pir/prompts/review.md, spir/prompts/review.md}`.
+   (The issue's file list names `codev-skeleton/porch/prompts/*` — that directory does not
+   exist; the real locations are the protocol prompt dirs above.)
+4. Nothing injects a resolved `pr-create` command into a phase prompt. The precedent for doing
+   so exists for `pr-merge`: `packages/codev/src/commands/porch/next.ts:227` and `:768` resolve
+   the concept and paste the command string into the task description.
+
+**Why it's invisible until the PR phase**: reads and `pr-merge` route correctly, so a Gitea
+project looks fully configured right up to the one write that matters.
+
+## Contract decision (the part the maintainer asked to agree on)
+
+Going with the **env-var + JSON-stdout** shape, matching every other concept rather than an
+argv passthrough:
+
+- Inputs: `CODEV_PR_TITLE` (required), `CODEV_PR_BODY` (required, may be empty),
+  `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO`, `CODEV_PR_DRAFT` (all optional).
+- Output: `{"number": <int>, "url": "<web url>"}` on stdout; non-zero exit on failure.
+
+Rationale: `executeForgeCommand()` passes inputs as `CODEV_*` env and parses stdout as JSON. An
+argv-passthrough (`<cmd> --title … --body …`) would be unusable from TypeScript and would make
+`pr-create` the only concept with its own calling convention. Will be argued in the PR body.
+
+Prompt side: porch substitutes a `{{pr_create_command}}` template variable, same idea as the
+`pr-merge` injection. Prose mentions of `gh pr create` (protocol.md files) get reworded
+forge-neutrally.
+
+## Constraints found
+
+- `packages/codev/src/__tests__/bugfix-685-close-keyword.test.ts` pins the PR-body heredoc shape
+  `--body "$(cat <<'EOF' … EOF)"` in 5 prompts, and pins codev↔codev-skeleton byte-identity for
+  6 prompts. Changing the invocation means updating that guard's regex — deliberately, not
+  incidentally.
+- Docs carrying the concept table: `codev/resources/commands/forge.md`, plus the byte-identical
+  pair `.claude/skills/forge/SKILL.md` and `.codex/skills/forge/SKILL.md`. The skeleton ships no
+  forge skill, so nothing to mirror there.
+
+Scope fits BUGFIX: ~1 line in `forge.ts`, 3 shell scripts, ~25 lines of porch/prompt plumbing,
+small edits to 14 prompts + 3 docs, plus regression tests.
+
+## Fix phase — what shipped
+
+- `forge.ts`: `pr-create` added to `KNOWN_CONCEPTS` (one line — everything else derives from it).
+- `forge-contracts.ts`: `PrCreateResult` documents the env-var inputs and `{number, url}` output.
+- `scripts/forge/{github,gitea,gitlab}/pr-create.sh`. GitHub is `gh pr create` with the flags it
+  already took. Gitea uses `--description` (not `--body`), sends tea's rendered output to stderr,
+  and looks the new PR up with `tea pulls list --fields index,url,head --output json` rather than
+  parsing that rendered view. GitLab is marked ⚠️ UNVERIFIED (`glab` is not installed here) —
+  included anyway because without it the gitlab preset falls through to `gh`, which is the bug.
+- `porch/prompts.ts`: `{{pr_create_command}}` template variable, resolved per project config,
+  falling back to "open the PR manually" when the concept is disabled.
+- 14 prompt files across both trees now use
+  `CODEV_PR_TITLE=… CODEV_PR_BODY="$(cat <<'EOF' … EOF)" {{pr_create_command}}`.
+  PIR switched off `--body-file` (its body is `$(cat codev/reviews/…)` now).
+- Docs: `codev/resources/commands/forge.md` + the `.claude`/`.codex` forge SKILL.md pair.
+- `bugfix-685-close-keyword.test.ts`: the body-template regex now accepts `CODEV_PR_BODY=` as
+  well as `--body`; guard intent unchanged.
+
+### Live Forgejo E2E (tea 0.14.2, git.pseudoseed.com/pseudoseed/research)
+
+Three scratch PRs, all closed and their branches deleted afterwards:
+
+- PR #15 — explicit `CODEV_PR_BASE`/`CODEV_PR_HEAD`. Script printed
+  `{"number":15,"url":"https://git.pseudoseed.com/pseudoseed/research/pulls/15"}` and nothing
+  else on stdout. Body read **back from the server** via the REST API: 428 bytes sent, 428
+  received, byte-identical — quotes, backticks, `$VAR`, `\backslash`, fenced block, checkboxes,
+  em dash all intact. Server-side `base`/`head`/`title` matched the inputs.
+- PR #16 — no `CODEV_PR_HEAD`: the `git rev-parse --abbrev-ref HEAD` default and tea's own base
+  default both resolved correctly.
+- Answering the issue's open question: on tea **0.14.2** with a single configured login and an
+  explicit `--head`, `tea pulls create` needs no `--repo`/`--login` and does not prompt.
+  Both are still forwarded when set.
+
+### Pre-existing gitea bugs found while testing (NOT fixed here — #1137/#1146 territory)
+
+- `tea pulls view <n> --output json` ignores `<n>` and dumps a list of all pulls, so
+  `gitea/pr-view.sh`'s `jq '.url = …'` gets an array.
+- `tea pulls list` rejects `--fields description`, so `gitea/pr-list.sh`'s `description -> body`
+  mapping cannot populate.
+- `tea pulls list --output json` gives `head` as a plain branch string, but
+  `gitea/pr-exists.sh` filters on `.head.ref`.
+- `gh pr edit --body-file` is still hardcoded in `pir/prompts/review.md` — `pr-edit` is not a
+  concept and adding one is outside this issue.
diff --git a/packages/codev/scripts/forge/gitea/pr-create.sh b/packages/codev/scripts/forge/gitea/pr-create.sh
new file mode 100755
index 000000000..b603a8577
--- /dev/null
+++ b/packages/codev/scripts/forge/gitea/pr-create.sh
@@ -0,0 +1,55 @@
+#!/bin/sh
+# Forge concept: pr-create (Gitea/Forgejo via tea CLI)
+#
+# Input:  CODEV_PR_TITLE (required)
+#         CODEV_PR_BODY  (required, may be empty)
+#         CODEV_PR_BASE, CODEV_PR_HEAD, CODEV_PR_REPO, CODEV_PR_DRAFT (optional)
+# Output: {"number": <int>, "url": "<web url>"}
+#
+# `tea pulls create` takes the body as --description (not --body) and prints a
+# rendered, line-wrapped, ANSI-decorated view of the new PR — not something to
+# parse. Its whole output is sent to stderr and the created PR is then looked up
+# by head branch via `tea pulls list`, whose `--output json` carries `index`,
+# `url` (the browser URL) and `head` (a plain branch-name string).
+#
+# Verified against tea 0.14.2 + Forgejo: with a single configured login and an
+# explicit --head, `tea pulls create` neither prompts nor needs --repo/--login
+# (it autodetects from the git remote). Both are still forwarded when set, for
+# multi-login hosts and for the tea 0.11.x autodetect prompt (#1146).
+set -e
+
+if [ -z "$CODEV_PR_TITLE" ]; then
+  echo "pr-create: CODEV_PR_TITLE is required" >&2
+  exit 2
+fi
+
+head=$CODEV_PR_HEAD
+if [ -z "$head" ]; then
+  head=$(git rev-parse --abbrev-ref HEAD)
+fi
+
+set -- --title "$CODEV_PR_TITLE" --description "$CODEV_PR_BODY" --head "$head"
+if [ -n "$CODEV_PR_BASE" ]; then set -- "$@" --base "$CODEV_PR_BASE"; fi
+if [ -n "$CODEV_PR_REPO" ]; then set -- "$@" --repo "$CODEV_PR_REPO"; fi
+if [ -n "$CODEV_PR_LOGIN" ]; then set -- "$@" --login "$CODEV_PR_LOGIN"; fi
+if [ "$CODEV_PR_DRAFT" = "1" ]; then set -- "$@" --draft; fi
+
+tea pulls create "$@" >&2
+
+# Look the PR up by head branch. A cross-repo head is "<user>:<branch>" on the
+# way in but lists as the bare branch name, so match either form.
+set -- --state open --fields index,url,head --output json
+if [ -n "$CODEV_PR_REPO" ]; then set -- "$@" --repo "$CODEV_PR_REPO"; fi
+if [ -n "$CODEV_PR_LOGIN" ]; then set -- "$@" --login "$CODEV_PR_LOGIN"; fi
+
+result=$(tea pulls list "$@" | jq -c --arg head "${head#*:}" '
+  [ .[] | select((.head | sub("^[^:]*:"; "")) == $head) ]
+  | max_by(.index | tonumber)
+  | if . == null then null else {number: (.index | tonumber), url} end')
+
+if [ -z "$result" ] || [ "$result" = "null" ]; then
+  echo "pr-create: created the PR but could not find an open pull for head '$head'" >&2
+  exit 1
+fi
+
+printf '%s\n' "$result"
diff --git a/packages/codev/scripts/forge/github/pr-create.sh b/packages/codev/scripts/forge/github/pr-create.sh
new file mode 100755
index 000000000..9426e549a
--- /dev/null
+++ b/packages/codev/scripts/forge/github/pr-create.sh
@@ -0,0 +1,39 @@
+#!/bin/sh
+# Forge concept: pr-create (GitHub via gh CLI)
+#
+# Input:  CODEV_PR_TITLE (required)
+#         CODEV_PR_BODY  (required, may be empty)
+#         CODEV_PR_BASE, CODEV_PR_HEAD, CODEV_PR_REPO, CODEV_PR_DRAFT (optional)
+# Output: {"number": <int>, "url": "<web url>"}
+#
+# `gh pr create` prints the new PR's URL on stdout; the number is its last path
+# segment. Anything gh writes that isn't a URL (hints, prompts) is ignored.
+set -e
+
+if [ -z "$CODEV_PR_TITLE" ]; then
+  echo "pr-create: CODEV_PR_TITLE is required" >&2
+  exit 2
+fi
+
+set -- --title "$CODEV_PR_TITLE" --body "$CODEV_PR_BODY"
+if [ -n "$CODEV_PR_BASE" ]; then set -- "$@" --base "$CODEV_PR_BASE"; fi
+if [ -n "$CODEV_PR_HEAD" ]; then set -- "$@" --head "$CODEV_PR_HEAD"; fi
+if [ -n "$CODEV_PR_REPO" ]; then set -- "$@" --repo "$CODEV_PR_REPO"; fi
+if [ "$CODEV_PR_DRAFT" = "1" ]; then set -- "$@" --draft; fi
+
+url=$(gh pr create "$@" | grep -E '^https?://' | tail -n 1)
+
+if [ -z "$url" ]; then
+  echo "pr-create: gh pr create returned no PR URL" >&2
+  exit 1
+fi
+
+number=${url##*/}
+case "$number" in
+  '' | *[!0-9]*)
+    echo "pr-create: could not parse a PR number from '$url'" >&2
+    exit 1
+    ;;
+esac
+
+printf '{"number":%s,"url":"%s"}\n' "$number" "$url"
diff --git a/packages/codev/scripts/forge/gitlab/pr-create.sh b/packages/codev/scripts/forge/gitlab/pr-create.sh
new file mode 100755
index 000000000..b3072a438
--- /dev/null
+++ b/packages/codev/scripts/forge/gitlab/pr-create.sh
@@ -0,0 +1,45 @@
+#!/bin/sh
+# Forge concept: pr-create (GitLab via glab CLI — merge requests)
+#
+# Input:  CODEV_PR_TITLE (required)
+#         CODEV_PR_BODY  (required, may be empty)
+#         CODEV_PR_BASE, CODEV_PR_HEAD, CODEV_PR_REPO, CODEV_PR_DRAFT (optional)
+# Output: {"number": <int>, "url": "<web url>"}
+#
+# ⚠️ UNVERIFIED — `glab` is not available in the authoring environment (same
+#    constraint as gitea/issue-search.sh, #920). Written against glab's
+#    documented `mr create` flags; smoke-test before relying on it. Without this
+#    file the gitlab preset would fall through to the GitHub default and shell
+#    out to `gh` — the bug this concept exists to close (#1455).
+#
+# `glab mr create --yes` skips the interactive prompts and prints the new MR's
+# URL; the number (GitLab's `iid`) is its last path segment.
+set -e
+
+if [ -z "$CODEV_PR_TITLE" ]; then
+  echo "pr-create: CODEV_PR_TITLE is required" >&2
+  exit 2
+fi
+
+set -- --title "$CODEV_PR_TITLE" --description "$CODEV_PR_BODY" --yes
+if [ -n "$CODEV_PR_BASE" ]; then set -- "$@" --target-branch "$CODEV_PR_BASE"; fi
+if [ -n "$CODEV_PR_HEAD" ]; then set -- "$@" --source-branch "$CODEV_PR_HEAD"; fi
+if [ -n "$CODEV_PR_REPO" ]; then set -- "$@" --repo "$CODEV_PR_REPO"; fi
+if [ "$CODEV_PR_DRAFT" = "1" ]; then set -- "$@" --draft; fi
+
+url=$(glab mr create "$@" | grep -E '^https?://' | tail -n 1)
+
+if [ -z "$url" ]; then
+  echo "pr-create: glab mr create returned no MR URL" >&2
+  exit 1
+fi
+
+number=${url##*/}
+case "$number" in
+  '' | *[!0-9]*)
+    echo "pr-create: could not parse an MR number from '$url'" >&2
+    exit 1
+    ;;
+esac
+
+printf '{"number":%s,"url":"%s"}\n' "$number" "$url"
diff --git a/packages/codev/src/__tests__/bugfix-1455-pr-create-concept.test.ts b/packages/codev/src/__tests__/bugfix-1455-pr-create-concept.test.ts
new file mode 100644
index 000000000..16bfae2ad
--- /dev/null
+++ b/packages/codev/src/__tests__/bugfix-1455-pr-create-concept.test.ts
@@ -0,0 +1,256 @@
+/**
+ * Regression test for GitHub Issue #1455.
+ *
+ * `pr-create` was not a forge concept: it was absent from KNOWN_CONCEPTS, no
+ * provider shipped a script for it, and every protocol prompt wrote `gh pr
+ * create` literally. A project with `forge.provider: gitea` fully configured
+ * still shelled out to `gh` at the single most important write in the protocol,
+ * so PR creation only worked with a hand-maintained `gh`→forge shim on PATH.
+ *
+ * These tests pin all three halves of the fix:
+ *   1. the concept resolves per provider (dispatcher + on-disk scripts),
+ *   2. the scripts honour the contract — inputs as CODEV_* env, output as
+ *      `{"number","url"}` — and carry the body through **byte for byte**
+ *      (a shim that silently dropped the body exited 0 for months), and
+ *   3. no prompt hardcodes `gh pr create` any more; they carry the
+ *      `{{pr_create_command}}` token porch substitutes.
+ */
+
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import { execFileSync } from 'node:child_process';
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import {
+  getKnownConcepts,
+  getForgeCommand,
+  validateForgeConfig,
+} from '../lib/forge.js';
+
+const codevPkgRoot = path.resolve(import.meta.dirname, '..', '..');
+const repoRoot = path.resolve(codevPkgRoot, '..', '..');
+const forgeScripts = path.join(codevPkgRoot, 'scripts', 'forge');
+
+/** A body with every character class that has broken a forge shim before. */
+const TRICKY_BODY = [
+  '## Summary',
+  '',
+  'Fixes #1455 — "quoted", \'single\', `backtick`, $VAR, \\backslash, 100% & <angle>.',
+  '',
+  '- [ ] checkbox',
+].join('\n');
+
+function hasJq(): boolean {
+  try {
+    execFileSync('sh', ['-c', 'command -v jq'], { stdio: 'ignore' });
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+describe('#1455 — pr-create is a forge concept', () => {
+  it('is a known concept, so config and doctor can see it', () => {
+    expect(getKnownConcepts()).toContain('pr-create');
+
+    const results = validateForgeConfig({ 'pr-create': './my-pr-create.sh' });
+    const entry = results.find((r) => r.concept === 'pr-create');
+    expect(entry?.status).toBe('ok');
+  });
+
+  it.each(['github', 'gitea', 'gitlab'])(
+    'the %s preset routes pr-create to its own script',
+    (provider) => {
+      const command = getForgeCommand('pr-create', { provider });
+      expect(command, `${provider} has no pr-create route`).not.toBeNull();
+      expect(command).toBe(path.join(forgeScripts, provider, 'pr-create.sh'));
+      expect(fs.existsSync(command!)).toBe(true);
+      expect(fs.statSync(command!).mode & 0o111, 'script is not executable').not.toBe(0);
+    },
+  );
+
+  it('defaults to the github script and honours a manual override', () => {
+    expect(getForgeCommand('pr-create', null)).toBe(
+      path.join(forgeScripts, 'github', 'pr-create.sh'),
+    );
+    expect(getForgeCommand('pr-create', { 'pr-create': '/custom.sh' })).toBe('/custom.sh');
+    expect(getForgeCommand('pr-create', { 'pr-create': null })).toBeNull();
+  });
+});
+
+describe('#1455 — pr-create scripts honour the contract', () => {
+  let tmp: string;
+
+  beforeEach(() => {
+    tmp = fs.mkdtempSync(path.join(os.tmpdir(), 'pr-create-1455-'));
+  });
+
+  afterEach(() => {
+    fs.rmSync(tmp, { recursive: true, force: true });
+  });
+
+  /** Install a fake CLI on PATH that records its argv. */
+  function stub(name: string, body: string): void {
+    const file = path.join(tmp, name);
+    fs.writeFileSync(file, `#!/bin/sh\n${body}\n`, { mode: 0o755 });
+    fs.chmodSync(file, 0o755);
+  }
+
+  function run(provider: string, env: Record<string, string>): string {
+    return execFileSync('sh', [path.join(forgeScripts, provider, 'pr-create.sh')], {
+      cwd: tmp,
+      env: { ...process.env, PATH: `${tmp}:${process.env.PATH}`, ...env },
+      encoding: 'utf-8',
+    });
+  }
+
+  /** argv the stub recorded — NUL-separated, so multi-line bodies survive. */
+  function recordedArgs(file: string): string[] {
+    return fs.readFileSync(path.join(tmp, file), 'utf-8').split('\0').slice(0, -1);
+  }
+
+  it('github: passes title and body to gh and emits {number, url}', () => {
+    stub('gh', 'printf "%s\\0" "$@" > args\necho https://github.com/o/r/pull/42');
+
+    const stdout = run('github', {
+      CODEV_PR_TITLE: 'Fix #1455: route pr-create through the forge',
+      CODEV_PR_BODY: TRICKY_BODY,
+      CODEV_PR_BASE: 'main',
+      CODEV_PR_HEAD: 'builder/bugfix-1455',
+    });
+
+    expect(JSON.parse(stdout)).toEqual({
+      number: 42,
+      url: 'https://github.com/o/r/pull/42',
+    });
+
+    const args = recordedArgs('args');
+    expect(args.slice(0, 2)).toEqual(['pr', 'create']);
+    expect(args[args.indexOf('--title') + 1]).toBe('Fix #1455: route pr-create through the forge');
+    expect(args[args.indexOf('--body') + 1]).toBe(TRICKY_BODY);
+    expect(args[args.indexOf('--base') + 1]).toBe('main');
+    expect(args[args.indexOf('--head') + 1]).toBe('builder/bugfix-1455');
+  });
+
+  it('github: fails loudly when the forge prints no PR URL', () => {
+    stub('gh', 'echo "nothing to see here"');
+    expect(() =>
+      run('github', { CODEV_PR_TITLE: 't', CODEV_PR_BODY: 'b' }),
+    ).toThrow();
+  });
+
+  it('github: requires a title', () => {
+    stub('gh', 'echo https://github.com/o/r/pull/1');
+    expect(() => run('github', { CODEV_PR_TITLE: '', CODEV_PR_BODY: 'b' })).toThrow();
+  });
+
+  it.skipIf(!hasJq())(
+    'gitea: passes the body as --description and normalizes tea output to {number, url}',
+    () => {
+      // `tea pulls create` prints a rendered, line-wrapped, ANSI-decorated view;
+      // the script must ignore it and look the PR up via `tea pulls list`.
+      stub(
+        'tea',
+        [
+          'if [ "$2" = "create" ]; then',
+          '  printf "%s\\0" "$@" > create-args',
+          '  echo "  # #7 rendered nonsense (open)"',
+          '  exit 0',
+          'fi',
+          'if [ "$2" = "list" ]; then',
+          '  echo \'[{"index":"7","url":"https://forge.example.com/o/r/pulls/7","head":"my-branch"},',
+          '        {"index":"3","url":"https://forge.example.com/o/r/pulls/3","head":"other"}]\'',
+          '  exit 0',
+          'fi',
+          'exit 1',
+        ].join('\n'),
+      );
+
+      const stdout = run('gitea', {
+        CODEV_PR_TITLE: 'Fix #1455',
+        CODEV_PR_BODY: TRICKY_BODY,
+        CODEV_PR_BASE: 'main',
+        CODEV_PR_HEAD: 'my-branch',
+      });
+
+      expect(JSON.parse(stdout)).toEqual({
+        number: 7,
+        url: 'https://forge.example.com/o/r/pulls/7',
+      });
+
+      const args = recordedArgs('create-args');
+      expect(args.slice(0, 2)).toEqual(['pulls', 'create']);
+      expect(args[args.indexOf('--description') + 1]).toBe(TRICKY_BODY);
+      expect(args).not.toContain('--body');
+      expect(args[args.indexOf('--title') + 1]).toBe('Fix #1455');
+      expect(args[args.indexOf('--head') + 1]).toBe('my-branch');
+      expect(args[args.indexOf('--base') + 1]).toBe('main');
+    },
+  );
+
+  it.skipIf(!hasJq())('gitea: matches a cross-repo <user>:<branch> head', () => {
+    stub(
+      'tea',
+      [
+        'if [ "$2" = "create" ]; then exit 0; fi',
+        'echo \'[{"index":"9","url":"https://forge.example.com/o/r/pulls/9","head":"feature"}]\'',
+      ].join('\n'),
+    );
+
+    const stdout = run('gitea', {
+      CODEV_PR_TITLE: 't',
+      CODEV_PR_BODY: 'b',
+      CODEV_PR_HEAD: 'contributor:feature',
+    });
+    expect(JSON.parse(stdout).number).toBe(9);
+  });
+
+  it.skipIf(!hasJq())('gitea: fails when the created PR cannot be found', () => {
+    stub(
+      'tea',
+      ['if [ "$2" = "create" ]; then exit 0; fi', "echo '[]'"].join('\n'),
+    );
+    expect(() =>
+      run('gitea', { CODEV_PR_TITLE: 't', CODEV_PR_BODY: 'b', CODEV_PR_HEAD: 'nope' }),
+    ).toThrow();
+  });
+});
+
+describe('#1455 — prompts route PR creation through the concept', () => {
+  const promptFiles = [
+    'protocols/air/prompts/pr.md',
+    'protocols/aspir/prompts/review.md',
+    'protocols/bugfix/prompts/pr.md',
+    'protocols/maintain/prompts/review.md',
+    'protocols/pir/prompts/review.md',
+    'protocols/spir/prompts/review.md',
+  ].flatMap((rel) => [`codev/${rel}`, `codev-skeleton/${rel}`]);
+
+  it.each(promptFiles)('%s invokes {{pr_create_command}}', (rel) => {
+    const content = fs.readFileSync(path.join(repoRoot, rel), 'utf-8');
+    expect(content).toContain('{{pr_create_command}}');
+    expect(content).toContain('CODEV_PR_TITLE=');
+    expect(content).toContain('CODEV_PR_BODY=');
+  });
+
+  it('no protocol file shells out to `gh pr create`', () => {
+    const offenders: string[] = [];
+    for (const tree of ['codev/protocols', 'codev-skeleton/protocols']) {
+      const walk = (dir: string): void => {
+        for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+          const full = path.join(dir, entry.name);
+          if (entry.isDirectory()) walk(full);
+          else if (entry.name.endsWith('.md')) {
+            const content = fs.readFileSync(full, 'utf-8');
+            // A command invocation, not the prose that names GitHub's default.
+            if (/^\s*gh pr create\b/m.test(content)) {
+              offenders.push(path.relative(repoRoot, full));
+            }
+          }
+        }
+      };
+      walk(path.join(repoRoot, tree));
+    }
+    expect(offenders).toEqual([]);
+  });
+});
diff --git a/packages/codev/src/__tests__/bugfix-685-close-keyword.test.ts b/packages/codev/src/__tests__/bugfix-685-close-keyword.test.ts
index 83c27be74..7ce8aa6dd 100644
--- a/packages/codev/src/__tests__/bugfix-685-close-keyword.test.ts
+++ b/packages/codev/src/__tests__/bugfix-685-close-keyword.test.ts
@@ -77,10 +77,12 @@ describe('PR close-keyword directive (#685)', () => {
    *
    * New directive text added for #685 must use `<N>` placeholders, not
    * `{{issue.number}}`, inside the PR body template (the lines between
-   * `gh pr create ... --body "$(cat <<'EOF'` and the matching `EOF`).
+   * `CODEV_PR_BODY="$(cat <<'EOF'` and the matching `EOF`). #1455 moved the
+   * body from `gh pr create --body` into that environment variable, so the
+   * match accepts either spelling.
    *
-   * The bugfix prompt's `{{issue.number}}` in `gh pr create --title` and in
-   * the notification `afx send architect` command predates this fix and is
+   * The bugfix prompt's `{{issue.number}}` in the PR title and in the
+   * notification `afx send architect` command predates this fix and is
    * out of scope — this test only guards the PR body template itself.
    */
   const prBodyTargets: PromptTarget[] = [
@@ -95,7 +97,9 @@ describe('PR close-keyword directive (#685)', () => {
     '$protocol PR body template does not contain unrendered {{issue...}} tokens',
     ({ relPath }) => {
       const content = fs.readFileSync(path.join(repoRoot, relPath), 'utf-8');
-      const bodyMatch = content.match(/--body\s+"\$\(cat\s+<<\s*'(\w+)'([\s\S]*?)^\1\s*$/m);
+      const bodyMatch = content.match(
+        /(?:--body|CODEV_PR_BODY=)\s*"\$\(cat\s+<<\s*'(\w+)'([\s\S]*?)^\1\s*$/m,
+      );
       expect(bodyMatch, `PR body template not found in ${relPath}`).not.toBeNull();
       const body = bodyMatch![2];
       expect(body, `${relPath} PR body contains {{issue.*}}`).not.toMatch(/\{\{issue\./);
diff --git a/packages/codev/src/__tests__/forge.test.ts b/packages/codev/src/__tests__/forge.test.ts
index 2362c33e4..234472f26 100644
--- a/packages/codev/src/__tests__/forge.test.ts
+++ b/packages/codev/src/__tests__/forge.test.ts
@@ -307,7 +307,7 @@ describe('executeForgeCommandSync', () => {
 // =============================================================================
 
 describe('getKnownConcepts', () => {
-  it('returns all 17 known concept names', () => {
+  it('returns all 18 known concept names', () => {
     const concepts = getKnownConcepts();
     expect(concepts).toContain('issue-view');
     expect(concepts).toContain('pr-list');
@@ -320,13 +320,14 @@ describe('getKnownConcepts', () => {
     expect(concepts).toContain('user-identity');
     expect(concepts).toContain('team-activity');
     expect(concepts).toContain('on-it-timestamps');
+    expect(concepts).toContain('pr-create');
     expect(concepts).toContain('pr-merge');
     expect(concepts).toContain('pr-search');
     expect(concepts).toContain('pr-view');
     expect(concepts).toContain('pr-diff');
     expect(concepts).toContain('auth-status');
     expect(concepts).toContain('repo-archive');
-    expect(concepts.length).toBe(17);
+    expect(concepts.length).toBe(18);
   });
 });
 
@@ -549,9 +550,9 @@ describe('graceful degradation when command not found', () => {
 // =============================================================================
 
 describe('resolveAllConcepts', () => {
-  it('returns all 17 concepts with default source when no config', () => {
+  it('returns all 18 concepts with default source when no config', () => {
     const resolutions = resolveAllConcepts();
-    expect(resolutions).toHaveLength(17);
+    expect(resolutions).toHaveLength(18);
     expect(resolutions.every(r => r.source === 'default')).toBe(true);
     expect(resolutions.every(r => r.executable !== null)).toBe(true);
   });
diff --git a/packages/codev/src/commands/porch/__tests__/bugfix-1455-pr-create-prompt.test.ts b/packages/codev/src/commands/porch/__tests__/bugfix-1455-pr-create-prompt.test.ts
new file mode 100644
index 000000000..39720ecfb
--- /dev/null
+++ b/packages/codev/src/commands/porch/__tests__/bugfix-1455-pr-create-prompt.test.ts
@@ -0,0 +1,93 @@
+/**
+ * Regression test for GitHub Issue #1455 — the prompt-rendering half.
+ *
+ * Phase prompts must not name a forge CLI. They carry `{{pr_create_command}}`,
+ * and porch substitutes the resolved `pr-create` concept command, the same way
+ * it already injects `pr-merge` into the merge task. Without the substitution
+ * the token would reach the builder unrendered, or (before the fix) the prompt
+ * would simply say `gh pr create` on a Gitea project.
+ */
+import { describe, it, expect, beforeEach, afterEach, vi } from 'vitest';
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { buildPhasePrompt } from '../prompts.js';
+import type { ProjectState, Protocol } from '../types.js';
+
+// No real `gh issue view` round-trip from getProjectSummary.
+vi.mock('../../../lib/github.js', () => ({
+  fetchIssue: vi.fn().mockResolvedValue(null),
+}));
+
+const forgeScripts = path.resolve(import.meta.dirname, '..', '..', '..', '..', 'scripts', 'forge');
+
+const protocol = {
+  name: 'bugfix',
+  phases: [{ id: 'pr', name: 'PR', type: 'once', build: { prompt: 'pr.md' } }],
+} as unknown as Protocol;
+
+const state = {
+  id: '1455',
+  title: 'pr-create-is-not-a-forge-concept',
+  protocol: 'bugfix',
+  phase: 'pr',
+  plan_phases: [],
+  current_plan_phase: null,
+  gates: {},
+  iteration: 1,
+  build_complete: false,
+  history: [],
+  started_at: '2026-01-01T00:00:00.000Z',
+  updated_at: '2026-01-01T00:00:00.000Z',
+} as unknown as ProjectState;
+
+describe('#1455 — porch substitutes {{pr_create_command}}', () => {
+  let tmp: string;
+
+  beforeEach(() => {
+    tmp = fs.mkdtempSync(path.join(os.tmpdir(), 'pr-create-prompt-1455-'));
+    const prompts = path.join(tmp, 'codev', 'protocols', 'bugfix', 'prompts');
+    fs.mkdirSync(prompts, { recursive: true });
+    fs.writeFileSync(
+      path.join(prompts, 'pr.md'),
+      'CODEV_PR_TITLE="t" CODEV_PR_BODY="b" {{pr_create_command}}\n',
+    );
+  });
+
+  afterEach(() => {
+    fs.rmSync(tmp, { recursive: true, force: true });
+  });
+
+  function writeForgeConfig(forge: Record<string, unknown>): void {
+    fs.mkdirSync(path.join(tmp, '.codev'), { recursive: true });
+    fs.writeFileSync(path.join(tmp, '.codev', 'config.json'), JSON.stringify({ forge }));
+  }
+
+  it('renders the gitea script for a project with forge.provider: gitea', async () => {
+    writeForgeConfig({ provider: 'gitea' });
+    const prompt = await buildPhasePrompt(tmp, state, protocol);
+
+    expect(prompt).toContain(path.join(forgeScripts, 'gitea', 'pr-create.sh'));
+    expect(prompt).not.toContain('{{pr_create_command}}');
+    expect(prompt).not.toContain('gh pr create');
+  });
+
+  it('renders the github script when no forge is configured', async () => {
+    const prompt = await buildPhasePrompt(tmp, state, protocol);
+    expect(prompt).toContain(path.join(forgeScripts, 'github', 'pr-create.sh'));
+    expect(prompt).not.toContain('{{pr_create_command}}');
+  });
+
+  it('renders a manual override', async () => {
+    writeForgeConfig({ 'pr-create': '/opt/forge/open-pr.sh' });
+    const prompt = await buildPhasePrompt(tmp, state, protocol);
+    expect(prompt).toContain('/opt/forge/open-pr.sh');
+  });
+
+  it('tells the builder to open the PR by hand when the concept is disabled', async () => {
+    writeForgeConfig({ 'pr-create': null });
+    const prompt = await buildPhasePrompt(tmp, state, protocol);
+    expect(prompt).toContain('open the PR manually');
+    expect(prompt).not.toContain('{{pr_create_command}}');
+  });
+});
diff --git a/packages/codev/src/commands/porch/prompts.ts b/packages/codev/src/commands/porch/prompts.ts
index fd8502e76..72604dbec 100644
--- a/packages/codev/src/commands/porch/prompts.ts
+++ b/packages/codev/src/commands/porch/prompts.ts
@@ -16,6 +16,7 @@ import { findPlanFile, getCurrentPlanPhase, getPhaseContent } from './plan.js';
 import { getProjectDir, resolveArtifactBaseName } from './state.js';
 import type { ArtifactResolver } from './artifacts.js';
 import { fetchIssue } from '../../lib/github.js';
+import { getForgeCommand, loadForgeConfig } from '../../lib/forge.js';
 import { resolveCodevFile, resolveCodevIncludes } from '../../lib/skeleton.js';
 import { readHotTierFiles } from '../../lib/managed-block.js';
 
@@ -86,6 +87,18 @@ function loadPromptFile(workspaceRoot: string, protocolName: string, promptFile:
   return resolveCodevIncludes(fs.readFileSync(resolved, 'utf-8'), workspaceRoot);
 }
 
+/**
+ * Resolve the `pr-create` concept command for the PR-opening prompts.
+ *
+ * Mirrors the `pr-merge` injection in porch/next.ts. Prompts must not hardcode
+ * `gh pr create`: a project with `forge.provider` set would otherwise shell out
+ * to `gh` at the single most important write in the protocol (#1455).
+ */
+function resolvePrCreateCommand(workspaceRoot: string): string {
+  const command = getForgeCommand('pr-create', loadForgeConfig(workspaceRoot));
+  return command ?? '# pr-create is disabled for this forge — open the PR manually';
+}
+
 /**
  * Substitute template variables in a prompt.
  */
@@ -93,6 +106,7 @@ function substituteVariables(
   prompt: string,
   state: ProjectState,
   artifactBaseName: string,
+  workspaceRoot: string,
   planPhase?: PlanPhase | null,
   summary?: string | null
 ): string {
@@ -102,6 +116,7 @@ function substituteVariables(
     artifact_name: artifactBaseName,
     current_state: state.phase,
     protocol: state.protocol,
+    pr_create_command: resolvePrCreateCommand(workspaceRoot),
   };
 
   // Add summary/goal if available
@@ -274,7 +289,7 @@ export async function buildPhasePrompt(
 
     const promptContent = loadPromptFile(workspaceRoot, state.protocol, promptFileName);
     if (promptContent) {
-      let result = substituteVariables(promptContent, state, artifactBaseName, currentPlanPhase, summary);
+      let result = substituteVariables(promptContent, state, artifactBaseName, workspaceRoot, currentPlanPhase, summary);
 
       // Add goal/summary header if available
       if (summary) {
diff --git a/packages/codev/src/lib/forge-contracts.ts b/packages/codev/src/lib/forge-contracts.ts
index 9194a78d0..e942960b2 100644
--- a/packages/codev/src/lib/forge-contracts.ts
+++ b/packages/codev/src/lib/forge-contracts.ts
@@ -139,6 +139,21 @@ export interface PrViewResult {
   deletions: number;
 }
 
+/**
+ * Output of the `pr-create` concept command.
+ *
+ * Inputs are environment variables, like every other concept:
+ * `CODEV_PR_TITLE` (required), `CODEV_PR_BODY` (required, may be empty), and
+ * the optional `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO`,
+ * `CODEV_PR_DRAFT`. A failed creation exits non-zero rather than emitting JSON.
+ */
+export interface PrCreateResult {
+  /** The created PR's number (`iid` on GitLab, `index` on Gitea). */
+  number: number;
+  /** The created PR's **browser/web** URL — never an API endpoint. */
+  url: string;
+}
+
 /** Output of the `pr-diff` concept command: raw diff text, not JSON. */
 // Returns diff text on stdout. Use `raw: true` option.
 
diff --git a/packages/codev/src/lib/forge.ts b/packages/codev/src/lib/forge.ts
index 4da6d93f7..96de2592f 100644
--- a/packages/codev/src/lib/forge.ts
+++ b/packages/codev/src/lib/forge.ts
@@ -64,7 +64,7 @@ export interface ForgeCommandOptions {
 const KNOWN_CONCEPTS = [
   'issue-view', 'pr-list', 'issue-list', 'issue-search', 'issue-comment', 'pr-exists',
   'recently-closed', 'recently-merged', 'user-identity', 'team-activity',
-  'on-it-timestamps', 'pr-merge', 'pr-search', 'pr-view', 'pr-diff',
+  'on-it-timestamps', 'pr-create', 'pr-merge', 'pr-search', 'pr-view', 'pr-diff',
   'auth-status', 'repo-archive',
 ] as const;
 

From 209a1355479cc60d7cad7fba1f4b5f2e88f6aa77 Mon Sep 17 00:00:00 2001
From: pseudo <cdodge@pseudoseed.com>
Date: Fri, 14 Aug 2026 00:39:13 -0600
Subject: [PATCH 05/15] chore(porch): bugfix-1455 pr phase-transition

---
 .../bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml    | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/codev/projects/bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml b/codev/projects/bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml
index b88eaec54..7f79e2599 100644
--- a/codev/projects/bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml
+++ b/codev/projects/bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml
@@ -1,7 +1,7 @@
 id: bugfix-1455
 title: pr-create-is-not-a-forge-conce
 protocol: bugfix
-phase: fix
+phase: pr
 plan_phases: []
 current_plan_phase: null
 gates:
@@ -11,4 +11,4 @@ iteration: 1
 build_complete: false
 history: []
 started_at: '2026-08-14T04:34:29.595Z'
-updated_at: '2026-08-14T04:53:12.811Z'
+updated_at: '2026-08-14T06:39:13.027Z'

From a9f534ed5ea48ddae34cb352501255faa6a479c2 Mon Sep 17 00:00:00 2001
From: pseudo <cdodge@pseudoseed.com>
Date: Fri, 14 Aug 2026 06:32:09 -0600
Subject: [PATCH 06/15] [Bugfix #1455] Fix: keep {{pr_create_command}} out of
 the prose

Porch substitutes every occurrence of the token, so the sentence explaining
the token rendered as "Porch substitutes /abs/path/pr-create.sh with your
forge's pr-create concept command". Found by rendering the real BUGFIX pr
prompt through the locally built porch. The prose now refers to "the command
above", and the regression test pins exactly one occurrence per prompt.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
---
 codev-skeleton/protocols/air/prompts/pr.md                    | 2 +-
 codev-skeleton/protocols/aspir/prompts/review.md              | 2 +-
 codev-skeleton/protocols/bugfix/prompts/pr.md                 | 2 +-
 codev-skeleton/protocols/maintain/prompts/review.md           | 2 +-
 codev-skeleton/protocols/pir/prompts/review.md                | 2 +-
 codev-skeleton/protocols/spir/prompts/review.md               | 2 +-
 codev/protocols/air/prompts/pr.md                             | 2 +-
 codev/protocols/aspir/prompts/review.md                       | 2 +-
 codev/protocols/bugfix/prompts/pr.md                          | 2 +-
 codev/protocols/maintain/prompts/review.md                    | 2 +-
 codev/protocols/pir/prompts/review.md                         | 2 +-
 codev/protocols/spir/prompts/review.md                        | 2 +-
 .../codev/src/__tests__/bugfix-1455-pr-create-concept.test.ts | 4 ++++
 13 files changed, 16 insertions(+), 12 deletions(-)

diff --git a/codev-skeleton/protocols/air/prompts/pr.md b/codev-skeleton/protocols/air/prompts/pr.md
index ea2690092..ab145d1b9 100644
--- a/codev-skeleton/protocols/air/prompts/pr.md
+++ b/codev-skeleton/protocols/air/prompts/pr.md
@@ -47,7 +47,7 @@ EOF
 )" {{pr_create_command}}
 ```
 
-Porch substitutes `{{pr_create_command}}` with your forge's `pr-create` concept command (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
+The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
 
 ## Optional CMAP review
 
diff --git a/codev-skeleton/protocols/aspir/prompts/review.md b/codev-skeleton/protocols/aspir/prompts/review.md
index ef8c82e59..91cb4a279 100644
--- a/codev-skeleton/protocols/aspir/prompts/review.md
+++ b/codev-skeleton/protocols/aspir/prompts/review.md
@@ -66,7 +66,7 @@ EOF
 )" {{pr_create_command}}
 ```
 
-Porch substitutes `{{pr_create_command}}` with your forge's `pr-create` concept command (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
+The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
 
 ## Signals
 
diff --git a/codev-skeleton/protocols/bugfix/prompts/pr.md b/codev-skeleton/protocols/bugfix/prompts/pr.md
index 0133573e1..0548514fe 100644
--- a/codev-skeleton/protocols/bugfix/prompts/pr.md
+++ b/codev-skeleton/protocols/bugfix/prompts/pr.md
@@ -41,7 +41,7 @@ EOF
 )" {{pr_create_command}}
 ```
 
-Porch substitutes `{{pr_create_command}}` with your forge's `pr-create` concept command (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
+The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
 
 ## Run CMAP review
 
diff --git a/codev-skeleton/protocols/maintain/prompts/review.md b/codev-skeleton/protocols/maintain/prompts/review.md
index 5cf345a83..b448ff579 100644
--- a/codev-skeleton/protocols/maintain/prompts/review.md
+++ b/codev-skeleton/protocols/maintain/prompts/review.md
@@ -70,7 +70,7 @@ PREOF
 )" {{pr_create_command}}
 ```
 
-Porch substitutes `{{pr_create_command}}` with your forge's `pr-create` concept command (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
+The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
 
 ## Signals
 
diff --git a/codev-skeleton/protocols/pir/prompts/review.md b/codev-skeleton/protocols/pir/prompts/review.md
index d838f499c..76e11e892 100644
--- a/codev-skeleton/protocols/pir/prompts/review.md
+++ b/codev-skeleton/protocols/pir/prompts/review.md
@@ -115,7 +115,7 @@ CODEV_PR_HEAD="$BRANCH" \
 {{pr_create_command}}
 ```
 
-Porch substitutes `{{pr_create_command}}` with your forge's `pr-create` concept command (`gh pr create` by default) and it prints `{"number": <int>, "url": "<url>"}`. The body goes in as an environment variable, not `--body-file` — read the created PR back and confirm the body arrived intact before moving on.
+The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It prints `{"number": <int>, "url": "<url>"}`. The body goes in as an environment variable, not `--body-file` — read the created PR back and confirm the body arrived intact before moving on.
 
 **Verify the PR body contains `Fixes #{{issue.number}}`** (it should — the review file has it at the top). If somehow missing, edit and re-apply:
 
diff --git a/codev-skeleton/protocols/spir/prompts/review.md b/codev-skeleton/protocols/spir/prompts/review.md
index 574db63a9..9a34410a0 100644
--- a/codev-skeleton/protocols/spir/prompts/review.md
+++ b/codev-skeleton/protocols/spir/prompts/review.md
@@ -66,7 +66,7 @@ EOF
 )" {{pr_create_command}}
 ```
 
-Porch substitutes `{{pr_create_command}}` with your forge's `pr-create` concept command (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
+The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
 
 ## Signals
 
diff --git a/codev/protocols/air/prompts/pr.md b/codev/protocols/air/prompts/pr.md
index ea2690092..ab145d1b9 100644
--- a/codev/protocols/air/prompts/pr.md
+++ b/codev/protocols/air/prompts/pr.md
@@ -47,7 +47,7 @@ EOF
 )" {{pr_create_command}}
 ```
 
-Porch substitutes `{{pr_create_command}}` with your forge's `pr-create` concept command (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
+The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
 
 ## Optional CMAP review
 
diff --git a/codev/protocols/aspir/prompts/review.md b/codev/protocols/aspir/prompts/review.md
index ef8c82e59..91cb4a279 100644
--- a/codev/protocols/aspir/prompts/review.md
+++ b/codev/protocols/aspir/prompts/review.md
@@ -66,7 +66,7 @@ EOF
 )" {{pr_create_command}}
 ```
 
-Porch substitutes `{{pr_create_command}}` with your forge's `pr-create` concept command (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
+The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
 
 ## Signals
 
diff --git a/codev/protocols/bugfix/prompts/pr.md b/codev/protocols/bugfix/prompts/pr.md
index 0133573e1..0548514fe 100644
--- a/codev/protocols/bugfix/prompts/pr.md
+++ b/codev/protocols/bugfix/prompts/pr.md
@@ -41,7 +41,7 @@ EOF
 )" {{pr_create_command}}
 ```
 
-Porch substitutes `{{pr_create_command}}` with your forge's `pr-create` concept command (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
+The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
 
 ## Run CMAP review
 
diff --git a/codev/protocols/maintain/prompts/review.md b/codev/protocols/maintain/prompts/review.md
index 5cf345a83..b448ff579 100644
--- a/codev/protocols/maintain/prompts/review.md
+++ b/codev/protocols/maintain/prompts/review.md
@@ -70,7 +70,7 @@ PREOF
 )" {{pr_create_command}}
 ```
 
-Porch substitutes `{{pr_create_command}}` with your forge's `pr-create` concept command (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
+The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
 
 ## Signals
 
diff --git a/codev/protocols/pir/prompts/review.md b/codev/protocols/pir/prompts/review.md
index d838f499c..76e11e892 100644
--- a/codev/protocols/pir/prompts/review.md
+++ b/codev/protocols/pir/prompts/review.md
@@ -115,7 +115,7 @@ CODEV_PR_HEAD="$BRANCH" \
 {{pr_create_command}}
 ```
 
-Porch substitutes `{{pr_create_command}}` with your forge's `pr-create` concept command (`gh pr create` by default) and it prints `{"number": <int>, "url": "<url>"}`. The body goes in as an environment variable, not `--body-file` — read the created PR back and confirm the body arrived intact before moving on.
+The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It prints `{"number": <int>, "url": "<url>"}`. The body goes in as an environment variable, not `--body-file` — read the created PR back and confirm the body arrived intact before moving on.
 
 **Verify the PR body contains `Fixes #{{issue.number}}`** (it should — the review file has it at the top). If somehow missing, edit and re-apply:
 
diff --git a/codev/protocols/spir/prompts/review.md b/codev/protocols/spir/prompts/review.md
index 574db63a9..9a34410a0 100644
--- a/codev/protocols/spir/prompts/review.md
+++ b/codev/protocols/spir/prompts/review.md
@@ -66,7 +66,7 @@ EOF
 )" {{pr_create_command}}
 ```
 
-Porch substitutes `{{pr_create_command}}` with your forge's `pr-create` concept command (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
+The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
 
 ## Signals
 
diff --git a/packages/codev/src/__tests__/bugfix-1455-pr-create-concept.test.ts b/packages/codev/src/__tests__/bugfix-1455-pr-create-concept.test.ts
index 16bfae2ad..61a3b8212 100644
--- a/packages/codev/src/__tests__/bugfix-1455-pr-create-concept.test.ts
+++ b/packages/codev/src/__tests__/bugfix-1455-pr-create-concept.test.ts
@@ -231,6 +231,10 @@ describe('#1455 — prompts route PR creation through the concept', () => {
     expect(content).toContain('{{pr_create_command}}');
     expect(content).toContain('CODEV_PR_TITLE=');
     expect(content).toContain('CODEV_PR_BODY=');
+    // Exactly once — the invocation. Porch substitutes every occurrence, so a
+    // second one in the prose renders as "…substitutes /path/to/pr-create.sh
+    // with your forge's command", which is nonsense.
+    expect(content.match(/\{\{pr_create_command\}\}/g)).toHaveLength(1);
   });
 
   it('no protocol file shells out to `gh pr create`', () => {

From 0dfcbca2b4f6f713851edd71c260cc91827d30ba Mon Sep 17 00:00:00 2001
From: pseudo <cdodge@pseudoseed.com>
Date: Fri, 14 Aug 2026 06:36:11 -0600
Subject: [PATCH 07/15] chore(porch): bugfix-1455 record PR #1458

---
 .../bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/codev/projects/bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml b/codev/projects/bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml
index 7f79e2599..e45284371 100644
--- a/codev/projects/bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml
+++ b/codev/projects/bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml
@@ -11,4 +11,9 @@ iteration: 1
 build_complete: false
 history: []
 started_at: '2026-08-14T04:34:29.595Z'
-updated_at: '2026-08-14T06:39:13.027Z'
+updated_at: '2026-08-14T12:36:11.218Z'
+pr_history:
+  - phase: pr
+    pr_number: 1458
+    branch: builder/bugfix-1455
+    created_at: '2026-08-14T12:36:11.217Z'

From 42b92ae445ecaf695172bc4492de840e81ae0f82 Mon Sep 17 00:00:00 2001
From: pseudo <cdodge@pseudoseed.com>
Date: Fri, 14 Aug 2026 06:55:57 -0600
Subject: [PATCH 08/15] [Bugfix #1455] Fix: address CMAP findings (codex +
 claude REQUEST_CHANGES)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Three real defects, each with a test that fails without the fix.

1. Inline overrides received empty inputs (codex). The prompts set the inputs
   as an assignment prefix — `CODEV_PR_TITLE=… <cmd>`. A script reading the
   environment works, but an inline override, which is the documented form
   (`"pr-merge": "glab mr merge \"$CODEV_PR_NUMBER\" --yes"`), has its
   `"$CODEV_PR_TITLE"` argument expanded by the calling shell BEFORE the
   assignment applies, so it got "". The prompts now export. Pinned by a test
   that renders the shipped prompt, extracts the bash block and executes it
   against an inline override.

2. `codev doctor` reported `pr-create … set not found` (claude). extractExecutable
   returns a script's first substantive command, which is `set -e` here, so
   doctor looked for `set` on PATH and could no longer tell a Gitea user that
   `tea` is missing — for the one write that matters. Added a
   `# forge-executable: <tool>` declaration honoured ahead of the heuristic,
   and a shell-builtin skip list. Verified against the built dist:
   github→gh, gitea→tea, gitlab→glab.

3. `gitea/pr-create.sh` looked the new PR up without `--limit`, unlike every
   sibling gitea script. On a repo with more open PRs than tea's default page,
   it would create the PR and then exit 1 saying it could not find it. Now
   `--limit 200`, matching the house convention.

Also: the disabled-concept fallback rendered as a `#` comment — valid shell
that exits 0 without opening a PR. It now writes to stderr and returns false.

gemini APPROVE. Full suite 4888 passed.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
---
 codev-skeleton/protocols/air/prompts/pr.md    | 10 +++--
 .../protocols/aspir/prompts/review.md         | 10 +++--
 codev-skeleton/protocols/bugfix/prompts/pr.md | 10 +++--
 .../protocols/maintain/prompts/review.md      | 10 +++--
 .../protocols/pir/prompts/review.md           | 11 +++---
 .../protocols/spir/prompts/review.md          | 10 +++--
 codev/protocols/air/prompts/pr.md             | 10 +++--
 codev/protocols/aspir/prompts/review.md       | 10 +++--
 codev/protocols/bugfix/prompts/pr.md          | 10 +++--
 codev/protocols/maintain/prompts/review.md    | 10 +++--
 codev/protocols/pir/prompts/review.md         | 11 +++---
 codev/protocols/spir/prompts/review.md        | 10 +++--
 codev/resources/commands/forge.md             | 11 ++++++
 codev/state/bugfix-1455_thread.md             | 37 +++++++++++++++++++
 .../codev/scripts/forge/gitea/pr-create.sh    |  8 +++-
 .../codev/scripts/forge/github/pr-create.sh   |  1 +
 .../codev/scripts/forge/gitlab/pr-create.sh   |  1 +
 .../bugfix-1455-pr-create-concept.test.ts     | 20 ++++++++++
 .../bugfix-1455-pr-create-prompt.test.ts      | 37 +++++++++++++++++++
 packages/codev/src/commands/porch/prompts.ts  |  7 +++-
 packages/codev/src/lib/forge.ts               | 19 ++++++++--
 21 files changed, 207 insertions(+), 56 deletions(-)

diff --git a/codev-skeleton/protocols/air/prompts/pr.md b/codev-skeleton/protocols/air/prompts/pr.md
index ab145d1b9..7967db825 100644
--- a/codev-skeleton/protocols/air/prompts/pr.md
+++ b/codev-skeleton/protocols/air/prompts/pr.md
@@ -18,8 +18,8 @@ Open the PR with the review embedded in its body, optionally run CMAP, and notif
 The body must carry `Closes #<N>` for the driving issue — one per issue if several — so GitHub auto-closes it on merge. **Exception:** a partial fix uses `Refs #<N>` or `Part of #<N>` instead. Substitute the real number for `<N>`; leave no `{{...}}` tag or `<N>` placeholder in the committed body.
 
 ```bash
-CODEV_PR_TITLE="[Air #<N>] feat: <brief description>" \
-CODEV_PR_BODY="$(cat <<'EOF'
+export CODEV_PR_TITLE="[Air #<N>] feat: <brief description>"
+export CODEV_PR_BODY="$(cat <<'EOF'
 ## Summary
 
 <1-2 sentence description of the feature>
@@ -44,10 +44,12 @@ Closes #<N>  <!-- Substitute <N>; use "Refs #<N>" for a partial fix -->
 
 <anything the reviewer should focus on, or "Standard implementation — no special concerns">
 EOF
-)" {{pr_create_command}}
+)"
+
+{{pr_create_command}}
 ```
 
-The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
+The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It takes `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — from the environment, which is why they are exported rather than prefixed onto the command line: an inline override that spells `--title "$CODEV_PR_TITLE"` needs them set in the calling shell too. It prints `{"number": <int>, "url": "<url>"}`.
 
 ## Optional CMAP review
 
diff --git a/codev-skeleton/protocols/aspir/prompts/review.md b/codev-skeleton/protocols/aspir/prompts/review.md
index 91cb4a279..a3bd72903 100644
--- a/codev-skeleton/protocols/aspir/prompts/review.md
+++ b/codev-skeleton/protocols/aspir/prompts/review.md
@@ -44,8 +44,8 @@ The review's `## Architecture Updates` and `## Lessons Learned Updates` sections
 The PR body must carry `Closes #<N>` (feature) or `Fixes #<N>` (bug) for the driving issue — one keyword per issue if several — so GitHub auto-closes on merge. **Exception:** a PR that only partially addresses its issue uses `Refs #<N>` or `Part of #<N>` instead, leaving the issue open for the follow-up.
 
 ```bash
-CODEV_PR_TITLE="[Spec {{project_id}}] {{title}}" \
-CODEV_PR_BODY="$(cat <<'EOF'
+export CODEV_PR_TITLE="[Spec {{project_id}}] {{title}}"
+export CODEV_PR_BODY="$(cat <<'EOF'
 ## Summary
 [what was implemented]
 
@@ -63,10 +63,12 @@ codev/specs/{{artifact_name}}.md
 ## Review
 codev/reviews/{{artifact_name}}.md
 EOF
-)" {{pr_create_command}}
+)"
+
+{{pr_create_command}}
 ```
 
-The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
+The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It takes `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — from the environment, which is why they are exported rather than prefixed onto the command line: an inline override that spells `--title "$CODEV_PR_TITLE"` needs them set in the calling shell too. It prints `{"number": <int>, "url": "<url>"}`.
 
 ## Signals
 
diff --git a/codev-skeleton/protocols/bugfix/prompts/pr.md b/codev-skeleton/protocols/bugfix/prompts/pr.md
index 0548514fe..a45a2f87f 100644
--- a/codev-skeleton/protocols/bugfix/prompts/pr.md
+++ b/codev-skeleton/protocols/bugfix/prompts/pr.md
@@ -16,8 +16,8 @@ Open the PR, run CMAP review on it, address feedback, and hand off to the archit
 The PR body must carry `Fixes #<N>` for the driving issue — one per issue if several — so GitHub auto-closes it on merge. **Exception:** a PR that only partially addresses the issue uses `Refs #<N>` or `Part of #<N>` instead, leaving it open for the follow-up. Substitute the real number for `<N>`; leave no `{{...}}` tag or `<N>` placeholder in the committed body.
 
 ```bash
-CODEV_PR_TITLE="Fix #<N>: <brief description>" \
-CODEV_PR_BODY="$(cat <<'EOF'
+export CODEV_PR_TITLE="Fix #<N>: <brief description>"
+export CODEV_PR_BODY="$(cat <<'EOF'
 ## Summary
 
 <1-2 sentence description of the bug and fix>
@@ -38,10 +38,12 @@ Fixes #<N>  <!-- Substitute <N>; use "Refs #<N>" for a partial fix -->
 - [ ] Build passes
 - [ ] All tests pass
 EOF
-)" {{pr_create_command}}
+)"
+
+{{pr_create_command}}
 ```
 
-The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
+The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It takes `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — from the environment, which is why they are exported rather than prefixed onto the command line: an inline override that spells `--title "$CODEV_PR_TITLE"` needs them set in the calling shell too. It prints `{"number": <int>, "url": "<url>"}`.
 
 ## Run CMAP review
 
diff --git a/codev-skeleton/protocols/maintain/prompts/review.md b/codev-skeleton/protocols/maintain/prompts/review.md
index b448ff579..ecdcd4d68 100644
--- a/codev-skeleton/protocols/maintain/prompts/review.md
+++ b/codev-skeleton/protocols/maintain/prompts/review.md
@@ -46,8 +46,8 @@ If the run was not tied to any issue, the `Closes` line can be omitted.
 ```bash
 git push origin HEAD
 
-CODEV_PR_TITLE="[Maintain] Codebase maintenance run NNNN" \
-CODEV_PR_BODY="$(cat <<'PREOF'
+export CODEV_PR_TITLE="[Maintain] Codebase maintenance run NNNN"
+export CODEV_PR_BODY="$(cat <<'PREOF'
 ## Summary
 
 <2-3 bullet points of what was done>
@@ -67,10 +67,12 @@ Closes #<N>  <!-- Only if this run was triggered by a GitHub issue. Use "Refs #<
 - [x] All tests pass
 - [x] Documentation links resolve
 PREOF
-)" {{pr_create_command}}
+)"
+
+{{pr_create_command}}
 ```
 
-The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
+The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It takes `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — from the environment, which is why they are exported rather than prefixed onto the command line: an inline override that spells `--title "$CODEV_PR_TITLE"` needs them set in the calling shell too. It prints `{"number": <int>, "url": "<url>"}`.
 
 ## Signals
 
diff --git a/codev-skeleton/protocols/pir/prompts/review.md b/codev-skeleton/protocols/pir/prompts/review.md
index 76e11e892..3f8238d45 100644
--- a/codev-skeleton/protocols/pir/prompts/review.md
+++ b/codev-skeleton/protocols/pir/prompts/review.md
@@ -108,14 +108,15 @@ git push
 PR_TITLE="<concise description of the change>"
 BRANCH="$(git branch --show-current)"
 
-CODEV_PR_TITLE="$PR_TITLE" \
-CODEV_PR_BODY="$(cat codev/reviews/{{artifact_name}}.md)" \
-CODEV_PR_BASE=main \
-CODEV_PR_HEAD="$BRANCH" \
+export CODEV_PR_TITLE="$PR_TITLE"
+export CODEV_PR_BODY="$(cat codev/reviews/{{artifact_name}}.md)"
+export CODEV_PR_BASE=main
+export CODEV_PR_HEAD="$BRANCH"
+
 {{pr_create_command}}
 ```
 
-The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It prints `{"number": <int>, "url": "<url>"}`. The body goes in as an environment variable, not `--body-file` — read the created PR back and confirm the body arrived intact before moving on.
+The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It prints `{"number": <int>, "url": "<url>"}`. The inputs are **exported** so an inline override that spells `--title "$CODEV_PR_TITLE"` sees them too. The body goes in as an environment variable, not `--body-file` — read the created PR back and confirm the body arrived intact before moving on.
 
 **Verify the PR body contains `Fixes #{{issue.number}}`** (it should — the review file has it at the top). If somehow missing, edit and re-apply:
 
diff --git a/codev-skeleton/protocols/spir/prompts/review.md b/codev-skeleton/protocols/spir/prompts/review.md
index 9a34410a0..e8183945c 100644
--- a/codev-skeleton/protocols/spir/prompts/review.md
+++ b/codev-skeleton/protocols/spir/prompts/review.md
@@ -44,8 +44,8 @@ The review's `## Architecture Updates` and `## Lessons Learned Updates` sections
 The PR body must carry `Closes #<N>` (feature) or `Fixes #<N>` (bug) for the driving issue — one keyword per issue if several — so GitHub auto-closes on merge. **Exception:** a PR that only partially addresses its issue uses `Refs #<N>` or `Part of #<N>` instead, leaving the issue open for the follow-up.
 
 ```bash
-CODEV_PR_TITLE="[Spec {{project_id}}] {{title}}" \
-CODEV_PR_BODY="$(cat <<'EOF'
+export CODEV_PR_TITLE="[Spec {{project_id}}] {{title}}"
+export CODEV_PR_BODY="$(cat <<'EOF'
 ## Summary
 [what was implemented]
 
@@ -63,10 +63,12 @@ codev/specs/{{artifact_name}}.md
 ## Review
 codev/reviews/{{artifact_name}}.md
 EOF
-)" {{pr_create_command}}
+)"
+
+{{pr_create_command}}
 ```
 
-The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
+The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It takes `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — from the environment, which is why they are exported rather than prefixed onto the command line: an inline override that spells `--title "$CODEV_PR_TITLE"` needs them set in the calling shell too. It prints `{"number": <int>, "url": "<url>"}`.
 
 ## Signals
 
diff --git a/codev/protocols/air/prompts/pr.md b/codev/protocols/air/prompts/pr.md
index ab145d1b9..7967db825 100644
--- a/codev/protocols/air/prompts/pr.md
+++ b/codev/protocols/air/prompts/pr.md
@@ -18,8 +18,8 @@ Open the PR with the review embedded in its body, optionally run CMAP, and notif
 The body must carry `Closes #<N>` for the driving issue — one per issue if several — so GitHub auto-closes it on merge. **Exception:** a partial fix uses `Refs #<N>` or `Part of #<N>` instead. Substitute the real number for `<N>`; leave no `{{...}}` tag or `<N>` placeholder in the committed body.
 
 ```bash
-CODEV_PR_TITLE="[Air #<N>] feat: <brief description>" \
-CODEV_PR_BODY="$(cat <<'EOF'
+export CODEV_PR_TITLE="[Air #<N>] feat: <brief description>"
+export CODEV_PR_BODY="$(cat <<'EOF'
 ## Summary
 
 <1-2 sentence description of the feature>
@@ -44,10 +44,12 @@ Closes #<N>  <!-- Substitute <N>; use "Refs #<N>" for a partial fix -->
 
 <anything the reviewer should focus on, or "Standard implementation — no special concerns">
 EOF
-)" {{pr_create_command}}
+)"
+
+{{pr_create_command}}
 ```
 
-The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
+The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It takes `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — from the environment, which is why they are exported rather than prefixed onto the command line: an inline override that spells `--title "$CODEV_PR_TITLE"` needs them set in the calling shell too. It prints `{"number": <int>, "url": "<url>"}`.
 
 ## Optional CMAP review
 
diff --git a/codev/protocols/aspir/prompts/review.md b/codev/protocols/aspir/prompts/review.md
index 91cb4a279..a3bd72903 100644
--- a/codev/protocols/aspir/prompts/review.md
+++ b/codev/protocols/aspir/prompts/review.md
@@ -44,8 +44,8 @@ The review's `## Architecture Updates` and `## Lessons Learned Updates` sections
 The PR body must carry `Closes #<N>` (feature) or `Fixes #<N>` (bug) for the driving issue — one keyword per issue if several — so GitHub auto-closes on merge. **Exception:** a PR that only partially addresses its issue uses `Refs #<N>` or `Part of #<N>` instead, leaving the issue open for the follow-up.
 
 ```bash
-CODEV_PR_TITLE="[Spec {{project_id}}] {{title}}" \
-CODEV_PR_BODY="$(cat <<'EOF'
+export CODEV_PR_TITLE="[Spec {{project_id}}] {{title}}"
+export CODEV_PR_BODY="$(cat <<'EOF'
 ## Summary
 [what was implemented]
 
@@ -63,10 +63,12 @@ codev/specs/{{artifact_name}}.md
 ## Review
 codev/reviews/{{artifact_name}}.md
 EOF
-)" {{pr_create_command}}
+)"
+
+{{pr_create_command}}
 ```
 
-The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
+The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It takes `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — from the environment, which is why they are exported rather than prefixed onto the command line: an inline override that spells `--title "$CODEV_PR_TITLE"` needs them set in the calling shell too. It prints `{"number": <int>, "url": "<url>"}`.
 
 ## Signals
 
diff --git a/codev/protocols/bugfix/prompts/pr.md b/codev/protocols/bugfix/prompts/pr.md
index 0548514fe..a45a2f87f 100644
--- a/codev/protocols/bugfix/prompts/pr.md
+++ b/codev/protocols/bugfix/prompts/pr.md
@@ -16,8 +16,8 @@ Open the PR, run CMAP review on it, address feedback, and hand off to the archit
 The PR body must carry `Fixes #<N>` for the driving issue — one per issue if several — so GitHub auto-closes it on merge. **Exception:** a PR that only partially addresses the issue uses `Refs #<N>` or `Part of #<N>` instead, leaving it open for the follow-up. Substitute the real number for `<N>`; leave no `{{...}}` tag or `<N>` placeholder in the committed body.
 
 ```bash
-CODEV_PR_TITLE="Fix #<N>: <brief description>" \
-CODEV_PR_BODY="$(cat <<'EOF'
+export CODEV_PR_TITLE="Fix #<N>: <brief description>"
+export CODEV_PR_BODY="$(cat <<'EOF'
 ## Summary
 
 <1-2 sentence description of the bug and fix>
@@ -38,10 +38,12 @@ Fixes #<N>  <!-- Substitute <N>; use "Refs #<N>" for a partial fix -->
 - [ ] Build passes
 - [ ] All tests pass
 EOF
-)" {{pr_create_command}}
+)"
+
+{{pr_create_command}}
 ```
 
-The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
+The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It takes `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — from the environment, which is why they are exported rather than prefixed onto the command line: an inline override that spells `--title "$CODEV_PR_TITLE"` needs them set in the calling shell too. It prints `{"number": <int>, "url": "<url>"}`.
 
 ## Run CMAP review
 
diff --git a/codev/protocols/maintain/prompts/review.md b/codev/protocols/maintain/prompts/review.md
index b448ff579..ecdcd4d68 100644
--- a/codev/protocols/maintain/prompts/review.md
+++ b/codev/protocols/maintain/prompts/review.md
@@ -46,8 +46,8 @@ If the run was not tied to any issue, the `Closes` line can be omitted.
 ```bash
 git push origin HEAD
 
-CODEV_PR_TITLE="[Maintain] Codebase maintenance run NNNN" \
-CODEV_PR_BODY="$(cat <<'PREOF'
+export CODEV_PR_TITLE="[Maintain] Codebase maintenance run NNNN"
+export CODEV_PR_BODY="$(cat <<'PREOF'
 ## Summary
 
 <2-3 bullet points of what was done>
@@ -67,10 +67,12 @@ Closes #<N>  <!-- Only if this run was triggered by a GitHub issue. Use "Refs #<
 - [x] All tests pass
 - [x] Documentation links resolve
 PREOF
-)" {{pr_create_command}}
+)"
+
+{{pr_create_command}}
 ```
 
-The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
+The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It takes `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — from the environment, which is why they are exported rather than prefixed onto the command line: an inline override that spells `--title "$CODEV_PR_TITLE"` needs them set in the calling shell too. It prints `{"number": <int>, "url": "<url>"}`.
 
 ## Signals
 
diff --git a/codev/protocols/pir/prompts/review.md b/codev/protocols/pir/prompts/review.md
index 76e11e892..3f8238d45 100644
--- a/codev/protocols/pir/prompts/review.md
+++ b/codev/protocols/pir/prompts/review.md
@@ -108,14 +108,15 @@ git push
 PR_TITLE="<concise description of the change>"
 BRANCH="$(git branch --show-current)"
 
-CODEV_PR_TITLE="$PR_TITLE" \
-CODEV_PR_BODY="$(cat codev/reviews/{{artifact_name}}.md)" \
-CODEV_PR_BASE=main \
-CODEV_PR_HEAD="$BRANCH" \
+export CODEV_PR_TITLE="$PR_TITLE"
+export CODEV_PR_BODY="$(cat codev/reviews/{{artifact_name}}.md)"
+export CODEV_PR_BASE=main
+export CODEV_PR_HEAD="$BRANCH"
+
 {{pr_create_command}}
 ```
 
-The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It prints `{"number": <int>, "url": "<url>"}`. The body goes in as an environment variable, not `--body-file` — read the created PR back and confirm the body arrived intact before moving on.
+The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It prints `{"number": <int>, "url": "<url>"}`. The inputs are **exported** so an inline override that spells `--title "$CODEV_PR_TITLE"` sees them too. The body goes in as an environment variable, not `--body-file` — read the created PR back and confirm the body arrived intact before moving on.
 
 **Verify the PR body contains `Fixes #{{issue.number}}`** (it should — the review file has it at the top). If somehow missing, edit and re-apply:
 
diff --git a/codev/protocols/spir/prompts/review.md b/codev/protocols/spir/prompts/review.md
index 9a34410a0..e8183945c 100644
--- a/codev/protocols/spir/prompts/review.md
+++ b/codev/protocols/spir/prompts/review.md
@@ -44,8 +44,8 @@ The review's `## Architecture Updates` and `## Lessons Learned Updates` sections
 The PR body must carry `Closes #<N>` (feature) or `Fixes #<N>` (bug) for the driving issue — one keyword per issue if several — so GitHub auto-closes on merge. **Exception:** a PR that only partially addresses its issue uses `Refs #<N>` or `Part of #<N>` instead, leaving the issue open for the follow-up.
 
 ```bash
-CODEV_PR_TITLE="[Spec {{project_id}}] {{title}}" \
-CODEV_PR_BODY="$(cat <<'EOF'
+export CODEV_PR_TITLE="[Spec {{project_id}}] {{title}}"
+export CODEV_PR_BODY="$(cat <<'EOF'
 ## Summary
 [what was implemented]
 
@@ -63,10 +63,12 @@ codev/specs/{{artifact_name}}.md
 ## Review
 codev/reviews/{{artifact_name}}.md
 EOF
-)" {{pr_create_command}}
+)"
+
+{{pr_create_command}}
 ```
 
-The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It reads `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — and prints `{"number": <int>, "url": "<url>"}`.
+The command above is your forge's `pr-create` concept, substituted by porch (`gh pr create` by default). It takes `CODEV_PR_TITLE` / `CODEV_PR_BODY` — optionally `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO` — from the environment, which is why they are exported rather than prefixed onto the command line: an inline override that spells `--title "$CODEV_PR_TITLE"` needs them set in the calling shell too. It prints `{"number": <int>, "url": "<url>"}`.
 
 ## Signals
 
diff --git a/codev/resources/commands/forge.md b/codev/resources/commands/forge.md
index f449a0bea..87bd8fb49 100644
--- a/codev/resources/commands/forge.md
+++ b/codev/resources/commands/forge.md
@@ -185,3 +185,14 @@ curl -s "https://forge.example.com/api/issues/$CODEV_ISSUE_ID" \
   -H "Authorization: Bearer $FORGE_TOKEN" \
   | jq '{title: .title, body: .description, state: .state}'
 ```
+
+`codev doctor` reports the executable each concept needs on `PATH`, inferred from the script's
+first substantive command. A script that opens with `set -e` or an input guard should say so
+explicitly instead:
+
+```bash
+#!/bin/sh
+# forge-executable: tea
+set -e
+...
+```
diff --git a/codev/state/bugfix-1455_thread.md b/codev/state/bugfix-1455_thread.md
index 07e401aec..1514c93bc 100644
--- a/codev/state/bugfix-1455_thread.md
+++ b/codev/state/bugfix-1455_thread.md
@@ -119,3 +119,40 @@ Three scratch PRs, all closed and their branches deleted afterwards:
   `gitea/pr-exists.sh` filters on `.head.ref`.
 - `gh pr edit --body-file` is still hardcoded in `pir/prompts/review.md` — `pr-edit` is not a
   concept and adding one is outside this issue.
+
+## PR phase
+
+PR **#1458** against `cluesmith/codev` (base `main`, head `pseudoseed:builder/bugfix-1455`,
+`isCrossRepository: true` — verified from the server, not assumed). Opened with the new
+`scripts/forge/github/pr-create.sh`; the 7,937-byte body read back over the API is byte-identical
+to what went in.
+
+Porch's `tests` check could not pass on this machine: `spec-1280-measurement-instrument.test.ts`
+shells out to `measure-prompt-surface.sh`, which costs 25–30 s per invocation here (~2.0 s on
+record), and two of its tests call it twice against a 60 s budget. The branch is 0 commits behind
+`upstream/main` and that file and script are byte-identical to main. Architect chose "advance past
+it, don't touch the budgets, disclose it in the PR body". Advanced via a `porch.checks.tests`
+override in `.codev/config.json`, which is a **symlink to the main workspace** — so I copied the
+file into the worktree, added the override, advanced, then restored the symlink. Main's config was
+never modified.
+
+### CMAP: gemini APPROVE · codex REQUEST_CHANGES · claude REQUEST_CHANGES
+
+Three real defects, all fixed in `a9f534ed`+ follow-ups:
+
+1. **codex** — the prompts used an assignment *prefix* (`CODEV_PR_TITLE=… cmd`). A script reading
+   the environment works, but an **inline** override (the documented form, e.g.
+   `"pr-merge": "glab mr merge \"$CODEV_PR_NUMBER\" --yes"`) has its `"$CODEV_PR_TITLE"` argument
+   expanded by the calling shell *before* the assignment applies — so it receives empty strings.
+   Verified with a two-line shell experiment. Prompts now `export`. Pinned by a test that renders
+   the real shipped prompt, extracts the bash block and **executes** it against an inline override.
+2. **claude** — `extractExecutable` reads a script's first substantive line, so `set -e` made
+   `codev doctor` report `pr-create … set not found`; it could no longer tell a Gitea user that
+   `tea` was missing. Added a `# forge-executable: <tool>` declaration honoured ahead of the
+   heuristic, plus a shell-builtin skip list. Verified against the built `dist`: github→gh,
+   gitea→tea, gitlab→glab.
+3. **claude** — `gitea/pr-create.sh`'s lookup had no `--limit`, unlike every sibling script; on a
+   busy repo it would create the PR and then exit 1 claiming it couldn't find it. Now `--limit 200`.
+
+Also took claude's non-blocking note: the disabled-concept fallback rendered as a `#` comment
+(valid shell, exit 0, no PR). It now fails loudly.
diff --git a/packages/codev/scripts/forge/gitea/pr-create.sh b/packages/codev/scripts/forge/gitea/pr-create.sh
index b603a8577..51d3168d4 100755
--- a/packages/codev/scripts/forge/gitea/pr-create.sh
+++ b/packages/codev/scripts/forge/gitea/pr-create.sh
@@ -1,5 +1,6 @@
 #!/bin/sh
 # Forge concept: pr-create (Gitea/Forgejo via tea CLI)
+# forge-executable: tea
 #
 # Input:  CODEV_PR_TITLE (required)
 #         CODEV_PR_BODY  (required, may be empty)
@@ -37,8 +38,11 @@ if [ "$CODEV_PR_DRAFT" = "1" ]; then set -- "$@" --draft; fi
 tea pulls create "$@" >&2
 
 # Look the PR up by head branch. A cross-repo head is "<user>:<branch>" on the
-# way in but lists as the bare branch name, so match either form.
-set -- --state open --fields index,url,head --output json
+# way in but lists as the bare branch name, so match either form. --limit 200
+# matches the other gitea scripts: on tea's default page size a busy repo could
+# push the just-created PR off the list, and this would report a failure for a
+# PR that exists.
+set -- --state open --limit 200 --fields index,url,head --output json
 if [ -n "$CODEV_PR_REPO" ]; then set -- "$@" --repo "$CODEV_PR_REPO"; fi
 if [ -n "$CODEV_PR_LOGIN" ]; then set -- "$@" --login "$CODEV_PR_LOGIN"; fi
 
diff --git a/packages/codev/scripts/forge/github/pr-create.sh b/packages/codev/scripts/forge/github/pr-create.sh
index 9426e549a..0c7cc0303 100755
--- a/packages/codev/scripts/forge/github/pr-create.sh
+++ b/packages/codev/scripts/forge/github/pr-create.sh
@@ -1,5 +1,6 @@
 #!/bin/sh
 # Forge concept: pr-create (GitHub via gh CLI)
+# forge-executable: gh
 #
 # Input:  CODEV_PR_TITLE (required)
 #         CODEV_PR_BODY  (required, may be empty)
diff --git a/packages/codev/scripts/forge/gitlab/pr-create.sh b/packages/codev/scripts/forge/gitlab/pr-create.sh
index b3072a438..beaa4f677 100755
--- a/packages/codev/scripts/forge/gitlab/pr-create.sh
+++ b/packages/codev/scripts/forge/gitlab/pr-create.sh
@@ -1,5 +1,6 @@
 #!/bin/sh
 # Forge concept: pr-create (GitLab via glab CLI — merge requests)
+# forge-executable: glab
 #
 # Input:  CODEV_PR_TITLE (required)
 #         CODEV_PR_BODY  (required, may be empty)
diff --git a/packages/codev/src/__tests__/bugfix-1455-pr-create-concept.test.ts b/packages/codev/src/__tests__/bugfix-1455-pr-create-concept.test.ts
index 61a3b8212..bd664783d 100644
--- a/packages/codev/src/__tests__/bugfix-1455-pr-create-concept.test.ts
+++ b/packages/codev/src/__tests__/bugfix-1455-pr-create-concept.test.ts
@@ -24,6 +24,7 @@ import * as path from 'node:path';
 import {
   getKnownConcepts,
   getForgeCommand,
+  resolveAllConcepts,
   validateForgeConfig,
 } from '../lib/forge.js';
 
@@ -69,6 +70,18 @@ describe('#1455 — pr-create is a forge concept', () => {
     },
   );
 
+  it.each([
+    ['github', 'gh'],
+    ['gitea', 'tea'],
+    ['gitlab', 'glab'],
+  ])('doctor resolves the %s pr-create executable as %s, not a shell builtin', (provider, tool) => {
+    // extractExecutable reads the script and reports what must be on PATH. The
+    // scripts open with `set -e`, so a builtin-blind reader answers "set" and
+    // `codev doctor` then warns that `set` is missing instead of `tea`/`glab`.
+    const resolution = resolveAllConcepts({ provider }).find((r) => r.concept === 'pr-create');
+    expect(resolution?.executable).toBe(tool);
+  });
+
   it('defaults to the github script and honours a manual override', () => {
     expect(getForgeCommand('pr-create', null)).toBe(
       path.join(forgeScripts, 'github', 'pr-create.sh'),
@@ -158,6 +171,7 @@ describe('#1455 — pr-create scripts honour the contract', () => {
           '  exit 0',
           'fi',
           'if [ "$2" = "list" ]; then',
+          '  printf "%s\\0" "$@" > list-args',
           '  echo \'[{"index":"7","url":"https://forge.example.com/o/r/pulls/7","head":"my-branch"},',
           '        {"index":"3","url":"https://forge.example.com/o/r/pulls/3","head":"other"}]\'',
           '  exit 0',
@@ -185,6 +199,12 @@ describe('#1455 — pr-create scripts honour the contract', () => {
       expect(args[args.indexOf('--title') + 1]).toBe('Fix #1455');
       expect(args[args.indexOf('--head') + 1]).toBe('my-branch');
       expect(args[args.indexOf('--base') + 1]).toBe('main');
+
+      // The lookup must page like every other gitea script; on tea's default
+      // page a busy repo pushes the just-created PR off the list and the script
+      // reports failure for a PR that exists.
+      const listArgs = recordedArgs('list-args');
+      expect(listArgs[listArgs.indexOf('--limit') + 1]).toBe('200');
     },
   );
 
diff --git a/packages/codev/src/commands/porch/__tests__/bugfix-1455-pr-create-prompt.test.ts b/packages/codev/src/commands/porch/__tests__/bugfix-1455-pr-create-prompt.test.ts
index 39720ecfb..bd998a6af 100644
--- a/packages/codev/src/commands/porch/__tests__/bugfix-1455-pr-create-prompt.test.ts
+++ b/packages/codev/src/commands/porch/__tests__/bugfix-1455-pr-create-prompt.test.ts
@@ -8,6 +8,7 @@
  * would simply say `gh pr create` on a Gitea project.
  */
 import { describe, it, expect, beforeEach, afterEach, vi } from 'vitest';
+import { execFileSync } from 'node:child_process';
 import * as fs from 'node:fs';
 import * as os from 'node:os';
 import * as path from 'node:path';
@@ -89,5 +90,41 @@ describe('#1455 — porch substitutes {{pr_create_command}}', () => {
     const prompt = await buildPhasePrompt(tmp, state, protocol);
     expect(prompt).toContain('open the PR manually');
     expect(prompt).not.toContain('{{pr_create_command}}');
+    // And it must fail rather than being a comment the shell happily ignores —
+    // otherwise running the block "succeeds" without opening anything.
+    expect(prompt).toContain('false;');
+    expect(prompt).not.toMatch(/^# pr-create is disabled/m);
+  });
+
+  /**
+   * The shipped prompt block, executed for real.
+   *
+   * Inline commands are a documented override form (`"pr-merge": "glab mr merge
+   * \"$CODEV_PR_NUMBER\" --yes"`). With the inputs written as an assignment
+   * prefix (`CODEV_PR_TITLE=… cmd --title "$CODEV_PR_TITLE"`) the calling shell
+   * expands the argument BEFORE applying the assignment, so an inline override
+   * receives an empty title and body — while a script reading the environment
+   * works fine, which is what makes it easy to miss.
+   */
+  it('an inline override receives the title and body the prompt sets', async () => {
+    const repoRoot = path.resolve(import.meta.dirname, '..', '..', '..', '..', '..', '..');
+    fs.copyFileSync(
+      path.join(repoRoot, 'codev/protocols/bugfix/prompts/pr.md'),
+      path.join(tmp, 'codev', 'protocols', 'bugfix', 'prompts', 'pr.md'),
+    );
+    writeForgeConfig({
+      'pr-create': `sh -c 'printf "%s" "$1" > title.txt; printf "%s" "$2" > body.txt' _ "$CODEV_PR_TITLE" "$CODEV_PR_BODY"`,
+    });
+
+    const prompt = await buildPhasePrompt(tmp, state, protocol);
+    const block = prompt.match(/```bash\n(export CODEV_PR_TITLE[\s\S]*?)```/)?.[1];
+    expect(block, 'PR-creating block not found in the rendered prompt').toBeTruthy();
+
+    execFileSync('sh', ['-c', block!], { cwd: tmp });
+
+    expect(fs.readFileSync(path.join(tmp, 'title.txt'), 'utf-8')).toContain('Fix #');
+    const body = fs.readFileSync(path.join(tmp, 'body.txt'), 'utf-8');
+    expect(body).toContain('## Summary');
+    expect(body).toContain('Fixes #');
   });
 });
diff --git a/packages/codev/src/commands/porch/prompts.ts b/packages/codev/src/commands/porch/prompts.ts
index 72604dbec..e5d1122da 100644
--- a/packages/codev/src/commands/porch/prompts.ts
+++ b/packages/codev/src/commands/porch/prompts.ts
@@ -96,7 +96,12 @@ function loadPromptFile(workspaceRoot: string, protocolName: string, promptFile:
  */
 function resolvePrCreateCommand(workspaceRoot: string): string {
   const command = getForgeCommand('pr-create', loadForgeConfig(workspaceRoot));
-  return command ?? '# pr-create is disabled for this forge — open the PR manually';
+  // The disabled form must FAIL, not comment: a `# …` line is valid shell that
+  // exits 0, so an agent running the block would read "PR opened" from silence.
+  return (
+    command ??
+    "{ echo 'pr-create is disabled for this forge — open the PR manually' >&2; false; }"
+  );
 }
 
 /**
diff --git a/packages/codev/src/lib/forge.ts b/packages/codev/src/lib/forge.ts
index 96de2592f..77c7a3d9e 100644
--- a/packages/codev/src/lib/forge.ts
+++ b/packages/codev/src/lib/forge.ts
@@ -189,6 +189,9 @@ export function resolveAllConcepts(forgeConfig?: ForgeConfig | null): ConceptRes
  *
  * For inline commands: handles `if [ ... ]; then cmd ...` patterns and pipes.
  */
+/** Shell builtins and keywords that are never the executable a concept needs on PATH. */
+const SHELL_BUILTINS = ['if', 'then', 'else', 'fi', 'test', '[', '[[', 'set', 'export', 'readonly', 'local', 'shift', ':'];
+
 function extractExecutable(command: string): string | null {
   const trimmed = command.trim();
 
@@ -196,15 +199,25 @@ function extractExecutable(command: string): string | null {
   if (trimmed.endsWith('.sh') && existsSync(trimmed)) {
     try {
       const content = readFileSync(trimmed, 'utf-8');
+      // An explicit `# forge-executable: <tool>` declaration wins. The heuristic
+      // below reads the first substantive line, which is wrong for any script
+      // that opens with `set -e` or an input guard — it would tell `codev
+      // doctor` to look for `set` or `echo` instead of `gh`/`tea`/`glab`, and a
+      // missing forge CLI would go unreported (#1455).
+      const declared = content.match(/^#\s*forge-executable:\s*(\S+)/m);
+      if (declared) return declared[1];
       // Look for `exec <tool>` or first non-comment, non-shebang, non-blank line
       for (const line of content.split('\n')) {
         const l = line.trim();
         if (!l || l.startsWith('#') || l.startsWith('if') || l.startsWith('else') || l.startsWith('fi') || /^\w+=/.test(l)) continue;
         const execMatch = l.match(/^exec\s+(\S+)/);
         if (execMatch) return execMatch[1];
-        // First substantive command
+        // First substantive command. Shell builtins are skipped, not returned:
+        // a script opening with `set -e` would otherwise report `set` as its
+        // executable, and `codev doctor` would then warn that `set` is missing
+        // instead of checking for the real CLI (#1455).
         const token = l.split(/\s+/)[0];
-        if (token && !['if', 'then', 'else', 'fi', 'test', '[', '[['].includes(token)) {
+        if (token && !SHELL_BUILTINS.includes(token)) {
           return token;
         }
       }
@@ -222,7 +235,7 @@ function extractExecutable(command: string): string | null {
   const first = trimmed.split(/[|;]/).map(s => s.trim())[0];
   // Skip shell builtins
   const token = first.split(/\s+/)[0];
-  if (['if', 'test', '[', '[['].includes(token)) return null;
+  if (SHELL_BUILTINS.includes(token)) return null;
   return token || null;
 }
 

From e032a5949ab21a7b66d3bdeee2168296a90bd568 Mon Sep 17 00:00:00 2001
From: pseudo <cdodge@pseudoseed.com>
Date: Fri, 14 Aug 2026 07:22:37 -0600
Subject: [PATCH 09/15] [Bugfix #1455] Fix: reject an absent PR body instead of
 posting an empty one
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

CMAP round 2 (codex, REQUEST_CHANGES): the scripts validated CODEV_PR_TITLE
but not CODEV_PR_BODY. `--body ""` / `--description ""` succeeds everywhere,
so a caller who forgot the variable entirely got a bodyless PR at exit 0 —
exactly the silent failure #1455's testing notes describe. The scripts now
distinguish unset from deliberately empty (`${CODEV_PR_BODY+x}`) and fail
before reaching the forge CLI, with a test per provider covering both cases.

Also documents CODEV_PR_LOGIN (read by the gitea script, previously named
nowhere) in the script header, the contract and forge.md — claude's minor
note on the same round.

gemini APPROVE, claude APPROVE. Full suite 4891 passed.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
---
 codev/resources/commands/forge.md             |  2 +-
 .../codev/scripts/forge/gitea/pr-create.sh    |  8 ++++++
 .../codev/scripts/forge/github/pr-create.sh   |  7 +++++
 .../codev/scripts/forge/gitlab/pr-create.sh   |  7 +++++
 .../bugfix-1455-pr-create-concept.test.ts     | 26 +++++++++++++++++++
 packages/codev/src/lib/forge-contracts.ts     |  9 ++++---
 6 files changed, 55 insertions(+), 4 deletions(-)

diff --git a/codev/resources/commands/forge.md b/codev/resources/commands/forge.md
index 87bd8fb49..71ea12a2d 100644
--- a/codev/resources/commands/forge.md
+++ b/codev/resources/commands/forge.md
@@ -70,7 +70,7 @@ Set a concept to `null` to disable it. The feature that uses it will gracefully
 | `issue-list` | — | JSON array | List issues |
 | `issue-comment` | `CODEV_ISSUE_ID`, `CODEV_COMMENT_BODY` | — | Post issue comment |
 | `pr-exists` | `CODEV_BRANCH_NAME` | truthy/falsy | Check if PR exists for branch |
-| `pr-create` | `CODEV_PR_TITLE`, `CODEV_PR_BODY`, `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO`, `CODEV_PR_DRAFT` | JSON `{number, url}` | Open a PR (title + body required, rest optional) |
+| `pr-create` | `CODEV_PR_TITLE`, `CODEV_PR_BODY`, `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO`, `CODEV_PR_DRAFT` | JSON `{number, url}` | Open a PR (title + body required — set the body to `""` for none; rest optional. Gitea also reads `CODEV_PR_LOGIN`) |
 | `pr-merge` | `CODEV_PR_NUMBER` | — | Merge a PR |
 | `pr-search` | `CODEV_SEARCH_QUERY` | JSON array | Search PRs |
 | `pr-view` | `CODEV_PR_NUMBER`, `CODEV_INCLUDE_COMMENTS` | JSON or text | View PR details |
diff --git a/packages/codev/scripts/forge/gitea/pr-create.sh b/packages/codev/scripts/forge/gitea/pr-create.sh
index 51d3168d4..f3bea3ced 100755
--- a/packages/codev/scripts/forge/gitea/pr-create.sh
+++ b/packages/codev/scripts/forge/gitea/pr-create.sh
@@ -5,6 +5,7 @@
 # Input:  CODEV_PR_TITLE (required)
 #         CODEV_PR_BODY  (required, may be empty)
 #         CODEV_PR_BASE, CODEV_PR_HEAD, CODEV_PR_REPO, CODEV_PR_DRAFT (optional)
+#         CODEV_PR_LOGIN (optional, gitea-only: tea's --login, for multi-login hosts)
 # Output: {"number": <int>, "url": "<web url>"}
 #
 # `tea pulls create` takes the body as --description (not --body) and prints a
@@ -24,6 +25,13 @@ if [ -z "$CODEV_PR_TITLE" ]; then
   exit 2
 fi
 
+# An empty body is allowed; an *absent* one is not. Without this, forgetting the
+# variable opens a PR with no body at exit 0 — the silent failure #1455 is about.
+if [ -z "${CODEV_PR_BODY+x}" ]; then
+  echo "pr-create: CODEV_PR_BODY is required (set it to \"\" for an empty body)" >&2
+  exit 2
+fi
+
 head=$CODEV_PR_HEAD
 if [ -z "$head" ]; then
   head=$(git rev-parse --abbrev-ref HEAD)
diff --git a/packages/codev/scripts/forge/github/pr-create.sh b/packages/codev/scripts/forge/github/pr-create.sh
index 0c7cc0303..9d1296d8e 100755
--- a/packages/codev/scripts/forge/github/pr-create.sh
+++ b/packages/codev/scripts/forge/github/pr-create.sh
@@ -16,6 +16,13 @@ if [ -z "$CODEV_PR_TITLE" ]; then
   exit 2
 fi
 
+# An empty body is allowed; an *absent* one is not. Without this, forgetting the
+# variable opens a PR with no body at exit 0 — the silent failure #1455 is about.
+if [ -z "${CODEV_PR_BODY+x}" ]; then
+  echo "pr-create: CODEV_PR_BODY is required (set it to \"\" for an empty body)" >&2
+  exit 2
+fi
+
 set -- --title "$CODEV_PR_TITLE" --body "$CODEV_PR_BODY"
 if [ -n "$CODEV_PR_BASE" ]; then set -- "$@" --base "$CODEV_PR_BASE"; fi
 if [ -n "$CODEV_PR_HEAD" ]; then set -- "$@" --head "$CODEV_PR_HEAD"; fi
diff --git a/packages/codev/scripts/forge/gitlab/pr-create.sh b/packages/codev/scripts/forge/gitlab/pr-create.sh
index beaa4f677..3dd51eb09 100755
--- a/packages/codev/scripts/forge/gitlab/pr-create.sh
+++ b/packages/codev/scripts/forge/gitlab/pr-create.sh
@@ -22,6 +22,13 @@ if [ -z "$CODEV_PR_TITLE" ]; then
   exit 2
 fi
 
+# An empty body is allowed; an *absent* one is not. Without this, forgetting the
+# variable opens a PR with no body at exit 0 — the silent failure #1455 is about.
+if [ -z "${CODEV_PR_BODY+x}" ]; then
+  echo "pr-create: CODEV_PR_BODY is required (set it to \"\" for an empty body)" >&2
+  exit 2
+fi
+
 set -- --title "$CODEV_PR_TITLE" --description "$CODEV_PR_BODY" --yes
 if [ -n "$CODEV_PR_BASE" ]; then set -- "$@" --target-branch "$CODEV_PR_BASE"; fi
 if [ -n "$CODEV_PR_HEAD" ]; then set -- "$@" --source-branch "$CODEV_PR_HEAD"; fi
diff --git a/packages/codev/src/__tests__/bugfix-1455-pr-create-concept.test.ts b/packages/codev/src/__tests__/bugfix-1455-pr-create-concept.test.ts
index bd664783d..20deecaf9 100644
--- a/packages/codev/src/__tests__/bugfix-1455-pr-create-concept.test.ts
+++ b/packages/codev/src/__tests__/bugfix-1455-pr-create-concept.test.ts
@@ -157,6 +157,32 @@ describe('#1455 — pr-create scripts honour the contract', () => {
     expect(() => run('github', { CODEV_PR_TITLE: '', CODEV_PR_BODY: 'b' })).toThrow();
   });
 
+  it.each(['github', 'gitea', 'gitlab'])(
+    '%s: refuses an absent body but accepts a deliberately empty one',
+    (provider) => {
+      // `--body ""` succeeds on every forge, so an unset variable would open a
+      // bodyless PR at exit 0 — the silent failure #1455 exists to close.
+      stub('gh', 'echo https://github.com/o/r/pull/1');
+      stub('glab', 'echo https://gitlab.com/o/r/-/merge_requests/1');
+      stub(
+        'tea',
+        [
+          'if [ "$2" = "create" ]; then exit 0; fi',
+          'echo \'[{"index":"1","url":"https://forge.example.com/o/r/pulls/1","head":"b"}]\'',
+        ].join('\n'),
+      );
+
+      // Absent: the script must fail before it ever reaches the forge CLI.
+      expect(() => run(provider, { CODEV_PR_TITLE: 't', CODEV_PR_HEAD: 'b' })).toThrow();
+
+      // Empty-but-set: allowed (jq only needed for the gitea lookup).
+      if (provider !== 'gitea' || hasJq()) {
+        const stdout = run(provider, { CODEV_PR_TITLE: 't', CODEV_PR_BODY: '', CODEV_PR_HEAD: 'b' });
+        expect(JSON.parse(stdout).number).toBe(1);
+      }
+    },
+  );
+
   it.skipIf(!hasJq())(
     'gitea: passes the body as --description and normalizes tea output to {number, url}',
     () => {
diff --git a/packages/codev/src/lib/forge-contracts.ts b/packages/codev/src/lib/forge-contracts.ts
index e942960b2..ae6b39af6 100644
--- a/packages/codev/src/lib/forge-contracts.ts
+++ b/packages/codev/src/lib/forge-contracts.ts
@@ -143,9 +143,12 @@ export interface PrViewResult {
  * Output of the `pr-create` concept command.
  *
  * Inputs are environment variables, like every other concept:
- * `CODEV_PR_TITLE` (required), `CODEV_PR_BODY` (required, may be empty), and
- * the optional `CODEV_PR_BASE`, `CODEV_PR_HEAD`, `CODEV_PR_REPO`,
- * `CODEV_PR_DRAFT`. A failed creation exits non-zero rather than emitting JSON.
+ * `CODEV_PR_TITLE` (required), `CODEV_PR_BODY` (required — set it to `''` for
+ * an empty body; an *absent* one is rejected rather than silently posting a
+ * bodyless PR), and the optional `CODEV_PR_BASE`, `CODEV_PR_HEAD`,
+ * `CODEV_PR_REPO`, `CODEV_PR_DRAFT`. The gitea script also reads the optional
+ * `CODEV_PR_LOGIN` (tea's `--login`, for multi-login hosts). A failed creation
+ * exits non-zero rather than emitting JSON.
  */
 export interface PrCreateResult {
   /** The created PR's number (`iid` on GitLab, `index` on Gitea). */

From 8117a740d1ad7cb357658c35539902e4e9c00ad8 Mon Sep 17 00:00:00 2001
From: pseudo <cdodge@pseudoseed.com>
Date: Fri, 14 Aug 2026 07:31:57 -0600
Subject: [PATCH 10/15] [Bugfix #1455] Fix: tolerate both tea `.head` shapes;
 correct concept counts
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

CMAP round 3 non-blocking notes (all three lanes APPROVE):

- `gitea/pr-create.sh` read `.head` as a plain string (true on tea 0.14.2)
  while sibling `pr-exists.sh` reads `.head.ref`. Accept either shape — a
  lookup miss here reports failure for a PR that was actually created, which
  invites a duplicate on retry.
- `forge.ts` and `arch.md` still said "15 concepts" and omitted `pr-create`
  (along with `issue-search` and `repo-archive`). Now 18, listed.

Re-verified live against Forgejo after the change (PR #17: body, base and head
correct read back from the server; closed and branch deleted). Full suite 4891.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
---
 codev/resources/arch.md                       |  2 +-
 codev/state/bugfix-1455_thread.md             | 19 +++++++++++++++++++
 .../codev/scripts/forge/gitea/pr-create.sh    |  5 ++++-
 packages/codev/src/lib/forge.ts               |  2 +-
 4 files changed, 25 insertions(+), 3 deletions(-)

diff --git a/codev/resources/arch.md b/codev/resources/arch.md
index 1d8f29e63..1bf95dcd6 100644
--- a/codev/resources/arch.md
+++ b/codev/resources/arch.md
@@ -1993,7 +1993,7 @@ All interactions with the repository hosting platform (GitHub by default) are ro
 
 **Configuration**: `.codev/config.json` `forge` section maps concept names to shell commands. Set to `null` to disable a concept. Omit to use the default (`gh`-based) command.
 
-**15 concepts**: `issue-view`, `pr-list`, `issue-list`, `issue-comment`, `pr-exists`, `recently-closed`, `recently-merged`, `user-identity`, `team-activity`, `on-it-timestamps`, `pr-merge`, `pr-search`, `pr-view`, `pr-diff`, `auth-status`.
+**18 concepts**: `issue-view`, `pr-list`, `issue-list`, `issue-search`, `issue-comment`, `pr-exists`, `recently-closed`, `recently-merged`, `user-identity`, `team-activity`, `on-it-timestamps`, `pr-create`, `pr-merge`, `pr-search`, `pr-view`, `pr-diff`, `auth-status`, `repo-archive`.
 
 **Environment variables**: Each concept receives `CODEV_*` env vars (e.g., `CODEV_ISSUE_NUMBER`, `CODEV_PR_NUMBER`) that the command uses to parameterize its output.
 
diff --git a/codev/state/bugfix-1455_thread.md b/codev/state/bugfix-1455_thread.md
index 1514c93bc..cd3d43b02 100644
--- a/codev/state/bugfix-1455_thread.md
+++ b/codev/state/bugfix-1455_thread.md
@@ -156,3 +156,22 @@ Three real defects, all fixed in `a9f534ed`+ follow-ups:
 
 Also took claude's non-blocking note: the disabled-concept fallback rendered as a `#` comment
 (valid shell, exit 0, no PR). It now fails loudly.
+
+### CMAP round 2: gemini APPROVE · claude APPROVE · codex REQUEST_CHANGES
+
+4. **codex** — the scripts checked the title but not the body. `--body ""` succeeds on every
+   forge, so omitting `CODEV_PR_BODY` entirely opened a bodyless PR at exit 0 — the exact silent
+   failure the issue's testing notes describe. Now `${CODEV_PR_BODY+x}` separates unset from
+   deliberately empty, failing before the forge CLI is reached, with a per-provider test covering
+   both. Also documented `CODEV_PR_LOGIN` (claude's minor: read by the gitea script, named
+   nowhere).
+
+### CMAP round 3: gemini APPROVE · codex APPROVE · claude APPROVE
+
+Took claude's two remaining minors: `.head` now accepts both the string (tea 0.14.2) and the
+object-with-`.ref` shape sibling scripts assume, so a lookup miss can't report failure for a PR
+that exists and invite a duplicate retry; and the stale "15 concepts" counts in `forge.ts` and
+`arch.md` are corrected to 18 with `pr-create` listed.
+
+Re-verified live afterwards: PR #17 on the Forgejo scratch repo, body/base/head correct on the
+server, closed and branch deleted.
diff --git a/packages/codev/scripts/forge/gitea/pr-create.sh b/packages/codev/scripts/forge/gitea/pr-create.sh
index f3bea3ced..6aa136997 100755
--- a/packages/codev/scripts/forge/gitea/pr-create.sh
+++ b/packages/codev/scripts/forge/gitea/pr-create.sh
@@ -54,8 +54,11 @@ set -- --state open --limit 200 --fields index,url,head --output json
 if [ -n "$CODEV_PR_REPO" ]; then set -- "$@" --repo "$CODEV_PR_REPO"; fi
 if [ -n "$CODEV_PR_LOGIN" ]; then set -- "$@" --login "$CODEV_PR_LOGIN"; fi
 
+# `.head` is a plain branch string on tea 0.14.2, but sibling scripts were written
+# against an object with `.ref` — accept either rather than risk a lookup miss,
+# which would report failure for a PR that exists and invite a duplicate retry.
 result=$(tea pulls list "$@" | jq -c --arg head "${head#*:}" '
-  [ .[] | select((.head | sub("^[^:]*:"; "")) == $head) ]
+  [ .[] | select(((.head | if type == "object" then .ref else . end) | sub("^[^:]*:"; "")) == $head) ]
   | max_by(.index | tonumber)
   | if . == null then null else {number: (.index | tonumber), url} end')
 
diff --git a/packages/codev/src/lib/forge.ts b/packages/codev/src/lib/forge.ts
index 77c7a3d9e..bdb0661c3 100644
--- a/packages/codev/src/lib/forge.ts
+++ b/packages/codev/src/lib/forge.ts
@@ -148,7 +148,7 @@ export interface ConceptResolution {
 }
 
 /**
- * Resolve all 15 concepts with their source and executable.
+ * Resolve every known concept with its source and executable.
  * Used by `codev doctor` for full concept reporting.
  */
 export function resolveAllConcepts(forgeConfig?: ForgeConfig | null): ConceptResolution[] {

From 30de49e738887bf71f514e218d97fa4ee76f3be7 Mon Sep 17 00:00:00 2001
From: pseudo <cdodge@pseudoseed.com>
Date: Fri, 14 Aug 2026 07:32:49 -0600
Subject: [PATCH 11/15] chore(porch): bugfix-1455 pr gate-requested

---
 .../bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml    | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/codev/projects/bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml b/codev/projects/bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml
index e45284371..3f09d8718 100644
--- a/codev/projects/bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml
+++ b/codev/projects/bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml
@@ -7,13 +7,15 @@ current_plan_phase: null
 gates:
   pr:
     status: pending
+    requested_at: '2026-08-14T13:32:49.424Z'
 iteration: 1
 build_complete: false
 history: []
 started_at: '2026-08-14T04:34:29.595Z'
-updated_at: '2026-08-14T12:36:11.218Z'
+updated_at: '2026-08-14T13:32:49.425Z'
 pr_history:
   - phase: pr
     pr_number: 1458
     branch: builder/bugfix-1455
     created_at: '2026-08-14T12:36:11.217Z'
+pr_ready_for_human: true

From bc29d5a7e95083cbec149a0fe8a9a13b8229f067 Mon Sep 17 00:00:00 2001
From: pseudo <cdodge@pseudoseed.com>
Date: Fri, 14 Aug 2026 07:33:26 -0600
Subject: [PATCH 12/15] chore(porch): bugfix-1455 pr gate-approved

---
 .../bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/codev/projects/bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml b/codev/projects/bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml
index 3f09d8718..11eb448d6 100644
--- a/codev/projects/bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml
+++ b/codev/projects/bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml
@@ -6,16 +6,17 @@ plan_phases: []
 current_plan_phase: null
 gates:
   pr:
-    status: pending
+    status: approved
     requested_at: '2026-08-14T13:32:49.424Z'
+    approved_at: '2026-08-14T13:33:26.924Z'
 iteration: 1
 build_complete: false
 history: []
 started_at: '2026-08-14T04:34:29.595Z'
-updated_at: '2026-08-14T13:32:49.425Z'
+updated_at: '2026-08-14T13:33:26.925Z'
 pr_history:
   - phase: pr
     pr_number: 1458
     branch: builder/bugfix-1455
     created_at: '2026-08-14T12:36:11.217Z'
-pr_ready_for_human: true
+pr_ready_for_human: false

From b44b5d1a971cbe617d7b022d54776ceae328701e Mon Sep 17 00:00:00 2001
From: pseudo <cdodge@pseudoseed.com>
Date: Fri, 14 Aug 2026 07:33:34 -0600
Subject: [PATCH 13/15] chore(porch): bugfix-1455 protocol complete

---
 .../bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml    | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/codev/projects/bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml b/codev/projects/bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml
index 11eb448d6..a92c958f1 100644
--- a/codev/projects/bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml
+++ b/codev/projects/bugfix-1455-pr-create-is-not-a-forge-conce/status.yaml
@@ -1,7 +1,7 @@
 id: bugfix-1455
 title: pr-create-is-not-a-forge-conce
 protocol: bugfix
-phase: pr
+phase: verified
 plan_phases: []
 current_plan_phase: null
 gates:
@@ -13,7 +13,7 @@ iteration: 1
 build_complete: false
 history: []
 started_at: '2026-08-14T04:34:29.595Z'
-updated_at: '2026-08-14T13:33:26.925Z'
+updated_at: '2026-08-14T13:33:34.558Z'
 pr_history:
   - phase: pr
     pr_number: 1458

From ae64652e1803e4872c1ceb6d765a7a059ebceb41 Mon Sep 17 00:00:00 2001
From: pseudo <cdodge@pseudoseed.com>
Date: Fri, 14 Aug 2026 08:06:56 -0600
Subject: [PATCH 14/15] [Bugfix #1455] Fix: create the gitea PR through `tea
 api`, drop the lookup
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The gitea `pr-create` ran `tea pulls create` (whose output is a rendered,
ANSI-decorated view, not parseable) and then searched for the PR it had just
made with `tea pulls list --limit 200`.

That search was built on a disproven assumption. #1146 established, and this
change re-confirmed against live Forgejo 15.0.2, that Gitea caps every list
response at the server's `max_response_items` — default 50. `settings/api`
reports 50, and a `?limit=200` request returns exactly 50 items where paging at
50 returns 53. So `--limit 200` silently truncates: on a busy repo the
just-created PR falls off the first page, and pr-create reported

    created the PR but could not find an open pull for head '<branch>'

and exited 1 for a PR that exists — inviting a duplicate retry at the single
most important write in the protocol.

Rather than paginate the lookup, remove it. `tea api -X POST
repos/{owner}/{repo}/pulls` RETURNS the created PR — `number` and `html_url` —
in its response body, so there is nothing to search, nothing to race, and
nothing to truncate. It also drops the `<user>:<branch>` head-matching
heuristic: the API resolves an owner-qualified head itself.

Live verification against tea 0.14.2 + Forgejo 15.0.2 turned up three defects
in the obvious version of that change. Each is the same bug class as #1455
itself — an operation accepted and then silently not performed — so each is
handled in code, not left as a caveat.

1. `tea api` EXITS 0 on HTTP errors, printing the error body. Since the whole
   change replaces a lookup with a single call, trusting that exit code would
   reintroduce #1455's silent success inside the fix for it: a 404 or 422 would
   be reported as a created PR. The response is therefore asserted to BE a PR
   object — an object carrying a numeric `number` AND a non-empty browser URL —
   and anything else fails loudly with the response body. Pinned by tests that
   feed an error object, an array, a string-typed `number`, a numberless object,
   `null` and an empty body, all at exit 0.

   The one case where `number` is present but the URL is not gets its own
   message: the PR WAS created, so it names the number and says not to retry.
   Reading that as "nothing happened" is how duplicates get opened.

2. `base` is REQUIRED by the API — it answers `[Base]: Required` — where
   `tea pulls create` defaulted it client-side. Silently posting against the
   wrong base would be worse than erroring, so an unset CODEV_PR_BASE now
   resolves the repo's default branch explicitly, and fails with a clear
   message if that cannot be resolved.

3. `draft: true` in the payload is SILENTLY IGNORED (the response comes back
   `draft: false`), so CODEV_PR_DRAFT=1 would have been an accepted-and-ignored
   flag. Gitea marks a draft by a `WIP:` title prefix — exactly what
   `tea pulls create --draft` does — so that is now implemented, and verified
   server-side to produce `draft: true`.

Also verified live: `{owner}`/`{repo}` are substituted by tea from the repo
context, with `--repo owner/name` supplying it when the cwd has no Gitea remote
(checked with https and scp-style remotes, and from a GitHub-remote cwd); `url`
on the create response is the browser page, so `.html_url // .url` lands the
right one in the contract; and the body round-trips byte-identically, being
built with `jq --arg` and fed on stdin (`-d @-`) rather than surviving an argv
round-trip.

The unresolvable-repo case used to surface as a bare `404 page not found`; it
now names CODEV_PR_REPO as the remedy, matching the fail-fast ergonomics of
`_lib.sh#gitea_repo` in #1146 without taking a dependency on that PR — this
change stands alone and the two can merge in either order.

Tests: the gitea half of the concept suite is rewritten against a `tea api`
stub. Every new case fails against the previous script and passes against this
one, including an explicit assertion that no `pulls`/`list`/`--limit` call is
made at all.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
---
 .../codev/scripts/forge/gitea/pr-create.sh    | 133 ++++++--
 .../bugfix-1455-pr-create-concept.test.ts     | 309 ++++++++++++++----
 2 files changed, 356 insertions(+), 86 deletions(-)

diff --git a/packages/codev/scripts/forge/gitea/pr-create.sh b/packages/codev/scripts/forge/gitea/pr-create.sh
index 6aa136997..e9fa7c16b 100755
--- a/packages/codev/scripts/forge/gitea/pr-create.sh
+++ b/packages/codev/scripts/forge/gitea/pr-create.sh
@@ -8,16 +8,38 @@
 #         CODEV_PR_LOGIN (optional, gitea-only: tea's --login, for multi-login hosts)
 # Output: {"number": <int>, "url": "<web url>"}
 #
-# `tea pulls create` takes the body as --description (not --body) and prints a
-# rendered, line-wrapped, ANSI-decorated view of the new PR — not something to
-# parse. Its whole output is sent to stderr and the created PR is then looked up
-# by head branch via `tea pulls list`, whose `--output json` carries `index`,
-# `url` (the browser URL) and `head` (a plain branch-name string).
+# Creates the PR with the raw REST passthrough (`tea api -X POST …/pulls`),
+# which RETURNS THE CREATED PR — number and `html_url` — in its response body.
+# There is no lookup afterwards, so there is nothing to race and nothing to
+# paginate.
 #
-# Verified against tea 0.14.2 + Forgejo: with a single configured login and an
-# explicit --head, `tea pulls create` neither prompts nor needs --repo/--login
-# (it autodetects from the git remote). Both are still forwarded when set, for
-# multi-login hosts and for the tea 0.11.x autodetect prompt (#1146).
+# Why not `tea pulls create`: it prints a rendered, line-wrapped, ANSI-decorated
+# view of the new PR rather than anything parseable, so it has to be followed by
+# a search for the PR it just made. That search was the bug. #1146 established
+# that Gitea caps every list response at the server's `max_response_items`
+# (default 50 — confirmed against Forgejo 15.0.2: `settings/api` reports 50, and
+# a `?limit=200` request returns exactly 50 items where paging at 50 returns 53),
+# so `tea pulls list --limit 200` silently truncates. On a busy repo the
+# just-created PR falls off the first page and this script would have reported
+# failure for a PR that exists — inviting a duplicate retry.
+#
+# Verified against tea 0.14.2 + Forgejo 15.0.2:
+#   - POST repos/{owner}/{repo}/pulls returns the full PR object, incl. `number`
+#     and `html_url` (its `url` is the browser page too on create, unlike the GET
+#     shape where `url` is the API endpoint — hence `.html_url // .url`).
+#   - `{owner}`/`{repo}` are substituted by tea from the repo context, and
+#     `--repo <owner>/<name>` supplies that context when the cwd has no Gitea
+#     remote. Verified with https and scp-style Gitea remotes.
+#   - `base` is REQUIRED by the API (it answers `[Base]: Required` without it),
+#     unlike `tea pulls create`, which defaults it client-side. So when
+#     CODEV_PR_BASE is unset this resolves the repo's default branch first.
+#   - `draft: true` in the payload is SILENTLY IGNORED (the response comes back
+#     `draft: false`). Gitea marks a PR draft by a `WIP:` title prefix, which is
+#     exactly what `tea pulls create --draft` does, so that is replicated here.
+#   - `tea api` EXITS 0 on HTTP errors, printing the error body (JSON with
+#     `.message`, or bare text like `404 page not found`). Failure therefore has
+#     to be detected by inspecting the response, never by exit status — see the
+#     assertion below, which is the load-bearing check in this script.
 set -e
 
 if [ -z "$CODEV_PR_TITLE" ]; then
@@ -37,33 +59,84 @@ if [ -z "$head" ]; then
   head=$(git rev-parse --abbrev-ref HEAD)
 fi
 
-set -- --title "$CODEV_PR_TITLE" --description "$CODEV_PR_BODY" --head "$head"
-if [ -n "$CODEV_PR_BASE" ]; then set -- "$@" --base "$CODEV_PR_BASE"; fi
+# Gitea has no draft flag on the API; a "WIP:" title prefix is the draft marker.
+title=$CODEV_PR_TITLE
+if [ "$CODEV_PR_DRAFT" = "1" ]; then
+  title="WIP: $CODEV_PR_TITLE"
+fi
+
+# Shared tea options: which host/repo to talk to. `{owner}`/`{repo}` in the
+# endpoint are filled from this context.
+set --
 if [ -n "$CODEV_PR_REPO" ]; then set -- "$@" --repo "$CODEV_PR_REPO"; fi
 if [ -n "$CODEV_PR_LOGIN" ]; then set -- "$@" --login "$CODEV_PR_LOGIN"; fi
-if [ "$CODEV_PR_DRAFT" = "1" ]; then set -- "$@" --draft; fi
 
-tea pulls create "$@" >&2
+base=$CODEV_PR_BASE
+if [ -z "$base" ]; then
+  # The API rejects a missing base, so mirror `tea pulls create`'s default.
+  base=$(tea api "$@" 'repos/{owner}/{repo}' | jq -r '.default_branch // empty') || base=
+  if [ -z "$base" ]; then
+    echo "pr-create: could not resolve the repository's default branch; set CODEV_PR_BASE" >&2
+    exit 1
+  fi
+fi
 
-# Look the PR up by head branch. A cross-repo head is "<user>:<branch>" on the
-# way in but lists as the bare branch name, so match either form. --limit 200
-# matches the other gitea scripts: on tea's default page size a busy repo could
-# push the just-created PR off the list, and this would report a failure for a
-# PR that exists.
-set -- --state open --limit 200 --fields index,url,head --output json
-if [ -n "$CODEV_PR_REPO" ]; then set -- "$@" --repo "$CODEV_PR_REPO"; fi
-if [ -n "$CODEV_PR_LOGIN" ]; then set -- "$@" --login "$CODEV_PR_LOGIN"; fi
+# Build the payload with jq so an arbitrary body — quotes, backticks, newlines,
+# backslashes, unicode — is JSON-escaped rather than interpolated, and feed it
+# on stdin (`-d @-`) so it never has to survive an argv round-trip.
+response=$(
+  jq -n --arg title "$title" --arg body "$CODEV_PR_BODY" \
+        --arg head "$head" --arg base "$base" \
+        '{title: $title, body: $body, head: $head, base: $base}' \
+    | tea api "$@" -X POST -d @- 'repos/{owner}/{repo}/pulls'
+)
+
+# `tea api` exits 0 on HTTP errors, so the response body is the ONLY signal that
+# the PR was created. Trusting the exit code here would reintroduce exactly the
+# silent success #1455 exists to kill — this time in the fix for it. So assert
+# the response really is a PR object: an object carrying a numeric `number` AND
+# a non-empty browser URL. Anything else is a failure, however it is dressed.
+result=$(printf '%s' "$response" | jq -c '
+  if type != "object" then empty
+  elif (.number | type) != "number" then empty
+  else
+    (.html_url // .url) as $url
+    | if ($url | type) == "string" and ($url | length) > 0
+      then {number: .number, url: $url}
+      else empty
+      end
+  end
+' 2>/dev/null) || result=
 
-# `.head` is a plain branch string on tea 0.14.2, but sibling scripts were written
-# against an object with `.ref` — accept either rather than risk a lookup miss,
-# which would report failure for a PR that exists and invite a duplicate retry.
-result=$(tea pulls list "$@" | jq -c --arg head "${head#*:}" '
-  [ .[] | select(((.head | if type == "object" then .ref else . end) | sub("^[^:]*:"; "")) == $head) ]
-  | max_by(.index | tonumber)
-  | if . == null then null else {number: (.index | tonumber), url} end')
+if [ -z "$result" ]; then
+  # A numeric `number` with no usable URL means the PR WAS created and only the
+  # URL is missing. Say so, and name the number: the operator must not read this
+  # as "nothing happened" and retry into a duplicate.
+  number=$(printf '%s' "$response" | jq -r '
+    if type == "object" and (.number | type) == "number" then .number else empty end
+  ' 2>/dev/null) || number=
+  if [ -n "$number" ]; then
+    echo "pr-create: PR #$number WAS CREATED, but the Gitea response carried no browser URL." >&2
+    echo "pr-create: do not retry — that would open a duplicate. Response: $response" >&2
+    exit 1
+  fi
 
-if [ -z "$result" ] || [ "$result" = "null" ]; then
-  echo "pr-create: created the PR but could not find an open pull for head '$head'" >&2
+  message=$(printf '%s' "$response" | jq -r '.message // empty' 2>/dev/null) || message=
+  if [ -n "$message" ]; then
+    echo "pr-create: Gitea refused to create the PR: $message" >&2
+  else
+    case "$response" in
+      404*)
+        # `{owner}`/`{repo}` stayed unsubstituted, so tea requested `repos//pulls`.
+        # Name the remedy rather than leaving a bare 404 (cf. `_lib.sh#gitea_repo`).
+        echo "pr-create: Gitea answered 404 — could not resolve owner/repo for this repository." >&2
+        echo "pr-create: set CODEV_PR_REPO=owner/repo, or run from a checkout whose remote is a configured Gitea host." >&2
+        ;;
+      *)
+        echo "pr-create: unexpected response from the Gitea API: $response" >&2
+        ;;
+    esac
+  fi
   exit 1
 fi
 
diff --git a/packages/codev/src/__tests__/bugfix-1455-pr-create-concept.test.ts b/packages/codev/src/__tests__/bugfix-1455-pr-create-concept.test.ts
index 20deecaf9..ee7787135 100644
--- a/packages/codev/src/__tests__/bugfix-1455-pr-create-concept.test.ts
+++ b/packages/codev/src/__tests__/bugfix-1455-pr-create-concept.test.ts
@@ -41,6 +41,34 @@ const TRICKY_BODY = [
   '- [ ] checkbox',
 ].join('\n');
 
+/**
+ * A fake `tea` implementing the slice of `tea api` the gitea script uses.
+ *
+ * Records argv per HTTP method (so a test can assert what was and wasn't
+ * called) plus the POSTed request body, then answers:
+ *   GET  repos/{owner}/{repo}        → {"default_branch":"trunk"}
+ *   POST repos/{owner}/{repo}/pulls  → the created PR object
+ *
+ * The POST response carries both `html_url` (browser page) and `url` (API
+ * endpoint) so the tests pin that the browser page is what reaches the contract.
+ * Everything that isn't `tea api` exits non-zero — `tea pulls create`/`list`
+ * must not be reachable.
+ */
+const TEA_API_STUB = [
+  'if [ "$1" != "api" ]; then echo "unexpected: $*" >&2; exit 9; fi',
+  'method=GET',
+  'for a in "$@"; do case "$prev" in -X) method=$a ;; esac; prev=$a; done',
+  'if [ "$method" = POST ]; then',
+  '  printf "%s\\0" "$@" > post-args',
+  '  cat > post-body',
+  '  echo \'{"number":7,"html_url":"https://forge.example.com/o/r/pulls/7","url":"https://forge.example.com/api/v1/repos/o/r/pulls/7"}\'',
+  'else',
+  '  printf "%s\\0" "$@" > get-args',
+  '  echo \'{"default_branch":"trunk"}\'',
+  'fi',
+  'exit 0',
+].join('\n');
+
 function hasJq(): boolean {
   try {
     execFileSync('sh', ['-c', 'command -v jq'], { stdio: 'ignore' });
@@ -164,47 +192,28 @@ describe('#1455 — pr-create scripts honour the contract', () => {
       // bodyless PR at exit 0 — the silent failure #1455 exists to close.
       stub('gh', 'echo https://github.com/o/r/pull/1');
       stub('glab', 'echo https://gitlab.com/o/r/-/merge_requests/1');
-      stub(
-        'tea',
-        [
-          'if [ "$2" = "create" ]; then exit 0; fi',
-          'echo \'[{"index":"1","url":"https://forge.example.com/o/r/pulls/1","head":"b"}]\'',
-        ].join('\n'),
-      );
+      stub('tea', TEA_API_STUB.replace('"number":7', '"number":1'));
 
       // Absent: the script must fail before it ever reaches the forge CLI.
       expect(() => run(provider, { CODEV_PR_TITLE: 't', CODEV_PR_HEAD: 'b' })).toThrow();
 
-      // Empty-but-set: allowed (jq only needed for the gitea lookup).
+      // Empty-but-set: allowed (jq only needed to build/read the gitea payload).
       if (provider !== 'gitea' || hasJq()) {
-        const stdout = run(provider, { CODEV_PR_TITLE: 't', CODEV_PR_BODY: '', CODEV_PR_HEAD: 'b' });
+        const stdout = run(provider, {
+          CODEV_PR_TITLE: 't',
+          CODEV_PR_BODY: '',
+          CODEV_PR_HEAD: 'b',
+          CODEV_PR_BASE: 'main',
+        });
         expect(JSON.parse(stdout).number).toBe(1);
       }
     },
   );
 
   it.skipIf(!hasJq())(
-    'gitea: passes the body as --description and normalizes tea output to {number, url}',
+    'gitea: creates through `tea api` POST and reads the PR out of the response',
     () => {
-      // `tea pulls create` prints a rendered, line-wrapped, ANSI-decorated view;
-      // the script must ignore it and look the PR up via `tea pulls list`.
-      stub(
-        'tea',
-        [
-          'if [ "$2" = "create" ]; then',
-          '  printf "%s\\0" "$@" > create-args',
-          '  echo "  # #7 rendered nonsense (open)"',
-          '  exit 0',
-          'fi',
-          'if [ "$2" = "list" ]; then',
-          '  printf "%s\\0" "$@" > list-args',
-          '  echo \'[{"index":"7","url":"https://forge.example.com/o/r/pulls/7","head":"my-branch"},',
-          '        {"index":"3","url":"https://forge.example.com/o/r/pulls/3","head":"other"}]\'',
-          '  exit 0',
-          'fi',
-          'exit 1',
-        ].join('\n'),
-      );
+      stub('tea', TEA_API_STUB);
 
       const stdout = run('gitea', {
         CODEV_PR_TITLE: 'Fix #1455',
@@ -213,52 +222,240 @@ describe('#1455 — pr-create scripts honour the contract', () => {
         CODEV_PR_HEAD: 'my-branch',
       });
 
+      // The created PR comes straight out of the create response — and `url` is
+      // the browser page, never the API endpoint the stub also returns.
       expect(JSON.parse(stdout)).toEqual({
         number: 7,
         url: 'https://forge.example.com/o/r/pulls/7',
       });
 
-      const args = recordedArgs('create-args');
-      expect(args.slice(0, 2)).toEqual(['pulls', 'create']);
-      expect(args[args.indexOf('--description') + 1]).toBe(TRICKY_BODY);
-      expect(args).not.toContain('--body');
-      expect(args[args.indexOf('--title') + 1]).toBe('Fix #1455');
-      expect(args[args.indexOf('--head') + 1]).toBe('my-branch');
-      expect(args[args.indexOf('--base') + 1]).toBe('main');
-
-      // The lookup must page like every other gitea script; on tea's default
-      // page a busy repo pushes the just-created PR off the list and the script
-      // reports failure for a PR that exists.
-      const listArgs = recordedArgs('list-args');
-      expect(listArgs[listArgs.indexOf('--limit') + 1]).toBe('200');
+      const args = recordedArgs('post-args');
+      expect(args[0]).toBe('api');
+      expect(args).toContain('-X');
+      expect(args[args.indexOf('-X') + 1]).toBe('POST');
+      expect(args).toContain('repos/{owner}/{repo}/pulls');
+      // Body travels on stdin, not argv — nothing to quote-mangle.
+      expect(args[args.indexOf('-d') + 1]).toBe('@-');
+
+      // The payload is JSON, and the body survives it byte for byte.
+      const payload = JSON.parse(fs.readFileSync(path.join(tmp, 'post-body'), 'utf-8'));
+      expect(payload).toEqual({
+        title: 'Fix #1455',
+        body: TRICKY_BODY,
+        head: 'my-branch',
+        base: 'main',
+      });
     },
   );
 
-  it.skipIf(!hasJq())('gitea: matches a cross-repo <user>:<branch> head', () => {
-    stub(
-      'tea',
-      [
-        'if [ "$2" = "create" ]; then exit 0; fi',
-        'echo \'[{"index":"9","url":"https://forge.example.com/o/r/pulls/9","head":"feature"}]\'',
-      ].join('\n'),
-    );
+  it.skipIf(!hasJq())('gitea: never looks the created PR up with a truncating list call', () => {
+    // The regression this pins: the lookup used to be `tea pulls list --limit
+    // 200`. Gitea caps list responses at `max_response_items` (default 50 —
+    // confirmed against Forgejo 15.0.2), so `--limit 200` silently truncates and
+    // on a busy repo the just-created PR falls off the page. The script then
+    // reported failure for a PR that exists, inviting a duplicate retry.
+    // Reading the PR out of the create response removes the lookup entirely.
+    stub('tea', TEA_API_STUB);
+
+    run('gitea', {
+      CODEV_PR_TITLE: 't',
+      CODEV_PR_BODY: 'b',
+      CODEV_PR_HEAD: 'my-branch',
+      CODEV_PR_BASE: 'main',
+    });
+
+    const args = recordedArgs('post-args');
+    expect(args).not.toContain('pulls'); // i.e. no `tea pulls list`
+    expect(args).not.toContain('list');
+    expect(args).not.toContain('--limit');
+    expect(fs.existsSync(path.join(tmp, 'get-args')), 'made an unnecessary GET').toBe(false);
+  });
+
+  it.skipIf(!hasJq())('gitea: resolves the default branch when no base is given', () => {
+    // `tea pulls create` defaulted the base client-side; the REST API rejects a
+    // missing one outright (`[Base]: Required`), so the script has to ask.
+    stub('tea', TEA_API_STUB);
+
+    const stdout = run('gitea', {
+      CODEV_PR_TITLE: 't',
+      CODEV_PR_BODY: 'b',
+      CODEV_PR_HEAD: 'my-branch',
+    });
+    expect(JSON.parse(stdout).number).toBe(7);
+
+    expect(recordedArgs('get-args')).toContain('repos/{owner}/{repo}');
+    const payload = JSON.parse(fs.readFileSync(path.join(tmp, 'post-body'), 'utf-8'));
+    expect(payload.base).toBe('trunk');
+  });
+
+  it.skipIf(!hasJq())('gitea: marks a draft with a WIP: title prefix', () => {
+    // Gitea has no draft flag on the create API — it silently ignores
+    // `draft: true` (verified against Forgejo 15.0.2, which echoes back
+    // `draft: false`). A `WIP:` title prefix is the marker, and it is what
+    // `tea pulls create --draft` does too.
+    stub('tea', TEA_API_STUB);
+
+    run('gitea', {
+      CODEV_PR_TITLE: 'Fix #1455',
+      CODEV_PR_BODY: 'b',
+      CODEV_PR_HEAD: 'my-branch',
+      CODEV_PR_BASE: 'main',
+      CODEV_PR_DRAFT: '1',
+    });
+
+    const payload = JSON.parse(fs.readFileSync(path.join(tmp, 'post-body'), 'utf-8'));
+    expect(payload.title).toBe('WIP: Fix #1455');
+    expect(payload).not.toHaveProperty('draft');
+  });
+
+  it.skipIf(!hasJq())('gitea: passes a cross-repo <user>:<branch> head through verbatim', () => {
+    // The API resolves `owner:branch` itself (verified against Forgejo 15.0.2),
+    // so there is no head-matching heuristic left to get wrong.
+    stub('tea', TEA_API_STUB);
 
     const stdout = run('gitea', {
       CODEV_PR_TITLE: 't',
       CODEV_PR_BODY: 'b',
       CODEV_PR_HEAD: 'contributor:feature',
+      CODEV_PR_BASE: 'main',
+    });
+    expect(JSON.parse(stdout).number).toBe(7);
+
+    const payload = JSON.parse(fs.readFileSync(path.join(tmp, 'post-body'), 'utf-8'));
+    expect(payload.head).toBe('contributor:feature');
+  });
+
+  it.skipIf(!hasJq())('gitea: forwards --repo and --login to tea', () => {
+    stub('tea', TEA_API_STUB);
+
+    run('gitea', {
+      CODEV_PR_TITLE: 't',
+      CODEV_PR_BODY: 'b',
+      CODEV_PR_HEAD: 'my-branch',
+      CODEV_PR_BASE: 'main',
+      CODEV_PR_REPO: 'acme/widgets',
+      CODEV_PR_LOGIN: 'work',
     });
-    expect(JSON.parse(stdout).number).toBe(9);
+
+    const args = recordedArgs('post-args');
+    expect(args[args.indexOf('--repo') + 1]).toBe('acme/widgets');
+    expect(args[args.indexOf('--login') + 1]).toBe('work');
   });
 
-  it.skipIf(!hasJq())('gitea: fails when the created PR cannot be found', () => {
+  it.skipIf(!hasJq())('gitea: fails loudly on an API error even though tea exits 0', () => {
+    // `tea api` returns exit 0 for HTTP errors and prints the error body, so
+    // exit status is not a usable signal — the response has to be inspected.
+    // Verified live: a duplicate head answers `{"message":"pull request already
+    // exists…"}` at exit 0.
     stub(
       'tea',
-      ['if [ "$2" = "create" ]; then exit 0; fi', "echo '[]'"].join('\n'),
+      [
+        'if [ "$1" = "api" ]; then',
+        '  for a in "$@"; do case "$prev" in -X) m=$a ;; esac; prev=$a; done',
+        '  if [ "$m" = POST ]; then cat > /dev/null; fi',
+        '  echo \'{"message":"pull request already exists for these targets","url":"https://forge.example.com/api/swagger"}\'',
+        '  exit 0',
+        'fi',
+        'exit 1',
+      ].join('\n'),
     );
-    expect(() =>
-      run('gitea', { CODEV_PR_TITLE: 't', CODEV_PR_BODY: 'b', CODEV_PR_HEAD: 'nope' }),
-    ).toThrow();
+
+    let stderr = '';
+    try {
+      run('gitea', {
+        CODEV_PR_TITLE: 't',
+        CODEV_PR_BODY: 'b',
+        CODEV_PR_HEAD: 'dup',
+        CODEV_PR_BASE: 'main',
+      });
+      expect.unreachable('the script exited 0 for a PR that was never created');
+    } catch (e) {
+      stderr = String((e as { stderr?: Buffer }).stderr ?? '');
+    }
+    expect(stderr).toContain('pull request already exists');
+  });
+
+  it.skipIf(!hasJq())('gitea: rejects a 200-shaped response that is not a PR object', () => {
+    // Every one of these comes back at exit 0. None of them is a created PR, so
+    // none may be reported as one — that is #1455's silent success reappearing
+    // inside the fix for it.
+    const notPrs = [
+      '{"message":"The target couldn\'t be found."}', // API error object
+      '[]', // an array (e.g. a list endpoint answered instead)
+      '{"number":"7","html_url":"https://forge.example.com/o/r/pulls/7"}', // number as a STRING
+      '{"html_url":"https://forge.example.com/o/r/pulls/7"}', // no number at all
+      'null',
+      '',
+    ];
+
+    for (const payload of notPrs) {
+      stub(
+        'tea',
+        ['if [ "$1" = "api" ]; then', `  printf '%s' '${payload}'`, '  exit 0', 'fi', 'exit 1'].join('\n'),
+      );
+      expect(
+        () =>
+          run('gitea', {
+            CODEV_PR_TITLE: 't',
+            CODEV_PR_BODY: 'b',
+            CODEV_PR_HEAD: 'x',
+            CODEV_PR_BASE: 'main',
+          }),
+        `reported success for a non-PR response: ${payload || '(empty)'}`,
+      ).toThrow();
+    }
+  });
+
+  it.skipIf(!hasJq())('gitea: a created PR with no URL warns against retrying', () => {
+    // `number` but no `html_url`/`url` means the PR EXISTS and only the URL is
+    // missing. Exiting 1 is right, but the message must not read as "nothing
+    // happened" — that invites the duplicate retry this whole change is about.
+    stub(
+      'tea',
+      [
+        'if [ "$1" = "api" ]; then',
+        '  echo \'{"number":7,"title":"t"}\'',
+        '  exit 0',
+        'fi',
+        'exit 1',
+      ].join('\n'),
+    );
+
+    let stderr = '';
+    try {
+      run('gitea', {
+        CODEV_PR_TITLE: 't',
+        CODEV_PR_BODY: 'b',
+        CODEV_PR_HEAD: 'x',
+        CODEV_PR_BASE: 'main',
+      });
+      expect.unreachable('emitted a result with no browser URL');
+    } catch (e) {
+      stderr = String((e as { stderr?: Buffer }).stderr ?? '');
+    }
+    expect(stderr).toContain('#7 WAS CREATED');
+    expect(stderr).toContain('do not retry');
+  });
+
+  it.skipIf(!hasJq())('gitea: names the remedy when the repo context does not resolve', () => {
+    // With no Gitea remote and no CODEV_PR_REPO, `{owner}`/`{repo}` stay
+    // unsubstituted and tea requests `repos//pulls`, which answers a bare
+    // `404 page not found` — non-JSON, and still exit 0. Verified live.
+    stub('tea', ['if [ "$1" = "api" ]; then', '  echo "404 page not found"', '  exit 0', 'fi', 'exit 1'].join('\n'));
+
+    let stderr = '';
+    try {
+      run('gitea', {
+        CODEV_PR_TITLE: 't',
+        CODEV_PR_BODY: 'b',
+        CODEV_PR_HEAD: 'x',
+        CODEV_PR_BASE: 'main',
+      });
+      expect.unreachable('the script exited 0 for a PR that was never created');
+    } catch (e) {
+      stderr = String((e as { stderr?: Buffer }).stderr ?? '');
+    }
+    expect(stderr).toContain('CODEV_PR_REPO=owner/repo');
   });
 });
 

From 35d575c3877f5bcd8e0abca0d281641bcd2b0e0f Mon Sep 17 00:00:00 2001
From: pseudo <cdodge@pseudoseed.com>
Date: Fri, 14 Aug 2026 08:11:41 -0600
Subject: [PATCH 15/15] [task-24AO] Builder thread: rebase of #1146, reconcile
 with #1458

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
---
 codev/state/task-24AO_thread.md | 175 ++++++++++++++++++++++++++++++++
 1 file changed, 175 insertions(+)
 create mode 100644 codev/state/task-24AO_thread.md

diff --git a/codev/state/task-24AO_thread.md b/codev/state/task-24AO_thread.md
new file mode 100644
index 000000000..b22be20d6
--- /dev/null
+++ b/codev/state/task-24AO_thread.md
@@ -0,0 +1,175 @@
+# task-24AO — rebase PR #1146, reconcile it with PR #1458
+
+Two open PRs against `cluesmith/codev` overlapped and neither builder saw the other.
+This builder rebased one and reconciled the other. Both branches live on the
+**pseudoseed fork only** — we have no push access to `cluesmith/codev`, and neither
+PR was merged (the maintainer merges).
+
+## Task 1 — rebase #1146 (`builder/bugfix-1137`)
+
+2063 commits behind `upstream/main`, 5 commits of its own, `mergeable=CONFLICTING`.
+
+Rebased onto `upstream/main`. Exactly one file conflicted, twice — `gitea/pr-view.sh`:
+
+- **Conflict 1** (against commit 3, "Route gitea forge reads through `tea api`"):
+  upstream had landed PIR #1179, which added `url` mapped from Gitea's `html_url`
+  (Gitea's own `url` is the API endpoint and would render raw JSON in a browser).
+  #1146 rewrote the same script onto `tea api` with an explicit normalizer that
+  emitted **no `url` at all**. Naively taking either side loses something.
+  Resolution: keep #1146's `tea api` routing **and** re-add `url: (.html_url // .url)`.
+  `forge-contracts.ts` documents that mapping for Gitea by name, so dropping it
+  would have silently regressed #1179.
+- **Conflict 2** (against commit 5, which factors REPO derivation into
+  `_lib.sh#gitea_repo`): same file, same hunk. Kept the factored `gitea_repo` call
+  plus the `html_url` mapping.
+
+**Behaviour change from the resolution, stated plainly:** gitea `pr-view` now emits
+a `url` field it did not emit on the pre-rebase branch. That is a restoration of
+upstream's behaviour, not a new invention — but it is a real output change, so
+commit 4's test fixture gained `html_url`/`url` and the assertion now pins that the
+**browser page**, not the API endpoint, reaches the contract.
+
+Two smaller deviations, both deliberate:
+
+- `_lib.sh` is committed `100755`, not `100644`. `scripts/postinstall.mjs` chmods
+  every `scripts/forge/**/*.sh` to 755 unconditionally, so 644 is a mode that never
+  survives an install and leaves a permanently dirty worktree for anyone who runs
+  `pnpm install`. It is sourced, not executed; the bit is harmless.
+- The test fixture change was applied **inside commit 4** (via an interactive rebase
+  stop), not as a trailing fixup, so every commit stays green in isolation.
+
+Verified: all 5 commits pass the forge suites individually
+(`bugfix-1137-gitea-tea-api`, `bugfix-568-pr-exists-state-all`, `forge`,
+`bugfix-693-forge-exec-bit`). An earlier per-commit run was **invalid** — the
+`git checkout`s silently failed on a dirty `_lib.sh` and re-tested HEAD three
+times. Caught and redone.
+
+## Task 2 — the reconcile
+
+#1146's core finding: Gitea caps every list response at `max_response_items`,
+default 50, so `&limit=200` **silently truncates**. #1458's `gitea/pr-create.sh`
+created the PR with `tea pulls create` and then looked it up with
+`tea pulls list --limit 200` — the exact call #1146 disproves. On a busy repo the
+just-created PR falls off the page and pr-create exits 1 for a PR that exists,
+inviting a duplicate retry. That `--limit 200` had been added as a *fix* for a
+review defect, so it was a fix built on a false premise.
+
+Confirmed the premise is false, live on Forgejo 15.0.2: `settings/api` reports
+`max_response_items: 50`, and `?limit=200` returns exactly 50 items on a list where
+paging at 50 returns 53.
+
+**Chose option (b) — drop list-and-search entirely.** It is possible:
+`tea api -X POST repos/{owner}/{repo}/pulls` returns the created PR, `number` and
+`html_url` included. Nothing to search, nothing to race, nothing to truncate. It
+also deletes the `<user>:<branch>` head-matching heuristic — the API resolves an
+owner-qualified head itself.
+
+### What live verification changed about the design
+
+Every one of these was found by testing, not by reading docs. Three of them are
+**the same bug class as #1455 itself** — an operation accepted and then silently
+not performed — so each is handled in code rather than noted as a caveat. The
+architect independently flagged the same three; the resolutions below are what
+shipped.
+
+| Finding | Consequence |
+|---|---|
+| `tea api` **exits 0 on HTTP errors**, printing the error body | The whole change replaces a lookup with one call, so trusting the exit code would reintroduce #1455's silent success *inside the fix for it*. The response is asserted to BE a PR object — numeric `number` AND non-empty browser URL — or it fails loudly with the body. Duplicate head, missing branch and unresolvable repo all exited 0 before. |
+| The API **requires** `base` (`[Base]: Required`); `tea pulls create` defaulted it client-side | Posting against the wrong base silently is worse than erroring. An unset `CODEV_PR_BASE` now resolves the repo's default branch explicitly, and fails clearly if it cannot. |
+| `draft: true` in the payload is **silently ignored** (response comes back `draft: false`) | `CODEV_PR_DRAFT=1` would have been an accepted-and-ignored flag. Gitea marks drafts by a `WIP:` title prefix — what `tea pulls create --draft` does. Implemented, and verified server-side to produce `draft: true`. |
+| `{owner}`/`{repo}` are substituted by tea from repo context; `--repo` supplies it | No dependency on #1146's `_lib.sh`. Verified with https and scp-style remotes, and from a GitHub-remote cwd. |
+| POST's `url` is the browser page (unlike GET, where `url` is the API endpoint) | `.html_url // .url` covers both. |
+
+**One subtlety inside the first row.** If the response carries a numeric `number`
+but no usable URL, the PR *was* created and only the URL is missing. Exiting 1 is
+still right, but a generic failure message would read as "nothing happened" and
+invite the duplicate retry this entire change exists to prevent. That case gets its
+own message naming the PR number and saying explicitly not to retry.
+
+### Deliberate divergence from #1146's siblings
+
+The read concepts derive owner/repo via `_lib.sh#gitea_repo`; pr-create uses tea's
+`{owner}`/`{repo}` placeholders instead. Reasons: pr-create's input is
+`CODEV_PR_REPO`, not `CODEV_REPO` (different contract), and sourcing `_lib.sh` would
+make #1458 depend on #1146 merging first. **The two PRs stay independent and can
+merge in either order.** The one thing `gitea_repo` gave that placeholders did not
+was a good error message, so pr-create now names `CODEV_PR_REPO` as the remedy on a
+404 rather than leaking a bare `404 page not found`.
+
+## Scope note
+
+The reconcile required altering #1458 — `pr-create.sh` exists only on that branch.
+It was added as **one new commit on top**, not a rebase: #1458 was 0 behind
+`upstream/main` and its history is untouched.
+
+## Verification and cleanup
+
+All Gitea work ran against scratch repo `pseudoseed/research` (zero CI workflows, so
+it steals no runner slots). Nine scratch PRs (#18–#26) created and **all closed**;
+every scratch branch deleted; no leftover files on `main`. Confirmed empty
+afterwards. No `tea` token scope was widened — everything needed was already in
+scope.
+
+Tests: the new gitea cases were checked against the **old** script first and all of
+them fail there, so the regression pin is real rather than decorative. The
+exit-0-on-error assertion is pinned by a table of six non-PR payloads (error
+object, array, string-typed `number`, numberless object, `null`, empty body), each
+served at exit 0.
+
+## Merge order — verified, not asserted
+
+Both PRs come from the same fork and both touch `packages/codev/scripts/forge/gitea/`, so the
+maintainer would otherwise have to derive the ordering. Checked rather than assumed:
+
+- `git merge-tree` on the two branch tips merges **cleanly**. The only file both touch is this
+  thread log, which is the **identical blob** on both branches (that is why they were kept
+  byte-identical) and auto-merges.
+- In the merged tree, `_lib.sh` and `pr-view.sh` are byte-identical to the #1146 versions and
+  `pr-create.sh` byte-identical to the #1458 version — no silent blending.
+- The `bugfix-693` invariant (every entry under a provider dir is a `*.sh`) still holds with
+  `_lib.sh` present.
+
+**Either order is safe.** #1458's `pr-create.sh` does not source `_lib.sh` and calls neither
+`gitea_repo` nor `tea_api_paged`.
+
+**Duplication, honestly stated.** The paginator is *not* duplicated and should not be —
+`tea_api_paged` walks a truncating list endpoint, and pr-create no longer lists anything. But
+**repo resolution now has two paths**: the read concepts use `_lib.sh#gitea_repo` (reads
+`CODEV_REPO`, else derives from origin, fails fast), pr-create uses tea's `{owner}`/`{repo}`
+placeholders with `CODEV_PR_REPO` forwarded as `--repo`. Kept separate deliberately —
+`gitea_repo()` takes no argument and reads the *other* env var, so consuming it would have meant
+editing a #1146 file from #1458 and creating the coupling this avoids; and `--repo` also supplies
+tea's login/host context, which a path-only helper does not.
+
+Both PR bodies now carry this in full, with the recommended follow-up: **once both land**, unify
+behind `gitea_repo "$CODEV_PR_REPO"` so there is one path and one error message. Not done here on
+purpose — doing it now couples two independent PRs.
+
+## Final test numbers (always reported against a control)
+
+Same worktree, same command, three runs:
+
+| Tree | Passed | Failed | Files failed |
+|---|---|---|---|
+| **Baseline — unmodified `upstream/main`** | 3176 | 126 | 67 |
+| #1146 branch (rebased tip) | 3193 (+17) | 126 | 67 |
+| #1458 branch | 3218 (+42) | 126 | 67 |
+
+The *same* 67 files and *same* 126 tests fail in all three, so: **zero regressions on either
+branch.** The failures are `agent-farm` / `terminal` / `consolidate` (shellper sockets, SQLite
+state) — environment-dependent: this worktree has no built `dist/`, which those tests spawn from,
+and a live Tower runs against the same state. None is in a file either PR touches; every forge
+suite passes.
+
+A raw pass/fail count with no control is unreadable — 126 failures looks alarming until the
+baseline shows it is the environment. Report it with the control every time.
+
+## Open items for the maintainer
+
+- Both PRs are pushed to the pseudoseed fork; neither is merged.
+- `_lib.sh#tea_api_paged` in #1146 concatenates pages with `jq -s 'add'`. Because
+  `tea api` exits 0 on HTTP errors, an error page reaches jq as an object and the
+  add fails with a raw jq type error rather than the API's message. It *does* fail
+  rather than silently mis-page, so this is a diagnosability wart, not a
+  correctness bug — flagged, deliberately not fixed here to keep the rebase faithful
+  to the original commits.