export type GitManageTagPermission = "git:read" | "git:write" | "filesystem:read" | "filesystem:write";
export type GitManageTagAction = "list" | "create" | "delete" | "annotate";
export type GitManageTagRiskCategory = "read-only-inspection" | "history-mutation" | "destructive";
export type GitManageTagGuard = {
    allowed?: boolean;
    accepted?: boolean;
    reason?: string;
};
export type GitManageTagContext = {
    runtimeId?: string;
    sessionId?: string;
    invocationId?: string;
    dryRun?: boolean;
    guard?: GitManageTagGuard;
    allowedRepositoryRoots?: readonly string[];
    grantedPermissions?: readonly GitManageTagPermission[];
    auditMetadata?: Readonly<Record<string, unknown>>;
};
export type GitManageTagTarget = {
    repositoryPath: string;
    action: GitManageTagAction;
    tagName?: string;
    targetRef?: string;
    message?: string;
    force: boolean;
};
export type GitManageTagRequest = {
    target?: Partial<GitManageTagTarget>;
    context?: GitManageTagContext;
    provider?: GitManageTagProvider;
    timeoutMs?: number;
    metadata?: Readonly<Record<string, unknown>>;
    runtimeId?: string;
    invocationId?: string;
    repositoryPath?: string;
    action?: GitManageTagAction;
    tagName?: string;
    tag?: string;
    name?: string;
    targetRef?: string;
    ref?: string;
    revision?: string;
    message?: string;
    force?: boolean;
    dryRun?: boolean;
};
export type GitManageTagRuntimeEntry = {
    owner: "runtime";
    port: "BaseToolExecutorPort.git.runGit";
    method: "runGit";
    binary: "git";
    argvMode: "fixed-manage-tag";
    allowedSubcommand: "tag";
};
export type GitManageTagRisk = {
    category: GitManageTagRiskCategory;
    riskLevel: "normal" | "risky";
    mutatesRepository: boolean;
    mutatesWorkingTree: false;
    mutatesIndex: false;
    createsTag: boolean;
    deletesTag: boolean;
    spawnsProcess: true;
    requiresTapApproval: boolean;
    runtimeOwnsExecution: true;
};
export type GitManageTagEnvelope = {
    parser: "git-tag-output-v1";
    action: GitManageTagAction;
    tagName?: string;
    targetRef?: string;
    force: boolean;
    exitCode?: number;
    stdoutLineCount: number;
    stderrLineCount: number;
    tagNames: readonly string[];
    operationHint?: string;
    tagCreated: boolean;
    tagDeleted: boolean;
};
export type GitManageTagOutput = {
    kind: "agentCore.basicTool.git.manageTag";
    target: GitManageTagTarget;
    runtimeEntry: GitManageTagRuntimeEntry;
    risk: GitManageTagRisk;
    gitArgs: readonly string[];
    commandPreview: readonly string[];
    timeoutMs: number;
    dryRun: boolean;
    executionBlocked: boolean;
    providerCalled: boolean;
    exitCode?: number;
    stdout?: string;
    stderr?: string;
    permissionsRequired: readonly GitManageTagPermission[];
    unsafeSideEffects: boolean;
    managesTag: true;
    resultEnvelope: GitManageTagEnvelope;
};
export type GitManageTagPlan = {
    toolId: "git.manageTag";
    toolKind: "git.manageTag";
    capability: "manage-tag";
    runtimeId: string;
    invocationId: string;
    repositoryPath: string;
    action: GitManageTagAction;
    tagName?: string;
    targetRef?: string;
    force: boolean;
    gitArgs: readonly string[];
    commandPreview: readonly string[];
    requiredPermissions: readonly GitManageTagPermission[];
    runtimeEntry: GitManageTagRuntimeEntry;
    risk: GitManageTagRisk;
    dispatch: "dry-run" | "runtime-git-executor";
    dryRun: boolean;
    wouldMutateRepository: boolean;
    unsafeSideEffects: boolean;
    outputEnvelope: {
        stdoutPreview: "";
        stderrPreview: "";
        parsed: false;
    };
    audit: {
        guard: "git-tag-runtime-guard";
        event: "basicTool.git.manageTag.planned";
        governanceRequired: boolean;
        tapCanWrap: true;
        metadata: Readonly<Record<string, unknown>>;
    };
};
export type GitManageTagErrorBoundary = "input" | "scope" | "permission" | "governance" | "provider";
export type GitManageTagErrorCode = "MISSING_REPOSITORY_PATH" | "MISSING_TAG_NAME" | "MISSING_MESSAGE" | "INVALID_ARGUMENT" | "INVALID_CONTEXT" | "INVALID_ACTION" | "UNSAFE_REF" | "INVALID_TIMEOUT" | "SCOPE_REJECTED" | "PERMISSION_DENIED" | "GOVERNANCE_REJECTED" | "PROVIDER_UNAVAILABLE" | "PROVIDER_REJECTED";
export type GitManageTagError = {
    code: GitManageTagErrorCode;
    message: string;
    boundary: GitManageTagErrorBoundary;
    publicSafe: true;
    safeForRuntimeInspection: true;
    internalDetailExposed: false;
};
export type GitManageTagAuditEvent = {
    type: string;
    toolId: "git.manageTag";
    invocationId: string;
    dryRun: boolean;
    repositoryPath?: string;
    metadata: Readonly<Record<string, unknown>>;
};
export type GitManageTagResult = {
    ok: true;
    toolId: "git.manageTag";
    output: GitManageTagOutput;
    plan: GitManageTagPlan;
    audit: readonly GitManageTagAuditEvent[];
    events: readonly string[];
} | {
    ok: false;
    toolId: "git.manageTag";
    error: GitManageTagError;
    audit: readonly GitManageTagAuditEvent[];
    events: readonly string[];
};
export type GitManageTagProviderRequest = {
    repositoryPath: string;
    args: readonly string[];
    timeoutMs?: number;
};
export type GitManageTagProviderResult = {
    exitCode: number;
    stdout: string;
    stderr: string;
};
export type GitManageTagProvider = (request: GitManageTagProviderRequest, context: GitManageTagContext) => GitManageTagProviderResult | Promise<GitManageTagProviderResult>;
export declare const gitManageTagDescriptor: {
    readonly toolId: "git.manageTag";
    readonly toolKind: "git.manageTag";
    readonly capability: "manage-tag";
    readonly route: "agent_executionEngine.basic_toolLayer.baseTools.gitBase.branch";
    readonly defaultDryRun: true;
    readonly defaultDispatch: "dry-run";
    readonly tapOwnsApproval: true;
    readonly requiresTapApproval: true;
    readonly runtimeEntryPort: "BaseToolExecutorPort.git.runGit";
    readonly operationRisk: "history-mutation";
    readonly permissionsRequired: readonly ["git:read", "git:write", "filesystem:read", "filesystem:write"];
    readonly defaultTimeoutMs: 30000;
    readonly maxTimeoutMs: 600000;
    readonly unsafeSideEffects: true;
};
export declare function parseGitManageTagResult(providerResult: GitManageTagProviderResult | undefined, target: GitManageTagTarget): GitManageTagEnvelope;
export declare function planGitTagManagement(request?: GitManageTagRequest): GitManageTagResult;
export declare const planGitManageTag: typeof planGitTagManagement;
export declare function executeGitManageTag(request?: GitManageTagRequest): Promise<GitManageTagResult>;
