export type GitPullIntegrationMode = "merge" | "rebase" | "ff-only";
export type GitPullRemoteChangesPermission = "git:read" | "git:write" | "filesystem:write" | "network:egress";
export type GitPullRemoteChangesRiskCategory = "remote-network";
export type GitPullRemoteChangesGuard = {
    allowed?: boolean;
    accepted?: boolean;
    reason?: string;
};
export type GitPullRemoteChangesContext = {
    runtimeId?: string;
    sessionId?: string;
    invocationId?: string;
    dryRun?: boolean;
    guard?: GitPullRemoteChangesGuard;
    allowedRepositoryRoots?: readonly string[];
    grantedPermissions?: readonly GitPullRemoteChangesPermission[];
    auditMetadata?: Readonly<Record<string, unknown>>;
};
export type GitPullRemoteChangesTarget = {
    repositoryPath: string;
    remoteName?: string;
    branchName?: string;
    integrationMode: GitPullIntegrationMode;
    autostash: boolean;
    prune: boolean;
};
export type GitPullRemoteChangesRequest = {
    target?: Partial<GitPullRemoteChangesTarget>;
    context?: GitPullRemoteChangesContext;
    provider?: GitPullRemoteChangesProvider;
    timeoutMs?: number;
    metadata?: Readonly<Record<string, unknown>>;
    runtimeId?: string;
    invocationId?: string;
    repositoryPath?: string;
    cwd?: string;
    remoteName?: string;
    remote?: string;
    branchName?: string;
    branch?: string;
    integrationMode?: GitPullIntegrationMode;
    autostash?: boolean;
    prune?: boolean;
    dryRun?: boolean;
};
export type GitPullRemoteChangesRuntimeEntry = {
    owner: "runtime";
    port: "BaseToolExecutorPort.git.runGit";
    method: "runGit";
    binary: "git";
    argvMode: "fixed-pull-remote-changes";
    allowedSubcommand: "pull";
};
export type GitPullRemoteChangesRisk = {
    category: GitPullRemoteChangesRiskCategory;
    riskLevel: "risky";
    mutatesRepository: true;
    mutatesWorkingTree: true;
    updatesRemoteTrackingRefs: true;
    integratesRemoteChanges: true;
    mayCreateConflicts: true;
    mayUseNetwork: true;
    spawnsProcess: true;
    requiresTapApproval: true;
    runtimeOwnsExecution: true;
};
export type GitPullRemoteUpdateEntry = {
    raw: string;
    operation?: "new" | "update" | "delete" | "tag" | "other";
    source?: string;
    destination?: string;
};
export type GitPullRemoteChangesEnvelope = {
    parser: "git-pull-output-v1";
    remoteName?: string;
    branchName?: string;
    integrationMode: GitPullIntegrationMode;
    autostash: boolean;
    prune: boolean;
    exitCode?: number;
    stdoutLineCount: number;
    stderrLineCount: number;
    operationHint?: string;
    updateLines: readonly GitPullRemoteUpdateEntry[];
    conflictHints: readonly string[];
    pulled: boolean;
};
export type GitPullRemoteChangesOutput = {
    kind: "agentCore.basicTool.git.pullRemoteChanges";
    target: GitPullRemoteChangesTarget;
    runtimeEntry: GitPullRemoteChangesRuntimeEntry;
    risk: GitPullRemoteChangesRisk;
    gitArgs: readonly string[];
    commandPreview: readonly string[];
    timeoutMs: number;
    dryRun: boolean;
    executionBlocked: boolean;
    providerCalled: boolean;
    exitCode?: number;
    stdout?: string;
    stderr?: string;
    permissionsRequired: readonly GitPullRemoteChangesPermission[];
    unsafeSideEffects: true;
    mayUseNetwork: true;
    resultEnvelope: GitPullRemoteChangesEnvelope;
};
export type GitPullRemoteChangesPlan = {
    toolId: "git.pullRemoteChanges";
    toolKind: "git.pullRemoteChanges";
    capability: "pull-remote-changes";
    runtimeId: string;
    invocationId: string;
    repositoryPath: string;
    remoteName?: string;
    branchName?: string;
    integrationMode: GitPullIntegrationMode;
    gitArgs: readonly string[];
    commandPreview: readonly string[];
    requiredPermissions: readonly GitPullRemoteChangesPermission[];
    runtimeEntry: GitPullRemoteChangesRuntimeEntry;
    risk: GitPullRemoteChangesRisk;
    dispatch: "dry-run" | "runtime-git-executor";
    dryRun: boolean;
    wouldContactRemote: true;
    wouldUpdateRemoteTrackingRefs: true;
    wouldMutateWorkingTree: true;
    unsafeSideEffects: true;
    outputEnvelope: {
        stdoutPreview: "";
        stderrPreview: "";
        parsed: false;
    };
    audit: {
        guard: "git-remote-network-runtime-guard";
        event: "basicTool.git.pullRemoteChanges.planned";
        governanceRequired: true;
        tapCanWrap: true;
        metadata: Readonly<Record<string, unknown>>;
    };
};
export type GitPullRemoteChangesErrorBoundary = "input" | "scope" | "permission" | "governance" | "provider";
export type GitPullRemoteChangesErrorCode = "MISSING_REPOSITORY_PATH" | "INVALID_ARGUMENT" | "INVALID_CONTEXT" | "INVALID_TIMEOUT" | "SCOPE_REJECTED" | "PERMISSION_DENIED" | "GOVERNANCE_REJECTED" | "PROVIDER_UNAVAILABLE" | "PROVIDER_REJECTED";
export type GitPullRemoteChangesError = {
    code: GitPullRemoteChangesErrorCode;
    message: string;
    boundary: GitPullRemoteChangesErrorBoundary;
    publicSafe: true;
    safeForRuntimeInspection: true;
    internalDetailExposed: false;
};
export type GitPullRemoteChangesAuditEvent = {
    type: string;
    toolId: "git.pullRemoteChanges";
    invocationId: string;
    dryRun: boolean;
    repositoryPath?: string;
    metadata: Readonly<Record<string, unknown>>;
};
export type GitPullRemoteChangesResult = {
    ok: true;
    toolId: "git.pullRemoteChanges";
    output: GitPullRemoteChangesOutput;
    plan: GitPullRemoteChangesPlan;
    audit: readonly GitPullRemoteChangesAuditEvent[];
    events: readonly string[];
} | {
    ok: false;
    toolId: "git.pullRemoteChanges";
    error: GitPullRemoteChangesError;
    audit: readonly GitPullRemoteChangesAuditEvent[];
    events: readonly string[];
};
export type GitPullRemoteChangesProviderRequest = {
    repositoryPath: string;
    args: readonly string[];
    timeoutMs?: number;
};
export type GitPullRemoteChangesProviderResult = {
    exitCode: number;
    stdout: string;
    stderr: string;
};
export type GitPullRemoteChangesProvider = (request: GitPullRemoteChangesProviderRequest, context: GitPullRemoteChangesContext) => GitPullRemoteChangesProviderResult | Promise<GitPullRemoteChangesProviderResult>;
export declare const gitPullRemoteChangesDescriptor: {
    readonly toolId: "git.pullRemoteChanges";
    readonly toolKind: "git.pullRemoteChanges";
    readonly capability: "pull-remote-changes";
    readonly route: "agent_executionEngine.basic_toolLayer.baseTools.gitBase.remote";
    readonly defaultDryRun: true;
    readonly defaultDispatch: "dry-run";
    readonly tapOwnsApproval: true;
    readonly requiresTapApproval: true;
    readonly runtimeEntryPort: "BaseToolExecutorPort.git.runGit";
    readonly operationRisk: "remote-network";
    readonly permissionsRequired: readonly ["git:read", "git:write", "filesystem:write", "network:egress"];
    readonly defaultTimeoutMs: 120000;
    readonly maxTimeoutMs: 900000;
    readonly unsafeSideEffects: true;
};
export declare function parseGitPullRemoteChangesResult(providerResult: GitPullRemoteChangesProviderResult | undefined, target: GitPullRemoteChangesTarget): GitPullRemoteChangesEnvelope;
export declare function planGitRemotePull(request?: GitPullRemoteChangesRequest): GitPullRemoteChangesResult;
export declare const planPullRemoteChanges: typeof planGitRemotePull;
export declare const planGitPullRemoteChanges: typeof planGitRemotePull;
export declare function executeGitPullRemoteChanges(request?: GitPullRemoteChangesRequest): Promise<GitPullRemoteChangesResult>;
