/** * Extension hooks: transparent sudo for the agent. * * The agent runs plain `sudo ...` in the bash tool. The tool_call hook: * 1. gets a valid password (5-minute memory cache, else masked prompt) * 2. creates a one-shot fifo and starts a blocked writer for it * 3. rewrites the command to prefer the asroot shim via PATH * The shim's `sudo -S` reads the password from the fifo. The command text * only ever contains paths — never the password. */ import type { ExtensionAPI } from "@earendil-works/pi-coding-agent"; import { type AsrootState } from "./state.js"; export declare function buildGuidance(): string; export declare function registerHooks(pi: ExtensionAPI, st: AsrootState): void;