/**
 * PATH shim + one-shot fifo: lets the agent run plain `sudo` in bash while
 * the password travels only through a kernel pipe.
 *
 * Layout under ~/.pi/agent/asroot/:
 *   bin/sudo      shim script, execs real sudo -S reading from $ASROOT_FIFO
 *   fifo-<uuid>   one-shot named pipe (0600), unlinked right after use
 *
 * The rewritten command text contains only paths — never the password.
 */
/** Create the shim directory + sudo shim script. Returns the bin dir. */
export declare function ensureShim(): string;
/** Create a one-shot fifo, return its path. */
export declare function createFifo(): string;
/**
 * Write the password into the fifo once a reader connects, then remove it.
 * Opening a fifo for writing blocks until a reader opens the other end;
 * this promise simply resolves whenever (or if) that happens.
 */
export declare function feedFifo(fifo: string, password: string): Promise<void>;