#!/usr/bin/env bun
/**
 * What every CLI request carries.
 *
 * Extracted and exported because the `origin` header below is load-bearing and
 * was invisible: `fz --help` proved the binary starts, and every command that
 * CHANGED anything was answered 403 by the CSRF rule with nothing in between to
 * notice. A header nobody can see is a header nobody maintains.
 */
export declare function requestHeaders(apiBase: string, cookie: string | null): Record<string, string>;
export declare function safeApiPath(value: string): string;