/** GET JSON with a `pat_` Bearer token (built-in http/https, no deps). */
export declare function fetchJsonAuth<T>(url: string, token: string, timeoutMs?: number): Promise<T>;
export interface PreflightResult {
    ok: boolean;
    /** Who we're authenticated as (best-effort). */
    who?: string;
    /** Office count on success. */
    offices?: number;
    /** Human reason on failure. */
    reason?: string;
}
/**
 * Cheap authed check that the server is reachable and the token is valid.
 * The hard gate is GET /api/offices (401/403/network ⇒ not ok). The signed-in
 * identity is a best-effort GET /api/user — its absence never fails preflight.
 */
export declare function preflight(baseUrl: string, token: string, timeoutMs?: number): Promise<PreflightResult>;