@333eco/heartbank-api 0.0.0-stage → 0.2.0

package/dist/login.js

@@ -0,0 +1,165 @@
+// Generated by scripts/gen-client.mjs from openapi/login.json. ⛔ Do not edit: change the description and run npm run client.
+import { send, urlOf } from "./runtime.js";
+/** Log in with HeartBank®: Prove who someone is, with a passkey. OpenID Connect on the FAPI 2.0 profile. */
+export class LoginClient {
+    o;
+    constructor(o = {}) {
+        this.o = o;
+    }
+    /** The discovery document: every endpoint, scope and algorithm. @see https://developers.333.eco/log-in#discovery */
+    discovery() {
+        return send(this.o, {
+            method: "GET",
+            base: "https://login.333.eco",
+            path: "/.well-known/openid-configuration",
+            pathParams: undefined,
+            query: undefined,
+            headers: undefined,
+            security: "none",
+            accept: "json",
+        });
+    }
+    /** The keys login signs ID tokens with. @see https://developers.333.eco/log-in#jwks */
+    jwks() {
+        return send(this.o, {
+            method: "GET",
+            base: "https://login.333.eco",
+            path: "/.well-known/jwks.json",
+            pathParams: undefined,
+            query: undefined,
+            headers: undefined,
+            security: "none",
+            accept: "json",
+        });
+    }
+    /** Push the log-in request (PAR, required). @see https://developers.333.eco/log-in#pushauthorizationrequest */
+    pushAuthorizationRequest(input) {
+        return send(this.o, {
+            method: "POST",
+            base: "https://login.333.eco",
+            path: "/request",
+            pathParams: undefined,
+            query: undefined,
+            headers: undefined,
+            body: input.body,
+            contentType: "application/x-www-form-urlencoded",
+            security: "privateKeyJwt",
+            audience: "endpoint",
+            accept: "json",
+        });
+    }
+    /** Send the browser here (one tap from where the person is). @see https://developers.333.eco/log-in#authorize */
+    authorizeUrl(input) {
+        return urlOf(this.o.baseUrl ?? "https://login.333.eco", "/auth", undefined, { client_id: input.client_id, request_uri: input.request_uri });
+    }
+    /** Exchange the code. @see https://developers.333.eco/log-in#token */
+    token(input) {
+        return send(this.o, {
+            method: "POST",
+            base: "https://login.333.eco",
+            path: "/token",
+            pathParams: undefined,
+            query: undefined,
+            headers: undefined,
+            body: input.body,
+            contentType: "application/x-www-form-urlencoded",
+            security: "privateKeyJwt+dpop",
+            audience: "endpoint",
+            accept: "json",
+        });
+    }
+    /** The person's claims. @see https://developers.333.eco/log-in#userinfo */
+    userinfo(input) {
+        return send(this.o, {
+            method: "GET",
+            base: "https://login.333.eco",
+            path: "/me",
+            pathParams: undefined,
+            query: undefined,
+            headers: undefined,
+            security: "dpop",
+            accessToken: input.accessToken,
+            accept: "json",
+        });
+    }
+    /** Revoke a token. @see https://developers.333.eco/log-in#revoke */
+    revoke(input) {
+        return send(this.o, {
+            method: "POST",
+            base: "https://login.333.eco",
+            path: "/token/revocation",
+            pathParams: undefined,
+            query: undefined,
+            headers: undefined,
+            body: input.body,
+            contentType: "application/x-www-form-urlencoded",
+            security: "privateKeyJwt",
+            audience: "endpoint",
+            accept: "none",
+        });
+    }
+    /** Log out of HeartBank® too. @see https://developers.333.eco/log-in#logout */
+    logOutUrl(input) {
+        return urlOf(this.o.baseUrl ?? "https://login.333.eco", "/session/end", undefined, { client_id: input.client_id, post_logout_redirect_uri: input.post_logout_redirect_uri });
+    }
+    /** Is this browser logged in at HeartBank®? (display only). @see https://developers.333.eco/log-in#sessionstate */
+    sessionState() {
+        return send(this.o, {
+            method: "GET",
+            base: "https://login.333.eco",
+            path: "/session/state",
+            pathParams: undefined,
+            query: undefined,
+            headers: undefined,
+            security: "none",
+            accept: "json",
+        });
+    }
+    /** Announce a security change before making it. @see https://developers.333.eco/log-in#notice */
+    notice(input) {
+        return send(this.o, {
+            method: "POST",
+            base: "https://login.333.eco",
+            path: "/notice",
+            pathParams: undefined,
+            query: undefined,
+            headers: undefined,
+            body: input.body,
+            contentType: "application/x-www-form-urlencoded",
+            security: "privateKeyJwt",
+            audience: "endpoint",
+            accept: "json",
+        });
+    }
+    /** Read a person's verified-human layers again. @see https://developers.333.eco/log-in#verifiedhuman */
+    verifiedHuman(input) {
+        return send(this.o, {
+            method: "POST",
+            base: "https://login.333.eco",
+            path: "/poh",
+            pathParams: undefined,
+            query: undefined,
+            headers: undefined,
+            body: input.body,
+            contentType: "application/x-www-form-urlencoded",
+            security: "privateKeyJwt",
+            audience: "endpoint",
+            accept: "json",
+        });
+    }
+    /** Thank with HeartBank®: exchange a press for a pressToken. @see https://developers.333.eco/log-in#wrappress */
+    wrapPress(input) {
+        return send(this.o, {
+            method: "POST",
+            base: "https://login.333.eco",
+            path: "/press/wrap",
+            pathParams: undefined,
+            query: undefined,
+            headers: undefined,
+            body: input.body,
+            contentType: "application/x-www-form-urlencoded",
+            security: "none",
+            accept: "json",
+        });
+    }
+}

package/dist/lookup.d.ts

@@ -0,0 +1,23 @@
+import { type ClientOptions } from "./runtime.js";
+export type Name = {
+    /** The name in the form its holder chose, with @ (for example @sokha.keo). */ name: string;
+    /** Their page. */ page: string;
+    /** What they are called, as they wrote it (any script). */ said: string;
+    /** Their one line, or empty. */ line: string;
+    /** Up to three https links they chose. */ links: Array<string>;
+    /** Their photo's address, or null. */ photo: string | null;
+    /** Their own recording of their name, or null. */ voice: string | null;
+    /** Whether they let search engines list their page. */ searchable: boolean;
+};
+export type ErrorBody = {
+    error: string;
+};
+/** Lookup: One exact name on B-Registry℠, and what that person's public page shows. Free, with no key. */
+export declare class LookupClient {
+    private readonly o;
+    constructor(o?: ClientOptions);
+    /** Look up one exact name. @see https://developers.333.eco/lookup#byname */
+    byName(input: {
+        /** The name, with or without @; the registry folds case and punctuation, so sokha.keo, SOKHA-KEO and sokhakeo are one name. */ name: string;
+    }): Promise<Name>;
+}

package/dist/lookup.js

@@ -0,0 +1,22 @@
+// Generated by scripts/gen-client.mjs from openapi/lookup.json. ⛔ Do not edit: change the description and run npm run client.
+import { send } from "./runtime.js";
+/** Lookup: One exact name on B-Registry℠, and what that person's public page shows. Free, with no key. */
+export class LookupClient {
+    o;
+    constructor(o = {}) {
+        this.o = o;
+    }
+    /** Look up one exact name. @see https://developers.333.eco/lookup#byname */
+    byName(input) {
+        return send(this.o, {
+            method: "GET",
+            base: "https://333.eco",
+            path: "/api/v1/names/{name}",
+            pathParams: { name: input.name },
+            query: undefined,
+            headers: undefined,
+            security: "none",
+            accept: "json",
+        });
+    }
+}

package/dist/runtime.d.ts

@@ -0,0 +1,46 @@
+/**
+ * The runtime the generated clients share. It knows HOW to send a request and names no endpoint: every endpoint, field
+ * and type comes from openapi/ through scripts/gen-client.mjs (SPEC §7: no hand-written second copy).
+ *
+ * ⛔ The client never holds a key. Your server signs: `assertion(aud)` returns a fresh ES256 client assertion (one use,
+ * at most five minutes old) and `dpop(method, url, accessToken?)` a DPoP proof. A key inside an app is not a secret, so
+ * this client is for your SERVER; the browser steps (log in, log out, the signing page) are links it builds for you.
+ */
+export interface ClientOptions {
+    /** Replaces the server named in the description (for a test double; the sandbox when it exists). */
+    baseUrl?: string;
+    fetch?: typeof globalThis.fetch;
+    /** A fresh client assertion whose `aud` is the given address (private_key_jwt). */
+    assertion?: (aud: string) => Promise<string>;
+    /** A DPoP proof for this request; `accessToken` is given when the request carries one. */
+    dpop?: (method: string, url: string, accessToken?: string) => Promise<string>;
+    /** A B-Origin℠ API key (it begins `bo_live_`). ⛔ Keep it on your server. */
+    apiKey?: string;
+}
+/** Any answer outside 2xx. `error` and `why` are the service's own words; a refusal from Thank never reaches here (it is `{written: false}`). */
+export declare class ApiError extends Error {
+    status: number;
+    error: string;
+    why?: string | undefined;
+    body?: unknown | undefined;
+    constructor(status: number, error: string, why?: string | undefined, body?: unknown | undefined);
+}
+export type Security = "none" | "clientAssertion" | "privateKeyJwt" | "dpop" | "privateKeyJwt+dpop" | "apiKey";
+export interface Call {
+    method: string;
+    base: string;
+    path: string;
+    pathParams?: Record<string, string | number>;
+    query?: Record<string, string | number | undefined>;
+    headers?: Record<string, string | undefined>;
+    body?: unknown;
+    contentType?: string;
+    security: Security;
+    accessToken?: string;
+    /** The client assertion's `aud`: the server's address, or this endpoint's (each security scheme's `x-aud` says which). */
+    audience?: "server" | "endpoint";
+    /** What the success answer is: parsed JSON, text, or bytes. */
+    accept: "json" | "text" | "bytes" | "none";
+}
+export declare function urlOf(base: string, path: string, pathParams?: Record<string, string | number>, query?: Record<string, string | number | undefined>): string;
+export declare function send<T>(o: ClientOptions, c: Call): Promise<T>;

package/dist/runtime.js

@@ -0,0 +1,98 @@
+/** Any answer outside 2xx. `error` and `why` are the service's own words; a refusal from Thank never reaches here (it is `{written: false}`). */
+export class ApiError extends Error {
+    status;
+    error;
+    why;
+    body;
+    constructor(status, error, why, body) {
+        super(`${status} ${error}${why ? `: ${why}` : ""}`);
+        this.status = status;
+        this.error = error;
+        this.why = why;
+        this.body = body;
+        this.name = "ApiError";
+    }
+}
+const ASSERTION_TYPE = "urn:ietf:params:oauth:client-assertion-type:jwt-bearer";
+export function urlOf(base, path, pathParams = {}, query = {}) {
+    const filled = path.replace(/\{(\w+)\}/g, (_, k) => {
+        if (pathParams[k] === undefined)
+            throw new TypeError(`missing path parameter ${k}`);
+        return encodeURIComponent(String(pathParams[k]));
+    });
+    const u = new URL(base.replace(/\/$/, "") + filled);
+    for (const [k, v] of Object.entries(query))
+        if (v !== undefined)
+            u.searchParams.set(k, String(v));
+    return u.toString();
+}
+export async function send(o, c) {
+    const f = o.fetch ?? globalThis.fetch;
+    const url = urlOf(o.baseUrl ?? c.base, c.path, c.pathParams, c.query);
+    // The address the service checks, never the test double's.
+    const aud = c.audience === "server" ? c.base.replace(/\/$/, "") : urlOf(c.base, c.path, c.pathParams);
+    const headers = {};
+    for (const [k, v] of Object.entries(c.headers ?? {}))
+        if (v !== undefined)
+            headers[k] = v;
+    let body;
+    let form;
+    if (c.contentType === "application/x-www-form-urlencoded")
+        form = { ...c.body };
+    if (c.security === "clientAssertion") {
+        if (!o.assertion)
+            throw new TypeError("this call needs options.assertion");
+        headers["x-client-assertion"] = await o.assertion(aud);
+    }
+    if (c.security === "privateKeyJwt" || c.security === "privateKeyJwt+dpop") {
+        if (!o.assertion)
+            throw new TypeError("this call needs options.assertion");
+        form = { ...form, client_assertion_type: ASSERTION_TYPE, client_assertion: await o.assertion(aud) };
+    }
+    if (c.security === "dpop" || c.security === "privateKeyJwt+dpop") {
+        if (!o.dpop)
+            throw new TypeError("this call needs options.dpop");
+        headers["DPoP"] = await o.dpop(c.method, aud, c.accessToken);
+        if (c.accessToken)
+            headers["Authorization"] = `DPoP ${c.accessToken}`;
+    }
+    if (c.security === "apiKey") {
+        if (!o.apiKey)
+            throw new TypeError("this call needs options.apiKey");
+        headers["Authorization"] = `Bearer ${o.apiKey}`;
+    }
+    if (form) {
+        const p = new URLSearchParams();
+        for (const [k, v] of Object.entries(form))
+            if (v !== undefined)
+                p.set(k, String(v));
+        body = p;
+        headers["Content-Type"] = "application/x-www-form-urlencoded";
+    }
+    else if (c.body !== undefined) {
+        if (c.contentType === "application/json") {
+            body = JSON.stringify(c.body);
+            headers["Content-Type"] = "application/json";
+        }
+        else {
+            body = c.body;
+            headers["Content-Type"] = c.contentType ?? "application/octet-stream";
+        }
+    }
+    const r = await f(url, { method: c.method, headers, body, redirect: "manual" });
+    if (r.status < 200 || r.status > 299) {
+        let j = null;
+        try {
+            j = await r.json();
+        }
+        catch { /* not JSON */ }
+        throw new ApiError(r.status, j?.error ?? (r.statusText || "error"), j?.why ?? j?.error_description, j);
+    }
+    if (c.accept === "none")
+        return undefined;
+    if (c.accept === "bytes")
+        return new Uint8Array(await r.arrayBuffer());
+    if (c.accept === "text")
+        return (await r.text());
+    return (await r.json());
+}

package/dist/sign.d.ts

@@ -0,0 +1,68 @@
+import { type ClientOptions } from "./runtime.js";
+export type ErrorBody = {
+    error: string;
+    why?: string;
+};
+/** Built by `claimFor()` in the package; send it as built. It names the file by its fingerprints only. */
+export type Claim = {
+    v: 2;
+    sha256: string;
+    pixels?: string;
+    phash?: string;
+    mime: string;
+    bytes: number;
+    /** An IPTC digital source type, for example `digitalCreation`. From the package, `sourceFromHistory({imports, mostly: 0.8})` works it out from what went into the work. */ source: string;
+    /** Your app's registered name. ⚠️ It goes into every record your app signs, permanently, so keep it short and plain. */ tool: string;
+    declared: boolean;
+    /** Optional, for example `CC0-1.0`. */ rights?: string;
+    imports?: Array<Record<string, unknown>>;
+    createdAtDeclared?: string;
+};
+export type RecordEntry = {
+    /** The record's number in the public log. */ index: number;
+    /** `similar` is a hint that two pictures look alike, nothing more. */ how: "exact" | "same pixels" | "similar";
+    distance?: number;
+    signedWith: "passkey";
+    at: string;
+    source: string;
+    declared: boolean;
+    rights?: string;
+    /** Present when the signer withdrew it: it stays in the log, marked as withdrawn by them. */ withdrawnAt?: string;
+};
+export type Trace = {
+    /** The file's SHA-256. */ fingerprint: string;
+    records: Array<RecordEntry>;
+    /** The file's C2PA manifest when present; `check.state` is `trusted` (signer on the C2PA trust list; it still says only what the signer declared), `valid` (signer not on the list, so anyone could have made it) or `invalid` (`failures` says why). */ c2pa?: Record<string, unknown>;
+    iptc?: Record<string, unknown>;
+    generators: Array<string>;
+    watermarks: Array<{
+        kind?: string;
+        model?: string;
+        agreement?: number;
+    }>;
+    /** B-Signal℠: the AI markers found in the file, recomputable from this same answer. ⛔ Never a measure of how human a work is, and never shown as a grade of someone's work (you agree to this when you make a key). */ signal: number;
+    /** What this answer did not look for, on every answer (SynthID has no public check). */ notChecked: Array<string>;
+};
+/** Sign with HeartBank®: Let the people who use your app sign what they made, and let anyone check it. B-Origin℠. */
+export declare class SignClient {
+    private readonly o;
+    constructor(o?: ClientOptions);
+    /** Look up what a file carries (B-Trace℠, metered). @see https://developers.333.eco/sign#trace */
+    trace(input: {
+        body: Uint8Array | ArrayBuffer | Blob;
+    }): Promise<Trace>;
+    /** Ask a person to sign a file (from your web page). @see https://developers.333.eco/sign#requestsign */
+    requestSign(input: {
+        body: {
+            claim: Claim;
+            state?: string;
+        };
+    }): Promise<{
+        request_uri: string;
+        expires_in: number;
+    }>;
+    /** The page where the person signs. @see https://developers.333.eco/sign#signpage */
+    signPageUrl(input: {
+        request_uri: string;
+    }): string;
+}

package/dist/sign.js

@@ -0,0 +1,43 @@
+// Generated by scripts/gen-client.mjs from openapi/sign.json. ⛔ Do not edit: change the description and run npm run client.
+import { send, urlOf } from "./runtime.js";
+/** Sign with HeartBank®: Let the people who use your app sign what they made, and let anyone check it. B-Origin℠. */
+export class SignClient {
+    o;
+    constructor(o = {}) {
+        this.o = o;
+    }
+    /** Look up what a file carries (B-Trace℠, metered). @see https://developers.333.eco/sign#trace */
+    trace(input) {
+        return send(this.o, {
+            method: "POST",
+            base: "https://origin.333.eco",
+            path: "/api/v1/trace",
+            pathParams: undefined,
+            query: undefined,
+            headers: undefined,
+            body: input.body,
+            contentType: "application/octet-stream",
+            security: "apiKey",
+            accept: "json",
+        });
+    }
+    /** Ask a person to sign a file (from your web page). @see https://developers.333.eco/sign#requestsign */
+    requestSign(input) {
+        return send(this.o, {
+            method: "POST",
+            base: "https://sign.333.eco",
+            path: "/sign/par",
+            pathParams: undefined,
+            query: undefined,
+            headers: undefined,
+            body: input.body,
+            contentType: "application/json",
+            security: "none",
+            accept: "json",
+        });
+    }
+    /** The page where the person signs. @see https://developers.333.eco/sign#signpage */
+    signPageUrl(input) {
+        return urlOf(this.o.baseUrl ?? "https://sign.333.eco", "/sign", undefined, { request_uri: input.request_uri });
+    }
+}

package/dist/thank.d.ts

@@ -0,0 +1,89 @@
+import { type ClientOptions } from "./runtime.js";
+/** The ledger declined, or there is no season open. ⛔ No reason and no count, by design. */
+export type NotWritten = {
+    written: false;
+};
+export type Prepared = {
+    /** Send back unchanged at commit. */ pending: string;
+    /** Signed by the ledger with the challenge and a description of what is being signed (ledger, units, season, to, and for Kiitti the direction and kind); sign.333.eco shows the person that description before they press. */ ticket: string;
+};
+export type Written = {
+    written: true;
+    /** ⛔ Only the entry's id reaches your app (threat T16: an index or a signature would count other apps' thanks). The full receipt goes to the two people, in their own records. */ receipt: {
+        id: string;
+    };
+    /** One-use tokens, one per side, to place that side on the public map later with /v1/place. A token knows neither the person nor the entry. */ place?: {
+        from?: string;
+        to?: string;
+    };
+};
+/** ⏳ Outside apps will name the receiver by registry handle instead, never another person's token (A591 (3)). */
+export type Person = {
+    /** From the person's log-in at login.333.eco (scope `ledger`). */ pidToken: string;
+    sub: string;
+};
+export type PrepareKiitos = {
+    /** Your id for this thank. The same ref returns the same answer and writes once. */ ref: string;
+    pidToken: string;
+    sub: string;
+    ledger: "kiitos";
+    to: Person;
+    /** Optional: exactly 32 bytes of your own, committed with a salt (never stored as sent); it reaches the two people in their records. */ cargo?: string;
+};
+/** First-party only (B-Twin, thank.333.eco): care for a thing, plant or animal, decided by the ledger's public rule on witnessed evidence. ⛔ Never an outside app: from season 2 an outside app's Kiitti is only a person's thanks to all of life, a call with no direction, twin or evidence field (directive #94). */
+export type PrepareKiitti = {
+    ref: string;
+    pidToken: string;
+    sub: string;
+    ledger: "kiitti";
+    dir: "kind" | "thankful";
+    evidence: {
+        kind: "thing" | "plant" | "animal";
+        twinId: string;
+        attested: boolean;
+        match?: number;
+    };
+};
+export type ErrorBody = {
+    error: string;
+};
+export type Ring = {
+    /** The ring's color. */ color: string;
+    /** The ring's width, drawn as a ring: ⛔ never shown as a number to chase. */ ring: number;
+};
+/** Thank with HeartBank®: Record a thank on the gratitude ledger. Your app prepares it, the person presses their own passkey, your app commits it. */
+export declare class ThankClient {
+    private readonly o;
+    constructor(o?: ClientOptions);
+    /** Step 1: prepare a thank. @see https://developers.333.eco/thank#prepare */
+    prepare(input: {
+        body: PrepareKiitos | PrepareKiitti;
+    }): Promise<Prepared | NotWritten>;
+    /** Step 3: commit the pressed thank. @see https://developers.333.eco/thank#commit */
+    commit(input: {
+        body: {
+            ref: string;
+            pending: string;
+            /** From POST https://login.333.eco/press/wrap. */ pressToken: string;
+        };
+    }): Promise<Written | NotWritten>;
+    /** Place one side of a written thank on the public map. @see https://developers.333.eco/thank#place */
+    place(input: {
+        body: {
+            token: string;
+            /** An area about 100 km across (0.9° bands), from the ledger's open cell function. */ cell: number;
+        };
+    }): Promise<{
+        placed: boolean;
+    }>;
+    /** Read a person's ring. @see https://developers.333.eco/thank#ring */
+    ring(input: {
+        sub: string;
+        "x-pid-token": string;
+    }): Promise<{
+        kiitos?: Ring;
+        kiitti?: Ring;
+    }>;
+    /** Retired: a thank without a press (retired). @see https://developers.333.eco/thank#submit */
+    submit(): Promise<void>;
+}

package/dist/thank.js

@@ -0,0 +1,85 @@
+// Generated by scripts/gen-client.mjs from openapi/thank.json. ⛔ Do not edit: change the description and run npm run client.
+import { send } from "./runtime.js";
+/** Thank with HeartBank®: Record a thank on the gratitude ledger. Your app prepares it, the person presses their own passkey, your app commits it. */
+export class ThankClient {
+    o;
+    constructor(o = {}) {
+        this.o = o;
+    }
+    /** Step 1: prepare a thank. @see https://developers.333.eco/thank#prepare */
+    prepare(input) {
+        return send(this.o, {
+            method: "POST",
+            base: "https://ledger.heartbank.net",
+            path: "/v1/prepare",
+            pathParams: undefined,
+            query: undefined,
+            headers: undefined,
+            body: input.body,
+            contentType: "application/json",
+            security: "clientAssertion",
+            audience: "server",
+            accept: "json",
+        });
+    }
+    /** Step 3: commit the pressed thank. @see https://developers.333.eco/thank#commit */
+    commit(input) {
+        return send(this.o, {
+            method: "POST",
+            base: "https://ledger.heartbank.net",
+            path: "/v1/commit",
+            pathParams: undefined,
+            query: undefined,
+            headers: undefined,
+            body: input.body,
+            contentType: "application/json",
+            security: "clientAssertion",
+            audience: "server",
+            accept: "json",
+        });
+    }
+    /** Place one side of a written thank on the public map. @see https://developers.333.eco/thank#place */
+    place(input) {
+        return send(this.o, {
+            method: "POST",
+            base: "https://ledger.heartbank.net",
+            path: "/v1/place",
+            pathParams: undefined,
+            query: undefined,
+            headers: undefined,
+            body: input.body,
+            contentType: "application/json",
+            security: "clientAssertion",
+            audience: "server",
+            accept: "json",
+        });
+    }
+    /** Read a person's ring. @see https://developers.333.eco/thank#ring */
+    ring(input) {
+        return send(this.o, {
+            method: "GET",
+            base: "https://ledger.heartbank.net",
+            path: "/v1/aura",
+            pathParams: undefined,
+            query: { sub: input.sub },
+            headers: { "x-pid-token": input["x-pid-token"] },
+            security: "clientAssertion",
+            audience: "server",
+            accept: "json",
+        });
+    }
+    /** Retired: a thank without a press (retired). @see https://developers.333.eco/thank#submit */
+    submit() {
+        return send(this.o, {
+            method: "POST",
+            base: "https://ledger.heartbank.net",
+            path: "/v1/submit",
+            pathParams: undefined,
+            query: undefined,
+            headers: undefined,
+            security: "clientAssertion",
+            audience: "server",
+            accept: "none",
+        });
+    }
+}