@atumlabs/mppx-atum-escrow 0.4.0 → 0.5.0

package/README.md

@@ -1,8 +1,9 @@
 # @atumlabs/mppx-atum-escrow
 
-> **Proprietary software - not open source.**
+> Copyright 2026 Atum Labs, Inc.
 >
-> Copyright (c) 2026 Atum Labs, Inc. All rights reserved. Access to and use of `@atumlabs/mppx-atum-escrow` are limited to entities expressly authorized by Atum and are governed by the Atum MPP Escrow SDK Proprietary License Agreement in the LICENSE file included with this package. Do not redistribute, publish, mirror, sublicense, or provide this package to any unauthorized person. By accessing, installing, copying, or using the package, you agree to the license terms.
+> Licensed under the Apache License, Version 2.0. See the `LICENSE` file
+> distributed with this package.
 
 An [`mppx`](https://www.npmjs.com/package/mppx) payment method that lets a merchant accept
 **cross-chain stablecoin payments** through Atum, over the Machine Payments Protocol (MPP).
@@ -89,7 +90,7 @@ for the gateway connection and corridor defaults.
 | **Corridor** | The merchant's payment configuration: what it receives (destination), and which source chains/tokens it accepts. You define it once. |
 | **Source option** | A source chain (with its escrow and role addresses) and one or more tokens (`assets`) a payer may pay from on it. A corridor may list several; each challenge offers one `(chain, token)`. |
 | **`fulfillmentAmount`** | The exact amount, in the destination token's atomic units, the merchant will receive. USDC/USDT use 6 decimals, so `"10000000"` = 10 USDC. Set per charge. |
-| **Source cap** | The most the payer can spend on the source side: `fulfillmentAmount` + a markup (`markupBps`) to cover the cross-chain spread. The payer signs this cap. |
+| **Source cap** | The most the payer can spend on the source side: `fulfillmentAmount` + a markup (`markupBps`) to cover the cross-chain spread. The payer signs this cap. This package's payer client refuses a cap more than 500 bps above `fulfillmentAmount` unless the payer raises its `maxMarkupBps`, so keep `markupBps` at or below 500. |
 | **Escrow** | The source-chain contract the payer's funds lock into until the merchant is paid. |
 | **Deadlines** | Two budgets in seconds: `quoteDeadlineSeconds` (how long the auction runs) and `fulfillmentDeadlineSeconds` (how long settlement may take). Required order: `now < quote < fulfillment`. |
 | **`PaymentSubmitter`** | A small adapter *you* provide that hands a signed payment request to the Atum Payment Gateway and returns the result. |
@@ -223,6 +224,111 @@ const resource = await res.text();
 > corridor whose settlement can genuinely take minutes — see
 > [Settlement outcomes](#settlement-outcomes) for the retry pattern that handles it.
 
+### Trusted corridors and the spend cap
+
+**Who the escrow protects, and against whom.** The escrow protects the payer against a settler
+that does not pay: it holds the payer's funds until the fulfillment verifier confirms that the
+settler paid the merchant on the destination chain. (It does not cover the merchant failing to
+deliver the HTTP resource.) That protection only holds if the escrow, the reserver (who picks the
+settler and how much of the cap it is paid) and the releaser (who opens the escrow) are ones the
+payer trusts. The merchant writes all of them into the
+challenge, so a merchant that named its own contract as the escrow, or itself as reserver or
+releaser, could take up to the cap without delivering anything. The client therefore protects the
+**payer** against the **merchant's** choice of corridor: before anything is signed, it checks the
+challenge against a source the payer controls, the way a browser checks a site's certificate
+against the authorities it trusts. The check cannot be turned off; only the trust source is
+configurable, and it never comes from the challenge. The merchant's `verify()` checks the opposite
+direction — that the credential matches the merchant's own terms — so it offers the payer nothing
+here.
+
+What is checked:
+
+- on the source chain: `extra.escrow` against the trusted escrow, `extra.reserver` against the
+  trusted quote selector, and `extra.releaser` against the trusted fulfillment verifier account;
+- on the destination chain: `extra.fulfillmentProxy` against the trusted fulfillment proxy;
+- both tokens must be ones the trust source lists for their chain, and must be the same money:
+  the same symbol, or in one peg group;
+- the cap (`source.amount`) may exceed `fulfillmentAmount` by at most `maxMarkupBps`, after both
+  are put in one unit using the tokens' decimals.
+
+**The trust source.** By default the client asks `GET /v1/defaults` on Atum's production
+gateways (`ATUM_DEFAULT_TRUST_GATEWAYS`: production mainnet and production testnet) and caches a
+successful answer per chain for five minutes. Building the signed request itself makes no network
+call; this lookup does, and so does a Turnkey signer when it signs. Pass `trust` to use another
+source:
+
+```ts
+import {
+  AtumEscrowTrustError,
+  atumGatewayTrust,
+  registerClient,
+  type TrustedRoles,
+} from "@atumlabs/mppx-atum-escrow/client";
+
+// Another deployment's gateway (a staging environment, a local devnet, another operator)…
+const method = registerClient({
+  signer: { privateKey: process.env.PAYER_PRIVATE_KEY! },
+  account: process.env.PAYER_ADDRESS!,
+  trust: atumGatewayTrust({ gateways: ["http://localhost:8080"] }),
+});
+
+// …or a fixed set of addresses, with no network call. Each entry carries escrowContract,
+// quoteSelector, fulfillmentVerifierAccount, fulfillmentProxy and the payable tokens.
+const TRUSTED_CORRIDORS: Record<string, TrustedRoles> = {
+  /* "eip155:8453": { ... } */
+};
+const pinned = registerClient({
+  signer: { privateKey: process.env.PAYER_PRIVATE_KEY! },
+  account: process.env.PAYER_ADDRESS!,
+  trust: async (network) => {
+    const roles = TRUSTED_CORRIDORS[network];
+    if (!roles) {
+      throw new AtumEscrowTrustError({
+        code: "CHAIN_NOT_TRUSTED",
+        network,
+        message: `no trusted corridor on ${network}`,
+      });
+    }
+    return roles;
+  },
+});
+```
+
+> **Devnet and staging must pass `trust`.** A local devnet forks mainnet and keeps mainnet chain
+> ids, and staging runs its own escrow and roles, so the default would answer with production's
+> addresses and every payment would be refused. A devnet whose tokens are test stand-ins (for
+> example `TUSDC`, `TUSDT`) must also pass `pegGroups` naming them, or the client cannot price one
+> against the other and refuses with `ASSETS_NOT_COMPARABLE`:
+> `pegGroups: [[...DEFAULT_PEG_GROUPS[0], "TUSDC", "TUSDT"]]`.
+
+**The cap.** `maxMarkupBps` (default `DEFAULT_MAX_MARKUP_BPS`, 500) is the most the cap may exceed
+`fulfillmentAmount`, in basis points. `pegGroups` (default `DEFAULT_PEG_GROUPS`, the US-dollar
+stablecoins on the network's allowlists) lists the token symbols the payer treats as
+interchangeable 1:1; passing it replaces the default. Tokens that are neither the same symbol nor
+in one group are not priced against each other at all.
+
+**Refusals.** Every refusal is an `AtumEscrowTrustError`, and nothing is signed. Branch on `code`
+(or `name`), not on `instanceof`: each published Atum package bundles its own copy of this class,
+so an error from one package is not an instance of another package's class.
+
+| `code`                        | Meaning                                                                      |
+| ----------------------------- | ---------------------------------------------------------------------------- |
+| `UNTRUSTED_ESCROW`            | `extra.escrow` is not the trusted escrow                                     |
+| `UNTRUSTED_RESERVER`          | `extra.reserver` is not the trusted quote selector                           |
+| `UNTRUSTED_RELEASER`          | `extra.releaser` is not the trusted fulfillment verifier                     |
+| `UNTRUSTED_FULFILLMENT_PROXY` | the fulfillment proxy is not the destination chain's trusted proxy           |
+| `UNTRUSTED_ASSET`             | a token is not one the trust source lists for its chain; `field` says which (`source.asset` or `extra.destination.asset`) |
+| `ASSETS_NOT_COMPARABLE`       | the two tokens are not the same money                                        |
+| `MARKUP_EXCEEDED`             | `source.amount` is above the bound; `expected` is the largest amount allowed |
+| `CHAIN_NOT_TRUSTED`           | the trust source serves nothing on the chain                                 |
+| `TRUST_SOURCE_UNAVAILABLE`    | the trust source could not answer, or answered with something other than roles; retry only if the failure was transient |
+
+For the `UNTRUSTED_*` codes and `MARKUP_EXCEEDED`, `field`, `expected` (the trusted value or
+bound) and `actual` (what the challenge asked for) say exactly what failed.
+
+Before any of these checks, a challenge whose `fulfillmentAmount` is not a base-10 integer is
+refused with a plain `Error`: it is a malformed challenge, not a trust verdict.
+
 ### Approving the source token
 
 On EVM and Tron, the payer must approve the token-transfer contract (Permit2) to move the source
@@ -533,15 +639,18 @@ Import everything from the root, or from the role-specific entry points (which e
 each side needs):
 
 - `@atumlabs/mppx-atum-escrow` — everything below
-- `@atumlabs/mppx-atum-escrow/client` — `registerClient`, `ensureSourceApproval`, `needsSourceApproval` + payer types
+- `@atumlabs/mppx-atum-escrow/client` — `registerClient`, `ensureSourceApproval`, `needsSourceApproval`, the trust API + payer types
 - `@atumlabs/mppx-atum-escrow/server` — `registerServer`, `buildChargeChallenge`,
   `buildChargeRequest`, `validateCorridor`, `corridorFromDefaults`, the settlement errors +
   merchant types
 
 | Export | Description |
 | --- | --- |
-| `registerClient(config)` | Payer-side method. `config`: `{ signer, account, now?, solanaClockReader? }`. |
-| `registerServer(config)` | Merchant-side method. `config`: `{ submitter, now? }`. Returns an `AtumEscrowServer`, whose `verify()` resolves with an `AtumEscrowReceipt`. |
+| `registerClient(config)` | Payer-side method. `config`: `{ signer, account, now?, solanaClockReader?, trust?, maxMarkupBps?, pegGroups? }`. See [Trusted corridors and the spend cap](#trusted-corridors-and-the-spend-cap). |
+| `atumGatewayTrust(options?)` | A trust source backed by gateways' `GET /v1/defaults` (default: `ATUM_DEFAULT_TRUST_GATEWAYS`), cached per chain. The default `trust`. |
+| `AtumEscrowTrustError` | Why the client refused to sign a challenge; branch on `code`. |
+| `DEFAULT_MAX_MARKUP_BPS`, `DEFAULT_PEG_GROUPS` | The client's defaults for `maxMarkupBps` (500) and `pegGroups`. |
+| `registerServer(config)` | Merchant-side method. `config`: `{ submitter, now?, onCommitmentResult? }`; `onCommitmentResult(result, logFields)` receives every payee-check result, so you can count payments by `logFields.sender_auth_result` and log refusals. Returns an `AtumEscrowServer`, whose `verify()` resolves with an `AtumEscrowReceipt`. |
 | `buildChargeChallenge(corridor, select, fulfillmentAmount, { intentId, issuedAt? })` | Builds a `charge` challenge — the payment terms plus the per-purchase identifier that makes a retry safe. **Use this.** Returns `{ request, meta }`. |
 | `buildChargeRequest(corridor, select, fulfillmentAmount, options?)` | The payment terms alone, without the identifier. For supplying challenge metadata by hand. |
 | `validateCorridor(corridor)` | Validates a corridor's shape and per-source addresses (run automatically by both builders). |
@@ -557,6 +666,7 @@ each side needs):
 
 Key types: `AtumEscrowCorridor`, `AtumEscrowSource`, `SenderSigner`, `SenderSignerOptions`,
 `PaymentSubmitter`, `PaymentSubmitResult`, `PaymentSettlementStatus`, `AtumEscrowClientConfig`,
+`TrustResolver`, `TrustedRoles`, `TrustedToken`, `AtumEscrowTrustErrorCode`, `AtumGatewayTrustOptions`,
 `AtumEscrowServer`, `AtumEscrowServerConfig`, `ChainDefaultsSource`, `EnsureApprovalResult`,
 `AtumEscrowChallenge`, `AtumEscrowCredential`, `AtumEscrowReceipt`, `ChargeChallenge`, `ChargeRequest`,
 `SettlementErrorDetails`, `PaymentRequest`, `FulfillmentConfirmation`.

package/THIRD-PARTY-NOTICES.txt

@@ -2,12 +2,11 @@ THIRD-PARTY SOFTWARE NOTICES AND INFORMATION
 ==============================================================================
 @atumlabs/mppx-atum-escrow
 
-@atumlabs/mppx-atum-escrow is proprietary software, governed by the license
-agreement in the package-root LICENSE file. THIS file is not that license. This
+@atumlabs/mppx-atum-escrow is licensed under the Apache License, Version 2.0, as stated
+in the package-root LICENSE file. THIS file is not that license. This
 package includes the third-party software identified below; the licenses and
 notices reproduced here apply only to those third-party components. They do not
-modify the proprietary license governing this package or any Atum-authored code,
-and they do not make it open source.
+modify the Apache-2.0 license governing this package or any Atum-authored code.
 
 The published artifact of this package (the compiled code under dist/) statically
 bundles the third-party open-source components listed below; their source is
@@ -18,9 +17,9 @@ as (peer)dependencies of this package (for example @solana/web3.js, ethers, bs58
 tweetnacl, zod, and mppx) — those ship under their own licenses and are not
 redistributed here.
 
-LICENSE SUMMARY (27 components)
+LICENSE SUMMARY (28 components)
 ------------------------------------------------------------------------------
-   27  MIT
+   28  MIT
 ==============================================================================
 
 ------------------------------------------------------------------------------
@@ -50,6 +49,13 @@ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 THE SOFTWARE.
 
+------------------------------------------------------------------------------
+agent-base  6.0.2   (MIT)
+Author: Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)
+------------------------------------------------------------------------------
+
+[No license file is distributed inside this package. Declared license: MIT; author: Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/).]
+
 ------------------------------------------------------------------------------
 asynckit  0.4.0   (MIT)
 Author: Alex Indigo <iam@alexindigo.com>
@@ -78,7 +84,7 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
 ------------------------------------------------------------------------------
-axios  1.13.2   (MIT)
+axios  1.20.0   (MIT)
 Author: Matt Zabriskie
 ------------------------------------------------------------------------------
 
@@ -563,6 +569,13 @@ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
+------------------------------------------------------------------------------
+https-proxy-agent  5.0.1   (MIT)
+Author: Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)
+------------------------------------------------------------------------------
+
+[No license file is distributed inside this package. Declared license: MIT; author: Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/).]
+
 ------------------------------------------------------------------------------
 math-intrinsics  1.1.0   (MIT)
 Author: Jordan Harband <ljharb@gmail.com>
@@ -672,32 +685,6 @@ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
-------------------------------------------------------------------------------
-proxy-from-env  1.1.0   (MIT)
-Author: Rob Wu <rob@robwu.nl> (https://robwu.nl/)
-------------------------------------------------------------------------------
-
-The MIT License
-
-Copyright (C) 2016-2018 Rob Wu <rob@robwu.nl>
-
-Permission is hereby granted, free of charge, to any person obtaining a copy of
-this software and associated documentation files (the "Software"), to deal in
-the Software without restriction, including without limitation the rights to
-use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
-of the Software, and to permit persons to whom the Software is furnished to do
-so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
-FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
-COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
-IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
-CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-
 ------------------------------------------------------------------------------
 supports-color  10.2.2   (MIT)
 Author: Sindre Sorhus <sindresorhus@gmail.com>

package/dist/{chunk-TPLD2L6B.js → chunk-5IQDNGVU.js}

@@ -13,7 +13,7 @@ import {
   require_dist2 as require_dist,
   sameAddress,
   sameAssetIdentifier
-} from "./chunk-OEEC5P3E.js";
+} from "./chunk-F3H73WI3.js";
 
 // src/server.ts
 var import_payment_request_sender_auth2 = __toESM(require_dist(), 1);
@@ -99,6 +99,32 @@ var PaymentRejectedError = class extends Errors.BadRequestError {
 // src/server.ts
 var DEADLINE_SKEW_TOLERANCE_MS = 6e4;
 var SOLANA_MAX_FULFILLMENT_DEADLINE_SECONDS = import_payment_request_sender_auth2.REPLAY_HORIZON_SECS - 10;
+function checkCommitment(config, check) {
+  let checked;
+  try {
+    checked = check();
+  } catch (e) {
+    const refused = (0, import_payment_request_sender_auth2.commitmentResultOf)(e);
+    if (refused !== void 0) {
+      try {
+        config.onCommitmentResult?.(refused, (0, import_payment_request_sender_auth2.commitmentLogFields)(refused));
+      } catch {
+      }
+    }
+    throw e;
+  }
+  try {
+    config.onCommitmentResult?.(checked.result, (0, import_payment_request_sender_auth2.commitmentLogFields)(checked.result));
+  } catch {
+    throw new Error("atum-escrow: the payment could not be recorded, so it is refused");
+  }
+  return checked.value;
+}
+var SCHEME_BY_NAMESPACE = /* @__PURE__ */ new Map([
+  ["eip155", "EVM_PERMIT2"],
+  ["tron", "EVM_PERMIT2"],
+  ["solana", "SOLANA"]
+]);
 function registerServer(config) {
   const now = config.now ?? (() => Date.now());
   return Method.toServer(atumEscrowChargeMethod, {
@@ -110,6 +136,11 @@ function registerServer(config) {
       if (!senderAuth || senderAuth.signed_messages.length === 0) {
         throw new Error("atum-escrow: credential is missing sender_auth");
       }
+      if (senderAuth.signed_messages.length !== 1) {
+        throw new Error(
+          "atum-escrow: sender_auth must carry exactly one signed message, the deposit"
+        );
+      }
       const signed = senderAuth.signed_messages[0];
       if (!signed.message_prehash) {
         throw new Error("atum-escrow: sender_auth is missing message_prehash");
@@ -117,38 +148,19 @@ function registerServer(config) {
       if (!pr.source) {
         throw new Error("atum-escrow: credential is missing a source");
       }
+      if (senderAuth.message_scheme !== SCHEME_BY_NAMESPACE.get(namespace)) {
+        throw new Error(
+          `atum-escrow: unsupported message_scheme for ${source.network}: ${senderAuth.message_scheme}`
+        );
+      }
       const maxSourceStr = pr.max_source_amount ?? "0";
+      if (!/^(?:0|[1-9][0-9]*)$/.test(maxSourceStr)) {
+        throw new Error("atum-escrow: max_source_amount is not a decimal integer string");
+      }
       const cap = BigInt(source.amount);
       if (BigInt(maxSourceStr) > cap) {
         throw new Error("atum-escrow: max_source_amount exceeds the source cap");
       }
-      const authTerms = (0, import_payment_request_sender_auth2.getChainAdapter)(source.network).recoverAndVerify(
-        signed,
-        { network: source.network, asset: source.asset, account: pr.source.account },
-        {
-          maxSourceAmount: maxSourceStr,
-          escrowContract: extra.escrow,
-          reserver: extra.reserver,
-          releaser: extra.releaser,
-          svmSignatureClusterId: extra.svmSignatureClusterId,
-          svmSignatureDomainVersion: extra.svmSignatureDomainVersion,
-          // Check permit freshness against the merchant's own clock (the same `now` used for
-          // deadline ordering/budgets), not the SDK's wall clock — so freshness is consistent
-          // with the rest of verify and deterministic under an injected clock.
-          nowSec: Math.floor(now() / 1e3)
-        }
-      );
-      const intentId = intentIdOf(credential.challenge);
-      if (intentId === void 0) {
-        throw new Error(
-          `atum-escrow: the challenge carries no '${INTENT_ID_META_KEY}' metadata, so this payment cannot be de-duplicated and is refused`
-        );
-      }
-      if (pr.request_id !== chargeRequestId(intentId, pr.source.account)) {
-        throw new Error(
-          "atum-escrow: request_id is not derived from the challenge's purchase identifier, so a retry of this payment would not de-duplicate"
-        );
-      }
       const dest = pr.destination?.[0];
       if (!dest) {
         throw new Error("atum-escrow: credential is missing a destination");
@@ -163,6 +175,44 @@ function registerServer(config) {
       if (pr.fulfillment_amount !== extra.fulfillmentAmount) {
         throw new Error("atum-escrow: fulfillment_amount does not match the challenge");
       }
+      const authTerms = checkCommitment(config, () => {
+        const verified = (0, import_payment_request_sender_auth2.getChainAdapter)(source.network).recoverAndVerify(
+          signed,
+          { network: source.network, asset: source.asset, account: pr.source.account },
+          { destinations: pr.destination, requestId: pr.request_id ?? "" },
+          {
+            maxSourceAmount: maxSourceStr,
+            escrowContract: extra.escrow,
+            reserver: extra.reserver,
+            releaser: extra.releaser,
+            svmSignatureClusterId: extra.svmSignatureClusterId,
+            svmSignatureDomainVersion: extra.svmSignatureDomainVersion,
+            // Use the same clock as the deadline checks below, so an injected `now` applies
+            // throughout.
+            nowSec: Math.floor(now() / 1e3)
+          }
+        );
+        const result2 = (0, import_payment_request_sender_auth2.verifyRequestCommitment)(
+          JSON.stringify(pr),
+          extra.svmSignatureDomainVersion == null ? void 0 : {
+            escrowProgramId: extra.escrow,
+            clusterId: extra.svmSignatureClusterId ?? "",
+            domainVersion: extra.svmSignatureDomainVersion
+          }
+        );
+        return { value: verified, result: result2 };
+      });
+      const intentId = intentIdOf(credential.challenge);
+      if (intentId === void 0) {
+        throw new Error(
+          `atum-escrow: the challenge carries no '${INTENT_ID_META_KEY}' metadata, so this payment cannot be de-duplicated and is refused`
+        );
+      }
+      if (pr.request_id !== chargeRequestId(intentId, pr.source.account)) {
+        throw new Error(
+          "atum-escrow: request_id is not derived from the challenge's purchase identifier, so a retry of this payment would not de-duplicate"
+        );
+      }
       const overrides = contractOverridesFromExtra(source.network, extra);
       const expectedQuoteSelector = overrides?.quote_selector ?? extra.reserver;
       const expectedVerifier = overrides?.fulfillment_verifier ?? {
@@ -211,7 +261,7 @@ function registerServer(config) {
       const result = await config.submitter.submit(pr);
       const fc = result.fulfillment_confirmation;
       if (!fc) {
-        const terminal = result.status === "failed" || result.status === "cancelled";
+        const terminal = result.status === "failed";
         if (terminal) {
           throw new SettlementFailedError({ paymentId: result.payment_id, state: result.status });
         }