M6 Phase A — ChannelIngress interface + x402 conformance

[Mayakovsky]

M6 Phase A — ChannelIngress interface + x402 conformance

Introduces the reusable channel-adapter seam (M6's core reframing) and makes x402 the first conforming channel, with zero change to per-request payment behavior. Zero-spend, no chain. Spec: movement-6-BUILD-SPEC-KOV.md v3 §3-A; directive movement-6-PHASE-A-KOV-directive.md.

Manifest (7 files)

1. grey-core/src/channels/ingress.ts — ChannelIngress (start/stop/registerOffering/identity) + ChannelIdentity + OfferingRegistration. Slim, lifecycle+catalog only (A1); confirm/deliver/validation/envelope stay adapter-internal. Reuses the shared HandlerInput — no duplicated handler types.
2. grey-core/src/channels/x402Adapter.ts — X402Adapter implements ChannelIngress as a boot-wiring shell over the existing buildServer(deps, gate) + listen. Zero per-request payment logic; the relayer key never enters grey-core (invariant feat(refuel): relayer gas self-funding loop (M5 Phase F) #19 — the adapter takes only the relayer address for its boot log). FDQ-66(a) boot-wrapper: registerOffering records the catalog for identity()/observability only — routes stay statically mounted from PAID (server/routes/offerings.ts).
3. grey-core/src/index.ts — export ChannelIngress/OfferingRegistration/ChannelIdentity + X402Adapter/X402AdapterOptions.
4. grey-core/src/start.ts — boot x402 through X402Adapter.start() in place of the inline buildServer+listen (real conformance, not paper). Registers the 7 PAID offerings from the single price source (invariant fix(db): restore refuel_log append-only (FDQ-52) #20). No per-request code changed.
5. test/channels/x402Adapter.test.ts — conformance: interface satisfaction, identity() returns payTo/DID, registerOffering records the catalog, and a real bound socket proving /health→200 and a paid route→402.
6. scripts/dist-boot-smoke.ts (+ package.json script) — M5-pattern dist-boot smoke.

Deviation flag (minor, sound)

Beyond the minimal directive ask, start.ts also registers the 7 offerings on the adapter at boot (registerOffering × PAID_SLUGS, price via priceUsdFor). This makes FDQ-66(a)'s "records for observability" real in production — identity()/catalog are actually populated, not just exercised in the test. Zero per-request impact; routes still mount statically from PAID.

Zero-touch held

verify.ts/settle.ts/challenge.ts/preHandler.ts (payment path), handlers/* (shared entrypoint — only referenced), and offerings.ts route logic + PAID static mounting — all unchanged.

Verification (cite: run locally)

• typecheck + lint + build — clean.
• vitest run — 96 tests pass (16 files; +5 new conformance tests).
• dist-boot smoke — PASS: built dist/start.js boots through X402Adapter; /health→200 {"status":"ok"}; POST /v1/offerings/legitimacy_scan→402 {scheme:exact, network:eip155:84532, maxAmountRequired:250000, payTo:0x7099…79C8} — byte-identical to pre-adapter behavior.

HOLD

Branch commit + push + PR-open is the authorized Phase A deliverable. Merge to main awaits Forces' explicit authorization.

🤖 Generated with Claude Code