kawasekit 0.7.0 → 0.9.0

package/dist/cli/index.js

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
-import { transferJpyc } from '../chunk-Y2LOACWO.js';
+import { transferJpyc } from '../chunk-DMP7YFGA.js';
 import '../chunk-P5563RGP.js';
 import '../chunk-PVUKX6IF.js';
 import '../chunk-LEHWRDVS.js';
 import '../chunk-TTX3RBIZ.js';
 import '../chunk-QHUCU5YX.js';
-import { issueSessionKey, serializeSessionEnvelope, restoreSessionAccount, revokeSessionKey, rotateSessionKey, parseSessionEnvelope } from '../chunk-N3CVLISJ.js';
+import { issueSessionKey, serializeSessionEnvelope, restoreSessionAccount, revokeSessionKey, rotateSessionKey, parseSessionEnvelope } from '../chunk-KYVAOUQV.js';
 import '../chunk-NY6VLXQB.js';
 import '../chunk-VJUXTVSW.js';
 import '../chunk-WMVJNPX2.js';
@@ -980,7 +980,7 @@ function registerTransferCommand(program2) {
 }
 
 // cli/index.ts
-var CLI_VERSION = "0.7.0" ;
+var CLI_VERSION = "0.9.0" ;
 var program = new Command();
 program.name("kawasekit").description(
   "kawasekit \u2014 CLI for the kawasekit SDK (AI-agent stablecoin payments, Japan-first, JPYC-native)."

package/dist/{index-DFChv_fT.d.cts → index-FxiMeqpl.d.cts}

@@ -1,10 +1,83 @@
-import { Transport, Chain, Address, Hex, PublicClient, LocalAccount, Hash } from 'viem';
+import { LocalAccount, PublicClient, Transport, Chain, Address, Hex, Hash } from 'viem';
 import { S as SupportedChainId } from './index-2fEOL83n.cjs';
 import { Policy } from '@zerodev/permissions';
+import { KernelValidator, CreateKernelAccountReturnType, KernelAccountClient } from '@zerodev/sdk';
 import { EntryPointType, GetKernelVersion } from '@zerodev/sdk/types';
-import { KernelAccountClient, CreateKernelAccountReturnType } from '@zerodev/sdk';
 import { SmartAccount } from 'viem/account-abstraction';
 
+/**
+ * Agent smart account = Kernel v3.1 + ECDSA sudo validator + session-key
+ * permission validator.
+ *
+ * The owner EOA keeps full control (sudo) and can revoke / rotate the session
+ * key at any time. The session key is the day-to-day signer the AI agent
+ * holds; whatever policies you attach (see {@link createJpycDailyLimitPolicies})
+ * are enforced at the ERC-4337 validation phase by ZeroDev's
+ * `PermissionValidator`. Violating userOps revert before execution — they
+ * never spend any of the smart account's funds, and a sponsored bundler
+ * cannot be tricked into paying for them either.
+ *
+ * @packageDocumentation
+ */
+
+/**
+ * Owner = ECDSA convenience XOR a pre-built sudo validator (weighted / passkey / MPC).
+ *
+ * @remarks Pass a pre-built validator via `sudoValidator`, never via `ownerSigner`.
+ * Because ZeroDev's `KernelValidator` structurally extends `LocalAccount`, a validator
+ * mis-passed in the `ownerSigner` slot type-checks and would be wrapped as an ECDSA
+ * signer (confusing downstream failure) rather than used as the sudo directly.
+ */
+type AgentOwner = {
+    readonly ownerSigner: LocalAccount;
+    readonly sudoValidator?: never;
+} | {
+    readonly sudoValidator: KernelValidator;
+    readonly ownerSigner?: never;
+};
+/** Parameters for {@link createAgentSmartAccount}. */
+type CreateAgentSmartAccountParams = {
+    readonly publicClient: PublicClient<Transport, Chain | undefined>;
+    readonly sessionKeySigner: LocalAccount;
+    readonly policies: readonly Policy[];
+    /** Bind to an existing deployed account (e.g. re-provision after recovery). */
+    readonly address?: Address;
+    readonly entryPoint?: EntryPointType<"0.7">;
+    readonly kernelVersion?: GetKernelVersion<"0.7">;
+} & AgentOwner;
+/**
+ * Builds a Kernel v3.1 smart account with sudo (owner) + regular (session key)
+ * validators wired up.
+ *
+ * @example
+ * ```ts
+ * import { parseUnits } from "viem";
+ * import { privateKeyToAccount } from "viem/accounts";
+ * import {
+ *   createAgentSmartAccount,
+ *   createJpycDailyLimitPolicies,
+ *   getJpycAddress,
+ *   JPYC_DECIMALS,
+ *   polygonAmoy,
+ * } from "kawasekit";
+ *
+ * const owner = privateKeyToAccount(process.env.OWNER_PRIVATE_KEY as `0x${string}`);
+ * const sessionKey = privateKeyToAccount(process.env.SESSION_KEY_PRIVATE_KEY as `0x${string}`);
+ *
+ * const account = await createAgentSmartAccount({
+ *   publicClient,
+ *   ownerSigner: owner,
+ *   sessionKeySigner: sessionKey,
+ *   policies: createJpycDailyLimitPolicies({
+ *     jpycAddress: getJpycAddress(polygonAmoy.id),
+ *     maxPerTransfer: parseUnits("100", JPYC_DECIMALS),
+ *     maxTransfersPerDay: 10,
+ *   }),
+ * });
+ * ```
+ */
+declare function createAgentSmartAccount(params: CreateAgentSmartAccountParams): Promise<CreateKernelAccountReturnType<"0.7">>;
+
 /**
  * High-level helper: transfer JPYC from a Kernel smart account via a sponsored
  * UserOp.
@@ -231,22 +304,27 @@ declare class SessionEnvelopeParseError extends Error {
  */
 
 /** Parameters for {@link issueSessionKey}. */
-interface IssueSessionKeyParams {
-    /**
-     * viem `PublicClient` on the chain the smart account will live on. Its
-     * `chain.id` MUST be a {@link SupportedChainId} and is recorded in the
-     * envelope so restore-time mismatches fail fast.
-     */
+type IssueSessionKeyParams = {
     readonly publicClient: PublicClient<Transport, Chain>;
-    /** Owner EOA — retains sudo authority. */
-    readonly ownerSigner: LocalAccount;
-    /** Session-key EOA — the day-to-day signer the agent will hold. */
     readonly sessionKeySigner: LocalAccount;
     /**
-     * Policies the session key must satisfy at userOp validation time
-     * (e.g. {@link createJpycDailyLimitPolicies}).
+     * Policies the session key must satisfy at userOp validation time (e.g.
+     * {@link createJpycDailyLimitPolicies}). Supply the SAME policies in the SAME
+     * order to issue and to revoke (`buildRevokeSessionKeyCall`) — the validator
+     * identifier hashes the ordered policy array.
      */
     readonly policies: readonly Policy[];
+    /** Bind issuance to an existing deployed account (re-provision after recovery). */
+    readonly address?: Address;
+    /**
+     * Weighted-enable seam (RFC-0003 U-B1). Called with the SDK-built permission
+     * validator; returns the enable signature for `serializePermissionAccount`'s
+     * 3rd arg. Omit for an ECDSA owner (the default single-signer enable). For a
+     * weighted sudo this is `approvePlugin(plugin)` + `encodeSignatures([approval], true)`,
+     * computed by the caller with their weighted client. A mismatch surfaces on-chain
+     * as `EnableNotApproved` at first use.
+     */
+    readonly approveEnable?: (permissionValidator: KernelValidator) => Promise<Hex>;
     /** Optional advisory expiry (unix seconds). Recorded in the envelope. */
     readonly expiresAt?: bigint;
     /** Optional advisory policy summary for host UI. */
@@ -255,7 +333,7 @@ interface IssueSessionKeyParams {
     readonly entryPoint?: EntryPointType<"0.7">;
     /** Kernel version override. Defaults to {@link KERNEL_V3_1}. */
     readonly kernelVersion?: GetKernelVersion<"0.7">;
-}
+} & AgentOwner;
 /**
  * Issues a fresh session key for an agent smart account.
  *
@@ -507,6 +585,45 @@ interface RevokeSessionKeyResult {
  * ```
  */
 declare function revokeSessionKey(params: RevokeSessionKeyParams): Promise<RevokeSessionKeyResult>;
+/** Parameters for {@link buildRevokeSessionKeyCall}. */
+interface BuildRevokeSessionKeyCallParams {
+    /** A viem public client (the public API stays `PublicClient`; the shared builder widens to `Client` internally). */
+    readonly publicClient: PublicClient<Transport, Chain>;
+    /** The session-key signer the key was ISSUED with. */
+    readonly sessionKeySigner: LocalAccount;
+    /**
+     * The policies the key was issued with — identical policies in identical
+     * ORDER, since the validator identifier hashes the ordered policy array.
+     * A mismatch reverts at `uninstallValidation`.
+     */
+    readonly policies: readonly Policy[];
+    /** The deployed agent smart-account address. */
+    readonly smartAccountAddress: Address;
+    readonly entryPoint?: EntryPointType<"0.7">;
+    readonly kernelVersion?: GetKernelVersion<"0.7">;
+}
+/**
+ * Build the `uninstallValidation(vId, deinitData, hookDeinitData)` call that
+ * removes a session-key permission validator — a byte-exact reproduction of
+ * `@zerodev/sdk`'s `uninstallPlugin` inner call, which the SDK cannot call
+ * directly because it hardcodes the single-signer `sendUserOperation` path a
+ * weighted/passkey/MPC owner rejects.
+ *
+ * Submit it yourself: single-signer owners via {@link revokeSessionKey};
+ * weighted/passkey/MPC owners via their aggregate flow —
+ * `account.encodeCalls([{ to: smartAccountAddress, value: 0n, data }])` →
+ * `sendUserOperationWithSignatures`.
+ *
+ * @example
+ * ```ts
+ * const data = await buildRevokeSessionKeyCall({
+ *   publicClient, sessionKeySigner, policies, smartAccountAddress,
+ * });
+ * const callData = await weightedAccount.encodeCalls([{ to: smartAccountAddress, value: 0n, data }]);
+ * // …approveUserOperation per signer → sendUserOperationWithSignatures(callData, signatures)
+ * ```
+ */
+declare function buildRevokeSessionKeyCall(params: BuildRevokeSessionKeyCallParams): Promise<Hex>;
 
 /**
  * `rotateSessionKey()` — a thin compositional helper that revokes the
@@ -563,4 +680,4 @@ interface RotateSessionKeyResult {
  */
 declare function rotateSessionKey(params: RotateSessionKeyParams): Promise<RotateSessionKeyResult>;
 
-export { type ConfiguredKernelClient as C, type IssueSessionKeyParams as I, KAWASEKIT_SESSION_ENVELOPE_VERSION as K, type RestoreSessionAccountParams as R, SessionEnvelopeChainMismatchError as S, TransferJpycInputError as T, type KawasekitSessionEnvelope as a, type KawasekitSessionEnvelopeVersion as b, type KawasekitSessionPolicySummary as c, type RevokeSessionKeyParams as d, type RevokeSessionKeyResult as e, type RotateSessionKeyParams as f, type RotateSessionKeyResult as g, SessionEnvelopeParseError as h, SessionEnvelopeSignerMismatchError as i, SessionEnvelopeVersionError as j, type TransferJpycParams as k, type TransferJpycResult as l, issueSessionKey as m, revokeSessionKey as n, rotateSessionKey as o, parseSessionEnvelope as p, restoreSessionAccount as r, serializeSessionEnvelope as s, transferJpyc as t };
+export { type AgentOwner as A, type BuildRevokeSessionKeyCallParams as B, type ConfiguredKernelClient as C, type IssueSessionKeyParams as I, KAWASEKIT_SESSION_ENVELOPE_VERSION as K, type RestoreSessionAccountParams as R, SessionEnvelopeChainMismatchError as S, TransferJpycInputError as T, type CreateAgentSmartAccountParams as a, type KawasekitSessionEnvelope as b, type KawasekitSessionEnvelopeVersion as c, type KawasekitSessionPolicySummary as d, type RevokeSessionKeyParams as e, type RevokeSessionKeyResult as f, type RotateSessionKeyParams as g, type RotateSessionKeyResult as h, SessionEnvelopeParseError as i, SessionEnvelopeSignerMismatchError as j, SessionEnvelopeVersionError as k, type TransferJpycParams as l, type TransferJpycResult as m, buildRevokeSessionKeyCall as n, createAgentSmartAccount as o, issueSessionKey as p, parseSessionEnvelope as q, restoreSessionAccount as r, revokeSessionKey as s, rotateSessionKey as t, serializeSessionEnvelope as u, transferJpyc as v };

package/dist/{index-CSpNGigO.d.ts → index-RsuBt-Xw.d.ts}

@@ -1,10 +1,83 @@
-import { Transport, Chain, Address, Hex, PublicClient, LocalAccount, Hash } from 'viem';
+import { LocalAccount, PublicClient, Transport, Chain, Address, Hex, Hash } from 'viem';
 import { S as SupportedChainId } from './index-2fEOL83n.js';
 import { Policy } from '@zerodev/permissions';
+import { KernelValidator, CreateKernelAccountReturnType, KernelAccountClient } from '@zerodev/sdk';
 import { EntryPointType, GetKernelVersion } from '@zerodev/sdk/types';
-import { KernelAccountClient, CreateKernelAccountReturnType } from '@zerodev/sdk';
 import { SmartAccount } from 'viem/account-abstraction';
 
+/**
+ * Agent smart account = Kernel v3.1 + ECDSA sudo validator + session-key
+ * permission validator.
+ *
+ * The owner EOA keeps full control (sudo) and can revoke / rotate the session
+ * key at any time. The session key is the day-to-day signer the AI agent
+ * holds; whatever policies you attach (see {@link createJpycDailyLimitPolicies})
+ * are enforced at the ERC-4337 validation phase by ZeroDev's
+ * `PermissionValidator`. Violating userOps revert before execution — they
+ * never spend any of the smart account's funds, and a sponsored bundler
+ * cannot be tricked into paying for them either.
+ *
+ * @packageDocumentation
+ */
+
+/**
+ * Owner = ECDSA convenience XOR a pre-built sudo validator (weighted / passkey / MPC).
+ *
+ * @remarks Pass a pre-built validator via `sudoValidator`, never via `ownerSigner`.
+ * Because ZeroDev's `KernelValidator` structurally extends `LocalAccount`, a validator
+ * mis-passed in the `ownerSigner` slot type-checks and would be wrapped as an ECDSA
+ * signer (confusing downstream failure) rather than used as the sudo directly.
+ */
+type AgentOwner = {
+    readonly ownerSigner: LocalAccount;
+    readonly sudoValidator?: never;
+} | {
+    readonly sudoValidator: KernelValidator;
+    readonly ownerSigner?: never;
+};
+/** Parameters for {@link createAgentSmartAccount}. */
+type CreateAgentSmartAccountParams = {
+    readonly publicClient: PublicClient<Transport, Chain | undefined>;
+    readonly sessionKeySigner: LocalAccount;
+    readonly policies: readonly Policy[];
+    /** Bind to an existing deployed account (e.g. re-provision after recovery). */
+    readonly address?: Address;
+    readonly entryPoint?: EntryPointType<"0.7">;
+    readonly kernelVersion?: GetKernelVersion<"0.7">;
+} & AgentOwner;
+/**
+ * Builds a Kernel v3.1 smart account with sudo (owner) + regular (session key)
+ * validators wired up.
+ *
+ * @example
+ * ```ts
+ * import { parseUnits } from "viem";
+ * import { privateKeyToAccount } from "viem/accounts";
+ * import {
+ *   createAgentSmartAccount,
+ *   createJpycDailyLimitPolicies,
+ *   getJpycAddress,
+ *   JPYC_DECIMALS,
+ *   polygonAmoy,
+ * } from "kawasekit";
+ *
+ * const owner = privateKeyToAccount(process.env.OWNER_PRIVATE_KEY as `0x${string}`);
+ * const sessionKey = privateKeyToAccount(process.env.SESSION_KEY_PRIVATE_KEY as `0x${string}`);
+ *
+ * const account = await createAgentSmartAccount({
+ *   publicClient,
+ *   ownerSigner: owner,
+ *   sessionKeySigner: sessionKey,
+ *   policies: createJpycDailyLimitPolicies({
+ *     jpycAddress: getJpycAddress(polygonAmoy.id),
+ *     maxPerTransfer: parseUnits("100", JPYC_DECIMALS),
+ *     maxTransfersPerDay: 10,
+ *   }),
+ * });
+ * ```
+ */
+declare function createAgentSmartAccount(params: CreateAgentSmartAccountParams): Promise<CreateKernelAccountReturnType<"0.7">>;
+
 /**
  * High-level helper: transfer JPYC from a Kernel smart account via a sponsored
  * UserOp.
@@ -231,22 +304,27 @@ declare class SessionEnvelopeParseError extends Error {
  */
 
 /** Parameters for {@link issueSessionKey}. */
-interface IssueSessionKeyParams {
-    /**
-     * viem `PublicClient` on the chain the smart account will live on. Its
-     * `chain.id` MUST be a {@link SupportedChainId} and is recorded in the
-     * envelope so restore-time mismatches fail fast.
-     */
+type IssueSessionKeyParams = {
     readonly publicClient: PublicClient<Transport, Chain>;
-    /** Owner EOA — retains sudo authority. */
-    readonly ownerSigner: LocalAccount;
-    /** Session-key EOA — the day-to-day signer the agent will hold. */
     readonly sessionKeySigner: LocalAccount;
     /**
-     * Policies the session key must satisfy at userOp validation time
-     * (e.g. {@link createJpycDailyLimitPolicies}).
+     * Policies the session key must satisfy at userOp validation time (e.g.
+     * {@link createJpycDailyLimitPolicies}). Supply the SAME policies in the SAME
+     * order to issue and to revoke (`buildRevokeSessionKeyCall`) — the validator
+     * identifier hashes the ordered policy array.
      */
     readonly policies: readonly Policy[];
+    /** Bind issuance to an existing deployed account (re-provision after recovery). */
+    readonly address?: Address;
+    /**
+     * Weighted-enable seam (RFC-0003 U-B1). Called with the SDK-built permission
+     * validator; returns the enable signature for `serializePermissionAccount`'s
+     * 3rd arg. Omit for an ECDSA owner (the default single-signer enable). For a
+     * weighted sudo this is `approvePlugin(plugin)` + `encodeSignatures([approval], true)`,
+     * computed by the caller with their weighted client. A mismatch surfaces on-chain
+     * as `EnableNotApproved` at first use.
+     */
+    readonly approveEnable?: (permissionValidator: KernelValidator) => Promise<Hex>;
     /** Optional advisory expiry (unix seconds). Recorded in the envelope. */
     readonly expiresAt?: bigint;
     /** Optional advisory policy summary for host UI. */
@@ -255,7 +333,7 @@ interface IssueSessionKeyParams {
     readonly entryPoint?: EntryPointType<"0.7">;
     /** Kernel version override. Defaults to {@link KERNEL_V3_1}. */
     readonly kernelVersion?: GetKernelVersion<"0.7">;
-}
+} & AgentOwner;
 /**
  * Issues a fresh session key for an agent smart account.
  *
@@ -507,6 +585,45 @@ interface RevokeSessionKeyResult {
  * ```
  */
 declare function revokeSessionKey(params: RevokeSessionKeyParams): Promise<RevokeSessionKeyResult>;
+/** Parameters for {@link buildRevokeSessionKeyCall}. */
+interface BuildRevokeSessionKeyCallParams {
+    /** A viem public client (the public API stays `PublicClient`; the shared builder widens to `Client` internally). */
+    readonly publicClient: PublicClient<Transport, Chain>;
+    /** The session-key signer the key was ISSUED with. */
+    readonly sessionKeySigner: LocalAccount;
+    /**
+     * The policies the key was issued with — identical policies in identical
+     * ORDER, since the validator identifier hashes the ordered policy array.
+     * A mismatch reverts at `uninstallValidation`.
+     */
+    readonly policies: readonly Policy[];
+    /** The deployed agent smart-account address. */
+    readonly smartAccountAddress: Address;
+    readonly entryPoint?: EntryPointType<"0.7">;
+    readonly kernelVersion?: GetKernelVersion<"0.7">;
+}
+/**
+ * Build the `uninstallValidation(vId, deinitData, hookDeinitData)` call that
+ * removes a session-key permission validator — a byte-exact reproduction of
+ * `@zerodev/sdk`'s `uninstallPlugin` inner call, which the SDK cannot call
+ * directly because it hardcodes the single-signer `sendUserOperation` path a
+ * weighted/passkey/MPC owner rejects.
+ *
+ * Submit it yourself: single-signer owners via {@link revokeSessionKey};
+ * weighted/passkey/MPC owners via their aggregate flow —
+ * `account.encodeCalls([{ to: smartAccountAddress, value: 0n, data }])` →
+ * `sendUserOperationWithSignatures`.
+ *
+ * @example
+ * ```ts
+ * const data = await buildRevokeSessionKeyCall({
+ *   publicClient, sessionKeySigner, policies, smartAccountAddress,
+ * });
+ * const callData = await weightedAccount.encodeCalls([{ to: smartAccountAddress, value: 0n, data }]);
+ * // …approveUserOperation per signer → sendUserOperationWithSignatures(callData, signatures)
+ * ```
+ */
+declare function buildRevokeSessionKeyCall(params: BuildRevokeSessionKeyCallParams): Promise<Hex>;
 
 /**
  * `rotateSessionKey()` — a thin compositional helper that revokes the
@@ -563,4 +680,4 @@ interface RotateSessionKeyResult {
  */
 declare function rotateSessionKey(params: RotateSessionKeyParams): Promise<RotateSessionKeyResult>;
 
-export { type ConfiguredKernelClient as C, type IssueSessionKeyParams as I, KAWASEKIT_SESSION_ENVELOPE_VERSION as K, type RestoreSessionAccountParams as R, SessionEnvelopeChainMismatchError as S, TransferJpycInputError as T, type KawasekitSessionEnvelope as a, type KawasekitSessionEnvelopeVersion as b, type KawasekitSessionPolicySummary as c, type RevokeSessionKeyParams as d, type RevokeSessionKeyResult as e, type RotateSessionKeyParams as f, type RotateSessionKeyResult as g, SessionEnvelopeParseError as h, SessionEnvelopeSignerMismatchError as i, SessionEnvelopeVersionError as j, type TransferJpycParams as k, type TransferJpycResult as l, issueSessionKey as m, revokeSessionKey as n, rotateSessionKey as o, parseSessionEnvelope as p, restoreSessionAccount as r, serializeSessionEnvelope as s, transferJpyc as t };
+export { type AgentOwner as A, type BuildRevokeSessionKeyCallParams as B, type ConfiguredKernelClient as C, type IssueSessionKeyParams as I, KAWASEKIT_SESSION_ENVELOPE_VERSION as K, type RestoreSessionAccountParams as R, SessionEnvelopeChainMismatchError as S, TransferJpycInputError as T, type CreateAgentSmartAccountParams as a, type KawasekitSessionEnvelope as b, type KawasekitSessionEnvelopeVersion as c, type KawasekitSessionPolicySummary as d, type RevokeSessionKeyParams as e, type RevokeSessionKeyResult as f, type RotateSessionKeyParams as g, type RotateSessionKeyResult as h, SessionEnvelopeParseError as i, SessionEnvelopeSignerMismatchError as j, SessionEnvelopeVersionError as k, type TransferJpycParams as l, type TransferJpycResult as m, buildRevokeSessionKeyCall as n, createAgentSmartAccount as o, issueSessionKey as p, parseSessionEnvelope as q, restoreSessionAccount as r, revokeSessionKey as s, rotateSessionKey as t, serializeSessionEnvelope as u, transferJpyc as v };

package/dist/index.cjs

@@ -10,26 +10,49 @@ var viem = require('viem');
 var policies = require('@zerodev/permissions/policies');
 
 // src/account/session-key.ts
+async function resolveSudoValidator(params) {
+  if (params.ownerSigner !== void 0 && params.sudoValidator !== void 0) {
+    throw new Error("kawasekit: pass exactly one of `ownerSigner` or `sudoValidator`, not both.");
+  }
+  if (params.sudoValidator !== void 0) return params.sudoValidator;
+  if (params.ownerSigner === void 0) {
+    throw new Error("kawasekit: pass one of `ownerSigner` (ECDSA) or `sudoValidator` (pre-built).");
+  }
+  return ecdsaValidator.signerToEcdsaValidator(params.publicClient, {
+    signer: params.ownerSigner,
+    entryPoint: params.entryPoint,
+    kernelVersion: params.kernelVersion
+  });
+}
+async function buildSessionPermissionValidator(params) {
+  const signer = await signers.toECDSASigner({ signer: params.sessionKeySigner });
+  return permissions.toPermissionValidator(params.publicClient, {
+    signer,
+    policies: [...params.policies],
+    entryPoint: params.entryPoint,
+    kernelVersion: params.kernelVersion
+  });
+}
 async function createAgentSmartAccount(params) {
   const entryPoint = params.entryPoint ?? constants.getEntryPoint("0.7");
   const kernelVersion = params.kernelVersion ?? constants.KERNEL_V3_1;
-  const sudoValidator = await ecdsaValidator.signerToEcdsaValidator(params.publicClient, {
-    signer: params.ownerSigner,
+  const sudoValidator = await resolveSudoValidator({
+    publicClient: params.publicClient,
+    ownerSigner: params.ownerSigner,
+    sudoValidator: params.sudoValidator,
     entryPoint,
     kernelVersion
   });
-  const modularSessionSigner = await signers.toECDSASigner({ signer: params.sessionKeySigner });
-  const permissionValidator = await permissions.toPermissionValidator(params.publicClient, {
-    signer: modularSessionSigner,
-    policies: [...params.policies],
+  const permissionValidator = await buildSessionPermissionValidator({
+    publicClient: params.publicClient,
+    sessionKeySigner: params.sessionKeySigner,
+    policies: params.policies,
     entryPoint,
     kernelVersion
   });
   return sdk.createKernelAccount(params.publicClient, {
-    plugins: {
-      sudo: sudoValidator,
-      regular: permissionValidator
-    },
+    plugins: { sudo: sudoValidator, regular: permissionValidator },
+    ...params.address !== void 0 ? { address: params.address } : {},
     entryPoint,
     kernelVersion
   });
@@ -123,6 +146,55 @@ function getChain(chainId) {
   return chain;
 }
 
+// src/observability/hooks.ts
+function invokeHookSafely(hook, event) {
+  if (hook === void 0) return;
+  try {
+    const result = hook(event);
+    if (result instanceof Promise) {
+      result.catch(() => {
+      });
+    }
+  } catch {
+  }
+}
+function extractAcceptedNetworks(requirements) {
+  return requirements.map((req) => req.network);
+}
+
+// src/client/sponsored-kernel-client.ts
+async function sponsorWithObservability(sponsor, account, observability) {
+  try {
+    const data = await sponsor();
+    invokeHookSafely(observability?.onSponsor, { account });
+    return data;
+  } catch (error) {
+    invokeHookSafely(observability?.onSponsorError, { account, error });
+    throw error;
+  }
+}
+function createSponsoredKernelClient(params) {
+  const paymasterClient = sdk.createZeroDevPaymasterClient({
+    chain: params.chain,
+    transport: viem.http(params.zerodevRpc)
+  });
+  const client = sdk.createKernelAccountClient({
+    account: params.account,
+    chain: params.chain,
+    // exactOptionalPropertyTypes: only pass `client` when given (never `undefined`).
+    ...params.publicClient !== void 0 ? { client: params.publicClient } : {},
+    bundlerTransport: viem.http(params.zerodevRpc),
+    paymaster: {
+      getPaymasterData: (userOperation) => sponsorWithObservability(
+        () => paymasterClient.sponsorUserOperation({ userOperation }),
+        params.account.address,
+        params.observability
+      )
+    }
+  });
+  return client;
+}
+
 // src/tokens/jpyc.ts
 var JPYC_DECIMALS = 18;
 var JPYC_EIP712_DOMAIN_HINT = {
@@ -1599,24 +1671,6 @@ function encodePaymentResponseHeader(payload) {
 function decodePaymentResponseHeader(headerValue) {
   return decodeHeader(X402_HEADER_PAYMENT_RESPONSE, headerValue);
 }
-
-// src/observability/hooks.ts
-function invokeHookSafely(hook, event) {
-  if (hook === void 0) return;
-  try {
-    const result = hook(event);
-    if (result instanceof Promise) {
-      result.catch(() => {
-      });
-    }
-  } catch {
-  }
-}
-function extractAcceptedNetworks(requirements) {
-  return requirements.map((req) => req.network);
-}
-
-// src/x402/facilitator.ts
 var X402_FACILITATOR_ERROR_CODES = {
   insufficient_funds: "insufficient_funds",
   invalid_exact_evm_payload_authorization_valid_after: "invalid_exact_evm_payload_authorization_valid_after",
@@ -3130,15 +3184,28 @@ async function issueSessionKey(params) {
   const supportedChainId = chainId;
   const entryPoint = params.entryPoint ?? constants.getEntryPoint("0.7");
   const kernelVersion = params.kernelVersion ?? constants.KERNEL_V3_1;
-  const account = await createAgentSmartAccount({
+  const sudoValidator = await resolveSudoValidator({
     publicClient: params.publicClient,
     ownerSigner: params.ownerSigner,
+    sudoValidator: params.sudoValidator,
+    entryPoint,
+    kernelVersion
+  });
+  const permissionValidator = await buildSessionPermissionValidator({
+    publicClient: params.publicClient,
     sessionKeySigner: params.sessionKeySigner,
     policies: params.policies,
     entryPoint,
     kernelVersion
   });
-  const serialized = await permissions.serializePermissionAccount(account);
+  const account = await sdk.createKernelAccount(params.publicClient, {
+    plugins: { sudo: sudoValidator, regular: permissionValidator },
+    ...params.address !== void 0 ? { address: params.address } : {},
+    entryPoint,
+    kernelVersion
+  });
+  const enableSignature = params.approveEnable ? await params.approveEnable(permissionValidator) : void 0;
+  const serialized = enableSignature ? await permissions.serializePermissionAccount(account, void 0, enableSignature) : await permissions.serializePermissionAccount(account);
   const base = {
     kawasekitVersion: KAWASEKIT_SESSION_ENVELOPE_VERSION,
     chainId: supportedChainId,
@@ -3214,10 +3281,10 @@ async function revokeSessionKey(params) {
       "revokeSessionKey: ownerKernelClient.client is undefined \u2014 pass `client: publicClient` when constructing the Kernel client so the validator can be reconstructed."
     );
   }
-  const modularSigner = await signers.toECDSASigner({ signer: sessionKeySigner });
-  const permissionPlugin = await permissions.toPermissionValidator(ownerKernelClient.client, {
-    signer: modularSigner,
-    policies: [...policies],
+  const permissionPlugin = await buildSessionPermissionValidator({
+    publicClient: ownerKernelClient.client,
+    sessionKeySigner,
+    policies,
     entryPoint,
     kernelVersion
   });
@@ -3236,6 +3303,30 @@ async function revokeSessionKey(params) {
     success: receipt.success
   };
 }
+var UNINSTALL_VALIDATION_ABI = viem.parseAbi([
+  "function uninstallValidation(bytes21 vId, bytes deinitData, bytes hookDeinitData)"
+]);
+async function buildRevokeSessionKeyCall(params) {
+  const entryPoint = params.entryPoint ?? constants.getEntryPoint("0.7");
+  const kernelVersion = params.kernelVersion ?? constants.KERNEL_V3_1;
+  const plugin = await buildSessionPermissionValidator({
+    publicClient: params.publicClient,
+    sessionKeySigner: params.sessionKeySigner,
+    policies: params.policies,
+    entryPoint,
+    kernelVersion
+  });
+  const vId = viem.concatHex([
+    constants.VALIDATOR_TYPE.PERMISSION,
+    viem.pad(plugin.getIdentifier(), { size: 20, dir: "right" })
+  ]);
+  const deinitData = await plugin.getEnableData(viem.getAddress(params.smartAccountAddress));
+  return viem.encodeFunctionData({
+    abi: UNINSTALL_VALIDATION_ABI,
+    functionName: "uninstallValidation",
+    args: [vId, deinitData, "0x"]
+  });
+}
 
 // src/session/rotate.ts
 async function rotateSessionKey(params) {
@@ -3281,6 +3372,7 @@ exports.avalanche = avalanche;
 exports.avalancheFuji = avalancheFuji;
 exports.buildPaymentRequiredResponse = buildPaymentRequiredResponse;
 exports.buildPaymentRequirements = buildPaymentRequirements;
+exports.buildRevokeSessionKeyCall = buildRevokeSessionKeyCall;
 exports.cancelAuthorizationTypes = cancelAuthorizationTypes;
 exports.canonicalRequestBytes = canonicalRequestBytes;
 exports.chainIdToX402Network = chainIdToX402Network;
@@ -3295,6 +3387,7 @@ exports.createLocalPolicyGatedSigner = createLocalPolicyGatedSigner;
 exports.createMpc2pPolicyGatedSigner = createMpc2pPolicyGatedSigner;
 exports.createSelfFacilitator = createSelfFacilitator;
 exports.createSpendingPolicy = createSpendingPolicy;
+exports.createSponsoredKernelClient = createSponsoredKernelClient;
 exports.createX402Handler = createX402Handler;
 exports.createX402PaymentSigner = createX402PaymentSigner;
 exports.decodePaymentRequiredHeader = decodePaymentRequiredHeader;