fix: kernel mode

[kopy-kat]

No description provided.

[kopy-kat]

🤖 Automated review by Greg

PR Review

Summary: One-line fix for the Kernel account mode byte in formatPermissionEnableSig — changes the packed prefix from 0x01 to 0x00 for the kernel case.

Risk: Medium — this changes the encoding of the permission enable signature for all Kernel accounts. If any live sessions were created with the old 0x01 prefix, they will stop working after this change. The fix appears correct based on the Kernel validator mode spec.

Issues:

• src/module/smart-sessions/usage.ts:406 — No test added for the kernel case in formatPermissionEnableSig. Given this is a correctness fix (not a refactor), a test asserting the exact packed bytes for the kernel mode would prevent this regressing silently.

Missing:

• Test for the kernel branch of formatPermissionEnableSig verifying that the packed encoding starts with 0x00.
• Changelog / migration note if existing Kernel sessions with the old prefix need to be re-created.

Verdict: Needs changes ⚠️