diff --git a/docs/diagrams/onchain/paymaster.md b/docs/diagrams/onchain/paymaster.md
new file mode 100644
index 0000000..3c85502
--- /dev/null
+++ b/docs/diagrams/onchain/paymaster.md
@@ -0,0 +1,32 @@
+# Use Spend Permissions as a Paymaster
+
+Using Spend Permissions as a Paymaster enables spending a recurring allowance on gas so that the spender does not need to have gas in their account to initiate a withdraw. Native token in excess of gas payment can be withdrawn simultaneously and withdrawing ERC-20s must be done with the explicit `withdraw` call in execution phase.
+
+```mermaid
+sequenceDiagram
+    autonumber
+    participant E as Entrypoint
+    participant S as Spender
+    participant SP as Spend Permissions
+    participant U as Smart Wallet
+
+    Note over E: Validation phase
+    E->>S: validateUserOp
+    E->>SP: validatePaymasterUserOp
+    SP->>U: execute(paymasterDeposit)
+    U->>SP: paymasterDeposit
+    SP->>E: deposit
+    Note over SP,E: Deposit required prefund
+    Note over E: Execution phase
+    E->>S: executeBatch
+    opt
+        S->>SP: withdrawGasExcess
+        SP->>S: call{value}()
+    end
+    E->>SP: postOp
+    opt
+        SP->>E: withdrawTo
+        E->>S: call{value}()
+        Note over E,S: Refund unused gas
+    end
+```
diff --git a/docs/diagrams/onchain/withdraw.md b/docs/diagrams/onchain/withdraw.md
new file mode 100644
index 0000000..2eb8b2c
--- /dev/null
+++ b/docs/diagrams/onchain/withdraw.md
@@ -0,0 +1,28 @@
+# Withdraw from Spend Permissions
+
+The first time using a recurring allowance, the spender needs to pack an additional `permit` call before withdrawing to validate and store the approval. After a recurring allowance has been approved, the spender only needs to call `withdraw` to transfer tokens from the Smart Wallet.
+
+```mermaid
+sequenceDiagram
+    autonumber
+    participant S as Spender
+    participant M as Spend Permissions
+    participant A as Smart Wallet
+    participant ERC20
+
+    opt
+        S->>M: permit(recurringAllowance, signature)
+    end
+    Note over M: validate signature and store approval
+    S->>M: withdraw(recurringAllowance, value)
+    Note over M: validate recurring allowance authorized <br> and withdraw value within allowance
+    M->>A: execute(target, value, data)
+    Note over M,A: transfer tokens
+    alt token is address(e)
+        A->>S: call{value}()
+        Note over A,S: transfer native token to spender
+    else else is ERC20 contract
+        A->>ERC20: transfer(spender, value)
+        Note over A,ERC20: transfer ERC20 to spender
+    end
+```
diff --git a/script/Debug.s.sol b/script/Debug.s.sol
index 60c1a04..50802a0 100644
--- a/script/Debug.s.sol
+++ b/script/Debug.s.sol
@@ -3,9 +3,12 @@ pragma solidity ^0.8.20;
 
 import {Script, console2} from "forge-std/Script.sol";
 import {Strings} from "openzeppelin-contracts/contracts/utils/Strings.sol";
+import {CoinbaseSmartWallet} from "smart-wallet/CoinbaseSmartWallet.sol";
+import {CoinbaseSmartWalletFactory} from "smart-wallet/CoinbaseSmartWalletFactory.sol";
 import {ECDSA} from "solady/utils/ECDSA.sol";
 
 import {PermissionManager} from "../src/PermissionManager.sol";
+import {SpendPermissions} from "../src/SpendPermissions.sol";
 import {PermissionCallableAllowedContractNativeTokenRecurringAllowance as PermissionContract} from
     "../src/permissions/PermissionCallableAllowedContractNativeTokenRecurringAllowance.sol";
 
@@ -15,50 +18,19 @@ contract Debug is Script {
     ///      https://github.com/coinbase/magic-spend/releases/tag/v1.0.0
     address public constant MAGIC_SPEND = 0x011A61C07DbF256A68256B1cB51A5e246730aB92;
     address public constant OWNER = 0x6EcB18183838265968039955F1E8829480Db5329; // dev wallet
+    address public constant OWNER_2 = 0x0BFc799dF7e440b7C88cC2454f12C58f8a29D986; // work wallet
     address public constant COSIGNER = 0xAda9897F517018cc51831B9691F0e94b50df50B8; // tmp private key
     address public constant CDP_PAYMASTER = 0xf5d253B62543C6Ef526309D497f619CeF95aD430;
+    address public constant FACTORY = 0x0BA5ED0c6AA8c49038F819E587E2633c4A9F428a;
 
-    // recent deploys
-    address public constant MANAGER = 0x384E8b4617886C7070ABd6037c4D5AbeC5B1d14d;
-
-    PermissionManager permissionManager;
-    PermissionContract permissionContract;
+    address public constant ETHER = 0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE;
 
     function run() public {
         vm.startBroadcast();
 
-        // debugCosignature(userOpHash, userOpCosignature);
-        debugBeforeCalls();
-
         vm.stopBroadcast();
     }
 
-    function debugCosignature() public view {
-        bytes32 userOpHash = 0x41c969e7044df9a75d8b66d33641885b5eab3a03bb1cda2a6f1be720a40aaf44;
-        bytes memory userOpCosignature =
-            hex"d72c4bebbf8f8df9e05b5a8454c9a2c80f1391b6ba6f8692828e7b93baeedda87e5ec5229ace02083b44827764ace31fe6b393dcb84da0e257ca58f528683aa81b";
-        address userOpCosigner = ECDSA.recover(userOpHash, userOpCosignature);
-        logAddress("userOpCosigner", userOpCosigner);
-    }
-
-    function debugBeforeCalls() public pure {
-        bytes memory beforeCallsData =
-            hex"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";
-        (, address paymaster, address cosigner) =
-            abi.decode(beforeCallsData, (PermissionManager.Permission, address, address));
-
-        logAddress("paymaster", paymaster);
-        logAddress("cosigner", cosigner);
-    }
-
-    function deploy() internal {
-        // permissionManager = new PermissionManager{salt: 0}(OWNER, COSIGNER);
-        // logAddress("PermissionManager", address(permissionManager));
-
-        // permissionContract = new PermissionContract{salt: 0}(address(permissionManager));
-        // logAddress("PermissionCallableAllowedContractNativeTokenRecurringAllowance", address(permissionContract));
-    }
-
     function logAddress(string memory name, address addr) internal pure {
         console2.logString(string.concat(name, ": ", Strings.toHexString(addr)));
     }
diff --git a/script/Deploy.s.sol b/script/Deploy.s.sol
index 6cbc906..bac6f60 100644
--- a/script/Deploy.s.sol
+++ b/script/Deploy.s.sol
@@ -5,6 +5,7 @@ import {Script, console2} from "forge-std/Script.sol";
 import {Strings} from "openzeppelin-contracts/contracts/utils/Strings.sol";
 
 import {PermissionManager} from "../src/PermissionManager.sol";
+import {SpendPermissions} from "../src/SpendPermissions.sol";
 import {PermissionCallableAllowedContractNativeTokenRecurringAllowance as PermissionContract} from
     "../src/permissions/PermissionCallableAllowedContractNativeTokenRecurringAllowance.sol";
 
@@ -21,31 +22,18 @@ contract Deploy is Script {
     address public constant CDP_PAYMASTER = 0xC484bCD10aB8AD132843872DEb1a0AdC1473189c; // limiting paymaster
     address public constant CDP_PAYMASTER_PUBLIC = 0xf5d253B62543C6Ef526309D497f619CeF95aD430; // public
 
-    // recent deploys
-    // address public constant MANAGER = 0x384E8b4617886C7070ABd6037c4D5AbeC5B1d14d;
-    // address public constant MANAGER = 0xc81ff7b47839c957Afd1C9CFac82a94B0625550F;
-
     PermissionManager permissionManager;
     PermissionContract permissionContract;
 
     function run() public {
         vm.startBroadcast();
 
-        // permissionManager = PermissionManager(MANAGER);
         deploy();
 
-        permissionManager.setPermissionContractEnabled(address(permissionContract), true);
-
         vm.stopBroadcast();
     }
 
-    function deploy() internal {
-        permissionManager = new PermissionManager{salt: 0}(OWNER, COSIGNER);
-        logAddress("PermissionManager", address(permissionManager));
-
-        permissionContract = new PermissionContract{salt: 0}(address(permissionManager), MAGIC_SPEND);
-        logAddress("PermissionContract", address(permissionContract));
-    }
+    function deploy() internal {}
 
     function logAddress(string memory name, address addr) internal pure {
         console2.logString(string.concat(name, ": ", Strings.toHexString(addr)));
diff --git a/src/EIP712.sol b/src/EIP712.sol
new file mode 100644
index 0000000..567e98e
--- /dev/null
+++ b/src/EIP712.sol
@@ -0,0 +1,80 @@
+// SPDX-License-Identifier: MIT
+pragma solidity ^0.8.4;
+
+/// @title EIP-712
+///
+/// @notice Abstract EIP-712 implementation.
+abstract contract EIP712 {
+    /// @notice Returns information about the `EIP712Domain` used to create EIP-712 compliant hashes.
+    ///
+    /// @dev Follows ERC-5267 (see https://eips.ethereum.org/EIPS/eip-5267).
+    ///
+    /// @return fields The bitmap of used fields.
+    /// @return name The value of the `EIP712Domain.name` field.
+    /// @return version The value of the `EIP712Domain.version` field.
+    /// @return chainId The value of the `EIP712Domain.chainId` field.
+    /// @return verifyingContract The value of the `EIP712Domain.verifyingContract` field.
+    /// @return salt The value of the `EIP712Domain.salt` field.
+    /// @return extensions The list of EIP numbers, that extends EIP-712 with new domain fields.
+    function eip712Domain()
+        external
+        view
+        virtual
+        returns (
+            bytes1 fields,
+            string memory name,
+            string memory version,
+            uint256 chainId,
+            address verifyingContract,
+            bytes32 salt,
+            uint256[] memory extensions
+        )
+    {
+        fields = hex"0f"; // `0b1111`.
+        (name, version) = _domainNameAndVersion();
+        chainId = block.chainid;
+        verifyingContract = address(this);
+        salt = salt; // `bytes32(0)`.
+        extensions = extensions; // `new uint256[](0)`.
+    }
+
+    /// @notice Returns the EIP-712 typed hash of the `CoinbaseSmartWalletMessage(bytes32 hash)` data structure.
+    ///
+    /// @dev Implements encode(domainSeparator : 𝔹²⁵⁶, message : 𝕊) = "\x19\x01" || domainSeparator ||
+    ///      hashStruct(message).
+    /// @dev See https://eips.ethereum.org/EIPS/eip-712#specification.
+    ///
+    /// @param messageHash The hash of message values.
+    ////
+    /// @return The resulting EIP-712 hash.
+    function _eip712Hash(bytes32 messageHash) internal view virtual returns (bytes32) {
+        return keccak256(abi.encodePacked("\x19\x01", _domainSeparator(), messageHash));
+    }
+
+    /// @notice Returns the `domainSeparator` used to create EIP-712 compliant hashes.
+    ///
+    /// @dev Implements domainSeparator = hashStruct(eip712Domain).
+    ///      See https://eips.ethereum.org/EIPS/eip-712#definition-of-domainseparator.
+    ///
+    /// @return The 32 bytes domain separator result.
+    function _domainSeparator() internal view returns (bytes32) {
+        (string memory name, string memory version) = _domainNameAndVersion();
+        return keccak256(
+            abi.encode(
+                keccak256("EIP712Domain(string name,string version,uint256 chainId,address verifyingContract)"),
+                keccak256(bytes(name)),
+                keccak256(bytes(version)),
+                block.chainid,
+                address(this)
+            )
+        );
+    }
+
+    /// @notice Returns the domain name and version to use when creating EIP-712 signatures.
+    ///
+    /// @dev MUST be defined by the implementation.
+    ///
+    /// @return name    The user readable name of signing domain.
+    /// @return version The current major version of the signing domain.
+    function _domainNameAndVersion() internal view virtual returns (string memory name, string memory version);
+}
diff --git a/src/SpendPermissions.sol b/src/SpendPermissions.sol
new file mode 100644
index 0000000..b256ac1
--- /dev/null
+++ b/src/SpendPermissions.sol
@@ -0,0 +1,337 @@
+// SPDX-License-Identifier: MIT
+pragma solidity ^0.8.0;
+
+import {IERC1271} from "openzeppelin-contracts/contracts/interfaces/IERC1271.sol";
+import {IERC20} from "openzeppelin-contracts/contracts/token/ERC20/IERC20.sol";
+import {CoinbaseSmartWallet} from "smart-wallet/CoinbaseSmartWallet.sol";
+
+import {EIP712} from "./EIP712.sol";
+
+/// @title SpendPermissions
+///
+/// @notice Allow spending native and ERC20 tokens with a recurring allowance.
+///
+/// @dev Allowance and spend values capped at uint160 ~ 1e48.
+///
+/// @author Coinbase (https://github.com/coinbase/smart-wallet-permissions)
+contract SpendPermissions is EIP712 {
+    /// @notice A recurring allowance for an external spender to withdraw an account's tokens.
+    struct RecurringAllowance {
+        /// @dev Smart account this recurring allowance is valid for.
+        address account;
+        /// @dev Entity that can spend user funds.
+        address spender;
+        /// @dev Token address (ERC-7528 ether address or ERC-20 contract).
+        address token;
+        /// @dev Timestamp this recurring allowance is valid after (unix seconds).
+        uint48 start;
+        /// @dev Timestamp this recurring allowance is valid until (unix seconds).
+        uint48 end;
+        /// @dev Time duration for resetting used allowance on a recurring basis (seconds).
+        uint48 period;
+        /// @dev Maximum allowed value to spend within a recurring cycle.
+        uint160 allowance;
+    }
+
+    /// @notice Cycle parameters and spend usage.
+    struct CycleUsage {
+        /// @dev Start time of the cycle (unix seconds).
+        uint48 start;
+        /// @dev End time of the cycle (unix seconds).
+        uint48 end;
+        /// @dev Accumulated spend amount for cycle.
+        uint160 spend;
+    }
+
+    /// @notice Hash of EIP-712 message type
+    bytes32 private constant _MESSAGE_TYPEHASH = keccak256(
+        "RecurringAllowance(address account,address spender,address token,uint48 start,uint48 end,uint48 period,uint160 allowance)"
+    );
+
+    /// @notice ERC-7528 address convention for ether (https://eips.ethereum.org/EIPS/eip-7528).
+    address public constant ETHER = 0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE;
+
+    /// @notice Recurring allowance is revoked.
+    mapping(bytes32 hash => mapping(address account => bool revoked)) internal _isRevoked;
+
+    /// @notice Recurring allowance is approved.
+    mapping(bytes32 hash => mapping(address account => bool approved)) internal _isApproved;
+
+    /// @notice Last updated cycle for a recurring allowance.
+    mapping(bytes32 hash => mapping(address account => CycleUsage)) internal _lastUpdatedCycle;
+
+    /// @notice Invalid sender for the external call.
+    ///
+    /// @param sender Expected sender to be valid.
+    error InvalidSender(address sender);
+
+    /// @notice Unauthorized recurring allowance.
+    error UnauthorizedRecurringAllowance();
+
+    /// @notice Recurring cycle has not started yet.
+    ///
+    /// @param start Timestamp this recurring allowance is valid after (unix seconds).
+    error BeforeRecurringAllowanceStart(uint48 start);
+
+    /// @notice Recurring cycle has not started yet.
+    ///
+    /// @param end Timestamp this recurring allowance is valid until (unix seconds).
+    error AfterRecurringAllowanceEnd(uint48 end);
+
+    /// @notice Withdraw value exceeds max size of uint160.
+    ///
+    /// @param value Spend value that triggered overflow.
+    error WithdrawValueOverflow(uint256 value);
+
+    /// @notice Spend value exceeds recurring allowance.
+    ///
+    /// @param value Spend value that exceeded allowance.
+    /// @param allowance Allowance value that was exceeded.
+    error ExceededRecurringAllowance(uint256 value, uint256 allowance);
+
+    /// @notice RecurringAllowance was approved via transaction.
+    ///
+    /// @param hash The unique hash representing the recurring allowance.
+    /// @param account The smart contract account the recurring allowance controls.
+    /// @param recurringAllowance Details of the recurring allowance.
+    event RecurringAllowanceApproved(
+        bytes32 indexed hash, address indexed account, RecurringAllowance recurringAllowance
+    );
+
+    /// @notice RecurringAllowance was revoked prematurely by account.
+    ///
+    /// @param hash The unique hash representing the recurring allowance.
+    /// @param account The smart contract account the recurring allowance controlled.
+    /// @param recurringAllowance Details of the recurring allowance.
+    event RecurringAllowanceRevoked(
+        bytes32 indexed hash, address indexed account, RecurringAllowance recurringAllowance
+    );
+
+    /// @notice Register native token spend for a recurring allowance cycle.
+    ///
+    /// @param hash Hash of the recurring allowance.
+    /// @param account Account that spent native token via a recurring allowance.
+    /// @param token Account that spent native token via a recurring allowance.
+    /// @param newUsage Start and end of the current cycle with new spend usage (struct).
+    event RecurringAllowanceWithdrawn(
+        bytes32 indexed hash, address indexed account, address indexed token, CycleUsage newUsage
+    );
+
+    /// @notice Require a specific sender for an external call,
+    ///
+    /// @param sender Expected sender for call to be valid.
+    modifier requireSender(address sender) {
+        if (msg.sender != sender) revert InvalidSender(sender);
+        _;
+    }
+
+    /// @notice Approve a recurring allowance via a direct call from the account.
+    ///
+    /// @dev Prevent phishing approvals by rejecting simulated transactions with the approval event.
+    ///
+    /// @param recurringAllowance Details of the recurring allowance.
+    function approve(RecurringAllowance calldata recurringAllowance)
+        external
+        requireSender(recurringAllowance.account)
+    {
+        _approve(recurringAllowance);
+    }
+
+    /// @notice Revoke a recurring allowance to disable its use indefinitely.
+    ///
+    /// @param recurringAllowance Details of the recurring allowance.
+    function revoke(RecurringAllowance calldata recurringAllowance)
+        external
+        requireSender(recurringAllowance.account)
+    {
+        bytes32 hash = getHash(recurringAllowance);
+        _isRevoked[hash][recurringAllowance.account] = true;
+        emit RecurringAllowanceRevoked(hash, recurringAllowance.account, recurringAllowance);
+    }
+
+    /// @notice Withdraw tokens using a recurring allowance and approval signature.
+    ///
+    /// @dev Convenience function for offchain preparation from apps that have an ERC-7715 permissions context.
+    ///
+    /// @param context Flat bytes value representing an approved recurring allowance.
+    /// @param recipient Address to withdraw tokens to.
+    /// @param value Amount of token attempting to withdraw (wei).
+    function withdraw(bytes calldata context, address recipient, uint160 value) external {
+        (RecurringAllowance memory recurringAllowance, bytes memory signature) =
+            abi.decode(context, (RecurringAllowance, bytes));
+        permit(recurringAllowance, signature);
+        withdraw(recurringAllowance, recipient, value);
+    }
+
+    /// @notice Approve a recurring allowance via a signature from the account.
+    ///
+    /// @param recurringAllowance Details of the recurring allowance.
+    /// @param signature Signed hash of the recurring allowance data.
+    function permit(RecurringAllowance memory recurringAllowance, bytes memory signature) public {
+        // validate signature over recurring allowance data
+        if (
+            IERC1271(recurringAllowance.account).isValidSignature(getHash(recurringAllowance), signature)
+                != IERC1271.isValidSignature.selector
+        ) {
+            revert UnauthorizedRecurringAllowance();
+        }
+
+        _approve(recurringAllowance);
+    }
+
+    /// @notice Withdraw tokens using a recurring allowance.
+    ///
+    /// @param recurringAllowance Details of the recurring allowance.
+    /// @param recipient Address to withdraw tokens to.
+    /// @param value Amount of token attempting to withdraw (wei).
+    function withdraw(RecurringAllowance memory recurringAllowance, address recipient, uint160 value)
+        public
+        requireSender(recurringAllowance.spender)
+    {
+        _useRecurringAllowance(recurringAllowance, value);
+
+        // transfer tokens from account to recipient
+        if (recurringAllowance.token == ETHER) {
+            _execute({account: recurringAllowance.account, target: recipient, value: value, data: hex""});
+        } else {
+            _execute({
+                account: recurringAllowance.account,
+                target: recurringAllowance.token,
+                value: 0,
+                data: abi.encodeWithSelector(IERC20.transfer.selector, recipient, value)
+            });
+        }
+    }
+
+    /// @notice Hash a RecurringAllowance struct for signing.
+    ///
+    /// @dev Prevent phishing permits by making the hash incompatible with EIP-191/712.
+    /// @dev Include chainId and contract address in hash for cross-chain and cross-contract replay protection.
+    ///
+    /// @param recurringAllowance Details of the recurring allowance.
+    ///
+    /// @return hash Hash of the recurring allowance and replay protection parameters.
+    function getHash(RecurringAllowance memory recurringAllowance) public view returns (bytes32) {
+        return _eip712Hash(keccak256(abi.encode(_MESSAGE_TYPEHASH, recurringAllowance)));
+    }
+
+    /// @notice Return if recurring allowance is authorized i.e. approved and not revoked.
+    ///
+    /// @param recurringAllowance Details of the recurring allowance.
+    ///
+    /// @return authorized True if recurring allowance is approved and not revoked.
+    function isAuthorized(RecurringAllowance memory recurringAllowance) public view returns (bool) {
+        bytes32 hash = getHash(recurringAllowance);
+        return !_isRevoked[hash][recurringAllowance.account] && _isApproved[hash][recurringAllowance.account];
+    }
+
+    /// @notice Get current cycle usage.
+    ///
+    /// @dev Reverts if recurring allowance has not started or has already ended.
+    /// @dev Cycle boundaries are at fixed intervals of [start + n * period, start + (n + 1) * period - 1].
+    ///
+    /// @param recurringAllowance Details of the recurring allowance.
+    ///
+    /// @return currentCycle Currently active cycle with spend usage (struct).
+    function getCurrentCycle(RecurringAllowance memory recurringAllowance) public view returns (CycleUsage memory) {
+        // check current timestamp is within recurring allowance time range
+        uint48 currentTimestamp = uint48(block.timestamp);
+        if (currentTimestamp < recurringAllowance.start) {
+            revert BeforeRecurringAllowanceStart(recurringAllowance.start);
+        } else if (currentTimestamp > recurringAllowance.end) {
+            revert AfterRecurringAllowanceEnd(recurringAllowance.end);
+        }
+
+        // return last cycle if still active, otherwise compute new active cycle start time with no spend
+        CycleUsage memory lastUpdatedCycle = _lastUpdatedCycle[getHash(recurringAllowance)][recurringAllowance.account];
+
+        // last cycle exists if spend is non-zero
+        bool lastCycleExists = lastUpdatedCycle.spend != 0;
+
+        // last cycle still active if current timestamp within [start, end - 1] range.
+        bool lastCycleStillActive =
+            currentTimestamp < uint256(lastUpdatedCycle.start) + uint256(recurringAllowance.period);
+
+        if (lastCycleExists && lastCycleStillActive) {
+            return lastUpdatedCycle;
+        } else {
+            // last active cycle does not exist or is outdated, determine current cycle
+
+            // current cycle progress is remainder of time since first recurring cycle mod reset period
+            uint48 currentCycleProgress = (currentTimestamp - recurringAllowance.start) % recurringAllowance.period;
+
+            // current cycle start is progress duration before current time
+            uint48 start = currentTimestamp - currentCycleProgress;
+
+            // current cycle end will overflow if period is sufficiently large
+            bool endOverflow = uint256(start) + uint256(recurringAllowance.period) > type(uint48).max;
+
+            // end is one period after start or maximum uint48 if overflow
+            uint48 end = endOverflow ? type(uint48).max : start + recurringAllowance.period;
+
+            return CycleUsage({start: start, end: end, spend: 0});
+        }
+    }
+
+    /// @notice Approve recurring allowance.
+    ///
+    /// @param recurringAllowance Details of the recurring allowance.
+    function _approve(RecurringAllowance memory recurringAllowance) internal {
+        bytes32 hash = getHash(recurringAllowance);
+        _isApproved[hash][recurringAllowance.account] = true;
+        emit RecurringAllowanceApproved(hash, recurringAllowance.account, recurringAllowance);
+    }
+
+    /// @notice Use a recurring allowance.
+    ///
+    /// @param recurringAllowance Details of the recurring allowance.
+    /// @param value Amount of token attempting to withdraw (wei).
+    function _useRecurringAllowance(RecurringAllowance memory recurringAllowance, uint160 value) internal {
+        // early return if no value spent
+        if (value == 0) return;
+
+        // require recurring allowance is approved and not revoked
+        if (!isAuthorized(recurringAllowance)) revert UnauthorizedRecurringAllowance();
+
+        CycleUsage memory currentCycle = getCurrentCycle(recurringAllowance);
+        uint256 totalSpend = uint256(value) + uint256(currentCycle.spend);
+
+        // check total spend value does not overflow max value
+        if (totalSpend > type(uint160).max) revert WithdrawValueOverflow(totalSpend);
+
+        // check total spend value does not exceed recurring allowance
+        if (totalSpend > recurringAllowance.allowance) {
+            revert ExceededRecurringAllowance(totalSpend, recurringAllowance.allowance);
+        }
+
+        bytes32 hash = getHash(recurringAllowance);
+
+        // save new withdraw for active cycle
+        currentCycle.spend = uint160(totalSpend);
+        _lastUpdatedCycle[hash][recurringAllowance.account] = currentCycle;
+        emit RecurringAllowanceWithdrawn(
+            hash,
+            recurringAllowance.account,
+            recurringAllowance.token,
+            CycleUsage(currentCycle.start, currentCycle.end, uint160(value))
+        );
+    }
+
+    /// @notice Execute a single call on an account.
+    ///
+    /// @param account Address of the user account.
+    /// @param target Address of the target contract.
+    /// @param value Amount of native token to send in call.
+    /// @param data Bytes data to send in call.
+    function _execute(address account, address target, uint256 value, bytes memory data) internal virtual {
+        CoinbaseSmartWallet(payable(account)).execute({target: target, value: value, data: data});
+    }
+
+    /// @notice Returns the domain name and version to use when creating EIP-712 signatures.
+    ///
+    /// @return name    The user readable name of signing domain.
+    /// @return version The current major version of the signing domain.
+    function _domainNameAndVersion() internal pure override returns (string memory name, string memory version) {
+        return ("SpendPermissions", "1");
+    }
+}
diff --git a/src/SpendPermissionsPaymaster.sol b/src/SpendPermissionsPaymaster.sol
new file mode 100644
index 0000000..898ab36
--- /dev/null
+++ b/src/SpendPermissionsPaymaster.sol
@@ -0,0 +1,196 @@
+// SPDX-License-Identifier: MIT
+pragma solidity ^0.8.23;
+
+import {IEntryPoint} from "account-abstraction/interfaces/IEntryPoint.sol";
+import {IPaymaster} from "account-abstraction/interfaces/IPaymaster.sol";
+import {UserOperation} from "account-abstraction/interfaces/UserOperation.sol";
+import {Ownable} from "openzeppelin-contracts/contracts/access/Ownable.sol";
+import {Ownable2Step} from "openzeppelin-contracts/contracts/access/Ownable2Step.sol";
+import {CoinbaseSmartWallet} from "smart-wallet/CoinbaseSmartWallet.sol";
+import {SafeTransferLib} from "solady/utils/SafeTransferLib.sol";
+
+import {SpendPermissions} from "./SpendPermissions.sol";
+
+/// @title SpendPermissionsPaymaster
+///
+/// @notice A recurring alowance mechanism for native and ERC-20 tokens for Coinbase Smart Wallet.
+///
+/// @dev Supports withdrawing tokens through direct call or spending gas as an ERC-4337 Paymaster.
+///
+/// @author Coinbase (https://github.com/coinbase/smart-wallet-permissions)
+contract SpendPermissionsPaymaster is SpendPermissions, Ownable2Step, IPaymaster {
+    /// @notice Track the amount of native asset available to be withdrawn per user.
+    mapping(address user => uint256 amount) internal _withdrawable;
+
+    /// @notice Thrown during validation in the context of ERC4337, when the withdraw request amount is insufficient
+    ///         to sponsor the transaction gas.
+    ///
+    /// @param withdraw The withdraw request amount.
+    /// @param maxGasCost The max gas cost required by the Entrypoint.
+    error LessThanGasMaxCost(uint256 withdraw, uint256 maxGasCost);
+
+    /// @notice Thrown when the withdraw request `asset` is not ETH (zero address).
+    ///
+    /// @param asset The requested asset.
+    error UnsupportedPaymasterAsset(address asset);
+
+    /// @notice Thrown when trying to withdraw funds but nothing is available.
+    error NoExcess();
+
+    /// @notice Thrown when `postOp()` is called a second time with `PostOpMode.postOpReverted`.
+    ///
+    /// @dev This should only really occur if, for unknown reasons, the transfer of the withdrawable
+    ///      funds to the user account failed (i.e. this contract's ETH balance is insufficient or
+    ///      the user account refused the funds or ran out of gas on receive).
+    error UnexpectedPostOpRevertedMode();
+
+    /// @notice Constructor
+    ///
+    /// @param initialOwner address of the owner who can manage Entrypoint stake
+    constructor(address initialOwner) Ownable(initialOwner) {}
+
+    /// @inheritdoc IPaymaster
+    function validatePaymasterUserOp(UserOperation calldata userOp, bytes32, uint256 maxGasCost)
+        external
+        requireSender(entryPoint())
+        returns (bytes memory postOpContext, uint256 validationData)
+    {
+        // todo allow passing signature for first-time allowance use
+        (RecurringAllowance memory recurringAllowance, bytes memory signature, uint256 withdrawAmount) =
+            abi.decode(userOp.paymasterAndData[20:], (RecurringAllowance, bytes, uint256));
+
+        // require withdraw amount not less than max gas cost
+        if (withdrawAmount < maxGasCost) {
+            revert LessThanGasMaxCost(withdrawAmount, maxGasCost);
+        }
+
+        // require recurring allowance token is ether
+        if (recurringAllowance.token != ETHER) {
+            revert UnsupportedPaymasterAsset(recurringAllowance.token);
+        }
+
+        // require userOp sender is the recurring allowance spender
+        if (userOp.sender != recurringAllowance.spender) {
+            revert InvalidSender(userOp.sender);
+        }
+
+        // apply permit if signature length non-zero
+        if (signature.length > 0) {
+            permit(recurringAllowance, signature);
+        }
+
+        // check total spend value does not overflow max value
+        if (withdrawAmount > type(uint160).max) revert WithdrawValueOverflow(withdrawAmount);
+
+        // use recurring allowance for withdraw amount
+        _useRecurringAllowance(recurringAllowance, uint160(withdrawAmount));
+
+        // pull funds from account into paymaster
+        _execute({
+            account: recurringAllowance.account,
+            target: address(this),
+            value: withdrawAmount,
+            data: abi.encodeWithSelector(this.paymasterDeposit.selector, maxGasCost, userOp.sender)
+        });
+
+        postOpContext = abi.encode(maxGasCost, userOp.sender);
+        validationData = (uint256(recurringAllowance.end) << 160) | (uint256(recurringAllowance.start) << 208);
+        return (postOpContext, validationData);
+    }
+
+    /// @notice Deposit native token into the paymaster for gas sponsorship.
+    ///
+    /// @dev Called within `this.validatePaymasterUserOp` execution.
+    /// @dev `this.validatePaymasterUserOp` enforces `msg.value` will always be greater than `entryPointPrefund`.
+    ///
+    /// @param entryPointPrefund Amount of native token to deposit into the Entrypoint for required prefund.
+    /// @param gasExcessRecipient Address to send native token in excess of gas cost to.
+    function paymasterDeposit(uint256 entryPointPrefund, address gasExcessRecipient) external payable {
+        if (msg.value < entryPointPrefund) revert LessThanGasMaxCost(msg.value, entryPointPrefund);
+
+        // deposit into Entrypoint for required prefund
+        SafeTransferLib.safeTransferETH(entryPoint(), entryPointPrefund);
+
+        // transfer withdraw amount exceeding gas cost to account
+        uint256 gasExcess = msg.value - entryPointPrefund;
+        if (gasExcess > 0) {
+            _withdrawable[gasExcessRecipient] += gasExcess;
+        }
+    }
+
+    /// @notice Allows the sender to withdraw any available funds associated with their account.
+    ///
+    /// @dev Can be called back during the `UserOperation` execution to sponsor funds for non-gas related
+    ///      use cases (e.g., swap or mint).
+    function withdrawGasExcess() external {
+        uint256 amount = _withdrawable[msg.sender];
+        // we could allow 0 value transfers, but prefer to be explicit
+        if (amount == 0) revert NoExcess();
+
+        delete _withdrawable[msg.sender];
+        SafeTransferLib.safeTransferETH(msg.sender, amount);
+    }
+
+    /// @inheritdoc IPaymaster
+    function postOp(IPaymaster.PostOpMode mode, bytes calldata context, uint256 actualGasCost)
+        external
+        requireSender(entryPoint())
+    {
+        // `PostOpMode.postOpReverted` should never happen.
+        // The flow here can only revert if there are > maxWithdrawDenominator
+        // withdraws in the same transaction, which should be highly unlikely.
+        // If the ETH transfer fails, the entire bundle will revert due an issue in the EntryPoint
+        // https://github.com/eth-infinitism/account-abstraction/pull/293
+        if (mode == PostOpMode.postOpReverted) {
+            revert UnexpectedPostOpRevertedMode();
+        }
+
+        (uint256 maxGasCost, address payable account) = abi.decode(context, (uint256, address));
+
+        // Send unused gas to the user accout.
+        IEntryPoint(entryPoint()).withdrawTo(account, maxGasCost - actualGasCost);
+
+        // Compute the total remaining funds available for the user accout.
+        uint256 withdrawable = _withdrawable[account];
+
+        // Send the all remaining funds to the user accout.
+        delete _withdrawable[account];
+        if (withdrawable > 0) {
+            SafeTransferLib.forceSafeTransferETH(account, withdrawable, SafeTransferLib.GAS_STIPEND_NO_STORAGE_WRITES);
+        }
+    }
+
+    /// @notice Adds stake to the EntryPoint.
+    ///
+    /// @dev Reverts if not called by the owner of the contract. Calling this while an unstake
+    ///      is pending will first cancel the pending unstake.
+    ///
+    /// @param amount              The amount to stake in the Entrypoint.
+    /// @param unstakeDelaySeconds The duration for which the stake cannot be withdrawn. Must be
+    ///                            equal to or greater than the current unstake delay.
+    function entryPointAddStake(uint256 amount, uint32 unstakeDelaySeconds) external payable onlyOwner {
+        IEntryPoint(entryPoint()).addStake{value: amount}(unstakeDelaySeconds);
+    }
+
+    /// @notice Unlocks stake in the EntryPoint.
+    ///
+    /// @dev Reverts if not called by the owner of the contract.
+    function entryPointUnlockStake() external onlyOwner {
+        IEntryPoint(entryPoint()).unlockStake();
+    }
+
+    /// @notice Withdraws stake from the EntryPoint.
+    ///
+    /// @dev Reverts if not called by the owner of the contract. Only call this after the unstake delay
+    ///      has passed since the last `entryPointUnlockStake` call.
+    ///
+    /// @param to The beneficiary address.
+    function entryPointWithdrawStake(address payable to) external onlyOwner {
+        IEntryPoint(entryPoint()).withdrawStake(to);
+    }
+
+    /// @notice Returns the canonical ERC-4337 EntryPoint v0.6 contract.
+    function entryPoint() public pure returns (address) {
+        return 0x5FF137D4b0FDCD49DcA30c7CF57E578a026d2789;
+    }
+}
diff --git a/test/base/Static.sol b/test/base/Static.sol
new file mode 100644
index 0000000..e2e2c8b
--- /dev/null
+++ b/test/base/Static.sol
@@ -0,0 +1,8 @@
+// SPDX-License-Identifier: MIT
+pragma solidity ^0.8.21;
+
+library Static {
+    /// @dev 1-9-2023: cast code 0x5FF137D4b0FDCD49DcA30c7CF57E578a026d2789  --rpc-url https://goerli.base.org
+    bytes constant ENTRY_POINT_BYTES =
+        hex"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";
+}
diff --git a/test/src/SpendPermissions/Debug.t.sol b/test/src/SpendPermissions/Debug.t.sol
new file mode 100644
index 0000000..f1a3728
--- /dev/null
+++ b/test/src/SpendPermissions/Debug.t.sol
@@ -0,0 +1,53 @@
+// SPDX-License-Identifier: MIT
+pragma solidity ^0.8.23;
+
+import {Test, console2} from "forge-std/Test.sol";
+
+import {SpendPermissions} from "../../../../src/SpendPermissions.sol";
+
+import {Base} from "../../base/Base.sol";
+
+contract DebugTest is Test, Base {
+    address public constant ETHER = 0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE;
+
+    SpendPermissions spendPermissions;
+
+    function setUp() public {
+        _initialize();
+
+        spendPermissions = new SpendPermissions();
+
+        vm.prank(owner);
+        account.addOwnerAddress(address(spendPermissions));
+    }
+
+    function test_approve() public {
+        SpendPermissions.RecurringAllowance memory recurringAllowance = _createRecurringAllowance();
+
+        vm.prank(address(account));
+        spendPermissions.approve(recurringAllowance);
+    }
+
+    function test_withdraw(address recipient) public {
+        SpendPermissions.RecurringAllowance memory recurringAllowance = _createRecurringAllowance();
+
+        vm.prank(address(account));
+        spendPermissions.approve(recurringAllowance);
+
+        vm.deal(address(account), 1 ether);
+        vm.prank(owner);
+        spendPermissions.withdraw(recurringAllowance, recipient, 1 ether / 2);
+    }
+
+    function _createRecurringAllowance() internal view returns (SpendPermissions.RecurringAllowance memory) {
+        return SpendPermissions.RecurringAllowance({
+            account: address(account),
+            spender: owner,
+            token: ETHER,
+            start: 0,
+            end: 1758791693, // 1 year from now
+            period: 86400, // 1 day
+            allowance: 1 ether
+        });
+    }
+}
diff --git a/test/src/SpendPermissionsPaymaster/Debug.t.sol b/test/src/SpendPermissionsPaymaster/Debug.t.sol
new file mode 100644
index 0000000..ddddeb7
--- /dev/null
+++ b/test/src/SpendPermissionsPaymaster/Debug.t.sol
@@ -0,0 +1,109 @@
+// SPDX-License-Identifier: MIT
+pragma solidity ^0.8.23;
+
+import {IPaymaster} from "account-abstraction/interfaces/IPaymaster.sol";
+import {UserOperation} from "account-abstraction/interfaces/UserOperation.sol";
+import {Test, console2} from "forge-std/Test.sol";
+import {IERC1271} from "openzeppelin-contracts/contracts/interfaces/IERC1271.sol";
+
+import {SpendPermissions} from "../../../src/SpendPermissions.sol";
+import {SpendPermissionsPaymaster} from "../../../src/SpendPermissionsPaymaster.sol";
+
+import {Base} from "../../base/Base.sol";
+import {Static} from "../../base/Static.sol";
+
+contract DebugTest is Test, Base {
+    address constant ETHER = 0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE;
+
+    SpendPermissionsPaymaster spendPermissions;
+
+    function setUp() public {
+        _initialize();
+        vm.etch(ENTRY_POINT_V06, Static.ENTRY_POINT_BYTES);
+
+        spendPermissions = new SpendPermissionsPaymaster(owner);
+
+        vm.prank(owner);
+        account.addOwnerAddress(address(spendPermissions));
+    }
+
+    function test_validatePaymasterUserOp_success(uint160 allowance, uint160 maxGasCost) public {
+        vm.assume(maxGasCost > 1e6);
+        vm.assume(maxGasCost < type(uint112).max);
+        vm.assume(allowance > maxGasCost);
+
+        SpendPermissions.RecurringAllowance memory recurringAllowance = _createRecurringAllowance();
+        recurringAllowance.allowance = allowance;
+
+        UserOperation memory userOp = _createUserOperation();
+        userOp.sender = recurringAllowance.spender;
+        userOp.callGasLimit = 1;
+        userOp.verificationGasLimit = 1;
+        userOp.preVerificationGas = 1;
+        userOp.maxFeePerGas = 1;
+        userOp.maxPriorityFeePerGas = 1;
+
+        bytes32 hash = spendPermissions.getHash(recurringAllowance);
+        bytes32 replaySafeHash = account.replaySafeHash(hash);
+        bytes memory signature = _applySignatureWrapper(0, _sign(ownerPk, replaySafeHash));
+
+        vm.assertEq(account.isValidSignature(hash, signature), IERC1271.isValidSignature.selector);
+
+        bytes memory paymasterData = abi.encode(recurringAllowance, signature, allowance);
+
+        userOp.paymasterAndData = abi.encodePacked(address(spendPermissions), paymasterData);
+
+        vm.deal(recurringAllowance.account, allowance);
+        vm.prank(ENTRY_POINT_V06);
+        (bytes memory postOpContext, uint256 validationData) =
+            spendPermissions.validatePaymasterUserOp(userOp, bytes32(0), maxGasCost);
+
+        vm.assertEq(ENTRY_POINT_V06.balance, maxGasCost);
+        vm.assertEq(address(spendPermissions).balance, allowance - maxGasCost);
+        vm.assertEq(recurringAllowance.spender.balance, 0);
+
+        vm.prank(ENTRY_POINT_V06);
+        spendPermissions.postOp(IPaymaster.PostOpMode.opSucceeded, postOpContext, maxGasCost - 1);
+
+        vm.assertEq(recurringAllowance.spender.balance, allowance - maxGasCost + 1);
+    }
+
+    function test_withdraw_success(uint160 allowance) public {
+        vm.assume(allowance > 0);
+
+        SpendPermissions.RecurringAllowance memory recurringAllowance = _createRecurringAllowance();
+        recurringAllowance.allowance = allowance;
+
+        bytes32 hash = spendPermissions.getHash(recurringAllowance);
+        bytes32 replaySafeHash = account.replaySafeHash(hash);
+        bytes memory signature = _applySignatureWrapper(0, _sign(ownerPk, replaySafeHash));
+
+        vm.assertEq(account.isValidSignature(hash, signature), IERC1271.isValidSignature.selector);
+
+        spendPermissions.permit(recurringAllowance, signature);
+
+        vm.assertTrue(spendPermissions.isAuthorized(recurringAllowance));
+
+        vm.deal(recurringAllowance.account, allowance);
+        vm.prank(recurringAllowance.spender);
+        spendPermissions.withdraw(recurringAllowance, recurringAllowance.spender, 1);
+
+        vm.assertEq(recurringAllowance.spender.balance, 1);
+    }
+
+    function _createRecurringAllowance()
+        internal
+        view
+        returns (SpendPermissions.RecurringAllowance memory recurringAllowance)
+    {
+        recurringAllowance = SpendPermissions.RecurringAllowance({
+            account: address(account),
+            spender: owner,
+            token: ETHER,
+            start: 0,
+            end: type(uint48).max,
+            period: type(uint48).max,
+            allowance: 0
+        });
+    }
+}