@ilalv3/cli 0.2.10 → 0.2.11

package/README.md

@@ -94,7 +94,35 @@ PRIVATE_KEY=0x... ilal credential prove \
   --expires-at 1800000000
 ```
 
-Generates a Groth16 proof locally (~5s), verifies it on-chain, and mints/renews your CNF without revealing identity. If the Merkle root does not match, the issuer/operator must queue the updated root with `ilal oracle propose-root --root <newRoot>` and activate it after the timelock.
+The CLI automatically prepares proving artifacts:
+
+1. Use `--circuit-dir` when a local `circuits/build` directory exists.
+2. Otherwise use the local cache at `~/.ilal/artifacts/ilal-v1`.
+3. If the cache is empty, download hosted artifacts from the ILAL release CDN.
+
+No institution needs to compile Circom in its backend. The flow generates a Groth16 proof locally (~5s), verifies it on-chain, and mints/renews your CNF without revealing identity. If the Merkle root does not match, the issuer/operator must queue the updated root with `ilal oracle propose-root --root <newRoot>` and activate it after the timelock.
+
+Advanced artifact controls:
+
+```bash
+# Use a custom enterprise artifact mirror
+PRIVATE_KEY=0x... ilal credential prove \
+  --wallet 0xYourWallet \
+  --artifact-url https://zk-artifacts.yourdomain.example/ilal-v1
+
+# Pre-seeded/offline mode
+PRIVATE_KEY=0x... ilal credential prove \
+  --wallet 0xYourWallet \
+  --artifact-cache /opt/ilal/artifacts/ilal-v1 \
+  --offline
+```
+
+Equivalent environment variables:
+
+```bash
+ILAL_ARTIFACT_BASE_URL=https://zk-artifacts.yourdomain.example/ilal-v1
+ILAL_ARTIFACT_CACHE=/opt/ilal/artifacts/ilal-v1
+```
 
 ## Command reference
 
@@ -103,7 +131,7 @@ Generates a Groth16 proof locally (~5s), verifies it on-chain, and mints/renews
 | `ilal init` | Create `.ilal.json` with contract addresses |
 | `ilal status` | Dashboard: credential · issuer config · pool policy |
 | `ilal credential zk-root` | Operator helper: compute the ZK Merkle root for a demo wallet/expiry |
-| `ilal credential prove` | Trader flow: local ZK proof → mint or renew CNF |
+| `ilal credential prove` | Trader flow: hosted/cached ZK artifacts → local proof → mint or renew CNF |
 | `ilal credential mint` | Mint CNF via Coinbase EAS attestation |
 | `ilal credential renew` | Renew CNF via EAS attestation |
 | `ilal swap` | Compliant swap via ILALRouter with optional `--min-amount-out` |

package/dist/commands/init.d.ts

@@ -18,5 +18,7 @@ export declare function init(opts: {
     chain: string;
     rpc?: string;
     circuitDir?: string;
+    artifactUrl?: string;
+    artifactCache?: string;
     force: boolean;
 }): Promise<void>;

package/dist/commands/init.js

@@ -51,6 +51,8 @@ export async function init(opts) {
         tickSpacing: opts.tickSpacing ?? preset["tickSpacing"],
         rpc: opts.rpc ?? preset["rpc"],
         ...(opts.circuitDir ? { circuitDir: opts.circuitDir } : {}),
+        ...(opts.artifactUrl ? { artifactUrl: opts.artifactUrl } : {}),
+        ...(opts.artifactCache ? { artifactCache: opts.artifactCache } : {}),
     };
     // Validate addresses
     for (const [key, val] of Object.entries(config)) {
@@ -86,6 +88,10 @@ export async function init(opts) {
         log.kv("tickSpacing", config.tickSpacing);
     if (config.rpc)
         log.kv("rpc", config.rpc);
+    if (config.artifactUrl)
+        log.kv("artifactUrl", config.artifactUrl);
+    if (config.artifactCache)
+        log.kv("artifactCache", config.artifactCache);
     log.line();
     console.log(`  ${fmt.gray("You can now run commands without --issuer and --chain flags:")}`);
     console.log();

package/dist/commands/prove.d.ts

@@ -21,6 +21,9 @@ export declare function credentialProve(opts: {
     chain?: string;
     action?: string;
     circuitDir?: string;
+    artifactUrl?: string;
+    artifactCache?: string;
+    offline?: boolean;
     outDir?: string;
     rpc?: string;
     privateKey?: string;

package/dist/commands/prove.js

@@ -16,8 +16,11 @@
  * `ilal oracle activate-root`.
  */
 import { execSync } from "child_process";
-import { mkdirSync, writeFileSync, readFileSync } from "fs";
+import { createWriteStream, existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from "fs";
+import { homedir } from "os";
 import { resolve, dirname } from "path";
+import { Readable } from "stream";
+import { pipeline } from "stream/promises";
 import { fileURLToPath } from "url";
 import { createPublicClient, createWalletClient, encodeAbiParameters, http, isAddress, keccak256, } from "viem";
 import { privateKeyToAccount } from "viem/accounts";
@@ -32,6 +35,15 @@ import { COINBASE_SCHEMA_UID } from "../constants.js";
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const CHAINS = { "8453": base, "84532": baseSepolia };
 const DEPTH = 20;
+const DEFAULT_ARTIFACT_URL = "https://unpkg.com/@ilalv3/proving-artifacts@0.1.0";
+const DEFAULT_ARTIFACT_CACHE = resolve(homedir(), ".ilal/artifacts/ilal-v1");
+const PROVING_ARTIFACTS = [
+    { asset: "ilal.zkey", rel: "ilal.zkey", minBytes: 50_000_000 },
+    { asset: "ilal_vkey.json", rel: "ilal_vkey.json", minBytes: 1_000 },
+    { asset: "ilal_js/ilal.wasm", rel: "ilal_js/ilal.wasm", minBytes: 1_000_000 },
+    { asset: "ilal_js/generate_witness.js", rel: "ilal_js/generate_witness.js", minBytes: 100 },
+    { asset: "ilal_js/witness_calculator.js", rel: "ilal_js/witness_calculator.js", minBytes: 1_000 },
+];
 // ─── ABI ──────────────────────────────────────────────────────────────────────
 const CNF_ABI = [
     {
@@ -82,26 +94,81 @@ function schemaHash(schemaUID) {
     const schemaHi = BigInt("0x" + schemaHex.slice(0, 32));
     return poseidon2([schemaLo, schemaHi]);
 }
-function findCircuitDir(override) {
-    if (override)
-        return resolve(override);
+function hasCircuitArtifacts(dir) {
+    return PROVING_ARTIFACTS.every((artifact) => {
+        const file = resolve(dir, artifact.rel);
+        try {
+            return existsSync(file) && statSync(file).size >= artifact.minBytes;
+        }
+        catch {
+            return false;
+        }
+    });
+}
+function requireCircuitArtifacts(dir) {
+    const resolved = resolve(dir);
+    const missing = PROVING_ARTIFACTS.filter((artifact) => {
+        const file = resolve(resolved, artifact.rel);
+        try {
+            return !existsSync(file) || statSync(file).size < artifact.minBytes;
+        }
+        catch {
+            return true;
+        }
+    });
+    if (missing.length > 0) {
+        die(`Proving artifacts are incomplete in ${resolved}.\n` +
+            `  Missing: ${missing.map((x) => x.rel).join(", ")}\n` +
+            "  Pass --artifact-url <base-url> to download them, or use --circuit-dir <path>.");
+    }
+    return resolved;
+}
+async function downloadFile(url, target) {
+    const res = await fetch(url);
+    if (!res.ok || !res.body) {
+        throw new Error(`download failed ${res.status} ${res.statusText}: ${url}`);
+    }
+    mkdirSync(dirname(target), { recursive: true });
+    await pipeline(Readable.fromWeb(res.body), createWriteStream(target));
+}
+async function ensureHostedArtifacts(opts) {
+    const cacheDir = resolve(opts.artifactCache ?? DEFAULT_ARTIFACT_CACHE);
+    if (hasCircuitArtifacts(cacheDir))
+        return cacheDir;
+    if (opts.offline) {
+        die("Hosted proving artifacts are not cached locally.\n" +
+            `  Cache: ${cacheDir}\n` +
+            "  Re-run without --offline, or pass --circuit-dir <path>.");
+    }
+    const baseUrl = (opts.artifactUrl ?? DEFAULT_ARTIFACT_URL).replace(/\/+$/, "");
+    for (const artifact of PROVING_ARTIFACTS) {
+        const target = resolve(cacheDir, artifact.rel);
+        if (existsSync(target) && statSync(target).size >= artifact.minBytes)
+            continue;
+        await downloadFile(`${baseUrl}/${artifact.asset}`, target);
+    }
+    return requireCircuitArtifacts(cacheDir);
+}
+async function findCircuitDir(opts) {
+    if (opts.override) {
+        return { dir: requireCircuitArtifacts(opts.override), source: "local" };
+    }
     // Look relative to the CLI package root (cli/ → circuits/build)
     const candidates = [
         resolve(__dirname, "../../../../circuits/build"), // dev: cli/src/commands → circuits/build
         resolve(__dirname, "../../../circuits/build"),
         resolve(process.cwd(), "circuits/build"),
         resolve(process.cwd(), "build"),
+        resolve(opts.artifactCache ?? DEFAULT_ARTIFACT_CACHE),
     ];
     for (const p of candidates) {
-        try {
-            readFileSync(resolve(p, "ilal.zkey"));
-            return p;
+        if (hasCircuitArtifacts(p)) {
+            const source = resolve(p) === resolve(opts.artifactCache ?? DEFAULT_ARTIFACT_CACHE) ? "cache" : "local";
+            return { dir: p, source };
         }
-        catch { /* not found */ }
     }
-    die("Circuit build directory not found.\n" +
-        "  Run: bash circuits/scripts/compile.sh\n" +
-        "  Or pass: --circuit-dir <path/to/circuits/build>");
+    const dir = await ensureHostedArtifacts(opts);
+    return { dir, source: "download" };
 }
 function resolveExpiresAt(expiresAt) {
     if (!expiresAt)
@@ -224,11 +291,29 @@ export async function credentialProve(opts) {
         action = tokenId === 0n ? "mint" : "renew";
         spin.succeed(`Action: ${fmt.cyan(action)}${tokenId > 0n ? fmt.gray(` (token #${tokenId})`) : ""}`);
     }
-    // ── Find circuit build dir ─────────────────────────────────────────────────
-    const circuitDir = findCircuitDir(cfg.circuitDir);
-    const outDir = cfg.outDir
-        ? resolve(cfg.outDir)
-        : resolve(circuitDir, "../../outputs");
+    // ── Prepare hosted/local proving artifacts ────────────────────────────────
+    const artifactSpin = new Spinner("Preparing proving artifacts…").start();
+    let circuitDir;
+    try {
+        const artifacts = await findCircuitDir({
+            override: cfg.circuitDir,
+            artifactUrl: cfg.artifactUrl,
+            artifactCache: cfg.artifactCache,
+            offline: cfg.offline,
+        });
+        circuitDir = artifacts.dir;
+        const sourceLabel = artifacts.source === "download" ? "downloaded to cache" :
+            artifacts.source === "cache" ? "cache" :
+                "local";
+        artifactSpin.succeed(`Proving artifacts ready (${sourceLabel})`);
+    }
+    catch (e) {
+        artifactSpin.fail("Proving artifacts unavailable");
+        die(e instanceof Error ? e.message : String(e));
+    }
+    const outDir = cfg.outDir ? resolve(cfg.outDir) : resolve(process.cwd(), "outputs");
+    log.kv("artifacts", fmt.gray(circuitDir));
+    log.kv("proofOut", fmt.gray(outDir));
     log.line();
     // ── Generate proof ─────────────────────────────────────────────────────────
     const spin = new Spinner("Building Merkle tree & generating ZK proof…").start();

package/dist/config.d.ts

@@ -20,6 +20,8 @@ export interface ILALConfig {
     chain?: string;
     rpc?: string;
     circuitDir?: string;
+    artifactUrl?: string;
+    artifactCache?: string;
     outDir?: string;
 }
 export declare function loadConfig(): ILALConfig;

package/dist/config.js

@@ -52,6 +52,10 @@ export function loadConfig() {
         chain: process.env["ILAL_CHAIN"] ?? fileConfig.chain,
         rpc: process.env["ILAL_RPC"] ?? fileConfig.rpc,
         circuitDir: process.env["ILAL_CIRCUIT_DIR"] ?? fileConfig.circuitDir,
+        artifactUrl: process.env["ILAL_ARTIFACT_BASE_URL"]
+            ?? process.env["ILAL_ARTIFACT_URL"]
+            ?? fileConfig.artifactUrl,
+        artifactCache: process.env["ILAL_ARTIFACT_CACHE"] ?? fileConfig.artifactCache,
         outDir: process.env["ILAL_OUT_DIR"] ?? fileConfig.outDir,
     };
     return _config;

package/dist/index.js

@@ -19,7 +19,7 @@ const program = new Command();
 program
     .name("ilal")
     .description("ILAL Protocol CLI — Uniswap v4 compliance hook toolkit")
-    .version("0.2.10")
+    .version("0.2.11")
     .addHelpText("before", `\n  ${fmt.bold(fmt.cyan("◆"))} ${fmt.bold("ILAL Protocol")}  ${fmt.gray("Uniswap v4 Compliance Hook")}\n`);
 // ─── init ─────────────────────────────────────────────────────────────────────
 program
@@ -38,6 +38,8 @@ program
     .option("-c, --chain <chainId>", "Chain ID (8453=Base, 84532=Base Sepolia)", "84532")
     .option("-r, --rpc <url>", "Custom RPC URL")
     .option("--circuit-dir <path>", "Path to circuits/build directory")
+    .option("--artifact-url <url>", "Hosted proving artifact base URL")
+    .option("--artifact-cache <path>", "Local proving artifact cache directory")
     .option("-f, --force", "Overwrite existing .ilal.json", false)
     .action(async (opts) => {
     await init(opts).catch(err);
@@ -111,7 +113,10 @@ credential
     .option("-w, --wallet <address>", "Wallet address to prove eligibility for")
     .option("-i, --issuer <address>", "CNFIssuer contract address (or set in .ilal.json)")
     .option("-a, --action <action>", "mint or renew (default: auto-detect)")
-    .option("--circuit-dir <path>", "Path to circuits/build directory (auto-detected by default)")
+    .option("--circuit-dir <path>", "Path to circuits/build directory (dev/offline override)")
+    .option("--artifact-url <url>", "Hosted proving artifact base URL (defaults to ILAL release artifacts)")
+    .option("--artifact-cache <path>", "Local proving artifact cache directory (default: ~/.ilal/artifacts/ilal-v1)")
+    .option("--offline", "Do not download proving artifacts; require cache or --circuit-dir", false)
     .option("--out-dir <path>", "Directory to write proof/witness files")
     .option("-c, --chain <chainId>", "Chain ID (8453=Base, 84532=Base Sepolia)", "84532")
     .option("-r, --rpc <url>", "Custom RPC URL")

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ilalv3/cli",
-  "version": "0.2.10",
+  "version": "0.2.11",
   "description": "ILAL Protocol CLI — compliant swaps and credential management for Uniswap v4",
   "type": "module",
   "bin": {