@ilalv3/cli

ILAL Protocol CLI — compliant swaps and credential management for Uniswap v4.

ILAL gates swaps and liquidity operations behind on-chain compliance credentials (CNF tokens). The CLI wraps the full flow: ZK proof generation, credential minting, session signing, and execution through ILALRouter on any EVM chain.

Install

npm install -g @ilalv3/cli

Or run without installing:

npx @ilalv3/cli <command>

Quick start (Base Sepolia demo)

ilal init points at the current seeded Base Sepolia demo stack. The demo issuer uses MockEAS, so reviewers can verify the full path without waiting for a real Coinbase attestation. The seeded reviewer wallet already has CNF + TOKA/TOKB; for your own wallet, deploy a mock stack with ilal deploy --mock.

# 1. Point CLI at the live demo deployment
ilal init

# 2. Check credential + pool status for the seeded reviewer wallet
ilal status --wallet 0xc0807D4778a9E5FE15ad68A8500e64d65BA78D58

# 3. Full readiness verdict
ilal demo check --wallet 0xc0807D4778a9E5FE15ad68A8500e64d65BA78D58

# 4. Execute a compliant swap with the seeded reviewer key
PRIVATE_KEY=0x... ilal swap --amount-in 1 --token-in 0x3d5b92a8Cea5BBe1c6f63b73D69DA6457e6436E2 --min-amount-out 0

For a fully seeded local/testnet demo, deploy mock EAS + demo pool pieces:

PRIVATE_KEY=0x... ilal deploy \
  --chain 84532 \
  --mock \
  --wallet-to-seed 0xYourWallet \
  --broadcast

# Then mint the seeded CNF from the printed AttestationUID:
PRIVATE_KEY=0x... ilal credential mint \
  --issuer <CNFIssuer> \
  --attestation <AttestationUID> \
  --chain 84532

# Or, with the MockEAS owner key, create a fresh test attestation:
PRIVATE_KEY=0x... ilal demo attest --wallet 0xYourWallet
PRIVATE_KEY=0xYourWalletKey ilal credential mint --attestation <uid>

# If the wallet needs more demo tokens:
PRIVATE_KEY=0x... ilal demo faucet --wallet 0xYourWallet

Getting a CNF credential

Path A — Coinbase Verifications (EAS)

1. Complete KYC at https://coinbase.com/onchain-verify
2. Find your attestation UID on the EAS Explorer:
   • Base mainnet: https://base.easscan.org
   • Base Sepolia: https://base-sepolia.easscan.org
   • Filter by Attester: 0x357458739F90461b99789350868CD7CF330Dd7EE
3. Mint your CNF:

   PRIVATE_KEY=0x... ilal credential mint --attestation <uid>

Path B — ZK proof (privacy-preserving)

Operator prepares the active Merkle root. For a fresh demo deployment this root can be passed into the CNFIssuer constructor as INITIAL_MERKLE_ROOT, avoiding a 48-hour wait while still keeping future root updates timelocked.

ilal credential zk-root \
  --wallet 0xYourWallet \
  --expires-at 1800000000

Trader proves against the same expiry:

PRIVATE_KEY=0x... ilal credential prove \
  --wallet 0xYourWallet \
  --expires-at 1800000000

Generates a Groth16 proof locally (~5s), verifies it on-chain, and mints/renews your CNF without revealing identity. If the Merkle root does not match, the issuer/operator must queue the updated root with ilal oracle propose-root --root <newRoot> and activate it after the timelock.

Command reference

Session note: ILAL hookData is a one-time EIP-712 authorization with a deadline and nonce. The expensive compliance step is the CNF issuance or renewal; swaps do not verify a fresh ZK proof. Use ilal session sign to export hookData, and ilal swap --hook-data <hex> to execute with an externally signed authorization.

Configuration

The CLI reads .ilal.json in the current directory. Run ilal init to create it, or pass flags directly:

ilal swap \
  --router    0x88125331f169aF4Dc81ADa6E8A189110566E457a \
  --hook      0x5f1de4376C7a59b5BBC5E5cd766D40995E9e4A80 \
  --issuer    0x33541301e35d33eDf554c4DFba1e04d04FCc52F4 \
  --pool-id   0x8b6d21e53673584f192bdad8b65e2002e9e8eea730c62adad5ac1f4a084164a4 \
  --amount-in 0.001

Base Sepolia demo deployment

Live proof:

• CNF ZK mint tx: 0xb9aa16c9604a575c8b2281cbfe9ba24fedbf205283a7b05638fbc413ed78de41
• Add liquidity tx: 0xc3dba6d488933e1568541ece17ce43307fb173eb747dff303f3631456eccb16a
• Swap tx: 0x360461d2a3c19acdc3ba125e55689679fcf809946d8a5092e833eb9e94b0f52f
• Router bypass fix verified: ComplianceHook.authorizedRouter() returns 0x88125331f169aF4Dc81ADa6E8A189110566E457a

License

MIT