Global flags
These flags are accepted on every subcommand (they are declared global = true on the root parser).
Output and verbosity
| Flag | Effect |
|---|---|
-v, -vv, -vvv | Increase log verbosity. |
-q, --quiet | Suppress non-error output. |
--color <auto|always|never> | Control ANSI color in terminal output. |
--json | Emit a structured JSON document instead of human text. |
--ndjson | Emit newline-delimited JSON (streaming). |
--sarif | Emit SARIF 2.1.0 (GitHub code scanning, etc.). |
--progress <auto|always|never> | Progress-bar rendering. auto renders only on a TTY. |
Execution control
| Flag | Effect |
|---|---|
--seed <N> | RNG seed for any non-deterministic backend (keeps runs reproducible). |
--config <PATH> | Load a .disrobe.toml config file. Without it, disrobe walks up from the CWD to discover one. See project configuration. |
--in-place | Rewrite the input file in place. |
--force | Overwrite existing outputs without prompting. |
-j, --threads <N> | Worker thread-pool size (defaults to detected CPU count). |
--no-cache | Bypass the .dr envelope cache. Output is identical with or without this; it is a performance toggle, not a correctness one. |
--dry-run | Report what would happen without writing any output. |
LLM sidecar flags
The full --llm family is also global. See LLM sidecar and provenance for the complete pack/category model. Summary:
| Flag | Effect |
|---|---|
--llm | Alias for --metadata-pack-4 (full bundle, auth-gated categories included). |
--metadata-pack-1 | Pack-1: ast + disasm + symbols + strings. |
--metadata-pack-2 | Pack-2: pack-1 + cfg + types + imports + provenance. |
--metadata-pack-3 | Pack-3: pack-2 + dfg + signatures + constants + roundtrip + sourcemap + manifest. |
--metadata-pack-4 | Pack-4: pack-3 + confidence + opcode-coverage + pii-map + decryption-keys (auth-gated). |
--ast, --disasm, --cfg, --dfg | Add individual AST / disassembly / CFG / DFG categories. |
--symbols, --strings, --types, --imports | Add symbols / strings / recovered-types / imports categories. |
--constants, --signatures, --provenance | Add constants / function-signatures / provenance categories. |
--roundtrip-verdict, --source-map, --manifest-cat | Add roundtrip-verdict / source-map / manifest categories. |
--confidence, --opcode-coverage, --pii-map | Add confidence-scores / opcode-coverage / pii-map categories. |
--decryption-keys | Add decryption-keys category (requires --i-have-authorization). |
--metadata-include <cats> / --metadata-exclude <cats> | Toggle comma-separated categories after applying a pack preset. |
--metadata-out <PATH> | Override the bundle output path (default: <stem>.disrobe.llm.json next to the primary output). |
--metadata-format <json|jsonl|cbor|msgpack> | Bundle serialization format (default json). |
--llm-briefs | Also emit AGENTS.md and SKILL.md reconstruction briefs next to the bundle. |
--i-have-authorization | Unlocks the auth-gated decryption-keys category and grey-zone protector behavior. |
The authorization gate
--i-have-authorization is the single gate guarding behavior that is legally sensitive: grey-zone commercial-protector reversal and the decryption-keys LLM category. Without it, those paths refuse to run (DR-CLI-0420 for decryption keys). It is your assertion that you are authorized to analyze the input under the statutory framing in LEGAL.md.