global flags

Global flags

These flags are accepted on every subcommand (they are declared global = true on the root parser).

Output and verbosity

Flag	Effect
-v, -vv, -vvv	Increase log verbosity.
-q, --quiet	Suppress non-error output.
--color <auto|always|never>	Control ANSI color in terminal output.
--json	Emit a structured JSON document instead of human text.
--ndjson	Emit newline-delimited JSON (streaming).
--sarif	Emit SARIF 2.1.0 (GitHub code scanning, etc.).
--progress <auto|always|never>	Progress-bar rendering. auto renders only on a TTY.

Execution control

Flag	Effect
--seed <N>	RNG seed for any non-deterministic backend (keeps runs reproducible).
--config <PATH>	Load a .disrobe.toml config file. Without it, disrobe walks up from the CWD to discover one. See project configuration.
--in-place	Rewrite the input file in place.
--force	Overwrite existing outputs without prompting.
-j, --threads <N>	Worker thread-pool size (defaults to detected CPU count).
--no-cache	Bypass the .dr envelope cache. Output is identical with or without this; it is a performance toggle, not a correctness one.
--dry-run	Report what would happen without writing any output.

LLM sidecar flags

The full --llm family is also global. See LLM sidecar and provenance for the complete pack/category model. Summary:

Flag	Effect
--llm	Alias for --metadata-pack-4 (full bundle, auth-gated categories included).
--metadata-pack-1	Pack-1: ast + disasm + symbols + strings.
--metadata-pack-2	Pack-2: pack-1 + cfg + types + imports + provenance.
--metadata-pack-3	Pack-3: pack-2 + dfg + signatures + constants + roundtrip + sourcemap + manifest.
--metadata-pack-4	Pack-4: pack-3 + confidence + opcode-coverage + pii-map + decryption-keys (auth-gated).
--ast, --disasm, --cfg, --dfg	Add individual AST / disassembly / CFG / DFG categories.
--symbols, --strings, --types, --imports	Add symbols / strings / recovered-types / imports categories.
--constants, --signatures, --provenance	Add constants / function-signatures / provenance categories.
--roundtrip-verdict, --source-map, --manifest-cat	Add roundtrip-verdict / source-map / manifest categories.
--confidence, --opcode-coverage, --pii-map	Add confidence-scores / opcode-coverage / pii-map categories.
--decryption-keys	Add decryption-keys category (requires --i-have-authorization).
--metadata-include <cats> / --metadata-exclude <cats>	Toggle comma-separated categories after applying a pack preset.
--metadata-out <PATH>	Override the bundle output path (default: <stem>.disrobe.llm.json next to the primary output).
--metadata-format <json|jsonl|cbor|msgpack>	Bundle serialization format (default json).
--llm-briefs	Also emit AGENTS.md and SKILL.md reconstruction briefs next to the bundle.
--i-have-authorization	Unlocks the auth-gated decryption-keys category and grey-zone protector behavior.

The authorization gate

--i-have-authorization is the single gate guarding behavior that is legally sensitive: grey-zone commercial-protector reversal and the decryption-keys LLM category. Without it, those paths refuse to run (DR-CLI-0420 for decryption keys). It is your assertion that you are authorized to analyze the input under the statutory framing in LEGAL.md.