Command Line Interface

Cereja exposes a cereja command when installed from PyPI or from the local project.

cereja --help

The root help is the complete command index. Each command owns its own parser and help:

compress     Compress a file or directory.
decompress   Decompress a file or directory archive.
encrypt      Encrypt a file.
decrypt      Decrypt a file.
protect      Encrypt Python code while preserving imports.
tree         Draw a repository tree.
context      Search or list bounded textual context.
security     Inspect untrusted files without executing them.
http         Send HTTP requests.
download     Download files with streaming transfers.
system       Inspect local system information.
privacy      Run tools with process-scoped privacy policies.
module       Manage Cereja module scaffolding.

Use command-specific help for the complete set of flags:

cereja compress --help
cereja protect --help
cereja context --help
cereja http --help
cereja system --help
cereja privacy --help

The CLI loads only the selected command implementation. Asking for root help or the Cereja version does not initialize unrelated command subsystems.

Repository Tree

Draw a filtered Unicode tree for the current directory or an explicit path:

cereja tree
cereja tree path/to/repository --depth 2

The command includes non-ignored hidden files, shows directories before files, and respects common .gitignore rules, including nested files and negated patterns. .git, Python/tool caches, and compiled Python files are always hidden. Symbolic links are shown but are not traversed.

Compress

Compress a file or directory:

cereja compress path/to/input
cereja compress path/to/input -o output.cjz

If the output name has no suffix, the CLI appends .cjz.

Progress output is enabled by default. Use --quiet when scripts need stable stdout:

cereja compress path/to/input --quiet

Available compression strategies are auto, dict, rle, delta, bitpack, zlib, bz2, lzma, and hybrid.

cereja compress path/to/input --strategy zlib

Use --force to overwrite an existing output file:

cereja compress path/to/input -o output.cjz --force

Encrypted archives

Create an encrypted compressed archive:

cereja compress path/to/input --encrypt

The CLI asks for a password and confirmation without echoing the value.

Decompress

Decompress an archive:

cereja decompress archive.cjz

The CLI detects encrypted archives and prompts for the password when needed.

Use --archive-type to force file or directory decompression:

cereja decompress archive.cjz --archive-type dir

Encrypt and Decrypt Files

Encrypt a file directly:

cereja encrypt report.txt -o report.txt.enc

Decrypt it:

cereja decrypt report.txt.enc -o report.txt

Protect Python Code

Build a protected copy of a standalone Python module or regular package while preserving its normal import name:

cereja protect path/to/mypackage -o build/protected --key-env MYAPP_CODE_KEY
cereja protect path/to/feature.py -o build/protected --key-env MYAPP_CODE_KEY

The runtime key is read from the configured environment variable. If the variable is not set during the build, the CLI prompts for the password and confirmation. The generated artifact never embeds the password.

Python source is encrypted by default. Static .json, .html, .htm, .js, and .css resources are also protected. Add more extensions with repeated --include-extension flags.

cereja protect mypackage -o build/protected \
  --include-extension .yaml \
  --include-extension .svg

See Protected Python Code for runtime behavior, resource access, packaging requirements, and the security boundary.

Context

Search bounded text context:

cereja context search --root . --query "needle"

List text-file metadata without printing file contents:

cereja context list --root .

Inspect or clear the optional per-user cache:

cereja context cache info
cereja context cache clear

Security

Run defensive static analysis without executing the target file:

cereja security analyze suspicious.bin
cereja security analyze suspicious.bin --format json

HTTP and Downloads

Send a one-shot HTTP request:

cereja http https://example.com

Use the dedicated streaming transfer command for downloads:

cereja download https://example.com/archive.zip

See HTTP and Transfers for the full HTTP and download interfaces.

System Information

Inspect the local operating system and hardware:

cereja system info
cereja system info --full
cereja system info --json

Sensitive machine identifiers remain opt-in:

cereja system info --full --sensitive

See System Information for platform behavior and privacy details.

Process Privacy

Run a child command with Hugging Face Hub access and telemetry disabled:

cereja privacy huggingface run -- python app.py

Open an offline child shell:

cereja privacy huggingface shell

Inspect the current environment without printing token values:

cereja privacy huggingface status
cereja privacy huggingface status --json

Temporarily permit one model download while keeping telemetry disabled:

cereja privacy huggingface download -- hf download org/model
cereja privacy huggingface download --no-token -- hf download org/public-model

The privacy command changes only the child-process environment. It does not edit shell profiles, persist credentials, or enforce an operating-system network sandbox.

See Process Privacy for the full policy and security boundary.

Module Scaffolding

Create a Cereja module file relative to the package source:

cereja module create path/to/module.py

The historical form remains available as a compatibility alias:

cereja --startmodule path/to/module.py

New scripts should prefer cereja module create.