CLI reference - kombify

Set up and care for your own services with portable StackKits. These pages list every stackkit command with its flags and examples. They are generated from the StackKits command definitions; if your installed version is older, stackkit <command> --help is authoritative for it.

Install the CLI

curl -sSL https://install.stackkit.cc | STACKKIT_CLI_ONLY=1 sh

With STACKKIT_CLI_ONLY=1 the installer puts stackkit, stackkit-server, stackkit-mcp, packaged OpenTofu and the public kit catalog into ~/.stackkits without installing a StackKit. Without it, the installer detects the host and continues into Basement Kit or Cloud Kit.

Global flags

These flags work with every command.

Flag	Type	Default	Description
`--chdir, -C`	string	`.`	Change to directory before running
`--correlation-id`	string	—	Validated caller correlation ID recorded in local rollout evidence
`--no-log`	bool	—	Disable structured deploy logging
`--progress-jsonl`	string	—	Write redacted machine-readable rollout progress JSONL to a path, or ’-’ for stdout
`--quiet, -q`	bool	—	Suppress non-essential output
`--spec, -s`	string	`stack-spec.yaml`	Path to stack specification file (kombination.yaml is accepted when the default is missing)
`--verbose, -v`	bool	—	Enable verbose output

Set up your services

Command	Description
`stackkit apply`	Apply infrastructure changes
`stackkit generate`	Generate governed deployment artifacts from a stack specification
`stackkit init`	Initialize a new deployment from a StackKit
`stackkit plan`	Preview infrastructure changes
`stackkit prepare`	Prepare a system for StackKit deployment
`stackkit setup`	Set up the owner account of an applied application
`stackkit validate`	Validate configuration files

Check, maintain and recover

Command	Description
`stackkit backup`	Manage backups (Kopia engine)
`stackkit break-glass`	Manage break-glass recovery accounts and bundles
`stackkit drift`	Observe and reconcile local StackKit drift
`stackkit logs`	View structured deploy logs
`stackkit remove`	Uninstall the local StackKits deployment
`stackkit service`	Control services declared by the active StackKits plan
`stackkit upgrade`	Resolve and install a verified StackKit release
`stackkit user`	Invite and manage household users in local PocketID
`stackkit verify`	Run post-deployment verification checks

Advanced tools and reference

Command	Description
`stackkit address`	Plan and bind secret-free public service addresses
`stackkit advanced`	Manage offline-authorized Advanced lifecycle operations
`stackkit agent`	Agent-native helpers for StackKits automation
`stackkit app`	Inspect StackKits application delivery and manage v0.6 handoffs
`stackkit cluster`	Manage StackKits multi-node cluster membership
`stackkit compat`	Show OS support evidence and host conformance diagnostics
`stackkit completion`	Generate shell completion scripts
`stackkit docs`	Generate deterministic StackKits documentation projections
`stackkit federation`	Manage local Federation binding evidence
`stackkit host`	Provider-neutral host contract operations
`stackkit identity`	Manage the standalone local identity plane
`stackkit kit`	Published StackKit release operations
`stackkit migrate`	Classify a StackSpec v1 and emit its migration report
`stackkit module`	Author and validate local CUE modules
`stackkit operations`	List the canonical standalone lifecycle operation contracts
`stackkit output-transaction`	Inspect explicit Architecture v2 output-transaction lifecycle actions
`stackkit registry`	Manage the embedded StackKits registry snapshot
`stackkit resolve`	Resolve Architecture v2 intent into a canonical deployment plan
`stackkit runtime`	Execute authenticated node-side runtime operations
`stackkit secrets`	Manage owner-bound local secret custody
`stackkit support`	Export redacted local support evidence
`stackkit use-cases`	Select optional kit use cases
`stackkit version`	Print version information

Commands that current releases refuse or replace are listed under legacy and deprecated commands.