CLI reference - kombify

Set up and care for your own services with portable StackKits. These pages list every stackkit command with its flags and examples. They are generated from the StackKits command definitions; if your installed version is older, stackkit <command> --help is authoritative for it.

Install the CLI

curl -sSL https://install.stackkit.cc | STACKKIT_CLI_ONLY=1 sh

With STACKKIT_CLI_ONLY=1 the installer puts stackkit, stackkit-server, stackkit-mcp, packaged OpenTofu and the public kit catalog into ~/.stackkits without installing a StackKit. Without it, the installer detects the host and continues into Basement Kit or Cloud Kit.

Global flags

These flags work with every command.

Flag	Type	Default	Description
`--chdir, -C`	string	`.`	Change to directory before running
`--correlation-id`	string	—	Validated caller correlation ID recorded in local rollout evidence
`--no-log`	bool	—	Disable structured deploy logging
`--progress-jsonl`	string	—	Write redacted machine-readable rollout progress JSONL to a path, or ’-’ for stdout
`--quiet, -q`	bool	—	Suppress non-essential output
`--spec, -s`	string	`stack-spec.yaml`	Path to stack specification file (kombination.yaml is accepted when the default is missing)
`--verbose, -v`	bool	—	Enable verbose output

Set up your services

Command	Description
`stackkit apply`	Apply infrastructure changes
`stackkit generate`	Generate governed deployment artifacts from a stack specification
`stackkit init`	Initialize a new deployment from a StackKit
`stackkit plan`	Preview infrastructure changes
`stackkit prepare`	Prepare a system for StackKit deployment
`stackkit setup`	Set up the owner account of an applied application
`stackkit validate`	Validate configuration files

Check, maintain and recover

Command	Description
`stackkit backup`	Manage backups (Kopia engine)
`stackkit break-glass`	Manage break-glass recovery accounts and bundles
`stackkit drift`	Observe and reconcile local StackKit drift
`stackkit logs`	View structured deploy logs
`stackkit remove`	Uninstall the local StackKits deployment
`stackkit service`	Control services declared by the active StackKits plan
`stackkit status`	Show deployment status
`stackkit upgrade`	Resolve and install a verified StackKit release
`stackkit user`	Invite and manage household users in local PocketID
`stackkit verify`	Run post-deployment verification checks

Advanced tools and reference

Command	Description
`stackkit address`	Plan and bind secret-free public service addresses
`stackkit advanced`	Manage offline-authorized Advanced lifecycle operations
`stackkit agent`	Agent-native helpers for StackKits automation
`stackkit app`	Inspect StackKits application delivery and manage v0.6 handoffs
`stackkit application`	Adopt supported existing applications without replacing their accounts or data
`stackkit capacity`	Assess selected module demand against observed host capacity
`stackkit channel`	Show or set the release channel (stable or early-access)
`stackkit cluster`	Manage StackKits multi-node cluster membership
`stackkit compat`	Show OS support evidence and host conformance diagnostics
`stackkit completion`	Generate shell completion scripts
`stackkit device`	Enroll, list and revoke household devices (CLI token fallback of the State Console ceremony)
`stackkit docs`	Generate deterministic StackKits documentation projections
`stackkit feasibility`	Check whether a proposed placement fits an exact node inventory
`stackkit federation`	Manage local Federation binding evidence
`stackkit fleet`	Admit and join member hosts of one StackInstance
`stackkit game`	Operate the owner’s game servers on the installed Game workload
`stackkit host`	Provider-neutral host contract operations
`stackkit identity`	Manage the standalone local identity plane
`stackkit image`	Prepare and admit an owner-neutral golden image cache
`stackkit kit`	Published StackKit release operations
`stackkit migrate`	Classify a StackSpec v1 and emit its migration report
`stackkit module`	Author and validate local CUE modules
`stackkit network`	Move this server to another network: status, re-bind, WiFi and watcher
`stackkit notify`	Owner notifications declared in the StackSpec
`stackkit operations`	List the canonical standalone lifecycle operation contracts
`stackkit output-transaction`	Inspect explicit Architecture v2 output-transaction lifecycle actions
`stackkit registry`	Manage the embedded StackKits registry snapshot
`stackkit relocate`	Move PaaS workloads to another server: plan, check, drain, send, receive
`stackkit resolve`	Resolve Architecture v2 intent into a canonical deployment plan
`stackkit runtime`	Execute authenticated node-side runtime operations
`stackkit secrets`	Manage owner-bound local secret custody
`stackkit support`	Export redacted local support evidence
`stackkit use-cases`	Select optional kit use cases
`stackkit version`	Print version information
`stackkit wallet-item`	Wallet items delivered to this node’s encrypted local custody

Commands that current releases refuse or replace are listed under legacy and deprecated commands.