CLI Reference

Core commands

• ss server|dev|stop-server
• ss status|start|stop|toggle|test
• ss env list|create|switch|clear
• ss provision [file] [--env] [--service] [--dry-run] [--status]
• ss run|deploy|configure|migrate
• ss import terraform|ansible
• ss export terraform|ansible|cicd
• ss harness ...
• ss graph ...

Provisioning

ss provision is the “just run it” command — it reads starsystem.yaml and brings all services to their desired state without needing an environment overlay or provision.provider on every service.

ss provision                          # reconcile cwd/starsystem.yaml
ss provision my-system.yaml           # explicit file
ss provision --dry-run                # show plan, don't execute
ss provision --service=caddy          # single service only
ss provision --env=prod               # with environment overlay
ss provision --status                 # health check provisioned services

What it handles automatically by service shape:

Service shape	What happens
type: process + command:	Spawns the process detached, stores PID
type: cdn + _cloudflare:	Calls CF API (custom hostnames, DNS, Pages)
provision.provider: neon	Provisions Neon Postgres via API
provision.provider: fly	Deploys to Fly Machines
… any registered provisioner	Same pattern

ss apply is different — it pushes the YAML config to a running server to reload the topology canvas. It does not start processes or call cloud APIs. Use ss provision for that.

See the full guide: ss provision

Harness and graph highlights

• ss harness create <id> --template=<name> creates a full harness package scaffold.
• ss harness list lists local harness packages.
• ss harness topology init|show|set-active manages registry/depot topology policy.
• ss graph init creates a canonical graph file (.starsystem/graph.yaml).
• ss graph plan --blueprint=<file> previews normalized graph topology from a blueprint.
• ss graph node ... / ss graph edge ... performs node/edge CRUD.
• ss graph validate validates graph integrity.
• ss graph lint performs quality lint checks.
• ss graph diff <a> <b> reports topology deltas for review/CI.
• ss graph render --format=d2|dot prints D2 or Graphviz DOT to stdout (optional --out; use --blueprint or --graph as the source).
• ss graph export --format=d2|dot writes D2 or DOT (optional --out; same sources as render).

Starflow CLI (sf / starflow)

From @celestial/starflow-cli (repo packages/starflow-cli): starflow server, run, export, flag …, schema …, etc.

• starflow schema step — print JSON Schema for one pipeline step (includes use_sandbox, sandbox_provider, vpn-connect, vpn_connect_*). Pipe to a file and point VS Code $schema at step-shaped YAML, or use --out=<path>.
• starflow schema config — JSON Schema for the full starflow.yaml root.
• starflow schema help — longer help with YAML quick reference for sandbox/VPN fields.

Related

• Starflow CLI Export