Audit
Use to review an existing Stackpit deployment against best practice and surface what to harden. Checks the live config against Stackpit's own startup validation rules and the operator-guide security checklist (no-auth posture, admin-token strength, secure cookies, master-key separation, OIDC audience/TTL binding, trusted proxies, admin-port exposure, filter mode, retention), and produces a ranked…
Provision Environment
Use before running any build, test, lint, or format command to establish a working toolchain or runtime. Follows the user's declared environment presets, probes what is already available, provisions only in ways that do not modify the host machine (an ephemeral nix/guix shell or a throwaway container), and otherwise asks the user instead of guessing or installing.
Reconfigure
Use to change an existing Stackpit deployment toward a specific goal: enable OIDC/OAuth SSO (Ory Hydra, Keycloak, Authentik, Auth0), map organizations and roles from IdP claims, gate the MCP endpoint, enable or switch email, set up Slack/webhook alert integrations, tighten the event filter mode, migrate from SQLite to Postgres, or import from Sentry. Locates the live config, reads the relevant op…
Setup
Use to set up a new Stackpit deployment (the self-hosted, single-binary drop-in for Sentry event ingestion), with or without Docker and on SQLite or Postgres. Runs the init template, sets the load-bearing config (bind addresses, external URLs, admin token, master key, filter mode), points SDKs at the ingest listener, and verifies the instance boots and accepts events. Triggers: installing Stackpi…