This runbook is for operators who maintain availability, security posture, and incident response.
Last verified: February 18, 2026.
Use this document for day-2 operations:
- starting and supervising runtime
- health checks and diagnostics
- safe rollout and rollback
- incident triage and recovery
For first-time installation, start from one-click-bootstrap.md.
| Mode | Command | When to use |
|---|---|---|
| Foreground runtime | zerobuild daemon |
local debugging, short-lived sessions |
| Foreground gateway only | zerobuild gateway |
webhook endpoint testing |
| User service | zerobuild service install && zerobuild service start |
persistent operator-managed runtime |
- Validate configuration:
zerobuild status- Verify diagnostics:
zerobuild doctor
zerobuild channel doctor- Start runtime:
zerobuild daemon- For persistent user session service:
zerobuild service install
zerobuild service start
zerobuild service status| Signal | Command / File | Expected |
|---|---|---|
| Config validity | zerobuild doctor |
no critical errors |
| Channel connectivity | zerobuild channel doctor |
configured channels healthy |
| Runtime summary | zerobuild status |
expected provider/model/channels |
| Daemon heartbeat/state | ~/.zerobuild/daemon_state.json |
file updates periodically |
~/.zerobuild/logs/daemon.stdout.log~/.zerobuild/logs/daemon.stderr.log
journalctl --user -u zerobuild.service -f- Snapshot system state:
zerobuild status
zerobuild doctor
zerobuild channel doctor- Check service state:
zerobuild service status- If service is unhealthy, restart cleanly:
zerobuild service stop
zerobuild service start-
If channels still fail, verify allowlists and credentials in
~/.zerobuild/config.toml. -
If gateway is involved, verify bind/auth settings (
[gateway]) and local reachability.
Before applying config changes:
- backup
~/.zerobuild/config.toml - apply one logical change at a time
- run
zerobuild doctor - restart daemon/service
- verify with
status+channel doctor
If a rollout regresses behavior:
- restore previous
config.toml - restart runtime (
daemonorservice) - confirm recovery via
doctorand channel health checks - document incident root cause and mitigation