IRIS Relay

An operations workspace for InterSystems IRIS 2026.2. Inspect live management data, compare snapshots, review changes, verify the resulting state and leave a useful handover.

What is new in 0.2

• Reviewed TLS policy edits with TLS 1.2/1.3 bounds and peer verification protection.
• Custom role resource permissions, with an affected-holder inventory and validation of referenced resources.
• OAuth resource server status, existing issuer, audiences and required scope, without contacting an identity provider.
• Embedded Python log investigation with fixed runtime, console, System Monitor and alert sources, backward paging, current-page search and rotation/change detection.
• The last 100 accepted session changes and their verification outcomes included in Markdown and JSON handovers.
• Grouped navigation and an optional interactive fictional walkthrough requiring no credentials or IRIS installation.

Core workflow

Sixteen live views, 28 curated GET operations, asynchronous audit summaries and baseline comparison support investigation. Custom application availability, direct user roles, wallet access policies, certificate owners and user-task suspension/resumption use review and readback. Reviews expire, cannot be replayed and reject detected configuration changes. IRIS remains responsible for authorization.

Installation

Requirements: Node.js 22 or newer, Python 3, Docker and the pinned official IRIS Community 2026.2 image. No npm runtime dependencies or paid service are required.

git clone https://github.com/rafaorlando3/iris-relay.git
cd iris-relay
python3 scripts/lab.py
npm start

Open http://127.0.0.1:8787 and use the generated local credentials described in README.md. Both services bind to loopback. The bootstrap creates disposable examples without customer data. Keep the generated credentials file private.
For the fictional walkthrough, serve docs/demo with any static HTTP server. It never connects to IRIS or represents simulated changes as real operations. Evaluate the real integration with the laboratory above.

Validation

42 JavaScript tests and 6 Python tests passed. Live checks exercised and restored eight management workflows using disposable fixtures, including the three new editors. Replay and restricted-account denials were verified. The expanded checks also passed on a fresh ARM64 container. AMD64 is advertised by the image index but has not been executed in this validation.
Run npm test and npm run test:logs. The repository includes reproducible live checks, a reviewer walkthrough, a dated validation record and explicit log coverage.

Scope

This experimental tool does not replace the entire Management Portal. It does not edit secret values, import private keys, create roles, validate a complete OAuth provider flow, terminate processes or provide every subsystem log. Session history is not a durable audit. Contest acceptance and bonus points remain subject to organizer review.