✨ IRIS Command Center

Observe. Investigate. Act—safely.

A modern operational console for InterSystems IRIS that brings monitoring, administration, investigation, security visibility, issue resolution, and operational tracing into one place.
It combines live IRIS system information with controlled administrative workflows, native audit investigation, structured execution traces, security visibility, and a deterministic AI Assistant.

---

🏗️ Architecture

---

🧭 Features at a Glance

Area	What you can do
📊 Dashboard	View live system state, databases, processes, web apps, tasks, resources, alerts, and recent activity
🗂️ Namespaces	Explore namespaces, relationships, and create namespaces safely
💾 Databases	Inspect databases, storage, integrity, and perform controlled create, mount, and dismount workflows
⚙️ Processes	Search, filter, and investigate live IRIS processes
🌐 Web Applications	Inspect configuration, REST applications, sessions, enable/disable apps, and update descriptions
🔍 REST API Explorer	Explore generated REST API definitions, endpoints, methods, parameters, and implementation details
⏱️ Tasks	Inspect task state, schedules, settings, execution information, and supported Run Now workflows
🔐 Security	Explore users, roles, resources, authentication posture, wallets, X.509, and OAuth2
🔌 Extensions & Integrations	Inspect external language servers, filesystem access purposes, and wallet integration metadata
🔎 Investigation	Search the native IRIS security audit trail and relate activity to Command Center traces
👁️ Observability	Inspect structured execution traces and optionally persist them inside IRIS
🩺 Issue Resolver	Detect supported issues, understand why a fix is recommended, apply the safe workflow, and verify the result
🤖 AI Assistant	Ask natural-language questions backed by live Command Center APIs
🔍 Vector Search	Search an IRIS-persisted operational knowledge corpus using IRIS Vector Search
🐍 Embedded Python	Inspect live diagnostics from IRIS Embedded Python
🎬 Demo Activity	Demonstrate controlled operations, issue resolution, verification, restoration, and execution tracing

---

📦 Installation

Prerequisites

• Docker Desktop / Docker Engine
• Docker Compose
• Git

Docker

1. Clone

git clone https://github.com/mwaseem75/iris-command-center.git
cd iris-command-center

2. Configure environment

Copy the example file:

cp .env.example .env

On Windows PowerShell:

Copy-Item .env.example .env

Edit .env with the credentials for the IRIS environment used by the Docker stack.

Do not commit .env. It is intentionally excluded from the Docker build context.

3. Builds & starts

docker compose up -d --build

Check the services:

docker compose ps

4. Open Command Center

http://localhost:52773/iris-command-center/index.html

Installation with ZPM

zpm "install iris-command-center"

Endpoints

URL	Purpose
http://localhost:52773/iris-command-center/index.html	Command Center
http://localhost:8000/docs	FastAPI OpenAPI documentation
http://localhost:52773/csp/sys/UtilHome.csp	IRIS Management Portal

---

🎯 Getting Started

IRIS Command Center is designed around practical operational scenarios rather than isolated screens.

Core Features

📊 Dashboard & Explorers

The dashboard provides a live operational snapshot.

🛠️ IRIS System Administration (Operations)

Monitor an IRIS instance, explore its configuration, and perform supported administrative tasks from one operational console.

🚨 Investigation

Start with an observed issue, inspect system state and configuration, investigate native IRIS audit activity, and follow related Command Center execution traces.
The interface uses the real IRIS audit records and provides a focused detail workspace for individual events.

🌐 Web Application

Inspect web application configuration, authentication, CORS, JWT, sessions, cookies, REST endpoints, and related application state. Explore generated REST API definitions when developing, integrating with, documenting, or troubleshooting an IRIS REST application.

🔐 Security Review

Review users, roles, resources, authentication posture, wallet metadata, X.509 metadata, and OAuth2 configuration while keeping secrets out of the browser.
Security is organized into focused areas rather than exposing sensitive configuration indiscriminately.

Area	Visibility
Identity & Access	Users, roles, resources, access relationships
Authentication	Services, web authentication, superservers, class access
Wallet	Collections, resources, secret names and types
X.509	Credential and certificate metadata without private keys
OAuth2	Server/client configuration metadata without secrets or tokens

Sensitive information is protected. The application deliberately withholds or filters values such as: - Passwords - JWTs - Authorization headers - Private keys - Wallet secret values - OAuth secrets/tokens - Session identifiers - Sensitive personal fields

🩺 Database Troubleshooting & Recovery

Detect supported database-state issues, understand the evidence behind the recommended fix, execute the existing safe operation, and verify that the issue is resolved.

🤖 AI-Assisted

Ask natural-language questions about live IRIS data while keeping the assistant inside the same controlled application API boundary.
The current AI Assistant intentionally uses a deterministic intent classifier, not an external LLM.
It provides a natural-language interface while keeping the operational path inside the existing application architecture.

👁️ Observability

Every controlled administrative operation can produce a structured execution trace.
A trace records safe operational information such as:

• Operation name and ID
• Timestamp
• Duration
• Status
• Authorization events
• Confirmation events
• Execution events
• Verification events
• Safe operation attributes

---

Advanced Capabilities

🩺 Deterministic Issue Resolver

The Fix Issues workflow provides a controlled operational path:

---

💾 Persisting traces in IRIS

Command Center can persist its execution traces inside the connected InterSystems IRIS instance.
This makes observability more than a browser-only feature.

---

🔍 IRIS Vector Search

Command Center demonstrates InterSystems IRIS Vector Search as an operational knowledge capability.

---

🎯 Demo Activity

Command Center includes a controlled Demo Activity workflow for demonstrating the safety model without leaving arbitrary configuration behind.

---

🧪 Testing & Verification

The project uses automated tests plus live IRIS verification.

⚙️ Configuration

The Docker deployment supports these environment variables:

Variable	Purpose
IRIS_BASE_URL	IRIS web/API base URL
IRIS_USERNAME	IRIS service account username
IRIS_PASSWORD	IRIS service account password
IRIS_NAMESPACE	IRIS namespace used for native operations
IRIS_SUPERSERVER_PORT	IRIS Native API / Superserver port
PERSIST_TRACES_TO_IRIS	Persist execution traces inside IRIS
ENABLE_KNOWLEDGE_SEARCH	Enable IRIS Vector Search knowledge
AUTO_RUN_DEMO_ACTIVITY	Enable the optional startup demo rehearsal

---