MC-4248 — Harden Iris gateway as durable supervised service

Description

MC-4248

Follow-up from MC-4228. Iris capability/persona/proactive cron policy is fixed, but the live Iris Telegram gateway is currently running manually/tmux-style with HERMES_HOME=/home/lucienne/.hermes/profiles/iris. Fix the remaining durability issue: install or create a proper profile-specific supervised gateway service for Iris with independent restart policy, correct HERMES_HOME, logs, Telegram reconnect, and no dependency on Mac Lucienne or tmux/mc-root lifetime. Verify default gateway remains separate and Iris MCP servers remain local Luci stdio processes. Do not break Iris's approved proactive PA cron posture or no-auto-send safety boundary. Evidence required: service file/status, process env, restart test, Telegram connected, Iris prompt check, and MC-4228 linkage.

Activity

done

Luci is working...

Details — Done · High · Lucienne ▼

State

Done

Closed

State

Priority

People

Owner (assigned to)

Controller

Timing / Details

Due Date

Snooze

Source api (human)

Project Mission Control

Created 18d ago

Updated 18d ago

Advanced / Operator evidence

Routing owner

Routes via

Operator console

Evidence

Ticket is done; runtime is closed. ticket_marked_done profile claude_opus_1m_medium · cwd /home/lucienne/workspace/mission-control · uptime 17d 20h · last activity 17d 18h ago MC is visibility-only. Hermes Luci launches and gates work outside MC, then mirrors evidence/status here. Raw console: luci · claude/anthropic/opus[1m]

Workflow

Start Dev Review + QA ▾

Select phases to include:

Research (scott) Implement (larry) (required) Council Review (council) Code Review (luci) Validate (tessa) (required) Sign-off (atlas)

Agents

Review Gates

Decision

WAT routing: choose an agent, review gate, or decision. Buttons use the live runtime when one is attached.

lucienne 18d ago

Implemented Iris gateway durability hardening on Luci. Created/enabled user systemd service /home/lucienne/.config/systemd/user/hermes-gateway-iris.service with HERMES_HOME=/home/lucienne/.hermes/profiles/iris, ExecStart=/home/lucienne/.hermes/hermes-agent/venv/bin/python -m hermes_cli.main --profile iris gateway run --replace, Restart=always, TimeoutStopSec=210. Service is active/running with linger enabled; Iris PID after restart test: 3872332. Default gateway remained separate and unchanged at PID 3206750. Manual/tmux Iris gateway wrapper is gone; current Iris gateway is under cgroup hermes-gateway-iris.service. MCP servers are local Luci child processes: iris_tools_mcp.py serve and mc_coordination_mcp.py. Restart test passed: Iris PID changed, default PID stayed same, Telegram reconnected, profile logs show Active profile: iris and Connected to Telegram. Prompt check passed: Iris confirms proactive PA cron allowed while external email/WhatsApp/messages require fresh explicit approval via approved send path.

Luci 18d ago

Iris gateway now durable user-systemd service (hermes-gateway-iris.service, Restart=always, HERMES_HOME=/home/lucienne/.hermes/profiles/iris); default gateway separate, MCPs local stdio, restart+Telegram+prompt checks pass.

luci 18d ago

Workflow action `review_ready` applied. Work ready for review.

api 18d ago

Closed (orchestrator). Verified live: hermes-gateway-iris.service enabled + active under user systemd. Restart=always, HERMES_HOME=/home/lucienne/.hermes/profiles/iris, separate from default gateway. Restart test confirmed independent PID rotation, Telegram reconnect, profile prompt check passes. Manual tmux wrapper removed; Iris MCPs (iris_tools_mcp + mc_coordination_mcp) remain local Luci stdio children. Closes the durability gap from MC-4228. UA sign-off (runbooks/ua-signoff-gate.md): n/a — infra/service control. Verdict: PASS