Skip to content

chore(boost): RHDHPLAN-1505 feasibility analysis wrt current upstream capabilities#3703

Open
gabemontero wants to merge 1 commit into
redhat-developer:mainfrom
gabemontero:boost-jira-feasibility
Open

chore(boost): RHDHPLAN-1505 feasibility analysis wrt current upstream capabilities#3703
gabemontero wants to merge 1 commit into
redhat-developer:mainfrom
gabemontero:boost-jira-feasibility

Conversation

@gabemontero

Copy link
Copy Markdown
Contributor

Hey, I just made a Pull Request!

analysis feedback for PM on what we can achieve with the current upstream capabilities for RHDHPLAN-1505's child features

✔️ Checklist

  • [n/a] A changeset describing the change and affected packages. (more info)
  • [n/a] Added or Updated documentation
  • [n/a] Tests for new functionality and regression tests for bug fixes
  • [n/a] Screenshots attached (for UI changes)

… capabilities

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Signed-off-by: gabemontero <gmontero@redhat.com>
@gabemontero gabemontero requested a review from rohitkrai03 July 7, 2026 18:42
@gabemontero gabemontero requested review from a team, durandom and mareklibra as code owners July 7, 2026 18:42
@fullsend-ai-review

fullsend-ai-review Bot commented Jul 7, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 6:43 PM UTC · Completed 6:58 PM UTC
Commit: 26407b3 · View workflow run →

@sonarqubecloud

sonarqubecloud Bot commented Jul 7, 2026

Copy link
Copy Markdown

@codecov

codecov Bot commented Jul 7, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 54.55%. Comparing base (26407b3) to head (b192034).
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #3703   +/-   ##
=======================================
  Coverage   54.55%   54.55%           
=======================================
  Files        2349     2349           
  Lines       89735    89735           
  Branches    25135    25135           
=======================================
  Hits        48953    48953           
  Misses      40482    40482           
  Partials      300      300           
Flag Coverage Δ *Carryforward flag
adoption-insights 83.70% <ø> (ø) Carriedforward from 26407b3
ai-integrations 68.35% <ø> (ø) Carriedforward from 26407b3
app-defaults 69.79% <ø> (ø) Carriedforward from 26407b3
augment 46.39% <ø> (ø) Carriedforward from 26407b3
boost 74.68% <ø> (ø)
bulk-import 72.46% <ø> (ø) Carriedforward from 26407b3
cost-management 14.10% <ø> (ø) Carriedforward from 26407b3
dcm 61.81% <ø> (ø) Carriedforward from 26407b3
extensions 61.53% <ø> (ø) Carriedforward from 26407b3
global-floating-action-button 71.18% <ø> (ø) Carriedforward from 26407b3
global-header 59.71% <ø> (ø) Carriedforward from 26407b3
homepage 50.23% <ø> (ø) Carriedforward from 26407b3
install-dynamic-plugins 56.77% <ø> (ø) Carriedforward from 26407b3
konflux 91.49% <ø> (ø) Carriedforward from 26407b3
lightspeed 68.81% <ø> (ø) Carriedforward from 26407b3
mcp-integrations 85.46% <ø> (ø) Carriedforward from 26407b3
orchestrator 42.97% <ø> (ø) Carriedforward from 26407b3
quickstart 65.63% <ø> (ø) Carriedforward from 26407b3
sandbox 79.56% <ø> (ø) Carriedforward from 26407b3
scorecard 82.67% <ø> (ø) Carriedforward from 26407b3
theme 61.26% <ø> (ø) Carriedforward from 26407b3
translations 7.25% <ø> (ø) Carriedforward from 26407b3
x2a 78.68% <ø> (ø) Carriedforward from 26407b3

*This pull request uses carry forward flags. Click here to find out more.


Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 26407b3...b192034. Read the comment docs.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@fullsend-ai-review

Copy link
Copy Markdown

Review — RHDHPLAN-1505 feasibility analysis

Verdict: Approve

This PR adds four well-structured feasibility reports assessing 22 JIRA epics across four features (RHDHPLAN-1507, 1508, 1510, 1513) against the Backstage catalog and permission frameworks. The reports are documentation-only — no code, config, or workflow changes.

What was reviewed

Dimension Result
Correctness (technical accuracy of framework claims) ✅ Verified — major Backstage API claims (applyMutation delta types, EntityProvider interface, PermissionPolicy.handle() async vs apply() sync, IncrementalEntityProvider shape, RuntimeConfigResolver TTL, catalogProcessingExtensionPoint) are accurate against the codebase
Security ✅ Clean — no embedded secrets, no injection patterns, no Unicode steganography, no bidirectional text overrides
Intent & coherence ✅ Appropriate — chore scope for internal planning docs, RHDHPLAN-1505 JIRA reference provides authorization, new JIRA-analysis/ subdirectory is a reasonable addition alongside existing prd/
Cross-reference consistency ✅ Verified — epic counts (7+7+4+4=22), deviation counts (0+3+0+0=3, all in RHDHPLAN-1508), and inter-report references are internally consistent

Minor observations (non-blocking)

  1. Terminology precision (RHDHPLAN-1508-feasibility-report.md): The framework capabilities table describes permission rules as apply(entity, params) → boolean. The actual Backstage signature is apply(resource, params) → booleanresource is a generic type that happens to be an entity in the catalog context but could be other resource types in other plugins. Minor imprecision that doesn't affect the feasibility conclusions.

  2. Terminology mismatch (RHDHPLAN-1508-feasibility-report.md): References "16 lifecycle permissions" but the boost codebase (boost-common/src/permissions.ts) calls these "16 entity permissions" (10 agent + 5 tool + 1 kagenti-infra). Using the codebase term would be clearer for implementers.

  3. Workspace attribution (RHDHPLAN-1513-feasibility-report.md): States "Boost's admin panel already has model connection, system prompt, agent config, and skills marketplace sections" — the admin panel components are in the augment workspace (workspaces/augment/plugins/augment/src/components/AdminPanels/), not boost. The report uses "boost" as a product name, which could confuse implementers looking for the code.

These are all minor terminology/precision items in planning documents and do not affect the technical soundness of the feasibility assessments.


Labels: PR adds feasibility specification documents in the boost workspace

| `ALLOW` / `DENY` definitive decisions | **Available** |
| `CONDITIONAL` decisions (delegated to plugin backend) | **Available** — requires `resourceType` |
| `isResourcePermission()` type narrowing | **Available** |
| Custom rules via `apply(entity, params)` → boolean | **Available** — synchronous, single entity, no external calls |

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[low] technical-accuracy

Permission rule signature described as apply(entity, params) → boolean but the actual Backstage type is apply(resource, params) → boolean where resource is a generic type (entity in catalog context, but could be other resource types). Minor imprecision.

Suggested fix: Change apply(entity, params) to apply(resource, params) in the framework capabilities table.


| Criterion | Feasible without upstream changes? | Assessment |
| ---------------------------------------------------------------------------------------------------------------- | ---------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------- |
| `ai-catalog.asset.read` defined via `createPermission` and registered via `permissionsRegistry.addPermissions()` | **YES** | Standard permission registration — boost already does this for its 16 lifecycle permissions |

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[low] terminology-consistency

References '16 lifecycle permissions' but the codebase (boost-common/src/permissions.ts) calls these '16 entity permissions' (10 agent + 5 tool + 1 kagenti-infra). Terminology mismatch could confuse implementers.

Suggested fix: Use '16 entity permissions' to match the codebase naming convention.

@fullsend-ai-review fullsend-ai-review Bot added ready-for-merge All reviewers approved — ready to merge documentation Improvements or additions to documentation workspace/boost Boost workspace (Backstage AI plugin) labels Jul 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation ready-for-merge All reviewers approved — ready to merge workspace/boost Boost workspace (Backstage AI plugin)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant