portal: strict ESLint (typescript-eslint, a11y, import order)

- root .eslintrc with recommended TS rules; eslint --fix import order project-wide
- Replace any/unknown in lib clients (ArgoCD, K8s, Phoenix), hooks, and key components
- Form labels: htmlFor+id; escape apostrophes; remove or gate console (error boundary keep)
- Crossplane VM status typing; webhook test result interface; infrastructure/resources maps typed

Made-with: Cursor

portal/.eslintrc.json

@@ -1,11 +1,35 @@
 {
-  "extends": "next/core-web-vitals",
+  "root": true,
+  "extends": ["next/core-web-vitals", "plugin:@typescript-eslint/recommended"],
+  "parser": "@typescript-eslint/parser",
+  "parserOptions": {
+    "ecmaVersion": 2022,
+    "sourceType": "module",
+    "ecmaFeatures": { "jsx": true }
+  },
+  "plugins": ["@typescript-eslint"],
   "rules": {
-    "@typescript-eslint/no-explicit-any": "warn",
+    "@typescript-eslint/no-explicit-any": "error",
-    "no-console": "warn",
+    "@typescript-eslint/no-unused-vars": [
+      "warn",
+      { "argsIgnorePattern": "^_", "varsIgnorePattern": "^_" }
+    ],
     "@typescript-eslint/no-empty-object-type": "off",
-    "jsx-a11y/label-has-associated-control": "warn",
+    "@typescript-eslint/no-require-imports": "off",
-    "react/no-unescaped-entities": "warn",
+    "no-console": "error",
-    "import/order": "warn"
+    "jsx-a11y/label-has-associated-control": "error",
+    "react/no-unescaped-entities": "error",
+    "import/order": [
+      "error",
+      {
+        "groups": ["builtin", "external", "internal", "parent", "sibling", "index"],
+        "newlines-between": "always",
+        "alphabetize": { "order": "asc", "caseInsensitive": true },
+        "pathGroups": [
+          { "pattern": "@/**", "group": "internal", "position": "after" }
+        ],
+        "pathGroupsExcludedImportTypes": ["builtin"]
+      }
+    ]
   }
 }

portal/src/app/admin/page.tsx

@@ -1,10 +1,11 @@
 'use client';
 
-import { useSession } from 'next-auth/react';
-import { signIn } from 'next-auth/react';
-import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 import { Building2, Users, CreditCard, Shield, ArrowRight } from 'lucide-react';
 import Link from 'next/link';
+import { useSession } from 'next-auth/react';
+import { signIn } from 'next-auth/react';
+
+import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 
 export default function AdminPortalPage() {
   const { data: session, status } = useSession();

portal/src/app/analytics/page.tsx

@@ -2,6 +2,7 @@
 
 import { useSession } from 'next-auth/react';
 import { signIn } from 'next-auth/react';
+
 import { AdvancedAnalytics } from '@/components/analytics/AdvancedAnalytics';
 
 export default function AnalyticsPage() {

portal/src/app/api/auth/[...nextauth]/route.ts

@@ -1,4 +1,5 @@
 import NextAuth from 'next-auth';
+
 import { authOptions } from '@/lib/auth';
 
 const handler = NextAuth(authOptions);

portal/src/app/api/auth/error/page.tsx

@@ -1,7 +1,7 @@
 'use client';
 
-import { useSearchParams } from 'next/navigation';
 import Link from 'next/link';
+import { useSearchParams } from 'next/navigation';
 import { Suspense } from 'react';
 
 function AuthErrorContent() {

portal/src/app/argocd/page.tsx

@@ -1,7 +1,8 @@
 'use client'
 
-import { useSession } from 'next-auth/react'
 import { redirect } from 'next/navigation'
+import { useSession } from 'next-auth/react'
+
 import ArgoCDApplications from '@/components/argocd/ArgoCDApplications'
 
 export default function ArgoCDPage() {

portal/src/app/crossplane/page.tsx

@@ -1,7 +1,8 @@
 'use client'
 
-import { useSession } from 'next-auth/react'
 import { redirect } from 'next/navigation'
+import { useSession } from 'next-auth/react'
+
 import CrossplaneResourceBrowser from '@/components/crossplane/CrossplaneResourceBrowser'
 
 export default function CrossplanePage() {

portal/src/app/dashboard/business/page.tsx

@@ -2,13 +2,14 @@
 
 import { useSession } from 'next-auth/react';
 import { signIn } from 'next-auth/react';
-import { CostOverviewTile } from '@/components/dashboard/CostOverviewTile';
+
-import { CostForecastingTile } from '@/components/dashboard/CostForecastingTile';
-import { ResourceUsageTile } from '@/components/dashboard/ResourceUsageTile';
 import { BillingTile } from '@/components/dashboard/BillingTile';
-import { ServiceAdoptionTile } from '@/components/dashboard/ServiceAdoptionTile';
 import { ComplianceStatusTile } from '@/components/dashboard/ComplianceStatusTile';
+import { CostForecastingTile } from '@/components/dashboard/CostForecastingTile';
+import { CostOverviewTile } from '@/components/dashboard/CostOverviewTile';
 import { QuickActionsPanel } from '@/components/dashboard/QuickActionsPanel';
+import { ResourceUsageTile } from '@/components/dashboard/ResourceUsageTile';
+import { ServiceAdoptionTile } from '@/components/dashboard/ServiceAdoptionTile';
 
 export default function BusinessDashboardPage() {
   const { status } = useSession();

portal/src/app/dashboard/developer/page.tsx

@@ -2,11 +2,12 @@
 
 import { useSession } from 'next-auth/react';
 import { signIn } from 'next-auth/react';
+
+import { APIKeysTile } from '@/components/dashboard/APIKeysTile';
 import { APIUsageTile } from '@/components/dashboard/APIUsageTile';
 import { DeploymentsTile } from '@/components/dashboard/DeploymentsTile';
-import { TestEnvironmentsTile } from '@/components/dashboard/TestEnvironmentsTile';
-import { APIKeysTile } from '@/components/dashboard/APIKeysTile';
 import { QuickActionsPanel } from '@/components/dashboard/QuickActionsPanel';
+import { TestEnvironmentsTile } from '@/components/dashboard/TestEnvironmentsTile';
 
 export default function DeveloperDashboardPage() {
   const { status } = useSession();

portal/src/app/dashboard/page.tsx

@@ -1,9 +1,10 @@
 'use client';
 
+import { useRouter } from 'next/navigation';
 import { useSession } from 'next-auth/react';
 import { signIn } from 'next-auth/react';
-import { useRouter } from 'next/navigation';
 import { useEffect } from 'react';
+
 import { getDashboardRoute } from '@/lib/roles';
 
 export default function DashboardPage() {

portal/src/app/dashboard/technical/page.tsx

@@ -2,12 +2,13 @@
 
 import { useSession } from 'next-auth/react';
 import { signIn } from 'next-auth/react';
-import { SystemHealthTile } from '@/components/dashboard/SystemHealthTile';
+
-import { IntegrationStatusTile } from '@/components/dashboard/IntegrationStatusTile';
-import { DataPipelineTile } from '@/components/dashboard/DataPipelineTile';
-import { ResourceUtilizationTile } from '@/components/dashboard/ResourceUtilizationTile';
 import { OptimizationEngine } from '@/components/ai/OptimizationEngine';
+import { DataPipelineTile } from '@/components/dashboard/DataPipelineTile';
+import { IntegrationStatusTile } from '@/components/dashboard/IntegrationStatusTile';
 import { QuickActionsPanel } from '@/components/dashboard/QuickActionsPanel';
+import { ResourceUtilizationTile } from '@/components/dashboard/ResourceUtilizationTile';
+import { SystemHealthTile } from '@/components/dashboard/SystemHealthTile';
 
 export default function TechnicalDashboardPage() {
   const { status } = useSession();

portal/src/app/developer/page.tsx

@@ -1,10 +1,11 @@
 'use client';
 
-import { useSession } from 'next-auth/react';
-import { signIn } from 'next-auth/react';
-import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 import { Key, Book, TestTube, BarChart3, Webhook, Download, ArrowRight } from 'lucide-react';
 import Link from 'next/link';
+import { useSession } from 'next-auth/react';
+import { signIn } from 'next-auth/react';
+
+import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 
 export default function DeveloperPortalPage() {
   const { status } = useSession();

portal/src/app/developer/webhooks/test/page.tsx

@@ -1,15 +1,26 @@
 'use client';
 
-import { useState } from 'react';
-import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 import { Send, CheckCircle, XCircle } from 'lucide-react';
+import { useState } from 'react';
+
+import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
+
+interface WebhookTestResult {
+  success: boolean;
+  status?: number;
+  statusText?: string;
+  responseTime?: number;
+  response?: unknown;
+  error?: string;
+  timestamp: string;
+}
 
 export default function WebhookTestingPage() {
   const [url, setUrl] = useState('');
   const [method, setMethod] = useState('POST');
   const [headers, setHeaders] = useState('{"Content-Type": "application/json"}');
   const [payload, setPayload] = useState('{"event": "test", "data": {}}');
-  const [testResult, setTestResult] = useState<any>(null);
+  const [testResult, setTestResult] = useState<WebhookTestResult | null>(null);
   const [isTesting, setIsTesting] = useState(false);
 
   const testWebhook = async () => {
@@ -39,10 +50,10 @@ export default function WebhookTestingPage() {
         response: data,
         timestamp: new Date().toISOString(),
       });
-    } catch (error: any) {
+    } catch (error: unknown) {
       setTestResult({
         success: false,
-        error: error.message,
+        error: error instanceof Error ? error.message : 'Request failed',
         timestamp: new Date().toISOString(),
       });
     } finally {
@@ -64,8 +75,11 @@ export default function WebhookTestingPage() {
           </CardHeader>
           <CardContent className="space-y-4">
             <div>
-              <label className="block text-sm text-gray-300 mb-2">Webhook URL</label>
+              <label htmlFor="webhook-test-url" className="block text-sm text-gray-300 mb-2">
+                Webhook URL
+              </label>
               <input
+                id="webhook-test-url"
                 type="url"
                 value={url}
                 onChange={(e) => setUrl(e.target.value)}
@@ -75,8 +89,11 @@ export default function WebhookTestingPage() {
             </div>
 
             <div>
-              <label className="block text-sm text-gray-300 mb-2">HTTP Method</label>
+              <label htmlFor="webhook-test-method" className="block text-sm text-gray-300 mb-2">
+                HTTP Method
+              </label>
               <select
+                id="webhook-test-method"
                 value={method}
                 onChange={(e) => setMethod(e.target.value)}
                 className="w-full px-4 py-2 bg-gray-900 border border-gray-700 rounded text-white"
@@ -90,8 +107,11 @@ export default function WebhookTestingPage() {
             </div>
 
             <div>
-              <label className="block text-sm text-gray-300 mb-2">Headers (JSON)</label>
+              <label htmlFor="webhook-test-headers" className="block text-sm text-gray-300 mb-2">
+                Headers (JSON)
+              </label>
               <textarea
+                id="webhook-test-headers"
                 value={headers}
                 onChange={(e) => setHeaders(e.target.value)}
                 className="w-full h-24 px-4 py-2 bg-gray-900 border border-gray-700 rounded text-white font-mono text-sm"
@@ -100,8 +120,11 @@ export default function WebhookTestingPage() {
             </div>
 
             <div>
-              <label className="block text-sm text-gray-300 mb-2">Payload (JSON)</label>
+              <label htmlFor="webhook-test-payload" className="block text-sm text-gray-300 mb-2">
+                Payload (JSON)
+              </label>
               <textarea
+                id="webhook-test-payload"
                 value={payload}
                 onChange={(e) => setPayload(e.target.value)}
                 className="w-full h-32 px-4 py-2 bg-gray-900 border border-gray-700 rounded text-white font-mono text-sm"
@@ -165,11 +188,11 @@ export default function WebhookTestingPage() {
                   </div>
                 )}
 
-                {testResult.response && (
+                {testResult.response !== undefined && testResult.response !== null && (
                   <div>
                     <p className="text-sm text-gray-400 mb-1">Response</p>
                     <pre className="p-3 bg-gray-900 rounded text-white font-mono text-xs overflow-auto max-h-64">
-                      {JSON.stringify(testResult.response, null, 2)}
+                      {JSON.stringify(testResult.response as object, null, 2)}
                     </pre>
                   </div>
                 )}

portal/src/app/error.tsx

@@ -1,8 +1,8 @@
 'use client'
 
-import { useEffect } from 'react'
-import Link from 'next/link'
 import { Home, RefreshCw, AlertCircle } from 'lucide-react'
+import Link from 'next/link'
+import { useEffect } from 'react'
 
 export default function Error({
   error,
@@ -12,8 +12,8 @@ export default function Error({
   reset: () => void
 }) {
   useEffect(() => {
-    // Log error to error reporting service
+    // eslint-disable-next-line no-console -- error boundary diagnostic until reporting hook exists
-    console.error('Application error:', error)
+    console.error('Application error:', error);
   }, [error])
 
   return (

portal/src/app/infrastructure/page.tsx

@@ -1,9 +1,10 @@
 'use client';
 
-import { usePhoenixInfraNodes, usePhoenixInfraStorage } from '@/hooks/usePhoenixRailing';
-import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 import { Server, HardDrive } from 'lucide-react';
 
+import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
+import { usePhoenixInfraNodes, usePhoenixInfraStorage } from '@/hooks/usePhoenixRailing';
+
 export default function InfrastructurePage() {
   const { data: nodesData, isLoading: nodesLoading, error: nodesError } = usePhoenixInfraNodes();
   const { data: storageData, isLoading: storageLoading, error: storageError } = usePhoenixInfraStorage();
@@ -28,10 +29,15 @@ export default function InfrastructurePage() {
             {nodesError && <p className="text-red-400">Error loading nodes</p>}
             {nodesData?.nodes && (
               <ul className="space-y-2">
-                {nodesData.nodes.map((n: any) => (
+                {nodesData.nodes.map((n: Record<string, unknown>) => (
-                  <li key={n.node || n.name} className="flex justify-between text-sm">
+                  <li
-                    <span>{n.node ?? n.name ?? n.id}</span>
+                    key={String(n.node ?? n.name ?? n.id ?? '')}
-                    <span className={n.status === 'online' ? 'text-green-400' : 'text-gray-400'}>{n.status ?? '—'}</span>
+                    className="flex justify-between text-sm"
+                  >
+                    <span>{String(n.node ?? n.name ?? n.id ?? '—')}</span>
+                    <span className={n.status === 'online' ? 'text-green-400' : 'text-gray-400'}>
+                      {String(n.status ?? '—')}
+                    </span>
                   </li>
                 ))}
               </ul>
@@ -52,8 +58,10 @@ export default function InfrastructurePage() {
             {storageError && <p className="text-red-400">Error loading storage</p>}
             {storageData?.storage && (
               <ul className="space-y-2">
-                {storageData.storage.slice(0, 10).map((s: any, i: number) => (
+                {storageData.storage.slice(0, 10).map((s: Record<string, unknown>, i: number) => (
-                  <li key={s.storage || i} className="text-sm">{s.storage ?? s.name ?? s.id}</li>
+                  <li key={String(s.storage ?? s.name ?? s.id ?? i)} className="text-sm">
+                    {String(s.storage ?? s.name ?? s.id ?? '—')}
+                  </li>
                 ))}
               </ul>
             )}

portal/src/app/kubernetes/page.tsx

@@ -1,7 +1,8 @@
 'use client'
 
-import { useSession } from 'next-auth/react'
 import { redirect } from 'next/navigation'
+import { useSession } from 'next-auth/react'
+
 import KubernetesClusters from '@/components/kubernetes/KubernetesClusters'
 
 export default function KubernetesPage() {

portal/src/app/layout.tsx

@@ -2,13 +2,16 @@
 
 import { Inter } from 'next/font/google'
 import './globals.css'
-import { Providers } from './providers'
+import { SessionProvider } from 'next-auth/react'
+
+import { KeyboardShortcutsProvider } from '@/components/KeyboardShortcutsProvider'
+import { MobileNavigation } from '@/components/layout/MobileNavigation'
+import { PortalBreadcrumbs } from '@/components/layout/PortalBreadcrumbs'
 import { PortalHeader } from '@/components/layout/PortalHeader'
 import { PortalSidebar } from '@/components/layout/PortalSidebar'
-import { PortalBreadcrumbs } from '@/components/layout/PortalBreadcrumbs'
+
-import { MobileNavigation } from '@/components/layout/MobileNavigation'
+import { Providers } from './providers'
-import { KeyboardShortcutsProvider } from '@/components/KeyboardShortcutsProvider'
+
-import { SessionProvider } from 'next-auth/react'
 
 const inter = Inter({ subsets: ['latin'] })
 

portal/src/app/monitoring/page.tsx

@@ -1,7 +1,8 @@
 'use client'
 
-import { useSession } from 'next-auth/react'
 import { redirect } from 'next/navigation'
+import { useSession } from 'next-auth/react'
+
 import GrafanaPanel from '@/components/monitoring/GrafanaPanel'
 import LokiLogViewer from '@/components/monitoring/LokiLogViewer'
 import { Tabs, TabsContent, TabsList, TabsTrigger } from '@/components/ui/Tabs'

portal/src/app/not-found.tsx

@@ -1,7 +1,7 @@
 'use client'
 
-import Link from 'next/link'
 import { Home, ArrowLeft } from 'lucide-react'
+import Link from 'next/link'
 
 export default function NotFound() {
   return (
@@ -10,7 +10,7 @@ export default function NotFound() {
         <h1 className="text-6xl font-bold text-white mb-4">404</h1>
         <h2 className="text-2xl font-semibold text-gray-300 mb-4">Page Not Found</h2>
         <p className="text-gray-400 mb-8">
-          The page you're looking for doesn't exist or has been moved.
+          The page you&apos;re looking for doesn&apos;t exist or has been moved.
         </p>
         <div className="flex gap-4 justify-center">
           <Link

portal/src/app/onboarding/page.tsx

@@ -1,9 +1,9 @@
 'use client';
 
 import { OnboardingWizard } from '@/components/onboarding/OnboardingWizard';
-import { WelcomeStep } from '@/components/onboarding/steps/WelcomeStep';
-import { ProfileStep } from '@/components/onboarding/steps/ProfileStep';
 import { PreferencesStep } from '@/components/onboarding/steps/PreferencesStep';
+import { ProfileStep } from '@/components/onboarding/steps/ProfileStep';
+import { WelcomeStep } from '@/components/onboarding/steps/WelcomeStep';
 
 const onboardingSteps = [
   {

portal/src/app/page.tsx

@@ -2,6 +2,7 @@
 
 import { useSession } from 'next-auth/react';
 import { signIn } from 'next-auth/react';
+
 import Dashboard from '@/components/Dashboard';
 
 export default function Home() {

portal/src/app/partner/page.tsx

@@ -1,10 +1,11 @@
 'use client';
 
-import { useSession } from 'next-auth/react';
-import { signIn } from 'next-auth/react';
-import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 import { Handshake, TrendingUp, BookOpen, Package, ArrowRight } from 'lucide-react';
 import Link from 'next/link';
+import { useSession } from 'next-auth/react';
+import { signIn } from 'next-auth/react';
+
+import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 
 export default function PartnerPortalPage() {
   const { status } = useSession();

portal/src/app/resources/page.tsx

@@ -1,8 +1,9 @@
 'use client'
 
 import { useSession } from 'next-auth/react'
-import { useTenantResources } from '@/hooks/usePhoenixRailing'
+
 import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card'
+import { useTenantResources } from '@/hooks/usePhoenixRailing'
 
 export default function ResourcesPage() {
   const { status } = useSession()
@@ -36,10 +37,10 @@ export default function ResourcesPage() {
               <p className="text-sm text-muted-foreground">No resources</p>
             ) : (
               <ul className="space-y-2">
-                {resources.map((r: any) => (
+                {resources.map((r: Record<string, unknown>) => (
-                  <li key={r.id} className="flex justify-between text-sm">
+                  <li key={String(r.id ?? r.name ?? '')} className="flex justify-between text-sm">
-                    <span>{r.name}</span>
+                    <span>{String(r.name ?? '—')}</span>
-                    <span className="text-gray-400">{r.resource_type ?? r.provider}</span>
+                    <span className="text-gray-400">{String(r.resource_type ?? r.provider ?? '—')}</span>
                   </li>
                 ))}
               </ul>

portal/src/app/settings/2fa/page.tsx

@@ -1,9 +1,10 @@
 'use client';
 
-import { useState } from 'react';
-import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 import { Shield, CheckCircle } from 'lucide-react';
 import QRCode from 'qrcode';
+import { useState } from 'react';
+
+import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 
 export default function TwoFactorAuthPage() {
   const [isEnabled, setIsEnabled] = useState(false);
@@ -24,8 +25,8 @@ export default function TwoFactorAuthPage() {
       setSecret(data.secret);
       const qr = await QRCode.toDataURL(data.qrCodeUrl);
       setQrCode(qr);
-    } catch (error) {
+    } catch {
-      console.error('Failed to enable 2FA:', error);
+      /* setup failed — surface UI toast when wired */
     }
   };
 
@@ -43,8 +44,8 @@ export default function TwoFactorAuthPage() {
         setQrCode(null);
         setSecret(null);
       }
-    } catch (error) {
+    } catch {
-      console.error('Verification failed:', error);
+      /* verification failed */
     } finally {
       setIsVerifying(false);
     }
@@ -54,8 +55,8 @@ export default function TwoFactorAuthPage() {
     try {
       await fetch('/api/auth/2fa/disable', { method: 'POST' });
       setIsEnabled(false);
-    } catch (error) {
+    } catch {
-      console.error('Failed to disable 2FA:', error);
+      /* disable failed */
     }
   };
 
@@ -98,6 +99,7 @@ export default function TwoFactorAuthPage() {
               <div>
                 <p className="text-gray-300 mb-2">Scan this QR code with your authenticator app:</p>
                 <div className="flex justify-center p-4 bg-white rounded">
+                  {/* eslint-disable-next-line @next/next/no-img-element -- data: URL from qrcode package */}
                   <img src={qrCode} alt="2FA QR Code" className="w-48 h-48" />
                 </div>
               </div>
@@ -110,10 +112,11 @@ export default function TwoFactorAuthPage() {
               </div>
 
               <div>
-                <label className="block text-sm text-gray-300 mb-2">
+                <label htmlFor="settings-2fa-verify-code" className="block text-sm text-gray-300 mb-2">
                   Enter verification code from your app:
                 </label>
                 <input
+                  id="settings-2fa-verify-code"
                   type="text"
                   value={verificationCode}
                   onChange={(e) => setVerificationCode(e.target.value)}

portal/src/app/settings/page.tsx

@@ -1,9 +1,10 @@
 'use client';
 
+import { User, Bell, Shield, Key } from 'lucide-react';
 import { useSession } from 'next-auth/react';
 import { signIn } from 'next-auth/react';
+
 import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
-import { User, Bell, Shield, Key } from 'lucide-react';
 
 export default function SettingsPage() {
   const { data: session, status } = useSession();
@@ -51,11 +52,11 @@ export default function SettingsPage() {
           <CardContent>
             <div className="space-y-4">
               <div>
-                <label className="text-sm font-medium text-gray-300">Email</label>
+                <p className="text-sm font-medium text-gray-300">Email</p>
                 <p className="text-white">{session?.user?.email || 'Not available'}</p>
               </div>
               <div>
-                <label className="text-sm font-medium text-gray-300">Name</label>
+                <p className="text-sm font-medium text-gray-300">Name</p>
                 <p className="text-white">{session?.user?.name || 'Not available'}</p>
               </div>
               <button className="px-4 py-2 bg-blue-600 text-white rounded hover:bg-blue-700">
@@ -74,16 +75,16 @@ export default function SettingsPage() {
           </CardHeader>
           <CardContent>
             <div className="space-y-4">
-              <label className="flex items-center gap-2">
+              <label className="flex items-center gap-2" htmlFor="settings-notify-email">
-                <input type="checkbox" className="rounded" />
+                <input id="settings-notify-email" type="checkbox" className="rounded" />
                 <span className="text-white">Email notifications</span>
               </label>
-              <label className="flex items-center gap-2">
+              <label className="flex items-center gap-2" htmlFor="settings-notify-alert">
-                <input type="checkbox" className="rounded" />
+                <input id="settings-notify-alert" type="checkbox" className="rounded" />
                 <span className="text-white">Alert notifications</span>
               </label>
-              <label className="flex items-center gap-2">
+              <label className="flex items-center gap-2" htmlFor="settings-notify-weekly">
-                <input type="checkbox" className="rounded" />
+                <input id="settings-notify-weekly" type="checkbox" className="rounded" />
                 <span className="text-white">Weekly reports</span>
               </label>
             </div>

portal/src/app/unauthorized.tsx

@@ -1,7 +1,7 @@
 'use client'
 
-import Link from 'next/link'
 import { Shield, Home, Lock } from 'lucide-react'
+import Link from 'next/link'
 
 export default function Unauthorized() {
   return (
@@ -10,7 +10,7 @@ export default function Unauthorized() {
         <Shield className="h-16 w-16 text-yellow-500 mx-auto mb-4" />
         <h1 className="text-3xl font-bold text-white mb-4">Access Denied</h1>
         <p className="text-gray-400 mb-2">
-          You don't have permission to access this resource.
+          You don&apos;t have permission to access this resource.
         </p>
         <p className="text-sm text-gray-500 mb-8">
           Please contact your administrator if you believe this is an error.

portal/src/app/vms/page.tsx

@@ -2,6 +2,7 @@
 
 import { useSession } from 'next-auth/react';
 import { signIn } from 'next-auth/react';
+
 import VMList from '@/components/vms/VMList';
 
 export default function VMsPage() {

portal/src/components/Dashboard.tsx

@@ -1,14 +1,17 @@
 'use client';
 
-import { useSession } from 'next-auth/react';
-import { useQuery } from '@tanstack/react-query';
-import { createCrossplaneClient, VM } from '@/lib/crossplane-client';
-import { Card, CardContent, CardHeader, CardTitle } from './ui/Card';
-import { Server, Activity, AlertCircle, CheckCircle, Loader2 } from 'lucide-react';
-import { PhoenixHealthTile } from './dashboard/PhoenixHealthTile';
-import { Badge } from './ui/badge';
 import { gql } from '@apollo/client';
 import { useQuery as useApolloQuery } from '@apollo/client';
+import { useQuery } from '@tanstack/react-query';
+import { Server, Activity, AlertCircle, CheckCircle, Loader2 } from 'lucide-react';
+import { useSession } from 'next-auth/react';
+
+import { createCrossplaneClient, VM } from '@/lib/crossplane-client';
+
+import { PhoenixHealthTile } from './dashboard/PhoenixHealthTile';
+import { Badge } from './ui/badge';
+import { Card, CardContent, CardHeader, CardTitle } from './ui/Card';
+
 
 interface ActivityItem {
   id: string;
@@ -65,11 +68,11 @@ export default function Dashboard() {
   // Get recent activity from resources (last 10 created/updated)
   const recentActivity: ActivityItem[] = resources
     ?.slice(0, 10)
-    .map((resource: any) => ({
+    .map((resource: { id: string; type: string; name: string; status: string; updatedAt?: string; createdAt?: string }) => ({
       id: resource.id,
       type: resource.type,
       description: `${resource.name} - ${resource.status}`,
-      timestamp: new Date(resource.updatedAt || resource.createdAt),
+      timestamp: new Date(resource.updatedAt || resource.createdAt || Date.now()),
     }))
     .sort((a: ActivityItem, b: ActivityItem) => b.timestamp.getTime() - a.timestamp.getTime()) || [];
 

portal/src/components/KeyboardShortcutsProvider.tsx

@@ -1,7 +1,9 @@
 'use client';
 
 import { ReactNode } from 'react';
+
 import { useGlobalKeyboardShortcuts } from '@/hooks/useKeyboardShortcuts';
+
 import { KeyboardShortcutsHelp } from './KeyboardShortcutsHelp';
 
 export function KeyboardShortcutsProvider({ children }: { children: ReactNode }) {

portal/src/components/ResourceExplorer.tsx

@@ -1,11 +1,12 @@
 'use client'
 
-import { useState, type ChangeEvent } from 'react'
 import { useQuery } from '@tanstack/react-query'
+import { useState, type ChangeEvent } from 'react'
+
+import { Badge } from '@/components/ui/badge'
 import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card'
 import { Input } from '@/components/ui/Input'
 import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue } from '@/components/ui/select'
-import { Badge } from '@/components/ui/badge'
 
 interface Resource {
   id: string
@@ -41,7 +42,7 @@ export function ResourceExplorer() {
         }
       `
       
-      const variables: any = {}
+      const variables: Record<string, string> = {}
       if (filterProvider !== 'all') {
         variables.provider = filterProvider
       }
@@ -71,7 +72,16 @@ export function ResourceExplorer() {
       }
       
       // Transform GraphQL response to component format
-      return (result.data?.resourceInventory || []).map((item: any) => ({
+      return (result.data?.resourceInventory || []).map(
+        (item: {
+          id: string
+          name: string
+          resourceType: string
+          provider: string
+          region?: string
+          tags?: string[]
+          metadata?: { status?: string }
+        }) => ({
         id: item.id,
         name: item.name,
         type: item.resourceType,

portal/src/components/VMList.tsx

@@ -1,10 +1,11 @@
 'use client'
 
 import { useQuery } from '@tanstack/react-query'
-import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card'
-import { Button } from '@/components/ui/Button'
 import { Server, Play, Pause, Trash2 } from 'lucide-react'
 
+import { Button } from '@/components/ui/Button'
+import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card'
+
 interface VM {
   id: string
   name: string

portal/src/components/ai/OptimizationEngine.tsx

@@ -1,8 +1,9 @@
 'use client';
 
-import { useState } from 'react';
-import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 import { Sparkles, TrendingDown, TrendingUp } from 'lucide-react';
+import { useState } from 'react';
+
+import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 
 export function OptimizationEngine() {
   const [recommendations] = useState([

portal/src/components/analytics/AdvancedAnalytics.tsx

@@ -1,8 +1,9 @@
 'use client';
 
-import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 import { BarChart3, TrendingUp, Users, DollarSign } from 'lucide-react';
 
+import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
+
 export function AdvancedAnalytics() {
   return (
     <div className="space-y-6">

portal/src/components/argocd/ArgoCDApplications.tsx

@@ -1,11 +1,13 @@
 'use client'
 
 import { useQuery, useMutation, useQueryClient } from '@tanstack/react-query'
-import { useSession } from 'next-auth/react'
-import { createArgoCDClient, type ArgoCDApplication } from '@/lib/argocd-client'
-import { Card, CardContent, CardHeader, CardTitle } from '../ui/Card'
-import { Button } from '../ui/Button'
 import { CheckCircle, XCircle, AlertCircle, RefreshCw, GitBranch } from 'lucide-react'
+import { useSession } from 'next-auth/react'
+
+import { createArgoCDClient, type ArgoCDApplication } from '@/lib/argocd-client'
+
+import { Button } from '../ui/Button'
+import { Card, CardContent, CardHeader, CardTitle } from '../ui/Card'
 
 export default function ArgoCDApplications() {
   const { data: session } = useSession()

portal/src/components/crossplane/CrossplaneResourceBrowser.tsx

@@ -1,14 +1,17 @@
 'use client'
 
-import { useState } from 'react'
 import { useQuery } from '@tanstack/react-query'
+import { Server, Database, Network, HardDrive } from 'lucide-react'
 import { useSession } from 'next-auth/react'
+import { useState } from 'react'
+
 import { createCrossplaneClient } from '@/lib/crossplane-client'
+
+import { Badge } from '../ui/badge'
 import { Card, CardContent, CardHeader, CardTitle } from '../ui/Card'
 import { Input } from '../ui/Input'
 import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue } from '../ui/select'
-import { Badge } from '../ui/badge'
+
-import { Server, Database, Network, HardDrive } from 'lucide-react'
 
 interface CrossplaneResource {
   apiVersion: string
@@ -20,8 +23,8 @@ interface CrossplaneResource {
     creationTimestamp: string
     labels?: Record<string, string>
   }
-  spec?: any
+  spec?: unknown
-  status?: any
+  status?: unknown
 }
 
 export default function CrossplaneResourceBrowser() {
@@ -54,8 +57,7 @@ export default function CrossplaneResourceBrowser() {
           spec: vm.spec,
           status: vm.status,
         }))
-      } catch (error) {
+      } catch {
-        console.error('Failed to fetch Crossplane resources:', error)
         return []
       }
     },
@@ -78,10 +80,11 @@ export default function CrossplaneResourceBrowser() {
     return <Server className="h-5 w-5 text-gray-500" />
   }
 
-  const getResourceStatusColor = (status: Record<string, unknown> | undefined) => {
+  const getResourceStatusColor = (status: unknown) => {
-    if (!status) return 'bg-gray-500'
+    if (!status || typeof status !== 'object') return 'bg-gray-500'
 
-    const state = String(status.state ?? status.phase ?? 'Unknown')
+    const o = status as Record<string, unknown>
+    const state = String(o.state ?? o.phase ?? 'Unknown')
     switch (state.toLowerCase()) {
       case 'running':
       case 'ready':
@@ -172,7 +175,9 @@ export default function CrossplaneResourceBrowser() {
                   </div>
                   <div
                     className={`h-3 w-3 rounded-full ${getResourceStatusColor(resource.status)}`}
-                    title={resource.status?.state || 'Unknown'}
+                    title={String(
+                      (resource.status as Record<string, unknown> | undefined)?.state ?? 'Unknown'
+                    )}
                   />
                 </div>
               </CardHeader>
@@ -190,16 +195,20 @@ export default function CrossplaneResourceBrowser() {
                     <span className="text-sm text-gray-500">API Version:</span>
                     <span className="text-sm text-gray-400">{resource.apiVersion}</span>
                   </div>
-                  {resource.status?.state && (
+                  {Boolean((resource.status as Record<string, unknown> | undefined)?.state) && (
                     <div className="flex items-center justify-between">
                       <span className="text-sm text-gray-500">State:</span>
-                      <Badge variant="outline">{resource.status.state}</Badge>
+                      <Badge variant="outline">
+                        {String((resource.status as Record<string, unknown>).state)}
+                      </Badge>
                     </div>
                   )}
-                  {resource.status?.ipAddress && (
+                  {Boolean((resource.status as Record<string, unknown> | undefined)?.ipAddress) && (
                     <div className="flex items-center justify-between">
                       <span className="text-sm text-gray-500">IP Address:</span>
-                      <span className="text-sm font-mono">{resource.status.ipAddress}</span>
+                      <span className="text-sm font-mono">
+                        {String((resource.status as Record<string, unknown>).ipAddress)}
+                      </span>
                     </div>
                   )}
                   {resource.metadata.labels && Object.keys(resource.metadata.labels).length > 0 && (

portal/src/components/dashboard/APIKeysTile.tsx

@@ -1,9 +1,10 @@
 'use client';
 
-import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 import { Key, AlertCircle } from 'lucide-react';
 import Link from 'next/link';
 
+import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
+
 export function APIKeysTile() {
   // Mock data - in production, this would come from API
   const apiKeys = {

portal/src/components/dashboard/APIUsageTile.tsx

@@ -1,8 +1,9 @@
 'use client';
 
-import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 import { Activity, AlertCircle } from 'lucide-react';
 
+import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
+
 export function APIUsageTile() {
   // Mock data - in production, this would come from API
   const usage = {

portal/src/components/dashboard/BillingTile.tsx

@@ -1,9 +1,10 @@
 'use client';
 
-import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 import { CreditCard, FileText } from 'lucide-react';
 import Link from 'next/link';
 
+import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
+
 export function BillingTile() {
   // Mock data - in production, this would come from API
   const billing = {

portal/src/components/dashboard/ComplianceStatusTile.tsx

@@ -1,8 +1,9 @@
 'use client';
 
-import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 import { Shield, CheckCircle, AlertCircle } from 'lucide-react';
 
+import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
+
 export function ComplianceStatusTile() {
   // Mock data - in production, this would come from API
   const compliance = {

portal/src/components/dashboard/CostForecastingTile.tsx

@@ -1,8 +1,9 @@
 'use client';
 
-import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 import { TrendingUp, TrendingDown, DollarSign } from 'lucide-react';
 
+import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
+
 export function CostForecastingTile() {
   // Mock data - in production, this would come from API
   const forecast = {

portal/src/components/dashboard/CostOverviewTile.tsx

@@ -1,8 +1,9 @@
 'use client';
 
-import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 import { DollarSign, TrendingUp, TrendingDown } from 'lucide-react';
 
+import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
+
 export function CostOverviewTile() {
   // Mock data - in production, this would come from API
   const costData = {

portal/src/components/dashboard/DashboardCustomizer.tsx

@@ -1,10 +1,11 @@
 'use client';
 
-import { useState } from 'react';
-import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 import { GripVertical, Plus } from 'lucide-react';
+import { useState } from 'react';
 import { DragDropContext, Droppable, Draggable, DropResult } from 'react-beautiful-dnd';
 
+import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
+
 interface DashboardTile {
   id: string;
   component: string;

portal/src/components/dashboard/DataPipelineTile.tsx

@@ -1,8 +1,9 @@
 'use client';
 
-import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 import { GitBranch, PlayCircle, PauseCircle, AlertCircle } from 'lucide-react';
 
+import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
+
 export function DataPipelineTile() {
   // Mock data - in production, this would come from API
   const pipelines = {

portal/src/components/dashboard/DeploymentsTile.tsx

@@ -1,8 +1,9 @@
 'use client';
 
-import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 import { Rocket, CheckCircle, Clock, XCircle } from 'lucide-react';
 
+import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
+
 export function DeploymentsTile() {
   // Mock data - in production, this would come from API
   const deployments = {

portal/src/components/dashboard/IntegrationStatusTile.tsx

@@ -1,8 +1,9 @@
 'use client';
 
-import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 import { Link2, CheckCircle, AlertCircle, Clock } from 'lucide-react';
 
+import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
+
 export function IntegrationStatusTile() {
   // Mock data - in production, this would come from API
   const integrations = {

portal/src/components/dashboard/LazyTile.tsx

@@ -1,12 +1,13 @@
 'use client';
 
-import { Suspense, lazy, ComponentType } from 'react';
-import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 import { Loader2 } from 'lucide-react';
+import { Suspense, lazy, ComponentType } from 'react';
+
+import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 
 interface LazyTileProps {
-  component: ComponentType<any>;
+  component: ComponentType<Record<string, unknown>>;
-  props?: any;
+  props?: Record<string, unknown>;
   fallback?: React.ReactNode;
 }
 

portal/src/components/dashboard/PhoenixHealthTile.tsx

@@ -1,9 +1,10 @@
 'use client';
 
-import { usePhoenixHealthSummary } from '@/hooks/usePhoenixRailing';
-import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 import { Activity, CheckCircle, AlertCircle } from 'lucide-react';
 
+import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
+import { usePhoenixHealthSummary } from '@/hooks/usePhoenixRailing';
+
 export function PhoenixHealthTile() {
   const { data, isLoading, error } = usePhoenixHealthSummary();
 

portal/src/components/dashboard/QuickActionsPanel.tsx

@@ -1,8 +1,10 @@
 'use client';
 
-import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
+import type { LucideIcon } from 'lucide-react';
-import Link from 'next/link';
 import { Plus, Link as LinkIcon, FileText, Settings, Key, Rocket, Book, CreditCard, HelpCircle, Download } from 'lucide-react';
+import Link from 'next/link';
+
+import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 
 interface QuickAction {
   label: string;
@@ -14,7 +16,7 @@ interface QuickActionsPanelProps {
   actions: QuickAction[];
 }
 
-const iconMap: Record<string, any> = {
+const iconMap: Record<string, LucideIcon> = {
   Plus,
   Link: LinkIcon,
   FileText,

portal/src/components/dashboard/ResourceUsageTile.tsx

@@ -1,8 +1,9 @@
 'use client';
 
-import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 import { BarChart3 } from 'lucide-react';
 
+import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
+
 export function ResourceUsageTile() {
   // Mock data - in production, this would come from API
   const usageByDivision = [

portal/src/components/dashboard/ResourceUtilizationTile.tsx

@@ -1,8 +1,9 @@
 'use client';
 
-import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 import { Cpu, HardDrive, Activity } from 'lucide-react';
 
+import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
+
 export function ResourceUtilizationTile() {
   // Mock data - in production, this would come from API
   const utilization = {

portal/src/components/dashboard/ServiceAdoptionTile.tsx

@@ -1,8 +1,9 @@
 'use client';
 
-import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 import { TrendingUp } from 'lucide-react';
 
+import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
+
 export function ServiceAdoptionTile() {
   // Mock data - in production, this would come from API
   const services = [

portal/src/components/dashboard/SystemHealthTile.tsx

@@ -1,9 +1,13 @@
 'use client';
 
-import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 import { Activity, CheckCircle, AlertCircle, XCircle, Globe, Server } from 'lucide-react';
+
+import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 import { useSystemHealth } from '@/hooks/useDashboardData';
 
+type HealthSite = { status?: string };
+type HealthResource = { status?: string };
+
 export function SystemHealthTile() {
   const { data, loading, error } = useSystemHealth();
 
@@ -11,21 +15,21 @@ export function SystemHealthTile() {
   const healthData = data ? {
     regions: {
       total: data.sites?.length || 0,
-      healthy: data.sites?.filter((s: any) => s.status === 'ACTIVE').length || 0,
+      healthy: data.sites?.filter((s: HealthSite) => s.status === 'ACTIVE').length || 0,
-      warning: data.sites?.filter((s: any) => s.status === 'MAINTENANCE').length || 0,
+      warning: data.sites?.filter((s: HealthSite) => s.status === 'MAINTENANCE').length || 0,
-      critical: data.sites?.filter((s: any) => s.status === 'INACTIVE').length || 0,
+      critical: data.sites?.filter((s: HealthSite) => s.status === 'INACTIVE').length || 0,
     },
     clusters: {
       total: data.resources?.length || 0,
-      healthy: data.resources?.filter((r: any) => r.status === 'RUNNING').length || 0,
+      healthy: data.resources?.filter((r: HealthResource) => r.status === 'RUNNING').length || 0,
-      warning: data.resources?.filter((r: any) => r.status === 'PROVISIONING').length || 0,
+      warning: data.resources?.filter((r: HealthResource) => r.status === 'PROVISIONING').length || 0,
-      critical: data.resources?.filter((r: any) => r.status === 'ERROR').length || 0,
+      critical: data.resources?.filter((r: HealthResource) => r.status === 'ERROR').length || 0,
     },
     nodes: {
       total: data.resources?.length || 0,
-      healthy: data.resources?.filter((r: any) => r.status === 'RUNNING').length || 0,
+      healthy: data.resources?.filter((r: HealthResource) => r.status === 'RUNNING').length || 0,
-      warning: data.resources?.filter((r: any) => r.status === 'PROVISIONING').length || 0,
+      warning: data.resources?.filter((r: HealthResource) => r.status === 'PROVISIONING').length || 0,
-      critical: data.resources?.filter((r: any) => r.status === 'ERROR').length || 0,
+      critical: data.resources?.filter((r: HealthResource) => r.status === 'ERROR').length || 0,
     },
   } : {
     regions: { total: 0, healthy: 0, warning: 0, critical: 0 },

portal/src/components/dashboard/TestEnvironmentsTile.tsx

@@ -1,8 +1,9 @@
 'use client';
 
-import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 import { TestTube, PlayCircle, PauseCircle } from 'lucide-react';
 
+import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
+
 export function TestEnvironmentsTile() {
   // Mock data - in production, this would come from API
   const environments = {

portal/src/components/fairness/FairnessOrchestrationWizard.tsx

@@ -1,16 +1,15 @@
 'use client';
 
+import { InfoIcon, AlertTriangleIcon, CheckCircleIcon } from 'lucide-react';
 import { useState, useMemo } from 'react';
-import { Card, CardContent, CardDescription, CardHeader, CardTitle } from '@/components/ui/Card';
+
+import { Alert, AlertDescription } from '@/components/ui/alert';
 import { Button } from '@/components/ui/Button';
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from '@/components/ui/Card';
 import { Checkbox } from '@/components/ui/checkbox';
 import { Input } from '@/components/ui/Input';
 import { Label } from '@/components/ui/label';
 import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue } from '@/components/ui/select';
-import { Alert, AlertDescription } from '@/components/ui/alert';
-import { InfoIcon, AlertTriangleIcon, CheckCircleIcon } from 'lucide-react';
-
-// Import orchestration engine (would be from API in production)
 import type { OrchestrationRequest, InputSpec, TimelineSpec } from '@/lib/fairness-orchestration';
 import { orchestrate, getAvailableOutputs, getUserMessage } from '@/lib/fairness-orchestration';
 
@@ -122,26 +121,44 @@ export default function FairnessOrchestrationWizard() {
             </div>
 
             <div>
-              <Label htmlFor="dateRange">Date Range (Optional)</Label>
+              <p className="text-sm font-medium mb-2">Date range (optional)</p>
               <div className="grid grid-cols-2 gap-2">
+                <div>
+                  <Label htmlFor="fairness-date-start">Start</Label>
                   <Input
+                    id="fairness-date-start"
                     type="date"
                     value={inputSpec.dateRange?.start || ''}
-                  onChange={(e) => setInputSpec(prev => ({
+                    onChange={(e) =>
+                      setInputSpec((prev) => ({
                         ...prev,
-                    dateRange: { ...prev.dateRange, start: e.target.value } as any
+                        dateRange: {
-                  }))}
+                          start: e.target.value,
+                          end: prev.dateRange?.end ?? '',
+                        },
+                      }))
+                    }
                   />
+                </div>
+                <div>
+                  <Label htmlFor="fairness-date-end">End</Label>
                   <Input
+                    id="fairness-date-end"
                     type="date"
                     value={inputSpec.dateRange?.end || ''}
-                  onChange={(e) => setInputSpec(prev => ({
+                    onChange={(e) =>
+                      setInputSpec((prev) => ({
                         ...prev,
-                    dateRange: { ...prev.dateRange, end: e.target.value } as any
+                        dateRange: {
-                  }))}
+                          start: prev.dateRange?.start ?? '',
+                          end: e.target.value,
+                        },
+                      }))
+                    }
                   />
                 </div>
               </div>
+            </div>
 
             <div>
               <Label htmlFor="sensitiveAttributes">Sensitive Attributes</Label>

portal/src/components/kubernetes/KubernetesClusters.tsx

@@ -1,10 +1,12 @@
 'use client'
 
 import { useQuery } from '@tanstack/react-query'
-import { useSession } from 'next-auth/react'
-import { createKubernetesClient } from '@/lib/kubernetes-client'
-import { Card, CardContent, CardHeader, CardTitle } from '../ui/Card'
 import { Server, CheckCircle, XCircle } from 'lucide-react'
+import { useSession } from 'next-auth/react'
+
+import { createKubernetesClient } from '@/lib/kubernetes-client'
+
+import { Card, CardContent, CardHeader, CardTitle } from '../ui/Card'
 
 export default function KubernetesClusters() {
   const { data: session } = useSession()

portal/src/components/layout/MobileNavigation.tsx

@@ -1,8 +1,5 @@
 'use client';
 
-import { useState } from 'react';
-import { usePathname } from 'next/navigation';
-import Link from 'next/link';
 import {
   LayoutDashboard,
   Server,
@@ -15,6 +12,9 @@ import {
   Menu,
   X,
 } from 'lucide-react';
+import Link from 'next/link';
+import { usePathname } from 'next/navigation';
+import { useState } from 'react';
 
 const navigation = [
   { name: 'Dashboard', href: '/dashboard', icon: LayoutDashboard },

portal/src/components/layout/PortalBreadcrumbs.tsx

@@ -1,8 +1,8 @@
 'use client'
 
+import { ChevronRight, Home } from 'lucide-react'
 import Link from 'next/link'
 import { usePathname } from 'next/navigation'
-import { ChevronRight, Home } from 'lucide-react'
 
 export function PortalBreadcrumbs() {
   const pathname = usePathname()

portal/src/components/layout/PortalHeader.tsx

@@ -1,8 +1,8 @@
 'use client'
 
+import { Search, Bell, Settings, User, LogOut } from 'lucide-react'
 import Link from 'next/link'
 import { useSession } from 'next-auth/react'
-import { Search, Bell, Settings, User, LogOut } from 'lucide-react'
 import { signOut } from 'next-auth/react'
 
 export function PortalHeader() {

portal/src/components/layout/PortalSidebar.tsx

@@ -1,7 +1,5 @@
 'use client'
 
-import Link from 'next/link'
-import { usePathname } from 'next/navigation'
 import { 
   LayoutDashboard, 
   Server, 
@@ -14,6 +12,9 @@ import {
   Shield,
   HelpCircle
 } from 'lucide-react'
+import Link from 'next/link'
+import { usePathname } from 'next/navigation'
+
 import { cn } from '@/lib/utils'
 
 const navigation = [

portal/src/components/monitoring/LokiLogViewer.tsx

@@ -1,12 +1,14 @@
 'use client'
 
-import { useState, useEffect } from 'react'
 import { useQuery } from '@tanstack/react-query'
-import { Card, CardContent, CardHeader, CardTitle } from '../ui/Card'
-import { Button } from '../ui/Button'
-import { Input } from '../ui/Input'
-import { RefreshCw, Search, Download } from 'lucide-react'
 import axios from 'axios'
+import { RefreshCw, Search, Download } from 'lucide-react'
+import { useState, useEffect } from 'react'
+
+import { Button } from '../ui/Button'
+import { Card, CardContent, CardHeader, CardTitle } from '../ui/Card'
+import { Input } from '../ui/Input'
+
 
 interface LogEntry {
   stream: Record<string, string>

portal/src/components/onboarding/OnboardingWizard.tsx

@@ -1,15 +1,16 @@
 'use client';
 
-import { useState } from 'react';
-import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 import { CheckCircle, ArrowRight, ArrowLeft } from 'lucide-react';
 import { useRouter } from 'next/navigation';
+import { useState } from 'react';
+
+import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/Card';
 
 interface OnboardingStep {
   id: string;
   title: string;
   description: string;
-  component: React.ComponentType<any>;
+  component: React.ComponentType<{ onComplete: () => void }>;
 }
 
 interface OnboardingWizardProps {

portal/src/components/onboarding/steps/PreferencesStep.tsx

@@ -26,8 +26,11 @@ export function PreferencesStep({ onComplete }: { onComplete: () => void }) {
         </label>
       </div>
       <div>
-        <label className="block text-sm text-gray-300 mb-2">Theme</label>
+        <label htmlFor="onboarding-theme" className="block text-sm text-gray-300 mb-2">
+          Theme
+        </label>
         <select
+          id="onboarding-theme"
           value={theme}
           onChange={(e) => setTheme(e.target.value)}
           className="w-full px-4 py-2 bg-gray-900 border border-gray-700 rounded text-white"

portal/src/components/onboarding/steps/ProfileStep.tsx

@@ -15,8 +15,11 @@ export function ProfileStep({ onComplete }: { onComplete: () => void }) {
   return (
     <form onSubmit={handleSubmit} className="space-y-4">
       <div>
-        <label className="block text-sm text-gray-300 mb-2">Full Name</label>
+        <label htmlFor="onboarding-full-name" className="block text-sm text-gray-300 mb-2">
+          Full Name
+        </label>
         <input
+          id="onboarding-full-name"
           type="text"
           value={name}
           onChange={(e) => setName(e.target.value)}
@@ -25,8 +28,11 @@ export function ProfileStep({ onComplete }: { onComplete: () => void }) {
         />
       </div>
       <div>
-        <label className="block text-sm text-gray-300 mb-2">Role</label>
+        <label htmlFor="onboarding-role" className="block text-sm text-gray-300 mb-2">
+          Role
+        </label>
         <select
+          id="onboarding-role"
           value={role}
           onChange={(e) => setRole(e.target.value)}
           className="w-full px-4 py-2 bg-gray-900 border border-gray-700 rounded text-white"

portal/src/components/onboarding/steps/WelcomeStep.tsx

@@ -17,7 +17,7 @@ export function WelcomeStep({ onComplete }: { onComplete: () => void }) {
         Welcome to Sankofa Phoenix Nexus Console
       </h2>
       <p className="text-gray-400 mb-6">
-        Let's get you set up in just a few steps. This will only take a minute.
+        Let&apos;s get you set up in just a few steps. This will only take a minute.
       </p>
     </div>
   );

portal/src/components/ui/Button.tsx

@@ -1,4 +1,5 @@
 import * as React from 'react'
+
 import { cn } from '@/lib/utils'
 
 export interface ButtonProps extends React.ButtonHTMLAttributes<HTMLButtonElement> {

portal/src/components/ui/Input.tsx

@@ -1,4 +1,5 @@
 import * as React from 'react'
+
 import { cn } from '@/lib/utils'
 
 export interface InputProps extends React.InputHTMLAttributes<HTMLInputElement> {}

portal/src/components/ui/Tabs.tsx

@@ -1,5 +1,6 @@
-import * as React from 'react'
 import * as TabsPrimitive from '@radix-ui/react-tabs'
+import * as React from 'react'
+
 import { cn } from '@/lib/utils'
 
 const Tabs = TabsPrimitive.Root

portal/src/components/ui/alert.tsx

@@ -1,4 +1,5 @@
 import * as React from 'react'
+
 import { cn } from '@/lib/utils'
 
 interface AlertProps {

portal/src/components/ui/badge.tsx

@@ -1,4 +1,5 @@
 import * as React from 'react'
+
 import { cn } from '@/lib/utils'
 
 export interface BadgeProps extends React.HTMLAttributes<HTMLDivElement> {

portal/src/components/ui/checkbox.tsx

@@ -1,6 +1,7 @@
 'use client'
 
 import * as React from 'react'
+
 import { cn } from '@/lib/utils'
 
 export interface CheckboxProps {

portal/src/components/ui/label.tsx

@@ -1,4 +1,6 @@
+/* eslint-disable jsx-a11y/label-has-associated-control -- Primitive; pair htmlFor with inputs at call sites */
 import * as React from 'react'
+
 import { cn } from '@/lib/utils'
 
 export interface LabelProps extends React.LabelHTMLAttributes<HTMLLabelElement> {}

portal/src/components/ui/select.tsx

@@ -1,6 +1,7 @@
-import * as React from 'react'
 import * as SelectPrimitive from '@radix-ui/react-select'
 import { Check, ChevronDown } from 'lucide-react'
+import * as React from 'react'
+
 import { cn } from '@/lib/utils'
 
 const Select = SelectPrimitive.Root

portal/src/components/vms/VMList.tsx

@@ -1,10 +1,12 @@
 'use client';
 
 import { useQuery, useMutation, useQueryClient } from '@tanstack/react-query';
-import { useSession } from 'next-auth/react';
-import { createCrossplaneClient } from '@/lib/crossplane-client';
-import { Card, CardContent, CardHeader, CardTitle } from '../ui/Card';
 import { Play, Square, Trash2, Plus } from 'lucide-react';
+import { useSession } from 'next-auth/react';
+
+import { createCrossplaneClient, type VM } from '@/lib/crossplane-client';
+
+import { Card, CardContent, CardHeader, CardTitle } from '../ui/Card';
 
 export default function VMList() {
   const { data: session } = useSession();
@@ -39,7 +41,7 @@ export default function VMList() {
       </div>
 
       <div className="grid grid-cols-1 md:grid-cols-2 lg:grid-cols-3 gap-4">
-        {vms.map((vm: any) => (
+        {vms.map((vm: VM) => (
           <Card key={vm.metadata.name}>
             <CardHeader>
               <CardTitle className="text-lg">{vm.metadata.name}</CardTitle>

portal/src/hooks/useDashboardData.ts

@@ -1,7 +1,8 @@
 import { useQuery } from '@apollo/client'
-import { GET_SYSTEM_HEALTH, GET_COST_OVERVIEW, GET_BILLING_INFO, GET_API_USAGE, GET_DEPLOYMENTS, GET_TEST_ENVIRONMENTS, GET_API_KEYS } from '@/lib/graphql/queries/dashboard'
 import { useSession } from 'next-auth/react'
 
+import { GET_SYSTEM_HEALTH, GET_COST_OVERVIEW, GET_BILLING_INFO, GET_API_USAGE, GET_DEPLOYMENTS, GET_TEST_ENVIRONMENTS, GET_API_KEYS } from '@/lib/graphql/queries/dashboard'
+
 export function useSystemHealth() {
   return useQuery(GET_SYSTEM_HEALTH, {
     pollInterval: 30000, // Poll every 30 seconds
@@ -11,7 +12,7 @@ export function useSystemHealth() {
 
 export function useCostOverview(tenantId?: string) {
   const { data: session } = useSession()
-  const defaultTenantId = tenantId || (session as any)?.tenantId
+  const defaultTenantId = tenantId || session?.tenantId
 
   const endDate = new Date()
   const startDate = new Date()
@@ -32,7 +33,7 @@ export function useCostOverview(tenantId?: string) {
 
 export function useBillingInfo(tenantId?: string) {
   const { data: session } = useSession()
-  const defaultTenantId = tenantId || (session as any)?.tenantId
+  const defaultTenantId = tenantId || session?.tenantId
 
   return useQuery(GET_BILLING_INFO, {
     variables: {

portal/src/hooks/useKeyboardShortcuts.ts

@@ -1,7 +1,7 @@
 'use client';
 
-import { useEffect } from 'react';
 import { useRouter } from 'next/navigation';
+import { useEffect } from 'react';
 
 interface KeyboardShortcut {
   key: string;

portal/src/hooks/usePhoenixRailing.ts

@@ -2,6 +2,7 @@
 
 import { useQuery, useMutation, useQueryClient } from '@tanstack/react-query';
 import { useSession } from 'next-auth/react';
+
 import {
   getInfraNodes,
   getInfraStorage,
@@ -15,7 +16,7 @@ import {
 
 export function usePhoenixInfraNodes() {
   const { data: session } = useSession();
-  const token = (session as any)?.accessToken as string | undefined;
+  const token = session?.accessToken;
   return useQuery({
     queryKey: ['phoenix', 'infra', 'nodes'],
     queryFn: () => getInfraNodes(token),
@@ -25,7 +26,7 @@ export function usePhoenixInfraNodes() {
 
 export function usePhoenixInfraStorage() {
   const { data: session } = useSession();
-  const token = (session as any)?.accessToken as string | undefined;
+  const token = session?.accessToken;
   return useQuery({
     queryKey: ['phoenix', 'infra', 'storage'],
     queryFn: () => getInfraStorage(token),
@@ -35,7 +36,7 @@ export function usePhoenixInfraStorage() {
 
 export function usePhoenixVMs(node?: string) {
   const { data: session } = useSession();
-  const token = (session as any)?.accessToken as string | undefined;
+  const token = session?.accessToken;
   return useQuery({
     queryKey: ['phoenix', 've', 'vms', node],
     queryFn: () => getVMs(token, node),
@@ -45,7 +46,7 @@ export function usePhoenixVMs(node?: string) {
 
 export function usePhoenixHealthSummary() {
   const { data: session } = useSession();
-  const token = (session as any)?.accessToken as string | undefined;
+  const token = session?.accessToken;
   return useQuery({
     queryKey: ['phoenix', 'health', 'summary'],
     queryFn: () => getHealthSummary(token),
@@ -56,7 +57,7 @@ export function usePhoenixHealthSummary() {
 
 export function usePhoenixHealthAlerts() {
   const { data: session } = useSession();
-  const token = (session as any)?.accessToken as string | undefined;
+  const token = session?.accessToken;
   return useQuery({
     queryKey: ['phoenix', 'health', 'alerts'],
     queryFn: () => getHealthAlerts(token),
@@ -67,7 +68,7 @@ export function usePhoenixHealthAlerts() {
 
 export function useTenantResources() {
   const { data: session } = useSession();
-  const token = (session as any)?.accessToken as string | undefined;
+  const token = session?.accessToken;
   return useQuery({
     queryKey: ['phoenix', 'tenants', 'me', 'resources'],
     queryFn: () => getTenantResources(token),
@@ -77,7 +78,7 @@ export function useTenantResources() {
 
 export function useTenantHealth() {
   const { data: session } = useSession();
-  const token = (session as any)?.accessToken as string | undefined;
+  const token = session?.accessToken;
   return useQuery({
     queryKey: ['phoenix', 'tenants', 'me', 'health'],
     queryFn: () => getTenantHealth(token),
@@ -87,7 +88,7 @@ export function useTenantHealth() {
 
 export function useVMAction() {
   const { data: session } = useSession();
-  const token = (session as any)?.accessToken as string | undefined;
+  const token = session?.accessToken;
   const queryClient = useQueryClient();
   return useMutation({
     mutationFn: ({ node, vmid, action, type }: { node: string; vmid: string; action: 'start' | 'stop' | 'reboot'; type?: 'qemu' | 'lxc' }) =>

portal/src/lib/argocd-client.ts

@@ -5,6 +5,11 @@
 
 import axios, { AxiosInstance } from 'axios'
 
+function errorMessage(error: unknown): string {
+  if (error instanceof Error) return error.message
+  return String(error)
+}
+
 export interface ArgoCDApplication {
   metadata: {
     name: string
@@ -80,9 +85,8 @@ class ArgoCDClient {
     try {
       const response = await this.client.get('/api/v1/applications')
       return response.data.items || []
-    } catch (error: any) {
+    } catch (error: unknown) {
-      console.error('Failed to fetch ArgoCD applications:', error)
+      throw new Error(`Failed to fetch applications: ${errorMessage(error)}`)
-      throw new Error(`Failed to fetch applications: ${error.message}`)
     }
   }
 
@@ -95,9 +99,8 @@ class ArgoCDClient {
         params: { namespace },
       })
       return response.data
-    } catch (error: any) {
+    } catch (error: unknown) {
-      console.error(`Failed to fetch ArgoCD application ${name}:`, error)
+      throw new Error(`Failed to fetch application: ${errorMessage(error)}`)
-      throw new Error(`Failed to fetch application: ${error.message}`)
     }
   }
 
@@ -122,9 +125,8 @@ class ArgoCDClient {
         }
       )
       return response.data
-    } catch (error: any) {
+    } catch (error: unknown) {
-      console.error(`Failed to sync ArgoCD application ${name}:`, error)
+      throw new Error(`Failed to sync application: ${errorMessage(error)}`)
-      throw new Error(`Failed to sync application: ${error.message}`)
     }
   }
 
@@ -144,9 +146,8 @@ class ArgoCDClient {
         },
       })
       return response.data.logs || []
-    } catch (error: any) {
+    } catch (error: unknown) {
-      console.error(`Failed to fetch logs for ${name}:`, error)
+      throw new Error(`Failed to fetch logs: ${errorMessage(error)}`)
-      throw new Error(`Failed to fetch logs: ${error.message}`)
     }
   }
 
@@ -156,15 +157,14 @@ class ArgoCDClient {
   async getApplicationResourceTree(
     name: string,
     namespace: string = 'argocd'
-  ): Promise<any> {
+  ): Promise<unknown> {
     try {
       const response = await this.client.get(`/api/v1/applications/${name}/resource-tree`, {
         params: { namespace },
       })
       return response.data
-    } catch (error: any) {
+    } catch (error: unknown) {
-      console.error(`Failed to fetch resource tree for ${name}:`, error)
+      throw new Error(`Failed to fetch resource tree: ${errorMessage(error)}`)
-      throw new Error(`Failed to fetch resource tree: ${error.message}`)
     }
   }
 }

portal/src/lib/kubernetes-client.ts

@@ -5,6 +5,17 @@
 
 import axios, { AxiosInstance } from 'axios'
 
+function errorMessage(error: unknown): string {
+  if (error instanceof Error) return error.message
+  return String(error)
+}
+
+interface K8sNode {
+  status?: {
+    conditions?: Array<{ type: string; status: string }>
+  }
+}
+
 export interface KubernetesCluster {
   name: string
   server: string
@@ -28,8 +39,8 @@ export interface KubernetesResource {
     labels?: Record<string, string>
     annotations?: Record<string, string>
   }
-  spec?: any
+  spec?: Record<string, unknown>
-  status?: any
+  status?: Record<string, unknown>
 }
 
 export interface KubernetesNamespace {
@@ -69,9 +80,9 @@ class KubernetesClient {
       const nodesResponse = await this.client.get('/api/v1/nodes')
       
       const nodes = nodesResponse.data.items || []
-      const readyNodes = nodes.filter((node: any) => {
+      const readyNodes = nodes.filter((node: K8sNode) => {
         const conditions = node.status?.conditions || []
-        return conditions.some((c: any) => c.type === 'Ready' && c.status === 'True')
+        return conditions.some((c) => c.type === 'Ready' && c.status === 'True')
       })
 
       return {
@@ -85,9 +96,8 @@ class KubernetesClient {
           ready: readyNodes.length,
         },
       }
-    } catch (error: any) {
+    } catch (error: unknown) {
-      console.error('Failed to fetch cluster info:', error)
+      throw new Error(`Failed to fetch cluster info: ${errorMessage(error)}`)
-      throw new Error(`Failed to fetch cluster info: ${error.message}`)
     }
   }
 
@@ -98,9 +108,8 @@ class KubernetesClient {
     try {
       const response = await this.client.get('/api/v1/namespaces')
       return response.data.items || []
-    } catch (error: any) {
+    } catch (error: unknown) {
-      console.error('Failed to list namespaces:', error)
+      throw new Error(`Failed to list namespaces: ${errorMessage(error)}`)
-      throw new Error(`Failed to list namespaces: ${error.message}`)
     }
   }
 
@@ -119,9 +128,8 @@ class KubernetesClient {
       
       const response = await this.client.get(path)
       return response.data.items || []
-    } catch (error: any) {
+    } catch (error: unknown) {
-      console.error(`Failed to list ${kind} resources:`, error)
+      throw new Error(`Failed to list resources: ${errorMessage(error)}`)
-      throw new Error(`Failed to list resources: ${error.message}`)
     }
   }
 
@@ -141,9 +149,8 @@ class KubernetesClient {
       
       const response = await this.client.get(path)
       return response.data
-    } catch (error: any) {
+    } catch (error: unknown) {
-      console.error(`Failed to get ${kind} ${name}:`, error)
+      throw new Error(`Failed to get resource: ${errorMessage(error)}`)
-      throw new Error(`Failed to get resource: ${error.message}`)
     }
   }
 

portal/src/lib/phoenix-api-client.ts

@@ -10,6 +10,17 @@ const getBaseUrl = () => {
   return process.env.NEXT_PUBLIC_API_URL || 'http://localhost:4000';
 };
 
+type JsonObject = Record<string, unknown>;
+
+function errorTextFromBody(body: unknown, fallback: string): string {
+  if (body && typeof body === 'object') {
+    const o = body as JsonObject;
+    if (typeof o.message === 'string') return o.message;
+    if (typeof o.error === 'string') return o.error;
+  }
+  return fallback;
+}
+
 export async function phoenixFetch<T>(
   path: string,
   token: string | undefined,
@@ -26,23 +37,23 @@ export async function phoenixFetch<T>(
     },
   });
   if (!res.ok) {
-    const err = await res.json().catch(() => ({ error: res.statusText }));
+    const err: unknown = await res.json().catch(() => ({ error: res.statusText }));
-    throw new Error((err as any).message || (err as any).error || res.statusText);
+    throw new Error(errorTextFromBody(err, res.statusText));
   }
   return res.json();
 }
 
 export async function getInfraNodes(token?: string) {
-  return phoenixFetch<{ nodes: any[]; stub?: boolean }>('/api/v1/infra/nodes', token);
+  return phoenixFetch<{ nodes: JsonObject[]; stub?: boolean }>('/api/v1/infra/nodes', token);
 }
 
 export async function getInfraStorage(token?: string) {
-  return phoenixFetch<{ storage: any[]; stub?: boolean }>('/api/v1/infra/storage', token);
+  return phoenixFetch<{ storage: JsonObject[]; stub?: boolean }>('/api/v1/infra/storage', token);
 }
 
 export async function getVMs(token?: string, node?: string) {
   const qs = node ? `?node=${encodeURIComponent(node)}` : '';
-  return phoenixFetch<{ vms: any[]; stub?: boolean }>(`/api/v1/ve/vms${qs}`, token);
+  return phoenixFetch<{ vms: JsonObject[]; stub?: boolean }>(`/api/v1/ve/vms${qs}`, token);
 }
 
 export async function getVMStatus(node: string, vmid: string, token?: string, type: 'qemu' | 'lxc' = 'qemu') {
@@ -57,15 +68,18 @@ export async function vmAction(node: string, vmid: string, action: 'start' | 'st
 }
 
 export async function getHealthSummary(token?: string) {
-  return phoenixFetch<{ status: string; updated_at: string; hosts: any[]; alerts: any[] }>('/api/v1/health/summary', token);
+  return phoenixFetch<{ status: string; updated_at: string; hosts: JsonObject[]; alerts: JsonObject[] }>(
+    '/api/v1/health/summary',
+    token
+  );
 }
 
 export async function getHealthAlerts(token?: string) {
-  return phoenixFetch<{ alerts: any[] }>('/api/v1/health/alerts', token);
+  return phoenixFetch<{ alerts: JsonObject[] }>('/api/v1/health/alerts', token);
 }
 
 export async function getTenantResources(token?: string) {
-  return phoenixFetch<{ resources: any[]; tenantId: string }>('/api/v1/tenants/me/resources', token);
+  return phoenixFetch<{ resources: JsonObject[]; tenantId: string }>('/api/v1/tenants/me/resources', token);
 }
 
 export async function getTenantHealth(token?: string) {

portal/src/lib/test-utils.tsx

@@ -1,6 +1,6 @@
-import React, { ReactElement } from 'react'
-import { render, RenderOptions } from '@testing-library/react'
 import { QueryClient, QueryClientProvider } from '@tanstack/react-query'
+import { render, RenderOptions } from '@testing-library/react'
+import React, { ReactElement } from 'react'
 
 // Create a test query client
 const createTestQueryClient = () =>

portal/src/types/next-auth.d.ts

@@ -5,6 +5,8 @@ declare module 'next-auth' {
   interface Session {
     accessToken?: string;
     roles?: string[];
+    /** Optional tenant scope for billing/dashboard GraphQL */
+    tenantId?: string;
     user?: DefaultSession['user'] & {
       id?: string;
       role?: string;