web/ee/src/components/pages/settings/Billing/index.tsx-173-174 (1)

173-174: 🩺 Stability & Availability | 🟠 Major | ⚡ Quick win

Protect billing usage rendering when usage is unavailable.

usage! is only a type assertion, so Object.entries(usage!) becomes Object.entries(undefined) at runtime and crashes when the usage request fails. Guard the render and avoid casting undefined into quota props that currently read as unlimited; use an explicit unavailable/error state instead.

Applies to the usage rendering around lines 173-222.

web/oss/src/components/EnhancedUIs/Drawer/index.tsx-20-29 (1)

20-29: 🎯 Functional Correctness | 🟠 Major | ⚡ Quick win

Preserve resolver-form styles when merging width.

When styles is a function, baseStyles becomes undefined, so any caller-provided resolver styles are discarded whenever width is passed. Wrap the resolver and merge wrapper.width into the styles it returns instead of replacing the function.

web/oss/src/components/EvalRunDetails/components/views/ConfigurationView/utils.ts-177-183 (1)

177-183: 🎯 Functional Correctness | 🟠 Major | ⚡ Quick win

Preserve the required attachment discriminator.

PromptPreviewAttachment requires type: "image", but this object omits it and hides the mismatch with as unknown as. Add the discriminator or introduce a separate runtime type if all consumers intentionally use only url/alt.

Proposed fix

                     attachments.push({
+                        type: "image",
                         id: (item.id ?? `${index}`) as string,
                         url: item.url,
                         alt: typeof item.alt === "string" ? item.alt : undefined,
                     } as unknown as PromptPreviewAttachment)

web/oss/src/components/EvalRunDetails/atoms/query.ts-280-282 (1)

280-282: 🎯 Functional Correctness | 🟠 Major | ⚡ Quick win

Make batched lookup keys unique per reference.

runId: null is used by queryReferenceLookupAtomFamily, but the serializer at Line 291 still produces the same projectId::none key for every reference in that project. batchFn then overwrites entries in results, so one lookup can receive another reference’s revision. Include a stable descriptor/reference key in the serialized result key.

web/oss/src/components/EvalRunDetails/atoms/types.ts-6-12 (1)

6-12: 🎯 Functional Correctness | 🟠 Major | 🏗️ Heavy lift

Keep the runtime step shape aligned with the type.

scenarioSteps.ts runs each raw step through snakeToCamelCaseKeys before storing it, while this type explicitly permits reads such as trace_id and testcase_id through Record<string, any>. Those properties can type-check yet remain undefined at runtime. Preserve raw fields alongside camel-cased fields, or update consumers and types to use the actual camel-cased shape.

web/oss/src/components/EvalRunDetails/components/EvalTestcaseDrawerAdapter/drawerPayload.ts-2-3 (1)

2-3: 🗄️ Data Integrity & Integration | 🟠 Major | ⚡ Quick win

Preserve extra payload fields or narrow the contract.

The new index signature allows arbitrary keys, but buildEvaluationDrawerPayload returns only inputs, outputs, evaluators, and metrics. Any additional field accepted by the new contract is silently dropped. Return the payload with its extra fields preserved, or remove the index signature if extras are not supported.

web/oss/src/components/EvalRunDetails/components/columnVisibility/ColumnVisibilityPopoverContent.tsx-22-22 (1)

22-22: 🎯 Functional Correctness | 🟠 Major | ⚡ Quick win

Treat online evaluations as auto evaluations in the visibility map.

After adding "online", Lines 160-163 route it to the human metric set, while buildPreviewColumns.tsx and usePreviewEvaluations consistently map online evaluations to auto metrics. The visibility menu will therefore expose the wrong static metrics for online runs.

Proposed fix

-            evaluationType === "auto"
+            evaluationType === "auto" || evaluationType === "online"

web/oss/src/components/EvaluationRunsTablePOC/atoms/view.ts-681-685 (1)

681-685: 🎯 Functional Correctness | 🟠 Major | ⚡ Quick win

Read workflow variants from the query payload.

result.data is the query-observer object, so reading workflow_variants directly from it leaves variants empty and prevents the variant filter from showing options. Use the actual nested query payload or its selector instead of casting the observer object.

web/oss/src/components/Playground/Components/PlaygroundFocusDrawerAdapter/drawerPayload.ts-16-17 (1)

16-17: 🗄️ Data Integrity & Integration | 🟠 Major | ⚡ Quick win

Preserve extra payload keys in buildPlaygroundDrawerPayload.

The new index signature advertises arbitrary editor values, but the builder returns only inputs, suggestedFields, and outputs; any additional keys are silently lost. Destructure ...rest and spread it into the returned object, or keep the payload closed.

web/oss/src/components/SharedDrawers/AnnotateDrawer/assets/AnnotateDrawerTitle/index.tsx-131-132 (1)

131-132: 🗄️ Data Integrity & Integration | 🟠 Major | ⚡ Quick win

Do not cast optional trace IDs to Required here.

AnnotateDrawerIdsType allows either ID to be absent, but generateNewAnnotationPayloadData falls through to transforms.ts lines 503-509 and builds links with possibly undefined trace_id or span_id. Pass the optional shape through and omit links—or reject the save—unless both IDs are present.

web/oss/src/components/Sidebar/components/ListOfProjects.tsx-79-83 (1)

79-83: 🗄️ Data Integrity & Integration | 🟠 Major | 🏗️ Heavy lift

Do not cast organizations-list items to recover omitted default_workspace data.

The list response does not provide this details-only field, so the cast cannot restore it at runtime. Projects without organization_id can be silently dropped from organization menus, while deletion cleanup receives null instead of the deleted workspace key. Use a response that includes the workspace ID, fetch organization details before these operations, or handle missing IDs explicitly.

• web/oss/src/components/Sidebar/components/ListOfProjects.tsx#L79-L83: replace the cast-based lookup with a runtime-provided workspace/organization mapping.
• web/oss/src/components/Sidebar/components/ListOfOrgs.tsx#L803-L806: resolve the deleted workspace from a real details/current-context source before clearing workspace and project caches.

web/oss/src/pages/workspaces/accept.tsx-97-100 (1)

97-100: 🎯 Functional Correctness | 🟠 Major | ⚡ Quick win

Validate invite IDs before calling the accept endpoint.

workspaceId and projectId are optional here, but acceptWorkspaceInvite requires both strings and interpolates them into the request URL. These assertions only silence TypeScript; incomplete invites can send undefined in the path/query and then be consumed by the error/redirect flow. Reject incomplete invites before setting accept.current/processedTokens, or change the service contract to support missing IDs.

web/oss/src/components/pages/evaluations/NewEvaluation/Components/NewEvaluationModalInner.tsx-220-231 (1)

220-231: 🗄️ Data Integrity & Integration | 🟠 Major | 🏗️ Heavy lift

Hydrate evaluator display metadata before building preview payloads.

The comment says these rows always lack slug and name, but the resulting objects are passed as evaluators. usePreviewEvaluations later builds step keys from ev.slug, so preview requests can emit keys such as invocation.undefined and evaluator mappings lose their identity. Resolve the slug/name from the workflow molecule or populate them in the paginated store; widening the type only masks the missing runtime data.

web/oss/src/lib/hooks/usePreviewEvaluations/index.ts-420-427 (1)

420-427: 🗄️ Data Integrity & Integration | 🟠 Major | 🏗️ Heavy lift

Hydrate or reject the testset before creating the run.

The cast in Lines 424-426 does not populate testset.data. When a caller supplies a non-revision testset, createScenarios dereferences missing data and throws after the run POST has already succeeded, leaving an orphaned evaluation. Populate the testcase data for every path, or make scenario creation consume the canonical unhydrated testset representation before submitting the run.

Also applies to: 450-472

web/oss/src/components/TestsetsTable/hooks/useTestsetsColumns.tsx-114-115 (1)

114-115: 🎯 Functional Correctness | 🟠 Major | ⚡ Quick win

Copy the canonical row ID instead of _id.

TestsetTableRow uses id, so record._id is normally undefined. The new fallback passes "" to copyToClipboard, which intentionally returns without copying; the Copy ID action is therefore broken for every normal row.

Proposed fix

-                                            copyToClipboard(String(record._id ?? ""))
+                                            copyToClipboard(record.id)

web/oss/src/state/workspace/atoms/mutations.ts-26-27 (1)

26-27: 🗄️ Data Integrity & Integration | 🟠 Major | ⚡ Quick win

Send the object payload required by updateOrganization.

The cast only silences TypeScript—the request body is still a bare JSON string, not {name: string}. This can fail the organization PATCH after the workspace update has already succeeded.

Proposed fix

-            // typed as-is (latent bug): sends the bare name string, not {name}, as the PATCH body
-            updateOrganization(organizationId, name as unknown as {name: string}),
+            updateOrganization(organizationId, {name}),

web/oss/src/components/pages/evaluations/onlineEvaluation/assets/helpers.ts-84-85 (1)

84-85: 🗄️ Data Integrity & Integration | 🟠 Major | ⚡ Quick win

Validate the wire value instead of asserting FilterValue.

as FilterValue is compile-time only; malformed or null API values can still enter local filter state and reach inferReferenceOptionKey. Parse and reject/normalize the payload with the project’s boundary validator before constructing Filter.

As per coding guidelines, “Keep Zod validation at API boundaries using safeParseWithLogging from @agenta/entities/shared.”

Source: Coding guidelines

web/oss/src/components/pages/observability/components/ObservabilityHeader/index.tsx-362-367 (1)

362-367: 🗄️ Data Integrity & Integration | 🟠 Major | ⚡ Quick win

Do not cast away nullable trace rows.

A stale selection can produce {key: undefined, data: null}, violating TestsetTraceData. The cast only suppresses TypeScript and can pass invalid rows to the drawer; filter missing nodes/data before calling setTestsetDrawerData.

web/oss/src/lib/Types.ts-71-80 (1)

71-80: 🗄️ Data Integrity & Integration | 🟠 Major | 🏗️ Heavy lift

Align PreviewTestCase with its documented legacy shape.

data is required, but the interface says legacy cases carry inputs instead. A legacy payload without data cannot satisfy this type and may be treated as if data always exists. Use a union or make data optional and normalize data ?? inputs at the boundary.

web/oss/src/components/pages/evaluations/utils.ts-87-93 (1)

87-93: 🎯 Functional Correctness | 🟠 Major | ⚡ Quick win

Do not discard variant-only invocation metadata.

The early return at Line 113 still ignores rawVariantId. If the payload contains only a variant identifier, parseInvocationMetadata returns null and the new variantId never reaches downstream export resolution.

Proposed fix

-    if (!rawAppId && !rawRevisionId && !rawVariantName) return null
+    if (!rawAppId && !rawRevisionId && !rawVariantId && !rawVariantName) return null

web/oss/src/services/evaluationRuns/api/types.ts-11-14 (1)

11-14: 🩺 Stability & Availability | 🟠 Major | ⚡ Quick win

Do not expose optional data while downstream code assumes it is required.

usePreviewEvaluations.createScenarios dereferences testset.data without checking it. An unhydrated Testset can therefore reach this path and crash at runtime despite compiling through the intersection type. Introduce an explicit hydrated-testset type and validate/normalize the payload before calling createScenarios (or make data required only after hydration).

web/tsc-error-inventory.md-8-16 (1)

8-16: 📐 Maintainability & Code Quality | 🟡 Minor | ⚡ Quick win

Make the inventory snapshot internally consistent.

The document reports final counts of 0, but then calls a 105 OSS + 11 EE-only section “final,” describes Wave 1/2 work as pending, and later presents the 591/525 baselines without clearly labeling them as historical. It also says the report was generated on July 22, 2026 while naming July 24, 2026 as the final wave date, which is still in the future as of July 23, 2026.

Either regenerate the inventory from the final commands with the actual date, or explicitly label the wave plan and baseline sections as historical/pre-fix snapshots.

Also applies to: 18-53, 55-67

web/oss/src/components/EvalRunDetails/atoms/table/scenarios.ts-274-276 (1)

274-276: 🎯 Functional Correctness | 🟡 Minor | ⚡ Quick win

Keep a runtime projectId guard inside queryFn.

enabled controls when the query is enabled for automatic/background fetching, but it is not a runtime invariant for manual refetches. If projectId is null, projectId! forwards null to fetchEvaluationScenarioWindow; handle it inside the query function before making the request.

web/oss/src/components/EvalRunDetails/components/views/OverviewView/components/OverviewPlaceholders.tsx-14-16 (1)

14-16: 🎯 Functional Correctness | 🟡 Minor | ⚡ Quick win

Preserve falsy numeric React content.

ReactNode allows 0, but the placeholder render sites use title ? and description ?, so title={0} or description={0} will silently disappear. Use explicit nullish checks instead.

web/packages/agenta-ui/src/InfiniteVirtualTable/features/InfiniteVirtualTableFeatureShell.tsx-142-146 (1)

142-146: 🎯 Functional Correctness | 🟡 Minor | ⚡ Quick win

Wire locale.emptyText through or remove the prop.

Callers can now pass this option successfully, but the component explicitly drops it, so custom empty-state text never renders. Forward locale to the inner table or avoid exposing a no-op public prop.

web/oss/src/components/TestsetsTable/components/TestsetsHeaderFilters.tsx-49-58 (1)

49-58: 🎯 Functional Correctness | 🟡 Minor | ⚡ Quick win

Use an AntD v6-supported Popover style key.

The body style key is legacy and ignored by AntD v6, so maxWidth and the panel styles here won’t apply. Use styles.container or styles.content for the v6 semantic node instead of casting invalid keys.

web/oss/src/components/EvalRunDetails/utils/renderChatMessages.tsx (1)

173-176: 📐 Maintainability & Code Quality | 🔵 Trivial | ⚡ Quick win

Remove the unreachable "table" checks instead of casting view to string.

After the early return for view === "table", these branches cannot observe "table". Remove the dead conditions, or capture the predicate before the return if a future path requires it. The added explanations also exceed the one-short-line comment guideline.

Also applies to: 233-236

Source: Coding guidelines

web/oss/src/components/References/cells/ApplicationCells.tsx (1)

35-36: 📐 Maintainability & Code Quality | 🔵 Trivial | ⚡ Quick win

Preserve generic atom-value inference in both default-store wrappers.

The Atom<unknown> parameter and as typeof useAtomValue assertion hide the atom-to-result type relationship. Replace both wrappers with a generic <Value,>(atom: Atom<Value>) => useAtomValue(atom, {store: defaultStore}) implementation and verify it against Jotai 2.16.1.

• web/oss/src/components/References/cells/ApplicationCells.tsx#L35-L36: replace the casted wrapper with the generic implementation.
• web/oss/src/components/References/cells/TestsetCells.tsx#L24-L25: apply the same generic wrapper.

web/oss/src/components/SharedDrawers/TraceDrawer/components/TraceContent/components/AnnotationTabItem/index.tsx (1)

193-194: 📐 Maintainability & Code Quality | 🔵 Trivial | ⚡ Quick win

Model the enriched annotation instead of using any.

mergedAnnWithEvaluator adds evaluator at Line 97, so this is not dead access. However, groupedByReference is typed as AnnotationDto[], forcing the cast here and hiding the actual runtime contract. Introduce an enriched annotation type for the mapped/grouped values and read evaluator through that type.

web/oss/src/components/SharedDrawers/TraceDrawer/components/TraceSidePanel/TraceLinkedSpans/index.tsx (1)

57-58: 📐 Maintainability & Code Quality | 🔵 Trivial | ⚡ Quick win

Type the live trace field instead of hiding it behind any.

web/oss/src/components/SharedDrawers/TraceDrawer/store/traceDrawerStore.ts attaches trace to merged links at Lines 637-642, so this access is live—not dead. Add the optional field to TraceDrawerSpanLink or expose a shared enriched-link type, then remove the cast and misleading comment.