[Audit] Capture baseline validation, test, and dependency state

[ashleyshaw]

Audit Summary

Capture the current validation and dependency baseline before restructuring, including npm ci, validators, tests, coverage output, and dependency audit results.

Parent epic: #282.

Audit Checklist / Scope

• Record current branch and commit.
• Run or document npm ci.
• Run npm run validate:agents.
• Run npm run validate:workflows.
• Run npm run validate:json:schemas.
• Run npm test.
• Run npm audit or capture existing vulnerability count.
• Note which commands are mutating or noisy.

Findings / Risks

Known baseline risks: invalid JSON comments in schema files, mutating validation commands, zero coverage output, and dependency vulnerabilities.

Acceptance Criteria

• Audit scope and checklist completed.
• Findings and risks documented.
• Remediation actions assigned and tracked.
• Documentation/changelog updated if applicable.
• PR uses correct branch prefix audit/.

[linear-code]

LS-602

LS-1123

[ashleyshaw]

Completed and verified locally.

Evidence:

• Baseline report: .github/projects/active/portable-ai-plugin-restructure/portable-ai-plugin-restructure-baseline-report-2026-05-15.md
• Raw baseline output: .github/projects/active/portable-ai-plugin-restructure/portable-ai-plugin-restructure-baseline-command-output-2026-05-15.txt

Captured baseline:

• Current branch and commit were recorded.
• npm ci completed, with dependency warnings and 36 vulnerabilities recorded.
• npm run validate:agents passed.
• npm run validate:workflows passed with warnings recorded.
• npm run validate:json:schemas failure and mutating behaviour were recorded as baseline findings.
• npm test passed, with zero coverage and noisy import side effects recorded.
• npm audit --audit-level=low failed with the vulnerability count recorded.

Follow-up remediation was assigned to #311-#316, with dependency remediation intentionally kept separate from this audit slice.

[github-actions]

⚠️ This issue does not follow a required issue template.

Missing required section(s): Definition of Ready (DoR), Definition of Done (DoD)

The issue will remain open and flagged until the body is corrected.
Please update the issue with one of the official templates:

• https://github.com/lightspeedwp/.github/issues/new/choose

If this was opened by automation, update the automation to preserve the template sections before creating the issue.