setup

Purpose

Thin check-centric setup per the uniform setup contract (docs/PLUGIN-PHILOSOPHY.md "Setup is explicit and repeatable" in the marketplace repository): check inspects and reports, apply resolves. This plugin owns no consumer-project configuration. actionlint auto-discovers its own optional config from the repository, and the tunables are the native userConfig options (the actionlint_enabled toggle and stdin_read_timeout). Every prerequisite is a PATH binary the plugin never bundles, and the plugin never installs system packages, so apply is guidance-only with no write path. It never modifies the repository, user settings, or the plugin cache.

Action routing: no argument or check runs the check; apply runs the check first, then offers remediation guidance. Both are non-interactive. Never prompt when the action is given.

check (read-only)

The hook script (${CLAUDE_PLUGIN_ROOT}/hooks/actionlint-check.sh) is the single source of truth for what it requires and how it resolves things.

Read it first. Probe what it actually does, don't recite this file. Then run each probe via Bash and report a PASS/FAIL/INFO table with one remediation line per FAIL. Do not modify anything.

When the plugin's toggle is disabled, every prerequisite absence downgrades from FAIL to INFO. The hook exits through its enabled-gate before probing anything, so a deliberately disabled plugin is not broken. Report the probes informationally and note that re-enabling restores the FAIL semantics.

1. Bash version. Check against the hook's documented floor (README Requirements), noting any features the hook degrades without (for example telemetry's EPOCHREALTIME, a Bash 5.0+ builtin).
2. jq. command -v jq. FAIL if absent: the hook then skips with a visible once-per-session notice instead of linting.
3. actionlint. command -v actionlint. FAIL if absent: the hook skips workflow lint with a visible once-per-session notice (it ships no binary of its own).
4. actionlint config. INFO: actionlint auto-discovers an optional .github/actionlint.yaml from the repository when present. It is not required. actionlint runs with its built-in defaults without one. Report whether one exists for the reader's awareness; its absence is not a FAIL.
5. Hook toggle. Report the effective actionlint_enabled value: ${user_config.actionlint_enabled} (unexpanded or empty means default true; any value other than true disables the hook). 5b. Stdin read timeout. INFO: report the effective stdin_read_timeout value: ${user_config.stdin_read_timeout} (unexpanded or empty means default 2 seconds, minimum 1). It is an IDLE bound. Any byte arriving resets it, so it fires only once the pipe has gone silent for that long, at which point this hook fails open. A value read -t will not accept, or 0, falls back to the default.
6. Hook registration. INFO: confirm the plugin is enabled for this project (/plugin → Installed) rather than parsing settings files.