@open-agent-toolkit/cli 0.2.64 → 0.2.65

package/assets/bundle-metadata.json

@@ -1,4 +1,4 @@
 {
   "schemaVersion": 1,
-  "oatVersion": "0.2.64"
+  "oatVersion": "0.2.65"
 }

package/assets/docs/contributing/skills.md

@@ -204,9 +204,14 @@ resolution. `resolveSkillVersion` in
 runtime helper and the validators cannot disagree.
 
 The top-level `version` field remains supported as a deprecated alias. Every
-bundled skill still uses it today, so `pnpm oat:validate-skills` reports each
-one as a non-blocking warning; the value is still read, and nothing breaks.
-Migrating the bundled skills is tracked separately.
+bundled skill now declares `metadata.version` and carries no top-level
+`version`, so `pnpm oat:validate-skills` reports no alias warnings on the
+bundled tree. The alias is retained for third-party skills installed from
+packs, which may still carry it; it retires on the schedule recorded in
+`DR-260908-bundled-skills-declare` — the warning becomes an error in the first
+release after 0.2.65 that changes the validator, and the resolver's top-level
+read is removed one release after that error has produced no findings on the
+bundled tree.
 
 A skill that carries both fields with different values is a conflict. The
 resolver reports the `metadata.version` value together with the conflict, and
@@ -214,7 +219,12 @@ the callers that must not guess act on it: validation reports an error rather
 than silently picking one, and canonical role resolution treats the identity as
 invalid. The runtime version readers still return the `metadata.version` value,
 so an installed-versus-bundled comparison keeps working while the conflict is
-being fixed. Carrying both with the _same_ value is accepted.
+being fixed. Carrying both with the _same_ value resolves without a conflict and
+without an alias warning, because `metadata.version` wins. A bundled skill must
+still carry `metadata.version` alone: the corpus sweep in
+`packages/cli/src/validation/skills.test.ts` fails on any column-0 `version:`
+line under `.agents/skills`, which is the only check that catches the
+same-value case.
 
 ### The version is gated
 
@@ -227,7 +237,7 @@ resolved version, so it enforces the bump whether the skill declares
 of Done) and in CI; a changed skill whose version matches `origin/main` fails
 the gate. The deprecation warning above is deliberately not part of that gate:
 `check:skill-bumps` fails on any finding it receives, so an alias warning
-routed through it would fail every changed skill until the migration lands.
+routed through it would fail every changed skill that still carried one.
 
 ## Practical Authoring Flow
 

package/assets/public-package-versions.json

@@ -1,6 +1,6 @@
 {
-  "cli": "0.2.64",
-  "docs-config": "0.2.64",
-  "docs-theme": "0.2.64",
-  "docs-transforms": "0.2.64"
+  "cli": "0.2.65",
+  "docs-config": "0.2.65",
+  "docs-theme": "0.2.65",
+  "docs-transforms": "0.2.65"
 }

package/assets/skills/analyze/SKILL.md

@@ -1,10 +1,11 @@
 ---
 name: analyze
-version: 0.2.0
 description: Multi-angle analysis of existing artifacts, codebases, documents, or systems. Examines what you have from six analysis angles and produces structured findings with prioritized recommendations.
 argument-hint: 'target [--context path]'
 user-invocable: true
 allowed-tools: Read, Glob, Grep, Bash, WebSearch, WebFetch, AskUserQuestion, Agent, mcp__*
+metadata:
+  version: 0.2.1
 ---
 
 # /analyze

package/assets/skills/authoring-docs/SKILL.md

@@ -1,11 +1,12 @@
 ---
 name: authoring-docs
-version: 1.0.0
 description: Use when creating, restructuring, migrating, auditing, or reviewing technical documentation for software projects. Provides evidence-first, provider-portable Markdown authoring standards.
 argument-hint: '[docs task or target path]'
 disable-model-invocation: false
 allowed-tools: Read, Write, Bash, Glob, Grep, AskUserQuestion
 user-invocable: true
+metadata:
+  version: 1.0.1
 ---
 
 # Authoring Docs

package/assets/skills/compare/SKILL.md

@@ -1,10 +1,11 @@
 ---
 name: compare
-version: 0.1.1
 description: Domain-aware comparative analysis with clear recommendations. Compares options across auto-detected or user-specified dimensions and produces a qualitative assessment with a clear winner.
 argument-hint: 'item1 item2 [item3...] [--save] [--context path] [--dimensions "dim1, dim2, ..."]'
 user-invocable: true
 allowed-tools: Read, Glob, Grep, Bash, WebSearch, WebFetch, AskUserQuestion, Agent, mcp__*
+metadata:
+  version: 0.1.2
 ---
 
 # /compare

package/assets/skills/create-agnostic-skill/SKILL.md

@@ -1,11 +1,12 @@
 ---
 name: create-agnostic-skill
-version: 1.4.2
 description: Use when adding a reusable workflow skill for AI coding agents. Scaffolds a new .agents/skills skill using the Agent Skills open standard.
 argument-hint: '[skill-name]'
 disable-model-invocation: true
 allowed-tools: Read, Write, Bash, Glob, Grep, AskUserQuestion
 user-invocable: true
+metadata:
+  version: 1.4.3
 ---
 
 # Create Skill

package/assets/skills/deep-research/SKILL.md

@@ -1,10 +1,11 @@
 ---
 name: deep-research
-version: 0.2.0
 description: Comprehensive research orchestrator that classifies topics, dispatches parallel research-angle workers, and produces structured artifacts using domain-specific schemas.
 argument-hint: 'topic [--depth surface|standard|exhaustive] [--focus angle] [--context path] [output-path]'
 user-invocable: true
 allowed-tools: Read, Glob, Grep, Bash, WebSearch, WebFetch, AskUserQuestion, Agent, mcp__*
+metadata:
+  version: 0.2.1
 ---
 
 # /deep-research

package/assets/skills/explainer-kit/SKILL.md

@@ -1,9 +1,10 @@
 ---
 name: explainer-kit
-version: 2.1.0
 description: Use when building destination-neutral visual explainer artifacts from explicit, versioned inputs.
 user-invocable: true
 allowed-tools: Read, Write, Edit, Bash, Grep, Glob, Agent, mcp__*
+metadata:
+  version: 2.1.1
 ---
 
 # Explainer Kit

package/assets/skills/oat-agent-instructions-analyze/SKILL.md

@@ -1,10 +1,11 @@
 ---
 name: oat-agent-instructions-analyze
-version: 1.12.0
 description: Run when you need to evaluate agent instruction file coverage, quality, and drift. Produces a severity-rated analysis artifact. Run before oat-agent-instructions-apply to identify what needs improvement.
 disable-model-invocation: true
 user-invocable: true
 allowed-tools: Read, Write, Bash(git:*), Glob, Grep, AskUserQuestion, Task
+metadata:
+  version: 1.12.1
 ---
 
 # Agent Instructions Analysis

package/assets/skills/oat-agent-instructions-apply/SKILL.md

@@ -1,10 +1,11 @@
 ---
 name: oat-agent-instructions-apply
-version: 1.7.0
 description: Run when you have an agent instructions analysis artifact and want to generate or update instruction files. Creates a branch, generates files from templates, and optionally opens a PR.
 disable-model-invocation: true
 user-invocable: true
 allowed-tools: Read, Write, Edit, Bash(git:*), Bash(gh:*), Glob, Grep, AskUserQuestion
+metadata:
+  version: 1.7.1
 ---
 
 # Agent Instructions Apply

package/assets/skills/oat-brainstorm/SKILL.md

@@ -1,10 +1,11 @@
 ---
 name: oat-brainstorm
-version: 1.3.6
 description: Use when the user explicitly invokes the `brainstorm` verb, including `/oat-brainstorm`, "let's brainstorm", "brainstorm this", "can we brainstorm X", or "help me brainstorm X". For ambiguous exploratory phrasing ("I've been thinking", "what if", "help me think through"), do NOT auto-enter; respond conversationally and offer mode only after ≥2 sustained exploratory turns. Do NOT use for review, debug, PR, status, implementation, or active-workflow questions.
 disable-model-invocation: false
 user-invocable: true
 allowed-tools: Read, Write, Bash, Glob, Grep, AskUserQuestion
+metadata:
+  version: 1.3.7
 ---
 
 # Brainstorm

package/assets/skills/oat-cursor-cloud-projects/SKILL.md

@@ -1,10 +1,11 @@
 ---
 name: oat-cursor-cloud-projects
-version: 1.1.1
 description: Use when OAT work is mentioned in a Cursor Cloud environment. Orients agents to cloud detection, repo-rooted project homes, user-first assets, CLI availability, and Cursor dispatch context without owning lifecycle execution.
 disable-model-invocation: false
 user-invocable: true
 allowed-tools: Read, Write, Bash, Glob, Grep
+metadata:
+  version: 1.1.2
 ---
 
 # OAT in Cursor Cloud

package/assets/skills/oat-dispatch-subagents/SKILL.md

@@ -1,10 +1,11 @@
 ---
 name: oat-dispatch-subagents
-version: 1.2.6
 description: Use when an OAT skill or workflow needs provider-neutral selection, launch, recovery, or evidence for bounded subagent work without project lifecycle policy.
 disable-model-invocation: true
 user-invocable: false
 allowed-tools: Read
+metadata:
+  version: 1.2.7
 ---
 
 # Dispatching OAT Subagents

package/assets/skills/oat-docs/SKILL.md

@@ -1,11 +1,12 @@
 ---
 name: oat-docs
-version: 1.0.2
 description: Use when a user asks questions about OAT workflows, CLI commands, skill authoring, configuration, or project lifecycle. Answers questions by reading locally-bundled OAT documentation.
 argument-hint: '[question]'
 disable-model-invocation: false
 user-invocable: true
 allowed-tools: Read, Glob, Grep, AskUserQuestion
+metadata:
+  version: 1.0.3
 ---
 
 # OAT Docs

package/assets/skills/oat-docs-analyze/SKILL.md

@@ -1,10 +1,11 @@
 ---
 name: oat-docs-analyze
-version: 1.5.0
 description: Run when you need to evaluate documentation structure, navigation, and coverage against the OAT docs app contract. Produces a severity-rated analysis artifact for oat-docs-apply.
 disable-model-invocation: true
 user-invocable: true
 allowed-tools: Read, Write, Bash(git:*), Glob, Grep, AskUserQuestion, Task
+metadata:
+  version: 1.5.1
 ---
 
 # Docs Analysis

package/assets/skills/oat-docs-apply/SKILL.md

@@ -1,10 +1,11 @@
 ---
 name: oat-docs-apply
-version: 1.3.0
 description: Run when you have a docs analysis artifact and want to generate or update documentation structure and content. Creates a branch, applies approved changes, and optionally opens a PR.
 disable-model-invocation: true
 user-invocable: true
 allowed-tools: Read, Write, Edit, Bash(git:*), Bash(gh:*), Glob, Grep, AskUserQuestion
+metadata:
+  version: 1.3.1
 ---
 
 # Docs Apply

package/assets/skills/oat-docs-authoring/SKILL.md

@@ -1,11 +1,12 @@
 ---
 name: oat-docs-authoring
-version: 1.0.0
 description: Use when authoring or restructuring targeted content inside an existing OAT/Fumadocs docs app. Preserves OAT docs navigation, generated indexes, and validation boundaries.
 argument-hint: '[docs task or target path]'
 disable-model-invocation: false
 allowed-tools: Read, Write, Bash, Glob, Grep, AskUserQuestion
 user-invocable: true
+metadata:
+  version: 1.0.1
 ---
 
 # OAT Docs Authoring

package/assets/skills/oat-docs-bootstrap/SKILL.md

@@ -1,11 +1,12 @@
 ---
 name: oat-docs-bootstrap
-version: 1.2.0
 description: Use when bootstrapping a new OAT docs app in a repo. Guides the user through preflight detection, richer input gathering than the raw CLI, `oat docs init` invocation with gated post-patches for open CLI gaps, build verification, post-scaffold config inspection, and an educational walkthrough. Supports Fumadocs (full path) and MkDocs (lean path with defined minimum contract).
 argument-hint: '<optional-target-dir>'
 disable-model-invocation: true
 user-invocable: true
 allowed-tools: Read, Write, Edit, Bash, Glob, Grep, AskUserQuestion
+metadata:
+  version: 1.2.1
 ---
 
 # Docs Bootstrap

package/assets/skills/oat-doctor/SKILL.md

@@ -1,11 +1,12 @@
 ---
 name: oat-doctor
-version: 1.2.1
 description: Use when you need to diagnose your OAT setup, check for outdated skills, identify misconfigurations, or get a summary of installed tools and config. Runs health checks and recommends corrective actions.
 argument-hint: '[--summary]'
 disable-model-invocation: true
 user-invocable: true
 allowed-tools: Read, Bash, Glob, Grep, AskUserQuestion
+metadata:
+  version: 1.2.2
 ---
 
 # OAT Doctor

package/assets/skills/oat-explainer-kit/SKILL.md

@@ -1,10 +1,11 @@
 ---
 name: oat-explainer-kit
-version: 1.0.7
 description: Use when building project explainers or recaps from OAT configuration, state, and lifecycle artifacts.
 disable-model-invocation: false
 user-invocable: true
 allowed-tools: Read, Write, Edit, Bash, Grep, Glob, AskUserQuestion
+metadata:
+  version: 1.0.8
 ---
 
 # OAT Explainer Kit

package/assets/skills/oat-explainer-kit/scripts/check-core.mjs

@@ -104,11 +104,331 @@ function failure({
   };
 }
 
-function readFrontmatterVersion(content) {
-  const match = content.match(/^version:\s*([^\s#]+)\s*(?:#.*)?$/m);
+/**
+ * Read a skill's canonical version from its frontmatter, with
+ * `metadata.version` taking precedence over the deprecated top-level `version`
+ * alias.
+ *
+ * ACCEPTED EXCEPTION to the repository rule that only
+ * `packages/cli/src/commands/shared/frontmatter.ts` implements this precedence:
+ * this script is installed into user projects by pack install, where it can
+ * import neither that resolver nor the `yaml` package, so it carries a
+ * self-contained reader. The parity contract
+ * `tools/smoke/explainer-kit/check-core-version-parity.test.mjs` runs one
+ * shared fixture corpus — plus every bundled `SKILL.md` — through this reader
+ * and the canonical resolver and requires the same answer; a change to the
+ * canonical precedence rule must update those fixtures and this reader
+ * together.
+ *
+ * Anything the canonical resolver cannot resolve cleanly returns `null` so the
+ * compatibility check fails closed instead of guessing: a conflict between the
+ * two positions, a malformed block, a duplicate key, a tagged, anchored, or
+ * aliased scalar, and a plain scalar YAML would read as a number, boolean, or
+ * null.
+ *
+ * Deliberate limits of a parser-free reader, all of which fail closed rather
+ * than guess a version: flow collections (`metadata: {version: 1.2.3}`), block
+ * scalars, quoted keys, quote escape sequences, multi-line plain scalars, and
+ * document markers inside the block all return `null` even where a full YAML
+ * parser would resolve them. Nothing in the authoring templates emits those
+ * shapes.
+ *
+ * Every key and value in the block is checked, not just `version`, and the
+ * whole block is walked to any depth, so a syntax error anywhere in it fails
+ * closed rather than leaving a readable version behind. What remains outside
+ * the reader's reach is the content of a shape it refuses outright — the body
+ * of a block scalar, or anything inside a flow collection — which it never
+ * parses because it never accepts the shape that introduces it.
+ */
+export function readFrontmatterVersion(content) {
+  const block = frontmatterBlock(content);
+  if (block === null) {
+    return null;
+  }
+
+  const root = readBlockMap(block.split('\n').map(classifyLine), -1);
+  if (root === null || (root.indent !== null && root.indent !== 0)) {
+    return null;
+  }
+
+  let topLevel;
+  let metadata;
+  let unusable = false;
+
+  for (const child of root.children) {
+    if (child.name === 'version') {
+      const scalar = declaredScalar(child);
+      if (scalar === null) {
+        unusable = true;
+      } else {
+        topLevel = scalar;
+      }
+      continue;
+    }
+    if (child.name === 'metadata') {
+      // A `metadata:` key with a scalar or flow value is not the block map the
+      // canonical resolver requires, and one with no children is a null scalar.
+      if (scalarText(child.value) !== '' || child.map.indent === null) {
+        return null;
+      }
+      const nested = child.map.children.find(
+        (entry) => entry.name === 'version',
+      );
+      if (nested !== undefined) {
+        const scalar = declaredScalar(nested);
+        if (scalar === null) {
+          unusable = true;
+        } else {
+          metadata = scalar;
+        }
+      }
+    }
+  }
+
+  if (unusable) {
+    return null;
+  }
+  if (metadata !== undefined) {
+    return topLevel !== undefined && topLevel !== metadata ? null : metadata;
+  }
+  return topLevel ?? null;
+}
+
+function frontmatterBlock(content) {
+  const match = content.match(/^---\n([\s\S]*?)\n---/);
   return match?.[1] ?? null;
 }
 
+/**
+ * Sort one frontmatter line into the few shapes this reader understands.
+ *
+ * A key must be followed by `:` and then whitespace or the end of the line,
+ * which is what YAML requires of a block mapping: `version:1.2.3` is a plain
+ * scalar, not a key, and the canonical resolver reads no version from it. A tab
+ * in the indentation is never valid YAML indentation, and a quoted key is a
+ * shape this reader refuses rather than compares raw against a plain one.
+ */
+function classifyLine(line) {
+  if (line.trim() === '') {
+    return { kind: 'blank' };
+  }
+  const indentation = line.match(/^[ \t]*/)[0];
+  if (indentation.includes('\t')) {
+    return { kind: 'invalid' };
+  }
+  const indent = indentation.length;
+  const rest = line.slice(indent);
+  if (rest.startsWith('#')) {
+    return { kind: 'comment', indent };
+  }
+  const key = rest.match(/^([^\s:#]+):(?=[ \t]|$)([ \t].*)?$/);
+  // A key is a plain scalar too: a quoted key is a shape this reader refuses
+  // rather than compares raw against a plain one, and a key opening with an
+  // indicator is not a key at all.
+  if (key === null || /^["']/.test(key[1]) || !isPlainScalar(key[1])) {
+    return { kind: 'invalid', indent };
+  }
+  return { kind: 'key', indent, name: key[1], value: key[2] ?? '' };
+}
+
+/**
+ * Read one block map and everything under it, rejecting every structure this
+ * reader cannot validate: an inconsistent indent, a duplicate key at any depth,
+ * a value shape it cannot read, or a line it cannot classify. Rejection is
+ * always `null`, never a guess.
+ */
+function readBlockMap(lines, parentIndent) {
+  let indent = null;
+  const names = [];
+  const children = [];
+
+  for (let index = 0; index < lines.length; ) {
+    const line = lines[index];
+    if (line.kind === 'invalid') {
+      return null;
+    }
+    if (line.kind === 'blank' || line.kind === 'comment') {
+      index += 1;
+      continue;
+    }
+    if (line.indent <= parentIndent) {
+      return null;
+    }
+    if (indent === null) {
+      indent = line.indent;
+    }
+    if (line.indent !== indent) {
+      return null;
+    }
+    const identity = keyIdentity(line.name);
+    if (names.includes(identity) || !isReadableValue(line.value)) {
+      return null;
+    }
+    names.push(identity);
+
+    let end = index + 1;
+    while (
+      end < lines.length &&
+      (lines[end].kind === 'blank' ||
+        lines[end].kind === 'comment' ||
+        lines[end].kind === 'invalid' ||
+        lines[end].indent > indent)
+    ) {
+      end += 1;
+    }
+    const body = lines.slice(index + 1, end);
+    const map = body.some((entry) => entry.kind !== 'blank')
+      ? readBlockMap(body, indent)
+      : { indent: null, children: [] };
+    // A key cannot own both a scalar and a nested map. This also refuses a
+    // multi-line plain scalar, whose continuation lines arrive here as
+    // children: folding one is beyond a parser-free reader, so it fails closed.
+    if (
+      map === null ||
+      (map.indent !== null && scalarText(line.value) !== '')
+    ) {
+      return null;
+    }
+    children.push({ ...line, map });
+    index = end;
+  }
+
+  return { indent, children };
+}
+
+/**
+ * The scalar a key declares, or `null` when it declares something this reader
+ * refuses to read as a version — including a multi-line scalar or a nested map,
+ * both of which arrive here as children.
+ */
+function declaredScalar(child) {
+  return child.map.indent === null ? scalarValue(child.value) : null;
+}
+
+/**
+ * Whether a raw value is a shape this reader can read at all. Every key's value
+ * is checked, not just `version`, so no syntax error is silently walked past:
+ * the canonical resolver rejects the whole document for any of them.
+ */
+function isReadableValue(raw) {
+  const text = raw.trim();
+  if (text === '' || text.startsWith('#')) {
+    return true;
+  }
+  if (/^["']/.test(text)) {
+    return quotedScalar(text) !== null;
+  }
+  return isPlainScalar(scalarText(text));
+}
+
+/**
+ * Whether a comment-stripped value is a plain scalar YAML reads as a string.
+ *
+ * Refused: every character YAML forbids at the start of a plain scalar — the
+ * flow, block-scalar, anchor, alias, and tag indicators, and the reserved `@`,
+ * `` ` ``, and `%` — plus `-`, `?`, and `:` when whitespace or the end of the
+ * value follows, which is what makes them indicators rather than the first
+ * letter of a word. A `:` anywhere in the value gets the same treatment,
+ * because `: ` opens a nested mapping instead of continuing the scalar.
+ *
+ * Still readable, because none of these is an indicator in block context: a `:`
+ * inside a word (`https://example.com`), a `,` after the first character
+ * (`allowed-tools: Read, Write`), and a leading `-` or `?` that starts a word
+ * (`-word`).
+ */
+function isPlainScalar(plain) {
+  return (
+    !/^[&*!|>[\]{},@`%]/.test(plain) &&
+    !/^[-?](?:[ \t]|$)/.test(plain) &&
+    !/:(?:[ \t]|$)/.test(plain)
+  );
+}
+
+/**
+ * The identity YAML gives a mapping key, so two spellings of one key are caught
+ * as the duplicate they are: `true` and `True` are the same boolean key, and
+ * `1` and `01` the same integer key, even though their text differs.
+ */
+function keyIdentity(name) {
+  if (/^(null|Null|NULL|~)$/.test(name)) {
+    return 'null';
+  }
+  if (/^(true|True|TRUE)$/.test(name)) {
+    return 'bool:true';
+  }
+  if (/^(false|False|FALSE)$/.test(name)) {
+    return 'bool:false';
+  }
+  if (
+    /^[-+]?[0-9]+$/.test(name) ||
+    /^0x[0-9a-fA-F]+$/.test(name) ||
+    /^0o[0-7]+$/.test(name) ||
+    /^[-+]?(\.[0-9]+|[0-9]+(\.[0-9]*)?)([eE][-+]?[0-9]+)?$/.test(name)
+  ) {
+    return `number:${Number(name)}`;
+  }
+  return `string:${name}`;
+}
+
+/**
+ * Strip a trailing comment from a raw value. YAML only starts a comment at a
+ * `#` preceded by whitespace, so `1.2.3#note` is the string it looks like.
+ */
+function scalarText(raw) {
+  const text = raw.trim();
+  if (text.startsWith('#')) {
+    return '';
+  }
+  const comment = text.search(/[ \t]#/);
+  return (comment === -1 ? text : text.slice(0, comment)).trim();
+}
+
+function quotedScalar(text) {
+  const quoted =
+    text.match(/^"([^"\\]*)"(?:[ \t]+#.*)?$/) ??
+    text.match(/^'([^']*)'(?:[ \t]+#.*)?$/);
+  return quoted?.[1] ?? null;
+}
+
+/**
+ * Read one plain or quoted string scalar, returning `null` for every value the
+ * canonical resolver refuses to treat as a version string.
+ */
+function scalarValue(raw) {
+  const text = raw.trim();
+  if (text === '' || text.startsWith('#')) {
+    return null;
+  }
+
+  if (/^["']/.test(text)) {
+    const quoted = quotedScalar(text)?.trim();
+    return quoted === undefined || quoted === '' ? null : quoted;
+  }
+
+  const plain = scalarText(text);
+  if (plain === '') {
+    return null;
+  }
+  if (!isPlainScalar(plain)) {
+    return null;
+  }
+  // Core-schema scalars that resolve to a non-string type: `version: 1.10` is
+  // the number 1.1, never the string an author meant to write.
+  if (
+    /^(null|Null|NULL|~)$/.test(plain) ||
+    /^(true|True|TRUE|false|False|FALSE)$/.test(plain) ||
+    /^[-+]?[0-9]+$/.test(plain) ||
+    /^0o[0-7]+$/.test(plain) ||
+    /^0x[0-9a-fA-F]+$/.test(plain) ||
+    /^[-+]?(\.[0-9]+|[0-9]+(\.[0-9]*)?)([eE][-+]?[0-9]+)?$/.test(plain) ||
+    /^[-+]?\.(inf|Inf|INF)$/.test(plain) ||
+    /^\.(nan|NaN|NAN)$/.test(plain)
+  ) {
+    return null;
+  }
+  return plain;
+}
+
 function parseVersion(value) {
   if (typeof value !== 'string') {
     return null;

package/assets/skills/oat-idea-ideate/SKILL.md

@@ -1,11 +1,12 @@
 ---
 name: oat-idea-ideate
-version: 1.2.2
 description: Use when continuing an existing tracked idea or expanding an explicit scratchpad seed from {IDEAS_ROOT}/scratchpad.md. Do NOT use to start a brand-new, destinationless brainstorm; use oat-brainstorm for that.
 argument-hint: '[--global]'
 disable-model-invocation: true
 user-invocable: true
 allowed-tools: Read, Write, Bash, Glob, AskUserQuestion
+metadata:
+  version: 1.2.3
 ---
 
 # Ideate