@detergent-software/atk 9.2.0-dev.1 → 9.2.0-dev.10

package/CHANGELOG.md

@@ -1,3 +1,115 @@
+## [9.2.0-dev.10](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/branchCompare?baseVersion=GTv9.2.0-dev.9&targetVersion=GTv9.2.0-dev.10) (2026-10-24)
+
+### Features
+
+* **cli:** compare two published versions with atk diff name@a..b ([25e386e](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/commit/25e386e6c358f09e15ba25bd6d98339580af8535))
+
+### Bug Fixes
+
+* **cli:** refuse atk diff name@1...2 as a malformed range ([417ab3e](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/commit/417ab3ea46b76f944df3e4f1eb453512ee2e5604))
+
+## [9.2.0-dev.9](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/branchCompare?baseVersion=GTv9.2.0-dev.8&targetVersion=GTv9.2.0-dev.9) (2026-10-24)
+
+### Features
+
+* **cli:** pin, unpin, freeze and thaw take several names (ATK-762) ([4f89199](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/commit/4f89199939bf4c0e780fb84d77ee6ad348e10f38))
+
+### Bug Fixes
+
+* **cli:** put type before outcome in freeze and thaw's assets (ATK-762) ([7824ad5](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/commit/7824ad5b5f0d138f8fffc4982268d06a575d0fdc))
+
+### Documentation
+
+* **cli:** list several names for pin and unpin in the README (ATK-762) ([f06ac5c](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/commit/f06ac5c6f1988564a4215fcc6d740a97db86a91d))
+
+## [9.2.0-dev.8](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/branchCompare?baseVersion=GTv9.2.0-dev.7&targetVersion=GTv9.2.0-dev.8) (2026-10-24)
+
+### Features
+
+* **cli:** sync only the named assets with atk sync <names> ([4e076f6](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/commit/4e076f6d881734e064ddb3ee3e2dbc98619307d7))
+
+### Bug Fixes
+
+* **cli:** review fixes for atk sync <names> ([4a9b69b](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/commit/4a9b69b1b7e0167a887ddc6f509a43bb6a0066cb))
+* **cli:** tighten atk sync <names> after code review ([2a1005b](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/commit/2a1005b8c6542af77c7e90defb450efd56f54691))
+
+## [9.2.0-dev.7](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/branchCompare?baseVersion=GTv9.2.0-dev.6&targetVersion=GTv9.2.0-dev.7) (2026-10-24)
+
+### Features
+
+* **cli:** mark rows in atk browse and install them as one plan ([1b871cb](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/commit/1b871cb9cd368de426f8d3afaa518c67109ea6c8))
+
+### Bug Fixes
+
+* **cli:** give browse's list the rows a wrapped bar takes ([0d8f1b2](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/commit/0d8f1b2bb1854ee531408327e7f3bcd1648f9889))
+* **cli:** review fixes for marking rows in atk browse ([e42131d](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/commit/e42131d10a0130507a7eefe122f03277a33b865a))
+
+### Refactoring
+
+* **cli:** share the several-targets install path in lib ([c5866c8](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/commit/c5866c8667e5aa5c7ad258f12735003c519e3e1e))
+
+## [9.2.0-dev.6](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/branchCompare?baseVersion=GTv9.2.0-dev.5&targetVersion=GTv9.2.0-dev.6) (2026-10-23)
+
+### Features
+
+* **cli:** install bundles and [@org](https://emergentcode.visualstudio.com/org) among several names as one plan ([47425f3](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/commit/47425f35d4986306dc024fca8ad6d767d064188f))
+* **cli:** uninstall a bundle among several names in one pass ([8c75075](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/commit/8c75075465bd210989baba237955a68dcce2ad73))
+
+### Bug Fixes
+
+* **cli:** review fixes for bundles and [@org](https://emergentcode.visualstudio.com/org) among install names ([fc66d79](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/commit/fc66d7994d704cf1ceebb6f2b551737e3233f671))
+
+### Documentation
+
+* **cli:** describe bundles and [@org](https://emergentcode.visualstudio.com/org) among several install names ([febfb7e](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/commit/febfb7e6a81d6308c2df788fddfc2f1cb02e54f7))
+
+## [9.2.0-dev.5](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/branchCompare?baseVersion=GTv9.2.0-dev.4&targetVersion=GTv9.2.0-dev.5) (2026-10-23)
+
+### Features
+
+* **cli:** install several assets at once as one plan ([9f45771](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/commit/9f45771cd13f2e9f62352c6ee7050afa3f3c2bb2))
+* **cli:** uninstall several assets at once ([eeaf8e2](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/commit/eeaf8e26db6619593264ae33183086aec94a9d3e))
+* **cli:** update several assets at once and pick them with atk update -i ([ad76872](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/commit/ad768721353fe5f6a466aa33807dcbdedd488f29))
+
+### Bug Fixes
+
+* **cli:** agree the verb in the bundle refusal of several names ([7bb43aa](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/commit/7bb43aaf6c0f6295e5b8253106ea76a68d0d45c0))
+* **cli:** give atk update --interactive the short flag -I ([7ab8d77](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/commit/7ab8d777eabd3a5e90e4dc5d13fd7c2054c64457))
+* **cli:** review fixes for install, uninstall and update with several names ([4bdfa9c](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/commit/4bdfa9c3560460af7b91e480f24a6ee9c28d57dc))
+
+## [9.2.0-dev.4](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/branchCompare?baseVersion=GTv9.2.0-dev.3&targetVersion=GTv9.2.0-dev.4) (2026-10-23)
+
+### Features
+
+* **cli:** compare atk diff with a chosen version or the locked one ([ef0e182](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/commit/ef0e182764ae57223037c695dfeda286f66d95e7))
+
+### Bug Fixes
+
+* **cli:** keep atk diff's latest wording and outdated colour ([95894f7](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/commit/95894f7cddd0f1dbfab06fea1494055147609035))
+* **cli:** say when atk diff --installed finds its version unpublished ([7aed9ae](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/commit/7aed9ae6d42afc32dedc12bddcf55952c1801a1c))
+
+## [9.2.0-dev.3](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/branchCompare?baseVersion=GTv9.2.0-dev.2&targetVersion=GTv9.2.0-dev.3) (2026-10-23)
+
+### Features
+
+* **cli:** atk info says when a bundle is a claude.ai plugin (ATK-749) ([c8e1cba](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/commit/c8e1cbada0e0aa08ab53cd6a782b1b1a1b1ad618))
+
+### Bug Fixes
+
+* **cli:** keep a field's label width when its value wraps (ATK-749) ([acfe3ff](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/commit/acfe3ff6def50721448389ef0887e93c70e380e2))
+* **cli:** match atk info's claude.ai plugin flag to the generator (ATK-749) ([8400a95](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/commit/8400a95473f69a31f00e4f7cc80a16ccc684be3a))
+
+## [9.2.0-dev.2](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/branchCompare?baseVersion=GTv9.2.0-dev.1&targetVersion=GTv9.2.0-dev.2) (2026-10-23)
+
+### Features
+
+* **cli:** add sync --check and --exit-code on outdated, diff and drift (ATK-610) ([1e9090e](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/commit/1e9090e2802c661c0c35242c25f817fe0eb809b7))
+
+### Documentation
+
+* **cli:** note that sync --check reads a stale registry too (ATK-610) ([97fc9d4](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/commit/97fc9d4ee91c9c2a75168de4492b2d38ff6c1a7b))
+* **cli:** say which assets fail sync --check and that CI needs a token (ATK-610) ([c0508a2](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/commit/c0508a2890433665b8b8dabc023c2090bb23a028))
+
 ## [9.2.0-dev.1](https://emergentcode.visualstudio.com/Emergent%20Software/_git/Emergent.AgenticToolkit/branchCompare?baseVersion=GTv9.1.0&targetVersion=GTv9.2.0-dev.1) (2026-10-23)
 
 ### Features

package/README.md

@@ -77,7 +77,7 @@ atk update
 | `atk checkout <name>`    | Fetch a writable working copy of a registry asset for updating    |
 | `atk config`             | Manage user configuration (`~/.atkrc.json`)                       |
 | `atk deprecate <name>`   | Deprecate an asset or bundle (or `--undo`) via PR, no new version |
-| `atk diff <asset>`       | Show changes between installed and latest versions                |
+| `atk diff <asset>`       | Show changes against the latest, a chosen version or two versions |
 | `atk doctor`             | Run environment diagnostics                                       |
 | `atk info <asset>`       | Show asset details, what depends on it and the bundles with it    |
 | `atk init`               | Scaffold a new asset or bundle                                    |
@@ -87,16 +87,16 @@ atk update
 | `atk logout`             | Sign out of your Emergent account                                 |
 | `atk move <asset>`       | Move an installed asset between the project and the user scope    |
 | `atk outdated`           | Show assets with available updates                                |
-| `atk pin <asset>`        | Pin an asset to its current version                               |
+| `atk pin <assets...>`    | Pin assets at their installed versions                            |
 | `atk promote <name>`     | Promote an org-scoped asset or bundle to global via PR            |
 | `atk prune`              | Remove orphaned dependencies                                      |
 | `atk publish`            | Publish one or more assets, or a bundle, to the registry          |
 | `atk register <dir>`     | Drop a manifest.json into an existing local directory             |
 | `atk release-notes`      | Show CLI release notes, recent history or a specific version      |
 | `atk search [query]`     | Search by keyword (every word must match), type, tag or tool      |
-| `atk sync`               | Re-apply all installed assets from the lockfile                   |
+| `atk sync [names...]`    | Re-apply the lockfile's assets, all of them or only those named   |
 | `atk uninstall <asset>`  | Remove an asset and clean up placed files                         |
-| `atk unpin <asset>`      | Remove a version pin                                              |
+| `atk unpin <assets...>`  | Remove the version pins from assets                               |
 | `atk unpublish <name>`   | Remove an asset, bundle or one version from the registry via PR   |
 | `atk update [asset]`     | Update installed assets to latest versions                        |
 | `atk validate [path...]` | Check asset or bundle directories for errors before publishing    |
@@ -109,29 +109,46 @@ A short flag means the same long flag on every command that takes it, and a long
 
 | Short | Long                                 | Short | Long                                                  |
 | ----- | ------------------------------------ | ----- | ----------------------------------------------------- |
-| `-a`  | `--all`                              | `-O`  | `--offline` (`init`)                                  |
-| `-b`  | `--bundle`                           | `-o`  | `--org`                                               |
-| `-C`  | `--context`                          | `-P`  | `--project-root`                                      |
-| `-d`  | `--description` (`init`, `register`) | `-p`  | `--pin`                                               |
-| `-e`  | `--entrypoint`                       | `-R`  | `--reset`                                             |
-| `-F`  | `--from`                             | `-r`  | `--refresh`                                           |
-| `-f`  | `--force`                            | `-s`  | `--sort`                                              |
-| `-g`  | `--tag`                              | `-T`  | `--tool`                                              |
-| `-h`  | `--help`                             | `-t`  | `--type`                                              |
+| `-a`  | `--all`                              | `-n`  | `--dry-run`                                           |
+| `-b`  | `--bundle`                           | `-O`  | `--offline` (`init`)                                  |
+| `-C`  | `--context`                          | `-o`  | `--org`                                               |
+| `-d`  | `--description` (`init`, `register`) | `-P`  | `--project-root`                                      |
+| `-e`  | `--entrypoint`                       | `-p`  | `--pin`                                               |
+| `-F`  | `--from`                             | `-R`  | `--reset`                                             |
+| `-f`  | `--force`                            | `-r`  | `--refresh`                                           |
+| `-g`  | `--tag`                              | `-s`  | `--sort`                                              |
+| `-h`  | `--help`                             | `-T`  | `--tool`                                              |
+| `-I`  | `--interactive` (`update`)           | `-t`  | `--type`                                              |
 | `-i`  | `--from-installed`                   | `-u`  | `--update`                                            |
 | `-j`  | `--json`                             | `-V`  | `--version`, an asset's (`checkout`, `drift`, `info`) |
 | `-l`  | `--limit`                            | `-v`  | `--version`, the CLI's                                |
 | `-m`  | `--message`                          | `-y`  | `--yes`                                               |
-| `-n`  | `--dry-run`                          |       |                                                       |
 
 CLI 9.0.0 changed the letters that meant two things. `-n` became `--dry-run` on `publish`, `unpublish`, `promote` and `deprecate`. Their old `-d` is now an unknown option on all four, so an old dry run fails rather than running for real. `--name` (`init`, `register`, `drift`), `--author` (`init`, `register`), `deprecate --reason`, `info --full`, `info --verbose` and `release-notes --prerelease` lost their short flags. `move` gained `-n` and `setup` gained `-j`.
 
 ### Offline and a stale cache
 
-The CLI keeps the last registry it read in `~/.atk/cache/registry.json` and re-reads it from the ATK API once it is older than `cacheTtlMinutes`. When the API can't be read (no network, a 5xx, a rate limit, or a failed sign-in), the read commands (`search`, `info`, `list`, `outdated`, `diff`, `browse`) use the cached copy, whatever its age, and say how old it is (in `--json` output, a `stale-registry` entry in `notices`). Commands that install, update or publish never use an old copy.
+The CLI keeps the last registry it read in `~/.atk/cache/registry.json` and re-reads it from the ATK API once it is older than `cacheTtlMinutes`. When the API can't be read (no network, a 5xx, a rate limit, or a failed sign-in), the read commands (`search`, `info`, `list`, `outdated`, `diff`, `browse`, `sync --check`) use the cached copy, whatever its age, and say how old it is (in `--json` output, a `stale-registry` entry in `notices`). Commands that install, update or publish never use an old copy.
 
 `--offline`, before or after any command, never calls the API. The read commands take the registry from the cache of any age; anything else the API serves (a README, asset files) and every command that needs the current registry (`install`, `update`, `publish`, …) fails at once instead of retrying. `atk diff` needs the API for the latest files, so it doesn't work offline.
 
+### In CI
+
+These fail a build when they find something (CLI 9.2.0+):
+
+- `atk sync --check` exits 1 when the installed files don't match the lockfile: a file or config entry missing or changed, a local edit (which `atk sync` keeps but the check doesn't), a hook copy sync would remove because its locked version doesn't declare the tool, or an asset sync would refuse. Frozen assets and assets uninstalled for a tool pass, except such a hook copy left on disk. It changes nothing. Add `--user` to check the user scope. It can't be combined with `--force`.
+- `atk outdated --exit-code` exits 1 when an installed asset has an update. A pin that doesn't match the installed version doesn't count.
+- `atk diff <asset> --exit-code` exits 1 when the installed files differ from the latest version's. A newer version with the same files exits 0. `atk diff <asset>@<version>` compares with that version instead, and `--installed` with the version the lockfile records, so `atk diff <asset> --installed --exit-code` fails only on local edits. `atk diff <asset>@<a>..<b>` compares two published versions with each other and reads no local files: `-` lines come from `<a>` and `+` lines from `<b>`, each side resolves as `@<version>` does, and `--exit-code` exits 1 when their files differ.
+- `atk drift [path] --exit-code` exits 1 when a local asset folder differs from its published version.
+
+`atk audit` exits 1 on a checksum failure, as before. Without these flags, the commands exit 0 when they find something. An error is still exit 1 (with `--json`, `"outcome": "error"`), and a usage error is exit 2. All four call the ATK API, so give them a token. A CI checkout has no `.atkrc.json` (it is gitignored), so name the tool with `--tool`:
+
+```bash
+export ATK_TOKEN="$(az account get-access-token --scope api://8da5aa72-0565-4ae8-bf5a-db89d8bd3186/access_as_user --query accessToken -o tsv)"
+npx @detergent-software/atk sync --check --tool claude-code --json
+npx @detergent-software/atk outdated --project --tool claude-code --exit-code
+```
+
 ```bash
 atk search commit --offline
 ```

package/build/command-manifest.json

@@ -224,11 +224,11 @@
         "name": "diff",
         "args": [
             {
-                "description": "Asset name (supports @org/name syntax)",
+                "description": "Asset name (supports name@version, name@<a>..<b> for two versions, and @org/name syntax)",
                 "name": "<name>"
             }
         ],
-        "description": "Show changes between installed and latest version",
+        "description": "Show changes between installed files and the latest or a chosen version, or between two versions",
         "file": "diff.js",
         "options": [
             {
@@ -237,6 +237,16 @@
                 "parse": "number",
                 "defaultValue": 3
             },
+            {
+                "flags": "--exit-code",
+                "description": "Exit 1 when the compared files differ (for CI)",
+                "defaultValue": false
+            },
+            {
+                "flags": "--installed",
+                "description": "Compare with the version the lockfile records, which shows only local edits",
+                "defaultValue": false
+            },
             {
                 "flags": "-j, --json",
                 "description": "Output raw JSON (for scripting and CI)",
@@ -310,6 +320,11 @@
         "description": "Compare a local asset directory against the latest published version",
         "file": "drift.js",
         "options": [
+            {
+                "flags": "--exit-code",
+                "description": "Exit 1 when the folder drifts from the published version (for CI)",
+                "defaultValue": false
+            },
             {
                 "flags": "-j, --json",
                 "description": "Output raw JSON (for scripting and CI)",
@@ -337,6 +352,10 @@
             {
                 "description": "Asset name to freeze (supports @org/name syntax)",
                 "name": "<name>"
+            },
+            {
+                "description": "More assets to freeze with the first, in one pass",
+                "name": "[names...]"
             }
         ],
         "description": "Freeze an installed asset to prevent sync and update from overwriting it",
@@ -498,6 +517,10 @@
             {
                 "description": "Asset, bundle, or org scope to install (supports name@version and @org)",
                 "name": "[target]"
+            },
+            {
+                "description": "More assets, bundles or org scopes to install with the first, as one plan (name@version, @org/name, @org with --all)",
+                "name": "[targets...]"
             }
         ],
         "description": "Install an asset or bundle (no args syncs from lockfile)",
@@ -510,7 +533,7 @@
             },
             {
                 "flags": "-a, --all",
-                "description": "Install every asset from an org scope without prompting (for `atk install @org`; required with --json or no terminal)",
+                "description": "Install every asset from an org scope without prompting (for `atk install @org`; required with --json, no terminal, or other names)",
                 "defaultValue": false
             },
             {
@@ -701,6 +724,11 @@
         "description": "Show available updates for installed assets",
         "file": "outdated.js",
         "options": [
+            {
+                "flags": "--exit-code",
+                "description": "Exit 1 when an installed asset has an update (for CI)",
+                "defaultValue": false
+            },
             {
                 "flags": "-j, --json",
                 "description": "Output raw JSON (for scripting and CI)",
@@ -750,6 +778,10 @@
             {
                 "description": "Asset name (supports @org/name); an @version suffix must be the installed version. To pin another version, run atk install <name>@<version> --pin",
                 "name": "<name>"
+            },
+            {
+                "description": "More assets to pin with the first, in one pass (each may carry @version)",
+                "name": "[names...]"
             }
         ],
         "description": "Pin an installed asset at its installed version",
@@ -1215,9 +1247,20 @@
     {
         "isDefault": false,
         "name": "sync",
-        "description": "Re-apply drifted installed assets, keeping local edits (use --force to re-apply all)",
+        "args": [
+            {
+                "description": "Installed assets to sync, as @org/name or name (all of them when omitted)",
+                "name": "[names...]"
+            }
+        ],
+        "description": "Re-apply drifted installed assets, or only the named ones, keeping local edits (use --force to re-apply them all)",
         "file": "sync.js",
         "options": [
+            {
+                "flags": "--check",
+                "description": "Exit 1 when installed files don't match the lockfile, local edits included; changes nothing (for CI)",
+                "defaultValue": false
+            },
             {
                 "flags": "-n, --dry-run",
                 "description": "Show what would be synced without making changes",
@@ -1225,7 +1268,7 @@
             },
             {
                 "flags": "-f, --force",
-                "description": "Force re-sync all assets, not just drifted ones, overwriting local edits",
+                "description": "Force re-sync all assets (or the named ones), not just drifted ones, overwriting local edits",
                 "defaultValue": false
             },
             {
@@ -1246,6 +1289,18 @@
                 "flags": "-T, --tool [tool]",
                 "description": "Target tool (e.g., claude-code)"
             },
+            {
+                "flags": "-t, --type [type]",
+                "description": "Type of a named asset, when the name is installed as more than one type",
+                "choices": [
+                    "skill",
+                    "agent",
+                    "rule",
+                    "hook",
+                    "memory-template",
+                    "mcp-config"
+                ]
+            },
             {
                 "flags": "--user",
                 "description": "Use the user scope (the user root, ~ by default) instead of the project",
@@ -1260,6 +1315,10 @@
             {
                 "description": "Asset name to thaw",
                 "name": "<name>"
+            },
+            {
+                "description": "More assets to thaw with the first, in one pass",
+                "name": "[names...]"
             }
         ],
         "description": "Thaw a frozen asset to allow sync and update to overwrite it again",
@@ -1300,6 +1359,10 @@
             {
                 "description": "Asset or bundle name to uninstall",
                 "name": "<name>"
+            },
+            {
+                "description": "More assets or bundles to uninstall with the first, in one pass",
+                "name": "[names...]"
             }
         ],
         "description": "Uninstall an asset or bundle",
@@ -1368,6 +1431,10 @@
             {
                 "description": "Asset name to unpin",
                 "name": "<name>"
+            },
+            {
+                "description": "More assets to unpin with the first, in one pass",
+                "name": "[names...]"
             }
         ],
         "description": "Remove a version pin from an installed asset",
@@ -1459,6 +1526,10 @@
             {
                 "description": "Asset name (updates all if omitted, supports name@version syntax)",
                 "name": "[name]"
+            },
+            {
+                "description": "More assets to update to their latest versions",
+                "name": "[names...]"
             }
         ],
         "description": "Update installed assets",
@@ -1474,6 +1545,11 @@
                 "description": "Override version pins on targeted assets, and overwrite local edits",
                 "defaultValue": false
             },
+            {
+                "flags": "-I, --interactive",
+                "description": "Pick the outdated assets to update from a list (needs an interactive terminal)",
+                "defaultValue": false
+            },
             {
                 "flags": "-j, --json",
                 "description": "Output raw JSON (for scripting and CI)",

package/build/commands/browse.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browse.d.ts","sourceRoot":"","sources":["../../src/commands/browse.tsx"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAgDxB,eAAO,MAAM,WAAW,4CAA4C,CAAC;AASrE,eAAO,MAAM,OAAO;;;;;;;iBAsDlB,CAAC;AAEH,eAAO,MAAM,IAAI,gDAKf,CAAC;AAiBH,KAAK,KAAK,GAAG;IACX,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,CAAC;CAClC,CAAC;AAEF,MAAM,CAAC,OAAO,UAAU,MAAM,CAAC,EAC7B,IAAI,EAAE,CAAC,SAAS,CAAC,EACjB,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAC1E,EAAE,KAAK,+BA0BP"}
+{"version":3,"file":"browse.d.ts","sourceRoot":"","sources":["../../src/commands/browse.tsx"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAmDxB,eAAO,MAAM,WAAW,4CAA4C,CAAC;AASrE,eAAO,MAAM,OAAO;;;;;;;iBAsDlB,CAAC;AAEH,eAAO,MAAM,IAAI,gDAKf,CAAC;AAiBH,KAAK,KAAK,GAAG;IACX,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,CAAC;CAClC,CAAC;AAEF,MAAM,CAAC,OAAO,UAAU,MAAM,CAAC,EAC7B,IAAI,EAAE,CAAC,SAAS,CAAC,EACjB,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAC1E,EAAE,KAAK,+BA0BP"}

package/build/commands/browse.js

@@ -4,14 +4,16 @@ import { useEffect, useRef } from 'react';
 import { z } from 'zod';
 import BrowseList from '../components/BrowseList.js';
 import FilterBar from '../components/FilterBar.js';
-import HelpBar from '../components/HelpBar.js';
+import HelpBar, { helpBarText } from '../components/HelpBar.js';
 import { errorGuidanceRows, ErrorView, Spinner } from '../components/index.js';
-import InstallConfirmBar from '../components/InstallConfirmBar.js';
+import InstallConfirmBar, { resultLine } from '../components/InstallConfirmBar.js';
 import { TYPE_TAB_LABELS, TYPE_TABS, useBrowseInput, useBrowseState, } from '../hooks/useBrowseState.js';
 import { useCommand } from '../hooks/useCommand.js';
 import { useResolvedScope } from '../hooks/useResolvedScope.js';
 import { loadConfig } from '../lib/config.js';
 import { errorGuidance, errorMessage } from '../lib/errors.js';
+import { wrappedExtraRows } from '../lib/format.js';
+import { installPlannedTargets, planTargetsInstall } from '../lib/install-targets.js';
 import { LOCKFILE_LOCKED_MESSAGE, LockfileLockedError, readLockfile, withLockfileLock } from '../lib/lockfile.js';
 import { executeInstallPlanForTools } from '../lib/multi-tool-install.js';
 import { formatOrgName, resolveActiveOrg } from '../lib/org.js';
@@ -98,17 +100,20 @@ function BrowseInteractive({ cliOrg, filterArg, projectRoot, refresh, typeOpt, u
     const [state, dispatch, dispatchLoad] = useBrowseState(initialFilter, initialType);
     const { exit } = useApp();
     const { stdout } = useStdout();
-    const isInstalling = state.status === 'ready' && state.mode.kind === 'installing';
+    const isInstalling = state.status === 'ready' && (state.mode.kind === 'installing' || state.mode.kind === 'installing-set');
     const stateRef = useRef(state);
     stateRef.current = state;
     const resolvedToolsRef = useRef(UNRESOLVED_TOOLS);
     const scopeRef = useRef(undefined);
     const terminalWidth = stdout?.columns ?? 120;
+    // The rows the help bar wraps to past its first. The cursor moves only while it shows, so the
+    // reducer scrolls by the list it leaves.
+    const helpRows = state.status === 'ready' ? wrappedExtraRows(helpBarText(helpBarPropsOf(state)), terminalWidth) : 0;
     // Track viewport height
     useEffect(() => {
         const height = stdout?.rows ?? 24;
-        dispatch({ height: Math.max(5, height - CHROME_LINES), type: 'SET_VIEWPORT_HEIGHT' });
-    }, [stdout?.rows, dispatch]);
+        dispatch({ height: Math.max(5, height - CHROME_LINES - helpRows), type: 'SET_VIEWPORT_HEIGHT' });
+    }, [stdout?.rows, helpRows, dispatch]);
     // Load data
     useEffect(() => {
         let cancelled = false;
@@ -170,25 +175,30 @@ function BrowseInteractive({ cliOrg, filterArg, projectRoot, refresh, typeOpt, u
         if (stateRef.current.status !== 'ready')
             return;
         const currentState = stateRef.current;
-        if (currentState.mode.kind !== 'installing')
-            return;
         const installingMode = currentState.mode;
+        if (installingMode.kind !== 'installing' && installingMode.kind !== 'installing-set')
+            return;
         let cancelled = false;
         (async () => {
             try {
                 const resolved = scopeRef.current;
                 if (!resolved)
                     throw new Error('The install scope has not resolved yet.');
-                await executeInstallFromBrowse({
-                    assetName: installingMode.assetName,
-                    assetOrg: installingMode.assetOrg,
+                const shared = {
                     dispatch,
                     isCancelled: () => cancelled,
-                    itemKind: installingMode.itemKind,
                     registry: currentState.registry,
                     resolved,
                     tools: resolvedToolsRef.current,
-                });
+                };
+                await (installingMode.kind === 'installing-set'
+                    ? executeSetInstallFromBrowse({ ...shared, items: installingMode.items })
+                    : executeInstallFromBrowse({
+                        ...shared,
+                        assetName: installingMode.assetName,
+                        assetOrg: installingMode.assetOrg,
+                        itemKind: installingMode.itemKind,
+                    }));
             }
             catch (err) {
                 if (!cancelled) {
@@ -229,7 +239,6 @@ function BrowseInteractive({ cliOrg, filterArg, projectRoot, refresh, typeOpt, u
         : state.typeFilter === 'all'
             ? state.allAssets.length + state.allBundles.length
             : state.allAssets.filter((a) => a.type === state.typeFilter).length;
-    const canInstall = state.filteredItems.length > 0;
     const sortArrow = state.sortDirection === 'asc' ? '\u2191' : '\u2193';
     const sortIndicator = `Sort: ${BROWSE_SORT_FIELD_LABELS[state.sortField]} ${sortArrow}`;
     const expandedItem = state.expandedIndex !== null ? state.filteredItems[state.expandedIndex] : null;
@@ -238,9 +247,15 @@ function BrowseInteractive({ cliOrg, filterArg, projectRoot, refresh, typeOpt, u
         : expandedItem?.kind === 'bundle'
             ? buildBundleWebUrl(expandedItem.data.name, expandedItem.data.org)
             : null;
-    // A failed install's hint and command make the install bar taller: the list gives up those rows
-    const guidanceRows = mode.kind === 'install-result' && !mode.success ? errorGuidanceRows(mode) : 0;
-    return (_jsxs(Box, { flexDirection: 'column', children: [_jsx(FilterBar, { filterText: state.filterText, inputMode: inputMode, org: state.org, orgOnly: state.orgOnly, resultCount: state.filteredItems.length, sortIndicator: sortIndicator, terminalWidth: terminalWidth, totalCount: totalCount, typeFilter: state.typeFilter, typeTabLabels: TYPE_TAB_LABELS, typeTabs: TYPE_TABS }), state.toolWarning && (_jsxs(Text, { color: 'yellow', children: ['\u26A0', " Tool resolution failed: ", state.toolWarning, ". Install will not be available."] })), _jsx(BrowseList, { cursorIndex: state.cursorIndex, expandedIndex: state.expandedIndex, hasOrg: !!state.org, items: state.filteredItems, lockfile: state.lockfile, registryAssets: state.allAssets, scrollOffset: state.scrollOffset, terminalWidth: terminalWidth, typeFilter: state.typeFilter, viewportHeight: Math.max(1, state.viewportHeight - guidanceRows), webUrl: webUrl }), browsing ? (_jsx(HelpBar, { canInstall: canInstall, expanded: state.expandedIndex !== null, hasOrg: !!state.org, inputMode: inputMode })) : (_jsx(InstallConfirmBar, { mode: mode }))] }));
+    // The viewport already leaves the help bar's extra rows. Another bar taller than one row (a failed
+    // install's hint and command, a long set result) takes its extra rows from the list instead.
+    const finished = mode.kind === 'install-result' || mode.kind === 'install-set-result' ? mode : null;
+    const barRows = finished
+        ? (finished.success ? 0 : errorGuidanceRows(finished)) + wrappedExtraRows(resultLine(finished), terminalWidth)
+        : browsing
+            ? helpRows
+            : 0;
+    return (_jsxs(Box, { flexDirection: 'column', children: [_jsx(FilterBar, { filterText: state.filterText, inputMode: inputMode, org: state.org, orgOnly: state.orgOnly, resultCount: state.filteredItems.length, sortIndicator: sortIndicator, terminalWidth: terminalWidth, totalCount: totalCount, typeFilter: state.typeFilter, typeTabLabels: TYPE_TAB_LABELS, typeTabs: TYPE_TABS }), state.toolWarning && (_jsxs(Text, { color: 'yellow', children: ['\u26A0', " Tool resolution failed: ", state.toolWarning, ". Install will not be available."] })), _jsx(BrowseList, { cursorIndex: state.cursorIndex, expandedIndex: state.expandedIndex, hasOrg: !!state.org, items: state.filteredItems, lockfile: state.lockfile, marked: state.marked, registryAssets: state.allAssets, scrollOffset: state.scrollOffset, terminalWidth: terminalWidth, typeFilter: state.typeFilter, viewportHeight: Math.max(1, state.viewportHeight + helpRows - barRows), webUrl: webUrl }), browsing ? _jsx(HelpBar, { ...helpBarPropsOf(state) }) : _jsx(InstallConfirmBar, { mode: mode })] }));
 }
 /**
  * JSON / non-TTY render branch.
@@ -381,4 +396,92 @@ async function executeInstallFromBrowse({ assetName, assetOrg, dispatch, isCance
         }
     });
 }
+/**
+ * Install the marked rows through `atk install a b my-bundle`'s plan and install steps: resolved
+ * together into one plan, one install across tools with its rollback, a marked asset already in
+ * place left out (one in place only as a dependency made direct), and a bundle in place whole left
+ * out. As for one row, browse has no deprecation refusal, cross-scope notice or bundle report.
+ */
+async function executeSetInstallFromBrowse({ dispatch, isCancelled, items, registry, resolved, tools, }) {
+    const { root: projectDir, scope } = resolved;
+    if ('error' in tools) {
+        throw tools.error;
+    }
+    await withLockfileLock(projectDir, async () => {
+        if (!isCancelled()) {
+            dispatch({ message: `Resolving dependencies for ${items.length} marked...`, type: 'INSTALL_PROGRESS' });
+        }
+        // Read under the lock: the lockfile may have moved on since browse loaded it.
+        const lockfile = await readLockfile(projectDir);
+        const targets = items.map((item) => item.kind === 'bundle'
+            ? { bundle: item.data, kind: 'bundle' }
+            : {
+                kind: 'asset',
+                name: item.data.name,
+                ...(item.data.org ? { org: item.data.org } : {}),
+                type: item.data.type,
+            });
+        const planned = planTargetsInstall(registry, targets, lockfile, tools, { force: false, projectDir });
+        await installPlannedTargets(planned, tools, {
+            onProgress: (message) => {
+                if (!isCancelled())
+                    dispatch({ message, type: 'INSTALL_PROGRESS' });
+            },
+            onTool: (toolName) => {
+                if (!isCancelled())
+                    dispatch({ message: `Installing for ${toolName}...`, type: 'INSTALL_PROGRESS' });
+            },
+            projectDir,
+            scope,
+        });
+        const newLockfile = await readLockfile(projectDir);
+        if (!isCancelled()) {
+            dispatch({
+                message: setInstallMessage(planned, {
+                    tools: tools.map((t) => t.tool).join(', '),
+                    where: scopeLabel(resolved),
+                }),
+                newLockfile,
+                success: true,
+                type: 'INSTALL_COMPLETE',
+            });
+        }
+    });
+}
+/** The help bar for the browsing view: what it can do now, and how many rows are marked. */
+function helpBarPropsOf(state) {
+    return {
+        canInstall: state.filteredItems.length > 0 || state.marked.size > 0,
+        expanded: state.expandedIndex !== null,
+        hasOrg: !!state.org,
+        inputMode: state.mode.kind === 'browsing' ? state.mode.inputMode : 'navigate',
+        markedCount: state.marked.size,
+    };
+}
+/**
+ * What a set install did with each marked row, in one line: what it installed and for which tools,
+ * what was already in place, and what became a direct install; the scope once, after the first part.
+ */
+function setInstallMessage({ assets, bundlesInPlace, toInstall }, { tools, where }) {
+    const assetsWith = (outcome) => assets.filter((a) => a.outcome === outcome).map((a) => formatOrgName(a.org, a.name));
+    const bundleLabel = ({ bundle }) => `bundle ${formatOrgName(bundle.org, bundle.name)} (${bundle.assetCount} assets)`;
+    const installed = [
+        ...assetsWith('installed'),
+        ...toInstall.flatMap((target) => (target.kind === 'bundle' ? [bundleLabel(target)] : [])),
+    ];
+    const inPlace = [...assetsWith('already-installed'), ...bundlesInPlace.map(bundleLabel)];
+    const direct = assetsWith('upgraded-to-direct');
+    const are = (names) => (names.length === 1 ? 'is' : 'are');
+    const parts = [
+        ...(installed.length > 0 ? [`Installed ${installed.join(', ')} for ${tools}`] : []),
+        ...(inPlace.length > 0 ? [`${inPlace.join(', ')} ${are(inPlace)} already installed`] : []),
+        ...(direct.length > 0
+            ? [`${direct.join(', ')} ${are(direct)} now ${direct.length === 1 ? 'a direct install' : 'direct installs'}`]
+            : []),
+    ];
+    const [first, ...rest] = parts;
+    if (!first)
+        return `Nothing to install in ${where}`;
+    return [`${first} in ${where}`, ...rest].join('; ');
+}
 //# sourceMappingURL=browse.js.map