magic-builder 0.1.1 → 0.1.3

package/README.md

@@ -0,0 +1,180 @@
+# magic-builder
+
+CLI for Magic Builder (妙笔): publish HTML pages, deploy FaaS functions, upload files, generate links, and install the Magic Builder Codex skill.
+
+## Install
+
+```bash
+npm install -g magic-builder
+```
+
+With Bun:
+
+```bash
+bun add -g magic-builder
+```
+
+The package provides three equivalent command names:
+
+```bash
+magic-builder --help
+magic-cli --help
+miaobi --help
+```
+
+You can also run it without installing:
+
+```bash
+npx magic-builder help
+bunx magic-builder help
+```
+
+Update the CLI:
+
+```bash
+magic-builder update
+magic-builder update --manager bun
+```
+
+`update` detects npm or Bun automatically; `--manager` is only for overriding.
+
+## Authentication
+
+Most write operations need a Magic developer token.
+
+```bash
+magic-builder auth login
+```
+
+Manual token setup:
+
+```bash
+magic-builder auth set <token>
+magic-builder auth show
+```
+
+Token lookup order:
+
+1. `--token`
+2. `MAGIC_TOKEN`
+3. `~/.magic-builder/magic-token`
+4. legacy `~/.magic-token`
+5. project `.magic-token`
+
+CLI state is stored under:
+
+```text
+~/.magic-builder/
+```
+
+This includes:
+
+```text
+magic-token
+magic-apps.json
+```
+
+## Common Commands
+
+Publish an HTML page:
+
+```bash
+magic-builder page publish app.html --title "Dashboard"
+```
+
+List or export pages:
+
+```bash
+magic-builder page list --scope mine
+magic-builder page list --scope public --title demo
+magic-builder page export --id <id> --out app.html
+```
+
+Delete a page:
+
+```bash
+magic-builder page delete --id <id>
+```
+
+Deploy a FaaS function:
+
+```bash
+magic-builder faas publish handler.js --name report-api
+```
+
+List or delete FaaS functions:
+
+```bash
+magic-builder faas list
+magic-builder faas list --title report
+magic-builder faas delete --id <id>
+```
+
+Upload, list, or delete files:
+
+```bash
+magic-builder file upload logo.png
+magic-builder file list
+magic-builder file list --title logo
+magic-builder file delete --id <id>
+```
+
+Generate a Magic link:
+
+```bash
+magic-builder link create --title "Weekly Report"
+magic-builder link create --fid <faas-id>
+```
+
+Create or append a Feishu document HTML Box:
+
+```bash
+magic-builder doc create --html app.html --title "Demo"
+magic-builder doc append --html app.html --doc-token <docx-token>
+```
+
+Install or update the Magic Builder Codex skill:
+
+```bash
+magic-builder skill install
+magic-builder skill check-update
+magic-builder skill update
+```
+
+Check local environment:
+
+```bash
+magic-builder version
+magic-builder doctor
+magic-builder config get
+```
+
+## Help
+
+All of these forms are supported:
+
+```bash
+magic-builder help
+magic-builder help page
+magic-builder page help
+magic-builder page publish help
+magic-builder man
+```
+
+`--help`, `-h`, and `--man` are also supported.
+
+## Global Options
+
+```text
+--base-url, --magic-base-url <url>   Magic service base URL
+--token <token>                      Auth token override
+--format json|table|plain            Output format, default json
+--quiet, -q                          Suppress progress messages
+--version, -v                        Show version
+```
+
+Default Magic service:
+
+```text
+https://magic.solutionsuite.cn
+```

package/bin/magic-builder.js

@@ -8,11 +8,13 @@ const COMMANDS = {
   auth: require('../src/commands/auth'),
   page: require('../src/commands/page'),
   faas: require('../src/commands/faas'),
-  asset: require('../src/commands/asset'),
+  file: require('../src/commands/file'),
   link: require('../src/commands/link'),
   doc: require('../src/commands/doc'),
   feedback: require('../src/commands/feedback'),
   skill: require('../src/commands/skill'),
+  version: require('../src/commands/version'),
+  update: require('../src/commands/update'),
   doctor: require('../src/commands/doctor'),
   config: require('../src/commands/config'),
 };
@@ -45,11 +47,13 @@ function parseGlobalArgs(argv) {
       opts.token = argv[++i];
     } else if (a === '--format') {
       opts.format = argv[++i];
+      opts.formatExplicit = true;
     } else if (a === '--quiet' || a === '-q') {
       opts.quiet = true;
     } else if (a.startsWith('--') && a.includes('=')) {
       const eq = a.indexOf('=');
       opts[toCamel(a.slice(2, eq))] = a.slice(eq + 1);
+      if (a.slice(2, eq) === 'format') opts.formatExplicit = true;
     } else if (a.startsWith('--')) {
       const name = a.slice(2);
       const next = argv[i + 1];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "magic-builder",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "CLI for Magic Builder — publish pages, functions, and files",
   "bin": {
     "magic-builder": "./bin/magic-builder.js",

package/src/commands/config.js

@@ -1,6 +1,6 @@
 'use strict';
 
-const { getBaseUrl } = require('../lib/config');
+const { CONFIG_DIR, getAppsConfigPath, getBaseUrl } = require('../lib/config');
 const { TOKEN_FILE, showToken } = require('../lib/auth');
 const { success, fail } = require('../lib/output');
 
@@ -9,7 +9,9 @@ async function run(args, opts) {
   if (sub !== 'get') fail('Usage: magic-builder config get', 'E_INVALID_ARGS');
   success({
     base_url: getBaseUrl(opts),
+    config_dir: CONFIG_DIR,
     token_file: TOKEN_FILE,
+    apps_config_file: getAppsConfigPath(),
     token: showToken() || '',
   }, opts);
 }

package/src/commands/doctor.js

@@ -2,7 +2,7 @@
 
 const fs = require('fs');
 const { spawnSync } = require('child_process');
-const { getBaseUrl } = require('../lib/config');
+const { CONFIG_DIR, getAppsConfigPath, getBaseUrl } = require('../lib/config');
 const { showToken, TOKEN_FILE } = require('../lib/auth');
 const { success } = require('../lib/output');
 
@@ -10,8 +10,10 @@ async function run(args, opts) {
   const checks = [];
   checks.push({ name: 'node', ok: true, detail: process.version });
   checks.push({ name: 'base_url', ok: true, detail: getBaseUrl(opts) });
+  checks.push({ name: 'config_dir_writable', ok: canWritePath(CONFIG_DIR), detail: CONFIG_DIR });
+  checks.push({ name: 'apps_config_file', ok: true, detail: getAppsConfigPath() });
   checks.push({ name: 'token', ok: !!showToken(), detail: showToken() ? `configured at ${process.env.MAGIC_TOKEN ? 'MAGIC_TOKEN' : TOKEN_FILE}` : 'not configured' });
-  checks.push({ name: 'token_file_writable', ok: canWriteTokenFile(), detail: TOKEN_FILE });
+  checks.push({ name: 'token_file_writable', ok: canWritePath(TOKEN_FILE), detail: TOKEN_FILE });
   checks.push({ name: 'lark-cli', ...commandCheck('lark-cli') });
   checks.push({ name: 'unzip', ...commandCheck('unzip') });
   success({ ok: checks.every((item) => item.ok), checks }, opts);
@@ -25,13 +27,17 @@ function commandCheck(command) {
   };
 }
 
-function canWriteTokenFile() {
+function canWritePath(targetPath) {
   try {
-    if (fs.existsSync(TOKEN_FILE)) {
-      fs.accessSync(TOKEN_FILE, fs.constants.W_OK);
+    if (fs.existsSync(targetPath)) {
+      fs.accessSync(targetPath, fs.constants.W_OK);
       return true;
     }
-    fs.accessSync(require('path').dirname(TOKEN_FILE), fs.constants.W_OK);
+    const dir = require('path').extname(targetPath) ? require('path').dirname(targetPath) : targetPath;
+    if (!fs.existsSync(dir)) {
+      fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+    }
+    fs.accessSync(dir, fs.constants.W_OK);
     return true;
   } catch {
     return false;

package/src/commands/faas.js

@@ -9,8 +9,13 @@ const { success, fail, failFromHttpError } = require('../lib/output');
 
 async function run(args, opts) {
   const sub = args[0];
-  if (sub !== 'publish') fail('Usage: magic-builder faas publish <file.js>', 'E_INVALID_ARGS');
-  args = args.slice(1);
+  if (sub === 'publish') return publish(args.slice(1), opts);
+  if (sub === 'list') return list(opts);
+  if (sub === 'delete') return deleteFaas(opts);
+  fail('Usage: magic-builder faas <publish|list|delete>', 'E_INVALID_ARGS');
+}
+
+async function publish(args, opts) {
   let code;
 
   if (opts.code) {
@@ -61,6 +66,48 @@ async function run(args, opts) {
   }, opts);
 }
 
+async function list(opts) {
+  let token;
+  try { token = await getToken(opts); } catch (e) { fail(e.message, 'E_NO_TOKEN', 2); }
+  const baseUrl = getBaseUrl(opts);
+  const url = new URL('/api/faas', baseUrl);
+  if (opts.title) url.searchParams.set('title', opts.title);
+  if (opts.q) url.searchParams.set('q', opts.q);
+  let res;
+  try {
+    res = await request(String(url), { token });
+  } catch (e) { failFromHttpError(e); }
+  if (res.code !== 0) fail(res.msg || 'FaaS list failed', 'E_LIST_FAILED');
+  const data = res.data || {};
+  if (opts.format === 'plain') {
+    const rows = (data.records || []).map((record) => {
+      const id = record.id || String(record.record_id || '').replace(/^rec/, '');
+      const modified = record.modify_time ? `  modified=${record.modify_time}` : '';
+      return `${id}  ${record.name || '(unnamed)'}${modified}  ${baseUrl}/api/faas/${id}`;
+    });
+    success(rows.join('\n'), opts);
+    return;
+  }
+  success(data, opts);
+}
+
+async function deleteFaas(opts) {
+  const id = opts.id;
+  if (!id) fail('Missing --id. Usage: magic-builder faas delete --id <id>', 'E_INVALID_ARGS');
+  let token;
+  try { token = await getToken(opts); } catch (e) { fail(e.message, 'E_NO_TOKEN', 2); }
+  const baseUrl = getBaseUrl(opts);
+  let res;
+  try {
+    res = await request(`${baseUrl}/api/faas?id=${encodeURIComponent(id)}`, {
+      method: 'DELETE',
+      token,
+    });
+  } catch (e) { failFromHttpError(e); }
+  if (res.code !== 0) fail(res.msg || 'FaaS delete failed', 'E_DELETE_FAILED');
+  success(res.data || res, opts);
+}
+
 function generateName(filePath) {
   if (!filePath) return `func_${Date.now().toString(36)}`;
   const base = path.basename(filePath, path.extname(filePath));

package/src/commands/file.js

@@ -0,0 +1,93 @@
+'use strict';
+
+const fs = require('fs');
+const { getToken } = require('../lib/auth');
+const { getBaseUrl } = require('../lib/config');
+const { request } = require('../lib/http');
+const { shouldUseMultipart, uploadSingle, uploadMultipart } = require('../lib/multipart');
+const { success, fail, failFromHttpError } = require('../lib/output');
+
+async function run(args, opts) {
+  const sub = args[0];
+  if (sub === 'upload') return upload(args.slice(1), opts);
+  if (sub === 'list') return list(opts);
+  if (sub === 'delete') return deleteFile(opts);
+  fail('Usage: magic-builder file <upload|list|delete>', 'E_INVALID_ARGS');
+}
+
+async function upload(args, opts) {
+  const file = args[0];
+  if (!file) fail('Missing file argument. Usage: magic-builder file upload <file>', 'E_INVALID_ARGS');
+  if (!fs.existsSync(file)) fail(`File not found: ${file}`, 'E_NOT_FOUND');
+
+  const stat = fs.statSync(file);
+  if (stat.size === 0) fail('File is empty', 'E_EMPTY_FILE');
+
+  let token;
+  try { token = await getToken(opts); } catch (e) { fail(e.message, 'E_NO_TOKEN', 2); }
+
+  const uploadOpts = {
+    baseUrl: getBaseUrl(opts),
+    key: opts.key,
+    contentType: opts.contentType,
+    quiet: opts.quiet,
+    token,
+  };
+
+  let result;
+  try {
+    result = shouldUseMultipart(stat.size)
+      ? await uploadMultipart(file, uploadOpts)
+      : await uploadSingle(file, uploadOpts);
+  } catch (e) {
+    if (e.code) failFromHttpError(e);
+    fail(e.message, 'E_UPLOAD_FAILED');
+  }
+
+  success(result, opts);
+}
+
+async function list(opts) {
+  let token;
+  try { token = await getToken(opts); } catch (e) { fail(e.message, 'E_NO_TOKEN', 2); }
+  const baseUrl = getBaseUrl(opts);
+  const url = new URL('/api/tos', baseUrl);
+  if (opts.title) url.searchParams.set('title', opts.title);
+  if (opts.q) url.searchParams.set('q', opts.q);
+
+  let res;
+  try {
+    res = await request(String(url), { token });
+  } catch (e) { failFromHttpError(e); }
+  if (res.code !== 0) fail(res.msg || 'File list failed', 'E_LIST_FAILED');
+
+  const data = res.data || {};
+  if (opts.format === 'plain') {
+    const rows = (data.records || []).map((record) => {
+      const modified = record.upload_time ? `  uploaded=${record.upload_time}` : '';
+      return `${record.id || ''}  ${record.filename || '(unnamed)'}${modified}  ${record.url || ''}`;
+    });
+    success(rows.join('\n'), opts);
+    return;
+  }
+  success(data, opts);
+}
+
+async function deleteFile(opts) {
+  const id = opts.id;
+  if (!id) fail('Missing --id. Usage: magic-builder file delete --id <id>', 'E_INVALID_ARGS');
+  let token;
+  try { token = await getToken(opts); } catch (e) { fail(e.message, 'E_NO_TOKEN', 2); }
+  const baseUrl = getBaseUrl(opts);
+  let res;
+  try {
+    res = await request(`${baseUrl}/api/tos?id=${encodeURIComponent(id)}`, {
+      method: 'DELETE',
+      token,
+    });
+  } catch (e) { failFromHttpError(e); }
+  if (res.code !== 0) fail(res.msg || 'File delete failed', 'E_DELETE_FAILED');
+  success(res.data || res, opts);
+}
+
+module.exports = { run };

package/src/commands/page.js

@@ -16,7 +16,8 @@ async function run(args, opts) {
   if (sub === 'publish') return publish(args.slice(1), opts);
   if (sub === 'list') return list(opts);
   if (sub === 'export') return exportApps(opts);
-  fail('Usage: magic-builder page <publish|list|export>', 'E_INVALID_ARGS');
+  if (sub === 'delete') return deletePage(opts);
+  fail('Usage: magic-builder page <publish|list|export|delete>', 'E_INVALID_ARGS');
 }
 
 async function publish(args, opts) {
@@ -134,6 +135,24 @@ async function exportApps(opts) {
   success({ written: writeExport(opts.out, exports) }, opts);
 }
 
+async function deletePage(opts) {
+  const id = opts.id;
+  if (!id) fail('Missing --id. Usage: magic-builder page delete --id <id>', 'E_INVALID_ARGS');
+  let token;
+  try { token = await getToken(opts); } catch (e) { fail(e.message, 'E_NO_TOKEN', 2); }
+  const baseUrl = getBaseUrl(opts);
+  let res;
+  try {
+    res = await request(`${baseUrl}/api/html-box/${encodeURIComponent(normalizeId(id))}`, {
+      method: 'DELETE',
+      token,
+    });
+  } catch (e) { failFromHttpError(e); }
+  if (res.code !== 0) fail(res.msg || 'Page delete failed', 'E_DELETE_FAILED');
+  removeDeletedPageFromConfig(normalizeId(id));
+  success({ ...(res.data || res), deleted: true }, opts);
+}
+
 async function searchApps(opts) {
   const baseUrl = getBaseUrl(opts);
   const scope = normalizeScope(opts.scope);
@@ -228,6 +247,20 @@ function writeExport(out, exports) {
   });
 }
 
+function removeDeletedPageFromConfig(id) {
+  const normalized = normalizeId(id);
+  const config = loadAppsConfig();
+  let changed = false;
+  for (const [key, value] of Object.entries(config)) {
+    const record = value || {};
+    if (normalizeId(record.id || record.remoteId) === normalized) {
+      delete config[key];
+      changed = true;
+    }
+  }
+  if (changed) saveAppsConfig(config);
+}
+
 function hasLikelyInlineLargeResource(html) {
   return /data:[^"'()\s>]+;base64,/i.test(html) || /base64,[A-Za-z0-9+/=]{1024,}/.test(html);
 }

package/src/commands/update.js

@@ -0,0 +1,98 @@
+'use strict';
+
+const fs = require('fs');
+const { spawnSync } = require('child_process');
+const { success, fail } = require('../lib/output');
+
+const PACKAGE_NAME = 'magic-builder';
+
+async function run(_args, opts) {
+  const detected = opts.manager
+    ? { manager: normalizeManager(opts.manager), reason: 'option' }
+    : detectPackageManager();
+  const manager = detected.manager;
+  const command = buildUpdateCommand(manager);
+
+  if (opts.dryRun) {
+    success({ manager, reason: detected.reason, command: command.join(' ') }, opts);
+    return;
+  }
+
+  if (!opts.quiet) {
+    process.stderr.write(`Updating ${PACKAGE_NAME} with ${manager}...\n`);
+  }
+
+  const result = spawnSync(command[0], command.slice(1), {
+    stdio: 'inherit',
+    shell: false,
+  });
+
+  if (result.error) fail(result.error.message, 'E_UPDATE_FAILED');
+  if (result.status !== 0) fail(`${manager} update failed`, 'E_UPDATE_FAILED', result.status || 1);
+
+  success({ updated: true, manager, reason: detected.reason, command: command.join(' ') }, opts);
+}
+
+function normalizeManager(value) {
+  const manager = String(value || '').trim().toLowerCase();
+  if (!manager || manager === 'npm') return 'npm';
+  if (manager === 'bun') return 'bun';
+  fail(`Unsupported package manager: ${value}. Use --manager npm or --manager bun.`, 'E_INVALID_ARGS');
+}
+
+function detectPackageManager() {
+  const execPath = realpath(process.argv[1] || '');
+  const npmExecPath = realpath(process.env.npm_execpath || '');
+  const ua = String(process.env.npm_config_user_agent || '').toLowerCase();
+
+  if (ua.startsWith('bun/') || npmExecPath.includes('/bun')) {
+    return { manager: 'bun', reason: 'bun_user_agent' };
+  }
+  if (ua.startsWith('npm/') || npmExecPath.includes('/npm')) {
+    return { manager: 'npm', reason: 'npm_user_agent' };
+  }
+  if (process.versions && process.versions.bun) {
+    return { manager: 'bun', reason: 'bun_runtime' };
+  }
+  if (isBunGlobalPath(execPath)) {
+    return { manager: 'bun', reason: 'bun_global_path' };
+  }
+  if (isNpmGlobalPath(execPath)) {
+    return { manager: 'npm', reason: 'npm_global_path' };
+  }
+  if (!commandExists('npm') && commandExists('bun')) {
+    return { manager: 'bun', reason: 'bun_available' };
+  }
+  return { manager: 'npm', reason: 'default' };
+}
+
+function realpath(value) {
+  if (!value) return '';
+  try {
+    return fs.realpathSync(value);
+  } catch {
+    return String(value || '');
+  }
+}
+
+function isBunGlobalPath(value) {
+  const normalized = String(value || '').replace(/\\/g, '/').toLowerCase();
+  return normalized.includes('/.bun/install/global/') || normalized.includes('/bun/install/global/');
+}
+
+function isNpmGlobalPath(value) {
+  const normalized = String(value || '').replace(/\\/g, '/').toLowerCase();
+  return normalized.includes('/lib/node_modules/') || normalized.includes('/node_modules/magic-builder/');
+}
+
+function commandExists(command) {
+  const result = spawnSync(command, ['--version'], { encoding: 'utf8', stdio: 'ignore' });
+  return !result.error && result.status === 0;
+}
+
+function buildUpdateCommand(manager) {
+  if (manager === 'bun') return ['bun', 'add', '-g', `${PACKAGE_NAME}@latest`];
+  return ['npm', 'install', '-g', `${PACKAGE_NAME}@latest`];
+}
+
+module.exports = { run };

package/src/commands/version.js

@@ -0,0 +1,14 @@
+'use strict';
+
+const pkg = require('../../package.json');
+
+async function run(_args, opts) {
+  if (opts.formatExplicit && opts.format === 'json') {
+    process.stdout.write(JSON.stringify({ name: pkg.name, version: pkg.version }, null, 2) + '\n');
+    process.exit(0);
+  }
+  process.stdout.write(pkg.version + '\n');
+  process.exit(0);
+}
+
+module.exports = { run };

package/src/index.js

@@ -9,11 +9,13 @@ module.exports = {
     auth: require('./commands/auth'),
     page: require('./commands/page'),
     faas: require('./commands/faas'),
-    asset: require('./commands/asset'),
+    file: require('./commands/file'),
     link: require('./commands/link'),
     doc: require('./commands/doc'),
     feedback: require('./commands/feedback'),
     skill: require('./commands/skill'),
+    version: require('./commands/version'),
+    update: require('./commands/update'),
     doctor: require('./commands/doctor'),
     config: require('./commands/config'),
   },

package/src/lib/auth.js

@@ -3,15 +3,17 @@
 const fs = require('fs');
 const path = require('path');
 const os = require('os');
+const { CONFIG_DIR } = require('./config');
 
-const TOKEN_FILE = path.join(os.homedir(), '.magic-token');
+const TOKEN_FILE = path.join(CONFIG_DIR, 'magic-token');
+const LEGACY_HOME_TOKEN_FILE = path.join(os.homedir(), '.magic-token');
 const PROJECT_TOKEN_FILE = path.join(process.cwd(), '.magic-token');
 
 function getToken(opts = {}) {
   if (opts.token) return Promise.resolve(opts.token);
   if (process.env.MAGIC_TOKEN) return Promise.resolve(process.env.MAGIC_TOKEN);
 
-  for (const file of [TOKEN_FILE, PROJECT_TOKEN_FILE]) {
+  for (const file of [TOKEN_FILE, LEGACY_HOME_TOKEN_FILE, PROJECT_TOKEN_FILE]) {
     if (!fs.existsSync(file)) continue;
     try {
       const t = fs.readFileSync(file, 'utf8').trim();
@@ -23,6 +25,7 @@ function getToken(opts = {}) {
 }
 
 function setToken(value) {
+  fs.mkdirSync(CONFIG_DIR, { recursive: true, mode: 0o700 });
   fs.writeFileSync(TOKEN_FILE, value.trim(), { mode: 0o600 });
 }
 
@@ -30,7 +33,7 @@ function showToken() {
   if (process.env.MAGIC_TOKEN) {
     return mask(process.env.MAGIC_TOKEN);
   }
-  for (const file of [TOKEN_FILE, PROJECT_TOKEN_FILE]) {
+  for (const file of [TOKEN_FILE, LEGACY_HOME_TOKEN_FILE, PROJECT_TOKEN_FILE]) {
     if (!fs.existsSync(file)) continue;
     try {
       const t = fs.readFileSync(file, 'utf8').trim();
@@ -45,4 +48,4 @@ function mask(t) {
   return t.slice(0, 4) + '****' + t.slice(-4);
 }
 
-module.exports = { getToken, setToken, showToken, TOKEN_FILE, PROJECT_TOKEN_FILE };
+module.exports = { getToken, setToken, showToken, TOKEN_FILE, LEGACY_HOME_TOKEN_FILE, PROJECT_TOKEN_FILE };

package/src/lib/config.js

@@ -5,7 +5,9 @@ const path = require('path');
 const os = require('os');
 
 const DEFAULT_BASE_URL = 'https://magic.solutionsuite.cn';
-const APPS_CONFIG_FILE = '.magic-apps.json';
+const CONFIG_DIR = path.join(os.homedir(), '.magic-builder');
+const APPS_CONFIG_FILE = 'magic-apps.json';
+const LEGACY_APPS_CONFIG_FILE = '.magic-apps.json';
 
 function normalizeMagicBaseUrl(value) {
   const raw = String(value || DEFAULT_BASE_URL).trim().replace(/\/+$/, '');
@@ -18,11 +20,13 @@ function getBaseUrl(opts = {}) {
 }
 
 function getAppsConfigPath() {
-  return path.join(process.cwd(), APPS_CONFIG_FILE);
+  return path.join(CONFIG_DIR, APPS_CONFIG_FILE);
 }
 
 function loadAppsConfig() {
-  const p = getAppsConfigPath();
+  const p = fs.existsSync(getAppsConfigPath())
+    ? getAppsConfigPath()
+    : path.join(process.cwd(), LEGACY_APPS_CONFIG_FILE);
   if (fs.existsSync(p)) {
     try { return JSON.parse(fs.readFileSync(p, 'utf8')); } catch (_) {}
   }
@@ -30,7 +34,8 @@ function loadAppsConfig() {
 }
 
 function saveAppsConfig(config) {
+  fs.mkdirSync(CONFIG_DIR, { recursive: true, mode: 0o700 });
   fs.writeFileSync(getAppsConfigPath(), JSON.stringify(config, null, 2));
 }
 
-module.exports = { DEFAULT_BASE_URL, normalizeMagicBaseUrl, getBaseUrl, loadAppsConfig, saveAppsConfig };
+module.exports = { DEFAULT_BASE_URL, CONFIG_DIR, normalizeMagicBaseUrl, getBaseUrl, getAppsConfigPath, loadAppsConfig, saveAppsConfig };

package/src/lib/help.js

@@ -15,13 +15,15 @@ SYNTAX:
 
 COMMANDS:
   auth       Login and manage Magic developer tokens
-  page       Publish, list, and export Magic pages
-  faas       Publish Magic FaaS functions
-  asset      Upload files to TOS
+  page       Publish, list, export, and delete Magic pages
+  faas       Publish, list, and delete Magic FaaS functions
+  file       Upload, list, and delete TOS files
   link       Generate Magic share links
   doc        Create or append Feishu Doc HTML Box apps
   feedback   Create Magic feedback records
   skill      Check or update the Magic Builder skill package
+  version    Show CLI version
+  update     Update this CLI package
   doctor     Check local CLI environment
   config     Show resolved CLI configuration
 
@@ -33,13 +35,20 @@ EXAMPLES:
   magic-builder page publish app.html --title "Dashboard"
   magic-builder page list --scope mine
   magic-builder page export --id recxxx --out app.html
+  magic-builder page delete --id recxxx
   magic-builder faas publish handler.js --name report-api
-  magic-builder asset upload logo.png
+  magic-builder faas list
+  magic-builder faas delete --id recxxx
+  magic-builder file upload logo.png
+  magic-builder file list
+  magic-builder file delete --id recxxx
   magic-builder link create --title "Weekly Report"
   magic-builder doc create --html app.html --title "Demo"
   magic-builder feedback create --feedback "打不开页面"
   magic-builder skill install
   magic-builder skill check-update
+  magic-builder version
+  magic-builder update
 
 ALIASES:
   magic-cli and miaobi are equivalent executable names.
@@ -74,11 +83,16 @@ COMMANDS:
   page list [--title <keyword>] [--scope mine|public]
   page export --id <id> --out <file|dir> [--scope mine|public]
   page export --title <keyword> --out <dir> [--all] [--scope mine|public]
+  page delete --id <id>
 
   faas publish <file.js> --name <name> [--id <id>]
   faas publish --code <code> --name <name> [--id <id>]
+  faas list [--title <keyword>]
+  faas delete --id <id>
 
-  asset upload <file> [--key <key>] [--content-type <mime>]
+  file upload <file> [--key <key>] [--content-type <mime>]
+  file list [--title <keyword>]
+  file delete --id <id>
 
   link create --title <text>
   link create --fid <id>
@@ -93,6 +107,9 @@ COMMANDS:
   skill check-update [--environment auto|local|cloud] [--skills-root <dir>]
   skill update [--environment auto|local|cloud] [--skills-root <dir>]
 
+  version
+  update [--manager npm|bun] [--dry-run]
+
   doctor
   config get
 `;
@@ -100,9 +117,15 @@ COMMANDS:
 const MAN = `${HELP}
 
 AUTHENTICATION:
-  Token lookup order: --token flag, MAGIC_TOKEN environment variable, ~/.magic-token.
+  Token lookup order: --token flag, MAGIC_TOKEN, ~/.magic-builder/magic-token,
+  legacy ~/.magic-token, and project .magic-token.
   Use "magic-builder auth login" for browser-based Magic developer token auth.
 
+CONFIG:
+  User-level CLI state is stored under ~/.magic-builder/.
+  Token file: ~/.magic-builder/magic-token
+  Page publish records: ~/.magic-builder/magic-apps.json
+
 OUTPUT:
   json is the default and is intended for agents and scripts.
   plain prints key-value pairs or command-specific plain text where available.
@@ -127,17 +150,22 @@ SYNTAX:
   magic-builder page list [--title <keyword>] [--scope mine|public]
   magic-builder page export --id <id> --out <file|dir> [--scope mine|public]
   magic-builder page export --title <keyword> --out <dir> [--all] [--scope mine|public]
+  magic-builder page delete --id <id>
 `,
   faas: `@HELP magic-builder/faas
 
 SYNTAX:
   magic-builder faas publish <file.js> --name <name> [--id <id>]
   magic-builder faas publish --code <code> --name <name> [--id <id>]
+  magic-builder faas list [--title <keyword>]
+  magic-builder faas delete --id <id>
 `,
-  asset: `@HELP magic-builder/asset
+  file: `@HELP magic-builder/file
 
 SYNTAX:
-  magic-builder asset upload <file> [--key <key>] [--content-type <mime>]
+  magic-builder file upload <file> [--key <key>] [--content-type <mime>]
+  magic-builder file list [--title <keyword>]
+  magic-builder file delete --id <id>
 `,
   link: `@HELP magic-builder/link
 
@@ -163,6 +191,20 @@ SYNTAX:
   magic-builder skill install [--environment auto|local|cloud] [--skills-root <dir>]
   magic-builder skill check-update [--environment auto|local|cloud] [--skills-root <dir>]
   magic-builder skill update [--environment auto|local|cloud] [--skills-root <dir>]
+`,
+  version: `@HELP magic-builder/version
+
+SYNTAX:
+  magic-builder version
+  magic-builder --version
+`,
+  update: `@HELP magic-builder/update
+
+SYNTAX:
+  magic-builder update [--manager npm|bun] [--dry-run]
+
+NOTES:
+  Package manager is detected automatically. Use --manager only to override.
 `,
   doctor: `@HELP magic-builder/doctor
 

package/src/lib/multipart.js

@@ -12,7 +12,7 @@ function shouldUseMultipart(fileSize) {
 }
 
 async function uploadSingle(filePath, opts = {}) {
-  const { baseUrl, key, contentType, quiet } = opts;
+  const { baseUrl, key, contentType, quiet, token } = opts;
   const filename = require('path').basename(filePath);
   const mime = contentType || require('./mime').getMimeType(filePath);
 
@@ -38,11 +38,30 @@ async function uploadSingle(filePath, opts = {}) {
   });
 
   if (!quiet) process.stderr.write('done\n');
-  return { url, key: signRes.data.key, size: buf.length };
+  const record = await request(`${baseUrl}/api/tos`, {
+    method: 'POST',
+    token,
+    body: {
+      action: 'record',
+      url,
+      key: signRes.data.key,
+      filename,
+      contentType: mime,
+    },
+  });
+  if (record.code !== 0) throw new Error(record.msg || 'Upload audit failed');
+
+  return {
+    id: record.data?.id || '',
+    record_id: record.data?.record_id || '',
+    url,
+    key: signRes.data.key,
+    size: buf.length,
+  };
 }
 
 async function uploadMultipart(filePath, opts = {}) {
-  const { baseUrl, key, contentType, quiet } = opts;
+  const { baseUrl, key, contentType, quiet, token } = opts;
   const filename = require('path').basename(filePath);
   const mime = contentType || require('./mime').getMimeType(filePath);
   const stat = fs.statSync(filePath);
@@ -100,13 +119,20 @@ async function uploadMultipart(filePath, opts = {}) {
 
   const completeRes = await request(`${baseUrl}/api/tos/multipart/complete`, {
     method: 'POST',
-    body: { uploadId, key: tosKey, parts },
+    token,
+    body: { uploadId, key: tosKey, parts, filename, contentType: mime },
   });
 
   if (completeRes.code !== 0) throw new Error(completeRes.msg || 'Multipart complete failed');
   if (!quiet) process.stderr.write('\rUpload complete.        \n');
 
-  return { url: completeRes.data?.url || url, key: tosKey, size: stat.size };
+  return {
+    id: completeRes.data?.id || '',
+    record_id: completeRes.data?.record_id || '',
+    url: completeRes.data?.url || url,
+    key: tosKey,
+    size: stat.size,
+  };
 }
 
 async function abortMultipart(baseUrl, uploadId, key) {

package/src/commands/asset.js

@@ -1,38 +0,0 @@
-'use strict';
-
-const fs = require('fs');
-const { getBaseUrl } = require('../lib/config');
-const { shouldUseMultipart, uploadSingle, uploadMultipart } = require('../lib/multipart');
-const { success, fail, failFromHttpError } = require('../lib/output');
-
-async function run(args, opts) {
-  const sub = args[0];
-  if (sub !== 'upload') fail('Usage: magic-builder asset upload <file>', 'E_INVALID_ARGS');
-  const file = args[1];
-  if (!file) fail('Missing file argument. Usage: magic-builder asset upload <file>', 'E_INVALID_ARGS');
-  if (!fs.existsSync(file)) fail(`File not found: ${file}`, 'E_NOT_FOUND');
-
-  const stat = fs.statSync(file);
-  if (stat.size === 0) fail('File is empty', 'E_EMPTY_FILE');
-
-  const uploadOpts = {
-    baseUrl: getBaseUrl(opts),
-    key: opts.key,
-    contentType: opts.contentType,
-    quiet: opts.quiet,
-  };
-
-  let result;
-  try {
-    result = shouldUseMultipart(stat.size)
-      ? await uploadMultipart(file, uploadOpts)
-      : await uploadSingle(file, uploadOpts);
-  } catch (e) {
-    if (e.code) failFromHttpError(e);
-    fail(e.message, 'E_UPLOAD_FAILED');
-  }
-
-  success(result, opts);
-}
-
-module.exports = { run };