Pp Ht ML

<!-- GENERATED FILE — DO NOT EDIT.
     This file is a verbatim mirror of library/cloud/ht-ml/SKILL.md,
     regenerated post-merge by tools/generate-skills/. Hand-edits here are
     silently overwritten on the next regen. Edit the library/ source instead.
     See the repository agent guide, section "Generated artifacts: registry.json, cli-skills/". -->

ht-ml.app — Printing Press CLI

Prerequisites: Install the CLI

This skill drives the ht-ml-pp-cli binary. You must verify the CLI is installed before invoking any command from this skill. If it is missing, install it first:

1. Install via the Printing Press installer. It defaults binaries to $HOME/.local/bin on macOS/Linux and %LOCALAPPDATA%\Programs\PrintingPress\bin on Windows:

   npx -y @mvanhorn/printing-press-library install ht-ml --cli-only

2. Verify: ht-ml-pp-cli --version
3. Ensure the reported install directory is on $PATH for the agent/runtime that will invoke this skill.

If the npx install fails (no Node, offline, etc.), fall back to a direct Go install (requires Go 1.26.6 or newer). This installs into $GOPATH/bin (default $HOME/go/bin), so add that directory to $PATH instead:

go install github.com/mvanhorn/printing-press-library/library/cloud/ht-ml/cmd/ht-ml-pp-cli@latest

If --version reports "command not found" after install, the runtime cannot see the binary directory on $PATH. Do not proceed with skill commands until verification succeeds.

ht-ml.app is deliberately accountless: you POST one HTML document, get a public URL, and a write key shown exactly once. That makes publishing frictionless and management impossible. This CLI is the missing memory layer. Every publish is captured to a local SQLite store, so you can list and audit everything you've shipped, update a site by id without ever touching its key, auto-upload referenced assets in one pass, roll back to any prior version, and export a passphrase-sealed vault of your keys for disaster recovery.

When to Use This CLI

Use this CLI whenever an agent needs to publish a single HTML document to a public URL fast (prototypes, diagrams, decks, status reports, code reviews) and then manage it over time. It is the right tool when you will publish more than once and need to find, update, version, or recover past sites, capabilities ht-ml.app's accountless API does not provide on its own.

Anti-triggers

Do not use this CLI for:

• Do not use this CLI to host multi-file apps, SPAs with build steps, or anything needing a server runtime; ht-ml.app serves one HTML document per site.
• Do not publish private or confidential content; everything is public, and a per-site password is only a shared-secret gate, not real security.
• Do not use it as a CDN for a large media library; assets must be referenced by the site's HTML to be uploadable.

Unique Capabilities

These capabilities aren't available in any other tool for this API.

Registry & recovery

• list — See every site you've ever published, with health flags for orphaned sites and broken assets.

  Reach for this to recall or audit what you've shipped; it's the only way to enumerate sites the accountless API won't list.

  ht-ml-pp-cli list --agent --select url,title,status

• keys export — Reveal a single write key, or export/import a passphrase-sealed vault of all your update_keys for disaster recovery and a second machine.

  Use after publishing or before switching machines; without a vault, a lost key orphans the site forever.

  ht-ml-pp-cli keys export --out ht-ml-keys.vault

Asset reconciliation

• assets sync — Parse a site's HTML, find every referenced-but-missing image or video, and upload them all in one pass.

  Pick this whenever a published page has broken images; it fixes all of them at once instead of one upload per file.

  ht-ml-pp-cli assets sync <site_id> --root ./public

• assets audit — Across all your sites, list the ones with publicly-visible broken or missing images.

  Run during a review to catch broken client-facing pages before someone else does.

  ht-ml-pp-cli assets audit --missing-only --agent

Versioning & living docs

• rollback — Revert a live site to any prior HTML version stored locally, with the update_key resolved for you.

  Use when a republish shipped bad data; it restores the last-good HTML in one command.

  ht-ml-pp-cli rollback <site_id>

• republish — Publish a recurring document under a stable local alias: update in place if the alias exists, or create it once and bind it.

  Pick this for scheduled or daily publishes so the public URL never churns.

  ht-ml-pp-cli republish --as status-report ./status.html

Publish safety

• scan — Mechanically scan HTML for leaked secrets and PII before it becomes a public, permanent URL.

  Run before any publish on a person's behalf; it returns a typed exit code so it can gate a pipeline.

  ht-ml-pp-cli scan ./page.html

Command Reference

sites — Inspect ht-ml.app sites

• ht-ml-pp-cli sites <site_id> — Get a site's status and the assets its HTML references (no auth; public read)

Finding the right command

When you know what you want to do but not which command does it, ask the CLI directly:

ht-ml-pp-cli which "<capability in your own words>"

which resolves a natural-language capability query to the best matching command from this CLI's curated feature index. Exit code 0 means at least one match; exit code 2 means no confident match — fall back to --help or use a narrower query.

Recipes

Publish a deck and get just the URL

ht-ml-pp-cli publish ./deck.html --agent --select url,site_id

Publish and return only the live URL and id, ready to hand to a downstream step.

Inspect a site's referenced assets compactly

ht-ml-pp-cli sites <site_id> --agent --select status,assets.relative_path,assets.status

Use dotted --select to narrow the verbose site-plus-assets payload to just status and each asset's path and status.

Audit every site for broken images

ht-ml-pp-cli assets audit --missing-only --agent

Cross-site join that lists publicly-visible missing assets the API cannot surface in one call.

List your published sites by title

ht-ml-pp-cli list --sort title --agent --select site_id,title,url

The local registry is the only inventory of what you have shipped (the API has no list endpoint); sort by title to find a page fast.

Recover keys on a second machine

ht-ml-pp-cli keys import ht-ml-keys.vault

Import a passphrase-sealed vault so update and rollback work from another machine.

Auth Setup

ht-ml.app has no global API key. Creating and reading sites needs no credential at all. Each site mints a high-entropy update_key once at creation — the only write credential, with no recovery endpoint. This CLI captures that key into a local store at create time, so update, asset, and password commands resolve it automatically by site_id. Keep the store safe and back it up with keys export; losing an update_key with no backup orphans the site forever.

Run ht-ml-pp-cli doctor to verify setup.