v3.7.1
Documentation release. No code paths changed.
Help page
The in-app help page had drifted to a v3.0 view of the service. It now documents what 3.7 ships:
- Corrected: the extraction stack was described as "Readability + Turndown" (a dependency replaced by
node-html-markdown), with Trafilatura and the headless-Chromium stage missing from the list entirely;comments/comment_depthwere presented as Reddit-only although Hacker News has honored them since 3.1. - New sections: endpoints (all 13, including
/api/stream, archive, storage, stats, config, recipes status), response headers (includingX-Transcript-Statusand the fiveX-Extract-*headers), query extraction, site recipes, and authentication. - The authentication section closes the practical gap:
/helpstays public whenPULLMD_AUTH_MODEis set, but never mentioned login, API keys or OAuth, so an instance could reject every API call without documenting how to authenticate against it. - "Local HTML files" grew into a "converting files" section covering
/api/html,/api/file, document URLs and images/audio/YouTube. The parameter table gainedrender,extractor,pdf,yt_timecodes,yt_chunkandmax_tokens.
README
- SSRF protection is now documented. The guard shipped in 3.3.0, but the README never mentioned it, so the default-deny behavior and the
PULLMD_ALLOWED_HOSTSopt-out were only discoverable from the changelog or.env.example. PULLMD_ALLOWED_HOSTSandPULLMD_SITE_RECIPESadded to the configuration table,/api/configand/api/recipes/statusto the endpoint table,query/max_tokens/pdf=ocrto the universal agent prompt, plus a summary of what the 3.x line added after 3.0.
Bundled Claude Code skill
Hacker News (pipeline entry and X-Source value), query / max_tokens with an example and a usage tip, X-Transcript-Status, and the X-Extract-* headers.
Full changelog: https://github.com/AeternaLabsHQ/pullmd/blob/main/CHANGELOG.md