This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+3 more
Affected surfaces
Summary
AI summaryvisit-and-extract tool and ProfileService were removed.
Full changelog
A major capability expansion over v0.1.0, adding full campaign lifecycle management, messaging tools, and significant infrastructure hardening.
Added
campaign-createtool for creating campaigns from YAML/JSON definitions with action chainscampaign-get,campaign-list,campaign-deletetools for campaign CRUD operationscampaign-exporttool for exporting campaigns to YAML/JSON formatcampaign-statustool for querying campaign execution statecampaign-startandcampaign-stoptools for controlling campaign executioncampaign-updatetool for modifying existing campaignscampaign-retrytool for retrying failed campaign actionscampaign-move-nexttool for advancing campaign queue positioncampaign-statisticstool for campaign execution metricsimport-people-from-urlstool for bulk-importing LinkedIn profiles into campaignscampaign-add-action,campaign-remove-action,campaign-reorder-actionstools for managing campaign action chainscampaign-exclude-list,campaign-exclude-add,campaign-exclude-removetools for campaign-action-level exclusion managementquery-messagestool for searching LinkedIn messaging historyscrape-messaging-historytool for extracting full conversation threadscheck-repliestool for detecting new message repliesquery-profiletool for looking up profile data by URL or slugquery-profilestool for searching across stored profilesdescribe-actionstool for listing available LinkedHelper action types with configuration schemasfind-apptool for detecting running LinkedHelper instances- Campaign YAML/JSON format for portable campaign definitions
- Campaign database repository with CRUD and queue reset operations
- CampaignService for campaign lifecycle and execution management
- Action execution service for running LinkedHelper actions programmatically
- Action types catalog with advanced configuration schemas for all LinkedHelper action types
MessageRepositoryfor conversation and message database accessCampaignFormatErrorintegrated into domain error hierarchy- URL validation for
navigateToProfileto reject malformed LinkedIn URLs - URL scheme validation in
CDPClient.navigate()to reject non-HTTP(S) schemes - Security warnings for
allowRemoteCDP parameter - Claude Code plugin with
lhremote-mcpskill for IDE integration - SPDX license headers on all source files
- ESLint rule to enforce SPDX license headers on new files
- Dependency license compatibility check in CI
- CODEOWNERS for security-sensitive files
- Issue templates for bug reports and feature requests
- Dependabot configuration for automated dependency updates
- CONTRIBUTING guide with development setup instructions
- Getting started guide
- Architecture Decision Records (ADRs)
- Security documentation for localhost trust model, loopback validation, and MCP trust model
- npm provenance attestation for release publishing
- GitHub Pages documentation site built via pandoc on every CI run
- Test coverage reporting with Codecov integration and coverage thresholds
Changed
- Replaced
better-sqlite3with Node.js built-innode:sqlitemodule - Extracted operations layer for 21 MCP/CLI tools, reducing duplication between CLI and MCP
- Decomposed
CampaignRepositoryinto focused repositories - Enriched error reporting in
checkStatusand CDP reconnection - Exported
WrongPortErrorfrom public API - Pinned GitHub Actions to commit SHAs for supply-chain security
- Added
timeout-minutesto all CI workflow jobs - Moved E2E tests out of core to dedicated package
- Exported
DEFAULT_CDP_PORTconstant for consistent usage across packages - Converted root devDependencies to pnpm workspace catalog refs
- Added
fail-fast: falseto CI matrix strategy - Pinned npm version in release workflow
- Added license-check to release validation job
Fixed
- Bare
parseIntusage on--max-resultsCLI option (now uses explicit radix) - Removed unused options from
launch-app/quit-appCLI commands - Windows compatibility for pnpm execution in CI scripts
- Explicit timer advancement for polling tests
- LIKE wildcard escaping for search queries
- Pagination for merged multi-database results in
query-profiles
Removed
visit-and-extracttool andProfileService— replaced byquery-profileandquery-profilesfor data access, and campaign tools for automation
Breaking Changes
- Removed `visit-and-extract` tool and `ProfileService`; use `query-profile`, `query-profiles`, and campaign automation APIs instead.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About alexey-pelykh/lhremote
Open-source CLI and MCP server for LinkedHelper automation — 32 tools for campaign management, messaging, and profile queries via Chrome DevTools Protocol.
Related context
Beta — feedback welcome: [email protected]