continentept-mcp 0.3.1 → 0.4.0

package/.env.example

@@ -9,6 +9,9 @@ CONTINENTE_PASSWORD=replace-with-your-password
 # Close the browser after this many idle seconds; 0 keeps it open. Default: 300
 # CONTINENTE_BROWSER_IDLE_SECONDS=300
 
+# Set to 0 to stop the daily check for a newer release on npm.
+# CONTINENTE_UPDATE_CHECK=1
+
 # These two only work as environment variables in the MCP client configuration:
 # CONTINENTE_CREDENTIALS_FILE=/private/path/credentials.env
 # CONTINENTE_DATA_DIR=/private/path/continentept-mcp

package/CHANGELOG.md

@@ -6,6 +6,20 @@ All notable changes to this project are documented here. The format follows
 
 ## [Unreleased]
 
+## [0.4.0] - 2026-10-15
+
+### Added
+
+- Update notice: once a day the server checks npm for a newer release and, if there is one, tells the assistant and reports it in `get_session_status`. Offline-safe; turn it off with `CONTINENTE_UPDATE_CHECK=0`.
+
+### Fixed
+
+- Documentation: how the home folder is chosen on Windows, what "readable only by your user" covers, when the favorites snapshot is refetched, and what deleting the data directory removes.
+
+### Security
+
+- A failed sign-in could write the account password or session cookies to the server log, because browser automation errors include what was typed and the request headers. Sign-in errors are now reported as fixed messages naming only the failed step.
+
 ## [0.3.1] - 2026-10-15
 
 ### Added
@@ -41,7 +55,8 @@ All notable changes to this project are documented here. The format follows
 - Automatic sign-in from environment variables or a private credentials file, and a `login` command.
 - The `basket-planner` skill for planning a shopping list and updating the basket.
 
-[Unreleased]: https://github.com/andredelgado/continente-mcp/compare/v0.3.1...HEAD
+[Unreleased]: https://github.com/andredelgado/continente-mcp/compare/v0.4.0...HEAD
+[0.4.0]: https://github.com/andredelgado/continente-mcp/compare/v0.3.1...v0.4.0
 [0.3.1]: https://github.com/andredelgado/continente-mcp/compare/v0.3.0...v0.3.1
 [0.3.0]: https://github.com/andredelgado/continente-mcp/compare/v0.2.0...v0.3.0
 [0.2.0]: https://github.com/andredelgado/continente-mcp/compare/v0.1.0...v0.2.0

package/README.md

@@ -22,7 +22,8 @@ on the website.
   cannot be confirmed, the result says so and tells the assistant to check the cart instead
   of retrying.
 - **Your account**: favorites, order history and a ranking of the products you buy most.
-- **Runs locally** over stdio. Credentials and cookies stay on your machine.
+- **Runs locally** over stdio. Your credentials and session are stored on your computer and
+  sent only to Continente.pt.
 - **Built-in guidance.** The server tells the assistant the cart rules as soon as it
   connects, and offers a `basket-planner` prompt with the full shopping workflow. Nothing
   extra to install; the same guide also ships as a [skill](skills/basket-planner/SKILL.md).
@@ -44,11 +45,22 @@ it needs it (about 150 MB, once).
 3. Enter your Continente email and password when asked. Claude Desktop keeps the password
    in its secure settings storage.
 
-That's it. The extension updates when you install a newer `.mcpb`. The server is also listed
+That's it. The server is also listed
 in the [MCP Registry](https://registry.modelcontextprotocol.io) as
 `io.github.andredelgado/continente-mcp`, so clients that browse the registry can find it. To use 1Password instead
 of storing the password in Claude Desktop, use the manual setup below.
 
+### Updates
+
+The server checks npm once a day for a newer release. When there is one, it tells the
+assistant, so Claude can mention it, and `get_session_status` shows it.
+
+- **Extension:** download the new `continente-mcp.mcpb` and open it. Claude Desktop updates the
+  extension in place and keeps your email and password.
+- **npx setups:** using `continentept-mcp@latest` picks up new versions when the client restarts.
+- **Release emails:** on [GitHub](https://github.com/andredelgado/continente-mcp), choose
+  **Watch → Custom → Releases**.
+
 ## Manual setup (any MCP client)
 
 **1. Save your credentials** in `~/.continentept-mcp/credentials.env` (see

package/dist/cli.js

@@ -5,6 +5,9 @@ import { createShoppingApplication } from './runtime.js';
 import { runAutoLogin } from './auto-login.js';
 import { isMainModule } from './main-module.js';
 import { runChromiumInstall } from './session/chromium.js';
+import { safeLoginMessage } from './session/login-errors.js';
+import { checkForUpdate } from './services/updates.js';
+import { loadSettings } from './config.js';
 const USAGE = `Usage: continentept-mcp [command]
 
 Commands:
@@ -17,16 +20,20 @@ Options:
   -h, --help        Show this help
   -v, --version     Show the version
 `;
-function packageVersion() {
+function packageMetadata() {
     const metadata = JSON.parse(readFileSync(new URL('../package.json', import.meta.url), 'utf8'));
-    if (typeof metadata !== 'object' || metadata === null || !('version' in metadata) ||
-        typeof metadata.version !== 'string')
-        throw new Error('Missing package version');
-    return metadata.version;
+    if (typeof metadata !== 'object' || metadata === null || !('version' in metadata) || !('name' in metadata) ||
+        typeof metadata.version !== 'string' || typeof metadata.name !== 'string')
+        throw new Error('Missing package metadata');
+    return { name: metadata.name, version: metadata.version };
 }
 export async function startStdioServer() {
-    const version = packageVersion();
-    const application = createShoppingApplication({ version });
+    const { name, version } = packageMetadata();
+    const settings = loadSettings();
+    const update = await checkForUpdate({ currentVersion: version, packageName: name, dataDir: settings.dataDir, enabled: settings.updateCheck });
+    if (update.available)
+        console.error(`${name} ${update.latestVersion} is available (running ${version}).`);
+    const application = createShoppingApplication({ version, update });
     await connectStdioApplication(application);
     console.error(`continentept-mcp ${version} ready on stdio`);
     return application;
@@ -67,14 +74,14 @@ export async function main(args) {
                 return (await runAutoLogin({ showBrowser: rest.includes('--show-browser') })) ? 0 : 1;
             }
             catch (error) {
-                console.error(`Login failed: ${error instanceof Error ? error.message : 'unknown error'}`);
+                console.error(safeLoginMessage(error));
                 return 1;
             }
         case 'install-browser':
             return runChromiumInstall(rest);
         case '-v':
         case '--version':
-            console.log(packageVersion());
+            console.log(packageMetadata().version);
             return 0;
         case '-h':
         case '--help':

package/dist/clients/authentication.js

@@ -5,6 +5,7 @@ import { STOREFRONT_ORIGIN } from '../parsers/catalog.js';
 import { isLoginUrl, responseStatus } from './policy.js';
 import { CART_SUMMARY_URL } from './storefront.js';
 import { requestIO, acquireResource, checkRequest } from '../session/request.js';
+import { LoginFailed, loginFailure } from '../session/login-errors.js';
 const LOGIN_ORIGIN = 'https://login.continente.pt';
 const EMAIL_INPUT = '#userNameCC';
 const PASSWORD_INPUT = '#password_input';
@@ -59,32 +60,43 @@ export class AuthenticationClient {
             this.logger('Login skipped: CONTINENTE_EMAIL and CONTINENTE_PASSWORD are required.');
             return false;
         }
-        const browser = await acquireResource(() => this.launch({ headless: !this.options.showBrowser }), browser => browser.close());
+        let step = 'starting the browser';
+        let browser;
         let closing;
-        const close = () => closing ??= browser.close();
+        const close = () => closing ??= browser?.close() ?? Promise.resolve();
         try {
+            const launched = browser = await acquireResource(() => this.launch({ headless: !this.options.showBrowser }), opened => opened.close());
             return await requestIO(async () => {
-                const context = await acquireResource(() => browser.newContext({ userAgent: browserUserAgent(browser.version()), locale: 'pt-PT' }), context => context.close());
+                const context = await acquireResource(() => launched.newContext({ userAgent: browserUserAgent(launched.version()), locale: 'pt-PT' }), context => context.close());
                 const page = await acquireResource(() => context.newPage(), page => page.close());
                 this.logger('Signing in.');
+                step = 'opening the login page';
                 await page.goto(`${STOREFRONT_ORIGIN}/login/`, { waitUntil: 'domcontentloaded', timeout: 30000 });
                 await page.getByRole('button', { name: CONSENT_BUTTON }).click({ timeout: 5000 }).catch(() => { });
                 const frame = await this.loginFrame(page);
+                step = 'entering the email';
                 await this.submit(frame, EMAIL_INPUT, email);
                 const leftLogin = page.waitForURL(url => url.origin === STOREFRONT_ORIGIN && !isLoginUrl(url.href), { timeout: 20000 }).catch(() => { });
+                step = 'entering the password';
                 await this.submit(frame, PASSWORD_INPUT, password);
                 await leftLogin;
                 checkRequest();
+                step = 'checking the new session';
                 if (!(await this.isSignedIn(context)))
-                    throw new Error('The website did not accept the login');
+                    throw new LoginFailed('Sign-in failed: the website did not accept the login.');
+                step = 'saving the session';
                 const cookies = SessionCookiesSchema.safeParse(await context.cookies());
                 if (!cookies.success)
-                    throw new Error('The website returned an unexpected session');
+                    throw new LoginFailed('Sign-in failed: the website returned an unexpected session.');
                 await this.cookies.save(cookies.data);
                 this.logger('Signed in; session saved.');
                 return true;
             }, close);
         }
+        catch (error) {
+            // Playwright messages from these steps can contain the typed password or Cookie headers.
+            throw loginFailure(step, error);
+        }
         finally {
             await close();
         }

package/dist/config.d.ts

@@ -9,6 +9,8 @@ export interface Settings {
     readonly favoritesFile: string;
     /** Undefined keeps the session default. */
     readonly browserIdleMs: number | undefined;
+    /** Check npm once a day for a newer release. */
+    readonly updateCheck: boolean;
 }
 /** Read `KEY=value` lines. Surrounding quotes are removed; nothing is expanded or unescaped. */
 export declare function readDotEnv(text: string): Record<string, string>;

package/dist/config.js

@@ -2,7 +2,7 @@ import { readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { homedir } from 'node:os';
 import { createHash } from 'node:crypto';
-const FILE_KEYS = new Set(['CONTINENTE_EMAIL', 'CONTINENTE_PASSWORD', 'CONTINENTE_BROWSER_IDLE_SECONDS']);
+const FILE_KEYS = new Set(['CONTINENTE_EMAIL', 'CONTINENTE_PASSWORD', 'CONTINENTE_BROWSER_IDLE_SECONDS', 'CONTINENTE_UPDATE_CHECK']);
 const ASSIGNMENT = /^(?:export\s+)?([A-Z][A-Z0-9_]*)\s*=\s*(.*)$/;
 /** Read `KEY=value` lines. Surrounding quotes are removed; nothing is expanded or unescaped. */
 export function readDotEnv(text) {
@@ -52,6 +52,7 @@ export function loadSettings(env = process.env) {
         cookieFile: join(dataDir, 'session.json'),
         favoritesFile: join(dataDir, 'favorites.json'),
         browserIdleMs: Number.isFinite(idleSeconds) && idleSeconds >= 0 ? idleSeconds * 1000 : undefined,
+        updateCheck: !['0', 'false', 'off', 'no'].includes(value('CONTINENTE_UPDATE_CHECK')?.trim().toLowerCase() ?? ''),
     };
 }
 export function hasCredentials(settings) {

package/dist/domain/session.d.ts

@@ -38,3 +38,9 @@ export declare const FavoritesStatusSchema: z.ZodObject<{
     empty: z.ZodNullable<z.ZodBoolean>;
 }, z.core.$strict>;
 export type FavoritesStatus = z.infer<typeof FavoritesStatusSchema>;
+export declare const UpdateStatusSchema: z.ZodObject<{
+    currentVersion: z.ZodNullable<z.ZodString>;
+    latestVersion: z.ZodNullable<z.ZodString>;
+    available: z.ZodBoolean;
+}, z.core.$strict>;
+export type UpdateStatus = z.infer<typeof UpdateStatusSchema>;

package/dist/domain/session.js

@@ -9,3 +9,6 @@ export const FavoritesStatusSchema = z.strictObject({
     state: z.enum(['missing', 'fresh', 'stale', 'unavailable']), fetchedAt: z.iso.datetime({ offset: true }).nullable(),
     expiresAt: z.iso.datetime({ offset: true }).nullable(), empty: z.boolean().nullable(),
 });
+export const UpdateStatusSchema = z.strictObject({
+    currentVersion: z.string().nullable(), latestVersion: z.string().nullable(), available: z.boolean(),
+});

package/dist/mcp/contracts.d.ts

@@ -1301,6 +1301,11 @@ export declare const SessionStatusOutput: z.ZodObject<{
                 expiresAt: z.ZodNullable<z.ZodISODateTime>;
                 empty: z.ZodNullable<z.ZodBoolean>;
             }, z.core.$strict>;
+            update: z.ZodObject<{
+                currentVersion: z.ZodNullable<z.ZodString>;
+                latestVersion: z.ZodNullable<z.ZodString>;
+                available: z.ZodBoolean;
+            }, z.core.$strict>;
         }, z.core.$strict>;
     }, z.core.$strict>, z.ZodObject<{
         status: z.ZodLiteral<"error">;

package/dist/mcp/contracts.js

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-import { MAX_REFERENCE_LENGTH, isProductReference, CartSchema, ProductDetailsSchema, FavoriteProductSchema, OrderSchema, ProductSchema, PurchaseFrequencySchema, ToolErrorSchema, CartMutationResultSchema, CartItemIdSchema, OrderIdSchema, BrowserStatusSchema, FavoritesStatusSchema } from '../domain/index.js';
+import { MAX_REFERENCE_LENGTH, isProductReference, CartSchema, ProductDetailsSchema, FavoriteProductSchema, OrderSchema, ProductSchema, PurchaseFrequencySchema, ToolErrorSchema, CartMutationResultSchema, CartItemIdSchema, OrderIdSchema, BrowserStatusSchema, FavoritesStatusSchema, UpdateStatusSchema } from '../domain/index.js';
 export const ProductReferenceInput = z.string().min(1).max(MAX_REFERENCE_LENGTH).regex(/^[A-Za-z0-9]+(?:-[A-Za-z0-9]+)*(?:\.html)?$/)
     .refine(isProductReference, 'Expected a numeric productId or a product slug ending in it')
     .describe('productId from another tool, such as "00123". A product slug ending in that ID (for example "leite-00123") also works.');
@@ -60,6 +60,6 @@ export const MutationOutput = outputSchema(ConfirmedMutationData);
 export const OrdersOutput = outputSchema(OrdersData);
 export const SingleOrderOutput = outputSchema(z.strictObject({ order: OrderSchema, unknownQuantityLines: integer }));
 export const FrequencyOutput = outputSchema(FrequencyData, { scan: FrequencyData.optional() });
-export const SessionStatusOutput = outputSchema(BrowserStatusSchema.extend({ favorites: FavoritesStatusSchema }));
+export const SessionStatusOutput = outputSchema(BrowserStatusSchema.extend({ favorites: FavoritesStatusSchema, update: UpdateStatusSchema }));
 export const GetProductInput = z.strictObject({ productId: ProductReferenceInput });
 export const ProductDetailsOutput = outputSchema(ProductDetailsSchema);

package/dist/mcp/shopping.d.ts

@@ -1,6 +1,7 @@
 import type { CallToolResult } from '@modelcontextprotocol/sdk/types.js';
 import type { ToolHandler } from './server.js';
 import type { SessionService } from '../ports.js';
+import type { UpdateStatus } from '../domain/index.js';
 import type { CatalogService, FavoritesService, SearchResult } from '../services/catalog.js';
 import type { CartService } from '../services/cart.js';
 import type { OrderService, PurchaseHistoryService, OrderListOptions } from '../services/orders.js';
@@ -15,7 +16,8 @@ export interface ShoppingServices {
 export declare function formatProductSearchResults(products: SearchResult['page']['items']): string;
 export declare class ShoppingHandlers {
     private readonly services;
-    constructor(services: ShoppingServices);
+    private readonly update;
+    constructor(services: ShoppingServices, update: UpdateStatus);
     private recover;
     searchProducts(query: string, limit: number): Promise<CallToolResult>;
     getProduct(reference: string): Promise<CallToolResult>;
@@ -30,4 +32,4 @@ export declare class ShoppingHandlers {
     listFrequentlyBoughtProducts(orderLimit: number, limit: number): Promise<CallToolResult>;
     getSessionStatus(): Promise<CallToolResult>;
 }
-export declare function registerShoppingTools(services: ShoppingServices): ToolHandler[];
+export declare function registerShoppingTools(services: ShoppingServices, update?: UpdateStatus): ToolHandler[];

package/dist/mcp/shopping.js

@@ -69,8 +69,10 @@ function mutationText(value, operation) {
 }
 export class ShoppingHandlers {
     services;
-    constructor(services) {
+    update;
+    constructor(services, update) {
         this.services = services;
+        this.update = update;
     }
     recover(operation) {
         return withAuthenticationRecovery(operation, () => this.services.session.refreshAuthentication());
@@ -179,16 +181,18 @@ export class ShoppingHandlers {
         const favorites = await this.services.favorites.getCacheStatus();
         const credentials = status.credentials.hasEmail && status.credentials.hasPassword ? 'configured'
             : status.credentials.hasEmail === null ? 'unknown' : 'missing';
-        return response({ ...status, favorites }, `Browser: ${status.browser}. Credentials: ${credentials}. Saved cookies: ${status.savedCookies}. ` +
-            `Last observed login state: ${status.authentication.state}. Favorites snapshot: ${favorites.state}.`);
+        const update = this.update.available ? ` Update available: ${this.update.latestVersion} (running ${this.update.currentVersion}).` : '';
+        return response({ ...status, favorites, update: this.update }, `Browser: ${status.browser}. Credentials: ${credentials}. Saved cookies: ${status.savedCookies}. ` +
+            `Last observed login state: ${status.authentication.state}. Favorites snapshot: ${favorites.state}.${update}`);
     }
 }
 const READ = { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true };
 const ADD = { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true };
 const UPDATE = { readOnlyHint: false, destructiveHint: true, idempotentHint: true, openWorldHint: true };
 const UNCERTAIN_WRITE = 'If the result has mutation.outcome "unknown", the cart may have changed: call get_cart before any further change and never repeat the request automatically.';
-export function registerShoppingTools(services) {
-    const handlers = new ShoppingHandlers(services);
+const NO_UPDATE_INFO = { currentVersion: null, latestVersion: null, available: false };
+export function registerShoppingTools(services, update = NO_UPDATE_INFO) {
+    const handlers = new ShoppingHandlers(services, update);
     function tool(name, title, description, inputSchema, outputSchema, annotations, execute, cartMutation = false) {
         return { definition: { name, title, description, annotations }, inputSchema, outputSchema, cartMutation,
             execute: raw => services.session.run(() => execute(raw)) };

package/dist/runtime.d.ts

@@ -3,6 +3,7 @@ import type { Clock, Logger, FavoritesStore, CatalogGateway, FavoritesGateway, C
 import type { CookieStore } from './stores/files.js';
 import type { BrowserLauncher, StorefrontSession } from './session/browser.js';
 import type { ShoppingServices } from './mcp/shopping.js';
+import type { UpdateStatus } from './domain/index.js';
 export declare const systemClock: Clock;
 /** Launch Playwright's Chromium, downloading it first if this machine does not have it yet. */
 export declare const launchBrowser: BrowserLauncher;
@@ -24,4 +25,5 @@ export declare function createShoppingServices(options?: RuntimeOptions): Shoppi
 export declare function createShoppingApplication(options: RuntimeOptions & {
     version: string;
     services?: ShoppingServices;
+    update?: UpdateStatus;
 }): import("./index.js").ContinenteMcpServer;

package/dist/runtime.js

@@ -10,6 +10,7 @@ import { CartService } from './services/cart.js';
 import { OrderService, PurchaseHistoryService } from './services/orders.js';
 import { registerShoppingTools } from './mcp/shopping.js';
 import { SERVER_INSTRUCTIONS, basketPlannerPrompt } from './mcp/guide.js';
+import { updateNotice } from './services/updates.js';
 export const systemClock = { now: () => new Date() };
 const chromiumInstaller = new ChromiumInstaller(async () => {
     // Skip per-percent progress lines; keep the start, finish and any errors.
@@ -43,7 +44,8 @@ export function createShoppingServices(options = {}) {
 }
 export function createShoppingApplication(options) {
     const services = options.services ?? createShoppingServices(options);
-    return createApplication({ version: options.version, tools: registerShoppingTools(services),
-        prompts: [basketPlannerPrompt], instructions: SERVER_INSTRUCTIONS,
+    const notice = options.update ? updateNotice(options.update) : null;
+    return createApplication({ version: options.version, tools: registerShoppingTools(services, options.update),
+        prompts: [basketPlannerPrompt], instructions: notice ? `${SERVER_INSTRUCTIONS}\n\n${notice}` : SERVER_INSTRUCTIONS,
         closeResources: () => services.session.shutdown?.() ?? services.session.run(() => services.session.closeBrowserSession()) });
 }

package/dist/services/updates.d.ts

@@ -0,0 +1,21 @@
+import type { UpdateStatus } from '../domain/index.js';
+export declare const UPDATE_CHECK_INTERVAL_MS: number;
+export declare const RELEASES_URL = "https://github.com/andredelgado/continente-mcp/releases/latest";
+export interface UpdateCheckOptions {
+    readonly currentVersion: string;
+    readonly packageName: string;
+    readonly dataDir: string;
+    readonly enabled?: boolean;
+    readonly now?: () => Date;
+    readonly timeoutMs?: number;
+    readonly fetchLatest?: (packageName: string, signal: AbortSignal) => Promise<string>;
+}
+/** True when `candidate` is a later stable release than `current`. Prereleases never count. */
+export declare function isNewerRelease(candidate: string, current: string): boolean;
+/**
+ * Look up the latest published version at most once a day. Never throws: when offline or
+ * disabled it reports no update, reusing the last known answer when there is one.
+ */
+export declare function checkForUpdate(options: UpdateCheckOptions): Promise<UpdateStatus>;
+/** A line for the assistant's instructions, or null when there is nothing to say. */
+export declare function updateNotice(status: UpdateStatus): string | null;

package/dist/services/updates.js

@@ -0,0 +1,70 @@
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { z } from 'zod';
+import { writePrivateJson } from '../stores/files.js';
+export const UPDATE_CHECK_INTERVAL_MS = 24 * 60 * 60 * 1000;
+export const RELEASES_URL = 'https://github.com/andredelgado/continente-mcp/releases/latest';
+const CacheSchema = z.object({ checkedAt: z.iso.datetime({ offset: true }), latestVersion: z.string() });
+const stableParts = (version) => /^(\d+)\.(\d+)\.(\d+)$/.exec(version)?.slice(1).map(Number) ?? null;
+/** True when `candidate` is a later stable release than `current`. Prereleases never count. */
+export function isNewerRelease(candidate, current) {
+    const next = stableParts(candidate);
+    const now = stableParts(current);
+    if (!next || !now)
+        return false;
+    for (let index = 0; index < 3; index++) {
+        if (next[index] !== now[index])
+            return (next[index] ?? 0) > (now[index] ?? 0);
+    }
+    return false;
+}
+async function registryLatest(packageName, signal) {
+    const response = await fetch(`https://registry.npmjs.org/${encodeURIComponent(packageName)}/latest`, { signal, headers: { accept: 'application/json' } });
+    if (!response.ok)
+        throw new Error(`npm registry returned HTTP ${response.status}`);
+    return z.object({ version: z.string() }).parse(await response.json()).version;
+}
+async function withTimeout(operation, timeoutMs) {
+    const controller = new AbortController();
+    let timer;
+    const timeout = new Promise((_, reject) => { timer = setTimeout(() => { controller.abort(); reject(new Error('timed out')); }, timeoutMs); });
+    try {
+        return await Promise.race([operation(controller.signal), timeout]);
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+/**
+ * Look up the latest published version at most once a day. Never throws: when offline or
+ * disabled it reports no update, reusing the last known answer when there is one.
+ */
+export async function checkForUpdate(options) {
+    const unknown = { currentVersion: options.currentVersion, latestVersion: null, available: false };
+    if (options.enabled === false)
+        return unknown;
+    const file = join(options.dataDir, 'update-check.json');
+    const now = (options.now ?? (() => new Date()))();
+    let cached = null;
+    try {
+        cached = CacheSchema.parse(JSON.parse(await readFile(file, 'utf8')));
+    }
+    catch { /* no usable cache */ }
+    let latest = cached?.latestVersion ?? null;
+    const age = cached ? now.getTime() - Date.parse(cached.checkedAt) : Infinity;
+    if (!(age >= 0 && age < UPDATE_CHECK_INTERVAL_MS)) {
+        try {
+            latest = await withTimeout(signal => (options.fetchLatest ?? registryLatest)(options.packageName, signal), options.timeoutMs ?? 1500);
+            await writePrivateJson(file, { checkedAt: now.toISOString(), latestVersion: latest }).catch(() => { });
+        }
+        catch { /* offline or slow: keep the last known answer */ }
+    }
+    return { currentVersion: options.currentVersion, latestVersion: latest, available: latest !== null && isNewerRelease(latest, options.currentVersion) };
+}
+/** A line for the assistant's instructions, or null when there is nothing to say. */
+export function updateNotice(status) {
+    if (!status.available || !status.latestVersion)
+        return null;
+    return `Update available: continentept-mcp ${status.latestVersion} is out (this is ${status.currentVersion}). Mention it to the user once. `
+        + `Claude Desktop extension users download continente-mcp.mcpb from ${RELEASES_URL} and open it; npx users restart their client.`;
+}

package/dist/session/browser.js

@@ -1,5 +1,6 @@
 import { AsyncLocalStorage } from 'node:async_hooks';
 import { createSerialTaskQueue } from './queue.js';
+import { safeLoginMessage } from './login-errors.js';
 import { checkRequest, currentRequest, inRequest, RequestScope, acquireResource } from './request.js';
 /** A desktop Chrome user agent matching the launched Chromium, without the "HeadlessChrome" marker. */
 export function browserUserAgent(version, platform = process.platform) {
@@ -95,7 +96,7 @@ export class BrowserSession {
                 return authenticated;
             }
             catch (error) {
-                this.logger(`Login failed: ${error instanceof Error ? error.message : 'unknown error'}`);
+                this.logger(safeLoginMessage(error));
                 return false;
             }
         });

package/dist/session/login-errors.d.ts

@@ -0,0 +1,12 @@
+/**
+ * A sign-in failure with a fixed, loggable message. Browser automation errors from credential
+ * entry or authenticated requests can embed typed values and Cookie headers in their message,
+ * so they are never passed on; only the failed step is reported.
+ */
+export declare class LoginFailed extends Error {
+    constructor(message: string);
+}
+/** Wrap any error from a sign-in step in a LoginFailed that names only the step. */
+export declare function loginFailure(step: string, error: unknown): Error;
+/** The only text about a sign-in error that may reach logs or the terminal. */
+export declare function safeLoginMessage(error: unknown): string;

package/dist/session/login-errors.js

@@ -0,0 +1,25 @@
+import { BrowserUnavailable } from './chromium.js';
+import { RequestStopped } from './request.js';
+/**
+ * A sign-in failure with a fixed, loggable message. Browser automation errors from credential
+ * entry or authenticated requests can embed typed values and Cookie headers in their message,
+ * so they are never passed on; only the failed step is reported.
+ */
+export class LoginFailed extends Error {
+    constructor(message) { super(message); this.name = 'LoginFailed'; }
+}
+/** Wrap any error from a sign-in step in a LoginFailed that names only the step. */
+export function loginFailure(step, error) {
+    if (error instanceof LoginFailed || error instanceof RequestStopped || error instanceof BrowserUnavailable)
+        return error;
+    const timedOut = error instanceof Error && error.name === 'TimeoutError';
+    return new LoginFailed(`Sign-in failed while ${step}${timedOut ? ' (timed out)' : ''}.`);
+}
+/** The only text about a sign-in error that may reach logs or the terminal. */
+export function safeLoginMessage(error) {
+    if (error instanceof LoginFailed || error instanceof BrowserUnavailable)
+        return error.message;
+    if (error instanceof RequestStopped)
+        return `Sign-in stopped (${error.code}).`;
+    return 'Sign-in failed with an unexpected error.';
+}

package/docs/configuration.md

@@ -14,8 +14,10 @@ manual setups.
 | `CONTINENTE_CREDENTIALS_FILE` | `<data dir>/credentials.env` | Location of the credentials file. Set this in the MCP client configuration. |
 | `CONTINENTE_DATA_DIR` | `~/.continentept-mcp` | Directory for the saved session, the favorites snapshot and, by default, the credentials file. |
 | `CONTINENTE_BROWSER_IDLE_SECONDS` | `300` | Close the browser after this many idle seconds. `0` keeps it open until the server stops. |
+| `CONTINENTE_UPDATE_CHECK` | `1` | Set to `0` to stop the daily check for a newer release on npm. |
 
-On Windows, `~` is `%USERPROFILE%`.
+`~` is your home directory: `HOME`, or `%USERPROFILE%` when `HOME` is not set (the usual case on
+Windows).
 
 ## Credentials file
 
@@ -29,7 +31,8 @@ CONTINENTE_PASSWORD=your-password
 
 One `KEY=value` per line. Quotes around a value are removed, `export ` prefixes and `#`
 comment lines are allowed, and nothing is expanded. The file may set `CONTINENTE_EMAIL`,
-`CONTINENTE_PASSWORD` and `CONTINENTE_BROWSER_IDLE_SECONDS`; other keys are ignored. A variable
+`CONTINENTE_PASSWORD`, `CONTINENTE_BROWSER_IDLE_SECONDS` and `CONTINENTE_UPDATE_CHECK`; other keys
+are ignored. A variable
 set in the environment always wins over the file, even when it is empty. See
 [`.env.example`](../.env.example).
 
@@ -107,9 +110,29 @@ complete it in that window; the session is saved once the account is signed in.
 | `session.json` | Website session cookies. Treat it like a password. |
 | `favorites.json` | Favorites snapshot, tied to the configured account and current session. |
 | `favorites.json.bak` | Previous valid favorites snapshot. |
+| `update-check.json` | The latest version seen on npm and when it was checked. |
 
-Files are written atomically and readable only by your user. A new session or a different
-account makes the favorites snapshot stale until it is refreshed. Delete the directory to
-remove everything the server has stored.
+Files are written atomically. On macOS and Linux they are created readable only by your user;
+on Windows they inherit the folder's permissions, so restrict the folder as described above.
+The server does not change the permissions of a folder that already exists.
+
+If you sign in with a different account or the saved session is replaced, the old favorites
+snapshot is no longer used and the next request fetches a fresh one. A snapshot of the same
+account that is more than 24 hours old is still used, marked as stale.
+
+Deleting the data directory removes everything listed above. A credentials file kept
+elsewhere (`CONTINENTE_CREDENTIALS_FILE`) and the downloaded Chromium, which lives in
+Playwright's own cache folder, are separate.
+
+Sign-in errors are logged as short, fixed messages that name the step that failed. They never
+include your password, email or session cookies.
+
+## Update check
+
+When the server starts, it asks npm for the latest published version, at most once a day and
+with a short timeout. The request sends nothing about you or your account. If a newer stable
+release exists, the assistant is told about it and `get_session_status` reports it. Nothing is
+downloaded or installed automatically. When offline, the check is skipped silently. Set
+`CONTINENTE_UPDATE_CHECK=0` to turn it off.
 
 One server process serves one account.

package/docs/tools.md

@@ -177,7 +177,8 @@ top-level `scan` field.
 Reports local state without opening a browser or contacting the website: `browser`
 (`closed`, `starting`, `ready`), `credentials` (`hasEmail`, `hasPassword`), `savedCookies`
 (`available`, `missing`, `unavailable`), `authentication` (the last observed login state and
-when it was observed) and `favorites` (snapshot state and expiry). It never returns
+when it was observed), `favorites` (snapshot state and expiry) and `update` (`currentVersion`,
+`latestVersion` and whether a newer release is `available`). It never returns
 credentials, cookies or file paths.
 
 ## Error codes
@@ -205,7 +206,8 @@ Invalid arguments and unknown tools are JSON-RPC errors (`-32602`), not tool res
 
 The server sends **instructions** when a client connects: the quantity, cart-change and
 uncertain-outcome rules described above, in a few lines. Clients such as Claude include them
-in the assistant's context automatically.
+in the assistant's context automatically. When a newer release exists, the instructions also
+say so, so the assistant can tell the user.
 
 It also offers one **prompt**, `basket-planner` ("Plan a Continente basket"). It returns the
 full shopping workflow as a user message. Its optional `request` argument, such as

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "continentept-mcp",
-  "version": "0.3.1",
+  "version": "0.4.0",
   "mcpName": "io.github.andredelgado/continente-mcp",
   "description": "MCP server for Continente.pt: search products, check sale rules, read favorites and orders, and make verified cart changes.",
   "keywords": [