feat(ci,mcp): add Open VSX publish verification + manual login fallback

CI:
- Add 3-minute polling loop after ovsx publish to verify version indexing
- Curl Open VSX API every 10s (18 attempts) to confirm published version is queryable
- Fail release if version not indexed within timeout window

MCP login:
- When email/password not provided, launch manual login flow instead of exiting
- Open headed Chrome browser to airtable.com/login
- Poll /v0.3/getUserProperties every 2s (max 5 min) to detect

Author: ARHAEEM

.github/workflows/release.yml

@@ -239,7 +239,29 @@ jobs:
         if: |
           !inputs.dry_run &&
           (inputs.target == 'extension' || inputs.target == 'both')
-        run: npx ovsx publish "${{ steps.vsix.outputs.file }}" --pat $OVSX_PAT
+        run: |
+          npx ovsx publish "${{ steps.vsix.outputs.file }}" --pat $OVSX_PAT
+
+          # Verify the version actually landed (Open VSX indexes asynchronously)
+          VERSION="${{ steps.ext_version.outputs.next }}"
+          echo "Verifying Open VSX indexed v${VERSION}..."
+          for i in $(seq 1 18); do
+            FOUND=$(curl -s "https://open-vsx.org/api/Nskha/airtable-formula/${VERSION}" \
+              | node -e "let d='';process.stdin.on('data',c=>d+=c);process.stdin.on('end',()=>{
+                  try{const p=JSON.parse(d);console.log(p.version||'not-found')}
+                  catch{console.log('error')}
+                })")
+            if [[ "$FOUND" == "$VERSION" ]]; then
+              echo "✓ Open VSX confirmed: v${VERSION}"
+              break
+            fi
+            echo "  not indexed yet (attempt $i/18), waiting 10s..."
+            sleep 10
+          done
+          if [[ "$FOUND" != "$VERSION" ]]; then
+            echo "::error::Open VSX did not index v${VERSION} within 3 minutes — check token and registry status"
+            exit 1
+          fi
         env:
           OVSX_PAT: ${{ secrets.OVSX_PAT }}
 

packages/mcp-server/src/login.js

@@ -77,14 +77,75 @@ async function generateTOTP(secretBase32) {
   return totp.generate();
 }
 
+async function mainManual(profileDir) {
+  console.log('Opening browser for manual login...');
+  console.log(`Profile: ${profileDir}`);
+  console.log('Please log in to Airtable in the browser window that opens.\n');
+
+  const chromium = await getChromium();
+  const context = await chromium.launchPersistentContext(profileDir, {
+    headless: false,
+    channel: 'chrome',
+    viewport: null,
+  });
+
+  let outerError;
+  try {
+    const page = context.pages()[0] || await context.newPage();
+    await page.goto('https://airtable.com/login', { waitUntil: 'domcontentloaded' });
+
+    let loggedIn = false;
+    let attempts = 0;
+    while (!loggedIn && attempts < 150) {
+      attempts++;
+      await page.waitForTimeout(2000);
+      try {
+        const result = await page.evaluate(async () => {
+          try {
+            const res = await fetch('/v0.3/getUserProperties', {
+              headers: {
+                'x-airtable-inter-service-client': 'webClient',
+                'x-requested-with': 'XMLHttpRequest',
+              },
+            });
+            if (res.ok) {
+              const data = await res.json();
+              return { ok: true, userId: data?.data?.userId };
+            }
+            return { ok: false, status: res.status };
+          } catch (e) {
+            return { ok: false, error: e.message };
+          }
+        });
+        if (result.ok) {
+          loggedIn = true;
+          console.log('✅ Login verified! User:', result.userId);
+        }
+      } catch {
+        // Page navigating, keep waiting
+      }
+    }
+
+    if (!loggedIn) throw new Error('Login not detected after 5 minutes');
+
+    console.log('\nSession stored in Chrome profile.');
+    console.log('MCP server will use this session headlessly.');
+    console.log('\nClosing browser...');
+    console.log('Done!');
+  } catch (err) {
+    outerError = err;
+  } finally {
+    try { await context.close(); } catch { /* best-effort */ }
+  }
+  if (outerError) throw outerError;
+}
+
 async function main() {
   const { email, password, otpSecret, profileDir } = parseArgs();
 
   if (!email || !password) {
-    console.error('ERROR: Provide credentials via env vars or arguments:');
-    console.error('  node src/login.js --email <email> --password <pass> [--otp-secret <secret>]');
-    console.error('  Or set AIRTABLE_EMAIL, AIRTABLE_PASSWORD, AIRTABLE_OTP_SECRET in .env');
-    process.exit(1);
+    await mainManual(profileDir);
+    return;
   }
 
   console.log('Opening Chrome with Patchright (undetected)...');