feat: add cloud workspaces infrastructure

.env.example

@@ -106,3 +106,10 @@ QSTASH_NEXT_SIGNING_KEY=
 
 # MCP API Key for Claude Code
 SUPERSET_MCP_API_KEY=
+
+# -----------------------------------------------------------------------------
+# Ngrok (for local GitHub OAuth testing)
+# -----------------------------------------------------------------------------
+# Your ngrok subdomain (paid) or static domain (free)
+# Run `bun run dev:cloud` to start ngrok + dev servers
+NGROK_SUBDOMAIN=superset-dev

.gitignore

@@ -67,3 +67,6 @@ next-env.d.ts
 
 # Reference material downloaded for agents
 examples
+
+# Temporary exploration directories
+temp_modal_vibe

CONTRIBUTING.md

@@ -25,4 +25,4 @@ Please note we have a [code of conduct](./CODE_OF_CONDUCT.md), please follow it
 
 We try to follow guidelines from [Clean Code](https://gist.github.com/wojteklu/73c6914cc446146b8b533c0988cf8d29) and the boy scoute rule:
 
-"Leave the code cleaner, not messier, than how you found it". 
+"Leave the code cleaner, not messier, than how you found it".

apps/api/next.config.ts

@@ -11,6 +11,9 @@ const config: NextConfig = {
 	reactCompiler: true,
 	typescript: { ignoreBuildErrors: true },
 
+	// Allow ngrok domains for local dev with GitHub OAuth
+	allowedDevOrigins: ["*.ngrok.io", "*.ngrok-free.app"],
+
 	images: {
 		remotePatterns: [
 			{

apps/api/src/app/api/github/callback/route.ts

@@ -121,15 +121,29 @@ export async function GET(request: Request) {
 		}
 
 		// Queue initial sync job
+		const syncUrl = `${env.NEXT_PUBLIC_API_URL}/api/github/jobs/initial-sync`;
+		const syncBody = {
+			installationDbId: savedInstallation.id,
+			organizationId,
+		};
+
 		try {
-			await qstash.publishJSON({
-				url: `${env.NEXT_PUBLIC_API_URL}/api/github/jobs/initial-sync`,
-				body: {
-					installationDbId: savedInstallation.id,
-					organizationId,
-				},
-				retries: 3,
-			});
+			// In development, call the sync endpoint directly (QStash can't reach localhost)
+			if (env.NODE_ENV === "development") {
+				fetch(syncUrl, {
+					method: "POST",
+					headers: { "Content-Type": "application/json" },
+					body: JSON.stringify(syncBody),
+				}).catch((error) => {
+					console.error("[github/callback] Dev sync failed:", error);
+				});
+			} else {
+				await qstash.publishJSON({
+					url: syncUrl,
+					body: syncBody,
+					retries: 3,
+				});
+			}
 		} catch (error) {
 			console.error(
 				"[github/callback] Failed to queue initial sync job:",

apps/api/src/app/api/github/install/route.ts

@@ -49,14 +49,13 @@ export async function GET(request: Request) {
 		userId: session.user.id,
 	});
 
+	const apiUrl = env.NEXT_PUBLIC_NGROK_URL ?? env.NEXT_PUBLIC_API_URL;
+
 	const installUrl = new URL(
 		"https://github.com/apps/superset-app/installations/new",
 	);
 	installUrl.searchParams.set("state", state);
-	installUrl.searchParams.set(
-		"redirect_url",
-		`${env.NEXT_PUBLIC_API_URL}/api/github/callback`,
-	);
+	installUrl.searchParams.set("redirect_url", `${apiUrl}/api/github/callback`);
 
 	return Response.redirect(installUrl.toString());
 }

apps/api/src/env.ts

@@ -45,6 +45,7 @@ export const env = createEnv({
 		NEXT_PUBLIC_API_URL: z.string().url(),
 		NEXT_PUBLIC_WEB_URL: z.string().url(),
 		NEXT_PUBLIC_ADMIN_URL: z.string().url(),
+		NEXT_PUBLIC_NGROK_URL: z.string().url().optional(),
 		NEXT_PUBLIC_SENTRY_DSN_API: z.string().optional(),
 		NEXT_PUBLIC_SENTRY_ENVIRONMENT: z
 			.enum(["development", "preview", "production"])
@@ -55,6 +56,7 @@ export const env = createEnv({
 		NEXT_PUBLIC_API_URL: process.env.NEXT_PUBLIC_API_URL,
 		NEXT_PUBLIC_WEB_URL: process.env.NEXT_PUBLIC_WEB_URL,
 		NEXT_PUBLIC_ADMIN_URL: process.env.NEXT_PUBLIC_ADMIN_URL,
+		NEXT_PUBLIC_NGROK_URL: process.env.NEXT_PUBLIC_NGROK_URL,
 		NEXT_PUBLIC_SENTRY_DSN_API: process.env.NEXT_PUBLIC_SENTRY_DSN_API,
 		NEXT_PUBLIC_SENTRY_ENVIRONMENT: process.env.NEXT_PUBLIC_SENTRY_ENVIRONMENT,
 	},