@granular-software/sdk 0.4.10 → 0.4.11

package/dist/index.mjs

@@ -5294,6 +5294,7 @@ var JobImplementation = class {
 // src/endpoints.ts
 var LOCAL_API_URL = "ws://localhost:8787/granular";
 var PRODUCTION_API_URL = "wss://cf-api-gateway.arthur6084.workers.dev/granular";
+var DEFAULT_LOCAL_API_KEY = "gn_sk_tenant_default_principal_local_e2e_00000000";
 function readEnv(name) {
   if (typeof process === "undefined" || !process.env) return void 0;
   return process.env[name];
@@ -5311,6 +5312,21 @@ function isTruthy(value) {
   const normalized = value.trim().toLowerCase();
   return normalized === "1" || normalized === "true" || normalized === "yes" || normalized === "on";
 }
+function isLocalApiUrl(url) {
+  try {
+    const parsed = new URL(url);
+    return parsed.hostname === "localhost" || parsed.hostname === "127.0.0.1";
+  } catch {
+    return false;
+  }
+}
+function resolveAuthTokenForApiUrl(authToken, apiUrl) {
+  if (!authToken.startsWith("sk_") || !isLocalApiUrl(apiUrl) || isTruthy(readEnv("GRANULAR_DISABLE_LOCAL_API_KEY_FALLBACK"))) {
+    return authToken;
+  }
+  const override = readEnv("GRANULAR_LOCAL_API_KEY")?.trim();
+  return override || DEFAULT_LOCAL_API_KEY;
+}
 function resolveEndpointMode(explicitMode) {
   const explicit = normalizeMode(explicitMode);
   if (explicit === "local" || explicit === "production") {
@@ -6229,8 +6245,8 @@ var Granular = class {
     if (!auth) {
       throw new Error("Granular client requires either apiKey or token. Set GRANULAR_API_KEY or GRANULAR_TOKEN, or pass one in options.");
     }
-    this.apiKey = auth;
     this.apiUrl = resolveApiUrl(options.apiUrl, options.endpointMode);
+    this.apiKey = resolveAuthTokenForApiUrl(auth, this.apiUrl);
     this.tokenProvider = options.tokenProvider;
     this.WebSocketCtor = options.WebSocketCtor;
     this.onUnexpectedClose = options.onUnexpectedClose;