feat(config): fallback to .tinyb auth when token is missing

Author: rmorehig

README.md

@@ -476,10 +476,12 @@ config = {
 | Option | Type | Default | Description |
 |--------|------|---------|-------------|
 | `include` | `list[str]` | *required* | File paths or glob patterns for Python and raw datafiles |
-| `token` | `str` | *required* | API token; supports `${ENV_VAR}` interpolation |
+| `token` | `str` | *required* | API token; supports `${ENV_VAR}` interpolation. If missing, SDK falls back to `TINYBIRD_TOKEN`, then `.tinyb` |
 | `base_url` | `str` | `"https://api.tinybird.co"` | Tinybird API URL |
 | `dev_mode` | `"branch"` \| `"local"` | `"branch"` | Development mode |
 
+If `base_url` is omitted, SDK resolves it from `TINYBIRD_URL`, then `TINYBIRD_HOST`, then `.tinyb` (`host`), and finally defaults to `https://api.tinybird.co`.
+
 ### Local Development Mode
 
 Use a local Tinybird container for development without affecting cloud workspaces:

src/tinybird_sdk/cli/config.py

@@ -97,6 +97,40 @@ def replacer(match: re.Match[str]) -> str:
     return pattern.sub(replacer, value)
 
 
+def _try_interpolate_env_vars(value: str | None) -> str | None:
+    if not value:
+        return None
+    try:
+        return _interpolate_env_vars(value)
+    except ValueError:
+        return None
+
+
+def _resolve_base_url_from_env() -> str | None:
+    return os.getenv("TINYBIRD_URL") or os.getenv("TINYBIRD_HOST")
+
+
+def _read_tinyb_auth(config_dir: str) -> dict[str, str | None]:
+    tinyb_path = Path(config_dir) / ".tinyb"
+    if not tinyb_path.exists() or not tinyb_path.is_file():
+        return {"token": None, "host": None}
+
+    try:
+        raw = json.loads(tinyb_path.read_text(encoding="utf-8"))
+    except Exception:
+        return {"token": None, "host": None}
+
+    if not isinstance(raw, dict):
+        return {"token": None, "host": None}
+
+    token = raw.get("token")
+    host = raw.get("host")
+    return {
+        "token": token if isinstance(token, str) and token else None,
+        "host": host if isinstance(host, str) and host else None,
+    }
+
+
 def find_config_file(start_dir: str) -> dict[str, str] | None:
     current = Path(start_dir).resolve()
 
@@ -117,16 +151,26 @@ def _resolve_config(config: TinybirdConfig, config_path: str) -> ResolvedConfig:
         raise ValueError(
             f"Missing 'include' field in {config_path}. Add an array of files to scan for datasources and pipes."
         )
-    if not config.token:
-        raise ValueError(f"Missing 'token' field in {config_path}")
 
     include = config.include or [config.schema]  # type: ignore[list-item]
 
     config_dir = str(Path(config_path).parent)
     load_env_files(config_dir)
+    tinyb_auth = _read_tinyb_auth(config_dir)
 
-    token = _interpolate_env_vars(config.token)
-    base_url = _interpolate_env_vars(config.base_url) if config.base_url else DEFAULT_BASE_URL
+    token = _try_interpolate_env_vars(config.token) or os.getenv("TINYBIRD_TOKEN") or tinyb_auth["token"]
+    if not token:
+        raise ValueError(
+            f"Missing Tinybird token in {config_path}. "
+            "Set 'token' in config, TINYBIRD_TOKEN, or authenticate with Tinybird CLI to create .tinyb."
+        )
+
+    base_url = (
+        _try_interpolate_env_vars(config.base_url)
+        or _resolve_base_url_from_env()
+        or tinyb_auth["host"]
+        or DEFAULT_BASE_URL
+    )
 
     return ResolvedConfig(
         include=include,

tests/test_cli_config_parity.py

@@ -88,6 +88,72 @@ def test_load_config_async_supports_python(tmp_path: Path, monkeypatch: pytest.M
     assert loaded["include"] == ["lib/datasources.py"]
 
 
+def test_load_config_falls_back_to_env_when_token_and_base_url_are_missing(
+    tmp_path: Path, monkeypatch: pytest.MonkeyPatch
+) -> None:
+    project = tmp_path / "project"
+    project.mkdir()
+
+    (project / "tinybird.config.json").write_text(
+        json.dumps({"include": ["lib/datasources.py"]}),
+        encoding="utf-8",
+    )
+
+    monkeypatch.setenv("TINYBIRD_TOKEN", "p.from_env")
+    monkeypatch.setenv("TINYBIRD_HOST", "https://api.us-east-1.aws.tinybird.co")
+    monkeypatch.delenv("TINYBIRD_URL", raising=False)
+
+    loaded = load_config(str(project))
+    assert loaded["token"] == "p.from_env"
+    assert loaded["base_url"] == "https://api.us-east-1.aws.tinybird.co"
+
+
+def test_load_config_falls_back_to_tinyb_file_when_config_and_env_are_missing(
+    tmp_path: Path, monkeypatch: pytest.MonkeyPatch
+) -> None:
+    project = tmp_path / "project"
+    project.mkdir()
+
+    (project / "tinybird.config.json").write_text(
+        json.dumps({"include": ["lib/datasources.py"]}),
+        encoding="utf-8",
+    )
+    (project / ".tinyb").write_text(
+        json.dumps(
+            {
+                "token": "p.from_tinyb",
+                "host": "https://api.eu-central-1.aws.tinybird.co",
+            }
+        ),
+        encoding="utf-8",
+    )
+
+    monkeypatch.delenv("TINYBIRD_TOKEN", raising=False)
+    monkeypatch.delenv("TINYBIRD_URL", raising=False)
+    monkeypatch.delenv("TINYBIRD_HOST", raising=False)
+
+    loaded = load_config(str(project))
+    assert loaded["token"] == "p.from_tinyb"
+    assert loaded["base_url"] == "https://api.eu-central-1.aws.tinybird.co"
+
+
+def test_load_config_raises_when_no_token_sources_are_available(tmp_path: Path, monkeypatch: pytest.MonkeyPatch) -> None:
+    project = tmp_path / "project"
+    project.mkdir()
+
+    (project / "tinybird.config.json").write_text(
+        json.dumps({"include": ["lib/datasources.py"]}),
+        encoding="utf-8",
+    )
+
+    monkeypatch.delenv("TINYBIRD_TOKEN", raising=False)
+    monkeypatch.delenv("TINYBIRD_URL", raising=False)
+    monkeypatch.delenv("TINYBIRD_HOST", raising=False)
+
+    with pytest.raises(ValueError, match="Missing Tinybird token"):
+        load_config(str(project))
+
+
 def test_path_helpers_with_and_without_src_folder(tmp_path: Path) -> None:
     no_src = tmp_path / "no-src"
     no_src.mkdir()