fix(scaleway): authenticate provider before stack rm

src/cmd/cli/command/stack.go

@@ -216,6 +216,12 @@ func makeStackRemoveCmd() *cobra.Command {
 				return fmt.Errorf("could not load stack parameters: %w", err)
 			}
 			provider := cli.NewProvider(ctx, stack.Provider, global.Client, stack.Name)
+			if !force {
+				// RemoveStack lists deployments through the provider, which needs credentials
+				if err := authenticateProvider(ctx, provider); err != nil {
+					return fmt.Errorf("%w; use --force to remove the stack without checking for active deployments", err)
+				}
+			}
 			return cli.RemoveStack(ctx, global.Client, provider, ec, projectName, name, force)
 		},
 	}

src/pkg/cli/client/byoc/scaleway/byoc.go

@@ -742,6 +742,9 @@ func (b *ByocScaleway) CdCommand(ctx context.Context, req client.CdCommandReques
 
 // CdList lists Pulumi stacks from the S3 state bucket.
 func (b *ByocScaleway) CdList(ctx context.Context, _ bool) (iter.Seq[state.Info], error) {
+	if b.s3Client == nil {
+		return nil, errors.New("not authenticated; call Authenticate first")
+	}
 	bucket := b.bucketName()
 	prefix := ".pulumi/stacks/"
 

src/pkg/cli/client/byoc/scaleway/byoc_test.go

@@ -333,6 +333,15 @@ func TestSubscribeRejectsMissingOrMismatchedRun(t *testing.T) {
 	require.ErrorIs(t, err, errors.ErrUnsupported)
 }
 
+func TestCdListRequiresAuth(t *testing.T) {
+	t.Parallel()
+
+	provider := newTestProvider("prod")
+	provider.s3Client = nil
+	_, err := provider.CdList(context.Background(), false)
+	require.EqualError(t, err, "not authenticated; call Authenticate first")
+}
+
 func TestAccountInfoRequiresAuthAndUsesClientContext(t *testing.T) {
 	t.Parallel()