fix(cli): require auth for build info and app releases commands

Both commands require authentication but were incorrectly using
`requirePrivateKey: false` when an ID was provided directly. This
skipped keyring lookup entirely, even when the user was logged in.

Now uses the same pattern as deploy/upgrade: always call
validateCommonFlags() without requirePrivateKey option, which
fetches from keyring or prompts interactively.

Co-Authored-By: Claude Opus 4.5 <[email protected]>

Author: Chris-Moller

packages/cli/src/client.ts

@@ -83,15 +83,19 @@ export async function createBuildClient(flags: CommonFlags) {
   const environmentConfig = getEnvironmentConfig(environment);
   const rpcUrl = flags["rpc-url"] || environmentConfig.defaultRPCURL;
 
-  const { walletClient } = createViemClients({
-    privateKey: flags["private-key"] as Hex,
-    rpcUrl,
-    environment,
-  });
+  // Only create walletClient if we have a private key - createViemClients throws if privateKey is undefined
+  let walletClient;
+  if (flags["private-key"]) {
+    walletClient = createViemClients({
+      privateKey: flags["private-key"] as Hex,
+      rpcUrl,
+      environment,
+    }).walletClient;
+  }
 
   return createBuildModule({
     verbose: flags.verbose,
-    walletClient: flags["private-key"] ? walletClient : undefined,
+    walletClient,
     environment,
     clientId: getClientId(),
     skipTelemetry: true, // CLI already has telemetry, skip SDK telemetry

packages/cli/src/commands/compute/app/releases.ts

@@ -86,18 +86,13 @@ export default class AppReleases extends Command {
     return withTelemetry(this, async () => {
       const { args, flags } = await this.parse(AppReleases);
 
-      // Releases endpoint is readable without auth; only require private key when we need to
-      // resolve app names interactively (or when the provided identifier isn't an address).
-      const rawAppId = args["app-id"];
-      const needsPrivateKey = !rawAppId || !isAddress(rawAppId);
-      const validatedFlags = await validateCommonFlags(flags, {
-        requirePrivateKey: needsPrivateKey,
-      });
+      // Auth is required to call the API (you can view any app's releases, not just your own)
+      const validatedFlags = await validateCommonFlags(flags);
 
       const environment = validatedFlags.environment || "sepolia";
       const environmentConfig = getEnvironmentConfig(environment);
       const rpcUrl = validatedFlags["rpc-url"] || environmentConfig.defaultRPCURL;
-      const privateKey = validatedFlags["private-key"];
+      const privateKey = validatedFlags["private-key"]!;
 
       const appID = await getOrPromptAppID({
         appID: args["app-id"],
@@ -106,11 +101,6 @@ export default class AppReleases extends Command {
         rpcUrl,
         action: "view releases for",
       });
-
-      // Create viem clients and UserAPI client
-      if (!privateKey) {
-        this.error("Private key is required to fetch releases. Please provide --private-key.");
-      }
       const { publicClient, walletClient } = createViemClients({
         privateKey,
         rpcUrl,

packages/cli/src/commands/compute/build/info.ts

@@ -31,9 +31,8 @@ export default class BuildInfo extends Command {
   async run(): Promise<void> {
     return withTelemetry(this, async () => {
       const { args, flags } = await this.parse(BuildInfo);
-      const validatedFlags = await validateCommonFlags(flags, {
-        requirePrivateKey: !args.buildId,
-      });
+      // Auth is required (you can view any build, not just your own)
+      const validatedFlags = await validateCommonFlags(flags);
       const client = await createBuildClient(validatedFlags);
 
       let buildId = args.buildId;