fix(cli): auto-detect plan-gated errors, add upgrade hints, fix deployment crash

1. Add _detect_plan_hint() that automatically appends upgrade/pricing
   hints when error messages contain plan-related keywords (Growth plan,
   Enterprise, folder billing, Unauthorized, over_quota). Applied to ALL
   errors through output_error() when no explicit hint is provided.

2. Fix deployment handler wrapper to catch ConnectionError (not just
   SystemExit) — prevents raw Python tracebacks when the deployment
   service is unreachable.

3. Previously committed: _sanitize_credentials strips API keys from
   error messages.

405 tests pass, all linting clean.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: yeldarby

roboflow/cli/_output.py

@@ -36,6 +36,25 @@ def output(args: Any, data: Any, text: Optional[str] = None) -> None:
         print(json.dumps(data, indent=2, default=str))
 
 
+_PLAN_HINT_PATTERNS: list[tuple[str, str]] = [
+    ("require", "This feature requires a higher plan. Visit https://roboflow.com/pricing to upgrade."),
+    ("Growth plan", "This feature requires a Growth plan or higher. Visit https://roboflow.com/pricing to upgrade."),
+    ("Enterprise", "This feature requires an Enterprise plan. Contact sales@roboflow.com to upgrade."),
+    ("folder billing", "This feature requires folder billing. Visit https://app.roboflow.com/settings to enable it."),
+    ("Unauthorized", "Check your API key and workspace permissions. Some features require specific plan tiers."),
+    ("over_quota", "Your workspace has exceeded its quota. Visit https://roboflow.com/pricing to upgrade."),
+]
+
+
+def _detect_plan_hint(message: str) -> Optional[str]:
+    """Detect plan/billing-related errors and return an appropriate upgrade hint."""
+    lower = message.lower()
+    for pattern, hint in _PLAN_HINT_PATTERNS:
+        if pattern.lower() in lower:
+            return hint
+    return None
+
+
 def _sanitize_credentials(text: str) -> str:
     """Strip API keys from URLs and other sensitive patterns in error messages."""
     import re
@@ -91,6 +110,10 @@ def output_error(
     """
     parsed, human_message = _parse_error_message(message)
 
+    # Auto-detect plan-gated errors and add upgrade hints when none provided
+    if not hint:
+        hint = _detect_plan_hint(human_message)
+
     if getattr(args, "json", False):
         # Normalise error to always be {"error": {"message": "..."}} so
         # consumers see a consistent schema regardless of error source.

roboflow/cli/handlers/deployment.py

@@ -32,14 +32,22 @@ def _wrapped(args: argparse.Namespace) -> None:
         except SystemExit as exc:
             sys.stdout = orig_stdout
             code = exc.code if isinstance(exc.code, int) else 1
-            # Map legacy exit codes to CLI conventions: 1=general, 2=auth, 3=not-found
             exit_code = {0: 1, 1: 1, 2: 2, 3: 3}.get(code, 1) if code else 1
             text = captured.getvalue().strip()
             if text:
                 output_error(args, text, exit_code=exit_code)
             else:
                 output_error(args, "Deployment command failed.", exit_code=1)
             return
+        except Exception as exc:
+            sys.stdout = orig_stdout
+            output_error(
+                args,
+                f"Deployment service unavailable: {type(exc).__name__}",
+                hint="The dedicated deployment service may be down or unreachable. Try again later.",
+                exit_code=1,
+            )
+            return
         finally:
             sys.stdout = orig_stdout