feat(plan-gate): wire billing links into remaining plan-gated commands (#5066)

pamelachia · avallete · web-flow · commit 7476ee0447a8 · 2026-04-13T16:12:00.000+02:00
* refactor(plan-gate): check entitlements on any non-2xx, only show link when confirmed gated

Previously SuggestUpgradeOnError only triggered on 402. Many plan-gated
endpoints return 400 or 404 instead. Now checks entitlements on any
non-2xx and only sets CmdSuggestion when hasAccess is confirmed false,
preventing false positives.

* refactor(branches): rename was402 to isGated in upgrade check

Aligns variable name with the new semantics: SuggestUpgradeOnError
now checks entitlements on any non-2xx, not just 402.

* feat(sso): wire billing link into sso commands when plan-gated

Check org entitlements for auth.saml_2 on any non-2xx response from
SSO provider endpoints. Shows billing upgrade link when the feature
is confirmed gated, before falling through to existing error handling.

* feat(vanity-subdomains): wire billing link into vanity-subdomain commands when plan-gated

Check org entitlements for vanity_subdomain on any non-2xx response.
The platform API returns 400 when vanity subdomains are not available
on the org's plan; the entitlements check confirms the gate before
showing a billing upgrade link.

* docs(telemetry): clean up EventUpgradeSuggested comment

* refactor(plan-gate): use named returns for readability

* fix(plan-gate): use correct projectRef in branches/update, restrict check to 4xx

Two fixes:
- branches/update passed flags.ProjectRef instead of the local
  projectRef resolved from the branch ID, causing entitlements to
  look up the wrong org
- Restrict SuggestUpgradeOnError to 4xx client errors only (skip 2xx
  success and 5xx server errors) to avoid unnecessary API calls on
  server outages

* refactor(telemetry): extract shared TrackUpgradeSuggested helper

Replace 8 identical per-package trackUpgradeSuggested functions with a
single exported telemetry.TrackUpgradeSuggested. Avoids utils-&gt;telemetry
import cycle by keeping the helper in the telemetry package.

---------

Co-authored-by: Andrew Valleteau &lt;avallete@users.noreply.github.com&gt;
diff --git a/internal/branches/create/create.go b/internal/branches/create/create.go
@@ -31,8 +31,8 @@ func Run(ctx context.Context, body api.CreateBranchBody, fsys afero.Fs) error {
 	if err != nil {
 		return errors.Errorf("failed to create preview branch: %w", err)
 	} else if resp.JSON201 == nil {
-		if orgSlug, was402 := utils.SuggestUpgradeOnError(ctx, flags.ProjectRef, "branching_limit", resp.StatusCode()); was402 {
-			trackUpgradeSuggested(ctx, "branching_limit", orgSlug)
+		if orgSlug, isGated := utils.SuggestUpgradeOnError(ctx, flags.ProjectRef, "branching_limit", resp.StatusCode()); isGated {
+			telemetry.TrackUpgradeSuggested(ctx, "branching_limit", orgSlug)
 		}
 		return errors.Errorf("unexpected create branch status %d: %s", resp.StatusCode(), string(resp.Body))
 	}
@@ -44,12 +44,3 @@ func Run(ctx context.Context, body api.CreateBranchBody, fsys afero.Fs) error {
 	}
 	return utils.EncodeOutput(utils.OutputFormat.Value, os.Stdout, *resp.JSON201)
 }
-
-func trackUpgradeSuggested(ctx context.Context, featureKey, orgSlug string) {
-	if svc := telemetry.FromContext(ctx); svc != nil {
-		_ = svc.Capture(ctx, telemetry.EventUpgradeSuggested, map[string]any{
-			telemetry.PropFeatureKey: featureKey,
-			telemetry.PropOrgSlug:    orgSlug,
-		}, nil)
-	}
-}
diff --git a/internal/branches/update/update.go b/internal/branches/update/update.go
@@ -11,7 +11,6 @@ import (
 	"github.com/supabase/cli/internal/branches/pause"
 	"github.com/supabase/cli/internal/telemetry"
 	"github.com/supabase/cli/internal/utils"
-	"github.com/supabase/cli/internal/utils/flags"
 	"github.com/supabase/cli/pkg/api"
 )
 
@@ -24,8 +23,8 @@ func Run(ctx context.Context, branchId string, body api.UpdateBranchBody, fsys a
 	if err != nil {
 		return errors.Errorf("failed to update preview branch: %w", err)
 	} else if resp.JSON200 == nil {
-		if orgSlug, was402 := utils.SuggestUpgradeOnError(ctx, flags.ProjectRef, "branching_persistent", resp.StatusCode()); was402 {
-			trackUpgradeSuggested(ctx, "branching_persistent", orgSlug)
+		if orgSlug, isGated := utils.SuggestUpgradeOnError(ctx, projectRef, "branching_persistent", resp.StatusCode()); isGated {
+			telemetry.TrackUpgradeSuggested(ctx, "branching_persistent", orgSlug)
 		}
 		return errors.Errorf("unexpected update branch status %d: %s", resp.StatusCode(), string(resp.Body))
 	}
@@ -36,12 +35,3 @@ func Run(ctx context.Context, branchId string, body api.UpdateBranchBody, fsys a
 	}
 	return utils.EncodeOutput(utils.OutputFormat.Value, os.Stdout, *resp.JSON200)
 }
-
-func trackUpgradeSuggested(ctx context.Context, featureKey, orgSlug string) {
-	if svc := telemetry.FromContext(ctx); svc != nil {
-		_ = svc.Capture(ctx, telemetry.EventUpgradeSuggested, map[string]any{
-			telemetry.PropFeatureKey: featureKey,
-			telemetry.PropOrgSlug:    orgSlug,
-		}, nil)
-	}
-}
diff --git a/internal/sso/create/create.go b/internal/sso/create/create.go
@@ -9,6 +9,7 @@ import (
 	"github.com/spf13/afero"
 	"github.com/supabase/cli/internal/sso/internal/render"
 	"github.com/supabase/cli/internal/sso/internal/saml"
+	"github.com/supabase/cli/internal/telemetry"
 	"github.com/supabase/cli/internal/utils"
 	"github.com/supabase/cli/pkg/api"
 	"github.com/supabase/cli/pkg/cast"
@@ -78,10 +79,12 @@ func Run(ctx context.Context, params RunParams) error {
 	}
 
 	if resp.JSON201 == nil {
+		if orgSlug, isGated := utils.SuggestUpgradeOnError(ctx, params.ProjectRef, "auth.saml_2", resp.StatusCode()); isGated {
+			telemetry.TrackUpgradeSuggested(ctx, "auth.saml_2", orgSlug)
+		}
 		if resp.StatusCode() == http.StatusNotFound {
 			return errors.New("SAML 2.0 support is not enabled for this project. Please enable it through the dashboard")
 		}
-
 		return errors.New("Unexpected error adding identity provider: " + string(resp.Body))
 	}
 
diff --git a/internal/sso/list/list.go b/internal/sso/list/list.go
@@ -7,6 +7,7 @@ import (
 
 	"github.com/go-errors/errors"
 	"github.com/supabase/cli/internal/sso/internal/render"
+	"github.com/supabase/cli/internal/telemetry"
 	"github.com/supabase/cli/internal/utils"
 )
 
@@ -17,10 +18,12 @@ func Run(ctx context.Context, ref, format string) error {
 	}
 
 	if resp.JSON200 == nil {
+		if orgSlug, isGated := utils.SuggestUpgradeOnError(ctx, ref, "auth.saml_2", resp.StatusCode()); isGated {
+			telemetry.TrackUpgradeSuggested(ctx, "auth.saml_2", orgSlug)
+		}
 		if resp.StatusCode() == http.StatusNotFound {
 			return errors.New("Looks like SAML 2.0 support is not enabled for this project. Please use the dashboard to enable it.")
 		}
-
 		return errors.New("unexpected error listing identity providers: " + string(resp.Body))
 	}
 
diff --git a/internal/sso/list/list_test.go b/internal/sso/list/list_test.go
@@ -2,6 +2,7 @@ package list
 
 import (
 	"context"
+	"net/http"
 	"testing"
 
 	"github.com/h2non/gock"
@@ -83,6 +84,10 @@ func TestSSOProvidersListCommand(t *testing.T) {
 			Get("/v1/projects/" + projectRef + "/config/auth/sso/providers").
 			Reply(404).
 			JSON(map[string]string{})
+		// SuggestUpgradeOnError triggers on non-2xx; project lookup will 404
+		gock.New(utils.DefaultApiHost).
+			Get("/v1/projects/" + projectRef).
+			Reply(http.StatusNotFound)
 
 		err := Run(context.Background(), projectRef, utils.OutputPretty)
 
diff --git a/internal/sso/remove/remove.go b/internal/sso/remove/remove.go
@@ -8,6 +8,7 @@ import (
 	"github.com/go-errors/errors"
 	"github.com/google/uuid"
 	"github.com/supabase/cli/internal/sso/internal/render"
+	"github.com/supabase/cli/internal/telemetry"
 	"github.com/supabase/cli/internal/utils"
 	"github.com/supabase/cli/pkg/api"
 )
@@ -23,10 +24,12 @@ func Run(ctx context.Context, ref, providerId, format string) error {
 	}
 
 	if resp.JSON200 == nil {
+		if orgSlug, isGated := utils.SuggestUpgradeOnError(ctx, ref, "auth.saml_2", resp.StatusCode()); isGated {
+			telemetry.TrackUpgradeSuggested(ctx, "auth.saml_2", orgSlug)
+		}
 		if resp.StatusCode() == http.StatusNotFound {
 			return errors.Errorf("An identity provider with ID %q could not be found.", providerId)
 		}
-
 		return errors.New("Unexpected error removing identity provider: " + string(resp.Body))
 	}
 
diff --git a/internal/sso/remove/remove_test.go b/internal/sso/remove/remove_test.go
@@ -3,6 +3,7 @@ package remove
 import (
 	"context"
 	"fmt"
+	"net/http"
 	"testing"
 
 	"github.com/h2non/gock"
@@ -82,6 +83,10 @@ func TestSSOProvidersRemoveCommand(t *testing.T) {
 			Delete("/v1/projects/" + projectRef + "/config/auth/sso/providers/" + providerId).
 			Reply(404).
 			JSON(map[string]string{})
+		// SuggestUpgradeOnError triggers on non-2xx; project lookup will 404
+		gock.New(utils.DefaultApiHost).
+			Get("/v1/projects/" + projectRef).
+			Reply(http.StatusNotFound)
 
 		err := Run(context.Background(), projectRef, providerId, utils.OutputPretty)
 
diff --git a/internal/sso/update/update.go b/internal/sso/update/update.go
@@ -10,6 +10,7 @@ import (
 	"github.com/spf13/afero"
 	"github.com/supabase/cli/internal/sso/internal/render"
 	"github.com/supabase/cli/internal/sso/internal/saml"
+	"github.com/supabase/cli/internal/telemetry"
 	"github.com/supabase/cli/internal/utils"
 	"github.com/supabase/cli/pkg/api"
 	"github.com/supabase/cli/pkg/cast"
@@ -44,10 +45,12 @@ func Run(ctx context.Context, params RunParams) error {
 	}
 
 	if getResp.JSON200 == nil {
+		if orgSlug, isGated := utils.SuggestUpgradeOnError(ctx, params.ProjectRef, "auth.saml_2", getResp.StatusCode()); isGated {
+			telemetry.TrackUpgradeSuggested(ctx, "auth.saml_2", orgSlug)
+		}
 		if getResp.StatusCode() == http.StatusNotFound {
 			return errors.Errorf("An identity provider with ID %q could not be found.", parsed)
 		}
-
 		return errors.New("unexpected error fetching identity provider: " + string(getResp.Body))
 	}
 
@@ -123,6 +126,9 @@ func Run(ctx context.Context, params RunParams) error {
 	}
 
 	if putResp.JSON200 == nil {
+		if orgSlug, isGated := utils.SuggestUpgradeOnError(ctx, params.ProjectRef, "auth.saml_2", putResp.StatusCode()); isGated {
+			telemetry.TrackUpgradeSuggested(ctx, "auth.saml_2", orgSlug)
+		}
 		return errors.New("unexpected error fetching identity provider: " + string(putResp.Body))
 	}
 
diff --git a/internal/sso/update/update_test.go b/internal/sso/update/update_test.go
@@ -178,6 +178,10 @@ func TestSSOProvidersUpdateCommand(t *testing.T) {
 			Get("/v1/projects/" + projectRef + "/config/auth/sso/providers/" + providerId).
 			Reply(404).
 			JSON(map[string]string{})
+		// SuggestUpgradeOnError triggers on non-2xx; project lookup will 404
+		gock.New(utils.DefaultApiHost).
+			Get("/v1/projects/" + projectRef).
+			Reply(http.StatusNotFound)
 
 		err := Run(context.Background(), RunParams{
 			ProjectRef: projectRef,
diff --git a/internal/telemetry/events.go b/internal/telemetry/events.go
@@ -1,5 +1,7 @@
 package telemetry
 
+import "context"
+
 // CLI telemetry catalog.
 //
 // This file is the single place to review what analytics events the CLI sends
@@ -32,12 +34,12 @@ const (
 	//     added directly by this event, but linked project groups may still be
 	//     attached when available.
 	EventStackStarted = "cli_stack_started"
-	//   - EventUpgradeSuggested: sent when a CLI command receives a 402 Payment
-	//     Required response and displays a billing upgrade link to the user.
-	//     This helps measure how often users hit plan-gated features and how
-	//     large the upgrade conversion opportunity is. Event-specific properties
-	//     are PropFeatureKey (the entitlement key that was gated) and
-	//     PropOrgSlug (the organization slug, empty if lookup failed).
+	//   - EventUpgradeSuggested: sent when a CLI command hits a plan-gated
+	//     feature and displays a billing upgrade link. This helps identify
+	//     which plan gates users encounter most often so we can improve
+	//     error messages and documentation. Event-specific properties are
+	//     PropFeatureKey (the entitlement key that was gated) and PropOrgSlug
+	//     (the organization slug, empty if lookup failed).
 	EventUpgradeSuggested = "cli_upgrade_suggested"
 )
 
@@ -49,6 +51,17 @@ const (
 	PropOrgSlug = "org_slug"
 )
 
+// TrackUpgradeSuggested fires an EventUpgradeSuggested telemetry event.
+// Safe to call with any context; no-ops when telemetry is not configured.
+func TrackUpgradeSuggested(ctx context.Context, featureKey, orgSlug string) {
+	if svc := FromContext(ctx); svc != nil {
+		_ = svc.Capture(ctx, EventUpgradeSuggested, map[string]any{
+			PropFeatureKey: featureKey,
+			PropOrgSlug:    orgSlug,
+		}, nil)
+	}
+}
+
 // Shared event properties added to every captured event by Service.Capture.
 const (
 	// PropPlatform identifies the product source for the event. The CLI always
diff --git a/internal/utils/plan_gate.go b/internal/utils/plan_gate.go
@@ -3,7 +3,6 @@ package utils
 import (
 	"context"
 	"fmt"
-	"net/http"
 )
 
 func GetOrgSlugFromProjectRef(ctx context.Context, projectRef string) (string, error) {
@@ -22,36 +21,33 @@ func GetOrgBillingURL(orgSlug string) string {
 }
 
 // SuggestUpgradeOnError checks if a failed API response is due to plan limitations
-// and sets CmdSuggestion with a billing upgrade link. Best-effort: never returns errors.
-// Only triggers on 402 Payment Required (not 403, which could be a permissions issue).
-// Returns the resolved org slug and true if the status code was 402 (so callers
-// can fire telemetry). The org slug may be empty if the project lookup failed.
-func SuggestUpgradeOnError(ctx context.Context, projectRef, featureKey string, statusCode int) (string, bool) {
-	if statusCode != http.StatusPaymentRequired {
-		return "", false
+// by looking up the org's entitlements. Only sets CmdSuggestion when the entitlements
+// API confirms the feature is gated (hasAccess == false). Returns the resolved org
+// slug and true if a billing suggestion was shown (so callers can fire telemetry).
+// Only checks on 4xx client errors; skips 2xx (success) and 5xx (server errors).
+func SuggestUpgradeOnError(ctx context.Context, projectRef, featureKey string, statusCode int) (orgSlug string, isGated bool) {
+	if statusCode < 400 || statusCode >= 500 {
+		return
 	}
 
 	orgSlug, err := GetOrgSlugFromProjectRef(ctx, projectRef)
 	if err != nil {
-		CmdSuggestion = fmt.Sprintf("This feature may require a plan upgrade. Manage billing: %s", Bold(GetSupabaseDashboardURL()))
-		return "", true
+		return
 	}
 
-	billingURL := GetOrgBillingURL(orgSlug)
-
 	resp, err := GetSupabase().V1GetOrganizationEntitlementsWithResponse(ctx, orgSlug)
 	if err != nil || resp.JSON200 == nil {
-		CmdSuggestion = fmt.Sprintf("This feature may require a plan upgrade. Manage billing: %s", Bold(billingURL))
-		return orgSlug, true
+		return
 	}
 
 	for _, e := range resp.JSON200.Entitlements {
 		if string(e.Feature.Key) == featureKey && !e.HasAccess {
+			billingURL := GetOrgBillingURL(orgSlug)
 			CmdSuggestion = fmt.Sprintf("Your organization does not have access to this feature. Upgrade your plan: %s", Bold(billingURL))
-			return orgSlug, true
+			isGated = true
+			return
 		}
 	}
 
-	CmdSuggestion = fmt.Sprintf("This feature may require a plan upgrade. Manage billing: %s", Bold(billingURL))
-	return orgSlug, true
+	return
 }
diff --git a/internal/utils/plan_gate_test.go b/internal/utils/plan_gate_test.go
diff --git a/internal/vanity_subdomains/activate/activate.go b/internal/vanity_subdomains/activate/activate.go
diff --git a/internal/vanity_subdomains/check/check.go b/internal/vanity_subdomains/check/check.go

Original file line number	Diff line number	Diff line change
`@@ -31,8 +31,8 @@ func Run(ctx context.Context, body api.CreateBranchBody, fsys afero.Fs) error {`
`31`	`31`	`if err != nil {`
`32`	`32`	`return errors.Errorf("failed to create preview branch: %w", err)`
`33`	`33`	`} else if resp.JSON201 == nil {`
`34`		`- if orgSlug, was402 := utils.SuggestUpgradeOnError(ctx, flags.ProjectRef, "branching_limit", resp.StatusCode()); was402 {`
`35`		`- trackUpgradeSuggested(ctx, "branching_limit", orgSlug)`
	`34`	`+ if orgSlug, isGated := utils.SuggestUpgradeOnError(ctx, flags.ProjectRef, "branching_limit", resp.StatusCode()); isGated {`
	`35`	`+ telemetry.TrackUpgradeSuggested(ctx, "branching_limit", orgSlug)`
`36`	`36`	`}`
`37`	`37`	`return errors.Errorf("unexpected create branch status %d: %s", resp.StatusCode(), string(resp.Body))`
`38`	`38`	`}`
`@@ -44,12 +44,3 @@ func Run(ctx context.Context, body api.CreateBranchBody, fsys afero.Fs) error {`
`44`	`44`	`}`
`45`	`45`	`return utils.EncodeOutput(utils.OutputFormat.Value, os.Stdout, *resp.JSON201)`
`46`	`46`	`}`
`47`		`-`
`48`		`-func trackUpgradeSuggested(ctx context.Context, featureKey, orgSlug string) {`
`49`		`- if svc := telemetry.FromContext(ctx); svc != nil {`
`50`		`- _ = svc.Capture(ctx, telemetry.EventUpgradeSuggested, map[string]any{`
`51`		`- telemetry.PropFeatureKey: featureKey,`
`52`		`- telemetry.PropOrgSlug: orgSlug,`
`53`		`- }, nil)`
`54`		`- }`
`55`		`-}`
Original file line number	Diff line number	Diff line change
`@@ -11,7 +11,6 @@ import (`
`11`	`11`	`"github.com/supabase/cli/internal/branches/pause"`
`12`	`12`	`"github.com/supabase/cli/internal/telemetry"`
`13`	`13`	`"github.com/supabase/cli/internal/utils"`
`14`		`- "github.com/supabase/cli/internal/utils/flags"`
`15`	`14`	`"github.com/supabase/cli/pkg/api"`
`16`	`15`	`)`
`17`	`16`
`@@ -24,8 +23,8 @@ func Run(ctx context.Context, branchId string, body api.UpdateBranchBody, fsys a`
`24`	`23`	`if err != nil {`
`25`	`24`	`return errors.Errorf("failed to update preview branch: %w", err)`
`26`	`25`	`} else if resp.JSON200 == nil {`
`27`		`- if orgSlug, was402 := utils.SuggestUpgradeOnError(ctx, flags.ProjectRef, "branching_persistent", resp.StatusCode()); was402 {`
`28`		`- trackUpgradeSuggested(ctx, "branching_persistent", orgSlug)`
	`26`	`+ if orgSlug, isGated := utils.SuggestUpgradeOnError(ctx, projectRef, "branching_persistent", resp.StatusCode()); isGated {`
	`27`	`+ telemetry.TrackUpgradeSuggested(ctx, "branching_persistent", orgSlug)`
`29`	`28`	`}`
`30`	`29`	`return errors.Errorf("unexpected update branch status %d: %s", resp.StatusCode(), string(resp.Body))`
`31`	`30`	`}`
`@@ -36,12 +35,3 @@ func Run(ctx context.Context, branchId string, body api.UpdateBranchBody, fsys a`
`36`	`35`	`}`
`37`	`36`	`return utils.EncodeOutput(utils.OutputFormat.Value, os.Stdout, *resp.JSON200)`
`38`	`37`	`}`
`39`		`-`
`40`		`-func trackUpgradeSuggested(ctx context.Context, featureKey, orgSlug string) {`
`41`		`- if svc := telemetry.FromContext(ctx); svc != nil {`
`42`		`- _ = svc.Capture(ctx, telemetry.EventUpgradeSuggested, map[string]any{`
`43`		`- telemetry.PropFeatureKey: featureKey,`
`44`		`- telemetry.PropOrgSlug: orgSlug,`
`45`		`- }, nil)`
`46`		`- }`
`47`		`-}`
Original file line number	Diff line number	Diff line change
`@@ -9,6 +9,7 @@ import (`
`9`	`9`	`"github.com/spf13/afero"`
`10`	`10`	`"github.com/supabase/cli/internal/sso/internal/render"`
`11`	`11`	`"github.com/supabase/cli/internal/sso/internal/saml"`
	`12`	`+ "github.com/supabase/cli/internal/telemetry"`
`12`	`13`	`"github.com/supabase/cli/internal/utils"`
`13`	`14`	`"github.com/supabase/cli/pkg/api"`
`14`	`15`	`"github.com/supabase/cli/pkg/cast"`
`@@ -78,10 +79,12 @@ func Run(ctx context.Context, params RunParams) error {`
`78`	`79`	`}`
`79`	`80`
`80`	`81`	`if resp.JSON201 == nil {`
	`82`	`+ if orgSlug, isGated := utils.SuggestUpgradeOnError(ctx, params.ProjectRef, "auth.saml_2", resp.StatusCode()); isGated {`
	`83`	`+ telemetry.TrackUpgradeSuggested(ctx, "auth.saml_2", orgSlug)`
	`84`	`+ }`
`81`	`85`	`if resp.StatusCode() == http.StatusNotFound {`
`82`	`86`	`return errors.New("SAML 2.0 support is not enabled for this project. Please enable it through the dashboard")`
`83`	`87`	`}`
`84`		`-`
`85`	`88`	`return errors.New("Unexpected error adding identity provider: " + string(resp.Body))`
`86`	`89`	`}`
`87`	`90`
Original file line number	Diff line number	Diff line change
`@@ -7,6 +7,7 @@ import (`
`7`	`7`
`8`	`8`	`"github.com/go-errors/errors"`
`9`	`9`	`"github.com/supabase/cli/internal/sso/internal/render"`
	`10`	`+ "github.com/supabase/cli/internal/telemetry"`
`10`	`11`	`"github.com/supabase/cli/internal/utils"`
`11`	`12`	`)`
`12`	`13`
`@@ -17,10 +18,12 @@ func Run(ctx context.Context, ref, format string) error {`
`17`	`18`	`}`
`18`	`19`
`19`	`20`	`if resp.JSON200 == nil {`
	`21`	`+ if orgSlug, isGated := utils.SuggestUpgradeOnError(ctx, ref, "auth.saml_2", resp.StatusCode()); isGated {`
	`22`	`+ telemetry.TrackUpgradeSuggested(ctx, "auth.saml_2", orgSlug)`
	`23`	`+ }`
`20`	`24`	`if resp.StatusCode() == http.StatusNotFound {`
`21`	`25`	`return errors.New("Looks like SAML 2.0 support is not enabled for this project. Please use the dashboard to enable it.")`
`22`	`26`	`}`
`23`		`-`
`24`	`27`	`return errors.New("unexpected error listing identity providers: " + string(resp.Body))`
`25`	`28`	`}`
`26`	`29`
Original file line number	Diff line number	Diff line change
`@@ -8,6 +8,7 @@ import (`
`8`	`8`	`"github.com/go-errors/errors"`
`9`	`9`	`"github.com/google/uuid"`
`10`	`10`	`"github.com/supabase/cli/internal/sso/internal/render"`
	`11`	`+ "github.com/supabase/cli/internal/telemetry"`
`11`	`12`	`"github.com/supabase/cli/internal/utils"`
`12`	`13`	`"github.com/supabase/cli/pkg/api"`
`13`	`14`	`)`
`@@ -23,10 +24,12 @@ func Run(ctx context.Context, ref, providerId, format string) error {`
`23`	`24`	`}`
`24`	`25`
`25`	`26`	`if resp.JSON200 == nil {`
	`27`	`+ if orgSlug, isGated := utils.SuggestUpgradeOnError(ctx, ref, "auth.saml_2", resp.StatusCode()); isGated {`
	`28`	`+ telemetry.TrackUpgradeSuggested(ctx, "auth.saml_2", orgSlug)`
	`29`	`+ }`
`26`	`30`	`if resp.StatusCode() == http.StatusNotFound {`
`27`	`31`	`return errors.Errorf("An identity provider with ID %q could not be found.", providerId)`
`28`	`32`	`}`
`29`		`-`
`30`	`33`	`return errors.New("Unexpected error removing identity provider: " + string(resp.Body))`
`31`	`34`	`}`
`32`	`35`
Original file line number	Diff line number	Diff line change
`@@ -10,6 +10,7 @@ import (`
`10`	`10`	`"github.com/spf13/afero"`
`11`	`11`	`"github.com/supabase/cli/internal/sso/internal/render"`
`12`	`12`	`"github.com/supabase/cli/internal/sso/internal/saml"`
	`13`	`+ "github.com/supabase/cli/internal/telemetry"`
`13`	`14`	`"github.com/supabase/cli/internal/utils"`
`14`	`15`	`"github.com/supabase/cli/pkg/api"`
`15`	`16`	`"github.com/supabase/cli/pkg/cast"`
`@@ -44,10 +45,12 @@ func Run(ctx context.Context, params RunParams) error {`
`44`	`45`	`}`
`45`	`46`
`46`	`47`	`if getResp.JSON200 == nil {`
	`48`	`+ if orgSlug, isGated := utils.SuggestUpgradeOnError(ctx, params.ProjectRef, "auth.saml_2", getResp.StatusCode()); isGated {`
	`49`	`+ telemetry.TrackUpgradeSuggested(ctx, "auth.saml_2", orgSlug)`
	`50`	`+ }`
`47`	`51`	`if getResp.StatusCode() == http.StatusNotFound {`
`48`	`52`	`return errors.Errorf("An identity provider with ID %q could not be found.", parsed)`
`49`	`53`	`}`
`50`		`-`
`51`	`54`	`return errors.New("unexpected error fetching identity provider: " + string(getResp.Body))`
`52`	`55`	`}`
`53`	`56`
`@@ -123,6 +126,9 @@ func Run(ctx context.Context, params RunParams) error {`
`123`	`126`	`}`
`124`	`127`
`125`	`128`	`if putResp.JSON200 == nil {`
	`129`	`+ if orgSlug, isGated := utils.SuggestUpgradeOnError(ctx, params.ProjectRef, "auth.saml_2", putResp.StatusCode()); isGated {`
	`130`	`+ telemetry.TrackUpgradeSuggested(ctx, "auth.saml_2", orgSlug)`
	`131`	`+ }`
`126`	`132`	`return errors.New("unexpected error fetching identity provider: " + string(putResp.Body))`
`127`	`133`	`}`
`128`	`134`