fix: sanitize error messages to prevent leaking internal details

- Remove raw HTTP response bodies and status codes from OAuth errors
- Replace all %v error prints with api.UserMessageVerbose() which
  returns the APIError message when available or a safe generic
  fallback otherwise
- Add debug: line with raw error when CREATEOS_DEBUG is set
- Replace pterm table render errors with generic message
- Replace TUI catalog/skills error displays with generic message
- Add Hint() display for API errors in main.go

Author: BhautikChudasama

cmd/deployments/helpers.go

@@ -83,7 +83,7 @@ func pickDeployment(client *api.APIClient, projectID string, statusFilter []stri
 	}
 	fmt.Println()
 	if err = pterm.DefaultTable.WithHasHeader().WithData(tableData).Render(); err != nil {
-		pterm.Error.Println(err)
+		pterm.Error.Println("could not display table")
 	}
 	fmt.Println()
 

cmd/deployments/list.go

@@ -51,7 +51,7 @@ func newDeploymentsListCommand() *cli.Command {
 					})
 				}
 				if err := pterm.DefaultTable.WithHasHeader().WithData(tableData).Render(); err != nil {
-					pterm.Error.Println(err)
+					pterm.Error.Println("could not display table")
 				}
 			})
 			return nil

cmd/environments/list.go

@@ -63,7 +63,7 @@ func newEnvironmentsListCommand() *cli.Command {
 					})
 				}
 				if err := pterm.DefaultTable.WithHasHeader().WithData(tableData).Render(); err != nil {
-					pterm.Error.Println(err)
+					pterm.Error.Println("could not display table")
 				}
 				fmt.Println()
 			})

cmd/oauth/list.go

@@ -41,7 +41,7 @@ func newListCommand() *cli.Command {
 					})
 				}
 				if err := pterm.DefaultTable.WithHasHeader().WithData(tableData).Render(); err != nil {
-					pterm.Error.Println(err)
+					pterm.Error.Println("could not display table")
 				}
 				fmt.Println()
 			})

cmd/sandbox/devices.go

@@ -231,7 +231,7 @@ func runDeviceUnregister(c *cli.Context) error {
 	ctx, cancel := context.WithTimeout(c.Context, 10*time.Second)
 	defer cancel()
 	if err := client.DeleteDevice(ctx, st.DeviceID); err != nil {
-		pterm.Warning.Printfln("Server-side revoke failed: %v", err)
+		pterm.Warning.Printfln("Server-side revoke failed: %s", api.UserMessageVerbose(err))
 		pterm.Println(pterm.Gray("  (clearing local state anyway; revoke from the UI to be safe)"))
 	}
 	if err := clearDeviceState(); err != nil {

cmd/sandbox/disk.go

@@ -317,7 +317,7 @@ func runDiskRm(c *cli.Context) error {
 	failed := 0
 	for _, ref := range refs {
 		if err := deleteDiskCascade(c, client, ref); err != nil {
-			pterm.Error.Printfln("%s: %v", ref, err)
+			pterm.Error.Printfln("%s: %s", ref, api.UserMessageVerbose(err))
 			failed++
 			continue
 		}

cmd/sandbox/edit.go

@@ -241,7 +241,7 @@ func runEditMenu(c *cli.Context, client *api.SandboxClient, label, id string) er
 				continue
 			}
 			if err := applyAddSSHKeys(c, client, label, id, []string{path}); err != nil {
-				pterm.Error.Printfln("%v", err)
+				pterm.Error.Printfln("%s", api.UserMessageVerbose(err))
 				continue
 			}
 			// Refresh so the next pass shows the new count.
@@ -271,7 +271,7 @@ func runEditMenu(c *cli.Context, client *api.SandboxClient, label, id string) er
 			bytes := int64(picked) << 30 // GiB, matches humanBytes() display
 			updated, rerr := client.RechargeBandwidth(c.Context, id, bytes)
 			if rerr != nil {
-				pterm.Error.Printfln("%v", rerr)
+				pterm.Error.Printfln("%s", api.UserMessageVerbose(rerr))
 				continue
 			}
 			bw = updated
@@ -295,7 +295,7 @@ func runEditMenu(c *cli.Context, client *api.SandboxClient, label, id string) er
 				continue
 			}
 			if err := applyAutoPauseFlag(c, client, label, id, input); err != nil {
-				pterm.Error.Printfln("%v", err)
+				pterm.Error.Printfln("%s", api.UserMessageVerbose(err))
 				continue
 			}
 			if refreshed, err := client.GetSandbox(c.Context, id); err == nil {

cmd/sandbox/network.go

@@ -244,7 +244,7 @@ func runNetworkRm(c *cli.Context) error {
 	failed := 0
 	for _, ref := range refs {
 		if err := deleteNetworkCascade(c, client, ref); err != nil {
-			pterm.Error.Printfln("%s: %v", ref, err)
+			pterm.Error.Printfln("%s: %s", ref, api.UserMessageVerbose(err))
 			failed++
 			continue
 		}

cmd/sandbox/rm.go

@@ -108,12 +108,12 @@ func runRm(c *cli.Context) error {
 	for _, ref := range ids {
 		id, err := resolveSandboxRef(c.Context, client, ref)
 		if err != nil {
-			pterm.Error.Printfln("%s: %v", ref, err)
+			pterm.Error.Printfln("%s: %s", ref, api.UserMessageVerbose(err))
 			failed++
 			continue
 		}
 		if err := client.DestroySandbox(c.Context, id); err != nil {
-			pterm.Error.Printfln("%s: %v", ref, err)
+			pterm.Error.Printfln("%s: %s", ref, api.UserMessageVerbose(err))
 			failed++
 			continue
 		}

cmd/sandbox/template.go

@@ -380,7 +380,7 @@ func runTemplateRm(c *cli.Context) error {
 	failed := 0
 	for _, ref := range refs {
 		if err := client.DeleteTemplate(c.Context, ref); err != nil {
-			pterm.Error.Printfln("%s: %v", ref, err)
+			pterm.Error.Printfln("%s: %s", ref, api.UserMessageVerbose(err))
 			failed++
 			continue
 		}