fix(cli): fix project resolution in env vars subcommands and services env response (#59)

* fix(cli): fix project resolution in env vars subcommands and services env response parsing

Two bugs fixed:

1. `environments vars` subcommands (get, set, delete, import, export) used
   `cmd.parent!.parent!.opts().project` to read the `--project` flag, traversing
   one level too high in the command hierarchy. The `--project` flag is defined on
   the `vars` command, so the correct traversal is `cmd.parent!.opts().project`.
   The `list` subcommand already did this correctly.

   Before: `temps envs vars -p my-app delete KEY` → "Project undefined not found"
   After:  `temps envs vars -p my-app delete KEY` → successfully deletes

2. `services env` command crashed with "envVars is not iterable" because the API
   endpoint returns `HashMap<String, String>` (a plain object) but the CLI expected
   `Array<EnvironmentVariableInfo>`. Added handling to convert the object response
   into the expected array format.

   Before: `temps services env --id 1 -p my-app` → "envVars is not iterable"
   After:  `temps services env --id 1 -p my-app` → displays variables correctly

* docs: add CLI env vars fixes to changelog [Unreleased]

Author: salamaashoush

CHANGELOG.md

@@ -31,6 +31,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Bump `testcontainers` 0.27.1 → 0.27.2 / `astral-tokio-tar` 0.5.6 → 0.6.0 (insufficient PAX extension validation, dev-only)
 
 ### Fixed
+- **CLI: `environments vars` subcommands ignored `--project` flag**: `get`, `set`, `delete`, `import`, `export` used `cmd.parent!.parent!.opts().project` (traversing to `environments` command level where `--project` isn't defined) instead of `cmd.parent!.opts().project` (the `vars` command where it is). This caused "Project undefined not found" errors. The `list` subcommand was not affected.
+- **CLI: `services env` crashed with "envVars is not iterable"**: the API endpoint `GET /external-services/{id}/projects/{project_id}/environment` returns `HashMap<String, String>` but the CLI expected `Array<EnvironmentVariableInfo>`. Added handling to convert the object response into the expected array format.
 - Email event timeline returned 404: UI fetched from `/emails/{id}/events` (unregistered plugin route) instead of `/emails/{id}/tracking/events`; also fixed event type mismatches (`open`/`click` vs `opened`/`clicked`) and added client-side pagination for flat array response
 - Gmail image proxy misidentified as "Firefox" in email tracking events; now shows "Gmail (Google Proxy)"
 - Email detail back button navigated to default Providers tab instead of Sent Emails tab

apps/temps-cli/src/commands/environments/index.ts

@@ -81,7 +81,7 @@ export function registerEnvironmentsCommands(program: Command): void {
     .description('Get a specific environment variable')
     .option('-e, --environment <name>', 'Specify environment (if variable exists in multiple)')
     .action(async (key, options, cmd) => {
-      const projectSlug = cmd.parent!.parent!.opts().project
+      const projectSlug = cmd.parent!.opts().project
       return getEnvVar(projectSlug, key, options)
     })
 
@@ -92,7 +92,7 @@ export function registerEnvironmentsCommands(program: Command): void {
     .option('--no-preview', 'Exclude from preview environments')
     .option('--update', 'Update existing variable instead of creating new')
     .action(async (key, value, options, cmd) => {
-      const projectSlug = cmd.parent!.parent!.opts().project
+      const projectSlug = cmd.parent!.opts().project
       return setEnvVar(projectSlug, key, value, options)
     })
 
@@ -104,7 +104,7 @@ export function registerEnvironmentsCommands(program: Command): void {
     .option('-e, --environment <name>', 'Delete only from specific environment')
     .option('-f, --force', 'Skip confirmation')
     .action(async (key, options, cmd) => {
-      const projectSlug = cmd.parent!.parent!.opts().project
+      const projectSlug = cmd.parent!.opts().project
       return deleteEnvVar(projectSlug, key, options)
     })
 
@@ -114,7 +114,7 @@ export function registerEnvironmentsCommands(program: Command): void {
     .option('-e, --environments <names>', 'Comma-separated environment names')
     .option('--overwrite', 'Overwrite existing variables')
     .action(async (file, options, cmd) => {
-      const projectSlug = cmd.parent!.parent!.opts().project
+      const projectSlug = cmd.parent!.opts().project
       return importEnvVars(projectSlug, file, options)
     })
 
@@ -124,7 +124,7 @@ export function registerEnvironmentsCommands(program: Command): void {
     .option('-e, --environment <name>', 'Export from specific environment')
     .option('-o, --output <file>', 'Write to file instead of stdout')
     .action(async (options, cmd) => {
-      const projectSlug = cmd.parent!.parent!.opts().project
+      const projectSlug = cmd.parent!.opts().project
       return exportEnvVars(projectSlug, options)
     })
 

apps/temps-cli/src/commands/services/index.ts

@@ -1073,6 +1073,15 @@ async function envAction(options: EnvOptions): Promise<void> {
     if (error) {
       throw new Error(getErrorMessage(error))
     }
+    // API returns HashMap<String, String> but OpenAPI spec says Vec<EnvironmentVariableInfo>
+    // Handle both formats for compatibility
+    if (data && !Array.isArray(data)) {
+      return Object.entries(data as Record<string, string>).map(([name, value]) => ({
+        name,
+        value: String(value),
+        sensitive: /password|secret|token|key/i.test(name),
+      }))
+    }
     return data ?? []
   })