fix(marketplace): install_package action returns 'sys_package not registered'

When clicking 'Install into Environment' from the Marketplace package detail
page in cloud_control, users saw:
  {error: "Object 'sys_package' is not registered", code: 'object_not_found'}

Root cause: @object-ui app-shell 4.7's RecordDetailView apiHandler ignores
action.target for unknown action names and falls back to
  dataSource.update(objectName, recordId, params)
which tries to PATCH sys_package with non-existent fields (environment_id,
seed_sample_data). The misleading 'not registered' message comes from the
project-scoped data route, where sys_package isn't visible.

Same upstream bug we already worked around for sys_environment's
install_application: change action type to 'script' so RecordDetailView
routes through serverActionHandler → POST /api/v1/actions/{object}/{action},
then register a server-side handler.

  - sys_package.install_package: type 'api' → 'script', target rewritten to
    bare 'install_package' (the action name, not a URL).
  - service-cloud project-lifecycle: register
    POST /actions/sys_package/:actionName dispatcher that pulls packageId
    from body.recordId and environment_id/seed_sample_data from body.params,
    then forwards to the existing installPackageIntoEnvironment helper.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: hotlong

packages/services/service-cloud/src/routes/project-lifecycle.ts

@@ -615,6 +615,55 @@ export function registerProjectLifecycleRoutes(server: IHttpServer, deps: Packag
     server.post(`${prefix}/actions/sys_environment/:actionName`, actionHandler);
     server.post(`${prefix}/actions/sys_project/:actionName`, actionHandler); // legacy alias
 
+    // ── sys_package action dispatcher ──────────────────────────────────────
+    // The Marketplace "Install into Environment" action on sys_package is
+    // declared as `type: 'script'` (not 'api') because @object-ui's
+    // RecordDetailView.apiHandler ignores action.target for unknown action
+    // names and falls back to `dataSource.update(object, id, params)`, which
+    // tries to PATCH the sys_package row with non-existent fields
+    // (environment_id, seed_sample_data) and surfaces a misleading
+    // `Object 'sys_package' is not registered` error. Routing through
+    // `serverActionHandler` instead gives us this dedicated endpoint.
+    //
+    // Body shape from app-shell: `{ recordId, params: { environment_id, seed_sample_data } }`
+    server.post(`${prefix}/actions/sys_package/:actionName`, async (req: any, res: any) => {
+        const auth = await checkAuth(req); if (!auth.ok) return res.status(auth.status).json(auth.body);
+        const actionName = String(req.params?.actionName ?? '').trim();
+        if (actionName !== 'install_package') {
+            return res.status(404).json(fail(`Unknown sys_package action '${actionName}'`, 404));
+        }
+        const body = (req.body ?? {}) as AnyRow;
+        const params = (body.params && typeof body.params === 'object') ? (body.params as AnyRow) : {};
+        const rowRecord = (params._rowRecord && typeof params._rowRecord === 'object')
+            ? (params._rowRecord as AnyRow) : null;
+        const packageId = String(
+            body.recordId
+            ?? body.record_id
+            ?? params.recordId
+            ?? params.record_id
+            ?? rowRecord?.id
+            ?? ''
+        ).trim();
+        if (!packageId) return res.status(400).json(fail('recordId (package_id) is required', 400));
+        const environmentId = String(params.environment_id ?? params.environmentId ?? '').trim();
+        if (!environmentId) return res.status(400).json(fail('environment_id is required', 400));
+        const seedSampleData = params.seed_sample_data === true
+            || params.seed_sample_data === 'true'
+            || params.seedSampleData === true
+            || params.seedSampleData === 'true';
+        const callerUserId = (await resolveActorId(req)) ?? null;
+        const callerActiveOrgId = (await resolveActiveOrgId(req)) ?? null;
+        const result = await installPackageIntoEnvironment({
+            deps,
+            packageId,
+            environmentId,
+            seedSampleData,
+            callerUserId,
+            callerActiveOrgId,
+        });
+        return res.status(result.status).json(result.body);
+    });
+
     // Reference the randomUUID import (silences unused warnings) — used by
     // adapter fallbacks elsewhere in the file in the future.
     void randomUUID;

packages/services/service-tenant/src/objects/sys-package.object.ts

@@ -186,11 +186,17 @@ export const SysPackage = ObjectSchema.create({
       label: 'Install into Environment',
       icon: 'download-cloud',
       variant: 'primary',
-      type: 'api',
+      // MUST be 'script' (not 'api'): app-shell's RecordDetailView apiHandler
+      // ignores `action.target` for unknown action names and falls back to
+      // `dataSource.update(object, id, params)` — which tries to PATCH the
+      // sys_package row with non-existent fields (environment_id, etc.) and
+      // surfaces as `Object 'sys_package' is not registered` on the
+      // project-scoped data route. 'script' routes through serverActionHandler
+      // → POST /api/v1/actions/sys_package/install_package, which we handle
+      // server-side in service-cloud's project-lifecycle routes.
+      type: 'script',
       locations: ['list_item', 'record_header'],
-      target: '/api/v1/cloud/packages/{id}/install',
-      method: 'POST',
-      recordIdParam: 'id',
+      target: 'install_package',
       successMessage: 'Package installed. Open your environment to see it.',
       refreshAfter: true,
       params: [