@salesforce/packaging 5.0.9-spi.0 → 5.0.9-spi.1

package/lib/interfaces/packagingInterfacesAndType.d.ts

@@ -170,6 +170,15 @@ export type PackageTrustLinkRequestResult = {
     VerifiedOrgId: string;
     Status: string;
 };
+export type PackageTrustLinkStatusResult = {
+    Status: string;
+    linked: boolean;
+    LinkRequestId?: string;
+    VerifiedOrgId?: string;
+    RequestedDate?: string;
+    EstablishedDate?: string;
+    RevokedDate?: string;
+};
 export type PackageTrustLinkUnlinkResult = {
     removed: boolean;
     LinkRequestId?: string;

package/lib/package/packageTrustLink.d.ts

@@ -1,5 +1,5 @@
 import { Connection } from '@salesforce/core';
-import { PackageTrustLinkRequestOptions, PackageTrustLinkRequestResult, PackageTrustLinkUnlinkResult } from '../interfaces';
+import { PackageTrustLinkRequestOptions, PackageTrustLinkRequestResult, PackageTrustLinkStatusResult, PackageTrustLinkUnlinkResult } from '../interfaces';
 export declare class PackageTrustLink {
     constructor();
     /**
@@ -14,6 +14,18 @@ export declare class PackageTrustLink {
      * @returns the created trust relationship Id, verified org ID, and status.
      */
     static request(connection: Connection, options: PackageTrustLinkRequestOptions): Promise<PackageTrustLinkRequestResult>;
+    /**
+     * Report the connected authoring org's Public Secure (VerifiedDev) trust link state.
+     *
+     * Read-only developer/authoring-org side operation. An authoring org holds at most one trust
+     * relationship, so this returns that org's link if one exists — its status (`Pending`, `Accepted`,
+     * `Declined`, `Revoked`, or `Failed`) and the relevant timestamps — or the synthetic `Not Linked`
+     * state when the org has no link at all. It never mutates anything.
+     *
+     * @param connection - Connection to the authoring org (the 1GP namespace org or 2GP Dev Hub).
+     * @returns the current link state and, when a link exists, its Id, verified org ID, and timestamps.
+     */
+    static status(connection: Connection): Promise<PackageTrustLinkStatusResult>;
     /**
      * Clear the connected authoring org's Public Secure (VerifiedDev) trust link, returning it to the
      * `Not Linked` state.

package/lib/package/packageTrustLink.js

@@ -8,6 +8,9 @@ const messages = core_1.Messages.loadMessages('@salesforce/packaging', 'package_
 // Tooling API SObject backing the VerifiedDev (Public Secure) org-level trust relationship
 // between the connected authoring org and a Verified PBO. See W-23970567 / SPI CLI design doc.
 const TRUST_LINK_SOBJECT = 'PkgVrfyAuthOrgTrustRela';
+// The absence of a trust link record is a valid state the CLI reports; the SObject Status
+// picklist itself only covers the states an existing link can be in.
+const NOT_LINKED = 'Not Linked';
 class PackageTrustLink {
     constructor() { }
     /**
@@ -51,6 +54,36 @@ class PackageTrustLink {
             Status: 'Pending',
         };
     }
+    /**
+     * Report the connected authoring org's Public Secure (VerifiedDev) trust link state.
+     *
+     * Read-only developer/authoring-org side operation. An authoring org holds at most one trust
+     * relationship, so this returns that org's link if one exists — its status (`Pending`, `Accepted`,
+     * `Declined`, `Revoked`, or `Failed`) and the relevant timestamps — or the synthetic `Not Linked`
+     * state when the org has no link at all. It never mutates anything.
+     *
+     * @param connection - Connection to the authoring org (the 1GP namespace org or 2GP Dev Hub).
+     * @returns the current link state and, when a link exists, its Id, verified org ID, and timestamps.
+     */
+    static async status(connection) {
+        // The Tooling API query runs against the connected authoring org (AuthoringOrg is server-set),
+        // so this returns that org's own link if any. No record means the org was never linked.
+        const existing = await queryExistingTrustLink(connection);
+        if (!existing) {
+            return { Status: NOT_LINKED, linked: false };
+        }
+        // Only surface timestamps that are actually set — a Pending link has no EstablishedDate, and
+        // only a Revoked link has a RevokedDate. Emitting undefined keys would leak nulls into --json.
+        return {
+            Status: existing.Status,
+            linked: true,
+            LinkRequestId: existing.Id,
+            VerifiedOrgId: existing.VerifiedOrg,
+            ...(existing.CreatedDate ? { RequestedDate: existing.CreatedDate } : {}),
+            ...(existing.EstablishedDate ? { EstablishedDate: existing.EstablishedDate } : {}),
+            ...(existing.RevokedDate ? { RevokedDate: existing.RevokedDate } : {}),
+        };
+    }
     /**
      * Clear the connected authoring org's Public Secure (VerifiedDev) trust link, returning it to the
      * `Not Linked` state.
@@ -84,7 +117,7 @@ class PackageTrustLink {
 }
 exports.PackageTrustLink = PackageTrustLink;
 async function queryExistingTrustLink(connection) {
-    const query = `SELECT Id, VerifiedOrg, Status FROM ${TRUST_LINK_SOBJECT} LIMIT 1`;
+    const query = `SELECT Id, VerifiedOrg, Status, EstablishedDate, RevokedDate, CreatedDate FROM ${TRUST_LINK_SOBJECT} LIMIT 1`;
     const result = await connection.autoFetchQuery(query, { tooling: true });
     return result.records?.[0];
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@salesforce/packaging",
-  "version": "5.0.9-spi.0",
+  "version": "5.0.9-spi.1",
   "description": "Packaging library for the Salesforce packaging platform",
   "main": "lib/exported",
   "types": "lib/exported.d.ts",