@salesforce/packaging 5.0.9-spi.1 → 5.0.9-spi.3

package/lib/interfaces/packagingInterfacesAndType.d.ts

@@ -179,6 +179,20 @@ export type PackageTrustLinkStatusResult = {
     EstablishedDate?: string;
     RevokedDate?: string;
 };
+/** CLI --status values for `sf package trust link list` (PBO-admin). */
+export type PackageTrustLinkListStatusFilter = 'pending' | 'approved' | 'declined' | 'revoked';
+/** Tooling API values for PkgVrfyAuthOrgTrustRela.Status */
+export type PackageTrustLinkStatus = 'Pending' | 'Accepted' | 'Declined' | 'Revoked' | 'Failed';
+export type PackageTrustLinkRecord = {
+    Id: string;
+    AuthoringOrg: string;
+    VerifiedOrg: string;
+    Status: PackageTrustLinkStatus;
+    RequestedBy: string | null;
+    CreatedDate: string;
+    EstablishedDate: string | null;
+    RevokedDate: string | null;
+};
 export type PackageTrustLinkUnlinkResult = {
     removed: boolean;
     LinkRequestId?: string;

package/lib/package/packageTrustLink.d.ts

@@ -1,5 +1,5 @@
 import { Connection } from '@salesforce/core';
-import { PackageTrustLinkRequestOptions, PackageTrustLinkRequestResult, PackageTrustLinkStatusResult, PackageTrustLinkUnlinkResult } from '../interfaces';
+import { PackageTrustLinkListStatusFilter, PackageTrustLinkRecord, PackageTrustLinkRequestOptions, PackageTrustLinkRequestResult, PackageTrustLinkStatusResult, PackageTrustLinkUnlinkResult } from '../interfaces';
 export declare class PackageTrustLink {
     constructor();
     /**
@@ -26,6 +26,14 @@ export declare class PackageTrustLink {
      * @returns the current link state and, when a link exists, its Id, verified org ID, and timestamps.
      */
     static status(connection: Connection): Promise<PackageTrustLinkStatusResult>;
+    /**
+     * List inbound Public Secure trust-link requests for the connected Verified PBO.
+     *
+     * Queries `PkgVrfyAuthOrgTrustRela` rows where this org is the Verified org, excluding the
+     * self-trust record (`AuthoringOrg != VerifiedOrg`). Optional `--status` CLI values map to
+     * Tooling statuses (`approved` → `Accepted`). Matches `sf package trust link list`.
+     */
+    static list(connection: Connection, status?: PackageTrustLinkListStatusFilter): Promise<PackageTrustLinkRecord[]>;
     /**
      * Clear the connected authoring org's Public Secure (VerifiedDev) trust link, returning it to the
      * `Not Linked` state.

package/lib/package/packageTrustLink.js

@@ -8,6 +8,21 @@ const messages = core_1.Messages.loadMessages('@salesforce/packaging', 'package_
 // Tooling API SObject backing the VerifiedDev (Public Secure) org-level trust relationship
 // between the connected authoring org and a Verified PBO. See W-23970567 / SPI CLI design doc.
 const TRUST_LINK_SOBJECT = 'PkgVrfyAuthOrgTrustRela';
+const MINIMUM_API_VERSION = '68.0';
+const ORGANIZATION_TYPE_VERIFIED = 'Verified';
+const STATUS_FILTER_TO_API = {
+    pending: 'Pending',
+    approved: 'Accepted',
+    declined: 'Declined',
+    revoked: 'Revoked',
+};
+const isStatusFilter = (status) => Object.prototype.hasOwnProperty.call(STATUS_FILTER_TO_API, status);
+const toApiStatus = (status) => {
+    if (!isStatusFilter(status)) {
+        throw messages.createError('invalidStatus', [status]);
+    }
+    return STATUS_FILTER_TO_API[status];
+};
 // The absence of a trust link record is a valid state the CLI reports; the SObject Status
 // picklist itself only covers the states an existing link can be in.
 const NOT_LINKED = 'Not Linked';
@@ -84,6 +99,39 @@ class PackageTrustLink {
             ...(existing.RevokedDate ? { RevokedDate: existing.RevokedDate } : {}),
         };
     }
+    /**
+     * List inbound Public Secure trust-link requests for the connected Verified PBO.
+     *
+     * Queries `PkgVrfyAuthOrgTrustRela` rows where this org is the Verified org, excluding the
+     * self-trust record (`AuthoringOrg != VerifiedOrg`). Optional `--status` CLI values map to
+     * Tooling statuses (`approved` → `Accepted`). Matches `sf package trust link list`.
+     */
+    static async list(connection, status) {
+        if (Number(connection.getApiVersion()) < Number(MINIMUM_API_VERSION)) {
+            throw messages.createError('apiVersionTooLow', [MINIMUM_API_VERSION]);
+        }
+        const orgId = connection.getAuthInfoFields()?.orgId;
+        if (!orgId) {
+            throw messages.createError('missingOrgId');
+        }
+        const verifiedOrgId = (0, core_1.trimTo15)(orgId);
+        const statusFilter = status ? toApiStatus(status) : undefined;
+        const statusClause = statusFilter ? ` AND Status = '${statusFilter}'` : '';
+        const query = 'SELECT Id, AuthoringOrg, VerifiedOrg, Status, RequestedBy, CreatedDate, EstablishedDate, RevokedDate FROM ' +
+            `${TRUST_LINK_SOBJECT} WHERE VerifiedOrg = '${verifiedOrgId}' AND OrganizationType = '${ORGANIZATION_TYPE_VERIFIED}' ` +
+            `AND AuthoringOrg != '${verifiedOrgId}'${statusClause} ORDER BY CreatedDate DESC`;
+        const result = await connection.autoFetchQuery(query, { tooling: true });
+        return (result.records ?? []).map(({ Id, AuthoringOrg, VerifiedOrg, Status, RequestedBy, CreatedDate, EstablishedDate, RevokedDate }) => ({
+            Id,
+            AuthoringOrg,
+            VerifiedOrg,
+            Status,
+            RequestedBy: RequestedBy ?? null,
+            CreatedDate,
+            EstablishedDate: EstablishedDate ?? null,
+            RevokedDate: RevokedDate ?? null,
+        }));
+    }
     /**
      * Clear the connected authoring org's Public Secure (VerifiedDev) trust link, returning it to the
      * `Not Linked` state.

package/messages/package_trust_link.md

@@ -6,6 +6,18 @@ The Verified Org ID %s isn't valid. Specify a valid organization ID (starts with
 
 This org already has a trust link to Verified Org %s with status '%s'. An org can have only one trust link at a time; delete the existing trust link before requesting a new one.
 
+# apiVersionTooLow
+
+Package link requires API version %s or later.
+
+# missingOrgId
+
+Unable to determine the target org ID from the current connection.
+
+# invalidStatus
+
+The status %s is invalid. Valid values are: pending, approved, declined, revoked.
+
 # trustLinkNotFound
 
 This org has no trust link to remove; it's already in the Not Linked state.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@salesforce/packaging",
-  "version": "5.0.9-spi.1",
+  "version": "5.0.9-spi.3",
   "description": "Packaging library for the Salesforce packaging platform",
   "main": "lib/exported",
   "types": "lib/exported.d.ts",