Skip to content

feat: add package trust link request command (W-23970567) - #1270

Open
sshyamala-sfdc wants to merge 6 commits into
packaging-distribution/spifrom
t/packaging-distribution/w-23970567/auth-link-request
Open

feat: add package trust link request command (W-23970567)#1270
sshyamala-sfdc wants to merge 6 commits into
packaging-distribution/spifrom
t/packaging-distribution/w-23970567/auth-link-request

Conversation

@sshyamala-sfdc

@sshyamala-sfdc sshyamala-sfdc commented Aug 26, 2026

Copy link
Copy Markdown
Collaborator

What

Adds the beta sf package trust link request command that requests a Public Secure trust link from a connected authoring org to a Verified Partner Business Org (PBO).

Details

  • New command package trust link request with --verified-org/-i (required, 00D Salesforce ID) plus standard --target-org / --api-version.
  • Marked hidden = true and state = 'beta', consistent with the bundle commands, so it does not surface in package -h while in beta. Following that convention, no trust subtopic is declared in package.json.
  • Delegates to PackageTrustLink.request in the packaging library.
  • Messages, JSON schema (schemas/package-trust-link-request.json), command-snapshot entry, and unit tests (success, flag pass-through, output logging, library-error propagation, invalid-org rejection).

Testing

W-23970567

🤖 Generated with Claude Code

Add the beta "sf package link request" command that requests a Public Secure
trust link from a connected authoring org to a Verified Partner Business Org.
The command is hidden and marked beta, consistent with the bundle commands.
Includes messages, unit tests, and the command snapshot entry.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
sshyamala-sfdc and others added 2 commits August 26, 2026 16:45
…970567@

Move the beta command from "sf package link request" to
"sf package trust link request": relocate the command under the new
trust/link topic, rename messages, schema, and command snapshot, and
update the test to match the new PackageTrustLink library API.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Add tests asserting the command logs the output message with the
verified org ID and trust link ID, and that a library error propagates
out of run() without logging success.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@sshyamala-sfdc sshyamala-sfdc changed the title feat: add package link request command (W-23970567) feat: add package trust link request command (W-23970567) Aug 26, 2026
sshyamala-sfdc and others added 3 commits August 26, 2026 19:30
Point @salesforce/packaging at the packaging-distribution/spi branch so
CI resolves a packaging build that contains PackageTrustLink, instead of
the published 5.0.8 which predates the trust-link API. Temporary until a
packaging prerelease is published; revert to a pinned version before merge.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
The git dependency resolves to codeload.github.com, which the repo's
yarn-lockfile-check (lockfile-lint --allowed-hosts npm yarn) rejects,
gating every CI job. Restore @salesforce/packaging to ^5.0.4 and the
clean lockfile. A published packaging prerelease is required instead.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Pin the packaging prerelease published from the SPI branch so CI resolves
a registry tarball that contains PackageTrustLink, instead of the older
published 5.0.4 which predates the trust-link API. Lockfile resolves via
the public npm registry so it passes yarn-lockfile-check.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant