@aifabrix/builder 2.45.0 → 2.45.5

package/lib/api/datasources-core.api.js

@@ -4,81 +4,84 @@
  * @version 2.0.0
  */
 
-const { ApiClient } = require('./index');
+const { createDataplaneApiClient } = require('./index');
 
 /** @requiresPermission {Dataplane} external-system:read (datasource list) */
 async function listDatasources(dataplaneUrl, authConfig, options = {}) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.get('/api/v1/external', { params: options });
 }
 /** @requiresPermission {Dataplane} external-system:create */
 async function createDatasource(dataplaneUrl, authConfig, datasourceData) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.post('/api/v1/external', { body: datasourceData });
 }
 /** @requiresPermission {Dataplane} external-system:read */
 async function getDatasource(dataplaneUrl, sourceIdOrKey, authConfig) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.get(`/api/v1/external/${sourceIdOrKey}`);
 }
 /** @requiresPermission {Dataplane} external-system:update */
 async function updateDatasource(dataplaneUrl, sourceIdOrKey, authConfig, updateData) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.put(`/api/v1/external/${sourceIdOrKey}`, { body: updateData });
 }
 /** @requiresPermission {Dataplane} external-system:delete */
 async function deleteDatasource(dataplaneUrl, sourceIdOrKey, authConfig) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.delete(`/api/v1/external/${sourceIdOrKey}`);
 }
 /** @requiresPermission {Dataplane} external-system:read */
 async function getDatasourceConfig(dataplaneUrl, sourceIdOrKey, authConfig) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.get(`/api/v1/external/${sourceIdOrKey}/config`);
 }
 /** @requiresPermission {Dataplane} external-system:update */
 async function publishDatasource(dataplaneUrl, sourceIdOrKey, authConfig, publishData = {}) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.post(`/api/v1/external/${sourceIdOrKey}/publish`, { body: publishData });
 }
 /** @requiresPermission {Dataplane} external-system:update */
 async function rollbackDatasource(dataplaneUrl, sourceIdOrKey, authConfig, rollbackData) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.post(`/api/v1/external/${sourceIdOrKey}/rollback`, { body: rollbackData });
 }
 /** @requiresPermission {Dataplane} external-system:read */
 async function testDatasource(dataplaneUrl, sourceIdOrKey, authConfig, testData = {}) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.post(`/api/v1/external/${sourceIdOrKey}/test`, { body: testData });
 }
 /** @requiresPermission {Dataplane} external-system:read */
 async function listDatasourceOpenAPIEndpoints(dataplaneUrl, sourceIdOrKey, authConfig, options = {}) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.get(`/api/v1/external/${sourceIdOrKey}/openapi-endpoints`, { params: options });
 }
 /** @requiresPermission {Dataplane} audit:read or external-system:read */
 async function listExecutionLogs(dataplaneUrl, sourceIdOrKey, authConfig, options = {}) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.get(`/api/v1/external/${sourceIdOrKey}/executions`, { params: options });
 }
 /** @requiresPermission {Dataplane} audit:read or external-system:read */
 async function getExecutionLog(dataplaneUrl, sourceIdOrKey, executionId, authConfig) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.get(`/api/v1/external/${sourceIdOrKey}/executions/${executionId}`);
 }
 /** @requiresPermission {Dataplane} audit:read */
 async function listAllExecutionLogs(dataplaneUrl, authConfig, options = {}) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.get('/api/v1/external/executions', { params: options });
 }
-/** @requiresPermission {Dataplane} external-system:update */
+/**
+ * @deprecated Prefer {@link module:lib/api/records-bulk.api.bulkSyncRecords}.
+ * @requiresPermission {Dataplane} external-data-source:sync
+ */
 async function bulkOperation(dataplaneUrl, sourceIdOrKey, authConfig, bulkData) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
-  return await client.post(`/api/v1/external/${sourceIdOrKey}/bulk`, { body: bulkData });
+  const { bulkSyncRecords } = require('./records-bulk.api');
+  return await bulkSyncRecords(dataplaneUrl, sourceIdOrKey, authConfig, bulkData);
 }
 /** @requiresPermission {Dataplane} external-system:read */
 async function getDatasourceStatus(dataplaneUrl, sourceIdOrKey, authConfig) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.get(`/api/v1/external/${sourceIdOrKey}/status`);
 }
 

package/lib/api/datasources-extended.api.js

@@ -4,107 +4,107 @@
  * @version 2.0.0
  */
 
-const { ApiClient } = require('./index');
+const { createDataplaneApiClient } = require('./index');
 
 /** @requiresPermission {Dataplane} external-system:read (records) */
 async function listRecords(dataplaneUrl, sourceIdOrKey, authConfig, options = {}) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.get(`/api/v1/external/${sourceIdOrKey}/records`, { params: options });
 }
 /** @requiresPermission {Dataplane} external-system:create */
 async function createRecord(dataplaneUrl, sourceIdOrKey, authConfig, recordData) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.post(`/api/v1/external/${sourceIdOrKey}/records`, { body: recordData });
 }
 /** @requiresPermission {Dataplane} external-system:read */
 async function getRecord(dataplaneUrl, sourceIdOrKey, recordIdOrKey, authConfig) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.get(`/api/v1/external/${sourceIdOrKey}/records/${recordIdOrKey}`);
 }
 /** @requiresPermission {Dataplane} external-system:update */
 async function updateRecord(dataplaneUrl, sourceIdOrKey, recordIdOrKey, authConfig, updateData) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.put(`/api/v1/external/${sourceIdOrKey}/records/${recordIdOrKey}`, { body: updateData });
 }
 /** @requiresPermission {Dataplane} external-system:delete */
 async function deleteRecord(dataplaneUrl, sourceIdOrKey, recordIdOrKey, authConfig) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.delete(`/api/v1/external/${sourceIdOrKey}/records/${recordIdOrKey}`);
 }
 /** @requiresPermission {Dataplane} external-system:read (grants) */
 async function listGrants(dataplaneUrl, sourceIdOrKey, authConfig, options = {}) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.get(`/api/v1/external/${sourceIdOrKey}/grants`, { params: options });
 }
 /** @requiresPermission {Dataplane} external-system:update */
 async function createGrant(dataplaneUrl, sourceIdOrKey, authConfig, grantData) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.post(`/api/v1/external/${sourceIdOrKey}/grants`, { body: grantData });
 }
 /** @requiresPermission {Dataplane} external-system:read */
 async function getGrant(dataplaneUrl, sourceIdOrKey, grantIdOrKey, authConfig) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.get(`/api/v1/external/${sourceIdOrKey}/grants/${grantIdOrKey}`);
 }
 /** @requiresPermission {Dataplane} external-system:update */
 async function updateGrant(dataplaneUrl, sourceIdOrKey, grantIdOrKey, authConfig, updateData) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.put(`/api/v1/external/${sourceIdOrKey}/grants/${grantIdOrKey}`, { body: updateData });
 }
 async function deleteGrant(dataplaneUrl, sourceIdOrKey, grantIdOrKey, authConfig) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.delete(`/api/v1/external/${sourceIdOrKey}/grants/${grantIdOrKey}`);
 }
 /** @requiresPermission {Dataplane} external-system:read (policies) */
 async function listPolicies(dataplaneUrl, sourceIdOrKey, authConfig, options = {}) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.get(`/api/v1/external/${sourceIdOrKey}/policies`, { params: options });
 }
 /** @requiresPermission {Dataplane} external-system:update */
 async function attachPolicy(dataplaneUrl, sourceIdOrKey, authConfig, policyData) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.post(`/api/v1/external/${sourceIdOrKey}/policies`, { body: policyData });
 }
 async function detachPolicy(dataplaneUrl, sourceIdOrKey, policyIdOrKey, authConfig) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.delete(`/api/v1/external/${sourceIdOrKey}/policies/${policyIdOrKey}`);
 }
 /** @requiresPermission {Dataplane} external-system:read (sync) */
 async function listSyncJobs(dataplaneUrl, sourceIdOrKey, authConfig, options = {}) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.get(`/api/v1/external/${sourceIdOrKey}/sync`, { params: options });
 }
 async function createSyncJob(dataplaneUrl, sourceIdOrKey, authConfig, syncData) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.post(`/api/v1/external/${sourceIdOrKey}/sync`, { body: syncData });
 }
 /** @requiresPermission {Dataplane} external-system:read */
 async function getSyncJob(dataplaneUrl, sourceIdOrKey, syncJobId, authConfig) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.get(`/api/v1/external/${sourceIdOrKey}/sync/${syncJobId}`);
 }
 /** @requiresPermission {Dataplane} external-system:update */
 async function updateSyncJob(dataplaneUrl, sourceIdOrKey, syncJobId, authConfig, updateData) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.put(`/api/v1/external/${sourceIdOrKey}/sync/${syncJobId}`, { body: updateData });
 }
 async function executeSyncJob(dataplaneUrl, sourceIdOrKey, syncJobId, authConfig) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.post(`/api/v1/external/${sourceIdOrKey}/sync/${syncJobId}/execute`);
 }
 /** @requiresPermission {Dataplane} document-record or external-system scope */
 async function validateDocuments(dataplaneUrl, sourceIdOrKey, authConfig, validateData) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.post(`/api/v1/external/data-sources/${sourceIdOrKey}/documents/validate`, { body: validateData });
 }
 /** @requiresPermission {Dataplane} document-record or external-system scope */
 async function bulkDocuments(dataplaneUrl, sourceIdOrKey, authConfig, bulkData) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.post(`/api/v1/external/data-sources/${sourceIdOrKey}/documents/bulk`, { body: bulkData });
 }
 /** @requiresPermission {Dataplane} document-record:read or external-system:read */
 async function listDocuments(dataplaneUrl, sourceIdOrKey, authConfig, options = {}) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.get(`/api/v1/external/data-sources/${sourceIdOrKey}/documents`, { params: options });
 }
 

package/lib/api/dimensions.api.js

@@ -68,6 +68,9 @@ async function createDimension(controllerUrl, authConfig, body) {
     displayName: body.displayName,
     dataType: body.dataType
   };
+  if (body.valueType !== undefined && body.valueType !== null && body.valueType !== '') {
+    payload.valueType = body.valueType;
+  }
   if (body.description !== undefined && body.description !== null && body.description !== '') {
     payload.description = body.description;
   }

package/lib/api/external-systems.api.js

@@ -4,7 +4,7 @@
  * @version 2.0.0
  */
 
-const { ApiClient } = require('./index');
+const { createDataplaneApiClient } = require('./index');
 
 /**
  * List external systems
@@ -24,7 +24,7 @@ const { ApiClient } = require('./index');
  * @throws {Error} If request fails
  */
 async function listExternalSystems(dataplaneUrl, authConfig, options = {}) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.get('/api/v1/external/systems', {
     params: options
   });
@@ -43,7 +43,7 @@ async function listExternalSystems(dataplaneUrl, authConfig, options = {}) {
  * @throws {Error} If creation fails
  */
 async function createExternalSystem(dataplaneUrl, authConfig, systemData) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.post('/api/v1/external/systems', {
     body: systemData
   });
@@ -66,7 +66,7 @@ async function createExternalSystem(dataplaneUrl, authConfig, systemData) {
  * @throws {Error} If request fails
  */
 async function getExternalSystem(dataplaneUrl, systemIdOrKey, authConfig) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.get(`/api/v1/external/systems/${systemIdOrKey}`);
 }
 
@@ -84,7 +84,7 @@ async function getExternalSystem(dataplaneUrl, systemIdOrKey, authConfig) {
  * @throws {Error} If update fails
  */
 async function updateExternalSystem(dataplaneUrl, systemIdOrKey, authConfig, updateData) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.put(`/api/v1/external/systems/${systemIdOrKey}`, {
     body: updateData
   });
@@ -103,7 +103,7 @@ async function updateExternalSystem(dataplaneUrl, systemIdOrKey, authConfig, upd
  * @throws {Error} If deletion fails
  */
 async function deleteExternalSystem(dataplaneUrl, systemIdOrKey, authConfig) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.delete(`/api/v1/external/systems/${systemIdOrKey}`);
 }
 
@@ -120,7 +120,7 @@ async function deleteExternalSystem(dataplaneUrl, systemIdOrKey, authConfig) {
  * @throws {Error} If request fails
  */
 async function getExternalSystemConfig(dataplaneUrl, systemIdOrKey, authConfig) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.get(`/api/v1/external/systems/${systemIdOrKey}/config`);
 }
 
@@ -140,7 +140,7 @@ async function getExternalSystemConfig(dataplaneUrl, systemIdOrKey, authConfig)
  * @throws {Error} If creation fails
  */
 async function createFromTemplate(dataplaneUrl, authConfig, templateData) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.post('/api/v1/external/systems/from-template', {
     body: templateData
   });
@@ -160,7 +160,7 @@ async function createFromTemplate(dataplaneUrl, authConfig, templateData) {
  * @throws {Error} If request fails
  */
 async function listOpenAPIFiles(dataplaneUrl, systemIdOrKey, authConfig, options = {}) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.get(`/api/v1/external/systems/${systemIdOrKey}/openapi-files`, {
     params: options
   });
@@ -180,7 +180,7 @@ async function listOpenAPIFiles(dataplaneUrl, systemIdOrKey, authConfig, options
  * @throws {Error} If request fails
  */
 async function listOpenAPIEndpoints(dataplaneUrl, systemIdOrKey, authConfig, options = {}) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.get(`/api/v1/external/systems/${systemIdOrKey}/openapi-endpoints`, {
     params: options
   });
@@ -201,7 +201,7 @@ async function listOpenAPIEndpoints(dataplaneUrl, systemIdOrKey, authConfig, opt
  * @throws {Error} If publish fails
  */
 async function publishExternalSystem(dataplaneUrl, systemIdOrKey, authConfig, publishData = {}) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.post(`/api/v1/external/systems/${systemIdOrKey}/publish`, {
     body: publishData
   });
@@ -222,7 +222,7 @@ async function publishExternalSystem(dataplaneUrl, systemIdOrKey, authConfig, pu
  * @throws {Error} If rollback fails
  */
 async function rollbackExternalSystem(dataplaneUrl, systemIdOrKey, authConfig, rollbackData) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.post(`/api/v1/external/systems/${systemIdOrKey}/rollback`, {
     body: rollbackData
   });
@@ -244,7 +244,7 @@ async function rollbackExternalSystem(dataplaneUrl, systemIdOrKey, authConfig, r
  * @throws {Error} If save fails
  */
 async function saveAsTemplate(dataplaneUrl, systemIdOrKey, authConfig, templateData) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.post(`/api/v1/external/systems/${systemIdOrKey}/save-template`, {
     body: templateData
   });

package/lib/api/governance-scenarios.api.js

@@ -0,0 +1,39 @@
+/**
+ * @fileoverview Dataplane governance scenario acceptance API
+ * @author AI Fabrix Team
+ * @version 1.0.0
+ */
+
+const { createDataplaneApiClient } = require('./index');
+const { unwrapApiData } = require('../utils/external-system-readiness-core');
+
+/**
+ * Run governance scenario pack (ABAC visibility proof).
+ * POST /api/v1/governance/scenarios/run
+ * @requiresPermission {Dataplane} governance:evaluate
+ * @async
+ * @param {string} dataplaneUrl
+ * @param {Object} authConfig
+ * @param {import('./types/governance-scenarios.types').GovernanceScenariosRunRequest} body
+ * @returns {Promise<import('./types/governance-scenarios.types').GovernanceScenariosRunResponse>}
+ */
+async function runGovernanceScenarios(dataplaneUrl, authConfig, body) {
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
+  const res = await client.post('/api/v1/governance/scenarios/run', { body });
+  if (res && res.success === false) {
+    const msg =
+      (res.error && (res.error.formattedError || res.error.error || res.error.message)) ||
+      res.formattedError ||
+      'Governance scenario run failed';
+    throw new Error(msg);
+  }
+  const unwrapped = unwrapApiData(res);
+  if (!unwrapped || !unwrapped.summary) {
+    throw new Error('Governance scenario run returned an unexpected response shape');
+  }
+  return unwrapped;
+}
+
+module.exports = {
+  runGovernanceScenarios
+};

package/lib/api/groups.api.js

@@ -0,0 +1,79 @@
+/**
+ * @fileoverview Groups API (Controller /api/v1/groups)
+ * @author AI Fabrix Team
+ * @version 1.0.0
+ */
+
+'use strict';
+
+const { ApiClient } = require('./index');
+
+const BASE = '/api/v1/groups';
+
+/**
+ * List groups (paginated)
+ * @requiresPermission {Controller} groups:read
+ * @async
+ * @param {string} controllerUrl
+ * @param {Object} authConfig
+ * @param {Object} [options]
+ * @returns {Promise<Object>}
+ */
+async function listGroups(controllerUrl, authConfig, options = {}) {
+  const client = new ApiClient(controllerUrl, authConfig);
+  return await client.get(BASE, { params: options });
+}
+
+/**
+ * Get group by id or name
+ * @requiresPermission {Controller} groups:read
+ * @async
+ * @param {string} controllerUrl
+ * @param {Object} authConfig
+ * @param {string} groupIdOrName
+ * @param {Object} [options]
+ * @returns {Promise<Object>}
+ */
+async function getGroup(controllerUrl, authConfig, groupIdOrName, options = {}) {
+  const client = new ApiClient(controllerUrl, authConfig);
+  const params = {};
+  if (options.includeMembers) {
+    params.includeMembers = 'true';
+  }
+  return await client.get(`${BASE}/${encodeURIComponent(groupIdOrName)}`, { params });
+}
+
+/**
+ * Create group
+ * @requiresPermission {Controller} groups:create
+ * @async
+ * @param {string} controllerUrl
+ * @param {Object} authConfig
+ * @param {Object} body
+ * @returns {Promise<Object>}
+ */
+async function createGroup(controllerUrl, authConfig, body) {
+  const client = new ApiClient(controllerUrl, authConfig);
+  return await client.post(BASE, { body });
+}
+
+/**
+ * List group members
+ * @requiresPermission {Controller} groups:read
+ * @async
+ * @param {string} controllerUrl
+ * @param {Object} authConfig
+ * @param {string} groupIdOrName
+ * @returns {Promise<Object>}
+ */
+async function listGroupMembers(controllerUrl, authConfig, groupIdOrName) {
+  const client = new ApiClient(controllerUrl, authConfig);
+  return await client.get(`${BASE}/${encodeURIComponent(groupIdOrName)}/members`);
+}
+
+module.exports = {
+  listGroups,
+  getGroup,
+  createGroup,
+  listGroupMembers
+};

package/lib/api/index.js

@@ -20,7 +20,7 @@ class ApiClient {
    * @param {string} [authConfig.type] - Auth type ('bearer' | 'client-token')
    * @param {string} [authConfig.token] - Bearer token
    */
-  constructor(baseUrl, authConfig = {}) {
+  constructor(baseUrl, authConfig = {}, clientOptions = {}) {
     if (baseUrl === null || baseUrl === undefined || typeof baseUrl !== 'string') {
       throw new Error('baseUrl is required and must be a string');
     }
@@ -30,6 +30,25 @@ class ApiClient {
     }
     this.baseUrl = trimmedUrl;
     this.authConfig = authConfig;
+    const opts = clientOptions && typeof clientOptions === 'object' ? clientOptions : {};
+    this.enforceCliVersion = Boolean(opts.enforceCliVersion);
+    this.controllerUrlForGate = opts.controllerUrl || null;
+  }
+
+  /**
+   * Plan 142.0: block dataplane mutations when Builder CLI is below minimum.
+   * @private
+   * @async
+   * @returns {Promise<void>}
+   */
+  async _ensureDataplaneCliVersionGate() {
+    if (!this.enforceCliVersion) {
+      return;
+    }
+    const { assertDataplaneCliVersionCompatible } = require('../utils/dataplane-cli-version-gate');
+    await assertDataplaneCliVersionCompatible(this.baseUrl, {
+      controllerUrl: this.controllerUrlForGate
+    });
   }
 
   /**
@@ -78,6 +97,7 @@ class ApiClient {
    * @returns {Promise<Object>} API response
    */
   async get(endpoint, options = {}) {
+    await this._ensureDataplaneCliVersionGate();
     let url = this._buildUrl(endpoint);
     const headers = this._buildHeaders(options.headers);
 
@@ -119,6 +139,7 @@ class ApiClient {
    * @returns {Promise<Object>} API response
    */
   async post(endpoint, options = {}) {
+    await this._ensureDataplaneCliVersionGate();
     let url = this._buildUrl(endpoint);
     const headers = this._buildHeaders(options.headers);
 
@@ -167,6 +188,7 @@ class ApiClient {
    * @returns {Promise<Object>} API response
    */
   async postFormData(endpoint, formData, options = {}) {
+    await this._ensureDataplaneCliVersionGate();
     const url = this._buildUrl(endpoint);
     const headers = this._buildHeaders(options.headers || {}, { skipContentType: true });
 
@@ -194,6 +216,7 @@ class ApiClient {
    * @returns {Promise<Object>} API response
    */
   async patch(endpoint, options = {}) {
+    await this._ensureDataplaneCliVersionGate();
     const url = this._buildUrl(endpoint);
     const headers = this._buildHeaders(options.headers);
 
@@ -224,6 +247,7 @@ class ApiClient {
    * @returns {Promise<Object>} API response
    */
   async put(endpoint, options = {}) {
+    await this._ensureDataplaneCliVersionGate();
     const url = this._buildUrl(endpoint);
     const headers = this._buildHeaders(options.headers);
 
@@ -253,6 +277,7 @@ class ApiClient {
    * @returns {Promise<Object>} API response
    */
   async delete(endpoint, options = {}) {
+    await this._ensureDataplaneCliVersionGate();
     const url = this._buildUrl(endpoint);
     const headers = this._buildHeaders(options.headers);
 
@@ -270,7 +295,25 @@ class ApiClient {
   }
 }
 
+/**
+ * Dataplane-scoped client — enforces Builder CLI version gate before each request.
+ * Do not use for `fetchDataplaneGeneralHealth` (health must stay ungated).
+ *
+ * @param {string} dataplaneUrl - Dataplane base URL
+ * @param {Object} authConfig - Authentication configuration
+ * @param {Object} [options]
+ * @param {string} [options.controllerUrl] - Controller URL for device cache lookup
+ * @returns {ApiClient}
+ */
+function createDataplaneApiClient(dataplaneUrl, authConfig, options = {}) {
+  return new ApiClient(dataplaneUrl, authConfig, {
+    enforceCliVersion: true,
+    controllerUrl: options.controllerUrl
+  });
+}
+
 module.exports = {
-  ApiClient
+  ApiClient,
+  createDataplaneApiClient
 };
 

package/lib/api/pipeline.api.js

@@ -4,7 +4,7 @@
  * @version 2.0.0
  */
 
-const { ApiClient } = require('./index');
+const { ApiClient, createDataplaneApiClient } = require('./index');
 const { postValidationRunAndOptionalPoll } = require('./validation-runner');
 
 /**
@@ -127,7 +127,7 @@ async function getPipelineHealth(controllerUrl, envKey) {
  * @throws {Error} If publish fails
  */
 async function publishDatasourceViaPipeline(dataplaneUrl, systemKey, authConfig, datasourceConfig) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.post(`/api/v1/pipeline/${systemKey}/upload`, {
     body: datasourceConfig
   });
@@ -147,7 +147,7 @@ async function publishDatasourceViaPipeline(dataplaneUrl, systemKey, authConfig,
  * @throws {Error} If request fails
  */
 async function validatePipelineConfig(dataplaneUrl, authConfig, { config }) {
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.post('/api/v1/pipeline/validate', {
     body: { config }
   });
@@ -247,7 +247,7 @@ async function testDatasourceViaPipeline({ dataplaneUrl, systemKey, datasourceKe
  */
 async function uploadApplicationViaPipeline(dataplaneUrl, authConfig, payload) {
   const body = { ...payload, status: payload.status ?? 'draft' };
-  const client = new ApiClient(dataplaneUrl, authConfig);
+  const client = createDataplaneApiClient(dataplaneUrl, authConfig);
   return await client.post('/api/v1/pipeline/upload', {
     body
   });