feat(sdk): add CreateStack/GetStack, ProvisionVector, DeploymentEvents

[mastermanas805]

What

Closes the SDK endpoint-coverage gap surfaced by the live SDK durability probe. The SDK could provision db/cache/nosql/queue/storage/webhook + Deploy, but was missing methods for endpoints that exist and are live on prod — most importantly it could not deploy anonymously (Deploy → POST /deploy/new is RequireAuth; the documented anonymous deploy path is POST /stacks/new, which the SDK lacked).

New methods

All mirror the existing provision-method pattern, the 120 s provisioning-timeout client (build pods are slow), and the full APIError envelope handling.

Method	Endpoint	Notes
CreateStack(ctx, CreateStackOpts) (*Stack, error)	POST /stacks/new	The anonymous deploy path. Synthesises instant.yaml from []StackServiceSpec and uploads it + per-service tarballs as multipart/form-data. Async (Status:"building").
GetStack(ctx, slug) (*Stack, error)	GET /stacks/:slug	Poll status + per-service URLs. 404 → IsNotFound.
ProvisionVector(ctx, *VectorOpts) (*VectorResult, error)	POST /vector/new	pgvector; optional Dimensions hint (0 → server default 1536). VectorResult embeds ProvisionResult + Extension/Dimensions.
DeploymentEvents(ctx, id, limit) (*DeploymentEventList, error)	GET /api/v1/deployments/:id/events	Rule-27 failure-autopsy timeline (kind/reason/exit_code/last_lines/hint). ExitCode is *int32 (null-distinguishable).

Contract verification (against api/internal/router/router.go + handlers)

Each request/response shape was verified against the live api before wiring.

One deviation from the brief, implemented to the real contract: the brief suggested /stacks/new takes a JSON {services/name/env} body. The api actually takes multipart/form-data — a manifest field (instant.yaml) + one tarball field per service (keyed by service name) + name + optional env. The SDK builds the manifest client-side from the service specs. The create response key is stack_id (mapped to Stack.Slug); there is no top-level url on create — per-service URLs come from GetStack (services[].url).

Tests (mirror existing httptest contract-test style)

• vector_test.go — happy path (body assertions), dimensions-omitted-when-zero, error envelope, preflight + empty-token/url branches.
• stack_test.go — happy path (multipart parse + manifest assertions), env-omitted, error envelope, preflight (no services / empty name / nil tarball / duplicate), tarball read error, two-service sort, transport/build-request/decode error arms, GetStack happy + 404 + empty-slug.
• stack_internal_test.go — white-box sweep of writeStackMultipart failing-writer arms (manifest/name/env/CreateFormFile/io.Copy/Close).
• deploy_events_test.go — happy path (nullable exit_code), default-limit, 404, 401.

A writeStackMultipart(io.Writer, ...) seam makes the multipart error arms reachable (a *bytes.Buffer can never fail them).

Gate (all green)

• go build ./... ✓ · go vet ./... ./examples/... ✓
• go test ./... -short -race -count=1 ✓ (CI command)
• gofmt (real, via $(go env GOROOT)/bin/gofmt) ✓ · golangci-lint run ./... → 0 issues
• diff-cover patch coverage: 100% (185 changed lines, 0 missing) · project floor 98.4% (≥95%)

Docs

README method tables + anonymous-deploy/autopsy usage examples + "what's not covered" trim; CHANGELOG Added entries.

🤖 Generated with Claude Code