feat: support deployments, sandboxes, and pools - #11

The orchestrator grew three services the SDK did not cover. This adds a client for each, alongside the existing Jobs.

$jobs        = new Jobs($http);
$deployments = new Deployments($http);
$sandboxes   = new Sandboxes($http);
$pools       = new DeploymentPools($http);

What's new

Deployments — apply() (declarative create-or-update), get, list, delete, revisions, setTraffic, release. Full spec support: hosts, autoscaling, probes, concurrency, replicas, runtime class, and the three timeouts. Traffic splits cover canaries and rollbacks, with release() handing traffic back to auto mode.

Sandboxes — create, get, list, delete, plus read-only pools/pool. Handles both create modes: claiming from a pool (sub-second) or building a pod from an image (per-sandbox cpu, memory, runtimeClass, volumes). Exec and files stay out of the SDK deliberately — they're an HTTP contract served inside the sandbox, at the address in $sandbox->url, not part of this API.

DeploymentPools — list, get, activate, activations, activation, deactivate, including async activation via Prefer: respond-async.

Drift fixed in the existing surface

• MountArtifact was missing sync / syncIntervalSeconds (workspace delta sync across runs). Appended after $depends rather than inserted, so positional callers don't break.
• CallbackEvent was missing orchestrator.deployment.response and orchestrator.pool.activation.result.

Structure

The four services share one Transport, extracted from Jobs, so request building, error mapping, and JSON decoding have a single implementation. An internal Model\Data helper does the same for field validation across the thirteen new models, keeping them small at PHPStan level 8.

Field names, list envelopes, and status vocabularies were read off the Go structs in open-runtimes/orchestrator (at 94b53b6) rather than the prose docs, which don't show several of the list shapes.

Testing

• 20 new tests across the three services; 33 total green, including the existing job tests against the refactored transport.
• PHPStan level 8, Pint, and Rector all clean.
• Every README example was executed against the PSR-18 test double to confirm the snippets actually run.

Not included

Async deployment requests (Prefer: respond-async to a deployment's host) are data-plane traffic to the gateway, not the orchestrator API this SDK wraps, so they aren't on a service client here.

🤖 Generated with Claude Code