refactor(self_hosted_sandboxes): use published SDK releases; fix worker API usage

Installs:
- ant CLI from GitHub releases (v1.9.0 tarball) instead of pinned
  prerelease build URLs; drop the unzip step in the Dockerfiles.
- Python / TypeScript SDKs from PyPI / npm (anthropic, @anthropic-ai/sdk
  ^0.97.0) instead of prerelease build URLs.
- Drop the committed package-lock.json files (regenerated on install)
  and gitignore them.

Layout:
- Rename the per-platform demo dirs, dropping the redundant
  self_hosted_sandbox- prefix: cf, cf-worker, daytona, docker, modal,
  vercel; update all cross-references.

API correctness (validated against the current SDK):
- daytona webhook: use AsyncAnthropic with
  client.beta.environments.work.poller (the sync client has no poller).
- Catch WebhookVerificationError from standardwebhooks
  (anthropic.WebhookVerificationError does not exist).
- client.beta.sessions, not client.sessions;
  beta_agent_toolset_20260401, not default_tools; drop stale
  tool_dispatcher / toolDispatcher references.
- Fix the toolRunner / BetaToolRunContext.toolUseBlock notes in the docs.

Author: moeseifan

managed_agents/self_hosted_sandboxes/README.md

@@ -18,12 +18,12 @@ per-session calls.
 
 | Variant | Compute | Runner |
 |---|---|---|
-| [`self_hosted_sandbox-docker/`](self_hosted_sandbox-docker/) | Plain Docker on a host you control | `ant beta:worker run` in a per-session container |
-| [`self_hosted_sandbox-cf/`](self_hosted_sandbox-cf/) | Cloudflare Containers | `ant beta:worker run` in a per-session Cloudflare Container |
-| [`self_hosted_sandbox-cf-worker/`](self_hosted_sandbox-cf-worker/) | Cloudflare Workers (no container) | TS `SessionToolRunner` in a Durable Object with an in-isolate fake filesystem |
-| [`self_hosted_sandbox-modal/`](self_hosted_sandbox-modal/) | [Modal](https://modal.com) | Python `sandbox_runner.py` in a Modal Sandbox with a per-session Volume |
-| [`self_hosted_sandbox-daytona/`](self_hosted_sandbox-daytona/) | [Daytona](https://www.daytona.io/) | Same `sandbox_runner.py` uploaded to a Daytona sandbox |
-| [`self_hosted_sandbox-vercel/`](self_hosted_sandbox-vercel/) | Vercel Functions + Sandbox | Node `runner.mjs` in a Vercel Sandbox |
+| [`docker/`](docker/) | Plain Docker on a host you control | `ant beta:worker run` in a per-session container |
+| [`cf/`](cf/) | Cloudflare Containers | `ant beta:worker run` in a per-session Cloudflare Container |
+| [`cf-worker/`](cf-worker/) | Cloudflare Workers (no container) | TS `SessionToolRunner` in a Durable Object with an in-isolate fake filesystem |
+| [`modal/`](modal/) | [Modal](https://modal.com) | Python `sandbox_runner.py` in a Modal Sandbox with a per-session Volume |
+| [`daytona/`](daytona/) | [Daytona](https://www.daytona.io/) | Same `sandbox_runner.py` uploaded to a Daytona sandbox |
+| [`vercel/`](vercel/) | Vercel Functions + Sandbox | Node `runner.mjs` in a Vercel Sandbox |
 
 ## Getting started
 

…self_hosted_sandbox-cf-worker/.gitignore …lf_hosted_sandboxes/cf-worker/.gitignoremanaged_agents/self_hosted_sandboxes/self_hosted_sandbox-cf-worker/.gitignore renamed to managed_agents/self_hosted_sandboxes/cf-worker/.gitignore managed_agents/self_hosted_sandboxes/self_hosted_sandbox-cf-worker/.gitignore renamed to managed_agents/self_hosted_sandboxes/cf-worker/.gitignore

@@ -1,4 +1,5 @@
 node_modules/
+package-lock.json
 .wrangler/
 dist/
 .dev.vars

…xes/self_hosted_sandbox-cf-worker/.npmrc …s/self_hosted_sandboxes/cf-worker/.npmrcmanaged_agents/self_hosted_sandboxes/self_hosted_sandbox-cf-worker/.npmrc renamed to managed_agents/self_hosted_sandboxes/cf-worker/.npmrc managed_agents/self_hosted_sandboxes/self_hosted_sandbox-cf-worker/.npmrc renamed to managed_agents/self_hosted_sandboxes/cf-worker/.npmrc

@@ -1,6 +1,6 @@
 # Cloudflare demo — CMA Private Sandboxes (pure-Worker variant)
 
-Same webhook → drain-queue → per-session runner shape as `../self_hosted_sandbox-cf/`, but the runner is a **Durable Object running the TS `client.beta.sessions.events.toolRunner()`** (`src/runner.ts`) with an **in-isolate fake filesystem** (`src/tools.ts`) instead of a real container. `read`/`write`/`edit`/`glob`/`grep` operate on a `Map<string,string>` held in the DO; `bash` returns a not-available stub.
+Same webhook → drain-queue → per-session runner shape as `../cf/`, but the runner is a **Durable Object running the TS `client.beta.sessions.events.toolRunner()`** (`src/runner.ts`) with an **in-isolate fake filesystem** (`src/tools.ts`) instead of a real container. `read`/`write`/`edit`/`glob`/`grep` operate on a `Map<string,string>` held in the DO; `bash` returns a not-available stub.
 
 Idle policy is the SDK default: the dispatcher exits 60s after `session.status_idle` with `stop_reason: end_turn`; any other event resets the clock.
 

…/self_hosted_sandbox-cf-worker/README.md …elf_hosted_sandboxes/cf-worker/README.mdmanaged_agents/self_hosted_sandboxes/self_hosted_sandbox-cf-worker/README.md renamed to managed_agents/self_hosted_sandboxes/cf-worker/README.md managed_agents/self_hosted_sandboxes/self_hosted_sandbox-cf-worker/README.md renamed to managed_agents/self_hosted_sandboxes/cf-worker/README.md

@@ -8,7 +8,7 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@anthropic-ai/sdk": "https://app.stainless.com/pkg/s/anthropic-typescript/9d2ab62380ef11d23ff45d8dc581659723721b81/dist.tar.gz",
+    "@anthropic-ai/sdk": "^0.97.0",
     "minimatch": "^9.0.5",
     "zod": "^4.0.0"
   },

…lf_hosted_sandbox-cf-worker/package.json …_hosted_sandboxes/cf-worker/package.jsonmanaged_agents/self_hosted_sandboxes/self_hosted_sandbox-cf-worker/package.json renamed to managed_agents/self_hosted_sandboxes/cf-worker/package.json managed_agents/self_hosted_sandboxes/self_hosted_sandbox-cf-worker/package.json renamed to managed_agents/self_hosted_sandboxes/cf-worker/package.json

@@ -2,8 +2,9 @@
  * In-isolate "fake sandbox" tools for the pure-Worker variant.
  *
  * Backed by a Map<string,string> held in the Durable Object — no real shell or
- * filesystem. Demonstrates passing custom tools to ToolDispatcher (same shape
- * as client.beta.messages.tool_runner accepts).
+ * filesystem. Demonstrates passing custom tools to
+ * client.beta.sessions.events.toolRunner (same shape as
+ * client.beta.messages.toolRunner accepts).
  */
 import { betaZodTool } from "@anthropic-ai/sdk/helpers/beta/zod";
 import { z } from "zod";