fix: correct inspector package name in Dockerfiles and add .dockerignore (#50)

* chore: remove inspect.sandboxagent.dev in favor of /ui/

* chore: add 404 page

* fix: correct inspector package name in Dockerfiles and add .dockerignore

- Change @anthropic-ai/sdk-inspector to @sandbox-agent/inspector in all Dockerfiles
- Add .dockerignore to exclude target/, node_modules/, etc from Docker context

The wrong package name caused pnpm install --filter to match nothing, so the
inspector frontend was never built, resulting in binaries without the /ui/ endpoint.

* chore: cargo fmt

* chore(release): update version to 0.1.4-rc.7

docs/cli.mdx

@@ -19,11 +19,10 @@ sandbox-agent server [OPTIONS]
 | `-n, --no-token` | - | Disable authentication (local dev only) |
 | `-H, --host <HOST>` | `127.0.0.1` | Host to bind to |
 | `-p, --port <PORT>` | `2468` | Port to bind to |
-| `-O, --cors-allow-origin <ORIGIN>` | - | Additional CORS origin (repeatable, cumulative with Inspector) |
+| `-O, --cors-allow-origin <ORIGIN>` | - | CORS origin to allow (repeatable) |
 | `-M, --cors-allow-method <METHOD>` | all | CORS allowed method (repeatable) |
 | `-A, --cors-allow-header <HEADER>` | all | CORS allowed header (repeatable) |
 | `-C, --cors-allow-credentials` | - | Enable CORS credentials |
-| `--no-inspector-cors` | - | Disable default Inspector CORS |
 | `--no-telemetry` | - | Disable anonymous telemetry |
 
 ```bash

docs/cors.mdx

@@ -9,47 +9,26 @@ When calling the Sandbox Agent server from a browser, CORS (Cross-Origin Resourc
 
 ## Default Behavior
 
-By default, the server allows CORS requests from the [Inspector](https://inspect.sandboxagent.dev):
+By default, no CORS origins are allowed. You must explicitly specify origins for browser-based applications:
 
 ```bash
-# Inspector CORS is enabled by default
-sandbox-agent server --token "$SANDBOX_TOKEN"
-```
-
-This allows you to use the hosted Inspector to connect to any running Sandbox Agent server without additional configuration.
-
-## Adding Origins
-
-Use `--cors-allow-origin` to allow additional origins. These are **cumulative** with the default Inspector origin:
-
-```bash
-# Allows both Inspector AND localhost:5173
 sandbox-agent server \
   --token "$SANDBOX_TOKEN" \
   --cors-allow-origin "http://localhost:5173"
 ```
 
+<Note>
+The built-in Inspector UI at `/ui/` is served from the same origin as the server, so it does not require CORS configuration.
+</Note>
+
 ## Options
 
 | Flag | Description |
 |------|-------------|
-| `--cors-allow-origin` | Additional origins to allow (cumulative with Inspector) |
+| `--cors-allow-origin` | Origins to allow |
 | `--cors-allow-method` | HTTP methods to allow (defaults to all if not specified) |
 | `--cors-allow-header` | Headers to allow (defaults to all if not specified) |
 | `--cors-allow-credentials` | Allow credentials (cookies, authorization headers) |
-| `--no-inspector-cors` | Disable the default Inspector origin |
-
-## Disabling Inspector CORS
-
-To disable the default Inspector origin and only allow explicitly specified origins:
-
-```bash
-# Only allows localhost:5173, not Inspector
-sandbox-agent server \
-  --token "$SANDBOX_TOKEN" \
-  --no-inspector-cors \
-  --cors-allow-origin "http://localhost:5173"
-```
 
 ## Multiple Origins
 

docs/inspector.mdx

@@ -12,9 +12,9 @@ The Inspector is a web-based GUI for debugging and inspecting Sandbox Agent sess
 
 ## Open the Inspector
 
-Visit [inspect.sandboxagent.dev](https://inspect.sandboxagent.dev) and enter your server URL and token to connect.
+The Inspector UI is served at `/ui/` on your sandbox-agent server. For example, if your server is running at `http://localhost:2468`, open `http://localhost:2468/ui/` in your browser.
 
-You can also generate a pre-filled Inspector URL from the TypeScript SDK:
+You can also generate a pre-filled Inspector URL with authentication from the TypeScript SDK:
 
 ```typescript
 import { buildInspectorUrl } from "sandbox-agent";
@@ -24,7 +24,7 @@ const url = buildInspectorUrl({
   token: process.env.SANDBOX_TOKEN,
 });
 console.log(url);
-// https://inspect.sandboxagent.dev?url=http%3A%2F%2F127.0.0.1%3A2468&token=...
+// http://127.0.0.1:2468/ui/?token=...
 ```
 
 ## Features

docs/openapi.json

@@ -10,7 +10,7 @@
     "license": {
       "name": "Apache-2.0"
     },
-    "version": "0.1.0"
+    "version": "0.1.4-rc.7"
   },
   "servers": [
     {

docs/quickstart.mdx

@@ -290,7 +290,7 @@ icon: "rocket"
   </Step>
 
   <Step title="Test with Inspector">
-    Open the [Inspector UI](https://inspect.sandboxagent.dev) to inspect session state using a GUI.
+    Open the Inspector UI at `/ui/` on your server (e.g., `http://localhost:2468/ui/`) to inspect session state using a GUI.
 
     <Frame>
       <img src="/images/inspector.png" alt="Sandbox Agent Inspector" />

docs/sdks/typescript.mdx

@@ -132,7 +132,7 @@ const url = buildInspectorUrl({
   headers: { "X-Custom-Header": "value" },
 });
 console.log(url);
-// https://inspect.sandboxagent.dev?url=https%3A%2F%2Fyour-sandbox-agent.example.com&token=...&headers=...
+// https://your-sandbox-agent.example.com/ui/?token=...&headers=...
 ```
 
 Parameters: