Fremde Laufzeiten: Claude Code und Befehl in der Sandbox, Egress-Proxy, Vorschlag statt Einsatz (#712)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

src/ClawdDotNet.Web/Contracts/Dtos.cs

@@ -55,7 +55,37 @@ public sealed record AgentDto(
     IReadOnlyList<AgentToolDto> Tools,
     // #715: What makes the agent read foreign content — its tools, or "setting". Empty: standard tier.
     IReadOnlyList<string> ForeignContentSources,
-    bool TreatAsForeignReader);
+    bool TreatAsForeignReader,
+    // #712
+    AgentRuntimeDto Runtime);
+
+/// <summary>#712: Where an agent's runs happen.</summary>
+public sealed record AgentRuntimeDto(
+    string Kind,
+    IReadOnlyList<string> AllowedTools,
+    int MaxTurns,
+    int TimeoutMinutes,
+    string Command,
+    IReadOnlyList<string> Arguments,
+    IReadOnlyList<string> Egress);
+
+/// <summary>#712: What foreign runtimes find on this machine — never a key, only whether there is one.</summary>
+public sealed record RuntimesDto(
+    bool SandboxAvailable,
+    string? SandboxReason,
+    IReadOnlyList<string> Kinds,
+    IReadOnlyList<string> DefaultAllowedTools,
+    ClaudeCodeDto ClaudeCode);
+
+public sealed record ClaudeCodeDto(
+    string Executable,
+    string? Located,
+    string Auth,
+    bool HasApiKey,
+    bool HasOAuthToken);
+
+/// <summary>#712: Changes to the Claude Code account. Empty keys keep the stored ones.</summary>
+public sealed record ClaudeCodeInputDto(string? Executable, string? Auth, string? ApiKey, string? OAuthToken);
 
 /// <summary>
 /// Ein Werkzeug am Agenten. <b>Ohne die Einstellungen</b> — die stehen in einem freien