feat(agent-runner): enforce 4.x host-owned execution

web/src/app/infra/entities/api/index.ts

@@ -437,10 +437,6 @@ export interface SystemLimitation {
   max_bots: number;
   max_pipelines: number;
   max_extensions: number;
-  /** When non-empty, every pipeline is forced to this Box sandbox-scope
-   *  template (e.g. ``{global}``) and the per-pipeline "Sandbox Scope"
-   *  selector is locked. Used by SaaS deployments. Empty = no restriction. */
-  force_box_session_id_template?: string;
 }
 
 export interface WizardProgress {
@@ -800,7 +796,10 @@ export interface ApiRespTools {
 }
 
 export interface ApiRespToolDetail {
-  tool: PluginTool;
+  tool: Omit<PluginTool, 'source' | 'source_id'> & {
+    source: NonNullable<PluginTool['source']>;
+    source_id: string | null;
+  };
 }
 
 // Skills

web/src/app/infra/http/BackendClient.ts

@@ -982,8 +982,14 @@ export class BackendClient extends BaseHttpClient {
     );
   }
 
-  public getToolDetail(toolName: string): Promise<ApiRespToolDetail> {
-    return this.get(`/api/v1/tools/${toolName}`);
+  public getToolDetail(
+    toolName: string,
+    pipelineId?: string,
+  ): Promise<ApiRespToolDetail> {
+    return this.get(
+      `/api/v1/tools/${encodeURIComponent(toolName)}`,
+      pipelineId ? { pipeline_uuid: pipelineId } : undefined,
+    );
   }
 
   public getMCPServer(serverName: string): Promise<ApiRespMCPServer> {