fix(deps): accept sandbox 0.2 runtime peer

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-runtime",
-  "version": "0.17.0",
+  "version": "0.17.1",
   "description": "Reusable runtime lifecycle for domain-specific agents.",
   "homepage": "https://github.com/tangle-network/agent-runtime#readme",
   "repository": {
@@ -57,7 +57,7 @@
   },
   "devDependencies": {
     "@biomejs/biome": "^2.4.0",
-    "@tangle-network/sandbox": "0.1.2",
+    "@tangle-network/sandbox": "^0.2.1",
     "@types/node": "^25.6.0",
     "tsup": "^8.0.0",
     "typescript": "^5.7.0",
@@ -78,6 +78,6 @@
   "license": "MIT",
   "packageManager": "pnpm@10.28.0",
   "peerDependencies": {
-    "@tangle-network/sandbox": "0.1.2"
+    "@tangle-network/sandbox": ">=0.1.2 <0.3.0"
   }
 }

src/durable/execution-handle.ts

@@ -10,12 +10,9 @@
  * opaque id. Substrate executionIds are not a secrecy boundary.
  *
  * Wire integration:
- *   - `@tangle-network/sandbox@0.1.x` PromptOptions does not yet expose
- *     `executionId`. The SDK auto-reconnects in-call by extracting it
- *     from the response `execution.started` event; products do nothing.
- *   - For cross-process reconnect today, bypass the SDK and POST to the
- *     orchestrator's `/agents/run/stream` directly with this id in the
- *     `X-Execution-ID` header (see tax-agent's `sessions.ts`).
+ *   - Sandbox PromptOptions accepts `executionId` and `lastEventId`.
+ *     Products pass this id to make cross-process reconnect land on the
+ *     same substrate execution instead of spawning a duplicate run.
  */
 export function deriveExecutionId(input: {
   projectId: string

src/model-resolution.ts

@@ -62,7 +62,6 @@ export async function getModels(
   return Array.isArray(body.data) ? body.data : []
 }
 
-
 /** Trim a candidate model id; `undefined` for non-strings and blanks. */
 export function cleanModelId(value: unknown): string | undefined {
   if (typeof value !== 'string') return undefined