diff --git a/Cargo.toml b/Cargo.toml
index 0865385..561e502 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -4,7 +4,7 @@ members = ["server/packages/*", "gigacode"]
 exclude = ["factory/packages/desktop/src-tauri", "foundry/packages/desktop/src-tauri"]
 
 [workspace.package]
-version = "0.4.0-rc.1"
+version = "0.4.0-rc.2"
 edition = "2021"
 authors = [ "Rivet Gaming, LLC <developer@rivet.gg>" ]
 license = "Apache-2.0"
@@ -13,13 +13,13 @@ description = "Universal API for automatic coding agents in sandboxes. Supports
 
 [workspace.dependencies]
 # Internal crates
-sandbox-agent = { version = "0.4.0-rc.1", path = "server/packages/sandbox-agent" }
-sandbox-agent-error = { version = "0.4.0-rc.1", path = "server/packages/error" }
-sandbox-agent-agent-management = { version = "0.4.0-rc.1", path = "server/packages/agent-management" }
-sandbox-agent-agent-credentials = { version = "0.4.0-rc.1", path = "server/packages/agent-credentials" }
-sandbox-agent-opencode-adapter = { version = "0.4.0-rc.1", path = "server/packages/opencode-adapter" }
-sandbox-agent-opencode-server-manager = { version = "0.4.0-rc.1", path = "server/packages/opencode-server-manager" }
-acp-http-adapter = { version = "0.4.0-rc.1", path = "server/packages/acp-http-adapter" }
+sandbox-agent = { version = "0.4.0-rc.2", path = "server/packages/sandbox-agent" }
+sandbox-agent-error = { version = "0.4.0-rc.2", path = "server/packages/error" }
+sandbox-agent-agent-management = { version = "0.4.0-rc.2", path = "server/packages/agent-management" }
+sandbox-agent-agent-credentials = { version = "0.4.0-rc.2", path = "server/packages/agent-credentials" }
+sandbox-agent-opencode-adapter = { version = "0.4.0-rc.2", path = "server/packages/opencode-adapter" }
+sandbox-agent-opencode-server-manager = { version = "0.4.0-rc.2", path = "server/packages/opencode-server-manager" }
+acp-http-adapter = { version = "0.4.0-rc.2", path = "server/packages/acp-http-adapter" }
 
 # Serialization
 serde = { version = "1.0", features = ["derive"] }
diff --git a/docs/architecture.mdx b/docs/architecture.mdx
index a28f133..ae00539 100644
--- a/docs/architecture.mdx
+++ b/docs/architecture.mdx
@@ -56,7 +56,7 @@ Agents are installed lazily on first use. To avoid the cold-start delay, pre-ins
 sandbox-agent install-agent --all
 ```
 
-The `rivetdev/sandbox-agent:0.3.2-full` Docker image ships with all agents pre-installed.
+The `rivetdev/sandbox-agent:0.4.0-rc.2-full` Docker image ships with all agents pre-installed.
 
 ## Production-ready agent orchestration
 
diff --git a/docs/deploy/daytona.mdx b/docs/deploy/daytona.mdx
index b65aec9..1dc84ae 100644
--- a/docs/deploy/daytona.mdx
+++ b/docs/deploy/daytona.mdx
@@ -44,7 +44,7 @@ try {
 }
 ```
 
-The `daytona` provider uses the `rivetdev/sandbox-agent:0.3.2-full` image by default and starts the server automatically.
+The `daytona` provider uses the `rivetdev/sandbox-agent:0.4.0-rc.2-full` image by default and starts the server automatically.
 
 ## Using snapshots for faster startup
 
diff --git a/docs/deploy/docker.mdx b/docs/deploy/docker.mdx
index b674b7a..232033b 100644
--- a/docs/deploy/docker.mdx
+++ b/docs/deploy/docker.mdx
@@ -15,11 +15,11 @@ Run the published full image with all supported agents pre-installed:
 docker run --rm -p 3000:3000 \
   -e ANTHROPIC_API_KEY="$ANTHROPIC_API_KEY" \
   -e OPENAI_API_KEY="$OPENAI_API_KEY" \
-  rivetdev/sandbox-agent:0.3.2-full \
+  rivetdev/sandbox-agent:0.4.0-rc.2-full \
   server --no-token --host 0.0.0.0 --port 3000
 ```
 
-The `0.3.2-full` tag pins the exact version. The moving `full` tag is also published for contributors who want the latest full image.
+The `0.4.0-rc.2-full` tag pins the exact version. The moving `full` tag is also published for contributors who want the latest full image.
 
 ## TypeScript with the Docker provider
 
@@ -48,7 +48,7 @@ try {
 }
 ```
 
-The `docker` provider uses the `rivetdev/sandbox-agent:0.3.2-full` image by default. Override with `image`:
+The `docker` provider uses the `rivetdev/sandbox-agent:0.4.0-rc.2-full` image by default. Override with `image`:
 
 ```typescript
 docker({ image: "my-custom-image:latest" })
diff --git a/docs/openapi.json b/docs/openapi.json
index 1beeb2b..58bec71 100644
--- a/docs/openapi.json
+++ b/docs/openapi.json
@@ -10,7 +10,7 @@
     "license": {
       "name": "Apache-2.0"
     },
-    "version": "0.4.0-rc.1"
+    "version": "0.4.0-rc.2"
   },
   "servers": [
     {
diff --git a/docs/quickstart.mdx b/docs/quickstart.mdx
index 19d9742..53f8f7d 100644
--- a/docs/quickstart.mdx
+++ b/docs/quickstart.mdx
@@ -242,7 +242,7 @@ icon: "rocket"
             docker run -p 2468:2468 \
               -e ANTHROPIC_API_KEY="sk-ant-..." \
               -e OPENAI_API_KEY="sk-..." \
-              rivetdev/sandbox-agent:0.3.2-full \
+              rivetdev/sandbox-agent:0.4.0-rc.2-full \
               server --no-token --host 0.0.0.0 --port 2468
             ```
           </Tab>
diff --git a/examples/shared/src/docker.ts b/examples/shared/src/docker.ts
index 8459535..89e95dd 100644
--- a/examples/shared/src/docker.ts
+++ b/examples/shared/src/docker.ts
@@ -9,7 +9,7 @@ const __dirname = path.dirname(fileURLToPath(import.meta.url));
 const REPO_ROOT = path.resolve(__dirname, "..", "..", "..");
 
 /** Pre-built Docker image with all agents installed. */
-export const FULL_IMAGE = "rivetdev/sandbox-agent:0.3.1-full";
+export const FULL_IMAGE = "rivetdev/sandbox-agent:0.4.0-rc.2-full";
 
 export interface DockerSandboxOptions {
   /** Container port used by sandbox-agent inside Docker. */
diff --git a/sdks/acp-http-client/package.json b/sdks/acp-http-client/package.json
index b5d264f..22d5fb1 100644
--- a/sdks/acp-http-client/package.json
+++ b/sdks/acp-http-client/package.json
@@ -1,6 +1,6 @@
 {
   "name": "acp-http-client",
-  "version": "0.4.0-rc.1",
+  "version": "0.4.0-rc.2",
   "description": "Protocol-faithful ACP JSON-RPC over streamable HTTP client.",
   "license": "Apache-2.0",
   "repository": {
diff --git a/sdks/cli-shared/package.json b/sdks/cli-shared/package.json
index b2825fb..d028896 100644
--- a/sdks/cli-shared/package.json
+++ b/sdks/cli-shared/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sandbox-agent/cli-shared",
-  "version": "0.4.0-rc.1",
+  "version": "0.4.0-rc.2",
   "description": "Shared helpers for sandbox-agent CLI and SDK",
   "license": "Apache-2.0",
   "repository": {
diff --git a/sdks/cli/package.json b/sdks/cli/package.json
index 17c0401..67a8b18 100644
--- a/sdks/cli/package.json
+++ b/sdks/cli/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sandbox-agent/cli",
-  "version": "0.4.0-rc.1",
+  "version": "0.4.0-rc.2",
   "description": "CLI for sandbox-agent - run AI coding agents in sandboxes",
   "license": "Apache-2.0",
   "repository": {
diff --git a/sdks/cli/platforms/darwin-arm64/package.json b/sdks/cli/platforms/darwin-arm64/package.json
index 2b5a7e8..2339503 100644
--- a/sdks/cli/platforms/darwin-arm64/package.json
+++ b/sdks/cli/platforms/darwin-arm64/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sandbox-agent/cli-darwin-arm64",
-  "version": "0.4.0-rc.1",
+  "version": "0.4.0-rc.2",
   "description": "sandbox-agent CLI binary for macOS ARM64",
   "license": "Apache-2.0",
   "repository": {
diff --git a/sdks/cli/platforms/darwin-x64/package.json b/sdks/cli/platforms/darwin-x64/package.json
index 72f3044..f9c2fe7 100644
--- a/sdks/cli/platforms/darwin-x64/package.json
+++ b/sdks/cli/platforms/darwin-x64/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sandbox-agent/cli-darwin-x64",
-  "version": "0.4.0-rc.1",
+  "version": "0.4.0-rc.2",
   "description": "sandbox-agent CLI binary for macOS x64",
   "license": "Apache-2.0",
   "repository": {
diff --git a/sdks/cli/platforms/linux-arm64/package.json b/sdks/cli/platforms/linux-arm64/package.json
index 0d8d92a..ab100f9 100644
--- a/sdks/cli/platforms/linux-arm64/package.json
+++ b/sdks/cli/platforms/linux-arm64/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sandbox-agent/cli-linux-arm64",
-  "version": "0.4.0-rc.1",
+  "version": "0.4.0-rc.2",
   "description": "sandbox-agent CLI binary for Linux arm64",
   "license": "Apache-2.0",
   "repository": {
diff --git a/sdks/cli/platforms/linux-x64/package.json b/sdks/cli/platforms/linux-x64/package.json
index 5d70adb..799650f 100644
--- a/sdks/cli/platforms/linux-x64/package.json
+++ b/sdks/cli/platforms/linux-x64/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sandbox-agent/cli-linux-x64",
-  "version": "0.4.0-rc.1",
+  "version": "0.4.0-rc.2",
   "description": "sandbox-agent CLI binary for Linux x64",
   "license": "Apache-2.0",
   "repository": {
diff --git a/sdks/cli/platforms/win32-x64/package.json b/sdks/cli/platforms/win32-x64/package.json
index e95b818..3c0728a 100644
--- a/sdks/cli/platforms/win32-x64/package.json
+++ b/sdks/cli/platforms/win32-x64/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sandbox-agent/cli-win32-x64",
-  "version": "0.4.0-rc.1",
+  "version": "0.4.0-rc.2",
   "description": "sandbox-agent CLI binary for Windows x64",
   "license": "Apache-2.0",
   "repository": {
diff --git a/sdks/gigacode/package.json b/sdks/gigacode/package.json
index 2f22d77..21b3fa9 100644
--- a/sdks/gigacode/package.json
+++ b/sdks/gigacode/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sandbox-agent/gigacode",
-  "version": "0.4.0-rc.1",
+  "version": "0.4.0-rc.2",
   "description": "Gigacode CLI (sandbox-agent with OpenCode attach by default)",
   "license": "Apache-2.0",
   "repository": {
diff --git a/sdks/gigacode/platforms/darwin-arm64/package.json b/sdks/gigacode/platforms/darwin-arm64/package.json
index 220ba65..5b2f54b 100644
--- a/sdks/gigacode/platforms/darwin-arm64/package.json
+++ b/sdks/gigacode/platforms/darwin-arm64/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sandbox-agent/gigacode-darwin-arm64",
-  "version": "0.4.0-rc.1",
+  "version": "0.4.0-rc.2",
   "description": "gigacode CLI binary for macOS arm64",
   "license": "Apache-2.0",
   "repository": {
diff --git a/sdks/gigacode/platforms/darwin-x64/package.json b/sdks/gigacode/platforms/darwin-x64/package.json
index 8912854..eadd657 100644
--- a/sdks/gigacode/platforms/darwin-x64/package.json
+++ b/sdks/gigacode/platforms/darwin-x64/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sandbox-agent/gigacode-darwin-x64",
-  "version": "0.4.0-rc.1",
+  "version": "0.4.0-rc.2",
   "description": "gigacode CLI binary for macOS x64",
   "license": "Apache-2.0",
   "repository": {
diff --git a/sdks/gigacode/platforms/linux-arm64/package.json b/sdks/gigacode/platforms/linux-arm64/package.json
index 5b042cf..248fadf 100644
--- a/sdks/gigacode/platforms/linux-arm64/package.json
+++ b/sdks/gigacode/platforms/linux-arm64/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sandbox-agent/gigacode-linux-arm64",
-  "version": "0.4.0-rc.1",
+  "version": "0.4.0-rc.2",
   "description": "gigacode CLI binary for Linux arm64",
   "license": "Apache-2.0",
   "repository": {
diff --git a/sdks/gigacode/platforms/linux-x64/package.json b/sdks/gigacode/platforms/linux-x64/package.json
index ea7c298..4bf5742 100644
--- a/sdks/gigacode/platforms/linux-x64/package.json
+++ b/sdks/gigacode/platforms/linux-x64/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sandbox-agent/gigacode-linux-x64",
-  "version": "0.4.0-rc.1",
+  "version": "0.4.0-rc.2",
   "description": "gigacode CLI binary for Linux x64",
   "license": "Apache-2.0",
   "repository": {
diff --git a/sdks/gigacode/platforms/win32-x64/package.json b/sdks/gigacode/platforms/win32-x64/package.json
index 86997a1..e6d2f5b 100644
--- a/sdks/gigacode/platforms/win32-x64/package.json
+++ b/sdks/gigacode/platforms/win32-x64/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sandbox-agent/gigacode-win32-x64",
-  "version": "0.4.0-rc.1",
+  "version": "0.4.0-rc.2",
   "description": "gigacode CLI binary for Windows x64",
   "license": "Apache-2.0",
   "repository": {
diff --git a/sdks/persist-indexeddb/package.json b/sdks/persist-indexeddb/package.json
index 86f30b6..08e56c4 100644
--- a/sdks/persist-indexeddb/package.json
+++ b/sdks/persist-indexeddb/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sandbox-agent/persist-indexeddb",
-  "version": "0.4.0-rc.1",
+  "version": "0.4.0-rc.2",
   "description": "IndexedDB persistence driver for the Sandbox Agent TypeScript SDK (DEPRECATED)",
   "license": "Apache-2.0",
   "repository": {
diff --git a/sdks/persist-postgres/package.json b/sdks/persist-postgres/package.json
index 27a3756..a274843 100644
--- a/sdks/persist-postgres/package.json
+++ b/sdks/persist-postgres/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sandbox-agent/persist-postgres",
-  "version": "0.4.0-rc.1",
+  "version": "0.4.0-rc.2",
   "description": "PostgreSQL persistence driver for the Sandbox Agent TypeScript SDK (DEPRECATED)",
   "license": "Apache-2.0",
   "repository": {
diff --git a/sdks/persist-rivet/package.json b/sdks/persist-rivet/package.json
index 3c64db2..5a0f457 100644
--- a/sdks/persist-rivet/package.json
+++ b/sdks/persist-rivet/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sandbox-agent/persist-rivet",
-  "version": "0.4.0-rc.1",
+  "version": "0.4.0-rc.2",
   "description": "Rivet Actor persistence driver for the Sandbox Agent TypeScript SDK (DEPRECATED)",
   "license": "Apache-2.0",
   "repository": {
diff --git a/sdks/persist-sqlite/package.json b/sdks/persist-sqlite/package.json
index e7f472c..aaac3dd 100644
--- a/sdks/persist-sqlite/package.json
+++ b/sdks/persist-sqlite/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sandbox-agent/persist-sqlite",
-  "version": "0.4.0-rc.1",
+  "version": "0.4.0-rc.2",
   "description": "SQLite persistence driver for the Sandbox Agent TypeScript SDK (DEPRECATED)",
   "license": "Apache-2.0",
   "repository": {
diff --git a/sdks/react/package.json b/sdks/react/package.json
index b82892a..6b4fbb1 100644
--- a/sdks/react/package.json
+++ b/sdks/react/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sandbox-agent/react",
-  "version": "0.4.0-rc.1",
+  "version": "0.4.0-rc.2",
   "description": "React components for Sandbox Agent frontend integrations",
   "license": "Apache-2.0",
   "repository": {
diff --git a/sdks/typescript/package.json b/sdks/typescript/package.json
index 7e2dfe4..067f1bd 100644
--- a/sdks/typescript/package.json
+++ b/sdks/typescript/package.json
@@ -1,6 +1,6 @@
 {
   "name": "sandbox-agent",
-  "version": "0.4.0-rc.1",
+  "version": "0.4.0-rc.2",
   "description": "Universal API for automatic coding agents in sandboxes. Supports Claude Code, Codex, OpenCode, and Amp.",
   "license": "Apache-2.0",
   "repository": {
diff --git a/sdks/typescript/src/providers/shared.ts b/sdks/typescript/src/providers/shared.ts
index d838a0a..53abc19 100644
--- a/sdks/typescript/src/providers/shared.ts
+++ b/sdks/typescript/src/providers/shared.ts
@@ -1,4 +1,4 @@
-export const DEFAULT_SANDBOX_AGENT_IMAGE = "rivetdev/sandbox-agent:0.3.2-full";
+export const DEFAULT_SANDBOX_AGENT_IMAGE = "rivetdev/sandbox-agent:0.4.0-rc.2-full";
 export const SANDBOX_AGENT_INSTALL_SCRIPT = "https://releases.rivet.dev/sandbox-agent/0.3.x/install.sh";
 export const DEFAULT_AGENTS = ["claude", "codex"] as const;