fix: bundle @run402/sdk dist into run402 and run402-mcp tarballs

v1.40.1 shipped broken — both run402-mcp and run402 imported the SDK
via a monorepo-relative path (`../sdk/dist/node/index.js` and
`../../sdk/dist/node/index.js`) that points outside the tarball after
npm install. Every command threw ERR_MODULE_NOT_FOUND before running.

Fix by including the already-built SDK inside each tarball, mirroring
the existing core/dist bundling pattern:

- Root package.json: add sdk/dist and sdk/core-dist to the MCP files
  allowlist. Source import path `../sdk/dist/node/index.js` from
  dist/sdk.js now resolves self-contained.
- cli/package.json: add sdk/ to files, extend prepack to copy
  ../sdk/dist and ../sdk/core-dist.
- cli/lib/sdk.mjs: rewrite import from ../../sdk/dist to ../sdk/dist
  so it resolves inside the package root.
- Root build script: also populate cli/sdk/dist and cli/sdk/core-dist
  so dev and e2e tests match the tarball layout.
- .gitignore: cli/sdk/ is build output.

Bump all three to 1.40.2 to keep the monorepo invariant (SDK tarball
content is unchanged from 1.40.1).

Verified by `npm pack` + extract + install + import on both tarballs
before publishing.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: MajorTal

.gitignore

@@ -1,6 +1,7 @@
 node_modules/
 dist/
 cli/core-dist/
+cli/sdk/
 sdk/core-dist/
 *.tgz
 .claude/worktrees/

cli/lib/sdk.mjs

@@ -7,7 +7,7 @@
  * RUN402_API_BASE between runs.
  */
 
-import { run402 } from "../../sdk/dist/node/index.js";
+import { run402 } from "../sdk/dist/node/index.js";
 
 export function getSdk() {
   return run402();

cli/package.json

@@ -1,18 +1,19 @@
 {
   "name": "run402",
-  "version": "1.40.1",
+  "version": "1.40.2",
   "description": "CLI for Run402 — provision Postgres databases, deploy static sites, generate images, and manage wallets via x402 and MPP micropayments.",
   "type": "module",
   "bin": {
     "run402": "cli.mjs"
   },
   "scripts": {
-    "prepack": "mkdir -p core-dist && cp ../core/dist/*.js core-dist/"
+    "prepack": "mkdir -p core-dist sdk/dist sdk/core-dist && cp ../core/dist/*.js core-dist/ && cp -R ../sdk/dist/. sdk/dist/ && cp ../sdk/core-dist/*.js sdk/core-dist/"
   },
   "files": [
     "cli.mjs",
     "lib/",
-    "core-dist/"
+    "core-dist/",
+    "sdk/"
   ],
   "dependencies": {
     "@noble/curves": "^2.0.1",

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "run402-mcp",
-  "version": "1.40.1",
+  "version": "1.40.2",
   "description": "MCP server for Run402 — AI-native Postgres databases with REST API, auth, storage, and row-level security. Pay with x402 USDC micropayments.",
   "type": "module",
   "main": "dist/index.js",
@@ -11,12 +11,14 @@
   "files": [
     "dist",
     "core/dist",
+    "sdk/dist",
+    "sdk/core-dist",
     "README.md"
   ],
   "scripts": {
     "build:core": "tsc -p core/tsconfig.json",
     "build:sdk": "mkdir -p sdk/core-dist && cp core/dist/*.js sdk/core-dist/ && cp core/dist/*.d.ts sdk/core-dist/ && tsc -p sdk/tsconfig.json",
-    "build": "npm run build:core && npm run build:sdk && tsc && mkdir -p cli/core-dist && cp core/dist/*.js cli/core-dist/",
+    "build": "npm run build:core && npm run build:sdk && tsc && mkdir -p cli/core-dist cli/sdk/dist cli/sdk/core-dist && cp core/dist/*.js cli/core-dist/ && cp -R sdk/dist/. cli/sdk/dist/ && cp sdk/core-dist/*.js cli/sdk/core-dist/",
     "start": "node dist/index.js",
     "test:skill": "node --test --import tsx SKILL.test.ts",
     "test:sync": "node --test --import tsx sync.test.ts",

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@run402/sdk",
-  "version": "1.40.1",
+  "version": "1.40.2",
   "description": "Typed TypeScript client for the Run402 API. Kernel shared by the run402-mcp server, the run402 CLI, and user-deployed run402 functions.",
   "type": "module",
   "main": "dist/index.js",