feat(cli)!: default to production platform (login --api-url)

BREAKING: `thatopen login` now defaults --api-url to https://platform.thatopen.com
(was dev). Pass --api-url https://dev.platform.thatopen.com to target dev. Without
this, tokens minted on the prod dashboard failed to validate against the dev
default — the exact failure a public user following docs/ai-quickstart.md hits.
Docs (login.md, serve.md) repointed to the prod dashboard. Release 0.3.3.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: agviegas

docs/cli/login.md

@@ -7,7 +7,7 @@ description: "Authenticate with the ThatOpen platform by validating an access to
 Validates an access token against the platform API and saves the credentials. Run this once globally before using any other command, or per-project with `--local`.
 
 To get a token:
-1. Go to [https://dev.platform.thatopen.com](https://dev.platform.thatopen.com)
+1. Go to [https://platform.thatopen.com](https://platform.thatopen.com)
 2. In the header, click **Data**
 3. Find the **Tokens** card and create a new token
 4. Enable the permissions: **Apps**, **Components**, and **Storage**
@@ -21,7 +21,7 @@ thatopen login --token <token> [flags]
 **Flags:**
 
 - `--token <token>` — Access token from the dashboard. Required.
-- `--api-url <url>` — Platform API URL. Default: `https://dev.platform.thatopen.com`.
+- `--api-url <url>` — Platform API URL. Default: `https://platform.thatopen.com` (production). Pass `https://dev.platform.thatopen.com` to target the dev environment.
 - `--local` — Save credentials to `.thatopen` in the current directory instead of the global config. Use this inside a project to override the global token for that project only.
 
 **Examples:**

docs/cli/paths.json

@@ -21,7 +21,7 @@
   },
   {
     "path": "docs/cli/serve.md",
-    "description": "Start a local dev server for a browser app. Uses esbuild in watch mode and serves the IIFE bundle on port 4000 with SSE live reload. To connect: open the project on dev.platform.thatopen.com, click the Local App icon, then Get Started."
+    "description": "Start a local dev server for a browser app. Uses esbuild in watch mode and serves the IIFE bundle on port 4000 with SSE live reload. To connect: open the project on platform.thatopen.com, click the Local App icon, then Get Started."
   },
   {
     "path": "docs/cli/swap.md",

docs/cli/serve.md

@@ -1,5 +1,5 @@
 ---
-description: "Start a local dev server for a browser app. Uses esbuild in watch mode and serves the IIFE bundle on port 4000 with SSE live reload. To connect: open the project on dev.platform.thatopen.com, click the Local App icon, then Get Started."
+description: "Start a local dev server for a browser app. Uses esbuild in watch mode and serves the IIFE bundle on port 4000 with SSE live reload. To connect: open the project on platform.thatopen.com, click the Local App icon, then Get Started."
 ---
 
 ## thatopen serve
@@ -31,13 +31,13 @@ thatopen serve --port 4321
 
 **Connecting the platform to your local server:**
 
-1. Go to [https://dev.platform.thatopen.com](https://dev.platform.thatopen.com) and open a project (create one first if needed).
+1. Go to [https://platform.thatopen.com](https://platform.thatopen.com) and open a project (create one first if needed).
 2. In the top right corner, click the **Local App** icon.
 3. Click **Get Started**.
 
 The platform loads the bundle from port 4000 and renders the app inside the project context, with full access to its models, data, and users. The dev server must be running before opening this URL — if nothing is served on port 4000, the platform will fail to load the app.
 
 The resulting URL follows this pattern:
 ```
-https://dev.platform.thatopen.com/dashboard/projects/{projectId}/apps/local-app
+https://platform.thatopen.com/dashboard/projects/{projectId}/apps/local-app
 ```

package.json

@@ -15,7 +15,7 @@
     "access": "public"
   },
   "private": false,
-  "version": "0.3.2",
+  "version": "0.3.3",
   "main": "dist/index.cjs.js",
   "module": "dist/index.es.js",
   "types": "dist/index.d.ts",

src/cli/commands/login.ts

@@ -8,8 +8,8 @@ export const loginCommand = new Command('login')
   .option('--token <token>', 'Access token from the dashboard')
   .option(
     '--api-url <url>',
-    'API URL',
-    'https://dev.platform.thatopen.com',
+    'API URL (defaults to production; pass https://dev.platform.thatopen.com for the dev environment)',
+    'https://platform.thatopen.com',
   )
   .option(
     '--local',