[WhiteKiwi]

Use https://api.pushman.io/v1 as the CLI source default after the live service cutover. Existing endpoint-scoped credentials stay separate: users log in at the new endpoint, and login/logout never copies or removes the prior endpoint login. Sync the reviewed public API snapshot and document the supported override for existing releases; client publication remains separate from this source merge.

Validation:

• Go1.27.2 on Linux: go generate ./internal/api, go test -p2 ./..., go vet -p2 ./... and whitespace passed. Generated Go/module bytes are identical to qualified source430e49ac682733eb446bef8e6f244dcc01875734; follow-up changes only README and the OpenAPI server-origin metadata. Snapshot bytes match the accepted canonical/public bundle; paths, operations and schemas are unchanged.
• Mac darwin/arm64 Go1.27.2: native test/vet/build and a task-only isolated credential namespace passed. One genuine browser device-authorization login completed without retry; status/devices/usage and three actual read-only local MCP tools succeeded. Logout removed only that new validation entry and status returned unpaired. Existing/default logins were untouched; no notification, rename or installation occurred. Mac proof remains tied to the unchanged compiled source, not a claim of a release binary.
• Exact latest-head Linux/macOS/Windows/ARM CI and CodeQL are checked before merge. WinGet validation may skip under its existing condition. No tag, package publication or release workflow is requested by this PR.

Public production documentation and API origin have shipped separately. Existing hosted OAuth connections need reconnection to the new resource; this CLI source change does not modify them or the installed iPhone app.

Final head6e7a6b6264754c00848f8a761eb6923fe68b53dc passed CI39516983887 (Linux, macOS, Windows x64/ARM native checks), Analyze Go39516983962, CodeQL and Graphite. WinGet manifest validation skipped under its existing condition. The canonical/public origin mismatch review is resolved; public production docs/bundle are already merged. No release/tag/workflow dispatch accompanies this source merge.

[Copilot]

🟡 Changes recommended

Assert the exact production endpoint and coordinate the OpenAPI and public documentation updates before merging.

1 open issue

• Update OpenAPI and README before changing the default API URL · New

What changed in this PR

Prepares the CLI for migration to the api.pushman.io endpoint while preserving endpoint-scoped credentials.

Changes:

• Updates the default API endpoint.
• Documents the pending cutover and credential behavior.
• Adds mocked keyring isolation coverage.

File	Summary
README.md	Documents the pending endpoint migration and credential behavior.
internal/​client/​client.go	Changes the default API URL; OpenAPI and public documentation require coordinated updates.
cmd/​pushman/​main_test.go	Tests endpoint-specific credentials; should assert the exact target endpoint.

_{Review effort: Lite}