v3.10.8: Fix Re-OAuth buttons, block staging/sandbox for Antigravity, prefer production endpoint

- Fix Linux GUI Re-OAuth: load_oauth_secrets() was undefined, now loads inline
- Fix GLib.idle_add lambda returning truthy tuple (repeated callbacks)
- Proxy: production cloudcode-pa.googleapis.com tried first, sandbox as fallback
- Proxy: 403 SERVICE_DISABLED falls through to next endpoint
- Project discovery validates against production endpoint, not staging
- Antigravity preset base_url changed to production
- Windows GUI project discovery also uses production endpoint

src/codex_launcher_lib.py

@@ -83,6 +83,16 @@ model_catalog_json = ""
 """
 
 CHANGELOG = [
+    ("3.10.8", "2026-05-25", [
+        "Fix Re-OAuth buttons: load_oauth_secrets() was undefined in Linux GUI",
+        "Re-OAuth: replaced deprecated OOB flow with PKCE + localhost callback",
+        "Proxy: prefer production cloudcode-pa over staging/sandbox endpoints",
+        "Proxy: fallthrough 403 SERVICE_DISABLED to next endpoint",
+        "Project discovery: validate against production endpoint, not staging",
+        "Antigravity preset base_url changed to production (was daily-cloudcode-pa.sandbox)",
+        "Fix GLib.idle_add lambda returning truthy tuple (caused repeated calls)",
+        "Windows GUI: project discovery also uses production endpoint",
+    ]),
     ("3.10.7", "2026-05-25", [
         "Prompt Enhancer: per-provider toggle to improve prompt clarity after compaction",
         "Two modes: offline (template injection) and ai-powered (external LLM rewrites)",
@@ -439,7 +449,7 @@ PROVIDER_PRESETS = {
     },
     "Google Antigravity (OAuth)": {
         "backend_type": "gemini-oauth-antigravity",
-        "base_url": "https://daily-cloudcode-pa.sandbox.googleapis.com",
+        "base_url": "https://cloudcode-pa.googleapis.com",
         "oauth_provider": "google-antigravity",
         "models": [
             "antigravity-gemini-3-flash",