fix: align browser OAuth client parameters

[tmustier]

Summary

• Fix Anthropic browser OAuth client ID typo (44d5 -> 44d9), matching upstream Pi/Claude Code client ID.
• Revert OpenAI Codex browser OAuth to identity-only scopes and originator=pi, matching upstream/current Codex token shape.
• Add/adjust browser OAuth tests for both authorize URLs.

Verification

• node --test --experimental-strip-types --import ./scripts/register-test-ts-loader.mjs tests/browser-oauth.test.ts
• npm run check
• npm run build

Notes

• The Anthropic typo directly caused Claude's web UI: Invalid client id provided.
• The OpenAI connector scopes worked for a personal account but failed for the Nexcade ChatGPT Team account; official Codex-authenticated Nexcade tokens use the identity-only scope shape.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
pi-for-excel	Ignored		Apr 24, 2026 1:43pm