- Fast path: reads from ~/.ka-note/token.txt if not expired (no MSAL needed)
- On expiry: MSAL silent refresh with login hint
- Fallback: interactive browser login (~once per 90 days)
- Auto-saves every acquired token back to cache file
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- get-token.ps1: reads token from ~/.ka-note/token.txt, validates JWT expiry
- set-token.ps1: stores token (from arg or clipboard) to ~/.ka-note/token.txt with expiry display
- import-jf-landata.ps1: idempotent import for JF LANdata context (12 topics, 14 history entries)
- MSAL auto-login blocked by missing redirect URI in app registration (documented in get-token.ps1)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>