- Fast path: reads from ~/.ka-note/token.txt if not expired (no MSAL needed)
- On expiry: MSAL silent refresh with login hint
- Fallback: interactive browser login (~once per 90 days)
- Auto-saves every acquired token back to cache file
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>