ninekit-cli 0.0.0-dev.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024 Duy Nguyen
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,696 @@
+# NineKit Config UI
+
+Command-line tool and web dashboard for managing NineKit projects.
+
+**Version**: 1.17.0
+
+## Overview
+
+NineKit Config UI (`nk`) provides both CLI and web dashboard for managing NineKit projects. It is built with Bun, TypeScript, and React for development, while the published CLI runs on plain Node.js so end users do not need Bun installed.
+
+**Key Features:**
+- **CLI Commands (16)**: new, init, config, projects, setup, skills, agents, commands, migrate, doctor, versions, update, uninstall, watch, content, easter-egg
+- **Web Dashboard**: Interactive React UI via `nk config ui` for configuration and project management
+- **Hook Diagnostics Dashboard**: Inspect recent Claude hook activity and failures from `nk config` across global and project scopes
+- **Projects Registry**: Centralized registry at `~/.ninekit/projects.json` with file locking
+- **Skill Installation**: Install NineKit skills to other coding agents (Cursor, Codex, etc.)
+- **Multi-tier Authentication**: gh CLI → env vars → keychain → prompt fallback
+- **Smart Merging**: Conflict detection with user customization preservation
+- **Skills Migration**: Auto-detects and migrates skills structure changes
+- **Offline Installation**: From local archives or directories
+- **Security**: Path traversal protection, symlink validation, UNC path protection
+- **Cross-Platform**: macOS, Linux, Windows with platform-specific optimizations
+- **Update Notifications**: Intelligent 7-day cache for version checks
+
+## Documentation
+
+Comprehensive documentation in `/docs`:
+
+- **[Codebase Summary](./docs/codebase-summary.md)** - Overview, structure, key components
+- **[Project Overview & PDR](./docs/project-overview-pdr.md)** - Requirements, features, roadmap
+- **[System Architecture](./docs/system-architecture.md)** - Architecture diagrams, data flow
+- **[Reconciliation Architecture](./docs/reconciliation-architecture.md)** - `nk migrate` RECONCILE → EXECUTE → REPORT design
+- **[Code Standards](./docs/code-standards.md)** - Coding conventions, best practices
+- **[Project Roadmap](./docs/project-roadmap.md)** - Release timeline, feature status
+- **[Deployment Guide](./docs/deployment-guide.md)** - Release procedures
+- **[nk watch](./docs/nk-watch.md)** - GitHub issue monitoring daemon
+- **[nk content](./docs/nk-content.md)** - Automated content generation from git activity
+
+## Prerequisites
+
+Before using NineKit CLI, you need to:
+
+1. **Purchase a NineKit Starter Kit** from [NineKit.cc](https://ninekit.chiendt.io.vn)
+2. **Get Repository Access**: After purchase, you'll receive access to the private GitHub repository containing your kit
+3. **Create a GitHub Personal Access Token** (PAT) with `repo` scope to download releases
+
+Without a purchased kit and repository access, the CLI will not be able to download any project templates.
+
+## Installation
+
+The NineKit CLI is published on npm at [npmjs.com/package/ninekit-cli](https://www.npmjs.com/package/ninekit-cli).
+
+End-user runtime note: global installs from `npm`, `pnpm`, `yarn`, or `bun` all execute the packaged Node.js CLI. Bun is optional for users and only needed for local NineKit CLI development workflows.
+
+### Using npm (Recommended)
+
+```bash
+npm install -g ninekit-cli
+```
+
+### Using Bun
+
+```bash
+bun add -g ninekit-cli
+```
+
+### Using Yarn
+
+```bash
+yarn global add ninekit-cli
+```
+
+### Using pnpm
+
+```bash
+pnpm add -g ninekit-cli
+```
+
+After installation, verify it's working:
+
+```bash
+nk --version
+```
+
+## Usage
+
+### Discoverability Quick Start
+
+```bash
+# Top-level command discovery
+nk --help
+
+# Open config dashboard immediately
+nk config
+
+# Expose the dashboard intentionally to your LAN/Tailscale
+nk config --host 0.0.0.0 --no-open
+
+# Command-level help (recommended)
+nk config --help
+nk skills --help
+nk agents --help
+nk commands --help
+nk migrate --help
+```
+
+### Config Dashboard Access
+
+By default, `nk config` binds the dashboard to `127.0.0.1` for local-only access.
+
+Use `--host` when you intentionally want remote access from another device on the same trusted network:
+
+```bash
+# Bind to all interfaces
+nk config --host 0.0.0.0 --no-open
+
+# Bind to a specific interface or hostname
+nk config --host 100.88.12.4 --no-open
+nk config --host dashboard.local --no-open
+```
+
+The dashboard still enforces same-origin browser access. Remote access works when you open the UI from the same host/origin that reaches the server, instead of relying on a hardcoded IP allowlist.
+
+### Create New Project
+
+```bash
+# Interactive mode
+nk new
+
+# With options
+nk new --dir my-project --kit engineer
+
+# Show beta versions
+nk new --beta
+
+# With exclude patterns
+nk new --exclude "*.log" --exclude "temp/**"
+
+# Optional packages (OpenCode, Gemini)
+nk new --opencode --gemini
+
+# Install skills dependencies (Python, Node packages, system tools)
+nk new --install-skills
+
+# Command prefix (/nk: namespace to avoid conflicts)
+nk new --prefix
+
+# Offline installation (from local archive or directory)
+nk new --archive ~/downloads/engineer-v1.16.0.zip
+nk new --kit-path ~/extracted-kit/
+
+# Direct repo downloads are also supported
+nk new --archive ~/downloads/ninekit-engineer-main.zip
+nk new --kit-path ~/downloads/ninekit-engineer-main/
+```
+
+**Flags:**
+- `--install-skills`: Auto-install Python packages, system tools (FFmpeg, ImageMagick), Node.js packages
+- `--prefix`: Move commands to /nk: namespace (/plan → /nk:plan)
+- `--beta`: Show pre-release versions in selection
+- `--opencode/--gemini`: Install optional packages
+- `--archive <path>`: Use local archive (zip/tar.gz) instead of downloading
+- `--kit-path <path>`: Use local kit directory instead of downloading
+
+`--archive` and `--kit-path` both accept direct repo downloads with a single wrapper directory, including GitHub "Download ZIP" archives and extracted repo folders that still contain `ninekit-engineer-main/` or similar at the top level.
+
+### Initialize or Update Project
+
+**Note:** Run from project root.
+
+```bash
+# Interactive mode
+nk init
+
+# Non-interactive mode with sensible defaults
+nk init --yes
+nk init -y
+
+# Combine with other flags
+nk init -g --kit engineer -y
+
+# With options
+nk init --kit engineer --beta
+
+# Global mode (platform-specific paths)
+nk init --global
+
+# Fresh installation (⚠️ DESTRUCTIVE - removes ALL customizations)
+nk init --fresh
+
+# With exclude patterns and prefix
+nk init --exclude "*.local" --prefix
+
+# Offline installation (from local archive or directory)
+nk init --archive ~/downloads/engineer-v1.16.0.zip
+nk init --kit-path ~/extracted-kit/
+
+# Direct repo downloads are also supported
+nk init --archive ~/downloads/ninekit-engineer-main.zip
+nk init --kit-path ~/downloads/ninekit-engineer-main/
+```
+
+**Flags:**
+- `--yes/-y`: Non-interactive mode with sensible defaults (skip all prompts)
+- `--global/-g`: Use platform-specific config (macOS/Linux: ~/.claude, Windows: %USERPROFILE%\.claude)
+- `--fresh`: Clean reinstall, removes .claude directory (requires "yes" confirmation)
+- `--beta`: Show pre-release versions
+- `--prefix`: Apply /nk: namespace to commands
+- `--archive <path>`: Use local archive (zip/tar.gz) instead of downloading
+- `--kit-path <path>`: Use local kit directory instead of downloading
+
+`--archive` and `--kit-path` both accept direct repo downloads with a single wrapper directory, including GitHub "Download ZIP" archives and extracted repo folders that still contain `ninekit-engineer-main/` or similar at the top level.
+
+**Default Behavior with `-y` Flag:**
+
+| Prompt | Default |
+|--------|---------|
+| Select NineKit | engineer (first option) |
+| Target directory | Current directory (`.`) |
+| Version selection | Latest stable release |
+| Google Gemini setup | Skip |
+| Other optional features | Skip |
+
+### Update CLI
+
+Keep the NineKit CLI up to date:
+
+```bash
+# Check for CLI updates
+nk update --check
+
+# Update to latest version
+nk update
+
+# Update to specific version
+nk update --version 1.17.0
+
+# Update to beta / skip confirmation
+nk update --beta
+nk update --yes
+```
+
+The CLI notifies you when updates are available via `nk --version`.
+
+**Skills Migration:**
+- Auto-detects structure changes (flat → categorized)
+- Preserves customizations (SHA-256 hashing)
+- Creates backup before migration
+- Rollback on failure
+
+### List Available Versions
+
+```bash
+# Show all available versions for all kits
+nk versions
+
+# Filter by specific kit
+nk versions --kit engineer
+nk versions --kit marketing
+
+# Show more versions (default: 30)
+nk versions --limit 50
+
+# Include prereleases and drafts
+nk versions --all
+```
+
+### Diagnostics & Doctor
+
+```bash
+# Full health check (default)
+nk doctor
+
+# Verbose mode with execution timing and command details
+nk doctor --verbose
+
+# Generate shareable diagnostic report (prompts for gist upload)
+nk doctor --report
+
+# Auto-fix all fixable issues
+nk doctor --fix
+
+# CI mode: no prompts, exit 1 on failures
+nk doctor --check-only
+
+# Machine-readable JSON output
+nk doctor --json
+
+# Combine flags
+nk doctor --verbose --check-only --json
+nk doctor --verbose --fix
+```
+
+**Health Checks:**
+- **System**: Node.js, npm, Python, pip, Claude CLI, git, gh CLI
+- **NineKit**: Global/project installation, versions, skills, skill listing budget, duplicate skill inventory
+- **Auth**: GitHub CLI authentication, repository access
+- **Project**: package.json, node_modules, lock files
+- **Modules**: Dynamic skill dependency resolution
+
+**Auto-Fix Capabilities:**
+| Issue | Fix Action |
+|-------|------------|
+| Missing dependencies | Install via package manager |
+| Missing gh auth | Run `gh auth login` |
+| Corrupted node_modules | Reinstall dependencies |
+| Missing global install | Run `nk init --global` |
+| Missing skill deps | Install in skill directory |
+| Missing/low Engineer skill listing budget | Ensure computed `skillListingBudgetFraction` and a valid NineKit-recommended `skillListingMaxDescChars` ceiling in project settings |
+
+`nk doctor` never writes `skillOverrides`, hides skills, or deletes duplicate skills automatically. It reports existing `skillOverrides` and inventory issues so all active project/global skills can stay user-invocable while listing pressure is managed through 200k-context-floor project settings and bounded descriptions.
+
+**Exit Codes:**
+- `0`: All checks pass or issues fixed
+- `1`: Failures detected (only with `--check-only`)
+
+> **Note:** `nk diagnose` is deprecated. Use `nk doctor` instead.
+
+### Uninstall
+
+Remove NineKit installations from your system:
+
+```bash
+nk uninstall              # Interactive mode - prompts for scope and confirmation
+nk uninstall --local      # Uninstall only local installation (current project)
+nk uninstall --global     # Uninstall only global installation (~/.claude/)
+nk uninstall -g --kit marketing  # Remove only global Marketing kit
+nk uninstall -l -y        # Local only, skip confirmation
+nk uninstall -g -y        # Global only, skip confirmation
+nk uninstall --yes        # Non-interactive - skip confirmation (for scripts)
+```
+
+**Scope Selection:**
+- When both local and global installations exist, you'll be prompted to choose:
+  - **Local only**: Remove from current project (`.claude/`)
+  - **Global only**: Remove from user directory (`~/.claude/`)
+  - **Both**: Remove all NineKit installations
+- When multiple kits are installed in the selected scope, interactive uninstall prompts for:
+  - **Marketing kit only** or **Engineer kit only**: Remove one kit and preserve the other
+  - **All NineKit kits**: Remove the full selected installation scope
+- Use `--local` or `--global` flags to skip the prompt
+- Use `--kit engineer` or `--kit marketing` to skip the kit prompt
+
+**What it does:**
+- Detects local `.claude` directory in current project
+- Detects global `~/.claude` NineKit installation
+- Shows paths before deletion
+- Requires confirmation (unless `--yes` flag)
+- Removes NineKit subdirectories (`commands/`, `agents/`, `skills/`, `workflows/`, `hooks/`, `metadata.json`)
+- **Preserves user configs** like `settings.json`, `settings.local.json`, and `CLAUDE.md`
+
+**Note:** Only removes valid NineKit installations (with metadata.json). Regular `.claude` directories from Claude Desktop are not affected.
+
+### Watch GitHub Issues (`nk watch`)
+
+Autonomous daemon that monitors GitHub issues, analyzes them with Claude, generates plans, and creates PRs.
+
+```bash
+# Start watching (single repo)
+nk watch
+
+# Dry-run mode (no posts/PRs)
+nk watch --dry-run
+
+# Custom poll interval (ms)
+nk watch --interval 60000
+
+# Force restart (clear state)
+nk watch --force
+
+# Verbose logging
+nk watch --verbose
+```
+
+**Features:** issue lifecycle management (10 statuses), Claude-powered brainstorming/planning, automatic PR creation, rate limiting (persisted across restarts), maintainer reply filtering, processedIssues TTL, optional git worktree isolation per issue, multi-repo support, graceful shutdown.
+
+**Config:** `.nk.json` under `watch` key. See [docs/nk-watch.md](./docs/nk-watch.md) for full configuration reference.
+
+### Content Generation (`nk content`)
+
+Daemon that scans git activity (commits, PRs, tags), generates social media content with Claude, and publishes to X/Twitter and Facebook.
+
+```bash
+# Interactive setup wizard
+nk content setup
+
+# Start daemon
+nk content start
+
+# Check status
+nk content status
+
+# View logs
+nk content logs
+
+# Queue manual content
+nk content queue
+
+# Review workflow
+nk content approve <id>
+nk content reject <id>
+
+# Dry-run / verbose
+nk content start --dry-run
+nk content start --verbose
+```
+
+**Features:** 11-phase pipeline (scan → filter → classify → context → create → validate → review → photo → publish → engage → analyze), noise filtering, context caching (24h TTL), content validation, photo generation, 3 review modes (auto/manual/hybrid), quiet hours scheduling, engagement tracking, SQLite database, platform-specific adapters.
+
+**Config:** `.nk.json` under `content` key. See [docs/nk-content.md](./docs/nk-content.md) for full configuration reference.
+
+### Other Commands
+
+```bash
+# Show CLI version (shows local + global kit versions)
+nk --version
+
+# Show help
+nk --help
+nk -h
+
+# Command-specific help
+nk new --help
+nk init --help
+nk config --help
+nk skills --help
+nk versions --help
+```
+
+### Debugging
+
+```bash
+nk new --verbose              # Enable verbose logging
+nk new --verbose --log-file debug.log  # Save to file
+NINEKIT_VERBOSE=1 nk new   # Via environment variable
+```
+
+### Cache Configuration
+
+Release data is cached locally to improve performance. You can configure the cache TTL:
+
+```bash
+# Set custom cache TTL (in seconds, default: 3600 = 1 hour)
+NK_CACHE_TTL=7200 nk versions    # Cache for 2 hours
+NK_CACHE_TTL=0 nk versions       # Disable caching (always fetch fresh)
+
+# Permanent configuration (add to ~/.bashrc or ~/.zshrc)
+export NK_CACHE_TTL=1800         # 30 minutes
+```
+
+**Cache Location:** `~/.ninekit/cache/releases/`
+
+### Update Notifications
+
+The `nk --version` command checks for newer versions of your installed NineKit and displays a notification if an update is available. The check is cached for 7 days to minimize API calls.
+
+**Disable Update Notifications:**
+```bash
+# Set environment variable to disable
+NO_UPDATE_NOTIFIER=1 nk --version
+
+# Windows (permanent)
+[System.Environment]::SetEnvironmentVariable("NO_UPDATE_NOTIFIER", "1", [System.EnvironmentVariableTarget]::User)
+
+# macOS/Linux (add to ~/.bashrc or ~/.zshrc)
+export NO_UPDATE_NOTIFIER=1
+```
+
+**Cache Location:** `~/.ninekit/cache/version-check.json` (Windows: `%USERPROFILE%\.ninekit\cache\`)
+
+## Authentication
+
+The CLI requires GitHub authentication to download releases from private repositories.
+
+### Authentication Flow
+
+```
+┌─────────────────────────────────────────────────┐
+│          Multi-Tier Authentication               │
+│                                                  │
+│  1. GitHub CLI (gh auth token)                  │
+│       ↓ (if not available)                       │
+│  2. Environment Variables (GITHUB_TOKEN)        │
+│       ↓ (if not set)                             │
+│  3. Config File (~/.ninekit/config.json)      │
+│       ↓ (if not found)                           │
+│  4. OS Keychain (secure storage)                │
+│       ↓ (if not stored)                          │
+│  5. User Prompt (with save option)              │
+└─────────────────────────────────────────────────┘
+```
+
+### Quick Setup
+
+**Step 1: Install GitHub CLI**
+```bash
+# Windows
+winget install GitHub.cli
+
+# macOS
+brew install gh
+
+# Linux
+sudo apt install gh
+```
+
+**Step 2: Authenticate with GitHub CLI**
+```bash
+gh auth login
+```
+
+When prompted, follow these steps:
+1. Select **GitHub.com**
+2. Select **HTTPS** (or SSH if preferred)
+3. Authenticate Git? → **Yes**
+4. Select **Login with a web browser** (⚠️ recommended)
+5. Copy the one-time code shown
+6. Press Enter to open browser and paste the code
+7. Authorize GitHub CLI
+
+> **⚠️ Important**: Select "Login with a web browser" - do NOT use "Paste an authentication token" as PAT authentication is no longer supported for accessing private repositories.
+
+## Troubleshooting
+
+Run the doctor command to diagnose issues:
+
+```bash
+# Interactive diagnostics
+nk doctor
+
+# Generate report for support
+nk doctor --report
+
+# CI/automation
+nk doctor --check-only --json
+
+# Verbose logging
+nk new --verbose
+nk init --verbose
+```
+
+**Common Issues:**
+- **"Access denied"**: Run `nk doctor` to check auth, use `--fix` to auto-repair
+- **"Authentication failed"**: Run `nk doctor --fix` to re-authenticate, or manually run `gh auth login` (select 'Login with a web browser')
+- **"GitHub CLI not authenticated"**: Run `gh auth login` and select 'Login with a web browser' (NOT 'Paste token')
+- **Module errors**: Run `nk doctor --fix` to reinstall skill dependencies
+- **Need help**: Run `nk doctor --report` and share the gist URL
+
+## Available Kits
+
+NineKit offers premium starter kits available for purchase at [NineKit.cc](https://ninekit.chiendt.io.vn):
+
+- **engineer**: NineKit Engineer - Engineering toolkit for building with Claude (v1.0.0+)
+- **marketing**: NineKit Marketing - Content automation toolkit (v1.0.0 available)
+
+Each kit provides a comprehensive project template with best practices, tooling, and workflows optimized for Claude Code development.
+
+## Configuration
+
+Configuration is stored in `~/.ninekit/config.json`:
+
+```json
+{
+  "github": {
+    "token": "stored_in_keychain"
+  },
+  "defaults": {
+    "kit": "engineer",
+    "dir": "."
+  }
+}
+```
+
+## Protected Files
+
+The following file patterns are protected and will not be overwritten during updates:
+
+- `.env`, `.env.local`, `.env.*.local`
+- `*.key`, `*.pem`, `*.p12`
+- `node_modules/**`, `.git/**`
+- `dist/**`, `build/**`
+
+## Excluding Files
+
+Use `--exclude` flag with glob patterns to skip files:
+
+```bash
+nk new --exclude "*.log" --exclude "temp/**"
+nk update --exclude "node_modules/**" --exclude "dist/**"
+```
+
+**Patterns:** `*` (any chars), `**` (recursive), `?` (single char), `[abc]`, `{a,b}`
+**Restrictions:** No absolute paths, no path traversal (..), 1-500 chars
+**Note:** User patterns are ADDED to default protected patterns
+
+### Custom .claude Files & Skills Migration
+
+**Custom File Preservation:**
+The CLI automatically preserves your custom `.claude/` files during updates:
+
+- Custom slash commands
+- Personal workflows
+- Project-specific configurations
+- Any other custom files in `.claude/` directory
+
+**Skills Directory Migration:**
+Automatic migration when structure changes (flat → categorized):
+
+- **Detection**: Manifest-based + heuristic fallback
+- **Customizations**: SHA-256 hash comparison detects modifications
+- **Safety**: Backup before migration, rollback on failure
+- **Preservation**: All customizations preserved during migration
+- **Interactive**: Prompts for confirmation (can skip in CI/CD)
+
+**Example Migration:**
+```
+Before (flat):
+  .claude/skills/
+    ├── gemini-vision/
+    ├── postgresql-psql/
+    └── cloudflare-dns/
+
+After (categorized):
+  .claude/skills/
+    ├── ai-multimodal/
+    │   └── gemini-vision/
+    ├── databases/
+    │   └── postgresql-psql/
+    └── devops/
+        └── cloudflare-dns/
+```
+
+Customizations in any skill are detected and preserved automatically.
+
+## Development
+
+See [Development Guide](./docs/codebase-summary.md) for:
+- Project structure (modular domain-driven architecture)
+- Build & compilation (`bun run build`, `bun run compile`)
+- Testing & type checking
+- Code standards & linting
+
+**Architecture Highlights:**
+- **Modular design**: 122 focused modules (target: <100 lines each)
+- **Facade pattern**: Each domain exposes public API via facade
+- **Phase handlers**: Complex commands use orchestrator + phase handlers
+- **Self-documenting names**: kebab-case file names describe purpose
+
+**Quick Start:**
+```bash
+bun install
+bun run dev new --kit engineer
+bun test
+# Optional: run expensive CLI integration tests explicitly
+bun run test:integration
+```
+
+## E2E Tests
+
+Playwright E2E tests cover the `nk migrate` dashboard (3 scenarios). Tests run against the local dev server and use API mocking — no real filesystem state is modified.
+
+**Prerequisites:** Node 18+ or Bun 1.0+, Chromium (installed automatically).
+
+```bash
+# One-time browser setup (if not already installed)
+./node_modules/.bin/playwright install chromium
+
+# Run all E2E specs
+bun run test:e2e
+
+# Interactive UI mode (watch + trace viewer)
+bun run test:e2e:ui
+```
+
+Note: The dev server starts automatically via `bun run dashboard:dev`. CI wiring is a separate follow-up (local-only for now).
+
+## FAQ
+
+**Q: Do I need GitHub CLI?**
+A: Yes, GitHub CLI is required. NineKit uses it exclusively for authentication with private repositories.
+
+**Q: How do I authenticate?**
+A: Run `gh auth login`, select 'Login with a web browser', complete OAuth in browser. Do NOT use 'Paste an authentication token'.
+
+**Q: "Access denied" error?**
+A: Accept GitHub repo invitation, re-run `gh auth login` with web browser login, wait 2-5min for permissions.
+
+**Q: "GitHub CLI not authenticated" error?**
+A: Run `gh auth login` and select 'Login with a web browser' (NOT 'Paste token'). PAT authentication is no longer supported.
+
+**Q: Is my token secure?**
+A: Yes. GitHub CLI manages tokens securely via OAuth, stored encrypted in OS keychain.
+
+## License
+
+MIT