================================================
  ADOm8 Setup Checklist - Scratch Pad
  Collect all values before running the pipeline.
  Variable names match exactly what you enter in
  ADO > Pipelines > Variables.
================================================

--- PLAIN VARIABLES ---

AZURE_SUBSCRIPTION_ID:
  Your Azure subscription GUID
  Portal: portal.azure.com > Subscriptions > copy the Subscription ID
  Value: ___________________________________

AZURE_DEVOPS_ORG:
  Your ADO org NAME ONLY - not the full URL
  e.g. if your ADO URL is https://dev.azure.com/my-org, enter:  my-org
  Value: ___________________________________

AZURE_DEVOPS_PROJECT:
  Your ADO project name, spaces as-is (not URL-encoded)
  e.g. My Sample Project
  Value: ___________________________________

GITHUB_ORG:
  Your GitHub org name or personal username
  e.g. my-org  (or toddsmith if personal)
  Value: ___________________________________

GITHUB_REPO:
  Repo name only - no URL, no owner prefix
  e.g. my-project
  Value: ___________________________________

RESOURCE_GROUP_NAME:
  Name for the Azure resource group (will be created if it doesn't exist)
  Suggested: adom8-rg
  Value: ___________________________________

LOCATION:
  Azure region for all deployed resources
  e.g. eastus, westus2, eastus2, australiaeast
  Value: ___________________________________

AZURE_SERVICE_CONNECTION:
  The name of the ADO service connection you created in Step 1
  e.g. adom8-azure-deploy
  HOW TO CREATE:
    ADO > Project Settings > Service connections > New service connection
    Type:           Azure Resource Manager
    Auth method:    Workload identity federation (automatic)
    Scope level:    Subscription
    Resource Group: leave BLANK (pipeline creates it)
    Check:          Grant access permission to all pipelines
  Value: ___________________________________


--- SECRET VARIABLES (mark as secret in ADO) ---

ONBOARDING_PAT:
  ADO Personal Access Token (name suggestion: Adom8-Agent-Bot)
  ADO > User Settings > Personal access tokens > New Token
  Required scopes:
    Project and Team (Read)
    Work Items (Read & Write)
    Code (Read & Write)
    Build (Read & Execute)
    Release (Read, write, execute, & manage)
    Service Connections (Read, query, & manage)
  Value: ___________________________________

CLAUDE_API_KEY:  (set this OR OPENAI_API_KEY - at least one required)
  Anthropic API key - Claude is used by default when both are set
  console.anthropic.com/settings/keys
  Value: ___________________________________

OPENAI_API_KEY:  (set this OR CLAUDE_API_KEY - leave blank if using Anthropic)
  OpenAI API key
  platform.openai.com/api-keys
  Value: ___________________________________

GITHUB_TOKEN:
  GitHub fine-grained PAT (name suggestion: adom8-pipeline)
  github.com > Settings > Developer settings > Fine-grained tokens > Generate new token
  Expiration: 90 days recommended
  Resource owner: select your Organization if repo is inside one
  Required permissions:
    Contents (Read & Write)
    Pull requests (Read & Write)
    Issues (Read & Write)
    Webhooks (Read & Write)
  Value: ___________________________________


================================================
  IMPORTANT: Delete this file or clear the values
  above once the pipeline has run successfully.
  Never commit this file to source control.
================================================