secrets.bat.example

@echo off
REM Secrets configuration file
REM Copy this file to secrets.bat and fill in your actual values
REM This file is gitignored and will not be committed
REM
REM You can place secrets.bat in either:
REM   - The current folder (same directory as rebuild.bat)
REM   - The parent folder (useful when WORK_FOLDER="." to keep secrets outside the mounted volume)

REM API Keys for AI coding agents
set ANTHROPIC_API_KEY=
set CLAUDE_CODE_OAUTH_TOKEN=

REM GitHub authentication
set GITHUB_TOKEN=
set GITHUB_USERNAME=

REM Azure DevOps PAT (Personal Access Token)
REM One PAT covers all projects/repos in the org it was created in.
REM Needs at least Code (Read) scope for git clone/fetch; Code (Read & Write) to push.
set AZURE_DEVOPS_PAT=
REM Optional: set to ONLY the org name (the "<org>" portion) if your repos use the
REM legacy URL format https://<org>.visualstudio.com/... -- do NOT include
REM ".visualstudio.com" or any other URL parts. Example: for
REM https://myorg.visualstudio.com/..., set AZURE_DEVOPS_ORG=myorg
REM Leave blank if you only use dev.azure.com URLs.
set AZURE_DEVOPS_ORG=

REM Git configuration
set GIT_USER_NAME=
set GIT_USER_EMAIL=

REM Beads server token. If set, the container entrypoint auto-starts
REM `bs serve` from the work folder on every container start (logs to /tmp/bs.log).
REM Leave blank to skip.
set BS_TOKEN=

REM Optional: Override auto-detected timezone
REM set TZ=America/New_York