rysweet
diff --git a/‎.claude/tools/amplihack/remote/AUTH_SETUP.md‎
Lines changed: 12 additions & 7 deletions b/‎.claude/tools/amplihack/remote/AUTH_SETUP.md‎
Lines changed: 12 additions & 7 deletions
diff --git a/‎.claude/tools/amplihack/remote/README_AUTH.md‎
Lines changed: 7 additions & 0 deletions b/‎.claude/tools/amplihack/remote/README_AUTH.md‎
Lines changed: 7 additions & 0 deletions
diff --git a/‎.claude/tools/amplihack/remote/__init__.py‎
Lines changed: 4 additions & 0 deletions b/‎.claude/tools/amplihack/remote/__init__.py‎
Lines changed: 4 additions & 0 deletions
diff --git a/‎.claude/tools/amplihack/remote/auth.py‎
Lines changed: 9 additions & 10 deletions b/‎.claude/tools/amplihack/remote/auth.py‎
Lines changed: 9 additions & 10 deletions
@@ -135,11 +135,13 @@ credential, sub_id, rg = get_azure_auth(debug=True)
 ### Git Protection
 
 The `.gitignore` already covers:
+
 - `.env` and all `.env*` files
 - `*.local` files
 - `**/credentials.json` files
 
 Verify with:
+
 ```bash
 git check-ignore -v .env
 # Output: .gitignore:10:.env	.env
@@ -203,6 +205,7 @@ ClientAuthenticationError: Authentication failed
 ```
 
 **Solutions**:
+
 1. Verify credentials are correct (check Azure Portal)
 2. Ensure Service Principal hasn't expired
 3. Check Service Principal has Contributor role
@@ -215,6 +218,7 @@ ModuleNotFoundError: No module named 'azure'
 ```
 
 **Solution**: Install Azure SDK:
+
 ```bash
 uv pip install azure-identity azure-mgmt-compute azure-mgmt-network azure-mgmt-resource
 ```
@@ -226,6 +230,7 @@ uv pip install azure-identity azure-mgmt-compute azure-mgmt-network azure-mgmt-r
 ```
 
 **Solutions**:
+
 1. Create `.env` from template: `cp .env.example .env`
 2. Run from project root directory
 3. Pass explicit path: `get_azure_auth(env_file=Path("/path/to/.env"))`
@@ -261,13 +266,13 @@ EOF
 
 ### Environment Variables
 
-| Variable | Required | Description |
-|----------|----------|-------------|
-| `AZURE_TENANT_ID` | Yes | Azure AD tenant (directory) ID |
-| `AZURE_CLIENT_ID` | Yes | Service Principal application ID |
-| `AZURE_CLIENT_SECRET` | Yes | Service Principal secret value |
-| `AZURE_SUBSCRIPTION_ID` | Yes | Target Azure subscription ID |
-| `AZURE_RESOURCE_GROUP` | No | Default resource group name |
+| Variable                | Required | Description                      |
+| ----------------------- | -------- | -------------------------------- |
+| `AZURE_TENANT_ID`       | Yes      | Azure AD tenant (directory) ID   |
+| `AZURE_CLIENT_ID`       | Yes      | Service Principal application ID |
+| `AZURE_CLIENT_SECRET`   | Yes      | Service Principal secret value   |
+| `AZURE_SUBSCRIPTION_ID` | Yes      | Target Azure subscription ID     |
+| `AZURE_RESOURCE_GROUP`  | No       | Default resource group name      |
 
 ### API Documentation
 
 
@@ -93,6 +93,7 @@ ValueError: Missing required credentials: tenant_id, client_id
 ```
 
 **Fix**: Create `.env` file from template:
+
 ```bash
 cp .env.example .env
 # Edit .env with your credentials
@@ -113,6 +114,7 @@ ModuleNotFoundError: No module named 'azure'
 ```
 
 **Fix**: Install Azure SDK:
+
 ```bash
 uv pip install azure-identity azure-mgmt-compute azure-mgmt-network azure-mgmt-resource
 ```
@@ -163,6 +165,7 @@ orchestrator.cleanup()
 Convenience function to get Azure authentication in one call.
 
 **Parameters**:
+
 - `env_file` (Path, optional): Path to specific .env file
 - `debug` (bool): Enable debug logging to stderr
 
@@ -173,6 +176,7 @@ Convenience function to get Azure authentication in one call.
 Main authentication class.
 
 **Methods**:
+
 - `get_credentials()` → AzureCredentials
 - `get_credential()` → ClientSecretCredential
 - `get_subscription_id()` → str
@@ -183,6 +187,7 @@ Main authentication class.
 Dataclass for credential storage.
 
 **Attributes**:
+
 - `tenant_id: str`
 - `client_id: str`
 - `client_secret: str`
@@ -200,6 +205,7 @@ Dataclass for credential storage.
 ## Status
 
 ✅ **Production Ready**
+
 - 250+ lines of functional code
 - 5/5 tests passing
 - Real Azure API verified
@@ -209,6 +215,7 @@ Dataclass for credential storage.
 ## Support
 
 For complete documentation, see:
+
 - **AUTH_SETUP.md** - Detailed setup and troubleshooting
 - **test_auth.py** - Example test cases
 - **IMPLEMENTATION_SUMMARY.md** - Implementation details
 
@@ -39,6 +39,7 @@
 from .executor import ExecutionResult, Executor
 from .integrator import BranchInfo, IntegrationSummary, Integrator
 from .orchestrator import VM, Orchestrator, VMOptions
+from .vm_pool import VMPoolEntry, VMPoolManager, VMSize
 
 __all__ = [
     # Main entry points
@@ -49,9 +50,12 @@
     "Orchestrator",
     "Executor",
     "Integrator",
+    "VMPoolManager",
     # Data classes
     "VM",
     "VMOptions",
+    "VMSize",
+    "VMPoolEntry",
     "SecretMatch",
     "ExecutionResult",
     "BranchInfo",
 
@@ -15,7 +15,6 @@
 import sys
 from dataclasses import dataclass
 from pathlib import Path
-from typing import Optional, Tuple
 
 from azure.identity import ClientSecretCredential
 
@@ -36,13 +35,14 @@ class AzureCredentials:
     client_id: str
     client_secret: str
     subscription_id: str
-    resource_group: Optional[str] = None
+    resource_group: str | None = None
 
     def __post_init__(self):
         """Validate that all required credentials are provided."""
         if not all([self.tenant_id, self.client_id, self.client_secret, self.subscription_id]):
             missing = [
-                name for name, value in [
+                name
+                for name, value in [
                     ("tenant_id", self.tenant_id),
                     ("client_id", self.client_id),
                     ("client_secret", self.client_secret),
@@ -67,7 +67,7 @@ class AzureAuthenticator:
         subscription_id = auth.get_subscription_id()
     """
 
-    def __init__(self, env_file: Optional[Path] = None, debug: bool = False):
+    def __init__(self, env_file: Path | None = None, debug: bool = False):
         """Initialize authenticator.
 
         Args:
@@ -76,14 +76,14 @@ def __init__(self, env_file: Optional[Path] = None, debug: bool = False):
         """
         self.env_file = env_file
         self.debug = debug
-        self._credentials: Optional[AzureCredentials] = None
+        self._credentials: AzureCredentials | None = None
 
     def _log_debug(self, message: str):
         """Log debug message to stderr if debug mode is enabled."""
         if self.debug:
             print(f"[DEBUG] {message}", file=sys.stderr)
 
-    def _find_env_file(self) -> Optional[Path]:
+    def _find_env_file(self) -> Path | None:
         """Find .env file by searching current directory and project root.
 
         Returns:
@@ -199,7 +199,7 @@ def get_subscription_id(self) -> str:
         """
         return self.get_credentials().subscription_id
 
-    def get_resource_group(self) -> Optional[str]:
+    def get_resource_group(self) -> str | None:
         """Get configured resource group name.
 
         Returns:
@@ -209,9 +209,8 @@ def get_resource_group(self) -> Optional[str]:
 
 
 def get_azure_auth(
-    env_file: Optional[Path] = None,
-    debug: bool = False
-) -> Tuple[ClientSecretCredential, str, Optional[str]]:
+    env_file: Path | None = None, debug: bool = False
+) -> tuple[ClientSecretCredential, str, str | None]:
     """Convenience function to get Azure authentication in one call.
 
     Args: