netlify.toml

[build]
  command = "npm run build"
  functions = "netlify/functions"
  publish = "dist"

[functions]
  node_bundler = "esbuild"

# Increase timeout for AI-related functions
[functions."ai-assistant"]
  timeout = 60

[dev]
  command = "npm run dev:astro"
  port = 8080
  targetPort = 4321
  functionsPort = 9999
  autoLaunch = false

# Security headers
[[headers]]
  for = "/*"
  [headers.values]
    X-Frame-Options = "DENY"
    X-Content-Type-Options = "nosniff"
    X-XSS-Protection = "1; mode=block"
    Referrer-Policy = "strict-origin-when-cross-origin"

# Cache static assets
[[headers]]
  for = "/_astro/*"
  [headers.values]
    Cache-Control = "public, max-age=31536000, immutable"

# Environment variables (configure in Netlify dashboard)
# GRAPHQL_ENDPOINT=...
# GRAPHQL_API_KEY=...
# AUTH_SECRET=your-secret-key
# ADMIN_USERNAME=admin
# ADMIN_PASSWORD_HASH=bcrypt-hash
# ANTHROPIC_API_KEY=sk-ant-api03-...