# Marketing-portal domain split (issue #472, design doc §8a).
#
# Disallows the canonical auth-gated routes (AUTH_GATED_ROUTES in
# apps/portal/src/config/auth-routes.ts, minus `/`) so crawlers don't
# waste budget on the portal login wall. The same file is served at both
# subdomains (Vite copies public/ into dist/, which both the www. and
# portal. hostnames serve) — the Disallows are appropriate for both.
#
# `/` is deliberately NOT disallowed:
#   - On www., `/` is the marketing landing page — must be crawled.
#   - On portal., `/` 301-redirects through AuthGuard to /login;
#     letting crawlers hit it once is fine.
#
# When AUTH_GATED_ROUTES changes, update this Disallow block in lockstep.
# (No automated drift check today — manual review at PR time.)

User-agent: *
Disallow: /dashboard
Disallow: /clients
Disallow: /clients/scale
Disallow: /staff
Disallow: /redeem
Disallow: /redeem-staff-invite
Disallow: /pricing
Disallow: /welcome

Sitemap: https://www.bau-bau.app/sitemap.xml