# StatusPulse robots.txt — public marketing surface is open; every
# authenticated, transactional, or token-bearing path is blocked. Paths
# are case-sensitive per RFC 9309, so each route is listed with the
# exact casing the Razor `@page` directive serves it under.

User-agent: *
Allow: /

# Authenticated app surfaces
Disallow: /Admin
Disallow: /Dashboard
Disallow: /api/

# OIDC / Microsoft Identity callback endpoints
Disallow: /signin-oidc
Disallow: /signout-callback-oidc
Disallow: /MicrosoftIdentity/

# Self-serve sign-up / onboarding (auth flow — no SEO value)
Disallow: /Onboarding
Disallow: /onboarding

# Invite acceptance — route is `/invite/accept`, not `/InviteAccept`
Disallow: /invite/
Disallow: /InviteAccept

# Token-bearing unsubscribe link — route is `/unsubscribe/{token}`
Disallow: /unsubscribe/
Disallow: /Unsubscribe

# Status placeholder + framework error page
Disallow: /Error
Disallow: /error

Sitemap: https://www.statuspulse.ai/sitemap.xml