# robots.txt for glucoray.com (the app). The blog has its own robots.txt on health.gheware.com.
# Last updated: 2026-10-21 (spec glucoray-primary-domain)
# One group only: a named User-agent group replaces "*" entirely and would drop every Disallow.

User-agent: *
Allow: /

# Sitemap location (public app pages)
Sitemap: https://glucoray.com/sitemap.xml

# ===========================================
# DISALLOW: Authentication endpoints
# ===========================================
Disallow: /auth/
Disallow: /*?logged_out=

# ===========================================
# DISALLOW: API endpoints (require auth)
# ===========================================
Disallow: /api/

# ===========================================
# DISALLOW: Protected pages (redirect to login)
# ===========================================
Disallow: /sleep
Disallow: /settings
Disallow: /discover
Disallow: /dashboard
Disallow: /insights
Disallow: /profile

# ===========================================
# DISALLOW: URLs with tracking parameters
# (prevents duplicate content issues)
# ===========================================
Disallow: /*?source=
Disallow: /*?utm_