# aicostr — https://aicostr.com
# Public marketing surface is open to all crawlers; the authenticated app is not.

User-agent: *
Allow: /

# Auth-gated app routes — no value indexing (they redirect to /login)
Disallow: /dashboard
Disallow: /onboarding
Disallow: /history
Disallow: /providers
Disallow: /api-keys
Disallow: /audit-logs
Disallow: /team
Disallow: /budgets
Disallow: /settings
Disallow: /alerts
Disallow: /billing

Sitemap: https://aicostr.com/sitemap.xml