# AdminLanding — robots.txt
# Preferred domain https://www.adminlanding.com is declared via <link rel=canonical>
# + sitemap. (The non-standard "Host:" directive was removed — only Yandex ever
# honoured it; Google/Bing ignore it.)

User-agent: *
Allow: /
Allow: /fr
Allow: /lettres-administratives
Allow: /quittance-de-loyer
Allow: /frontalier-france-suisse
Allow: /guide-post-brexit
Allow: /location
Allow: /guide-ia
Allow: /pricing
Allow: /maprimerenov
Allow: /extension
Allow: /bail-location
Allow: /declaration-impots
Allow: /etat-des-lieux
# 9 sibling URLs added in PR1 commit 2 (full lock + sibling expansion):
Allow: /rent-receipt-france
Allow: /cross-border-france-switzerland
Allow: /admin-letters-france
Allow: /french-lease-agreement
Allow: /french-tax-return
Allow: /property-inspection-france
Allow: /maprimerenov-en
Allow: /gestion-locative
Allow: /tarifs
Allow: /privacy
Allow: /terms
Allow: /cookie-policy
Allow: /sub-processors
Allow: /mentions-legales
Disallow: /helper
Disallow: /helper-embed
Disallow: /auth/callback
Disallow: /__/auth/
Disallow: /auth-action
Disallow: /share/
Disallow: /login
Disallow: /signup
Disallow: /verify
Disallow: /reset
Disallow: /reset-password
Disallow: /forgot
Disallow: /forgot-password
Disallow: /delete-account
Disallow: /dashboard
Disallow: /profile
Disallow: /settings
# /documents is $-anchored + slash-suffixed: the bare prefix silently blocked
# the marketing page /documents-fin-de-contrat-cesu-pajemploi (SiteGuru, Aug 2026).
Disallow: /documents$
Disallow: /documents/
Disallow: /vault
Disallow: /tenant/
Disallow: /welcome-pack
Disallow: /plan
# Explicit Allow for marketing pillars whose prefix collides with the
# Disallow patterns above. Google honours the longest matching pattern,
# so these win over /tenant/, /guide, /rental/ etc.
Allow: /french-tenant-portal
Allow: /portail-locataire
Allow: /application-gestion-locative
Allow: /rental-app-france
Allow: /gestion-locative-distance
Allow: /manage-french-rental-abroad
Disallow: /contact
Disallow: /procedures
Disallow: /financial
Disallow: /courrier
Disallow: /email
# ⚠ LOAD-BEARING TRAILING SLASHES + $ — DO NOT remove them.
# robots matching is prefix-from-start. The slash on /rental/, /cross-border/,
# /patrimoine/, /fiscal/, /guides/ confines each block to app sub-paths only,
# so the hyphenated money pages survive on the bare "Allow: /":
#   /rental/  keeps out app routes but NOT /rental-app-france, /rental-charges-france
#   /cross-border/  NOT /cross-border-france-switzerland
#   /guide$  (exact) blocks only /guide, NOT /guide-ia or /guide-post-brexit
# Dropping a slash (e.g. /rental/ -> /rental) silently deindexes those money
# pages. Verified 0 robots/sitemap conflicts across all 49 sitemap URLs (Jun 2026).
Disallow: /guide$
Disallow: /rental/
Disallow: /patrimoine/
Disallow: /cross-border/
Disallow: /crossborder/
Disallow: /fiscal/
Disallow: /legal
Disallow: /legal-test
Disallow: /official-texts
Disallow: /guides/
# $-anchored twins of the slash-suffixed blocks above: the BARE app-shell
# routes (/rental, /fiscal, …) were still crawlable — they serve the homepage
# snapshot with canonical→/. Exact-match only; the hyphenated money pages
# (/rental-app-france, /cross-border-france-switzerland, /tenant-signup-…)
# are longer matches on "Allow: /" and unaffected. /guides is NOT listed:
# it 404s (absent from the SPA rewrite allowlist) and blocking would hide
# the 404 from Google.
Disallow: /rental$
Disallow: /patrimoine$
Disallow: /cross-border$
Disallow: /crossborder$
Disallow: /fiscal$
Disallow: /tenant$
Disallow: /tenant-signup$
# Admin-only routes (private dashboards)
Disallow: /ai-control
Disallow: /ai-security-monitor
Disallow: /analytics
Disallow: /enhanced-users
Disallow: /error-monitoring
Disallow: /logs
Disallow: /monitoring
Disallow: /system-health

# Sitemap
Sitemap: https://www.adminlanding.com/sitemap.xml

# AI crawlers (GPTBot, ChatGPT-User, OAI-SearchBot, Google-Extended, PerplexityBot,
# ClaudeBot, anthropic-ai, Applebot-Extended, CCBot) intentionally have NO dedicated
# group. Per the robots spec a named user-agent group OVERRIDES "*" entirely, so the
# previous bare "Allow: /" blocks let those bots bypass the private-route Disallows
# above (/dashboard, /vault, /ai-control, /logs, /tenant/, ...). With no dedicated
# group they fall back to "*": public site allowed, app/admin routes blocked. Same
# "welcome to the public site, stay out of the app" intent, correctly enforced.