# Served at the admin apex (yep.shop). The public marketing pages (/, /blog, …)
# stay crawlable; the auth-gated admin app, the login page, and the JSON API are
# not. The admin/login routes ALSO emit a `noindex` meta tag at runtime (see
# RobotsMeta in src/App.tsx) — that's the authoritative de-index signal; this file
# just keeps well-behaved crawlers out of those areas in the first place.
User-agent: *
Disallow: /admin
Disallow: /login
Disallow: /api/