<?xml version="1.0" encoding="UTF-8"?>
<!--
  CopyFlow sitemap — public routes only.

  Deliberately excludes every /master and /onboarding route: they sit behind the
  auth proxy and can only ever return a redirect to a crawler, and they hold
  client names, margins and trade history.

  `/` is absent too — it redirects to /auth/login, and a sitemap should list the
  URL that actually returns 200 rather than the hop.

  Static file. If the domain changes, update these <loc> values and the Host /
  Sitemap lines in public/robots.txt.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://copyflow.app/auth/login</loc>
    <changefreq>monthly</changefreq>
    <priority>1.0</priority>
  </url>
  <url>
    <loc>https://copyflow.app/auth/register</loc>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
</urlset>
