# checkout.rumx.com — transactional checkout SPA, not content.
# Every URL is a parameterised cart entry point (rumId/itemIds/country
# combos, ~67k unique URLs crawled per GSC, SEO ticket 2026-07). Dead ends
# with zero content value: block crawling entirely.
#
# NOTE: this file MUST exist as a static asset. Without it, the SvelteKit
# "**" -> /index.html rewrite serves the SPA shell AS robots.txt (HTTP 200,
# text/html), which crawlers treat as allow-all. That was the state until
# 2026-07 and is why the subdomain was fully crawlable despite meta noindex.
User-agent: *
Disallow: /