<?xml version="1.0" encoding="UTF-8"?>
<!--
  Public, crawlable routes only.

  Deliberately EXCLUDED, and why:
    /auth /confirm-email /forgot-password /verify-email  — functional pages. They
      do nothing without a token or a session, so an indexed result sends a
      searcher to a dead form.
    /dashboard /ops/* /regulator/* /exec/* /field/*      — behind ProtectedRoute.
      A crawler cannot reach them, and listing them dilutes the few URLs we are
      actually asking Google to care about.
    /how-it-works /why  — REMOVED after listing them briefly. They are real,
      distinct React pages, but two things are true right now: the static
      fallback in index.html is ONE shared block, so to a crawler that does not
      run JS all three URLs served byte-identical content (same 422 chars, same
      <title>, no canonical) — textbook duplicate content, with Google free to
      pick a canonical we would not have chosen. And nothing routed links to them
      any more: their only links lived in LandingPage, which is unrouted while
      the holding page is the public face. Advertising two orphan URLs that
      render the same as / helps no searcher.
      Fixed at SOURCE rather than papered over with a blanket rel="canonical" in
      index.html: a canonical there would apply to every route and become a trap
      the moment any route gains its own content. Nothing links to these and
      nothing advertises them, so they will not be crawled.
      TO RESTORE: give each route its own static fallback content and <title>
      first — then list them.

  Served from public/ so Netlify returns the real file with an XML content type.
  Without it the SPA fallback answers /sitemap.xml with index.html as text/html —
  a 200 that looks fine and tells a crawler nothing.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://lightdey.com/</loc>
    <changefreq>daily</changefreq>
    <priority>1.0</priority>
  </url>
</urlset>
