<?xml version="1.0" encoding="UTF-8"?>
<!--
  kosh.manurya.com

  Only the three genuinely public pages. Everything else sits behind RequireAuth
  and would render the same shell to a crawler. /login is excluded on purpose:
  no search value, and it competes with /signup for the same intent.

  /kosh-app and /download are client-side redirects to /app, so only the
  canonical /app is listed.

  No lastmod here, deliberately. This is a hand-written static file with nothing
  to regenerate it, so any date baked in freezes on the day it was typed and
  slowly becomes a claim that is not true. Google treats lastmod as a hint and
  discounts it once a site proves unreliable about it, so no date beats a date
  that is quietly wrong.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://kosh.manurya.com/app</loc>
    <changefreq>monthly</changefreq>
    <priority>1.0</priority>
  </url>
  <url>
    <loc>https://kosh.manurya.com/signup</loc>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://kosh.manurya.com/request-access</loc>
    <changefreq>yearly</changefreq>
    <priority>0.4</priority>
  </url>
</urlset>
