Technical Specification v1.0.0

System architecture, API reference, and data models for Precision Auto Doors (PAD).

1. Architecture Overview

PAD runs entirely on Cloudflare edge infrastructure, routed through the MASCOM multi-tenant edge router. No origin server. All compute, storage, and database operations execute at the edge.

Compute

Cloudflare Workers

Storage

R2 Object Store

Database

D1 (SQLite)

Edge Router

mascom-edge

Platform

WeylandAI

Domain

pad.weylandai.com

Request Flow

Client -> Cloudflare CDN -> mascom-edge Worker
  -> Static: R2 (versioned, cache-busted via data-build)
  -> API:    pad-weylandai-com-api Worker -> D1

2. Stack

Layer	Technology	Notes
Edge Router	`mascom-edge`	Multi-tenant R2 router, venture_routing D1 table
API Worker	`pad-weylandai-com-api`	Handles /api/* routes, business logic
Database	Cloudflare D1	SQLite at edge, ~5ms reads
Object Storage	Cloudflare R2	Blueprints, attachments, static assets
Auth	AuthFor SSO	authfor.com/sdk/v1/authfor.min.js
Payments	VendyAI	Subscription billing, invoice generation
Notifications	MailGuyAI	Email alerts, bid notifications
AI Inference	WeylandAI Platform	Blueprint parsing, schedule extraction

3. API Reference

Base URL: https://pad.weylandai.com/api. All endpoints require a valid AuthFor session token in the Authorization header.

Projects

Method	Endpoint	Description
GET	`/api/projects`	List projects for authenticated contractor. Supports `?status=` filter.
GET	`/api/projects/:id`	Get project detail including bid history and hardware schedule.
POST	`/api/projects`	Create project. Accepts blueprint upload (multipart/form-data).
PUT	`/api/projects/:id`	Update project metadata, status transitions.
DEL	`/api/projects/:id`	Soft-delete. Archived projects retained 90 days.

Bids

Method	Endpoint	Description
GET	`/api/bids`	List bids. Filter by `?project_id=` or `?contractor_id=`.
POST	`/api/bids`	Submit bid against a project. Triggers MailGuyAI notification to GC.
PUT	`/api/bids/:id`	Revise bid. Only allowed while status is `submitted`.
POST	`/api/bids/:id/accept`	GC accepts bid. Triggers VendyAI escrow hold.

Hardware Schedules

Method	Endpoint	Description
GET	`/api/hardware`	List hardware schedules for a project.
POST	`/api/hardware/extract`	AI extraction. Upload blueprint PDF, returns parsed door schedule.
PUT	`/api/hardware/:id`	Manual override of extracted schedule line items.

Contractors

Method	Endpoint	Description
GET	`/api/contractors/me`	Current contractor profile (from AuthFor session).
PUT	`/api/contractors/me`	Update profile, certifications, service area.
GET	`/api/contractors/search`	Search contractors by region, certification, capacity.

4. Data Model

projects

id TEXT PK — UUID v4
name TEXT NOT NULL — Project name
gc_id TEXT FK — General contractor (AuthFor user ID)
status TEXT — draft | bidding | awarded | in_progress | complete | archived
address TEXT — Job site address
blueprint_r2_key TEXT — R2 object key for uploaded blueprint
door_count INTEGER — Total doors (auto-populated from hardware schedule)
bid_deadline TEXT — ISO 8601 timestamp
created_at TEXT — ISO 8601
updated_at TEXT — ISO 8601

bids

id TEXT PK
project_id TEXT FK — References projects.id
contractor_id TEXT FK — AuthFor user ID of bidding sub
amount_cents INTEGER — Bid total in cents
line_items TEXT (JSON) — Itemized breakdown
status TEXT — submitted | revised | accepted | rejected | withdrawn
lead_time_days INTEGER — Estimated delivery
notes TEXT — Contractor notes / exclusions
created_at TEXT

hardware_schedules

id TEXT PK
project_id TEXT FK
door_mark TEXT — Door mark number from plans (e.g. "D-101")
door_type TEXT — hollow_metal | wood | aluminum | fiberglass
width REAL — Inches
height REAL — Inches
fire_rating TEXT — none | 20min | 45min | 60min | 90min | 3hr
hardware_group TEXT — Hardware set reference
frame_type TEXT — knock_down | welded | drywall
source TEXT — ai_extracted | manual
confidence REAL — AI extraction confidence 0.0-1.0

contractors

id TEXT PK — AuthFor user ID
company_name TEXT
license_number TEXT
certifications TEXT (JSON) — DHI, AAADM, fire door inspect, etc.
service_regions TEXT (JSON) — Array of state/metro codes
tier TEXT — free | pro | enterprise
vendyai_customer_id TEXT — VendyAI billing reference

5. Auth Flow

PAD delegates all authentication to AuthFor (authfor.com). No passwords are stored in PAD's database.

User visits pad.weylandai.com. Page loads authfor.min.js SDK.

SDK checks for existing session cookie. If absent, redirects to AuthFor login.

User authenticates via AuthFor (email/password, OAuth, or device auth).

AuthFor issues JWT. SDK stores in HttpOnly cookie, redirects back to PAD.

PAD API Worker validates JWT on every request via AuthFor's /verify endpoint (cached 5 min).

JWT payload contains user_id, email, roles[]. PAD maps user_id to contractors.id.

// SDK initialization
AuthFor.init({
  app: 'pad-weylandai',
  redirect: 'https://pad.weylandai.com/dashboard',
  scopes: ['profile', 'email']
});

// API Worker JWT validation
const { valid, payload } = await authfor.verify(request.headers.get('Authorization'));
if (!valid) return new Response('Unauthorized', { status: 401 });

6. AI Capabilities

Blueprint Hardware Schedule Extraction

Contractors upload architectural blueprint PDFs. The WeylandAI platform processes them to extract door schedules, hardware groups, and fire ratings.

POST /api/hardware/extract
Content-Type: multipart/form-data

Response:
{
  "project_id": "proj_8f2a...",
  "doors_found": 47,
  "confidence_avg": 0.91,
  "schedule": [
    {
      "door_mark": "D-101",
      "door_type": "hollow_metal",
      "width": 36, "height": 84,
      "fire_rating": "90min",
      "hardware_group": "HW-3",
      "confidence": 0.95
    }
  ],
  "warnings": ["D-218: fire rating unclear, manual review recommended"]
}

Auto-Estimation

Given a hardware schedule, PAD generates bid estimates using historical pricing data, regional material costs, and labor rates. Contractors can accept the estimate as a starting point or override line items.

POST /api/bids/estimate
{ "project_id": "proj_8f2a...", "markup_pct": 15 }

Response:
{
  "estimated_total_cents": 4872500,
  "line_items": [
    { "door_mark": "D-101", "material_cents": 48000, "labor_cents": 12000, "hardware_cents": 35000 }
  ],
  "data_sources": ["regional_avg_2025Q4", "rs_means", "historical_bids"]
}

7. Integration Points

Service	Venture	Integration
Authentication	AuthFor	SSO SDK, JWT verify API, user provisioning webhooks
Payments	VendyAI	Subscription billing (free/pro/enterprise), bid escrow holds, invoice generation
Notifications	MailGuyAI	Bid submitted/accepted/rejected alerts, project status changes, deadline reminders
AI Platform	WeylandAI	Blueprint OCR, schedule extraction, cost estimation models
Edge Routing	mascom-edge	Static asset delivery from R2, API path routing to worker

8. Deployment

# Static assets (HTML/CSS/JS) deployed via mascom-edge
python3 mascom_edge_deploy.py spec/index.html \
  --hostname pad.weylandai.com \
  --path /spec/index.html \
  --tag spec-v1

# API worker
cd workers/pad-weylandai-com-api
npx wrangler deploy

# D1 migrations
npx wrangler d1 migrations apply pad-db --remote

Precision Auto Doors — a WeylandAI platform product. Part of the MobCorp venture fleet.
Specification version 1.0.0 — 2026-03-04