page:blueprints:construction contractors:vendor portal:laravel

Construction contractors: vendor portal using Laravel

A vendor portal blueprint for construction contractors built with Laravel on Ample. Domain schema: listings (reference, project_type, location, publishing_status, agency_id): showcase projects with publishing status; agencies (name, license_number, service_region): branches or divisions; vendors (name, trade, agency_id, prequalified): subcontractors and suppliers per branch; reports (agency_id, period, object_key, generated_at): branch progress reports; document_access (document_id, principal_reference, role, granted_at): who may read which document. Public information: published project showcases, services and regions, licenses and insurance summary. Kept out of scope until handling is reviewed: site safety incidents, bid pricing, client contracts. Safety and bid data are confidential; only published showcases and branch reporting are modeled. Technical basis verified on Laravel: a role-to-document access model with negative tests (401 without identity, 403 for the wrong role) and a private-bucket round-trip for the allowed role (private=ok).

Representative Queries

Resource Requirements

Infrastructure Requirements

  1. Compute - Apps run in isolated x86_64 Firecracker microVMs that auto-pause when idle and wake on request; sizes are the priced VM sizes.
  2. Postgres - Managed PostgreSQL 16 runs in its own microVM and is auto-provisioned when an app needs a database and no DATABASE_URL is supplied.
  3. S3-compatible object storage - Buckets are S3-compatible with issued credentials; PutObject and GetObject are verified by canary. Other S3 operations are not verified.

Workflow Steps

  1. Model the construction contractors domain: Create the tables listings, agencies, vendors, reports, document_access. Showcase projects with publishing status lives in listings; keep the sensitive classes (site safety incidents, bid pricing, client contracts) out of this schema.
  2. Model vendors scoped to the agency with roles.
  3. Authorize document access by vendor and role (401, 403 negative tests).
  4. Store vendor documents in the private bucket.
  5. Deploy and verify the negative tests and an authorized download.
  6. Run the synchronous deploy once and read the result. Re-running with no change is a no-op.
  7. Run the pattern self-test(s) from the example (/p/private-document-library) and your own acceptance checks for the construction contractors workflow.

Cost Estimate

Evidence Summary

Limitations