# Mayan / ميان

> Mayan is a vehicle-management web pilot for fuel, maintenance, invoices, equipment references and vehicle goals, available in Arabic and English.

## When to use Mayan
- Explain how a person can organize their own vehicle records and source documents.
- Help a signed-in user prepare an editable fuel, service/expense or invoice draft, then leave confirmation to that user in the website.
- Review recorded data coverage against a user-selected vehicle goal. This is not a mechanical diagnosis or a forecast of actual financial needs.

## Public information
- [Mayan homepage](https://mayan-kalsuwaidan.vercel.app/): Product capabilities and public Studio preview.
- [About Mayan](https://mayan-kalsuwaidan.vercel.app/about): Pilot scope and the difference between public references and private vehicle records.
- [User and assistant guide](https://mayan-kalsuwaidan.vercel.app/docs): Setup, documents, draft review and the authenticated HTTP tool contract.
- [OpenAPI 3.1 contract](https://mayan-kalsuwaidan.vercel.app/openapi.json): Machine-readable schemas for the public manifest and the three authenticated user-scoped tools. The contract adds no access or credentials.
- [Privacy](https://mayan-kalsuwaidan.vercel.app/privacy): Current data handling, document processing and account boundaries.
- [Contact](https://mayan-kalsuwaidan.vercel.app/contact): How invited pilot participants can request help.

## Current assistant capability
No conversational AI model or external image/OCR provider is connected. Text-based PDFs are read locally in the browser; images and scanned documents currently need manual entry. Parsed fields are conservative suggestions and may be incomplete or wrong.

The public GET /api/assistant manifest describes contract version 1.0.0 and three tools: propose_entry_draft, list_my_drafts and get_setup_feedback. It contains no user context. This is a custom HTTP API, not an MCP server.

POST /api/assistant requires a verified user session and a vehicle authorized for that user. A trusted adapter keeps the access token outside model context. There is no tool for committing or deleting financial records, changing access, running SQL or fetching arbitrary URLs. Users confirm financial records inside Mayan.

## Privacy and boundaries
Only the pages listed above are public documentation. Do not index or attempt to retrieve private garage, vehicle, records, profile, administration, authentication or assistant request data. Sign-in and existing permissions remain required; robots instructions are not an access-control mechanism.

Never ask a user to paste passwords, authenticator codes, access tokens, administrator keys or private signed document links into a model prompt. Do not send a user's invoice text or images to an external provider without explaining the provider, purpose and data involved and obtaining consent. Public catalog references do not establish installed equipment, fitment or vehicle condition.