The rule
Every BudsCollab app and plugin package must declare the same primitive layers:- UI primitives from the atomic UI catalog.
- Surface primitives: widget, fullscreen, dock, overlay, or chat panel.
- Capability primitives: room state, connector reads, safe actions, presence, or sandboxed code.
- Safety primitives: renderer boundary, permission boundary, provenance, network policy, write policy, and review evidence.
- Distribution primitives: personal widget, full app, agent plugin package, Eve sandbox export, or registry handoff.
primitive-composability-contract.json. It connects the
Mintlify docs, agent skills, plugin wrappers, optional MCP config, Eve sandbox
exports, and registry handoff back to SDK_PRIMITIVE_LAYER_CATALOG and the
same review-gated install posture.
What belongs in each envelope
| Envelope | Purpose | Must not do |
|---|---|---|
| Mintlify docs | Teach humans and agents the primitive-first model. | Claim docs make a package installable. |
| Agent skill | Tell Codex, Cursor, Claude, or Eve how to use the SDK and CLI. | Redefine SDK primitives or bypass validation. |
| Plugin wrapper | Bundle the skill, references, validation script, optional MCP, and host manifest. | Become a separate app model. |
| MCP config | Add live account, preview, publisher, or registry operations when enabled. | Be required for local artifact creation. |
| Eve sandbox export | Return validated exported artifacts for review. | Install live sandbox output into production. |
| Registry handoff | Carry review policy, install blockers, and future acceptance payloads. | Claim marketplace acceptance before signing and host policy. |
Mintlify is part of the agent surface
Mintlify docs should be the canonical source because they serve both humans and agents. The public docs should exposellms.txt, skill.md,
/.well-known/agent-skills/index.json, and /.well-known/agent-card.json once
hosted on the canonical domain.
Until those paths are deployed and verified, BudsCollab can claim the docs are
Mintlify-ready and checked locally. Hosted docs, agent discovery, and install
permission require separate verification.
Decision model
Build in this order:- Express the experience with atomic UI primitives.
- Add only the surfaces the app needs.
- Request named capabilities instead of importing host internals.
- Attach safety gates before packaging.
- Validate with
@budscollab/cli. - Add a plugin wrapper only when the developer workflow needs portable agent instructions, docs, scripts, or optional MCP.
- Submit registry handoff artifacts only after the local review report is clean enough to explain remaining install blockers.