Make Bot UI
- Define the operator actions, payload schema, authentication boundary, and observable completion state before UI code.
- Keep secrets server-side. Treat webhook URLs/tokens as credentials.
- Implement the thinnest UI that exposes state, errors, retries, and idempotent request IDs.
- Make every action safe under duplicate delivery or refresh.
- Verify one full round trip through the real backend when
observe/network access exists. Otherwise ship a deterministic local mock plus an explicit integration gap.