Genswarms Tips Use

Genswarms.Tips — using the rotating-content dispenser

Wiring

%{name: :tips, handler: Genswarms.Tips, config: %{
  # ordered slots; rotate: true = seen-tracked no-repeat, rotate: false = weighted dressing
  template: [
    %{kind: "opener", rotate: false},
    %{kind: "body",   rotate: true},
    %{kind: "closer", rotate: false}
  ],                        # this IS the default — omit unless customizing
  salt: "tips-v1",          # seed component; change to reshuffle everyone
  reshuffle_guard: 20,      # ids kept on cycle-complete reshuffle
  store: MyApp.TipsStore,   # optional; memory-only (dev mode) without it

  # optional trust gate — ABSENT/nil = every sender is fully trusted, the
  # back-compat default (byte-identical through 0.1.2). Set it to safely
  # open :tips to agents/conversation topology while keeping the mutating
  # actions internal:
  trusted_sources: [:proactive, :roster],   # atoms or strings; compared as strings
  open_actions: ["draw"]                    # untrusted senders get ONLY these actions (default shown)
}}

The caller contract (draw → send → commit)

{"action":"draw","recipient_id":"tg:1:0","date":"2026-07-03"}
  -> {"ok":true,"text":"Coo coo: Tip body. Fly high.","fragment_ids":["a1b2..."],"recipient_id":"tg:1:0","date":"2026-07-03"}
send the text (your transport, your consent gates)
{"action":"commit","recipient_id":"tg:1:0","fragment_ids":["a1b2..."]}
  -> {"ok":true,"reshuffled":false,"recipient_id":"tg:1:0"}

Optional category on draw — narrows a rotate: true slot's live pool to fragments tagged with that category, before seen-filtering:

{"action":"draw","recipient_id":"tg:1:0","date":"2026-07-03","category":"hooks"}
  -> {"ok":true,"text":"...","fragment_ids":["a1b2..."],"recipient_id":"tg:1:0","date":"2026-07-03","category":"hooks"}

• draw is a PURE seeded read: same (recipient, date, category) => the same message, so a crash between draw and send retries identically. It marks nothing. Replies echo recipient_id and date for async correlation, plus category — but only when the caller supplied one.
• category only affects rotate: true slots; an empty/unknown category (no live fragment of that kind carries it) falls back to the full pool — it never turns into empty_pool. Non-rotating (dressing) slots ignore it.
• commit only after a delivery ATTEMPT (sent or failed) — the same mark-after-attempt discipline as roster-style targeting. Replies echo recipient_id.
• The object makes NO trust decisions of its own: recipient selection, consent, opt-out, and rate limits are still YOUR job before draw. By default (no trusted_sources configured) every sender gets the full action surface — keep it topology-internal. Set trusted_sources/ open_actions (see Wiring) to safely open draw to agents without exposing the mutating actions.

Content lifecycle

{"action":"add_fragments","fragments":[{"kind":"body","text":"...","category":"hooks","weight":1}]}
   -> always lands "pending" (ids are content-addressed: re-adding = no-op)
{"action":"promote","ids":[...]}   # pending -> live (the only drawable status)
{"action":"retire","ids":[...]}    # any -> retired; never deleted, stays in seen
{"action":"stats"}                 # pool sizes by kind/status + recipient count

Store seam (all callbacks optional)

load_fragments() :: [fragment_map]           # full pool at boot
load_seen()      :: %{recipient => [id]}     # oldest-first per recipient
save_fragment(fragment_map)                  # upsert by :id
save_fragment_status(id, status)
add_seen(recipient_id, ids)                  # upsert rows at now()
replace_seen(recipient_id, keep_ids)         # reshuffle: delete the rest

Gotchas

• Without store: pools and seen-state live for the boot session only — the documented dev mode, not a bug. Rotation resets on restart.
• empty_pool means a rotate: true slot has ZERO live fragments — promote something. Missing dressing kinds degrade silently (no opener/closer).
• Pool of 1 rotating fragment: repeats are allowed (starvation beats silence).
• date is a seed component, not parsed — pass a stable per-send day string; passing timestamps would defeat retry determinism.
• Templates with MULTIPLE rotate: true slots share one union coverage threshold for the exhaustion reshuffle, and two rotating slots of the same kind can pick the same fragment twice in one draw — v0.1.3 is designed around a single rotating slot.
• Agents are draw-only. Once trusted_sources is configured, an untrusted sender reaching :tips directly (e.g. a conversation agent, over a topology edge — no wrapper object needed) gets ONLY open_actions (default ["draw"]); add_fragments/promote/retire/commit all reply {"ok":false,"error":"untrusted"} for it. That's what makes a direct agent→tips edge safe: an agent can fetch a tip, but can never touch pool content or another recipient's rotation state.