recv: cap batch size at 5, default stays 1 (#2150 clarified)

hive-ag3nt/prompts/system.md

@@ -2,7 +2,7 @@ You are hyperhive agent `{label}` (qualified: `{qualified_label}`){hive_identity
 
 Tools (hyperhive surface):
 
-- `mcp__hyperhive__recv(wait_seconds?, max?)` — drain inbox messages (returns `(empty)` if nothing pending). Without `wait_seconds` (or with `0`) it returns immediately — a cheap "anything pending?" peek you can sprinkle between tool calls. To **wait** for work when you have nothing else useful to do this turn, call with a long wait (e.g. `wait_seconds: 180`, the max) — incoming messages wake you instantly, otherwise the call returns empty at the timeout. That's strictly better than a fixed `sleep` shell command: lower latency on new work, no busy-loop. `max` (default 1, cap 32) drains several queued messages in one call — the wake prompt tells you the pending count.
+- `mcp__hyperhive__recv(wait_seconds?, max?)` — drain inbox messages (returns `(empty)` if nothing pending). Without `wait_seconds` (or with `0`) it returns immediately — a cheap "anything pending?" peek you can sprinkle between tool calls. To **wait** for work when you have nothing else useful to do this turn, call with a long wait (e.g. `wait_seconds: 180`, the max) — incoming messages wake you instantly, otherwise the call returns empty at the timeout. That's strictly better than a fixed `sleep` shell command: lower latency on new work, no busy-loop. `max` (default 1, cap 5) drains several queued messages in one call — the wake prompt tells you the pending count.
 - `mcp__hyperhive__ack_until(up_to)` — bulk-mark inbox messages handled: every message with broker id `<= up_to` (ids show as `[msg #<id>]` in wake prompts and recv output) is acked in one call, pending and delivered alike. Use it to clear a backlog you've already triaged — e.g. a redelivered flood after a container restart — instead of draining it one recv at a time: note the highest `[msg #N]` you've seen, then `ack_until(up_to: N)`. Acked messages never redeliver; messages newer than `up_to` stay queued. Only affects your own inbox.
 - `mcp__hyperhive__send(to, body, in_reply_to?)` — message a peer (by their name) or the operator (recipient `operator`, surfaces in the dashboard). Use `to: "*"` to broadcast to all agents (they receive a hint that it's a broadcast and may not need action). Use `to: "<parent>"` to address your structural parent without hardcoding their name — hive-c0re rewrites it at delivery time per `topology.json`, falling back to `operator` if you're a root agent. Use `to: "<children>"` to fan-out to every direct child of yours per `topology.json` (no-op for leaf agents). Both sentinels let the operator reparent at runtime with zero change on your side. Optional `in_reply_to: <message-id>` threads this message under a prior one — the dashboard and per-agent inbox render it with a `↳ reply` link. Some agents have a per-agent allow-list (`hyperhive.allowedRecipients` in their `agent.nix`) — if so the tool refuses recipients outside the list with a clear error; route through a peer agent or contact the operator directly.
 - (some agents only) **extra MCP tools** surfaced as `mcp__<server>__<tool>` — these are agent-specific (matrix client, scraper, db connector, etc.) declared in your `agent.nix` under `hyperhive.extraMcpServers`. Treat them as first-class tools alongside the hyperhive surface; the operator already auto-approved them at deploy time.

hive-ag3nt/src/mcp.rs

@@ -613,7 +613,7 @@ pub struct RecvArgs {
     /// Maximum number of messages to pop in this round-trip. Default
     /// (None) is 1 (single-message behaviour — exactly what you want
     /// when you're called to drive a turn off the first wake). Pass
-    /// a higher value (capped at 32 server-side) when you've been
+    /// a higher value (capped at 5 server-side) when you've been
     /// told the inbox has more queued (the wake prompt mentions
     /// pending count) and want to drain everything in one tool call.
     /// Once the long-poll wakes up, the call drains up to `max` in
@@ -806,7 +806,7 @@ impl AgentServer {
             `wait_seconds` (capped at 180) to park the turn waiting for new work — incoming \
             messages wake you instantly, otherwise the call returns empty at the timeout. \
             That's strictly better than a fixed shell `sleep`. \n\n\
-            **Batch drain**: pass `max: N` (capped at 32) to drain up to N messages in one \
+            **Batch drain**: pass `max: N` (capped at 5) to drain up to N messages in one \
             round-trip. Use this when the wake prompt told you the inbox has more queued, or \
             any time you expect a burst — one tool call beats N consecutive single recvs. \
             `wait_seconds` still applies to the FIRST message; once one arrives the call drains \

hive-ag3nt/src/serve_common.rs

@@ -31,9 +31,13 @@ pub fn format_wake_prompt(
     let pending = if unread == 0 {
         String::new()
     } else {
+        // Suggested batch size is clamped to the server-side recv cap
+        // (see `RECV_BATCH_MAX` in hive-c0re) so the hint never asks
+        // for more than one round-trip can deliver.
+        let batch = unread.min(5);
         format!(
             "\n\n({unread} more message(s) pending in your inbox — call `mcp__hyperhive__recv` \
-             with `max: {unread}` to drain them all in one round-trip before acting. If the \
+             with `max: {batch}` to drain the next batch before acting. If the \
              backlog is stale/already handled, `ack_until(up_to: <highest [msg #N] seen>)` \
              clears everything up to that id in one call instead.)"
         )