sealnet-mcp 0.2.0 → 0.2.2

package/dist/cli.cjs

@@ -2914,7 +2914,6 @@ var upload_default = {
     HEDGE_MIN_INFLIGHT_MS: 3e3,
     HEDGE_LAG_FACTOR: 3,
     HEDGE_POLL_MS: 1e3,
-    HEDGE_MAX_CONCURRENT: 1,
     LIVENESS_SILENCE_MS: 3e4,
     RETRY_BACKOFF_MS: [1e3, 3e3, 7e3, 15e3, 3e4],
     RETRY_JITTER_RATIO: 0.2,
@@ -4209,7 +4208,6 @@ var DEFAULT_TRANSPORT_POLICY = {
   hedgeMinInflightMs: upload_default.upload.HEDGE_MIN_INFLIGHT_MS,
   hedgeLagFactor: upload_default.upload.HEDGE_LAG_FACTOR,
   hedgePollMs: upload_default.upload.HEDGE_POLL_MS,
-  hedgeMaxConcurrent: upload_default.upload.HEDGE_MAX_CONCURRENT,
   livenessSilenceMs: upload_default.upload.LIVENESS_SILENCE_MS,
   verifyPollBackoffMs: upload_default.upload.VERIFY_POLL_BACKOFF_MS,
   verifyFallbackWaitMs: upload_default.upload.VERIFY_FALLBACK_WAIT_MS,
@@ -4531,7 +4529,6 @@ async function multipartUploadStream(options) {
   let lastRoundRate = null;
   let roomWaiters = [];
   const fullPartPace = [];
-  let hedgesInFlight = 0;
   const partsInFlight = /* @__PURE__ */ new Set();
   let lastSocketActivityAt = performance.now();
   let socketActivityObservable = false;
@@ -4576,10 +4573,10 @@ async function multipartUploadStream(options) {
     roundBytes = 0;
     roundDeliveries = 0;
   }
-  function hedgeDue(item, lastLaunchAt, ownDuplicates) {
+  function hedgeDue(item, lastLaunchAt) {
     const inFlightMs = performance.now() - lastLaunchAt;
     if (inFlightMs < policy.hedgeMinInflightMs) return false;
-    const flowsNow = runningParts.size + hedgesInFlight - ownDuplicates;
+    const flowsNow = runningParts.size;
     const peers = fullPartPace.filter((p) => p.flows >= flowsNow).map((p) => p.rate);
     if (peers.length === 0) return false;
     peers.sort((a, b) => a - b);
@@ -4701,135 +4698,80 @@ async function multipartUploadStream(options) {
   }
   async function hedgedPut(item, presignedUrl) {
     const t0 = performance.now();
-    let controllers = [];
-    const detachFns = [];
     let hedgeTicker = null;
     let hedgeCount = 0;
-    let liveHedges = 0;
-    let currentHedge = null;
     let lastLaunchAt = t0;
-    let generation = 0;
-    const unsentByCopy = /* @__PURE__ */ new Map();
-    let reconnect = () => {
-    };
-    const launchCopy = async (isHedge) => {
-      const ctl = new AbortController();
-      controllers.push(ctl);
-      if (isHedge) currentHedge = ctl;
-      unsentByCopy.set(ctl, true);
-      lastSocketActivityAt = performance.now();
-      if (runSignal) {
-        if (runSignal.aborted) {
-          ctl.abort();
-        } else {
-          const onAbort = () => ctl.abort();
-          runSignal.addEventListener("abort", onAbort, { once: true });
-          detachFns.push(() => runSignal.removeEventListener("abort", onAbort));
-        }
-      }
-      try {
-        const outcome = await transportPut(
-          item.ciphertext,
-          item.contentMd5,
-          item.partNumber,
-          presignedUrl,
-          ctl.signal,
-          {
-            onSocketActivity: (loaded, total) => {
-              lastSocketActivityAt = performance.now();
-              unsentByCopy.set(ctl, loaded < total);
-            },
-            onDeadline: () => reconnect("copy deadline")
-          }
-        );
-        return validatePutOutcome(item.partNumber, outcome);
-      } finally {
-        unsentByCopy.delete(ctl);
-      }
+    let current = null;
+    let replace = () => {
     };
     const inFlight = {
-      reconnect: (why) => reconnect(why),
-      hasUnsentBytes: () => [...unsentByCopy.values()].some(Boolean)
+      reconnect: (why) => replace(why, false),
+      hasUnsentBytes: () => current?.unsent ?? false
     };
     partsInFlight.add(inFlight);
     try {
       const etag = await new Promise((resolve5, reject) => {
-        let pending = 0;
         let settled = false;
-        const run = (label) => {
-          const born = generation;
-          pending++;
-          launchCopy(label === "hedge").then((confirmedEtag) => {
-            if (settled) return;
-            settled = true;
-            if (label === "hedge") log3.debug(`hedge won part=${item.partNumber}`);
-            resolve5(confirmedEtag);
-          }).catch((err2) => {
-            if (settled || born !== generation) return;
-            pending--;
-            const failure = toUploadError(err2, `Failed to upload part ${item.partNumber}`);
-            if (label === "hedge") {
-              liveHedges--;
-              hedgesInFlight--;
-              currentHedge = null;
-              if (failure.code !== "ABORTED") hedgeCount--;
-            }
-            if (failure.code === "ABORTED" && signal?.aborted) {
-              settled = true;
-              reject(failure);
-              return;
-            }
-            if (pending === 0) {
-              if (hedgeTicker !== null) {
-                clearInterval(hedgeTicker);
-                hedgeTicker = null;
+        const settle = (outcome) => {
+          if (settled) return;
+          settled = true;
+          outcome();
+        };
+        const launch = () => {
+          const ctl = new AbortController();
+          const onUploadEnd = () => ctl.abort();
+          if (runSignal?.aborted) ctl.abort();
+          else runSignal?.addEventListener("abort", onUploadEnd, { once: true });
+          const copy = { ctl, unsent: true, ended: Promise.resolve() };
+          current = copy;
+          lastLaunchAt = performance.now();
+          lastSocketActivityAt = lastLaunchAt;
+          copy.ended = transportPut(item.ciphertext, item.contentMd5, item.partNumber, presignedUrl, ctl.signal, {
+            onSocketActivity: (loaded, total) => {
+              lastSocketActivityAt = performance.now();
+              copy.unsent = loaded < total;
+            },
+            onDeadline: () => replace("copy deadline", false)
+          }).then(
+            (outcome) => {
+              if (current !== copy) return;
+              try {
+                const confirmed = validatePutOutcome(item.partNumber, outcome);
+                settle(() => resolve5(confirmed));
+              } catch (err2) {
+                settle(() => reject(err2));
               }
-              settled = true;
-              reject(failure);
+            },
+            (err2) => {
+              if (current === copy) settle(() => reject(toUploadError(err2, `Failed to upload part ${item.partNumber}`)));
             }
+          ).finally(() => {
+            copy.unsent = false;
+            runSignal?.removeEventListener("abort", onUploadEnd);
           });
         };
-        reconnect = (why) => {
-          if (settled || signal?.aborted) return;
-          generation++;
-          pending = 0;
-          hedgesInFlight -= liveHedges;
-          liveHedges = 0;
-          hedgeCount = 0;
-          currentHedge = null;
-          const stale = controllers;
-          controllers = [];
-          for (const ctl of stale) ctl.abort();
-          lastLaunchAt = performance.now();
-          log3.debug(`reconnect part=${item.partNumber} (${why})`);
-          run("primary");
+        replace = (why, spendsTicket) => {
+          const old = current;
+          if (settled || old === null || signal?.aborted) return;
+          current = null;
+          hedgeCount = spendsTicket ? hedgeCount + 1 : 0;
+          log3.debug(`${spendsTicket ? "replace" : "reconnect"} part=${item.partNumber} (${why})`);
+          old.ctl.abort();
+          void old.ended.then(() => {
+            if (settled) return;
+            if (runSignal?.aborted) {
+              settle(() => reject(new UploadError("Upload aborted", "ABORTED", void 0, item.partNumber)));
+            } else {
+              launch();
+            }
+          });
         };
-        run("primary");
+        launch();
         hedgeTicker = setInterval(() => {
-          if (settled || signal?.aborted) {
-            if (hedgeTicker !== null) {
-              clearInterval(hedgeTicker);
-              hedgeTicker = null;
-            }
-            return;
-          }
+          if (settled || signal?.aborted || current === null) return;
           if (hedgeCount >= HEDGE_MAX_PER_PART) return;
-          if (!hedgeDue(item, lastLaunchAt, liveHedges)) return;
-          if (hedgesInFlight >= policy.hedgeMaxConcurrent) {
-            if (currentHedge !== null) {
-              currentHedge.abort();
-              currentHedge = null;
-            }
-            return;
-          }
-          hedgeCount++;
-          liveHedges++;
-          hedgesInFlight++;
-          lastLaunchAt = performance.now();
-          log3.debug(
-            `hedge launched part=${item.partNumber} copy=${hedgeCount + 1} after ${Math.round(performance.now() - t0)}ms`
-          );
-          run("hedge");
+          if (!hedgeDue(item, lastLaunchAt)) return;
+          replace(`slower than its peers after ${Math.round(performance.now() - t0)}ms`, true);
         }, policy.hedgePollMs);
       });
       const tPut = performance.now();
@@ -4840,17 +4782,15 @@ async function multipartUploadStream(options) {
       clock.delivered();
       lastSocketActivityAt = tPut;
       log3.debug(
-        `part=${item.partNumber}/${totalParts} put=${Math.round(tPut - t0)}ms size=${item.ciphertext.length}${hedgeCount > 0 ? ` hedged\xD7${hedgeCount}` : ""}`
+        `part=${item.partNumber}/${totalParts} put=${Math.round(tPut - t0)}ms size=${item.ciphertext.length}${hedgeCount > 0 ? ` replaced\xD7${hedgeCount}` : ""}`
       );
       report("uploading");
     } finally {
       partsInFlight.delete(inFlight);
-      reconnect = () => {
+      replace = () => {
       };
       if (hedgeTicker !== null) clearInterval(hedgeTicker);
-      hedgesInFlight -= liveHedges;
-      for (const ctl of controllers) ctl.abort();
-      for (const detach of detachFns) detach();
+      current?.ctl.abort();
     }
   }
   const controlFetch = (url, init3, timeoutMs) => policyFetch(url, init3, timeoutMs, runSignal);
@@ -4955,6 +4895,10 @@ async function multipartUploadStream(options) {
     item.round = round;
     item.flowsAtStart = runningParts.size;
     let url = presignedUrlCache.get(item.partNumber);
+    if (!url && presignPrefetchInFlight) {
+      await presignPrefetchInFlight;
+      url = presignedUrlCache.get(item.partNumber);
+    }
     presignedUrlCache.delete(item.partNumber);
     schedulePresignPrefetch(item.partNumber + 1);
     await retrying(
@@ -13989,7 +13933,7 @@ function proFileGetOutputToWire(out) {
 }
 
 // src/server.ts
-var SERVER_VERSION = "0.2.0";
+var SERVER_VERSION = "0.2.2";
 var toolMeta = (name) => {
   const { title, description, annotations } = seal_mcp_v1_default.tools[name];
   return { title, description, annotations };

package/dist/cli.js

@@ -2886,7 +2886,6 @@ var upload_default = {
     HEDGE_MIN_INFLIGHT_MS: 3e3,
     HEDGE_LAG_FACTOR: 3,
     HEDGE_POLL_MS: 1e3,
-    HEDGE_MAX_CONCURRENT: 1,
     LIVENESS_SILENCE_MS: 3e4,
     RETRY_BACKOFF_MS: [1e3, 3e3, 7e3, 15e3, 3e4],
     RETRY_JITTER_RATIO: 0.2,
@@ -4181,7 +4180,6 @@ var DEFAULT_TRANSPORT_POLICY = {
   hedgeMinInflightMs: upload_default.upload.HEDGE_MIN_INFLIGHT_MS,
   hedgeLagFactor: upload_default.upload.HEDGE_LAG_FACTOR,
   hedgePollMs: upload_default.upload.HEDGE_POLL_MS,
-  hedgeMaxConcurrent: upload_default.upload.HEDGE_MAX_CONCURRENT,
   livenessSilenceMs: upload_default.upload.LIVENESS_SILENCE_MS,
   verifyPollBackoffMs: upload_default.upload.VERIFY_POLL_BACKOFF_MS,
   verifyFallbackWaitMs: upload_default.upload.VERIFY_FALLBACK_WAIT_MS,
@@ -4503,7 +4501,6 @@ async function multipartUploadStream(options) {
   let lastRoundRate = null;
   let roomWaiters = [];
   const fullPartPace = [];
-  let hedgesInFlight = 0;
   const partsInFlight = /* @__PURE__ */ new Set();
   let lastSocketActivityAt = performance.now();
   let socketActivityObservable = false;
@@ -4548,10 +4545,10 @@ async function multipartUploadStream(options) {
     roundBytes = 0;
     roundDeliveries = 0;
   }
-  function hedgeDue(item, lastLaunchAt, ownDuplicates) {
+  function hedgeDue(item, lastLaunchAt) {
     const inFlightMs = performance.now() - lastLaunchAt;
     if (inFlightMs < policy.hedgeMinInflightMs) return false;
-    const flowsNow = runningParts.size + hedgesInFlight - ownDuplicates;
+    const flowsNow = runningParts.size;
     const peers = fullPartPace.filter((p) => p.flows >= flowsNow).map((p) => p.rate);
     if (peers.length === 0) return false;
     peers.sort((a, b) => a - b);
@@ -4673,135 +4670,80 @@ async function multipartUploadStream(options) {
   }
   async function hedgedPut(item, presignedUrl) {
     const t0 = performance.now();
-    let controllers = [];
-    const detachFns = [];
     let hedgeTicker = null;
     let hedgeCount = 0;
-    let liveHedges = 0;
-    let currentHedge = null;
     let lastLaunchAt = t0;
-    let generation = 0;
-    const unsentByCopy = /* @__PURE__ */ new Map();
-    let reconnect = () => {
-    };
-    const launchCopy = async (isHedge) => {
-      const ctl = new AbortController();
-      controllers.push(ctl);
-      if (isHedge) currentHedge = ctl;
-      unsentByCopy.set(ctl, true);
-      lastSocketActivityAt = performance.now();
-      if (runSignal) {
-        if (runSignal.aborted) {
-          ctl.abort();
-        } else {
-          const onAbort = () => ctl.abort();
-          runSignal.addEventListener("abort", onAbort, { once: true });
-          detachFns.push(() => runSignal.removeEventListener("abort", onAbort));
-        }
-      }
-      try {
-        const outcome = await transportPut(
-          item.ciphertext,
-          item.contentMd5,
-          item.partNumber,
-          presignedUrl,
-          ctl.signal,
-          {
-            onSocketActivity: (loaded, total) => {
-              lastSocketActivityAt = performance.now();
-              unsentByCopy.set(ctl, loaded < total);
-            },
-            onDeadline: () => reconnect("copy deadline")
-          }
-        );
-        return validatePutOutcome(item.partNumber, outcome);
-      } finally {
-        unsentByCopy.delete(ctl);
-      }
+    let current = null;
+    let replace = () => {
     };
     const inFlight = {
-      reconnect: (why) => reconnect(why),
-      hasUnsentBytes: () => [...unsentByCopy.values()].some(Boolean)
+      reconnect: (why) => replace(why, false),
+      hasUnsentBytes: () => current?.unsent ?? false
     };
     partsInFlight.add(inFlight);
     try {
       const etag = await new Promise((resolve5, reject) => {
-        let pending = 0;
         let settled = false;
-        const run = (label) => {
-          const born = generation;
-          pending++;
-          launchCopy(label === "hedge").then((confirmedEtag) => {
-            if (settled) return;
-            settled = true;
-            if (label === "hedge") log3.debug(`hedge won part=${item.partNumber}`);
-            resolve5(confirmedEtag);
-          }).catch((err2) => {
-            if (settled || born !== generation) return;
-            pending--;
-            const failure = toUploadError(err2, `Failed to upload part ${item.partNumber}`);
-            if (label === "hedge") {
-              liveHedges--;
-              hedgesInFlight--;
-              currentHedge = null;
-              if (failure.code !== "ABORTED") hedgeCount--;
-            }
-            if (failure.code === "ABORTED" && signal?.aborted) {
-              settled = true;
-              reject(failure);
-              return;
-            }
-            if (pending === 0) {
-              if (hedgeTicker !== null) {
-                clearInterval(hedgeTicker);
-                hedgeTicker = null;
+        const settle = (outcome) => {
+          if (settled) return;
+          settled = true;
+          outcome();
+        };
+        const launch = () => {
+          const ctl = new AbortController();
+          const onUploadEnd = () => ctl.abort();
+          if (runSignal?.aborted) ctl.abort();
+          else runSignal?.addEventListener("abort", onUploadEnd, { once: true });
+          const copy = { ctl, unsent: true, ended: Promise.resolve() };
+          current = copy;
+          lastLaunchAt = performance.now();
+          lastSocketActivityAt = lastLaunchAt;
+          copy.ended = transportPut(item.ciphertext, item.contentMd5, item.partNumber, presignedUrl, ctl.signal, {
+            onSocketActivity: (loaded, total) => {
+              lastSocketActivityAt = performance.now();
+              copy.unsent = loaded < total;
+            },
+            onDeadline: () => replace("copy deadline", false)
+          }).then(
+            (outcome) => {
+              if (current !== copy) return;
+              try {
+                const confirmed = validatePutOutcome(item.partNumber, outcome);
+                settle(() => resolve5(confirmed));
+              } catch (err2) {
+                settle(() => reject(err2));
               }
-              settled = true;
-              reject(failure);
+            },
+            (err2) => {
+              if (current === copy) settle(() => reject(toUploadError(err2, `Failed to upload part ${item.partNumber}`)));
             }
+          ).finally(() => {
+            copy.unsent = false;
+            runSignal?.removeEventListener("abort", onUploadEnd);
           });
         };
-        reconnect = (why) => {
-          if (settled || signal?.aborted) return;
-          generation++;
-          pending = 0;
-          hedgesInFlight -= liveHedges;
-          liveHedges = 0;
-          hedgeCount = 0;
-          currentHedge = null;
-          const stale = controllers;
-          controllers = [];
-          for (const ctl of stale) ctl.abort();
-          lastLaunchAt = performance.now();
-          log3.debug(`reconnect part=${item.partNumber} (${why})`);
-          run("primary");
+        replace = (why, spendsTicket) => {
+          const old = current;
+          if (settled || old === null || signal?.aborted) return;
+          current = null;
+          hedgeCount = spendsTicket ? hedgeCount + 1 : 0;
+          log3.debug(`${spendsTicket ? "replace" : "reconnect"} part=${item.partNumber} (${why})`);
+          old.ctl.abort();
+          void old.ended.then(() => {
+            if (settled) return;
+            if (runSignal?.aborted) {
+              settle(() => reject(new UploadError("Upload aborted", "ABORTED", void 0, item.partNumber)));
+            } else {
+              launch();
+            }
+          });
         };
-        run("primary");
+        launch();
         hedgeTicker = setInterval(() => {
-          if (settled || signal?.aborted) {
-            if (hedgeTicker !== null) {
-              clearInterval(hedgeTicker);
-              hedgeTicker = null;
-            }
-            return;
-          }
+          if (settled || signal?.aborted || current === null) return;
           if (hedgeCount >= HEDGE_MAX_PER_PART) return;
-          if (!hedgeDue(item, lastLaunchAt, liveHedges)) return;
-          if (hedgesInFlight >= policy.hedgeMaxConcurrent) {
-            if (currentHedge !== null) {
-              currentHedge.abort();
-              currentHedge = null;
-            }
-            return;
-          }
-          hedgeCount++;
-          liveHedges++;
-          hedgesInFlight++;
-          lastLaunchAt = performance.now();
-          log3.debug(
-            `hedge launched part=${item.partNumber} copy=${hedgeCount + 1} after ${Math.round(performance.now() - t0)}ms`
-          );
-          run("hedge");
+          if (!hedgeDue(item, lastLaunchAt)) return;
+          replace(`slower than its peers after ${Math.round(performance.now() - t0)}ms`, true);
         }, policy.hedgePollMs);
       });
       const tPut = performance.now();
@@ -4812,17 +4754,15 @@ async function multipartUploadStream(options) {
       clock.delivered();
       lastSocketActivityAt = tPut;
       log3.debug(
-        `part=${item.partNumber}/${totalParts} put=${Math.round(tPut - t0)}ms size=${item.ciphertext.length}${hedgeCount > 0 ? ` hedged\xD7${hedgeCount}` : ""}`
+        `part=${item.partNumber}/${totalParts} put=${Math.round(tPut - t0)}ms size=${item.ciphertext.length}${hedgeCount > 0 ? ` replaced\xD7${hedgeCount}` : ""}`
       );
       report("uploading");
     } finally {
       partsInFlight.delete(inFlight);
-      reconnect = () => {
+      replace = () => {
       };
       if (hedgeTicker !== null) clearInterval(hedgeTicker);
-      hedgesInFlight -= liveHedges;
-      for (const ctl of controllers) ctl.abort();
-      for (const detach of detachFns) detach();
+      current?.ctl.abort();
     }
   }
   const controlFetch = (url, init3, timeoutMs) => policyFetch(url, init3, timeoutMs, runSignal);
@@ -4927,6 +4867,10 @@ async function multipartUploadStream(options) {
     item.round = round;
     item.flowsAtStart = runningParts.size;
     let url = presignedUrlCache.get(item.partNumber);
+    if (!url && presignPrefetchInFlight) {
+      await presignPrefetchInFlight;
+      url = presignedUrlCache.get(item.partNumber);
+    }
     presignedUrlCache.delete(item.partNumber);
     schedulePresignPrefetch(item.partNumber + 1);
     await retrying(
@@ -13961,7 +13905,7 @@ function proFileGetOutputToWire(out) {
 }
 
 // src/server.ts
-var SERVER_VERSION = "0.2.0";
+var SERVER_VERSION = "0.2.2";
 var toolMeta = (name) => {
   const { title, description, annotations } = seal_mcp_v1_default.tools[name];
   return { title, description, annotations };

package/dist/index.cjs

@@ -7579,7 +7579,6 @@ var upload_default = {
     HEDGE_MIN_INFLIGHT_MS: 3e3,
     HEDGE_LAG_FACTOR: 3,
     HEDGE_POLL_MS: 1e3,
-    HEDGE_MAX_CONCURRENT: 1,
     LIVENESS_SILENCE_MS: 3e4,
     RETRY_BACKOFF_MS: [1e3, 3e3, 7e3, 15e3, 3e4],
     RETRY_JITTER_RATIO: 0.2,
@@ -8874,7 +8873,6 @@ var DEFAULT_TRANSPORT_POLICY = {
   hedgeMinInflightMs: upload_default.upload.HEDGE_MIN_INFLIGHT_MS,
   hedgeLagFactor: upload_default.upload.HEDGE_LAG_FACTOR,
   hedgePollMs: upload_default.upload.HEDGE_POLL_MS,
-  hedgeMaxConcurrent: upload_default.upload.HEDGE_MAX_CONCURRENT,
   livenessSilenceMs: upload_default.upload.LIVENESS_SILENCE_MS,
   verifyPollBackoffMs: upload_default.upload.VERIFY_POLL_BACKOFF_MS,
   verifyFallbackWaitMs: upload_default.upload.VERIFY_FALLBACK_WAIT_MS,
@@ -9196,7 +9194,6 @@ async function multipartUploadStream(options) {
   let lastRoundRate = null;
   let roomWaiters = [];
   const fullPartPace = [];
-  let hedgesInFlight = 0;
   const partsInFlight = /* @__PURE__ */ new Set();
   let lastSocketActivityAt = performance.now();
   let socketActivityObservable = false;
@@ -9241,10 +9238,10 @@ async function multipartUploadStream(options) {
     roundBytes = 0;
     roundDeliveries = 0;
   }
-  function hedgeDue(item, lastLaunchAt, ownDuplicates) {
+  function hedgeDue(item, lastLaunchAt) {
     const inFlightMs = performance.now() - lastLaunchAt;
     if (inFlightMs < policy.hedgeMinInflightMs) return false;
-    const flowsNow = runningParts.size + hedgesInFlight - ownDuplicates;
+    const flowsNow = runningParts.size;
     const peers = fullPartPace.filter((p) => p.flows >= flowsNow).map((p) => p.rate);
     if (peers.length === 0) return false;
     peers.sort((a, b) => a - b);
@@ -9366,135 +9363,80 @@ async function multipartUploadStream(options) {
   }
   async function hedgedPut(item, presignedUrl) {
     const t0 = performance.now();
-    let controllers = [];
-    const detachFns = [];
     let hedgeTicker = null;
     let hedgeCount = 0;
-    let liveHedges = 0;
-    let currentHedge = null;
     let lastLaunchAt = t0;
-    let generation = 0;
-    const unsentByCopy = /* @__PURE__ */ new Map();
-    let reconnect = () => {
-    };
-    const launchCopy = async (isHedge) => {
-      const ctl = new AbortController();
-      controllers.push(ctl);
-      if (isHedge) currentHedge = ctl;
-      unsentByCopy.set(ctl, true);
-      lastSocketActivityAt = performance.now();
-      if (runSignal) {
-        if (runSignal.aborted) {
-          ctl.abort();
-        } else {
-          const onAbort = () => ctl.abort();
-          runSignal.addEventListener("abort", onAbort, { once: true });
-          detachFns.push(() => runSignal.removeEventListener("abort", onAbort));
-        }
-      }
-      try {
-        const outcome = await transportPut(
-          item.ciphertext,
-          item.contentMd5,
-          item.partNumber,
-          presignedUrl,
-          ctl.signal,
-          {
-            onSocketActivity: (loaded, total) => {
-              lastSocketActivityAt = performance.now();
-              unsentByCopy.set(ctl, loaded < total);
-            },
-            onDeadline: () => reconnect("copy deadline")
-          }
-        );
-        return validatePutOutcome(item.partNumber, outcome);
-      } finally {
-        unsentByCopy.delete(ctl);
-      }
+    let current = null;
+    let replace = () => {
     };
     const inFlight = {
-      reconnect: (why) => reconnect(why),
-      hasUnsentBytes: () => [...unsentByCopy.values()].some(Boolean)
+      reconnect: (why) => replace(why, false),
+      hasUnsentBytes: () => current?.unsent ?? false
     };
     partsInFlight.add(inFlight);
     try {
       const etag = await new Promise((resolve5, reject) => {
-        let pending = 0;
         let settled = false;
-        const run = (label) => {
-          const born = generation;
-          pending++;
-          launchCopy(label === "hedge").then((confirmedEtag) => {
-            if (settled) return;
-            settled = true;
-            if (label === "hedge") log3.debug(`hedge won part=${item.partNumber}`);
-            resolve5(confirmedEtag);
-          }).catch((err2) => {
-            if (settled || born !== generation) return;
-            pending--;
-            const failure = toUploadError(err2, `Failed to upload part ${item.partNumber}`);
-            if (label === "hedge") {
-              liveHedges--;
-              hedgesInFlight--;
-              currentHedge = null;
-              if (failure.code !== "ABORTED") hedgeCount--;
-            }
-            if (failure.code === "ABORTED" && signal?.aborted) {
-              settled = true;
-              reject(failure);
-              return;
-            }
-            if (pending === 0) {
-              if (hedgeTicker !== null) {
-                clearInterval(hedgeTicker);
-                hedgeTicker = null;
+        const settle = (outcome) => {
+          if (settled) return;
+          settled = true;
+          outcome();
+        };
+        const launch = () => {
+          const ctl = new AbortController();
+          const onUploadEnd = () => ctl.abort();
+          if (runSignal?.aborted) ctl.abort();
+          else runSignal?.addEventListener("abort", onUploadEnd, { once: true });
+          const copy = { ctl, unsent: true, ended: Promise.resolve() };
+          current = copy;
+          lastLaunchAt = performance.now();
+          lastSocketActivityAt = lastLaunchAt;
+          copy.ended = transportPut(item.ciphertext, item.contentMd5, item.partNumber, presignedUrl, ctl.signal, {
+            onSocketActivity: (loaded, total) => {
+              lastSocketActivityAt = performance.now();
+              copy.unsent = loaded < total;
+            },
+            onDeadline: () => replace("copy deadline", false)
+          }).then(
+            (outcome) => {
+              if (current !== copy) return;
+              try {
+                const confirmed = validatePutOutcome(item.partNumber, outcome);
+                settle(() => resolve5(confirmed));
+              } catch (err2) {
+                settle(() => reject(err2));
               }
-              settled = true;
-              reject(failure);
+            },
+            (err2) => {
+              if (current === copy) settle(() => reject(toUploadError(err2, `Failed to upload part ${item.partNumber}`)));
             }
+          ).finally(() => {
+            copy.unsent = false;
+            runSignal?.removeEventListener("abort", onUploadEnd);
           });
         };
-        reconnect = (why) => {
-          if (settled || signal?.aborted) return;
-          generation++;
-          pending = 0;
-          hedgesInFlight -= liveHedges;
-          liveHedges = 0;
-          hedgeCount = 0;
-          currentHedge = null;
-          const stale = controllers;
-          controllers = [];
-          for (const ctl of stale) ctl.abort();
-          lastLaunchAt = performance.now();
-          log3.debug(`reconnect part=${item.partNumber} (${why})`);
-          run("primary");
+        replace = (why, spendsTicket) => {
+          const old = current;
+          if (settled || old === null || signal?.aborted) return;
+          current = null;
+          hedgeCount = spendsTicket ? hedgeCount + 1 : 0;
+          log3.debug(`${spendsTicket ? "replace" : "reconnect"} part=${item.partNumber} (${why})`);
+          old.ctl.abort();
+          void old.ended.then(() => {
+            if (settled) return;
+            if (runSignal?.aborted) {
+              settle(() => reject(new UploadError("Upload aborted", "ABORTED", void 0, item.partNumber)));
+            } else {
+              launch();
+            }
+          });
         };
-        run("primary");
+        launch();
         hedgeTicker = setInterval(() => {
-          if (settled || signal?.aborted) {
-            if (hedgeTicker !== null) {
-              clearInterval(hedgeTicker);
-              hedgeTicker = null;
-            }
-            return;
-          }
+          if (settled || signal?.aborted || current === null) return;
           if (hedgeCount >= HEDGE_MAX_PER_PART) return;
-          if (!hedgeDue(item, lastLaunchAt, liveHedges)) return;
-          if (hedgesInFlight >= policy.hedgeMaxConcurrent) {
-            if (currentHedge !== null) {
-              currentHedge.abort();
-              currentHedge = null;
-            }
-            return;
-          }
-          hedgeCount++;
-          liveHedges++;
-          hedgesInFlight++;
-          lastLaunchAt = performance.now();
-          log3.debug(
-            `hedge launched part=${item.partNumber} copy=${hedgeCount + 1} after ${Math.round(performance.now() - t0)}ms`
-          );
-          run("hedge");
+          if (!hedgeDue(item, lastLaunchAt)) return;
+          replace(`slower than its peers after ${Math.round(performance.now() - t0)}ms`, true);
         }, policy.hedgePollMs);
       });
       const tPut = performance.now();
@@ -9505,17 +9447,15 @@ async function multipartUploadStream(options) {
       clock.delivered();
       lastSocketActivityAt = tPut;
       log3.debug(
-        `part=${item.partNumber}/${totalParts} put=${Math.round(tPut - t0)}ms size=${item.ciphertext.length}${hedgeCount > 0 ? ` hedged\xD7${hedgeCount}` : ""}`
+        `part=${item.partNumber}/${totalParts} put=${Math.round(tPut - t0)}ms size=${item.ciphertext.length}${hedgeCount > 0 ? ` replaced\xD7${hedgeCount}` : ""}`
       );
       report("uploading");
     } finally {
       partsInFlight.delete(inFlight);
-      reconnect = () => {
+      replace = () => {
       };
       if (hedgeTicker !== null) clearInterval(hedgeTicker);
-      hedgesInFlight -= liveHedges;
-      for (const ctl of controllers) ctl.abort();
-      for (const detach of detachFns) detach();
+      current?.ctl.abort();
     }
   }
   const controlFetch = (url, init3, timeoutMs) => policyFetch(url, init3, timeoutMs, runSignal);
@@ -9620,6 +9560,10 @@ async function multipartUploadStream(options) {
     item.round = round;
     item.flowsAtStart = runningParts.size;
     let url = presignedUrlCache.get(item.partNumber);
+    if (!url && presignPrefetchInFlight) {
+      await presignPrefetchInFlight;
+      url = presignedUrlCache.get(item.partNumber);
+    }
     presignedUrlCache.delete(item.partNumber);
     schedulePresignPrefetch(item.partNumber + 1);
     await retrying(
@@ -13844,7 +13788,7 @@ function proFileGetOutputToWire(out) {
 }
 
 // src/server.ts
-var SERVER_VERSION = "0.2.0";
+var SERVER_VERSION = "0.2.2";
 var toolMeta = (name) => {
   const { title, description, annotations } = seal_mcp_v1_default.tools[name];
   return { title, description, annotations };

package/dist/index.d.cts

@@ -218,7 +218,8 @@ interface TransportPolicy {
     /**
      * Parallel part PUTs: where the pool starts, and how wide it may get.
      * Storage speaks HTTP/1.1 only, so every PUT is a connection of its own and
-     * a browser gives a host six: `poolMax` + `hedgeMaxConcurrent` must fit.
+     * a browser gives a host six: `poolMax` must fit. A replacement takes the
+     * connection of the copy it replaces, never a second one (F-263).
      */
     poolStart: number;
     poolMax: number;
@@ -234,13 +235,11 @@ interface TransportPolicy {
     poolShrinkRatio: number;
     /** Encrypted parts that may wait for a slot (bounds memory). */
     partQueueLimit: number;
-    /** Never duplicate a part before it has been in flight this long. */
+    /** Never replace a copy before it has been in flight this long. */
     hedgeMinInflightMs: number;
     /** A part is an outlier when it is this many times slower than its peers' median. */
     hedgeLagFactor: number;
     hedgePollMs: number;
-    /** Duplicate copies in flight across the whole upload, at most. */
-    hedgeMaxConcurrent: number;
     /**
      * No part delivered and no socket of ANY copy taking bytes for this long,
      * while some copy still has bytes to send ⇒ the connections are dead: every

package/dist/index.d.ts

@@ -218,7 +218,8 @@ interface TransportPolicy {
     /**
      * Parallel part PUTs: where the pool starts, and how wide it may get.
      * Storage speaks HTTP/1.1 only, so every PUT is a connection of its own and
-     * a browser gives a host six: `poolMax` + `hedgeMaxConcurrent` must fit.
+     * a browser gives a host six: `poolMax` must fit. A replacement takes the
+     * connection of the copy it replaces, never a second one (F-263).
      */
     poolStart: number;
     poolMax: number;
@@ -234,13 +235,11 @@ interface TransportPolicy {
     poolShrinkRatio: number;
     /** Encrypted parts that may wait for a slot (bounds memory). */
     partQueueLimit: number;
-    /** Never duplicate a part before it has been in flight this long. */
+    /** Never replace a copy before it has been in flight this long. */
     hedgeMinInflightMs: number;
     /** A part is an outlier when it is this many times slower than its peers' median. */
     hedgeLagFactor: number;
     hedgePollMs: number;
-    /** Duplicate copies in flight across the whole upload, at most. */
-    hedgeMaxConcurrent: number;
     /**
      * No part delivered and no socket of ANY copy taking bytes for this long,
      * while some copy still has bytes to send ⇒ the connections are dead: every

package/dist/index.js

@@ -7507,7 +7507,6 @@ var upload_default = {
     HEDGE_MIN_INFLIGHT_MS: 3e3,
     HEDGE_LAG_FACTOR: 3,
     HEDGE_POLL_MS: 1e3,
-    HEDGE_MAX_CONCURRENT: 1,
     LIVENESS_SILENCE_MS: 3e4,
     RETRY_BACKOFF_MS: [1e3, 3e3, 7e3, 15e3, 3e4],
     RETRY_JITTER_RATIO: 0.2,
@@ -8802,7 +8801,6 @@ var DEFAULT_TRANSPORT_POLICY = {
   hedgeMinInflightMs: upload_default.upload.HEDGE_MIN_INFLIGHT_MS,
   hedgeLagFactor: upload_default.upload.HEDGE_LAG_FACTOR,
   hedgePollMs: upload_default.upload.HEDGE_POLL_MS,
-  hedgeMaxConcurrent: upload_default.upload.HEDGE_MAX_CONCURRENT,
   livenessSilenceMs: upload_default.upload.LIVENESS_SILENCE_MS,
   verifyPollBackoffMs: upload_default.upload.VERIFY_POLL_BACKOFF_MS,
   verifyFallbackWaitMs: upload_default.upload.VERIFY_FALLBACK_WAIT_MS,
@@ -9124,7 +9122,6 @@ async function multipartUploadStream(options) {
   let lastRoundRate = null;
   let roomWaiters = [];
   const fullPartPace = [];
-  let hedgesInFlight = 0;
   const partsInFlight = /* @__PURE__ */ new Set();
   let lastSocketActivityAt = performance.now();
   let socketActivityObservable = false;
@@ -9169,10 +9166,10 @@ async function multipartUploadStream(options) {
     roundBytes = 0;
     roundDeliveries = 0;
   }
-  function hedgeDue(item, lastLaunchAt, ownDuplicates) {
+  function hedgeDue(item, lastLaunchAt) {
     const inFlightMs = performance.now() - lastLaunchAt;
     if (inFlightMs < policy.hedgeMinInflightMs) return false;
-    const flowsNow = runningParts.size + hedgesInFlight - ownDuplicates;
+    const flowsNow = runningParts.size;
     const peers = fullPartPace.filter((p) => p.flows >= flowsNow).map((p) => p.rate);
     if (peers.length === 0) return false;
     peers.sort((a, b) => a - b);
@@ -9294,135 +9291,80 @@ async function multipartUploadStream(options) {
   }
   async function hedgedPut(item, presignedUrl) {
     const t0 = performance.now();
-    let controllers = [];
-    const detachFns = [];
     let hedgeTicker = null;
     let hedgeCount = 0;
-    let liveHedges = 0;
-    let currentHedge = null;
     let lastLaunchAt = t0;
-    let generation = 0;
-    const unsentByCopy = /* @__PURE__ */ new Map();
-    let reconnect = () => {
-    };
-    const launchCopy = async (isHedge) => {
-      const ctl = new AbortController();
-      controllers.push(ctl);
-      if (isHedge) currentHedge = ctl;
-      unsentByCopy.set(ctl, true);
-      lastSocketActivityAt = performance.now();
-      if (runSignal) {
-        if (runSignal.aborted) {
-          ctl.abort();
-        } else {
-          const onAbort = () => ctl.abort();
-          runSignal.addEventListener("abort", onAbort, { once: true });
-          detachFns.push(() => runSignal.removeEventListener("abort", onAbort));
-        }
-      }
-      try {
-        const outcome = await transportPut(
-          item.ciphertext,
-          item.contentMd5,
-          item.partNumber,
-          presignedUrl,
-          ctl.signal,
-          {
-            onSocketActivity: (loaded, total) => {
-              lastSocketActivityAt = performance.now();
-              unsentByCopy.set(ctl, loaded < total);
-            },
-            onDeadline: () => reconnect("copy deadline")
-          }
-        );
-        return validatePutOutcome(item.partNumber, outcome);
-      } finally {
-        unsentByCopy.delete(ctl);
-      }
+    let current = null;
+    let replace = () => {
     };
     const inFlight = {
-      reconnect: (why) => reconnect(why),
-      hasUnsentBytes: () => [...unsentByCopy.values()].some(Boolean)
+      reconnect: (why) => replace(why, false),
+      hasUnsentBytes: () => current?.unsent ?? false
     };
     partsInFlight.add(inFlight);
     try {
       const etag = await new Promise((resolve5, reject) => {
-        let pending = 0;
         let settled = false;
-        const run = (label) => {
-          const born = generation;
-          pending++;
-          launchCopy(label === "hedge").then((confirmedEtag) => {
-            if (settled) return;
-            settled = true;
-            if (label === "hedge") log3.debug(`hedge won part=${item.partNumber}`);
-            resolve5(confirmedEtag);
-          }).catch((err2) => {
-            if (settled || born !== generation) return;
-            pending--;
-            const failure = toUploadError(err2, `Failed to upload part ${item.partNumber}`);
-            if (label === "hedge") {
-              liveHedges--;
-              hedgesInFlight--;
-              currentHedge = null;
-              if (failure.code !== "ABORTED") hedgeCount--;
-            }
-            if (failure.code === "ABORTED" && signal?.aborted) {
-              settled = true;
-              reject(failure);
-              return;
-            }
-            if (pending === 0) {
-              if (hedgeTicker !== null) {
-                clearInterval(hedgeTicker);
-                hedgeTicker = null;
+        const settle = (outcome) => {
+          if (settled) return;
+          settled = true;
+          outcome();
+        };
+        const launch = () => {
+          const ctl = new AbortController();
+          const onUploadEnd = () => ctl.abort();
+          if (runSignal?.aborted) ctl.abort();
+          else runSignal?.addEventListener("abort", onUploadEnd, { once: true });
+          const copy = { ctl, unsent: true, ended: Promise.resolve() };
+          current = copy;
+          lastLaunchAt = performance.now();
+          lastSocketActivityAt = lastLaunchAt;
+          copy.ended = transportPut(item.ciphertext, item.contentMd5, item.partNumber, presignedUrl, ctl.signal, {
+            onSocketActivity: (loaded, total) => {
+              lastSocketActivityAt = performance.now();
+              copy.unsent = loaded < total;
+            },
+            onDeadline: () => replace("copy deadline", false)
+          }).then(
+            (outcome) => {
+              if (current !== copy) return;
+              try {
+                const confirmed = validatePutOutcome(item.partNumber, outcome);
+                settle(() => resolve5(confirmed));
+              } catch (err2) {
+                settle(() => reject(err2));
               }
-              settled = true;
-              reject(failure);
+            },
+            (err2) => {
+              if (current === copy) settle(() => reject(toUploadError(err2, `Failed to upload part ${item.partNumber}`)));
             }
+          ).finally(() => {
+            copy.unsent = false;
+            runSignal?.removeEventListener("abort", onUploadEnd);
           });
         };
-        reconnect = (why) => {
-          if (settled || signal?.aborted) return;
-          generation++;
-          pending = 0;
-          hedgesInFlight -= liveHedges;
-          liveHedges = 0;
-          hedgeCount = 0;
-          currentHedge = null;
-          const stale = controllers;
-          controllers = [];
-          for (const ctl of stale) ctl.abort();
-          lastLaunchAt = performance.now();
-          log3.debug(`reconnect part=${item.partNumber} (${why})`);
-          run("primary");
+        replace = (why, spendsTicket) => {
+          const old = current;
+          if (settled || old === null || signal?.aborted) return;
+          current = null;
+          hedgeCount = spendsTicket ? hedgeCount + 1 : 0;
+          log3.debug(`${spendsTicket ? "replace" : "reconnect"} part=${item.partNumber} (${why})`);
+          old.ctl.abort();
+          void old.ended.then(() => {
+            if (settled) return;
+            if (runSignal?.aborted) {
+              settle(() => reject(new UploadError("Upload aborted", "ABORTED", void 0, item.partNumber)));
+            } else {
+              launch();
+            }
+          });
         };
-        run("primary");
+        launch();
         hedgeTicker = setInterval(() => {
-          if (settled || signal?.aborted) {
-            if (hedgeTicker !== null) {
-              clearInterval(hedgeTicker);
-              hedgeTicker = null;
-            }
-            return;
-          }
+          if (settled || signal?.aborted || current === null) return;
           if (hedgeCount >= HEDGE_MAX_PER_PART) return;
-          if (!hedgeDue(item, lastLaunchAt, liveHedges)) return;
-          if (hedgesInFlight >= policy.hedgeMaxConcurrent) {
-            if (currentHedge !== null) {
-              currentHedge.abort();
-              currentHedge = null;
-            }
-            return;
-          }
-          hedgeCount++;
-          liveHedges++;
-          hedgesInFlight++;
-          lastLaunchAt = performance.now();
-          log3.debug(
-            `hedge launched part=${item.partNumber} copy=${hedgeCount + 1} after ${Math.round(performance.now() - t0)}ms`
-          );
-          run("hedge");
+          if (!hedgeDue(item, lastLaunchAt)) return;
+          replace(`slower than its peers after ${Math.round(performance.now() - t0)}ms`, true);
         }, policy.hedgePollMs);
       });
       const tPut = performance.now();
@@ -9433,17 +9375,15 @@ async function multipartUploadStream(options) {
       clock.delivered();
       lastSocketActivityAt = tPut;
       log3.debug(
-        `part=${item.partNumber}/${totalParts} put=${Math.round(tPut - t0)}ms size=${item.ciphertext.length}${hedgeCount > 0 ? ` hedged\xD7${hedgeCount}` : ""}`
+        `part=${item.partNumber}/${totalParts} put=${Math.round(tPut - t0)}ms size=${item.ciphertext.length}${hedgeCount > 0 ? ` replaced\xD7${hedgeCount}` : ""}`
       );
       report("uploading");
     } finally {
       partsInFlight.delete(inFlight);
-      reconnect = () => {
+      replace = () => {
       };
       if (hedgeTicker !== null) clearInterval(hedgeTicker);
-      hedgesInFlight -= liveHedges;
-      for (const ctl of controllers) ctl.abort();
-      for (const detach of detachFns) detach();
+      current?.ctl.abort();
     }
   }
   const controlFetch = (url, init3, timeoutMs) => policyFetch(url, init3, timeoutMs, runSignal);
@@ -9548,6 +9488,10 @@ async function multipartUploadStream(options) {
     item.round = round;
     item.flowsAtStart = runningParts.size;
     let url = presignedUrlCache.get(item.partNumber);
+    if (!url && presignPrefetchInFlight) {
+      await presignPrefetchInFlight;
+      url = presignedUrlCache.get(item.partNumber);
+    }
     presignedUrlCache.delete(item.partNumber);
     schedulePresignPrefetch(item.partNumber + 1);
     await retrying(
@@ -13772,7 +13716,7 @@ function proFileGetOutputToWire(out) {
 }
 
 // src/server.ts
-var SERVER_VERSION = "0.2.0";
+var SERVER_VERSION = "0.2.2";
 var toolMeta = (name) => {
   const { title, description, annotations } = seal_mcp_v1_default.tools[name];
   return { title, description, annotations };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sealnet-mcp",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "mcpName": "net.seal/mcp",
   "description": "Model Context Protocol server for SEAL — model never holds capability by default (handoff mode); explicit opt-in to forward mode with strict TTL/recipient policy.",
   "type": "module",