sealnet-mcp 0.2.1 → 0.2.3

package/dist/cli.cjs

@@ -2914,7 +2914,6 @@ var upload_default = {
     HEDGE_MIN_INFLIGHT_MS: 3e3,
     HEDGE_LAG_FACTOR: 3,
     HEDGE_POLL_MS: 1e3,
-    HEDGE_MAX_CONCURRENT: 1,
     LIVENESS_SILENCE_MS: 3e4,
     RETRY_BACKOFF_MS: [1e3, 3e3, 7e3, 15e3, 3e4],
     RETRY_JITTER_RATIO: 0.2,
@@ -4209,7 +4208,6 @@ var DEFAULT_TRANSPORT_POLICY = {
   hedgeMinInflightMs: upload_default.upload.HEDGE_MIN_INFLIGHT_MS,
   hedgeLagFactor: upload_default.upload.HEDGE_LAG_FACTOR,
   hedgePollMs: upload_default.upload.HEDGE_POLL_MS,
-  hedgeMaxConcurrent: upload_default.upload.HEDGE_MAX_CONCURRENT,
   livenessSilenceMs: upload_default.upload.LIVENESS_SILENCE_MS,
   verifyPollBackoffMs: upload_default.upload.VERIFY_POLL_BACKOFF_MS,
   verifyFallbackWaitMs: upload_default.upload.VERIFY_FALLBACK_WAIT_MS,
@@ -4531,7 +4529,6 @@ async function multipartUploadStream(options) {
   let lastRoundRate = null;
   let roomWaiters = [];
   const fullPartPace = [];
-  let hedgesInFlight = 0;
   const partsInFlight = /* @__PURE__ */ new Set();
   let lastSocketActivityAt = performance.now();
   let socketActivityObservable = false;
@@ -4576,10 +4573,10 @@ async function multipartUploadStream(options) {
     roundBytes = 0;
     roundDeliveries = 0;
   }
-  function hedgeDue(item, lastLaunchAt, ownDuplicates) {
+  function hedgeDue(item, lastLaunchAt) {
     const inFlightMs = performance.now() - lastLaunchAt;
     if (inFlightMs < policy.hedgeMinInflightMs) return false;
-    const flowsNow = runningParts.size + hedgesInFlight - ownDuplicates;
+    const flowsNow = runningParts.size;
     const peers = fullPartPace.filter((p) => p.flows >= flowsNow).map((p) => p.rate);
     if (peers.length === 0) return false;
     peers.sort((a, b) => a - b);
@@ -4701,135 +4698,80 @@ async function multipartUploadStream(options) {
   }
   async function hedgedPut(item, presignedUrl) {
     const t0 = performance.now();
-    let controllers = [];
-    const detachFns = [];
     let hedgeTicker = null;
     let hedgeCount = 0;
-    let liveHedges = 0;
-    let currentHedge = null;
     let lastLaunchAt = t0;
-    let generation = 0;
-    const unsentByCopy = /* @__PURE__ */ new Map();
-    let reconnect = () => {
-    };
-    const launchCopy = async (isHedge) => {
-      const ctl = new AbortController();
-      controllers.push(ctl);
-      if (isHedge) currentHedge = ctl;
-      unsentByCopy.set(ctl, true);
-      lastSocketActivityAt = performance.now();
-      if (runSignal) {
-        if (runSignal.aborted) {
-          ctl.abort();
-        } else {
-          const onAbort = () => ctl.abort();
-          runSignal.addEventListener("abort", onAbort, { once: true });
-          detachFns.push(() => runSignal.removeEventListener("abort", onAbort));
-        }
-      }
-      try {
-        const outcome = await transportPut(
-          item.ciphertext,
-          item.contentMd5,
-          item.partNumber,
-          presignedUrl,
-          ctl.signal,
-          {
-            onSocketActivity: (loaded, total) => {
-              lastSocketActivityAt = performance.now();
-              unsentByCopy.set(ctl, loaded < total);
-            },
-            onDeadline: () => reconnect("copy deadline")
-          }
-        );
-        return validatePutOutcome(item.partNumber, outcome);
-      } finally {
-        unsentByCopy.delete(ctl);
-      }
+    let current = null;
+    let replace = () => {
     };
     const inFlight = {
-      reconnect: (why) => reconnect(why),
-      hasUnsentBytes: () => [...unsentByCopy.values()].some(Boolean)
+      reconnect: (why) => replace(why, false),
+      hasUnsentBytes: () => current?.unsent ?? false
     };
     partsInFlight.add(inFlight);
     try {
       const etag = await new Promise((resolve5, reject) => {
-        let pending = 0;
         let settled = false;
-        const run = (label) => {
-          const born = generation;
-          pending++;
-          launchCopy(label === "hedge").then((confirmedEtag) => {
-            if (settled) return;
-            settled = true;
-            if (label === "hedge") log3.debug(`hedge won part=${item.partNumber}`);
-            resolve5(confirmedEtag);
-          }).catch((err2) => {
-            if (settled || born !== generation) return;
-            pending--;
-            const failure = toUploadError(err2, `Failed to upload part ${item.partNumber}`);
-            if (label === "hedge") {
-              liveHedges--;
-              hedgesInFlight--;
-              currentHedge = null;
-              if (failure.code !== "ABORTED") hedgeCount--;
-            }
-            if (failure.code === "ABORTED" && signal?.aborted) {
-              settled = true;
-              reject(failure);
-              return;
-            }
-            if (pending === 0) {
-              if (hedgeTicker !== null) {
-                clearInterval(hedgeTicker);
-                hedgeTicker = null;
+        const settle = (outcome) => {
+          if (settled) return;
+          settled = true;
+          outcome();
+        };
+        const launch = () => {
+          const ctl = new AbortController();
+          const onUploadEnd = () => ctl.abort();
+          if (runSignal?.aborted) ctl.abort();
+          else runSignal?.addEventListener("abort", onUploadEnd, { once: true });
+          const copy = { ctl, unsent: true, ended: Promise.resolve() };
+          current = copy;
+          lastLaunchAt = performance.now();
+          lastSocketActivityAt = lastLaunchAt;
+          copy.ended = transportPut(item.ciphertext, item.contentMd5, item.partNumber, presignedUrl, ctl.signal, {
+            onSocketActivity: (loaded, total) => {
+              lastSocketActivityAt = performance.now();
+              copy.unsent = loaded < total;
+            },
+            onDeadline: () => replace("copy deadline", false)
+          }).then(
+            (outcome) => {
+              if (current !== copy) return;
+              try {
+                const confirmed = validatePutOutcome(item.partNumber, outcome);
+                settle(() => resolve5(confirmed));
+              } catch (err2) {
+                settle(() => reject(err2));
               }
-              settled = true;
-              reject(failure);
+            },
+            (err2) => {
+              if (current === copy) settle(() => reject(toUploadError(err2, `Failed to upload part ${item.partNumber}`)));
             }
+          ).finally(() => {
+            copy.unsent = false;
+            runSignal?.removeEventListener("abort", onUploadEnd);
           });
         };
-        reconnect = (why) => {
-          if (settled || signal?.aborted) return;
-          generation++;
-          pending = 0;
-          hedgesInFlight -= liveHedges;
-          liveHedges = 0;
-          hedgeCount = 0;
-          currentHedge = null;
-          const stale = controllers;
-          controllers = [];
-          for (const ctl of stale) ctl.abort();
-          lastLaunchAt = performance.now();
-          log3.debug(`reconnect part=${item.partNumber} (${why})`);
-          run("primary");
+        replace = (why, spendsTicket) => {
+          const old = current;
+          if (settled || old === null || signal?.aborted) return;
+          current = null;
+          hedgeCount = spendsTicket ? hedgeCount + 1 : 0;
+          log3.debug(`${spendsTicket ? "replace" : "reconnect"} part=${item.partNumber} (${why})`);
+          old.ctl.abort();
+          void old.ended.then(() => {
+            if (settled) return;
+            if (runSignal?.aborted) {
+              settle(() => reject(new UploadError("Upload aborted", "ABORTED", void 0, item.partNumber)));
+            } else {
+              launch();
+            }
+          });
         };
-        run("primary");
+        launch();
         hedgeTicker = setInterval(() => {
-          if (settled || signal?.aborted) {
-            if (hedgeTicker !== null) {
-              clearInterval(hedgeTicker);
-              hedgeTicker = null;
-            }
-            return;
-          }
+          if (settled || signal?.aborted || current === null) return;
           if (hedgeCount >= HEDGE_MAX_PER_PART) return;
-          if (!hedgeDue(item, lastLaunchAt, liveHedges)) return;
-          if (hedgesInFlight >= policy.hedgeMaxConcurrent) {
-            if (currentHedge !== null) {
-              currentHedge.abort();
-              currentHedge = null;
-            }
-            return;
-          }
-          hedgeCount++;
-          liveHedges++;
-          hedgesInFlight++;
-          lastLaunchAt = performance.now();
-          log3.debug(
-            `hedge launched part=${item.partNumber} copy=${hedgeCount + 1} after ${Math.round(performance.now() - t0)}ms`
-          );
-          run("hedge");
+          if (!hedgeDue(item, lastLaunchAt)) return;
+          replace(`slower than its peers after ${Math.round(performance.now() - t0)}ms`, true);
         }, policy.hedgePollMs);
       });
       const tPut = performance.now();
@@ -4840,17 +4782,15 @@ async function multipartUploadStream(options) {
       clock.delivered();
       lastSocketActivityAt = tPut;
       log3.debug(
-        `part=${item.partNumber}/${totalParts} put=${Math.round(tPut - t0)}ms size=${item.ciphertext.length}${hedgeCount > 0 ? ` hedged\xD7${hedgeCount}` : ""}`
+        `part=${item.partNumber}/${totalParts} put=${Math.round(tPut - t0)}ms size=${item.ciphertext.length}${hedgeCount > 0 ? ` replaced\xD7${hedgeCount}` : ""}`
       );
       report("uploading");
     } finally {
       partsInFlight.delete(inFlight);
-      reconnect = () => {
+      replace = () => {
       };
       if (hedgeTicker !== null) clearInterval(hedgeTicker);
-      hedgesInFlight -= liveHedges;
-      for (const ctl of controllers) ctl.abort();
-      for (const detach of detachFns) detach();
+      current?.ctl.abort();
     }
   }
   const controlFetch = (url, init3, timeoutMs) => policyFetch(url, init3, timeoutMs, runSignal);
@@ -4955,6 +4895,10 @@ async function multipartUploadStream(options) {
     item.round = round;
     item.flowsAtStart = runningParts.size;
     let url = presignedUrlCache.get(item.partNumber);
+    if (!url && presignPrefetchInFlight) {
+      await presignPrefetchInFlight;
+      url = presignedUrlCache.get(item.partNumber);
+    }
     presignedUrlCache.delete(item.partNumber);
     schedulePresignPrefetch(item.partNumber + 1);
     await retrying(
@@ -11398,6 +11342,10 @@ var seal_mcp_v1_default = {
     server_info: "name `sealnet-mcp` (the npm package and its binary); version = `package.json::version`, injected at build time (tsup `define`), never a source literal. The state directory, the keychain service and the handoff directory keep the name `seal-mcp`: they are where existing state lives.",
     progress: "When a `tools/call` carries `_meta.progressToken`, `seal_share` and `seal_open mode=file` send `notifications/progress` with `progress` = ciphertext bytes done (upload: confirmed by storage) and `total` = ciphertext bytes in all; at most one per second, `progress` strictly increasing, the last one at `progress = total`."
   },
+  server_instructions: {
+    text: "SEAL moves files and secrets between people and agents without their content entering this conversation. When someone wants a file, folder or secret sent to them, to another machine or to another agent, call seal_share with its path and do not open, print or Read it first. When you need an API key, password, file or folder from the user, or they offer or ask how to give you one, call seal_request right away instead of explaining other ways or asking them to paste or upload it. Open a SEAL link someone gave you with seal_open (mode=file for secrets and large files).",
+    note: "The `instructions` of the `initialize` result (SPEC-AGENTS \xA78.1). Hosts that defer MCP tools behind a tool search (Claude Code) show the model only tool names until it searches, but put these instructions into the system prompt: this is the one text a model reads before it decides to look for a tool, or reads the file it was asked to send."
+  },
   tools: {
     seal_share: {
       title: "Share a file via SEAL",
@@ -13989,7 +13937,7 @@ function proFileGetOutputToWire(out) {
 }
 
 // src/server.ts
-var SERVER_VERSION = "0.2.1";
+var SERVER_VERSION = "0.2.3";
 var toolMeta = (name) => {
   const { title, description, annotations } = seal_mcp_v1_default.tools[name];
   return { title, description, annotations };
@@ -14057,7 +14005,7 @@ async function createServer(options) {
   };
   const mcp = new import_mcp.McpServer(
     { name: "sealnet-mcp", version: SERVER_VERSION },
-    { capabilities: { tools: {} } }
+    { capabilities: { tools: {} }, instructions: seal_mcp_v1_default.server_instructions.text }
   );
   const disableClipboard = process.env.SEAL_MCP_DISABLE_CLIPBOARD === "1";
   mcp.registerTool(

package/dist/cli.js

@@ -2886,7 +2886,6 @@ var upload_default = {
     HEDGE_MIN_INFLIGHT_MS: 3e3,
     HEDGE_LAG_FACTOR: 3,
     HEDGE_POLL_MS: 1e3,
-    HEDGE_MAX_CONCURRENT: 1,
     LIVENESS_SILENCE_MS: 3e4,
     RETRY_BACKOFF_MS: [1e3, 3e3, 7e3, 15e3, 3e4],
     RETRY_JITTER_RATIO: 0.2,
@@ -4181,7 +4180,6 @@ var DEFAULT_TRANSPORT_POLICY = {
   hedgeMinInflightMs: upload_default.upload.HEDGE_MIN_INFLIGHT_MS,
   hedgeLagFactor: upload_default.upload.HEDGE_LAG_FACTOR,
   hedgePollMs: upload_default.upload.HEDGE_POLL_MS,
-  hedgeMaxConcurrent: upload_default.upload.HEDGE_MAX_CONCURRENT,
   livenessSilenceMs: upload_default.upload.LIVENESS_SILENCE_MS,
   verifyPollBackoffMs: upload_default.upload.VERIFY_POLL_BACKOFF_MS,
   verifyFallbackWaitMs: upload_default.upload.VERIFY_FALLBACK_WAIT_MS,
@@ -4503,7 +4501,6 @@ async function multipartUploadStream(options) {
   let lastRoundRate = null;
   let roomWaiters = [];
   const fullPartPace = [];
-  let hedgesInFlight = 0;
   const partsInFlight = /* @__PURE__ */ new Set();
   let lastSocketActivityAt = performance.now();
   let socketActivityObservable = false;
@@ -4548,10 +4545,10 @@ async function multipartUploadStream(options) {
     roundBytes = 0;
     roundDeliveries = 0;
   }
-  function hedgeDue(item, lastLaunchAt, ownDuplicates) {
+  function hedgeDue(item, lastLaunchAt) {
     const inFlightMs = performance.now() - lastLaunchAt;
     if (inFlightMs < policy.hedgeMinInflightMs) return false;
-    const flowsNow = runningParts.size + hedgesInFlight - ownDuplicates;
+    const flowsNow = runningParts.size;
     const peers = fullPartPace.filter((p) => p.flows >= flowsNow).map((p) => p.rate);
     if (peers.length === 0) return false;
     peers.sort((a, b) => a - b);
@@ -4673,135 +4670,80 @@ async function multipartUploadStream(options) {
   }
   async function hedgedPut(item, presignedUrl) {
     const t0 = performance.now();
-    let controllers = [];
-    const detachFns = [];
     let hedgeTicker = null;
     let hedgeCount = 0;
-    let liveHedges = 0;
-    let currentHedge = null;
     let lastLaunchAt = t0;
-    let generation = 0;
-    const unsentByCopy = /* @__PURE__ */ new Map();
-    let reconnect = () => {
-    };
-    const launchCopy = async (isHedge) => {
-      const ctl = new AbortController();
-      controllers.push(ctl);
-      if (isHedge) currentHedge = ctl;
-      unsentByCopy.set(ctl, true);
-      lastSocketActivityAt = performance.now();
-      if (runSignal) {
-        if (runSignal.aborted) {
-          ctl.abort();
-        } else {
-          const onAbort = () => ctl.abort();
-          runSignal.addEventListener("abort", onAbort, { once: true });
-          detachFns.push(() => runSignal.removeEventListener("abort", onAbort));
-        }
-      }
-      try {
-        const outcome = await transportPut(
-          item.ciphertext,
-          item.contentMd5,
-          item.partNumber,
-          presignedUrl,
-          ctl.signal,
-          {
-            onSocketActivity: (loaded, total) => {
-              lastSocketActivityAt = performance.now();
-              unsentByCopy.set(ctl, loaded < total);
-            },
-            onDeadline: () => reconnect("copy deadline")
-          }
-        );
-        return validatePutOutcome(item.partNumber, outcome);
-      } finally {
-        unsentByCopy.delete(ctl);
-      }
+    let current = null;
+    let replace = () => {
     };
     const inFlight = {
-      reconnect: (why) => reconnect(why),
-      hasUnsentBytes: () => [...unsentByCopy.values()].some(Boolean)
+      reconnect: (why) => replace(why, false),
+      hasUnsentBytes: () => current?.unsent ?? false
     };
     partsInFlight.add(inFlight);
     try {
       const etag = await new Promise((resolve5, reject) => {
-        let pending = 0;
         let settled = false;
-        const run = (label) => {
-          const born = generation;
-          pending++;
-          launchCopy(label === "hedge").then((confirmedEtag) => {
-            if (settled) return;
-            settled = true;
-            if (label === "hedge") log3.debug(`hedge won part=${item.partNumber}`);
-            resolve5(confirmedEtag);
-          }).catch((err2) => {
-            if (settled || born !== generation) return;
-            pending--;
-            const failure = toUploadError(err2, `Failed to upload part ${item.partNumber}`);
-            if (label === "hedge") {
-              liveHedges--;
-              hedgesInFlight--;
-              currentHedge = null;
-              if (failure.code !== "ABORTED") hedgeCount--;
-            }
-            if (failure.code === "ABORTED" && signal?.aborted) {
-              settled = true;
-              reject(failure);
-              return;
-            }
-            if (pending === 0) {
-              if (hedgeTicker !== null) {
-                clearInterval(hedgeTicker);
-                hedgeTicker = null;
+        const settle = (outcome) => {
+          if (settled) return;
+          settled = true;
+          outcome();
+        };
+        const launch = () => {
+          const ctl = new AbortController();
+          const onUploadEnd = () => ctl.abort();
+          if (runSignal?.aborted) ctl.abort();
+          else runSignal?.addEventListener("abort", onUploadEnd, { once: true });
+          const copy = { ctl, unsent: true, ended: Promise.resolve() };
+          current = copy;
+          lastLaunchAt = performance.now();
+          lastSocketActivityAt = lastLaunchAt;
+          copy.ended = transportPut(item.ciphertext, item.contentMd5, item.partNumber, presignedUrl, ctl.signal, {
+            onSocketActivity: (loaded, total) => {
+              lastSocketActivityAt = performance.now();
+              copy.unsent = loaded < total;
+            },
+            onDeadline: () => replace("copy deadline", false)
+          }).then(
+            (outcome) => {
+              if (current !== copy) return;
+              try {
+                const confirmed = validatePutOutcome(item.partNumber, outcome);
+                settle(() => resolve5(confirmed));
+              } catch (err2) {
+                settle(() => reject(err2));
               }
-              settled = true;
-              reject(failure);
+            },
+            (err2) => {
+              if (current === copy) settle(() => reject(toUploadError(err2, `Failed to upload part ${item.partNumber}`)));
             }
+          ).finally(() => {
+            copy.unsent = false;
+            runSignal?.removeEventListener("abort", onUploadEnd);
           });
         };
-        reconnect = (why) => {
-          if (settled || signal?.aborted) return;
-          generation++;
-          pending = 0;
-          hedgesInFlight -= liveHedges;
-          liveHedges = 0;
-          hedgeCount = 0;
-          currentHedge = null;
-          const stale = controllers;
-          controllers = [];
-          for (const ctl of stale) ctl.abort();
-          lastLaunchAt = performance.now();
-          log3.debug(`reconnect part=${item.partNumber} (${why})`);
-          run("primary");
+        replace = (why, spendsTicket) => {
+          const old = current;
+          if (settled || old === null || signal?.aborted) return;
+          current = null;
+          hedgeCount = spendsTicket ? hedgeCount + 1 : 0;
+          log3.debug(`${spendsTicket ? "replace" : "reconnect"} part=${item.partNumber} (${why})`);
+          old.ctl.abort();
+          void old.ended.then(() => {
+            if (settled) return;
+            if (runSignal?.aborted) {
+              settle(() => reject(new UploadError("Upload aborted", "ABORTED", void 0, item.partNumber)));
+            } else {
+              launch();
+            }
+          });
         };
-        run("primary");
+        launch();
         hedgeTicker = setInterval(() => {
-          if (settled || signal?.aborted) {
-            if (hedgeTicker !== null) {
-              clearInterval(hedgeTicker);
-              hedgeTicker = null;
-            }
-            return;
-          }
+          if (settled || signal?.aborted || current === null) return;
           if (hedgeCount >= HEDGE_MAX_PER_PART) return;
-          if (!hedgeDue(item, lastLaunchAt, liveHedges)) return;
-          if (hedgesInFlight >= policy.hedgeMaxConcurrent) {
-            if (currentHedge !== null) {
-              currentHedge.abort();
-              currentHedge = null;
-            }
-            return;
-          }
-          hedgeCount++;
-          liveHedges++;
-          hedgesInFlight++;
-          lastLaunchAt = performance.now();
-          log3.debug(
-            `hedge launched part=${item.partNumber} copy=${hedgeCount + 1} after ${Math.round(performance.now() - t0)}ms`
-          );
-          run("hedge");
+          if (!hedgeDue(item, lastLaunchAt)) return;
+          replace(`slower than its peers after ${Math.round(performance.now() - t0)}ms`, true);
         }, policy.hedgePollMs);
       });
       const tPut = performance.now();
@@ -4812,17 +4754,15 @@ async function multipartUploadStream(options) {
       clock.delivered();
       lastSocketActivityAt = tPut;
       log3.debug(
-        `part=${item.partNumber}/${totalParts} put=${Math.round(tPut - t0)}ms size=${item.ciphertext.length}${hedgeCount > 0 ? ` hedged\xD7${hedgeCount}` : ""}`
+        `part=${item.partNumber}/${totalParts} put=${Math.round(tPut - t0)}ms size=${item.ciphertext.length}${hedgeCount > 0 ? ` replaced\xD7${hedgeCount}` : ""}`
       );
       report("uploading");
     } finally {
       partsInFlight.delete(inFlight);
-      reconnect = () => {
+      replace = () => {
       };
       if (hedgeTicker !== null) clearInterval(hedgeTicker);
-      hedgesInFlight -= liveHedges;
-      for (const ctl of controllers) ctl.abort();
-      for (const detach of detachFns) detach();
+      current?.ctl.abort();
     }
   }
   const controlFetch = (url, init3, timeoutMs) => policyFetch(url, init3, timeoutMs, runSignal);
@@ -4927,6 +4867,10 @@ async function multipartUploadStream(options) {
     item.round = round;
     item.flowsAtStart = runningParts.size;
     let url = presignedUrlCache.get(item.partNumber);
+    if (!url && presignPrefetchInFlight) {
+      await presignPrefetchInFlight;
+      url = presignedUrlCache.get(item.partNumber);
+    }
     presignedUrlCache.delete(item.partNumber);
     schedulePresignPrefetch(item.partNumber + 1);
     await retrying(
@@ -11370,6 +11314,10 @@ var seal_mcp_v1_default = {
     server_info: "name `sealnet-mcp` (the npm package and its binary); version = `package.json::version`, injected at build time (tsup `define`), never a source literal. The state directory, the keychain service and the handoff directory keep the name `seal-mcp`: they are where existing state lives.",
     progress: "When a `tools/call` carries `_meta.progressToken`, `seal_share` and `seal_open mode=file` send `notifications/progress` with `progress` = ciphertext bytes done (upload: confirmed by storage) and `total` = ciphertext bytes in all; at most one per second, `progress` strictly increasing, the last one at `progress = total`."
   },
+  server_instructions: {
+    text: "SEAL moves files and secrets between people and agents without their content entering this conversation. When someone wants a file, folder or secret sent to them, to another machine or to another agent, call seal_share with its path and do not open, print or Read it first. When you need an API key, password, file or folder from the user, or they offer or ask how to give you one, call seal_request right away instead of explaining other ways or asking them to paste or upload it. Open a SEAL link someone gave you with seal_open (mode=file for secrets and large files).",
+    note: "The `instructions` of the `initialize` result (SPEC-AGENTS \xA78.1). Hosts that defer MCP tools behind a tool search (Claude Code) show the model only tool names until it searches, but put these instructions into the system prompt: this is the one text a model reads before it decides to look for a tool, or reads the file it was asked to send."
+  },
   tools: {
     seal_share: {
       title: "Share a file via SEAL",
@@ -13961,7 +13909,7 @@ function proFileGetOutputToWire(out) {
 }
 
 // src/server.ts
-var SERVER_VERSION = "0.2.1";
+var SERVER_VERSION = "0.2.3";
 var toolMeta = (name) => {
   const { title, description, annotations } = seal_mcp_v1_default.tools[name];
   return { title, description, annotations };
@@ -14029,7 +13977,7 @@ async function createServer(options) {
   };
   const mcp = new McpServer(
     { name: "sealnet-mcp", version: SERVER_VERSION },
-    { capabilities: { tools: {} } }
+    { capabilities: { tools: {} }, instructions: seal_mcp_v1_default.server_instructions.text }
   );
   const disableClipboard = process.env.SEAL_MCP_DISABLE_CLIPBOARD === "1";
   mcp.registerTool(

package/dist/index.cjs

@@ -4137,6 +4137,10 @@ var seal_mcp_v1_default = {
     server_info: "name `sealnet-mcp` (the npm package and its binary); version = `package.json::version`, injected at build time (tsup `define`), never a source literal. The state directory, the keychain service and the handoff directory keep the name `seal-mcp`: they are where existing state lives.",
     progress: "When a `tools/call` carries `_meta.progressToken`, `seal_share` and `seal_open mode=file` send `notifications/progress` with `progress` = ciphertext bytes done (upload: confirmed by storage) and `total` = ciphertext bytes in all; at most one per second, `progress` strictly increasing, the last one at `progress = total`."
   },
+  server_instructions: {
+    text: "SEAL moves files and secrets between people and agents without their content entering this conversation. When someone wants a file, folder or secret sent to them, to another machine or to another agent, call seal_share with its path and do not open, print or Read it first. When you need an API key, password, file or folder from the user, or they offer or ask how to give you one, call seal_request right away instead of explaining other ways or asking them to paste or upload it. Open a SEAL link someone gave you with seal_open (mode=file for secrets and large files).",
+    note: "The `instructions` of the `initialize` result (SPEC-AGENTS \xA78.1). Hosts that defer MCP tools behind a tool search (Claude Code) show the model only tool names until it searches, but put these instructions into the system prompt: this is the one text a model reads before it decides to look for a tool, or reads the file it was asked to send."
+  },
   tools: {
     seal_share: {
       title: "Share a file via SEAL",
@@ -7579,7 +7583,6 @@ var upload_default = {
     HEDGE_MIN_INFLIGHT_MS: 3e3,
     HEDGE_LAG_FACTOR: 3,
     HEDGE_POLL_MS: 1e3,
-    HEDGE_MAX_CONCURRENT: 1,
     LIVENESS_SILENCE_MS: 3e4,
     RETRY_BACKOFF_MS: [1e3, 3e3, 7e3, 15e3, 3e4],
     RETRY_JITTER_RATIO: 0.2,
@@ -8874,7 +8877,6 @@ var DEFAULT_TRANSPORT_POLICY = {
   hedgeMinInflightMs: upload_default.upload.HEDGE_MIN_INFLIGHT_MS,
   hedgeLagFactor: upload_default.upload.HEDGE_LAG_FACTOR,
   hedgePollMs: upload_default.upload.HEDGE_POLL_MS,
-  hedgeMaxConcurrent: upload_default.upload.HEDGE_MAX_CONCURRENT,
   livenessSilenceMs: upload_default.upload.LIVENESS_SILENCE_MS,
   verifyPollBackoffMs: upload_default.upload.VERIFY_POLL_BACKOFF_MS,
   verifyFallbackWaitMs: upload_default.upload.VERIFY_FALLBACK_WAIT_MS,
@@ -9196,7 +9198,6 @@ async function multipartUploadStream(options) {
   let lastRoundRate = null;
   let roomWaiters = [];
   const fullPartPace = [];
-  let hedgesInFlight = 0;
   const partsInFlight = /* @__PURE__ */ new Set();
   let lastSocketActivityAt = performance.now();
   let socketActivityObservable = false;
@@ -9241,10 +9242,10 @@ async function multipartUploadStream(options) {
     roundBytes = 0;
     roundDeliveries = 0;
   }
-  function hedgeDue(item, lastLaunchAt, ownDuplicates) {
+  function hedgeDue(item, lastLaunchAt) {
     const inFlightMs = performance.now() - lastLaunchAt;
     if (inFlightMs < policy.hedgeMinInflightMs) return false;
-    const flowsNow = runningParts.size + hedgesInFlight - ownDuplicates;
+    const flowsNow = runningParts.size;
     const peers = fullPartPace.filter((p) => p.flows >= flowsNow).map((p) => p.rate);
     if (peers.length === 0) return false;
     peers.sort((a, b) => a - b);
@@ -9366,135 +9367,80 @@ async function multipartUploadStream(options) {
   }
   async function hedgedPut(item, presignedUrl) {
     const t0 = performance.now();
-    let controllers = [];
-    const detachFns = [];
     let hedgeTicker = null;
     let hedgeCount = 0;
-    let liveHedges = 0;
-    let currentHedge = null;
     let lastLaunchAt = t0;
-    let generation = 0;
-    const unsentByCopy = /* @__PURE__ */ new Map();
-    let reconnect = () => {
-    };
-    const launchCopy = async (isHedge) => {
-      const ctl = new AbortController();
-      controllers.push(ctl);
-      if (isHedge) currentHedge = ctl;
-      unsentByCopy.set(ctl, true);
-      lastSocketActivityAt = performance.now();
-      if (runSignal) {
-        if (runSignal.aborted) {
-          ctl.abort();
-        } else {
-          const onAbort = () => ctl.abort();
-          runSignal.addEventListener("abort", onAbort, { once: true });
-          detachFns.push(() => runSignal.removeEventListener("abort", onAbort));
-        }
-      }
-      try {
-        const outcome = await transportPut(
-          item.ciphertext,
-          item.contentMd5,
-          item.partNumber,
-          presignedUrl,
-          ctl.signal,
-          {
-            onSocketActivity: (loaded, total) => {
-              lastSocketActivityAt = performance.now();
-              unsentByCopy.set(ctl, loaded < total);
-            },
-            onDeadline: () => reconnect("copy deadline")
-          }
-        );
-        return validatePutOutcome(item.partNumber, outcome);
-      } finally {
-        unsentByCopy.delete(ctl);
-      }
+    let current = null;
+    let replace = () => {
     };
     const inFlight = {
-      reconnect: (why) => reconnect(why),
-      hasUnsentBytes: () => [...unsentByCopy.values()].some(Boolean)
+      reconnect: (why) => replace(why, false),
+      hasUnsentBytes: () => current?.unsent ?? false
     };
     partsInFlight.add(inFlight);
     try {
       const etag = await new Promise((resolve5, reject) => {
-        let pending = 0;
         let settled = false;
-        const run = (label) => {
-          const born = generation;
-          pending++;
-          launchCopy(label === "hedge").then((confirmedEtag) => {
-            if (settled) return;
-            settled = true;
-            if (label === "hedge") log3.debug(`hedge won part=${item.partNumber}`);
-            resolve5(confirmedEtag);
-          }).catch((err2) => {
-            if (settled || born !== generation) return;
-            pending--;
-            const failure = toUploadError(err2, `Failed to upload part ${item.partNumber}`);
-            if (label === "hedge") {
-              liveHedges--;
-              hedgesInFlight--;
-              currentHedge = null;
-              if (failure.code !== "ABORTED") hedgeCount--;
-            }
-            if (failure.code === "ABORTED" && signal?.aborted) {
-              settled = true;
-              reject(failure);
-              return;
-            }
-            if (pending === 0) {
-              if (hedgeTicker !== null) {
-                clearInterval(hedgeTicker);
-                hedgeTicker = null;
+        const settle = (outcome) => {
+          if (settled) return;
+          settled = true;
+          outcome();
+        };
+        const launch = () => {
+          const ctl = new AbortController();
+          const onUploadEnd = () => ctl.abort();
+          if (runSignal?.aborted) ctl.abort();
+          else runSignal?.addEventListener("abort", onUploadEnd, { once: true });
+          const copy = { ctl, unsent: true, ended: Promise.resolve() };
+          current = copy;
+          lastLaunchAt = performance.now();
+          lastSocketActivityAt = lastLaunchAt;
+          copy.ended = transportPut(item.ciphertext, item.contentMd5, item.partNumber, presignedUrl, ctl.signal, {
+            onSocketActivity: (loaded, total) => {
+              lastSocketActivityAt = performance.now();
+              copy.unsent = loaded < total;
+            },
+            onDeadline: () => replace("copy deadline", false)
+          }).then(
+            (outcome) => {
+              if (current !== copy) return;
+              try {
+                const confirmed = validatePutOutcome(item.partNumber, outcome);
+                settle(() => resolve5(confirmed));
+              } catch (err2) {
+                settle(() => reject(err2));
               }
-              settled = true;
-              reject(failure);
+            },
+            (err2) => {
+              if (current === copy) settle(() => reject(toUploadError(err2, `Failed to upload part ${item.partNumber}`)));
             }
+          ).finally(() => {
+            copy.unsent = false;
+            runSignal?.removeEventListener("abort", onUploadEnd);
           });
         };
-        reconnect = (why) => {
-          if (settled || signal?.aborted) return;
-          generation++;
-          pending = 0;
-          hedgesInFlight -= liveHedges;
-          liveHedges = 0;
-          hedgeCount = 0;
-          currentHedge = null;
-          const stale = controllers;
-          controllers = [];
-          for (const ctl of stale) ctl.abort();
-          lastLaunchAt = performance.now();
-          log3.debug(`reconnect part=${item.partNumber} (${why})`);
-          run("primary");
+        replace = (why, spendsTicket) => {
+          const old = current;
+          if (settled || old === null || signal?.aborted) return;
+          current = null;
+          hedgeCount = spendsTicket ? hedgeCount + 1 : 0;
+          log3.debug(`${spendsTicket ? "replace" : "reconnect"} part=${item.partNumber} (${why})`);
+          old.ctl.abort();
+          void old.ended.then(() => {
+            if (settled) return;
+            if (runSignal?.aborted) {
+              settle(() => reject(new UploadError("Upload aborted", "ABORTED", void 0, item.partNumber)));
+            } else {
+              launch();
+            }
+          });
         };
-        run("primary");
+        launch();
         hedgeTicker = setInterval(() => {
-          if (settled || signal?.aborted) {
-            if (hedgeTicker !== null) {
-              clearInterval(hedgeTicker);
-              hedgeTicker = null;
-            }
-            return;
-          }
+          if (settled || signal?.aborted || current === null) return;
           if (hedgeCount >= HEDGE_MAX_PER_PART) return;
-          if (!hedgeDue(item, lastLaunchAt, liveHedges)) return;
-          if (hedgesInFlight >= policy.hedgeMaxConcurrent) {
-            if (currentHedge !== null) {
-              currentHedge.abort();
-              currentHedge = null;
-            }
-            return;
-          }
-          hedgeCount++;
-          liveHedges++;
-          hedgesInFlight++;
-          lastLaunchAt = performance.now();
-          log3.debug(
-            `hedge launched part=${item.partNumber} copy=${hedgeCount + 1} after ${Math.round(performance.now() - t0)}ms`
-          );
-          run("hedge");
+          if (!hedgeDue(item, lastLaunchAt)) return;
+          replace(`slower than its peers after ${Math.round(performance.now() - t0)}ms`, true);
         }, policy.hedgePollMs);
       });
       const tPut = performance.now();
@@ -9505,17 +9451,15 @@ async function multipartUploadStream(options) {
       clock.delivered();
       lastSocketActivityAt = tPut;
       log3.debug(
-        `part=${item.partNumber}/${totalParts} put=${Math.round(tPut - t0)}ms size=${item.ciphertext.length}${hedgeCount > 0 ? ` hedged\xD7${hedgeCount}` : ""}`
+        `part=${item.partNumber}/${totalParts} put=${Math.round(tPut - t0)}ms size=${item.ciphertext.length}${hedgeCount > 0 ? ` replaced\xD7${hedgeCount}` : ""}`
       );
       report("uploading");
     } finally {
       partsInFlight.delete(inFlight);
-      reconnect = () => {
+      replace = () => {
       };
       if (hedgeTicker !== null) clearInterval(hedgeTicker);
-      hedgesInFlight -= liveHedges;
-      for (const ctl of controllers) ctl.abort();
-      for (const detach of detachFns) detach();
+      current?.ctl.abort();
     }
   }
   const controlFetch = (url, init3, timeoutMs) => policyFetch(url, init3, timeoutMs, runSignal);
@@ -9620,6 +9564,10 @@ async function multipartUploadStream(options) {
     item.round = round;
     item.flowsAtStart = runningParts.size;
     let url = presignedUrlCache.get(item.partNumber);
+    if (!url && presignPrefetchInFlight) {
+      await presignPrefetchInFlight;
+      url = presignedUrlCache.get(item.partNumber);
+    }
     presignedUrlCache.delete(item.partNumber);
     schedulePresignPrefetch(item.partNumber + 1);
     await retrying(
@@ -13844,7 +13792,7 @@ function proFileGetOutputToWire(out) {
 }
 
 // src/server.ts
-var SERVER_VERSION = "0.2.1";
+var SERVER_VERSION = "0.2.3";
 var toolMeta = (name) => {
   const { title, description, annotations } = seal_mcp_v1_default.tools[name];
   return { title, description, annotations };
@@ -13912,7 +13860,7 @@ async function createServer(options) {
   };
   const mcp = new import_mcp.McpServer(
     { name: "sealnet-mcp", version: SERVER_VERSION },
-    { capabilities: { tools: {} } }
+    { capabilities: { tools: {} }, instructions: seal_mcp_v1_default.server_instructions.text }
   );
   const disableClipboard = process.env.SEAL_MCP_DISABLE_CLIPBOARD === "1";
   mcp.registerTool(

package/dist/index.d.cts

@@ -218,7 +218,8 @@ interface TransportPolicy {
     /**
      * Parallel part PUTs: where the pool starts, and how wide it may get.
      * Storage speaks HTTP/1.1 only, so every PUT is a connection of its own and
-     * a browser gives a host six: `poolMax` + `hedgeMaxConcurrent` must fit.
+     * a browser gives a host six: `poolMax` must fit. A replacement takes the
+     * connection of the copy it replaces, never a second one (F-263).
      */
     poolStart: number;
     poolMax: number;
@@ -234,13 +235,11 @@ interface TransportPolicy {
     poolShrinkRatio: number;
     /** Encrypted parts that may wait for a slot (bounds memory). */
     partQueueLimit: number;
-    /** Never duplicate a part before it has been in flight this long. */
+    /** Never replace a copy before it has been in flight this long. */
     hedgeMinInflightMs: number;
     /** A part is an outlier when it is this many times slower than its peers' median. */
     hedgeLagFactor: number;
     hedgePollMs: number;
-    /** Duplicate copies in flight across the whole upload, at most. */
-    hedgeMaxConcurrent: number;
     /**
      * No part delivered and no socket of ANY copy taking bytes for this long,
      * while some copy still has bytes to send ⇒ the connections are dead: every

package/dist/index.d.ts

@@ -218,7 +218,8 @@ interface TransportPolicy {
     /**
      * Parallel part PUTs: where the pool starts, and how wide it may get.
      * Storage speaks HTTP/1.1 only, so every PUT is a connection of its own and
-     * a browser gives a host six: `poolMax` + `hedgeMaxConcurrent` must fit.
+     * a browser gives a host six: `poolMax` must fit. A replacement takes the
+     * connection of the copy it replaces, never a second one (F-263).
      */
     poolStart: number;
     poolMax: number;
@@ -234,13 +235,11 @@ interface TransportPolicy {
     poolShrinkRatio: number;
     /** Encrypted parts that may wait for a slot (bounds memory). */
     partQueueLimit: number;
-    /** Never duplicate a part before it has been in flight this long. */
+    /** Never replace a copy before it has been in flight this long. */
     hedgeMinInflightMs: number;
     /** A part is an outlier when it is this many times slower than its peers' median. */
     hedgeLagFactor: number;
     hedgePollMs: number;
-    /** Duplicate copies in flight across the whole upload, at most. */
-    hedgeMaxConcurrent: number;
     /**
      * No part delivered and no socket of ANY copy taking bytes for this long,
      * while some copy still has bytes to send ⇒ the connections are dead: every

package/dist/index.js

@@ -4065,6 +4065,10 @@ var seal_mcp_v1_default = {
     server_info: "name `sealnet-mcp` (the npm package and its binary); version = `package.json::version`, injected at build time (tsup `define`), never a source literal. The state directory, the keychain service and the handoff directory keep the name `seal-mcp`: they are where existing state lives.",
     progress: "When a `tools/call` carries `_meta.progressToken`, `seal_share` and `seal_open mode=file` send `notifications/progress` with `progress` = ciphertext bytes done (upload: confirmed by storage) and `total` = ciphertext bytes in all; at most one per second, `progress` strictly increasing, the last one at `progress = total`."
   },
+  server_instructions: {
+    text: "SEAL moves files and secrets between people and agents without their content entering this conversation. When someone wants a file, folder or secret sent to them, to another machine or to another agent, call seal_share with its path and do not open, print or Read it first. When you need an API key, password, file or folder from the user, or they offer or ask how to give you one, call seal_request right away instead of explaining other ways or asking them to paste or upload it. Open a SEAL link someone gave you with seal_open (mode=file for secrets and large files).",
+    note: "The `instructions` of the `initialize` result (SPEC-AGENTS \xA78.1). Hosts that defer MCP tools behind a tool search (Claude Code) show the model only tool names until it searches, but put these instructions into the system prompt: this is the one text a model reads before it decides to look for a tool, or reads the file it was asked to send."
+  },
   tools: {
     seal_share: {
       title: "Share a file via SEAL",
@@ -7507,7 +7511,6 @@ var upload_default = {
     HEDGE_MIN_INFLIGHT_MS: 3e3,
     HEDGE_LAG_FACTOR: 3,
     HEDGE_POLL_MS: 1e3,
-    HEDGE_MAX_CONCURRENT: 1,
     LIVENESS_SILENCE_MS: 3e4,
     RETRY_BACKOFF_MS: [1e3, 3e3, 7e3, 15e3, 3e4],
     RETRY_JITTER_RATIO: 0.2,
@@ -8802,7 +8805,6 @@ var DEFAULT_TRANSPORT_POLICY = {
   hedgeMinInflightMs: upload_default.upload.HEDGE_MIN_INFLIGHT_MS,
   hedgeLagFactor: upload_default.upload.HEDGE_LAG_FACTOR,
   hedgePollMs: upload_default.upload.HEDGE_POLL_MS,
-  hedgeMaxConcurrent: upload_default.upload.HEDGE_MAX_CONCURRENT,
   livenessSilenceMs: upload_default.upload.LIVENESS_SILENCE_MS,
   verifyPollBackoffMs: upload_default.upload.VERIFY_POLL_BACKOFF_MS,
   verifyFallbackWaitMs: upload_default.upload.VERIFY_FALLBACK_WAIT_MS,
@@ -9124,7 +9126,6 @@ async function multipartUploadStream(options) {
   let lastRoundRate = null;
   let roomWaiters = [];
   const fullPartPace = [];
-  let hedgesInFlight = 0;
   const partsInFlight = /* @__PURE__ */ new Set();
   let lastSocketActivityAt = performance.now();
   let socketActivityObservable = false;
@@ -9169,10 +9170,10 @@ async function multipartUploadStream(options) {
     roundBytes = 0;
     roundDeliveries = 0;
   }
-  function hedgeDue(item, lastLaunchAt, ownDuplicates) {
+  function hedgeDue(item, lastLaunchAt) {
     const inFlightMs = performance.now() - lastLaunchAt;
     if (inFlightMs < policy.hedgeMinInflightMs) return false;
-    const flowsNow = runningParts.size + hedgesInFlight - ownDuplicates;
+    const flowsNow = runningParts.size;
     const peers = fullPartPace.filter((p) => p.flows >= flowsNow).map((p) => p.rate);
     if (peers.length === 0) return false;
     peers.sort((a, b) => a - b);
@@ -9294,135 +9295,80 @@ async function multipartUploadStream(options) {
   }
   async function hedgedPut(item, presignedUrl) {
     const t0 = performance.now();
-    let controllers = [];
-    const detachFns = [];
     let hedgeTicker = null;
     let hedgeCount = 0;
-    let liveHedges = 0;
-    let currentHedge = null;
     let lastLaunchAt = t0;
-    let generation = 0;
-    const unsentByCopy = /* @__PURE__ */ new Map();
-    let reconnect = () => {
-    };
-    const launchCopy = async (isHedge) => {
-      const ctl = new AbortController();
-      controllers.push(ctl);
-      if (isHedge) currentHedge = ctl;
-      unsentByCopy.set(ctl, true);
-      lastSocketActivityAt = performance.now();
-      if (runSignal) {
-        if (runSignal.aborted) {
-          ctl.abort();
-        } else {
-          const onAbort = () => ctl.abort();
-          runSignal.addEventListener("abort", onAbort, { once: true });
-          detachFns.push(() => runSignal.removeEventListener("abort", onAbort));
-        }
-      }
-      try {
-        const outcome = await transportPut(
-          item.ciphertext,
-          item.contentMd5,
-          item.partNumber,
-          presignedUrl,
-          ctl.signal,
-          {
-            onSocketActivity: (loaded, total) => {
-              lastSocketActivityAt = performance.now();
-              unsentByCopy.set(ctl, loaded < total);
-            },
-            onDeadline: () => reconnect("copy deadline")
-          }
-        );
-        return validatePutOutcome(item.partNumber, outcome);
-      } finally {
-        unsentByCopy.delete(ctl);
-      }
+    let current = null;
+    let replace = () => {
     };
     const inFlight = {
-      reconnect: (why) => reconnect(why),
-      hasUnsentBytes: () => [...unsentByCopy.values()].some(Boolean)
+      reconnect: (why) => replace(why, false),
+      hasUnsentBytes: () => current?.unsent ?? false
     };
     partsInFlight.add(inFlight);
     try {
       const etag = await new Promise((resolve5, reject) => {
-        let pending = 0;
         let settled = false;
-        const run = (label) => {
-          const born = generation;
-          pending++;
-          launchCopy(label === "hedge").then((confirmedEtag) => {
-            if (settled) return;
-            settled = true;
-            if (label === "hedge") log3.debug(`hedge won part=${item.partNumber}`);
-            resolve5(confirmedEtag);
-          }).catch((err2) => {
-            if (settled || born !== generation) return;
-            pending--;
-            const failure = toUploadError(err2, `Failed to upload part ${item.partNumber}`);
-            if (label === "hedge") {
-              liveHedges--;
-              hedgesInFlight--;
-              currentHedge = null;
-              if (failure.code !== "ABORTED") hedgeCount--;
-            }
-            if (failure.code === "ABORTED" && signal?.aborted) {
-              settled = true;
-              reject(failure);
-              return;
-            }
-            if (pending === 0) {
-              if (hedgeTicker !== null) {
-                clearInterval(hedgeTicker);
-                hedgeTicker = null;
+        const settle = (outcome) => {
+          if (settled) return;
+          settled = true;
+          outcome();
+        };
+        const launch = () => {
+          const ctl = new AbortController();
+          const onUploadEnd = () => ctl.abort();
+          if (runSignal?.aborted) ctl.abort();
+          else runSignal?.addEventListener("abort", onUploadEnd, { once: true });
+          const copy = { ctl, unsent: true, ended: Promise.resolve() };
+          current = copy;
+          lastLaunchAt = performance.now();
+          lastSocketActivityAt = lastLaunchAt;
+          copy.ended = transportPut(item.ciphertext, item.contentMd5, item.partNumber, presignedUrl, ctl.signal, {
+            onSocketActivity: (loaded, total) => {
+              lastSocketActivityAt = performance.now();
+              copy.unsent = loaded < total;
+            },
+            onDeadline: () => replace("copy deadline", false)
+          }).then(
+            (outcome) => {
+              if (current !== copy) return;
+              try {
+                const confirmed = validatePutOutcome(item.partNumber, outcome);
+                settle(() => resolve5(confirmed));
+              } catch (err2) {
+                settle(() => reject(err2));
               }
-              settled = true;
-              reject(failure);
+            },
+            (err2) => {
+              if (current === copy) settle(() => reject(toUploadError(err2, `Failed to upload part ${item.partNumber}`)));
             }
+          ).finally(() => {
+            copy.unsent = false;
+            runSignal?.removeEventListener("abort", onUploadEnd);
           });
         };
-        reconnect = (why) => {
-          if (settled || signal?.aborted) return;
-          generation++;
-          pending = 0;
-          hedgesInFlight -= liveHedges;
-          liveHedges = 0;
-          hedgeCount = 0;
-          currentHedge = null;
-          const stale = controllers;
-          controllers = [];
-          for (const ctl of stale) ctl.abort();
-          lastLaunchAt = performance.now();
-          log3.debug(`reconnect part=${item.partNumber} (${why})`);
-          run("primary");
+        replace = (why, spendsTicket) => {
+          const old = current;
+          if (settled || old === null || signal?.aborted) return;
+          current = null;
+          hedgeCount = spendsTicket ? hedgeCount + 1 : 0;
+          log3.debug(`${spendsTicket ? "replace" : "reconnect"} part=${item.partNumber} (${why})`);
+          old.ctl.abort();
+          void old.ended.then(() => {
+            if (settled) return;
+            if (runSignal?.aborted) {
+              settle(() => reject(new UploadError("Upload aborted", "ABORTED", void 0, item.partNumber)));
+            } else {
+              launch();
+            }
+          });
         };
-        run("primary");
+        launch();
         hedgeTicker = setInterval(() => {
-          if (settled || signal?.aborted) {
-            if (hedgeTicker !== null) {
-              clearInterval(hedgeTicker);
-              hedgeTicker = null;
-            }
-            return;
-          }
+          if (settled || signal?.aborted || current === null) return;
           if (hedgeCount >= HEDGE_MAX_PER_PART) return;
-          if (!hedgeDue(item, lastLaunchAt, liveHedges)) return;
-          if (hedgesInFlight >= policy.hedgeMaxConcurrent) {
-            if (currentHedge !== null) {
-              currentHedge.abort();
-              currentHedge = null;
-            }
-            return;
-          }
-          hedgeCount++;
-          liveHedges++;
-          hedgesInFlight++;
-          lastLaunchAt = performance.now();
-          log3.debug(
-            `hedge launched part=${item.partNumber} copy=${hedgeCount + 1} after ${Math.round(performance.now() - t0)}ms`
-          );
-          run("hedge");
+          if (!hedgeDue(item, lastLaunchAt)) return;
+          replace(`slower than its peers after ${Math.round(performance.now() - t0)}ms`, true);
         }, policy.hedgePollMs);
       });
       const tPut = performance.now();
@@ -9433,17 +9379,15 @@ async function multipartUploadStream(options) {
       clock.delivered();
       lastSocketActivityAt = tPut;
       log3.debug(
-        `part=${item.partNumber}/${totalParts} put=${Math.round(tPut - t0)}ms size=${item.ciphertext.length}${hedgeCount > 0 ? ` hedged\xD7${hedgeCount}` : ""}`
+        `part=${item.partNumber}/${totalParts} put=${Math.round(tPut - t0)}ms size=${item.ciphertext.length}${hedgeCount > 0 ? ` replaced\xD7${hedgeCount}` : ""}`
       );
       report("uploading");
     } finally {
       partsInFlight.delete(inFlight);
-      reconnect = () => {
+      replace = () => {
       };
       if (hedgeTicker !== null) clearInterval(hedgeTicker);
-      hedgesInFlight -= liveHedges;
-      for (const ctl of controllers) ctl.abort();
-      for (const detach of detachFns) detach();
+      current?.ctl.abort();
     }
   }
   const controlFetch = (url, init3, timeoutMs) => policyFetch(url, init3, timeoutMs, runSignal);
@@ -9548,6 +9492,10 @@ async function multipartUploadStream(options) {
     item.round = round;
     item.flowsAtStart = runningParts.size;
     let url = presignedUrlCache.get(item.partNumber);
+    if (!url && presignPrefetchInFlight) {
+      await presignPrefetchInFlight;
+      url = presignedUrlCache.get(item.partNumber);
+    }
     presignedUrlCache.delete(item.partNumber);
     schedulePresignPrefetch(item.partNumber + 1);
     await retrying(
@@ -13772,7 +13720,7 @@ function proFileGetOutputToWire(out) {
 }
 
 // src/server.ts
-var SERVER_VERSION = "0.2.1";
+var SERVER_VERSION = "0.2.3";
 var toolMeta = (name) => {
   const { title, description, annotations } = seal_mcp_v1_default.tools[name];
   return { title, description, annotations };
@@ -13840,7 +13788,7 @@ async function createServer(options) {
   };
   const mcp = new McpServer(
     { name: "sealnet-mcp", version: SERVER_VERSION },
-    { capabilities: { tools: {} } }
+    { capabilities: { tools: {} }, instructions: seal_mcp_v1_default.server_instructions.text }
   );
   const disableClipboard = process.env.SEAL_MCP_DISABLE_CLIPBOARD === "1";
   mcp.registerTool(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sealnet-mcp",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "mcpName": "net.seal/mcp",
   "description": "Model Context Protocol server for SEAL — model never holds capability by default (handoff mode); explicit opt-in to forward mode with strict TTL/recipient policy.",
   "type": "module",