From b0890f71b4fcdde42ba8a8c89ba30d921fbfdbd6 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 10 Aug 2026 10:15:25 +0000
Subject: [PATCH 1/3] Bump ModelContextProtocol and
 ModelContextProtocol.AspNetCore

Bumps ModelContextProtocol from 2.0.0 to 2.1.0
Bumps ModelContextProtocol.AspNetCore from 2.0.0 to 2.1.0

---
updated-dependencies:
- dependency-name: ModelContextProtocol
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
- dependency-name: ModelContextProtocol.AspNetCore
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .../PerformanceMonitor.Darling.Service.csproj | 138 +++++++++---------
 .../PerformanceMonitor.PlanAnalysis.csproj    |  73 ++++-----
 2 files changed, 106 insertions(+), 105 deletions(-)

diff --git a/Darling/PerformanceMonitor.Darling.Service/PerformanceMonitor.Darling.Service.csproj b/Darling/PerformanceMonitor.Darling.Service/PerformanceMonitor.Darling.Service.csproj
index 4937af1b4..5ec5a829e 100644
--- a/Darling/PerformanceMonitor.Darling.Service/PerformanceMonitor.Darling.Service.csproj
+++ b/Darling/PerformanceMonitor.Darling.Service/PerformanceMonitor.Darling.Service.csproj
@@ -1,69 +1,69 @@
-<Project Sdk="Microsoft.NET.Sdk.Worker">
-  <PropertyGroup>
-    <TargetFramework>net10.0</TargetFramework>
-    <Nullable>enable</Nullable>
-    <ImplicitUsings>disable</ImplicitUsings>
-    <RootNamespace>PerformanceMonitor.Darling.Service</RootNamespace>
-    <AssemblyName>PerformanceMonitor.Darling.Service</AssemblyName>
-    <Version>3.4.0</Version>
-    <!-- #2113: <Version> is the ONE hand-set version. AssemblyVersion / FileVersion /
-         InformationalVersion derive from it at build time - the 3.4.0 release bumped only
-         <Version> and shipped binaries still STAMPED 3.3.0.0, because four hand-maintained
-         copies of one fact is a release-day trap. The suffix suppression keeps
-         InformationalVersion a clean semver instead of gaining a +sha under CI SourceLink. -->
-    <IncludeSourceRevisionInInformationalVersion>false</IncludeSourceRevisionInInformationalVersion>
-    <Company>Darling Data, LLC</Company>
-    <Copyright>Copyright © 2026 Darling Data, LLC</Copyright>
-    <EnableNETAnalyzers>true</EnableNETAnalyzers>
-    <AnalysisLevel>latest-recommended</AnalysisLevel>
-    <NoWarn>CA1849;CA2007;CA1508;CA1822;CA1805;CA1510;CA1816;CA1861;CA1845;CA2201;CA1848;CA1852;CA1305;CA1860;CA1707;CA1507;CA1806;CA2254</NoWarn>
-    <WarningsAsErrors>CS4014</WarningsAsErrors>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <PackageReference Include="Microsoft.Extensions.Hosting" Version="10.0.10" />
-    <PackageReference Include="Microsoft.Extensions.Hosting.WindowsServices" Version="10.0.10" />
-    <PackageReference Include="Microsoft.Data.SqlClient" Version="7.0.2" />
-    <PackageReference Include="System.Security.Cryptography.ProtectedData" Version="10.0.10" />
-    <!-- Restrictive ACLs on the DPAPI credential files (the data dir parent, the *.dpapi files, the
-         transient init pwfile). Windows-only, like every credential surface here; the extension
-         methods (GetAccessControl/SetAccessControl/SetOwner) live in this package on a net10.0
-         (non-windows) TFM, which the service keeps so bring-your-own mode still runs cross-platform. -->
-    <PackageReference Include="System.IO.FileSystem.AccessControl" Version="5.0.0" />
-    <!-- AN4: the analysis MCP tools over Streamable HTTP — Lite's exact MCP stack/version.
-         The AspNetCore package brings the Microsoft.AspNetCore.App framework reference
-         (Kestrel/WebApplication) transitively, same as it does for Lite. -->
-    <PackageReference Include="ModelContextProtocol" Version="2.0.0" />
-    <PackageReference Include="ModelContextProtocol.AspNetCore" Version="2.0.0" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <ProjectReference Include="..\..\PerformanceMonitor.Alerting\PerformanceMonitor.Alerting.csproj" />
-    <ProjectReference Include="..\..\PerformanceMonitor.Common\PerformanceMonitor.Common.csproj" />
-    <ProjectReference Include="..\..\PerformanceMonitor.Collectors\PerformanceMonitor.Collectors.csproj" />
-    <!-- AN3: the analysis pipeline (DarlingAnalysisService/PgPlanFetcher). Dependency points
-         service → analysis only; the analysis library never references the service. -->
-    <ProjectReference Include="..\PerformanceMonitor.Darling.Analysis\PerformanceMonitor.Darling.Analysis.csproj" />
-    <!-- The plan-analysis MCP tools run the SHARED ShowPlanParser/PlanAnalyzer and serialize via
-         McpPlanAnalysisFormatter (the same projection both apps' McpPlanTools call). Referenced
-         directly (it also flows transitively through Darling.Analysis) since it is a direct dependency. -->
-    <ProjectReference Include="..\..\PerformanceMonitor.PlanAnalysis\PerformanceMonitor.PlanAnalysis.csproj" />
-    <ProjectReference Include="..\PerformanceMonitor.Darling.Storage\PerformanceMonitor.Darling.Storage.csproj" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <None Include="darling.sample.json" CopyToOutputDirectory="PreserveNewest" />
-    <!-- #1562: the web dashboard's static assets (Builder 3 owns wwwroot/). Copied beside the binary so the
-         web host's content/web root (pinned to AppContext.BaseDirectory) finds them under a Windows service. -->
-    <Content Include="wwwroot\**\*" CopyToOutputDirectory="PreserveNewest" />
-    <!-- The install/uninstall scripts ride the publish output to the ZIP ROOT (beside the exe), so both
-         the release and nightly zips carry them with no packaging-workflow changes - same delivery
-         mechanism as darling.sample.json. -->
-    <None Include="..\tools\install-darling.ps1" Link="install-darling.ps1" CopyToOutputDirectory="PreserveNewest" />
-    <None Include="..\tools\uninstall-darling.ps1" Link="uninstall-darling.ps1" CopyToOutputDirectory="PreserveNewest" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <InternalsVisibleTo Include="Darling.Tests" />
-  </ItemGroup>
-</Project>
+<Project Sdk="Microsoft.NET.Sdk.Worker">
+  <PropertyGroup>
+    <TargetFramework>net10.0</TargetFramework>
+    <Nullable>enable</Nullable>
+    <ImplicitUsings>disable</ImplicitUsings>
+    <RootNamespace>PerformanceMonitor.Darling.Service</RootNamespace>
+    <AssemblyName>PerformanceMonitor.Darling.Service</AssemblyName>
+    <Version>3.4.0</Version>
+    <!-- #2113: <Version> is the ONE hand-set version. AssemblyVersion / FileVersion /
+         InformationalVersion derive from it at build time - the 3.4.0 release bumped only
+         <Version> and shipped binaries still STAMPED 3.3.0.0, because four hand-maintained
+         copies of one fact is a release-day trap. The suffix suppression keeps
+         InformationalVersion a clean semver instead of gaining a +sha under CI SourceLink. -->
+    <IncludeSourceRevisionInInformationalVersion>false</IncludeSourceRevisionInInformationalVersion>
+    <Company>Darling Data, LLC</Company>
+    <Copyright>Copyright © 2026 Darling Data, LLC</Copyright>
+    <EnableNETAnalyzers>true</EnableNETAnalyzers>
+    <AnalysisLevel>latest-recommended</AnalysisLevel>
+    <NoWarn>CA1849;CA2007;CA1508;CA1822;CA1805;CA1510;CA1816;CA1861;CA1845;CA2201;CA1848;CA1852;CA1305;CA1860;CA1707;CA1507;CA1806;CA2254</NoWarn>
+    <WarningsAsErrors>CS4014</WarningsAsErrors>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <PackageReference Include="Microsoft.Extensions.Hosting" Version="10.0.10" />
+    <PackageReference Include="Microsoft.Extensions.Hosting.WindowsServices" Version="10.0.10" />
+    <PackageReference Include="Microsoft.Data.SqlClient" Version="7.0.2" />
+    <PackageReference Include="System.Security.Cryptography.ProtectedData" Version="10.0.10" />
+    <!-- Restrictive ACLs on the DPAPI credential files (the data dir parent, the *.dpapi files, the
+         transient init pwfile). Windows-only, like every credential surface here; the extension
+         methods (GetAccessControl/SetAccessControl/SetOwner) live in this package on a net10.0
+         (non-windows) TFM, which the service keeps so bring-your-own mode still runs cross-platform. -->
+    <PackageReference Include="System.IO.FileSystem.AccessControl" Version="5.0.0" />
+    <!-- AN4: the analysis MCP tools over Streamable HTTP — Lite's exact MCP stack/version.
+         The AspNetCore package brings the Microsoft.AspNetCore.App framework reference
+         (Kestrel/WebApplication) transitively, same as it does for Lite. -->
+    <PackageReference Include="ModelContextProtocol" Version="2.1.0" />
+    <PackageReference Include="ModelContextProtocol.AspNetCore" Version="2.1.0" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <ProjectReference Include="..\..\PerformanceMonitor.Alerting\PerformanceMonitor.Alerting.csproj" />
+    <ProjectReference Include="..\..\PerformanceMonitor.Common\PerformanceMonitor.Common.csproj" />
+    <ProjectReference Include="..\..\PerformanceMonitor.Collectors\PerformanceMonitor.Collectors.csproj" />
+    <!-- AN3: the analysis pipeline (DarlingAnalysisService/PgPlanFetcher). Dependency points
+         service → analysis only; the analysis library never references the service. -->
+    <ProjectReference Include="..\PerformanceMonitor.Darling.Analysis\PerformanceMonitor.Darling.Analysis.csproj" />
+    <!-- The plan-analysis MCP tools run the SHARED ShowPlanParser/PlanAnalyzer and serialize via
+         McpPlanAnalysisFormatter (the same projection both apps' McpPlanTools call). Referenced
+         directly (it also flows transitively through Darling.Analysis) since it is a direct dependency. -->
+    <ProjectReference Include="..\..\PerformanceMonitor.PlanAnalysis\PerformanceMonitor.PlanAnalysis.csproj" />
+    <ProjectReference Include="..\PerformanceMonitor.Darling.Storage\PerformanceMonitor.Darling.Storage.csproj" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <None Include="darling.sample.json" CopyToOutputDirectory="PreserveNewest" />
+    <!-- #1562: the web dashboard's static assets (Builder 3 owns wwwroot/). Copied beside the binary so the
+         web host's content/web root (pinned to AppContext.BaseDirectory) finds them under a Windows service. -->
+    <Content Include="wwwroot\**\*" CopyToOutputDirectory="PreserveNewest" />
+    <!-- The install/uninstall scripts ride the publish output to the ZIP ROOT (beside the exe), so both
+         the release and nightly zips carry them with no packaging-workflow changes - same delivery
+         mechanism as darling.sample.json. -->
+    <None Include="..\tools\install-darling.ps1" Link="install-darling.ps1" CopyToOutputDirectory="PreserveNewest" />
+    <None Include="..\tools\uninstall-darling.ps1" Link="uninstall-darling.ps1" CopyToOutputDirectory="PreserveNewest" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <InternalsVisibleTo Include="Darling.Tests" />
+  </ItemGroup>
+</Project>
diff --git a/PerformanceMonitor.PlanAnalysis/PerformanceMonitor.PlanAnalysis.csproj b/PerformanceMonitor.PlanAnalysis/PerformanceMonitor.PlanAnalysis.csproj
index 773e270e6..840a2063f 100644
--- a/PerformanceMonitor.PlanAnalysis/PerformanceMonitor.PlanAnalysis.csproj
+++ b/PerformanceMonitor.PlanAnalysis/PerformanceMonitor.PlanAnalysis.csproj
@@ -1,36 +1,37 @@
-<Project Sdk="Microsoft.NET.Sdk">
-  <PropertyGroup>
-    <TargetFramework>net10.0</TargetFramework>
-    <Nullable>enable</Nullable>
-    <ImplicitUsings>disable</ImplicitUsings>
-    <LangVersion>latest</LangVersion>
-    <RootNamespace>PerformanceMonitor.PlanAnalysis</RootNamespace>
-    <AssemblyName>PerformanceMonitor.PlanAnalysis</AssemblyName>
-    <Company>Darling Data, LLC</Company>
-    <Copyright>Copyright © 2026 Darling Data, LLC</Copyright>
-    <EnableNETAnalyzers>true</EnableNETAnalyzers>
-    <AnalysisLevel>latest-recommended</AnalysisLevel>
-    <NoWarn>CA1849;CA2007;CA1508;CA1822;CA1805;CA1510;CA1816;CA1861;CA1845;CA2201;CA1848;CA1852;CA1305;CA1860;CA1707;CA1507;CA1806</NoWarn>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <ProjectReference Include="..\PerformanceMonitor.Common\PerformanceMonitor.Common.csproj" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <!-- ActualPlanExecutor RE-EXECUTES a query against the target to capture its ACTUAL plan (SET STATISTICS
-         XML), so it needs the SqlClient runtime connection surface. Version matches Lite/Dashboard/the Darling
-         service (7.0.1) so there is no transitive version skew. -->
-    <PackageReference Include="Microsoft.Data.SqlClient" Version="7.0.2" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <InternalsVisibleTo Include="PerformanceMonitorLite" />
-    <InternalsVisibleTo Include="PerformanceMonitorDashboard" />
-    <InternalsVisibleTo Include="Lite.Tests" />
-    <InternalsVisibleTo Include="Dashboard.Tests" />
-    <!-- The Darling service/viewer call the SHARED ActualPlanExecutor + QueryModificationDetector; Darling.Tests
-         also pins the executor's internal plan-capture seam (IActualPlanResultReader) with a scripted reader. -->
-    <InternalsVisibleTo Include="Darling.Tests" />
-  </ItemGroup>
-</Project>
+<Project Sdk="Microsoft.NET.Sdk">
+  <PropertyGroup>
+    <TargetFramework>net10.0</TargetFramework>
+    <Nullable>enable</Nullable>
+    <ImplicitUsings>disable</ImplicitUsings>
+    <LangVersion>latest</LangVersion>
+    <RootNamespace>PerformanceMonitor.PlanAnalysis</RootNamespace>
+    <AssemblyName>PerformanceMonitor.PlanAnalysis</AssemblyName>
+    <Company>Darling Data, LLC</Company>
+    <Copyright>Copyright © 2026 Darling Data, LLC</Copyright>
+    <EnableNETAnalyzers>true</EnableNETAnalyzers>
+    <AnalysisLevel>latest-recommended</AnalysisLevel>
+    <NoWarn>CA1849;CA2007;CA1508;CA1822;CA1805;CA1510;CA1816;CA1861;CA1845;CA2201;CA1848;CA1852;CA1305;CA1860;CA1707;CA1507;CA1806</NoWarn>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <ProjectReference Include="..\PerformanceMonitor.Common\PerformanceMonitor.Common.csproj" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <!-- ActualPlanExecutor RE-EXECUTES a query against the target to capture its ACTUAL plan (SET STATISTICS
+         XML), so it needs the SqlClient runtime connection surface. Version matches Lite/Dashboard/the Darling
+         service (7.0.1) so there is no transitive version skew. -->
+    <PackageReference Include="Microsoft.Data.SqlClient" Version="7.0.2" />
+    <PackageReference Include="ModelContextProtocol" Version="2.1.0" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <InternalsVisibleTo Include="PerformanceMonitorLite" />
+    <InternalsVisibleTo Include="PerformanceMonitorDashboard" />
+    <InternalsVisibleTo Include="Lite.Tests" />
+    <InternalsVisibleTo Include="Dashboard.Tests" />
+    <!-- The Darling service/viewer call the SHARED ActualPlanExecutor + QueryModificationDetector; Darling.Tests
+         also pins the executor's internal plan-capture seam (IActualPlanResultReader) with a scripted reader. -->
+    <InternalsVisibleTo Include="Darling.Tests" />
+  </ItemGroup>
+</Project>

From 2813835a8312ade2e7deadc163ff31bf3776815c Mon Sep 17 00:00:00 2001
From: Erik Darling <2136037+erikdarlingdata@users.noreply.github.com>
Date: Mon, 10 Aug 2026 12:26:07 +0200
Subject: [PATCH 2/3] Align every direct ModelContextProtocol reference at
 2.1.0 + regenerate lock files

Dependabot only bumped PlanAnalysis and Darling.Service; Common, Lite, and the
deprecated Dashboard still pinned 2.0.0 directly, which is NU1605 (downgrade,
warning-as-error in test projects), and the transitive lock files were never
re-evaluated, which is NU1004 in locked-mode restore. One version everywhere
plus --force-evaluate lock regeneration.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 Darling/Darling.Tests/packages.lock.json      | 23 ++++++++++---------
 .../packages.lock.json                        | 13 ++++++-----
 Lite.Tests/packages.lock.json                 | 23 ++++++++++---------
 Lite/PerformanceMonitorLite.csproj            |  4 ++--
 Lite/packages.lock.json                       | 23 ++++++++++---------
 .../PerformanceMonitor.Common.csproj          |  2 +-
 deprecated/Dashboard.Tests/packages.lock.json | 23 ++++++++++---------
 deprecated/Dashboard/Dashboard.csproj         |  4 ++--
 deprecated/Dashboard/packages.lock.json       | 23 ++++++++++---------
 deprecated/Installer/packages.lock.json       |  6 ++---
 10 files changed, 75 insertions(+), 69 deletions(-)

diff --git a/Darling/Darling.Tests/packages.lock.json b/Darling/Darling.Tests/packages.lock.json
index 7447cc6b2..b8dd84dda 100644
--- a/Darling/Darling.Tests/packages.lock.json
+++ b/Darling/Darling.Tests/packages.lock.json
@@ -530,26 +530,26 @@
       },
       "ModelContextProtocol": {
         "type": "Transitive",
-        "resolved": "2.0.0",
-        "contentHash": "X/KDNZDP9Zgs7YXXxxpKiDMWWPXYrs764lVgc6vEM4pCg87bYz4VaceeiKW91XDTGgUvIbmRYXgWqyNpV32xRg==",
+        "resolved": "2.1.0",
+        "contentHash": "Oa4rU7EL9C2qyFjQj1dx+ysGMzfWDRpM8RRaUMmLGs5vPvfJ9xyz4ZtyF4ychY+Nx1b/auGCqIQLqSz/IpPkKA==",
         "dependencies": {
           "Microsoft.Extensions.Caching.Abstractions": "10.0.10",
           "Microsoft.Extensions.Hosting.Abstractions": "10.0.10",
-          "ModelContextProtocol.Core": "[2.0.0]"
+          "ModelContextProtocol.Core": "[2.1.0]"
         }
       },
       "ModelContextProtocol.AspNetCore": {
         "type": "Transitive",
-        "resolved": "2.0.0",
-        "contentHash": "dXrB7sBpQjUQU0UcdyFPJbOTFw7yaceD+OgAZVAeBveRzbiBlg89jEygAtcgOwd/L+O+YpM98zfwaXz067NFDQ==",
+        "resolved": "2.1.0",
+        "contentHash": "yhJ8bBXIgrX0mAgRYRgzcbH3bLdv3MDSkG52utRW9EAAtQrPw/g7Q/T6EurxKV+L+Zefv8VVUYcNbXEOd9GgfA==",
         "dependencies": {
-          "ModelContextProtocol": "[2.0.0]"
+          "ModelContextProtocol": "[2.1.0]"
         }
       },
       "ModelContextProtocol.Core": {
         "type": "Transitive",
-        "resolved": "2.0.0",
-        "contentHash": "piFR0HtA/2Oc1tgk96EE5Tye6qA2sg3WGRAXBhUqo/BWikdEYEs2UuqtmwLrQZJUge1nUOPgGHYsb15VIBK8iw==",
+        "resolved": "2.1.0",
+        "contentHash": "cU/urrhRxE4/iSyBIJI7QOaFqSP1FOEnwEHsct9n6t6/XluCAFD9iqnrPkBAsEYr+f/G4tVQ21U+6wN/6fQvOg==",
         "dependencies": {
           "Microsoft.Extensions.AI.Abstractions": "10.8.3",
           "Microsoft.Extensions.Logging.Abstractions": "10.0.10"
@@ -854,7 +854,7 @@
         "dependencies": {
           "CredentialManagement": "[1.0.2, )",
           "Microsoft.Extensions.Logging.Abstractions": "[10.0.10, )",
-          "ModelContextProtocol": "[2.0.0, )"
+          "ModelContextProtocol": "[2.1.0, )"
         }
       },
       "performancemonitor.darling.analysis": {
@@ -874,8 +874,8 @@
           "Microsoft.Data.SqlClient": "[7.0.2, )",
           "Microsoft.Extensions.Hosting": "[10.0.10, )",
           "Microsoft.Extensions.Hosting.WindowsServices": "[10.0.10, )",
-          "ModelContextProtocol": "[2.0.0, )",
-          "ModelContextProtocol.AspNetCore": "[2.0.0, )",
+          "ModelContextProtocol": "[2.1.0, )",
+          "ModelContextProtocol.AspNetCore": "[2.1.0, )",
           "PerformanceMonitor.Alerting": "[1.0.0, )",
           "PerformanceMonitor.Collectors": "[1.0.0, )",
           "PerformanceMonitor.Common": "[1.0.0, )",
@@ -920,6 +920,7 @@
         "type": "Project",
         "dependencies": {
           "Microsoft.Data.SqlClient": "[7.0.2, )",
+          "ModelContextProtocol": "[2.1.0, )",
           "PerformanceMonitor.Common": "[1.0.0, )"
         }
       },
diff --git a/Darling/PerformanceMonitor.Darling.Viewer/packages.lock.json b/Darling/PerformanceMonitor.Darling.Viewer/packages.lock.json
index c1b0f29e7..c1d2b7580 100644
--- a/Darling/PerformanceMonitor.Darling.Viewer/packages.lock.json
+++ b/Darling/PerformanceMonitor.Darling.Viewer/packages.lock.json
@@ -236,18 +236,18 @@
       },
       "ModelContextProtocol": {
         "type": "Transitive",
-        "resolved": "2.0.0",
-        "contentHash": "X/KDNZDP9Zgs7YXXxxpKiDMWWPXYrs764lVgc6vEM4pCg87bYz4VaceeiKW91XDTGgUvIbmRYXgWqyNpV32xRg==",
+        "resolved": "2.1.0",
+        "contentHash": "Oa4rU7EL9C2qyFjQj1dx+ysGMzfWDRpM8RRaUMmLGs5vPvfJ9xyz4ZtyF4ychY+Nx1b/auGCqIQLqSz/IpPkKA==",
         "dependencies": {
           "Microsoft.Extensions.Caching.Abstractions": "10.0.10",
           "Microsoft.Extensions.Hosting.Abstractions": "10.0.10",
-          "ModelContextProtocol.Core": "[2.0.0]"
+          "ModelContextProtocol.Core": "[2.1.0]"
         }
       },
       "ModelContextProtocol.Core": {
         "type": "Transitive",
-        "resolved": "2.0.0",
-        "contentHash": "piFR0HtA/2Oc1tgk96EE5Tye6qA2sg3WGRAXBhUqo/BWikdEYEs2UuqtmwLrQZJUge1nUOPgGHYsb15VIBK8iw==",
+        "resolved": "2.1.0",
+        "contentHash": "cU/urrhRxE4/iSyBIJI7QOaFqSP1FOEnwEHsct9n6t6/XluCAFD9iqnrPkBAsEYr+f/G4tVQ21U+6wN/6fQvOg==",
         "dependencies": {
           "Microsoft.Extensions.AI.Abstractions": "10.8.3",
           "Microsoft.Extensions.Logging.Abstractions": "10.0.10"
@@ -446,7 +446,7 @@
         "dependencies": {
           "CredentialManagement": "[1.0.2, )",
           "Microsoft.Extensions.Logging.Abstractions": "[10.0.10, )",
-          "ModelContextProtocol": "[2.0.0, )"
+          "ModelContextProtocol": "[2.1.0, )"
         }
       },
       "performancemonitor.darling.analysis": {
@@ -478,6 +478,7 @@
         "type": "Project",
         "dependencies": {
           "Microsoft.Data.SqlClient": "[7.0.2, )",
+          "ModelContextProtocol": "[2.1.0, )",
           "PerformanceMonitor.Common": "[1.0.0, )"
         }
       },
diff --git a/Lite.Tests/packages.lock.json b/Lite.Tests/packages.lock.json
index 411ca9446..077f6e9bc 100644
--- a/Lite.Tests/packages.lock.json
+++ b/Lite.Tests/packages.lock.json
@@ -618,26 +618,26 @@
       },
       "ModelContextProtocol": {
         "type": "Transitive",
-        "resolved": "2.0.0",
-        "contentHash": "X/KDNZDP9Zgs7YXXxxpKiDMWWPXYrs764lVgc6vEM4pCg87bYz4VaceeiKW91XDTGgUvIbmRYXgWqyNpV32xRg==",
+        "resolved": "2.1.0",
+        "contentHash": "Oa4rU7EL9C2qyFjQj1dx+ysGMzfWDRpM8RRaUMmLGs5vPvfJ9xyz4ZtyF4ychY+Nx1b/auGCqIQLqSz/IpPkKA==",
         "dependencies": {
           "Microsoft.Extensions.Caching.Abstractions": "10.0.10",
           "Microsoft.Extensions.Hosting.Abstractions": "10.0.10",
-          "ModelContextProtocol.Core": "[2.0.0]"
+          "ModelContextProtocol.Core": "[2.1.0]"
         }
       },
       "ModelContextProtocol.AspNetCore": {
         "type": "Transitive",
-        "resolved": "2.0.0",
-        "contentHash": "dXrB7sBpQjUQU0UcdyFPJbOTFw7yaceD+OgAZVAeBveRzbiBlg89jEygAtcgOwd/L+O+YpM98zfwaXz067NFDQ==",
+        "resolved": "2.1.0",
+        "contentHash": "yhJ8bBXIgrX0mAgRYRgzcbH3bLdv3MDSkG52utRW9EAAtQrPw/g7Q/T6EurxKV+L+Zefv8VVUYcNbXEOd9GgfA==",
         "dependencies": {
-          "ModelContextProtocol": "[2.0.0]"
+          "ModelContextProtocol": "[2.1.0]"
         }
       },
       "ModelContextProtocol.Core": {
         "type": "Transitive",
-        "resolved": "2.0.0",
-        "contentHash": "piFR0HtA/2Oc1tgk96EE5Tye6qA2sg3WGRAXBhUqo/BWikdEYEs2UuqtmwLrQZJUge1nUOPgGHYsb15VIBK8iw==",
+        "resolved": "2.1.0",
+        "contentHash": "cU/urrhRxE4/iSyBIJI7QOaFqSP1FOEnwEHsct9n6t6/XluCAFD9iqnrPkBAsEYr+f/G4tVQ21U+6wN/6fQvOg==",
         "dependencies": {
           "Microsoft.Extensions.AI.Abstractions": "10.8.3",
           "Microsoft.Extensions.Logging.Abstractions": "10.0.10"
@@ -932,7 +932,7 @@
         "dependencies": {
           "CredentialManagement": "[1.0.2, )",
           "Microsoft.Extensions.Logging.Abstractions": "[10.0.10, )",
-          "ModelContextProtocol": "[2.0.0, )"
+          "ModelContextProtocol": "[2.1.0, )"
         }
       },
       "performancemonitor.notifications": {
@@ -946,6 +946,7 @@
         "type": "Project",
         "dependencies": {
           "Microsoft.Data.SqlClient": "[7.0.2, )",
+          "ModelContextProtocol": "[2.1.0, )",
           "PerformanceMonitor.Common": "[1.0.0, )"
         }
       },
@@ -968,8 +969,8 @@
           "Microsoft.Data.SqlClient.Extensions.Azure": "[7.0.2, )",
           "Microsoft.Extensions.Hosting": "[10.0.10, )",
           "Microsoft.Extensions.Logging": "[10.0.10, )",
-          "ModelContextProtocol": "[2.0.0, )",
-          "ModelContextProtocol.AspNetCore": "[2.0.0, )",
+          "ModelContextProtocol": "[2.1.0, )",
+          "ModelContextProtocol.AspNetCore": "[2.1.0, )",
           "PerformanceMonitor.Alerting": "[1.0.0, )",
           "PerformanceMonitor.Analysis": "[1.0.0, )",
           "PerformanceMonitor.Collectors": "[1.0.0, )",
diff --git a/Lite/PerformanceMonitorLite.csproj b/Lite/PerformanceMonitorLite.csproj
index f7386f4c0..2d02f4462 100644
--- a/Lite/PerformanceMonitorLite.csproj
+++ b/Lite/PerformanceMonitorLite.csproj
@@ -76,8 +76,8 @@
     <PackageReference Include="Hardcodet.NotifyIcon.Wpf" Version="2.0.1" />
 
     <!-- MCP server for LLM tool access -->
-    <PackageReference Include="ModelContextProtocol" Version="2.0.0" />
-    <PackageReference Include="ModelContextProtocol.AspNetCore" Version="2.0.0" />
+    <PackageReference Include="ModelContextProtocol" Version="2.1.0" />
+    <PackageReference Include="ModelContextProtocol.AspNetCore" Version="2.1.0" />
     <PackageReference Include="Velopack" Version="1.2.0" />
   </ItemGroup>
 
diff --git a/Lite/packages.lock.json b/Lite/packages.lock.json
index 587f7af8d..d58834afb 100644
--- a/Lite/packages.lock.json
+++ b/Lite/packages.lock.json
@@ -104,22 +104,22 @@
       },
       "ModelContextProtocol": {
         "type": "Direct",
-        "requested": "[2.0.0, )",
-        "resolved": "2.0.0",
-        "contentHash": "X/KDNZDP9Zgs7YXXxxpKiDMWWPXYrs764lVgc6vEM4pCg87bYz4VaceeiKW91XDTGgUvIbmRYXgWqyNpV32xRg==",
+        "requested": "[2.1.0, )",
+        "resolved": "2.1.0",
+        "contentHash": "Oa4rU7EL9C2qyFjQj1dx+ysGMzfWDRpM8RRaUMmLGs5vPvfJ9xyz4ZtyF4ychY+Nx1b/auGCqIQLqSz/IpPkKA==",
         "dependencies": {
           "Microsoft.Extensions.Caching.Abstractions": "10.0.10",
           "Microsoft.Extensions.Hosting.Abstractions": "10.0.10",
-          "ModelContextProtocol.Core": "[2.0.0]"
+          "ModelContextProtocol.Core": "[2.1.0]"
         }
       },
       "ModelContextProtocol.AspNetCore": {
         "type": "Direct",
-        "requested": "[2.0.0, )",
-        "resolved": "2.0.0",
-        "contentHash": "dXrB7sBpQjUQU0UcdyFPJbOTFw7yaceD+OgAZVAeBveRzbiBlg89jEygAtcgOwd/L+O+YpM98zfwaXz067NFDQ==",
+        "requested": "[2.1.0, )",
+        "resolved": "2.1.0",
+        "contentHash": "yhJ8bBXIgrX0mAgRYRgzcbH3bLdv3MDSkG52utRW9EAAtQrPw/g7Q/T6EurxKV+L+Zefv8VVUYcNbXEOd9GgfA==",
         "dependencies": {
-          "ModelContextProtocol": "[2.0.0]"
+          "ModelContextProtocol": "[2.1.0]"
         }
       },
       "ScottPlot.WPF": {
@@ -581,8 +581,8 @@
       },
       "ModelContextProtocol.Core": {
         "type": "Transitive",
-        "resolved": "2.0.0",
-        "contentHash": "piFR0HtA/2Oc1tgk96EE5Tye6qA2sg3WGRAXBhUqo/BWikdEYEs2UuqtmwLrQZJUge1nUOPgGHYsb15VIBK8iw==",
+        "resolved": "2.1.0",
+        "contentHash": "cU/urrhRxE4/iSyBIJI7QOaFqSP1FOEnwEHsct9n6t6/XluCAFD9iqnrPkBAsEYr+f/G4tVQ21U+6wN/6fQvOg==",
         "dependencies": {
           "Microsoft.Extensions.AI.Abstractions": "10.8.3",
           "Microsoft.Extensions.Logging.Abstractions": "10.0.10"
@@ -794,7 +794,7 @@
         "dependencies": {
           "CredentialManagement": "[1.0.2, )",
           "Microsoft.Extensions.Logging.Abstractions": "[10.0.10, )",
-          "ModelContextProtocol": "[2.0.0, )"
+          "ModelContextProtocol": "[2.1.0, )"
         }
       },
       "performancemonitor.notifications": {
@@ -808,6 +808,7 @@
         "type": "Project",
         "dependencies": {
           "Microsoft.Data.SqlClient": "[7.0.2, )",
+          "ModelContextProtocol": "[2.1.0, )",
           "PerformanceMonitor.Common": "[1.0.0, )"
         }
       },
diff --git a/PerformanceMonitor.Common/PerformanceMonitor.Common.csproj b/PerformanceMonitor.Common/PerformanceMonitor.Common.csproj
index 5adf68aca..bfb62f68f 100644
--- a/PerformanceMonitor.Common/PerformanceMonitor.Common.csproj
+++ b/PerformanceMonitor.Common/PerformanceMonitor.Common.csproj
@@ -17,7 +17,7 @@
   <ItemGroup>
     <!-- MCP SDK: required by Mcp/McpSchemaCompat.cs (Gemini-compatible tool registration, issue #1074).
          Brings ModelContextProtocol.Core + Microsoft.Extensions.AI.Abstractions transitively. -->
-    <PackageReference Include="ModelContextProtocol" Version="2.0.0" />
+    <PackageReference Include="ModelContextProtocol" Version="2.1.0" />
     <!-- Windows Credential Manager (DPAPI) for the shared CredentialStore; version matches Dashboard/Lite. -->
     <PackageReference Include="CredentialManagement" Version="1.0.2" />
     <!-- ILogger abstraction used by CredentialStore; version matches the apps' logging stack. -->
diff --git a/deprecated/Dashboard.Tests/packages.lock.json b/deprecated/Dashboard.Tests/packages.lock.json
index d22c2ece9..2a3c804c5 100644
--- a/deprecated/Dashboard.Tests/packages.lock.json
+++ b/deprecated/Dashboard.Tests/packages.lock.json
@@ -586,26 +586,26 @@
       },
       "ModelContextProtocol": {
         "type": "Transitive",
-        "resolved": "2.0.0",
-        "contentHash": "X/KDNZDP9Zgs7YXXxxpKiDMWWPXYrs764lVgc6vEM4pCg87bYz4VaceeiKW91XDTGgUvIbmRYXgWqyNpV32xRg==",
+        "resolved": "2.1.0",
+        "contentHash": "Oa4rU7EL9C2qyFjQj1dx+ysGMzfWDRpM8RRaUMmLGs5vPvfJ9xyz4ZtyF4ychY+Nx1b/auGCqIQLqSz/IpPkKA==",
         "dependencies": {
           "Microsoft.Extensions.Caching.Abstractions": "10.0.10",
           "Microsoft.Extensions.Hosting.Abstractions": "10.0.10",
-          "ModelContextProtocol.Core": "[2.0.0]"
+          "ModelContextProtocol.Core": "[2.1.0]"
         }
       },
       "ModelContextProtocol.AspNetCore": {
         "type": "Transitive",
-        "resolved": "2.0.0",
-        "contentHash": "dXrB7sBpQjUQU0UcdyFPJbOTFw7yaceD+OgAZVAeBveRzbiBlg89jEygAtcgOwd/L+O+YpM98zfwaXz067NFDQ==",
+        "resolved": "2.1.0",
+        "contentHash": "yhJ8bBXIgrX0mAgRYRgzcbH3bLdv3MDSkG52utRW9EAAtQrPw/g7Q/T6EurxKV+L+Zefv8VVUYcNbXEOd9GgfA==",
         "dependencies": {
-          "ModelContextProtocol": "[2.0.0]"
+          "ModelContextProtocol": "[2.1.0]"
         }
       },
       "ModelContextProtocol.Core": {
         "type": "Transitive",
-        "resolved": "2.0.0",
-        "contentHash": "piFR0HtA/2Oc1tgk96EE5Tye6qA2sg3WGRAXBhUqo/BWikdEYEs2UuqtmwLrQZJUge1nUOPgGHYsb15VIBK8iw==",
+        "resolved": "2.1.0",
+        "contentHash": "cU/urrhRxE4/iSyBIJI7QOaFqSP1FOEnwEHsct9n6t6/XluCAFD9iqnrPkBAsEYr+f/G4tVQ21U+6wN/6fQvOg==",
         "dependencies": {
           "Microsoft.Extensions.AI.Abstractions": "10.8.3",
           "Microsoft.Extensions.Logging.Abstractions": "10.0.10"
@@ -904,7 +904,7 @@
         "dependencies": {
           "CredentialManagement": "[1.0.2, )",
           "Microsoft.Extensions.Logging.Abstractions": "[10.0.10, )",
-          "ModelContextProtocol": "[2.0.0, )"
+          "ModelContextProtocol": "[2.1.0, )"
         }
       },
       "performancemonitor.notifications": {
@@ -918,6 +918,7 @@
         "type": "Project",
         "dependencies": {
           "Microsoft.Data.SqlClient": "[7.0.2, )",
+          "ModelContextProtocol": "[2.1.0, )",
           "PerformanceMonitor.Common": "[1.0.0, )"
         }
       },
@@ -940,8 +941,8 @@
           "Microsoft.Extensions.Configuration": "[10.0.10, )",
           "Microsoft.Extensions.Configuration.Json": "[10.0.10, )",
           "Microsoft.Extensions.Hosting": "[10.0.10, )",
-          "ModelContextProtocol": "[2.0.0, )",
-          "ModelContextProtocol.AspNetCore": "[2.0.0, )",
+          "ModelContextProtocol": "[2.1.0, )",
+          "ModelContextProtocol.AspNetCore": "[2.1.0, )",
           "PerformanceMonitor.Alerting": "[1.0.0, )",
           "PerformanceMonitor.Analysis": "[1.0.0, )",
           "PerformanceMonitor.Common": "[1.0.0, )",
diff --git a/deprecated/Dashboard/Dashboard.csproj b/deprecated/Dashboard/Dashboard.csproj
index e2c46d84e..238178bc5 100644
--- a/deprecated/Dashboard/Dashboard.csproj
+++ b/deprecated/Dashboard/Dashboard.csproj
@@ -47,8 +47,8 @@
     <PackageReference Include="Microsoft.Extensions.Configuration" Version="10.0.10" />
     <PackageReference Include="Microsoft.Extensions.Configuration.Json" Version="10.0.10" />
     <PackageReference Include="ScottPlot.WPF" Version="5.1.59" />
-    <PackageReference Include="ModelContextProtocol" Version="2.0.0" />
-    <PackageReference Include="ModelContextProtocol.AspNetCore" Version="2.0.0" />
+    <PackageReference Include="ModelContextProtocol" Version="2.1.0" />
+    <PackageReference Include="ModelContextProtocol.AspNetCore" Version="2.1.0" />
     <PackageReference Include="Microsoft.Extensions.Hosting" Version="10.0.10" />
     <PackageReference Include="Velopack" Version="1.2.0" />
   </ItemGroup>
diff --git a/deprecated/Dashboard/packages.lock.json b/deprecated/Dashboard/packages.lock.json
index eedd2a4f5..1ba17db67 100644
--- a/deprecated/Dashboard/packages.lock.json
+++ b/deprecated/Dashboard/packages.lock.json
@@ -99,22 +99,22 @@
       },
       "ModelContextProtocol": {
         "type": "Direct",
-        "requested": "[2.0.0, )",
-        "resolved": "2.0.0",
-        "contentHash": "X/KDNZDP9Zgs7YXXxxpKiDMWWPXYrs764lVgc6vEM4pCg87bYz4VaceeiKW91XDTGgUvIbmRYXgWqyNpV32xRg==",
+        "requested": "[2.1.0, )",
+        "resolved": "2.1.0",
+        "contentHash": "Oa4rU7EL9C2qyFjQj1dx+ysGMzfWDRpM8RRaUMmLGs5vPvfJ9xyz4ZtyF4ychY+Nx1b/auGCqIQLqSz/IpPkKA==",
         "dependencies": {
           "Microsoft.Extensions.Caching.Abstractions": "10.0.10",
           "Microsoft.Extensions.Hosting.Abstractions": "10.0.10",
-          "ModelContextProtocol.Core": "[2.0.0]"
+          "ModelContextProtocol.Core": "[2.1.0]"
         }
       },
       "ModelContextProtocol.AspNetCore": {
         "type": "Direct",
-        "requested": "[2.0.0, )",
-        "resolved": "2.0.0",
-        "contentHash": "dXrB7sBpQjUQU0UcdyFPJbOTFw7yaceD+OgAZVAeBveRzbiBlg89jEygAtcgOwd/L+O+YpM98zfwaXz067NFDQ==",
+        "requested": "[2.1.0, )",
+        "resolved": "2.1.0",
+        "contentHash": "yhJ8bBXIgrX0mAgRYRgzcbH3bLdv3MDSkG52utRW9EAAtQrPw/g7Q/T6EurxKV+L+Zefv8VVUYcNbXEOd9GgfA==",
         "dependencies": {
-          "ModelContextProtocol": "[2.0.0]"
+          "ModelContextProtocol": "[2.1.0]"
         }
       },
       "ScottPlot.WPF": {
@@ -548,8 +548,8 @@
       },
       "ModelContextProtocol.Core": {
         "type": "Transitive",
-        "resolved": "2.0.0",
-        "contentHash": "piFR0HtA/2Oc1tgk96EE5Tye6qA2sg3WGRAXBhUqo/BWikdEYEs2UuqtmwLrQZJUge1nUOPgGHYsb15VIBK8iw==",
+        "resolved": "2.1.0",
+        "contentHash": "cU/urrhRxE4/iSyBIJI7QOaFqSP1FOEnwEHsct9n6t6/XluCAFD9iqnrPkBAsEYr+f/G4tVQ21U+6wN/6fQvOg==",
         "dependencies": {
           "Microsoft.Extensions.AI.Abstractions": "10.8.3",
           "Microsoft.Extensions.Logging.Abstractions": "10.0.10"
@@ -765,7 +765,7 @@
         "dependencies": {
           "CredentialManagement": "[1.0.2, )",
           "Microsoft.Extensions.Logging.Abstractions": "[10.0.10, )",
-          "ModelContextProtocol": "[2.0.0, )"
+          "ModelContextProtocol": "[2.1.0, )"
         }
       },
       "performancemonitor.notifications": {
@@ -779,6 +779,7 @@
         "type": "Project",
         "dependencies": {
           "Microsoft.Data.SqlClient": "[7.0.2, )",
+          "ModelContextProtocol": "[2.1.0, )",
           "PerformanceMonitor.Common": "[1.0.0, )"
         }
       },
diff --git a/deprecated/Installer/packages.lock.json b/deprecated/Installer/packages.lock.json
index 39ad2a429..af333d919 100644
--- a/deprecated/Installer/packages.lock.json
+++ b/deprecated/Installer/packages.lock.json
@@ -22,9 +22,9 @@
       },
       "Microsoft.NET.ILLink.Tasks": {
         "type": "Direct",
-        "requested": "[10.0.10, )",
-        "resolved": "10.0.10",
-        "contentHash": "f5VCIE7AJpd5YvzNTeMGVzQIgyE9tX+AreTYwQF+REbu+DZo/2Ae+jNSwhPEYrVz6RRkd7y8ubXjk6Nn6Ka+Cg=="
+        "requested": "[10.0.8, )",
+        "resolved": "10.0.8",
+        "contentHash": "dVbSXGIFNR5nZcv2tOLoWI+a9T4jtFd77IYjuND+QVe360qWgAF7H0WtoopYhRw/+SgpGUTyrkrh+65+ClNnfw=="
       },
       "Azure.Core": {
         "type": "Transitive",

From 5740e9607e870b316250262265e38c489d1cd739 Mon Sep 17 00:00:00 2001
From: Erik Darling <2136037+erikdarlingdata@users.noreply.github.com>
Date: Mon, 10 Aug 2026 12:43:04 +0200
Subject: [PATCH 3/3] Address review: drop materialized MCP ref, undo CRLF
 flips, revert SDK-artifact lock delta
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- PerformanceMonitor.PlanAnalysis: remove the ModelContextProtocol reference
  dependabot materialized — no source in the project uses the SDK, and it
  forced MCP into every consumer's closure (review round 1).
- Rebuild the dependabot-touched csprojs from dev so the diff is the two
  version-bump lines per file instead of whole-file CRLF rewrites.
- deprecated/Installer lock: revert the ILLink.Tasks 10.0.10 -> 10.0.8
  downgrade — an artifact of regenerating locks on a 10.0.300 SDK locally;
  the file's graph is untouched by this bump so dev's entry is correct.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 Darling/Darling.Tests/packages.lock.json      |   1 -
 .../PerformanceMonitor.Darling.Service.csproj | 138 +++++++++---------
 .../packages.lock.json                        |   1 -
 Lite.Tests/packages.lock.json                 |   1 -
 Lite/packages.lock.json                       |   1 -
 .../PerformanceMonitor.PlanAnalysis.csproj    |  73 +++++----
 deprecated/Dashboard.Tests/packages.lock.json |   1 -
 deprecated/Dashboard/packages.lock.json       |   1 -
 deprecated/Installer/packages.lock.json       |   6 +-
 9 files changed, 108 insertions(+), 115 deletions(-)

diff --git a/Darling/Darling.Tests/packages.lock.json b/Darling/Darling.Tests/packages.lock.json
index b8dd84dda..7a88453bf 100644
--- a/Darling/Darling.Tests/packages.lock.json
+++ b/Darling/Darling.Tests/packages.lock.json
@@ -920,7 +920,6 @@
         "type": "Project",
         "dependencies": {
           "Microsoft.Data.SqlClient": "[7.0.2, )",
-          "ModelContextProtocol": "[2.1.0, )",
           "PerformanceMonitor.Common": "[1.0.0, )"
         }
       },
diff --git a/Darling/PerformanceMonitor.Darling.Service/PerformanceMonitor.Darling.Service.csproj b/Darling/PerformanceMonitor.Darling.Service/PerformanceMonitor.Darling.Service.csproj
index 5ec5a829e..b5a1b588d 100644
--- a/Darling/PerformanceMonitor.Darling.Service/PerformanceMonitor.Darling.Service.csproj
+++ b/Darling/PerformanceMonitor.Darling.Service/PerformanceMonitor.Darling.Service.csproj
@@ -1,69 +1,69 @@
-<Project Sdk="Microsoft.NET.Sdk.Worker">
-  <PropertyGroup>
-    <TargetFramework>net10.0</TargetFramework>
-    <Nullable>enable</Nullable>
-    <ImplicitUsings>disable</ImplicitUsings>
-    <RootNamespace>PerformanceMonitor.Darling.Service</RootNamespace>
-    <AssemblyName>PerformanceMonitor.Darling.Service</AssemblyName>
-    <Version>3.4.0</Version>
-    <!-- #2113: <Version> is the ONE hand-set version. AssemblyVersion / FileVersion /
-         InformationalVersion derive from it at build time - the 3.4.0 release bumped only
-         <Version> and shipped binaries still STAMPED 3.3.0.0, because four hand-maintained
-         copies of one fact is a release-day trap. The suffix suppression keeps
-         InformationalVersion a clean semver instead of gaining a +sha under CI SourceLink. -->
-    <IncludeSourceRevisionInInformationalVersion>false</IncludeSourceRevisionInInformationalVersion>
-    <Company>Darling Data, LLC</Company>
-    <Copyright>Copyright © 2026 Darling Data, LLC</Copyright>
-    <EnableNETAnalyzers>true</EnableNETAnalyzers>
-    <AnalysisLevel>latest-recommended</AnalysisLevel>
-    <NoWarn>CA1849;CA2007;CA1508;CA1822;CA1805;CA1510;CA1816;CA1861;CA1845;CA2201;CA1848;CA1852;CA1305;CA1860;CA1707;CA1507;CA1806;CA2254</NoWarn>
-    <WarningsAsErrors>CS4014</WarningsAsErrors>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <PackageReference Include="Microsoft.Extensions.Hosting" Version="10.0.10" />
-    <PackageReference Include="Microsoft.Extensions.Hosting.WindowsServices" Version="10.0.10" />
-    <PackageReference Include="Microsoft.Data.SqlClient" Version="7.0.2" />
-    <PackageReference Include="System.Security.Cryptography.ProtectedData" Version="10.0.10" />
-    <!-- Restrictive ACLs on the DPAPI credential files (the data dir parent, the *.dpapi files, the
-         transient init pwfile). Windows-only, like every credential surface here; the extension
-         methods (GetAccessControl/SetAccessControl/SetOwner) live in this package on a net10.0
-         (non-windows) TFM, which the service keeps so bring-your-own mode still runs cross-platform. -->
-    <PackageReference Include="System.IO.FileSystem.AccessControl" Version="5.0.0" />
-    <!-- AN4: the analysis MCP tools over Streamable HTTP — Lite's exact MCP stack/version.
-         The AspNetCore package brings the Microsoft.AspNetCore.App framework reference
-         (Kestrel/WebApplication) transitively, same as it does for Lite. -->
-    <PackageReference Include="ModelContextProtocol" Version="2.1.0" />
-    <PackageReference Include="ModelContextProtocol.AspNetCore" Version="2.1.0" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <ProjectReference Include="..\..\PerformanceMonitor.Alerting\PerformanceMonitor.Alerting.csproj" />
-    <ProjectReference Include="..\..\PerformanceMonitor.Common\PerformanceMonitor.Common.csproj" />
-    <ProjectReference Include="..\..\PerformanceMonitor.Collectors\PerformanceMonitor.Collectors.csproj" />
-    <!-- AN3: the analysis pipeline (DarlingAnalysisService/PgPlanFetcher). Dependency points
-         service → analysis only; the analysis library never references the service. -->
-    <ProjectReference Include="..\PerformanceMonitor.Darling.Analysis\PerformanceMonitor.Darling.Analysis.csproj" />
-    <!-- The plan-analysis MCP tools run the SHARED ShowPlanParser/PlanAnalyzer and serialize via
-         McpPlanAnalysisFormatter (the same projection both apps' McpPlanTools call). Referenced
-         directly (it also flows transitively through Darling.Analysis) since it is a direct dependency. -->
-    <ProjectReference Include="..\..\PerformanceMonitor.PlanAnalysis\PerformanceMonitor.PlanAnalysis.csproj" />
-    <ProjectReference Include="..\PerformanceMonitor.Darling.Storage\PerformanceMonitor.Darling.Storage.csproj" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <None Include="darling.sample.json" CopyToOutputDirectory="PreserveNewest" />
-    <!-- #1562: the web dashboard's static assets (Builder 3 owns wwwroot/). Copied beside the binary so the
-         web host's content/web root (pinned to AppContext.BaseDirectory) finds them under a Windows service. -->
-    <Content Include="wwwroot\**\*" CopyToOutputDirectory="PreserveNewest" />
-    <!-- The install/uninstall scripts ride the publish output to the ZIP ROOT (beside the exe), so both
-         the release and nightly zips carry them with no packaging-workflow changes - same delivery
-         mechanism as darling.sample.json. -->
-    <None Include="..\tools\install-darling.ps1" Link="install-darling.ps1" CopyToOutputDirectory="PreserveNewest" />
-    <None Include="..\tools\uninstall-darling.ps1" Link="uninstall-darling.ps1" CopyToOutputDirectory="PreserveNewest" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <InternalsVisibleTo Include="Darling.Tests" />
-  </ItemGroup>
-</Project>
+<Project Sdk="Microsoft.NET.Sdk.Worker">
+  <PropertyGroup>
+    <TargetFramework>net10.0</TargetFramework>
+    <Nullable>enable</Nullable>
+    <ImplicitUsings>disable</ImplicitUsings>
+    <RootNamespace>PerformanceMonitor.Darling.Service</RootNamespace>
+    <AssemblyName>PerformanceMonitor.Darling.Service</AssemblyName>
+    <Version>3.4.0</Version>
+    <!-- #2113: <Version> is the ONE hand-set version. AssemblyVersion / FileVersion /
+         InformationalVersion derive from it at build time - the 3.4.0 release bumped only
+         <Version> and shipped binaries still STAMPED 3.3.0.0, because four hand-maintained
+         copies of one fact is a release-day trap. The suffix suppression keeps
+         InformationalVersion a clean semver instead of gaining a +sha under CI SourceLink. -->
+    <IncludeSourceRevisionInInformationalVersion>false</IncludeSourceRevisionInInformationalVersion>
+    <Company>Darling Data, LLC</Company>
+    <Copyright>Copyright © 2026 Darling Data, LLC</Copyright>
+    <EnableNETAnalyzers>true</EnableNETAnalyzers>
+    <AnalysisLevel>latest-recommended</AnalysisLevel>
+    <NoWarn>CA1849;CA2007;CA1508;CA1822;CA1805;CA1510;CA1816;CA1861;CA1845;CA2201;CA1848;CA1852;CA1305;CA1860;CA1707;CA1507;CA1806;CA2254</NoWarn>
+    <WarningsAsErrors>CS4014</WarningsAsErrors>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <PackageReference Include="Microsoft.Extensions.Hosting" Version="10.0.10" />
+    <PackageReference Include="Microsoft.Extensions.Hosting.WindowsServices" Version="10.0.10" />
+    <PackageReference Include="Microsoft.Data.SqlClient" Version="7.0.2" />
+    <PackageReference Include="System.Security.Cryptography.ProtectedData" Version="10.0.10" />
+    <!-- Restrictive ACLs on the DPAPI credential files (the data dir parent, the *.dpapi files, the
+         transient init pwfile). Windows-only, like every credential surface here; the extension
+         methods (GetAccessControl/SetAccessControl/SetOwner) live in this package on a net10.0
+         (non-windows) TFM, which the service keeps so bring-your-own mode still runs cross-platform. -->
+    <PackageReference Include="System.IO.FileSystem.AccessControl" Version="5.0.0" />
+    <!-- AN4: the analysis MCP tools over Streamable HTTP — Lite's exact MCP stack/version.
+         The AspNetCore package brings the Microsoft.AspNetCore.App framework reference
+         (Kestrel/WebApplication) transitively, same as it does for Lite. -->
+    <PackageReference Include="ModelContextProtocol" Version="2.1.0" />
+    <PackageReference Include="ModelContextProtocol.AspNetCore" Version="2.1.0" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <ProjectReference Include="..\..\PerformanceMonitor.Alerting\PerformanceMonitor.Alerting.csproj" />
+    <ProjectReference Include="..\..\PerformanceMonitor.Common\PerformanceMonitor.Common.csproj" />
+    <ProjectReference Include="..\..\PerformanceMonitor.Collectors\PerformanceMonitor.Collectors.csproj" />
+    <!-- AN3: the analysis pipeline (DarlingAnalysisService/PgPlanFetcher). Dependency points
+         service → analysis only; the analysis library never references the service. -->
+    <ProjectReference Include="..\PerformanceMonitor.Darling.Analysis\PerformanceMonitor.Darling.Analysis.csproj" />
+    <!-- The plan-analysis MCP tools run the SHARED ShowPlanParser/PlanAnalyzer and serialize via
+         McpPlanAnalysisFormatter (the same projection both apps' McpPlanTools call). Referenced
+         directly (it also flows transitively through Darling.Analysis) since it is a direct dependency. -->
+    <ProjectReference Include="..\..\PerformanceMonitor.PlanAnalysis\PerformanceMonitor.PlanAnalysis.csproj" />
+    <ProjectReference Include="..\PerformanceMonitor.Darling.Storage\PerformanceMonitor.Darling.Storage.csproj" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <None Include="darling.sample.json" CopyToOutputDirectory="PreserveNewest" />
+    <!-- #1562: the web dashboard's static assets (Builder 3 owns wwwroot/). Copied beside the binary so the
+         web host's content/web root (pinned to AppContext.BaseDirectory) finds them under a Windows service. -->
+    <Content Include="wwwroot\**\*" CopyToOutputDirectory="PreserveNewest" />
+    <!-- The install/uninstall scripts ride the publish output to the ZIP ROOT (beside the exe), so both
+         the release and nightly zips carry them with no packaging-workflow changes - same delivery
+         mechanism as darling.sample.json. -->
+    <None Include="..\tools\install-darling.ps1" Link="install-darling.ps1" CopyToOutputDirectory="PreserveNewest" />
+    <None Include="..\tools\uninstall-darling.ps1" Link="uninstall-darling.ps1" CopyToOutputDirectory="PreserveNewest" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <InternalsVisibleTo Include="Darling.Tests" />
+  </ItemGroup>
+</Project>
diff --git a/Darling/PerformanceMonitor.Darling.Viewer/packages.lock.json b/Darling/PerformanceMonitor.Darling.Viewer/packages.lock.json
index c1d2b7580..d6c824b89 100644
--- a/Darling/PerformanceMonitor.Darling.Viewer/packages.lock.json
+++ b/Darling/PerformanceMonitor.Darling.Viewer/packages.lock.json
@@ -478,7 +478,6 @@
         "type": "Project",
         "dependencies": {
           "Microsoft.Data.SqlClient": "[7.0.2, )",
-          "ModelContextProtocol": "[2.1.0, )",
           "PerformanceMonitor.Common": "[1.0.0, )"
         }
       },
diff --git a/Lite.Tests/packages.lock.json b/Lite.Tests/packages.lock.json
index 077f6e9bc..01bcfe70b 100644
--- a/Lite.Tests/packages.lock.json
+++ b/Lite.Tests/packages.lock.json
@@ -946,7 +946,6 @@
         "type": "Project",
         "dependencies": {
           "Microsoft.Data.SqlClient": "[7.0.2, )",
-          "ModelContextProtocol": "[2.1.0, )",
           "PerformanceMonitor.Common": "[1.0.0, )"
         }
       },
diff --git a/Lite/packages.lock.json b/Lite/packages.lock.json
index d58834afb..b52f43964 100644
--- a/Lite/packages.lock.json
+++ b/Lite/packages.lock.json
@@ -808,7 +808,6 @@
         "type": "Project",
         "dependencies": {
           "Microsoft.Data.SqlClient": "[7.0.2, )",
-          "ModelContextProtocol": "[2.1.0, )",
           "PerformanceMonitor.Common": "[1.0.0, )"
         }
       },
diff --git a/PerformanceMonitor.PlanAnalysis/PerformanceMonitor.PlanAnalysis.csproj b/PerformanceMonitor.PlanAnalysis/PerformanceMonitor.PlanAnalysis.csproj
index 840a2063f..773e270e6 100644
--- a/PerformanceMonitor.PlanAnalysis/PerformanceMonitor.PlanAnalysis.csproj
+++ b/PerformanceMonitor.PlanAnalysis/PerformanceMonitor.PlanAnalysis.csproj
@@ -1,37 +1,36 @@
-<Project Sdk="Microsoft.NET.Sdk">
-  <PropertyGroup>
-    <TargetFramework>net10.0</TargetFramework>
-    <Nullable>enable</Nullable>
-    <ImplicitUsings>disable</ImplicitUsings>
-    <LangVersion>latest</LangVersion>
-    <RootNamespace>PerformanceMonitor.PlanAnalysis</RootNamespace>
-    <AssemblyName>PerformanceMonitor.PlanAnalysis</AssemblyName>
-    <Company>Darling Data, LLC</Company>
-    <Copyright>Copyright © 2026 Darling Data, LLC</Copyright>
-    <EnableNETAnalyzers>true</EnableNETAnalyzers>
-    <AnalysisLevel>latest-recommended</AnalysisLevel>
-    <NoWarn>CA1849;CA2007;CA1508;CA1822;CA1805;CA1510;CA1816;CA1861;CA1845;CA2201;CA1848;CA1852;CA1305;CA1860;CA1707;CA1507;CA1806</NoWarn>
-  </PropertyGroup>
-
-  <ItemGroup>
-    <ProjectReference Include="..\PerformanceMonitor.Common\PerformanceMonitor.Common.csproj" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <!-- ActualPlanExecutor RE-EXECUTES a query against the target to capture its ACTUAL plan (SET STATISTICS
-         XML), so it needs the SqlClient runtime connection surface. Version matches Lite/Dashboard/the Darling
-         service (7.0.1) so there is no transitive version skew. -->
-    <PackageReference Include="Microsoft.Data.SqlClient" Version="7.0.2" />
-    <PackageReference Include="ModelContextProtocol" Version="2.1.0" />
-  </ItemGroup>
-
-  <ItemGroup>
-    <InternalsVisibleTo Include="PerformanceMonitorLite" />
-    <InternalsVisibleTo Include="PerformanceMonitorDashboard" />
-    <InternalsVisibleTo Include="Lite.Tests" />
-    <InternalsVisibleTo Include="Dashboard.Tests" />
-    <!-- The Darling service/viewer call the SHARED ActualPlanExecutor + QueryModificationDetector; Darling.Tests
-         also pins the executor's internal plan-capture seam (IActualPlanResultReader) with a scripted reader. -->
-    <InternalsVisibleTo Include="Darling.Tests" />
-  </ItemGroup>
-</Project>
+<Project Sdk="Microsoft.NET.Sdk">
+  <PropertyGroup>
+    <TargetFramework>net10.0</TargetFramework>
+    <Nullable>enable</Nullable>
+    <ImplicitUsings>disable</ImplicitUsings>
+    <LangVersion>latest</LangVersion>
+    <RootNamespace>PerformanceMonitor.PlanAnalysis</RootNamespace>
+    <AssemblyName>PerformanceMonitor.PlanAnalysis</AssemblyName>
+    <Company>Darling Data, LLC</Company>
+    <Copyright>Copyright © 2026 Darling Data, LLC</Copyright>
+    <EnableNETAnalyzers>true</EnableNETAnalyzers>
+    <AnalysisLevel>latest-recommended</AnalysisLevel>
+    <NoWarn>CA1849;CA2007;CA1508;CA1822;CA1805;CA1510;CA1816;CA1861;CA1845;CA2201;CA1848;CA1852;CA1305;CA1860;CA1707;CA1507;CA1806</NoWarn>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <ProjectReference Include="..\PerformanceMonitor.Common\PerformanceMonitor.Common.csproj" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <!-- ActualPlanExecutor RE-EXECUTES a query against the target to capture its ACTUAL plan (SET STATISTICS
+         XML), so it needs the SqlClient runtime connection surface. Version matches Lite/Dashboard/the Darling
+         service (7.0.1) so there is no transitive version skew. -->
+    <PackageReference Include="Microsoft.Data.SqlClient" Version="7.0.2" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <InternalsVisibleTo Include="PerformanceMonitorLite" />
+    <InternalsVisibleTo Include="PerformanceMonitorDashboard" />
+    <InternalsVisibleTo Include="Lite.Tests" />
+    <InternalsVisibleTo Include="Dashboard.Tests" />
+    <!-- The Darling service/viewer call the SHARED ActualPlanExecutor + QueryModificationDetector; Darling.Tests
+         also pins the executor's internal plan-capture seam (IActualPlanResultReader) with a scripted reader. -->
+    <InternalsVisibleTo Include="Darling.Tests" />
+  </ItemGroup>
+</Project>
diff --git a/deprecated/Dashboard.Tests/packages.lock.json b/deprecated/Dashboard.Tests/packages.lock.json
index 2a3c804c5..fc818cf00 100644
--- a/deprecated/Dashboard.Tests/packages.lock.json
+++ b/deprecated/Dashboard.Tests/packages.lock.json
@@ -918,7 +918,6 @@
         "type": "Project",
         "dependencies": {
           "Microsoft.Data.SqlClient": "[7.0.2, )",
-          "ModelContextProtocol": "[2.1.0, )",
           "PerformanceMonitor.Common": "[1.0.0, )"
         }
       },
diff --git a/deprecated/Dashboard/packages.lock.json b/deprecated/Dashboard/packages.lock.json
index 1ba17db67..1d156b1c3 100644
--- a/deprecated/Dashboard/packages.lock.json
+++ b/deprecated/Dashboard/packages.lock.json
@@ -779,7 +779,6 @@
         "type": "Project",
         "dependencies": {
           "Microsoft.Data.SqlClient": "[7.0.2, )",
-          "ModelContextProtocol": "[2.1.0, )",
           "PerformanceMonitor.Common": "[1.0.0, )"
         }
       },
diff --git a/deprecated/Installer/packages.lock.json b/deprecated/Installer/packages.lock.json
index af333d919..39ad2a429 100644
--- a/deprecated/Installer/packages.lock.json
+++ b/deprecated/Installer/packages.lock.json
@@ -22,9 +22,9 @@
       },
       "Microsoft.NET.ILLink.Tasks": {
         "type": "Direct",
-        "requested": "[10.0.8, )",
-        "resolved": "10.0.8",
-        "contentHash": "dVbSXGIFNR5nZcv2tOLoWI+a9T4jtFd77IYjuND+QVe360qWgAF7H0WtoopYhRw/+SgpGUTyrkrh+65+ClNnfw=="
+        "requested": "[10.0.10, )",
+        "resolved": "10.0.10",
+        "contentHash": "f5VCIE7AJpd5YvzNTeMGVzQIgyE9tX+AreTYwQF+REbu+DZo/2Ae+jNSwhPEYrVz6RRkd7y8ubXjk6Nn6Ka+Cg=="
       },
       "Azure.Core": {
         "type": "Transitive",