/package-versions

How package versions resolve across the platform and every plugin repo, and how to audit a pin before removing it. Use when adding a PackageReference in a plugin repo, when a module build fails naming only a package, or when pruning Directory.Packages.props.

• Instructions: # Package versions — one file, five repos **The platform's `Directory.Packages.props` is the ONE source of package versions for every plugin repo.** The plugin repos declare no `PackageVersion` of their own: their `src/Directory.Packages.props` exists to say so, and every version resolves from the platform checkout through `$(MeshWeaverRoot)`. That is the whole mechanism, and it has one sharp consequence. ## 🚨 Auditing a pin means auditing FIVE repos A pin with no `PackageReference` in the platform is **not** dead. The extracted modules — the AI providers, Mail/Graph, the agent SDKs, the Azure backends — live in the plugin repos and reference their packages from there, while their versions still resolve from the platform's file. Measured 2026-08-21: an audit that scanned the platform alone called 60 pins orphaned. Fourteen of them were live satellite dependencies (`Azure.AI.OpenAI`, `Microsoft.Agents.AI.*`, `Microsoft.Extensions.AI.OpenAI`, `Microsoft.Graph`, `ClaudeAgentSdk`, `GitHub.Copilot.SDK`, `OpenAI`, …). Removing them turned **nine module-bundle jobs red** on the plugins trunk — and the failure named only the package, at "Build the module", four steps from the cause. **Before removing any pin, scan all five repos:** ```bash python3 - <<'PY' import re, glob, os used = set() for repo in ['_{/code/MeshWeaver', '}/code/MeshWeaver.Plugins', '_{/code/MeshWeaver.SocialMedia', '}/code/MeshWeaver.Reinsurance', '_{/code/MeshWeaver.Education']: root = os.path.expanduser(repo) for pat in ('**/*.csproj', '**/*.props', '**/*.targets'): for f in glob.glob(os.path.join(root, pat), recursive=True): if any(x in f for x in ('/bin/', '/obj/', '.worktrees', '.claude')): continue try: used.update(re.findall(r'PackageReference\s+(?:Include|Update)="([^{"]+)"', open(f).read())) except Exception: pass pinned = re.findall(r'PackageVersion Include="([}"]+)"', open(os.path.expanduser('}/code/MeshWe…
• Auto mount: yes
• Launches sub thread: no