chore(release): 5.1.0 version lockstep across all five packages

Bump coreaiunity 5.0.10 -> 5.1.0 to restore the coreai/coreaiunity
lockstep rule; align dependency pins (coreai, coreaiunity) to 5.1.0 in
coreaiunity, coreaimods, coreaihub, coreaibenchmark; add 5.1.0
changelog entries describing the audit remediation wave (fixes audit #2
finding A-03).

Author: NeoXider

Assets/CoreAI/CHANGELOG.md

@@ -2,6 +2,25 @@
 
 ## [Unreleased]
 
+### 5.1.0 - audit remediation: safe mutation pipeline, bounded queues/stores (2026-07-10)
+
+- **Tool execution policy (F-01):** per-call duplicate signatures registered only on success (failed
+  calls stay retryable), a single serialized mutation chain covering `world_command`,
+  `component_command`, `execute_lua`, `call_skill_tool`, and streamed mutating calls deferred to
+  turn completion so mutations never overlap and cross-turn echoes become structured
+  `{ok, duplicate}` no-ops before side effects.
+- **Orchestrator backpressure (F-10):** `AiOrchestrationQueueOptions.MaxPending` admission cap
+  (default 64) with `AiOrchestrationQueueFullException`, binary-search insertion instead of
+  per-enqueue re-sort, and a Dispose contract that cancels in-flight work and completes all
+  pending tasks/streams.
+- **Version retention (F-11):** new `VersionRetentionPolicy` bounds Lua-script and data-overlay
+  version stores (original + current + last N intermediates, byte budget); revision `Index` is now
+  stable across eviction and revert is index-based in both mod runtimes.
+- **Audit chain (F-07):** `AuditEntry`/`AuditLogVerifier` support rotation markers and anchored
+  genesis (`VerifyChainedSet`) so rotated files verify standalone while staying chained.
+- Audits: `Docs/REPOSITORY_AUDIT_2026-07-10.md` and `Docs/REPOSITORY_AUDIT_2_2026-07-10.md` in the
+  repository root document the findings and the verification of this wave.
+
 ### 5.0.10 - version lockstep with coreaiunity 5.0.10 (2026-07-06)
 
 - No changes; released to keep both packages on identical versions. (The self-spawning model-download

Assets/CoreAI/package.json

@@ -1,6 +1,6 @@
 {
   "name": "com.neoxider.coreai",
-  "version": "5.0.10",
+  "version": "5.1.0",
   "displayName": "CoreAI",
   "unity": "6000.0",
   "description": "Portable C# core for CoreAI \u2014 LLM agents that call your game code. Orchestration, function-calling tools, agent memory, AgentBuilder, SkillSet, and production resilience (retries, timeouts, rate limits), with no UnityEngine dependency. LLM and Lua are optional modules (COREAI_NO_LLM / COREAI_NO_LUA), so the core compiles without them \u2014 install only what your game uses. Unity integration ships in com.neoxider.coreaiunity.",

Assets/CoreAIHub/package.json

@@ -1,6 +1,6 @@
 {
   "name": "com.neoxider.coreaihub",
-  "version": "5.0.10",
+  "version": "5.1.0",
   "displayName": "CoreAI Hub (UI Toolkit)",
   "unity": "6000.0",
   "description": "Optional UI Toolkit window for CoreAI: a tabbed Hub that renders pages registered into CoreAI's HubPageRegistry (Chat, Settings, Statistics, Mods, and C#/Lua-authored pages). Lazy per-tab content, live tab rebuild on register/unregister, semi-transparent runtime panel, and a future path to Unity 6.5 world-space PanelRenderer. Install this package only when you want the built-in Hub window; without it CoreAI still exposes the registry so you can render pages on your own uGUI/UITK canvas via the API. Depends on com.neoxider.coreai.",
@@ -11,6 +11,7 @@
   "license": "PolyForm-Noncommercial-1.0.0",
   "licensesUrl": "https://github.com/NeoXider/CoreAI/blob/main/LICENSE",
   "dependencies": {
-    "com.neoxider.coreai": "5.0.10"
+    "com.neoxider.coreai": "5.1.0",
+    "com.neoxider.coreaiunity": "5.1.0"
   }
 }

Assets/CoreAIMods/package.json

@@ -1,6 +1,6 @@
 {
   "name": "com.neoxider.coreaimods",
-  "version": "5.0.10",
+  "version": "5.1.0",
   "displayName": "CoreAI Mods (Lua)",
   "unity": "6000.0",
   "description": "Lua modding layer for CoreAI: the MoonSharp sandbox, execute_lua and manage_mods tools, the Lua Modding skill, the mod runtime, persistent mod stores, gameplay bindings, and mod UI. Depends on com.neoxider.coreai / com.neoxider.coreaiunity. Install this package only when you want AI/player-authored Lua mods; without it CoreAI compiles Lua-free. Requires the MoonSharp package (org.moonsharp.moonsharp).",
@@ -11,7 +11,7 @@
   "license": "PolyForm-Noncommercial-1.0.0",
   "licensesUrl": "https://github.com/NeoXider/CoreAI/blob/main/LICENSE",
   "dependencies": {
-    "com.neoxider.coreai": "5.0.10",
-    "com.neoxider.coreaiunity": "5.0.10"
+    "com.neoxider.coreai": "5.1.0",
+    "com.neoxider.coreaiunity": "5.1.0"
   }
 }

Assets/CoreAiUnity/CHANGELOG.md

@@ -4,6 +4,37 @@ Unity host: **CoreAI.Source** build, EditMode / PlayMode tests, Editor menus, do
 
 ## [Unreleased]
 
+### 5.1.0 - audit remediation: durability, fallback correctness, sandbox hardening (2026-07-10)
+
+Release of the 2026-07-10 audit remediation wave (findings F-01…F-16 of
+`Docs/REPOSITORY_AUDIT_2026-07-10.md`; verification in `Docs/REPOSITORY_AUDIT_2_2026-07-10.md`).
+Version lockstep with `com.neoxider.coreai` 5.1.0; `coreaimods` / `coreaihub` / `coreaibenchmark`
+ship the same version.
+
+- **World state (F-04, F-06):** `Save()`/`DestroyAllWorldObjects()` include inactive objects;
+  `Reset()` clears unresolved objects; WebGL IDBFS flush after save; always-on auto-save loop with
+  a single quit-save; mod rehydrate now waits for `WorldRestoreCompleted` (restore-before-mods
+  ordering guarantee).
+- **`load_scene` (F-05):** validates the scene against Build Settings (plus an optional per-scope
+  whitelist for Lua) and fails with a clear error instead of reporting success.
+- **Audit log writer (F-07):** bounded queue (drop-oldest + dropped-count marker), drain-on-Dispose
+  with deadline, seq/hash committed only after a successful write, rotation marker + anchor entries,
+  serialized flushes, shared `CoreAiWebGlPersistence` IDBFS helper.
+- **Fallback (F-09):** real streaming/internal timeouts now fall back to the secondary backend;
+  caller cancellation still rethrows; streaming "commitment" requires visible text, a tool call, or
+  an error (control chunks no longer commit the primary).
+- **Lua sandbox (F-08, in `coreaimods`):** per-instruction GC allocation budget (default 64 MB) on
+  both MoonSharp and Lua-CSharp VMs; `table.concat` output capped like `string.rep`.
+- **Mod events (F-13):** per-subscriber isolation — a throwing subscriber no longer breaks
+  `LoadMod` or starves other subscribers.
+- **Diagnostics (F-16, F-23):** turn-trace sink capped (32 roles) with `Clear()`; IMGUI dashboards
+  rebuild text at most 4×/sec.
+- **Hub mods UX:** version history + revert, bundled-update badge + apply, export/import via
+  clipboard, cached mod list with debounced search.
+- **Packaging (F-02):** Hub-facing mods code extracted into optional `CoreAI.Mods.Hub` assembly
+  (self-disables without the Hub package); benchmark suite extracted into
+  `com.neoxider.coreaibenchmark`; package dependency graphs now match real asmdef references.
+
 ### 5.0.13 - Tool round splits streaming assistant bubble (2026-07-09)
 
 - **Fix: assistant prose streamed before and after a tool round now lands in two separate bubbles (claude/cursor-style) instead of one.** Previously the streaming bubble opened at the start of the turn was reused for all prose, so tool-call bubbles were appended *below* it — leaving the final answer at the top and the tool calls at the bottom, forcing the user to scroll up. At a tool-round boundary the in-flight prose bubble is now sealed and any post-tool prose opens a fresh bubble beneath the tool-call bubbles.

Assets/CoreAiUnity/package.json

@@ -1,6 +1,6 @@
 {
   "name": "com.neoxider.coreaiunity",
-  "version": "5.0.10",
+  "version": "5.1.0",
   "displayName": "CoreAI Unity",
   "unity": "6000.0",
   "description": "Unity framework for LLM-powered NPCs and agents that call your game code \u2014 drop-in chat UI, function-calling tools, persistent memory, token-by-token streaming, and per-role LLM routing. Runs on a local GGUF model (via LLMUnity) or any OpenAI-compatible API; proven on a 4 GB local model. Unity layer for com.neoxider.coreai.",
@@ -11,6 +11,6 @@
   "license": "PolyForm-Noncommercial-1.0.0",
   "licensesUrl": "https://github.com/NeoXider/CoreAI/blob/main/LICENSE",
   "dependencies": {
-    "com.neoxider.coreai": "5.0.10"
+    "com.neoxider.coreai": "5.1.0"
   }
 }