[ProgrammerNomad]

LaraCoreKit previously coupled its reusable modules to the demo application, so extracting only modules/Core would omit authentication, administration, migrations and shared configuration. This change packages the public frontend and admin functionality together as programmernomad/laracorekit, while the marketing site, docs viewer, component showcase, sample accounts and demo dependency remain in the host.

The package is maintained under packages/core and exported to https://github.com/ProgrammerNomad/laracorekit-package. Developers can install that GitHub source through Composer now; v0.1.0 is published on Packagist and was installed successfully in a fresh Laravel app without path/VCS overrides. The explicit installer publishes config/assets without silently migrating the database, and administrator creation uses an interactive password prompt.

The website now explains both installation paths, includes responsive navigation and real screenshots, and separates showcase JavaScript from ordinary pages. Documentation describes implemented features and removes unsupported API/profile/media-browser claims. The host exposes Markdown source, an llms.txt index, accurate metadata and a dynamic sitemap.

Security changes cover authentication throttling, guarded sample seeding, direct record access, settings-save/publication authorization, public HTML sanitization and publication timing. Default avatars are generated locally. Compatible PHP dependencies and the Vite toolchain are updated, with unused dependencies removed.

Validation completed locally on PHP 8.3 and Node 24:

• 31 PHPUnit tests / 137 assertions on both SQLite and isolated MySQL 8.0.45; Pint and PHPStan passed.
• Root/package Composer strict validation and Composer/npm audits passed with no advisories.
• Package and host production builds passed.
• Independent Laravel consumer passed local-path and actual GitHub VCS installation, public/admin login routes, assets, safe defaults and cached config/routes.
• Original red/black branding and seven-width header/page-overflow checks (320–1440px) passed.
• Browser checks passed desktop/mobile navigation, theme switching, Arabic RTL and all 46 linked documentation pages; all 122 linked showcase URLs returned HTTP 200.

Remote Actions did not execute: GitHub reports the account is locked due to a billing issue (https://github.com/ProgrammerNomad/laracorekit-package/actions/runs/39212465937). Remote CI remains unverified until that account issue is resolved. Packagist publication is complete. Production website deployment remains pending; the maintainer confirms that merging main triggers it automatically.

Review docs/upgrade-guide.md before deployment: module paths/providers changed while namespaces and migration filenames were preserved. The package initially targets fresh Laravel applications; existing custom user models and conflicting routes need explicit integration. Full implementation evidence and remaining release actions are in docs/implementation-report.md.

GitHub vulnerability alerts and automatic security-fix PRs are enabled on both repositories. Added MySQL CI, weekly distribution maintenance and a manual release-notes PR workflow. Current release/maintenance instructions are in docs/package-release.md.

The homepage, host README, package README, demo-module introduction and installation guide now prioritize tagged Composer installation. The main README has a six-image gallery and a reproducible four-view, 12-second GIF (~296 KB), assembled from real disposable demo screenshots. Dark-background branding and showcase social-preview image paths were corrected. The distribution README uses an immutable image-source commit.

Clean consumer CI now checks both path source and the published Packagist release. Local checks pass: tests, Pint, PHPStan, audits, production build, registry consumer, seven-width header/overflow checks and browser navigation across 46 documentation pages. Resolve the GitHub account billing lock and pass remote checks before merging this production deployment.