ClientCraft.Core 0.1.0-alpha.18

Client Craft Core

Native Umbraco integration and operational adapters for Client Craft. The package requires ClientCraft.Sdk, but neither VisualBuilder nor Website. It connects website content and customer work to hosted platform services; installing Core does not self-host those services. Current development source is alpha.18; the captured alpha.17 candidate and SDK preview.11 remain immutable.

Extraction retains the original434shared HTTP route declarations, dedicated Google/recent-authentication boundaries, standalone commercial/customer payment and realtime controllers, commerce adapters, operational helpers and Razor partials. Schema GUIDs, aliases, durable migration states and tenant content are preserved. Tenant branding and hosted Website ownership filters remain host-owned.

Selected source qualification:165security/transport/HTTP/Razor/realtime cases, one storefront rendering case and native controller/action-service composition checks passed. Captured Core17 additionally passed eight native Google cases with real CMS PKCE authorization and controlled central API, three native schema/additive booking/discovery cases, and the full meta/legacy migration matrices. These are bounded selections, not full-project release proof. See the exact source and artifact identities in the linked QA reports.

Native login and editorial permissions remain authoritative. Self-hosted defaults do not rewrite native start nodes. Host-owned realtime mapping, managed login and hosted isolation are explicit responsibilities. A workspace selection or browser header does not grant tenant authority or supply trusted integration credentials. Preserve native authentication defaults.

Target: .NET10 and Umbraco17.7.1; declared native range [17.7.1,18.0.0) is not a tested wider-version matrix. Do not coinstall with legacy ClientCraft.uCRM. No automatic content conversion or schema deletion is included.

Qualification-only example: dotnet add package ClientCraft.Core --version 0.1.0-alpha.17 --source <candidate-feed>. Production requires an exact approved public NuGet version, never the candidate feed. Immutable installation/replay/removal proof is recorded in META6-NATIVE-LIFECYCLE-QA.md and PUBLISHED-UCRM-TO-META6-NATIVE-LIFECYCLE-QA.md. Operational source evidence is in CORE17-OPERATIONAL-RUNTIME.md and CORE17-STANDALONE-RUNTIME.md; artifact schema and Google proof are in CORE17-IMMUTABLE-NATIVE-SCHEMA-QA.md and GOOGLE-CORE17-NATIVE-OPERATIONS.md, all under docs/releases/.

Release remains Partial: the captured SDK11 response-validation defect requires a corrected, dependency-consistent successor. The native Core Chromium login/module/recovery scenario passed against the captured assemblies; that UI check does not qualify the new SDK correction. Named human artifact approval remains pending. Website dependency audit findings are separate; purchasing a new ImageSharp licence is not a package-release prerequisite. Numeric coverage is unmeasured under the approved UTC exception ending2026-11-15; security and functional requirements remain mandatory. No new public package or production cutover is claimed.

MIT license: repository LICENSE. Hosted services retain their applicable commercial terms. Documentation: https://client-craft.com/hub/. Support/security reports: https://client-craft.com/contact/. Do not include credentials in reports.