Use merged notification providers through normal Git dependencies

Author: NWYLZW

.agents/docs/notifications.md

@@ -6,26 +6,22 @@ Declare `notifications` in injection requirements. Field validation and persiste
 business state stay beside the relevant control or object. Do not introduce a
 custom Toast, page-wide operation error, or raw exception message.
 
-The [Host guide](https://github.com/cordisx/cordisx/blob/3158c0401a3f604727f623f1a8ac584017dd8540/.agents/docs/notifications.md)
+The [Host guide](https://github.com/cordisx/cordisx/blob/3cfe370eb7abf33e16686fbd82659cd441247fbd/.agents/docs/notifications.md)
 owns usage and interaction guidance; the
-[Protocol contract](https://github.com/cordisx/cordisx-protocol/blob/dfa2c5fa956184df11a97955b8e5c74a76cb8876/.agents/docs/notifications-v1.md)
-owns the public API. This migration is an experimental candidate, not a release.
+[Protocol contract](https://github.com/cordisx/cordisx-protocol/blob/f46dd21e15a949a26f05f89bf11dea339fc60c02/.agents/docs/notifications-v1.md)
+owns the public API. Source merge and package publication are separate stages.
 
-## Reproduce the candidate SDK
+## Development dependencies
 
-The local SDK archive is deliberately excluded from Git. Its exact Host commit,
-Protocol source and hashes are recorded in [notification-sdk-evidence.json](../../notification-sdk-evidence.json).
-From a Host checkout at `efbff656d84b482d51598bc5ba303d24134e0c62`, run the
-[SDK builder](https://github.com/cordisx/cordisx/blob/main/.agents/docs/sdk-source-packaging.md)
-into a fresh directory, then run from this package:
+`package.json` and `package-lock.json` pin formally merged Host and Protocol
+commits. Install through the repository's normal dependency flow:
 
 ```sh
-mkdir -p .cache/sdk
-cp /path/to/sdk/packages/cordisx-0.1.0-beta.2.tgz .cache/sdk/cordisx-efbff656d84b.tgz
-npm ci --ignore-scripts
+npm ci
 npm run check
 ```
 
-Compare the archive SHA-256 with the evidence before installation. Use one shared
-Protocol override; independent copies break branded public types. This explicit
-SDK build avoids recursive Git prepare scripts and does not change the API contract.
+Keep the shared Protocol override so public branded types resolve to one copy.
+A missing notification service requires a supported Host upgrade; do not recreate
+notification UI as an older-Host fallback. The former local candidate SDK archive
+is no longer an installation prerequisite.

AGENTS.md

@@ -21,10 +21,7 @@ manually positioned alert, or page-wide success/error paragraph. Keep field
 validation and durable business state beside the relevant object. Use stable
 semantic `kind` values, localized safe text, and notification rules owned by Host;
 never expose raw exceptions or notify on every polling attempt.
-See the [Host notification guide](https://github.com/cordisx/cordisx/blob/3158c0401a3f604727f623f1a8ac584017dd8540/.agents/docs/notifications.md)
+See the [Host notification guide](https://github.com/cordisx/cordisx/blob/3cfe370eb7abf33e16686fbd82659cd441247fbd/.agents/docs/notifications.md)
 for the interaction contract and older-Host capability boundary.
 
-The notification migration currently uses exact feature-branch SDK/Protocol
-revisions; it is not evidence of a formal release or a Mono pointer upgrade.
-
-Candidate setup: [notification migration](./.agents/docs/notifications.md).
+Dependency setup: [notification migration](./.agents/docs/notifications.md).

README.md

@@ -42,4 +42,4 @@ Host-owned implementation. This repository is licensed under
 
 ## Notification feedback
 
-See [operation notifications and candidate SDK setup](./.agents/docs/notifications.md).
+See [operation notifications and development dependencies](./.agents/docs/notifications.md).

notification-sdk-evidence.json

@@ -38,13 +38,13 @@
   },
   "devDependencies": {
     "@cordisx/eslint-config": "github:cordisx/cordisxmono#c63c2e8c2ba7e11502934a52ad2ce3734e804cdc",
-    "@cordisx/protocol": "github:cordisx/cordisx-protocol#f3e18c925c34d90fdf203c158811cef10f7ebf57",
+    "@cordisx/protocol": "github:cordisx/cordisx-protocol#f46dd21e15a949a26f05f89bf11dea339fc60c02",
     "@deepseek-ai/cordis": "4.0.1",
     "@deepseek-ai/schemastery": "3.18.1",
     "@projectwallace/stylelint-plugin": "0.7.0",
     "@typescript-eslint/parser": "8.69.0",
     "@vitejs/plugin-react": "6.1.0",
-    "cordisx": "file:.cache/sdk/cordisx-efbff656d84b.tgz",
+    "cordisx": "github:cordisx/cordisx#3cfe370eb7abf33e16686fbd82659cd441247fbd",
     "dprint": "0.57.1",
     "eslint": "9.39.4",
     "stylelint": "17.15.0",