v1.9.0

Added

• loadPlugins(paths, coreToolNames, { trusted }): a path listed under plugins: in the agent's own config.yaml now loads even when it isn't published under node_modules/@fozikio/* or node_modules/cortex-*, so a repo can ship its own plugin (e.g. .fozikio/plugins/codebase-mind). The node_modules allowlist stays the default for any caller that doesn't pass trusted: true — it was written to stop a tool argument from loading arbitrary code, and a config file the operator wrote isn't that (#114).
• observe and notice accept name, category and tags, used verbatim; Phase A keeps them (#114).
• memory_origin: 'source': a mirrored, verbatim memory that dream links and retrieves but never rewrites, merges or abstracts from (#114). Cluster routes an observation to the nearest memory that is not one, or treats it as novel (it becomes its own memory); refine and hindsight leave it out, score does not reschedule it, abstract never samples it as a member, find_duplicates reports a pair with one but never merges it, and checkRewrite refuses origin: 'source' before any text check. Edge discovery, retrieval and spread activation see it as before. MemorySummary now carries memory_origin.

Changed

• observe with explicit salience ≥ 0.7 creates the memory on a link decision too, with the implied related edge; before, every related entry after the first queued whatever its salience (#114).

Fixed

• The auto-consolidator counts unprocessed rows in the store instead of observe calls in the process, so rows promoted or processed elsewhere no longer trigger a run (#114).