v2.1.0 — first public release

First public release.

Install: { "plugin": ["opencode-dejavu"] } in opencode.json, or clone + re-export (see README).

Highlights

• Gate state machine: remind on first same-session encounter, hard block after a reminded retry fails; dejavu:proceed escape hatch
• Two-scope store: project gates escalate to global after 2+ distinct project dirs
• Detection: bash exit codes, bash text scan, event stream; chain-segment matching
• Blocking policy: only non-diagnostic bash may block; probes never block
• Secret scrubbing before any persistence; 60-day TTL expiry; recurredAfterGate health metric
• scripts/doctor.ts pathology report, companion skill, /dejavu command, compaction hook

Hardening (same release line)

• pendingCalls leak fixed + capped; ReDoS-safe quoted-string regex; fuller secret patterns (Google/PEM-body/KEY=VALUE); fuzzy floor ≥3 edits

Full notes: CHANGELOG.md