Release Notes — Rikugan v1.1

Agent Stability & Performance

• 5-phase agent refactor — extracted mode runners from monolithic loop, added error hysteresis, tool caching, running token counter, knowledge base dedup, and bounded message queue
• Race condition fixes — MCP watchdog, proper thread synchronization across the agent loop
• AST-based script guard — scripts are now validated via AST analysis instead of string matching

Security Hardening

• Anti-LLM evasion — obfuscation-resistant IOC filtering, self-injection defense, hexdump bypass protection
• Sanitization hardening — tag breakout prevention, error bypass mitigation, Anthropic magic string defense
• Profile-aware security — granular IOC filters and tool restrictions tied to analysis profiles

Profiles

• Dynamic denied tools — profile tool restrictions now read from the live registry and are enforced at execution time
• Profile name fix — profiles now save under the displayed name instead of an internal slug

MCP Client

• Hot reload — MCP servers reload automatically when settings change
• Compatibility fixes — handle both server_info and serverInfo on InitializeResult, unwrap ExceptionGroup for clearer startup errors, handle IDA's IDAPythonStdOut lacking fileno()

Installer

• Universal one-line installer — single curl | bash (or PowerShell) command auto-detects IDA Pro, Binary Ninja, or both
• Bundled Python fix — installers now use each host's bundled Python for pip install instead of the system Python

UI

• Scroll lock — auto-scroll stops when you scroll up during an agent run
• Typewriter removed — buffered text reveal caused noticeable chat slowness, reverted to direct rendering

Tools & Skills

• Pseudocode comment tools for IDA — add/edit comments directly in decompiled output
• IDA 9.x type migration — structs, enums, and lvar retyping ported to the new API
• Unified deobfuscation skill with host-specific references for both IDA and Binary Ninja
• Configurable rate-limit and stop-during-retries for IDA provider calls

Token Tracking

• Anthropic prompt caching fix — context window display now correctly accounts for cache read/creation tokens

CI & Code Quality

• Full CI pipeline — ruff format, ruff lint, mypy, 1072 pytest tests, desloppify objective score gate
• Provider error handling — graceful fallback when SDK packages aren't installed

Docs

• Slimmed README focused on pitch + quick start, full docs on https://rikugan.reversing.codes
• Shiboken Python 3.14 warning documented