v0.67.1

Added

• MCP tool responses can be capped per server. Set max_output_chars or use --max-output-chars with chimera mcp add to keep a large response from overwhelming the prompt; truncated output reports its original size.

• Document running rea in Chimera Desktop on Windows. Record the measured Ghidra, Java, environment, timeout, deferred-tool and response-size setup.

Fixed

• Code sessions and step logs remain valid JSON when redacting credential headers. Redact string values before serialization so escaped quotes in a message cannot be consumed by a header pattern and make the saved conversation unreadable.

• The desktop shell takes rustls 0.23.46. RustSec published four advisories against 0.23.45 on 2026-10-14 (RUSTSEC-2026-0346 to 0349), and cargo audit turned the supply-chain job on main red. 0.23.46 declares the same dependencies and features, so only the version and checksum in Cargo.lock change.