v0.26.1

0.26.1 (2026-07-21)

Bug Fixes

• extract: count MAX_USER_PROMPT_CHARS as Unicode scalars (ea798f5)
• extract: count maxChars as Unicode scalars (f319de6)
• server: require auth on admin and metrics routes, restrict CORS (1a66247)