0.26.1 (2026-07-21) Bug Fixes extract: count MAX_USER_PROMPT_CHARS as Unicode scalars (ea798f5) extract: count maxChars as Unicode scalars (f319de6) server: require auth on admin and metrics routes, restrict CORS (1a66247)
