security: private key signer callback, token masking, source map removal, metadata limits, exception logging, URL scheme validation#27

Draft

Copilot wants to merge 3 commits intomainfrom

copilot/fix-private-key-exposure

Commits on Mar 15, 2026

Initial plan
Copilot
committed
security: fix private key exposure, token repr, source maps, metadata validation, exception swallowing, and URL scheme validation

Copilot
and
numbers-official
committed
security: fix token masking edge case and use TextEncoder for byte size check

Copilot
and
numbers-official
committed