From 81adc70f6cb6d3af122ff3a4a931667a7bd09afa Mon Sep 17 00:00:00 2001
From: ghost <49853598+JSONbored@users.noreply.github.com>
Date: Fri, 29 May 2026 02:05:59 -0700
Subject: [PATCH] fix(mcp): keep repo root out of API payloads

---
 packages/gittensory-mcp/lib/local-branch.js | 4 ++--
 test/unit/local-scorer-adapter.test.ts      | 1 +
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/packages/gittensory-mcp/lib/local-branch.js b/packages/gittensory-mcp/lib/local-branch.js
index 3b2c89fd9b..4fbae5e7f7 100644
--- a/packages/gittensory-mcp/lib/local-branch.js
+++ b/packages/gittensory-mcp/lib/local-branch.js
@@ -78,9 +78,9 @@ export function collectLocalBranchMetadata(input) {
 
 export function buildBranchAnalysisPayload(input) {
   const metadata = collectLocalBranchMetadata(input);
-  metadata.repoRoot = input.cwd ?? process.cwd();
+  const scorerMetadata = { ...metadata, repoRoot: input.cwd ?? process.cwd() };
   const scorerCommand = resolveScorePreviewCommand(input);
-  const externalPreview = runExternalScorePreview(metadata, scorerCommand);
+  const externalPreview = runExternalScorePreview(scorerMetadata, scorerCommand);
   const localScorer = externalPreview.ok ? normalizeScorerOutput(externalPreview.payload) : metadataOnlyScorer(externalPreview);
   return {
     ...metadata,
diff --git a/test/unit/local-scorer-adapter.test.ts b/test/unit/local-scorer-adapter.test.ts
index f103e25773..43ba29ae95 100644
--- a/test/unit/local-scorer-adapter.test.ts
+++ b/test/unit/local-scorer-adapter.test.ts
@@ -86,6 +86,7 @@ describe("local scorer adapter", () => {
     });
     expect(payload.localScorer).toMatchObject({ mode: "metadata_only" });
     expect(payload.localScorerStatus.ok).toBe(false);
+    expect(payload).not.toHaveProperty("repoRoot");
     expect(JSON.stringify(payload)).not.toMatch(/BEGIN (RSA )?PRIVATE KEY/);
 
     process.env.GITTENSORY_UPLOAD_SOURCE = "true";