Remove redundant git status/diff/log from tag mode allowlist (#1075)

Author: ddworken

src/create-prompt/index.ts

@@ -56,9 +56,6 @@ export function buildAllowedToolsString(
       "Bash(git add:*)",
       "Bash(git commit:*)",
       `Bash(${GIT_PUSH_WRAPPER}:*)`,
-      "Bash(git status:*)",
-      "Bash(git diff:*)",
-      "Bash(git log:*)",
       "Bash(git rm:*)",
     );
   }

src/modes/tag/index.ts

@@ -139,9 +139,6 @@ export async function prepareTagMode({
       "Bash(git add:*)",
       "Bash(git commit:*)",
       `Bash(${gitPushWrapper}:*)`,
-      "Bash(git status:*)",
-      "Bash(git diff:*)",
-      "Bash(git log:*)",
       "Bash(git rm:*)",
     );
   } else {

test/create-prompt.test.ts

@@ -1017,9 +1017,6 @@ describe("buildAllowedToolsString", () => {
     expect(result).toContain("Bash(git add:*)");
     expect(result).toContain("Bash(git commit:*)");
     expect(result).toContain("scripts/git-push.sh:*)");
-    expect(result).toContain("Bash(git status:*)");
-    expect(result).toContain("Bash(git diff:*)");
-    expect(result).toContain("Bash(git log:*)");
     expect(result).toContain("Bash(git rm:*)");
 
     // Comment tool from minimal server should be included