From 1ba15be4f0b0c9a026c0c7986668f8f2aa998440 Mon Sep 17 00:00:00 2001
From: David Dworken <dworken@anthropic.com>
Date: Wed, 18 Mar 2026 09:06:33 -0700
Subject: [PATCH] Remove redundant git status/diff/log from tag mode allowlist
 (#1075)

---
 src/create-prompt/index.ts | 3 ---
 src/modes/tag/index.ts     | 3 ---
 test/create-prompt.test.ts | 3 ---
 3 files changed, 9 deletions(-)

diff --git a/src/create-prompt/index.ts b/src/create-prompt/index.ts
index c21d831..38144ce 100644
--- a/src/create-prompt/index.ts
+++ b/src/create-prompt/index.ts
@@ -56,9 +56,6 @@ export function buildAllowedToolsString(
       "Bash(git add:*)",
       "Bash(git commit:*)",
       `Bash(${GIT_PUSH_WRAPPER}:*)`,
-      "Bash(git status:*)",
-      "Bash(git diff:*)",
-      "Bash(git log:*)",
       "Bash(git rm:*)",
     );
   }
diff --git a/src/modes/tag/index.ts b/src/modes/tag/index.ts
index 14af9af..bfbeaea 100644
--- a/src/modes/tag/index.ts
+++ b/src/modes/tag/index.ts
@@ -139,9 +139,6 @@ export async function prepareTagMode({
       "Bash(git add:*)",
       "Bash(git commit:*)",
       `Bash(${gitPushWrapper}:*)`,
-      "Bash(git status:*)",
-      "Bash(git diff:*)",
-      "Bash(git log:*)",
       "Bash(git rm:*)",
     );
   } else {
diff --git a/test/create-prompt.test.ts b/test/create-prompt.test.ts
index 3bf8b6c..cc3f306 100644
--- a/test/create-prompt.test.ts
+++ b/test/create-prompt.test.ts
@@ -1017,9 +1017,6 @@ describe("buildAllowedToolsString", () => {
     expect(result).toContain("Bash(git add:*)");
     expect(result).toContain("Bash(git commit:*)");
     expect(result).toContain("scripts/git-push.sh:*)");
-    expect(result).toContain("Bash(git status:*)");
-    expect(result).toContain("Bash(git diff:*)");
-    expect(result).toContain("Bash(git log:*)");
     expect(result).toContain("Bash(git rm:*)");
 
     // Comment tool from minimal server should be included