The allow/deny list functionality was trash though. If I have a once-off workflow and I want to execute Claude within it, I can't even give it a whitelist of allowed tools.

I definitely prefer auto-mode to the granularity of prompts I was getting from Claude. But I also want to be able to use deterministic rules, and Claude Code's functionality for it sucks.