fix: add --auto medium to droid exec and require ExitSpecMode before saving

Background droid exec calls failed for Opus because no --auto flag was set,
causing permission denial in non-interactive subprocesses. Also, the agent
instructions allowed saving specs directly without user review -- now requires
ExitSpecMode approval before writing to specs/active/.

Author: TheFactoriousDROID

plugins/rfspec/skills/rfspec/SKILL.md

@@ -29,11 +29,13 @@ Fan out a prompt to multiple models, compare their responses, and help the user
 1. Run `/rfspec <user's prompt>` -- fires parallel model calls, returns labeled options (A, B, C).
 2. Evaluate the results -- see [references/evaluation-guide.md](references/evaluation-guide.md).
 3. Present the choice to the user via AskUser.
-4. Save the selected or synthesized result.
+4. Present the selected or synthesized spec via ExitSpecMode for user review.
+5. Save to `specs/active/` only after the user approves in spec mode.
 
 ## Saving
 
-Save the final result (picked or synthesized) to:
+**Do not save immediately.** After the user picks or synthesis is complete, present the
+final spec via ExitSpecMode for review. Only after approval, save to:
 
 ```
 specs/active/YYYY-MM-DD-<slug>.md

plugins/rfspec/skills/rfspec/scripts/run.sh

@@ -27,11 +27,11 @@ MODEL_B="gpt-5.4";          LABEL_B="GPT-5.4";        RE_B="xhigh"
 MODEL_C="gemini-3.1-pro-preview"; LABEL_C="Gemini 3.1 Pro"; RE_C="high"
 
 # ── fire all three in parallel ───────────────────────────────────────
-droid exec -m "$MODEL_A" -r "$RE_A" -f "$TMPDIR/prompt.md" -o json 2>/dev/null > "$TMPDIR/a.json" &
+droid exec -m "$MODEL_A" -r "$RE_A" --auto medium -f "$TMPDIR/prompt.md" -o json 2>/dev/null > "$TMPDIR/a.json" &
 PID_A=$!
-droid exec -m "$MODEL_B" -r "$RE_B" -f "$TMPDIR/prompt.md" -o json 2>/dev/null > "$TMPDIR/b.json" &
+droid exec -m "$MODEL_B" -r "$RE_B" --auto medium -f "$TMPDIR/prompt.md" -o json 2>/dev/null > "$TMPDIR/b.json" &
 PID_B=$!
-droid exec -m "$MODEL_C" -r "$RE_C" -f "$TMPDIR/prompt.md" -o json 2>/dev/null > "$TMPDIR/c.json" &
+droid exec -m "$MODEL_C" -r "$RE_C" --auto medium -f "$TMPDIR/prompt.md" -o json 2>/dev/null > "$TMPDIR/c.json" &
 PID_C=$!
 
 FAIL=""
@@ -85,5 +85,9 @@ echo "- Use Option B (${LABEL_B}) as-is"
 echo "- Use Option C (${LABEL_C}) as-is"
 echo "- Synthesize a refined spec combining the best of all three"
 echo "- No -- none of these work (explain why)"
-echo "If the user picks synthesis, combine the strongest elements and save"
-echo "to specs/active/YYYY-MM-DD-<slug>.md. If rejected, gather feedback."
+echo ""
+echo "CRITICAL: Do NOT save the spec directly. After the user picks an option"
+echo "or requests synthesis, use the ExitSpecMode tool to present the final"
+echo "spec content for review. Only save to specs/active/YYYY-MM-DD-<slug>.md"
+echo "AFTER the user approves the spec in spec mode. If rejected, gather"
+echo "feedback and revise."