Crit + Windsurf.
Windsurf's Cascade auto-loads rules from .windsurf/rules/. crit installs a single rule that defines the review loop: write a plan, run crit on it, address each inline comment, implement.
Install in your project:
$ crit install windsurf
Project install only. Windsurf doesn't have a per-tool global config dir, so the rule lives in the repo.
Crit rule
A single rules file the agent loads for every conversation in this project. It defines the review loop: write a plan, launch crit $PLAN_FILE, read the resulting review file, address each comment, repeat.
Prompt the agent:
Write a plan for the auth refactor, then run crit on it.