remigiusz-antczak · Oct 24, 2026 · Oct 24, 2026
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
@@ -2,7 +2,7 @@
   "name": "perun",
   "description": "Perun: a suite of skills for building with AI agents. Deep code review, token and cost tools (spend reports, auto-compact with handoff, model-tier guidance), gated agentic delivery (merge train, lanes, destructive-command guard, auto-update), an idea critic, and product, growth, positioning, business-ops and output-safety specialists.",
   "skills": "./.claude/skills",
-  "version": "1.601.0",
+  "version": "1.602.0",
   "author": {
     "name": "deep-code-review contributors"
   },

diff --git a/.claude/skills/agentic-delivery/SKILL.md b/.claude/skills/agentic-delivery/SKILL.md
@@ -8,7 +8,7 @@ description: >-
 license: MIT
 metadata:
   author: deep-code-review contributors
-  version: "1.601.0"
+  version: "1.602.0"
 ---
 
 # Agentic delivery

diff --git a/.claude/skills/agentic-delivery/VERSION b/.claude/skills/agentic-delivery/VERSION
@@ -1 +1 @@
-1.601.0
+1.602.0
diff --git a/.claude/skills/deep-code-review/INDEX.md b/.claude/skills/deep-code-review/INDEX.md
@@ -11,7 +11,8 @@ Generated by `scripts/skill_index.py` (do not hand-edit; rerun it after changing
 | `references/a11y-focus.md` | the target or diff builds a custom interactive widget (dialog, tablist, combobox, listbox, menu, di… | 5621 |
 | `references/a11y-forms.md` | the target or diff renders form fields through a shared Field / FormField wrapper, or a custom (non… | 942 |
 | `references/a11y-live.md` | the target or diff renders a loading / skeleton / spinner region (a shared loader or a hand-rolled… | 1722 |
-| `references/api-contracts.md` | reviewing public HTTP/GraphQL/RPC surfaces, webhooks, message/ queue payloads, SDK boundaries, or a… | 7031 |
+| `references/api-contracts-streaming.md` | the target serves or consumes a WebSocket, SSE or gRPC-streaming endpoint (server, client or SDK wr… | 1852 |
+| `references/api-contracts.md` | reviewing public HTTP/GraphQL/RPC surfaces, webhooks, message/ queue payloads, SDK boundaries, or a… | 5364 |
 | `references/appsec-approvals.md` | the target or diff performs a consequential or high-value action: a payout, wire transfer, payout-d… | 976 |
 | `references/appsec-corroboration.md` | a finding claims that input reaches a sink, that a secret is live, that a dependency version is vul… | 650 |
 | `references/appsec-crypto.md` | the target or diff encrypts or decrypts (cipher mode, IV, nonce), compares a signature, token, API… | 2675 |
@@ -76,7 +77,7 @@ Generated by `scripts/skill_index.py` (do not hand-edit; rerun it after changing
 | `references/full-audit.md` | the scope is FULL (never for DIFF or FILE). | 1646 |
 | `references/full-map-principles.md` | a finding turns on principle 4-6, 10 or 11 (1-3 and 7-9 stay in full-map.md), or when setting or re… | 765 |
 | `references/full-map-report.md` | writing the Phase 5 report or closing a review (Definition of done (a)). | 504 |
-| `references/full-map.md` | the review is FILE or FULL scope, a DIFF over 300 changed lines or with a blast-radius flag, or any… | 4685 |
+| `references/full-map.md` | the review is FILE or FULL scope, a DIFF over 300 changed lines or with a blast-radius flag, or any… | 4722 |
 | `references/i18n-l10n.md` | the target renders user-facing text in more than one language or locale, accepts user-supplied Unic… | 2540 |
 | `references/infra-evolution-by-stage.md` | the going-forward roadmap (report-format.md) must advise how a project's infrastructure and archite… | 1971 |
 | `references/infra-iac-containers.md` | the target ships Dockerfiles, Kubernetes manifests/Helm, Terraform/Pulumi/CloudFormation, CI/CD wor… | 4342 |
@@ -103,7 +104,8 @@ Generated by `scripts/skill_index.py` (do not hand-edit; rerun it after changing
 | `references/observability.md` | reviewing logging, metrics, traces, dashboards, alerting, audit trails, or "could we tell this brok… | 4869 |
 | `references/overlays.md` | recommending or installing an overlay, or wiring this skill's gates into a target's CI. | 359 |
 | `references/parallel-audit.md` | the target is large enough to review across parallel subagents (a FULL run of a large repo, or seve… | 9948 |
-| `references/performance-db-cost.md` | the target has a database, makes external/API/LLM calls, runs batch jobs, or has any hot path where… | 10762 |
+| `references/performance-db-cost.md` | the target has a database, makes external/API/LLM calls, runs batch jobs, or has any hot path where… | 7774 |
+| `references/performance-latency-depth.md` | the target has a server request handler, page loader or resolver that assembles one response from s… | 3309 |
 | `references/privacy-by-design.md` | the product will face a privacy-regulated user (EU/UK, California, children, and the like) or an en… | 1231 |
 | `references/privacy-compliance.md` | the target touches personal data (names, emails, device/user ids, location, biometrics, free text t… | 4365 |
 | `references/product-impact.md` | a change claims a user or business outcome (faster, easier, more conversions, fewer support tickets… | 1404 |
@@ -120,9 +122,10 @@ Generated by `scripts/skill_index.py` (do not hand-edit; rerun it after changing
 | `references/security-agent-skills.md` | the target is a skill, installs skills, or loads skill files (SKILL.md, skill.json, manifest.json,… | 1627 |
 | `references/security-ai-agents.md` | the code calls an LLM, embeds/retrieves (RAG), or runs an agent that plans, calls tools, executes c… | 9786 |
 | `references/security-api.md` | the target serves its own HTTP, GraphQL, gRPC, or WebSocket API (always for api / service) | 4361 |
-| `references/security-appsec.md` | Read when the target exposes any network surface (web app, API, service, CLI touching untrusted inp… | 7029 |
+| `references/security-appsec.md` | Read when the target exposes any network surface (web app, API, service, CLI touching untrusted inp… | 6999 |
 | `references/security-review-mode.md` | the user asks for a security audit or security review of a whole app (not a diff). | 2697 |
 | `references/skill-authoring-and-size.md` | the target repository ships or installs agent skills (/SKILL.md, .claude/skills/, .cursor/skills/,… | 991 |
+| `references/small-diff-read-budget.md` | reviewing a small DIFF (the fast path in SKILL.md), before the first read or command. | 131 |
 | `references/standards-index.md` | citing a standard URL or verification date from an installed copy of the skill. | 117 |
 | `references/testing-ai-evals.md` | the target calls an LLM, retrieves for generation (RAG), or runs a tool-using agent. | 2564 |
 | `references/testing-and-evals.md` | Read this to judge whether the target is *actually* verified — not whether a coverage number is hig… | 3667 |

diff --git a/.claude/skills/deep-code-review/SKILL.md b/.claude/skills/deep-code-review/SKILL.md
@@ -8,7 +8,7 @@ description: >-
 license: MIT
 metadata:
   author: deep-code-review contributors
-  version: "1.601.0"
+  version: "1.602.0"
 ---
 
 # Deep Code Review

diff --git a/.claude/skills/deep-code-review/VERSION b/.claude/skills/deep-code-review/VERSION
@@ -1 +1 @@
-1.601.0
+1.602.0
diff --git a/.claude/skills/idea-critic/SKILL.md b/.claude/skills/idea-critic/SKILL.md
@@ -8,7 +8,7 @@ description: >-
 license: MIT
 metadata:
   author: deep-code-review contributors
-  version: "1.601.0"
+  version: "1.602.0"
 ---
 
 # Veles: the evil twin (idea-critic)

diff --git a/.claude/skills/idea-critic/VERSION b/.claude/skills/idea-critic/VERSION
@@ -1 +1 @@
-1.601.0
+1.602.0
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "perun",
-  "version": "1.601.0",
+  "version": "1.602.0",
   "description": "Perun: a skill suite for AI-agent teams: deep code review, token and cost tools, gated delivery, an idea critic and product specialists.",
   "skills": "./.claude/skills",
   "interface": {