From 773c20271941571d0ac608eb87bfd8e4682cc977 Mon Sep 17 00:00:00 2001
From: Teknium <127238744+teknium1@users.noreply.github.com>
Date: Sat, 24 Oct 2026 12:42:28 -0700
Subject: [PATCH] chore(catalog): review disclosure for s2docs

---
 plugin-catalog/s2docs.yaml | 12 ++----------
 1 file changed, 2 insertions(+), 10 deletions(-)

diff --git a/plugin-catalog/s2docs.yaml b/plugin-catalog/s2docs.yaml
index 43826a61a3..06d1a15a09 100644
--- a/plugin-catalog/s2docs.yaml
+++ b/plugin-catalog/s2docs.yaml
@@ -4,19 +4,11 @@ repo: https://github.com/c-pompa/s2docs
 sha: 71e3a45474de73e0b50740ee1851307aa5cc448e
 subdir: plugin
 version: "0.1.2"
-description: >-
-  Source 2 documentation and mod tooling for CS2 and Deadlock from a local index of Valve's own game
-  data: convars, Hammer entities with their inputs and outputs, schema classes and enums, game events,
-  the cs_script and Pulse APIs and Source2Wiki pages, plus the mod pipeline — scaffold addons, validate
-  scripts and .cfg files, start map builds on a registered Windows host over SSH, deploy and verify
-  hashes, and record evidence, test runs and job state. Needs uv and an index built with s2docs sync;
-  every write-capable call asks for approval. Disclosure — nothing is sent to a third party, it SSHes
-  only to hosts you register, writes its own index and addon workspace, and build runs it starts
-  outlive the session by design (a map compile takes minutes).
+description: "Source 2 documentation and mod tooling for CS2 and Deadlock from a local index of Valve's own game data: convars, Hammer entities with their inputs and outputs, schema classes and enums, game events, the cs_script and Pulse APIs and Source2Wiki pages, plus the mod pipeline — scaffold addons, validate scripts and .cfg files, start map builds on a registered Windows host over SSH, deploy and verify hashes, and record evidence, test runs and job state. Needs uv and an index built with s2docs sync; every write-capable call asks for approval. Disclosure — runs its MCP server with uvx from the pinned git commit, resolving its PyPI dependencies on first start as of a fixed 2026-10-10 snapshot; nothing is sent to a third party, but SSH/scp go to any host registered through register_host, build_start runs agent-written shell commands on that host and its builds keep running after the session ends, deploy_push and job_attach copy local files the agent names, and it writes its own index and addon workspace; write tools ask for approval through the package's untrusted server trust."
 maintainer: c-pompa
 tier: community
 category: tools
-requires_hermes: ">=0.21.5"
+requires_hermes: ">=0.22.3"
 docs_url: https://github.com/c-pompa/s2docs/tree/main/plugin
 platforms:
   - macos