
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
@agentskit/doc-bridge
Advanced tools
Human↔agent documentation bridge — deterministic handoffs, doc-site links, memory→docs, optional AgentsKit RAG/chat.
npm: @agentskit/doc-bridge · CLI: ak-docs
Human↔agent documentation bridge for any project — not a wiki, not a hosted RAG chat.
doc-bridge helps coding agents find the right file, edit the right roots, run the right checks, keeps agent docs linked to human docs, and turns agent memory into project documentation (with human approval). The core is deterministic and works without any LLM or API key.
Optional intelligence (RAG + terminal chat) uses public AgentsKit packages — install only when you want them.
| Pattern | Gap |
|---|---|
| Wiki + RAG | Explains; weak on where to act and proof docs match code |
| AGENTS.md alone | Great static rules; no ownership index, gates, or human bridge |
| Context7-class tools | Library docs for the model; not your monorepo routing |
doc-bridge ships AgentHandoff JSON:
{
"type": "agent-handoff",
"startHere": "docs/for-agents/packages/example.md",
"editRoots": ["src"],
"checks": ["npm test"],
"humanDoc": "/docs/guides/example"
}
| Loop | What you get |
|---|---|
| Act | CLI + MCP handoffs (query, handoff.resolve) |
| Bridge | Fumadocs / Docusaurus / plain-markdown ↔ agent corpus + gates |
| Learn | memory ingest → classify → promote drafts (HITL) |
| Explain | Optional @agentskit/rag + @agentskit/ink chat (handoffFirst) |
npm i -D @agentskit/doc-bridge
npx ak-docs init
npx ak-docs index
npx ak-docs query package example --agent
init scaffolds config, a demo ownership target, and an AGENTS.md snippet.
npx ak-docs list packages --text
npx ak-docs ask "where do I change example?"
npx ak-docs gate run
npx ak-docs mcp
Full guide: docs/getting-started.md.
| Surface | Purpose |
|---|---|
| Index | DocBridgeIndex + contentHash + llms.txt + capabilities |
| CLI | query / search / list / ask / gate / memory / bootstrap |
| MCP | handoff.resolve, doc.search, doc.get, … |
| Gates | Freshness, human-link validation, optional OKF style |
| Plugins | pnpm-monorepo, fumadocs, docusaurus, plain-markdown |
Ownership can come from config, frontmatter (package + editRoot), or workspace discovery.
npm i -D @agentskit/rag @agentskit/ink @agentskit/adapters @agentskit/memory react
ak-docs rag ingest
ak-docs chat
ak-docs ask "how does auth work?" --chat
See docs/chat-and-rag.md.
Your repo
├── docs/for-agents/ agent corpus
├── docs/ or content/ human site (plugin)
├── AGENTS.md
└── doc-bridge.config.*
Layer 0 — Index · CLI · MCP · Gates · Memory pipeline
Layer 1 — @agentskit/rag · adapters · ink chat (opt-in)
Trust model: Layer 0 is merge-blocking truth. Layer 1 explains and drafts; humans and gates decide.
Designed for and dogfooded on open AgentsKit surfaces:
| Profile | Example |
|---|---|
| Solo markdown | examples/minimal-plain-markdown.config.ts |
| pnpm monorepo | examples/pnpm-monorepo.config.ts |
| Fumadocs + chat | examples/fumadocs-with-chat.config.ts |
| Docusaurus + memory | examples/docusaurus-with-memory.config.ts |
Contract: docs/spec/config-v1.md · CLI: docs/spec/cli.md · MCP: docs/mcp.md
v0.1.0-alpha.3 — Dogfood polish (pnpm-aware checks, corpus ownership inference, playbook gate preset, git prepare build). Layer 1 RAG/chat via optional peers.
pnpm install && pnpm build && pnpm test
docs/POSITIONING.mdMIT
FAQs
Human↔agent documentation bridge — deterministic handoffs, doc-site links, memory→docs, optional AgentsKit RAG/chat.
The npm package @agentskit/doc-bridge receives a total of 145 weekly downloads. As such, @agentskit/doc-bridge popularity was classified as not popular.
We found that @agentskit/doc-bridge demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.