@markstanden/opencode-docs-plugin 0.4.0 → 0.5.0

package/src/index.ts

@@ -9,14 +9,24 @@ import { spawnSync } from "node:child_process";
 import {
     type Dirent,
     existsSync,
+    lstatSync,
     mkdirSync,
     readFileSync,
     readdirSync,
+    realpathSync,
     statSync,
     writeFileSync,
 } from "node:fs";
 import { homedir } from "node:os";
-import { dirname, isAbsolute, join, relative, sep } from "node:path";
+import {
+    basename,
+    dirname,
+    isAbsolute,
+    join,
+    normalize,
+    relative,
+    sep,
+} from "node:path";
 import { fileURLToPath } from "node:url";
 import { Schema } from "effect";
 
@@ -24,36 +34,50 @@ import { Schema } from "effect";
  * V2 docs plugin.
  *
  * Registers a model-callable `docs` tool so the agent can discover the
- * knowledge tree mid-task — the docs root is configurable (`root` option,
- * default `<location>/docs`): a blank search returns the most recently changed
- * docs (`path — Area — date — Summary`), a search ranks the docs by
- * how well their front-matter, path and body identifiers match, falling back
- * to the closest matches rather than a dead end. `add` writes knowledge,
- * `check` validates the convention. Reading a matched doc stays the built-in
- * `read`.
+ * knowledge lakes mid-task. The lakes are configurable (`lakes`, `lakesFile`,
+ * or the single-lake `root` sugar; default `<location>/docs`): a blank search
+ * returns the most recently changed docs (`path — Area — date — Summary`), a
+ * search ranks the docs by how well their front-matter, path and body
+ * identifiers match, falling back to the closest matches rather than a dead
+ * end. `add` writes knowledge, `check` validates the knowledge lakes. Reading
+ * a matched doc stays the built-in `read` for project files; the tool's own
+ * `read` serves lake docs and wiki pages.
  *
  * Everything below the default export is pure or dependency-injected so it can
  * be exercised directly against Node's built-in test runner without OpenCode.
  */
 
+/** The doc classes the plugin serves. `instructions` is the implicit README source. */
+export type DocClass = "instructions" | "repo" | "machine" | "global" | "wiki";
+
+/** The classes that can be a configured lake. */
+export type LakeClass = Exclude<DocClass, "instructions">;
+
+/** The two writing conventions a lake can use. */
+export type LakeProfile = "knowledge" | "wiki";
+
 /** One knowledge doc, as the tool sees it. */
 export interface DocEntry {
     /** Root-relative path, e.g. `decisions/choose-a-queue.md`. */
     path: string;
+    /** The lake name; empty for a project README (the instructions source). */
+    lake: string;
+    /** The source class. */
+    class: DocClass;
     /** Front-matter `Area`, else the first path segment under the root. */
     area: string;
     /** Resolved at read time: last git commit, else file mtime. Never front-matter. */
     date: string;
     /** First `# ` heading in the body, else the file name. */
     title: string;
-    /** Front-matter `Summary`, else an empty string. */
+    /** Front-matter `Summary`, else the wiki's first prose paragraph, else "". */
     summary: string;
-    /** Front-matter `Status: superseded` — the doc is marked as replaced. */
-    superseded: boolean;
     /** Front-matter `Keywords`, split on commas and trimmed. */
     keywords: readonly string[];
     /** Body H2/H3 headings plus inline `code` spans, trimmed and de-duplicated. */
     identifiers: readonly string[];
+    /** Wiki prose and table text; empty for knowledge docs and READMEs. */
+    text: string;
 }
 
 /**
@@ -65,7 +89,13 @@ export const DOCS_INPUT = Schema.Struct({
     search: Schema.optional(
         Schema.String.annotate({
             description:
-                "Case-insensitive search over title, path, keywords, body headings and code spans, area and summary. Omit or leave blank to list the most recently changed docs; a partial match returns the closest docs.",
+                "Case-insensitive search over title, path, keywords, body headings and code spans, area, summary and wiki prose. Omit or leave blank to list the most recently changed docs; a partial match returns the closest docs.",
+        }),
+    ),
+    lake: Schema.optional(
+        Schema.String.annotate({
+            description:
+                "Optional lake name. Search and check are limited to it; read and add target it. Omit to search every lake, read the unique match, or add to the first writable repo lake.",
         }),
     ),
     add: Schema.optional(
@@ -73,43 +103,36 @@ export const DOCS_INPUT = Schema.Struct({
             path: Schema.optional(
                 Schema.String.annotate({
                     description:
-                        "Update target, e.g. `guides/getting-started.md` (relative to the docs root). Omit to create `<Area>/<slug>.md` from the H1.",
+                        "Update target, e.g. `guides/getting-started.md` (relative to the lake root). Omit to create `<Area>/<slug>.md` from the H1.",
                 }),
             ),
             metadata: Schema.Struct({
                 Area: Schema.String,
                 Keywords: Schema.Array(Schema.String),
                 Summary: Schema.String,
-                Status: Schema.optional(
-                    Schema.Union([
-                        Schema.Literal("active"),
-                        Schema.Literal("superseded"),
-                    ]),
-                ),
-                Supersedes: Schema.optional(Schema.String),
             }).annotate({
                 description:
                     "Front-matter metadata; serialised, never copied. All three fields are required and must not be blank.",
             }),
             body: Schema.String.annotate({
                 description:
-                    "Markdown body: an H1, then the claim sections (Facts / Inferred / Tested / Open questions).",
+                    "Markdown body: an H1, then the claim sections (Facts / Inferred / Tested / Failed approaches / Open questions).",
             }),
         }).annotate({
             description:
-                "The only mutating mode: writes a new knowledge doc, or wholesale-replaces the doc at `path`. Blank required metadata, path traversal, a non-.md target, a body without an H1, and a same-area near-twin (when `path` is omitted) are all refused.",
+                "The only mutating mode: writes a new knowledge doc, or wholesale-replaces the doc at `path`. Blank required metadata, path traversal, a non-.md target, a symlinked target, and a same-area near-twin (when `path` is omitted) are all refused. Wiki lakes are read-only.",
         }),
     ),
     check: Schema.optional(
         Schema.Boolean.annotate({
             description:
-                "Validate every doc under the docs root against the convention: required front-matter, an H1, claim sections, no hand-maintained Date, a distinctive H1+Keywords identity, a Supersedes naming a doc in the tree, and same-area near-twins. An empty report means compliant.",
+                "Validate every knowledge doc against the convention: required front-matter, an H1, claim sections, no hand-maintained Date, a distinctive H1+Keywords identity, same-area near-twins, broken relative links, and a soft length note. Wiki lakes and READMEs are not validated.",
         }),
     ),
     read: Schema.optional(
         Schema.String.annotate({
             description:
-                "A root-relative doc path to return verbatim — front-matter and body — so find-then-read is one call. Lake docs only: project files and READMEs stay with the built-in `read` tool.",
+                "A root-relative doc path, or `lake:path`, to return verbatim — front-matter and body — so find-then-read is one call. Lake docs and wiki pages only: project READMEs stay with the built-in `read` tool.",
         }),
     ),
 });
@@ -174,8 +197,6 @@ export const FRONT_MATTER_FIELDS = [
     { name: "Area", required: true },
     { name: "Keywords", required: true },
     { name: "Summary", required: true },
-    { name: "Status", required: false },
-    { name: "Supersedes", required: false },
 ] as const;
 
 /**
@@ -187,13 +208,10 @@ export const FRONT_MATTER_FIELDS = [
  * @returns The full file contents to write.
  */
 export function serializeDoc(metadata: DocMetadata, body: string): string {
-    const lines = FRONT_MATTER_FIELDS.flatMap(({ name }) => {
+    const lines = FRONT_MATTER_FIELDS.map(({ name }) => {
         const value = metadata[name];
-        if (value === undefined) {
-            return [];
-        }
         const text = Array.isArray(value) ? value.join(", ") : value;
-        return [`${name}: ${text}`];
+        return `${name}: ${text}`;
     });
     return `---\n${lines.join("\n")}\n---\n\n${body.replace(/(?<!\n)\n+$/, "")}\n`;
 }
@@ -304,27 +322,156 @@ export function identifiersOf(body: string): string[] {
     return [...new Set([...headings, ...spans])];
 }
 
+/** The text inside inline links, dropping the URL; manual scan keeps it linear. */
+function stripInlineLinks(text: string): string {
+    let result = "";
+    let index = 0;
+    while (index < text.length) {
+        if (text[index] === "[" && text[index - 1] !== "!") {
+            const close = text.indexOf("](", index + 1);
+            if (close !== -1) {
+                const end = text.indexOf(")", close + 2);
+                if (end !== -1) {
+                    result += text.slice(index + 1, close);
+                    index = end + 1;
+                    continue;
+                }
+            }
+        }
+        result += text[index];
+        index += 1;
+    }
+    return result;
+}
+
+/** Strip inline Markdown from a prose fragment: links keep their text, code keeps its content. */
+function plainProse(text: string): string {
+    return stripInlineLinks(text)
+        .replace(/`([^`]+)`/g, "$1")
+        .replace(/\*\*([^*]+)\*\*/g, "$1")
+        .replace(/(?<!\*)\*([^*]+)\*(?!\*)/g, "$1")
+        .replace(/__([^_]+)__/g, "$1")
+        .replace(/(?<!_)_([^_]+)_(?!_)/g, "$1")
+        .replace(/\s+/g, " ")
+        .trim();
+}
+
+/** The body with fenced code blocks removed. */
+function withoutFences(body: string): string {
+    const lines: string[] = [];
+    let fenced = false;
+    for (const line of body.split("\n")) {
+        if (isFence(line)) {
+            fenced = !fenced;
+            continue;
+        }
+        if (!fenced) {
+            lines.push(line);
+        }
+    }
+    return lines.join("\n");
+}
+
+/** Block prefixes that are never a wiki summary. */
+const SUMMARY_SKIP_PREFIXES = ["#", "|", ">", "<", "---", ":::", "!["] as const;
+
+/** Whether a blank-line-separated block is prose worth summarising. */
+function isSummaryBlock(block: string): boolean {
+    const trimmed = block.trim();
+    if (trimmed === "" || trimmed.startsWith("[![")) {
+        return false;
+    }
+    if (SUMMARY_SKIP_PREFIXES.some((prefix) => trimmed.startsWith(prefix))) {
+        return false;
+    }
+    if (/^([-*+]|\d+\.)\s/.test(trimmed)) {
+        return false;
+    }
+    return plainProse(trimmed) !== "";
+}
+
+/** The wiki summary: the first prose paragraph after the H1, capped. */
+export function summaryOf(body: string): string {
+    const text = withoutFences(body);
+    const heading = text.indexOf("# ");
+    if (heading === -1) {
+        return "";
+    }
+    const lineEnd = text.indexOf("\n", heading);
+    const after = lineEnd === -1 ? "" : text.slice(lineEnd + 1);
+    for (const block of after.split(/\n\s*\n/)) {
+        if (isSummaryBlock(block)) {
+            return plainProse(block).slice(0, 240);
+        }
+    }
+    return "";
+}
+
+/** The indexable wiki prose: the whole body, front-matter already stripped. */
+export function proseOf(body: string): string {
+    return body;
+}
+
+/** The doc's area: front-matter `Area`, else the first path segment. */
+function areaOf(meta: Record<string, string>, path: string): string {
+    if (meta.Area !== undefined) {
+        return meta.Area;
+    }
+    const segments = path.split("/");
+    return segments.length > 1 ? (segments[0] ?? "") : "";
+}
+
+/** The doc's summary: front-matter, else a derived wiki paragraph, else "". */
+function summaryFor(
+    meta: Record<string, string>,
+    body: string,
+    profile: LakeProfile,
+): string {
+    if (meta.Summary !== undefined) {
+        return meta.Summary;
+    }
+    return profile === "wiki" ? summaryOf(body) : "";
+}
+
 /**
  * Build a doc entry from its path, raw contents and the date to show.
  * @param path Repo-relative doc path.
  * @param raw Full file contents.
  * @param date The resolved date (last git commit, else file mtime). Front-matter
  * `Date` is deliberately ignored — the date is derived, never hand-maintained.
+ * @param options The source lake/class and the profile's indexing rules.
+ * @param options.lake The lake name stamped on the entry.
+ * @param options.class The source class stamped on the entry.
+ * @param options.profile The writing convention; `wiki` derives prose and summary.
  * @returns The entry the tool ranks and renders.
  */
-export function toEntry(path: string, raw: string, date: string): DocEntry {
+export function toEntry(
+    path: string,
+    raw: string,
+    date: string,
+    options: {
+        lake?: string;
+        class?: DocClass;
+        profile?: LakeProfile;
+    } = {},
+): DocEntry {
+    const {
+        lake = "",
+        class: docClass = "repo",
+        profile = "knowledge",
+    } = options;
     const { meta, body } = parseFrontMatter(raw);
-    const segments = path.split("/");
-    const area = meta.Area ?? (segments.length > 1 ? (segments[0] ?? "") : "");
     return {
         path,
-        area,
+        lake,
+        class: docClass,
+        area: areaOf(meta, path),
         date,
         title: titleOf(path, body),
-        summary: meta.Summary ?? "",
-        superseded: meta.Status?.trim().toLowerCase() === "superseded",
+        summary: summaryFor(meta, body, profile),
         keywords: splitKeywords(meta.Keywords ?? ""),
         identifiers: identifiersOf(body),
+        text: profile === "wiki" ? proseOf(body) : "",
     };
 }
 
@@ -374,6 +521,7 @@ export function matches(entry: DocEntry, query: string): boolean {
         entry.area,
         entry.title,
         entry.summary,
+        entry.text,
         ...entry.keywords,
         ...entry.identifiers,
     ]
@@ -395,6 +543,7 @@ export const FIELD_WEIGHTS = {
     identifiers: 3,
     area: 2,
     summary: 1,
+    text: 1,
 } as const;
 
 /** The weighted searchable fields, weights from {@link FIELD_WEIGHTS}. */
@@ -407,6 +556,7 @@ const FIELDS: ReadonlyArray<
     [FIELD_WEIGHTS.identifiers, (entry) => entry.identifiers],
     [FIELD_WEIGHTS.area, (entry) => [entry.area]],
     [FIELD_WEIGHTS.summary, (entry) => [entry.summary]],
+    [FIELD_WEIGHTS.text, (entry) => [entry.text]],
 ];
 
 /**
@@ -465,13 +615,37 @@ export interface RankedDocs {
 }
 
 /**
- * Most recently changed first, then the active doc of a same-date tie, then
- * path ascending; an empty date is oldest.
+ * Class precedence when scores tie. Narrow, local, vetted first.
+ * The single source of the order — dial here.
+ */
+export const CLASS_RANK: Readonly<Record<DocClass, number>> = {
+    repo: 0,
+    instructions: 1,
+    global: 2,
+    machine: 3,
+    wiki: 4,
+};
+
+/**
+ * How many results each source reserves in the first pass, so a broad wiki
+ * cannot bury a focused repo doc. A reservation, not a cap: unused slots are
+ * filled by score. `0` disables reservation. The single knob — tune here.
+ */
+export const DEFAULT_PER_LAKE_QUOTA = 3;
+
+/** The reservation key: a lake name, or the implicit instructions source. */
+function sourceKey(entry: DocEntry): string {
+    return entry.lake === "" ? "instructions" : entry.lake;
+}
+
+/**
+ * Most recently changed first, then class precedence, then path ascending;
+ * an empty date is oldest.
  */
 function byRecency(a: DocEntry, b: DocEntry): number {
     return (
         b.date.localeCompare(a.date) ||
-        Number(a.superseded) - Number(b.superseded) ||
+        CLASS_RANK[a.class] - CLASS_RANK[b.class] ||
         a.path.localeCompare(b.path)
     );
 }
@@ -489,10 +663,41 @@ function capped(entries: DocEntry[]): Pick<RankedDocs, "entries" | "omitted"> {
 }
 
 /**
- * Sort by score, best first, then the active doc of a same-score tie, then
- * recency, then the stable path order. Each doc is scored once into the
- * decorated list — the comparator sorts on precomputed points instead of
- * re-scoring every comparison.
+ * Fill the result cap with a per-source reservation first, then the best
+ * leftovers. This keeps every configured source visible without hard-capping a
+ * single-lake tree.
+ * @param entries Docs in ranked order.
+ * @param quota Results reserved per source; `0` disables reservation.
+ * @returns The shown entries and the omitted count.
+ */
+function reserved(
+    entries: DocEntry[],
+    quota: number,
+): Pick<RankedDocs, "entries" | "omitted"> {
+    if (quota <= 0) {
+        return capped(entries);
+    }
+    const first: DocEntry[] = [];
+    const rest: DocEntry[] = [];
+    const counts = new Map<string, number>();
+    for (const entry of entries) {
+        const key = sourceKey(entry);
+        const seen = counts.get(key) ?? 0;
+        if (seen < quota) {
+            counts.set(key, seen + 1);
+            first.push(entry);
+        } else {
+            rest.push(entry);
+        }
+    }
+    return capped([...first, ...rest]);
+}
+
+/**
+ * Sort by score, best first, then class precedence, then recency, then the
+ * stable path order. Each doc is scored once into the decorated list — the
+ * comparator sorts on precomputed points instead of re-scoring every
+ * comparison.
  */
 function byScore(
     entries: readonly DocEntry[],
@@ -503,7 +708,7 @@ function byScore(
         .sort(
             (a, b) =>
                 b.points - a.points ||
-                Number(a.doc.superseded) - Number(b.doc.superseded) ||
+                CLASS_RANK[a.doc.class] - CLASS_RANK[b.doc.class] ||
                 b.doc.date.localeCompare(a.doc.date) ||
                 a.doc.path.localeCompare(b.doc.path),
         )
@@ -514,45 +719,58 @@ function byScore(
  * Rank the docs for a query. A blank query returns the most recently changed
  * docs as the catalogue; a query that some doc satisfies fully returns those
  * docs ranked; otherwise it falls back to the docs that match any term as a
- * substring, ranked, flagged `closest`. Every outcome caps at
+ * substring, ranked, flagged `closest`. Every outcome reserves
+ * {@link DEFAULT_PER_LAKE_QUOTA} results per source, caps at
  * {@link MAX_RESULTS} and reports the cut as `omitted`.
  * @param entries Docs to rank, already path-ordered.
  * @param query Raw query text.
+ * @param options Ranking options.
+ * @param options.perLakeQuota Results reserved per source; `0` disables.
  * @returns The docs to show, the fallback flag, and the omitted count.
  */
 export function rankDocs(
     entries: readonly DocEntry[],
     query: string,
+    options: { perLakeQuota?: number } = {},
 ): RankedDocs {
+    const quota = options.perLakeQuota ?? DEFAULT_PER_LAKE_QUOTA;
     const terms = termsOf(query);
     if (terms.length === 0) {
-        return { ...capped([...entries].sort(byRecency)), closest: false };
+        return {
+            ...reserved([...entries].sort(byRecency), quota),
+            closest: false,
+        };
     }
     const full = entries.filter((entry) => matches(entry, query));
     if (full.length > 0) {
-        return { ...capped(byScore(full, terms)), closest: false };
+        return { ...reserved(byScore(full, terms), quota), closest: false };
     }
     const partial = entries.filter((entry) => score(entry, terms) > 0);
     return {
-        ...capped(byScore(partial, terms)),
+        ...reserved(byScore(partial, terms), quota),
         closest: partial.length > 0,
     };
 }
 
 /**
  * Render matched docs as `path — Area — date` lines with the summary indented
- * beneath; a superseded doc carries a `(superseded)` marker. A closest-match
- * fallback set is labelled; a cap cut is counted in a trailing note; nothing
- * matched is stated plainly.
+ * beneath; a non-primary lake is prefixed `lake:` so provenance is clear. A
+ * closest-match fallback set is labelled; a cap cut is counted in a trailing
+ * note; nothing matched is stated plainly.
  * @param entries Docs to render, already ranked and capped.
  * @param options Render options.
  * @param options.closest True when the entries are a closest-match fallback.
  * @param options.omitted Docs cut by the cap, shown as a trailing note.
+ * @param options.primaryLake The lake rendered without a prefix (the local repo).
  * @returns The tool's text result.
  */
 export function render(
     entries: readonly DocEntry[],
-    options: { closest?: boolean; omitted?: number } = {},
+    options: {
+        closest?: boolean;
+        omitted?: number;
+        primaryLake?: string;
+    } = {},
 ): string {
     if (entries.length === 0) {
         return "No knowledge docs matched.";
@@ -562,12 +780,17 @@ export function render(
             const parts = [entry.area, entry.date].filter(
                 (part) => part !== "",
             );
-            if (entry.superseded) {
-                parts.push("(superseded)");
-            }
             const meta = parts.join(" — ");
             const head = meta === "" ? entry.path : `${entry.path} — ${meta}`;
-            return entry.summary === "" ? head : `${head}\n  ${entry.summary}`;
+            const labelled =
+                entry.class === "instructions"
+                    ? `instructions:${head}`
+                    : entry.lake !== "" && entry.lake !== options.primaryLake
+                      ? `${entry.lake}:${head}`
+                      : head;
+            return entry.summary === ""
+                ? labelled
+                : `${labelled}\n  ${entry.summary}`;
         })
         .join("\n");
     const headed = options.closest
@@ -599,22 +822,74 @@ export function isHelp(query: string): boolean {
 export function explainRanking(): string {
     return [
         "How docs search ranks:",
-        `- Fields weighted: title ${FIELD_WEIGHTS.title} > path ${FIELD_WEIGHTS.path} > keywords ${FIELD_WEIGHTS.keywords} > identifiers ${FIELD_WEIGHTS.identifiers} > area ${FIELD_WEIGHTS.area} > summary ${FIELD_WEIGHTS.summary}.`,
+        `- Fields weighted: title ${FIELD_WEIGHTS.title} > path ${FIELD_WEIGHTS.path} > keywords ${FIELD_WEIGHTS.keywords} > identifiers ${FIELD_WEIGHTS.identifiers} > area ${FIELD_WEIGHTS.area} > summary ${FIELD_WEIGHTS.summary} > wiki prose ${FIELD_WEIGHTS.text}.`,
         `- Each term scores its best field as weight × quality; quality is exact > prefix > substring.`,
         `- Terms shorter than MIN_TERM_LENGTH (${MIN_TERM_LENGTH}) are ignored unless they are the whole query.`,
-        "- Search also covers nested `README.md` files in the project tree, honouring `.gitignore` (dependency and build directories are skipped when the project is not in git). They are searchable only: `add` and `check` ignore them.",
-        `- Every call returns at most MAX_RESULTS (${MAX_RESULTS}), best matches first, then the most recently edited; anything cut is counted as "… and N more not shown."`,
+        "- Search covers every configured lake and nested project `README.md` files, honouring `.gitignore` (dependency and build directories are skipped when the project is not in git). READMEs are searchable only: `add` and `check` ignore them, and their results are prefixed `instructions:` so they read with the built-in `read` tool.",
+        `- Each source reserves up to ${DEFAULT_PER_LAKE_QUOTA} results (configurable), then leftover slots fill by score. Every call returns at most MAX_RESULTS (${MAX_RESULTS}), best matches first, then the most recently edited; anything cut is counted as "… and N more not shown."`,
+        "- Class precedence on a tie: repo > instructions > global > machine > wiki.",
         '- Outcomes: a blank query lists the most recently changed docs; a doc carrying every term ranks the full matches; otherwise the docs matching any term as a substring are listed under "Closest matches"; nothing hits is "No knowledge docs matched."',
     ].join("\n");
 }
 
+/** One configured lake, as the help text describes it. */
+export interface LakeInfo {
+    /** The lake's addressing name. */
+    name: string;
+    /** The source class. */
+    class: DocClass;
+    /** The absolute lake root. */
+    root: string;
+    /** Whether `add` may write to it. */
+    writable: boolean;
+    /** Whether `check` validates it. */
+    validated: boolean;
+}
+
+/**
+ * Describe the configured lakes, then the ranking. The agent learns where
+ * knowledge lives without loading the full convention.
+ * @param lakes The configured lakes.
+ * @returns The help text.
+ */
+export function helpText(lakes: readonly LakeInfo[]): string {
+    const lines = ["Configured lakes:"];
+    for (const lake of lakes) {
+        const access = lake.writable ? "writable" : "read-only";
+        const checked = lake.validated ? "checked" : "not checked";
+        lines.push(
+            `- ${lake.name} (${lake.class}, ${access}, ${checked}): ${lake.root}`,
+        );
+    }
+    lines.push(
+        "- instructions (read-only, not checked): nested project README.md " +
+            "files; results are prefixed `instructions:` and read with the " +
+            "built-in read tool",
+    );
+    return `${lines.join("\n")}\n\n${explainRanking()}`;
+}
+
 /** A resolved `docs` tool call: exactly one verb wins (`add` > `check` > `read` > `help` > `search`). */
 export type DocsRequest =
-    | { verb: "add"; add: DocsAdd }
-    | { verb: "check" }
-    | { verb: "read"; read: string }
+    | { verb: "add"; add: DocsAdd; lake?: string }
+    | { verb: "check"; lake?: string }
+    | { verb: "read"; read: string; lake?: string }
     | { verb: "help" }
-    | { verb: "search"; search: string };
+    | { verb: "search"; search: string; lake?: string };
+
+/** The trimmed lake selector, or undefined when unset. */
+function lakeOf(input: DocsInput): string | undefined {
+    const lake = input.lake?.trim() ?? "";
+    return lake === "" ? undefined : lake;
+}
+
+/** Add a lake selector to a request when one was given. */
+function requestWithLake<T extends object>(
+    request: T,
+    lake: string | undefined,
+): T {
+    return lake === undefined ? request : ({ ...request, lake } as T);
+}
 
 /**
  * Resolve a tool call to one verb. An explicit `add` is never downgraded; a
@@ -624,31 +899,36 @@ export type DocsRequest =
  * @param input.search The raw search text, when given.
  * @param input.add The typed add DTO, when given.
  * @param input.check The check flag, when given.
- * @param input.read The root-relative doc path to read, when given.
+ * @param input.read The root-relative doc path (or `lake:path`) to read, when given.
+ * @param input.lake The optional lake selector.
  * @returns The single resolved request.
  */
 export function resolveRequest(input: DocsInput): DocsRequest {
+    const lake = lakeOf(input);
     if (input.add !== undefined) {
-        return { verb: "add", add: input.add };
+        return requestWithLake({ verb: "add", add: input.add }, lake);
     }
     if (input.check === true) {
-        return { verb: "check" };
+        return requestWithLake({ verb: "check" }, lake);
     }
     const read = input.read?.trim() ?? "";
     if (read !== "") {
-        return { verb: "read", read };
+        return requestWithLake({ verb: "read", read }, lake);
     }
     if (isHelp(input.search ?? "")) {
         return { verb: "help" };
     }
-    return { verb: "search", search: input.search ?? "" };
+    return requestWithLake(
+        { verb: "search", search: input.search ?? "" },
+        lake,
+    );
 }
 
 /**
  * The newest commit date per path, in one `git log` pass over all paths.
  * `git log` lists commits newest first, so the first date seen for a path is
  * its latest edit; paths absent from history are absent from the map.
- * @param cwd Directory inside the docs root's work tree; git resolves the
+ * @param cwd Directory inside the lake root's work tree; git resolves the
  * work-tree root itself.
  * @param paths Root-relative paths.
  * @returns A `YYYY-MM-DD` per known path.
@@ -663,7 +943,10 @@ export function gitDates(
     }
     const result = spawnSync(
         "git",
-        ["log", "--format=%cs", "--name-only", "--", ...paths],
+        // `--relative` keeps the output paths root-relative to `cwd`; without
+        // it a lake rooted at `<repo>/docs` maps `docs/foo.md` while the
+        // requested paths are `foo.md`, silently falling back to mtimes.
+        ["log", "--relative", "--format=%cs", "--name-only", "--", ...paths],
         // The default 1MB cap silently truncates a long history's output, which
         // would drop every git date back to mtime — so give it room.
         { cwd, encoding: "utf8", maxBuffer: 16 * 1024 * 1024 },
@@ -689,7 +972,7 @@ export function gitDates(
 /**
  * A date per path in one batch: git's newest commit date, else the file
  * mtime, else "". One git pass for the whole tree, however many docs.
- * @param cwd Directory inside the docs root's work tree.
+ * @param cwd Directory inside the lake root's work tree.
  * @param paths Root-relative paths.
  * @returns A date per path.
  */
@@ -714,40 +997,145 @@ export function fallbackDates(
     return dates;
 }
 
+/** How a lake's tree is collected. */
+export interface CollectOptions {
+    /** The writing convention: knowledge excludes scratch and mirrors; wiki does not. */
+    profile?: LakeProfile;
+    /** The lake name stamped on each entry. */
+    lake?: string;
+    /** The class stamped on each entry. */
+    class?: DocClass;
+    /** Absolute roots to skip (another lake nested inside this one). */
+    skip?: readonly string[];
+}
+
+/**
+ * Walk a lake root, returning its `.md` paths relative to the root. Dot
+ * directories are skipped (which drops `.git` and `.attachments`), as are
+ * symlinked directories and any other configured lake root nested inside.
+ * Knowledge lakes also skip the scratch and mirror areas.
+ * @param root The lake root.
+ * @param options Collection rules.
+ * @returns Root-relative paths, ordered by path.
+ */
+/** Read a directory, returning no entries when it is unreadable. */
+function readDirectory(directory: string): Dirent[] {
+    try {
+        return readdirSync(directory, { withFileTypes: true });
+    } catch {
+        return [];
+    }
+}
+
 /**
- * Collect every knowledge doc under the docs root, skipping scratch and
- * mirrors.
- * @param root Docs root — the directory that is the knowledge tree.
+ * Whether a directory is outside the lake's collection rules.
+ * @param item The directory entry.
+ * @param directory Its parent directory.
+ * @param root The lake root.
+ * @param excluded Top-level areas the profile excludes.
+ * @param nested Other lake roots nested inside this one.
+ * @returns True when the walk should not enter it.
+ */
+function skipDirectory(
+    item: Dirent,
+    directory: string,
+    root: string,
+    excluded: readonly string[],
+    nested: readonly string[],
+): boolean {
+    if (item.name.startsWith(".") || item.name === "node_modules") {
+        return true;
+    }
+    if (item.isSymbolicLink()) {
+        return true;
+    }
+    const path = join(directory, item.name);
+    if (nested.some((other) => isUnder(path, other))) {
+        return true;
+    }
+    return directory === root && excluded.includes(item.name);
+}
+
+/**
+ * Walk a lake root, returning its `.md` paths relative to the root. Dot
+ * directories are skipped (which drops `.git` and `.attachments`), as are
+ * symlinked directories, `node_modules` and any other configured lake root
+ * nested inside. Knowledge lakes also skip the scratch and mirror areas.
+ * @param root The lake root.
+ * @param options Collection rules.
+ * @param options.profile The writing convention.
+ * @param options.lake The lake name (unused by the path walk).
+ * @param options.class The source class (unused by the path walk).
+ * @param options.skip Absolute roots of other lakes nested inside this one.
+ * @returns Root-relative paths, ordered by path.
+ */
+export function collectDocPaths(
+    root: string,
+    options: CollectOptions = {},
+): string[] {
+    const profile = options.profile ?? "knowledge";
+    const skip = options.skip ?? [];
+    const nested = skip.filter(
+        (other) => other !== root && isUnder(other, root),
+    );
+    const excluded =
+        profile === "knowledge" ? (EXCLUDED_AREAS as readonly string[]) : [];
+    const paths: string[] = [];
+    const walk = (directory: string): void => {
+        for (const item of readDirectory(directory)) {
+            const path = join(directory, item.name);
+            if (item.isDirectory()) {
+                if (!skipDirectory(item, directory, root, excluded, nested)) {
+                    walk(path);
+                }
+                continue;
+            }
+            if (
+                !item.isFile() ||
+                item.isSymbolicLink() ||
+                !item.name.endsWith(".md")
+            ) {
+                continue;
+            }
+            paths.push(relative(root, path).split(sep).join("/"));
+        }
+    };
+    if (existsSync(root)) {
+        walk(root);
+    }
+    return paths.sort();
+}
+
+/**
+ * Collect every doc under a lake root, honouring the profile's exclusions and
+ * the other lakes nested inside it.
+ * @param root Lake root — the directory that is the tree.
  * @param resolve Resolves every doc path's date in one batched call.
+ * @param options Collection rules.
+ * @param options.profile The writing convention.
+ * @param options.lake The lake name stamped on each entry.
+ * @param options.class The source class stamped on each entry.
+ * @param options.skip Absolute roots of other lakes nested inside this one.
  * @returns Entries ordered by path, or none when the root is absent.
  */
 export function collectDocs(
     root: string,
     resolve: (paths: readonly string[]) => ReadonlyMap<string, string>,
+    options: CollectOptions = {},
 ): DocEntry[] {
-    let files: string[];
-    try {
-        files = readdirSync(root, {
-            recursive: true,
-            encoding: "utf8",
-        });
-    } catch {
-        return [];
-    }
-    const excluded = EXCLUDED_AREAS as readonly string[];
-    const paths = files
-        .filter((relativePath) => relativePath.endsWith(".md"))
-        .filter(
-            (relativePath) =>
-                !excluded.includes(relativePath.split("/")[0] ?? ""),
-        )
-        .sort();
+    const profile = options.profile ?? "knowledge";
+    const paths = collectDocPaths(root, options);
     const dates = resolve(paths);
     return paths.map((path) =>
         toEntry(
             path,
             readFileSync(join(root, path), "utf8"),
             dates.get(path) ?? "",
+            {
+                lake: options.lake ?? "",
+                class: options.class ?? (profile === "wiki" ? "wiki" : "repo"),
+                profile,
+            },
         ),
     );
 }
@@ -780,6 +1168,30 @@ function isUnder(path: string, root: string): boolean {
     );
 }
 
+/**
+ * Resolve symlinks in the existing prefix of a path, appending any missing
+ * suffix. Used to compare lake roots by their real filesystem location.
+ * @param path The path to resolve.
+ * @returns The real path, or a normalised path when it cannot be resolved.
+ */
+function realPathOf(path: string): string {
+    let current = path;
+    const missing: string[] = [];
+    while (!existsSync(current)) {
+        const parent = dirname(current);
+        if (parent === current) {
+            return normalize(path);
+        }
+        missing.unshift(basename(current));
+        current = parent;
+    }
+    try {
+        return join(realpathSync(current), ...missing);
+    } catch {
+        return normalize(path);
+    }
+}
+
 /** Whether a file name is a README in any case (`README.md`, `readme.md`). */
 function isReadme(name: string): boolean {
     return name.toLowerCase() === "readme.md";
@@ -860,12 +1272,16 @@ function walkedReadmePaths(location: string): string[] {
  * @param location The project directory the plugin loaded in.
  * @param resolve Resolves every path's date in one batched call.
  * @param skip Absolute roots whose READMEs are collected elsewhere.
+ * @param options The source class/lake stamped on each entry.
+ * @param options.class The source class; defaults to `instructions`.
+ * @param options.lake The lake name; empty for the implicit instructions source.
  * @returns Entries ordered by path, or none when the project is unreadable.
  */
 export function collectReadmes(
     location: string,
     resolve: (paths: readonly string[]) => ReadonlyMap<string, string>,
     skip: readonly string[] = [],
+    options: { class?: DocClass; lake?: string } = {},
 ): DocEntry[] {
     const paths = readmePaths(location, skip);
     const dates = resolve(paths);
@@ -874,6 +1290,10 @@ export function collectReadmes(
             path,
             readFileSync(join(location, path), "utf8"),
             dates.get(path) ?? "",
+            {
+                lake: options.lake ?? "",
+                class: options.class ?? "instructions",
+            },
         ),
     );
 }
@@ -901,6 +1321,8 @@ export type AddOutcome =
           contents: string;
           /** Same-area docs already on disk, shown alongside the write. */
           neighbours: readonly DocEntry[];
+          /** Soft advisory lines (e.g. a long doc worth splitting). */
+          notes: readonly string[];
       }
     | {
           action: "refuse";
@@ -915,10 +1337,7 @@ const REFUSE = "Rejected:";
 
 /** The first blank required front-matter field, else null. */
 function blankRequiredField(metadata: DocMetadata): string | null {
-    for (const { name, required } of FRONT_MATTER_FIELDS) {
-        if (!required) {
-            continue;
-        }
+    for (const { name } of FRONT_MATTER_FIELDS) {
         const value = metadata[name];
         const blank = Array.isArray(value)
             ? value.length === 0 ||
@@ -932,7 +1351,7 @@ function blankRequiredField(metadata: DocMetadata): string | null {
 }
 
 /**
- * Validate an explicit `add` path: relative, inside the docs root, naming a
+ * Validate an explicit `add` path: relative, inside the lake root, naming a
  * `.md` file.
  * @param given The trimmed, non-empty `path` the caller supplied.
  * @returns The root-relative target path, or the refusal reason.
@@ -945,7 +1364,7 @@ function explicitTarget(given: string): { path: string } | { reason: string } {
         given.includes(":")
     ) {
         return {
-            reason: "path must be relative and stay inside the docs root.",
+            reason: "path must be relative and stay inside the lake root.",
         };
     }
     if (!given.endsWith(".md")) {
@@ -953,14 +1372,14 @@ function explicitTarget(given: string): { path: string } | { reason: string } {
     }
     const stem = given.slice(0, -".md".length);
     if (stem === "" || stem.endsWith("/")) {
-        return { reason: "path must name a .md file under the docs root." };
+        return { reason: "path must name a .md file under the lake root." };
     }
     return { path: given };
 }
 
 /**
  * The root-relative target path for an `add`, or the reason it is refused.
- * An explicit path must stay inside the docs root and name a `.md` file; an
+ * An explicit path must stay inside the lake root and name a `.md` file; an
  * omitted path derives `<Area>/<slug>.md` from the H1.
  * @param add The typed request.
  * @returns The target path, or the refusal reason.
@@ -1037,11 +1456,44 @@ export function nearTwins(
     ).slice(0, MAX_RESULTS);
 }
 
+/**
+ * The near-twin refusal for an `add`, or null when the write may proceed.
+ * An explicit path is the update contract and skips reconcile.
+ * @param add The typed request.
+ * @param entries The current docs.
+ * @returns The refusal, or null.
+ */
+function nearTwinRefusal(
+    add: DocsAdd,
+    entries: readonly DocEntry[],
+): AddOutcome | null {
+    if ((add.path?.trim() ?? "") !== "") {
+        return null;
+    }
+    const nearTwinDocs = nearTwins(
+        reconcileQuery(add),
+        add.metadata.Area,
+        entries,
+    );
+    if (nearTwinDocs.length === 0) {
+        return null;
+    }
+    return {
+        action: "refuse",
+        reason:
+            `${REFUSE} ${add.metadata.Area} already holds a near-twin of ` +
+            "this doc. Pass its path to update it, or a different path " +
+            "to write anyway:\n\n" +
+            render(nearTwinDocs),
+        candidates: nearTwinDocs,
+    };
+}
+
 /**
  * Validate an `add` request and prepare it for writing — pure, no fs.
  *
  * Trust boundary: the caller is a model. Blank required metadata, a body
- * without an H1, a path or `Area` escaping the docs root, a non-`.md` target
+ * without an H1, a path or `Area` escaping the lake root, a non-`.md` target
  * and a title that yields no slug are all refused. With `path` omitted the
  * target is `<Area>/<slug>.md` and a same-area near-twin — a doc matching every
  * reconcile query term ({@link reconcileQuery}) — refuses the write with the
@@ -1049,11 +1501,14 @@ export function nearTwins(
  * replacement) and skips reconcile.
  * @param add The typed request.
  * @param entries The current docs, for reconcile and neighbours.
+ * @param options Soft-limit configuration.
+ * @param options.maxDocLines Note when the body exceeds this line count; `0` disables.
  * @returns The prepared write, or the refusal.
  */
 export function prepareAdd(
     add: DocsAdd,
     entries: readonly DocEntry[],
+    options: { maxDocLines?: number } = {},
 ): AddOutcome {
     const refuse = (reason: string): AddOutcome => ({
         action: "refuse",
@@ -1066,7 +1521,7 @@ export function prepareAdd(
         return refuse(`${blank} is required and must not be blank.`);
     }
     if (/[/\\]|\.\./.test(add.metadata.Area)) {
-        return refuse("Area must be a single folder name under the docs root.");
+        return refuse("Area must be a single folder name under the lake root.");
     }
     if (h1Of(add.body) === undefined) {
         return refuse("The body must carry an H1 (`# Title`).");
@@ -1083,20 +1538,9 @@ export function prepareAdd(
         return refuse(target.reason);
     }
 
-    if ((add.path?.trim() ?? "") === "") {
-        const query = reconcileQuery(add);
-        const nearTwinDocs = nearTwins(query, add.metadata.Area, entries);
-        if (nearTwinDocs.length > 0) {
-            return {
-                action: "refuse",
-                reason:
-                    `${REFUSE} ${add.metadata.Area} already holds a near-twin of ` +
-                    "this doc. Pass its path to update it, or a different path " +
-                    "to write anyway:\n\n" +
-                    render(nearTwinDocs),
-                candidates: nearTwinDocs,
-            };
-        }
+    const nearTwin = nearTwinRefusal(add, entries);
+    if (nearTwin !== null) {
+        return nearTwin;
     }
 
     const neighbours = entries
@@ -1109,14 +1553,39 @@ export function prepareAdd(
         path: target.path,
         contents: serializeDoc(add.metadata, add.body),
         neighbours,
+        notes: longDocNotes(add.body, options.maxDocLines),
     };
 }
 
+/** Default soft limit for a single doc's body, in lines. `0` disables the note. */
+export const DEFAULT_MAX_DOC_LINES = 200;
+
+/**
+ * The soft length notes for a body: one note when it exceeds the configured
+ * limit. A note only — the write always proceeds.
+ * @param body Markdown body.
+ * @param limit The configured line limit; `0` disables.
+ * @returns Zero or one note.
+ */
+function longDocNotes(body: string, limit = DEFAULT_MAX_DOC_LINES): string[] {
+    if (limit <= 0) {
+        return [];
+    }
+    const lines = body.replace(/\n$/, "").split("\n").length;
+    return lines > limit
+        ? [
+              `note: ${lines} body lines exceeds maxDocLines (${limit}); ` +
+                  "consider splitting by topic or scope.",
+          ]
+        : [];
+}
+
 /** The claim sections a knowledge doc must carry at least one of. */
 export const CLAIM_SECTIONS = [
     "Facts",
     "Inferred",
     "Tested",
+    "Failed approaches",
     "Open questions",
 ] as const;
 
@@ -1133,8 +1602,8 @@ function blankMetaFields(meta: Record<string, string>): string[] {
         name === "Keywords"
             ? splitKeywords(value ?? "").length === 0
             : (value ?? "").trim() === "";
-    return FRONT_MATTER_FIELDS.filter(
-        ({ name, required }) => required && blank(name, meta[name]),
+    return FRONT_MATTER_FIELDS.filter(({ name }) =>
+        blank(name, meta[name]),
     ).map(({ name }) => name);
 }
 
@@ -1169,7 +1638,7 @@ export function validateDoc(path: string, raw: string): string[] {
         !scanBody(body).headings.some((h) => claims.includes(h.toLowerCase()))
     ) {
         findings.push(
-            "no claim section (Facts / Inferred / Tested / Open questions).",
+            "no claim section (Facts / Inferred / Tested / Failed approaches / Open questions).",
         );
     }
     const query = identityQuery(
@@ -1209,108 +1678,328 @@ function nearTwinPairs(
 }
 
 /**
- * Check the whole tree: per-doc {@link validateDoc} findings, a
- * `Supersedes` that names no doc, then the {@link nearTwinPairs}. An empty
- * report means compliant.
- * @param entries The docs to check.
- * @param read Resolves a root-relative doc path to its raw contents;
- * injected so the check is testable.
- * @param notes Environment notes (e.g. an unversioned root) appended to the
- * report; findings they describe are still reported per doc.
- * @returns The report text.
+ * Resolve a relative Markdown link target against the linking doc's folder.
+ * @param from The linking doc's root-relative path.
+ * @param target The link target, anchors/query already stripped.
+ * @returns The resolved root-relative path, or null when it escapes the root.
  */
-export function checkDocs(
-    entries: readonly DocEntry[],
-    read: (path: string) => string,
-    notes: readonly string[] = [],
-): string {
-    const paths = new Set(entries.map((entry) => entry.path));
-    const lines = entries.flatMap((entry) => {
-        const raw = read(entry.path);
-        const findings = validateDoc(entry.path, raw);
-        const supersedes = parseFrontMatter(raw).meta.Supersedes?.trim() ?? "";
-        if (supersedes !== "" && !paths.has(supersedes)) {
-            findings.push(`Supersedes names no doc: ${supersedes}.`);
+function resolveLink(from: string, target: string): string | null {
+    const base = from.includes("/") ? from.slice(0, from.lastIndexOf("/")) : "";
+    const stack = base === "" ? [] : base.split("/");
+    for (const segment of target.split("/")) {
+        if (segment === "" || segment === ".") {
+            continue;
         }
-        return findings.map((finding) => `${entry.path}: ${finding}`);
-    });
-    for (const [doc, twin] of nearTwinPairs(entries)) {
-        lines.push(
-            `${doc.path} and ${twin.path}: near-twins — reconcile ` +
-                "(merge, or repoint one).",
-        );
+        if (segment === "..") {
+            if (stack.length === 0) {
+                return null;
+            }
+            stack.pop();
+            continue;
+        }
+        stack.push(segment);
     }
-    lines.push(...notes);
-    return lines.length === 0
-        ? `All ${entries.length} docs comply.`
-        : lines.join("\n");
+    return stack.join("/");
 }
 
-/** The built-in tools the miss-nudge watches: content searches, both miss-prone. */
-export const NUDGED_TOOLS = ["grep", "glob"] as const;
-
-/**
- * The text of a tool result's content: the string itself, or its text parts
- * joined. Non-text parts and foreign shapes contribute nothing.
- * @param content A `Tool.Result` content of any provenance.
- * @returns The searchable text, possibly empty.
- */
-function contentText(content: unknown): string {
-    if (typeof content === "string") {
-        return content;
-    }
-    if (Array.isArray(content)) {
-        return content
-            .map((part) =>
-                typeof part === "object" &&
-                part !== null &&
-                "text" in part &&
-                typeof (part as { text: unknown }).text === "string"
-                    ? (part as { text: string }).text
-                    : "",
-            )
-            .join("\n");
+/** Inline `[text](target)` destinations on one line; images are skipped. */
+function inlineTargets(line: string): string[] {
+    const targets: string[] = [];
+    let index = 0;
+    while (index < line.length) {
+        if (line[index] === "[" && line[index - 1] !== "!") {
+            const close = line.indexOf("](", index + 1);
+            if (close !== -1) {
+                const end = line.indexOf(")", close + 2);
+                if (end !== -1) {
+                    const destination = line
+                        .slice(close + 2, end)
+                        .trim()
+                        .split(/\s+/)[0];
+                    if (destination !== undefined && destination !== "") {
+                        targets.push(destination);
+                    }
+                    index = end + 1;
+                    continue;
+                }
+            }
+        }
+        index += 1;
     }
-    return "";
+    return targets;
 }
 
 /**
- * Whether a grep/glob result reads as a search miss. Raw rg prints nothing
- * on a miss (exit 1, empty stdout) — "No matches found" and "No files found"
- * are the host wrapper's phrasings — so emptiness is the primary signal and
- * the phrases are a bonus that keeps working if the wrapper rewords.
- * @param content The tool result's content (string or content parts).
- * @returns True when the result is a miss.
+ * The local `.md` link targets in a body: inline links and reference
+ * definitions, fence-aware. Images, URLs, anchors and `lake:` links are
+ * dropped by the caller.
+ * @param body Markdown body, front-matter stripped.
+ * @returns Targets in first-seen order.
  */
-export function isSearchMiss(content: unknown): boolean {
-    const trimmed = contentText(content).trim();
-    return trimmed === "" || /no (matches|files) found/i.test(trimmed);
-}
-
-/** The grep/glob call's `pattern`, when the input carries a string one. */
-function patternOf(input: unknown): string {
-    if (typeof input === "object" && input !== null && "pattern" in input) {
-        const pattern = (input as { pattern: unknown }).pattern;
-        if (typeof pattern === "string") {
-            return pattern.trim();
+export function markdownTargets(body: string): string[] {
+    const targets: string[] = [];
+    let fenced = false;
+    for (const line of body.split("\n")) {
+        if (isFence(line)) {
+            fenced = !fenced;
+            continue;
+        }
+        if (fenced) {
+            continue;
+        }
+        targets.push(...inlineTargets(line));
+        const reference = /^\s*\[[^\]]+\]:\s*(\S+)/.exec(line);
+        if (reference?.[1] !== undefined) {
+            targets.push(reference[1]);
         }
     }
-    return "";
+    return targets;
+}
+
+/** Whether a link target is external or otherwise outside the lake's concern. */
+function isExternalTarget(target: string): boolean {
+    return (
+        target === "" ||
+        target.startsWith("#") ||
+        target.startsWith("//") ||
+        target.startsWith("/") ||
+        target.startsWith("lake:") ||
+        /^[a-z][a-z0-9+.-]*:/i.test(target)
+    );
 }
 
 /**
- * The one-line pointer appended to a grep/glob miss: the docs tool indexes
- * the same knowledge, so echo the failed pattern when there is one.
- * @param pattern The failed call's pattern, possibly blank.
- * @returns The nudge line.
+ * The broken-link findings for one doc. Only relative `.md` targets that stay
+ * inside the lake are checked; project links, URLs, anchors and images are
+ * left alone.
+ * @param path The doc's root-relative path.
+ * @param raw Full file contents.
+ * @param exists Whether a root-relative path exists in the lake.
+ * @returns Findings for targets that do not resolve.
  */
-export function missNudge(pattern: string): string {
+export function linkFindings(
+    path: string,
+    raw: string,
+    exists: (path: string) => boolean,
+): string[] {
+    const { body } = parseFrontMatter(raw);
+    const findings: string[] = [];
+    const seen = new Set<string>();
+    for (const target of markdownTargets(body)) {
+        if (isExternalTarget(target)) {
+            continue;
+        }
+        const clean = target.split("#")[0]?.split("?")[0] ?? "";
+        if (!clean.toLowerCase().endsWith(".md")) {
+            continue;
+        }
+        let decoded = clean;
+        try {
+            decoded = decodeURIComponent(clean);
+        } catch {
+            // Keep the raw target when it is not valid percent-encoding.
+        }
+        const resolved = resolveLink(path, decoded);
+        if (resolved === null || seen.has(resolved)) {
+            continue;
+        }
+        seen.add(resolved);
+        if (!exists(resolved)) {
+            findings.push(`broken link to ${target} (no ${resolved}).`);
+        }
+    }
+    return findings;
+}
+
+/**
+ * The soft notes for one doc: obsolete lifecycle fields and a long body. These
+ * are advisory, not compliance failures.
+ * @param path The doc's root-relative path.
+ * @param raw Full file contents.
+ * @param maxDocLines The body line limit; `0` disables the length note.
+ * @returns The note lines, without the path prefix.
+ */
+export function docNotes(
+    path: string,
+    raw: string,
+    maxDocLines = DEFAULT_MAX_DOC_LINES,
+): string[] {
+    const { meta, body } = parseFrontMatter(raw);
+    const notes: string[] = [];
+    for (const field of ["Status", "Supersedes"] as const) {
+        if (meta[field] !== undefined) {
+            notes.push(
+                `obsolete field \`${field}\` — the convention has no lifecycle ` +
+                    "fields; remove it or delete the doc.",
+            );
+        }
+    }
+    notes.push(
+        ...longDocNotes(body, maxDocLines).map((note) =>
+            note.replace(/^note: /, ""),
+        ),
+    );
+    return notes;
+}
+
+/** One doc's findings and advisory notes for `check`. */
+interface DocCheck {
+    /** Structural failures. */
+    findings: string[];
+    /** Advisory notes. */
+    notes: string[];
+}
+
+/**
+ * Collect one doc's check findings and notes.
+ * @param entry The doc to check.
+ * @param read Resolves its raw contents.
+ * @param options Check options.
+ * @param options.maxDocLines The body line limit.
+ * @param options.exists Resolves a root-relative path for link checking.
+ * @returns The findings and notes, path-prefixed.
+ */
+function checkOne(
+    entry: DocEntry,
+    read: (path: string) => string,
+    options: {
+        maxDocLines?: number;
+        exists?: (path: string) => boolean;
+    },
+): DocCheck {
+    const raw = read(entry.path);
+    const findings = validateDoc(entry.path, raw).map(
+        (finding) => `${entry.path}: ${finding}`,
+    );
+    if (options.exists !== undefined) {
+        findings.push(
+            ...linkFindings(entry.path, raw, options.exists).map(
+                (finding) => `${entry.path}: ${finding}`,
+            ),
+        );
+    }
+    const notes = docNotes(entry.path, raw, options.maxDocLines).map(
+        (note) => `${entry.path}: ${note}`,
+    );
+    return { findings, notes };
+}
+
+/** The near-twin findings for a tree, one line per pair. */
+function nearTwinFindings(entries: readonly DocEntry[]): string[] {
+    return nearTwinPairs(entries).map(
+        ([doc, twin]) =>
+            `${doc.path} and ${twin.path}: near-twins — reconcile ` +
+            "(merge, or repoint one).",
+    );
+}
+
+/**
+ * Check the whole tree: per-doc {@link validateDoc} findings, broken relative
+ * links, then the {@link nearTwinPairs}. Obsolete fields, long docs and
+ * environment notes are advisory notes, not findings.
+ * @param entries The docs to check.
+ * @param read Resolves a root-relative doc path to its raw contents;
+ * injected so the check is testable.
+ * @param notes Environment notes (e.g. an unversioned root) appended to the
+ * report; findings they describe are still reported per doc.
+ * @param options Check options.
+ * @param options.maxDocLines The body line limit; `0` disables the length note.
+ * @param options.exists Resolves a root-relative path for link checking; when
+ * omitted, links are not checked.
+ * @returns The report text.
+ */
+export function checkDocs(
+    entries: readonly DocEntry[],
+    read: (path: string) => string,
+    notes: readonly string[] = [],
+    options: {
+        maxDocLines?: number;
+        exists?: (path: string) => boolean;
+    } = {},
+): string {
+    const findings: string[] = [];
+    const advisory: string[] = [...notes];
+    for (const entry of entries) {
+        const report = checkOne(entry, read, options);
+        findings.push(...report.findings);
+        advisory.push(...report.notes);
+    }
+    findings.push(...nearTwinFindings(entries));
+    const head =
+        findings.length === 0
+            ? `All ${entries.length} docs comply.`
+            : findings.join("\n");
+    if (advisory.length === 0) {
+        return head;
+    }
+    return `${head}\n\nNotes:\n${advisory.map((note) => `- ${note}`).join("\n")}`;
+}
+
+/** The built-in tools the miss-nudge watches: content searches, both miss-prone. */
+export const NUDGED_TOOLS = ["grep", "glob"] as const;
+
+/**
+ * The text of a tool result's content: the string itself, or its text parts
+ * joined. Non-text parts and foreign shapes contribute nothing.
+ * @param content A `Tool.Result` content of any provenance.
+ * @returns The searchable text, possibly empty.
+ */
+function contentText(content: unknown): string {
+    if (typeof content === "string") {
+        return content;
+    }
+    if (Array.isArray(content)) {
+        return content
+            .map((part) =>
+                typeof part === "object" &&
+                part !== null &&
+                "text" in part &&
+                typeof (part as { text: unknown }).text === "string"
+                    ? (part as { text: string }).text
+                    : "",
+            )
+            .join("\n");
+    }
+    return "";
+}
+
+/**
+ * Whether a grep/glob result reads as a search miss. Raw rg prints nothing
+ * on a miss (exit 1, empty stdout) — "No matches found" and "No files found"
+ * are the host wrapper's phrasings — so emptiness is the primary signal and
+ * the phrases are a bonus that keeps working if the wrapper rewords.
+ * @param content The tool result's content (string or content parts).
+ * @returns True when the result is a miss.
+ */
+export function isSearchMiss(content: unknown): boolean {
+    const trimmed = contentText(content).trim();
+    return trimmed === "" || /no (matches|files) found/i.test(trimmed);
+}
+
+/** The grep/glob call's `pattern`, when the input carries a string one. */
+function patternOf(input: unknown): string {
+    if (typeof input === "object" && input !== null && "pattern" in input) {
+        const pattern = (input as { pattern: unknown }).pattern;
+        if (typeof pattern === "string") {
+            return pattern.trim();
+        }
+    }
+    return "";
+}
+
+/**
+ * The one-line pointer appended to a grep/glob miss: the docs tool indexes
+ * the same knowledge, so echo the failed pattern when there is one.
+ * @param pattern The failed call's pattern, possibly blank.
+ * @returns The nudge line.
+ */
+export function missNudge(pattern: string): string {
     const suggestion =
         pattern === ""
             ? "a knowledge question may already be answered there."
             : `try \`docs search\` with terms from "${pattern}".`;
     return (
-        "Note: the `docs` tool also indexes the knowledge docs and project " +
+        "Note: the `docs` tool also indexes the knowledge lakes and project " +
         `READMEs before you move on — ${suggestion}`
     );
 }
@@ -1362,9 +2051,10 @@ export const RECORD_NUDGE =
     "Before summarising: if this session established durable knowledge " +
     "(decisions, traps, runbooks, verified behaviour), open the " +
     "continuation with one `Record with docs add:` block per finding — " +
-    "never one session dump. Each block names its own artifact's `Area`, " +
-    "`H1` title and `Keywords`, plus a one-line what-and-why, so the next " +
-    "agent can persist each as a separate focused doc.";
+    "never one session dump, and never one mixed-scope doc. Each block names " +
+    "its own artifact's class (repo, machine, or global), `Area`, `H1` title " +
+    "and `Keywords`, plus a one-line what-and-why, so the next agent can " +
+    "persist each as a separate focused doc at the narrowest true scope.";
 
 /**
  * Resolve the plugin's `nudge` option: unset means on; a boolean passes
@@ -1385,36 +2075,895 @@ export function resolveNudge(configured: unknown): boolean {
     );
 }
 
-export interface DocsToolDeps {
-    /** Collects the lake docs; `add` and `check` use only these. */
+/** A configured lake, before its runtime seams are attached. */
+export interface LakeSpec {
+    /** The lake's addressing name, unique within the configuration. */
+    name: string;
+    /** The source class. */
+    class: LakeClass;
+    /** The absolute lake root. */
+    root: string;
+    /** The writing convention. */
+    profile: LakeProfile;
+    /** Whether `add` may write to it. */
+    writable: boolean;
+}
+
+/** A lake with its runtime seams. */
+export interface Lake extends LakeSpec {
+    /** Collects this lake's docs. */
     collect: () => DocEntry[];
-    /** Collects everything searchable — lake docs plus local READMEs; defaults to `collect`. */
-    search?: () => DocEntry[];
-    /** Whether a root-relative doc path exists; injected so writes are testable. */
+    /** Reads a root-relative path. */
+    read: (path: string) => string;
+    /** Whether a root-relative path exists. */
     exists: (path: string) => boolean;
-    /** Writes a root-relative doc path; injected so writes are testable. */
+    /** Writes a root-relative path, creating parent directories. */
     write: (path: string, contents: string) => void;
-    /** Reads a root-relative doc path's raw contents; injected so `check` is testable. */
-    read: (path: string) => string;
-    /** Environment notes appended to the `check` report; injected for testability. */
+    /** Environment notes for `check` (missing root, unversioned root). */
+    notes: readonly string[];
+    /** Whether `check` should verify relative links; false for the legacy seam. */
+    linkCheck: boolean;
+}
+
+/**
+ * A lake path that would leave its root or pass through a symlink. The lake
+ * seams raise it so `add` can refuse the request rather than fail the call.
+ */
+class UnsafePathError extends Error {
+    constructor(path: string) {
+        super(`path '${path}' escapes the lake root or crosses a symlink.`);
+        this.name = "UnsafePathError";
+    }
+}
+
+/** Whether `path` is outside `root` or is the root itself. */
+function escapesRoot(root: string, path: string): boolean {
+    const rest = relative(root, path);
+    return (
+        rest === "" ||
+        rest === ".." ||
+        rest.startsWith(`..${sep}`) ||
+        isAbsolute(rest)
+    );
+}
+
+/**
+ * Resolve a root-relative path to an absolute target, refusing an escape and
+ * any symlink in the path. Missing trailing segments are allowed, so a write
+ * can create them beneath a real directory.
+ *
+ * ponytail: the check and the caller's file operation are separate syscalls,
+ * so a local process that can swap a component for a symlink in between still
+ * wins the race. The threat model is a symlink committed to the tree, not a
+ * live local attacker; closing the gap needs per-component `O_NOFOLLOW` opens.
+ * @param root The lake root.
+ * @param path The root-relative path.
+ * @returns The target, or null when the path escapes or crosses a symlink.
+ */
+function safeLakeTarget(root: string, path: string): string | null {
+    const target = join(root, path);
+    if (escapesRoot(root, target)) {
+        return null;
+    }
+    let current = root;
+    for (const segment of relative(root, target).split(sep)) {
+        current = join(current, segment);
+        try {
+            const stats = lstatSync(current);
+            if (
+                stats.isSymbolicLink() ||
+                (current !== target && !stats.isDirectory())
+            ) {
+                return null;
+            }
+        } catch (error) {
+            return (error as NodeJS.ErrnoException).code === "ENOENT"
+                ? target
+                : null;
+        }
+    }
+    return target;
+}
+
+/**
+ * Attach the filesystem seams to a lake spec.
+ * @param spec The configured lake.
+ * @param options Runtime options.
+ * @param options.skip Absolute roots of other lakes, so a nested lake is not
+ * collected twice.
+ * @returns The lake the tool serves.
+ */
+export function createLake(
+    spec: LakeSpec,
+    options: { skip?: readonly string[] } = {},
+): Lake {
+    const guarded = (path: string): string => {
+        const target = safeLakeTarget(spec.root, path);
+        if (target === null) {
+            throw new UnsafePathError(path);
+        }
+        return target;
+    };
+    return {
+        ...spec,
+        notes: unversionedNote(spec.root),
+        linkCheck: true,
+        collect: () =>
+            collectDocs(spec.root, (paths) => fallbackDates(spec.root, paths), {
+                profile: spec.profile,
+                lake: spec.name,
+                class: spec.class,
+                skip: options.skip ?? [],
+            }),
+        read: (path) => readFileSync(guarded(path), "utf8"),
+        exists: (path) => {
+            const target = safeLakeTarget(spec.root, path);
+            return target !== null && existsSync(target);
+        },
+        write: (path, contents) => {
+            const target = guarded(path);
+            mkdirSync(dirname(target), { recursive: true });
+            writeFileSync(target, contents);
+        },
+    };
+}
+
+/**
+ * Build every configured lake, each aware of the others so a nested root is
+ * collected once.
+ * @param specs The configured lakes.
+ * @returns The runtime lakes.
+ */
+export function createLakes(specs: readonly LakeSpec[]): Lake[] {
+    return specs.map((spec) =>
+        createLake(spec, {
+            skip: specs
+                .filter((other) => other !== spec)
+                .map((other) => other.root),
+        }),
+    );
+}
+
+/** The lake classes the configuration accepts. */
+export const LAKE_CLASSES = ["repo", "machine", "global", "wiki"] as const;
+
+/** The repo-local lake additions file, relative to the location. */
+export const REPO_LAKES_FILE = ".opencode/docs-lakes.json";
+
+/** The plugin's options, as the host delivers them. */
+export interface DocsPluginOptions {
+    /** The single repo-lake override; mutually exclusive with `lakes`. */
+    root?: unknown;
+    /** Base lake declarations, merged after `lakesFile` and the repo file. */
+    lakes?: unknown;
+    /** A JSON file of base lakes (`{ "lakes": [...] }`). */
+    lakesFile?: unknown;
+    /** The runtime nudges' switch; defaults to on. */
+    nudge?: unknown;
+    /** The soft body-line limit; defaults to 200, `0` disables. */
+    maxDocLines?: unknown;
+    /** The per-source result reservation; defaults to 3, `0` disables. */
+    perLakeQuota?: unknown;
+}
+
+/**
+ * Resolve a non-negative integer option, or throw loudly.
+ * @param value The raw option value.
+ * @param name The option name, for the error.
+ * @param fallback The value when unset.
+ * @returns The validated number.
+ */
+export function resolveNonNegativeInt(
+    value: unknown,
+    name: string,
+    fallback: number,
+): number {
+    if (value === undefined) {
+        return fallback;
+    }
+    if (typeof value === "number" && Number.isInteger(value) && value >= 0) {
+        return value;
+    }
+    throw new Error(
+        `docs plugin option '${name}' must be a non-negative integer, ` +
+            `got ${JSON.stringify(value)}.`,
+    );
+}
+
+/** Resolve the `lakesFile` option to an absolute path, or undefined. */
+function resolveLakesFilePath(
+    configured: unknown,
+    location: string,
+): string | undefined {
+    if (configured === undefined) {
+        return undefined;
+    }
+    if (typeof configured !== "string" || configured.trim() === "") {
+        throw new Error(
+            `docs plugin option 'lakesFile' must be a non-empty string path, ` +
+                `got ${JSON.stringify(configured)}.`,
+        );
+    }
+    return resolveRoot(configured, location);
+}
+
+/**
+ * Read a lakes JSON file. A base file is required; the repo file is optional.
+ * @param path Absolute file path.
+ * @param label Human-readable source name, for errors.
+ * @param required Whether a missing file is an error.
+ * @returns The raw lake entries.
+ */
+function readLakesJson(
+    path: string,
+    label: string,
+    required: boolean,
+): unknown[] {
+    if (!existsSync(path)) {
+        if (required) {
+            throw new Error(`docs plugin ${label} not found: ${path}.`);
+        }
+        return [];
+    }
+    let parsed: unknown;
+    try {
+        parsed = JSON.parse(readFileSync(path, "utf8"));
+    } catch (error) {
+        throw new Error(
+            `docs plugin ${label} is not valid JSON (${path}): ${String(error)}`,
+            { cause: error },
+        );
+    }
+    const lakes = Array.isArray(parsed)
+        ? parsed
+        : typeof parsed === "object" && parsed !== null && "lakes" in parsed
+          ? (parsed as { lakes: unknown }).lakes
+          : undefined;
+    if (!Array.isArray(lakes)) {
+        throw new Error(
+            `docs plugin ${label} must contain a "lakes" array: ${path}.`,
+        );
+    }
+    return lakes;
+}
+
+/** A safe lake name: lower-case word characters and dashes. */
+const LAKE_NAME = /^[a-z0-9][a-z0-9-]*$/;
+
+/** The raw shape a lake declaration may take. */
+interface RawLake {
+    class?: unknown;
+    root?: unknown;
+    name?: unknown;
+    writable?: unknown;
+}
+
+/** Narrow an unknown lake declaration to its raw shape. */
+function asLakeEntry(raw: unknown): RawLake {
+    if (typeof raw !== "object" || raw === null) {
+        throw new Error(
+            `docs plugin lake entry must be an object, got ${JSON.stringify(raw)}.`,
+        );
+    }
+    return raw as RawLake;
+}
+
+/** Validate the lake class and the repo-file restriction. */
+function lakeClassOf(entry: RawLake, fromRepoFile: boolean): LakeClass {
+    const given = entry.class ?? "repo";
+    if (
+        typeof given !== "string" ||
+        !(LAKE_CLASSES as readonly string[]).includes(given)
+    ) {
+        throw new Error(
+            `docs plugin lake class must be one of ${LAKE_CLASSES.join(", ")}, ` +
+                `got ${JSON.stringify(entry.class)}.`,
+        );
+    }
+    const lakeClass = given as LakeClass;
+    if (fromRepoFile && lakeClass !== "repo") {
+        throw new Error(
+            `docs plugin repo lake file may only declare "repo" lakes; ` +
+                `got ${JSON.stringify(lakeClass)}.`,
+        );
+    }
+    return lakeClass;
+}
+
+/** Resolve and validate a lake root, applying the repo default. */
+function lakeRootOf(
+    entry: RawLake,
+    lakeClass: LakeClass,
+    location: string,
+    fromRepoFile: boolean,
+): string {
+    const blank =
+        entry.root === undefined ||
+        (typeof entry.root === "string" && entry.root.trim() === "");
+    if (blank && lakeClass !== "repo") {
+        throw new Error(
+            `docs plugin ${lakeClass} lake needs a root path, ` +
+                `got ${JSON.stringify(entry.root)}.`,
+        );
+    }
+    if (blank) {
+        return join(location, "docs");
+    }
+    if (typeof entry.root !== "string") {
+        throw new Error(
+            `docs plugin ${lakeClass} lake root must be a string, ` +
+                `got ${JSON.stringify(entry.root)}.`,
+        );
+    }
+    const root = resolveRoot(entry.root, location);
+    if (fromRepoFile && !isUnder(realPathOf(root), realPathOf(location))) {
+        throw new Error(
+            `docs plugin repo lake root must stay inside the location: ${root}.`,
+        );
+    }
+    return root;
+}
+
+/** Resolve and validate a lake name. */
+function lakeNameOf(
+    entry: RawLake,
+    root: string,
+    lakeClass: LakeClass,
+): string {
+    const derived = slugify(basename(root)) || lakeClass;
+    const name =
+        entry.name === undefined
+            ? derived
+            : typeof entry.name === "string"
+              ? entry.name.trim()
+              : "";
+    if (!LAKE_NAME.test(name)) {
+        throw new Error(
+            `docs plugin lake name must match ${LAKE_NAME}, ` +
+                `got ${JSON.stringify(entry.name ?? derived)}.`,
+        );
+    }
+    if (name === "instructions") {
+        throw new Error(
+            "docs plugin lake name 'instructions' is reserved for project READMEs.",
+        );
+    }
+    return name;
+}
+
+/** Resolve and validate a lake's writability. */
+function lakeWritableOf(
+    entry: RawLake,
+    lakeClass: LakeClass,
+    name: string,
+): boolean {
+    if (entry.writable !== undefined && typeof entry.writable !== "boolean") {
+        throw new Error(
+            `docs plugin lake '${name}' writable must be a boolean, ` +
+                `got ${JSON.stringify(entry.writable)}.`,
+        );
+    }
+    const writable =
+        entry.writable === undefined ? lakeClass !== "wiki" : entry.writable;
+    if (lakeClass === "wiki" && writable) {
+        throw new Error(
+            `docs plugin lake '${name}' is a wiki lake and cannot be writable.`,
+        );
+    }
+    return writable;
+}
+
+/**
+ * Validate one raw lake declaration and resolve its defaults.
+ * @param raw The raw entry from a config file or inline option.
+ * @param location The project directory the plugin loaded in.
+ * @param fromRepoFile Whether the entry came from the repo-local file, which
+ * may only add repo lakes rooted inside the location.
+ * @returns The resolved lake spec.
+ */
+function lakeSpecFrom(
+    raw: unknown,
+    location: string,
+    fromRepoFile: boolean,
+): LakeSpec {
+    const entry = asLakeEntry(raw);
+    const lakeClass = lakeClassOf(entry, fromRepoFile);
+    const root = lakeRootOf(entry, lakeClass, location, fromRepoFile);
+    const name = lakeNameOf(entry, root, lakeClass);
+    return {
+        name,
+        class: lakeClass,
+        root,
+        profile: lakeClass === "wiki" ? "wiki" : "knowledge",
+        writable: lakeWritableOf(entry, lakeClass, name),
+    };
+}
+
+/**
+ * Resolve the plugin's lakes: the base `lakesFile`, the repo-local additions,
+ * inline `lakes`, then `root` sugar. One implicit repo lake at
+ * `<location>/docs` is added when no repo lake is configured, so a repo needs
+ * no lake file unless its docs live elsewhere.
+ * @param options The plugin options.
+ * @param location The directory the plugin loaded in.
+ * @returns The configured lake specs.
+ */
+/** Reject the ambiguous option combinations before reading any file. */
+function assertLakesOptions(options: DocsPluginOptions): void {
+    if (options.lakes !== undefined && !Array.isArray(options.lakes)) {
+        throw new Error(
+            `docs plugin option 'lakes' must be an array, ` +
+                `got ${JSON.stringify(options.lakes)}.`,
+        );
+    }
+    if (options.root !== undefined && options.lakes !== undefined) {
+        throw new Error(
+            "docs plugin options 'root' and 'lakes' are mutually exclusive; " +
+                "use 'root' for one repo lake or 'lakes' for the full list.",
+        );
+    }
+}
+
+/** Map raw lake entries from a file to specs. */
+function specsFromFile(
+    path: string,
+    location: string,
+    fromRepoFile: boolean,
+): LakeSpec[] {
+    const label = fromRepoFile ? "repo lake file" : "lakesFile";
+    return readLakesJson(path, label, !fromRepoFile).map((raw) =>
+        lakeSpecFrom(raw, location, fromRepoFile),
+    );
+}
+
+/** Map the inline `lakes` option to specs. */
+function specsFromInline(rawLakes: unknown, location: string): LakeSpec[] {
+    return Array.isArray(rawLakes)
+        ? rawLakes.map((raw) => lakeSpecFrom(raw, location, false))
+        : [];
+}
+
+/** Throw when two lakes share a name. */
+function assertUniqueLakeNames(specs: readonly LakeSpec[]): void {
+    const names = new Set<string>();
+    for (const spec of specs) {
+        if (names.has(spec.name)) {
+            throw new Error(
+                `docs plugin lake name '${spec.name}' is declared twice; ` +
+                    "give each lake a unique name.",
+            );
+        }
+        names.add(spec.name);
+    }
+}
+
+/** Throw when two differently named lakes resolve to the same root. */
+function assertUniqueLakeRoots(specs: readonly LakeSpec[]): void {
+    const roots = new Map<string, string>();
+    for (const spec of specs) {
+        const key = realPathOf(spec.root);
+        const existing = roots.get(key);
+        if (existing !== undefined) {
+            throw new Error(
+                `docs plugin lakes '${existing}' and '${spec.name}' share ` +
+                    `the root ${spec.root}; give each lake its own root.`,
+            );
+        }
+        roots.set(key, spec.name);
+    }
+}
+
+/**
+ * Resolve the plugin's lakes: the base `lakesFile`, the repo-local additions,
+ * inline `lakes`, then `root` sugar. One implicit repo lake at
+ * `<location>/docs` is added when no repo lake is configured, so a repo needs
+ * no lake file unless its docs live elsewhere.
+ * @param options The plugin options.
+ * @param location The directory the plugin loaded in.
+ * @returns The configured lake specs.
+ */
+export function resolveLakes(
+    options: DocsPluginOptions,
+    location: string,
+): LakeSpec[] {
+    assertLakesOptions(options);
+    const basePath = resolveLakesFilePath(options.lakesFile, location);
+    const specs: LakeSpec[] = [
+        ...(basePath === undefined
+            ? []
+            : specsFromFile(basePath, location, false)),
+        ...specsFromFile(join(location, REPO_LAKES_FILE), location, true),
+        ...specsFromInline(options.lakes, location),
+    ];
+    if (options.root !== undefined) {
+        specs.push(
+            lakeSpecFrom(
+                { class: "repo", root: options.root },
+                location,
+                false,
+            ),
+        );
+    }
+    if (!specs.some((spec) => spec.class === "repo")) {
+        specs.push(
+            lakeSpecFrom(
+                { class: "repo", root: join(location, "docs") },
+                location,
+                false,
+            ),
+        );
+    }
+    assertUniqueLakeNames(specs);
+    assertUniqueLakeRoots(specs);
+    return specs;
+}
+
+/** Runtime deps shared by the tool and the command. */
+export interface RuntimeInput {
+    /** The configured lakes; omit for the legacy single-lake seams. */
+    lakes?: readonly Lake[];
+    /** Collects the lake docs; legacy seam. */
+    collect?: () => DocEntry[];
+    /** Collects everything searchable — lake docs plus local READMEs. */
+    search?: () => DocEntry[];
+    /** Whether a root-relative doc path exists; legacy seam. */
+    exists?: (path: string) => boolean;
+    /** Writes a root-relative doc path; legacy seam. */
+    write?: (path: string, contents: string) => void;
+    /** Reads a root-relative doc path's raw contents; legacy seam. */
+    read?: (path: string) => string;
+    /** Environment notes appended to the `check` report; legacy seam. */
     notes?: readonly string[];
+    /** The soft body-line limit; defaults to {@link DEFAULT_MAX_DOC_LINES}. */
+    maxDocLines?: number;
+    /** The per-source result reservation; defaults to {@link DEFAULT_PER_LAKE_QUOTA}. */
+    perLakeQuota?: number;
+}
+
+/** A resolved runtime: lakes plus the search and check knobs. */
+interface Runtime {
+    lakes: readonly Lake[];
+    search: () => DocEntry[];
+    maxDocLines: number;
+    perLakeQuota: number;
+}
+
+/** The legacy single-lake closure wrapped as a {@link Lake}. */
+function legacyLake(deps: RuntimeInput): Lake {
+    const collect = deps.collect ?? deps.search ?? (() => []);
+    return {
+        name: "docs",
+        class: "repo",
+        root: "",
+        profile: "knowledge",
+        writable: true,
+        collect,
+        read: deps.read ?? (() => ""),
+        exists: deps.exists ?? (() => false),
+        write: deps.write ?? (() => {}),
+        notes: deps.notes ?? [],
+        linkCheck: deps.exists !== undefined,
+    };
+}
+
+/** Normalise the old closure seams and the lake seams into one runtime. */
+function runtimeOf(deps: RuntimeInput): Runtime {
+    const lakes = deps.lakes ?? [legacyLake(deps)];
+    return {
+        lakes,
+        search: deps.search ?? (() => lakes.flatMap((lake) => lake.collect())),
+        maxDocLines: deps.maxDocLines ?? DEFAULT_MAX_DOC_LINES,
+        perLakeQuota: deps.perLakeQuota ?? DEFAULT_PER_LAKE_QUOTA,
+    };
+}
+
+/** The first repo lake, else the first lake; the one rendered without a prefix. */
+function primaryLakeName(lakes: readonly Lake[]): string | undefined {
+    return (lakes.find((lake) => lake.class === "repo") ?? lakes[0])?.name;
+}
+
+/** Find a lake by name. */
+function findLake(lakes: readonly Lake[], name: string): Lake | undefined {
+    return lakes.find((lake) => lake.name === name);
+}
+
+/** The lake `add` writes to, or the refusal reason. */
+function writableLake(
+    lakes: readonly Lake[],
+    name: string | undefined,
+): Lake | { reason: string } {
+    if (name !== undefined) {
+        const lake = findLake(lakes, name);
+        if (lake === undefined) {
+            return { reason: `${REFUSE} no lake named '${name}'.` };
+        }
+        if (!lake.writable) {
+            return {
+                reason: `${REFUSE} lake '${name}' is read-only (${lake.profile}).`,
+            };
+        }
+        return lake;
+    }
+    return (
+        lakes.find((lake) => lake.class === "repo" && lake.writable) ??
+        lakes.find((lake) => lake.profile === "knowledge" && lake.writable) ?? {
+            reason:
+                `${REFUSE} no writable knowledge lake is configured; ` +
+                "add a repo, machine, or global lake.",
+        }
+    );
 }
 
-/** Delivers a rendered result to a session. */
+/** Qualify a path with its lake when more than one lake is configured. */
+function address(lake: Lake, path: string, lakes: readonly Lake[]): string {
+    return lakes.length > 1 ? `${lake.name}:${path}` : path;
+}
+
+/** Search every lake, optionally limited to one, and render the ranked result. */
+function searchDocs(
+    runtime: Runtime,
+    query: string,
+    lakeName: string | undefined,
+): { content: string; count: number; omitted: number } {
+    const all = runtime.search();
+    let entries = all;
+    if (lakeName !== undefined) {
+        if (lakeName === "instructions") {
+            entries = all.filter((entry) => entry.class === "instructions");
+        } else if (findLake(runtime.lakes, lakeName) === undefined) {
+            return {
+                content: `No lake named '${lakeName}'.`,
+                count: 0,
+                omitted: 0,
+            };
+        } else {
+            entries = all.filter((entry) => entry.lake === lakeName);
+        }
+    }
+    const {
+        entries: ranked,
+        closest,
+        omitted,
+    } = rankDocs(entries, query, { perLakeQuota: runtime.perLakeQuota });
+    return {
+        content: render(ranked, {
+            closest,
+            omitted,
+            primaryLake: primaryLakeName(runtime.lakes) ?? "",
+        }),
+        count: ranked.length,
+        omitted,
+    };
+}
+
+/** Check the knowledge lakes, optionally limited to one. */
+function checkLakes(
+    runtime: Runtime,
+    lakeName: string | undefined,
+): { content: string; checked: number } {
+    if (lakeName !== undefined) {
+        const lake = findLake(runtime.lakes, lakeName);
+        if (lake === undefined) {
+            return { content: `No lake named '${lakeName}'.`, checked: 0 };
+        }
+        if (lake.profile === "wiki") {
+            return {
+                content:
+                    `Lake '${lake.name}' is a wiki lake — read-only reference, ` +
+                    "not validated.",
+                checked: 0,
+            };
+        }
+        const entries = lake.collect();
+        return {
+            content: checkDocs(entries, lake.read, lake.notes, {
+                maxDocLines: runtime.maxDocLines,
+                ...(lake.linkCheck ? { exists: lake.exists } : {}),
+            }),
+            checked: entries.length,
+        };
+    }
+    const knowledge = runtime.lakes.filter(
+        (lake) => lake.profile === "knowledge",
+    );
+    let checked = 0;
+    const reports = knowledge.map((lake) => {
+        const entries = lake.collect();
+        checked += entries.length;
+        const report = checkDocs(entries, lake.read, lake.notes, {
+            maxDocLines: runtime.maxDocLines,
+            ...(lake.linkCheck ? { exists: lake.exists } : {}),
+        });
+        return knowledge.length > 1 || runtime.lakes.length > 1
+            ? `${lake.name}:\n${report}`
+            : report;
+    });
+    const wiki = runtime.lakes
+        .filter((lake) => lake.profile === "wiki")
+        .map((lake) => lake.name);
+    if (wiki.length > 0) {
+        reports.push(
+            `note: wiki lakes are read-only reference and are not validated: ` +
+                `${wiki.join(", ")}.`,
+        );
+    }
+    return {
+        content:
+            reports.length > 0
+                ? reports.join("\n\n")
+                : "No knowledge lakes configured.",
+        checked,
+    };
+}
+
+/** Add a doc to the target lake. */
+function addDoc(
+    runtime: Runtime,
+    add: DocsAdd,
+    lakeName: string | undefined,
+): { content: string; written: boolean } {
+    const target = writableLake(runtime.lakes, lakeName);
+    if ("reason" in target) {
+        return { content: target.reason, written: false };
+    }
+    const entries = target.collect();
+    const outcome = prepareAdd(add, entries, {
+        maxDocLines: runtime.maxDocLines,
+    });
+    if (outcome.action === "refuse") {
+        return { content: outcome.reason, written: false };
+    }
+    let updated: boolean;
+    try {
+        updated = target.exists(outcome.path);
+        target.write(outcome.path, outcome.contents);
+    } catch (error) {
+        if (error instanceof UnsafePathError) {
+            return {
+                content: `${REFUSE} ${error.message}`,
+                written: false,
+            };
+        }
+        throw error;
+    }
+    const head = `${address(target, outcome.path, runtime.lakes)} — ${
+        updated ? "updated" : "created"
+    }.`;
+    const neighbours =
+        outcome.neighbours.length > 0
+            ? `\n\nNearby docs in the same area:\n\n${render(
+                  outcome.neighbours,
+                  { primaryLake: target.name },
+              )}`
+            : "";
+    const notes =
+        outcome.notes.length > 0 ? `\n\n${outcome.notes.join("\n")}` : "";
+    return { content: `${head}${neighbours}${notes}`, written: true };
+}
+
+/** A parsed read request: the lake (when known) and the path. */
+interface ReadTarget {
+    lake?: Lake;
+    path: string;
+    reason?: string;
+}
+
+/** Split `lake:path` or an explicit lake selector into a target. */
+function readTargetOf(
+    runtime: Runtime,
+    given: string,
+    lakeName: string | undefined,
+): ReadTarget {
+    const path = given.trim();
+    if (lakeName !== undefined) {
+        const lake = findLake(runtime.lakes, lakeName);
+        const prefix = `${lakeName}:`;
+        const selectedPath = path.startsWith(prefix)
+            ? path.slice(prefix.length)
+            : path;
+        return lake === undefined
+            ? { path, reason: `${REFUSE} no lake named '${lakeName}'.` }
+            : { lake, path: selectedPath };
+    }
+    const colon = path.indexOf(":");
+    if (colon <= 0) {
+        return { path };
+    }
+    if (path.startsWith("instructions:")) {
+        return {
+            path,
+            reason:
+                `${REFUSE} instructions: paths are project READMEs; ` +
+                "use the built-in read tool.",
+        };
+    }
+    const lake = findLake(runtime.lakes, path.slice(0, colon));
+    return lake === undefined
+        ? { path }
+        : { lake, path: path.slice(colon + 1) };
+}
+
+/** The unique lake holding a path, or the refusal reason. */
+function uniqueHolder(
+    runtime: Runtime,
+    path: string,
+): Lake | { reason: string } {
+    const holders = runtime.lakes.filter((lake) => lake.exists(path));
+    if (holders.length === 0) {
+        return { reason: `No doc at ${path}.` };
+    }
+    if (holders.length > 1) {
+        return {
+            reason:
+                `${REFUSE} ${path} exists in multiple lakes ` +
+                `(${holders.map((lake) => lake.name).join(", ")}); pass lake.`,
+        };
+    }
+    return holders[0] as Lake;
+}
+
+/** Read one doc, resolving a `lake:path` prefix or the unique match. */
+function readDoc(
+    runtime: Runtime,
+    given: string,
+    lakeName: string | undefined,
+): { content: string; read: string | null } {
+    const target = readTargetOf(runtime, given, lakeName);
+    if (target.reason !== undefined) {
+        return { content: target.reason, read: null };
+    }
+    const guarded = explicitTarget(target.path);
+    if ("reason" in guarded) {
+        return {
+            content: `${REFUSE} ${guarded.reason}`,
+            read: null,
+        };
+    }
+    const selected = target.lake ?? uniqueHolder(runtime, guarded.path);
+    if ("reason" in selected) {
+        return { content: selected.reason, read: null };
+    }
+    if (!selected.exists(guarded.path)) {
+        return {
+            content: `No doc at ${address(
+                selected,
+                guarded.path,
+                runtime.lakes,
+            )}.`,
+            read: null,
+        };
+    }
+    const raw = selected.read(guarded.path);
+    const { body } = parseFrontMatter(raw);
+    const label = address(selected, guarded.path, runtime.lakes);
+    return {
+        content: `${label} — ${titleOf(guarded.path, body)}\n\n${raw}`,
+        read: label,
+    };
+}
+
+/** The lake help view shared by the tool and command. */
+function lakeInfo(lakes: readonly Lake[]): LakeInfo[] {
+    return lakes.map((lake) => ({
+        name: lake.name,
+        class: lake.class,
+        root: lake.root,
+        writable: lake.writable,
+        validated: lake.profile === "knowledge",
+    }));
+}
+
+/** Deliver a rendered result to a session. */
 export type PromptSender = (
     sessionID: CommandInvocation["sessionID"],
     text: string,
 ) => Promise<unknown>;
 
-export interface DocsCommandDeps {
-    /** Collects the lake docs; `add` and `check` use only these. */
-    collect: () => DocEntry[];
-    /** Collects everything searchable — lake docs plus local READMEs; defaults to `collect`. */
-    search?: () => DocEntry[];
-    /** Reads a root-relative doc path's raw contents; injected so `check` is testable. */
-    read: (path: string) => string;
-    /** Environment notes appended to the `check` report; injected for testability. */
-    notes?: readonly string[];
+/** Tool deps: lakes (or the legacy single-lake closures) plus knobs. */
+export type DocsToolDeps = RuntimeInput;
+
+/** Command deps: tool deps plus the session prompt sender. */
+export interface DocsCommandDeps extends RuntimeInput {
     /** Delivers the rendered result to the session. */
     prompt: PromptSender;
 }
@@ -1425,12 +2974,11 @@ export interface DocsCommandDeps {
  * the full doctrine the native `docs` description carries.
  */
 const TWIN_DESCRIPTION =
-    "Search, read, add and check the knowledge docs under the configured " +
-    "docs root (plus nested project `README.md` files, search-only) from " +
-    "inside `execute` — the `docs` tool's Code Mode twin. A blank search " +
-    "lists the most recently changed docs; `read` returns a matched doc " +
-    "verbatim; `add` writes through a typed DTO; `check` validates the " +
-    "convention.";
+    "Search, read, add and check the configured knowledge lakes (plus nested " +
+    "project `README.md` files, search-only) from inside `execute` — the " +
+    "`docs` tool's Code Mode twin. A blank search lists the most recently " +
+    "changed docs; `read` returns a matched doc verbatim; `add` writes through " +
+    "a typed DTO; `check` validates the knowledge lakes.";
 
 /**
  * Build the `docs` tool from its dependencies.
@@ -1443,8 +2991,7 @@ const TWIN_DESCRIPTION =
  * (the catalog renders `tools.<namespace>.<name>(…)`). Pass a distinct
  * `name` and `codemode: true` to register a Code Mode twin of the same core;
  * the registry is name-keyed, so the twin cannot also be called `docs`.
- * @param deps Runtime seams used on each call: the docs to serve, and the
- * write seam {@link DocsToolDeps} for `add`.
+ * @param deps Runtime seams used on each call.
  * @param options Registration shape.
  * @param options.name The tool name (default `"docs"`); a Code Mode twin
  * passes a distinct name — the registry is name-keyed, so two tools cannot
@@ -1458,58 +3005,18 @@ export function createDocsTool(
     options: { name?: string; codemode?: boolean } = {},
 ): Info<typeof DOCS_INPUT> {
     const { name = "docs", codemode = false } = options;
-    const addDoc = (add: DocsAdd) => {
-        const outcome = prepareAdd(add, deps.collect());
-        if (outcome.action === "refuse") {
-            return { content: outcome.reason, metadata: { written: false } };
-        }
-        const updated = deps.exists(outcome.path);
-        deps.write(outcome.path, outcome.contents);
-        const head = `${outcome.path} — ${updated ? "updated" : "created"}.`;
-        const neighbours =
-            outcome.neighbours.length > 0
-                ? `\n\nNearby docs in the same area:\n\n${render(outcome.neighbours)}`
-                : "";
-        return {
-            content: `${head}${neighbours}`,
-            metadata: { written: true },
-        };
-    };
-    const readDoc = (given: string) => {
-        // The same guard an explicit `add` path passes: relative, inside the
-        // root, a `.md` file — the read verb never widens the surface.
-        const target = explicitTarget(given.trim());
-        if ("reason" in target) {
-            return {
-                content: `${REFUSE} ${target.reason}`,
-                metadata: { read: null },
-            };
-        }
-        if (!deps.exists(target.path)) {
-            return {
-                content: `No doc at ${target.path}.`,
-                metadata: { read: null },
-            };
-        }
-        const raw = deps.read(target.path);
-        const { body } = parseFrontMatter(raw);
-        return {
-            content: `${target.path} — ${titleOf(target.path, body)}\n\n${raw}`,
-            metadata: { read: target.path },
-        };
-    };
+    const runtime = runtimeOf(deps);
     return {
         name,
         description: codemode
             ? TWIN_DESCRIPTION
-            : "Discover the knowledge docs under the configured docs root " +
-              "(default: the location's `docs/` directory), plus nested `README.md` " +
+            : "Discover the configured knowledge lakes plus nested `README.md` " +
               "files in the project tree. Prefer it over a broad grep when the " +
               "question is how-to knowledge rather than where code lives. A blank search lists the " +
               MAX_RESULTS +
-              " most recently changed docs (path — Area — date — Summary); a search ranks docs over title, path, keywords, body headings and code spans, area and summary, falling back to the closest matches. Every call returns at most " +
+              " most recently changed docs (path — Area — date — Summary); a search ranks docs over title, path, keywords, body headings and code spans, area, summary and wiki prose, falling back to the closest matches. Every source reserves a few results; every call caps at " +
               MAX_RESULTS +
-              " results and counts the rest. Search exactly `help` explains the ranking. `read` returns a matched doc verbatim (front-matter and body). `add` writes a new knowledge doc (or wholesale-replaces the doc at `path`) from a typed DTO — metadata becomes front-matter, the body must start with an H1; blank required fields, path traversal, non-.md targets and same-area near-twins are refused. `check` validates every doc against the convention (required front-matter, H1, claim sections, no hand-maintained Date, distinctive H1+Keywords, a Supersedes naming a doc in the tree, near-twins) and reports findings; an empty report means compliant. Local READMEs are search-only: `add` and `check` ignore them. Read a matched project file with the built-in read tool.",
+              " and counts the rest. Search exactly `help` for the lakes and ranking. `read` returns a doc verbatim; pass a `lake` or a `lake:path`. `add` writes a new knowledge doc (or replaces the doc at `path`) from a typed DTO — metadata becomes front-matter, the body must start with an H1; blank fields, path traversal, non-.md targets, symlinked targets, read-only lakes and same-area near-twins are refused. `check` validates the knowledge lakes (front-matter, H1, claim sections, no hand-maintained Date, distinctive identity, near-twins, broken links, soft length note); wiki lakes are read-only and not validated. READMEs are search-only and render as `instructions:path`; read them with the built-in read tool.",
         input: DOCS_INPUT,
         options: codemode
             ? { namespace: "docs", codemode: true }
@@ -1517,31 +3024,39 @@ export function createDocsTool(
         async execute(input) {
             const request = resolveRequest(input);
             if (request.verb === "add") {
-                return addDoc(request.add);
+                const result = addDoc(runtime, request.add, request.lake);
+                return {
+                    content: result.content,
+                    metadata: { written: result.written },
+                };
             }
             if (request.verb === "check") {
-                const entries = deps.collect();
+                const result = checkLakes(runtime, request.lake);
                 return {
-                    content: checkDocs(entries, deps.read, deps.notes ?? []),
-                    metadata: { checked: entries.length },
+                    content: result.content,
+                    metadata: { checked: result.checked },
                 };
             }
             if (request.verb === "read") {
-                return readDoc(request.read);
+                const result = readDoc(runtime, request.read, request.lake);
+                return {
+                    content: result.content,
+                    metadata: { read: result.read },
+                };
             }
             if (request.verb === "help") {
                 return {
-                    content: explainRanking(),
+                    content: helpText(lakeInfo(runtime.lakes)),
                     metadata: { count: 0, omitted: 0 },
                 };
             }
-            const { entries, closest, omitted } = rankDocs(
-                (deps.search ?? deps.collect)(),
-                request.search,
-            );
+            const result = searchDocs(runtime, request.search, request.lake);
             return {
-                content: render(entries, { closest, omitted }),
-                metadata: { count: entries.length, omitted },
+                content: result.content,
+                metadata: {
+                    count: result.count,
+                    omitted: result.omitted,
+                },
             };
         },
     };
@@ -1564,7 +3079,7 @@ function addPrompt(subject: string): string {
         return "`/docs add` needs the text to record: `/docs add <fact>`.";
     }
     return (
-        "Record this as durable knowledge in the docs root: call the `docs` " +
+        "Record this as durable knowledge in the docs lakes: call the `docs` " +
         "tool's `add` with a typed DTO (metadata Area/Keywords/Summary, body starting " +
         "with an H1) for:\n\n" +
         subject
@@ -1575,21 +3090,22 @@ function addPrompt(subject: string): string {
  * Build the `/docs` command over the same core as the tool: a search ranks the
  * catalogue (`search <text>`, or bare text), `add <text>` asks the agent to
  * write the knowledge through the tool's typed `add`, and `check` validates
- * the tree against the convention.
+ * the knowledge lakes.
  * @param deps Runtime seams used on each call.
  * @returns The command the host registers.
  */
 export function createDocsCommand(deps: DocsCommandDeps): CommandDefinition {
+    const runtime = runtimeOf(deps);
     return {
         name: "docs",
         description:
-            "Search the knowledge docs under the configured docs root, ranked, plus nested project `README.md` files (search only); `add <text>` records new knowledge through the tool's typed `add`; `check` validates the convention; a blank search lists the " +
+            "Search the configured knowledge lakes, ranked, plus nested project `README.md` files (search only); `add <text>` records new knowledge through the tool's typed `add`; `check` validates the knowledge lakes; a blank search lists the " +
             MAX_RESULTS +
             " most recently changed.",
         async execute({ sessionID, prompt }) {
             const text = prompt.text.trim();
             if (isHelp(text)) {
-                await deps.prompt(sessionID, explainRanking());
+                await deps.prompt(sessionID, helpText(lakeInfo(runtime.lakes)));
                 return;
             }
             const [verb, ...rest] = text.split(/\s+/);
@@ -1601,22 +3117,19 @@ export function createDocsCommand(deps: DocsCommandDeps): CommandDefinition {
             if (lower === CHECK_VERB) {
                 await deps.prompt(
                     sessionID,
-                    checkDocs(deps.collect(), deps.read, deps.notes ?? []),
+                    checkLakes(runtime, undefined).content,
                 );
                 return;
             }
             const query = lower === SEARCH_VERB ? rest.join(" ") : text;
-            const { entries, closest, omitted } = rankDocs(
-                (deps.search ?? deps.collect)(),
-                query,
-            );
-            await deps.prompt(sessionID, render(entries, { closest, omitted }));
+            const result = searchDocs(runtime, query, undefined);
+            await deps.prompt(sessionID, result.content);
         },
     };
 }
 
 /**
- * Resolve the plugin's docs root from its `root` option. Unset → the
+ * Resolve a lake root from its `root` option. Unset → the
  * location's `docs/` directory — a blank string counts as unset, since it is
  * almost always an empty environment variable or half-finished config rather
  * than a deliberate path; `~` or `~/…` expands against the home
@@ -1626,7 +3139,7 @@ export function createDocsCommand(deps: DocsCommandDeps): CommandDefinition {
  * must fail loudly, not silently fall back to the wrong tree.
  * @param configured The raw option value as the host delivers it.
  * @param locationDirectory The directory the plugin instance loaded in.
- * @returns The docs root.
+ * @returns The lake root.
  */
 export function resolveRoot(
     configured: unknown,
@@ -1653,13 +3166,19 @@ export function resolveRoot(
 }
 
 /**
- * Probe whether the docs root sits inside a git work tree, as `check`-report
+ * Probe whether the lake root sits inside a git work tree, as `check`-report
  * notes. An unversioned root still works — dates fall back to file mtimes and
  * the knowledge has no history — so it is surfaced, not refused.
- * @param root The docs root to probe.
+ * @param root The lake root to probe.
  * @returns The note lines; empty when the root is version-controlled.
  */
 export function unversionedNote(root: string): readonly string[] {
+    if (!existsSync(root)) {
+        return [
+            "note: this lake root does not exist yet — it is ignored until " +
+                "it does. A missing root is not an error.",
+        ];
+    }
     const probe = spawnSync("git", ["rev-parse", "--show-toplevel"], {
         cwd: root,
     });
@@ -1667,24 +3186,12 @@ export function unversionedNote(root: string): readonly string[] {
         return [];
     }
     return [
-        "note: the docs root is not inside a git work tree — dates fall " +
+        "note: the lake root is not inside a git work tree — dates fall " +
             "back to file mtimes and the knowledge has no history. Put the " +
             "root under version control to fix both.",
     ];
 }
 
-/**
- * The docs plugin's options, as the host delivers them. The framework types
- * `ctx.options` as `Readonly<Record<string, any>>`, so the shape the plugin
- * reads is declared here.
- */
-interface DocsPluginOptions {
-    /** The docs root override; defaults to `docs` beside the plugin. */
-    root?: unknown;
-    /** The runtime nudges' switch; defaults to on. */
-    nudge?: unknown;
-}
-
 /** The registered tool names that count as using the lake. */
 const DOCS_TOOL_NAMES = new Set(["docs", "docs_search"]);
 
@@ -1707,36 +3214,38 @@ function appendLine(
 export default Plugin.define({
     id: "docs",
     async setup(ctx) {
-        const options = ctx.options as DocsPluginOptions | undefined;
-        const root = resolveRoot(options?.root, ctx.location.directory);
-        const nudge = resolveNudge(options?.nudge);
-        const notes = unversionedNote(root);
-        const collect = () =>
-            collectDocs(root, (paths) => fallbackDates(root, paths));
+        const options = (ctx.options ?? {}) as DocsPluginOptions;
+        const nudge = resolveNudge(options.nudge);
+        const maxDocLines = resolveNonNegativeInt(
+            options.maxDocLines,
+            "maxDocLines",
+            DEFAULT_MAX_DOC_LINES,
+        );
+        const perLakeQuota = resolveNonNegativeInt(
+            options.perLakeQuota,
+            "perLakeQuota",
+            DEFAULT_PER_LAKE_QUOTA,
+        );
+        const lakes = createLakes(
+            resolveLakes(options, ctx.location.directory),
+        );
         const search = () => [
-            ...collect(),
+            ...lakes.flatMap((lake) => lake.collect()),
             ...collectReadmes(
                 ctx.location.directory,
                 (paths) => fallbackDates(ctx.location.directory, paths),
-                [root],
+                lakes.map((lake) => lake.root),
             ),
         ];
-        const read = (path: string) => readFileSync(join(root, path), "utf8");
         const toolDeps = {
-            collect,
+            lakes,
             search,
-            exists: (path: string) => existsSync(join(root, path)),
-            write: (path: string, contents: string) => {
-                const target = join(root, path);
-                mkdirSync(dirname(target), { recursive: true });
-                writeFileSync(target, contents);
-            },
-            read,
-            notes,
+            maxDocLines,
+            perLakeQuota,
         };
         // Two registrations of one core: the native `docs` for direct calls,
         // and the Code Mode twin `docs_search` so `execute` reaches the same
-        // lake as `tools.docs.docs_search(…)`. The registry is name-keyed, so
+        // lakes as `tools.docs.docs_search(…)`. The registry is name-keyed, so
         // the twin must carry its own name.
         await ctx.tool.transform((editor) => {
             editor.add(createDocsTool(toolDeps));
@@ -1750,12 +3259,12 @@ export default Plugin.define({
         await ctx.command.transform((editor) => {
             editor.add(
                 createDocsCommand({
-                    collect,
+                    lakes,
                     search,
-                    read,
-                    notes,
+                    maxDocLines,
+                    perLakeQuota,
                     prompt: (sessionID, text) => {
-                        // Any `/docs` use counts as consulting the lake.
+                        // Any `/docs` use counts as consulting the lakes.
                         nudged.add(sessionID);
                         return ctx.session.prompt({ sessionID, text });
                     },
@@ -1814,17 +3323,17 @@ export default Plugin.define({
                 id: Skill.ID.make("docs"),
                 name: Skill.Name.make("Docs"),
                 description:
-                    "The entry point to the knowledge docs under the " +
-                    "configured docs root, plus the project's nested " +
-                    "README.md files (search only): find the right file with " +
-                    "the docs tool, read it, and record plans and task " +
-                    "documentation for the next human or agent. Use before " +
-                    "searching the codebase for how-to knowledge, when a " +
-                    "task names a service, flag or error string the lake " +
-                    "may already explain, at the start of unfamiliar work, " +
-                    "when hunting for prior decisions or traps, when a " +
-                    "session learns something the next one will need, and " +
-                    "when closing out a session.",
+                    "The entry point to the configured knowledge lakes " +
+                    "(repo, machine, global and read-only wiki), plus the " +
+                    "project's nested README.md files (search only): find the " +
+                    "right doc with the docs tool, read it, and record focused " +
+                    "task knowledge for the next human or agent at the " +
+                    "narrowest true scope. Use before searching the codebase " +
+                    "for how-to knowledge, when a task names a service, flag " +
+                    "or error string the lake may already explain, at the " +
+                    "start of unfamiliar work, when hunting for prior " +
+                    "decisions or traps, when a session learns something the " +
+                    "next one will need, and when closing out a session.",
                 path: AbsolutePath.make(fileURLToPath(skillURL)),
                 content: skill,
             });