@ctcstack/ctcdocs-core 0.22.3 → 0.23.1

package/dist/access-configuration.d.ts

@@ -29,5 +29,7 @@ export interface AccessConfiguration {
     readonly rules: readonly AccessRule[];
 }
 type Fail = (path: string, expectation: string) => never;
+/** Whether a configured value has the shape of a Drive folder ID. */
+export declare function isDriveFolderId(value: unknown): value is string;
 export declare function parseAccessConfiguration(value: unknown, fail: Fail): AccessConfiguration;
 export {};

package/dist/access-configuration.js

@@ -15,6 +15,10 @@ export const EVERY_MEMBER = '*';
 const GROUP_ADDRESS = /^[a-z0-9](?:[a-z0-9._%+-]*[a-z0-9])?@[a-z0-9](?:[a-z0-9-]*[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]*[a-z0-9])?)+$/u;
 /** The characters Google uses in file and folder IDs. */
 const FOLDER_ID = /^[A-Za-z0-9_-]{1,128}$/u;
+/** Whether a configured value has the shape of a Drive folder ID. */
+export function isDriveFolderId(value) {
+    return typeof value === 'string' && FOLDER_ID.test(value);
+}
 function object(value, path, fail) {
     if (typeof value !== 'object' || value === null || Array.isArray(value)) {
         fail(path, 'must be an object');

package/dist/index.d.ts

@@ -10,7 +10,7 @@ export { ADMINS_CLASS, chainReaders, chainRules, classIdentifiers, computeAccess
 export type { AccessClass, AccessModel, ChainReaders, PublishedReaders, Readers, } from './access-classes.js';
 export { accessFindings } from './access-findings.js';
 export type { AccessFinding } from './access-findings.js';
-export { fetchCharacterLimit, loadSiteConfiguration, MCP_DEFAULTS, parseSiteConfiguration, SiteConfigurationError, } from './site-configuration.js';
-export type { AddressPolicy, BrandConfiguration, DeploymentConfiguration, DeploymentEnvironmentConfiguration, DeploymentEnvironmentConfigurations, DeploymentVisibility, HomeConfiguration, McpConfiguration, McpRecentConfiguration, McpSearchConfiguration, NavigationConfiguration, SignInConfiguration, SiteConfiguration, SyncConfigurationDefaults, } from './site-configuration.js';
+export { fetchCharacterLimit, INSIGHTS_DEFAULTS, loadSiteConfiguration, MCP_DEFAULTS, parseSiteConfiguration, SiteConfigurationError, } from './site-configuration.js';
+export type { AddressPolicy, BrandConfiguration, DeploymentConfiguration, DeploymentEnvironmentConfiguration, DeploymentEnvironmentConfigurations, DeploymentVisibility, HomeConfiguration, InsightsConfiguration, McpConfiguration, McpRecentConfiguration, McpSearchConfiguration, NavigationConfiguration, SignInConfiguration, SiteConfiguration, StaleFolder, SyncConfigurationDefaults, } from './site-configuration.js';
 export { agentDocumentFormat, DOCUMENT_FORMAT_BADGES, DOCUMENT_FORMAT_NOUNS, DOCUMENT_FORMATS, DOCUMENT_SOURCE_TYPES, documentFormatOf, documentSourceType, isDocumentSourceType, } from './document-format.js';
 export type { AgentDocumentFormat, DocumentFormat, DocumentSourceType, } from './document-format.js';

package/dist/index.js

@@ -6,5 +6,5 @@ export { EVERY_MEMBER, parseAccessConfiguration, } from './access-configuration.
 export { CorpusStructureError, EMPTY_CORPUS, parseCorpusStructure, readCorpusStructure, } from './corpus-structure.js';
 export { ADMINS_CLASS, chainReaders, chainRules, classIdentifiers, computeAccessModel, documentClass, folderChain, folderClass, intersectReaders, MEMBERS_CLASS, nextPublishedReaders, widensReaders, } from './access-classes.js';
 export { accessFindings } from './access-findings.js';
-export { fetchCharacterLimit, loadSiteConfiguration, MCP_DEFAULTS, parseSiteConfiguration, SiteConfigurationError, } from './site-configuration.js';
+export { fetchCharacterLimit, INSIGHTS_DEFAULTS, loadSiteConfiguration, MCP_DEFAULTS, parseSiteConfiguration, SiteConfigurationError, } from './site-configuration.js';
 export { agentDocumentFormat, DOCUMENT_FORMAT_BADGES, DOCUMENT_FORMAT_NOUNS, DOCUMENT_FORMATS, DOCUMENT_SOURCE_TYPES, documentFormatOf, documentSourceType, isDocumentSourceType, } from './document-format.js';

package/dist/project-layout.d.ts

@@ -93,8 +93,21 @@ export declare const PLATFORM_WORKERS: {
     readonly documentsBinding: "KB_DOCUMENTS";
     /** The AI Search instance that indexes that bucket. */
     readonly searchBinding: "KB_SEARCH";
-    /** How often the site's Worker checks that the bucket matches its build. */
+    /**
+     * How often the site's Worker checks that the bucket matches its build,
+     * and deletes the records of use past their retention (ADR-050).
+     */
     readonly publishSchedule: "*/5 * * * *";
+    /**
+     * The database of operational state (ADR-050): records of use, and
+     * editors' workflow state. Never content, access or a reader's identity.
+     */
+    readonly stateDatabaseBinding: "KB_STATE_DB";
+    /**
+     * The platform's migrations for that database, which the binding names so
+     * that `wrangler d1 migrations apply` finds them.
+     */
+    readonly stateMigrations: "node_modules/@ctcstack/ctcdocs/worker/state/migrations";
     /** Lets the OAuth library fetch a client's metadata document safely. */
     readonly oauthCompatibilityFlag: "global_fetch_strictly_public";
 };

package/dist/project-layout.js

@@ -93,8 +93,21 @@ export const PLATFORM_WORKERS = {
     documentsBinding: 'KB_DOCUMENTS',
     /** The AI Search instance that indexes that bucket. */
     searchBinding: 'KB_SEARCH',
-    /** How often the site's Worker checks that the bucket matches its build. */
+    /**
+     * How often the site's Worker checks that the bucket matches its build,
+     * and deletes the records of use past their retention (ADR-050).
+     */
     publishSchedule: '*/5 * * * *',
+    /**
+     * The database of operational state (ADR-050): records of use, and
+     * editors' workflow state. Never content, access or a reader's identity.
+     */
+    stateDatabaseBinding: 'KB_STATE_DB',
+    /**
+     * The platform's migrations for that database, which the binding names so
+     * that `wrangler d1 migrations apply` finds them.
+     */
+    stateMigrations: 'node_modules/@ctcstack/ctcdocs/worker/state/migrations',
     /** Lets the OAuth library fetch a client's metadata document safely. */
     oauthCompatibilityFlag: 'global_fetch_strictly_public',
 };

package/dist/site-configuration.d.ts

@@ -118,6 +118,22 @@ export interface SyncConfigurationDefaults {
      * or to that limit where it is lower.
      */
     readonly largeDocumentCharacters: number;
+    /**
+     * Months without an edit in Drive after which the content health page asks
+     * for a document to be reviewed (ADR-049). Defaults to 12; 0 asks for none.
+     */
+    readonly staleAfterMonths: number;
+    /** Folders that keep their own line, for everything below them. */
+    readonly staleFolders: readonly StaleFolder[];
+}
+/** A folder whose documents are asked for review on a line of their own. */
+export interface StaleFolder {
+    /** The Drive folder, with everything below it. */
+    readonly folder: string;
+    /** The folder's name as the author knew it, for review. */
+    readonly label: string;
+    /** Months without an edit; 0 asks for no review below this folder. */
+    readonly months: number;
 }
 export interface NavigationConfiguration {
     /**
@@ -214,6 +230,12 @@ export interface McpConfiguration {
     /** Characters of JSON a `browse` tree takes at most (ADR-044). */
     readonly browseCharacters: number;
     readonly recent: McpRecentConfiguration;
+    /**
+     * The language the documents are written in, as a language tag such as
+     * `en`. The MCP server tells assistants to search in it; unset,
+     * it says nothing of the language.
+     */
+    readonly language?: string;
 }
 /** What `mcp` holds when a project sets only `enabled` (ADR-042). */
 export declare const MCP_DEFAULTS: Omit<McpConfiguration, 'enabled'>;
@@ -224,11 +246,33 @@ export declare const MCP_DEFAULTS: Omit<McpConfiguration, 'enabled'>;
  * (ADR-043), so the two never derive it apart.
  */
 export declare function fetchCharacterLimit(mcp: McpConfiguration | undefined): number;
+/**
+ * What people and assistants ask, recorded so editors see what the
+ * documentation fails to answer (ADR-051). The records live in the Worker's
+ * database (ADR-050), so it needs the MCP server, and with it a private
+ * deployment.
+ */
+export interface InsightsConfiguration {
+    readonly enabled: boolean;
+    /** Days a record of use is kept before the Worker's schedule deletes it. */
+    readonly retentionDays: number;
+    /**
+     * The reranker score, 0 to 1, below which a search's best result counts
+     * as not found. Unset, the weekly report takes the week's lowest fifth.
+     */
+    readonly weakScore?: number;
+    /** Whether searches on the site are recorded as well as MCP calls. */
+    readonly siteSearch: boolean;
+}
+/** What `insights` holds when a project sets only `enabled` (ADR-051). */
+export declare const INSIGHTS_DEFAULTS: Omit<InsightsConfiguration, 'enabled' | 'weakScore'>;
 export interface SiteConfiguration {
     /** Required to serve a private environment through the platform's Worker. */
     readonly signIn?: SignInConfiguration;
     /** Absent or disabled, the Worker serves no MCP or OAuth route. */
     readonly mcp?: McpConfiguration;
+    /** Absent or disabled, the Worker records nothing of what is asked. */
+    readonly insights?: InsightsConfiguration;
     /**
      * Who may read which folder (ADR-039). Absent, every document is open to
      * every reader the deployment admits, as before access rules existed.

package/dist/site-configuration.js

@@ -13,7 +13,7 @@
  */
 import { readFileSync } from 'node:fs';
 import { resolve } from 'node:path';
-import { parseAccessConfiguration, } from './access-configuration.js';
+import { isDriveFolderId, parseAccessConfiguration, } from './access-configuration.js';
 import { PROJECT_LAYOUT } from './project-layout.js';
 /** What `mcp` holds when a project sets only `enabled` (ADR-042). */
 export const MCP_DEFAULTS = Object.freeze({
@@ -44,6 +44,8 @@ export const MCP_DEFAULTS = Object.freeze({
 export function fetchCharacterLimit(mcp) {
     return mcp?.enabled ? mcp.fetchCharacters : MCP_DEFAULTS.fetchCharacters;
 }
+/** What `insights` holds when a project sets only `enabled` (ADR-051). */
+export const INSIGHTS_DEFAULTS = Object.freeze({ retentionDays: 90, siteSearch: true });
 /** About 10,000 tokens of English: a starting value, not a measured one. */
 const LARGE_DOCUMENT_CHARACTERS = 40_000;
 export class SiteConfigurationError extends Error {
@@ -359,6 +361,8 @@ export function parseSiteConfiguration(input) {
         'defaultLocale',
         'largeImageMegabytes',
         'largeDocumentCharacters',
+        'staleAfterMonths',
+        'staleFolders',
     ]);
     const generatedBy = text(syncSource, 'generatedBy', 'sync.generatedBy');
     // The marker is embedded in an HTML comment in every generated Markdown
@@ -423,8 +427,10 @@ export function parseSiteConfiguration(input) {
             'fetchCharacters',
             'browseCharacters',
             'recent',
+            'language',
         ]);
         const enabled = flag(source, 'enabled', 'mcp.enabled');
+        const language = optionalLanguage(source.language);
         if (enabled) {
             if (!signIn) {
                 fail('mcp', 'needs signIn: assistants sign in as the site does');
@@ -439,12 +445,45 @@ export function parseSiteConfiguration(input) {
             fetchCharacters: optionalNumber(source, 'fetchCharacters', 'mcp.fetchCharacters', MCP_DEFAULTS.fetchCharacters, { min: 1_000, whole: true }),
             browseCharacters: optionalNumber(source, 'browseCharacters', 'mcp.browseCharacters', MCP_DEFAULTS.browseCharacters, { min: 1_000, whole: true }),
             recent: mcpRecent(source.recent),
+            ...(language ? { language } : {}),
         };
     }
     const fetchLimit = fetchCharacterLimit(mcp);
+    let insights;
+    if (root.insights !== undefined) {
+        const source = record(root.insights, 'insights');
+        knownKeys(source, 'insights', [
+            'enabled',
+            'retentionDays',
+            'weakScore',
+            'siteSearch',
+        ]);
+        const enabled = flag(source, 'enabled', 'insights.enabled');
+        if (enabled && mcp?.enabled !== true) {
+            fail('insights', 'needs mcp.enabled: it records what assistants ask');
+        }
+        if (enabled && !access) {
+            fail('insights', 'needs access.admins: only admins read the report');
+        }
+        insights = {
+            enabled,
+            /*
+             * A weekly report goes when the first day it aggregates does, a week
+             * after it is made (ADR-051): two weeks keep it readable for one.
+             */
+            retentionDays: optionalNumber(source, 'retentionDays', 'insights.retentionDays', INSIGHTS_DEFAULTS.retentionDays, { min: 14, max: 365, whole: true }),
+            siteSearch: optionalFlag(source, 'siteSearch', 'insights.siteSearch', INSIGHTS_DEFAULTS.siteSearch),
+            ...(source.weakScore === undefined
+                ? {}
+                : {
+                    weakScore: optionalNumber(source, 'weakScore', 'insights.weakScore', 0, { min: 0, max: 1, whole: false }),
+                }),
+        };
+    }
     return {
         ...(signIn ? { signIn } : {}),
         ...(mcp ? { mcp } : {}),
+        ...(insights ? { insights } : {}),
         ...(access ? { access } : {}),
         brand,
         deployment,
@@ -466,9 +505,57 @@ export function parseSiteConfiguration(input) {
             generatedBy,
             largeImageMegabytes: optionalMegabytes(syncSource, 'largeImageMegabytes', 'sync.largeImageMegabytes', 2),
             largeDocumentCharacters: optionalNumber(syncSource, 'largeDocumentCharacters', 'sync.largeDocumentCharacters', Math.min(LARGE_DOCUMENT_CHARACTERS, fetchLimit), { min: 1, max: fetchLimit, whole: true }),
+            staleAfterMonths: optionalNumber(syncSource, 'staleAfterMonths', 'sync.staleAfterMonths', 12, STALE_MONTHS),
+            staleFolders: optionalStaleFolders(syncSource.staleFolders),
         },
     };
 }
+/** A language tag Intl can read, such as `en` or `uk`. */
+function optionalLanguage(value) {
+    if (value === undefined) {
+        return undefined;
+    }
+    try {
+        if (typeof value === 'string') {
+            return new Intl.Locale(value).toString();
+        }
+    }
+    catch {
+        // Reported below.
+    }
+    return fail('mcp.language', 'must be a language tag such as "en"');
+}
+/** The range a line of months without an edit may take. */
+const STALE_MONTHS = { min: 0, max: 120, whole: true };
+function optionalStaleFolders(value) {
+    if (value === undefined) {
+        return [];
+    }
+    if (!Array.isArray(value)) {
+        fail('sync.staleFolders', 'must be a list');
+    }
+    const seen = new Set();
+    return value.map((entry, index) => {
+        const path = `sync.staleFolders[${index}]`;
+        const source = record(entry, path);
+        knownKeys(source, path, ['folder', 'label', 'months']);
+        if (!isDriveFolderId(source.folder)) {
+            fail(`${path}.folder`, 'must be a Drive folder ID');
+        }
+        if (seen.has(source.folder)) {
+            fail(`${path}.folder`, 'must not be listed twice');
+        }
+        seen.add(source.folder);
+        if (source.months === undefined) {
+            fail(`${path}.months`, 'must be a whole number from 0 to 120');
+        }
+        return {
+            folder: source.folder,
+            label: text(source, 'label', `${path}.label`),
+            months: optionalNumber(source, 'months', `${path}.months`, 0, STALE_MONTHS),
+        };
+    });
+}
 /**
  * Parsed configurations, keyed by absolute project root.
  *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ctcstack/ctcdocs-core",
-  "version": "0.22.3",
+  "version": "0.23.1",
   "description": "Configuration schema, project layout, generated-path allowlist and the published Markdown form shared by the CTCDocs platform packages.",
   "keywords": [
     "ctcdocs",

package/src/access-configuration.ts

@@ -40,6 +40,11 @@ const GROUP_ADDRESS =
 /** The characters Google uses in file and folder IDs. */
 const FOLDER_ID = /^[A-Za-z0-9_-]{1,128}$/u;
 
+/** Whether a configured value has the shape of a Drive folder ID. */
+export function isDriveFolderId(value: unknown): value is string {
+  return typeof value === 'string' && FOLDER_ID.test(value);
+}
+
 function object(
   value: unknown,
   path: string,

package/src/index.ts

@@ -66,6 +66,7 @@ export { accessFindings } from './access-findings.js';
 export type { AccessFinding } from './access-findings.js';
 export {
   fetchCharacterLimit,
+  INSIGHTS_DEFAULTS,
   loadSiteConfiguration,
   MCP_DEFAULTS,
   parseSiteConfiguration,
@@ -79,12 +80,14 @@ export type {
   DeploymentEnvironmentConfigurations,
   DeploymentVisibility,
   HomeConfiguration,
+  InsightsConfiguration,
   McpConfiguration,
   McpRecentConfiguration,
   McpSearchConfiguration,
   NavigationConfiguration,
   SignInConfiguration,
   SiteConfiguration,
+  StaleFolder,
   SyncConfigurationDefaults,
 } from './site-configuration.js';
 export {

package/src/project-layout.ts

@@ -95,8 +95,21 @@ export const PLATFORM_WORKERS = {
   documentsBinding: 'KB_DOCUMENTS',
   /** The AI Search instance that indexes that bucket. */
   searchBinding: 'KB_SEARCH',
-  /** How often the site's Worker checks that the bucket matches its build. */
+  /**
+   * How often the site's Worker checks that the bucket matches its build,
+   * and deletes the records of use past their retention (ADR-050).
+   */
   publishSchedule: '*/5 * * * *',
+  /**
+   * The database of operational state (ADR-050): records of use, and
+   * editors' workflow state. Never content, access or a reader's identity.
+   */
+  stateDatabaseBinding: 'KB_STATE_DB',
+  /**
+   * The platform's migrations for that database, which the binding names so
+   * that `wrangler d1 migrations apply` finds them.
+   */
+  stateMigrations: 'node_modules/@ctcstack/ctcdocs/worker/state/migrations',
   /** Lets the OAuth library fetch a client's metadata document safely. */
   oauthCompatibilityFlag: 'global_fetch_strictly_public',
 } as const;

package/src/site-configuration.ts

@@ -15,6 +15,7 @@ import { readFileSync } from 'node:fs';
 import { resolve } from 'node:path';
 
 import {
+  isDriveFolderId,
   parseAccessConfiguration,
   type AccessConfiguration,
 } from './access-configuration.js';
@@ -145,6 +146,23 @@ export interface SyncConfigurationDefaults {
    * or to that limit where it is lower.
    */
   readonly largeDocumentCharacters: number;
+  /**
+   * Months without an edit in Drive after which the content health page asks
+   * for a document to be reviewed (ADR-049). Defaults to 12; 0 asks for none.
+   */
+  readonly staleAfterMonths: number;
+  /** Folders that keep their own line, for everything below them. */
+  readonly staleFolders: readonly StaleFolder[];
+}
+
+/** A folder whose documents are asked for review on a line of their own. */
+export interface StaleFolder {
+  /** The Drive folder, with everything below it. */
+  readonly folder: string;
+  /** The folder's name as the author knew it, for review. */
+  readonly label: string;
+  /** Months without an edit; 0 asks for no review below this folder. */
+  readonly months: number;
 }
 
 export interface NavigationConfiguration {
@@ -247,6 +265,12 @@ export interface McpConfiguration {
   /** Characters of JSON a `browse` tree takes at most (ADR-044). */
   readonly browseCharacters: number;
   readonly recent: McpRecentConfiguration;
+  /**
+   * The language the documents are written in, as a language tag such as
+   * `en`. The MCP server tells assistants to search in it; unset,
+   * it says nothing of the language.
+   */
+  readonly language?: string;
 }
 
 /** What `mcp` holds when a project sets only `enabled` (ADR-042). */
@@ -280,6 +304,31 @@ export function fetchCharacterLimit(mcp: McpConfiguration | undefined): number {
   return mcp?.enabled ? mcp.fetchCharacters : MCP_DEFAULTS.fetchCharacters;
 }
 
+/**
+ * What people and assistants ask, recorded so editors see what the
+ * documentation fails to answer (ADR-051). The records live in the Worker's
+ * database (ADR-050), so it needs the MCP server, and with it a private
+ * deployment.
+ */
+export interface InsightsConfiguration {
+  readonly enabled: boolean;
+  /** Days a record of use is kept before the Worker's schedule deletes it. */
+  readonly retentionDays: number;
+  /**
+   * The reranker score, 0 to 1, below which a search's best result counts
+   * as not found. Unset, the weekly report takes the week's lowest fifth.
+   */
+  readonly weakScore?: number;
+  /** Whether searches on the site are recorded as well as MCP calls. */
+  readonly siteSearch: boolean;
+}
+
+/** What `insights` holds when a project sets only `enabled` (ADR-051). */
+export const INSIGHTS_DEFAULTS: Omit<
+  InsightsConfiguration,
+  'enabled' | 'weakScore'
+> = Object.freeze({ retentionDays: 90, siteSearch: true });
+
 /** About 10,000 tokens of English: a starting value, not a measured one. */
 const LARGE_DOCUMENT_CHARACTERS = 40_000;
 
@@ -288,6 +337,8 @@ export interface SiteConfiguration {
   readonly signIn?: SignInConfiguration;
   /** Absent or disabled, the Worker serves no MCP or OAuth route. */
   readonly mcp?: McpConfiguration;
+  /** Absent or disabled, the Worker records nothing of what is asked. */
+  readonly insights?: InsightsConfiguration;
   /**
    * Who may read which folder (ADR-039). Absent, every document is open to
    * every reader the deployment admits, as before access rules existed.
@@ -786,6 +837,8 @@ export function parseSiteConfiguration(input: unknown): SiteConfiguration {
     'defaultLocale',
     'largeImageMegabytes',
     'largeDocumentCharacters',
+    'staleAfterMonths',
+    'staleFolders',
   ]);
   const generatedBy = text(syncSource, 'generatedBy', 'sync.generatedBy');
   // The marker is embedded in an HTML comment in every generated Markdown
@@ -868,8 +921,10 @@ export function parseSiteConfiguration(input: unknown): SiteConfiguration {
       'fetchCharacters',
       'browseCharacters',
       'recent',
+      'language',
     ]);
     const enabled = flag(source, 'enabled', 'mcp.enabled');
+    const language = optionalLanguage(source.language);
     if (enabled) {
       if (!signIn) {
         fail('mcp', 'needs signIn: assistants sign in as the site does');
@@ -899,13 +954,64 @@ export function parseSiteConfiguration(input: unknown): SiteConfiguration {
         { min: 1_000, whole: true },
       ),
       recent: mcpRecent(source.recent),
+      ...(language ? { language } : {}),
     };
   }
   const fetchLimit = fetchCharacterLimit(mcp);
 
+  let insights: InsightsConfiguration | undefined;
+  if (root.insights !== undefined) {
+    const source = record(root.insights, 'insights');
+    knownKeys(source, 'insights', [
+      'enabled',
+      'retentionDays',
+      'weakScore',
+      'siteSearch',
+    ]);
+    const enabled = flag(source, 'enabled', 'insights.enabled');
+    if (enabled && mcp?.enabled !== true) {
+      fail('insights', 'needs mcp.enabled: it records what assistants ask');
+    }
+    if (enabled && !access) {
+      fail('insights', 'needs access.admins: only admins read the report');
+    }
+    insights = {
+      enabled,
+      /*
+       * A weekly report goes when the first day it aggregates does, a week
+       * after it is made (ADR-051): two weeks keep it readable for one.
+       */
+      retentionDays: optionalNumber(
+        source,
+        'retentionDays',
+        'insights.retentionDays',
+        INSIGHTS_DEFAULTS.retentionDays,
+        { min: 14, max: 365, whole: true },
+      ),
+      siteSearch: optionalFlag(
+        source,
+        'siteSearch',
+        'insights.siteSearch',
+        INSIGHTS_DEFAULTS.siteSearch,
+      ),
+      ...(source.weakScore === undefined
+        ? {}
+        : {
+            weakScore: optionalNumber(
+              source,
+              'weakScore',
+              'insights.weakScore',
+              0,
+              { min: 0, max: 1, whole: false },
+            ),
+          }),
+    };
+  }
+
   return {
     ...(signIn ? { signIn } : {}),
     ...(mcp ? { mcp } : {}),
+    ...(insights ? { insights } : {}),
     ...(access ? { access } : {}),
     brand,
     deployment,
@@ -964,10 +1070,72 @@ export function parseSiteConfiguration(input: unknown): SiteConfiguration {
         Math.min(LARGE_DOCUMENT_CHARACTERS, fetchLimit),
         { min: 1, max: fetchLimit, whole: true },
       ),
+      staleAfterMonths: optionalNumber(
+        syncSource,
+        'staleAfterMonths',
+        'sync.staleAfterMonths',
+        12,
+        STALE_MONTHS,
+      ),
+      staleFolders: optionalStaleFolders(syncSource.staleFolders),
     },
   };
 }
 
+/** A language tag Intl can read, such as `en` or `uk`. */
+function optionalLanguage(value: unknown): string | undefined {
+  if (value === undefined) {
+    return undefined;
+  }
+  try {
+    if (typeof value === 'string') {
+      return new Intl.Locale(value).toString();
+    }
+  } catch {
+    // Reported below.
+  }
+  return fail('mcp.language', 'must be a language tag such as "en"');
+}
+
+/** The range a line of months without an edit may take. */
+const STALE_MONTHS = { min: 0, max: 120, whole: true } as const;
+
+function optionalStaleFolders(value: unknown): StaleFolder[] {
+  if (value === undefined) {
+    return [];
+  }
+  if (!Array.isArray(value)) {
+    fail('sync.staleFolders', 'must be a list');
+  }
+  const seen = new Set<string>();
+  return value.map((entry: unknown, index) => {
+    const path = `sync.staleFolders[${index}]`;
+    const source = record(entry, path);
+    knownKeys(source, path, ['folder', 'label', 'months']);
+    if (!isDriveFolderId(source.folder)) {
+      fail(`${path}.folder`, 'must be a Drive folder ID');
+    }
+    if (seen.has(source.folder)) {
+      fail(`${path}.folder`, 'must not be listed twice');
+    }
+    seen.add(source.folder);
+    if (source.months === undefined) {
+      fail(`${path}.months`, 'must be a whole number from 0 to 120');
+    }
+    return {
+      folder: source.folder,
+      label: text(source, 'label', `${path}.label`),
+      months: optionalNumber(
+        source,
+        'months',
+        `${path}.months`,
+        0,
+        STALE_MONTHS,
+      ),
+    };
+  });
+}
+
 /**
  * Parsed configurations, keyed by absolute project root.
  *