Moved limit-service into the monorepo with its history

.github/renovate.json5

@@ -389,14 +389,6 @@
       ],
     },
 
-    // Bump @tryghost/limit-service on its own. Limit changes are feature-tied
-    // (each new flag is consumed by specific BREAD/limit-helper code) and we
-    // want the version bump landing as an isolated, reviewable PR rather than
-    // riding in with unrelated admin-support package updates.
-    {
-      groupName: '@tryghost/limit-service',
-      matchPackageNames: ['@tryghost/limit-service'],
-    },
     {
       groupName: 'TryGhost content and email packages',
       matchPackageNames: [

.markdownlint-cli2.jsonc

@@ -1,4 +1,8 @@
 {
+  // The imported limit-service documentation is kept exactly as it arrived from
+  // TryGhost/SDK so it can be diffed against the source. It is linted once it is
+  // rewritten alongside the package.
+  "ignores": ["packages/limit-service/**"],
   "config": {
     "default": false,
     "MD011": true,

.oxfmtrc.json

@@ -18,6 +18,7 @@
     "koenig/kg-simplemde/debug/**",
     "koenig/koenig-lexical/**",
     "packages/i18n/locales/**",
+    "packages/limit-service/**",
     ".changeset/ledger.yaml"
   ]
 }

apps/admin-x-framework/package.json

@@ -80,7 +80,7 @@
   "dependencies": {
     "@sentry/react": "catalog:",
     "@tanstack/react-query": "catalog:",
-    "@tryghost/limit-service": "catalog:",
+    "@tryghost/limit-service": "workspace:*",
     "@tryghost/metafield-types": "workspace:*",
     "@tryghost/nql-string": "workspace:*",
     "@tryghost/shade": "workspace:*",

apps/admin/vite.config.ts

@@ -49,7 +49,11 @@ export default defineConfig(({ command }) => ({
     // forwardConsole: { logLevels: ['warn', 'error'] }
   },
   optimizeDeps: {
-    include: ['@tryghost/koenig-lexical'],
+    // limit-service is CommonJS, and Vite only converts CommonJS while pre-bundling. A
+    // workspace package is treated as source and served raw, where `module` does not exist,
+    // so the import fails and the limiter silently falls back to reporting every host limit
+    // as absent. Force it through the pre-bundler until the package itself is converted.
+    include: ['@tryghost/koenig-lexical', '@tryghost/limit-service'],
   },
   resolve: sharedResolve,
   test: {

apps/admin/vitest.acceptance.config.ts

@@ -34,6 +34,11 @@ export default defineConfig({
     // suite. Test files and screen helpers import test-lane modules the
     // browser bundler can't process; vitest serves those itself.
     entries: ['src/**/*.{ts,tsx}', '!src/**/*.test.*', '!src/**/*.screen.ts'],
+    // limit-service is CommonJS, and Vite only converts CommonJS while pre-bundling. A
+    // workspace package is treated as source and served raw, where `module` does not exist,
+    // so the import fails and the limiter silently falls back to reporting every host limit
+    // as absent. Force it through the pre-bundler until the package itself is converted.
+    include: ['@tryghost/limit-service'],
   },
   resolve: sharedResolve,
   test: {

apps/ember-admin/package.json

@@ -53,7 +53,7 @@
     "@tryghost/kg-clean-basic-html": "workspace:*",
     "@tryghost/kg-converters": "workspace:*",
     "@tryghost/koenig-lexical": "workspace:*",
-    "@tryghost/limit-service": "catalog:",
+    "@tryghost/limit-service": "workspace:*",
     "@tryghost/nql": "catalog:",
     "@tryghost/nql-string": "workspace:*",
     "@tryghost/string": "catalog:",

ghost/core/package.json

@@ -115,7 +115,7 @@
     "@tryghost/kg-html-to-lexical": "workspace:*",
     "@tryghost/kg-lexical-html-renderer": "workspace:*",
     "@tryghost/kg-markdown-html-renderer": "workspace:*",
-    "@tryghost/limit-service": "catalog:",
+    "@tryghost/limit-service": "workspace:*",
     "@tryghost/logging": "catalog:",
     "@tryghost/metafield-types": "workspace:*",
     "@tryghost/metrics": "catalog:",

packages/limit-service/.eslintrc.js

@@ -0,0 +1,6 @@
+module.exports = {
+    plugins: ['ghost'],
+    extends: [
+        'plugin:ghost/node'
+    ]
+};

packages/limit-service/CLAUDE.md

@@ -0,0 +1,92 @@
+# CLAUDE.md
+
+This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
+
+## Common Development Commands
+
+### Testing
+- **Run all tests with coverage**: `npm test`
+- **Run a specific test file**: `NODE_ENV=testing mocha './test/limit.test.js'`
+- **Run tests matching a pattern**: `NODE_ENV=testing mocha './test/**/*.test.js' --grep "MaxLimit"`
+- **Run tests with coverage report**: `NODE_ENV=testing c8 --all --reporter text --reporter cobertura mocha './test/**/*.test.js'`
+
+### Linting
+- **Run ESLint**: `npm run lint`
+- **Fix linting issues**: `npm run lint -- --fix`
+
+### Development
+- **Note**: There is no dev script currently implemented (placeholder exists)
+
+## High-Level Architecture
+
+The limit-service is a centralized limit enforcement system for Ghost that follows clean architecture principles:
+
+### Core Components
+
+1. **LimitService** (`lib/LimitService.js`): Main service class that acts as a facade for all limit operations. It creates and manages different limit types based on configuration.
+
+2. **Limit Types** (`lib/limit.js`):
+   - **MaxLimit**: Enforces maximum counts (e.g., max 5 staff users)
+   - **MaxPeriodicLimit**: Enforces limits over time periods (e.g., max emails per month)
+   - **FlagLimit**: On/off feature toggles
+   - **AllowlistLimit**: Restricts values to an allowed list
+
+3. **Configuration** (`lib/config.js`): Defines supported limits and their properties. Each limit can specify:
+   - `type`: The limit type to use
+   - `fallbackErrorMessage`: Default error message
+   - `currentCountQuery`: Database query function for count-based limits
+
+### Key Architectural Patterns
+
+- **Strategy Pattern**: Different limit types implement a common interface (`checkIsOverLimit`, `checkWouldGoOverLimit`)
+- **Dependency Injection**: Database connection, errors handler, and configuration are injected at initialization
+- **Transaction Support**: All database operations can be wrapped in transactions via `options.transacting`
+
+### Adding New Limits
+
+1. Add the limit configuration in `lib/config.js`:
+   ```javascript
+   newFeature: {
+       type: 'max', // or 'flag', 'allowlist'
+       fallbackErrorMessage: 'Default error for {{name}} limit',
+       currentCountQuery: async (db, options) => {
+           // Return current count from database
+       }
+   }
+   ```
+
+2. Test the new limit following existing patterns in `test/`
+
+### Testing Approach
+
+- Uses Mocha with Should.js for assertions
+- Sinon for mocking database queries and date/time
+- Tests focus on behavior, not implementation
+- Mock database responses to test limit logic in isolation
+
+### Database Integration
+
+- Expects a Knex instance for database queries
+- All queries support transactions
+- Count queries should return a number or be convertible to a number
+- For periodic limits, queries receive `startDate` and `endDate` parameters
+
+### Error Handling
+
+- Uses `@tryghost/errors` for consistent error formatting
+- Supports template variables in error messages: `{{max}}`, `{{count}}`, `{{name}}`
+- All limits have fallback error messages
+- Numbers in error messages are formatted with toLocaleString()
+
+### Key Methods Flow
+
+1. `loadLimits()`: Initializes the service with configuration
+2. `isLimited()`: Checks if a limit is configured
+3. `errorIfWouldGoOverLimit()`: Throws if action would exceed limit
+4. `errorIfIsOverLimit()`: Throws if already over limit
+5. `checkIsOverLimit()`: Returns boolean for limit status
+6. `checkWouldGoOverLimit()`: Returns boolean for potential limit breach
+
+### Environment Variable
+
+- Set `NODE_ENV=testing` when running tests

packages/limit-service/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2013-2026 Ghost Foundation
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.