feat(@packages/crawl-admission,@packages/crawl-article): add host admission package

src/packages/crawl-admission/.c8rc.json

@@ -0,0 +1,9 @@
+{
+  "all": true,
+  "src": "src",
+  "reporter": ["html", "json-summary"],
+  "reports-dir": "./coverage",
+  "resolve": ".",
+  "source-map": true,
+  "exclude-after-remap": true
+}

src/packages/crawl-admission/biome.json

@@ -0,0 +1,4 @@
+{
+  "$schema": "https://biomejs.dev/schemas/2.4.16/schema.json",
+  "extends": ["../../../biome.config.base.json"]
+}

src/packages/crawl-admission/enforce-coverage.config.js

@@ -0,0 +1,21 @@
+const baseConfig = require('../../../enforce-coverage.config.base');
+const path = require('path');
+
+const config = {
+  ...baseConfig,
+  thresholds: {
+    statements: 100,
+    branches: 100,
+    functions: 100,
+    lines: 100,
+  },
+};
+
+config.enforceCoverage({
+  projectRoot: path.resolve(__dirname),
+  thresholds: config.thresholds,
+  showTextTable: true,
+  extraExcludePatterns: [
+    ...(config.extraExcludePatterns || []),
+  ],
+});

src/packages/crawl-admission/jest.config.js

@@ -0,0 +1,9 @@
+// Run the c8 coverage pass IN-BAND. Multi-worker coverage loses a worker's V8
+// shard when jest SIGKILLs a leaked-handle worker before it flushes, dropping
+// coverage below threshold on a per-run lottery; nx still runs the packages in
+// parallel, so cross-package parallelism is preserved. Non-coverage `jest`
+// keeps the default pool.
+/** @type {import('jest').Config} */
+module.exports = {
+  ...(process.env.NODE_V8_COVERAGE ? { maxWorkers: 1 } : {}),
+};

src/packages/crawl-admission/knip.config.ts

@@ -0,0 +1,12 @@
+import type { KnipConfig } from "knip";
+
+export default {
+	ignoreBinaries: [
+		"knip",
+		"biome",
+		"nx",
+	],
+	jest: {
+		entry: ["src/**/*.test.ts"],
+	},
+} satisfies KnipConfig;

src/packages/crawl-admission/package.json

@@ -0,0 +1,27 @@
+{
+  "name": "@packages/crawl-admission",
+  "version": "1.0.0",
+  "description": "Fleetwide per-host crawl admission, pacing and cooldown policy backed by the shared rate-limits table",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "private": true,
+  "scripts": {
+    "compile": "rm -rf dist && tsc",
+    "lint": "concurrently --kill-others-on-fail \"tsc --project tsconfig.lint.json\" \"biome lint src\" \"knip\"",
+    "test": "jest --testMatch='**/dist/**/*.test.js'",
+    "test-with-coverage": "c8 pnpm test && node enforce-coverage.config.js",
+    "check": "nx run @packages/crawl-admission:check",
+    "check-infra": "echo 'No infrastructure — shared library'"
+  },
+  "dependencies": {
+    "@packages/storage-client": "workspace:*",
+    "zod": "4.4.3"
+  },
+  "devDependencies": {
+    "@types/jest": "30.0.0",
+    "c8": "11.0.0",
+    "concurrently": "10.0.0",
+    "jest": "30.4.2",
+    "typescript": "6.0.3"
+  }
+}

src/packages/crawl-admission/project.json

@@ -0,0 +1,10 @@
+{
+  "name": "@packages/crawl-admission",
+  "targets": {
+    "check": {
+      "command": "pnpm lint && pnpm test-with-coverage",
+      "options": { "cwd": "{projectRoot}" },
+      "dependsOn": ["compile"]
+    }
+  }
+}