@beezping/adapter-memory 0.6.0 → 0.7.0

package/dist/email.d.cts

@@ -1,5 +1,5 @@
 /**
- * The one email pattern every Siteping surface validates against.
+ * The one email pattern every Beezping surface validates against.
  *
  * The widget's identity modal and the HTTP handler's schema used to disagree
  * (a permissive regex on one side, an ASCII-only default on the other), so an
@@ -8,12 +8,15 @@
  * sides, makes that drift impossible.
  *
  * Deliberately Unicode-aware: internationalised local parts and domains
- * (`françois@exemple.fr`, `user@münchen.de`) are real addresses and common in
- * the audience this widget serves. Structure follows the usual rules — a
- * local part of 1 to 64 characters with no leading, trailing or doubled dot,
+ * (`françois@exemple.fr`, `user@münchen.de`, `user@हिंदी.भारत`) are real
+ * addresses and common in the audience this widget serves. Combining marks
+ * (`\p{M}`) are allowed alongside letters — scripts like Devanagari need them,
+ * and NFD-composed input spells `ç` as `c` + U+0327 — except as the first
+ * character of a domain label. Structure follows the usual rules — a local
+ * part of 1 to 64 characters with no leading, trailing or doubled dot,
  * dot-separated domain labels of at most 63 characters that neither start nor
  * end with a hyphen, and a final label of at least two characters.
  */
 export declare const EMAIL_PATTERN: RegExp;
-/** Whether `value` is an email address Siteping accepts — see {@link EMAIL_PATTERN}. */
+/** Whether `value` is an email address Beezping accepts — see {@link EMAIL_PATTERN}. */
 export declare function isValidEmail(value: string): boolean;

package/dist/email.d.ts

@@ -1,5 +1,5 @@
 /**
- * The one email pattern every Siteping surface validates against.
+ * The one email pattern every Beezping surface validates against.
  *
  * The widget's identity modal and the HTTP handler's schema used to disagree
  * (a permissive regex on one side, an ASCII-only default on the other), so an
@@ -8,12 +8,15 @@
  * sides, makes that drift impossible.
  *
  * Deliberately Unicode-aware: internationalised local parts and domains
- * (`françois@exemple.fr`, `user@münchen.de`) are real addresses and common in
- * the audience this widget serves. Structure follows the usual rules — a
- * local part of 1 to 64 characters with no leading, trailing or doubled dot,
+ * (`françois@exemple.fr`, `user@münchen.de`, `user@हिंदी.भारत`) are real
+ * addresses and common in the audience this widget serves. Combining marks
+ * (`\p{M}`) are allowed alongside letters — scripts like Devanagari need them,
+ * and NFD-composed input spells `ç` as `c` + U+0327 — except as the first
+ * character of a domain label. Structure follows the usual rules — a local
+ * part of 1 to 64 characters with no leading, trailing or doubled dot,
  * dot-separated domain labels of at most 63 characters that neither start nor
  * end with a hyphen, and a final label of at least two characters.
  */
 export declare const EMAIL_PATTERN: RegExp;
-/** Whether `value` is an email address Siteping accepts — see {@link EMAIL_PATTERN}. */
+/** Whether `value` is an email address Beezping accepts — see {@link EMAIL_PATTERN}. */
 export declare function isValidEmail(value: string): boolean;

package/dist/errors.d.cts

@@ -1,5 +1,5 @@
 /**
- * Typed error hierarchy for Siteping client/server boundaries.
+ * Typed error hierarchy for Beezping client/server boundaries.
  *
  * Consumers can `instanceof`-check or read `code` / `retryable` instead of
  * pattern-matching error messages. Designed to be additive on top of the
@@ -7,35 +7,49 @@
  * remain the canonical signals for server-side store implementations.
  *
  * Usage on the widget side (api-client.ts):
- *   - fetch failures / aborts / timeouts → `SitepingNetworkError` (retryable)
- *   - HTTP 4xx (except 401/403)         → `SitepingValidationError` (not retryable)
- *   - HTTP 401 / 403                    → `SitepingAuthError` (not retryable)
- *   - everything else                   → `SitepingError` generic
+ *   - fetch failures / aborts / timeouts → `BeezpingNetworkError` (retryable)
+ *   - HTTP 4xx (except 401/403)         → `BeezpingValidationError` (not retryable)
+ *   - HTTP 401 / 403                    → `BeezpingAuthError` (not retryable)
+ *   - everything else                   → `BeezpingError` generic
+ *
+ * Store mode (store-client.ts): a `createFeedback` that does not settle in
+ * time → `BeezpingError` with code `"TIMEOUT"` (retryable).
  *
  * `retryable` is meta information surfaced to host apps that want to wire
  * their own retry/queue/backoff strategy — the widget already retries
  * network failures via its built-in retry queue.
  */
 /**
- * Discriminant string carried by every `SitepingError`. Subclasses pin a
+ * Discriminant string carried by every `BeezpingError`. Subclasses pin a
  * literal value; the base class accepts a wider string so userland can
  * extend the hierarchy without colliding with built-ins.
  */
-export type SitepingErrorCode = "NETWORK" | "VALIDATION" | "AUTH" | "SERVER" | (string & {});
-export declare class SitepingError<TCode extends SitepingErrorCode = SitepingErrorCode> extends Error {
+export type BeezpingErrorCode = "NETWORK" | "VALIDATION" | "AUTH" | "SERVER" | "TIMEOUT" | (string & {});
+export declare class BeezpingError<TCode extends BeezpingErrorCode = BeezpingErrorCode> extends Error {
     readonly code: TCode;
     readonly retryable: boolean;
     constructor(message: string, code: TCode, retryable: boolean);
 }
 /** Network-level failure: connection refused, DNS, CORS, timeout, abort. Retryable. */
-export declare class SitepingNetworkError extends SitepingError<"NETWORK"> {
+export declare class BeezpingNetworkError extends BeezpingError<"NETWORK"> {
     constructor(message: string);
 }
-/** Server rejected the request (4xx, not auth). Validation problem on the client side. */
-export declare class SitepingValidationError extends SitepingError<"VALIDATION"> {
-    constructor(message: string);
+/**
+ * Server rejected the request (4xx, not auth). Validation problem on the
+ * client side. `status` is the HTTP status when a response said so: a 404
+ * (the target is gone) and a 409 (a full thread) call for other answers
+ * than a 400.
+ */
+export declare class BeezpingValidationError extends BeezpingError<"VALIDATION"> {
+    readonly status: number | undefined;
+    constructor(message: string, status?: number);
 }
 /** Server rejected auth (401 or 403). Not retryable without fresh credentials. */
-export declare class SitepingAuthError extends SitepingError<"AUTH"> {
-    constructor(message: string);
+export declare class BeezpingAuthError extends BeezpingError<"AUTH"> {
+    /**
+     * `401`: the credentials are missing or no longer work — drop a dead token
+     * on this one. `403`: they work, and the server's policy refuses this request.
+     */
+    readonly status: 401 | 403;
+    constructor(message: string, status: 401 | 403);
 }

package/dist/errors.d.ts

@@ -1,5 +1,5 @@
 /**
- * Typed error hierarchy for Siteping client/server boundaries.
+ * Typed error hierarchy for Beezping client/server boundaries.
  *
  * Consumers can `instanceof`-check or read `code` / `retryable` instead of
  * pattern-matching error messages. Designed to be additive on top of the
@@ -7,35 +7,49 @@
  * remain the canonical signals for server-side store implementations.
  *
  * Usage on the widget side (api-client.ts):
- *   - fetch failures / aborts / timeouts → `SitepingNetworkError` (retryable)
- *   - HTTP 4xx (except 401/403)         → `SitepingValidationError` (not retryable)
- *   - HTTP 401 / 403                    → `SitepingAuthError` (not retryable)
- *   - everything else                   → `SitepingError` generic
+ *   - fetch failures / aborts / timeouts → `BeezpingNetworkError` (retryable)
+ *   - HTTP 4xx (except 401/403)         → `BeezpingValidationError` (not retryable)
+ *   - HTTP 401 / 403                    → `BeezpingAuthError` (not retryable)
+ *   - everything else                   → `BeezpingError` generic
+ *
+ * Store mode (store-client.ts): a `createFeedback` that does not settle in
+ * time → `BeezpingError` with code `"TIMEOUT"` (retryable).
  *
  * `retryable` is meta information surfaced to host apps that want to wire
  * their own retry/queue/backoff strategy — the widget already retries
  * network failures via its built-in retry queue.
  */
 /**
- * Discriminant string carried by every `SitepingError`. Subclasses pin a
+ * Discriminant string carried by every `BeezpingError`. Subclasses pin a
  * literal value; the base class accepts a wider string so userland can
  * extend the hierarchy without colliding with built-ins.
  */
-export type SitepingErrorCode = "NETWORK" | "VALIDATION" | "AUTH" | "SERVER" | (string & {});
-export declare class SitepingError<TCode extends SitepingErrorCode = SitepingErrorCode> extends Error {
+export type BeezpingErrorCode = "NETWORK" | "VALIDATION" | "AUTH" | "SERVER" | "TIMEOUT" | (string & {});
+export declare class BeezpingError<TCode extends BeezpingErrorCode = BeezpingErrorCode> extends Error {
     readonly code: TCode;
     readonly retryable: boolean;
     constructor(message: string, code: TCode, retryable: boolean);
 }
 /** Network-level failure: connection refused, DNS, CORS, timeout, abort. Retryable. */
-export declare class SitepingNetworkError extends SitepingError<"NETWORK"> {
+export declare class BeezpingNetworkError extends BeezpingError<"NETWORK"> {
     constructor(message: string);
 }
-/** Server rejected the request (4xx, not auth). Validation problem on the client side. */
-export declare class SitepingValidationError extends SitepingError<"VALIDATION"> {
-    constructor(message: string);
+/**
+ * Server rejected the request (4xx, not auth). Validation problem on the
+ * client side. `status` is the HTTP status when a response said so: a 404
+ * (the target is gone) and a 409 (a full thread) call for other answers
+ * than a 400.
+ */
+export declare class BeezpingValidationError extends BeezpingError<"VALIDATION"> {
+    readonly status: number | undefined;
+    constructor(message: string, status?: number);
 }
 /** Server rejected auth (401 or 403). Not retryable without fresh credentials. */
-export declare class SitepingAuthError extends SitepingError<"AUTH"> {
-    constructor(message: string);
+export declare class BeezpingAuthError extends BeezpingError<"AUTH"> {
+    /**
+     * `401`: the credentials are missing or no longer work — drop a dead token
+     * on this one. `403`: they work, and the server's policy refuses this request.
+     */
+    readonly status: 401 | 403;
+    constructor(message: string, status: 401 | 403);
 }

package/dist/filters.d.cts

@@ -4,13 +4,14 @@
  * near-identical copies of the same logic. Any adapter that holds an
  * in-memory snapshot of feedbacks can use it.
  *
- * Filtering order matches the historical adapter behaviour:
- *   1. projectName  (always required)
- *   2. type
- *   3. status / statuses  (`statuses` bucket wins when both are set)
- *   4. url
- *   5. urlPattern
- *   6. search       (lowercase substring match on `message`)
+ * A record matches when it passes every active filter (see
+ * {@link matchesFeedbackQuery}):
+ *   - projectName  (always required)
+ *   - type
+ *   - status / statuses  (`statuses` bucket wins when both are set)
+ *   - url
+ *   - urlPattern
+ *   - search       (lowercase substring match on `message`)
  *
  * Pagination goes through `clampPagination`: `limit` capped at 100, `page`
  * 1-based, both clamped up to 1 rather than indexing backwards from the end
@@ -63,6 +64,13 @@ export declare function clampPagination(query: Pick<FeedbackQuery, "page" | "lim
  * @returns `true` when no row can sit at that offset.
  */
 export declare function isUnreachableOffset(skip: number): boolean;
+/**
+ * Whether one record passes every filter of `query` — the filter half of
+ * {@link applyFeedbackFilters}, exposed so a client holding a single record
+ * (e.g. the dashboard deciding whether an optimistic edit still belongs in
+ * its list) applies exactly the stores' semantics. Pagination is ignored.
+ */
+export declare function matchesFeedbackQuery(record: FeedbackRecord, query: FeedbackQuery): boolean;
 /**
  * Apply the standard feedback filter + pagination pipeline against an
  * in-memory snapshot. Used by `MemoryStore.getFeedbacks` and

package/dist/filters.d.ts

@@ -4,13 +4,14 @@
  * near-identical copies of the same logic. Any adapter that holds an
  * in-memory snapshot of feedbacks can use it.
  *
- * Filtering order matches the historical adapter behaviour:
- *   1. projectName  (always required)
- *   2. type
- *   3. status / statuses  (`statuses` bucket wins when both are set)
- *   4. url
- *   5. urlPattern
- *   6. search       (lowercase substring match on `message`)
+ * A record matches when it passes every active filter (see
+ * {@link matchesFeedbackQuery}):
+ *   - projectName  (always required)
+ *   - type
+ *   - status / statuses  (`statuses` bucket wins when both are set)
+ *   - url
+ *   - urlPattern
+ *   - search       (lowercase substring match on `message`)
  *
  * Pagination goes through `clampPagination`: `limit` capped at 100, `page`
  * 1-based, both clamped up to 1 rather than indexing backwards from the end
@@ -63,6 +64,13 @@ export declare function clampPagination(query: Pick<FeedbackQuery, "page" | "lim
  * @returns `true` when no row can sit at that offset.
  */
 export declare function isUnreachableOffset(skip: number): boolean;
+/**
+ * Whether one record passes every filter of `query` — the filter half of
+ * {@link applyFeedbackFilters}, exposed so a client holding a single record
+ * (e.g. the dashboard deciding whether an optimistic edit still belongs in
+ * its list) applies exactly the stores' semantics. Pagination is ignored.
+ */
+export declare function matchesFeedbackQuery(record: FeedbackRecord, query: FeedbackQuery): boolean;
 /**
  * Apply the standard feedback filter + pagination pipeline against an
  * in-memory snapshot. Used by `MemoryStore.getFeedbacks` and

package/dist/i18n.d.cts

@@ -48,6 +48,24 @@ export interface I18n<T> {
      */
     registerLocale(code: string, translations: Partial<T>): void;
 }
+/**
+ * `locale` as `Intl` accepts it. Locale options take any string, and a
+ * backend-style tag (`fr_FR` from PHP / WordPress) makes every `Intl`
+ * constructor and `toLocale*` call throw a RangeError: `_` reads as `-`, and
+ * a tag `Intl` still rejects falls back to English, as `createT` does.
+ * Silent, so it is safe on a render path; see `canonicalizeLocale` for the
+ * one-time, warning variant.
+ */
+export declare function intlLocale(locale: string): string;
+/**
+ * The host's locale tag as `Intl` accepts it. `BeezpingLocale` takes any
+ * string, and PHP / WordPress hand out POSIX-style tags (`fr_FR`, `pt_BR`)
+ * that every `Intl` constructor rejects with a RangeError: `_` becomes `-`,
+ * then the tag is canonicalised (`fr-FR`). Falls back to `"en"`, with a
+ * warning, only when the tag is still invalid (empty, garbage) — meant to run
+ * once, where the config is read.
+ */
+export declare function canonicalizeLocale(locale: string): string;
 /**
  * Build the i18n machinery for one message catalog.
  *

package/dist/i18n.d.ts

@@ -48,6 +48,24 @@ export interface I18n<T> {
      */
     registerLocale(code: string, translations: Partial<T>): void;
 }
+/**
+ * `locale` as `Intl` accepts it. Locale options take any string, and a
+ * backend-style tag (`fr_FR` from PHP / WordPress) makes every `Intl`
+ * constructor and `toLocale*` call throw a RangeError: `_` reads as `-`, and
+ * a tag `Intl` still rejects falls back to English, as `createT` does.
+ * Silent, so it is safe on a render path; see `canonicalizeLocale` for the
+ * one-time, warning variant.
+ */
+export declare function intlLocale(locale: string): string;
+/**
+ * The host's locale tag as `Intl` accepts it. `BeezpingLocale` takes any
+ * string, and PHP / WordPress hand out POSIX-style tags (`fr_FR`, `pt_BR`)
+ * that every `Intl` constructor rejects with a RangeError: `_` becomes `-`,
+ * then the tag is canonicalised (`fr-FR`). Falls back to `"en"`, with a
+ * warning, only when the tag is still invalid (empty, garbage) — meant to run
+ * once, where the config is read.
+ */
+export declare function canonicalizeLocale(locale: string): string;
 /**
  * Build the i18n machinery for one message catalog.
  *

package/dist/index.cjs

@@ -22,6 +22,7 @@ var index_exports = {};
 __export(index_exports, {
   MemoryStore: () => MemoryStore,
   StoreDuplicateError: () => StoreDuplicateError,
+  StoreLimitError: () => StoreLimitError,
   StoreNotFoundError: () => StoreNotFoundError,
   StorePersistenceError: () => StorePersistenceError,
   isStorePersistence: () => isStorePersistence
@@ -39,28 +40,21 @@ function clampPagination(query) {
   const limit = Math.min(toPositiveInteger(query.limit, DEFAULT_PAGE_LIMIT), MAX_PAGE_LIMIT);
   return { page, limit, skip: (page - 1) * limit };
 }
-function isUnreachableOffset(skip) {
-  return !Number.isSafeInteger(skip);
+function sortTime(record) {
+  const time = record.createdAt.getTime();
+  return Number.isNaN(time) ? Number.MIN_SAFE_INTEGER : time;
+}
+function matchesFeedbackQuery(record, query) {
+  const { type, status, statuses, url, urlPattern, search } = query;
+  return record.projectName === query.projectName && (!type || record.type === type) && // `statuses` (bucket / any-of) wins over the exact `status` filter when
+  // both are present; an empty array is treated as absent.
+  (statuses && statuses.length > 0 ? statuses.includes(record.status) : !status || record.status === status) && (!url || record.url === url) && (!urlPattern || record.urlPattern === urlPattern) && (!search || record.message.toLowerCase().includes(search.toLowerCase()));
 }
 function applyFeedbackFilters(items, query) {
-  let results = items.filter((f) => f.projectName === query.projectName);
-  if (query.type) results = results.filter((f) => f.type === query.type);
-  if (query.statuses && query.statuses.length > 0) {
-    const allowed = query.statuses;
-    results = results.filter((f) => allowed.includes(f.status));
-  } else if (query.status) {
-    results = results.filter((f) => f.status === query.status);
-  }
-  if (query.url) results = results.filter((f) => f.url === query.url);
-  if (query.urlPattern) results = results.filter((f) => f.urlPattern === query.urlPattern);
-  if (query.search) {
-    const s = query.search.toLowerCase();
-    results = results.filter((f) => f.message.toLowerCase().includes(s));
-  }
-  results.sort((a, b) => b.createdAt.getTime() - a.createdAt.getTime());
+  const results = items.filter((f) => matchesFeedbackQuery(f, query));
+  results.sort((a, b) => sortTime(b) - sortTime(a));
   const total = results.length;
   const { limit, skip } = clampPagination(query);
-  if (isUnreachableOffset(skip)) return { feedbacks: [], total };
   return { feedbacks: results.slice(skip, skip + limit), total };
 }
 
@@ -73,6 +67,7 @@ function hasOwn(value, key) {
 }
 
 // ../core/src/types.ts
+var MAX_COMMENTS_PER_FEEDBACK = 100;
 var StoreNotFoundError = class extends Error {
   code = "STORE_NOT_FOUND";
   constructor(message = "Record not found", options) {
@@ -94,6 +89,13 @@ var StorePersistenceError = class extends Error {
     this.name = "StorePersistenceError";
   }
 };
+var StoreLimitError = class extends Error {
+  code = "STORE_LIMIT";
+  constructor(message = "Store limit reached", options) {
+    super(message, options);
+    this.name = "StoreLimitError";
+  }
+};
 function hasErrorCode(error, code) {
   return hasOwn(error, "code") && error.code === code;
 }
@@ -129,6 +131,18 @@ function buildAnnotationRecord(input, ctx) {
     createdAt: ctx.now
   };
 }
+function buildCommentRecord(input, ctx) {
+  return {
+    id: ctx.id,
+    feedbackId: ctx.feedbackId,
+    body: input.body,
+    authorName: input.authorName,
+    authorEmail: input.authorEmail,
+    authorRole: input.authorRole,
+    clientId: input.clientId,
+    createdAt: ctx.now ?? /* @__PURE__ */ new Date()
+  };
+}
 function buildFeedbackRecord(input, ctx) {
   const now = ctx.now ?? /* @__PURE__ */ new Date();
   return {
@@ -156,23 +170,24 @@ function buildFeedbackRecord(input, ctx) {
   };
 }
 function createCollectionStore(backend) {
-  let mutationQueueTail = Promise.resolve();
-  const runSerializedMutation = (mutation) => {
-    const mutationResult = mutationQueueTail.then(mutation);
-    mutationQueueTail = mutationResult.then(
-      () => void 0,
-      () => void 0
-    );
-    return mutationResult;
-  };
-  const insertFeedbackIfAbsent = async (data) => {
-    const feedbacks = await backend.load();
+  let tail = Promise.resolve();
+  function mutate(mutation) {
+    const result = tail.then(() => {
+      const loaded = backend.load();
+      return Array.isArray(loaded) ? mutation(loaded) : loaded.then(mutation);
+    });
+    tail = result.catch(() => {
+    });
+    return result;
+  }
+  const createFeedbackIfAbsent = (data) => mutate(async (feedbacks) => {
     const existing = feedbacks.find((f) => f.clientId === data.clientId);
     if (existing) return { feedback: existing, created: false };
     const record = buildFeedbackRecord(data, {
       id: backend.generateId(),
       annotationId: () => backend.generateId()
     });
+    if (backend.comments) record.comments = [];
     const next = [record, ...feedbacks];
     try {
       await backend.persist(next);
@@ -182,9 +197,8 @@ function createCollectionStore(backend) {
       await backend.persist(next);
     }
     return { feedback: record, created: true };
-  };
-  const createFeedbackIfAbsent = (data) => runSerializedMutation(() => insertFeedbackIfAbsent(data));
-  return {
+  });
+  const store = {
     createFeedbackIfAbsent,
     async createFeedback(data) {
       return (await createFeedbackIfAbsent(data)).feedback;
@@ -195,39 +209,55 @@ function createCollectionStore(backend) {
     async findByClientId(clientId) {
       return (await backend.load()).find((f) => f.clientId === clientId) ?? null;
     },
-    updateFeedback(id, data) {
-      return runSerializedMutation(async () => {
-        const feedbacks = await backend.load();
-        const current = feedbacks.find((f) => f.id === id);
-        if (!current) throw new StoreNotFoundError();
-        const updated = {
-          ...current,
-          status: data.status,
-          resolvedAt: data.resolvedAt,
-          updatedAt: /* @__PURE__ */ new Date()
-        };
-        await backend.persist(feedbacks.map((f) => f === current ? updated : f));
-        return updated;
-      });
-    },
-    deleteFeedback(id) {
-      return runSerializedMutation(async () => {
-        const feedbacks = await backend.load();
-        if (!feedbacks.some((f) => f.id === id)) throw new StoreNotFoundError();
-        await backend.persist(feedbacks.filter((f) => f.id !== id));
-      });
-    },
-    deleteAllFeedbacks(projectName) {
-      return runSerializedMutation(async () => {
-        const feedbacks = await backend.load();
-        await backend.persist(feedbacks.filter((f) => f.projectName !== projectName));
-      });
-    },
+    updateFeedback: (id, data) => mutate(async (feedbacks) => {
+      const current = feedbacks.find((f) => f.id === id);
+      if (!current) throw new StoreNotFoundError();
+      const updated = {
+        ...current,
+        status: data.status,
+        resolvedAt: data.resolvedAt,
+        updatedAt: /* @__PURE__ */ new Date()
+      };
+      await backend.persist(feedbacks.map((f) => f === current ? updated : f));
+      return updated;
+    }),
+    deleteFeedback: (id) => mutate(async (feedbacks) => {
+      if (!feedbacks.some((f) => f.id === id)) throw new StoreNotFoundError();
+      await backend.persist(feedbacks.filter((f) => f.id !== id));
+    }),
+    deleteAllFeedbacks: (projectName) => mutate(async (feedbacks) => {
+      await backend.persist(feedbacks.filter((f) => f.projectName !== projectName));
+    }),
     async verifyProjectOwnership(id, projectName) {
       const fb = (await backend.load()).find((f) => f.id === id);
       return fb !== void 0 && fb.projectName === projectName;
     }
   };
+  if (!backend.comments) return store;
+  return {
+    ...store,
+    addComment: (feedbackId, data) => mutate(async (feedbacks) => {
+      const existing = feedbacks.flatMap((f) => f.comments ?? []).find((c) => c.clientId === data.clientId);
+      if (existing) return existing;
+      const current = feedbacks.find((f) => f.id === feedbackId);
+      if (!current) throw new StoreNotFoundError();
+      const thread = current.comments ?? [];
+      if (data.authorRole === "client" && thread.filter((c) => c.authorRole === "client").length >= MAX_COMMENTS_PER_FEEDBACK) {
+        throw new StoreLimitError(`A thread holds at most ${MAX_COMMENTS_PER_FEEDBACK} client comments`);
+      }
+      const comment = buildCommentRecord(data, { id: backend.generateId(), feedbackId });
+      const updated = { ...current, comments: [...thread, comment] };
+      await backend.persist(feedbacks.map((f) => f === current ? updated : f));
+      return comment;
+    }),
+    deleteComment: (feedbackId, commentId) => mutate(async (feedbacks) => {
+      const current = feedbacks.find((f) => f.id === feedbackId);
+      const thread = current?.comments ?? [];
+      if (!current || !thread.some((c) => c.id === commentId)) throw new StoreNotFoundError();
+      const updated = { ...current, comments: thread.filter((c) => c.id !== commentId) };
+      await backend.persist(feedbacks.map((f) => f === current ? updated : f));
+    })
+  };
 }
 
 // src/index.ts
@@ -239,7 +269,9 @@ var MemoryStore = class {
     persist: (next) => {
       this.feedbacks = next;
     },
-    generateId: () => `mem-${this.idCounter++}-${Date.now().toString(36)}`
+    generateId: () => `mem-${this.idCounter++}-${Date.now().toString(36)}`,
+    // Records live in memory: comment dates stay Dates.
+    comments: true
   });
   createFeedback(data) {
     return this.engine.createFeedback(data);
@@ -265,6 +297,12 @@ var MemoryStore = class {
   verifyProjectOwnership(id, projectName) {
     return this.engine.verifyProjectOwnership(id, projectName);
   }
+  addComment(feedbackId, data) {
+    return this.engine.addComment(feedbackId, data);
+  }
+  deleteComment(feedbackId, commentId) {
+    return this.engine.deleteComment(feedbackId, commentId);
+  }
   /** Remove all data from this store instance. */
   clear() {
     this.feedbacks = [];