Thread

Thread/reply payload validation + action policy for Q&A forums, boards, FAQ and support threads (Layer 1 Core).

Status

Key	Value
Layer	core
Tier	L1
Status	released
Version	1.0.0
Price	Free (free)
Category	Community

Overview

Overview

Thread is a Layer 1 Core Plugin. It provides domain-agnostic payload validation and action policy decisions for thread-style UX such as Q&A forums, boards, FAQ and support tickets.

Reuses Annotation's AuthorRole enum for permission branching.

Core Components

ThreadPayloadValidator (Pure)

Extracted from academy.how's LessonThreadController::store / storeReply.

Thread validation (validateThread):

• title 1~max(255), trim, empty rejected
• body 1~max(20_000)
• Multibyte-friendly (mb_strlen)

Reply validation (validateReply):

• Thread is_locked rejected
• body 1~max(20_000)
• parent_id from different thread → parent_invalid
• parent already a child reply → reply_depth_exceeded (1-level only, configurable)
• Staff reply auto-marked is_staff_reply=true
• Empty/blank parent_id treated as top-level

ThreadActionPolicy (Pure)

Extracted from academy's policies. Decides on role + ownership only (tenant/saas isolation is caller's responsibility).

Action	Policy
canCreateThread	Role required
canUpdateThread / canDeleteThread	Owner OR staff
canTogglePin / canToggleLock	Staff only by default (configurable)
canCreateReply	Open = anyone, locked = staff
canUpdateReply / canDeleteReply	Owner OR staff
canToggleAccept	Staff always. Thread owner also if accept_staff_only=false

Exception

InvalidThreadPayloadException — reason field for i18n.

Configuration

return [
    'enabled' => env('PLG_THREAD_ENABLED', true),
    'limits' => [
        'title_max' => 255,
        'thread_body_max' => 20_000,
        'reply_body_max' => 20_000,
    ],
    'replies' => [
        'max_depth' => 1,
        'accept_staff_only' => true,
    ],
    'admin_actions' => [
        'pin_staff_only' => true,
        'lock_staff_only' => true,
    ],
];

Usage

$validator = ThreadPayloadValidator::fromConfig(config('thread'));
$policy = ThreadActionPolicy::fromConfig(config('thread'));

if (! $policy->canCreateThread($role)) abort(403);
$normalized = $validator->validateThread($request->all(), $role);

Origin

Extracted from academy.how's LessonThread + LessonThreadReply Model + Controller + Policies. Eloquent dependencies removed.

Dependencies

• Annotation — reuses AuthorRole enum

Roadmap (Phase 3+)

• Standard Thread + ThreadReply Model + Migration (opt-in)
• Filament Resource
• RichEditorSanitizer integration
• Cross-link with Reader plugin

License

MIT

Dependencies

• Annotation

Demos

• Platform 관리자 패널에서 메타 확인 🔒 Login required
• 사용 예시 (PHP)

---

🛒 View on Plugin Store: store.codebase.how/plugins/thread