plum-cms 0.2.2 → 0.3.0

data/app/services/plum/comments/context.rb

@@ -0,0 +1,70 @@
+module Plum
+  module Comments
+    class Context
+      attr_reader :controller, :site, :subject, :handle
+
+      def initialize(controller, handle:, id:, action: :read)
+        @controller, @handle = controller, handle.to_s
+        @site = Plum.current_site(controller)
+        raise ActiveRecord::RecordNotFound unless config.enabled && site
+        if @handle == "entries"
+          @subject = site.entries.find(id)
+          raise ActiveRecord::RecordNotFound unless action == :moderate || site.entries.live.exists?(subject.id)
+          allowed = config.entry_authorizer.call(controller, action, subject)
+          allowed &&= config.entry_authorizer.call(controller, :read, subject) unless action == :moderate
+        else
+          registration = config.subjects.fetch(@handle) { raise ActiveRecord::RecordNotFound }
+          @subject = registration[:resolve].call(controller, site, id)
+          allowed = subject && registration[:authorize].call(controller, action, subject)
+          allowed &&= registration[:authorize].call(controller, :read, subject) unless action == :moderate
+        end
+        unless allowed && subject.is_a?(Plum::Commentable) && subject.plum_comment_site == site && (action == :moderate || subject.plum_comments_enabled?)
+          raise ActiveRecord::RecordNotFound
+        end
+      end
+
+      def config
+        Plum.configuration.comments
+      end
+
+      def discussion
+        @discussion ||= site.discussions.find_by(commentable: subject)
+      end
+
+      def open?
+        !!(subject.plum_comments_open? && !discussion&.closed?)
+      end
+
+      def author
+        @author ||= config.commenter_resolver.call(controller)
+      end
+
+      def author_gid
+        self.class.identity(author)
+      end
+
+      def self.identity(author)
+        author.to_global_id.to_s if author.respond_to?(:persisted?) && author.persisted? && author.respond_to?(:to_global_id)
+      end
+
+      def create_comment!(attributes)
+        raise ActiveRecord::RecordNotFound unless author_gid && open?
+        thread = discussion || site.discussions.create_or_find_by!(commentable: subject) { |record| record.subject_handle = handle }
+        thread.with_lock do
+          raise ActiveRecord::RecordNotFound if thread.closed? || !subject.reload.plum_comments_open?
+          # Serialize posting per discussion; the host may apply stricter account/IP limits.
+          if thread.comments.where(author_gid: author_gid).where("created_at > ?", 10.seconds.ago).exists?
+            raise RateLimited
+          end
+          parent = attributes[:parent_id].presence && thread.comments.publicly_visible.find(attributes[:parent_id])
+          thread.comments.create!(attributes.except(:parent_id).merge(
+            parent: parent, author_gid: author_gid,
+            author_name: config.author_name_resolver.call(author),
+            author_badge: config.author_badge_resolver.call(controller, author),
+            status: config.auto_approve.call(controller, author, subject) ? "approved" : "pending"
+          ))
+        end
+      end
+    end
+  end
+end

data/app/services/plum/comments/rate_limited.rb

@@ -0,0 +1,5 @@
+module Plum
+  module Comments
+    class RateLimited < StandardError; end
+  end
+end

data/app/services/plum/comments/theme_renderer.rb

@@ -0,0 +1,66 @@
+module Plum
+  module Comments
+    class ThemeRenderer
+      def initialize(controller:, context:, comments:, page:)
+        @controller, @context, @comments, @page = controller, context, comments.to_a, page
+      end
+
+      def render
+        data = LiquidContext.new(controller: controller, site: context.site).layout_context
+        discussion = {
+          "title" => h(context.subject.plum_discussion_title),
+          "open" => context.open?, "signed_in" => context.author_gid.present?,
+          "back_url" => h(context.config.subject_url_resolver.call(controller, context.subject)),
+          "login_url" => h(context.config.login_url_resolver.call(controller)),
+          "post_url" => h(controller.discussion_comments_path(handle: context.handle, subject_id: context.subject.id)),
+          "csrf_token" => h(controller.send(:form_authenticity_token)),
+          "stylesheet_url" => h(controller.view_context.asset_path("plum/comments.css")),
+          "previous_url" => page > 1 ? h(url(page - 1)) : nil,
+          "next_url" => comments.size == 50 ? h(url(page + 1)) : nil,
+          "notices" => controller.flash.map { |_key, value| h(value) }
+        }
+        data["discussion"] = discussion
+        # Only approved, authorized records reach this renderer. No account IDs,
+        # report reasons, audit records or pending bodies enter the Liquid context.
+        discussion["comments"] = comments.map { |comment| comment_data(comment) }
+        discussion["form_html"] = form(data, nil)
+        discussion["comments_html"] = discussion["comments"].map do |comment|
+          locals = data.merge("comment" => comment)
+          comment["reply_form_html"] = form(data, comment["id"]) if discussion["signed_in"] && discussion["open"] && !comment["parent_id"]
+          comment["report_form_html"] = LiquidRenderer.render_partial("comments/_report", locals) if discussion["signed_in"]
+          LiquidRenderer.render_partial("comments/_comment", locals)
+        end.join
+        LiquidRenderer.render_template("comments/show", data)
+      end
+
+      private
+
+      attr_reader :controller, :context, :comments, :page
+
+      def h(value)
+        ERB::Util.html_escape(value.to_s)
+      end
+
+      def url(number)
+        controller.discussion_path(handle: context.handle, subject_id: context.subject.id, page: number)
+      end
+
+      def form(data, parent_id)
+        return "" unless data["discussion"]["signed_in"] && data["discussion"]["open"]
+        LiquidRenderer.render_partial("comments/_form", data.merge("form" => { "parent_id" => parent_id, "id" => parent_id || "new" }))
+      end
+
+      def comment_data(comment)
+        {
+          "id" => comment.id, "body" => h(comment.body), "author_name" => h(comment.author_name),
+          "author_badge" => h(comment.author_badge), "pinned" => comment.pinned?,
+          "parent_id" => comment.parent_id, "parent_author_name" => h(comment.parent&.author_name),
+          "created_at" => comment.created_at.iso8601, "date" => h(comment.created_at.to_date.to_fs(:long)),
+          "video_seconds" => comment.video_seconds,
+          "video_time" => comment.video_seconds && "#{comment.video_seconds / 60}:#{format('%02d', comment.video_seconds % 60)}",
+          "report_url" => h(controller.report_discussion_comment_path(handle: context.handle, subject_id: context.subject.id, id: comment.id))
+        }
+      end
+    end
+  end
+end

data/app/services/plum/config_sync.rb

@@ -109,6 +109,7 @@ module Plum
         record.name = config["name"]
         record.icon = config["icon"]
         record.singleton = config["singleton"] unless config["singleton"].nil?
+        record.comments_enabled = config["comments_enabled"] unless config["comments_enabled"].nil?
         record.blueprint = merged_blueprint(record, config)
         track(result, record, file)
       end
@@ -207,6 +208,7 @@ module Plum
           "handle" => config["handle"].to_s,
           "icon" => config["icon"].presence,
           "singleton" => !!config["singleton"],
+          "comments_enabled" => !!config["comments_enabled"],
           "route_prefix" => config["route_prefix"].presence,
           "fields" => config["fields"] || []
         }
@@ -225,6 +227,7 @@ module Plum
         "handle" => record.handle,
         "icon" => record.icon,
         "singleton" => record.singleton,
+        "comments_enabled" => record.comments_enabled,
         "route_prefix" => record.route_prefix,
         "fields" => record.fields
       }

data/app/services/plum/liquid_context.rb

@@ -24,6 +24,11 @@ module Plum
       }.compact.merge(Plum.content_sources_for(controller, site: site))
     end
 
+    # Shared layout data without exposing the site's other entries or host sources.
+    def layout_context
+      { "site" => site_context, "globals" => globals_context, "nav" => nav_context, "forms" => forms_context }
+    end
+
     private
 
     attr_reader :controller, :site, :entry, :theme_name, :theme_settings
@@ -60,6 +65,9 @@ module Plum
         "url" => public_entry_path(entry),
         "data" => entry_data_context(entry, relationship_depth: relationship_depth, expand_blocks: expand_blocks)
       }
+      if Plum.configuration.comments.enabled && entry.plum_comments_enabled?
+        ctx["discussion_url"] = "#{controller.request.script_name.to_s.chomp('/')}/discussions/entries/#{entry.id}"
+      end
       if entry.association(:terms).loaded? && entry.terms.any?
         ctx["terms"] = entry.terms.group_by { |t| t.taxonomy.handle }.transform_values do |terms|
           terms.map { |t| { "name" => t.name, "slug" => t.slug, "url" => "/#{t.taxonomy.slug}/#{t.slug}" } }

data/app/services/plum/liquid_renderer.rb

@@ -30,6 +30,14 @@ module Plum
         end
       end
 
+      # Render a theme fragment through the same inheritance and filter pipeline.
+      def render_partial(template_name, context = {})
+        path = ThemeResolver.new.find_template(current_theme(context), template_name)
+        raise "Template not found: #{template_name}" unless path
+
+        Liquid::Template.parse(File.read(path)).render(context, filters: [ LiquidFilters ], registers: render_registers(context))
+      end
+
       private
 
       def current_theme(context)

data/app/services/plum/site_archive.rb

@@ -56,7 +56,7 @@ module Plum
           "exported_at" => Time.current.iso8601,
           "site" => record(site, %w[id name domain theme_name settings theme_settings custom_css]),
           "site_setting" => site.site_setting && record(site.site_setting, site_setting_fields),
-          "content_types" => records(site.content_types, %w[id name handle singleton blueprint icon]),
+          "content_types" => records(site.content_types, %w[id name handle singleton blueprint icon comments_enabled]),
           "fieldsets" => records(site.fieldsets, %w[id name handle fields]),
           "taxonomies" => records(site.taxonomies, %w[id name handle slug]),
           "terms" => records(site.terms, %w[id taxonomy_id name slug position]),
@@ -76,7 +76,7 @@ module Plum
       end
 
       def entry_record(entry)
-        record(entry, %w[id content_type_id title slug status data published_at author_name author_email author_gid locale origin_id]).merge(
+        record(entry, %w[id content_type_id title slug status data published_at author_name author_email author_gid locale origin_id comments_mode]).merge(
           "term_ids" => entry.term_ids
         )
       end
@@ -167,7 +167,7 @@ module Plum
         )
         maps[:sites][source["id"]] = @site.id
 
-        import_simple(:content_types, ContentType, %w[name handle singleton blueprint icon])
+        import_simple(:content_types, ContentType, %w[name handle singleton blueprint icon comments_enabled])
         import_simple(:fieldsets, Fieldset, %w[name handle fields])
         import_simple(:taxonomies, Taxonomy, %w[name handle slug])
         import_terms
@@ -239,7 +239,7 @@ module Plum
 
       def import_entries
         Array(data["entries"]).each do |source|
-          entry = Entry.create!(source.slice("title", "slug", "status", "data", "published_at", "author_name", "author_email", "author_gid", "locale").merge(
+          entry = Entry.create!(source.slice("title", "slug", "status", "data", "published_at", "author_name", "author_email", "author_gid", "locale", "comments_mode").merge(
             "site_id" => @site.id,
             "content_type_id" => mapped!(:content_types, source["content_type_id"])
           ))

data/app/themes/default/layouts/base.liquid

@@ -3,7 +3,7 @@
 <head>
   <meta charset="UTF-8">
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
-  <title>{{ entry.title | default: site.seo_title | default: site.name }} - {{ site.name }}</title>
+  <title>{{ discussion.title | default: entry.title | default: site.seo_title | default: site.name }} - {{ site.name }}</title>
   <meta name="description" content="{{ site.seo_description }}">
   <link rel="icon" href="/icon.svg" type="image/svg+xml">
   <link rel="stylesheet" href="{{ 'theme.css' | theme_asset_url }}">

data/app/themes/default/templates/comments/_comment.liquid

@@ -0,0 +1,8 @@
+<article id="comment-{{ comment.id }}" class="plum-comment">
+<header><strong>{{ comment.author_name }}</strong> {% if comment.author_badge != blank %}<span>{{ comment.author_badge }}</span>{% endif %} <time datetime="{{ comment.created_at }}">{{ comment.date }}</time> {% if comment.pinned %}Pinned{% endif %}</header>
+{% if comment.parent_id %}<p>In reply to {{ comment.parent_author_name }}</p>{% endif %}
+{% if comment.video_seconds %}<p>At {{ comment.video_time }}</p>{% endif %}
+<p class="plum-comment-body">{{ comment.body }}</p>
+{% if comment.reply_form_html %}<details><summary>Reply</summary>{{ comment.reply_form_html }}</details>{% endif %}
+{% if comment.report_form_html %}<details><summary>Report</summary>{{ comment.report_form_html }}</details>{% endif %}
+</article>

data/app/themes/default/templates/comments/_form.liquid

@@ -0,0 +1,7 @@
+<form method="post" action="{{ discussion.post_url }}" class="plum-comment-form">
+<input type="hidden" name="authenticity_token" value="{{ discussion.csrf_token }}">
+{% if form.parent_id %}<input type="hidden" name="comment[parent_id]" value="{{ form.parent_id }}">{% endif %}
+<label for="comment-body-{{ form.id }}">{% if form.parent_id %}Your reply{% else %}Your comment{% endif %}</label>
+<textarea id="comment-body-{{ form.id }}" name="comment[body]" maxlength="10000" rows="4" required></textarea>
+<button type="submit">{% if form.parent_id %}Send reply{% else %}Send comment{% endif %}</button>
+</form>

data/app/themes/default/templates/comments/_report.liquid

@@ -0,0 +1,6 @@
+<form method="post" action="{{ comment.report_url }}" class="plum-comment-report-form">
+<input type="hidden" name="authenticity_token" value="{{ discussion.csrf_token }}">
+<label for="report-reason-{{ comment.id }}">Reason for reporting</label>
+<textarea id="report-reason-{{ comment.id }}" name="report[reason]" maxlength="1000" required></textarea>
+<button type="submit">Send report</button>
+</form>

data/app/themes/default/templates/comments/show.liquid

@@ -0,0 +1,15 @@
+<link rel="stylesheet" href="{{ discussion.stylesheet_url }}">
+<section class="plum-discussion" aria-labelledby="discussion-title">
+{% for notice in discussion.notices %}<p role="status">{{ notice }}</p>{% endfor %}
+{% if discussion.back_url != blank %}<a href="{{ discussion.back_url }}">Back to {{ discussion.title }}</a>{% endif %}
+<h1 id="discussion-title">{{ discussion.title }}</h1>
+<h2>Questions &amp; discussion</h2>
+<p>Ask a question, share a reflection, or join the conversation. Please be kind and stay on topic. Comments may be reviewed before appearing.</p>
+{% if discussion.comments == empty %}<p>No comments to show yet.</p>{% endif %}
+{{ discussion.comments_html }}
+<nav aria-label="Discussion pages">{% if discussion.previous_url %}<a href="{{ discussion.previous_url }}">Previous</a>{% endif %}{% if discussion.next_url %}<a href="{{ discussion.next_url }}">Next</a>{% endif %}</nav>
+{% if discussion.open == false %}<p>This discussion is closed to new comments.</p>
+{% elsif discussion.signed_in %}{{ discussion.form_html }}
+{% else %}<p>Sign in to join the discussion.</p>{% if discussion.login_url != blank %}<a href="{{ discussion.login_url }}">Sign in</a>{% endif %}
+{% endif %}
+</section>

data/app/themes/default/templates/entries/_default.liquid

@@ -23,4 +23,5 @@
     <p><em>{{ entry.data.excerpt }}</em></p>
   </div>
   {% endif %}
+  {% if entry.discussion_url %}<p class="plum-discussion-link"><a href="{{ entry.discussion_url }}">Questions &amp; discussion →</a></p>{% endif %}
 </article>

data/app/themes/default/templates/entries/landing.liquid

@@ -2,4 +2,5 @@
   <h1>{{ entry.title }}</h1>
 
   {{ entry.data.sections }}
+  {% if entry.discussion_url %}<p class="plum-discussion-link"><a href="{{ entry.discussion_url }}">Questions &amp; discussion →</a></p>{% endif %}
 </article>

data/app/themes/default/templates/entries/pages.liquid

@@ -14,4 +14,5 @@
   {% if sections_html != "" %}
     {{ sections_html }}
   {% endif %}
+  {% if entry.discussion_url %}<p class="plum-discussion-link"><a href="{{ entry.discussion_url }}">Questions &amp; discussion →</a></p>{% endif %}
 </article>

data/app/themes/default/templates/entries/posts.liquid

@@ -17,4 +17,5 @@
     <p><strong>Summary:</strong> {{ entry.data.excerpt }}</p>
   </aside>
   {% endif %}
+  {% if entry.discussion_url %}<p class="plum-discussion-link"><a href="{{ entry.discussion_url }}">Questions &amp; discussion →</a></p>{% endif %}
 </article>

data/app/views/layouts/plum/cp.html.erb

@@ -8,7 +8,7 @@
   <%= favicon_link_tag "plum-mark.svg", type: "image/svg+xml" %>
   <%= stylesheet_link_tag "plum/control_panel", "data-turbo-track": "reload" %>
   <%= stylesheet_link_tag "lexxy", "data-turbo-track": "reload" %>
-  <%= javascript_importmap_tags %>
+  <%= javascript_importmap_tags(importmap: Plum.importmap || Rails.application.importmap) %>
   <script type="module">import "plum/application"</script>
   <style>
     :root {
@@ -88,6 +88,9 @@
                 class: "flex items-center px-4 py-2 mt-2 text-sm font-medium rounded-md plum-sidebar-link #{request.path.include?('/cp/nav_menus') ? 'active' : ''}" %>
             <%= link_to "Taxonomies", "#{cp_prefix}/taxonomies",
                 class: "flex items-center px-4 py-2 mt-2 text-sm font-medium rounded-md plum-sidebar-link #{request.path.include?('/taxonomies') ? 'active' : ''}" %>
+            <% if Plum.configuration.comments.enabled && Plum.configuration.comments.moderator_resolver.call(controller, current_site) %>
+              <%= link_to "Comments", cp_comments_path, class: "flex items-center px-4 py-2 mt-2 text-sm font-medium rounded-md plum-sidebar-link" %>
+            <% end %>
             <%= link_to "Forms", cp_form_definitions_path,
                 class: "flex items-center px-4 py-2 mt-2 text-sm font-medium rounded-md plum-sidebar-link #{request.path.include?('/cp/forms') ? 'active' : ''}" %>
           </div>

data/app/views/layouts/plum/discussion.html.erb

@@ -0,0 +1,5 @@
+<!DOCTYPE html>
+<html lang="en">
+<head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>Discussion</title><%= csrf_meta_tags %><%= stylesheet_link_tag "plum/comments" %></head>
+<body><main class="plum-discussion"><% flash.each do |_kind, message| %><p role="status"><%= message %></p><% end %><%= yield %></main></body>
+</html>

data/app/views/layouts/plum/session.html.erb

@@ -7,7 +7,7 @@
   <%= csp_meta_tag %>
   <%= favicon_link_tag "plum-mark.svg", type: "image/svg+xml" %>
   <%= stylesheet_link_tag "plum/control_panel", "data-turbo-track": "reload" %>
-  <%= javascript_importmap_tags %>
+  <%= javascript_importmap_tags(importmap: Plum.importmap || Rails.application.importmap) %>
   <style>
     :root { --plum-accent: <%= Plum.configuration.cp_accent_color %>; }
     .bg-purple-600 { background-color: var(--plum-accent) !important; }

data/app/views/layouts/plum/write.html.erb

@@ -8,7 +8,7 @@
   <%= favicon_link_tag "plum-mark.svg", type: "image/svg+xml" %>
   <%= stylesheet_link_tag "plum/control_panel", "data-turbo-track": "reload" %>
   <%= stylesheet_link_tag "lexxy", "data-turbo-track": "reload" %>
-  <%= javascript_importmap_tags %>
+  <%= javascript_importmap_tags(importmap: Plum.importmap || Rails.application.importmap) %>
   <script type="module">import "plum/application"</script>
   <style>
     :root { --plum-accent: <%= Plum.configuration.cp_accent_color %>; }

data/app/views/plum/cp/comments/index.html.erb

@@ -0,0 +1,16 @@
+<h1 class="text-2xl font-bold mb-4">Comments</h1>
+<nav class="flex gap-4 mb-6"><% %w[pending approved hidden reported].each do |status| %><%= link_to status.titleize, cp_comments_path(status: status), class: "underline" %><% end %></nav>
+<% if @comments.empty? %><p>No comments in this view.</p><% end %>
+<% @comments.each do |comment| %>
+<article class="border rounded p-4 mb-4">
+<h2 class="font-bold"><%= comment.discussion.commentable&.plum_discussion_title %></h2>
+<p><%= comment.author_name %> · <%= comment.status %> · <%= comment.created_at.to_fs(:short) %></p>
+<p class="whitespace-pre-wrap my-4"><%= comment.body %></p>
+<% comment.reports.where(resolved_at: nil).each do |report| %><p>Report: <%= report.reason %></p><% end %>
+<div class="flex gap-4 flex-wrap"><% %w[approve hide pin unpin resolve_reports].each do |operation| %><% next if operation == "pin" && comment.parent_id.present? %><%= button_to operation.humanize, cp_comment_path(comment), method: :patch, params: { operation: operation }, class: "underline" %><% end %>
+<%= button_to comment.discussion.closed? ? "Reopen discussion" : "Close discussion", cp_close_discussion_path(comment.discussion), method: :patch, params: { closed: !comment.discussion.closed? }, class: "underline" %></div>
+</article>
+<% end %>
+<% current_page = params[:page].to_i.clamp(1, 10000) %>
+<%= link_to "Previous", cp_comments_path(status: @status, page: current_page - 1) if current_page > 1 %>
+<%= link_to "Next", cp_comments_path(status: @status, page: current_page + 1) %>

data/app/views/plum/cp/content_types/_form.html.erb

@@ -9,6 +9,9 @@
     </div>
   <% end %>
 
+  <% if Plum.configuration.comments.enabled %>
+    <div><%= f.check_box :comments_enabled %> <%= f.label :comments_enabled, "Enable comments by default for this content type" %></div>
+  <% end %>
   <div class="bg-white shadow rounded-lg p-6 space-y-6">
     <div>
       <%= f.label :name, class: "block text-sm font-medium text-gray-700" %>

data/app/views/plum/cp/entries/_form.html.erb

@@ -10,6 +10,9 @@
       </div>
     <% end %>
 
+    <% if Plum.configuration.comments.enabled %>
+      <div><%= f.label :comments_mode, "Discussion" %> <%= f.select :comments_mode, [["Use content type setting", "inherit"], ["Open", "open"], ["Closed (existing comments remain visible)", "closed"], ["Disabled (hide discussion)", "disabled"]] %></div>
+    <% end %>
     <div class="grid grid-cols-1 lg:grid-cols-3 gap-6" style="align-items: start;">
       <!-- Main content -->
       <div class="lg:col-span-2 space-y-6">

data/app/views/plum/discussions/_comments.html.erb

@@ -0,0 +1,13 @@
+<% if comments.empty? %><p>No comments to show yet.</p><% end %>
+<% comments.each do |comment| %>
+<article id="comment-<%= comment.id %>" class="plum-comment">
+<header><strong><%= comment.author_name %></strong> <% if comment.author_badge.present? %><span><%= comment.author_badge %></span><% end %> <time datetime="<%= comment.created_at.iso8601 %>"><%= comment.created_at.to_date.to_fs(:long) %></time> <%= "Pinned" if comment.pinned? %></header>
+<% if comment.parent %><p>In reply to <%= comment.parent.author_name %></p><% end %>
+<% if comment.video_seconds %><p>At <%= comment.video_seconds / 60 %>:<%= "%02d" % (comment.video_seconds % 60) %></p><% end %>
+<p class="plum-comment-body"><%= comment.body %></p>
+<% if context.author_gid %>
+<% if context.open? && comment.parent_id.nil? %><details><summary>Reply</summary><%= render "plum/discussions/form", context: context, parent: comment %></details><% end %>
+<details><summary>Report</summary><%= form_with url: report_discussion_comment_path(handle: context.handle, subject_id: context.subject.id, id: comment.id), scope: :report do |form| %><%= form.label :reason, "Reason for reporting", for: "report-reason-#{comment.id}" %><%= form.text_area :reason, id: "report-reason-#{comment.id}", required: true, maxlength: 1000 %><%= form.submit "Send report" %><% end %></details>
+<% end %>
+</article>
+<% end %>

data/app/views/plum/discussions/_form.html.erb

@@ -0,0 +1,6 @@
+<%= form_with url: discussion_comments_path(handle: context.handle, subject_id: context.subject.id), scope: :comment do |form| %>
+<% if parent %><%= form.hidden_field :parent_id, value: parent.id %><% end %>
+<%= form.label :body, parent ? "Your reply" : "Your comment", for: "comment-body-#{parent&.id || 'new'}" %>
+<%= form.text_area :body, required: true, maxlength: 10000, rows: 4, id: "comment-body-#{parent&.id || 'new'}" %>
+<%= form.submit parent ? "Send reply" : "Send comment" %>
+<% end %>

data/app/views/plum/discussions/show.html.erb

@@ -0,0 +1,19 @@
+<% back_url = @context.config.subject_url_resolver.call(self.controller, @context.subject) %>
+<% if back_url.present? %><%= link_to "Back to #{@context.subject.plum_discussion_title}", back_url %><% end %>
+<h1><%= @context.subject.plum_discussion_title %></h1>
+<h2>Questions &amp; discussion</h2>
+<p>Ask a question, share a reflection, or join the conversation. Please be kind and stay on topic. Comments may be reviewed before appearing.</p>
+<%= render "plum/discussions/comments", context: @context, comments: @comments %>
+<nav aria-label="Discussion pages">
+<%= link_to "Previous", discussion_path(handle: @context.handle, subject_id: @context.subject.id, page: page - 1) if page > 1 %>
+<%= link_to "Next", discussion_path(handle: @context.handle, subject_id: @context.subject.id, page: page + 1) if @comments.size == 50 %>
+</nav>
+<% if !@context.open? %>
+<p>This discussion is closed to new comments.</p>
+<% elsif @context.author_gid %>
+<%= render "plum/discussions/form", context: @context, parent: nil %>
+<% else %>
+<p>Sign in to join the discussion.</p>
+<% login_url = @context.config.login_url_resolver.call(self.controller) %>
+<%= link_to "Sign in", login_url if login_url.present? %>
+<% end %>

data/config/plum_routes.rb

@@ -4,6 +4,8 @@ Plum::Engine.routes.draw do
   delete "logout", to: "sessions#destroy"
 
   namespace :cp do
+    resources :comments, only: [ :index, :update ]
+    patch "discussions/:id", to: "comments#close", as: :close_discussion
     root "dashboard#show"
     resources :content_types do
       post :apply_fieldset, on: :member
@@ -38,6 +40,10 @@ Plum::Engine.routes.draw do
     get "theme_previews/:handle", to: "theme_previews#show", as: :theme_preview
   end
 
+  get "discussions/:handle/:subject_id", to: "discussions#show", as: :discussion
+  post "discussions/:handle/:subject_id/comments", to: "discussions#create", as: :discussion_comments
+  post "discussions/:handle/:subject_id/comments/:id/report", to: "discussions#report", as: :report_discussion_comment
+
   post "forms/:handle", to: "form_submissions#create", as: :form
   namespace :api do
     namespace :v1 do

data/db/engine_migrate/20261005190000_create_plum_comments.rb

@@ -0,0 +1,48 @@
+class CreatePlumComments < ActiveRecord::Migration[8.0]
+  def change
+    add_column :plum_content_types, :comments_enabled, :boolean, default: false, null: false
+    add_column :plum_entries, :comments_mode, :string, default: "inherit", null: false
+
+    create_table :plum_discussions do |t|
+      t.references :site, null: false, foreign_key: { to_table: :plum_sites }
+      t.string :commentable_type, null: false
+      t.string :commentable_id, null: false
+      t.string :subject_handle, null: false
+      t.boolean :closed, null: false, default: false
+      t.timestamps
+    end
+    add_index :plum_discussions, [ :site_id, :commentable_type, :commentable_id ], unique: true, name: "plum_discussion_subject_unique"
+
+    create_table :plum_comments do |t|
+      t.references :discussion, null: false, foreign_key: { to_table: :plum_discussions }
+      t.references :parent, foreign_key: { to_table: :plum_comments }
+      t.string :author_gid, null: false
+      t.string :author_name, null: false
+      t.string :author_badge
+      t.text :body, null: false
+      t.string :status, null: false, default: "pending"
+      t.boolean :pinned, null: false, default: false
+      t.integer :video_seconds
+      t.timestamps
+    end
+    add_index :plum_comments, [ :discussion_id, :status, :id ]
+    add_index :plum_comments, [ :author_gid, :created_at ]
+
+    create_table :plum_comment_reports do |t|
+      t.references :comment, null: false, foreign_key: { to_table: :plum_comments }
+      t.string :reporter_gid, null: false
+      t.text :reason, null: false
+      t.datetime :resolved_at
+      t.timestamps
+    end
+    add_index :plum_comment_reports, [ :comment_id, :reporter_gid ], unique: true
+
+    create_table :plum_comment_moderations do |t|
+      t.references :comment, null: false, foreign_key: { to_table: :plum_comments }
+      t.string :moderator_gid, null: false
+      t.string :action, null: false
+      t.string :previous_status, null: false
+      t.timestamps
+    end
+  end
+end