bible270 1.1.5 → 1.1.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1a655ad0a130cd6a4106374efb885fa76856b7f93c7fc05284062648a330125e
-  data.tar.gz: d23e6b7180c152f1b452e6eac5db9523f0e8cb7683ee50492fc8bbdc00d271cb
+  metadata.gz: b7014361816b071aaacc54d569f247ff116cc2c5c0f49ea4490e46a2e62375f4
+  data.tar.gz: d61942b56c9409563d03e8b76e2f3dea0ba6a73d0119e4d0dade38bdcb177ec2
 SHA512:
-  metadata.gz: 791373f6597dde62c9a6ce8eaab3251868f4b19bbf24615fec46613ebab7e918e4f90e3eb8f318ed85502b1a769eb71c7290adb4973f17d3400eb411d2664202
-  data.tar.gz: 71b588c2a184a1939ee9c7c79dce661fcc017e2199ea732e334ebc2ba49412ec3bfcd029880e4cdffe64724c21d33a5e157c7f9dc886feda1d583f9b56e64db4
+  metadata.gz: ee0357bfb87e84ab59b359ba11a274c380834587008263b7229e3d8f3edd04c02a1211045ebabec90545c4384c0404d872913c1caa2461609ec09aa4339bce88
+  data.tar.gz: 2e413b639bdccfbc194a44a7e30051d5c304ed2205625c3b3c79749da20f463178c538b6b9db43233843d783e2bfb91fce2e43121f55b7ff798a55798564a1a7

data/CHANGELOG.md

@@ -6,13 +6,36 @@ All notable changes to bible270. Format follows [Keep a Changelog](https://keepa
 
 ### Changed
 
-- reuse one dedicated browser tab for Bible Gateway and Blue Letter Bible Scripture links instead of opening an unlimited series of tabs
+- show administrators a quiet, linked completed-day count on Community reader rows while keeping progress hidden—and its aggregate query skipped—for ordinary readers and visitors; the link stays unadorned at rest and uses the site’s gold hover and keyboard-focus treatment
+
+**[Full Changelog](https://github.com/avonderluft/bible270/compare/v1.1.5...main)**
+
+## [1.1.5] - 2026-08-25
+
+### Changed
+
+- keep Bible270 open while using one Scripture tab for Bible Gateway and Blue Letter Bible: desktop browsers reuse the existing tab, while iOS Safari replaces its background tab so each click reliably switches to the reading
+- centralize daily-reading and Reflections Scripture anchors in one passage-link helper with secure no-JavaScript fallback behavior
 
 ### Removed
 
 - remove the unused `passage_url_builder` configuration hook; Bible Gateway and Blue Letter Bible are now the intentionally fixed passage providers
 
-**[Full Changelog](https://github.com/avonderluft/bible270/compare/v1.1.3...main)**
+**[Full Changelog](https://github.com/avonderluft/bible270/compare/v1.1.4...v1.1.5)**
+
+## [1.1.4] - 2026-08-24
+
+### Added
+
+- let administrators persistently override the current run start date, see which readers are affected, and reset to the configured date without changing check-offs or reflections
+
+### Changed
+
+- link reader avatars in Admin to the same reader-management pages as their names
+- show a signed-in reader's effective plan start date beside Home progress without repeating it on My Progress
+- increase the default parallel test workers to six while retaining `PARALLEL_WORKERS` for constrained systems
+
+**[Full Changelog](https://github.com/avonderluft/bible270/compare/v1.1.3...v1.1.4)**
 
 ## [1.1.3] - 2026-08-23
 
@@ -529,6 +552,9 @@ This is the initial public release.
 
 * Email sign-in requires working Action Mailer delivery in the host application. Set `config.mailer_from`; delivery is inline by default, or set `email_sign_in_deliver_later` when a queue backend is available.
 
+[1.1.6]: https://github.com/avonderluft/bible270/releases/tag/v1.1.6
+[1.1.5]: https://github.com/avonderluft/bible270/releases/tag/v1.1.5
+[1.1.4]: https://github.com/avonderluft/bible270/releases/tag/v1.1.4
 [1.1.3]: https://github.com/avonderluft/bible270/releases/tag/v1.1.3
 [1.1.2]: https://github.com/avonderluft/bible270/releases/tag/v1.1.2
 [1.1.1]: https://github.com/avonderluft/bible270/releases/tag/v1.1.1

data/README.md

@@ -6,6 +6,8 @@ A mountable **Rails engine** that drops a 270-day (9 month) interactive Bible re
 
 Initially created for use by students and faculty of [Kingdom Movement School of Ministry](https://www.kmsm.life/), to read through all of Scripture together during the school year. Thus it is potentially useful for any Bible School, Seminary, or Discipleship school working on a 9 month schedule.
 
+For a guided tour of the implementation, see the [architecture walkthrough](docs/architecture.md).
+
 ## The plan
 
 Three readings a day, sized by **verse count** so each day takes roughly the same time.

data/app/controllers/bible270/admin_controller.rb

@@ -62,9 +62,7 @@ module Bible270
         @shared_calendar_readers = @readers.size
         @personal_calendar_readers = 0
       end
-      counts = Checkoff.group(:reader_id, :day).count
-      @days_completed = Hash.new(0)
-      counts.each { |(rid, day), n| @days_completed[rid] += 1 if n >= Plan.total_parts(day) }
+      @days_completed = Reader.completed_days_by_id
       @reachable = Reader.where.not(email: [nil, '']).count
       @last_broadcast_at = parsed_time(Setting.read(LAST_BROADCAST_AT))
       @last_broadcast_subject = Setting.read(LAST_BROADCAST_SUBJECT)

data/app/controllers/bible270/application_controller.rb

@@ -26,6 +26,8 @@ module Bible270
 
     layout :bible270_layout
 
+    rescue_from ActionController::InvalidAuthenticityToken, with: :recover_from_stale_page
+
     helper_method :current_reader, :signed_in?, :b270_config, :enrollment_closed?
 
   private
@@ -101,6 +103,17 @@ module Bible270
       current_reader.present?
     end
 
+    # A suspended mobile tab can outlive its Rails session cookie. The page still
+    # contains the old session's CSRF token, so Rails rejects its next form before
+    # current_reader has a chance to restore the session from the remember cookie.
+    # Never execute that unverified request; return to a fresh page for a safe retry.
+    def recover_from_stale_page(error)
+      Rails.logger.info("[bible270] refreshing a page after #{error.class}")
+      redirect_back fallback_location: root_path, allow_other_host: false,
+                    alert: 'This page had been open for a while, so it was refreshed. Please try again.',
+                    status: :see_other
+    end
+
     # Guard participation (checking off / commenting). Viewing is always open.
     def require_reader!
       return true if signed_in?

data/app/controllers/bible270/readers_controller.rb

@@ -6,6 +6,8 @@ module Bible270
       # Community is a directory of fellow readers, not a leaderboard. Keep the
       # order predictable without implying that progress determines standing.
       @readers = Reader.all.to_a.sort_by(&:sort_name)
+      @show_admin_progress = Bible270.config.admin?(current_reader)
+      @days_completed = Reader.completed_days_by_id if @show_admin_progress
     end
 
     # The reader's own progress. Deliberately open to visitors: the panel shows an

data/app/controllers/bible270/sessions_controller.rb

@@ -17,6 +17,16 @@ module Bible270
       @origin = safe_origin(params[:origin])
     end
 
+    # Refresh a resumed page's session and CSRF token without reloading its content.
+    # Calling current_reader first lets the long-lived remember cookie rebuild a
+    # browser session that the phone may have discarded while the tab was asleep.
+    def refresh
+      current_reader
+      response.headers['X-CSRF-Token'] = form_authenticity_token
+      response.headers['Cache-Control'] = 'no-store'
+      head :no_content
+    end
+
     def create
       auth = request.env['omniauth.auth']
       redirect_to(sign_in_path, alert: "Sign in didn't complete. Please try again.") and return unless auth

data/app/models/bible270/reader.rb

@@ -55,6 +55,12 @@ module Bible270
       value.to_s.match?(DAILY_REMINDER_TIME_FORMAT)
     end
 
+    def self.completed_days_by_id
+      Checkoff.group(:reader_id, :day).count.each_with_object(Hash.new(0)) do |((reader_id, day), done), totals|
+        totals[reader_id] += 1 if done >= Plan.total_parts(day)
+      end
+    end
+
     def self.reflections_seen_column?
       column_names.include?(REFLECTIONS_SEEN_COLUMN)
     rescue ActiveRecord::StatementInvalid

data/app/views/bible270/readers/index.html.erb

@@ -10,7 +10,12 @@
         <%= link_to b270_avatar(r, size: 72), reader_path(r), "aria-label": r.display_name %>
         <div>
           <div class="name"><%= link_to r.display_name, reader_path(r), style: "text-decoration:none" %></div>
-          <div class="sub">joined <%= Bible270.local_time(r.created_at).strftime("%b %-d %Y") %></div>
+          <div class="sub">
+            joined <%= Bible270.local_time(r.created_at).strftime("%b %-d %Y") %><% if @show_admin_progress %>
+              · <%= link_to "#{@days_completed[r.id]} of #{Bible270::Plan::DAYS} days complete",
+                    admin_reader_path(r), class: "b270-admin-progress" %>
+            <% end %>
+          </div>
         </div>
       </div>
     <% end %>

data/app/views/bible270/shared/_interaction_ui.html.erb

@@ -1,5 +1,6 @@
-<script nonce="<%= content_security_policy_nonce %>">
+<script nonce="<%= content_security_policy_nonce %>" data-refresh-path="<%= refresh_session_path %>">
   (() => {
+    const refreshSessionPath = document.currentScript.dataset.refreshPath;
     if (window.Bible270InteractionUI) {
       window.Bible270InteractionUI.reset();
       return;
@@ -30,6 +31,42 @@
       document.querySelectorAll("form[data-b270-submit='true']").forEach(resetForm);
     }
 
+    const SESSION_REFRESH_AFTER = 5 * 60 * 1000;
+    let sessionRefreshedAt = Date.now();
+    let sessionRefresh = null;
+    let hiddenAt = null;
+
+    function updateAuthenticityToken(token) {
+      const meta = document.querySelector("meta[name='csrf-token']");
+      if (meta) meta.content = token;
+      document.querySelectorAll("input[name='authenticity_token']").forEach((input) => {
+        input.value = token;
+      });
+    }
+
+    function refreshSession() {
+      if (sessionRefresh) return sessionRefresh;
+
+      sessionRefresh = fetch(refreshSessionPath, {
+        credentials: "same-origin",
+        cache: "no-store",
+        headers: { Accept: "text/plain" }
+      }).then((response) => {
+        const token = response.headers.get("X-CSRF-Token");
+        if (!response.ok || !token) throw new Error("Could not refresh the session");
+
+        updateAuthenticityToken(token);
+        sessionRefreshedAt = Date.now();
+      }).finally(() => {
+        sessionRefresh = null;
+      });
+      return sessionRefresh;
+    }
+
+    function sessionRefreshNeeded() {
+      return Date.now() - sessionRefreshedAt >= SESSION_REFRESH_AFTER;
+    }
+
     let scriptureWindow = null;
     const replacesBackgroundTabs = /iPad|iPhone|iPod/.test(navigator.userAgent) ||
       (navigator.platform === "MacIntel" && navigator.maxTouchPoints > 1);
@@ -62,6 +99,24 @@
     document.addEventListener("submit", (event) => {
       const form = event.target.closest("form[data-b270-submit='true']");
       if (!form) return;
+
+      if (sessionRefresh || sessionRefreshNeeded()) {
+        event.preventDefault();
+        if (form.dataset.b270AwaitingSession === "true") return;
+
+        form.dataset.b270AwaitingSession = "true";
+        const submitter = event.submitter;
+        refreshSession().then(() => {
+          delete form.dataset.b270AwaitingSession;
+          form.requestSubmit(submitter || undefined);
+        }).catch(() => {
+          delete form.dataset.b270AwaitingSession;
+          sessionRefreshedAt = Date.now();
+          form.requestSubmit(submitter || undefined);
+        });
+        return;
+      }
+
       if (form.dataset.b270Submitting === "true") {
         event.preventDefault();
         return;
@@ -89,7 +144,18 @@
       }
     });
 
-    window.addEventListener("pageshow", reset);
+    window.addEventListener("pageshow", (event) => {
+      reset();
+      if (event.persisted) refreshSession().catch(() => {});
+    });
+    document.addEventListener("visibilitychange", () => {
+      if (document.visibilityState === "hidden") {
+        hiddenAt = Date.now();
+      } else if (hiddenAt && Date.now() - hiddenAt >= SESSION_REFRESH_AFTER) {
+        refreshSession().catch(() => {});
+        hiddenAt = null;
+      }
+    });
     document.addEventListener("turbo:load", reset);
 
     window.Bible270InteractionUI = { reset };

data/app/views/bible270/shared/_styles.html.erb

@@ -259,6 +259,8 @@
   .b270-li+.b270-li{border-top:1px solid var(--line-soft)}
   .b270-li .name{font-weight:600}
   .b270-li .sub{font-size:12.5px;color:var(--faint)}
+  .b270-li .b270-admin-progress{text-decoration:none}
+  .b270-li .b270-admin-progress:hover,.b270-li .b270-admin-progress:focus-visible{color:var(--gold)}
   .b270-li .stat{margin-left:auto;text-align:right}
   .b270-li .stat .big{font-family:"Spectral",serif;font-size:20px;font-weight:600}
 

data/config/routes.rb

@@ -50,6 +50,7 @@ Bible270::Engine.routes.draw do
   # Built-in OmniAuth sign-in. The request phase (POST <mount>/auth/:provider)
   # is handled by the OmniAuth middleware in the host app, not by these routes.
   get    'sign_in',                 to: 'sessions#new', as: :sign_in
+  get    'session/refresh',         to: 'sessions#refresh', as: :refresh_session
 
   # Email (magic link) sign-in, for readers without a social account.
   post   'sign_in/email',           to: 'sessions#email_link',     as: :email_sign_in_link

data/lib/bible270/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Bible270
-  VERSION = '1.1.5'
+  VERSION = '1.1.7'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: bible270
 version: !ruby/object:Gem::Version
-  version: 1.1.5
+  version: 1.1.7
 platform: ruby
 authors:
 - Andrew vonderLuft