bible270 1.4.2 → 1.5.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8792007d09956f4b53cbe9842007baea209a5eb0010758ef35e7d6f1977928f0
-  data.tar.gz: 0c5d16299136af62a6e1466210e962ef6e8d48065d759d9b5b57450215471c31
+  metadata.gz: f8c170757c087fab1698cb43ef5251e28c4e7c4f08187cb33b0ac3962f41fc28
+  data.tar.gz: 5e803ddf4f8d77b56c2c7c91859b7ea0f8222341162790f39fb2cc7abbc1f517
 SHA512:
-  metadata.gz: 89cbba3ff6adfc107efacddb9b2d80903452488384983b488ecf733aa6e16d55451a0137626cda5a446591b2c28585201f49b612927a6ba80ad0b54a5889c377
-  data.tar.gz: d2d501c3f9935405bf0b850124f2329b3c5355ccfdf5d7403688329a65f1bfdc4a779fc3d65d957eba242363393e6a057519ef509b337986f6426bb2a3c6ffdc
+  metadata.gz: 3ff3dcde674bf0be28d1baec700a39d8db3a26a199c72fc467dd6864020d1608a1667e9feecb2e530706cf1a92b3a653cd7b904dd883cc4f495dc9027145c6c8
+  data.tar.gz: 4e3566d9c90076d1a9c4c46ee99e9d2415320fcfeb8be0d2acc1a03ac9168278362a8cfe1dd93b108e4db312c292f3436a4061e24b5cb211ec217445a942a254

data/CHANGELOG.md

@@ -2,22 +2,58 @@
 
 All notable changes to bible270. Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); this project uses [Semantic Versioning](https://semver.org/spec/v2.0.0.html), treating pre-1.0 minor bumps as the place breaking changes may land.
 
-## Unreleased Changes
+## [Unreleased]
 
 ### Added
 
-- let administrators disable the day-completion dove animation for individual readers
+- add an on-demand Markdown formatting drawer and separate server-rendered Preview control for reflections and replies, with safe rendering, formatted notification emails, mention and browser-draft compatibility, and literal display of existing plain-text reflections; upgrading hosts must copy and run the new `body_format` comment migration
+- add `bible270:notifications:enable_all` to opt every existing reader into emails for each new reflection and reply
+- add `bible270:readers:list` to print an aligned, progress-sorted reader report with schedule status
 
 ### Changed
 
-- simplify day completion to one continuous server-confirmed dove flight from the lower center, eliminating the stagger between a pre-submit animation and the Turbo or HTML response
-- keep the dove bright in dark mode, grow it to an 80%-of-viewport fit, and finish with a quick fade instead of veering offscreen
+- default new readers to emails for every new reflection and reply; existing reader preferences remain unchanged by the migration
 
 ### Fixed
 
-- show the dove only once for each persisted day-completion event, even when Turbo replays a response or retries a stale-session request
+- keep `json` below 3.0 while supported Rails releases still pass positional parse options, preventing session-cookie decoding from crashing every request under `json` 3.0
 
-**[Full Changelog](https://github.com/avonderluft/bible270/compare/v1.4.0...main)**
+**[Full Changelog](https://github.com/avonderluft/bible270/compare/v1.4.2...main)**
+
+## [1.4.2] - 2026-09-03
+
+### Added
+
+- let administrators disable the day-completion dove animation for individual readers without affecting progress tracking; upgrading hosts must copy and run the new `completion_dove_disabled` reader migration before changing this setting
+
+### Changed
+
+- keep the completion dove bright in dark mode, grow it to an 80%-of-viewport fit with a smoother rounded silhouette, and finish with a centered fade instead of veering offscreen
+- show every reader who finished a day after the Reflections section, using compact 56px avatars ordered from earliest to latest completion
+
+### Fixed
+
+- show the dove only once for each persisted day completion, including during concurrent final checkoffs, Turbo response replays, and stale-session retries
+
+**[Full Changelog](https://github.com/avonderluft/bible270/compare/v1.4.1...v1.4.2)**
+
+## [1.4.1] - 2026-09-02
+
+### Changed
+
+- run the day-completion dove as one continuous, server-confirmed animation from the lower center, avoiding a stagger between submission and the Turbo or HTML response
+- improve installer guidance for OmniAuth providers, deferred bundling, Active Storage, pending migrations, and OAuth callback setup
+- detect existing engine mounts more reliably and move them above catch-all routes when necessary
+
+### Fixed
+
+- reject invalid enrollment states and malformed or out-of-range admin day values instead of silently interpreting them
+- apply admin profile name and avatar changes atomically, preventing partial updates when validation fails
+- report broadcast queueing, delivery failures, and partial success accurately without recording an entirely failed broadcast as sent
+- restrict reflection return redirects to safe application URLs
+- honor the install generator's `--mailer-from` option, reject unsafe provider identifiers, and safely quote generated configuration values
+
+**[Full Changelog](https://github.com/avonderluft/bible270/compare/v1.4.0...v1.4.1)**
 
 ## [1.4.0] - 2026-09-02
 
@@ -631,6 +667,9 @@ This is the initial public release.
 
 * Email sign-in requires working Action Mailer delivery in the host application. Set `config.mailer_from`; delivery is inline by default, or set `email_sign_in_deliver_later` when a queue backend is available.
 
+[Unreleased]: https://github.com/avonderluft/bible270/compare/v1.4.2...HEAD
+[1.4.2]: https://github.com/avonderluft/bible270/releases/tag/v1.4.2
+[1.4.1]: https://github.com/avonderluft/bible270/releases/tag/v1.4.1
 [1.4.0]: https://github.com/avonderluft/bible270/releases/tag/v1.4.0
 [1.3.2]: https://github.com/avonderluft/bible270/releases/tag/v1.3.2
 [1.3.1]: https://github.com/avonderluft/bible270/releases/tag/v1.3.1

data/README.md

@@ -1,6 +1,6 @@
 # Bible 270
 
-[![Gem Version](https://img.shields.io/gem/v/bible270)](https://rubygems.org/gems/bible270) [![Coverage Status](https://coveralls.io/repos/github/avonderluft/bible270/badge.svg?branch=main&cache=20260812-1)](https://coveralls.io/github/avonderluft/bible270?branch=main) [![Downloads](https://img.shields.io/gem/dt/bible270)](https://rubygems.org/gems/bible270) [![GitHub Release Date - Published_At](https://img.shields.io/github/release-date/avonderluft/bible270?label=last%20release&color=seagreen)](https://github.com/avonderluft/bible270/releases)
+[![Gem Version](https://img.shields.io/gem/v/bible270)](https://rubygems.org/gems/bible270) [![Coverage Status](https://img.shields.io/coverallsCoverage/github/avonderluft/bible270?branch=main&cacheSeconds=300)](https://coveralls.io/github/avonderluft/bible270?branch=main) [![Downloads](https://img.shields.io/gem/dt/bible270)](https://rubygems.org/gems/bible270) [![GitHub Release Date - Published_At](https://img.shields.io/github/release-date/avonderluft/bible270?label=last%20release&color=seagreen)](https://github.com/avonderluft/bible270/releases)
 
 A mountable **Rails engine** that drops a 270-day (9 month) interactive Bible reading plan into any Rails app, built with [ComfortableMediaSurfer](https://github.com/shakacode/comfortable-media-surfer) CMS in mind. Readers tick off each day's readings, post reflections, and see how everyone else is getting on, much like the social plans on Bible.com.
 
@@ -283,12 +283,20 @@ filters, and paginates older threads. Signed-in readers see which conversations
 their previous visit. Reflection and reply drafts are retained for up to 30 days in that browser and
 cleared after a successful post. On a shared device, clearing browser storage also removes saved drafts.
 Typing `@` in the composer offers up to five unambiguous reader handles; manual mentions continue to
-work without JavaScript.
+work without JavaScript. A quiet **Formatting** disclosure opens a toolbar for bold, italic,
+quotations, bulleted and numbered lists, and links without requiring readers to know Markdown syntax.
+A separate **Preview** control checks the current draft through the same server-side sanitizer used
+after posting; formatting tools stay out of sight until requested. The source remains
+editable in the ordinary textarea, drafts preserve its format, and all rendered HTML is restricted to that small safe
+set. Existing reflections remain literal plain text until a reader intentionally formats or converts
+them. Upgrading hosts must copy and run migration `20260101000021`, which records whether each body is
+plain text or Markdown; until then, the composer safely falls back to plain text.
 
 When `config.mention_notifications` is enabled, each reader can request email for every new reflection
 and reply, only replies to their reflections and mentions of them, or none. Administrators can change
 the same preference from the reader's Admin page. Migration
-`20260101000018` adds the broad opt-in without changing any existing reader's choice. Migration
+`20260101000018` adds the broad opt-in without changing any existing reader's choice, while migration
+`20260101000022` makes that broad option the default for readers created afterward. Migration
 `20260101000017` stores each reader's last visit to the Reflections page. After upgrading, install and
 run the current migrations:
 
@@ -297,6 +305,27 @@ bin/rails bible270:install:migrations
 bin/rails db:migrate
 ```
 
+To change every existing reader to **Every new reflection and reply**, run:
+
+```bash
+bin/rails bible270:notifications:enable_all
+```
+
+With Docker Compose:
+
+```bash
+docker compose exec -e RAILS_ENV=production rails bin/rails bible270:notifications:enable_all
+```
+
+To print an aligned progress report ordered by completed days, run:
+
+```bash
+docker compose exec -e RAILS_ENV=production rails bin/rails bible270:readers:list
+```
+
+The report compares completed days with the calendar day implied by each reader's effective start date
+and shows `on track`, days ahead or behind, or `undated` when no calendar applies.
+
 Break points can also live in your app rather than the gem, and be changed without a restart:
 
 ```ruby
@@ -483,7 +512,7 @@ The CMS serves your content; this is a separate mounted app. Either **just link
 |-------|-------|
 | `bible270_readers` | identity, avatar, provider/uid or polymorphic `owner`, start date, translation, passage-reader, and reminder preferences |
 | `bible270_checkoffs` | one row per reader per day per track (`ot`/`nt`/`pp`), unique-indexed |
-| `bible270_comments` | a reflection on a day, optionally scoped to a track, public to all |
+| `bible270_comments` | a plain-text or safely rendered Markdown reflection on a day, optionally scoped to a track, public to all |
 | `bible270_sign_in_tokens` | magic-link tokens: email, **digest only**, expiry, consumed-at |
 
 A day is "complete" once all three tracks are ticked. Progress and comments are **public** by
@@ -496,6 +525,7 @@ GET    /                         days#index      overview + community + calendar
 GET    /day/:day                 days#show       readings, who's finished, reflections
 POST   /day/:day/toggle/:track   checkoffs#toggle
 POST   /day/:day/comments        comments#create
+POST   /comments/preview         comments#preview
 DELETE /comments/:id             comments#destroy
 GET    /community                readers#index   reader directory
 GET    /mention-suggestions      readers#mention_suggestions (signed-in JSON)

data/app/controllers/bible270/comments_controller.rb

@@ -11,6 +11,14 @@ module Bible270
       current_reader&.mark_reflections_seen!(visited_at)
     end
 
+    def preview
+      return unless require_reader!
+
+      attributes = { body: params.dig(:comment, :body).to_s }
+      attributes[:body_format] = CommentFormatter::MARKDOWN if Comment.body_format_column?
+      render partial: 'bible270/comments/body', locals: { comment: Comment.new(attributes) }
+    end
+
     def create
       return unless require_reader!
 
@@ -134,7 +142,9 @@ module Bible270
     end
 
     def comment_params
-      params.require(:comment).permit(:body, :track, :parent_id)
+      permitted = %i[body track parent_id]
+      permitted << :body_format if Comment.body_format_column?
+      params.require(:comment).permit(*permitted)
     end
 
     # Scoped to the reader, so someone else's reflection is simply not found —

data/app/controllers/bible270/days_controller.rb

@@ -18,7 +18,7 @@ module Bible270
       @readings   = Plan.readings_for(@day)
       @comments   = Comment.threads_for_day(@day)
       @editing_comment_id = editing_comment_id
-      @new_comment = Comment.new(day: @day, parent_id: reply_parent&.id)
+      @new_comment = Comment.new_for_composer(day: @day, parent_id: reply_parent&.id)
       @reader_tracks = current_reader ? current_reader.read_tracks_for(@day) : []
       @day_just_completed = flash[:b270_day_just_completed].to_i == @day
       @completion_event_id = flash[:b270_completion_event_id] if @day_just_completed

data/app/helpers/bible270/plan_helper.rb

@@ -53,40 +53,46 @@ module Bible270
       end
     end
 
-    # The mark beside the title in the header. Larger than the favicon and inlined
-    # as SVG, so it stays crisp at any size and needs no asset pipeline.
-    # Renders "@handle" as a link to that reader. An unresolved or ambiguous handle
-    # is left as plain text, which is how a writer discovers it found nobody.
-    #
-    # Built by walking the matches and escaping everything between them, rather
-    # than escaping afterwards: the body is reader-supplied, so the only safe
-    # construction is one where every non-link fragment is escaped by hand.
-    def b270_with_mentions(body)
-      text = body.to_s
-      readers = Bible270::Reader.mentioned_in(text)
+    # Formats every reflection surface through the same sanitizer. Web views link
+    # resolved mentions; email can opt out because it has no mounted request path.
+    def b270_comment_body(comment, link_mentions: true)
+      format = comment.rendered_body_format
+      html = if link_mentions
+               readers = Bible270::Reader.mentioned_in(comment.body)
+               Bible270::CommentFormatter.html(comment.body, format: format) do |handle|
+                 reader = readers.find { |candidate| candidate.answers_to?(handle) }
+                 reader_path(reader) if reader
+               end
+             else
+               Bible270::CommentFormatter.html(comment.body, format: format)
+             end
+      html.html_safe
+    end
 
-      pieces = []
-      cursor = 0
+    def b270_comment_text(comment)
+      Bible270::CommentFormatter.text(comment.body, format: comment.rendered_body_format)
+    end
 
-      text.to_enum(:scan, Bible270::Mentions::PATTERN).each do
-        match = Regexp.last_match
-        pieces << ERB::Util.html_escape(text[cursor...match.begin(0)])
+    def b270_editor_rows(body, columns: 48, minimum: 4)
+      rows = body.to_s.split("\n", -1).sum do |line|
+        [1, (line.length.to_f / columns).ceil].max
+      end
+      [minimum, rows].max
+    end
 
-        handle = Bible270::Mentions.normalize(match[1])
+    # Backward-compatible plain-text entry point for host views that called the old
+    # mention helper directly.
+    def b270_with_mentions(body)
+      readers = Bible270::Reader.mentioned_in(body)
+      html = Bible270::CommentFormatter.html(body, format: Bible270::CommentFormatter::PLAIN) do |handle|
         reader = readers.find { |candidate| candidate.answers_to?(handle) }
-        pieces << if reader
-                    link_to(match[0], reader_path(reader), class: 'b270-mention')
-                  else
-                    ERB::Util.html_escape(match[0])
-                  end
-
-        cursor = match.end(0)
+        reader_path(reader) if reader
       end
-
-      pieces << ERB::Util.html_escape(text[cursor..].to_s)
-      safe_join(pieces)
+      html.html_safe
     end
 
+    # The mark beside the title in the header. Larger than the favicon and inlined
+    # as SVG, so it stays crisp at any size and needs no asset pipeline.
     def b270_mark(size: 38)
       configured = Bible270.config.header_mark
       return nil if configured == false

data/app/mailers/bible270/application_mailer.rb

@@ -3,6 +3,7 @@
 module Bible270
   class ApplicationMailer < ActionMailer::Base
     default from: -> { Bible270.config.mailer_from }
+    helper Bible270::PlanHelper
     # `layout nil` means "normal lookup", which finds the host app's mailer layout and
     # nests our complete HTML document inside theirs. Only `false` disables it.
     layout false

data/app/models/bible270/comment.rb

@@ -11,6 +11,8 @@ module Bible270
     # the paper background; an outline glyph like U+2661 is drawn by the font
     # rather than the emoji set and needs hand-tuning to match.
     HEART = '❤️'
+    BODY_FORMAT_COLUMN = 'body_format'
+    BODY_FORMATS = CommentFormatter::FORMATS
     ThreadPage = Struct.new(:threads, :activity_by_id, :page, :pages, :total, keyword_init: true)
 
     self.table_name = 'bible270_comments'
@@ -26,6 +28,7 @@ module Bible270
 
     validates :day, inclusion: { in: 1..Plan::DAYS }
     validates :body, presence: true, length: { maximum: 4000 }
+    validates :body_format, inclusion: { in: BODY_FORMATS }, if: :body_format_column?
     # A reflection can be about one track or about the whole day. The form's
     # "The whole day" option submits an empty string, so normalise it to NULL
     # before validating — allow_nil alone rejects "" with
@@ -54,6 +57,23 @@ module Bible270
     }
     scope :recent, -> { approved.order(created_at: :desc) }
 
+    def self.body_format_column?
+      column_names.include?(BODY_FORMAT_COLUMN)
+    rescue ActiveRecord::StatementInvalid
+      false
+    end
+
+    def self.new_for_composer(attributes = {})
+      attributes = attributes.merge(BODY_FORMAT_COLUMN => CommentFormatter::MARKDOWN) if body_format_column?
+      new(attributes)
+    end
+
+    def body_format_column? = self.class.body_format_column?
+
+    def rendered_body_format
+      body_format_column? ? body_format.presence || CommentFormatter::PLAIN : CommentFormatter::PLAIN
+    end
+
     # One page of top-level reflections ordered by the newest activity in each
     # conversation. Loading only IDs and timestamps keeps older archives cheap to
     # sort, while the displayed page still eager-loads its readers, replies and likes.

data/app/views/bible270/admin/comments.html.erb

@@ -22,7 +22,7 @@
           <% if comment.reply? %>· reply to <strong><%= comment.parent&.reader&.display_name || 'a deleted reflection' %></strong><% end %>
           <% if comment.hidden? %><span class="b270-badge">Hidden</span><% end %>
         </div>
-        <p class="b270-cbody"><%= comment.body %></p>
+        <div class="b270-cbody"><%= b270_comment_body(comment) %></div>
         <div style="display:flex;gap:10px;align-items:center;margin-top:6px">
           <% if comment.hidden? %>
             <%= button_to 'Restore', admin_unhide_comment_path(comment), method: :patch,

data/app/views/bible270/comments/_body.html.erb

@@ -0,0 +1,6 @@
+<%# locals: (comment:) %>
+<% if comment.body.to_s.strip.empty? %>
+  <p class="b270-hint">Nothing to preview yet.</p>
+<% else %>
+  <%= b270_comment_body(comment) %>
+<% end %>

data/app/views/bible270/comments/_comment.html.erb

@@ -32,7 +32,7 @@
     <% if editing %>
       <%= render partial: "bible270/comments/edit_fields", locals: { comment: comment } %>
     <% else %>
-      <p class="b270-cbody"><%= b270_with_mentions(comment.body) %></p>
+      <div class="b270-cbody"><%= b270_comment_body(comment) %></div>
     <% end %>
 
     <%# Only a top-level reflection can be replied to: one level deep, so a reply

data/app/views/bible270/comments/_edit_fields.html.erb

@@ -13,7 +13,8 @@
     <p class="b270-editerror"><%= comment.errors.full_messages.to_sentence %></p>
   <% end %>
 
-  <%= f.text_area :body %>
+  <%= render "bible270/comments/editor", form: f, comment: comment,
+        label_text: (comment.reply? ? "Reply" : "Reflection") %>
   <div class="row">
     <% unless comment.reply? %>
       <%= f.select :track,

data/app/views/bible270/comments/_editor.html.erb

@@ -0,0 +1,57 @@
+<%# locals: (form:, comment:, label_text:, placeholder: nil) %>
+<% editor_key = comment.persisted? ? "edit-#{comment.id}" : "new" %>
+<% textarea_id = "b270-comment-body-#{editor_key}" %>
+<% options_id = "b270-mention-options-#{editor_key}" %>
+<% write_id = "b270-comment-write-#{editor_key}" %>
+<% preview_id = "b270-comment-preview-#{editor_key}" %>
+<% drawer_id = "b270-comment-formatting-#{editor_key}" %>
+<% markdown_available = Bible270::Comment.body_format_column? %>
+
+<div class="b270-mention-composer" data-b270-mention-composer
+     data-suggestions-url="<%= mention_suggestions_path %>">
+  <div class="b270-markdown-editor" data-b270-markdown-editor data-b270-editor-key="<%= editor_key %>"
+       data-b270-preview-url="<%= comment_preview_path if markdown_available %>"
+       data-b270-formatting-open="false" data-b270-editor-mode="write">
+    <% if markdown_available %>
+      <div class="b270-editor-utilities" data-b270-editor-utilities hidden>
+        <button type="button" class="b270-editor-utility" aria-expanded="false"
+                aria-controls="<%= drawer_id %>" data-b270-formatting-toggle>
+          Formatting <span class="b270-format-chevron" aria-hidden="true">▾</span>
+        </button>
+        <button type="button" class="b270-editor-utility" aria-pressed="false"
+                aria-controls="<%= write_id %> <%= preview_id %>" data-b270-preview-toggle>Preview</button>
+      </div>
+      <div id="<%= drawer_id %>" class="b270-formatting-drawer" aria-hidden="true"
+           data-b270-formatting-drawer inert>
+        <div class="b270-formatting-drawer-inner">
+          <div class="b270-markdown-toolbar" role="toolbar" aria-label="Reflection formatting"
+               data-b270-markdown-toolbar>
+            <button type="button" data-b270-markdown-action="bold" aria-label="Bold selected text" title="Bold (Ctrl+B)"><span class="b270-format-glyph b270-format-bold" aria-hidden="true">B</span></button>
+            <button type="button" data-b270-markdown-action="italic" aria-label="Italicize selected text" title="Italic (Ctrl+I)"><span class="b270-format-glyph b270-format-italic" aria-hidden="true">I</span></button>
+            <button type="button" data-b270-markdown-action="quote" aria-label="Format as a quotation" title="Quotation">“ ”</button>
+            <button type="button" data-b270-markdown-action="bullet-list" aria-label="Format as a bulleted list" title="Bulleted list">• List</button>
+            <button type="button" data-b270-markdown-action="number-list" aria-label="Format as a numbered list" title="Numbered list">1. List</button>
+            <button type="button" data-b270-markdown-action="link" aria-label="Add a link" title="Link">Link</button>
+          </div>
+        </div>
+      </div>
+      <%= form.hidden_field :body_format, data: { b270_body_format: true } %>
+    <% end %>
+
+    <div id="<%= write_id %>" data-b270-write-panel>
+      <%= form.label :body, label_text, for: textarea_id, class: "b270-sr-only" %>
+      <%= form.text_area :body, id: textarea_id, placeholder: placeholder,
+            rows: (b270_editor_rows(comment.body) if comment.persisted?),
+            role: "combobox", autocomplete: "off", data: { b270_autosize: comment.persisted? },
+            aria: { autocomplete: "list", expanded: "false", haspopup: "listbox", controls: options_id } %>
+    </div>
+    <% if markdown_available %>
+      <div id="<%= preview_id %>" class="b270-markdown-preview b270-cbody"
+           aria-label="Reflection preview" aria-live="polite" data-b270-preview-panel hidden></div>
+    <% end %>
+  </div>
+
+  <div class="b270-mention-options" id="<%= options_id %>" role="listbox"
+       data-b270-mention-options hidden></div>
+  <p class="b270-sr-only" data-b270-mention-status aria-live="polite"></p>
+</div>

data/app/views/bible270/comments/_form.html.erb

@@ -18,18 +18,9 @@
     </p>
   <% end %>
   <%= f.hidden_field :parent_id %>
-  <div class="b270-mention-composer" data-b270-mention-composer
-       data-suggestions-url="<%= mention_suggestions_path %>">
-    <%= f.label :body, (posting_reply ? "Reply" : "Reflection"), class: "b270-sr-only" %>
-    <%= f.text_area :body,
-          placeholder: posting_reply ? "Write your reply…" : "Share a reflection on today's reading…",
-          role: "combobox", autocomplete: "off",
-          aria: { autocomplete: "list", expanded: "false", haspopup: "listbox",
-                  controls: "b270-mention-options" } %>
-    <div class="b270-mention-options" id="b270-mention-options" role="listbox"
-         data-b270-mention-options hidden></div>
-    <p class="b270-sr-only" data-b270-mention-status aria-live="polite"></p>
-  </div>
+  <%= render "bible270/comments/editor", form: f, comment: comment,
+        label_text: (posting_reply ? "Reply" : "Reflection"),
+        placeholder: (posting_reply ? "Write your reply…" : "Share a reflection on today's reading…") %>
   <p class="b270-draft-status" data-b270-draft-status aria-live="polite"></p>
   <div class="row">
     <%= f.select :track,

data/app/views/bible270/comments/create.turbo_stream.erb

@@ -10,5 +10,6 @@
 <% end %>
 
 <%= turbo_stream.replace "new_comment_form" do %>
-  <%= render "bible270/comments/form", day: @day, comment: Bible270::Comment.new(day: @day), posted: true %>
+  <%= render "bible270/comments/form", day: @day,
+        comment: Bible270::Comment.new_for_composer(day: @day), posted: true %>
 <% end %>

data/app/views/bible270/days/show.html.erb

@@ -27,6 +27,7 @@
       </div>
       <%= render "bible270/shared/comment_drafts" %>
       <%= render "bible270/shared/mention_typeahead" %>
+      <%= render "bible270/shared/markdown_toolbar" %>
     <% end %>
 
     <%= render "bible270/days/completers", day: @day, completers: @completers %>

data/app/views/bible270/notice_mailer/comment_notice.html.erb

@@ -10,7 +10,7 @@
       </p>
 
       <blockquote style="margin:0;padding:14px 16px;background:#ece6da;border-left:3px solid #a5812c;border-radius:8px;font-size:15px;line-height:1.55">
-        <%= simple_format(@comment.body) %>
+        <%= b270_comment_body(@comment, link_mentions: false) %>
       </blockquote>
 
       <% if @day_url %>

data/app/views/bible270/notice_mailer/comment_notice.text.erb

@@ -1,6 +1,6 @@
 <%= @introduction %>
 
-<%= @comment.body %>
+<%= b270_comment_text(@comment) %>
 
 <% if @day_url %>
 Read it and reply: <%= @day_url %>

data/app/views/bible270/shared/_comment_drafts.html.erb

@@ -56,6 +56,7 @@
       const key = form.dataset.b270DraftKey;
       const body = form.querySelector("textarea[name='comment[body]']");
       const track = form.querySelector("select[name='comment[track]']");
+      const format = form.querySelector("[data-b270-body-format]");
       if (!key || !body) return;
 
       if (!body.value.trim()) {
@@ -65,8 +66,10 @@
       }
 
       const trackValue = track ? track.value : "";
+      const bodyFormat = format ? format.value : null;
       const current = readDraft(key);
-      if (current && current.body === body.value && current.track === trackValue) {
+      if (current && current.body === body.value && current.track === trackValue &&
+          current.bodyFormat === bodyFormat) {
         setStatus(form, "Draft saved in this browser.");
         return;
       }
@@ -74,6 +77,7 @@
       const draft = {
         body: body.value,
         track: trackValue,
+        bodyFormat,
         savedAt: Date.now(),
         revision: `${Date.now().toString(36)}:${Math.random().toString(36).slice(2)}`
       };
@@ -115,10 +119,14 @@
 
       const body = form.querySelector("textarea[name='comment[body]']");
       const track = form.querySelector("select[name='comment[track]']");
+      const format = form.querySelector("[data-b270-body-format]");
       if (body) body.value = draft.body;
       if (track && Array.from(track.options).some((option) => option.value === draft.track)) {
         track.value = draft.track;
       }
+      if (format) {
+        format.value = ["plain", "markdown"].includes(draft.bodyFormat) ? draft.bodyFormat : "plain";
+      }
       setStatus(form, "Draft restored from this browser.");
     }
 

data/app/views/bible270/shared/_markdown_toolbar.html.erb

@@ -0,0 +1,239 @@
+<script nonce="<%= content_security_policy_nonce %>">
+  (() => {
+    if (window.Bible270MarkdownToolbar) {
+      window.Bible270MarkdownToolbar.scan();
+      return;
+    }
+
+    const openEditors = new Set();
+
+    function editorKey(editor) {
+      return editor.dataset.b270EditorKey;
+    }
+
+    function select(textarea, start, finish) {
+      textarea.focus();
+      textarea.setSelectionRange(start, finish);
+    }
+
+    function resizeTextarea(textarea) {
+      if (!textarea || textarea.dataset.b270Autosize !== "true") return;
+
+      textarea.style.height = "auto";
+      const borders = textarea.offsetHeight - textarea.clientHeight;
+      textarea.style.height = `${textarea.scrollHeight + borders}px`;
+    }
+
+    function initializeAutosize(textarea) {
+      if (!textarea || textarea.dataset.b270Autosize !== "true" ||
+          textarea.dataset.b270AutosizeReady === "true") return;
+
+      textarea.dataset.b270AutosizeReady = "true";
+      textarea.addEventListener("input", () => resizeTextarea(textarea));
+      window.requestAnimationFrame(() => resizeTextarea(textarea));
+    }
+
+    function resizeEditors() {
+      document.querySelectorAll("textarea[data-b270-autosize='true']").forEach(resizeTextarea);
+    }
+
+    function update(editor, textarea, replacement, start, finish, selectedStart, selectedEnd) {
+      textarea.value = `${textarea.value.slice(0, start)}${replacement}${textarea.value.slice(finish)}`;
+      const format = editor.querySelector("[data-b270-body-format]");
+      if (format) format.value = "markdown";
+      select(textarea, start + selectedStart, start + selectedEnd);
+      textarea.dispatchEvent(new Event("input", { bubbles: true }));
+    }
+
+    function wrap(editor, textarea, before, after, placeholder) {
+      const start = textarea.selectionStart;
+      const finish = textarea.selectionEnd;
+      const selected = textarea.value.slice(start, finish) || placeholder;
+      const replacement = `${before}${selected}${after}`;
+      update(editor, textarea, replacement, start, finish, before.length, before.length + selected.length);
+    }
+
+    function prefixLines(editor, textarea, action) {
+      const selectionStart = textarea.selectionStart;
+      const selectionEnd = textarea.selectionEnd;
+      const start = textarea.value.lastIndexOf("\n", Math.max(selectionStart - 1, 0)) + 1;
+      const nextNewline = textarea.value.indexOf("\n", selectionEnd);
+      const finish = nextNewline === -1 ? textarea.value.length : nextNewline;
+      const source = textarea.value.slice(start, finish) || (action === "quote" ? "quoted text" : "list item");
+      const lines = source.split("\n");
+      const replacement = lines.map((line, index) => {
+        if (action === "quote") return `> ${line}`;
+        if (action === "number-list") return `${index + 1}. ${line}`;
+        return `- ${line}`;
+      }).join("\n");
+      update(editor, textarea, replacement, start, finish, 0, replacement.length);
+    }
+
+    function addLink(editor, textarea) {
+      const href = window.prompt("Link address (https://…)");
+      if (!href) return;
+
+      const start = textarea.selectionStart;
+      const finish = textarea.selectionEnd;
+      const selected = textarea.value.slice(start, finish) || "link text";
+      const replacement = `[${selected}](${href.trim()})`;
+      update(editor, textarea, replacement, start, finish, 1, selected.length + 1);
+    }
+
+    function requestPreview(editor, state) {
+      const textarea = editor.querySelector("textarea[name='comment[body]']");
+      const preview = editor.querySelector("[data-b270-preview-panel]");
+      const url = editor.dataset.b270PreviewUrl;
+      if (!textarea || !preview || !url) return;
+
+      if (!textarea.value.trim()) {
+        preview.innerHTML = '<p class="b270-hint">Nothing to preview yet.</p>';
+        return;
+      }
+
+      if (state.abort) state.abort.abort();
+      state.abort = new AbortController();
+      preview.textContent = "Loading preview…";
+      const body = new URLSearchParams({ "comment[body]": textarea.value });
+      const token = document.querySelector("meta[name='csrf-token']")?.content;
+      const headers = {
+        Accept: "text/html",
+        "Content-Type": "application/x-www-form-urlencoded;charset=UTF-8"
+      };
+      if (token) headers["X-CSRF-Token"] = token;
+
+      fetch(url, {
+        method: "POST",
+        credentials: "same-origin",
+        cache: "no-store",
+        redirect: "error",
+        headers,
+        body: body.toString(),
+        signal: state.abort.signal
+      }).then((response) => {
+        if (!response.ok) throw new Error("Preview unavailable");
+        return response.text();
+      }).then((html) => {
+        preview.innerHTML = html;
+      }).catch((error) => {
+        if (error.name !== "AbortError") preview.textContent = "Preview unavailable. Return to Write and try again.";
+      });
+    }
+
+    function setFormattingOpen(editor, open, remember = true) {
+      const drawer = editor.querySelector("[data-b270-formatting-drawer]");
+      const toggle = editor.querySelector("[data-b270-formatting-toggle]");
+      if (!drawer || !toggle) return;
+
+      editor.dataset.b270FormattingOpen = open ? "true" : "false";
+      toggle.setAttribute("aria-expanded", open ? "true" : "false");
+      drawer.setAttribute("aria-hidden", open ? "false" : "true");
+      drawer.inert = !open;
+      if (!remember) return;
+
+      if (open) openEditors.add(editorKey(editor));
+      else openEditors.delete(editorKey(editor));
+    }
+
+    function showMode(editor, state, mode) {
+      const previewing = mode === "preview";
+      const writePanel = editor.querySelector("[data-b270-write-panel]");
+      const previewPanel = editor.querySelector("[data-b270-preview-panel]");
+      const previewToggle = editor.querySelector("[data-b270-preview-toggle]");
+      const formattingToggle = editor.querySelector("[data-b270-formatting-toggle]");
+      if (!writePanel || !previewPanel || !previewToggle || !formattingToggle) return;
+
+      editor.dataset.b270EditorMode = mode;
+      writePanel.hidden = previewing;
+      previewPanel.hidden = !previewing;
+      previewToggle.textContent = previewing ? "Write" : "Preview";
+      previewToggle.setAttribute("aria-pressed", previewing ? "true" : "false");
+      previewToggle.setAttribute("aria-label", previewing ? "Return to writing" : "Preview reflection");
+      formattingToggle.disabled = previewing;
+      if (previewing) {
+        setFormattingOpen(editor, false, false);
+        requestPreview(editor, state);
+      } else {
+        setFormattingOpen(editor, openEditors.has(editorKey(editor)), false);
+        const textarea = editor.querySelector("textarea[name='comment[body]']");
+        resizeTextarea(textarea);
+        textarea?.focus();
+      }
+    }
+
+    function apply(editor, action) {
+      const textarea = editor.querySelector("textarea[name='comment[body]']");
+      if (!textarea) return;
+
+      if (action === "bold") {
+        wrap(editor, textarea, "**", "**", "bold text");
+      } else if (action === "italic") {
+        wrap(editor, textarea, "*", "*", "italic text");
+      } else if (action === "link") {
+        addLink(editor, textarea);
+      } else {
+        prefixLines(editor, textarea, action);
+      }
+    }
+
+    function initialize(editor) {
+      const textarea = editor.querySelector("textarea[name='comment[body]']");
+      if (!textarea) return;
+      initializeAutosize(textarea);
+      if (editor.dataset.b270MarkdownReady === "true") return;
+
+      const utilities = editor.querySelector("[data-b270-editor-utilities]");
+      const toolbar = editor.querySelector("[data-b270-markdown-toolbar]");
+      const drawer = editor.querySelector("[data-b270-formatting-drawer]");
+      const formattingToggle = editor.querySelector("[data-b270-formatting-toggle]");
+      const previewToggle = editor.querySelector("[data-b270-preview-toggle]");
+      if (!utilities || !toolbar || !drawer || !formattingToggle || !previewToggle) return;
+
+      editor.dataset.b270MarkdownReady = "true";
+      if (editor.closest("form")?.dataset.b270DraftPosted === "true") openEditors.delete(editorKey(editor));
+      const state = { abort: null };
+      utilities.hidden = false;
+      setFormattingOpen(editor, openEditors.has(editorKey(editor)), false);
+      formattingToggle.addEventListener("click", () => {
+        setFormattingOpen(editor, editor.dataset.b270FormattingOpen !== "true");
+      });
+      previewToggle.addEventListener("click", () => {
+        const mode = editor.dataset.b270EditorMode === "preview" ? "write" : "preview";
+        showMode(editor, state, mode);
+      });
+      toolbar.querySelectorAll("[data-b270-markdown-action]").forEach((button) => {
+        button.addEventListener("click", () => apply(editor, button.dataset.b270MarkdownAction));
+      });
+      toolbar.addEventListener("keydown", (event) => {
+        if (event.key !== "Escape") return;
+
+        event.preventDefault();
+        setFormattingOpen(editor, false);
+        formattingToggle.focus();
+      });
+      textarea.addEventListener("keydown", (event) => {
+        if (!(event.ctrlKey || event.metaKey) || event.altKey) return;
+        const action = event.key.toLocaleLowerCase() === "b" ? "bold" :
+          event.key.toLocaleLowerCase() === "i" ? "italic" : null;
+        if (!action) return;
+
+        event.preventDefault();
+        apply(editor, action);
+      });
+    }
+
+    function scan() {
+      document.querySelectorAll("[data-b270-markdown-editor]").forEach(initialize);
+    }
+
+    scan();
+    new MutationObserver(scan).observe(document.documentElement, { childList: true, subtree: true });
+    window.addEventListener("pageshow", () => {
+      scan();
+      resizeEditors();
+    });
+    window.addEventListener("resize", resizeEditors);
+    document.addEventListener("turbo:load", scan);
+    window.Bible270MarkdownToolbar = { scan };
+  })();
+</script>

data/app/views/bible270/shared/_reflections.html.erb

@@ -23,7 +23,7 @@
           <% if moderate && comment.hidden? %><span class="b270-badge">Hidden</span><% end %>
         </div>
 
-        <p class="b270-cbody"><%= comment.body %></p>
+        <div class="b270-cbody"><%= b270_comment_body(comment) %></div>
 
         <% if moderate %>
           <div style="display:flex;gap:10px;margin-top:6px">

data/app/views/bible270/shared/_styles.html.erb

@@ -256,7 +256,15 @@
   .b270-likes:active .b270-liketooltip{display:block}
   .b270-liker{display:block;white-space:nowrap}
   .b270-creply{margin-top:6px}
-  .b270-cbody{margin:3px 0 0;white-space:pre-wrap}
+  .b270-cbody{margin:3px 0 0;line-height:1.2}
+  .b270-cbody p{margin:0;white-space:pre-wrap}
+  .b270-cbody p+p,.b270-cbody p+ul,.b270-cbody p+ol,.b270-cbody p+blockquote,
+  .b270-cbody ul+p,.b270-cbody ol+p,.b270-cbody blockquote+p{margin-top:8px}
+  .b270-cbody ul,.b270-cbody ol{margin:6px 0 0;padding-left:24px}
+  .b270-cbody li{margin:2px 0;white-space:pre-wrap}
+  .b270-cbody blockquote{margin:7px 0 0;padding:2px 0 2px 12px;border-left:3px solid var(--line);color:var(--muted)}
+  .b270-cbody a{color:var(--teal);text-decoration:underline;text-decoration-color:var(--line)}
+  .b270-cbody a:hover{text-decoration-color:currentColor}
   .b270-editform{margin-top:6px}
   .b270-editform textarea{min-height:64px}
   .b270-editerror{margin:0 0 8px;font-size:13px;color:var(--oxblood)}
@@ -268,6 +276,27 @@
   .b270-cdel{font-size:12px;color:var(--oxblood);background:none;border:none;cursor:pointer;padding:0;margin-left:8px}
   .b270-input{width:100%;padding:9px 11px;border:1px solid var(--line);border-radius:9px;background:#fff;font:inherit;font-size:14px;margin-bottom:8px}
   .b270-form textarea{width:100%;font:inherit;font-size:15px;border:1px solid var(--line);border-radius:10px;padding:11px 13px;background:#fff;resize:vertical;min-height:76px}
+  .b270-form textarea[data-b270-autosize=false]{min-height:114px}
+  .b270-editor-utilities[hidden]{display:none}
+  .b270-editor-utilities{display:flex;align-items:center;justify-content:space-between;gap:12px;margin:0 2px 5px}
+  .b270 .b270-editor-utility{padding:2px 0;border:0;background:transparent;color:var(--muted);font:inherit;font-size:12px;cursor:pointer}
+  .b270 .b270-editor-utility:hover,.b270 .b270-editor-utility:focus-visible{color:var(--gold)}
+  .b270 .b270-editor-utility:disabled{color:var(--faint);opacity:.55;cursor:default}
+  .b270-format-chevron{display:inline-block;margin-left:2px;transition:transform .14s ease}
+  .b270-markdown-editor[data-b270-formatting-open=true] .b270-format-chevron{transform:rotate(180deg)}
+  .b270-formatting-drawer{display:grid;grid-template-rows:0fr;opacity:0;transition:grid-template-rows .14s ease,opacity .1s ease}
+  .b270-markdown-editor[data-b270-formatting-open=true] .b270-formatting-drawer{grid-template-rows:1fr;opacity:1}
+  .b270-formatting-drawer-inner{min-height:0;overflow:hidden}
+  .b270-markdown-toolbar{display:flex;align-items:center;gap:2px;flex-wrap:wrap;padding:5px;border:1px solid var(--line);border-bottom:0;border-radius:10px 10px 0 0;background:var(--paper)}
+  .b270 .b270-markdown-toolbar button{min-height:32px;padding:5px 9px;border:0;border-radius:6px;background:transparent;color:var(--muted);font:inherit;font-size:12.5px;cursor:pointer}
+  .b270 .b270-markdown-toolbar button:hover,.b270 .b270-markdown-toolbar button:focus-visible{background:var(--card);color:var(--ink)}
+  .b270-format-glyph{display:inline-block;min-width:13px;font-family:Georgia,"Times New Roman",serif;font-size:18px;line-height:1}
+  .b270-format-bold{font-weight:700}
+  .b270-format-italic{font-style:italic;font-weight:600}
+  .b270-markdown-editor[data-b270-formatting-open=true] textarea{border-radius:0 0 10px 10px}
+  .b270-markdown-preview{min-height:76px;margin:0;padding:11px 13px;border:1px solid var(--line);border-radius:10px;background:#fff;color:var(--ink)}
+  .b270-markdown-preview[hidden]{display:none}
+  .b270-markdown-preview>.b270-hint{margin:0}
   .b270-sr-only{position:absolute!important;width:1px!important;height:1px!important;padding:0!important;margin:-1px!important;overflow:hidden!important;clip:rect(0,0,0,0)!important;white-space:nowrap!important;border:0!important}
   .b270-mention-composer{position:relative}
   .b270-mention-options{position:absolute;z-index:30;left:0;right:0;top:calc(100% + 4px);overflow:hidden;

data/config/routes.rb

@@ -13,6 +13,7 @@ Bible270::Engine.routes.draw do
                                    constraints: { day: %r{\d+} }
   post   'day/:day/comments',      to: 'comments#create',  as: :day_comments,
                                    constraints: { day: %r{\d+} }
+  post   'comments/preview',       to: 'comments#preview', as: :comment_preview
   post   'comments/:id/like',      to: 'likes#toggle',     as: :like_comment
   patch  'comments/:id',           to: 'comments#update'
   delete 'comments/:id',           to: 'comments#destroy', as: :comment

data/db/migrate/20260101000021_add_body_format_to_bible270_comments.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+class AddBodyFormatToBible270Comments < ActiveRecord::Migration[7.0]
+  def up
+    add_column :bible270_comments, :body_format, :string, null: false, default: 'plain'
+  end
+
+  def down
+    remove_column :bible270_comments, :body_format
+  end
+end

data/db/migrate/20260101000022_change_all_comment_notices_default_to_true.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+class ChangeAllCommentNoticesDefaultToTrue < ActiveRecord::Migration[7.0]
+  def up
+    change_column_default :bible270_readers, :notify_on_all_comments, from: false, to: true
+  end
+
+  def down
+    change_column_default :bible270_readers, :notify_on_all_comments, from: true, to: false
+  end
+end

data/lib/bible270/comment_formatter.rb

@@ -0,0 +1,135 @@
+# frozen_string_literal: true
+
+require 'erb'
+require 'kramdown'
+require 'nokogiri'
+require 'rails-html-sanitizer'
+require 'bible270/mentions'
+
+module Bible270
+  # Converts stored reflection source into a deliberately small, safe subset of
+  # HTML. Plain bodies remain literal; Markdown bodies gain only the formatting
+  # exposed by the reflection toolbar.
+  module CommentFormatter
+    PLAIN = 'plain'
+    MARKDOWN = 'markdown'
+    FORMATS = [PLAIN, MARKDOWN].freeze
+    ALLOWED_TAGS = %w[p br strong em blockquote ul ol li a].freeze
+    ALLOWED_ATTRIBUTES = %w[href rel].freeze
+    LINK_REL = 'nofollow ugc noopener'
+    SKIP_MENTIONS_IN = %w[a code pre].freeze
+
+  module_function
+
+    def html(body, format: PLAIN, &mention_path)
+      source = body.to_s
+      rendered = format == MARKDOWN ? markdown_html(source) : plain_html(source)
+      fragment = fragment_for(sanitize(rendered))
+      hard_wrap(fragment) if format == MARKDOWN
+      decorate_links(fragment)
+      link_mentions(fragment, &mention_path) if mention_path
+      fragment.to_html
+    end
+
+    def text(body, format: PLAIN)
+      return body.to_s if format != MARKDOWN
+
+      fragment = fragment_for(html(body, format: format))
+      fragment.css('a[href]').each do |link|
+        href = link['href'].to_s
+        next if href.empty? || link.text == href
+
+        link.add_next_sibling(Nokogiri::XML::Text.new(" (#{href})", fragment.document))
+      end
+      fragment.css('br').each do |break_node|
+        break_node.replace(Nokogiri::XML::Text.new("\n", fragment.document))
+      end
+      fragment.css('p, blockquote, li').each do |block|
+        block.add_next_sibling(Nokogiri::XML::Text.new("\n", fragment.document))
+      end
+      fragment.text.lines.map(&:strip).join("\n").gsub(%r{\n{3,}}, "\n\n").strip
+    end
+
+    def markdown_html(source)
+      Kramdown::Document.new(source).to_html
+    end
+    private_class_method :markdown_html
+
+    def plain_html(source)
+      paragraphs = source.split(%r{(?:\r?\n){2,}}, -1).filter_map do |paragraph|
+        next if paragraph.empty?
+
+        escaped = ERB::Util.html_escape(paragraph).gsub(%r{\r?\n}, "<br>\n")
+        "<p>#{escaped}</p>"
+      end
+      paragraphs.join("\n")
+    end
+    private_class_method :plain_html
+
+    def sanitize(rendered)
+      Rails::Html::SafeListSanitizer.new.sanitize(
+        rendered,
+        tags: ALLOWED_TAGS,
+        attributes: ALLOWED_ATTRIBUTES
+      )
+    end
+    private_class_method :sanitize
+
+    def fragment_for(rendered)
+      Nokogiri::HTML::DocumentFragment.parse(rendered)
+    end
+    private_class_method :fragment_for
+
+    def hard_wrap(fragment)
+      fragment.xpath('.//p//text() | .//li//text()').to_a.each do |node|
+        next unless node.text.include?("\n")
+
+        replacement = Nokogiri::HTML::DocumentFragment.parse('')
+        node.text.split("\n", -1).each_with_index do |line, index|
+          replacement.add_child(Nokogiri::XML::Node.new('br', fragment.document)) if index.positive?
+          replacement.add_child(Nokogiri::XML::Text.new(line, fragment.document))
+        end
+        node.replace(replacement)
+      end
+    end
+    private_class_method :hard_wrap
+
+    def decorate_links(fragment)
+      fragment.css('a:not([href])').each do |link|
+        link.replace(Nokogiri::XML::Text.new(link.text, fragment.document))
+      end
+      fragment.css('a[href]').each { |link| link['rel'] = LINK_REL }
+    end
+    private_class_method :decorate_links
+
+    def link_mentions(fragment)
+      text_nodes = fragment.xpath('.//text()').to_a
+      text_nodes.each do |node|
+        next if node.ancestors.any? { |ancestor| SKIP_MENTIONS_IN.include?(ancestor.name) }
+        next unless node.text.match?(Mentions::PATTERN)
+
+        replacement = Nokogiri::HTML::DocumentFragment.parse('')
+        cursor = 0
+        node.text.to_enum(:scan, Mentions::PATTERN).each do
+          match = Regexp.last_match
+          replacement.add_child(Nokogiri::XML::Text.new(node.text[cursor...match.begin(0)], fragment.document))
+          href = yield Mentions.normalize(match[1])
+          if href
+            link = Nokogiri::XML::Node.new('a', fragment.document)
+            link['href'] = href
+            link['class'] = 'b270-mention'
+            link['rel'] = LINK_REL
+            link.content = match[0]
+            replacement.add_child(link)
+          else
+            replacement.add_child(Nokogiri::XML::Text.new(match[0], fragment.document))
+          end
+          cursor = match.end(0)
+        end
+        replacement.add_child(Nokogiri::XML::Text.new(node.text[cursor..].to_s, fragment.document))
+        node.replace(replacement)
+      end
+    end
+    private_class_method :link_mentions
+  end
+end

data/lib/bible270/migration_reconciler.rb

@@ -30,6 +30,8 @@ module Bible270
       'AddAllCommentNoticesToBible270Readers' => :check_all_comment_notices,
       'ChangePassageSourceDefaultToBibleCom' => :check_passage_source_default,
       'AddCompletionDoveDisabledToBible270Readers' => :check_completion_dove_disabled,
+      'AddBodyFormatToBible270Comments' => :check_comment_body_format,
+      'ChangeAllCommentNoticesDefaultToTrue' => :check_all_comment_notices_default,
       'CreateActiveStorageTables' => :check_active_storage
     }.freeze
 
@@ -209,6 +211,25 @@ module Bible270
       table_missing(:bible270_readers, columns: %i[completion_dove_disabled])
     end
 
+    def check_comment_body_format
+      missing = table_missing(:bible270_comments, columns: %i[body_format])
+      return missing if missing.any?
+
+      column = connection.columns(:bible270_comments).find { |candidate| candidate.name == 'body_format' }
+      missing = []
+      missing << 'column bible270_comments.body_format default plain' unless column&.default == 'plain'
+      missing << 'column bible270_comments.body_format null false' unless column && !column.null
+      missing
+    end
+
+    def check_all_comment_notices_default
+      missing = table_missing(:bible270_readers, columns: %i[notify_on_all_comments])
+      return missing if missing.any?
+
+      column = connection.columns(:bible270_readers).find { |candidate| candidate.name == 'notify_on_all_comments' }
+      column&.default == true ? [] : ['column bible270_readers.notify_on_all_comments default true']
+    end
+
     # The Bible270 installer can install Active Storage for reader avatars. A
     # copied database can therefore have the same timestamp mismatch for Rails'
     # generated Active Storage migration as it has for the engine migrations.

data/lib/bible270/reader_progress_report.rb

@@ -0,0 +1,52 @@
+# frozen_string_literal: true
+
+module Bible270
+  # Builds the plain-text reader progress table used by administrative tasks.
+  class ReaderProgressReport
+    HEADERS = ['Name', 'Days Read', 'Status'].freeze
+    Row = Struct.new(:name, :days_read, :status, keyword_init: true)
+
+    def initialize(readers: Reader.all, completed_days: Reader.completed_days_by_id)
+      @readers = readers
+      @completed_days = completed_days
+    end
+
+    def rows
+      @rows ||= begin
+        report_rows = readers.map do |reader|
+          days_read = completed_days.fetch(reader.id, 0)
+          Row.new(name: reader.display_name, days_read: days_read, status: status(reader, days_read))
+        end
+        report_rows.sort_by { |row| [-row.days_read, row.name.downcase, row.name] }
+      end
+    end
+
+    def empty? = rows.empty?
+
+    def to_table
+      values = rows.map { |row| [row.name, row.days_read.to_s, row.status] }
+      widths = HEADERS.each_index.map do |index|
+        ([HEADERS[index].length] + values.map { |value| value[index].length }).max
+      end
+      format = "%-#{widths[0]}s  %#{widths[1]}s  %-#{widths[2]}s"
+      lines = [format % HEADERS, format % widths.map { |width| '-' * width }].map(&:rstrip)
+      lines.concat(values.map { |value| (format % value).rstrip })
+      lines.join("\n")
+    end
+
+  private
+
+    attr_reader :readers, :completed_days
+
+    def status(reader, days_read)
+      calendar_day = reader.calendar_day
+      return 'undated' unless calendar_day
+
+      difference = days_read - calendar_day
+      return 'on track' if difference.zero?
+
+      amount = difference.abs
+      "#{amount} #{amount == 1 ? 'day' : 'days'} #{difference.positive? ? 'ahead' : 'behind'}"
+    end
+  end
+end

data/lib/bible270/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Bible270
-  VERSION = '1.4.2'
+  VERSION = '1.5.1'
 end

data/lib/bible270.rb

@@ -7,11 +7,13 @@ require 'bible270/plan'
 require 'bible270/email_sign_in'
 require 'bible270/names'
 require 'bible270/mentions'
+require 'bible270/comment_formatter'
 require 'bible270/avatars'
 require 'bible270/translations'
 require 'bible270/favicon'
 require 'bible270/configuration'
 require 'bible270/daily_reminders'
+require 'bible270/reader_progress_report'
 require 'bible270/engine' if defined?(Rails::Engine)
 
 module Bible270

data/lib/tasks/bible270_notifications.rake

@@ -0,0 +1,38 @@
+# frozen_string_literal: true
+
+namespace :bible270 do
+  namespace :notifications do
+    desc 'Email every existing reader about each new reflection and reply'
+    task enable_all: :environment do
+      unless Bible270::Reader.comment_notification_columns?
+        abort 'Reflection email columns are missing. Run bin/rails bible270:install:migrations and bin/rails db:migrate.'
+      end
+
+      total = Bible270::Reader.count
+      puts "Found #{total} Bible270 #{'reader'.pluralize(total)} in the #{Rails.env} environment."
+      if total.zero?
+        puts 'No reader settings were changed.'
+        puts 'Rerun with RAILS_ENV=production if that is where your readers are stored.' unless Rails.env.production?
+        next
+      end
+
+      readers = Bible270::Reader.where(notify_on_mention: false)
+        .or(Bible270::Reader.where(notify_on_all_comments: false))
+      updated = 0
+
+      Bible270::Reader.transaction do
+        readers.find_each do |reader|
+          reader.update_comment_notification_level!('all')
+          updated += 1
+        end
+      end
+
+      if updated.zero?
+        puts "All #{total} #{'reader'.pluralize(total)} already receive every new reflection and reply."
+      else
+        puts "Updated #{updated} #{'reader'.pluralize(updated)}. " \
+             "All #{total} #{'reader'.pluralize(total)} now receive every new reflection and reply."
+      end
+    end
+  end
+end

data/lib/tasks/bible270_readers.rake

@@ -0,0 +1,17 @@
+# frozen_string_literal: true
+
+require 'bible270/reader_progress_report'
+
+namespace :bible270 do
+  namespace :readers do
+    desc 'List readers by completed days with their schedule status'
+    task list: :environment do
+      report = Bible270::ReaderProgressReport.new
+      if report.empty?
+        puts "No Bible270 readers found in the #{Rails.env} environment."
+      else
+        puts report.to_table
+      end
+    end
+  end
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: bible270
 version: !ruby/object:Gem::Version
-  version: 1.4.2
+  version: 1.5.1
 platform: ruby
 authors:
 - Andrew vonderLuft
@@ -9,6 +9,40 @@ bindir: bin
 cert_chain: []
 date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
+- !ruby/object:Gem::Dependency
+  name: json
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '3'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '3'
+- !ruby/object:Gem::Dependency
+  name: kramdown
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '2.5'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '3'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '2.5'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '3'
 - !ruby/object:Gem::Dependency
   name: rails
   requirement: !ruby/object:Gem::Requirement
@@ -106,9 +140,11 @@ files:
 - app/views/bible270/admin/index.html.erb
 - app/views/bible270/admin/show.html.erb
 - app/views/bible270/checkoffs/toggle.turbo_stream.erb
+- app/views/bible270/comments/_body.html.erb
 - app/views/bible270/comments/_comment.html.erb
 - app/views/bible270/comments/_edit_fields.html.erb
 - app/views/bible270/comments/_edit_form.html.erb
+- app/views/bible270/comments/_editor.html.erb
 - app/views/bible270/comments/_form.html.erb
 - app/views/bible270/comments/create.turbo_stream.erb
 - app/views/bible270/comments/destroy.turbo_stream.erb
@@ -145,6 +181,7 @@ files:
 - app/views/bible270/shared/_header.html.erb
 - app/views/bible270/shared/_interaction_status.html.erb
 - app/views/bible270/shared/_interaction_ui.html.erb
+- app/views/bible270/shared/_markdown_toolbar.html.erb
 - app/views/bible270/shared/_mention_typeahead.html.erb
 - app/views/bible270/shared/_nav_links.html.erb
 - app/views/bible270/shared/_passage_source.html.erb
@@ -176,8 +213,11 @@ files:
 - db/migrate/20260101000018_add_all_comment_notices_to_bible270_readers.rb
 - db/migrate/20260101000019_change_passage_source_default_to_bible_com.rb
 - db/migrate/20260101000020_add_completion_dove_disabled_to_bible270_readers.rb
+- db/migrate/20260101000021_add_body_format_to_bible270_comments.rb
+- db/migrate/20260101000022_change_all_comment_notices_default_to_true.rb
 - lib/bible270.rb
 - lib/bible270/avatars.rb
+- lib/bible270/comment_formatter.rb
 - lib/bible270/configuration.rb
 - lib/bible270/daily_reminders.rb
 - lib/bible270/email_sign_in.rb
@@ -187,6 +227,7 @@ files:
 - lib/bible270/migration_reconciler.rb
 - lib/bible270/names.rb
 - lib/bible270/plan.rb
+- lib/bible270/reader_progress_report.rb
 - lib/bible270/translations.rb
 - lib/bible270/versification.rb
 - lib/bible270/version.rb
@@ -194,6 +235,8 @@ files:
 - lib/generators/bible270/install/templates/bible270.rb.tt
 - lib/generators/bible270/install/templates/omniauth.rb.tt
 - lib/tasks/bible270_migrations.rake
+- lib/tasks/bible270_notifications.rake
+- lib/tasks/bible270_readers.rake
 - lib/tasks/bible270_reminders.rake
 homepage: https://github.com/avonderluft/bible270
 licenses: