bible270 0.9.0 → 0.11.0

data/app/models/bible270/reader.rb

@@ -1,14 +1,23 @@
 # frozen_string_literal: true
+
 module Bible270
   # A reader identity. Either self-contained (created via OmniAuth) or bridged
   # to one of the host application's users through the polymorphic :owner.
   class Reader < ApplicationRecord
-    self.table_name = "bible270_readers"
+    self.table_name = 'bible270_readers'
 
-    has_many :checkoffs, class_name: "Bible270::Checkoff", dependent: :destroy
-    has_many :comments,  class_name: "Bible270::Comment",  dependent: :destroy
+    has_many :checkoffs, class_name: 'Bible270::Checkoff', dependent: :destroy
+    has_many :comments,  class_name: 'Bible270::Comment',  dependent: :destroy
     belongs_to :owner, polymorphic: true, optional: true
 
+    # Active Storage is optional: an app may have it disabled, and the engine has
+    # to keep working there — readers simply can't upload, and any avatar from
+    # their sign-in provider is used instead.
+    AVATAR_UPLOADS = respond_to?(:has_one_attached)
+    has_one_attached :avatar if AVATAR_UPLOADS
+
+    def self.avatar_uploads? = AVATAR_UPLOADS
+
     validates :display_name, presence: true
     validates :uid, uniqueness: { scope: :provider }, allow_nil: true
 
@@ -20,11 +29,11 @@ module Bible270
       return nil if provider.empty? || uid.empty?
 
       info = dig_auth(auth, :info) || {}
-      name  = first_present(dig_auth(info, :name), dig_auth(info, :nickname),
-                            dig_auth(info, :first_name), dig_auth(info, :email))
+      name = first_present(dig_auth(info, :name), dig_auth(info, :nickname),
+                           dig_auth(info, :first_name), dig_auth(info, :email))
 
       reader = find_or_initialize_by(provider: provider, uid: uid)
-      reader.display_name = first_present(name, reader.display_name, "Reader")
+      reader.display_name = first_present(name, reader.display_name, 'Reader')
       email = dig_auth(info, :email)
       image = first_present(dig_auth(info, :image), dig_auth(info, :avatar_url))
       reader.email      = email if email.present?
@@ -36,14 +45,30 @@ module Bible270
     # Find or create the reader behind a verified email address. Uses the same
     # provider/uid identity columns as OmniAuth, with provider "email", so an
     # email reader is indistinguishable from any other downstream.
-    def self.from_email(email, display_name: nil)
+    # Used when enrolment is closed: an existing reader may still sign in, a new
+    # one may not be created.
+    def self.email_reader_exists?(email)
+      address = EmailSignIn.normalize_email(email)
+      return false if address.nil?
+
+      exists?(provider: 'email', uid: address)
+    end
+
+    def self.omniauth_reader_exists?(provider, uid)
+      return false if provider.blank? || uid.blank?
+
+      exists?(provider: provider.to_s, uid: uid.to_s)
+    end
+
+    def self.from_email(email, first_name: nil, last_name: nil, display_name: nil)
       address = EmailSignIn.normalize_email(email)
       return nil if address.nil?
 
-      reader = find_or_initialize_by(provider: "email", uid: address)
-      chosen = first_present(display_name, reader.display_name,
-                             EmailSignIn.display_name_from(address), "Reader")
-      reader.display_name = chosen
+      reader = find_or_initialize_by(provider: 'email', uid: address)
+      reader.first_name = first_name.to_s.strip if first_name.present?
+      reader.last_name  = last_name.to_s.strip  if last_name.present?
+      reader.display_name = first_present(reader.full_name, display_name, reader.display_name,
+                                          EmailSignIn.display_name_from(address), 'Reader')
       reader.email = address
       reader.save
       reader
@@ -51,6 +76,7 @@ module Bible270
 
     def self.dig_auth(obj, key)
       return nil if obj.nil?
+
       if obj.respond_to?(:[])
         obj[key] || (obj[key.to_s] if key.is_a?(Symbol))
       elsif obj.respond_to?(key)
@@ -62,22 +88,53 @@ module Bible270
     private_class_method :dig_auth
 
     def self.first_present(*values)
-      values.compact.find { |v| v.to_s.strip != "" }
+      values.compact.find { |v| v.to_s.strip != '' }
     end
     private_class_method :first_present
 
     # Find or create a reader bridged to a host user (or any model).
     def self.for_owner(owner, display_name:, email: nil, avatar_url: nil)
       reader = find_or_initialize_by(owner: owner)
-      reader.display_name = display_name.presence || reader.display_name || "Reader"
+      reader.display_name = display_name.presence || reader.display_name || 'Reader'
       reader.email      ||= email
       reader.avatar_url ||= avatar_url
       reader.save!
       reader
     end
 
+    def full_name
+      [first_name, last_name].map { |n| n.to_s.strip }.reject(&:empty?).join(' ').presence
+    end
+
+    def sort_name
+      [last_name, first_name].map { |n| n.to_s.strip.downcase }.join(' ').strip.presence || display_name.to_s.downcase
+    end
+
+    def avatar_uploaded?
+      self.class.avatar_uploads? && avatar.attached?
+    end
+
+    # Returns false and sets an error when the upload isn't acceptable.
+    def attach_avatar(upload)
+      return false unless self.class.avatar_uploads?
+
+      problem = Avatars.problem_with(content_type: upload.content_type, byte_size: upload.size)
+      if problem
+        errors.add(:avatar, problem)
+        return false
+      end
+
+      avatar.attach(upload)
+      true
+    end
+
+    def remove_avatar!
+      avatar.purge if avatar_uploaded?
+      true
+    end
+
     def initials
-      display_name.to_s.split(/\s+/).first(2).map { |w| w[0] }.join.upcase.presence || "?"
+      display_name.to_s.split(%r{\s+}).first(2).map { |w| w[0] }.join.upcase.presence || '?'
     end
 
     # {day => number of tracks checked off}
@@ -85,6 +142,20 @@ module Bible270
       @checked_counts ||= checkoffs.group(:day).count
     end
 
+    # Tracks ticked on a day, counted from the single grouped query in
+    # checked_counts. Use this rather than read_tracks_for when rendering a grid:
+    # read_tracks_for costs a query per day, which is 270 of them per page.
+    def checked_count(day)
+      checked_counts[day].to_i
+    end
+
+    def day_status(day)
+      done = checked_count(day)
+      return :none if done.zero?
+
+      done >= Plan.required_track_count(day) ? :complete : :partial
+    end
+
     def read_tracks_for(day)
       checkoffs.where(day: day).pluck(:track)
     end
@@ -116,6 +187,76 @@ module Bible270
     end
 
     # Day number implied by the calendar, if a start date is set.
+    # Set the name shown beside this reader's reflections. Returns false when
+    # either half is missing, so callers can re-render with a message.
+    def update_names(first, last)
+      names = Names.normalize(first, last)
+      return false if names.nil?
+
+      update(**names)
+    end
+
+    # Fill first/last from the display name where we only have one string, e.g.
+    # a reader who arrived through OmniAuth.
+    def suggested_names
+      return { first_name: first_name, last_name: last_name } if full_name
+
+      Names.split(display_name) || { first_name: display_name, last_name: nil }
+    end
+
+    # ---- administrative adjustments --------------------------------------
+
+    # Tick every track that has content on this day.
+    def mark_day_complete!(day)
+      return false unless Plan.valid_day?(day)
+
+      Plan.present_tracks(day).each do |track|
+        checkoffs.find_or_create_by!(day: day, track: track)
+      end
+      reload_progress
+      true
+    end
+
+    def clear_day!(day)
+      return false unless Plan.valid_day?(day)
+
+      checkoffs.where(day: day).destroy_all
+      reload_progress
+      true
+    end
+
+    def toggle_day!(day)
+      day_complete?(day) ? clear_day!(day) : mark_day_complete!(day)
+    end
+
+    # Mark everything up to and including `day` complete, and clear anything after.
+    def mark_through!(day)
+      return false unless day.to_i.between?(0, Plan::DAYS)
+
+      transaction do
+        checkoffs.where(day: (day.to_i + 1)..).destroy_all
+        (1..day.to_i).each do |d|
+          Plan.present_tracks(d).each { |t| checkoffs.find_or_create_by!(day: d, track: t) }
+        end
+      end
+      reload_progress
+      true
+    end
+
+    # Put this reader on `day` as of `on` — i.e. back-date the start so that the
+    # given date lands on the given day of the plan.
+    def restart_on!(day:, on: Date.current)
+      day = day.to_i
+      return false unless Plan.valid_day?(day)
+
+      update!(started_on: Plan.to_date(on) - (day - 1))
+    end
+
+    def reload_progress
+      @checked_counts = nil
+      self
+    end
+
     # ---- start date / calendar ------------------------------------------
 
     # The start date that actually governs this reader. A reader's own
@@ -184,15 +325,24 @@ module Bible270
       started_on
     end
 
-    def update_start_date!(value)
-      return false unless Bible270.config.allow_reader_start_date
-
+    # Set the start date regardless of whether readers are allowed to set their
+    # own. For administrative use: config.allow_reader_start_date governs what a
+    # reader may do to themselves, not what an admin may do on their behalf.
+    # Returns false only when the value isn't a date.
+    def set_start_date!(value)
       date = Plan.to_date(value)
       return false if date.nil?
 
       update!(started_on: date)
     end
 
+    # The reader-facing version, which does respect that permission.
+    def update_start_date!(value)
+      return false unless Bible270.config.allow_reader_start_date
+
+      set_start_date!(value)
+    end
+
     def clear_start_date!
       update!(started_on: nil)
     end

data/app/models/bible270/setting.rb

@@ -0,0 +1,57 @@
+# frozen_string_literal: true
+
+module Bible270
+  # Runtime state an admin can change without a deploy. Currently just whether
+  # this run of the plan is open to new readers.
+  class Setting < ApplicationRecord
+    self.table_name = 'bible270_settings'
+
+    ENROLLMENT_CLOSED_AT = 'enrollment_closed_at'
+
+    validates :key, presence: true, uniqueness: true
+
+    def self.read(key)
+      find_by(key: key.to_s)&.value
+    end
+
+    def self.write(key, value)
+      record = find_or_initialize_by(key: key.to_s)
+      record.value = value
+      record.save!
+      value
+    end
+
+    def self.delete_key(key)
+      where(key: key.to_s).delete_all
+    end
+
+    # ---- enrolment --------------------------------------------------------
+
+    # Closed either because an admin closed it, or because the app was configured
+    # to launch closed.
+    def self.enrollment_closed?
+      return true if read(ENROLLMENT_CLOSED_AT).present?
+
+      Bible270.config.respond_to?(:enrollment_open) && Bible270.config.enrollment_open == false
+    end
+
+    def self.enrollment_closed_at
+      raw = read(ENROLLMENT_CLOSED_AT)
+      return nil if raw.blank?
+
+      Time.zone ? Time.zone.parse(raw) : Time.parse(raw)
+    rescue ArgumentError
+      nil
+    end
+
+    def self.close_enrollment!(at: Time.current)
+      write(ENROLLMENT_CLOSED_AT, at.iso8601)
+      true
+    end
+
+    def self.open_enrollment!
+      delete_key(ENROLLMENT_CLOSED_AT)
+      true
+    end
+  end
+end

data/app/models/bible270/sign_in_token.rb

@@ -1,11 +1,12 @@
 # frozen_string_literal: true
+
 module Bible270
   # A single-use, short-lived magic-link token for email sign-in.
   #
   # Only the SHA-256 digest of the token is stored, so the table is useless to
   # an attacker who reads it. Tokens are consumed on first successful use.
   class SignInToken < ApplicationRecord
-    self.table_name = "bible270_sign_in_tokens"
+    self.table_name = 'bible270_sign_in_tokens'
 
     validates :email, presence: true
     validates :token_digest, presence: true, uniqueness: true
@@ -16,7 +17,7 @@ module Bible270
 
     # Issue a token for an email. Returns [token_record, raw_token], or
     # [nil, nil] when the address is being hammered (see rate_limited?).
-    def self.issue!(email, display_name: nil)
+    def self.issue!(email, display_name: nil, first_name: nil, last_name: nil)
       address = EmailSignIn.normalize_email(email)
       return [nil, nil] if address.nil?
       return [nil, nil] if rate_limited?(address)
@@ -25,6 +26,8 @@ module Bible270
       record = create!(
         email: address,
         display_name: display_name.presence,
+        first_name: first_name.presence,
+        last_name: last_name.presence,
         token_digest: EmailSignIn.digest_token(raw),
         expires_at: Time.current + Bible270.config.email_sign_in_ttl
       )

data/app/views/bible270/admin/comments.html.erb

@@ -0,0 +1,44 @@
+<% content_for :title, "Reflections — Admin" %>
+<p class="b270-eyebrow"><%= link_to 'Admin', admin_path %></p>
+<h1>Reflections</h1>
+<p class="lede">Reflections are visible as soon as they're written. Hiding one takes it off the day
+   and community pages without deleting it; the writer keeps their words and you can restore it.</p>
+
+<p class="b270-startline" style="margin-bottom:14px">
+  <%= link_to 'All', admin_comments_path %> ·
+  <%= link_to 'Visible', admin_comments_path(filter: 'visible') %> ·
+  <%= link_to "Hidden (#{@hidden_count})", admin_comments_path(filter: 'hidden') %>
+</p>
+
+<% if @comments.any? %>
+  <% @comments.each do |comment| %>
+    <div class="b270-comment" id="comment-<%= comment.id %>">
+      <%= b270_avatar(comment.reader) %>
+      <div style="flex:1">
+        <div class="b270-cmeta">
+          <strong><%= comment.reader.display_name %></strong>
+          · <%= link_to "day #{comment.day}", day_path(comment.day) %>
+          · <%= comment.created_at.strftime('%b %-d, %Y') %>
+          <% if comment.hidden? %><span class="b270-badge">Hidden</span><% end %>
+        </div>
+        <p class="b270-cbody"><%= comment.body %></p>
+        <div style="display:flex;gap:10px;align-items:center;margin-top:6px">
+          <% if comment.hidden? %>
+            <%= button_to 'Restore', admin_unhide_comment_path(comment), method: :patch,
+                  params: { return_to: request.fullpath }, class: 'b270-linkbtn' %>
+          <% else %>
+            <%= button_to 'Hide', admin_hide_comment_path(comment), method: :patch,
+                  params: { return_to: request.fullpath }, class: 'b270-linkbtn' %>
+          <% end %>
+          <%= button_to 'Delete', admin_comment_path(comment), method: :delete,
+                params: { return_to: request.fullpath }, class: 'b270-linkbtn',
+                form: { data: { turbo_confirm: 'Delete this reflection permanently?' } } %>
+        </div>
+      </div>
+    </div>
+  <% end %>
+<% else %>
+  <p style="color:var(--faint)">Nothing here.</p>
+<% end %>
+
+<p style="margin-top:18px"><%= link_to '← All readers', admin_path %></p>

data/app/views/bible270/admin/index.html.erb

@@ -0,0 +1,48 @@
+<% content_for :title, "Admin — #{Bible270.config.app_name}" %>
+<p class="b270-eyebrow">Admin</p>
+<h1>Readers</h1>
+<p class="lede"><%= @readers.size %> reader<%= 's' unless @readers.size == 1 %> taking part.
+   <%= link_to 'Moderate reflections →', admin_comments_path %></p>
+
+<div class="b270-panel">
+  <h2 class="b270-subhead">This run of the plan</h2>
+  <% if @enrollment_closed %>
+    <p class="b270-startline"><strong>Closed to new readers</strong><% if @enrollment_closed_at %>
+      since <%= @enrollment_closed_at.strftime('%B %-d, %Y') %><% end %>.
+      The <%= @readers.size %> reader<%= 's' unless @readers.size == 1 %> already taking part can
+      still sign in and carry on.</p>
+    <%= button_to 'Open to new readers', admin_enrollment_path, method: :patch,
+          params: { state: 'open' }, class: 'b270-btn' %>
+  <% else %>
+    <p class="b270-startline"><strong>Open to new readers.</strong> Anyone signing in for the first
+      time joins this run.</p>
+    <%= button_to 'Close to new readers', admin_enrollment_path, method: :patch,
+          params: { state: 'closed' }, class: 'b270-btn',
+          form: { data: { turbo_confirm: 'Close this run? Existing readers keep their access.' } } %>
+  <% end %>
+</div>
+
+<% if @readers.any? %>
+  <div class="b270-list">
+    <% @readers.each do |reader| %>
+      <div class="b270-li">
+        <%= b270_avatar(reader, size: 34) %>
+        <div>
+          <div class="name"><%= link_to reader.display_name, admin_reader_path(reader), style: 'text-decoration:none' %></div>
+          <div class="sub">
+            <%= reader.email.presence || reader.provider %>
+            · <%= @days_completed[reader.id] %>/<%= Bible270::Plan::DAYS %> days
+            <% if reader.dated? %>· started <%= reader.effective_start_date.strftime('%b %-d, %Y') %><% end %>
+          </div>
+        </div>
+        <div class="stat">
+          <span class="big"><%= (@days_completed[reader.id].to_f / Bible270::Plan::DAYS * 100).round %>%</span>
+        </div>
+      </div>
+    <% end %>
+  </div>
+<% else %>
+  <p style="color:var(--faint)">No readers yet.</p>
+<% end %>
+
+<p style="margin-top:18px"><%= link_to '← Back to the plan', root_path %></p>

data/app/views/bible270/admin/show.html.erb

@@ -0,0 +1,104 @@
+<% content_for :title, "#{@reader.display_name} — Admin" %>
+<p class="b270-eyebrow"><%= link_to 'Admin', admin_path %></p>
+<h1><%= @reader.display_name %></h1>
+<p class="lede">
+  <%= @reader.email.presence || @reader.provider %> ·
+  <%= @days_completed %> of <%= Bible270::Plan::DAYS %> days ·
+  <%= @reader.completion_percent %>%
+  <% if @reader.dated? %>· day <%= @reader.calendar_day %> today<% end %>
+</p>
+
+<div class="b270-panel">
+  <h2 class="b270-subhead">Name</h2>
+  <%= form_with url: admin_reader_name_path(@reader), method: :patch, class: "b270-emailform" do %>
+    <label class="b270-field">
+      <span>First name</span>
+      <%= text_field_tag :first_name, @reader.suggested_names[:first_name], required: true %>
+    </label>
+    <label class="b270-field">
+      <span>Last name</span>
+      <%= text_field_tag :last_name, @reader.suggested_names[:last_name], required: true %>
+    </label>
+    <%= submit_tag 'Save name', class: 'b270-btn' %>
+  <% end %>
+</div>
+
+<div class="b270-panel">
+  <h2 class="b270-subhead">Where they are in the plan</h2>
+  <%= form_with url: admin_reader_start_path(@reader), method: :patch, class: "b270-startform" do %>
+    <label class="b270-field">
+      <span>Put them on day (as of today)</span>
+      <%= number_field_tag :day, @reader.calendar_day || 1, min: 1, max: Bible270::Plan::DAYS %>
+    </label>
+    <%= submit_tag 'Move', class: 'b270-btn' %>
+  <% end %>
+  <%= form_with url: admin_reader_start_path(@reader), method: :patch, class: "b270-startform" do %>
+    <label class="b270-field">
+      <span>…or set the start date directly</span>
+      <%= date_field_tag :start_date, @reader.started_on %>
+    </label>
+    <%= submit_tag 'Set date', class: 'b270-btn' %>
+  <% end %>
+  <p class="b270-hint">Moving someone re-maps the calendar only. Their check-offs are keyed to day
+     numbers and are not touched.</p>
+</div>
+
+<div class="b270-panel">
+  <h2 class="b270-subhead">Completions</h2>
+  <%= form_with url: admin_reader_through_path(@reader), method: :patch, class: "b270-startform" do %>
+    <label class="b270-field">
+      <span>Mark complete through day (0 clears everything)</span>
+      <%= number_field_tag :day, @days_completed, min: 0, max: Bible270::Plan::DAYS %>
+    </label>
+    <%= submit_tag 'Apply', class: 'b270-btn' %>
+  <% end %>
+  <p class="b270-hint">This also clears anything after that day, so it sets their progress exactly.</p>
+
+  <div class="b270-grid" style="margin-top:16px">
+    <% (1..Bible270::Plan::DAYS).each do |d| %>
+      <%= button_to d, admin_reader_day_path(@reader, d), method: :post,
+            class: "b270-cell #{b270_day_status_class(@reader, d)}",
+            form: { style: 'display:contents', id: "day-#{d}" } %>
+    <% end %>
+  </div>
+  <p class="b270-hint">Click a day to toggle it complete.</p>
+</div>
+
+<div class="b270-panel">
+  <h2 class="b270-subhead">Their reflections</h2>
+  <% if @comments.any? %>
+    <% @comments.each do |comment| %>
+      <div class="b270-comment">
+        <div style="flex:1">
+          <div class="b270-cmeta">
+            <%= link_to "day #{comment.day}", day_path(comment.day) %>
+            · <%= comment.created_at.strftime('%b %-d, %Y') %>
+            <% if comment.hidden? %><span class="b270-badge">Hidden</span><% end %>
+          </div>
+          <p class="b270-cbody"><%= comment.body %></p>
+          <div style="display:flex;gap:10px;margin-top:6px">
+            <% if comment.hidden? %>
+              <%= button_to 'Restore', admin_unhide_comment_path(comment), method: :patch,
+                    params: { return_to: request.fullpath }, class: 'b270-linkbtn' %>
+            <% else %>
+              <%= button_to 'Hide', admin_hide_comment_path(comment), method: :patch,
+                    params: { return_to: request.fullpath }, class: 'b270-linkbtn' %>
+            <% end %>
+          </div>
+        </div>
+      </div>
+    <% end %>
+  <% else %>
+    <p class="b270-hint" style="margin-top:0">None yet.</p>
+  <% end %>
+</div>
+
+<div class="b270-panel">
+  <h2 class="b270-subhead">Remove</h2>
+  <p class="b270-hint" style="margin-top:0">Deletes the reader together with every check-off and
+     reflection they have written. This cannot be undone.</p>
+  <%= button_to "Remove #{@reader.display_name}", admin_reader_path(@reader), method: :delete,
+        class: 'b270-btn', form: { data: { turbo_confirm: "Permanently remove #{@reader.display_name}?" } } %>
+</div>
+
+<p style="margin-top:18px"><%= link_to '← All readers', admin_path %></p>

data/app/views/bible270/days/_start_date.html.erb

@@ -4,7 +4,7 @@
       <% if reader.own_start_date? %>
         Started <strong><%= reader.start_date.strftime("%B %-d, %Y") %></strong>
       <% else %>
-        Community plan began <strong><%= Bible270.config.start_date.strftime("%B %-d, %Y") %></strong>
+        Community plan start date: <strong><%= Bible270.config.start_date.strftime("%B %-d, %Y") %></strong>
       <% end %>
       · finishes <%= reader.plan_end_date.strftime("%B %-d, %Y") %>
       <% if reader.not_started_yet? %>

data/app/views/bible270/days/index.html.erb

@@ -1,22 +1,19 @@
 <% content_for :title, Bible270.config.app_name %>
 <p class="b270-eyebrow"><%= Bible270.config.tagline %></p>
-<h1><%= Bible270.config.app_name %> <em>— read the story straight through</em></h1>
-<p class="lede">Each day: a passage from the Old Testament, a couple of chapters of the New
-   Testament, and a Psalm or Proverb — portions sized to take about the same time to read.
-   Check off what you read; your place is kept for you, and you can see how the rest of the
-   community is journeying too.</p>
+<h1><%= Bible270.config.app_name %> <em>— read God's whole story</em></h1>
+<p class="lede">Daily passages from the Old Testament, New Testament, and Psalms or Proverbs — portions sized to take about the same time to read. Check off what you read; your place is saved for you, and you can see how your friends are progressing as well.</p>
 
 <div class="b270-panel">
   <% if signed_in? %>
     <div class="b270-bignum">
       <span class="n"><%= current_reader.days_completed %></span>
-      <span class="of">of <%= Plan::DAYS %> days complete</span>
+      <span class="of">of <%= Bible270::Plan::DAYS %> days complete</span>
       <span class="pct"><%= current_reader.completion_percent %>%</span>
     </div>
     <div class="b270-tracks">
-      <% [["ot", current_reader.days_read_in("ot"), Plan::DAYS],
-          ["nt", current_reader.days_read_in("nt"), Plan.nt_content_days],
-          ["pp", current_reader.days_read_in("pp"), Plan::DAYS]].each do |track, read, total| %>
+      <% [["ot", current_reader.days_read_in("ot"), Bible270::Plan::DAYS],
+          ["nt", current_reader.days_read_in("nt"), Bible270::Plan.nt_content_days],
+          ["pp", current_reader.days_read_in("pp"), Bible270::Plan::DAYS]].each do |track, read, total| %>
         <% t = b270_track(track) %>
         <div class="b270-tm">
           <span class="lab"><span class="b270-rib" style="background:<%= t[:color] %>"></span><%= t[:label] %></span>
@@ -36,9 +33,8 @@
     <p class="b270-signedout"><%= link_to "Sign in", sign_in_path %> to track your progress and join
        the conversation. You can browse the whole plan and read others' reflections without an account.</p>
     <% if @community_start_date %>
-      <p class="b270-startline">The community began this plan on
-         <strong><%= @community_start_date.strftime("%B %-d, %Y") %></strong>
-         and finishes <%= Plan.end_date_for(@community_start_date).strftime("%B %-d, %Y") %>.</p>
+      <p class="b270-startline">This community plan runs from <strong><%= @community_start_date.strftime("%B %-d, %Y") %></strong> to 
+         <strong><%= Bible270::Plan.end_date_for(@community_start_date).strftime("%B %-d, %Y") %></strong>.</p>
     <% end %>
     <p style="margin:14px 0 0"><%= link_to "Start at Day 1 →", day_path(1), class: "b270-btn" %></p>
   <% end %>
@@ -55,18 +51,10 @@
           <div class="name"><%= link_to r.display_name, reader_path(r), style: "text-decoration:none" %></div>
           <div class="sub"><%= @days_completed[r.id] %> days read</div>
         </div>
-        <div class="stat"><span class="big"><%= (@days_completed[r.id].to_f / Plan::DAYS * 100).round %>%</span></div>
+        <div class="stat"><span class="big"><%= (@days_completed[r.id].to_f / Bible270::Plan::DAYS * 100).round %>%</span></div>
       </div>
     <% end %>
   </div>
   <p style="margin:12px 0 0"><%= link_to "See everyone →", community_path %></p>
 <% end %>
 
-<details class="b270-index">
-  <summary>All <%= Plan::DAYS %> days</summary>
-  <div class="b270-grid">
-    <% (1..Plan::DAYS).each do |d| %>
-      <%= link_to d, day_path(d), class: "b270-cell #{b270_day_status_class(current_reader, d)} #{'now' if signed_in? && d == @start_day}" %>
-    <% end %>
-  </div>
-</details>

data/app/views/bible270/profiles/edit.html.erb

@@ -0,0 +1,44 @@
+<% content_for :title, "Your profile — #{Bible270.config.app_name}" %>
+<p class="b270-eyebrow">Your details</p>
+<h1>Your profile</h1>
+<p class="lede">This is how you appear beside your reflections and on the community page.</p>
+
+<div class="b270-panel">
+  <%= form_with url: profile_path, method: :patch, class: "b270-emailform",
+                html: { multipart: true } do %>
+    <div class="b270-avatarrow">
+      <%= b270_avatar(current_reader, size: 64) %>
+      <% if Bible270::Reader.avatar_uploads? %>
+        <label class="b270-field" style="flex:1">
+          <span>Picture</span>
+          <%= file_field_tag :avatar, accept: Bible270::Avatars.content_types.join(',') %>
+          <span class="b270-hint" style="margin:0">
+            PNG, JPEG, GIF or WebP, up to <%= Bible270::Avatars.human_size(Bible270::Avatars.max_bytes) %>.
+          </span>
+        </label>
+      <% end %>
+    </div>
+
+    <label class="b270-field">
+      <span>First name</span>
+      <%= text_field_tag :first_name, @names[:first_name], required: true, autocomplete: "given-name" %>
+    </label>
+    <label class="b270-field">
+      <span>Last name</span>
+      <%= text_field_tag :last_name, @names[:last_name], required: true, autocomplete: "family-name" %>
+    </label>
+    <%= submit_tag "Save", class: "b270-btn" %>
+  <% end %>
+
+  <% if current_reader.avatar_uploaded? %>
+    <%= button_to "Remove picture", profile_avatar_path, method: :delete, class: "b270-linkbtn",
+          form: { data: { turbo_confirm: "Remove your picture?" } } %>
+  <% end %>
+
+  <% unless Bible270::Reader.avatar_uploads? %>
+    <p class="b270-hint">Picture uploads need Active Storage in this application
+       (<code>bin/rails active_storage:install</code>). Until then, avatars come from your sign-in provider.</p>
+  <% end %>
+</div>
+
+<p style="margin-top:18px"><%= link_to "← Back to your progress", reader_path(current_reader) %></p>