bible270 0.9.0 → 0.11.0

data/app/views/bible270/readers/index.html.erb

@@ -11,10 +11,10 @@
         <%= b270_avatar(r, size: 40) %>
         <div>
           <div class="name"><%= link_to r.display_name, reader_path(r), style: "text-decoration:none" %></div>
-          <div class="sub"><%= @days_completed[r.id] %> of <%= Plan::DAYS %> days · joined <%= r.created_at.strftime("%b %Y") %></div>
+          <div class="sub"><%= @days_completed[r.id] %> of <%= Bible270::Plan::DAYS %> days · joined <%= r.created_at.strftime("%b %Y") %></div>
         </div>
         <div class="stat">
-          <span class="big"><%= (@days_completed[r.id].to_f / Plan::DAYS * 100).round %>%</span>
+          <span class="big"><%= (@days_completed[r.id].to_f / Bible270::Plan::DAYS * 100).round %>%</span>
         </div>
       </div>
     <% end %>

data/app/views/bible270/readers/show.html.erb

@@ -3,15 +3,15 @@
   <%= b270_avatar(@reader, size: 56) %>
   <div>
     <h1 style="margin:0"><%= @reader.display_name %></h1>
-    <p style="margin:2px 0 0;color:var(--faint);font-size:14px"><%= @days_completed %> of <%= Plan::DAYS %> days complete · <%= @reader.completion_percent %>%</p>
+    <p style="margin:2px 0 0;color:var(--faint);font-size:14px"><%= @days_completed %> of <%= Bible270::Plan::DAYS %> days complete · <%= @reader.completion_percent %>%</p>
   </div>
 </div>
 
 <div class="b270-panel" style="margin-top:18px">
   <div class="b270-tracks">
-    <% [["ot", @reader.days_read_in("ot"), Plan::DAYS],
-        ["nt", @reader.days_read_in("nt"), Plan.nt_content_days],
-        ["pp", @reader.days_read_in("pp"), Plan::DAYS]].each do |track, read, total| %>
+    <% [["ot", @reader.days_read_in("ot"), Bible270::Plan::DAYS],
+        ["nt", @reader.days_read_in("nt"), Bible270::Plan.nt_content_days],
+        ["pp", @reader.days_read_in("pp"), Bible270::Plan::DAYS]].each do |track, read, total| %>
       <% t = b270_track(track) %>
       <div class="b270-tm">
         <span class="lab"><span class="b270-rib" style="background:<%= t[:color] %>"></span><%= t[:label] %></span>
@@ -23,7 +23,7 @@
 </div>
 
 <div class="b270-grid">
-  <% (1..Plan::DAYS).each do |d| %>
+  <% (1..Bible270::Plan::DAYS).each do |d| %>
     <%= link_to d, day_path(d), class: "b270-cell #{b270_day_status_class(@reader, d)}" %>
   <% end %>
 </div>

data/app/views/bible270/sessions/new.html.erb

@@ -5,6 +5,13 @@
    leave reflections alongside everyone else. Browsing the plan and reading others' reflections
    never requires an account.</p>
 
+<% if enrollment_closed? %>
+  <div class="b270-flash alert" style="margin-bottom:18px">
+    This run of the plan is closed to new readers. If you have taken part before, sign in with the
+    same email or account and you'll pick up where you left off.
+  </div>
+<% end %>
+
 <div class="b270-panel">
   <% if Bible270.config.email_sign_in? %>
     <h2 class="b270-subhead">Sign in with your email</h2>
@@ -13,14 +20,21 @@
     <%= form_with url: email_sign_in_link_path, method: :post, class: "b270-emailform" do |f| %>
       <%= hidden_field_tag :origin, @origin if @origin %>
       <% if Bible270.config.email_sign_in_ask_name %>
+        <p class="b270-hint" style="margin:0">
+          If you have read with us before, just your email is enough — we already know your name.
+        </p>
+        <label class="b270-field">
+          <span>First name <em>(new readers)</em></span>
+          <%= text_field_tag :first_name, params[:first_name], autocomplete: "given-name" %>
+        </label>
         <label class="b270-field">
-          <span>Name shown beside your reflections</span>
-          <%= text_field_tag :display_name, nil, placeholder: "e.g. Andrew", autocomplete: "name" %>
+          <span>Last name <em>(new readers)</em></span>
+          <%= text_field_tag :last_name, params[:last_name], autocomplete: "family-name" %>
         </label>
       <% end %>
       <label class="b270-field">
         <span>Email address</span>
-        <%= email_field_tag :email, nil, required: true, placeholder: "you@example.com",
+        <%= email_field_tag :email, params[:email], required: true, placeholder: "you@example.com",
               autocomplete: "email", inputmode: "email" %>
       </label>
       <%= f.submit "Email me a sign-in link", class: "b270-btn" %>

data/app/views/bible270/shared/_day_index.html.erb

@@ -0,0 +1,12 @@
+<% if Bible270::Plan::DAYS.positive? %>
+  <details class="b270-index">
+    <summary>All <%= Bible270::Plan::DAYS %> days</summary>
+    <div class="b270-grid">
+      <% today = signed_in? ? current_reader.current_day : nil %>
+      <% (1..Bible270::Plan::DAYS).each do |d| %>
+        <%= link_to d, day_path(d),
+              class: "b270-cell #{b270_day_status_class(current_reader, d)} #{'now' if d == today}" %>
+      <% end %>
+    </div>
+  </details>
+<% end %>

data/app/views/bible270/shared/_header.html.erb

@@ -7,7 +7,9 @@
     <%= link_to "Plan", root_path %>
     <%= link_to "Community", community_path %>
     <% if signed_in? %>
+      <% if Bible270.config.admin?(current_reader) %><%= link_to "Admin", admin_path %><% end %>
       <%= link_to current_reader.display_name, reader_path(current_reader), class: "b270-me" %>
+      <%= link_to "Profile", profile_path %>
       <%= button_to "Sign out", sign_out_path, method: :delete, class: "b270-linkbtn",
             form: { style: "display:inline" } %>
     <% elsif Bible270.config.any_sign_in_method? %>

data/app/views/bible270/shared/_styles.html.erb

@@ -7,6 +7,9 @@
     color:var(--ink); font-family:"Inter",system-ui,sans-serif; line-height:1.5; -webkit-font-smoothing:antialiased;
   }
   .b270 *{box-sizing:border-box}
+  /* Blanket anchor colour. NB: this is (0,1,1), so any single-class rule
+     colouring an <a> (.b270-btn, .b270-cell, .b270-arrow ...) must be
+     qualified with .b270 to outrank it, or the link inherits body colour. */
   .b270 a{color:inherit}
   .b270-wrap{max-width:820px;margin:0 auto;padding:clamp(14px,3.5vw,36px) clamp(14px,4vw,40px) 64px}
 
@@ -17,9 +20,16 @@
   .b270-nav{display:flex;align-items:center;gap:16px;font-size:14px}
   .b270-nav a{color:var(--muted);text-decoration:none}
   .b270-nav a:hover{color:var(--gold)}
+  /* button_to renders a form; make it a flex item so the button sits on the same
+     line as the links, and drop the margin/underline the shared class carries. */
+  .b270-nav form{display:flex;align-items:center;margin:0}
+  .b270-nav .b270-linkbtn{margin:0;padding:0;font-size:14px;color:var(--muted);text-decoration:none;line-height:1}
+  .b270-nav .b270-linkbtn:hover{color:var(--gold)}
   .b270-signin,.b270-me{color:var(--ink)!important;font-weight:600}
 
   .b270-subhead{font-family:"Spectral",serif;font-size:17px;font-weight:600;margin:0 0 4px}
+  .b270-avatarrow{display:flex;align-items:center;gap:14px}
+  .b270-avatarrow input[type=file]{font:inherit;font-size:13px;max-width:100%}
   .b270-emailform{display:grid;gap:12px;max-width:340px;margin:12px 0 0}
   .b270-field{display:grid;gap:5px;font-size:12.5px;color:var(--muted)}
   .b270-field input{font:inherit;font-size:15px;padding:10px 12px;border:1px solid var(--line);border-radius:9px;background:#fff;color:var(--ink);width:100%}
@@ -28,10 +38,10 @@
   .b270-or{display:flex;align-items:center;gap:12px;margin:22px 0 18px;color:var(--faint);font-size:12px;letter-spacing:.1em;text-transform:uppercase}
   .b270-or::before,.b270-or::after{content:"";flex:1;height:1px;background:var(--line-soft)}
   .b270-providers{display:grid;gap:10px;max-width:340px}
-  .b270-provider{display:block;width:100%;text-align:center;border:1px solid var(--line);background:#fff;color:var(--ink);border-radius:10px;padding:12px 16px;font:inherit;font-weight:600;font-size:14.5px;cursor:pointer;transition:border-color .15s,transform .05s}
+  .b270 .b270-provider{display:block;width:100%;text-align:center;border:1px solid var(--line);background:#fff;color:var(--ink);border-radius:10px;padding:12px 16px;font:inherit;font-weight:600;font-size:14.5px;cursor:pointer;transition:border-color .15s,transform .05s}
   .b270-provider:hover{border-color:var(--gold);color:var(--gold)}
   .b270-provider:active{transform:translateY(1px)}
-  .b270-signinbtn{border:1px solid var(--line);background:var(--card);color:var(--ink);border-radius:8px;padding:7px 13px;font:inherit;font-weight:600;font-size:13px;cursor:pointer}
+  .b270 .b270-signinbtn{border:1px solid var(--line);background:var(--card);color:var(--ink);border-radius:8px;padding:7px 13px;font:inherit;font-weight:600;font-size:13px;cursor:pointer}
   .b270-signinbtn:hover{border-color:var(--gold);color:var(--gold)}
   .b270-signin-hint a{color:var(--gold);font-weight:600}
   .b270-flash{border-radius:10px;padding:11px 15px;margin-bottom:18px;font-size:14px}
@@ -41,7 +51,7 @@
   .b270-eyebrow{font-size:12px;letter-spacing:.18em;text-transform:uppercase;color:var(--gold);font-weight:600;margin:0 0 10px}
   .b270 h1{font-family:"Spectral",serif;font-weight:600;font-size:clamp(28px,6vw,42px);line-height:1.03;letter-spacing:-.01em;margin:0 0 6px}
   .b270 h1 em{font-style:italic;color:var(--muted);font-weight:400}
-  .b270 .lede{color:var(--muted);max-width:54ch;margin:0 0 24px;font-size:15px}
+  .b270 .lede{color:var(--muted);max-width:77ch;margin:0 0 24px;font-size:15px}
 
   .b270-panel{background:var(--card);border:1px solid var(--line);border-radius:14px;padding:20px 22px;box-shadow:var(--shadow);margin-bottom:24px}
   .b270-bignum{display:flex;align-items:baseline;gap:10px;flex-wrap:wrap}
@@ -72,7 +82,7 @@
 
   /* day nav */
   .b270-daynav{display:flex;align-items:center;gap:10px;margin-bottom:12px}
-  .b270-arrow{width:38px;height:38px;border-radius:10px;border:1px solid var(--line);background:var(--card);cursor:pointer;font-size:17px;color:var(--muted);display:grid;place-items:center;text-decoration:none}
+  .b270 .b270-arrow{width:38px;height:38px;border-radius:10px;border:1px solid var(--line);background:var(--card);cursor:pointer;font-size:17px;color:var(--muted);display:grid;place-items:center;text-decoration:none}
   .b270-arrow:hover{border-color:var(--gold);color:var(--gold)}
   .b270-arrow.disabled{opacity:.35;pointer-events:none}
   .b270-dayhead{flex:1}
@@ -101,7 +111,7 @@
   .b270-ref a:hover{border-bottom-color:var(--gold)}
   .b270-reading.done .b270-ref{color:var(--muted)}
   .b270-reading.rest .b270-ref{font-style:italic;font-size:16px;color:var(--faint)}
-  .b270-signin-hint{font-size:12px;color:var(--faint)}
+  .b270 .b270-signin-hint{font-size:12px;color:var(--faint)}
 
   /* completers */
   .b270-completers{display:flex;align-items:center;gap:8px;flex-wrap:wrap;margin-top:16px;font-size:13px;color:var(--muted)}
@@ -118,7 +128,7 @@
   .b270-cdel{font-size:12px;color:var(--oxblood);background:none;border:none;cursor:pointer;padding:0;margin-left:8px}
   .b270-form textarea{width:100%;font:inherit;font-size:15px;border:1px solid var(--line);border-radius:10px;padding:11px 13px;background:#fff;resize:vertical;min-height:76px}
   .b270-form .row{display:flex;align-items:center;gap:10px;margin-top:10px}
-  .b270-btn{border:none;border-radius:10px;padding:10px 16px;font:inherit;font-weight:600;font-size:14px;cursor:pointer;background:var(--ink);color:var(--paper);text-decoration:none;display:inline-block}
+  .b270 .b270-btn{border:none;border-radius:10px;padding:10px 16px;font:inherit;font-weight:600;font-size:14px;cursor:pointer;background:var(--ink);color:var(--paper);text-decoration:none;display:inline-block}
   .b270-btn:hover{background:#3a352b}
 
   /* community */
@@ -133,7 +143,7 @@
 
   /* calendar grid */
   .b270-grid{display:grid;grid-template-columns:repeat(auto-fill,minmax(30px,1fr));gap:6px;margin-top:16px}
-  .b270-cell{aspect-ratio:1;border-radius:6px;border:1px solid var(--line);background:var(--card);font-size:10.5px;color:var(--faint);display:grid;place-items:center;text-decoration:none;font-variant-numeric:tabular-nums}
+  .b270 .b270-cell{aspect-ratio:1;border-radius:6px;border:1px solid var(--line);background:var(--card);font-size:10.5px;color:var(--faint);display:grid;place-items:center;text-decoration:none;font-variant-numeric:tabular-nums}
   .b270-cell:hover{border-color:var(--gold);color:var(--gold)}
   .b270-cell.partial{background:linear-gradient(135deg,var(--card) 50%,rgba(165,129,44,.35) 50%);color:var(--muted)}
   .b270-cell.complete{background:var(--teal);border-color:var(--teal);color:#eef3f2;font-weight:600}

data/app/views/layouts/bible270/application.html.erb

@@ -18,11 +18,9 @@
     <% if flash[:alert] %><div class="b270-flash alert"><%= flash[:alert] %></div><% end %>
     <% if flash[:notice] %><div class="b270-flash notice"><%= flash[:notice] %></div><% end %>
     <%= yield %>
+    <%= render 'bible270/shared/day_index' %>
     <footer class="b270-footer">
-      <p>The Old Testament and New Testament are each read once across the 270 days, with a
-         reading from all three tracks every day. Alongside them the Psalms run once and
-         Proverbs twice; the longest chapters are divided so the readings fill each day
-         evenly, and Psalm 119 comes in eleven sections.</p>
+      <p>The Old Testament, New Testament and Psalms/Proverbs are each read once across the 270 days. Long chapters are divided so the readings fill each day evenly, e.g. Psalm 119 comes in eleven sections.</p>
     </footer>
   </div>
 </body>

data/config/routes.rb

@@ -1,30 +1,50 @@
 # frozen_string_literal: true
+
 Bible270::Engine.routes.draw do
-  root to: "days#index"
+  root to: 'days#index'
+
+  get 'day/:day', to: 'days#show', as: :day, constraints: { day: %r{\d+} }
+
+  post   'day/:day/toggle/:track', to: 'checkoffs#toggle', as: :toggle_checkoff,
+                                   constraints: { day: %r{\d+} }
+  post   'day/:day/comments',      to: 'comments#create',  as: :day_comments,
+                                   constraints: { day: %r{\d+} }
+  delete 'comments/:id',           to: 'comments#destroy', as: :comment
+
+  # Admin panel — 404s unless config.admin_emails / admin_resolver allows you.
+  get    'admin',                        to: 'admin#index',            as: :admin
+  get    'admin/readers/:id',            to: 'admin#show',             as: :admin_reader
+  delete 'admin/readers/:id',            to: 'admin#destroy'
+  patch  'admin/readers/:id/name',       to: 'admin#update_name',      as: :admin_reader_name
+  patch  'admin/readers/:id/start',      to: 'admin#update_start',     as: :admin_reader_start
+  patch  'admin/readers/:id/through',    to: 'admin#complete_through', as: :admin_reader_through
+  post   'admin/readers/:id/days/:day',  to: 'admin#toggle_day',       as: :admin_reader_day
 
-  get "day/:day", to: "days#show", as: :day, constraints: { day: /\d+/ }
+  patch  'admin/enrollment',             to: 'admin#update_enrollment', as: :admin_enrollment
+  get    'admin/comments',               to: 'admin#comments',         as: :admin_comments
+  patch  'admin/comments/:id/hide',      to: 'admin#hide_comment',     as: :admin_hide_comment
+  patch  'admin/comments/:id/unhide',    to: 'admin#unhide_comment',   as: :admin_unhide_comment
+  delete 'admin/comments/:id',           to: 'admin#destroy_comment',  as: :admin_comment
 
-  post   "day/:day/toggle/:track", to: "checkoffs#toggle", as: :toggle_checkoff,
-         constraints: { day: /\d+/ }
-  post   "day/:day/comments",      to: "comments#create",  as: :day_comments,
-         constraints: { day: /\d+/ }
-  delete "comments/:id",           to: "comments#destroy", as: :comment
+  get   'profile',                       to: 'profiles#edit', as: :profile
+  patch 'profile',                       to: 'profiles#update'
+  delete 'profile/avatar', to: 'profiles#remove_avatar', as: :profile_avatar
 
-  get "community",  to: "readers#index", as: :community
-  get "readers/:id", to: "readers#show", as: :reader
+  get 'community', to: 'readers#index', as: :community
+  get 'readers/:id', to: 'readers#show', as: :reader
 
-  patch  "start-date", to: "readers#update_start_date", as: :start_date
-  delete "start-date", to: "readers#clear_start_date",  as: :clear_start_date
+  patch  'start-date', to: 'readers#update_start_date', as: :start_date
+  delete 'start-date', to: 'readers#clear_start_date',  as: :clear_start_date
 
   # Built-in OmniAuth sign-in. The request phase (POST <mount>/auth/:provider)
   # is handled by the OmniAuth middleware in the host app, not by these routes.
-  get    "sign_in",                 to: "sessions#new",     as: :sign_in
+  get    'sign_in',                 to: 'sessions#new',     as: :sign_in
 
   # Email (magic link) sign-in, for readers without a social account.
-  post   "sign_in/email",           to: "sessions#email_link",     as: :email_sign_in_link
-  get    "sign_in/email/:token",    to: "sessions#email_callback", as: :email_sign_in
-  get    "auth/:provider/callback", to: "sessions#create"
-  post   "auth/:provider/callback", to: "sessions#create"
-  get    "auth/failure",            to: "sessions#failure"
-  delete "sign_out",                to: "sessions#destroy", as: :sign_out
+  post   'sign_in/email',           to: 'sessions#email_link',     as: :email_sign_in_link
+  get    'sign_in/email/:token',    to: 'sessions#email_callback', as: :email_sign_in
+  get    'auth/:provider/callback', to: 'sessions#create'
+  post   'auth/:provider/callback', to: 'sessions#create'
+  get    'auth/failure',            to: 'sessions#failure'
+  delete 'sign_out',                to: 'sessions#destroy', as: :sign_out
 end

data/db/migrate/20260101000001_create_bible270_readers.rb

@@ -1,4 +1,5 @@
 # frozen_string_literal: true
+
 class CreateBible270Readers < ActiveRecord::Migration[7.0]
   def change
     create_table :bible270_readers do |t|
@@ -8,10 +9,10 @@ class CreateBible270Readers < ActiveRecord::Migration[7.0]
       t.string  :provider
       t.string  :uid
       t.references :owner, polymorphic: true, index: true
-      t.date    :started_on
+      t.date :started_on
       t.timestamps
     end
     add_index :bible270_readers, %i[provider uid], unique: true,
-              name: "idx_b270_readers_provider_uid"
+                                                   name: 'idx_b270_readers_provider_uid'
   end
 end

data/db/migrate/20260101000002_create_bible270_checkoffs.rb

@@ -1,15 +1,16 @@
 # frozen_string_literal: true
+
 class CreateBible270Checkoffs < ActiveRecord::Migration[7.0]
   def change
     create_table :bible270_checkoffs do |t|
       t.references :reader, null: false, index: true,
-                   foreign_key: { to_table: :bible270_readers }
+                            foreign_key: { to_table: :bible270_readers }
       t.integer :day,   null: false
       t.string  :track, null: false
       t.timestamps
     end
     add_index :bible270_checkoffs, %i[reader_id day track], unique: true,
-              name: "idx_b270_checkoffs_unique"
+                                                            name: 'idx_b270_checkoffs_unique'
     add_index :bible270_checkoffs, :day
   end
 end

data/db/migrate/20260101000003_create_bible270_comments.rb

@@ -1,12 +1,13 @@
 # frozen_string_literal: true
+
 class CreateBible270Comments < ActiveRecord::Migration[7.0]
   def change
     create_table :bible270_comments do |t|
       t.references :reader, null: false, index: true,
-                   foreign_key: { to_table: :bible270_readers }
-      t.integer :day,   null: false
+                            foreign_key: { to_table: :bible270_readers }
+      t.integer :day, null: false
       t.string  :track
-      t.text    :body,  null: false
+      t.text    :body, null: false
       t.timestamps
     end
     add_index :bible270_comments, %i[day created_at]

data/db/migrate/20260101000004_create_bible270_sign_in_tokens.rb

@@ -1,18 +1,19 @@
 # frozen_string_literal: true
+
 class CreateBible270SignInTokens < ActiveRecord::Migration[7.0]
   def change
     create_table :bible270_sign_in_tokens do |t|
       t.string   :email,        null: false
       t.string   :token_digest, null: false
       t.string   :display_name
-      t.datetime :expires_at,   null: false
+      t.datetime :expires_at, null: false
       t.datetime :consumed_at
       t.timestamps
     end
 
     add_index :bible270_sign_in_tokens, :token_digest, unique: true,
-              name: "idx_b270_signin_tokens_digest"
+                                                       name: 'idx_b270_signin_tokens_digest'
     add_index :bible270_sign_in_tokens, %i[email created_at],
-              name: "idx_b270_signin_tokens_email"
+              name: 'idx_b270_signin_tokens_email'
   end
 end

data/db/migrate/20260101000005_add_names_to_bible270_readers.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+class AddNamesToBible270Readers < ActiveRecord::Migration[7.0]
+  def change
+    add_column :bible270_readers, :first_name, :string
+    add_column :bible270_readers, :last_name, :string
+    add_column :bible270_sign_in_tokens, :first_name, :string
+    add_column :bible270_sign_in_tokens, :last_name, :string
+
+    add_index :bible270_readers, %i[last_name first_name], name: 'idx_b270_readers_name'
+  end
+end

data/db/migrate/20260101000006_add_approval_to_bible270_comments.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+class AddApprovalToBible270Comments < ActiveRecord::Migration[7.0]
+  def change
+    # Reflections are visible as soon as they are written; moderation is for
+    # taking something down after the fact, not for gatekeeping every post.
+    add_column :bible270_comments, :approved, :boolean, null: false, default: true
+    add_column :bible270_comments, :moderated_at, :datetime
+    add_index :bible270_comments, %i[approved day]
+  end
+end

data/db/migrate/20260101000007_create_bible270_settings.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+class CreateBible270Settings < ActiveRecord::Migration[7.0]
+  def change
+    # A tiny key/value store for state an admin can change at runtime. Closing a
+    # run to new readers can't live in config, since that would need a deploy.
+    create_table :bible270_settings do |t|
+      t.string :key,   null: false
+      t.string :value
+      t.timestamps
+    end
+
+    add_index :bible270_settings, :key, unique: true, name: 'idx_b270_settings_key'
+  end
+end

data/lib/bible270/avatars.rb

@@ -0,0 +1,46 @@
+# frozen_string_literal: true
+
+module Bible270
+  # What counts as an acceptable avatar. Kept free of Rails and of Active Storage
+  # so the rules can be unit tested, and so the engine still loads in an app that
+  # has Active Storage disabled.
+  module Avatars
+    CONTENT_TYPES = %w[image/png image/jpeg image/gif image/webp].freeze
+
+    # Two megabytes. Large enough for a photo off a phone, small enough that
+    # nobody's profile page crawls.
+    DEFAULT_MAX_BYTES = 2 * 1024 * 1024
+
+  module_function
+
+    def content_types = CONTENT_TYPES
+
+    def max_bytes
+      configured = Bible270.config.avatar_max_bytes if Bible270.config.respond_to?(:avatar_max_bytes)
+      configured.to_i.positive? ? configured.to_i : DEFAULT_MAX_BYTES
+    end
+
+    def acceptable_type?(content_type)
+      CONTENT_TYPES.include?(content_type.to_s.downcase.split(';').first.to_s.strip)
+    end
+
+    def acceptable_size?(byte_size)
+      size = byte_size.to_i
+      size.positive? && size <= max_bytes
+    end
+
+    # nil when the upload is fine, otherwise the reason — phrased for a reader.
+    def problem_with(content_type:, byte_size:)
+      return 'must be a PNG, JPEG, GIF or WebP image' unless acceptable_type?(content_type)
+      return 'looks empty' unless byte_size.to_i.positive?
+      return "must be under #{human_size(max_bytes)}" unless acceptable_size?(byte_size)
+
+      nil
+    end
+
+    def human_size(bytes)
+      mb = bytes.to_f / (1024 * 1024)
+      mb >= 1 ? "#{format('%g', mb.round(1))}MB" : "#{(bytes.to_f / 1024).round}KB"
+    end
+  end
+end