bible270 0.10.0 → 0.11.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: caabc409caaf37d3eeb8a0dd6d0cddba68889fd8deb914e9755c5bb67a571b65
-  data.tar.gz: 0dbe187325f50430c2e689307f521b4c2854980de9e409ffc667aaa30eb0102f
+  metadata.gz: 84d3ca14b2813767c7f837ec1844feaaff31b1ac12e37d691c95b8975313a9e9
+  data.tar.gz: 69374a41cfaed437a5bb0367ac66b7500949cda2654e9f80e5ab46f9f8822547
 SHA512:
-  metadata.gz: 36bcfb1789a6a6248f4cbfb2e30e8b86878535295958720d121837816e2b7eb243c340002b39d189b10f4496dda2ff5da9915d3c55b50eaa0bb0eead710d450e
-  data.tar.gz: c72aaa3f95ab86a4e5139a1d8c7e46e2762c8d9d796b84203fbd8c99ecc153158a1ce6cc1375ac4048025f6c9f93c0f918f3f923677ccaa13d16983ed24e5b70
+  metadata.gz: 71c2ef21eb61bb68359ed3cd202ecc0278082cc97a18e4f9886093799d065409fd0529775edeb1a42f33d25a6ceaac702f44d7c53b59fda82e2c91d894cb704f
+  data.tar.gz: 1cbd38d2f361892bb1cab9f981986598d3d03bc2c04ce63506d60907aca58b57ffd96f2dc9f607ead5dc1c6966086954898e60b7826955b9960c769aa8b8c26e

data/CHANGELOG.md

@@ -7,11 +7,66 @@ this project uses [Semantic Versioning](https://semver.org/spec/v2.0.0.html), tr
 
 See the changes since the last release:
 
-**[Full Changelog](https://github.com/avonderluft/bible270/compare/v0.10.0...main)**
+**[Full Changelog](https://github.com/avonderluft/bible270/compare/v0.11.0...main)**
+
+## [0.11.0] — 2026-07-28
+ 
+### Added
+
+- **Readers can edit their own name and picture** at `<mount>/profile`, linked from the nav. An admin
+  can edit anyone's from that reader's admin page. Both go through one rule (`Bible270::Names`):
+  first and last required, whitespace squished, display name derived — so internal capitals and
+  particles survive (`vonderLuft`, `von der Luft`). A reader who arrived via OmniAuth with only a
+  display name gets the form pre-filled by splitting it.
+- **Avatar uploads** — PNG, JPEG, GIF or WebP up to `config.avatar_max_bytes` (2MB), with a Remove
+  button. SVG is refused, since it can carry script. Needs Active Storage in the host app; without it
+  the field is hidden, the engine still loads, and avatars come from the sign-in provider as before.
+  No resizing: the original is served at CSS dimensions.
+- **A run can be closed to new readers** from the admin panel. Existing readers carry on signing in;
+  nobody new can join. Enforced at all three points a reader can be created — the OmniAuth callback,
+  issuing an email link, and consuming one. Runtime state in a new `bible270_settings` table, so it
+  needs no deploy; `config.enrollment_open = false` launches closed.
+- The **All 270 days** index now appears on every page, rendered from the layout rather than only on
+  the overview.
+
+### Changed
+
+- **A returning reader needs only their email to sign in.** Names are optional on the sign-in form; a
+  new reader is asked for theirs on their profile straight after clicking the link. Requiring them
+  only for unknown addresses would have made the response differ between a known and an unknown one,
+  which is an account-enumeration oracle — and the closed-run banner exists for the same reason.
+- Closing a run says so on the sign-in page before anyone types, since the "check your inbox"
+  response deliberately cannot distinguish a known address from an unknown one.
+
+### Fixed
+
+- Setting a reader's start date from the admin panel failed with "That doesn't look like a date"
+  whenever `config.allow_reader_start_date` was off. That setting governs what a *reader* may change
+  about their own plan and was wrongly gating the admin action, which now uses an ungated setter.
+- The day grid ran a query per day (`read_tracks_for`), so its 270 cells cost up to 270 queries. It
+  now reads the reader's single grouped count — which matters more now the grid is on every page.
+- The nav's "Sign out" sat below the other items: `button_to` renders a form, and the shared
+  `.b270-linkbtn` class carries a top margin, smaller font and underline meant for use under a form.
+- `Bible270::Configuration` referenced `Avatars` without requiring it, so instantiating it raised
+  `NameError` unless something else had already loaded avatars — which the app did by luck of require
+  order and the test suite did not.
+
+### Internal
+
+- Tests now guard the classes of bug that bit during this run: every file under `lib/` must load on
+  its own *and* survive instantiating the configuration; every setting the code calls must exist on
+  `Configuration`; templates must not reference engine constants unqualified; a coloured link class
+  must outrank `.b270 a`; admin actions must not use reader-gated methods; and closure must be
+  enforced at all three creation points.
+- Migrations: `20260101000007` (settings). Active Storage tables are the host app's
+  (`bin/rails active_storage:install`).
 
 ## [0.10.0] — 2026-07-26
 
+**[Full Changelog](https://github.com/avonderluft/bible270/compare/v0.9.0...v0.10.0)**
+
 ### Reading plan
+
 - **Proverbs is read once**, not twice, and its longer chapters are divided — at the discourse
   boundaries in chapters 1–9 and 30–31, evenly elsewhere, since 10–29 are collections of
   independent sayings.
@@ -31,6 +86,7 @@ See the changes since the last release:
   changes. Precedence: constant < config < file.
 
 ### Features
+
 - **Interactive installer** — `bin/rails generate bible270:install` asks where to mount, which
   sign-in methods to enable, writes the initializers, adds the `mount` line, copies the migrations
   and runs them. Scriptable with `--defaults` and friends.
@@ -49,6 +105,7 @@ See the changes since the last release:
   delete it outright, from a list filterable by visible/hidden or from the writer's own page.
 
 ### Fixed
+
 - Sign-in was broken: OmniAuth 2.0+ rejects GET on its request phase, so the controls are now POST
   forms with CSRF tokens. Open-redirect hardening on the return-to path, and `reset_session` on
   sign-in and sign-out.
@@ -77,6 +134,7 @@ See the changes since the last release:
   accessor fails the suite instead of raising `NoMethodError` on whichever request touches it.
 
 ### Notes
+
 - Table names changed from `bible_reading_plan_*` in the 0.9.0 line; this is a fresh install.
 
 ## [0.9.0] — 2026-07-25
@@ -176,6 +234,7 @@ This is the initial public release.
 
 * Email sign-in requires working Action Mailer delivery in the host application. Set `config.mailer_from`; delivery is inline by default, or set `email_sign_in_deliver_later` when a queue backend is available.
 
+[0.11.0]: https://github.com/avonderluft/bible270/releases/tag/v0.10.0
 [0.10.0]: https://github.com/avonderluft/bible270/releases/tag/v0.10.0
 [0.9.0]: https://github.com/avonderluft/bible270/releases/tag/v0.9.0
 [0.6.2]: https://github.com/avonderluft/bible270/releases/tag/v0.6.2

data/README.md

@@ -1,18 +1,18 @@
 # Bible 270
 
-[![Gem Version](https://badge.fury.io/rb/bible270.svg)](https://badge.fury.io/rb/bible270) [![Gem Downloads](https://img.shields.io/gem/dt/bible270.svg?style=flat)](http://rubygems.org/gems/bible270) [![GitHub Release Date - Published_At](https://img.shields.io/github/release-date/avonderluft/bible270?label=last%20release&color=seagreen)](https://github.com/avonderluft/bible270/releases)
+[![Gem Version](https://badge.fury.io/rb/bible270.svg?refresh=1)](https://badge.fury.io/rb/bible270) [![Gem Downloads](https://img.shields.io/gem/dt/bible270.svg?style=flat)](http://rubygems.org/gems/bible270) [![GitHub Release Date - Published_At](https://img.shields.io/github/release-date/avonderluft/bible270?label=last%20release&color=seagreen)](https://github.com/avonderluft/bible270/releases)
 
 A mountable **Rails engine** that drops a 270-day (9 month) interactive Bible reading plan into any Rails app, built with [ComfortableMediaSurfer](https://github.com/shakacode/comfortable-media-surfer) CMS in mind. Readers tick off each day's readings, post reflections, and see how everyone else is getting on, much like the social plans on Bible.com.
 
-Initially created for use by students and faculty of [Kingdom Movement School of Ministry](https://www.kmsm.life/), to read through all of Scripture together, during the school year. Thus it is potentially useful for any Bible School, Seminary, or Discipleship school with a 9 month school year.
+Initially created for use by students and faculty of [Kingdom Movement School of Ministry](https://www.kmsm.life/), to read through all of Scripture together during the school year. Thus it is potentially useful for any Bible School, Seminary, or Discipleship school working on a 9 month schedule.
 
 ## The plan
 
 Three readings a day, sized by **verse count** so each day takes roughly the same time.
 
-- **Old Testament** — once through, with Psalms and Proverbs live in their own track. Whole chapters grouped so each day is ~73 verses (range 38–116).
-- **New Testament** — once through, a reading every day. 260 chapters over 270 days, so the 10 longest are halved (Luke 1, Matthew 26–27, Mark 14, Luke 9, 12, 22, John 6,8, Acts 7).
-- **Psalms & Proverbs** — once each, interleaved in one track. 181 chapters have to cover 270 days, so 89 are divided, shared between the two books by verse load. **A psalm of 25 verses or fewer is never divided**, keeping 131 of the 150 whole; longer psalms and Proverbs chapters break at their turns of thought (see `CHAPTER_BREAKS`). **Psalm 119 is 11 sections of 16 verses** — two of its eight-verse acrostic stanzas each. Proverbs lands on 89 days, near its proportional share. **A divided chapter is always read on consecutive days**, so nothing is inserted between the parts of a split psalm.
+- **Old Testament** — once through, with Psalms and Proverbs in their own track. 
+- **New Testament** — once through, a reading every day. 260 chapters over 270 days, long chapters are divided to even out the daily reading
+- **Psalms & Proverbs** — once each, interleaved in one track. 181 chapters have to cover 270 days, so some are divided, shared between the two books by verse load. **A psalm of 25 verses or fewer is never divided**, keeping 131 of the 150 whole; longer psalms and Proverbs chapters break at their turns of thought (see `CHAPTER_BREAKS`). **Psalm 119 is 11 sections of 16 verses** — two of its eight-verse acrostic stanzas each. Proverbs lands on 89 days, near its proportional share. **A divided chapter is always read on consecutive days**, so nothing is inserted between the parts of a split psalm.
 
 Genesis → Malachi and Revelation 22 both land on day 270, as does the second Proverbs 31 — the first falls on day 135, the midpoint. Psalm 150 comes in on day 269. Every day carries all three tracks. A typical day is ~119 verses (range 76–175).
 
@@ -20,7 +20,7 @@ The schedule is pure deterministic Ruby (`Bible270::Plan`) — none of it is sto
 
 ## Requirements
 
-- **Ruby** >= 3.0. Plain Ruby, no C extensions. Runs on 4.0.6 — it avoids everything 4.0 dropped or unbundled (notably `cgi`; URL escaping uses `URI.encode_www_form_component`).
+- **Ruby** >= 3.2. Plain Ruby, no C extensions. Runs on 4.0.6 — it avoids everything 4.0 dropped or unbundled (notably `cgi`; URL escaping uses `URI.encode_www_form_component`).
 - **Rails** >= 7.0. On Ruby 4.0 your host app is the real constraint, not this engine — check your lockfile with RailsBump first.
 - A host app, and Turbo if you want check-offs without a page reload.
 
@@ -295,8 +295,10 @@ Bible270.configure do |config|
   config.mount_at = "/daily-bread"         # single source of truth for the path
   config.app_name = "Daily Bread"
   config.tagline  = "A 270-day journey through Scripture"
+  config.admin_emails = %w[andrew@example.org]
 
-  config.start_date = nil                  # community start date, or nil for undated
+  # config.start_date = nil       # community start date, or nil for undated
+  config.start_date = Date.new(2026, 9, 6)  
   config.allow_reader_start_date = true
 
   config.parent_controller = "ActionController::Base"   # or "::ApplicationController"

data/app/controllers/bible270/admin_controller.rb

@@ -9,10 +9,25 @@ module Bible270
   # so its existence isn't advertised.
   class AdminController < ApplicationController
     before_action :require_admin!
-    before_action :load_reader, only: %i[show destroy update_start complete_through toggle_day]
+    before_action :load_reader,
+                  only: %i[show destroy update_start update_name complete_through toggle_day]
     before_action :load_comment, only: %i[hide_comment unhide_comment destroy_comment]
 
+    # ---- enrolment --------------------------------------------------------
+
+    def update_enrollment
+      if params[:state] == 'closed'
+        Setting.close_enrollment!
+        redirect_to admin_path, notice: 'Closed to new readers. Existing readers can still sign in.'
+      else
+        Setting.open_enrollment!
+        redirect_to admin_path, notice: 'Open to new readers.'
+      end
+    end
+
     def index
+      @enrollment_closed = Setting.enrollment_closed?
+      @enrollment_closed_at = Setting.enrollment_closed_at
       @readers = Reader.all.to_a.sort_by(&:sort_name)
       counts = Checkoff.group(:reader_id, :day).count
       @days_completed = Hash.new(0)
@@ -62,10 +77,15 @@ module Bible270
     # Put the reader on a given day as of today, or set an explicit start date.
     def update_start
       if params[:start_date].present?
-        if @reader.update_start_date!(params[:start_date])
-          redirect_to admin_reader_path(@reader), notice: 'Start date updated.'
+        # set_start_date!, not update_start_date!: an admin is not subject to
+        # config.allow_reader_start_date, which governs what readers may do to
+        # their own dates.
+        if @reader.set_start_date!(params[:start_date])
+          redirect_to admin_reader_path(@reader),
+                      notice: "Start date set to #{@reader.started_on.strftime('%B %-d, %Y')}."
         else
-          redirect_to admin_reader_path(@reader), alert: "That doesn't look like a date."
+          redirect_to admin_reader_path(@reader),
+                      alert: "Couldn't read #{params[:start_date].inspect} as a date."
         end
       elsif params[:day].present? && @reader.restart_on!(day: params[:day])
         redirect_to admin_reader_path(@reader),
@@ -75,6 +95,14 @@ module Bible270
       end
     end
 
+    def update_name
+      if @reader.update_names(params[:first_name], params[:last_name])
+        redirect_to admin_reader_path(@reader), notice: 'Name updated.'
+      else
+        redirect_to admin_reader_path(@reader), alert: 'Both a first and last name are needed.'
+      end
+    end
+
     def complete_through
       day = params[:day].to_i
       if @reader.mark_through!(day)

data/app/controllers/bible270/application_controller.rb

@@ -20,7 +20,7 @@ module Bible270
 
     layout :bible270_layout
 
-    helper_method :current_reader, :signed_in?, :b270_config
+    helper_method :current_reader, :signed_in?, :b270_config, :enrollment_closed?
 
   private
 
@@ -28,6 +28,10 @@ module Bible270
       Bible270.config.layout
     end
 
+    def enrollment_closed?
+      Setting.enrollment_closed?
+    end
+
     def b270_config
       Bible270.config
     end

data/app/controllers/bible270/profiles_controller.rb

@@ -0,0 +1,45 @@
+# frozen_string_literal: true
+
+module Bible270
+  # A reader editing their own name — the one thing about themselves they can
+  # change. Everything else about a reader comes from how they signed in.
+  class ProfilesController < ApplicationController
+    before_action :require_signed_in_reader
+
+    def edit
+      @names = current_reader.suggested_names
+    end
+
+    def update
+      problems = []
+      problems << 'both a first and last name' unless current_reader.update_names(params[:first_name],
+                                                                                  params[:last_name])
+      if params[:avatar].present? && !current_reader.attach_avatar(params[:avatar])
+        problems << (current_reader.errors[:avatar].first || 'a valid image')
+      end
+
+      if problems.empty?
+        redirect_to reader_path(current_reader), notice: 'Your profile has been updated.'
+      else
+        @names = { first_name: params[:first_name], last_name: params[:last_name] }
+        flash.now[:alert] = "Please give #{problems.to_sentence}."
+        render :edit, status: :unprocessable_entity
+      end
+    end
+
+    def remove_avatar
+      current_reader.remove_avatar!
+      redirect_to profile_path, notice: 'Your picture has been removed.'
+    end
+
+  private
+
+    # Unlike checking off a reading, there is nothing sensible to do here for a
+    # visitor who isn't signed in, so send them to sign in rather than 404.
+    def require_signed_in_reader
+      return if signed_in?
+
+      redirect_to sign_in_path(origin: request.fullpath), alert: 'Please sign in first.'
+    end
+  end
+end

data/app/controllers/bible270/sessions_controller.rb

@@ -21,6 +21,10 @@ module Bible270
       auth = request.env['omniauth.auth']
       redirect_to(sign_in_path, alert: "Sign in didn't complete. Please try again.") and return unless auth
 
+      if enrollment_closed? && !Reader.omniauth_reader_exists?(auth['provider'], auth['uid'])
+        redirect_to(sign_in_path, alert: enrollment_closed_message) and return
+      end
+
       reader = Reader.from_omniauth(auth)
       redirect_to(sign_in_path, alert: "We couldn't set up your reader profile.") and return unless reader&.persisted?
 
@@ -60,17 +64,18 @@ module Bible270
                     alert: "That doesn't look like an email address — please check and try again.") and return
       end
 
-      first_name = params[:first_name].to_s.strip
-      last_name  = params[:last_name].to_s.strip
-
-      if Bible270.config.email_sign_in_require_name && (first_name.empty? || last_name.empty?)
-        redirect_to(sign_in_path(origin: origin, email: address),
-                    alert: 'Please give both your first and last name.') and return
-      end
+      # Names are optional here. Requiring them only for unknown addresses would
+      # make the response differ, which tells a stranger whether an address
+      # already has an account. A new reader is asked for their name after they
+      # click the link instead (see email_callback).
+      names = Names.normalize(params[:first_name], params[:last_name])
 
-      _record, raw = SignInToken.issue!(address, first_name: first_name, last_name: last_name)
+      _record, raw = SignInToken.issue!(address, first_name: names&.dig(:first_name),
+                                                last_name: names&.dig(:last_name))
 
-      if raw
+      if raw && enrollment_closed? && !Reader.email_reader_exists?(address)
+        Rails.logger.info("[bible270] enrolment closed; no link sent to #{address}")
+      elsif raw
         deliver_sign_in_link(address, email_sign_in_url(token: raw, origin: origin))
       else
         # Silent to the reader by design; say so in the log or this is undebuggable.
@@ -92,8 +97,12 @@ module Bible270
                     alert: 'That link has expired or was already used. Please request a new one.') and return
       end
 
+      if enrollment_closed? && !Reader.email_reader_exists?(token.email)
+        redirect_to(sign_in_path, alert: enrollment_closed_message) and return
+      end
+
       reader = Reader.from_email(token.email, first_name: token.first_name,
-                                              last_name: token.last_name, display_name: token.display_name)
+                                 last_name: token.last_name, display_name: token.display_name)
       redirect_to(sign_in_path, alert: "We couldn't set up your reader profile.") and return unless reader&.persisted?
 
       destination = safe_origin(params[:origin]) || after_sign_in_path
@@ -102,6 +111,12 @@ module Bible270
       session[:bible270_reader_id] = reader.id
       @current_reader = reader
 
+      if name_needed?(reader)
+        redirect_to(profile_path,
+                    notice: 'Welcome. Please add your name, so others know who they are reading with.')
+        return
+      end
+
       redirect_to destination, notice: "Welcome, #{reader.display_name}."
     end
 
@@ -137,6 +152,20 @@ module Bible270
       Rails.env.development? || Rails.env.test?
     end
 
+    # A reader who signed in by email and still has no first/last name. Applies
+    # only to email sign-in: an OmniAuth reader carries whatever name their
+    # provider gave.
+    def name_needed?(reader)
+      Bible270.config.email_sign_in_require_name &&
+        reader.provider == 'email' &&
+        reader.full_name.nil?
+    end
+
+    def enrollment_closed_message
+      'This run of the plan is closed to new readers. If you have taken part before, ' \
+        'sign in with the same email or account.'
+    end
+
     # Only ever redirect within this app, and never back into an auth route.
     def safe_origin(value)
       value = value.to_s

data/app/helpers/bible270/plan_helper.rb

@@ -24,9 +24,18 @@ module Bible270
       Bible270.config.passage_url_builder.call(reference, Bible270.config.bible_version)
     end
 
+    # An uploaded avatar wins over whatever the sign-in provider gave us.
+    # Active Storage routes live in the host app, hence main_app.
+    def b270_avatar_src(reader)
+      return main_app.rails_blob_path(reader.avatar, only_path: true) if reader.avatar_uploaded?
+
+      reader.avatar_url.presence
+    end
+
     def b270_avatar(reader, size: 34)
-      if reader.avatar_url.present?
-        image_tag reader.avatar_url, class: 'b270-avatar', width: size, height: size, alt: reader.display_name
+      src = b270_avatar_src(reader)
+      if src
+        image_tag src, class: 'b270-avatar', width: size, height: size, alt: reader.display_name
       else
         content_tag :span, reader.initials, class: 'b270-avatar b270-avatar-fallback',
                                             style: "width:#{size}px;height:#{size}px;line-height:#{size}px"
@@ -36,12 +45,10 @@ module Bible270
     def b270_day_status_class(reader, day)
       return '' unless reader
 
-      if reader.day_complete?(day)
-        'complete'
-      elsif reader.read_tracks_for(day).any?
-        'partial'
-      else
-        ''
+      case reader.day_status(day)
+      when :complete then 'complete'
+      when :partial  then 'partial'
+      else ''
       end
     end
   end

data/app/models/bible270/reader.rb

@@ -10,6 +10,14 @@ module Bible270
     has_many :comments,  class_name: 'Bible270::Comment',  dependent: :destroy
     belongs_to :owner, polymorphic: true, optional: true
 
+    # Active Storage is optional: an app may have it disabled, and the engine has
+    # to keep working there — readers simply can't upload, and any avatar from
+    # their sign-in provider is used instead.
+    AVATAR_UPLOADS = respond_to?(:has_one_attached)
+    has_one_attached :avatar if AVATAR_UPLOADS
+
+    def self.avatar_uploads? = AVATAR_UPLOADS
+
     validates :display_name, presence: true
     validates :uid, uniqueness: { scope: :provider }, allow_nil: true
 
@@ -37,6 +45,21 @@ module Bible270
     # Find or create the reader behind a verified email address. Uses the same
     # provider/uid identity columns as OmniAuth, with provider "email", so an
     # email reader is indistinguishable from any other downstream.
+    # Used when enrolment is closed: an existing reader may still sign in, a new
+    # one may not be created.
+    def self.email_reader_exists?(email)
+      address = EmailSignIn.normalize_email(email)
+      return false if address.nil?
+
+      exists?(provider: 'email', uid: address)
+    end
+
+    def self.omniauth_reader_exists?(provider, uid)
+      return false if provider.blank? || uid.blank?
+
+      exists?(provider: provider.to_s, uid: uid.to_s)
+    end
+
     def self.from_email(email, first_name: nil, last_name: nil, display_name: nil)
       address = EmailSignIn.normalize_email(email)
       return nil if address.nil?
@@ -87,6 +110,29 @@ module Bible270
       [last_name, first_name].map { |n| n.to_s.strip.downcase }.join(' ').strip.presence || display_name.to_s.downcase
     end
 
+    def avatar_uploaded?
+      self.class.avatar_uploads? && avatar.attached?
+    end
+
+    # Returns false and sets an error when the upload isn't acceptable.
+    def attach_avatar(upload)
+      return false unless self.class.avatar_uploads?
+
+      problem = Avatars.problem_with(content_type: upload.content_type, byte_size: upload.size)
+      if problem
+        errors.add(:avatar, problem)
+        return false
+      end
+
+      avatar.attach(upload)
+      true
+    end
+
+    def remove_avatar!
+      avatar.purge if avatar_uploaded?
+      true
+    end
+
     def initials
       display_name.to_s.split(%r{\s+}).first(2).map { |w| w[0] }.join.upcase.presence || '?'
     end
@@ -96,6 +142,20 @@ module Bible270
       @checked_counts ||= checkoffs.group(:day).count
     end
 
+    # Tracks ticked on a day, counted from the single grouped query in
+    # checked_counts. Use this rather than read_tracks_for when rendering a grid:
+    # read_tracks_for costs a query per day, which is 270 of them per page.
+    def checked_count(day)
+      checked_counts[day].to_i
+    end
+
+    def day_status(day)
+      done = checked_count(day)
+      return :none if done.zero?
+
+      done >= Plan.required_track_count(day) ? :complete : :partial
+    end
+
     def read_tracks_for(day)
       checkoffs.where(day: day).pluck(:track)
     end
@@ -127,6 +187,23 @@ module Bible270
     end
 
     # Day number implied by the calendar, if a start date is set.
+    # Set the name shown beside this reader's reflections. Returns false when
+    # either half is missing, so callers can re-render with a message.
+    def update_names(first, last)
+      names = Names.normalize(first, last)
+      return false if names.nil?
+
+      update(**names)
+    end
+
+    # Fill first/last from the display name where we only have one string, e.g.
+    # a reader who arrived through OmniAuth.
+    def suggested_names
+      return { first_name: first_name, last_name: last_name } if full_name
+
+      Names.split(display_name) || { first_name: display_name, last_name: nil }
+    end
+
     # ---- administrative adjustments --------------------------------------
 
     # Tick every track that has content on this day.
@@ -248,15 +325,24 @@ module Bible270
       started_on
     end
 
-    def update_start_date!(value)
-      return false unless Bible270.config.allow_reader_start_date
-
+    # Set the start date regardless of whether readers are allowed to set their
+    # own. For administrative use: config.allow_reader_start_date governs what a
+    # reader may do to themselves, not what an admin may do on their behalf.
+    # Returns false only when the value isn't a date.
+    def set_start_date!(value)
       date = Plan.to_date(value)
       return false if date.nil?
 
       update!(started_on: date)
     end
 
+    # The reader-facing version, which does respect that permission.
+    def update_start_date!(value)
+      return false unless Bible270.config.allow_reader_start_date
+
+      set_start_date!(value)
+    end
+
     def clear_start_date!
       update!(started_on: nil)
     end

data/app/models/bible270/setting.rb

@@ -0,0 +1,57 @@
+# frozen_string_literal: true
+
+module Bible270
+  # Runtime state an admin can change without a deploy. Currently just whether
+  # this run of the plan is open to new readers.
+  class Setting < ApplicationRecord
+    self.table_name = 'bible270_settings'
+
+    ENROLLMENT_CLOSED_AT = 'enrollment_closed_at'
+
+    validates :key, presence: true, uniqueness: true
+
+    def self.read(key)
+      find_by(key: key.to_s)&.value
+    end
+
+    def self.write(key, value)
+      record = find_or_initialize_by(key: key.to_s)
+      record.value = value
+      record.save!
+      value
+    end
+
+    def self.delete_key(key)
+      where(key: key.to_s).delete_all
+    end
+
+    # ---- enrolment --------------------------------------------------------
+
+    # Closed either because an admin closed it, or because the app was configured
+    # to launch closed.
+    def self.enrollment_closed?
+      return true if read(ENROLLMENT_CLOSED_AT).present?
+
+      Bible270.config.respond_to?(:enrollment_open) && Bible270.config.enrollment_open == false
+    end
+
+    def self.enrollment_closed_at
+      raw = read(ENROLLMENT_CLOSED_AT)
+      return nil if raw.blank?
+
+      Time.zone ? Time.zone.parse(raw) : Time.parse(raw)
+    rescue ArgumentError
+      nil
+    end
+
+    def self.close_enrollment!(at: Time.current)
+      write(ENROLLMENT_CLOSED_AT, at.iso8601)
+      true
+    end
+
+    def self.open_enrollment!
+      delete_key(ENROLLMENT_CLOSED_AT)
+      true
+    end
+  end
+end

data/app/views/bible270/admin/index.html.erb

@@ -4,6 +4,24 @@
 <p class="lede"><%= @readers.size %> reader<%= 's' unless @readers.size == 1 %> taking part.
    <%= link_to 'Moderate reflections →', admin_comments_path %></p>
 
+<div class="b270-panel">
+  <h2 class="b270-subhead">This run of the plan</h2>
+  <% if @enrollment_closed %>
+    <p class="b270-startline"><strong>Closed to new readers</strong><% if @enrollment_closed_at %>
+      since <%= @enrollment_closed_at.strftime('%B %-d, %Y') %><% end %>.
+      The <%= @readers.size %> reader<%= 's' unless @readers.size == 1 %> already taking part can
+      still sign in and carry on.</p>
+    <%= button_to 'Open to new readers', admin_enrollment_path, method: :patch,
+          params: { state: 'open' }, class: 'b270-btn' %>
+  <% else %>
+    <p class="b270-startline"><strong>Open to new readers.</strong> Anyone signing in for the first
+      time joins this run.</p>
+    <%= button_to 'Close to new readers', admin_enrollment_path, method: :patch,
+          params: { state: 'closed' }, class: 'b270-btn',
+          form: { data: { turbo_confirm: 'Close this run? Existing readers keep their access.' } } %>
+  <% end %>
+</div>
+
 <% if @readers.any? %>
   <div class="b270-list">
     <% @readers.each do |reader| %>

data/app/views/bible270/admin/show.html.erb

@@ -8,6 +8,21 @@
   <% if @reader.dated? %>· day <%= @reader.calendar_day %> today<% end %>
 </p>
 
+<div class="b270-panel">
+  <h2 class="b270-subhead">Name</h2>
+  <%= form_with url: admin_reader_name_path(@reader), method: :patch, class: "b270-emailform" do %>
+    <label class="b270-field">
+      <span>First name</span>
+      <%= text_field_tag :first_name, @reader.suggested_names[:first_name], required: true %>
+    </label>
+    <label class="b270-field">
+      <span>Last name</span>
+      <%= text_field_tag :last_name, @reader.suggested_names[:last_name], required: true %>
+    </label>
+    <%= submit_tag 'Save name', class: 'b270-btn' %>
+  <% end %>
+</div>
+
 <div class="b270-panel">
   <h2 class="b270-subhead">Where they are in the plan</h2>
   <%= form_with url: admin_reader_start_path(@reader), method: :patch, class: "b270-startform" do %>

data/app/views/bible270/days/_start_date.html.erb

@@ -4,7 +4,7 @@
       <% if reader.own_start_date? %>
         Started <strong><%= reader.start_date.strftime("%B %-d, %Y") %></strong>
       <% else %>
-        Community plan began <strong><%= Bible270.config.start_date.strftime("%B %-d, %Y") %></strong>
+        Community plan start date: <strong><%= Bible270.config.start_date.strftime("%B %-d, %Y") %></strong>
       <% end %>
       · finishes <%= reader.plan_end_date.strftime("%B %-d, %Y") %>
       <% if reader.not_started_yet? %>

data/app/views/bible270/days/index.html.erb

@@ -33,9 +33,8 @@
     <p class="b270-signedout"><%= link_to "Sign in", sign_in_path %> to track your progress and join
        the conversation. You can browse the whole plan and read others' reflections without an account.</p>
     <% if @community_start_date %>
-      <p class="b270-startline">The community began this plan on
-         <strong><%= @community_start_date.strftime("%B %-d, %Y") %></strong>
-         and finishes <%= Bible270::Plan.end_date_for(@community_start_date).strftime("%B %-d, %Y") %>.</p>
+      <p class="b270-startline">This community plan runs from <strong><%= @community_start_date.strftime("%B %-d, %Y") %></strong> to 
+         <strong><%= Bible270::Plan.end_date_for(@community_start_date).strftime("%B %-d, %Y") %></strong>.</p>
     <% end %>
     <p style="margin:14px 0 0"><%= link_to "Start at Day 1 →", day_path(1), class: "b270-btn" %></p>
   <% end %>
@@ -59,11 +58,3 @@
   <p style="margin:12px 0 0"><%= link_to "See everyone →", community_path %></p>
 <% end %>
 
-<details class="b270-index">
-  <summary>All <%= Bible270::Plan::DAYS %> days</summary>
-  <div class="b270-grid">
-    <% (1..Bible270::Plan::DAYS).each do |d| %>
-      <%= link_to d, day_path(d), class: "b270-cell #{b270_day_status_class(current_reader, d)} #{'now' if signed_in? && d == @start_day}" %>
-    <% end %>
-  </div>
-</details>

data/app/views/bible270/profiles/edit.html.erb

@@ -0,0 +1,44 @@
+<% content_for :title, "Your profile — #{Bible270.config.app_name}" %>
+<p class="b270-eyebrow">Your details</p>
+<h1>Your profile</h1>
+<p class="lede">This is how you appear beside your reflections and on the community page.</p>
+
+<div class="b270-panel">
+  <%= form_with url: profile_path, method: :patch, class: "b270-emailform",
+                html: { multipart: true } do %>
+    <div class="b270-avatarrow">
+      <%= b270_avatar(current_reader, size: 64) %>
+      <% if Bible270::Reader.avatar_uploads? %>
+        <label class="b270-field" style="flex:1">
+          <span>Picture</span>
+          <%= file_field_tag :avatar, accept: Bible270::Avatars.content_types.join(',') %>
+          <span class="b270-hint" style="margin:0">
+            PNG, JPEG, GIF or WebP, up to <%= Bible270::Avatars.human_size(Bible270::Avatars.max_bytes) %>.
+          </span>
+        </label>
+      <% end %>
+    </div>
+
+    <label class="b270-field">
+      <span>First name</span>
+      <%= text_field_tag :first_name, @names[:first_name], required: true, autocomplete: "given-name" %>
+    </label>
+    <label class="b270-field">
+      <span>Last name</span>
+      <%= text_field_tag :last_name, @names[:last_name], required: true, autocomplete: "family-name" %>
+    </label>
+    <%= submit_tag "Save", class: "b270-btn" %>
+  <% end %>
+
+  <% if current_reader.avatar_uploaded? %>
+    <%= button_to "Remove picture", profile_avatar_path, method: :delete, class: "b270-linkbtn",
+          form: { data: { turbo_confirm: "Remove your picture?" } } %>
+  <% end %>
+
+  <% unless Bible270::Reader.avatar_uploads? %>
+    <p class="b270-hint">Picture uploads need Active Storage in this application
+       (<code>bin/rails active_storage:install</code>). Until then, avatars come from your sign-in provider.</p>
+  <% end %>
+</div>
+
+<p style="margin-top:18px"><%= link_to "← Back to your progress", reader_path(current_reader) %></p>

data/app/views/bible270/sessions/new.html.erb

@@ -5,6 +5,13 @@
    leave reflections alongside everyone else. Browsing the plan and reading others' reflections
    never requires an account.</p>
 
+<% if enrollment_closed? %>
+  <div class="b270-flash alert" style="margin-bottom:18px">
+    This run of the plan is closed to new readers. If you have taken part before, sign in with the
+    same email or account and you'll pick up where you left off.
+  </div>
+<% end %>
+
 <div class="b270-panel">
   <% if Bible270.config.email_sign_in? %>
     <h2 class="b270-subhead">Sign in with your email</h2>
@@ -13,15 +20,16 @@
     <%= form_with url: email_sign_in_link_path, method: :post, class: "b270-emailform" do |f| %>
       <%= hidden_field_tag :origin, @origin if @origin %>
       <% if Bible270.config.email_sign_in_ask_name %>
+        <p class="b270-hint" style="margin:0">
+          If you have read with us before, just your email is enough — we already know your name.
+        </p>
         <label class="b270-field">
-          <span>First name</span>
-          <%= text_field_tag :first_name, params[:first_name], autocomplete: "given-name",
-                required: Bible270.config.email_sign_in_require_name %>
+          <span>First name <em>(new readers)</em></span>
+          <%= text_field_tag :first_name, params[:first_name], autocomplete: "given-name" %>
         </label>
         <label class="b270-field">
-          <span>Last name</span>
-          <%= text_field_tag :last_name, params[:last_name], autocomplete: "family-name",
-                required: Bible270.config.email_sign_in_require_name %>
+          <span>Last name <em>(new readers)</em></span>
+          <%= text_field_tag :last_name, params[:last_name], autocomplete: "family-name" %>
         </label>
       <% end %>
       <label class="b270-field">

data/app/views/bible270/shared/_day_index.html.erb

@@ -0,0 +1,12 @@
+<% if Bible270::Plan::DAYS.positive? %>
+  <details class="b270-index">
+    <summary>All <%= Bible270::Plan::DAYS %> days</summary>
+    <div class="b270-grid">
+      <% today = signed_in? ? current_reader.current_day : nil %>
+      <% (1..Bible270::Plan::DAYS).each do |d| %>
+        <%= link_to d, day_path(d),
+              class: "b270-cell #{b270_day_status_class(current_reader, d)} #{'now' if d == today}" %>
+      <% end %>
+    </div>
+  </details>
+<% end %>

data/app/views/bible270/shared/_header.html.erb

@@ -9,6 +9,7 @@
     <% if signed_in? %>
       <% if Bible270.config.admin?(current_reader) %><%= link_to "Admin", admin_path %><% end %>
       <%= link_to current_reader.display_name, reader_path(current_reader), class: "b270-me" %>
+      <%= link_to "Profile", profile_path %>
       <%= button_to "Sign out", sign_out_path, method: :delete, class: "b270-linkbtn",
             form: { style: "display:inline" } %>
     <% elsif Bible270.config.any_sign_in_method? %>

data/app/views/bible270/shared/_styles.html.erb

@@ -20,9 +20,16 @@
   .b270-nav{display:flex;align-items:center;gap:16px;font-size:14px}
   .b270-nav a{color:var(--muted);text-decoration:none}
   .b270-nav a:hover{color:var(--gold)}
+  /* button_to renders a form; make it a flex item so the button sits on the same
+     line as the links, and drop the margin/underline the shared class carries. */
+  .b270-nav form{display:flex;align-items:center;margin:0}
+  .b270-nav .b270-linkbtn{margin:0;padding:0;font-size:14px;color:var(--muted);text-decoration:none;line-height:1}
+  .b270-nav .b270-linkbtn:hover{color:var(--gold)}
   .b270-signin,.b270-me{color:var(--ink)!important;font-weight:600}
 
   .b270-subhead{font-family:"Spectral",serif;font-size:17px;font-weight:600;margin:0 0 4px}
+  .b270-avatarrow{display:flex;align-items:center;gap:14px}
+  .b270-avatarrow input[type=file]{font:inherit;font-size:13px;max-width:100%}
   .b270-emailform{display:grid;gap:12px;max-width:340px;margin:12px 0 0}
   .b270-field{display:grid;gap:5px;font-size:12.5px;color:var(--muted)}
   .b270-field input{font:inherit;font-size:15px;padding:10px 12px;border:1px solid var(--line);border-radius:9px;background:#fff;color:var(--ink);width:100%}

data/app/views/layouts/bible270/application.html.erb

@@ -18,11 +18,9 @@
     <% if flash[:alert] %><div class="b270-flash alert"><%= flash[:alert] %></div><% end %>
     <% if flash[:notice] %><div class="b270-flash notice"><%= flash[:notice] %></div><% end %>
     <%= yield %>
+    <%= render 'bible270/shared/day_index' %>
     <footer class="b270-footer">
-      <p>The Old Testament and New Testament are each read once across the 270 days, with a
-         reading from all three tracks every day. Alongside them the Psalms run once and
-         Proverbs twice; the longest chapters are divided so the readings fill each day
-         evenly, and Psalm 119 comes in eleven sections.</p>
+      <p>The Old Testament, New Testament and Psalms/Proverbs are each read once across the 270 days. Long chapters are divided so the readings fill each day evenly, e.g. Psalm 119 comes in eleven sections.</p>
     </footer>
   </div>
 </body>

data/config/routes.rb

@@ -15,15 +15,21 @@ Bible270::Engine.routes.draw do
   get    'admin',                        to: 'admin#index',            as: :admin
   get    'admin/readers/:id',            to: 'admin#show',             as: :admin_reader
   delete 'admin/readers/:id',            to: 'admin#destroy'
+  patch  'admin/readers/:id/name',       to: 'admin#update_name',      as: :admin_reader_name
   patch  'admin/readers/:id/start',      to: 'admin#update_start',     as: :admin_reader_start
   patch  'admin/readers/:id/through',    to: 'admin#complete_through', as: :admin_reader_through
   post   'admin/readers/:id/days/:day',  to: 'admin#toggle_day',       as: :admin_reader_day
 
+  patch  'admin/enrollment',             to: 'admin#update_enrollment', as: :admin_enrollment
   get    'admin/comments',               to: 'admin#comments',         as: :admin_comments
   patch  'admin/comments/:id/hide',      to: 'admin#hide_comment',     as: :admin_hide_comment
   patch  'admin/comments/:id/unhide',    to: 'admin#unhide_comment',   as: :admin_unhide_comment
   delete 'admin/comments/:id',           to: 'admin#destroy_comment',  as: :admin_comment
 
+  get   'profile',                       to: 'profiles#edit', as: :profile
+  patch 'profile',                       to: 'profiles#update'
+  delete 'profile/avatar', to: 'profiles#remove_avatar', as: :profile_avatar
+
   get 'community', to: 'readers#index', as: :community
   get 'readers/:id', to: 'readers#show', as: :reader
 

data/db/migrate/20260101000007_create_bible270_settings.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+class CreateBible270Settings < ActiveRecord::Migration[7.0]
+  def change
+    # A tiny key/value store for state an admin can change at runtime. Closing a
+    # run to new readers can't live in config, since that would need a deploy.
+    create_table :bible270_settings do |t|
+      t.string :key,   null: false
+      t.string :value
+      t.timestamps
+    end
+
+    add_index :bible270_settings, :key, unique: true, name: 'idx_b270_settings_key'
+  end
+end

data/lib/bible270/avatars.rb

@@ -0,0 +1,46 @@
+# frozen_string_literal: true
+
+module Bible270
+  # What counts as an acceptable avatar. Kept free of Rails and of Active Storage
+  # so the rules can be unit tested, and so the engine still loads in an app that
+  # has Active Storage disabled.
+  module Avatars
+    CONTENT_TYPES = %w[image/png image/jpeg image/gif image/webp].freeze
+
+    # Two megabytes. Large enough for a photo off a phone, small enough that
+    # nobody's profile page crawls.
+    DEFAULT_MAX_BYTES = 2 * 1024 * 1024
+
+  module_function
+
+    def content_types = CONTENT_TYPES
+
+    def max_bytes
+      configured = Bible270.config.avatar_max_bytes if Bible270.config.respond_to?(:avatar_max_bytes)
+      configured.to_i.positive? ? configured.to_i : DEFAULT_MAX_BYTES
+    end
+
+    def acceptable_type?(content_type)
+      CONTENT_TYPES.include?(content_type.to_s.downcase.split(';').first.to_s.strip)
+    end
+
+    def acceptable_size?(byte_size)
+      size = byte_size.to_i
+      size.positive? && size <= max_bytes
+    end
+
+    # nil when the upload is fine, otherwise the reason — phrased for a reader.
+    def problem_with(content_type:, byte_size:)
+      return 'must be a PNG, JPEG, GIF or WebP image' unless acceptable_type?(content_type)
+      return 'looks empty' unless byte_size.to_i.positive?
+      return "must be under #{human_size(max_bytes)}" unless acceptable_size?(byte_size)
+
+      nil
+    end
+
+    def human_size(bytes)
+      mb = bytes.to_f / (1024 * 1024)
+      mb >= 1 ? "#{format('%g', mb.round(1))}MB" : "#{(bytes.to_f / 1024).round}KB"
+    end
+  end
+end

data/lib/bible270/configuration.rb

@@ -6,6 +6,7 @@
 # URI.encode_www_form_component produces byte-identical output to CGI.escape.
 require 'uri'
 require 'bible270/plan'
+require 'bible270/avatars'
 
 module Bible270
   class Configuration
@@ -108,7 +109,6 @@ module Bible270
 
     # Simple abuse guard: at most N links per address per window (seconds).
     attr_accessor :email_sign_in_window
-    attr_accessor :after_sign_out_path, :email_sign_in_max_per_window, :passage_url_builder, :tagline, :admin_emails, :admin_resolver
 
     # Whether a reader may type the display name shown beside their reflections
     # when signing in by email (otherwise it's derived from the address).
@@ -133,7 +133,12 @@ module Bible270
     # With neither set the panel is unreachable and its routes 404.
     # Break points set from the host app, overriding Plan::CHAPTER_BREAKS.
     # Keys may be ['Psalm', 18] or 'Psalm 18'; [] keeps a chapter whole.
-    attr_accessor :chapter_breaks
+    # Largest avatar a reader may upload, in bytes. Uploading needs Active
+    # Storage in the host app; without it the field is hidden and readers keep
+    # whatever avatar their sign-in provider gave them.
+    # Whether new readers may join this run of the plan. An admin can close it
+    # from the panel at runtime; setting this to false launches closed.
+    attr_accessor :enrollment_open
 
     # Optional YAML file holding the same thing, re-read whenever it changes so
     # breaks can be tuned without restarting:
@@ -142,6 +147,7 @@ module Bible270
     #   Psalm 35: []
     #   Psalm 78: [20, 39, 55]
     attr_accessor :chapter_breaks_path
+    attr_accessor :after_sign_out_path, :email_sign_in_max_per_window, :passage_url_builder, :tagline, :avatar_max_bytes, :chapter_breaks, :admin_emails, :admin_resolver
 
     def admin?(reader)
       return false if reader.nil?
@@ -160,6 +166,27 @@ module Bible270
 
     def email_sign_in? = !!@email_sign_in
 
+    # Reserved domains from RFC 2606 — a From: address at one of these will fail
+    # SPF for your real domain, and receiving servers routinely drop it without
+    # a bounce. The default value is one of them deliberately, so it has to be
+    # changed, but nothing was checking that it had been.
+    PLACEHOLDER_DOMAINS = %w[example.com example.org example.net example.edu invalid localhost].freeze
+
+    # Why the sign-in mail is likely to vanish, or nil if it looks fine.
+    def mailer_from_problem
+      return nil unless email_sign_in?
+
+      address = mailer_from.to_s.strip
+      return 'config.mailer_from is blank' if address.empty?
+      return "config.mailer_from (#{address}) is not a valid address" unless EmailSignIn.valid_email?(address)
+
+      domain = address.split('@').last.to_s.downcase
+      return nil unless PLACEHOLDER_DOMAINS.include?(domain)
+
+      "config.mailer_from is still the placeholder #{address} — mail from a reserved domain " \
+        'fails SPF and is usually dropped without a bounce'
+    end
+
     # Any way at all for a new person to sign in?
     def any_sign_in_method?
       email_sign_in? || omniauth_providers.any?
@@ -224,6 +251,8 @@ module Bible270
       @email_sign_in_ask_name = true
       @email_sign_in_require_name = true
       @email_sign_in_log_link = nil
+      @enrollment_open = true
+      @avatar_max_bytes = Avatars::DEFAULT_MAX_BYTES
       @chapter_breaks = {}
       @chapter_breaks_path = nil
       @admin_emails = []

data/lib/bible270/names.rb

@@ -0,0 +1,47 @@
+# frozen_string_literal: true
+
+module Bible270
+  # Readers are known to each other by name beside their reflections, so a first
+  # and last name are both required wherever a name is set: at email sign-in, when
+  # a reader edits their own, and when an admin edits someone else's.
+  #
+  # Kept free of Rails so the rules can be tested on their own.
+  module Names
+  module_function
+
+    # Collapse runs of whitespace, including the non-breaking space that arrives
+    # from copy-paste, and trim.
+    def squish(value)
+      value.to_s.tr("\u00A0", ' ').gsub(%r{\s+}, ' ').strip
+    end
+
+    # A first and last name, or nil when either is missing. Returns the pieces
+    # plus the display name built from them, so every caller derives it the same
+    # way rather than assembling it locally.
+    def normalize(first, last)
+      first_name = squish(first)
+      last_name  = squish(last)
+      return nil if first_name.empty? || last_name.empty?
+
+      {
+        first_name: first_name,
+        last_name: last_name,
+        display_name: "#{first_name} #{last_name}"
+      }
+    end
+
+    def valid?(first, last)
+      !normalize(first, last).nil?
+    end
+
+    # Best effort at splitting a single name, for readers who arrived through
+    # OmniAuth with only a display name. Everything after the first word is the
+    # surname, so "Andrew von der Luft" keeps its particles together.
+    def split(display_name)
+      parts = squish(display_name).split
+      return nil if parts.size < 2
+
+      { first_name: parts.first, last_name: parts[1..].join(' ') }
+    end
+  end
+end

data/lib/bible270/plan.rb

@@ -15,7 +15,7 @@ module Bible270
   #                     grouped so each day is ~equal in verses (~73/day)
   # * New Testament   – read once, one reading every day; the 10 longest chapters
   #                     (Luke 1 and friends) are divided in two so 260 chapters fill 270 days
-  # * Psalms/Proverbs – Psalms once and Proverbs TWICE, interleaved in one track.
+  # * Psalms/Proverbs – Psalms and Proverbs once, interleaved in one track.
   #                     Longer psalms are divided so the two fill exactly 270 days;
   #                     Psalm 119 is pinned to 11 sections of 16 verses.
   #
@@ -292,7 +292,7 @@ module Bible270
     end
 
     def parse_breaks_file(path)
-      raw = YAML.safe_load(File.read(path), permitted_classes: [], aliases: false) || {}
+      raw = YAML.safe_load_file(path, permitted_classes: [], aliases: false) || {}
       raise ArgumentError, "#{path} must map \"Book Chapter\" to a list of verses" unless raw.is_a?(Hash)
 
       normalize_breaks(raw)
@@ -308,7 +308,7 @@ module Bible270
     def break_key(key)
       return [key[0].to_s, key[1].to_i] if key.is_a?(Array)
 
-      match = key.to_s.strip.match(/\A(.+?)\s+(\d+)\z/)
+      match = key.to_s.strip.match(%r{\A(.+?)\s+(\d+)\z})
       raise ArgumentError, "chapter break key #{key.inspect} must look like 'Psalm 18'" if match.nil?
 
       [match[1], match[2].to_i]
@@ -406,7 +406,7 @@ module Bible270
       ['Psalm', 44] => [], ['Psalm', 49] => [], ['Psalm', 50] => [], ['Psalm', 51] => [], # Stay whole
       ['Psalm', 55] => [], ['Psalm', 59] => [], ['Psalm', 65] => [], ['Psalm', 66] => [], # Stay whole
       ['Psalm', 68] => [18], # => Psalm 68:1–18, 68:19–35
-      ['Psalm', 69] => [18 ], # => Psalm 69:1–18, 69:19–36
+      ['Psalm', 69] => [18], # => Psalm 69:1–18, 69:19–36
       ['Psalm', 78] => [20, 39, 55], # => 78:1–20, 21–39, 40–55, 56–72
       ['Psalm', 37] => [20], # => Psalm 37:1–20, 37:21–40
       ['Matthew', 26] => [35], # => Matthew 26:1–35, 26:36–75

data/lib/bible270/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Bible270
-  VERSION = '0.10.0'
+  VERSION = '0.11.0'
 end

data/lib/bible270.rb

@@ -3,6 +3,8 @@
 require 'bible270/version'
 require 'bible270/plan'
 require 'bible270/email_sign_in'
+require 'bible270/names'
+require 'bible270/avatars'
 require 'bible270/configuration'
 require 'bible270/engine' if defined?(Rails::Engine)
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: bible270
 version: !ruby/object:Gem::Version
-  version: 0.10.0
+  version: 0.11.0
 platform: ruby
 authors:
 - Andrew vonderLuft
@@ -71,6 +71,7 @@ files:
 - app/controllers/bible270/checkoffs_controller.rb
 - app/controllers/bible270/comments_controller.rb
 - app/controllers/bible270/days_controller.rb
+- app/controllers/bible270/profiles_controller.rb
 - app/controllers/bible270/readers_controller.rb
 - app/controllers/bible270/sessions_controller.rb
 - app/helpers/bible270/plan_helper.rb
@@ -80,6 +81,7 @@ files:
 - app/models/bible270/checkoff.rb
 - app/models/bible270/comment.rb
 - app/models/bible270/reader.rb
+- app/models/bible270/setting.rb
 - app/models/bible270/sign_in_token.rb
 - app/views/bible270/admin/comments.html.erb
 - app/views/bible270/admin/index.html.erb
@@ -93,9 +95,11 @@ files:
 - app/views/bible270/days/_start_date.html.erb
 - app/views/bible270/days/index.html.erb
 - app/views/bible270/days/show.html.erb
+- app/views/bible270/profiles/edit.html.erb
 - app/views/bible270/readers/index.html.erb
 - app/views/bible270/readers/show.html.erb
 - app/views/bible270/sessions/new.html.erb
+- app/views/bible270/shared/_day_index.html.erb
 - app/views/bible270/shared/_header.html.erb
 - app/views/bible270/shared/_styles.html.erb
 - app/views/bible270/sign_in_mailer/magic_link.html.erb
@@ -108,10 +112,13 @@ files:
 - db/migrate/20260101000004_create_bible270_sign_in_tokens.rb
 - db/migrate/20260101000005_add_names_to_bible270_readers.rb
 - db/migrate/20260101000006_add_approval_to_bible270_comments.rb
+- db/migrate/20260101000007_create_bible270_settings.rb
 - lib/bible270.rb
+- lib/bible270/avatars.rb
 - lib/bible270/configuration.rb
 - lib/bible270/email_sign_in.rb
 - lib/bible270/engine.rb
+- lib/bible270/names.rb
 - lib/bible270/plan.rb
 - lib/bible270/versification.rb
 - lib/bible270/version.rb