Refactor flag handling to discard audio recordings

- Updated the flagging process to no longer store user audio recordings, retaining only structured diagnostics.
- Modified the `add_flag` method to accept only the row data without audio parameters.
- Adjusted related API endpoints and tests to reflect the removal of audio storage.
- Updated documentation to clarify changes in flagging behavior and data storage.

README.md

@@ -231,15 +231,15 @@ create table public.tutors (
 alter table public.tutors enable row level security;   -- no policy: only the secret key reads and writes it
 ```
 
-Under each score a teacher or a tutor gets an optional note and the button "🚩 אמרתי נכון, המערכת טעתה". Pressing it sends the recording to `POST /api/flags` (teachers and tutors only), which scores it again and keeps what describes the case in the table `flags`, written with `SUPABASE_SECRET_KEY`. A box then shows what was kept in words: the sentence, what the model heard, each word's score, the sounds that were marked down and what took their place, and whether the recording was stored. The row holds:
+Under each score a teacher or a tutor gets an optional note and the button "🚩 אמרתי נכון, המערכת טעתה". Pressing it sends the recording to `POST /api/flags` (teachers and tutors only), which scores it again in memory and then discards the audio. It keeps the structured diagnosis in the table `flags`, written with `SUPABASE_SECRET_KEY`: the sentence, what the model heard, each word's score, and the sounds that were marked down and what took their place. The row holds:
 
 - who and what: `email`, `cat`, `phrase`, `he`, `note`;
 - the answer the scorer matched (`ar`, `ipa`), its free decode (`heard_ipa`), `score` and `unrelated`;
 - `result`: the whole score response (every word and phoneme with its score and what took its place, the tips, the issues);
 - `model` and `version`, so a flag can be checked against the model and build that produced it;
-- `audio`: the recording's name in the private storage bucket `flags` (null when it could not be stored).
+- `audio`: always null for new reports; the nullable legacy column is retained so old reports with recordings remain readable.
 
-Create the table and the bucket once (until then a flag is refused with this command in the message):
+Create the table once (until then a flag is refused with this command in the message):
 
 ```sql
 create table public.flags (
@@ -257,7 +257,7 @@ create table public.flags (
   result     jsonb not null,     -- the whole score response
   model      text not null,
   version    text not null default '',
-  audio      text,               -- the recording's name in the storage bucket flags
+  audio      text,               -- legacy recordings only; new reports leave this null
   status     text not null default 'pending', -- pending, confirmed, rejected, or fixed
   category   text,
   reviewed_by text,
@@ -267,7 +267,6 @@ create table public.flags (
   created_at timestamptz not null default now()
 );
 alter table public.flags enable row level security;   -- no policy: only the secret key reads and writes it
-insert into storage.buckets (id, name) values ('flags', 'flags') on conflict (id) do nothing;
 ```
 
 For a `flags` table created before reviews were added, run once:
@@ -282,7 +281,7 @@ alter table public.flags
   add column if not exists false_issues jsonb not null default '[]'::jsonb;
 ```
 
-The management panel's **דיווחים** tab lets a teacher privately play the recording, confirm or reject each report, classify it, and select the individual sound judgements that were false. The recording is fetched through a teacher-only endpoint, so neither the private bucket nor its secret key is exposed to the browser. The tab also groups confirmed `expected → heard` pairs by reports, reporters, and phrases. Only confirmed reports should be used for calibration; the review and aggregation themselves use the stored result. As a flag says the sentence was said as written, `audio,ipa` of these rows is also training data in the format `train/finetune.py` reads (see "Fine-tuning").
+The management panel's **דיווחים** tab lets a teacher confirm or reject each report, classify it, and select the individual sound judgements that were false. It can still play a legacy recording when an older row has one, but new reports deliberately retain only diagnostics. The tab groups confirmed `expected → heard` pairs by reports, reporters, and phrases. Only confirmed reports should be used for calibration; review and aggregation use the stored structured result without needing the user's voice file.
 
 ### The lab (מעבדה)
 

app/auth.py

@@ -492,13 +492,9 @@ class SupabaseAuth:
             media_type = mimetypes.guess_type(name)[0] or media_type
         return data, media_type
 
-    def add_flag(self, row: dict, audio: bytes, mime: str, name: str) -> bool:
-        """Keeps a flagged score: the recording in the storage bucket `flags` under `name`, and the row in the table
-        `flags` with that name as its `audio`. A recording that cannot be stored is logged and the row is kept
-        without it (`audio` null); False tells that. A row that cannot be kept is raised."""
-        kept = self._put_object("flags", name, audio, mime)
-        self._admin("/rest/v1/flags", "POST", {**row, "audio": name if kept else None})
-        return kept
+    def add_flag(self, row: dict) -> None:
+        """Keeps the structured diagnosis of a flagged score, without retaining the user's recording."""
+        self._admin("/rest/v1/flags", "POST", {**row, "audio": None})
 
     def list_flags(self, status: str = "pending") -> list[dict]:
         """Flagged scores for the teacher's review, newest first."""

app/main.py

@@ -708,7 +708,10 @@ def create_app(scorer: Scorer | None = None, tts: SawtakTTS | None = None,
             result.append({**account, "roles": sorted(roles & ROLES),
                            "entitlements": sorted(entitlements), "permissions": sorted(effective),
                            "fixed_roles": sorted(set(fixed))})
-        return {"users": result, "setup": "", "migration": MIGRATE_USER_ACCESS,
+        # A successful read cannot tell us which CHECK expression PostgreSQL has, and showing the
+        # migration unconditionally makes it look unfinished even after it was run.  If an old
+        # constraint rejects a newly selected entitlement, update_access returns the migration there.
+        return {"users": result, "setup": "", "migration": "",
                 "me": actor["id"] if actor else ""}
 
     @app.put("/api/access/users/{target_id}")
@@ -749,6 +752,8 @@ def create_app(scorer: Scorer | None = None, tts: SawtakTTS | None = None,
         except AuthUnavailable as e:
             if "answered 404" in str(e):
                 raise HTTPException(503, f"permissions table is missing; run: {CREATE_USER_ACCESS}")
+            if any(mark in str(e).lower() for mark in ("valid_entitlements", "check constraint", "23514")):
+                raise HTTPException(409, f"permissions table needs upgrading; run: {MIGRATE_USER_ACCESS}")
             raise HTTPException(503, f"Supabase לא זמין: {e}")
         return {"ok": True}
 
@@ -1851,7 +1856,7 @@ def create_app(scorer: Scorer | None = None, tts: SawtakTTS | None = None,
         result = app.state.scorer.score(wav, phrase, [])
         if result.get("error"):
             raise HTTPException(400, result["message"])
-        return save_flag(phrase, result, data, audio.content_type, note, user)
+        return save_flag(phrase, result, note, user)
 
     def tutor_for(user: dict | None) -> Tutor:
         """The paid tutor game, after the tutor.use dependency authorized the account (or on an open service)."""
@@ -2023,10 +2028,8 @@ def create_app(scorer: Scorer | None = None, tts: SawtakTTS | None = None,
     @app.post("/api/flags")
     def flag(phrase_id: int = Form(...), audio: UploadFile = File(...), note: str = Form(""),
              user: dict | None = Depends(signed_in)):
-        """A tutor's flag: this recording of the phrase was said right and the score was wrong. The recording is scored
-        again here, so what is kept is the scorer's own answer and not the page's copy of it: the row of `flags`
-        (see CREATE_FLAGS) and the recording beside it. {"ok", "audio": whether the recording was kept too, "flag": the
-        row that was kept, which the page shows the tutor}."""
+        """A tutor's flag: this recording of the phrase was said right and the score was wrong. It is scored again in
+        memory, then discarded. The structured diagnosis is kept in `flags`; the user's audio is not retained."""
         if not user or not user["tutor"]:
             raise HTTPException(403, "tutors only")
         phrase = phrase_of(phrase_id)
@@ -2041,25 +2044,22 @@ def create_app(scorer: Scorer | None = None, tts: SawtakTTS | None = None,
         result = app.state.scorer.score(wav, phrase, refs)
         if result.get("error"):
             raise HTTPException(400, result["message"])
-        return save_flag(phrase, result, data, audio.content_type, note, user)
+        return save_flag(phrase, result, note, user)
 
-    def save_flag(phrase: dict, result: dict, data: bytes, content_type: str | None,
-                  note: str, user: dict) -> dict:
+    def save_flag(phrase: dict, result: dict, note: str, user: dict) -> dict:
         """Store a reviewed-score candidate from a bank phrase or a dynamic verb-game phrase."""
-        mime = (content_type or "application/octet-stream").lower()
-        ext = AUDIO_EXT.get(mime.partition(";")[0].strip().rpartition("/")[2], "bin")
         row = {"email": user["email"].lower(), "cat": phrase["cat"], "phrase": phrase.get("key", phrase["he"]),
                "he": phrase["he"], "ar": result["variant"]["ar"], "ipa": result["variant"]["ipa"],
                "heard_ipa": result["heard_ipa"], "score": result["score"], "unrelated": bool(result["unrelated"]),
                "note": " ".join(note.split())[:MAX_NOTE], "result": result, "model": MODEL_ID, "version": build_version()}
         try:
-            kept = app.state.auth.add_flag(row, data, mime, f"{date.today():%Y-%m}/{uuid.uuid4().hex}.{ext}")
+            app.state.auth.add_flag(row)
         except AuthUnavailable as e:
             if "answered 404" in str(e):
                 raise HTTPException(503, "הטבלה flags לא קיימת ב-Supabase. הריצו ב-SQL Editor: "
                                          f"{CREATE_FLAGS} אם כבר נוצרה, הריצו שם: notify pgrst, 'reload schema';")
             raise HTTPException(503, f"Supabase לא זמין: {e}")
-        return {"ok": True, "audio": kept, "flag": row}
+        return {"ok": True, "audio": False, "flag": row}
 
     return app
 

static/guide.html

@@ -92,7 +92,6 @@ section{display:flex;flex-direction:column;gap:16px}
 .ball.now{border-color:var(--olive);color:var(--olive);box-shadow:0 0 0 6px var(--olive-soft)}
 .ball.done{background:var(--ok-bg);border-color:var(--ok);color:var(--ok)}
 .ball.gold{background:var(--gold-bg);border-color:var(--gold);color:var(--gold)}
-.ball.locked{opacity:.6;font-size:18px}
 .ball.video{border-style:dashed;color:var(--olive)}
 .ball .badge{position:absolute;top:-4px;inset-inline-end:-4px;width:20px;height:20px;border-radius:50%;display:grid;place-items:center;font-size:11px;background:var(--ok);color:#fff}
 .ball.gold .badge{background:var(--gold)}
@@ -253,7 +252,7 @@ a,button{-webkit-tap-highlight-color:transparent}
           <div class="stop L" style="left:calc(26% - 26px);top:304px"><div class="ball started now"><div class="tag">התחילו</div><span>3</span></div><div class="lbl">משפטים א׳<span class="chip read">ער׳ ← עב׳</span><small>תורגלו 4 מתוך 10</small></div></div>
           <div class="stop" style="right:calc(50% - 26px);top:392px"><div class="ball"><div class="tag hw">שיעורי בית<small>עוד יומיים</small></div>💬</div><div class="lbl">סיפור השוק<small>תורגלו 0 מתוך 12</small></div></div>
           <span class="n" style="top:468px;right:-25px">6</span>
-          <div class="stop" style="right:calc(26% - 26px);top:480px"><div class="ball locked">🔒</div><div class="lbl">כתיבת משפטים<small>נעול</small></div></div>
+          <div class="stop" style="right:calc(26% - 26px);top:480px"><div class="ball">✎&#xFE0E;</div><div class="lbl">כתיבת משפטים<small>נכתבו 0 מתוך 8</small></div></div>
         </div>
       </div>
       <ol class="key">
@@ -262,7 +261,7 @@ a,button{-webkit-tap-highlight-color:transparent}
         <li><span class="n">3</span><div><b>לשוניות</b><span class="d">המסלול, הספרייה הדיגיטלית (סרטונים וטקסטים) וחבר מביא חבר.</span></div></li>
         <li><span class="n">4</span><div><b>כותרת השיעור</b><span class="d">הפס מראה כמה מהשיעור תורגל. לחיצה עליה פותחת את הנושא הבא שעוד לא נגמר. בסוף כל שיעור יש גביע 🏆 שמזהיב כשהשיעור הושלם.</span></div></li>
         <li><span class="n">5</span><div><b>הנושא של עכשיו</b><span class="d">מסומן בהילה ובבועה „התחילו” או „המשך”. אם גללתם רחוק, הכפתור „חזרה לנושא הנוכחי” מחזיר אליו.</span></div></li>
-        <li><span class="n">6</span><div><b>נושאים נעולים</b><span class="d">נפתחים כשמתרגלים את כל המשפטים בנושאים שלפניהם. גם <b style="display:inline">מילים חדשות</b> ו<b style="display:inline">התאימו זוגות</b> נועלים את המשך השיעור עד שמסיימים אותם, אלא אם כבר התחלתם לתרגל את השיעור. נושא שהוא שיעורי בית פתוח תמיד, וסרטון או כתיבה לא נועלים את מה שאחריהם.</span></div></li>
+        <li><span class="n">6</span><div><b>כל הנושאים פתוחים</b><span class="d">אפשר לפתוח כל נושא בכל שיעור, גם בלי לסיים את מה שלפניו.</span></div></li>
       </ol>
     </div>
   </section>
@@ -278,7 +277,6 @@ a,button{-webkit-tap-highlight-color:transparent}
       <div class="state"><div class="ball started"><span>3</span></div><b>בתהליך</b><span>הטבעת מראה כמה כבר תורגל</span></div>
       <div class="state"><div class="ball done"><span class="badge">✓</span>2</div><b>הושלם</b><span>כל המשפטים נאמרו לפחות פעם אחת</span></div>
       <div class="state"><div class="ball gold"><span class="badge">★</span>1</div><b>זהב</b><span>כל המשפטים קיבלו „מצוין” (85 ומעלה)</span></div>
-      <div class="state"><div class="ball locked">🔒</div><b>נעול</b><span>קודם מסיימים את הנושאים שלפניו</span></div>
       <div class="state"><div class="ball" style="border-color:var(--amber);margin-top:22px"><div class="tag hw" style="font-size:10px">עוד 3 ימים</div>5</div><b>שיעורי בית</b><span>הבועה סופרת את הימים עד ההגשה</span></div>
     </div>
   </section>

static/index.html

@@ -68,8 +68,7 @@ header{display:flex;align-items:center;gap:4px 12px;flex-wrap:wrap}
 /* Home: the course as one winding road down the screen. A lesson opens with a banner and closes with a cup, and its
    topics are the round buttons along the road, each with its label beside it. The ring around a button fills as its
    sentences are practised: untouched is plain, started is tinted, finished is filled and gets a badge (gold when every
-   sentence reached "מצוין"). The road is green after a finished topic. The one topic to do now carries a bubble and a halo.
-   A locked topic (one before it is not finished) is grey with a padlock. */
+   sentence reached "מצוין"). The road is green after a finished topic. The one topic to do now carries a bubble and a halo. */
 body.home #practice,body.home #driveBtn,body:not(.home) #path,body:not(.home) #today,body:not(.home) #toNow,body.home .where,body:not(.home) .brand,body:not(.home) .maphint{display:none}
 header .sub.maphint{flex:0 0 100%;color:var(--ink)}
 /* the student's guide (static/guide.html): a round "?" beside the class pill, and once, a line under the hint */
@@ -374,11 +373,6 @@ body.memory-game{overflow:hidden}
 .tag small{display:block;font:600 11px/1.3 var(--f-body);opacity:.85}
 .tag:has(small){text-align:center}
 .sat.soon{--c:var(--amber)} .sat.late{--c:var(--sumac)}
-.sat.locked{color:var(--muted);cursor:default}
-.sat.locked .dot{background:var(--bg);font-size:20px;filter:grayscale(1);opacity:.75}
-.sat.locked:active .dot{transform:none;box-shadow:0 var(--s) 0 var(--track)}
-.sat.locked .tag{background:var(--ink);color:var(--bg)}
-.chapter.locked,.chapter.locked:active{background:var(--track);box-shadow:0 4px 0 var(--muted);transform:none;cursor:default}
 .tag.soon{background:var(--amber)} .tag.late{background:var(--sumac)}
 .sat.now .ring::after{content:"";position:absolute;inset:-5px;border-radius:50%;border:2px solid var(--c);animation:beckon 1.8s ease-out infinite}
 @keyframes beckon{from{transform:scale(.92);opacity:.9}to{transform:scale(1.18);opacity:0}}
@@ -510,7 +504,8 @@ body.driving .mic::before{display:none} body.driving .mic-zone.two{display:flex}
 #denied button{display:block;margin:12px auto 0;font:600 16px/1 var(--f-body);padding:10px 22px;border-radius:10px;border:1px solid #4B6A2C;background:#fff;color:#4B6A2C;cursor:pointer}
 /* The teacher's panel (its parts are styled further down: the class tabs, the figures, the lessons, the students). */
 body:not(.manage) #manage,body.lab #manage,body:not(.lab) #lab,body.manage #wrap>header,body.manage #path,body.manage #today,body.manage #toNow,body.manage #practice,body:not(.home) #toManage{display:none}
-body.lab #wrap{max-width:none}
+body.lab #wrap,body.manage #wrap:has(#manage.access){max-width:none}
+body.manage #manage{width:100%;max-width:none}
 .mtitle{font:400 24px/1 var(--f-display);margin:0}
 #mState.setup{padding:10px 12px;border:1px solid var(--sumac);border-radius:10px;color:var(--ink)}
 #mState.setup code{display:block;margin-top:6px;font-size:12px;overflow-wrap:anywhere;user-select:all}
@@ -736,7 +731,7 @@ body.lab #wrap{max-width:none}
 #manage.content :is(#mTutors,#mTabs,#mHead,#mLessons,#mRoster,#mStudent),#manage:not(.content) #mContent{display:none}
 #manage.flags :is(#mClasses,#mContent,#mTutors,#mTabs,#mHead,#mLessons,#mRoster,#mStudent),#manage:not(.flags) #mFlags{display:none}
 #manage.access :is(#mClasses,#mContent,#mFlags,#mTutors,#mTabs,#mHead,#mLessons,#mRoster,#mStudent),#manage:not(.access) #mAccess{display:none}
-.access-scroll{overflow:auto}.access-table{width:100%;border-collapse:collapse;min-width:980px}.access-table :is(th,td){padding:9px 7px;border-bottom:1px solid var(--line);text-align:center}.access-table th{position:sticky;top:0;background:var(--surface);font-size:13px;white-space:nowrap;z-index:1}.access-table :is(th,td):first-child{text-align:start;position:sticky;right:0;background:var(--surface);z-index:2;min-width:190px}.access-table td:first-child{font-weight:700}.access-table td:first-child small{display:block;color:var(--muted);font-weight:400;direction:ltr;overflow:hidden;text-overflow:ellipsis}.access-table input{width:18px;height:18px}.access-table .save-cell{min-width:80px}
+.access-actions{display:flex;justify-content:flex-end;margin:8px 0}.access-scroll{overflow:auto}.access-table{width:100%;border-collapse:collapse;min-width:1180px}.access-table :is(th,td){padding:9px 10px;border-bottom:1px solid var(--line);text-align:center}.access-table th{position:sticky;top:0;background:var(--surface);font-size:13px;white-space:nowrap;z-index:1}.access-table th>span{display:block;margin-bottom:4px}.access-table .access-all{display:inline-flex;align-items:center;gap:4px;color:var(--muted);font-weight:600;cursor:pointer}.access-table .access-all small{font-size:11px}.access-table :is(th,td):first-child{text-align:start;position:sticky;right:0;background:var(--surface);z-index:2;min-width:260px}.access-table td:first-child{font-weight:700}.access-table td:first-child small{display:block;color:var(--muted);font-weight:400;direction:ltr;overflow:hidden;text-overflow:ellipsis}.access-table input{width:18px;height:18px}.access-table .save-cell{min-width:96px}
 @media(max-width:700px){.modes{grid-template-columns:repeat(2,1fr)}}
 .flag-review{gap:10px}.flag-review h2{margin:0}.flag-review .meta{color:var(--muted);font-size:13px}.flag-review fieldset{border:0;margin:0;padding:0;display:flex;flex-wrap:wrap;gap:7px}
 .flag-review fieldset label{display:flex;align-items:center;gap:5px;padding:6px 8px;border:1px solid var(--line);border-radius:9px}.flag-review select,.flag-review textarea{font:inherit;border:1px solid var(--line);border-radius:9px;padding:7px;background:var(--surface);color:var(--ink)}
@@ -1726,9 +1721,8 @@ function setTr(el,text){
 }
 /* Home is the path: one road winding down the screen through every lesson. A lesson opens with a banner, which
    opens its first unfinished topic; its topics follow as buttons along the road, and a cup closes it.
-   As in Duolingo, a topic is locked until every topic before it on the path is finished. A topic the student already
-   started stays open, and so does a homework topic: the teacher decides what the class practises. Nothing is locked for a teacher. */
-let FREE=false;   // a teacher: the whole path is open
+   Every topic is open, whatever comes before it on the path. */
+let FREE=false;   // a teacher
 let TUTOR_INFO=null, tc=null, tutorList=false;   // what /api/tutor allows this account; the open conversation; the games tab shows the scenarios
 let lastPhone=null;   // the latest ordinary recording's score response, for the teacher's phoneme observer
 let home=true;   // the path is on screen, not the practice card: nothing is read aloud or recorded
@@ -1995,7 +1989,7 @@ function drawVerbTable(box){
         tr.append(one(past),mark("","·","i"),one(future||"")); say.append(tr);
         say.onclick=async()=>{
           if(vtOnly) vtOnly.classList.remove("on"); vtOnly=say; say.classList.add("on");
-          const a=await answerAudio(p.id); if(a) await playUrl(a.url,true); else await speakLocal(p.ar,"ar");
+          const a=await answerAudio(p.id); if(a) await playUrl(a.url,true); else await speakLocal(p.ar_pointed||p.ar,"ar");
           say.classList.remove("on");
         };
         row.dataset.find=vtPlain(`${p.he} ${p.tr} ${p.ar}`); row.append(he,say); card.append(row);
@@ -2339,8 +2333,8 @@ function mgCount(){
 async function mgSay(p){   // the Arabic, in the lessons' voice, or else the device's
   if(mg.audio) mg.audio.pause();
   const a=await answerAudio(p.id); if(!mg) return;
-  if(!a){ speakLocal(p.ar,"ar"); return; }
-  const au=answerPlayer(a.url); mg.audio=au; au.play().catch(()=>speakLocal(p.ar,"ar"));
+  if(!a){ speakLocal(p.ar_pointed||p.ar,"ar"); return; }
+  const au=answerPlayer(a.url); mg.audio=au; au.play().catch(()=>speakLocal(p.ar_pointed||p.ar,"ar"));
 }
 function mgAt(b){ const r=b.el.getBoundingClientRect(), f=mg.field.getBoundingClientRect(); return {x:r.left-f.left+r.width/2,y:r.top-f.top+r.height/2}; }
 function mgBurst(x,y,many=12){
@@ -2539,8 +2533,7 @@ $("writeClose").onclick=()=>$("writeDlg").close();
 $("writeDlg").addEventListener("close",()=>{
   if(writeTimer){ clearTimeout(writeTimer); writeTimer=null; sendWriting(writeOpen); }   // what was just written is sent at once
   writeOpen=null; if(home&&!document.body.classList.contains("manage")) drawPath(true); });
-/* A lesson's new words ("learn" topic): a card a word, before the lesson's speaking topics, which stay locked until
-   every word was marked known once. Nothing is scored; what the student knows is kept on the device. A round goes
+/* A lesson's new words ("learn" topic): a card a word, before the lesson's speaking topics. Nothing is scored; what the student knows is kept on the device. A round goes
    through the words not known yet (all of them, shuffled, when every one is); "not yet" sends a word to the round's end. */
 let learned=store.get("ihki.learned",{}), learnRounds=store.get("ihki.learnRounds",{}), learning=null;   // known words; unfinished rounds; the round on screen
 let learnDriving=false, learnDriveRun=0, learnWakeLock=null;
@@ -2757,15 +2750,6 @@ function drawPath(stay){
   const road=document.createElementNS(NS,"svg"), stops=[];   // stops: the points the road goes through
   road.setAttribute("class","road"); road.setAttribute("aria-hidden","true"); box.innerHTML=""; box.append(road);
   let next=true, y=0;   // next: the first lesson that is not finished is the one to do now
-  let open=true;   // every topic so far is finished: the next one is not locked
-  const lock=(b,dot,name)=>{   // a locked stop: a padlock, and a tap says why
-    b.classList.add("locked"); b.setAttribute("aria-disabled","true"); dot.textContent="🔒";
-    b.title=`נעול: ${name}. קודם מסיימים את הנושאים שלפניו`; b.setAttribute("aria-label",b.title);
-    b.onclick=()=>{
-      if(b.querySelector(".tag")) return;
-      const tag=mark("tag",""); tag.append(mark("","נעול","small"),"סיימו את הקודם"); dot.before(tag); setTimeout(()=>tag.remove(),2200);
-    };
-  };
   let level=null;
   for(let k=0;k<LESSONS.length;k++){
     const l=LESSONS[k];
@@ -2782,21 +2766,11 @@ function drawPath(stay){
     const whole=tally(listed.filter(p=>cats.some(c=>c.id===p.cat))), now=!whole.over&&next;
     const todo=Math.max(0,parts.findIndex(t=>!t.over));   // the topic to do now, when this is the lesson to do now
     if(now) next=false;
-    const shut=items.map(({c})=>{   // locked: a topic before it is not finished (a written one, like a video, holds nothing back)
-      if(!c) return !open;
-      const t=parts[cats.indexOf(c)], s=!open&&!t.done&&!hws.some(h=>h.c===c);
-      if(t.n&&!t.over&&!c.write&&!((c.learn||c.match)&&whole.done)&&!FREE) open=false;   // new words and their game hold back only a lesson not yet practised
-      return s;
-    });
-    const go=parts.every(t=>t.over)?cats[0]:cats.find((c,i)=>!parts[i].over&&!shut[items.findIndex(it=>it.c===c)]);   // the topic the banner opens: none in a locked lesson
+    const go=cats[parts.findIndex(t=>!t.over)]||cats[0];   // the topic the banner opens: the first unfinished one
     const head=document.createElement("button");
     head.className="chapter"+(whole.gold?" gold":""); head.style.top=y+"px"; head.style.setProperty("--p",`${whole.n?whole.done/whole.n*100:0}%`);
     head.append(mark("",l.name),count(whole),document.createElement("i")); head.title=`${l.name}: תורגלו ${whole.done} מתוך ${whole.n}`;
     if(go) head.onclick=()=>openCat(go);
-    else{   // a locked lesson: its banner leads back to the topic to do now
-      head.classList.add("locked"); head.setAttribute("aria-disabled","true"); head.title=`נעול: ${l.name}. קודם מסיימים את הנושאים שלפניו`; head.querySelector("small").prepend("🔒 ");
-      head.onclick=()=>{ const at=box.querySelector("[aria-current]"); if(at) at.scrollIntoView({block:"center",behavior:"smooth"}); };
-    }
     box.append(head);
     y+=64+86;   // the banner, room for the bubble, half a button
     const seat=(b,i)=>{   // a button's place on the road, and its label
@@ -2811,7 +2785,7 @@ function drawPath(stay){
         b.classList.add("video"); dot.textContent="▶\uFE0E"; if(seen) dot.before(mark("badge","✓"));
         label.append(mark("",v.title,"b"),mark("",seen?"✓ נצפה":"סרטון","small")); b.append(label);
         b.title=`סרטון: ${v.title}`; b.setAttribute("aria-label",b.title);
-        b.onclick=()=>playVideo(v); if(shut[at]) lock(b,dot,v.title); box.append(b);
+        b.onclick=()=>playVideo(v); box.append(b);
         stops.push({x,y,went:seen,breakBefore:at===0}); y+=STEP; return;
       }
       const i=cats.indexOf(c), t=parts[i], cur=now&&i===todo, [b,dot]=ball(t,cur), [x,label]=seat(b,at);
@@ -2830,7 +2804,7 @@ function drawPath(stay){
       const did=c.write?"נכתבו":c.learn?"נלמדו":c.match?"הותאמו":"תורגלו";
       label.append(mine&&t.over?mark("","✓ שיעורי הבית הושלמו 🎉","small"):count(t,did)); b.append(label);
       b.title=(mine&&!t.over?`שיעורי בית, ${hw.msg}. `:"")+`${c.name}: ${did} ${t.done} מתוך ${t.n}`; b.setAttribute("aria-label",b.title);
-      b.onclick=()=>openCat(c); if(shut[at]) lock(b,dot,c.name); box.append(b);
+      b.onclick=()=>openCat(c); box.append(b);
       stops.push({x,y,went:t.over,cur,breakBefore:at===0}); y+=STEP;
     });
     const cup=document.createElement("div"), x=-SWAY[items.length%8]*amp;   // the lesson ends with the masbaha's ornamental finial
@@ -3717,7 +3691,7 @@ $("flagBtn").onclick=async()=>{
     const res=await api("/api/flags",{method:"POST",body:fd});
     if(!res.ok){ const e=await res.json().catch(()=>({})); throw new Error(e.detail||res.status); }
     const out=await res.json();
-    msg.textContent=out.audio?"נשמר למורה, עם ההקלטה. תודה!":"נשמר למורה, אבל בלי ההקלטה (אין מקום אחסון flags ב-Supabase).";
+    msg.textContent="האבחון נשמר למורה. קובץ הקול לא נשמר.";
     $("flagNote").disabled=true;   // one flag for a recording
     if(out.flag){ drawFlag(out.flag,out.audio); $("flagDlg").showModal(); }
   }catch(err){ msg.textContent="הדיווח לא נשמר: "+err.message; btn.disabled=false; }
@@ -3744,7 +3718,7 @@ function drawFlag(f,audio){
   fact("פונמות צפויות",mark("ipa",f.ipa)).className="ipa";
   fact("פונמות שנשמעו",mark("ipa",f.heard_ipa||"–")).className="ipa";
   if(f.note) fact("ההערה שלך",f.note);
-  fact("ההקלטה",audio?"נשמרה עם הדיווח":"לא נשמרה (אין מקום אחסון flags ב-Supabase)");
+  fact("פרטיות","קובץ הקול עובד לצורך האבחון ולא נשמר");
   fact("המודל",mark("ipa",f.model+(f.version?" · "+f.version:""))).className="ipa";
 }
 $("flagClose").onclick=()=>$("flagDlg").close();
@@ -3859,7 +3833,7 @@ async function bubbleOutcome(r,expired=false){
     if(cur.id!==id||home) return;
     const a=await answerAudio(id);
     if(cur.id!==id||home) return;
-    if(a) await playUrl(a.url,true); else await speakLocal(cur.ar,"ar");
+    if(a) await playUrl(a.url,true); else await speakLocal(cur.ar_pointed||cur.ar,"ar");
     await pause(80);
   }
   bubbleResolving=false;
@@ -4089,7 +4063,13 @@ function playUrl(url,answer){   // answer: the Arabic answer, played at the chos
 function speakLocal(text,lang){   // device voice, when the server could not speak
   return new Promise(res=>{
     if(!("speechSynthesis" in window)) return res();
-    const u=new SpeechSynthesisUtterance(text); u.lang=lang; if(lang==="ar") u.rate=answerRate(); u.onend=u.onerror=()=>res();
+    const u=new SpeechSynthesisUtterance(text);
+    if(lang==="ar"){
+      const v=arVoice();
+      if(v){ u.voice=v; u.lang=v.lang; } else u.lang="ar-PS";
+      u.rate=answerRate();
+    }else u.lang=lang;
+    u.onend=u.onerror=()=>res();
     speechSynthesis.cancel(); speechSynthesis.speak(u);
   });
 }
@@ -4233,7 +4213,7 @@ const ACCESS_COLUMNS=[
   {label:"מעבדה",kind:"roles",value:"developer",permission:"lab.access"},
   {label:"משחקים",kind:"entitlements",value:"games",permission:"games.use"},
   {label:"ספרייה דיגיטלית",kind:"entitlements",value:"library",permission:"library.view"},
-  {label:"דיווח תקלות",kind:"roles",value:"flagger",permission:"flags.create"},
+  {label:"דיווחי תקלות",kind:"roles",value:"flagger",permission:"flags.create"},
   {label:"יאללה נדבר",kind:"entitlements",value:"tutor",permission:"tutor.use"},
   {label:"מסלול",kind:"entitlements",value:"path",permission:"path.use"},
 ];
@@ -4254,31 +4234,58 @@ function drawAccess(){
   const note=mark("sub","כל עמודה היא הרשאה נפרדת. יאללה נדבר מופרד ממשחקים כי הוא משתמש בשירות API בתשלום. רק מפתחים יכולים לתת גישה למעבדה.","p"); box.append(note);
   if(ACCESS.migration){ const details=document.createElement("details"), summary=document.createElement("summary"), code=mark("",ACCESS.migration,"code"); summary.textContent="שדרוג טבלת הרשאות קיימת"; code.dir="ltr"; details.className="setup"; details.append(summary,code); box.append(details); }
   const scroll=mark("access-scroll",""), table=mark("access-table","","table"), head=document.createElement("thead"), hr=document.createElement("tr");
-  hr.append(mark("","משתמש","th")); for(const col of ACCESS_COLUMNS) hr.append(mark("",col.label,"th")); hr.append(mark("","","th")); head.append(hr); table.append(head);
+  const allFor=col=>[...table.querySelectorAll('tbody input[type="checkbox"]')].filter(x=>!x.disabled&&x.dataset.kind===col.kind&&x.value===col.value);
+  const syncAll=()=>{
+    for(const col of ACCESS_COLUMNS){
+      const master=head.querySelector(`input[data-kind="${col.kind}"][value="${col.value}"]`), inputs=allFor(col), marked=inputs.filter(x=>x.checked).length;
+      master.checked=!!inputs.length&&marked===inputs.length; master.indeterminate=marked>0&&marked<inputs.length; master.disabled=!inputs.length;
+    }
+  };
+  hr.append(mark("","משתמש","th"));
+  for(const col of ACCESS_COLUMNS){
+    const th=document.createElement("th"), label=mark("",col.label,"span"), all=document.createElement("input"), allLabel=mark("access-all","","label");
+    all.type="checkbox"; all.dataset.kind=col.kind; all.value=col.value; all.setAttribute("aria-label",`סימון כל המשתמשים: ${col.label}`); all.title=`סימון כל המשתמשים בעמודה ${col.label}`;
+    all.onchange=()=>{ for(const input of allFor(col)){ input.checked=all.checked; input.closest("tr").dataset.dirty="1"; } syncAll(); };
+    allLabel.append(all,mark("","הכול","small")); th.append(label,allLabel); hr.append(th);
+  }
+  hr.append(mark("","","th")); head.append(hr); table.append(head);
   const body=document.createElement("tbody");
+  const selected=(row,kind)=>[...row.querySelectorAll(`input[data-kind="${kind}"]:checked`)].map(x=>x.value);
+  const saveRow=async(row,user,save)=>{
+    const roles=[...(user.roles||[]).filter(x=>!["admin","developer","flagger"].includes(x)),...selected(row,"roles")], entitlements=selected(row,"entitlements");
+    if(!roles.length) roles.push("student");
+    save.disabled=true;
+    try{
+      const res=await api(`/api/access/users/${user.id}`,{method:"PUT",headers:{"Content-Type":"application/json"},body:JSON.stringify({roles,entitlements})});
+      const data=await res.json().catch(()=>({})); if(!res.ok) throw new Error(data.detail||res.status);
+      user.roles=roles; user.entitlements=entitlements; delete row.dataset.dirty; save.disabled=false; return true;
+    }catch(e){ note.textContent="השמירה נכשלה: "+e.message; save.disabled=false; return false; }
+  };
   for(const user of ACCESS.users||[]){
-    const row=document.createElement("tr"), who=document.createElement("td"), email=mark("",user.email,"small"); email.dir="ltr"; who.append(user.name||user.email,email); row.append(who);
+    const row=document.createElement("tr"), who=document.createElement("td"), email=mark("",user.email,"small"), rowLocked=user.id===ACCESS.me||((user.fixed_roles||[]).includes("developer")&&!can("lab.access")); email.dir="ltr"; who.append(user.name||user.email,email); row.append(who);
     for(const col of ACCESS_COLUMNS){
       const td=document.createElement("td"), input=document.createElement("input"); input.type="checkbox"; input.dataset.kind=col.kind; input.value=col.value; input.checked=(user[col.kind]||[]).includes(col.value)||(user.permissions||[]).includes("*")||(user.permissions||[]).includes(col.permission);
       input.setAttribute("aria-label",`${col.label}: ${user.name||user.email}`);
-      input.disabled=user.id===ACCESS.me||(col.value==="developer"&&!can("lab.access"))||(user.fixed_roles||[]).includes(col.value);
+      input.disabled=rowLocked||(col.value==="developer"&&!can("lab.access"))||(user.fixed_roles||[]).includes(col.value);
+      input.onchange=()=>{ row.dataset.dirty="1"; syncAll(); };
       if((user.fixed_roles||[]).includes(col.value)) input.title="נקבע בהגדרות השרת"; td.append(input); row.append(td);
     }
-    const save=mark("btn primary","שמירה","button"), saveCell=mark("save-cell","","td"); saveCell.append(save); row.append(saveCell); save.disabled=user.id===ACCESS.me||((user.fixed_roles||[]).includes("developer")&&!can("lab.access"));
-    save.onclick=async()=>{
-      const selected=kind=>[...row.querySelectorAll(`input[data-kind="${kind}"]:checked`)].map(x=>x.value);
-      const roles=[...(user.roles||[]).filter(x=>!["admin","developer","flagger"].includes(x)),...selected("roles")];
-      if(!roles.length) roles.push("student");
-      save.disabled=true;
-      try{
-        const res=await api(`/api/access/users/${user.id}`,{method:"PUT",headers:{"Content-Type":"application/json"},body:JSON.stringify({roles,entitlements:selected("entitlements")})});
-        const data=await res.json().catch(()=>({})); if(!res.ok) throw new Error(data.detail||res.status);
-        note.textContent=`ההרשאות של ${user.name||user.email} נשמרו.`; await loadAccess(); drawAccess();
-      }catch(e){ note.textContent="השמירה נכשלה: "+e.message; save.disabled=false; }
-    };
+    const save=mark("btn primary","שמירה","button"), saveCell=mark("save-cell","","td"); saveCell.append(save); row.append(saveCell); save.disabled=rowLocked;
+    save.onclick=async()=>{ if(await saveRow(row,user,save)) note.textContent=`ההרשאות של ${user.name||user.email} נשמרו.`; };
+    row._access={user,save};
     body.append(row);
   }
-  table.append(body); scroll.append(table); box.append(scroll);
+  const saveAll=mark("btn primary","שמירת כל השינויים","button"), actions=mark("access-actions","","div"); actions.append(saveAll);
+  saveAll.onclick=async()=>{
+    const rows=[...body.rows].filter(row=>row.dataset.dirty&&row._access);
+    if(!rows.length){ note.textContent="אין שינויים לשמור."; return; }
+    saveAll.disabled=true; let saved=0;
+    for(const row of rows){ const {user,save}=row._access; if(await saveRow(row,user,save)) saved++; }
+    saveAll.disabled=false; syncAll();
+    if(saved===rows.length) note.textContent=`נשמרו הרשאות עבור ${saved} משתמשים.`;
+    else note.textContent=`נשמרו ${saved} מתוך ${rows.length} משתמשים. בדקו את השורות שלא נשמרו.`;
+  };
+  table.append(body); syncAll(); scroll.append(table); box.append(actions,scroll);
 }
 function drawManage(){
   const classes=CLASS.classes||[];

tests/test_scoring.py

@@ -1714,24 +1714,21 @@ def test_a_tutor_flags_a_recording_scored_wrong(monkeypatch):
         def texts(self, fresh=False):
             return []
 
-        def add_flag(self, row, audio, mime, name):
+        def add_flag(self, row):
             if not self.table:
                 raise AuthUnavailable("supabase answered 404: no table")
-            self.flags.append((row, audio, mime, name))
-            return True
+            self.flags.append(row)
 
         def list_flags(self, status="pending"):
             if status != "pending":
                 return []
-            return [{"id": i + 1, **row, "status": status} for i, (row, _, __, ___) in enumerate(self.flags)]
+            return [{"id": i + 1, **row, "status": status} for i, row in enumerate(self.flags)]
 
         def review_flag(self, flag_id, values):
             self.review = (flag_id, values)
 
         def flag_audio(self, flag_id):
-            if flag_id < 1 or flag_id > len(self.flags):
-                return None
-            return self.flags[flag_id - 1][1], self.flags[flag_id - 1][2]
+            return None
 
         def calibrations(self, status=None):
             return [r for r in self.calibration_rows if not status or r["status"] == status]
@@ -1780,12 +1777,11 @@ def test_a_tutor_flags_a_recording_scored_wrong(monkeypatch):
         assert c.post("/api/flags", data={"phrase_id": pid}, files={"audio": ("rec", b"x", "audio/wav")}).status_code == 401
         assert send(c, "s").status_code == 403 and not a.flags   # tutors only
         r = send(c, "t", note="  אמרתי  ח נכונה ")
-        (row, audio, mime, name), = a.flags
-        assert r.status_code == 200 and r.json() == {"ok": True, "audio": True, "flag": row}, r.text   # the page shows what was kept
+        row, = a.flags
+        assert r.status_code == 200 and r.json() == {"ok": True, "audio": False, "flag": row}, r.text
         assert row["email"] == "t@b.c" and row["cat"] == TOILET["cat"] and row["he"] == TOILET["he"] and row["note"] == "אמרתי ח נכונה"
         assert row["ipa"] == "w eː n | i l ħ a m m aː m" and "χ" in row["heard_ipa"] and row["score"] == row["result"]["score"] < 100
         assert row["result"]["tips"][0]["key"] == "ħ>x" and "phoneme_heatmap" not in row["result"]
-        assert audio == buf.getvalue() and mime == "audio/wav" and re.fullmatch(r"\d{4}-\d\d/[0-9a-f]{32}\.wav", name)
         assert send(c, "t", phrase_id=10**6).status_code == 404
         a.teachers = frozenset({"s@b.c"})   # a teacher flags too
         assert c.get("/api/me", headers={"Authorization": "Bearer s"}).json()["tutor"] is True and send(c, "s").status_code == 200
@@ -1793,7 +1789,7 @@ def test_a_tutor_flags_a_recording_scored_wrong(monkeypatch):
         listed = c.get("/api/flags", headers=hs)
         assert listed.status_code == 200 and len(listed.json()["flags"]) == 2
         played = c.get("/api/flags/1/audio", headers=hs)
-        assert played.status_code == 200 and played.content == buf.getvalue() and played.headers["content-type"] == "audio/wav"
+        assert played.status_code == 404   # reports keep diagnostics, not the user's voice recording
         assert c.get("/api/flags/999/audio", headers=hs).status_code == 404
         review = c.put("/api/flags/1", headers=hs, json={"status": "confirmed", "category": "recognition",
                        "false_issues": [{"word": 1, "expected": "ħ", "heard": "χ"}], "review_note": "  תקין  "})