feat: implement prompter functionality with save, edit, and delete features, including API routes and tests

app/main.py

@@ -28,6 +28,7 @@ from .class_report import install_class_report_routes, install_exam_topic_routes
 from .teacher_review import install_teacher_review_routes
 from .assignments import install_assignment_routes
 from .progress import install_progress_routes
+from .prompter import install_prompter_routes
 from .push import install_push_routes
 from .monitoring import ActionLog, RETURN_GAP, install_monitoring_routes
 from .unit_resources import install_resource_routes
@@ -316,6 +317,7 @@ def create_app(auth: SupabaseAuth | None = None) -> FastAPI:
         return {**result, "left": DAILY_PHOTOS - photo_counts.get(counter, 0) if counter else None}
 
     install_progress_routes(app, signed_in)
+    install_prompter_routes(app, signed_in)
     install_class_report_routes(app, signed_in, units_of)
     install_exam_topic_routes(app, signed_in, units_of)
     install_push_routes(app, signed_in)

app/prompter.py

@@ -0,0 +1,95 @@
+"""The prompter's saved texts (ניהול ← פרומפטר, static/prompter.js), kept with the account so they are on every device.
+
+For developers only (the management.access permission, like the rest of ניהול). Each account sees only its own texts.
+They are kept in the Supabase table `math_prompter_texts`, read and written with the server's secret key.
+"""
+from __future__ import annotations
+
+import logging
+import re
+import urllib.parse
+from datetime import datetime, timezone
+
+from fastapi import Body, Depends, HTTPException
+from fastapi.responses import JSONResponse
+
+from .access import has_permission
+from .auth import AuthUnavailable
+
+log = logging.getLogger("mathly.prompter")
+MIGRATION = "supabase/migrations/20261106130000_math_prompter_texts.sql"
+TABLE = "/rest/v1/math_prompter_texts"
+MAX_TITLE, MAX_BODY, MAX_TEXTS = 120, 100_000, 200
+UUID = re.compile(r"^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$")
+FIELDS = "id,title,body,updated_at"
+
+
+def clean(body: dict) -> dict:
+    """The title and text from a request, or HTTPException 400. An empty title becomes the text's first line."""
+    if not isinstance(body, dict):
+        raise HTTPException(400, "send {\"title\": ..., \"body\": ...}")
+    text, title = body.get("body"), body.get("title", "")
+    if not isinstance(text, str) or not isinstance(title, str):
+        raise HTTPException(400, "send {\"title\": ..., \"body\": ...}")
+    if not text.strip():
+        raise HTTPException(400, "empty_text")
+    if len(text) > MAX_BODY:
+        raise HTTPException(413, "text_too_long")
+    title = " ".join(title.split()) or " ".join(text.strip().splitlines()[0].split())
+    return {"title": title[:MAX_TITLE], "body": text}
+
+
+def install_prompter_routes(app, signed_in):
+    """GET/POST /api/prompter/texts and PUT/DELETE /api/prompter/texts/{id}: the developer's own saved texts."""
+    def developer(user=Depends(signed_in)) -> str:
+        if not user or not user.get("id"):
+            raise HTTPException(401, "sign_in_required")
+        if not has_permission(user, "management.access"):
+            raise HTTPException(403, "developers_only")
+        return user["id"]
+
+    def admin(path: str, method: str = "GET", body=None, prefer: str = "return=representation"):
+        try:
+            return app.state.auth._admin(path, method, body, prefer=prefer)
+        except AuthUnavailable as exc:
+            if "answered 404" in str(exc):
+                log.warning("the math_prompter_texts table is missing; apply %s", MIGRATION)
+            else:
+                log.error("prompter texts unavailable: %s", exc)
+            raise HTTPException(503, "prompter_unavailable") from exc
+
+    def one(text_id: str, user: str) -> str:
+        if not UUID.match(text_id):
+            raise HTTPException(404, "not_found")
+        return urllib.parse.urlencode({"id": f"eq.{text_id}", "user_id": f"eq.{user}"})
+
+    def now() -> str:
+        return datetime.now(timezone.utc).isoformat()
+
+    @app.get("/api/prompter/texts")
+    def list_texts(user: str = Depends(developer)):
+        rows = admin(f"{TABLE}?select={FIELDS}&order=updated_at.desc&limit={MAX_TEXTS}&"
+                     + urllib.parse.urlencode({"user_id": f"eq.{user}"})) or []
+        return JSONResponse({"texts": rows}, headers={"Cache-Control": "no-store"})
+
+    @app.post("/api/prompter/texts")
+    def add_text(body: dict = Body(...), user: str = Depends(developer)):
+        row = clean(body)
+        have = admin(f"{TABLE}?select=id&limit={MAX_TEXTS}&" + urllib.parse.urlencode({"user_id": f"eq.{user}"})) or []
+        if len(have) >= MAX_TEXTS:
+            raise HTTPException(409, "too_many_texts")
+        rows = admin(f"{TABLE}?select={FIELDS}", "POST", {**row, "user_id": user, "updated_at": now()}) or []
+        return {"text": rows[0] if rows else None}
+
+    @app.put("/api/prompter/texts/{text_id}")
+    def save_text(text_id: str, body: dict = Body(...), user: str = Depends(developer)):
+        row = clean(body)
+        rows = admin(f"{TABLE}?select={FIELDS}&" + one(text_id, user), "PATCH", {**row, "updated_at": now()}) or []
+        if not rows:
+            raise HTTPException(404, "not_found")
+        return {"text": rows[0]}
+
+    @app.delete("/api/prompter/texts/{text_id}")
+    def delete_text(text_id: str, user: str = Depends(developer)):
+        admin(f"{TABLE}?" + one(text_id, user), "DELETE", prefer="return=minimal")
+        return {"ok": True}

docs/project.prd

@@ -0,0 +1,87 @@
+Glossary:
+
+- skill (מיומנות): a specific topic like פירוק טרינום
+- exercise (תרגיל): a qustion on a certain topic, can be either open ended or multiple choice
+- lesson (שיעור): set of skills like טכניקה אלגברית 1
+- quiz (בוחן): a test on a single lesson, can be retaken, best grade wins. each retake draws new questions
+- exrcise test (מבחן תרגול): a timed test on a set of a lessons, can be retaken, best grade wins
+- simulation test (מבחן סימלוציה): a timed test on a set of a lessons, one time only
+- test: real life test, appears in app as a date + the lessons it covers. set by the teacher
+
+
+
+Goals:
+
+The app helps the student to:
+1. master the skills - done by the path
+2. get ready for the real life tests - done by the test countdown plan
+
+
+
+Goal 1: Mastering the skills (the path)
+
+Each skill goes through these stages:
+1. worked example: the student sees a full solution and is asked "why this step?"
+2. faded examples: steps are removed one at a time, the student fills them in
+3. practice: immediate feedback that names the specific mistake.
+   after a wrong answer, the student gets a similar question (not the same one)
+4. mastered: 3 correct answers in a row, without hints, across at least 2 different days
+
+Skill states:
+- not started
+- learning
+- mastered
+- needs review: a mastered skill becomes "needs review" after some days without practice
+
+Path rules:
+- the lesson's quiz (בוחן) unlocks the next lesson
+- daily review: a short mixed set of "needs review" skills from different lessons
+
+
+
+Goal 2: Getting ready for the real test
+
+The teacher sets the test date and the lessons it covers.
+The app plans backwards from the date:
+
+- 3+ weeks before: finish the path for all the covered lessons
+- 1-3 weeks before: exercise tests (מבחן תרגול) - timed, mixing all the covered lessons.
+  each result points back to the weak skills in the path
+- final week: simulation test (מבחן סימלוציה) - required. one attempt,
+  same length and timing as the real test
+- last days: targeted review of the skills that failed in the simulation,
+  light mixed review the day before
+
+Readiness meter (per test):
+- % of the covered skills that are mastered
+- recent exercise test grades
+- simulation test grade
+
+
+
+Student Screen:
+- home
+  - my assignments (המשימות שלי): homewords submitted by the teacher
+  - remider on the upcoming test: days left, readiness meter, today's task
+  -
+
+- path
+- grades
+- collection
+
+
+
+Teacher Screen:
+- assignments
+  - give an assignment. load it from:
+    - the computer (file upload)
+    - the board
+    - a picture (camera)
+  - check assignments: review each student's submitted answers and give feedback/grade
+- tests
+  - set a real life test: date + the lessons it covers
+  - see who took the required simulation test
+- class heat map
+  - rows: students, columns: skills
+  - each cell is colored by the skill state (not started / learning / mastered / needs review)
+  - period filter: sep-dec, dec-jun

static/math.css

@@ -182,7 +182,10 @@ html.math-on, html.math-on body{overflow:hidden}
 }
 .mx-manage-head{display:flex;align-items:center;gap:8px;flex-wrap:wrap}
 .mx-manage-head h3{font-size:30px;color:var(--mx-accent)}
-.mx-prompter-text{width:100%;box-sizing:border-box;min-height:220px;padding:12px;border:1px solid var(--mx-line,#ccc);border-radius:12px;font:inherit;font-size:17px;line-height:1.5;resize:vertical;background:var(--mx-card,#fff);color:inherit;margin-block:10px}
+.mx-prompter-title{width:100%;box-sizing:border-box;padding:10px 12px;border:1px solid var(--line);border-radius:12px;font:inherit;font-size:17px;background:var(--bg);color:inherit;margin-top:10px}
+.mx-prompter-acts,.mx-prompter-row{display:flex;flex-wrap:wrap;gap:8px}
+.mx-prompter-list article[aria-current="true"]{outline:2px solid var(--mx-accent)}
+.mx-prompter-text{width:100%;box-sizing:border-box;min-height:220px;padding:12px;border:1px solid var(--line);border-radius:12px;font:inherit;font-size:17px;line-height:1.5;resize:vertical;background:var(--bg);color:inherit;margin-block:10px}
 .mx-manage-spacer{flex:1}
 .mx-manage-state{min-height:18px;margin:0;color:var(--muted);font-size:13px}
 .mx-manage-modes{display:grid;grid-template-columns:repeat(5,minmax(0,1fr));gap:4px;padding:4px;border-radius:14px;background:var(--line)}

static/math.js

@@ -1751,6 +1751,9 @@ function onClick(e){
   if(t.dataset.comet) return showComet(t.dataset.comet);
   if(t.dataset.id) return open(t.dataset.id);
   if(t.dataset.manageMode) return showManageMode(t.dataset.manageMode);
+  if(t.dataset.prompterPlay) return window.MathlyPrompter?.open(PR.texts.find(x=>x.id===t.dataset.prompterPlay)?.body);
+  if(t.dataset.prompterOpen) return prEdit(t.dataset.prompterOpen);
+  if(t.dataset.prompterDel) return prDelete(t.dataset.prompterDel);
   if(t.dataset.classAction) return manageClassAction(t.dataset.classAction,t.dataset.classId);
   if(t.dataset.reportClass!=null) return classReport(t.dataset.reportClass);
   if(t.dataset.reportStudent!=null) return reportOpenStudent(t.dataset.reportStudent);
@@ -1768,6 +1771,9 @@ function onClick(e){
     case "manage-lab": return showManageMode("lab");
     case "manage-prompter": return showManageMode("prompter");
     case "prompter-go": return window.MathlyPrompter?.open(sheet.querySelector("#mxPrompterText")?.value);
+    case "prompter-save": return prSave(false);
+    case "prompter-save-new": return prSave(true);
+    case "prompter-new": return prNew();
     case "manage-practice": return closeSheet();
     case "preview-on": return setPreview(true);
     case "preview-off": return setPreview(false);
@@ -1900,21 +1906,90 @@ function showManageMode(mode){
     box.innerHTML=`<div class="mx-manage-title"><h4>הרשאות</h4><span>תפקידים וגישה</span></div><div class="mx-access-card"><small>התפקידים שלך</small><div class="mx-tag-row">${roles.length?roles.map(role=>`<span>${esc(role)}</span>`).join(""):'<span>מנהל/ת</span>'}</div><small>הרשאות פעילות</small><div class="mx-tag-row">${permissions.map(permission=>`<span dir="ltr">${esc(permission)}</span>`).join("")}</div></div>`;
     return;
   }
-  if(mode==="prompter"){
-    // a developer tool: the text is kept only in this browser, so it is still there the next time
-    let saved=""; try{saved=localStorage.getItem("mathly.prompterText")||"";}catch{}
-    box.innerHTML=`<div class="mx-manage-title"><h4>פרומפטר</h4><span>טקסט לקריאה מול המצלמה</span></div>
-      <textarea id="mxPrompterText" class="mx-prompter-text" dir="auto" rows="12" placeholder="הדביקו או כתבו כאן את הטקסט…" aria-label="טקסט לפרומפטר">${esc(saved)}</textarea>
-      <p class="mx-note">רווח: הפעלה/עצירה · ↑/↓: מהירות · +/−: גודל · M: מראה · F: מסך מלא · Esc: יציאה</p>
-      <p class="mx-note">עכבר: לחיצה – הפעלה/עצירה · גלגלת בזמן ריצה – מהירות · לחצן ימני – כמה שורות אחורה · לחצן אמצעי או "אחורה" – להתחלה. שלט מצגות (Page Down/Up) עובד גם הוא.</p>
-      <button class="mx-btn solid" data-act="prompter-go">הצגה בפרומפטר</button>`;
-    const area=box.querySelector("#mxPrompterText");
-    area.addEventListener("input",()=>{try{localStorage.setItem("mathly.prompterText",area.value);}catch{}});
-    area.focus(); return;
-  }
+  if(mode==="prompter") return drawPrompter(box);
   box.innerHTML='<div class="mx-manage-title"><h4>מעבדה</h4><span>כלים לבדיקה ופיתוח</span></div><p class="mx-note">כלי המעבדה למתמטיקה יתווספו כאן. אפשר לחזור לכל אזור ניהול מהכרטיסיות למעלה.</p>';
 }
 
+/* Prompter (פרומפטר): a developer writes or picks a text and shows it full screen (static/prompter.js).
+   Saved texts are kept with the account (app/prompter.py), so they are on every device; the text being edited is
+   also kept in this browser, so nothing is lost before it is saved. */
+let PR={texts:[],id:null,loaded:false};
+function prDraft(){ try{return JSON.parse(localStorage.getItem("mathly.prompterDraft")||"null")||{title:"",body:localStorage.getItem("mathly.prompterText")||"",id:null};}catch{return {title:"",body:"",id:null};} }
+function prKeep(){
+  const title=sheet.querySelector("#mxPrompterTitle"), body=sheet.querySelector("#mxPrompterText"); if(!title||!body) return;
+  try{localStorage.setItem("mathly.prompterDraft",JSON.stringify({title:title.value,body:body.value,id:PR.id}));}catch{}
+}
+function prSay(text){ const el=sheet.querySelector(".mx-prompter-state"); if(el) el.textContent=text; }
+function prDate(at){ try{return new Date(at).toLocaleString("he-IL",{day:"numeric",month:"numeric",year:"2-digit",hour:"2-digit",minute:"2-digit"});}catch{return "";} }
+function drawPrompter(box){
+  const draft=prDraft(); PR.id=draft.id||null;
+  box.innerHTML=`<div class="mx-manage-title"><h4>פרומפטר</h4><span>טקסט לקריאה מול המצלמה</span></div>
+    <input id="mxPrompterTitle" class="mx-prompter-title" dir="auto" maxlength="120" placeholder="שם הטקסט (לא חובה)" aria-label="שם הטקסט" value="${esc(draft.title||"")}">
+    <textarea id="mxPrompterText" class="mx-prompter-text" dir="auto" rows="12" placeholder="הדביקו או כתבו ��אן את הטקסט…" aria-label="טקסט לפרומפטר">${esc(draft.body||"")}</textarea>
+    <div class="mx-prompter-acts">
+      <button class="mx-btn solid" data-act="prompter-go">הצגה בפרומפטר</button>
+      <button class="mx-btn" data-act="prompter-save">שמירה</button>
+      <button class="mx-btn" data-act="prompter-save-new">שמירה כטקסט חדש</button>
+      <button class="mx-btn" data-act="prompter-new">טקסט חדש</button></div>
+    <p class="mx-prompter-state mx-note" role="status" aria-live="polite"></p>
+    <p class="mx-note">רווח: הפעלה/עצירה · ↑/↓: מהירות · +/−: גודל · M: מראה · F: מסך מלא · Esc: יציאה</p>
+    <p class="mx-note">עכבר: לחיצה – הפעלה/עצירה · גלגלת בזמן ריצה – מהירות · לחצן ימני – כמה שורות אחורה · לחצן אמצעי או "אחורה" – להתחלה. שלט מצגות (Page Down/Up) עובד גם הוא.</p>
+    <div class="mx-manage-title"><h4>טקסטים שמורים</h4><span class="mx-prompter-count"></span></div>
+    <div class="mx-prompter-list mx-manage-list"><p class="mx-note">טוענים…</p></div>`;
+  box.querySelectorAll("#mxPrompterTitle,#mxPrompterText").forEach(el=>el.addEventListener("input",prKeep));
+  prMark(); box.querySelector("#mxPrompterText").focus();
+  prLoad();
+}
+function prMark(){ prSay(PR.id?`עורכים את „${PR.texts.find(t=>t.id===PR.id)?.title||"הטקסט השמור"}”. „שמירה” מעדכנת אותו.`:""); }
+function prList(){
+  const list=sheet.querySelector(".mx-prompter-list"); if(!list) return;
+  sheet.querySelector(".mx-prompter-count").textContent=PR.texts.length?`${PR.texts.length} טקסטים`:"";
+  list.innerHTML=PR.texts.length?PR.texts.map(t=>`<article${t.id===PR.id?' aria-current="true"':""}><b dir="auto">${esc(t.title)}</b><small>${esc(prDate(t.updated_at))} · ${t.body.length.toLocaleString("he-IL")} תווים</small>
+      <span class="mx-prompter-row"><button class="mx-btn solid" data-prompter-play="${t.id}">הצגה</button><button class="mx-btn" data-prompter-open="${t.id}">עריכה</button><button class="mx-btn" data-prompter-del="${t.id}">מחיקה</button></span></article>`).join("")
+    :'<p class="mx-note">עדיין אין טקסטים שמורים. כתבו טקסט ולחצו „שמירה”.</p>';
+}
+async function prLoad(){
+  try{
+    const r=await api("/api/prompter/texts"); if(!r.ok) throw new Error();
+    PR.texts=(await r.json()).texts||[]; PR.loaded=true;
+    if(PR.id&&!PR.texts.some(t=>t.id===PR.id)) PR.id=null;
+    prList(); prMark();
+  }catch{ const list=sheet.querySelector(".mx-prompter-list"); if(list) list.innerHTML='<p class="mx-note">לא הצלחנו לטעון את הטקסטים השמורים. הטקסט שכתבתם נשמר בדפדפן הזה.</p>'; }
+}
+async function prSave(asNew){
+  const title=sheet.querySelector("#mxPrompterTitle").value, body=sheet.querySelector("#mxPrompterText").value;
+  if(!body.trim()) return prSay("אין טקסט לשמור.");
+  const id=asNew?null:PR.id;
+  prSay("שומרים…");
+  try{
+    const r=await api(id?`/api/prompter/texts/${id}`:"/api/prompter/texts",{method:id?"PUT":"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({title,body})});
+    if(r.status===409) return prSay("יש כבר 200 טקסטים שמורים. מחקו אחד כדי לשמור עוד.");
+    if(r.status===404&&id){ PR.id=null; return prSave(true); }     // deleted on another device: keep it as a new one
+    if(!r.ok) throw new Error();
+    const {text}=await r.json();
+    PR.texts=[text,...PR.texts.filter(t=>t.id!==text.id)]; PR.id=text.id;
+    sheet.querySelector("#mxPrompterTitle").value=text.title; prKeep(); prList();
+    prSay(`נשמר: „${text.title}”.`);
+  }catch{ prSay("השמירה נכשלה. הטקסט עדיין כאן ובדפדפן הזה; נסו שוב."); }
+}
+function prEdit(id){
+  const t=PR.texts.find(x=>x.id===id); if(!t) return;
+  PR.id=id; sheet.querySelector("#mxPrompterTitle").value=t.title; sheet.querySelector("#mxPrompterText").value=t.body;
+  prKeep(); prList(); prMark(); sheet.querySelector("#mxPrompterText").focus();
+}
+function prNew(){
+  PR.id=null; sheet.querySelector("#mxPrompterTitle").value=""; sheet.querySelector("#mxPrompterText").value="";
+  prKeep(); prList(); prSay(""); sheet.querySelector("#mxPrompterTitle").focus();
+}
+async function prDelete(id){
+  const t=PR.texts.find(x=>x.id===id); if(!t||!confirm(`למחוק את „${t.title}”?`)) return;
+  try{
+    const r=await api(`/api/prompter/texts/${id}`,{method:"DELETE"}); if(!r.ok) throw new Error();
+    PR.texts=PR.texts.filter(x=>x.id!==id); if(PR.id===id){PR.id=null; prKeep();}
+    prList(); prSay(`„${t.title}” נמחק.`);
+  }catch{ prSay("המחיקה נכשלה. נסו שוב."); }
+}
+
 /* Monitoring (ניטור): a snapshot of the system, open-answer activity, and the server's latest warnings.
    Each source loads and fails on its own, so a slow Supabase does not hold up the rest. */
 const MON_RANGES={day:["יום","24 השעות האחרונות","15 דקות"],week:["שבוע","7 הימים האחרונים","שעה"],month:["חודש","30 הימים האחרונים","יום"]};

static/prompter.js

@@ -28,7 +28,7 @@ const CSS=`
 .mxp-progress{height:3px;background:#222}.mxp-progress i{display:block;height:100%;width:0;background:#f5c518}
 .mxp-count{position:absolute;inset:0;display:grid;place-items:center;font-size:30vh;font-weight:700;color:#f5c518;background:rgba(0,0,0,.6);pointer-events:none}
 `;
-let wheel=0,root,scroller,textEl,guide,bar,raf=0,last=0,playing=false,speed=40,size=64,mirror=false,acc=0,countTimer=0,back=null;
+let wheel=0,keepOpen=false,root,scroller,textEl,guide,bar,raf=0,last=0,playing=false,speed=40,size=64,mirror=false,acc=0,countTimer=0,back=null;
 
 function save(){try{localStorage.setItem("mathly.prompter",JSON.stringify({speed,size,mirror}))}catch{}}
 function load(){try{const s=JSON.parse(localStorage.getItem("mathly.prompter")||"{}");if(s.speed)speed=s.speed;if(s.size)size=s.size;mirror=!!s.mirror}catch{}}
@@ -70,6 +70,7 @@ function play(on){
 
 function countdown(){
   if(playing||root.querySelector(".mxp-count")) return play(false);   // a second press during 3-2-1 cancels it
+  if(scroller.scrollTop>0) return play(true);                         // 3-2-1 only from the start; after a pause it resumes at once
   let n=3; const el=document.createElement("div"); el.className="mxp-count"; el.textContent=n; root.querySelector(".mxp-view").appendChild(el);
   countTimer=setInterval(()=>{n--; if(n>0) el.textContent=n; else play(true);},700);
 }
@@ -84,7 +85,7 @@ function act(p){
     case "mirror": mirror=!mirror; break;
     case "top": scroller.scrollTop=0; acc=0; progress(); break;
     case "back": scroller.scrollTop-=size*1.45*3; acc=0; progress(); return;
-    case "full": if(document.fullscreenElement) document.exitFullscreen?.(); else root.requestFullscreen?.().catch(()=>{}); return;
+    case "full": if(document.fullscreenElement){keepOpen=true; document.exitFullscreen?.();} else root.requestFullscreen?.().catch(()=>{}); return;
     case "close": return close();
   }
   save(); sync();
@@ -98,6 +99,14 @@ function onKey(e){
   e.preventDefault(); e.stopImmediatePropagation(); act(p);
 }
 
+// in full screen the browser keeps Esc for itself (it leaves full screen and the page never sees the key), so leaving
+// full screen closes the prompter too, unless it was F or the ⛶ button
+function onFull(){
+  if(document.fullscreenElement||!root) return;
+  if(keepOpen){keepOpen=false; return;}
+  close();
+}
+
 function open(text){
   if(!String(text||"").trim()) return;
   close(); style(); load(); back=document.activeElement;
@@ -135,12 +144,17 @@ function open(text){
   view.addEventListener("mouseup",e=>{const p=extra[e.button]; if(p){e.preventDefault(); act(p);}});
   document.body.appendChild(root);
   document.addEventListener("keydown",onKey,true);
+  document.addEventListener("fullscreenchange",onFull);
   sync(); bar.querySelector(".mxp-play").focus();
+  // it opens full screen; this runs inside the click that opened it, which the browser requires. Where the browser
+  // does not allow it (an iPhone), it simply stays as a full-page layer.
+  const full=root.requestFullscreen||root.webkitRequestFullscreen;
+  try{ const p=full?.call(root); p?.catch?.(()=>{}); }catch{}
 }
 
 function close(){
   if(!root) return;
-  play(false); document.removeEventListener("keydown",onKey,true);
+  play(false); document.removeEventListener("keydown",onKey,true); document.removeEventListener("fullscreenchange",onFull);
   if(document.fullscreenElement) document.exitFullscreen?.();
   root.remove(); root=null; back?.focus?.(); back=null;
 }

supabase/migrations/20261106130000_math_prompter_texts.sql

@@ -0,0 +1,15 @@
+-- The prompter's saved texts (app/prompter.py): a developer's scripts, kept with the account so they are on every device.
+-- Additive: one new table; nothing existing changes. Only the server's secret key reads or writes it.
+begin;
+create table public.math_prompter_texts (
+  id uuid primary key default gen_random_uuid(),
+  user_id uuid not null references auth.users(id) on delete cascade,
+  title text not null check (char_length(title) between 1 and 120),
+  body text not null check (char_length(body) <= 100000),
+  updated_at timestamptz not null default now()
+);
+create index math_prompter_texts_user on public.math_prompter_texts(user_id, updated_at desc);
+alter table public.math_prompter_texts enable row level security;
+revoke all on public.math_prompter_texts from public, anon, authenticated;
+grant select, insert, update, delete on public.math_prompter_texts to service_role;
+commit;

tests/test_phone_browser.py

@@ -1171,6 +1171,8 @@ def test_the_teacher_opens_a_final_quiz_and_gives_one_student_another_sitting(ph
 
 
 def test_prompter_from_management(phone_server):
+    import json
+
     with playwright.sync_playwright() as p:
         browser = p.chromium.launch()
         try:
@@ -1192,30 +1194,58 @@ def test_prompter_from_management(phone_server):
                 "permissions": ["management.access"], "classes": []}))
             page.route("**/api/math/progress", lambda route: route.fulfill(json={"progress": {}}))
             page.route("**/api/classes", lambda route: route.fulfill(json={"classes": []}))
+            saved = []
+
+            def texts(route):                                          # app/prompter.py, in memory
+                req = route.request
+                if req.method == "GET":
+                    return route.fulfill(json={"texts": saved})
+                body = json.loads(req.post_data)
+                row = {"id": "aaaaaaaa-aaaa-4aaa-8aaa-%012d" % len(saved), "title": body["title"] or body["body"].split("\n")[0],
+                       "body": body["body"], "updated_at": "2026-11-06T10:00:00Z"}
+                saved.insert(0, row)
+                route.fulfill(json={"text": row})
+            page.route("**/api/prompter/texts", texts)
             page.goto(phone_server)
             page.locator('[data-act="manage"]').click()
             page.locator('[data-act="manage-prompter"]').click()
             text = "שלום לכולם\nזה טקסט לפרומפטר" + "\nעוד שורה" * 60      # long enough to still be scrolling
             page.locator("#mxPrompterText").fill(text)
-            page.locator('[data-act="prompter-go"]').click()
+            page.locator("#mxPrompterTitle").fill("פתיחה")
+            page.locator('[data-act="prompter-save"]').click()
+            playwright.expect(page.locator(".mx-prompter-state")).to_have_text("נשמר: „פתיחה”.")
+            assert saved[0]["title"] == "פתיחה" and saved[0]["body"] == text
+            playwright.expect(page.locator(".mx-prompter-list article")).to_contain_text("פתיחה")
+            page.locator("[data-prompter-play]").click()               # a saved text opens straight in the prompter
             prompter = page.locator(".mxp")
+            page.wait_for_function("document.fullscreenElement?.classList.contains('mxp')")   # it opens full screen
             playwright.expect(prompter.locator(".mxp-text")).to_have_text(text)
             page.keyboard.press("m")
             playwright.expect(prompter).to_have_class("mxp mirror")
             page.keyboard.press(" ")
             playwright.expect(prompter).to_have_class("mxp mirror playing", timeout=5000)
             speed = page.locator(".mxp-speed-v").inner_text()
-            page.locator(".mxp-text").hover()
+            page.locator(".mxp-view").hover()
             page.mouse.wheel(0, 120)                                   # while playing, the wheel is the speed
             playwright.expect(page.locator(".mxp-speed-v")).not_to_have_text(speed)
             page.locator(".mxp-view").click()                          # a click pauses
             playwright.expect(prompter).to_have_class("mxp mirror")
             page.keyboard.press("PageDown")                            # a presentation clicker plays
-            playwright.expect(prompter).to_have_class("mxp mirror playing", timeout=5000)
+            playwright.expect(prompter).to_have_class("mxp mirror playing", timeout=500)   # resumes with no 3-2-1
+            playwright.expect(page.locator(".mxp-count")).to_have_count(0)
             page.locator(".mxp-view").click()
             top = page.locator(".mxp-scroll").evaluate("e=>e.scrollTop")
             page.locator(".mxp-view").click(button="right")            # right-click goes back a few lines
             assert page.locator(".mxp-scroll").evaluate("e=>e.scrollTop") <= top
+            page.keyboard.press("f")                                   # F leaves full screen and keeps the prompter
+            page.wait_for_function("!document.fullscreenElement")
+            playwright.expect(prompter).to_have_count(1)
+            page.keyboard.press("f")
+            page.wait_for_function("!!document.fullscreenElement")
+            page.evaluate("document.exitFullscreen()")                 # what the browser does with Esc in full screen
+            playwright.expect(prompter).to_have_count(0)
+            playwright.expect(page.locator(".mx-manage-sheet")).to_be_visible()
+            page.locator('[data-act="prompter-go"]').click()
             page.keyboard.press("Escape")
             playwright.expect(prompter).to_have_count(0)
             playwright.expect(page.locator(".mx-manage-sheet")).to_be_visible()   # Esc closes only the prompter

tests/test_prompter.py

@@ -0,0 +1,127 @@
+import asyncio
+import urllib.parse
+import uuid
+
+import httpx
+import pytest
+
+from app.auth import AuthUnavailable
+from app.main import create_app
+from scan_support import OTHER, OWNER, ScanAuth, postgres_server  # noqa: F401  (a fixture)
+
+DEV = '33333333-3333-4333-8333-333333333333'
+
+
+class PrompterAuth(ScanAuth):
+    """OWNER and DEV are developers, OTHER is a student; an in-memory math_prompter_texts behind the PostgREST calls."""
+    developers = frozenset({OWNER + '@test.invalid', DEV + '@test.invalid'})
+
+    def __init__(self):
+        self.rows: list[dict] = []
+        self.missing = False
+
+    def user(self, token):
+        return {'id': token, 'email': token + '@test.invalid'} if token in (OWNER, OTHER, DEV) else None
+
+    def _admin(self, path, method='GET', body=None, prefer=''):
+        if self.missing:
+            raise AuthUnavailable('supabase answered 404: relation does not exist')
+        table, _, query = path.partition('?')
+        assert table == '/rest/v1/math_prompter_texts'
+        q = dict(urllib.parse.parse_qsl(query))
+        match = [r for r in self.rows if all(r[k] == q[k].removeprefix('eq.') for k in ('id', 'user_id') if k in q)]
+        if method == 'POST':
+            row = {**body, 'id': str(uuid.uuid4())}
+            self.rows.append(row)
+            return [row]
+        if method == 'PATCH':
+            for r in match:
+                r.update(body)
+            return match
+        if method == 'DELETE':
+            self.rows = [r for r in self.rows if r not in match]
+            return None
+        return sorted(match, key=lambda r: r['updated_at'], reverse=True)
+
+
+def call(app, user, method, url, **kw):
+    async def go():
+        async with httpx.AsyncClient(transport=httpx.ASGITransport(app=app), base_url='http://test',
+                                     headers={'Authorization': f'Bearer {user}'}) as c:
+            return await c.request(method, url, **kw)
+    return asyncio.run(go())
+
+
+@pytest.fixture
+def app():
+    a = create_app()
+    a.state.auth = PrompterAuth()
+    return a
+
+
+def test_developer_saves_lists_updates_and_deletes(app):
+    r = call(app, OWNER, 'POST', '/api/prompter/texts', json={'title': '', 'body': '  שלום לכולם\nשורה שנייה'})
+    assert r.status_code == 200
+    first = r.json()['text']
+    assert first['title'] == 'שלום לכולם'                       # no title: the first line
+    second = call(app, OWNER, 'POST', '/api/prompter/texts', json={'title': 'פתיחה', 'body': 'טקסט'}).json()['text']
+    texts = call(app, OWNER, 'GET', '/api/prompter/texts').json()['texts']
+    assert [t['id'] for t in texts] == [second['id'], first['id']]   # newest first
+    r = call(app, OWNER, 'PUT', f"/api/prompter/texts/{first['id']}", json={'title': 'חדש', 'body': 'גוף חדש'})
+    assert r.json()['text']['title'] == 'חדש' and r.json()['text']['body'] == 'גוף חדש'
+    assert call(app, OWNER, 'DELETE', f"/api/prompter/texts/{second['id']}").status_code == 200
+    assert [t['title'] for t in call(app, OWNER, 'GET', '/api/prompter/texts').json()['texts']] == ['חדש']
+
+
+def test_each_developer_sees_only_their_own(app):
+    mine = call(app, OWNER, 'POST', '/api/prompter/texts', json={'title': 'שלי', 'body': 'x'}).json()['text']
+    assert call(app, DEV, 'GET', '/api/prompter/texts').json()['texts'] == []
+    assert call(app, DEV, 'PUT', f"/api/prompter/texts/{mine['id']}", json={'title': 'a', 'body': 'b'}).status_code == 404
+    call(app, DEV, 'DELETE', f"/api/prompter/texts/{mine['id']}")
+    assert len(call(app, OWNER, 'GET', '/api/prompter/texts').json()['texts']) == 1
+
+
+def test_students_and_bad_input_are_refused(app):
+    assert call(app, OTHER, 'GET', '/api/prompter/texts').status_code == 403
+    assert call(app, OTHER, 'POST', '/api/prompter/texts', json={'title': 'a', 'body': 'b'}).status_code == 403
+    assert call(app, 'nobody', 'GET', '/api/prompter/texts').status_code == 401
+    assert call(app, OWNER, 'POST', '/api/prompter/texts', json={'title': 'a', 'body': '   '}).status_code == 400
+    assert call(app, OWNER, 'POST', '/api/prompter/texts', json={'body': 'x' * 100_001}).status_code == 413
+    assert call(app, OWNER, 'PUT', '/api/prompter/texts/not-an-id', json={'body': 'x'}).status_code == 404
+
+
+def test_long_title_is_cut_and_missing_table_is_503(app):
+    r = call(app, OWNER, 'POST', '/api/prompter/texts', json={'title': 'א' * 300, 'body': 'x'})
+    assert len(r.json()['text']['title']) == 120
+    app.state.auth.missing = True
+    assert call(app, OWNER, 'GET', '/api/prompter/texts').status_code == 503
+
+
+def test_migration_on_real_postgres(postgres_server):  # noqa: F811
+    """The table exists, keeps its limits, and only the server's key may use it."""
+    psycopg = pytest.importorskip("psycopg")
+    from pathlib import Path
+    from scan_support import BOOTSTRAP
+    database = "prm_" + uuid.uuid4().hex
+    with psycopg.connect(postgres_server.get_uri(), autocommit=True) as c:
+        c.execute("create database " + database)
+    uri = postgres_server.get_uri(database=database)
+    try:
+        with psycopg.connect(uri, autocommit=True) as c:
+            c.execute(BOOTSTRAP)
+            c.execute(Path("supabase/migrations/20261106130000_math_prompter_texts.sql").read_text())
+            c.execute("insert into auth.users values(%s)", (OWNER,))
+            c.execute("set role service_role")
+            c.execute("insert into math_prompter_texts(user_id,title,body) values(%s,'a','b')", (OWNER,))
+            with pytest.raises(psycopg.errors.CheckViolation):
+                c.execute("insert into math_prompter_texts(user_id,title,body) values(%s,'','b')", (OWNER,))
+            c.execute("reset role")
+            c.execute("set role authenticated")
+            with pytest.raises(psycopg.errors.InsufficientPrivilege):
+                c.execute("select * from math_prompter_texts")
+            c.execute("reset role")
+            c.execute("delete from auth.users")                       # an account's texts go with it
+            assert c.execute("select count(*) from math_prompter_texts").fetchone()[0] == 0
+    finally:
+        with psycopg.connect(postgres_server.get_uri(), autocommit=True) as c:
+            c.execute("drop database " + database + " with (force)")