add delete-user admin endpoint and manage_results command

POST /api/admin/clear-user removes all sessions and trials for a
named player without touching anyone else's data.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

manage_results.sh

@@ -44,7 +44,25 @@ elif [[ "$cmd" == "delete" ]]; then
     "${auth_headers[@]}" "$HOST/api/admin/clear")
   echo "Server responded: HTTP $http_code"
 
+elif [[ "$cmd" == "delete-user" ]]; then
+  player="${2:-}"
+  if [[ -z "$player" ]]; then
+    read -rp "Player name to delete: " player
+  fi
+  read -rp "Delete all results for \"$player\"? Type YES to confirm: " confirm
+  if [[ "$confirm" != "YES" ]]; then echo "Aborted."; exit 0; fi
+  result=$(curl -sf -X POST \
+    "${auth_headers[@]}" \
+    -H "Content-Type: application/json" \
+    -d "{\"playerName\": \"$player\"}" \
+    "$HOST/api/admin/clear-user")
+  echo "$result" | python3 -c "
+import sys, json
+d = json.load(sys.stdin)
+print(f\"Removed {d.get('removedSessions',0)} session(s) and {d.get('removedTrials',0)} trial(s) for \\\"$player\\\"\")
+" 2>/dev/null || echo "$result"
+
 else
-  echo "Usage: $0 <download|delete>"
+  echo "Usage: $0 <download|delete|delete-user [name]>"
   exit 1
 fi

server.js

@@ -132,12 +132,29 @@ app.get('/api/export', adminAuth, (req, res) => {
   res.sendFile(DATA_FILE);
 });
 
-// POST /api/admin/clear — reset the data store (admin only)
+// POST /api/admin/clear — reset the entire data store (admin only)
 app.post('/api/admin/clear', adminAuth, (req, res) => {
   writeData({ sessions: [], trials: [] });
   res.json({ ok: true, message: 'Results cleared' });
 });
 
+// POST /api/admin/clear-user — remove all sessions and trials for one player (admin only)
+app.post('/api/admin/clear-user', adminAuth, (req, res) => {
+  const { playerName } = req.body;
+  if (!playerName) return res.status(400).json({ error: 'playerName required' });
+  const data = readData();
+  const sessionsBefore = data.sessions.length;
+  const trialsBefore   = data.trials.length;
+  data.sessions = data.sessions.filter(s => s.player_name !== playerName);
+  data.trials   = data.trials.filter(t => t.player_name !== playerName);
+  writeData(data);
+  res.json({
+    ok: true,
+    removedSessions: sessionsBefore - data.sessions.length,
+    removedTrials:   trialsBefore   - data.trials.length
+  });
+});
+
 app.listen(PORT, () => {
   console.log(`Microtubule Challenge → http://localhost:${PORT}`);
   console.log(`  Drop images into:  images/real/  and  images/fake/`);