Error corrections and temp debugger

src/pages/api/contact.ts

@@ -94,7 +94,17 @@ async function verifyTurnstile(token: string | undefined, ip: string): Promise<b
       method: 'POST',
       body: form,
     });
-    const data = (await res.json()) as { success: boolean };
+    const data = (await res.json()) as { success: boolean; 'error-codes'?: string[] };
+    // TEMPORARY DIAGNOSTIC: Cloudflare returns HTTP 200 even on failure, with the
+    // reason in error-codes (e.g. "invalid-input-secret", "invalid-input-response",
+    // "timeout-or-duplicate"). Log it so we can see why verification is failing.
+    // Remove this log once the Turnstile issue is resolved.
+    if (!data.success) {
+      console.warn('[contact] turnstile siteverify failed:', {
+        status: res.status,
+        errorCodes: data['error-codes'] ?? [],
+      });
+    }
     return Boolean(data.success);
   } catch (err) {
     // Network error talking to Cloudflare. Fail closed: reject the submission