fix

server/wsHandler.js

@@ -86,10 +86,9 @@ async function buildUsagePayload(client, clientId = '') {
 export async function handleWsMessage(ws, msg, wsClients) {
   const client = wsClients.get(ws); if (!client) return;
   // Require turnstile verification for most message types
-  if (!client.verified && msg.type !== 'ping' && msg.type !== 'turnstile:verify') {
+  if (!client.verified && msg.type !== 'ping' && msg.type !== 'turnstile:verify' && msg.type !== 'turnstile:confirm') {
     return safeSend(ws, { type: 'error', message: 'turnstile:required' });
   }
-
   const bypassDeviceValidation = new Set([
     'ping',
     'turnstile:verify',