Dear Bubbe Nextjs

pages.signIn/error both pointed at '/', which silently swallowed every
auth error code — the new ?error= banner could never fire. Session cookie
was explicitly secure:false on an HTTPS-only prod; now NODE_ENV-keyed.
(Contrarian-gate findings, both verified in source.)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Failed Google OAuth previously bounced back to /auth/signin silently (the
page ignored the error query param), making sign-in failures undiagnosable.
Now maps AccessDenied/OAuthCallback/OAuthSignin/Configuration to friendly
banners. turbopack.root + outputFileTracingRoot pinned so stray $HOME
lockfiles stop breaking/warning builds.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

The mic useEffect recreated a SpeechRecognition instance on every isSpeaking/
isLoading change (pre-existing since d6aa0de). Now created once; the once-bound
onresult calls handleSendRef.current so it always uses the freshest
handleSendMessage (session/mode closure) instead of the initial render's.
Desktop left as-is (its recreate is load-bearing for auto-restart).

Text chat + build verified green (WebKit); voice needs a real-device test.

Both unreachable from the live page→BubbeResponsive→Mobile/Desktop chain
(ExpandableChat had 0 importers; VoiceManager only imported by ExpandableChat).
Removes the Finding-C overlap/retry-storm landmine the contrarian flagged.
Build clean, homepage 200.

- new types/speech.d.ts: WebSpeechRecognition interface + Window augmentation
  (distinct name to avoid clobbering lib.dom); kills the (window as any) casts
  and the untyped recognitionRef in both components
- removed MobileBubbe's vestigial __bubbeAutoStarted window flag (gated nothing;
  mobile uses the welcome-screen buttons, not auto-start)
- kept DesktopBubbe's __bubbeDesktopAutoStarted (legit StrictMode remount guard)
- DTD verdict B (incremental-safe); deferred the speech-setup extraction — mic
  lifecycle can't be verified headless, needs a real-device test

Verified: build clean, homepage 200, chat + console clean (WebKit).

DEBUG:
- api/social-post: logs/ dir didn't exist -> writeFile ENOENT on every trigger.
  Now mkdir -p the dir + use process.cwd() instead of a hardcoded mac path.

REFACTOR:
- new lib/bubbeChat.ts: guestGateBlocks (free-chat gate), fetchBubbeReply (AI call),
  makeVoicePlayer (stop-before-play + synchronous overlap lock) — the exact logic
  that was triplicated and got edited twice in one session, now in ONE place.
- MobileBubbe + DesktopBubbe consume the lib; playBubbeVoice/handleSendMessage
  collapse to thin wrappers (mobile: mode==='voice'; desktop: voiceEnabled + auto-listen).
- removed dead components SimpleConversation.tsx + SimplifiedChat.tsx (0 imports).

Verified: build clean, homepage 200, chat + free-chat gate work (WebKit), console 0 errors,
voice-overlap logic preserved verbatim.

- script-src: + https://static.cloudflareinsights.com
- connect-src: + https://cloudflareinsights.com https://*.google-analytics.com https://www.google.com
- verified on WebKit: console now 0 errors, chat unaffected; /api/auth/providers stays 200 (that '404' was a false reading, no fix needed)

- synchronous isSpeakingRef lock (React state updated too late to block a rapid 2nd call)
- create the ONE Audio element once, not on every state change (was orphaning mid-play clips → overlap)
- hard pause+reset before each new clip (stop-before-play)
- ElevenLabs voice_settings speed 1.08 (a little faster, still natural)
- verified PASS by click-through agent: max concurrent audio == 1 across Chrome/Safari/Browserbase

- page.tsx: render chat for guests instead of hard-redirecting to /auth/signin
- MobileBubbe/DesktopBubbe: gate send after 3 free messages (localStorage), then trigger Google sign-in
- restores the intended '3 free messages' onboarding so mobile users can chat immediately

- chat: OpenAI gpt-3.5-turbo primary (fast, funded), Ollama last-resort (Anthropic out of credits)
- next.config: disable output:standalone so `next start` serves + loads .env.local
- ecosystem: remove hardcoded ANTHROPIC_API_KEY placeholder (em-dash crashed every request); keys come from .env.local; USE_ANTHROPIC=0