Feature flags and current state
State checked Nov 3, 2026 ~11:30 PM ET (env names only; values of secrets are never read into docs).
bestdealon.app (env)
| Flag | Default | Live | Effect |
|---|---|---|---|
INDEXING | off | on | Listing pages indexable; NOINDEX_PHONES excludes numbers |
LEGAL_PAGES | off | on | /privacy, /terms and the SMS consent box |
CALL_VERIFY | off | on | Verify by call (dryrun = mock, nothing dialled) |
INBOUND_CLAIM | off | off | Inbound claim offer on calls (built, not enabled) |
CALLER_LOOKUP | off | on | /api/callbot/caller-profile answers; off returns {known:false, reason:"off"} |
PHONE_VERIFY_SMS | off | off | SMS verification codes |
MAIL_ALLOWLIST | empty (=anyone) | set (2 addresses) | Mail only to listed addresses |
PHONE_BOT_URL | callbots-bdo URL | default | Where verify calls and the dashboard proxy go |
CALLBOT_SHARED_SECRET | — | set | HMAC secret shared with callbots-bdo |
| Stripe keys | — | not set | Billing off (test mode only when set) |
Admin settings (in the database, /admin/settings): Email via Resend (mail_resend; on — confirmation mail is being delivered) and magic link (magic_link; state not checked for this handbook).
callbots-bdo (env + tenant file)
| Flag | Live | Effect |
|---|---|---|
BDO_VERIFY_CALLS | live | Bot places Verify-by-call calls requested by the site |
tenant sms_enabled | false | No texting until carrier (10DLC) approval |
tenant take_message | enabled, email, no audio | Messages emailed to the owner |
tenant returning_caller_greeting | true | "Welcome back, <name>!" for recognised callers |
tenant returning_caller_include_unconfirmed | true | Match unconfirmed newsletter contacts too |
tenant bdo_caller_lookup | true | Ask bestdealon.app caller-profile (Best Deal On tenant only) |
tenant callback_offer | true | "Call you back at this number, or email you?" (logged as a team message) |
tenant welcome_back | set | Greeting text without a recording notice |