darkbluellc · ddbruce · Jan 3, 2026 · Oct 25, 2025 · Oct 25, 2025 · Oct 25, 2025
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "fullsend",
-  "version": "1.8.1",
+  "version": "1.8.2",
   "description": "Fullsend allows allowed users to send bulk text messages to groups of recipients",
   "main": "server.js",
   "scripts": {

diff --git a/public/changepassword.html b/public/changepassword.html
@@ -9,7 +9,7 @@
     <link rel="icon" type="image/png" sizes="16x16" href="/public/img/favicon/favicon-16x16.png">
     <link rel="manifest" href="/public/img/favicon/site.webmanifest">
     <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.2.0/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-gH2yIJqKdNHPEq0n4Mqa/HGKIhSkIHeL5AyhkYV8i59U5AR6csBvApHHNl/vI1Bx" crossorigin="anonymous">
-    <link rel="stylesheet" href="/public/css/style.css">
+    <link rel="stylesheet" href="/public/css/style.min.css">
     <script src="/public/js/main.js"></script>
     <script src="/public/js/changepassword.js"></script>
     <title>Fullsend | SMS notification from the web</title>
@@ -41,6 +41,9 @@
                     </li>
                 </ul>
                 <ul class="navbar-nav d-flex">
+                    <li class="nav-item">
+                        <a class="nav-link text-danger" href="#" id="navDev" style="display:none;">DEV MODE</a>
+                    </li>
                     <li class="nav-item">
                         <a class="nav-link disabled" href="/" id="navVersion"></a>
                     </li>

diff --git a/public/css/style.min.css b/public/css/style.min.css
diff --git a/public/css/style.min.css.map b/public/css/style.min.css.map
diff --git a/public/css/style.scss b/public/css/style.scss
@@ -7,7 +7,9 @@
   }
 }
 
-
+#navDev {
+  cursor: default;
+}
 
 .imessage {
   display: flex;

diff --git a/public/fullsend.html b/public/fullsend.html
@@ -10,7 +10,7 @@
     <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.2.0/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-gH2yIJqKdNHPEq0n4Mqa/HGKIhSkIHeL5AyhkYV8i59U5AR6csBvApHHNl/vI1Bx" crossorigin="anonymous">
     <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/css/select2.min.css" />
     <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/select2-bootstrap-5-theme@1.3.0/dist/select2-bootstrap-5-theme.min.css" />
-    <link rel="stylesheet" href="/public/css/style.css">
+    <link rel="stylesheet" href="/public/css/style.min.css">
     <script src="/public/js/main.js"></script>
     <script src="/public/js/fullsend.js"></script>
     <title>Fullsend | SMS notification from the web</title>
@@ -60,6 +60,9 @@ <h5 class="modal-title" id="recipientListModalLabel">Selected recipients</h5>
                     </li>
                 </ul>
                 <ul class="navbar-nav d-flex">
+                    <li class="nav-item">
+                        <a class="nav-link text-danger" href="#" id="navDev" style="display:none;">DEV MODE</a>
+                    </li>
                     <li class="nav-item">
                         <a class="nav-link disabled" href="/" id="navVersion"></a>
                     </li>

diff --git a/public/group-management.html b/public/group-management.html
@@ -8,7 +8,7 @@
     <link rel="icon" type="image/png" sizes="32x32" href="/public/img/favicon/favicon-32x32.png">
     <link rel="icon" type="image/png" sizes="16x16" href="/public/img/favicon/favicon-16x16.png">
     <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.2.0/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-gH2yIJqKdNHPEq0n4Mqa/HGKIhSkIHeL5AyhkYV8i59U5AR6csBvApHHNl/vI1Bx" crossorigin="anonymous">
-    <link rel="stylesheet" href="/public/css/style.css">
+    <link rel="stylesheet" href="/public/css/style.min.css">
     <script src="/public/js/main.js"></script>
     <script src="/public/js/group-management.js"></script>
     <title>Fullsend | SMS notification from the web</title>
@@ -40,6 +40,9 @@
                     </li>
                 </ul>
                 <ul class="navbar-nav d-flex">
+                    <li class="nav-item">
+                        <a class="nav-link text-danger" href="#" id="navDev" style="display:none;">DEV MODE</a>
+                    </li>
                     <li class="nav-item">
                         <a class="nav-link disabled" href="/" id="navVersion"></a>
                     </li>

diff --git a/public/help.html b/public/help.html
@@ -9,7 +9,7 @@
     <link rel="icon" type="image/png" sizes="16x16" href="/public/img/favicon/favicon-16x16.png">
     <link rel="manifest" href="/public/img/favicon/site.webmanifest">
     <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.2.0/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-gH2yIJqKdNHPEq0n4Mqa/HGKIhSkIHeL5AyhkYV8i59U5AR6csBvApHHNl/vI1Bx" crossorigin="anonymous">
-    <link rel="stylesheet" href="/public/css/style.css">
+    <link rel="stylesheet" href="/public/css/style.min.css">
     <script src="/public/js/main.js"></script>
     <script src="/public/js/help.js"></script>
     <title>Fullsend | SMS notification from the web</title>
@@ -40,6 +40,9 @@
                     </li>
                 </ul>
                 <ul class="navbar-nav d-flex">
+                    <li class="nav-item">
+                        <a class="nav-link text-danger" href="#" id="navDev" style="display:none;">DEV MODE</a>
+                    </li>
                     <li class="nav-item">
                         <a class="nav-link disabled" href="/" id="navVersion"></a>
                     </li>
@@ -63,6 +66,10 @@ <h1>Fullsend</h1>
         <div class="row mt-5">
             <div class="col">
                 <h2>Changelog</h2><br>
+                <h3>v1.8.2</h3>
+                <p>
+                    Adds a flag for development that shows "DEV MODE" in the navbar.
+                </p>
                 <h3>v1.8.1</h3>
                 <p>
                     Fixes how sessions are handled on the user's side.

diff --git a/public/index.html b/public/index.html
@@ -9,7 +9,7 @@
     <link rel="icon" type="image/png" sizes="16x16" href="/public/img/favicon/favicon-16x16.png">
     <link rel="manifest" href="/public/img/favicon/site.webmanifest">
     <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.2.0/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-gH2yIJqKdNHPEq0n4Mqa/HGKIhSkIHeL5AyhkYV8i59U5AR6csBvApHHNl/vI1Bx" crossorigin="anonymous">
-    <link rel="stylesheet" href="/public/css/style.css">
+    <link rel="stylesheet" href="/public/css/style.min.css">
     <script src="/public/js/main.js"></script>
     <script src="/public/js/home.js"></script>
     <title>Fullsend | SMS notification from the web</title>
@@ -40,6 +40,9 @@
                     </li>
                 </ul>
                 <ul class="navbar-nav d-flex">
+                    <li class="nav-item">
+                        <a class="nav-link text-danger" href="#" id="navDev" style="display:none;">DEV MODE</a>
+                    </li>
                     <li class="nav-item">
                         <a class="nav-link disabled" href="/" id="navVersion"></a>
                     </li>

diff --git a/public/js/fullsend.js b/public/js/fullsend.js
@@ -108,6 +108,11 @@ const handleSwitch = async (e) => {
 };
 
 const sendMessage = async () => {
+  // Respect server-side sending flag exposed via APP_CONFIG
+  if (window.APP_CONFIG && window.APP_CONFIG.sendingEnabled === false) {
+    alert('Sending is disabled in this environment.');
+    return -1;
+  }
   let error = false;
   document.getElementById("noMessageError").style.display = "none";
   document.getElementById("noRecipientsError").style.display = "none";
@@ -156,11 +161,15 @@ const sendMessage = async () => {
 const handleMessagePreview = () => {
   const fsmText = document.getElementById("fullsendMessage").value.trim();
 
-  if (fsmText != "") {
-    document.getElementById("sendButton").disabled = false;
-  }
-  else {
+  // If sending is disabled by config, keep send button disabled
+  if (window.APP_CONFIG && window.APP_CONFIG.sendingEnabled === false) {
     document.getElementById("sendButton").disabled = true;
+  } else {
+    if (fsmText != "") {
+      document.getElementById("sendButton").disabled = false;
+    } else {
+      document.getElementById("sendButton").disabled = true;
+    }
   }
 
   const selectedCategories = getSelectedGroupsCategories();

diff --git a/public/js/main.js b/public/js/main.js
@@ -5,6 +5,17 @@ const getVersion = async () => {
   return version;
 };
 
+const getConfig = async () => {
+  try {
+    const resp = await fetch('/api/config');
+    if (!resp.ok) return { success: false };
+    return resp.json();
+  } catch (e) {
+    console.error('Failed to load config', e && e.message);
+    return { success: false };
+  }
+};
+
 const printVersionInNav = async () => {
   document.getElementById("navVersion").text = await getVersion();
 };
@@ -85,8 +96,23 @@ checkForRedirect();
 
 window.onload = async () => {
   printVersionInNav();
+
+  // load runtime config (DEV mode and sending enabled)
+  const cfg = await getConfig();
+  if (cfg && cfg.success && cfg.data) {
+    window.APP_CONFIG = cfg.data;
+    if (cfg.data.dev) {
+      const nd = document.getElementById('navDev');
+      if (nd) nd.style.display = 'block';
+    }
+    // If sending is disabled, disable send button to prevent user attempts
+    if (!cfg.data.sendingEnabled) {
+      const sendBtn = document.getElementById('sendButton');
+      if (sendBtn) sendBtn.disabled = true;
+    }
+  }
+
   pageOnLoadFunctions();
 
-  if (await isAdmin())
-    document.getElementById("adminNavLink").style.display = "block";
+  if (await isAdmin()) document.getElementById("adminNavLink").style.display = "block";
 };
diff --git a/public/login.html b/public/login.html
@@ -9,7 +9,7 @@
     <link rel="icon" type="image/png" sizes="16x16" href="/public/img/favicon/favicon-16x16.png">
     <link rel="manifest" href="/public/img/favicon/site.webmanifest">
     <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.2.0/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-gH2yIJqKdNHPEq0n4Mqa/HGKIhSkIHeL5AyhkYV8i59U5AR6csBvApHHNl/vI1Bx" crossorigin="anonymous">
-    <link rel="stylesheet" href="/public/css/style.css">
+    <link rel="stylesheet" href="/public/css/style.min.css">
     <script src="/public/js/main.js"></script>
     <script src="/public/js/login.js"></script>
     <title>Fullsend | SMS notification from the web</title>
@@ -34,6 +34,9 @@
                     </li>
                 </ul>
                 <ul class="navbar-nav d-flex">
+                    <li class="nav-item">
+                        <a class="nav-link text-danger" href="#" id="navDev" style="display:none;">DEV MODE</a>
+                    </li>
                     <li class="nav-item">
                         <a class="nav-link disabled" href="/" id="navVersion"></a>
                     </li>

diff --git a/public/no-access.html b/public/no-access.html
@@ -9,7 +9,7 @@
     <link rel="icon" type="image/png" sizes="16x16" href="/public/img/favicon/favicon-16x16.png">
     <link rel="manifest" href="/public/img/favicon/site.webmanifest">
     <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.2.0/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-gH2yIJqKdNHPEq0n4Mqa/HGKIhSkIHeL5AyhkYV8i59U5AR6csBvApHHNl/vI1Bx" crossorigin="anonymous">
-    <link rel="stylesheet" href="/public/css/style.css">
+    <link rel="stylesheet" href="/public/css/style.min.css">
     <script src="/public/js/main.js"></script>
     <script src="/public/js/help.js"></script>
     <title>Fullsend | SMS notification from the web</title>
@@ -40,6 +40,9 @@
                     </li>
                 </ul>
                 <ul class="navbar-nav d-flex">
+                    <li class="nav-item">
+                        <a class="nav-link text-danger" href="#" id="navDev" style="display:none;">DEV MODE</a>
+                    </li>
                     <li class="nav-item">
                         <a class="nav-link disabled" href="/" id="navVersion"></a>
                     </li>

diff --git a/public/privacy.html b/public/privacy.html
@@ -9,7 +9,7 @@
     <link rel="icon" type="image/png" sizes="16x16" href="/public/img/favicon/favicon-16x16.png">
     <link rel="manifest" href="/public/img/favicon/site.webmanifest">
     <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.2.0/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-gH2yIJqKdNHPEq0n4Mqa/HGKIhSkIHeL5AyhkYV8i59U5AR6csBvApHHNl/vI1Bx" crossorigin="anonymous">
-    <link rel="stylesheet" href="/public/css/style.css">
+    <link rel="stylesheet" href="/public/css/style.min.css">
     <script src="/public/js/main.js"></script>
     <script src="/public/js/help.js"></script>
     <title>Fullsend | SMS notification from the web</title>
@@ -40,6 +40,9 @@
                     </li>
                 </ul>
                 <ul class="navbar-nav d-flex">
+                    <li class="nav-item">
+                        <a class="nav-link text-danger" href="#" id="navDev" style="display:none;">DEV MODE</a>
+                    </li>
                     <li class="nav-item">
                         <a class="nav-link disabled" href="/" id="navVersion"></a>
                     </li>

diff --git a/public/terms.html b/public/terms.html
@@ -9,7 +9,7 @@
     <link rel="icon" type="image/png" sizes="16x16" href="/public/img/favicon/favicon-16x16.png">
     <link rel="manifest" href="/public/img/favicon/site.webmanifest">
     <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.2.0/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-gH2yIJqKdNHPEq0n4Mqa/HGKIhSkIHeL5AyhkYV8i59U5AR6csBvApHHNl/vI1Bx" crossorigin="anonymous">
-    <link rel="stylesheet" href="/public/css/style.css">
+    <link rel="stylesheet" href="/public/css/style.min.css">
     <script src="/public/js/main.js"></script>
     <script src="/public/js/help.js"></script>
     <title>Fullsend | SMS notification from the web</title>
@@ -40,6 +40,9 @@
                     </li>
                 </ul>
                 <ul class="navbar-nav d-flex">
+                    <li class="nav-item">
+                        <a class="nav-link text-danger" href="#" id="navDev" style="display:none;">DEV MODE</a>
+                    </li>
                     <li class="nav-item">
                         <a class="nav-link disabled" href="/" id="navVersion"></a>
                     </li>

diff --git a/server.js b/server.js
@@ -203,6 +203,19 @@ app.get('/api/login', async (req, res) => {
   }
 });
 
+// Public config endpoint for client-side behavior toggles (DEV mode, sending enabled)
+app.get('/api/config', (req, res) => {
+  try {
+    const dev = String(process.env.DEV || '').toLowerCase() === 'true';
+    // If DEV is true, force sending disabled
+    const sendingEnabled = dev ? false : (String(process.env.SENDING_ENABLED || '').toLowerCase() === 'true');
+    res.send({ success: true, data: { dev, sendingEnabled } });
+  } catch (e) {
+    console.error('config endpoint failed', e && e.message);
+    res.status(500).send({ success: false });
+  }
+});
+
 // Debug endpoint (no role enforcement) to inspect session info during development
 app.get('/api/debug/session', async (req, res) => {
   try {