Add portal payment display mode controls

API_DOCUMENTATION.md

@@ -272,7 +272,8 @@ Get the tenant's direct-payment receiving settings used for manual token sales.
   "payment_provider": "selcom",
   "payment_instructions": "Customer pays directly, then attendant confirms.",
   "payment_qr_image_url": null,
-  "manual_sales_enabled": true
+  "manual_sales_enabled": true,
+  "portal_payment_mode": "both"
 }
 ```
 
@@ -286,6 +287,11 @@ If `manual_sales_enabled` is `true`, the account must have:
 - `payment_phone`
 - `payment_provider`
 
+`portal_payment_mode` controls what the captive portal shows:
+- `online_only`
+- `direct_only`
+- `both`
+
 **Auth:** Required
 
 **Body:**
@@ -296,7 +302,8 @@ If `manual_sales_enabled` is `true`, the account must have:
   "payment_provider": "selcom",
   "payment_instructions": "Pay this number, then confirm from the dashboard.",
   "payment_qr_image_url": null,
-  "manual_sales_enabled": true
+  "manual_sales_enabled": true,
+  "portal_payment_mode": "both"
 }
 ```
 
@@ -309,6 +316,7 @@ If `manual_sales_enabled` is `true`, the account must have:
   "payment_instructions": "Pay this number, then confirm from the dashboard.",
   "payment_qr_image_url": null,
   "manual_sales_enabled": true,
+  "portal_payment_mode": "both",
   "message": "Payment settings updated"
 }
 ```

schema.sql

@@ -23,6 +23,7 @@ CREATE TABLE `clients` (
   `payment_instructions` VARCHAR(255) DEFAULT NULL,
   `payment_qr_image_url` VARCHAR(512) DEFAULT NULL,
   `manual_sales_enabled` TINYINT(1)  NOT NULL DEFAULT 0,
+  `portal_payment_mode` VARCHAR(24) NOT NULL DEFAULT 'both',
   `password_hash`     VARCHAR(255)   NOT NULL,
   `commission_rate`   DECIMAL(5,4)   NOT NULL DEFAULT 0.0500,
   `balance`           DECIMAL(12,2)  NOT NULL DEFAULT 0.00,

src/routes/auth.routes.js

@@ -13,6 +13,7 @@ const { requireAuth, signToken } = require('../middleware/auth');
 const { loginLimiter, registerLimiter, forgotPasswordLimiter, phoneOtpLimiter } = require('../middleware/rateLimiter');
 
 const ALLOWED_PAYMENT_PROVIDERS = ['mpesa', 'selcom', 'airtel', 'tigo', 'halopesa', 'bank', 'other'];
+const ALLOWED_PORTAL_PAYMENT_MODES = ['online_only', 'direct_only', 'both'];
 
 // POST /api/auth/register
 router.post('/register', registerLimiter, async (req, res) => {
@@ -306,6 +307,7 @@ router.get('/me', requireAuth, async (req, res) => {
       `SELECT id, business_name, contact_name, email, phone,
               payment_display_name, payment_phone, payment_provider,
               payment_instructions, payment_qr_image_url, manual_sales_enabled,
+              portal_payment_mode,
               balance, total_earned, total_withdrawn, created_at
        FROM clients WHERE id = ?`,
       [req.client.id]
@@ -323,7 +325,8 @@ router.get('/payment-settings', requireAuth, async (req, res) => {
   try {
     const settings = await db.queryOne(
       `SELECT payment_display_name, payment_phone, payment_provider,
-              payment_instructions, payment_qr_image_url, manual_sales_enabled
+              payment_instructions, payment_qr_image_url, manual_sales_enabled,
+              portal_payment_mode
        FROM clients WHERE id = ?`,
       [req.client.id]
     );
@@ -337,6 +340,7 @@ router.get('/payment-settings', requireAuth, async (req, res) => {
       payment_instructions: settings.payment_instructions,
       payment_qr_image_url: settings.payment_qr_image_url,
       manual_sales_enabled: Boolean(settings.manual_sales_enabled),
+      portal_payment_mode: settings.portal_payment_mode || 'both',
     });
   } catch (err) {
     console.error('[auth/payment-settings GET]', err.message);
@@ -353,6 +357,7 @@ router.patch('/payment-settings', requireAuth, async (req, res) => {
     payment_instructions,
     payment_qr_image_url,
     manual_sales_enabled,
+    portal_payment_mode,
   } = req.body;
 
   const updates = [];
@@ -409,6 +414,14 @@ router.patch('/payment-settings', requireAuth, async (req, res) => {
     values.push(manual_sales_enabled ? 1 : 0);
   }
 
+  if (portal_payment_mode !== undefined) {
+    if (typeof portal_payment_mode !== 'string' || !ALLOWED_PORTAL_PAYMENT_MODES.includes(portal_payment_mode)) {
+      return res.status(400).json({ error: `portal_payment_mode must be one of: ${ALLOWED_PORTAL_PAYMENT_MODES.join(', ')}` });
+    }
+    updates.push('portal_payment_mode = ?');
+    values.push(portal_payment_mode);
+  }
+
   if (!updates.length) {
     return res.status(400).json({ error: 'No payment setting updates provided' });
   }
@@ -417,7 +430,7 @@ router.patch('/payment-settings', requireAuth, async (req, res) => {
 
   try {
     const current = await db.queryOne(
-      `SELECT payment_display_name, payment_phone, payment_provider, manual_sales_enabled
+      `SELECT payment_display_name, payment_phone, payment_provider, manual_sales_enabled, portal_payment_mode
        FROM clients WHERE id = ?`,
       [req.client.id]
     );
@@ -429,6 +442,7 @@ router.patch('/payment-settings', requireAuth, async (req, res) => {
       payment_phone: payment_phone !== undefined ? (payment_phone?.trim() || null) : current.payment_phone,
       payment_provider: payment_provider !== undefined ? (payment_provider || null) : current.payment_provider,
       manual_sales_enabled: manual_sales_enabled !== undefined ? manual_sales_enabled : Boolean(current.manual_sales_enabled),
+      portal_payment_mode: portal_payment_mode !== undefined ? portal_payment_mode : (current.portal_payment_mode || 'both'),
     };
 
     if (enablingManualSales || merged.manual_sales_enabled) {
@@ -446,7 +460,8 @@ router.patch('/payment-settings', requireAuth, async (req, res) => {
 
     const updated = await db.queryOne(
       `SELECT payment_display_name, payment_phone, payment_provider,
-              payment_instructions, payment_qr_image_url, manual_sales_enabled
+              payment_instructions, payment_qr_image_url, manual_sales_enabled,
+              portal_payment_mode
        FROM clients WHERE id = ?`,
       [req.client.id]
     );
@@ -458,6 +473,7 @@ router.patch('/payment-settings', requireAuth, async (req, res) => {
       payment_instructions: updated.payment_instructions,
       payment_qr_image_url: updated.payment_qr_image_url,
       manual_sales_enabled: Boolean(updated.manual_sales_enabled),
+      portal_payment_mode: updated.portal_payment_mode || 'both',
       message: 'Payment settings updated',
     });
   } catch (err) {

src/routes/portal.routes.js

@@ -108,6 +108,18 @@ router.get('/:siteId', async (req, res) => {
       bgColor:       portalSettings?.bg_color      || '#F9F9F9',
     };
 
+    const directPaymentAvailable = Boolean(
+      device.manual_sales_enabled &&
+      device.payment_display_name &&
+      device.payment_phone &&
+      device.payment_provider
+    );
+    const portalPaymentMode = device.portal_payment_mode || 'both';
+    const showDirectPayment = directPaymentAvailable && (
+      portalPaymentMode === 'both' || portalPaymentMode === 'direct_only'
+    );
+    const showOnlinePayment = portalPaymentMode !== 'direct_only' || !directPaymentAvailable;
+
     const portalData = {
       siteId,
       clientMac,
@@ -118,13 +130,16 @@ router.get('/:siteId', async (req, res) => {
       deviceName:   device.name,
       customize,
       directPayment: {
-        enabled: Boolean(device.manual_sales_enabled && device.payment_display_name && device.payment_phone && device.payment_provider),
+        enabled: showDirectPayment,
+        available: directPaymentAvailable,
         displayName: device.payment_display_name || null,
         phone: device.payment_phone || null,
         provider: device.payment_provider || null,
         instructions: device.payment_instructions || null,
         qrImageUrl: device.payment_qr_image_url || null,
       },
+      portalPaymentMode,
+      showOnlinePayment,
     };
 
     // Custom portal HTML?

src/utils/migrate.js

@@ -86,6 +86,7 @@ const migrations = [
   `ALTER TABLE clients ADD COLUMN payment_instructions VARCHAR(255) DEFAULT NULL AFTER payment_provider`,
   `ALTER TABLE clients ADD COLUMN payment_qr_image_url VARCHAR(512) DEFAULT NULL AFTER payment_instructions`,
   `ALTER TABLE clients ADD COLUMN manual_sales_enabled TINYINT(1) NOT NULL DEFAULT 0 AFTER payment_qr_image_url`,
+  `ALTER TABLE clients ADD COLUMN portal_payment_mode VARCHAR(24) NOT NULL DEFAULT 'both' AFTER manual_sales_enabled`,
 
   // 010 — Manual/direct payment tracking fields on payments
   `ALTER TABLE payments MODIFY COLUMN phone VARCHAR(20) NULL`,

src/views/screens/portal.ejs

@@ -638,7 +638,7 @@
         <% if (portal.directPayment.enabled) { %>
           <div class="portal-kicker">
             <span class="dot"></span>
-            <span>Direct payment available on this hotspot</span>
+            <span><%= portal.showOnlinePayment ? 'Direct payment also available' : 'Direct payment only on this hotspot' %></span>
           </div>
         <% } %>
       </div>
@@ -709,10 +709,10 @@
             </div>
           <% } %>
 
-          <div class="divider"><span>Pay via Mobile Money</span></div>
-          <p class="payment-note">Prefer instant activation? Enter your own number below to pay online and receive your WiFi code automatically.</p>
+          <div class="divider" <% if (!portal.showOnlinePayment) { %>style="display:none;"<% } %>><span>Pay via Mobile Money</span></div>
+          <p class="payment-note" <% if (!portal.showOnlinePayment) { %>style="display:none;"<% } %>>Prefer instant activation? Enter your own number below to pay online and receive your WiFi code automatically.</p>
 
-          <div class="input-wrap">
+          <div class="input-wrap" <% if (!portal.showOnlinePayment) { %>style="display:none;"<% } %>>
             <label class="field-label" for="phone-input">Phone Number</label>
             <div class="phone-group">
               <div class="phone-prefix">
@@ -726,9 +726,15 @@
           </div>
 
           <div class="error-msg" id="select-error"></div>
-          <button class="btn-primary" id="pay-btn" disabled>Select a plan to continue</button>
+          <button class="btn-primary" id="pay-btn" disabled <% if (!portal.showOnlinePayment) { %>style="display:none;"<% } %>>Select a plan to continue</button>
 
-          <div class="divider"><span>or</span></div>
+          <% if (!portal.showOnlinePayment) { %>
+            <div class="quick-access-note" style="margin-top:18px;">
+              This hotspot is currently configured for direct business payment only. Pay the business above and use the WiFi code you receive.
+            </div>
+          <% } %>
+
+          <div class="divider"><span><%= portal.showOnlinePayment ? 'or' : 'then' %></span></div>
           <span class="link-btn" id="show-code-entry">Enter an existing code</span>
           <% if (portal.directPayment.enabled) { %>
             <div class="quick-access-note">