Add patient SMS/email messaging and fix Meet video visit errors.

Wire Care to Ladill SMS and Bird management APIs on the patient page, and surface Meet auth/config failures as friendly validation errors instead of a 502 page.

Co-authored-by: Cursor <cursoragent@cursor.com>

.env.example

@@ -44,6 +44,17 @@ IDENTITY_API_KEY_CARE=
 MEET_API_URL=https://meet.ladill.com/api/service/v1
 MEET_API_KEY_CARE=
 
+# Ladill SMS (patient messaging — management API on ladill.com)
+SMS_PLATFORM_API_URL=https://ladill.com/api
+SMS_API_KEY_CARE=
+SMS_DEFAULT_SENDER_ID=Ladill
+
+# Ladill Bird / SMTP (patient email — management API on ladill.com)
+SMTP_PLATFORM_API_URL=https://ladill.com/api/smtp
+SMTP_API_KEY_CARE=
+CARE_SMTP_FROM=care@ladill.com
+CARE_SMTP_FROM_NAME="Ladill Care"
+
 # Afia in-app assistant (uses platform relay when AFIA_API_KEY is empty)
 AFIA_ENABLED=true
 AFIA_PRODUCT=care

app/Http/Controllers/Care/AppointmentMeetController.php

@@ -27,6 +27,7 @@ class AppointmentMeetController extends Controller
         $appointment->loadMissing('patient');
         $patient = $appointment->patient;
         $owner = $this->ownerRef($request);
+        $user = $request->user();
 
         $response = MeetClient::for($owner)->createRoom([
             'title' => 'Video visit — '.$patient->fullName(),
@@ -34,6 +35,8 @@ class AppointmentMeetController extends Controller
             'scheduled_at' => ($appointment->scheduled_at ?? now()->addHour())->toIso8601String(),
             'duration_minutes' => 30,
             'branch_id' => $appointment->branch_id,
+            'host_name' => $user?->name,
+            'host_email' => $user?->email,
             'source' => [
                 'app' => 'care',
                 'entity_type' => 'appointment',
@@ -60,11 +63,14 @@ class AppointmentMeetController extends Controller
 
         $owner = $this->ownerRef($request);
         $appointment->loadMissing('patient');
+        $user = $request->user();
 
         if (! $appointment->meet_room_uuid) {
             $response = MeetClient::for($owner)->createRoom([
                 'title' => 'Video visit — '.$appointment->patient->fullName(),
                 'description' => $appointment->reason,
+                'host_name' => $user?->name,
+                'host_email' => $user?->email,
                 'source' => [
                     'app' => 'care',
                     'entity_type' => 'appointment',

app/Http/Controllers/Care/PatientMessageController.php

@@ -0,0 +1,104 @@
+<?php
+
+namespace App\Http\Controllers\Care;
+
+use App\Http\Controllers\Controller;
+use App\Http\Controllers\Care\Concerns\ScopesToAccount;
+use App\Models\Patient;
+use App\Services\Billing\PlatformEmailClient;
+use App\Services\Billing\PlatformSmsClient;
+use App\Services\Care\AuditLogger;
+use App\Services\Care\OrganizationResolver;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+
+class PatientMessageController extends Controller
+{
+    use ScopesToAccount;
+
+    public function sendEmail(Request $request, Patient $patient, PlatformEmailClient $email): RedirectResponse
+    {
+        $this->authorizeAbility($request, 'patients.manage');
+        $this->authorizePatient($request, $patient);
+
+        if (! filter_var((string) $patient->email, FILTER_VALIDATE_EMAIL)) {
+            return back()->with('error', 'This patient has no valid email on file.');
+        }
+
+        $data = $request->validate([
+            'subject' => ['required', 'string', 'max:200'],
+            'body' => ['required', 'string', 'max:5000'],
+        ]);
+
+        $owner = $this->ownerRef($request);
+        $html = nl2br(e($data['body']));
+        $sent = $email->send($owner, (string) $patient->email, $data['subject'], $html, $data['body']);
+
+        AuditLogger::record(
+            $owner,
+            $sent ? 'patient.email_sent' : 'patient.email_failed',
+            $patient->organization_id,
+            $owner,
+            Patient::class,
+            $patient->id,
+            [
+                'to' => $patient->email,
+                'subject' => $data['subject'],
+                'error' => $sent ? null : $email->lastError(),
+            ],
+        );
+
+        if (! $sent) {
+            return back()->with('error', $email->lastError() ?: 'Email could not be sent.');
+        }
+
+        return back()->with('success', 'Email sent to '.$patient->email);
+    }
+
+    public function sendSms(Request $request, Patient $patient, PlatformSmsClient $sms): RedirectResponse
+    {
+        $this->authorizeAbility($request, 'patients.manage');
+        $this->authorizePatient($request, $patient);
+
+        if (trim((string) $patient->phone) === '') {
+            return back()->with('error', 'This patient has no phone number on file.');
+        }
+
+        $data = $request->validate([
+            'message' => ['required', 'string', 'max:480'],
+        ]);
+
+        $owner = $this->ownerRef($request);
+        $sent = $sms->send($owner, (string) $patient->phone, $data['message']);
+
+        AuditLogger::record(
+            $owner,
+            $sent ? 'patient.sms_sent' : 'patient.sms_failed',
+            $patient->organization_id,
+            $owner,
+            Patient::class,
+            $patient->id,
+            [
+                'to' => $patient->phone,
+                'error' => $sent ? null : $sms->lastError(),
+            ],
+        );
+
+        if (! $sent) {
+            return back()->with('error', $sms->lastError() ?: 'SMS could not be sent.');
+        }
+
+        return back()->with('success', 'SMS sent to '.$patient->phone);
+    }
+
+    protected function authorizePatient(Request $request, Patient $patient): void
+    {
+        $this->authorizeOwner($request, $patient);
+        abort_unless($patient->organization_id === $this->organization($request)->id, 404);
+
+        $branchId = app(OrganizationResolver::class)->branchScope($this->member($request));
+        if ($branchId !== null && $patient->branch_id !== $branchId) {
+            abort(404);
+        }
+    }
+}

app/Services/Billing/PlatformEmailClient.php

@@ -0,0 +1,76 @@
+<?php
+
+namespace App\Services\Billing;
+
+use Illuminate\Support\Facades\Http;
+use Illuminate\Support\Facades\Log;
+
+class PlatformEmailClient
+{
+    private ?string $lastError = null;
+
+    public function lastError(): ?string
+    {
+        return $this->lastError;
+    }
+
+    private function base(): string
+    {
+        return rtrim((string) config('smtp.platform_api_url', 'https://ladill.com/api/smtp'), '/');
+    }
+
+    private function token(): string
+    {
+        return (string) config('smtp.platform_api_key', '');
+    }
+
+    public function isConfigured(): bool
+    {
+        return $this->token() !== '';
+    }
+
+    public function send(string $ownerPublicId, string $to, string $subject, string $html, ?string $text = null): bool
+    {
+        $this->lastError = null;
+
+        if (! $this->isConfigured()) {
+            $this->lastError = 'Outbound email is not configured on this Care instance. Set SMTP_API_KEY_CARE.';
+
+            return false;
+        }
+
+        try {
+            $res = Http::withToken($this->token())->acceptJson()->timeout(30)
+                ->post($this->base().'/messages/send', array_filter([
+                    'user' => $ownerPublicId,
+                    'from' => config('smtp.from'),
+                    'from_name' => config('smtp.from_name'),
+                    'to' => $to,
+                    'subject' => $subject,
+                    'html' => $html,
+                    'text' => $text,
+                ], fn ($value) => $value !== null && $value !== ''));
+
+            if ($res->status() === 402) {
+                $this->lastError = (string) ($res->json('error') ?: 'Insufficient Bird email credits. Top up Bird and try again.');
+                Log::warning('Care platform email send: insufficient balance', ['user' => $ownerPublicId]);
+
+                return false;
+            }
+
+            if ($res->failed()) {
+                $this->lastError = (string) ($res->json('error') ?: $res->json('message') ?: 'The email could not be sent.');
+                Log::warning('Care platform email send failed', ['status' => $res->status(), 'body' => $res->body()]);
+
+                return false;
+            }
+
+            return (bool) ($res->json('success') ?? true);
+        } catch (\Throwable $e) {
+            $this->lastError = 'Could not reach the email service. Please try again.';
+            Log::warning('Care platform email send error', ['error' => $e->getMessage()]);
+
+            return false;
+        }
+    }
+}

app/Services/Billing/PlatformSmsClient.php

@@ -0,0 +1,138 @@
+<?php
+
+namespace App\Services\Billing;
+
+use Illuminate\Support\Facades\Http;
+use Illuminate\Support\Facades\Log;
+
+class PlatformSmsClient
+{
+    private ?string $lastError = null;
+
+    public function lastError(): ?string
+    {
+        return $this->lastError;
+    }
+
+    private function base(): string
+    {
+        return rtrim((string) config('sms.platform_api_url', 'https://ladill.com/api'), '/');
+    }
+
+    private function token(): string
+    {
+        return (string) config('sms.platform_api_key', '');
+    }
+
+    public function isConfigured(): bool
+    {
+        return $this->token() !== '';
+    }
+
+    /** @return list<array<string, mixed>> */
+    public function services(string $ownerPublicId): array
+    {
+        if (! $this->isConfigured()) {
+            return [];
+        }
+
+        try {
+            $res = Http::withToken($this->token())->acceptJson()->timeout(15)
+                ->get($this->base().'/sms/services', ['user' => $ownerPublicId]);
+
+            if ($res->failed()) {
+                return [];
+            }
+
+            return (array) ($res->json('data') ?? []);
+        } catch (\Throwable $e) {
+            Log::warning('Care platform SMS services lookup failed', ['error' => $e->getMessage()]);
+
+            return [];
+        }
+    }
+
+    public function ensureServiceId(string $ownerPublicId): ?int
+    {
+        $services = $this->services($ownerPublicId);
+        if ($services !== []) {
+            return (int) ($services[0]['id'] ?? 0) ?: null;
+        }
+
+        if (! $this->isConfigured()) {
+            return null;
+        }
+
+        try {
+            $res = Http::withToken($this->token())->acceptJson()->timeout(15)
+                ->post($this->base().'/sms/services', [
+                    'user' => $ownerPublicId,
+                    'name' => 'Ladill Care',
+                    'brand_name' => 'Care',
+                ]);
+
+            if ($res->failed()) {
+                $this->lastError = (string) ($res->json('error') ?: 'Could not create an SMS service for this account.');
+
+                return null;
+            }
+
+            return (int) ($res->json('data.id') ?? 0) ?: null;
+        } catch (\Throwable $e) {
+            Log::warning('Care platform SMS service create failed', ['error' => $e->getMessage()]);
+            $this->lastError = 'Could not reach the SMS service.';
+
+            return null;
+        }
+    }
+
+    public function send(string $ownerPublicId, string $to, string $message, ?string $senderId = null): bool
+    {
+        $this->lastError = null;
+
+        if (! $this->isConfigured()) {
+            $this->lastError = 'SMS is not configured on this Care instance. Set SMS_API_KEY_CARE.';
+
+            return false;
+        }
+
+        $serviceId = $this->ensureServiceId($ownerPublicId);
+        if (! $serviceId) {
+            $this->lastError ??= 'No SMS service is available for this account. Open sms.ladill.com once, then retry.';
+
+            return false;
+        }
+
+        try {
+            $res = Http::withToken($this->token())->acceptJson()->timeout(30)
+                ->post($this->base().'/sms/messages/send', array_filter([
+                    'user' => $ownerPublicId,
+                    'sms_service_id' => $serviceId,
+                    'to' => $to,
+                    'text' => $message,
+                    'sender_id' => $senderId ?? config('sms.default_sender_id'),
+                ]));
+
+            if ($res->status() === 402) {
+                $this->lastError = (string) ($res->json('error') ?: 'Insufficient SMS credit. Top up your Ladill SMS wallet and try again.');
+                Log::warning('Care platform SMS send: insufficient balance', ['user' => $ownerPublicId]);
+
+                return false;
+            }
+
+            if ($res->failed()) {
+                $this->lastError = (string) ($res->json('error') ?: $res->json('message') ?: 'The SMS could not be sent.');
+                Log::warning('Care platform SMS send failed', ['status' => $res->status(), 'body' => $res->body()]);
+
+                return false;
+            }
+
+            return (bool) ($res->json('success') ?? true);
+        } catch (\Throwable $e) {
+            $this->lastError = 'Could not reach the SMS service. Please try again.';
+            Log::warning('Care platform SMS send error', ['error' => $e->getMessage()]);
+
+            return false;
+        }
+    }
+}

app/Services/Meet/MeetClient.php

@@ -56,6 +56,12 @@ class MeetClient
      */
     private function post(string $path, array $data): array
     {
+        if (trim((string) config('meet.key')) === '') {
+            throw ValidationException::withMessages([
+                'meet' => ['Video visits are not configured. Set MEET_API_KEY_CARE on Care and Meet to the same value.'],
+            ]);
+        }
+
         try {
             $response = $this->client()->post($path, $data);
         } catch (ConnectionException) {
@@ -70,8 +76,26 @@ class MeetClient
             );
         }
 
+        if ($response->status() === 401 || $response->status() === 403) {
+            throw ValidationException::withMessages([
+                'meet' => ['Video visits are not authorized. Set the same MEET_API_KEY_CARE on Care and Meet, then clear config cache.'],
+            ]);
+        }
+
+        if ($response->status() === 404) {
+            throw ValidationException::withMessages([
+                'meet' => ['No Meet workspace was found for this account. Sign into meet.ladill.com once to create one, then retry.'],
+            ]);
+        }
+
         if ($response->failed()) {
-            abort($response->status() === 404 ? 404 : 502, 'Meet service error.');
+            $message = $response->json('error')
+                ?? $response->json('message')
+                ?? 'Meet could not schedule this video visit. Please try again.';
+
+            throw ValidationException::withMessages([
+                'meet' => [is_string($message) ? $message : 'Meet service error.'],
+            ]);
         }
 
         return (array) $response->json();

config/sms.php

@@ -0,0 +1,7 @@
+<?php
+
+return [
+    'platform_api_url' => env('SMS_PLATFORM_API_URL', 'https://ladill.com/api'),
+    'platform_api_key' => env('SMS_API_KEY_CARE'),
+    'default_sender_id' => env('SMS_DEFAULT_SENDER_ID', 'Ladill'),
+];

config/smtp.php

@@ -0,0 +1,8 @@
+<?php
+
+return [
+    'platform_api_url' => env('SMTP_PLATFORM_API_URL', 'https://ladill.com/api/smtp'),
+    'platform_api_key' => env('SMTP_API_KEY_CARE'),
+    'from' => env('CARE_SMTP_FROM', 'care@ladill.com'),
+    'from_name' => env('CARE_SMTP_FROM_NAME', 'Ladill Care'),
+];

resources/views/care/patients/show.blade.php

@@ -134,6 +134,36 @@
         </div>
 
         <div class="space-y-6">
+            @if ($canManage)
+                <section class="rounded-2xl border border-slate-200 bg-white p-6" x-data="{ tab: 'sms' }">
+                    <h2 class="text-sm font-semibold uppercase tracking-wide text-slate-500">Message patient</h2>
+                    <p class="mt-1 text-xs text-slate-500">SMS uses Ladill SMS credits. Email uses Ladill Bird credits.</p>
+                    <div class="mt-4 flex gap-1 rounded-xl bg-slate-100 p-1 text-sm">
+                        <button type="button" @click="tab = 'sms'" :class="tab === 'sms' ? 'bg-white shadow-sm text-slate-900' : 'text-slate-500'" class="flex-1 rounded-lg px-3 py-1.5 font-medium">SMS</button>
+                        <button type="button" @click="tab = 'email'" :class="tab === 'email' ? 'bg-white shadow-sm text-slate-900' : 'text-slate-500'" class="flex-1 rounded-lg px-3 py-1.5 font-medium">Email</button>
+                    </div>
+
+                    <form x-show="tab === 'sms'" x-cloak method="POST" action="{{ route('care.patients.sms', $patient) }}" class="mt-4 space-y-3">
+                        @csrf
+                        <p class="text-xs text-slate-500">To: {{ $patient->phone ?: 'no phone on file' }}</p>
+                        <textarea name="message" rows="3" maxlength="480" placeholder="Text message" required class="block w-full rounded-xl border-slate-300 text-sm focus:border-sky-500 focus:ring-sky-500">{{ old('message') }}</textarea>
+                        <div class="text-right">
+                            <button type="submit" class="btn-primary" @if(! $patient->phone) disabled @endif>Send SMS</button>
+                        </div>
+                    </form>
+
+                    <form x-show="tab === 'email'" x-cloak method="POST" action="{{ route('care.patients.email', $patient) }}" class="mt-4 space-y-3">
+                        @csrf
+                        <p class="text-xs text-slate-500">To: {{ $patient->email ?: 'no email on file' }}</p>
+                        <input type="text" name="subject" value="{{ old('subject') }}" placeholder="Subject" required class="block w-full rounded-xl border-slate-300 text-sm focus:border-sky-500 focus:ring-sky-500">
+                        <textarea name="body" rows="4" placeholder="Message" required class="block w-full rounded-xl border-slate-300 text-sm focus:border-sky-500 focus:ring-sky-500">{{ old('body') }}</textarea>
+                        <div class="text-right">
+                            <button type="submit" class="btn-primary" @if(! $patient->email) disabled @endif>Send email</button>
+                        </div>
+                    </form>
+                </section>
+            @endif
+
             <section class="rounded-2xl border border-slate-200 bg-white p-6">
                 <h2 class="text-sm font-semibold uppercase tracking-wide text-slate-500">Emergency contacts</h2>
                 @forelse ($patient->emergencyContacts as $contact)

routes/web.php

@@ -17,6 +17,7 @@ use App\Http\Controllers\Care\InvestigationTypeController;
 use App\Http\Controllers\Care\MemberController;
 use App\Http\Controllers\Care\OnboardingController;
 use App\Http\Controllers\Care\PatientController;
+use App\Http\Controllers\Care\PatientMessageController;
 use App\Http\Controllers\Care\PrescriptionController;
 use App\Http\Controllers\Care\QueueController;
 use App\Http\Controllers\Care\ProController;
@@ -57,6 +58,8 @@ Route::middleware(['auth', 'platform.session'])->group(function () {
         Route::get('/patients/create', [PatientController::class, 'create'])->name('care.patients.create');
         Route::post('/patients', [PatientController::class, 'store'])->name('care.patients.store');
         Route::get('/patients/{patient}', [PatientController::class, 'show'])->name('care.patients.show');
+        Route::post('/patients/{patient}/email', [PatientMessageController::class, 'sendEmail'])->name('care.patients.email');
+        Route::post('/patients/{patient}/sms', [PatientMessageController::class, 'sendSms'])->name('care.patients.sms');
         Route::get('/patients/{patient}/edit', [PatientController::class, 'edit'])->name('care.patients.edit');
         Route::put('/patients/{patient}', [PatientController::class, 'update'])->name('care.patients.update');
         Route::delete('/patients/{patient}', [PatientController::class, 'destroy'])->name('care.patients.destroy');

tests/Feature/CareAppointmentMeetTest.php

@@ -131,6 +131,24 @@ class CareAppointmentMeetTest extends TestCase
         $this->assertSame('room-uuid-2', $appointment->meet_room_uuid);
     }
 
+    public function test_schedule_meet_shows_friendly_error_when_unauthorized(): void
+    {
+        Http::fake([
+            'meet.test/*' => Http::response(['error' => 'Unauthorized.'], 401),
+        ]);
+
+        $appointment = $this->createAppointment();
+
+        $this->actingAs($this->user)
+            ->from(route('care.appointments.show', $appointment))
+            ->post(route('care.appointments.schedule-meet', $appointment))
+            ->assertRedirect(route('care.appointments.show', $appointment))
+            ->assertSessionHasErrors('meet');
+
+        $appointment->refresh();
+        $this->assertNull($appointment->meet_room_uuid);
+    }
+
     protected function createAppointment(string $status = Appointment::STATUS_SCHEDULED): Appointment
     {
         return Appointment::create([

tests/Feature/CarePatientTest.php

@@ -137,7 +137,85 @@ class CarePatientTest extends TestCase
             ->get(route('care.patients.show', $patient))
             ->assertOk()
             ->assertSee('Efua Boateng')
-            ->assertSee('LC-2026-00001');
+            ->assertSee('LC-2026-00001')
+            ->assertSee('Message patient');
+    }
+
+    public function test_can_send_patient_sms_via_platform_api(): void
+    {
+        config([
+            'sms.platform_api_url' => 'https://ladill.test/api',
+            'sms.platform_api_key' => 'test-sms-care-key',
+            'sms.default_sender_id' => 'Ladill',
+        ]);
+
+        \Illuminate\Support\Facades\Http::fake([
+            'ladill.test/api/sms/services*' => \Illuminate\Support\Facades\Http::response([
+                'data' => [['id' => 9, 'name' => 'Ladill Care']],
+            ]),
+            'ladill.test/api/sms/messages/send' => \Illuminate\Support\Facades\Http::response([
+                'success' => true,
+                'segments' => 1,
+            ]),
+        ]);
+
+        $patient = Patient::create([
+            'uuid' => (string) \Illuminate\Support\Str::uuid(),
+            'owner_ref' => $this->user->public_id,
+            'organization_id' => $this->organization->id,
+            'branch_id' => $this->branch->id,
+            'patient_number' => 'LC-2026-00002',
+            'first_name' => 'Kofi',
+            'last_name' => 'Mensah',
+            'phone' => '0244111222',
+        ]);
+
+        $this->actingAs($this->user)
+            ->post(route('care.patients.sms', $patient), [
+                'message' => 'Your appointment is tomorrow at 9am.',
+            ])
+            ->assertRedirect()
+            ->assertSessionHas('success');
+
+        $this->assertDatabaseHas('care_audit_logs', ['action' => 'patient.sms_sent']);
+    }
+
+    public function test_can_send_patient_email_via_platform_api(): void
+    {
+        config([
+            'smtp.platform_api_url' => 'https://ladill.test/api/smtp',
+            'smtp.platform_api_key' => 'test-smtp-care-key',
+            'smtp.from' => 'care@ladill.com',
+            'smtp.from_name' => 'Ladill Care',
+        ]);
+
+        \Illuminate\Support\Facades\Http::fake([
+            'ladill.test/api/smtp/messages/send' => \Illuminate\Support\Facades\Http::response([
+                'success' => true,
+                'message_id' => 'msg-1',
+            ]),
+        ]);
+
+        $patient = Patient::create([
+            'uuid' => (string) \Illuminate\Support\Str::uuid(),
+            'owner_ref' => $this->user->public_id,
+            'organization_id' => $this->organization->id,
+            'branch_id' => $this->branch->id,
+            'patient_number' => 'LC-2026-00003',
+            'first_name' => 'Ama',
+            'last_name' => 'Serwaa',
+            'email' => 'ama@example.com',
+        ]);
+
+        $this->actingAs($this->user)
+            ->post(route('care.patients.email', $patient), [
+                'subject' => 'Appointment reminder',
+                'body' => 'Please arrive 15 minutes early.',
+            ])
+            ->assertRedirect()
+            ->assertSessionHas('success');
+
+        $this->assertDatabaseHas('care_audit_logs', ['action' => 'patient.email_sent']);
     }
 
     public function test_api_can_list_patients(): void