Initial Ladill Care release.

Healthcare management app: patients, appointments, consultations, lab,
pharmacy inventory, billing, and reports at care.ladill.com.

Co-authored-by: Cursor <cursoragent@cursor.com>

app/Http/Controllers/Api/BillController.php

@@ -0,0 +1,86 @@
+<?php
+
+namespace App\Http\Controllers\Api;
+
+use App\Http\Controllers\Controller;
+use App\Http\Controllers\Api\Concerns\ScopesApiToAccount;
+use App\Models\Bill;
+use App\Models\Visit;
+use App\Services\Care\BillService;
+use App\Services\Care\OrganizationResolver;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class BillController extends Controller
+{
+    use ScopesApiToAccount;
+
+    public function __construct(
+        protected BillService $bills,
+    ) {}
+
+    public function index(Request $request): JsonResponse
+    {
+        $this->authorizeAbility($request, 'bills.view');
+        $organization = $this->organization($request);
+        $branchScope = app(OrganizationResolver::class)->branchScope($this->member($request));
+
+        $bills = $this->bills->list(
+            $this->ownerRef($request),
+            $organization->id,
+            $request->only(['status', 'patient_id', 'per_page']),
+            $branchScope,
+        );
+
+        return response()->json($bills);
+    }
+
+    public function generate(Request $request, Visit $visit): JsonResponse
+    {
+        $this->authorizeAbility($request, 'bills.manage');
+        $this->authorizeVisit($request, $visit);
+
+        $bill = $this->bills->generateFromVisit($visit, $this->ownerRef($request), $this->ownerRef($request));
+
+        return response()->json($bill, 201);
+    }
+
+    public function show(Request $request, Bill $bill): JsonResponse
+    {
+        $this->authorizeAbility($request, 'bills.view');
+        $this->authorizeBill($request, $bill);
+
+        return response()->json($bill->load(['patient', 'lineItems', 'payments']));
+    }
+
+    public function recordPayment(Request $request, Bill $bill): JsonResponse
+    {
+        $this->authorizeAbility($request, 'payments.manage');
+        $this->authorizeBill($request, $bill);
+
+        $payment = $this->bills->recordPayment(
+            $bill,
+            $this->ownerRef($request),
+            $request->validate([
+                'amount_minor' => ['required', 'integer', 'min:1'],
+                'method' => ['required', 'string', 'in:'.implode(',', array_keys(config('care.payment_methods')))],
+                'reference' => ['nullable', 'string', 'max:100'],
+            ]),
+            $this->ownerRef($request),
+        );
+
+        return response()->json($payment, 201);
+    }
+
+    protected function authorizeBill(Request $request, Bill $bill): void
+    {
+        $this->authorizeOwner($request, $bill);
+        abort_unless($bill->organization_id === $this->organization($request)->id, 404);
+    }
+
+    protected function authorizeVisit(Request $request, Visit $visit): void
+    {
+        $this->authorizeOwner($request, $visit);
+        abort_unless($visit->organization_id === $this->organization($request)->id, 404);
+    }
+}