Add Paystack, Flutterwave, and Hubtel for encounter billing.

Clinics on Pro/Enterprise can connect their own gateway in Integrations and collect card or MoMo on bills with 0% Ladill fee, while cash payments and balance totals stay correct for pending checkouts.

app/Http/Controllers/Care/IntegrationsController.php

@@ -4,21 +4,29 @@ namespace App\Http\Controllers\Care;
 
 use App\Http\Controllers\Controller;
 use App\Http\Controllers\Care\Concerns\ScopesToAccount;
+use App\Models\PaymentGatewaySetting;
 use App\Services\Care\AuditLogger;
 use App\Services\Care\CarePermissions;
+use App\Services\Care\PlanService;
 use App\Services\Messaging\CustomerSmsClient;
 use App\Services\Messaging\MessagingCredentialsService;
+use App\Services\Payments\MerchantGatewayService;
 use Illuminate\Http\JsonResponse;
 use Illuminate\Http\RedirectResponse;
 use Illuminate\Http\Request;
+use Illuminate\Validation\Rule;
 use Illuminate\View\View;
 
 class IntegrationsController extends Controller
 {
     use ScopesToAccount;
 
-    public function edit(Request $request, MessagingCredentialsService $credentials): View
-    {
+    public function edit(
+        Request $request,
+        MessagingCredentialsService $credentials,
+        MerchantGatewayService $gateway,
+        PlanService $plans,
+    ): View {
         $this->authorizeAbility($request, 'settings.view');
         $organization = $this->organization($request);
         $canManage = app(CarePermissions::class)->can($this->member($request), 'settings.manage');
@@ -27,6 +35,9 @@ class IntegrationsController extends Controller
             'organization' => $organization,
             'canManage' => $canManage,
             'credential' => $credentials->forOrganization($organization),
+            'gateway' => $gateway->settingFor($organization),
+            'canUsePaymentGateway' => $plans->canUsePaymentGateway($organization),
+            'gatewayLabels' => config('care.payment_gateways'),
         ]);
     }
 
@@ -149,4 +160,93 @@ class IntegrationsController extends Controller
 
         return response()->json($result['data'] ?? []);
     }
+
+    public function saveGateway(Request $request, PlanService $plans): RedirectResponse
+    {
+        $this->authorizeAbility($request, 'settings.manage');
+        $organization = $this->organization($request);
+
+        if (! $plans->canUsePaymentGateway($organization)) {
+            return back()->with('error', 'Connecting your own payment gateway requires Care Pro or Enterprise.');
+        }
+
+        $data = $request->validate([
+            'gateway_provider' => ['required', 'string', Rule::in(PaymentGatewaySetting::providers())],
+            'gateway_public_key' => ['nullable', 'string', 'max:2000'],
+            'gateway_secret_key' => ['nullable', 'string', 'max:2000'],
+            'gateway_webhook_secret' => ['nullable', 'string', 'max:2000'],
+            'gateway_is_active' => ['nullable', 'boolean'],
+        ]);
+
+        $existing = PaymentGatewaySetting::query()
+            ->where('organization_id', $organization->id)
+            ->first();
+
+        $publicKey = trim((string) ($data['gateway_public_key'] ?? ''));
+        $secretKey = trim((string) ($data['gateway_secret_key'] ?? ''));
+        $webhookSecret = trim((string) ($data['gateway_webhook_secret'] ?? ''));
+
+        $attributes = [
+            'owner_ref' => $this->ownerRef($request),
+            'provider' => $data['gateway_provider'],
+            'is_active' => $request->boolean('gateway_is_active', true),
+        ];
+
+        // Blank fields keep previously stored encrypted credentials.
+        if ($publicKey !== '') {
+            $attributes['public_key'] = $publicKey;
+        }
+        if ($secretKey !== '') {
+            $attributes['secret_key'] = $secretKey;
+        }
+        if ($webhookSecret !== '') {
+            $attributes['webhook_secret'] = $webhookSecret;
+        }
+
+        if ($existing === null && $secretKey === '') {
+            return back()->withInput()->with('error', 'Secret / API key is required to connect a payment gateway.');
+        }
+
+        if ($data['gateway_provider'] === PaymentGatewaySetting::PROVIDER_HUBTEL && $publicKey === '' && ! $existing?->public_key) {
+            return back()->withInput()->with('error', 'Hubtel requires a merchant account number (public key field).');
+        }
+
+        PaymentGatewaySetting::query()->updateOrCreate(
+            ['organization_id' => $organization->id],
+            $attributes,
+        );
+
+        AuditLogger::record(
+            $this->ownerRef($request),
+            'integrations.gateway_connected',
+            $organization->id,
+            $this->ownerRef($request),
+            \App\Models\Organization::class,
+            $organization->id,
+            ['provider' => $data['gateway_provider']],
+        );
+
+        return back()->with('success', 'Payment gateway saved.');
+    }
+
+    public function disconnectGateway(Request $request, PlanService $plans): RedirectResponse
+    {
+        $this->authorizeAbility($request, 'settings.manage');
+        $organization = $this->organization($request);
+
+        PaymentGatewaySetting::query()
+            ->where('organization_id', $organization->id)
+            ->delete();
+
+        AuditLogger::record(
+            $this->ownerRef($request),
+            'integrations.gateway_disconnected',
+            $organization->id,
+            $this->ownerRef($request),
+            \App\Models\Organization::class,
+            $organization->id,
+        );
+
+        return back()->with('success', 'Payment gateway disconnected.');
+    }
 }