Add per-customer SMS and Bird Integrations for patient messaging.

Patient SMS/email now use encrypted tenant keys via the platform relay instead of shared platform Care API keys.

Co-authored-by: Cursor <cursoragent@cursor.com>

app/Http/Controllers/Care/PatientMessageController.php

@@ -5,10 +5,11 @@ namespace App\Http\Controllers\Care;
 use App\Http\Controllers\Controller;
 use App\Http\Controllers\Care\Concerns\ScopesToAccount;
 use App\Models\Patient;
-use App\Services\Billing\PlatformEmailClient;
-use App\Services\Billing\PlatformSmsClient;
 use App\Services\Care\AuditLogger;
 use App\Services\Care\OrganizationResolver;
+use App\Services\Messaging\CustomerEmailClient;
+use App\Services\Messaging\CustomerSmsClient;
+use App\Services\Messaging\MessagingCredentialsService;
 use Illuminate\Http\RedirectResponse;
 use Illuminate\Http\Request;
 
@@ -16,8 +17,12 @@ class PatientMessageController extends Controller
 {
     use ScopesToAccount;
 
-    public function sendEmail(Request $request, Patient $patient, PlatformEmailClient $email): RedirectResponse
-    {
+    public function sendEmail(
+        Request $request,
+        Patient $patient,
+        MessagingCredentialsService $credentials,
+        CustomerEmailClient $email,
+    ): RedirectResponse {
         $this->authorizeAbility($request, 'patients.manage');
         $this->authorizePatient($request, $patient);
 
@@ -25,6 +30,16 @@ class PatientMessageController extends Controller
             return back()->with('error', 'This patient has no valid email on file.');
         }
 
+        $credential = $credentials->forOrganization($this->organization($request));
+        if (! $credential->hasValidBird()) {
+            return back()->with('error', 'Connect Ladill Bird in Integrations before sending patient email.');
+        }
+
+        $apiKey = $credential->birdApiKey();
+        if (! $apiKey) {
+            return back()->with('error', 'Bird credentials could not be decrypted. Reconnect Bird in Integrations.');
+        }
+
         $data = $request->validate([
             'subject' => ['required', 'string', 'max:200'],
             'body' => ['required', 'string', 'max:5000'],
@@ -32,7 +47,15 @@ class PatientMessageController extends Controller
 
         $owner = $this->ownerRef($request);
         $html = nl2br(e($data['body']));
-        $sent = $email->send($owner, (string) $patient->email, $data['subject'], $html, $data['body']);
+        $sent = $email->send(
+            $apiKey,
+            (string) $credential->bird_from_email,
+            $credential->bird_from_name,
+            (string) $patient->email,
+            $data['subject'],
+            $html,
+            $data['body'],
+        );
 
         AuditLogger::record(
             $owner,
@@ -55,8 +78,12 @@ class PatientMessageController extends Controller
         return back()->with('success', 'Email sent to '.$patient->email);
     }
 
-    public function sendSms(Request $request, Patient $patient, PlatformSmsClient $sms): RedirectResponse
-    {
+    public function sendSms(
+        Request $request,
+        Patient $patient,
+        MessagingCredentialsService $credentials,
+        CustomerSmsClient $sms,
+    ): RedirectResponse {
         $this->authorizeAbility($request, 'patients.manage');
         $this->authorizePatient($request, $patient);
 
@@ -64,12 +91,22 @@ class PatientMessageController extends Controller
             return back()->with('error', 'This patient has no phone number on file.');
         }
 
+        $credential = $credentials->forOrganization($this->organization($request));
+        if (! $credential->hasValidSms()) {
+            return back()->with('error', 'Connect Ladill SMS in Integrations before sending patient SMS.');
+        }
+
+        $apiKey = $credential->smsApiKey();
+        if (! $apiKey) {
+            return back()->with('error', 'SMS credentials could not be decrypted. Reconnect SMS in Integrations.');
+        }
+
         $data = $request->validate([
             'message' => ['required', 'string', 'max:480'],
         ]);
 
         $owner = $this->ownerRef($request);
-        $sent = $sms->send($owner, (string) $patient->phone, $data['message']);
+        $sent = $sms->send($apiKey, (string) $patient->phone, $data['message'], (string) $credential->sms_sender_id);
 
         AuditLogger::record(
             $owner,