feat(pacientes): sync de pacientes Firebird → WhatsApp Lab

- Nuevo servicio whatsapp_sync.py: mapeo de campos RIPS→lab_pacientes
  y cliente HTTP para /api/lab/ingest_paciente.php
- Nueva ruta /pacientes con sync masiva por rango de fechas o todos
- Hook en /terceros/send y /automation/run: sync silencioso a WhatsApp
  después de cada envío a TNS
- Config: campos whatsapp_url y whatsapp_api_key + botón probar conexión

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

app/templates/base.html

@@ -57,6 +57,9 @@
                 <a href="/automation" class="flex items-center px-3 py-2.5 rounded-lg text-sm font-medium {% if request.url.path == '/automation' %}bg-blue-600 text-white{% else %}text-gray-300 hover:bg-gray-700{% endif %}">␍
                     <i class="fas fa-robot w-5 mr-2"></i> Automatización␍
                 </a>
+                <a href="/pacientes" class="flex items-center px-3 py-2.5 rounded-lg text-sm font-medium {% if request.url.path == '/pacientes' %}bg-blue-600 text-white{% else %}text-gray-300 hover:bg-gray-700{% endif %}">
+                    <i class="fas fa-users w-5 mr-2"></i> Pacientes <span class="ml-auto text-xs bg-green-500 text-white px-1.5 rounded-full">WA</span>
+                </a>
                 <a href="/test-rda" class="flex items-center px-3 py-2.5 rounded-lg text-sm font-medium {% if request.url.path == '/test-rda' %}bg-blue-600 text-white{% else %}text-gray-300 hover:bg-gray-700{% endif %}">
                     <i class="fas fa-flask w-5 mr-2"></i> Prueba RDA
                 </a>␍

app/templates/config.html

@@ -154,6 +154,39 @@
                     </div>
                 </div>
 
+                <hr class="border-gray-200">
+
+                <h4 class="font-medium text-gray-800">
+                    <i class="fab fa-whatsapp mr-2 text-green-500"></i>WhatsApp Lab — Ingesta de Pacientes
+                </h4>
+                <p class="text-xs text-gray-500 -mt-2">
+                    URL base del sistema WhatsApp Lab. Los pacientes de RIPS se sincronizarán a
+                    <code class="bg-gray-100 px-1 rounded">/api/lab/ingest_paciente.php</code>.
+                </p>
+                <div class="grid grid-cols-2 gap-4">
+                    <div>
+                        <label class="block text-sm font-medium text-gray-700 mb-1">URL WhatsApp Lab</label>
+                        <input type="text" name="config_whatsapp_url"
+                            value="{{ configs|selectattr('key', 'equalto', 'whatsapp_url')|map(attribute='value')|first|default('') }}"
+                            class="w-full px-3 py-2 border border-gray-300 rounded-lg focus:ring-2 focus:ring-blue-500 text-sm"
+                            placeholder="Ej: https://lab.ximena.com.co">
+                    </div>
+                    <div>
+                        <label class="block text-sm font-medium text-gray-700 mb-1">API Key (X-Lab-Key)</label>
+                        <input type="text" name="config_whatsapp_api_key"
+                            value="{{ configs|selectattr('key', 'equalto', 'whatsapp_api_key')|map(attribute='value')|first|default('rips-lab-sync-2026') }}"
+                            class="w-full px-3 py-2 border border-gray-300 rounded-lg focus:ring-2 focus:ring-blue-500 text-sm"
+                            placeholder="rips-lab-sync-2026">
+                    </div>
+                </div>
+                <div>
+                    <button type="button" onclick="testWhatsapp()"
+                        class="px-4 py-2 bg-green-50 text-green-700 border border-green-200 rounded-lg hover:bg-green-100 text-sm font-medium">
+                        <i class="fab fa-whatsapp mr-1"></i> Probar conexión
+                    </button>
+                    <span id="wa-status" class="text-sm ml-3"></span>
+                </div>
+
                 <button type="submit"
                     class="px-6 py-2.5 bg-blue-600 hover:bg-blue-700 text-white font-medium rounded-lg transition-colors">
                     <i class="fas fa-save mr-2"></i> Guardar Configuración
@@ -202,5 +235,33 @@ async function testFirebird() {
         ? '<span class="text-green-600"><i class="fas fa-check-circle"></i> Conexión exitosa</span>'
         : '<span class="text-red-600"><i class="fas fa-times-circle"></i> ' + result.message + '</span>';
 }
+
+async function testWhatsapp() {
+    const form   = document.querySelector('form');
+    const status = document.getElementById('wa-status');
+    status.innerHTML = '<i class="fas fa-spinner fa-spin"></i> Probando…';
+
+    const url    = form.querySelector('[name="config_whatsapp_url"]').value.trim().replace(/\/$/, '');
+    const apiKey = form.querySelector('[name="config_whatsapp_api_key"]').value.trim();
+
+    if (!url) {
+        status.innerHTML = '<span class="text-red-600">Ingresa la URL primero</span>';
+        return;
+    }
+
+    try {
+        const resp = await fetch(`${url}/api/lab/ingest_paciente.php`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json', 'X-Lab-Key': apiKey },
+            body: JSON.stringify({}),
+        });
+        // 422 = llegó al endpoint pero sin datos = conexión OK
+        status.innerHTML = (resp.status === 200 || resp.status === 422 || resp.status === 400)
+            ? '<span class="text-green-600"><i class="fas fa-check-circle"></i> Endpoint alcanzable</span>'
+            : `<span class="text-red-600"><i class="fas fa-times-circle"></i> HTTP ${resp.status}</span>`;
+    } catch (e) {
+        status.innerHTML = `<span class="text-red-600"><i class="fas fa-times-circle"></i> ${e.message}</span>`;
+    }
+}
 </script>
 {% endblock %}

app/templates/pacientes.html

@@ -0,0 +1,187 @@
+{% extends "base.html" %}
+{% block title %}Pacientes — Sync WhatsApp{% endblock %}
+{% block header %}Pacientes — Sincronizar con WhatsApp Lab{% endblock %}
+{% block content %}
+<div class="max-w-3xl space-y-6">
+
+    {% if not wa_configurado %}
+    <div class="bg-yellow-50 border border-yellow-200 rounded-xl p-4 flex items-start gap-3">
+        <i class="fas fa-exclamation-triangle text-yellow-500 mt-0.5"></i>
+        <div>
+            <p class="font-medium text-yellow-800">WhatsApp Lab no está configurado</p>
+            <p class="text-sm text-yellow-700 mt-1">
+                Ve a <a href="/config" class="underline">Configuración</a> y completa la
+                <strong>URL de WhatsApp Lab</strong> y la <strong>API Key</strong>.
+            </p>
+        </div>
+    </div>
+    {% endif %}
+
+    <!-- Sync masiva -->
+    <div class="bg-white rounded-xl shadow-sm border border-gray-200">
+        <div class="px-6 py-4 border-b border-gray-200">
+            <h3 class="font-semibold text-gray-800">
+                <i class="fas fa-sync-alt mr-2 text-green-500"></i>Sincronizar pacientes a WhatsApp Lab
+            </h3>
+            <p class="text-sm text-gray-500 mt-1">
+                Destino: <code class="bg-gray-100 px-1 rounded text-xs">{{ wa_url or "—" }}/api/lab/ingest_paciente.php</code>
+            </p>
+        </div>
+        <div class="p-6 space-y-5">
+            <form id="syncForm" class="space-y-4">
+
+                <div class="flex items-center gap-3">
+                    <input type="checkbox" id="todosCheck" name="todos" value="1"
+                        class="w-4 h-4 text-blue-600 rounded border-gray-300">
+                    <label for="todosCheck" class="text-sm font-medium text-gray-700">
+                        Sincronizar <strong>todos</strong> los pacientes (sin filtro de fecha)
+                    </label>
+                </div>
+
+                <div id="fechaFields" class="grid grid-cols-2 gap-4">
+                    <div>
+                        <label class="block text-sm font-medium text-gray-700 mb-1">Fecha inicio</label>
+                        <input type="date" id="fecha_ini" name="fecha_ini"
+                            class="w-full px-3 py-2 border border-gray-300 rounded-lg text-sm focus:ring-2 focus:ring-blue-500">
+                    </div>
+                    <div>
+                        <label class="block text-sm font-medium text-gray-700 mb-1">Fecha fin</label>
+                        <input type="date" id="fecha_fin" name="fecha_fin"
+                            class="w-full px-3 py-2 border border-gray-300 rounded-lg text-sm focus:ring-2 focus:ring-blue-500">
+                    </div>
+                </div>
+
+                <button type="button" onclick="runSync()"
+                    id="btnSync"
+                    {% if not wa_configurado %}disabled{% endif %}
+                    class="px-6 py-2.5 bg-green-600 hover:bg-green-700 disabled:opacity-50 disabled:cursor-not-allowed text-white font-medium rounded-lg transition-colors text-sm">
+                    <i class="fas fa-upload mr-2"></i> Iniciar sincronización
+                </button>
+            </form>
+
+            <!-- Progreso -->
+            <div id="syncProgress" class="hidden">
+                <div class="flex items-center gap-3 text-sm text-gray-600">
+                    <i class="fas fa-spinner fa-spin text-blue-500"></i>
+                    <span>Sincronizando pacientes con WhatsApp Lab…</span>
+                </div>
+                <p class="text-xs text-gray-400 mt-1">Esto puede tomar varios segundos según la cantidad de pacientes.</p>
+            </div>
+
+            <!-- Resultado -->
+            <div id="syncResult" class="hidden"></div>
+        </div>
+    </div>
+
+    <!-- Info sobre la API -->
+    <div class="bg-white rounded-xl shadow-sm border border-gray-200">
+        <div class="px-6 py-4 border-b border-gray-200">
+            <h3 class="font-semibold text-gray-800">
+                <i class="fas fa-info-circle mr-2 text-blue-400"></i>Cómo funciona
+            </h3>
+        </div>
+        <div class="p-6 text-sm text-gray-600 space-y-3">
+            <div class="flex gap-3">
+                <span class="w-6 h-6 bg-blue-100 text-blue-700 rounded-full flex items-center justify-center text-xs font-bold flex-shrink-0">1</span>
+                <p>Se consultan los pacientes en Firebird (<code class="bg-gray-100 px-1 rounded">PACIENTE</code>)
+                   filtrados por rango de fecha de recepción (o todos si marcas la opción).</p>
+            </div>
+            <div class="flex gap-3">
+                <span class="w-6 h-6 bg-blue-100 text-blue-700 rounded-full flex items-center justify-center text-xs font-bold flex-shrink-0">2</span>
+                <p>Cada paciente se envía a WhatsApp Lab via <code class="bg-gray-100 px-1 rounded">POST /api/lab/ingest_paciente.php</code>
+                   con el header <code class="bg-gray-100 px-1 rounded">X-Lab-Key</code>.</p>
+            </div>
+            <div class="flex gap-3">
+                <span class="w-6 h-6 bg-blue-100 text-blue-700 rounded-full flex items-center justify-center text-xs font-bold flex-shrink-0">3</span>
+                <p>El endpoint hace <strong>UPSERT</strong>: si el paciente ya existe por número de documento lo actualiza,
+                   si no existe lo crea en <code class="bg-gray-100 px-1 rounded">lab_pacientes</code>.</p>
+            </div>
+            <div class="flex gap-3">
+                <span class="w-6 h-6 bg-green-100 text-green-700 rounded-full flex items-center justify-center text-xs font-bold flex-shrink-0">✓</span>
+                <p>La sync también se dispara <strong>automáticamente</strong> al enviar un Tercero individual
+                   o al ejecutar la Automatización RIPS.</p>
+            </div>
+        </div>
+    </div>
+</div>
+
+<script>
+document.getElementById('todosCheck').addEventListener('change', function () {
+    document.getElementById('fechaFields').style.display = this.checked ? 'none' : '';
+});
+
+async function runSync() {
+    const btn    = document.getElementById('btnSync');
+    const prog   = document.getElementById('syncProgress');
+    const result = document.getElementById('syncResult');
+    const form   = document.getElementById('syncForm');
+
+    btn.disabled = true;
+    prog.classList.remove('hidden');
+    result.classList.add('hidden');
+    result.innerHTML = '';
+
+    const data = new FormData(form);
+
+    try {
+        const resp = await fetch('/pacientes/sync-all', { method: 'POST', body: data });
+        const json = await resp.json();
+
+        prog.classList.add('hidden');
+        result.classList.remove('hidden');
+
+        if (json.success) {
+            const errColor = json.errores > 0 ? 'text-red-600' : 'text-gray-500';
+            result.innerHTML = `
+                <div class="bg-green-50 border border-green-200 rounded-lg p-4 space-y-3">
+                    <p class="font-medium text-green-800"><i class="fas fa-check-circle mr-2"></i>${json.message}</p>
+                    <div class="grid grid-cols-3 gap-3 text-center text-sm">
+                        <div class="bg-white rounded-lg p-3 border border-green-100">
+                            <p class="text-2xl font-bold text-gray-800">${json.total}</p>
+                            <p class="text-gray-500">Total</p>
+                        </div>
+                        <div class="bg-white rounded-lg p-3 border border-green-100">
+                            <p class="text-2xl font-bold text-blue-600">${json.created}</p>
+                            <p class="text-gray-500">Nuevos</p>
+                        </div>
+                        <div class="bg-white rounded-lg p-3 border border-green-100">
+                            <p class="text-2xl font-bold text-green-600">${json.updated}</p>
+                            <p class="text-gray-500">Actualizados</p>
+                        </div>
+                    </div>
+                    ${json.errores > 0 ? `<p class="text-sm text-red-600"><i class="fas fa-exclamation-triangle mr-1"></i>${json.errores} errores — revisa los detalles abajo.</p>` : ''}
+                    ${renderDetalle(json.detalle || [])}
+                </div>`;
+        } else {
+            result.innerHTML = `
+                <div class="bg-red-50 border border-red-200 rounded-lg p-4">
+                    <p class="font-medium text-red-800"><i class="fas fa-times-circle mr-2"></i>${json.message}</p>
+                </div>`;
+        }
+    } catch (e) {
+        prog.classList.add('hidden');
+        result.classList.remove('hidden');
+        result.innerHTML = `<div class="bg-red-50 border border-red-200 rounded-lg p-4 text-red-700">Error de conexión: ${e.message}</div>`;
+    }
+
+    btn.disabled = false;
+}
+
+function renderDetalle(detalle) {
+    const errores = detalle.filter(d => !d.ok);
+    if (!errores.length) return '';
+    return `
+        <details class="mt-2">
+            <summary class="text-sm text-red-600 cursor-pointer">Ver ${errores.length} errores</summary>
+            <div class="mt-2 space-y-1 max-h-48 overflow-y-auto">
+                ${errores.map(d => `
+                    <div class="flex gap-2 text-xs text-red-700 bg-red-50 rounded px-2 py-1">
+                        <span class="font-mono">${d.doc || '—'}</span>
+                        <span class="text-gray-500">${d.nombre || ''}</span>
+                        <span class="ml-auto">${d.message || ''}</span>
+                    </div>`).join('')}
+            </div>
+        </details>`;
+}
+</script>
+{% endblock %}