ladill-care/app/Services/Care/DemoLoginReseeder.php

<?php

namespace App\Services\Care;

use App\Models\User;
use Illuminate\Support\Facades\Cache;
use Illuminate\Support\Facades\Log;

/**
 * Reseed Care demo tenants after a fresh SSO login.
 *
 * Only owner demo accounts (and legacy enterprise org members) trigger a full
 * reseed. Staff training logins never wipe mid-demo.
 *
 * The onboarded org shell is created synchronously before the login redirect so
 * EnsureOrganizationSetup never flashes the blank onboarding form. Heavy demo
 * data still refreshes afterResponse().
 */
class DemoLoginReseeder
{
    public function maybeResetAfterLogin(User $user): void
    {
        if (! (bool) config('demo_accounts.enabled', false)
            || ! (bool) config('demo_accounts.reset_on_login', true)) {
            return;
        }

        // Staff demos share the owner tenant but must not reseed on login.
        if (\App\Support\DemoWorld::isStaffDemoEmail($user->email)) {
            return;
        }

        $plan = $this->planForEmail($user->email);
        if ($plan === null) {
            return;
        }

        $seedUser = $this->resolveSeedUser($user);
        if (! $seedUser) {
            return;
        }

        $lockKey = 'demo-reseed:care:'.$seedUser->public_id;
        if (! Cache::add($lockKey, 1, 120)) {
            // Another login is already reseeding — still guarantee the shell exists.
            try {
                app(DemoTenantSeeder::class)->ensureOnboardedShell($seedUser, $plan);
            } catch (\Throwable $e) {
                Log::warning('demo_care_login_shell_failed', [
                    'user_id' => $seedUser->id,
                    'plan' => $plan,
                    'error' => $e->getMessage(),
                ]);
            }

            return;
        }

        try {
            app(DemoTenantSeeder::class)->ensureOnboardedShell($seedUser, $plan);
        } catch (\Throwable $e) {
            Cache::forget($lockKey);
            Log::warning('demo_care_login_shell_failed', [
                'user_id' => $seedUser->id,
                'plan' => $plan,
                'error' => $e->getMessage(),
            ]);

            return;
        }

        $userId = $seedUser->id;
        dispatch(function () use ($userId, $plan, $lockKey) {
            try {
                $user = User::query()->find($userId);
                if ($user) {
                    app(DemoTenantSeeder::class)->seed($user, $plan, reset: true);
                }
            } catch (\Throwable $e) {
                Log::warning('demo_care_login_reseed_failed', [
                    'user_id' => $userId,
                    'plan' => $plan,
                    'error' => $e->getMessage(),
                ]);
            } finally {
                Cache::forget($lockKey);
            }
        })->afterResponse();
    }

    private function planForEmail(?string $email): ?string
    {
        $email = strtolower(trim((string) $email));
        if ($email === '') {
            return null;
        }

        $accounts = (array) config('demo_accounts.accounts', []);
        if (isset($accounts[$email])) {
            return $accounts[$email];
        }

        $members = (array) config('demo_accounts.member_emails', []);
        $ownerEmail = $members[$email] ?? null;

        return $ownerEmail ? ($accounts[$ownerEmail] ?? null) : null;
    }

    private function resolveSeedUser(User $user): ?User
    {
        $email = strtolower((string) $user->email);
        $ownerEmail = ((array) config('demo_accounts.member_emails', []))[$email] ?? null;
        if (! $ownerEmail) {
            return $user;
        }

        return User::query()->where('email', $ownerEmail)->first() ?? $user;
    }
}