Create demo org shell before Queue login redirect.

Match Care: guarantee onboarded org on the SSO request path so launcher/login never flashes onboarding during async reseed.

Co-authored-by: Cursor <cursoragent@cursor.com>

app/Services/Qms/DemoLoginReseeder.php

@@ -12,6 +12,10 @@ use Illuminate\Support\Facades\Log;
  * Only owner demo accounts trigger a full reseed. DemoWorld staff logins
  * (e.g. receptionist@ladill.com variants) share the owner tenant but must
  * never reseed mid-demo.
+ *
+ * The onboarded org shell is created synchronously before the login redirect so
+ * EnsureOrganizationSetup never flashes the blank onboarding form. Heavy demo
+ * data still refreshes afterResponse().
  */
 class DemoLoginReseeder
 {
@@ -38,6 +42,29 @@ class DemoLoginReseeder
 
         $lockKey = 'demo-reseed:queue:'.$seedUser->public_id;
         if (! Cache::add($lockKey, 1, 120)) {
+            try {
+                app(DemoSeeder::class)->ensureOnboardedShell($seedUser, $plan);
+            } catch (\Throwable $e) {
+                Log::warning('demo_queue_login_shell_failed', [
+                    'user_id' => $seedUser->id,
+                    'plan' => $plan,
+                    'error' => $e->getMessage(),
+                ]);
+            }
+
+            return;
+        }
+
+        try {
+            app(DemoSeeder::class)->ensureOnboardedShell($seedUser, $plan);
+        } catch (\Throwable $e) {
+            Cache::forget($lockKey);
+            Log::warning('demo_queue_login_shell_failed', [
+                'user_id' => $seedUser->id,
+                'plan' => $plan,
+                'error' => $e->getMessage(),
+            ]);
+
             return;
         }
 

app/Services/Qms/DemoSeeder.php

@@ -71,8 +71,13 @@ class DemoSeeder
         $plan = $this->normalizePlan($plan);
         $user = $this->resolveUser($identity);
 
+        // Always materialize the onboarded org shell before any wipe so concurrent
+        // SSO redirects never land on the blank onboarding form.
+        $this->ensureOnboardedShell($user, $plan);
+
         if ($reset) {
             $this->resetForOwner($user->ownerRef());
+            $this->ensureOnboardedShell($user, $plan);
         }
 
         $organization = $this->ensureOrganization($user, $plan);
@@ -160,6 +165,19 @@ class DemoSeeder
         ];
     }
 
+    /**
+     * Ensure the demo tenant has an onboarded organization + owner member.
+     * Safe to call on the SSO request path before redirecting.
+     */
+    public function ensureOnboardedShell(User $user, string $plan): Organization
+    {
+        $plan = $this->normalizePlan($plan);
+        $organization = $this->ensureOrganization($user, $plan);
+        $this->assignPlan($organization, $plan);
+
+        return $organization->fresh() ?? $organization;
+    }
+
     public function resolveUser(string $identity): User
     {
         $identity = trim($identity);

app/Services/Qms/OrganizationResolver.php

@@ -18,7 +18,10 @@ class OrganizationResolver
 
         $member = Member::where('user_ref', $ref)->first();
         if ($member) {
-            return Organization::find($member->organization_id);
+            $organization = Organization::query()->find($member->organization_id);
+            if ($organization) {
+                return $organization;
+            }
         }
 
         return Organization::owned($ref)->first();