Add stable keys for special groups and SSL sync agent hooks.

English keys on store/website specials stay unique per business; domain-admin can trigger dashboard SSL sync.

Co-authored-by: Cursor <cursoragent@cursor.com>

src/website/website-brand-groups.service.ts

@@ -1,5 +1,6 @@
 import {
   BadRequestException,
+  ConflictException,
   ForbiddenException,
   Injectable,
   NotFoundException,
@@ -7,6 +8,7 @@ import {
 import { Prisma } from '@prisma/client';
 import { AuthUser } from '../auth/auth.types';
 import { PermissionsService } from '../auth/permissions.service';
+import { normalizeSpecialGroupKey } from '../common/special-group-key';
 import { PrismaService } from '../prisma/prisma.service';
 import { TenantService } from '../tenant/tenant.service';
 import {
@@ -113,10 +115,14 @@ export class WebsiteBrandGroupsService {
       await this.assertBrandsBelongToBusiness(businessId, brandIds);
     }
 
+    const key = normalizeSpecialGroupKey(dto.key);
+    await this.assertKeyAvailable(businessId, key);
+
     const created = await this.prisma.$transaction(async (tx) => {
       const group = await tx.website_brand_groups.create({
         data: {
           business_id: businessId,
+          key,
           title: dto.title.trim(),
           sort_order: dto.sortOrder ?? 0,
           is_active: dto.isActive ?? true,
@@ -154,10 +160,17 @@ export class WebsiteBrandGroupsService {
       await this.assertBrandsBelongToBusiness(businessId, brandIds);
     }
 
+    const nextKey =
+      dto.key !== undefined ? normalizeSpecialGroupKey(dto.key) : undefined;
+    if (nextKey !== undefined) {
+      await this.assertKeyAvailable(businessId, nextKey, groupId);
+    }
+
     const updated = await this.prisma.$transaction(async (tx) => {
       await tx.website_brand_groups.update({
         where: { id: groupId },
         data: {
+          ...(nextKey !== undefined ? { key: nextKey } : {}),
           ...(dto.title !== undefined ? { title: dto.title.trim() } : {}),
           ...(dto.sortOrder !== undefined ? { sort_order: dto.sortOrder } : {}),
           ...(dto.isActive !== undefined ? { is_active: dto.isActive } : {}),
@@ -266,6 +279,7 @@ export class WebsiteBrandGroupsService {
 
     return {
       id: group.id.toString(),
+      key: group.key,
       title: group.title,
       sortOrder: group.sort_order,
       isActive: group.is_active,
@@ -275,6 +289,24 @@ export class WebsiteBrandGroupsService {
     };
   }
 
+  private async assertKeyAvailable(
+    businessId: bigint,
+    key: string,
+    excludeId?: bigint,
+  ) {
+    const existing = await this.prisma.website_brand_groups.findFirst({
+      where: {
+        business_id: businessId,
+        key,
+        ...(excludeId !== undefined ? { id: { not: excludeId } } : {}),
+      },
+      select: { id: true },
+    });
+    if (existing) {
+      throw new ConflictException('A brand group with this key already exists');
+    }
+  }
+
   private async assertPermission(
     businessId: bigint,
     userId: bigint,