Triệt để: web LUÔN có mã KH + link chiết khấu — /api/kh-link mint mã KH + signed link cho khách vào thẳng web; initDiscountLink fallback qua kh-link + lưu vas_signed_kh; greeting/mọi reply hiện header

index.html

@@ -553,7 +553,7 @@
     <script src="./src/vaix-rag.js?gc=46"></script>    <!-- V.AI STUDIO RAG Module - loads FASTER via light index; lazy galleries; spec-aware search -->
     <script src="./src/greeting-news.js?gc=22"></script>  <!-- Greeting HOT news cards + source links -->
     <script src="./src/order-sync.js?gc=14"></script>    <!-- Order sync with V.AISTUDIO backend -->
-    <script type="module" src="./src/app.js?gc=51"></script>
+    <script type="module" src="./src/app.js?gc=52"></script>
     <script src="./src/greeting-source-cards.js?gc=14"></script> <!-- FIX: Nguồn tin cards under greeting -->
     <script src="./src/avatar-picker.js?gc=12"></script> <!-- ✨ Circular avatar picker (Mr V / Lisamy) + loading progress bar -->
 

index.ts

@@ -1285,6 +1285,66 @@ const server = Bun.serve({
         }
       },
     },
+    // ── Issue a mã KH + fresh time-limited discount link for the web visitor ──
+    // The Zalo bot only sends ?kh links in Zalo chat. Web visitors who open the
+    // site directly (no ?kh in URL) still need to SEE their mã KH + a valid
+    // chiết khấu link on every greeting / non-product reply. The client sends a
+    // stable visitor id (localStorage vas_cid) + display name; the server mints
+    // a customer code (persisted to customers.json) and a signed link — so the
+    // greeting always has a working link, not a dead one.
+    "/api/kh-link": {
+      GET: async (req: Request) => {
+        try {
+          const url = new URL(req.url);
+          const cid = (url.searchParams.get("cid") || "").trim().slice(0, 40);
+          const name = (url.searchParams.get("name") || "").trim().slice(0, 60);
+          if (!cid) return Response.json({ ok: false, error: "missing cid" }, { status: 400 });
+          const f = join("/app", "customers.json");
+          let data: any = {};
+          if (existsSync(f)) { try { data = JSON.parse(readFileSync(f, "utf-8")) || {}; } catch (_e) { data = {}; } }
+          if (!data || typeof data !== "object") data = {};
+          let rec: any = null;
+          for (const k in data) {
+            const c = data[k];
+            if (c && String(c.cid || "").trim() === cid) { rec = c; break; }
+          }
+          if (!rec) {
+            // Mint a new code: initials + last 3 of cid (mirror bot's rule), fallback "X".
+            const base = (name || "KH").replace(/[^A-Za-zÀ-ỹ\s]/g, " ").trim().split(/\s+/)
+              .map((w: string) => w.charAt(0)).join("").toUpperCase().replace(/[^A-Z]/g, "") || "X";
+            const ma_kh = base + cid.slice(-3).toUpperCase();
+            rec = { cid: cid, name: name || "", ma_kh: ma_kh, created_at: new Date().toISOString() };
+            data[ma_kh] = rec;
+            // Persist locally (best-effort; mirrors the bot's own persistence).
+            try { writeFileSync(f, JSON.stringify(data, null, 2), "utf-8"); } catch (_e) {}
+            // Also push to the repo so the Zalo bot/KETOAN see it (best-effort).
+            try {
+              const token = (process.env.HF_INFERENCE_TOKEN || process.env.HF_TOKEN || "").trim();
+              if (token) {
+                const payload = [
+                  { key: "header", value: { summary: "Add web visitor " + ma_kh + " via /api/kh-link", repo: { type: "space", id: "bep40/vai-avatar2" } } },
+                  { key: "file", value: { path: "customers.json", content: JSON.stringify(data, null, 2) } },
+                ].map((o) => JSON.stringify(o)).join("\n") + "\n";
+                await fetch("https://huggingface.co/api/spaces/bep40/vai-avatar2/commit/main", {
+                  method: "POST", headers: { "Content-Type": "application/x-ndjson", Authorization: "Bearer " + token },
+                  body: payload, signal: AbortSignal.timeout(15000),
+                }).catch(() => {});
+              }
+            } catch (_e2) {}
+          }
+          const maKh = String(rec.ma_kh || "");
+          const secret = (process.env.DISCOUNT_SECRET || "vai2026ck");
+          const exp = Math.floor(Date.now() / 1000) + 3600;
+          const crypto = await import("node:crypto");
+          const tk = crypto.createHmac("sha256", secret).update(maKh + ":" + exp).digest("hex").slice(0, 24);
+          const link = url.origin + "/?kh=" + encodeURIComponent(maKh) + "&tk=" + tk + "&exp=" + exp;
+          const ck = rec.ck != null ? String(rec.ck) : null;
+          return Response.json({ ok: true, kh: maKh, ck: ck, customer: rec.name || "", link: link });
+        } catch (e: any) {
+          return Response.json({ ok: false, error: e.message }, { status: 500 });
+        }
+      },
+    },
     "/api/customers": {
       GET: async () => {
         try {

src/app.js

@@ -1067,34 +1067,76 @@ function cleanAiText(text) {
     .trim();
 }
 
-// ── Time-limited discount link (Zalo bot → web) ─────────────────────────────
-// The bot signs ?kh=<ma_kh>&tk=<hmac>&exp=<unix> with a shared secret. When the
-// page is opened from that link we verify it server-side (/api/verify-kh) and:
-//   * remember the customer (vas_selected_customer: ma_kh, ck, name, cid)
-//   * remember the raw discount link for the greeting header
-//   * auto-apply the customer's ck to the quote + product cards
-// The server response is authoritative: expired/stale links are ignored and the
-// greeting then shows NO mã KH/link (customer must message the bot for a new link).
+// ── Mã KH + time-limited discount link (Zalo bot → web, and web standalone) ──
+// 1) Opened FROM the Zalo bot's signed link (?kh=..&tk=..&exp=..): verify it
+//    server-side (/api/verify-kh); expired/stale links are ignored.
+// 2) Opened DIRECTLY (no ?kh): mint/load a mã KH + fresh signed link via
+//    /api/kh-link, so the greeting and every non-product reply STILL show the
+//    customer's mã KH + a working chiết khấu link.
+// Both paths remember the customer (vas_selected_customer: ma_kh, ck, name,
+// cid) and auto-apply the customer's ck to quote + product cards.
 let _discountLink = null;      // { kh, url } when a verified link is active
 let _discountCustomer = null;  // { ma_kh, ck, name } verified customer
+let _servedLink = null;        // full signed link returned by /api/kh-link
+let _stableCid = null;         // stable visitor id (localStorage vas_cid)
+async function _ensureStableCid() {
+  if (_stableCid) return _stableCid;
+  try { _stableCid = localStorage.getItem("vas_cid"); } catch (e) {}
+  if (!_stableCid) {
+    _stableCid = "web" + Math.random().toString(36).slice(2, 10) + Date.now().toString(36).slice(-4);
+    try { localStorage.setItem("vas_cid", _stableCid); } catch (e) {}
+  }
+  return _stableCid;
+}
 async function initDiscountLink() {
   try {
     const p = new URLSearchParams(location.search);
     const kh = (p.get("kh") || "").trim();
     const tk = (p.get("tk") || "").trim();
     const exp = (p.get("exp") || "").trim();
-    if (!kh || !tk || !exp) return; // no signed link in URL
-    let resp;
-    try {
-      resp = await fetch("/api/verify-kh?kh=" + encodeURIComponent(kh) + "&tk=" + encodeURIComponent(tk) + "&exp=" + encodeURIComponent(exp));
-    } catch (e) { return; }
-    if (!resp || !resp.ok) return;
-    const data = await resp.json();
-    if (!data || !data.ok) return; // expired ("link hết hạn") or bad token — ignored
-    const maKh = data.kh || kh;
-    const ck = data.ck != null ? String(data.ck) : "";
-    const custName = data.customer || "";
-    _discountLink = { kh: maKh, url: location.origin + location.pathname + "?kh=" + encodeURIComponent(maKh) + "&tk=" + encodeURIComponent(tk) + "&exp=" + encodeURIComponent(exp) };
+    // Store the signed-link info DAILY so a returning visitor keeps a valid
+    // link even after the URL param is gone. Fallback to /api/kh-link below.
+    let signed = null;
+    if (kh && tk && exp) {
+      let resp;
+      try {
+        resp = await fetch("/api/verify-kh?kh=" + encodeURIComponent(kh) + "&tk=" + encodeURIComponent(tk) + "&exp=" + encodeURIComponent(exp));
+      } catch (e) { return; }
+      if (!resp || !resp.ok) return;
+      const data = await resp.json();
+      if (data && data.ok) {
+        signed = { kh: data.kh || kh, tk: tk, exp: exp, ck: data.ck != null ? String(data.ck) : "", customer: data.customer || "" };
+        try { localStorage.setItem("vas_signed_kh", JSON.stringify(signed)); } catch (e2) {}
+      }
+    }
+    // No (valid) signed link in URL → get/mint one from the server so the web
+    // chat ALWAYS has a mã KH + working link (visitor identity from vas_cid).
+    if (!signed) {
+      try { signed = JSON.parse(localStorage.getItem("vas_signed_kh") || "null"); } catch (e3) { signed = null; }
+      if (signed && signed.exp && Number(signed.exp) < Math.floor(Date.now() / 1000)) signed = null; // expired stored link
+    }
+    if (!signed) {
+      const cid = await _ensureStableCid();
+      let name = "";
+      try { name = (localStorage.getItem("vas_name") || "").trim(); } catch (e4) {}
+      try {
+        const r = await fetch("/api/kh-link?cid=" + encodeURIComponent(cid) + "&name=" + encodeURIComponent(name));
+        if (r.ok) {
+          const d = await r.json();
+          if (d && d.ok && d.kh && d.link) {
+            signed = { kh: d.kh, tk: "", exp: String(Math.floor(Date.now() / 1000) + 3600), ck: d.ck != null ? String(d.ck) : "", customer: d.customer || "" };
+            try { localStorage.setItem("vas_signed_kh", JSON.stringify(signed)); } catch (e5) {}
+            _servedLink = d.link;
+          }
+        }
+      } catch (e6) {}
+    }
+    if (!signed || !signed.kh) return;
+    const maKh = signed.kh;
+    const ck = signed.ck != null ? String(signed.ck) : "";
+    const custName = signed.customer || "";
+    const linkUrl = _servedLink || (location.origin + location.pathname + "?kh=" + encodeURIComponent(maKh) + "&tk=" + encodeURIComponent(signed.tk || "") + "&exp=" + encodeURIComponent(signed.exp || ""));
+    _discountLink = { kh: maKh, url: linkUrl };
     _discountCustomer = { ma_kh: maKh, ck: ck, name: custName };
     // Remember the customer for the quote/order exports (customers.js format).
     try {