[B2B Feature]: Mint a shareable authenticated link for a microsite from the assistant

[anfibiacreativa]

Describe the problem

The endpoint that mints a shareable authenticated link requires the caller's authenticated portal session cookie, which is scoped to the portal origin and is not available to the assistant (different origin; the cookie is HttpOnly and SameSite=Lax). So the assistant cannot mint the link directly.

Propose a solution

Introduce a cross-origin bridge: a surface served from the portal origin (which holds the session cookie) calls the share-link 'copy' mode to obtain the link, then posts the result back to the assistant chat. The bridge is triggered by an explicit seller action.

Flow

1. Microsite is authored and registered in the access-control mapping.
2. Seller triggers 'Generate link' in the chat.
3. A portal-origin surface (with the session cookie) requests a copy-mode share link for the page path.
4. The link is returned to the assistant surface for rendering.

Associated skill

microsite-builder skill + a new client-side tool.

Affected blocks / pages

New client-side tool; portal-origin minting surface; existing share-link (copy mode) endpoint.

Analytics data involved

None (uses the microsite path + allowed groups).

Priority

Blocking / needed for an upcoming event or customer

Additional context

Part of epic #112. EDS-1. Depends on the access-control registration issue.