feat: regenerate-token endpoint

src/tracker/api/members.py

@@ -197,6 +197,22 @@ async def update_member(slug: str, req: MemberUpdate, db: AsyncSession = Depends
     return _member_to_out(member)
 
 
+@router.post("/members/{slug}/regenerate-token")
+async def regenerate_token(slug: str, db: AsyncSession = Depends(get_db)):
+    result = await db.execute(
+        select(Member).where(Member.slug == slug)
+    )
+    member = result.scalar_one_or_none()
+    if not member:
+        raise HTTPException(404, "Member not found")
+    if member.type != "agent":
+        raise HTTPException(400, "Only agent tokens can be regenerated")
+    token = f"tb-{secrets.token_urlsafe(32)}"
+    member.token = token
+    await db.commit()
+    return {"token": token}
+
+
 @router.patch("/members/me/status")
 async def update_my_status(status: str, db: AsyncSession = Depends(get_db)):
     """Quick status update (used by agents)."""