Add regenerateCookieBannerTrackerPolicy mutation

Expose a non-destructive re-trigger that re-arms tracker policy
generation for a banner that already has a published version, so the
tracker-policy worker regenerates the document after iterating on the
generator. RegenerateTrackerPolicy returns a conflict when nothing has
been published yet.

Wire it across all API surfaces per the api-surface rule: the console
GraphQL mutation and resolver, the MCP tool, the prb cookie-banner
regenerate-policy command, and the n8n operation, with console e2e
coverage for the success and no-published-version paths.

Signed-off-by: Émile Ré <emile@probo.com>

pkg/server/api/console/v1/cookie_banner_resolvers.go

@@ -777,6 +777,33 @@ func (r *mutationResolver) PublishCookieBannerVersion(ctx context.Context, input
 	}, nil
 }
 
+// RegenerateCookieBannerTrackerPolicy is the resolver for the regenerateCookieBannerTrackerPolicy field.
+func (r *mutationResolver) RegenerateCookieBannerTrackerPolicy(ctx context.Context, input types.RegenerateCookieBannerTrackerPolicyInput) (*types.RegenerateCookieBannerTrackerPolicyPayload, error) {
+	scope, err := r.authorize(ctx, input.CookieBannerID, probo.ActionCookieBannerUpdate)
+	if err != nil {
+		return nil, err
+	}
+
+	banner, err := r.cookieBanner.RegenerateTrackerPolicy(ctx, scope, input.CookieBannerID)
+	if err != nil {
+		if errors.Is(err, cookiebanner.ErrBannerNotFound) {
+			return nil, gqlutils.NotFound(ctx, err)
+		}
+
+		if errors.Is(err, cookiebanner.ErrNoPublishedVersion) {
+			return nil, gqlutils.Conflict(ctx, err)
+		}
+
+		r.logger.ErrorCtx(ctx, "cannot regenerate cookie banner tracker policy", log.Error(err))
+
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return &types.RegenerateCookieBannerTrackerPolicyPayload{
+		CookieBanner: types.NewCookieBanner(banner),
+	}, nil
+}
+
 // CreateCookieCategory is the resolver for the createCookieCategory field.
 func (r *mutationResolver) CreateCookieCategory(ctx context.Context, input types.CreateCookieCategoryInput) (*types.CreateCookieCategoryPayload, error) {
 	scope, err := r.authorize(ctx, input.CookieBannerID, probo.ActionCookieCategoryCreate)

pkg/server/api/console/v1/graphql/cookie_banner.graphql

@@ -607,6 +607,9 @@ extend type Mutation {
     publishCookieBannerVersion(
         input: PublishCookieBannerVersionInput!
     ): PublishCookieBannerVersionPayload!
+    regenerateCookieBannerTrackerPolicy(
+        input: RegenerateCookieBannerTrackerPolicyInput!
+    ): RegenerateCookieBannerTrackerPolicyPayload!
     createCookieCategory(
         input: CreateCookieCategoryInput!
     ): CreateCookieCategoryPayload!
@@ -682,6 +685,10 @@ input PublishCookieBannerVersionInput {
     cookieBannerId: ID!
 }
 
+input RegenerateCookieBannerTrackerPolicyInput {
+    cookieBannerId: ID!
+}
+
 input CreateCookieCategoryInput {
     cookieBannerId: ID!
     name: String!
@@ -733,6 +740,10 @@ type PublishCookieBannerVersionPayload {
     cookieBanner: CookieBanner!
 }
 
+type RegenerateCookieBannerTrackerPolicyPayload {
+    cookieBanner: CookieBanner!
+}
+
 type CreateCookieCategoryPayload {
     cookieCategoryEdge: CookieCategoryEdge!
     cookieBanner: CookieBanner!