fix(broker): record workspace_id from agent registration response (#1175)

* fix(broker): record workspace_id from agent registration response

Read `workspace_id` from the registration response at both register
sites instead of hardcoding `None`, so a join-by-key session records the
real workspace instead of the "ws_unknown" fallback — with no extra
request. Bumps the `relaycast` SDK to pick up the new field.

Requires a published `relaycast` crate that includes `workspace_id` on
`CreateAgentResponse` / `Agent` (AgentWorkforce/relaycast#201); the
pinned version may need adjusting to whatever release carries it.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* style: auto-format Rust code with cargo fmt

* fix(broker): bump relaycast to 4.1.1 for workspace_id field

The published relaycast 4.0.0 did not carry workspace_id on
CreateAgentResponse, breaking the broker build. 4.1.1 (already on
main) ships the field, so pin to it.

---------

Co-authored-by: Barry Cape <barryonthecape@icloud.com>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: Will Washburn <will.washburn@gmail.com>

Author: 5 people

crates/broker/src/relaycast/auth.rs

@@ -699,12 +699,7 @@ impl AuthClient {
                 .register_or_get_agent(request)
                 .await
                 .map_err(relay_error_to_anyhow)?;
-            return Ok((
-                result.id,
-                result.name,
-                result.token,
-                None, // workspace_id not returned in CreateAgentResponse
-            ));
+            return Ok((result.id, result.name, result.token, result.workspace_id));
         }
 
         loop {
@@ -717,12 +712,7 @@ impl AuthClient {
 
             match relay.register_agent(request).await {
                 Ok(result) => {
-                    return Ok((
-                        result.id,
-                        result.name,
-                        result.token,
-                        None, // workspace_id not returned in CreateAgentResponse
-                    ));
+                    return Ok((result.id, result.name, result.token, result.workspace_id));
                 }
                 Err(RelayError::Api { code, status, .. })
                     if is_conflict_code(&code) || status == 409 =>
@@ -1068,20 +1058,24 @@ mod tests {
         unsafe {
             std::env::set_var("AGENT_RELAY_WORKSPACE_KEY", "rk_live_env");
         }
+        // The register response now carries workspace_id, so a join-by-key
+        // session records the real workspace instead of the "ws_unknown"
+        // fallback — no extra lookup required.
         let register = server.mock(|when, then| {
             when.method(POST)
                 .path("/v1/agents")
                 .header("authorization", "Bearer rk_live_env");
             then.status(200)
                 .header("content-type", "application/json")
-                .body(r#"{"ok":true,"data":{"id":"a2","name":"lead","token":"at_live_2","status":"online","created_at":"2025-01-01T00:00:00Z"}}"#);
+                .body(r#"{"ok":true,"data":{"id":"a2","workspace_id":"ws_env","name":"lead","token":"at_live_2","status":"online","created_at":"2025-01-01T00:00:00Z"}}"#);
         });
 
         let client = AuthClient::new(server.base_url());
 
         let session = client.startup_session(Some("lead")).await.unwrap();
         assert_eq!(session.token, "at_live_2");
         assert_eq!(session.credentials.api_key, "rk_live_env");
+        assert_eq!(session.credentials.workspace_id, "ws_env");
         register.assert_hits(1);
 
         unsafe {