docs: align workspace inventory with registry

Author: DeliciousBuding

AGENTS.md

@@ -66,6 +66,7 @@ Use placeholders in examples. OAuth and local account examples must be obviously
 | `/workspace/model-assets` | `model-assets/ModelAssetsClient.tsx` | Model CRUD, evidence table with risk coloring |
 | `/workspace/risk-findings` | `risk-findings/RiskFindingsClient.tsx` | Findings table with Priority Sort, J/K nav, share links |
 | `/workspace/reports` | `reports/page.tsx` | Report center with track-based generation |
+| `/workspace/api-keys` | `api-keys/ApiKeysClient.tsx` | API key management and scoped credentials |
 | `/workspace/settings` | `settings/SettingsClient.tsx` | System config, templates, runtime status |
 | `/workspace/account` | `account/page.tsx` | User profile, providers, security |
 

ROADMAP.md

@@ -1,6 +1,6 @@
 # DiffAudit Platform Roadmap
 
-Last updated: 2026-05-23 07:54 Asia/Hong_Kong
+Last updated: 2026-05-23 08:03 Asia/Hong_Kong
 
 ## Current Goal
 
@@ -45,6 +45,7 @@ Keep the public Platform repository product-ready while advancing workspace UX,
 - [x] Move workspace global search visible copy into the shared workspace copy contract.
 - [x] Derive workspace global search aliases from navigation keys instead of route strings.
 - [x] Source desktop and mobile workspace navigation accessibility labels from workspace copy.
+- [x] Keep workspace page inventory aligned with the workspace navigation registry.
 - [ ] Continue polishing workspace IA and deep-page consistency through small, reviewable slices.
 
 ## Review Gates

scripts/test_workspace_inventory.py

@@ -0,0 +1,44 @@
+"""Guard workspace route inventory against navigation-registry drift."""
+
+from __future__ import annotations
+
+import re
+import unittest
+from pathlib import Path
+
+
+REPO_ROOT = Path(__file__).resolve().parents[1]
+AGENTS_PATH = REPO_ROOT / "AGENTS.md"
+REGISTRY_PATH = REPO_ROOT / "apps" / "web" / "src" / "lib" / "workspace-registry.ts"
+
+
+def workspace_inventory_section(markdown: str) -> str:
+    match = re.search(
+        r"^## Workspace Page Inventory\s*(?P<section>.*?)(?=^## |\Z)",
+        markdown,
+        flags=re.MULTILINE | re.DOTALL,
+    )
+    if not match:
+        raise AssertionError("AGENTS.md is missing the Workspace Page Inventory section.")
+    return match.group("section")
+
+
+class WorkspaceInventoryTest(unittest.TestCase):
+    def test_workspace_registry_routes_are_documented(self) -> None:
+        registry = REGISTRY_PATH.read_text(encoding="utf-8")
+        agents = AGENTS_PATH.read_text(encoding="utf-8")
+
+        registry_hrefs = sorted(set(re.findall(r'href:\s*"([^"]+)"', registry)))
+        inventory = workspace_inventory_section(agents)
+
+        missing = [href for href in registry_hrefs if f"| `{href}` |" not in inventory]
+        self.assertEqual(
+            [],
+            missing,
+            "Every workspace navigation route in WORKSPACE_NAV_REGISTRY must be listed "
+            "in AGENTS.md Workspace Page Inventory.",
+        )
+
+
+if __name__ == "__main__":
+    unittest.main()