fix(broker): unify fleet live worker inventory

.agentworkforce/trajectories/completed/2026-08/traj_0c4k1s4nyzg3.trace.json

@@ -0,0 +1,32 @@
+{
+  "version": "1.0.0",
+  "id": "99d12cd8-b320-49c4-8ea6-25391f5313eb",
+  "timestamp": "2026-08-25T07:27:52.373Z",
+  "trajectory": "traj_0c4k1s4nyzg3",
+  "files": [
+    {
+      "path": "CHANGELOG.md",
+      "conversations": [{ "contributor": { "type": "ai" }, "ranges": [] }]
+    },
+    {
+      "path": "crates/broker/src/fleet_wire.rs",
+      "conversations": [{ "contributor": { "type": "ai" }, "ranges": [] }]
+    },
+    {
+      "path": "crates/broker/src/node_control.rs",
+      "conversations": [{ "contributor": { "type": "ai" }, "ranges": [] }]
+    },
+    {
+      "path": "crates/broker/src/runtime/api.rs",
+      "conversations": [{ "contributor": { "type": "ai" }, "ranges": [] }]
+    },
+    {
+      "path": "crates/broker/src/runtime/fleet.rs",
+      "conversations": [{ "contributor": { "type": "ai" }, "ranges": [] }]
+    },
+    {
+      "path": "crates/broker/src/runtime/maintenance.rs",
+      "conversations": [{ "contributor": { "type": "ai" }, "ranges": [] }]
+    }
+  ]
+}

.agentworkforce/trajectories/completed/2026-08/traj_0c4k1s4nyzg3/summary.md

@@ -0,0 +1,33 @@
+# Trajectory: Fix relay #1602 authoritative live-worker inventory
+
+> **Status:** ✅ Completed
+> **Task:** AgentWorkforce/relay#1602
+> **Confidence:** 93%
+> **Started:** August 25, 2026 at 08:48 AM
+> **Completed:** August 25, 2026 at 09:27 AM
+
+---
+
+## Summary
+
+Unified fleet heartbeat live-agent names with the authoritative reconnect inventory, added divergence and reconnect regressions, and validated broker/TypeScript behavior.
+
+**Approach:** Standard approach
+
+---
+
+## Key Decisions
+
+### Use retained fleet_inventory as the sole broker-side identity/name set for inventory.sync and heartbeat live-agent capability
+- **Chose:** Use retained fleet_inventory as the sole broker-side identity/name set for inventory.sync and heartbeat live-agent capability
+- **Reasoning:** inventory carries authoritative immutable agent IDs, is populated only after registration or audited read-only reconciliation of live PTYs, survives node-control reconnects, and preserves multi-node claim arbitration; deriving heartbeat names from every worker-registry key is the divergent unauthorised projection that caused #1602
+
+---
+
+## Chapters
+
+### 1. Work
+*Agent: default*
+
+- Use retained fleet_inventory as the sole broker-side identity/name set for inventory.sync and heartbeat live-agent capability: Use retained fleet_inventory as the sole broker-side identity/name set for inventory.sync and heartbeat live-agent capability
+- Issue 1602 regression now proves heartbeat authorization names and reconnect inventory derive from one retained live-worker vector. Existing reconciliation remains responsible for adopting live PTYs without registration or token rotation; immutable-id/name mismatch guards preserve multi-node claim semantics.

.agentworkforce/trajectories/completed/2026-08/traj_0c4k1s4nyzg3/trajectory.json

@@ -0,0 +1,87 @@
+{
+  "id": "traj_0c4k1s4nyzg3",
+  "version": 1,
+  "task": {
+    "title": "Fix relay #1602 authoritative live-worker inventory",
+    "source": {
+      "system": "plain",
+      "id": "AgentWorkforce/relay#1602"
+    }
+  },
+  "status": "completed",
+  "startedAt": "2026-08-25T06:48:55.958Z",
+  "completedAt": "2026-08-25T07:27:52.373Z",
+  "agents": [
+    {
+      "name": "default",
+      "role": "lead",
+      "joinedAt": "2026-08-25T06:57:16.671Z"
+    }
+  ],
+  "chapters": [
+    {
+      "id": "chap_5lb3egoeu1rr",
+      "title": "Work",
+      "agentName": "default",
+      "startedAt": "2026-08-25T06:57:16.671Z",
+      "endedAt": "2026-08-25T07:27:52.373Z",
+      "events": [
+        {
+          "ts": 1787641036674,
+          "type": "decision",
+          "content": "Use retained fleet_inventory as the sole broker-side identity/name set for inventory.sync and heartbeat live-agent capability: Use retained fleet_inventory as the sole broker-side identity/name set for inventory.sync and heartbeat live-agent capability",
+          "raw": {
+            "question": "Use retained fleet_inventory as the sole broker-side identity/name set for inventory.sync and heartbeat live-agent capability",
+            "chosen": "Use retained fleet_inventory as the sole broker-side identity/name set for inventory.sync and heartbeat live-agent capability",
+            "alternatives": [],
+            "reasoning": "inventory carries authoritative immutable agent IDs, is populated only after registration or audited read-only reconciliation of live PTYs, survives node-control reconnects, and preserves multi-node claim arbitration; deriving heartbeat names from every worker-registry key is the divergent unauthorised projection that caused #1602"
+          },
+          "significance": "high"
+        },
+        {
+          "ts": 1787642870261,
+          "type": "reflection",
+          "content": "Issue 1602 regression now proves heartbeat authorization names and reconnect inventory derive from one retained live-worker vector. Existing reconciliation remains responsible for adopting live PTYs without registration or token rotation; immutable-id/name mismatch guards preserve multi-node claim semantics.",
+          "raw": {
+            "focalPoints": [
+              "authoritative-inventory",
+              "reconnects",
+              "identity-safety"
+            ],
+            "confidence": 0.93
+          },
+          "significance": "high",
+          "tags": [
+            "focal:authoritative-inventory",
+            "focal:reconnects",
+            "focal:identity-safety",
+            "confidence:0.93"
+          ]
+        }
+      ]
+    }
+  ],
+  "retrospective": {
+    "summary": "Unified fleet heartbeat live-agent names with the authoritative reconnect inventory, added divergence and reconnect regressions, and validated broker/TypeScript behavior.",
+    "approach": "Standard approach",
+    "confidence": 0.93
+  },
+  "commits": [
+    "fee5ee2d65e0b4a9a4f43f619c90c587e9440fcd"
+  ],
+  "filesChanged": [
+    "CHANGELOG.md",
+    "crates/broker/src/fleet_wire.rs",
+    "crates/broker/src/node_control.rs",
+    "crates/broker/src/runtime/api.rs",
+    "crates/broker/src/runtime/fleet.rs",
+    "crates/broker/src/runtime/maintenance.rs"
+  ],
+  "projectId": "AgentWorkforce/relay",
+  "tags": [],
+  "_trace": {
+    "startRef": "191e5f14a343431ec42282c1103c9f014854ac0b",
+    "endRef": "fee5ee2d65e0b4a9a4f43f619c90c587e9440fcd",
+    "traceId": "99d12cd8-b320-49c4-8ea6-25391f5313eb"
+  }
+}

.agentworkforce/trajectories/completed/2026-08/traj_5ellsvzejuxq.trace.json

@@ -0,0 +1,20 @@
+{
+  "version": "1.0.0",
+  "id": "60d228aa-be88-43f6-b386-88de5bd5d1ef",
+  "timestamp": "2026-08-25T08:03:24.303Z",
+  "trajectory": "traj_5ellsvzejuxq",
+  "files": [
+    {
+      "path": "crates/broker/src/node_control.rs",
+      "conversations": [{ "contributor": { "type": "ai" }, "ranges": [] }]
+    },
+    {
+      "path": "crates/broker/src/runtime/fleet.rs",
+      "conversations": [{ "contributor": { "type": "ai" }, "ranges": [] }]
+    },
+    {
+      "path": "crates/broker/src/worker.rs",
+      "conversations": [{ "contributor": { "type": "ai" }, "ranges": [] }]
+    }
+  ]
+}

.agentworkforce/trajectories/completed/2026-08/traj_5ellsvzejuxq/summary.md

@@ -0,0 +1,32 @@
+# Trajectory: Repair parentless adopted PTYs for relay #1602
+
+> **Status:** ✅ Completed
+> **Task:** AgentWorkforce/relay#1602 review
+> **Confidence:** 97%
+> **Started:** August 25, 2026 at 10:03 AM
+> **Completed:** August 25, 2026 at 10:03 AM
+
+---
+
+## Summary
+
+Included parentless live adopted PTYs in identity-safe reconciliation and proved the real WorkerRegistry-to-reconnect path end to end.
+
+**Approach:** Standard approach
+
+---
+
+## Key Decisions
+
+### Do not use the transient parent marker as roster eligibility
+- **Chose:** Do not use the transient parent marker as roster eligibility
+- **Reasoning:** The #1555 reconciler shipped before the incident but excluded parentless live handles before identity lookup. Adopted/migrated PTYs can lose that spawn metadata; the existing read-only workspace-scoped lookup, exact-name check, and immutable-ID guard are the safe eligibility boundary.
+
+---
+
+## Chapters
+
+### 1. Work
+*Agent: default*
+
+- Do not use the transient parent marker as roster eligibility: Do not use the transient parent marker as roster eligibility

.agentworkforce/trajectories/completed/2026-08/traj_5ellsvzejuxq/trajectory.json

@@ -0,0 +1,64 @@
+{
+  "id": "traj_5ellsvzejuxq",
+  "version": 1,
+  "task": {
+    "title": "Repair parentless adopted PTYs for relay #1602",
+    "source": {
+      "system": "plain",
+      "id": "AgentWorkforce/relay#1602 review"
+    }
+  },
+  "status": "completed",
+  "startedAt": "2026-08-25T08:03:20.298Z",
+  "completedAt": "2026-08-25T08:03:24.303Z",
+  "agents": [
+    {
+      "name": "default",
+      "role": "lead",
+      "joinedAt": "2026-08-25T08:03:22.360Z"
+    }
+  ],
+  "chapters": [
+    {
+      "id": "chap_127rww64racw",
+      "title": "Work",
+      "agentName": "default",
+      "startedAt": "2026-08-25T08:03:22.360Z",
+      "endedAt": "2026-08-25T08:03:24.303Z",
+      "events": [
+        {
+          "ts": 1787645002362,
+          "type": "decision",
+          "content": "Do not use the transient parent marker as roster eligibility: Do not use the transient parent marker as roster eligibility",
+          "raw": {
+            "question": "Do not use the transient parent marker as roster eligibility",
+            "chosen": "Do not use the transient parent marker as roster eligibility",
+            "alternatives": [],
+            "reasoning": "The #1555 reconciler shipped before the incident but excluded parentless live handles before identity lookup. Adopted/migrated PTYs can lose that spawn metadata; the existing read-only workspace-scoped lookup, exact-name check, and immutable-ID guard are the safe eligibility boundary."
+          },
+          "significance": "high"
+        }
+      ]
+    }
+  ],
+  "retrospective": {
+    "summary": "Included parentless live adopted PTYs in identity-safe reconciliation and proved the real WorkerRegistry-to-reconnect path end to end.",
+    "approach": "Standard approach",
+    "confidence": 0.97
+  },
+  "commits": [
+    "75f92f4474dc621a7b8e461e121c24605c40bccc"
+  ],
+  "filesChanged": [
+    "crates/broker/src/node_control.rs",
+    "crates/broker/src/runtime/fleet.rs",
+    "crates/broker/src/worker.rs"
+  ],
+  "projectId": "AgentWorkforce/relay",
+  "tags": [],
+  "_trace": {
+    "startRef": "4a695b26e9022756f1729be31b929fa61535b0a4",
+    "endRef": "75f92f4474dc621a7b8e461e121c24605c40bccc",
+    "traceId": "60d228aa-be88-43f6-b386-88de5bd5d1ef"
+  }
+}

.agentworkforce/trajectories/completed/2026-08/traj_bd1m78v7jn8i.trace.json

@@ -0,0 +1,25 @@
+{
+  "version": "1.0.0",
+  "id": "c8b672d1-2524-4908-9b2d-04666fc8da44",
+  "timestamp": "2026-08-25T20:50:56.814Z",
+  "trajectory": "traj_bd1m78v7jn8i",
+  "files": [
+    {
+      "path": ".agentworkforce/trajectories/completed/2026-08/traj_dmqicqrgy5c1/trajectory.json",
+      "conversations": [
+        {
+          "contributor": {
+            "type": "ai"
+          },
+          "ranges": [
+            {
+              "start_line": 64,
+              "end_line": 71,
+              "revision": "6a8cb6c9a7ff5966ccc7a1b8a3452f62eb6c7a0e"
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}

.agentworkforce/trajectories/completed/2026-08/traj_bd1m78v7jn8i/summary.md

@@ -0,0 +1,39 @@
+# Trajectory: Repair PR 1611 Trail ownership metadata
+
+> **Status:** ✅ Completed
+> **Task:** #1611
+> **Confidence:** 99%
+> **Started:** August 25, 2026 at 10:49 PM
+> **Completed:** August 25, 2026 at 10:50 PM
+
+---
+
+## Summary
+
+Verified Cubic's trajectory-ownership finding, regenerated traj_dmqicqrgy5c1 through Trail's validated storage renderer so its filesChanged list names its own outputs instead of a sibling trajectory, and validated the generated record.
+
+**Approach:** Standard approach
+
+---
+
+## Key Decisions
+
+### Use Trail's TrajectoryClient/FileStorage renderer for the ownership repair
+- **Chose:** Use Trail's TrajectoryClient/FileStorage renderer for the ownership repair
+- **Reasoning:** The completed artifact is generated output. Preserve its task, events, trace reference, commits, and retrospective; replace only the two sibling trajectory ownership paths with traj_dmqicqrgy5c1's corresponding renderer-owned summary.md and trajectory.json paths, then let Trail validate and rewrite both generated outputs.
+
+---
+
+## Chapters
+
+### 1. Initial work
+*Agent: relay-1611-finish-direct-0825*
+
+- Use Trail's TrajectoryClient/FileStorage renderer for the ownership repair: Use Trail's TrajectoryClient/FileStorage renderer for the ownership repair
+
+---
+
+## Artifacts
+
+**Commits:** 6a8cb6c9a
+**Files changed:** 1