feat(cli): make Cloud workspace IDs discoverable from the CLI

CHANGELOG.md

@@ -5,7 +5,16 @@ All notable changes to Agent Relay will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [Unreleased]
+## [Unreleased - Minor]
+
+### Added
+
+- `agent-relay cloud workspaces` lists the Cloud workspaces the stored login can use, with their IDs (`--json` for scripts). Workspace IDs previously had no CLI discovery path.
+- `agent-relay cloud enroll --workspace` accepts a workspace name or slug, not just a Cloud workspace UUID or unified `rw_` ID. The name is matched against the login's workspace listing, so enrolling no longer requires fetching an ID from the web dashboard.
+
+### Changed
+
+- `agent-relay cloud whoami` prints the organization and workspace IDs alongside their names.
 
 ## [11.3.1] - 2026-07-31
 

packages/cli/README.md

@@ -97,6 +97,20 @@ agent-relay cloud enroll --token ocl_node_enr_...
 agent-relay node up
 ```
 
+With a stored `agent-relay cloud login` you can mint the token yourself instead.
+`cloud workspaces` lists the workspaces the login can use, and `--workspace`
+takes a name, a Cloud workspace UUID, or a unified `rw_` ID:
+
+```bash
+agent-relay cloud workspaces
+# 50587328-441d-4acb-b8f3-dbe1b3c5de99  chief  Chief HQ
+
+agent-relay cloud enroll --workspace "Chief HQ"
+agent-relay node up
+```
+
+`agent-relay cloud whoami` also prints the current organization and workspace IDs.
+
 ## Cloud multiplayer rooms
 
 Cloud room membership is scoped to one Relay workspace. Every v1 invite creates

packages/cli/src/cli/bootstrap.test.ts

@@ -52,6 +52,7 @@ const expectedLeafCommands = [
   'cloud login',
   'cloud logout',
   'cloud whoami',
+  'cloud workspaces',
   'cloud connect',
   'cloud enroll',
   'cloud run',