The file COFFEE-PRO/PRO-SUITE-ARC.md is the intended arc: how gateway login, Workz, Teamz, Biz, and the runtime (coffee-server) are supposed to connect. Today most shells are disconnected mocks — the diagram describes target wiring, not guaranteed live APIs.
Keyman is the “My Keyman” lane: you operating your machine — API keys, policy on your automation, operator boundaries. Org / workspace auth is what employees use: accounts, invites, roles, SSO — “who belongs to this company in this workspace.”
They can live in the same Node process later, but positioning and UI copy must stay separate: Workz/Teamz say workspace login, not “log in with Keyman,” unless the screen is explicitly for operators.
The suite sketches who lands where: everyone through a gateway; employees toward Workz; ICs / teams toward Teamz; execs toward Biz dashboards; builders toward Storage/Functions-style surfaces. Team management is not one screen — it is consistent identity plus role-appropriate apps.
Coffee Pro means one Coffee Server spine, namespaced /api/* routes, shared session story (target), and vertical HTML shells as thin clients. Biz is Coffee Biz inside the same brand — not a fake subsidiary name on slides.
For the full arc diagram and session flow, see COFFEE-PRO/PRO-SUITE-ARC.md alongside your install.