---
path: /studio/yemaya/users
surface: studio
domain: yemaya
auth: signed-in + studio entitlement
source: apps/oshun/web/src/app/studio/yemaya/users/page.tsx
status: walked
last_walked:
  '2026-05-29 automated runtime walk (Playwright headless) — render, /v1 data
  (2xx), console/page-errors, expected content, screenshot verified; live
  screen-reader, touch, offline, and telemetry-delivery checks pending a manual
  AT pass. Evidence: WALKTHROUGH/results/runtime-sweep-2026-05-29.md; body
  re-derived 2026-06-03 from current source (lane-console architecture)'
---

# Studio · Yemaya · Users

## Purpose

Aggregator workspace that composes three sibling Yemaya lanes — Auth and
Identity, Organizations and Membership, and Compliance and Audit — under one
shell, with a Capability Summary heading the page. The page performs no `/v1`
fetch; each embedded lane runs its own admin-scoped console.

## Entry points

- Studio index quick-actions.
- Breadcrumb chain on this page: **Studio › Yemaya Auth › Users**.
- Direct URL / bookmark (signed-in + studio entitlement).

## Layout regions

`page.tsx` renders `ShellLayout active="studio"` and:

- **Breadcrumbs panel** (`data-yemaya-users-breadcrumbs`): Studio › Yemaya Auth ›
  Users (current `aria-current="page"`).
- **Workspace panel** (`StudioYemayaUsersWorkspace`, `data-yemaya-users-workspace`):
  - `<h1>` "Yemaya Users Workspace".
  - Summary `<p data-yemaya-users-summary>`.
  - **Capability Summary** (`data-yemaya-users-capability-summary`, `<h2>`): four
    `data-yemaya-users-capability` cards — Identity Lifecycle Orchestration,
    Access Governance, Observability and Remediation, Security and Contract
    Parity.
  - **Auth and Identity Lane** (`data-yemaya-users-auth-lane`, `<h2>`) — embeds
    `StudioYemayaAuthWorkspace`.
  - **Organizations and Membership Lane** (`data-yemaya-users-organizations-lane`,
    `<h2>`) — embeds `StudioYemayaOrganizationsWorkspace`.
  - **Compliance and Audit Lane** (`data-yemaya-users-compliance-lane`, `<h2>`) —
    embeds `StudioYemayaComplianceAndAuditWorkspace`.
- **Route Map panel** (`data-yemaya-users-route-map`): `<h2>` "Route Map" with six
  entries.
- **Quick-action panel**: five `quickAction` links.

## States

The aggregator renders unconditionally; each embedded lane owns its own states:

- [ ] **Auth and Identity Lane** — see
      [`studio-yemaya-auth.md`](./studio-yemaya-auth.md).
- [ ] **Organizations and Membership Lane** — see
      [`studio-yemaya-organizations.md`](./studio-yemaya-organizations.md).
- [ ] **Compliance and Audit Lane** — see
      [`studio-yemaya-compliance-and-audit.md`](./studio-yemaya-compliance-and-audit.md).

## Interactions

### Capability cards (non-interactive)

- [ ] **Identity Lifecycle Orchestration** / **Access Governance** /
      **Observability and Remediation** / **Security and Contract Parity**
      (`data-yemaya-users-capability` articles).

### Embedded lanes

- [ ] **Auth and Identity Lane** / **Organizations and Membership Lane** /
      **Compliance and Audit Lane** — see their per-view walkthroughs.

### Route map

`data-yemaya-users-route-map` — six entries:

- [ ] `/studio/yemaya/users`
- [ ] `/studio/yemaya/users/directory/[directoryId]`
- [ ] `/studio/yemaya/users/profiles/[profileId]`
- [ ] `/studio/yemaya/users/access/[accessId]`
- [ ] `/studio/yemaya/users/parity/[parityId]`
- [ ] `/studio/yemaya/users/governance/[policyId]`

### Quick actions

- [ ] **"Open Yemaya Auth workspace"** → `/studio/yemaya/auth`.
- [ ] **"Open Yemaya Organizations workspace"** → `/studio/yemaya/organizations`.
- [ ] **"Open Yemaya RBAC workspace"** → `/studio/yemaya/rbac`.
- [ ] **"Open Yemaya Compliance and Audit workspace"** →
      `/studio/yemaya/compliance-and-audit`.
- [ ] **"Back to Studio workspace index"** → `/studio`.

## Data & contracts

- **Reads**: none at the page boundary; reads happen inside each embedded lane.
- **Writes**: none at the page boundary; the embedded lanes own their POSTs.
- **Realtime**: None.
- **Caching**: aggregator delegates to embedded lanes.
- **Auth/role check**: admin-scoped, fail-closed inside each lane; route
  additionally signed-in + studio via the proxy gate.

## Cross-references

- Workspace source:
  `apps/oshun/web/src/components/studio/StudioYemayaUsersWorkspace.tsx`
- Route map source:
  `apps/oshun/web/src/components/studio/StudioYemayaUsersRouteMap.ts`
- Page source: `apps/oshun/web/src/app/studio/yemaya/users/page.tsx`
- Embedded lanes:
  - `apps/oshun/web/src/components/studio/StudioYemayaAuthWorkspace.tsx`
  - `apps/oshun/web/src/components/studio/StudioYemayaOrganizationsWorkspace.tsx`
  - `apps/oshun/web/src/components/studio/StudioYemayaComplianceAndAuditWorkspace.tsx`
- Studio overview: [`studio-overview.md`](../../studio-overview.md)
- Feature spec: [`V1/features.md`](../../../../V1/features.md)

## Open questions / known gaps

- [ ] The fifth quick-action ("Open Yemaya RBAC workspace") has no matching
      embedded lane on this page; confirm it is a related-route shortcut, not an
      omitted lane.
- [ ] Route-map children (`directory`/`profiles`/`access`/`parity`/`governance`)
      are a sitemap contract; confirm which dynamic pages exist.