[waleedlatif1]

Summary

• New People page in the organization sidebar, behind the org-scoped people feature flag (AppConfig orgIds, PEOPLE env fallback): everyone active in the org with title, department, location, and manager; search, department filter, and keyset paging bound to the active filters
• Profiles (/o/<org>/people/<memberId>): details, the reporting chain above (nearest first, stops at suspended or out-of-org managers, cycle-safe and depth-capped), and direct reports below; admins edit via a modal with a searchable manager picker
• People-data import (admins): CSV/TSV/XLSX parsed in the browser and validated on the server. Rows match members by email; header aliases cover common HR exports (Work Email, Job Title, Dept, Hire Date, Manager Email, city/state/country → location). A preview reports every change and per-row issue (non-members, bad emails/dates, duplicates, self-manager, unknown manager, reporting loops) before anything is written; applying re-plans under an org lock against current data
• Data: member_profile keyed on member.id (ON DELETE CASCADE), with manager_member_id → member.id (ON DELETE SET NULL) and a not-own-manager check, so leaving the org, moving orgs, or deleting an account cleans up in the database with no per-path hooks. Loops are refused in the app under a transaction-scoped advisory lock
• Ordinary members see the page subject to the existing organization.member_directory capability; imports and edits are admin-only and audited (org_people.imported, org_member.profile_updated)
• Shared ResourceLoadError extracted from Sim Links and reused here; docs page under Sim Search

Type of Change

• New feature

Testing

• lib/people/import.test.ts: 29 failure-mode cases for column matching and import planning (aliases, blank-clears vs missing-column-keeps, date formats and impossible dates, duplicates, non-members, self/unknown managers, in-file and stored loops, location parts)
• scripts/test-people-e2e.ts (wired into the http-e2e scim group with PEOPLE=true): real HTTP + Postgres. Tenant isolation, admin-only writes, preview writes nothing, apply/idempotency, manager resolution, chain and reports, search/department/cursor, loop/self/foreign-manager refusals with their messages, membership deletion cascading profiles and clearing managers, and exact audit counts (previews unaudited). JSON report via PEOPLE_E2E_REPORT_PATH
• lint, check:api-validation:strict, check:boundaries, check:unused-exports, check:migrations, drizzle-kit generate clean, schema mock regenerated

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing (new tests pass the test-audit authoring gate)
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
docs	Ready	Preview	Oct 31, 2026 9:27am UTC

[greptile-apps]

Confidence Score: 5/5

[Medium impact] No new blocking issue was found that needs a separate review comment.

Summary

Adds an organization People page with profiles, reporting lines, and admin-managed imports.

• Organization members can browse people and follow their reporting lines.
• Admins can edit profile details and set a person’s manager.
• Admins can preview and apply people data from HR files.

Diagram

%%{init: {'theme': 'neutral'}}%%
flowchart TD
  A[Admin selects a file] --> B[Browser parses headers and cells]
  B --> C[Server checks admin access]
  C --> D{Preview or apply?}
  D -->|Preview| E[Plan changes without writing]
  D -->|Apply| F[Lock organization profiles]
  F --> G[Plan against current profiles]
  G --> H[Write changed profiles]
  H --> I[Record import audit event]
  E --> J[Return counts and row issues]
  I --> J

Loading

_{Reviews (5) · Last reviewed commit: "fix(people): send import rows as positio..." · Reviewed by Greptile}

[cubic-dev-ai]

All reported issues were addressed across 47 files

<sub>This PR changes a database schema or migrates data. Ultrareviews find 2.4x more serious bugs than standard reviews. Comment @cubic-dev-ai ultrareview to run one.

Turn on auto-fix | Re-trigger cubic</sub>

[waleedlatif1]

@greptile

[waleedlatif1]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

[cubic-dev-ai]

All reported issues were addressed across 47 files

<sub>Reply with feedback, questions, or to request a fix.

Turn on auto-fix | Re-trigger cubic</sub>

[waleedlatif1]

@greptile

[waleedlatif1]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

[cubic-dev-ai]

All reported issues were addressed across 48 files

<sub>Reply with feedback, questions, or to request a fix.

Turn on auto-fix | Re-trigger cubic</sub>

[waleedlatif1]

@greptile

[waleedlatif1]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

[cubic-dev-ai]

No issues found across 48 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Turn on auto-fix | Re-trigger cubic}

[waleedlatif1]

@greptile

[waleedlatif1]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

[cubic-dev-ai]

No issues found across 48 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

<sub>You've manually re-run cubic several times on this PR. Each manual re-review checks the full PR again and counts toward your usage quota. To preserve your usage limits, we recommend letting cubic automatically review new commits.

Turn on auto-fix | Re-trigger cubic</sub>