Sync monitor
Every write is an upsert on the CRM id, so reruns and overlapping windows never double-count.
Secrets
Add missing keys in Project Settings → Secrets. Per-workspace keys are optional and use the name
CRM_WS_KEY_<workspace_id>.Run a sync now
Start with workspaces, then members, then messages and contacts.
messages stored
contacts stored
members stored
Sync state
Key status here comes from the same resolver the workspaces page uses. Rows for deactivated workspaces, or old "missing secret" failures that now resolve a key, are stale — clear them.