Project creatortrack fin connect p0 p3 merged deployed
The multi-tenant FIN connect feature (previously tracked as feat/fin-connect-p0, P0-P3 done but NOT deployed) is now merged to main (df18ac6) and deployed to prod (lifeos DB, migrations applied). Every workspace can now connect its own SimpleFIN bank via a per-workspace encrypted connection; Finances gates on financeAccessAllowed instead of being locked to Justin's email; RLS isolates each user's data.
Remaining post-deploy cleanup (deliberately deferred, not yet done):
1. Run scripts/fin-connect-adopt-global-url.mts 67 on prod to migrate Justin's global SimpleFIN URL into a proper #67 connection.
2. Delete the global-secret fallback and the legacy connect route's passphrase once step 1 is done (kept for now so Justin's own sync doesn't break).
Also still open/unmerged: feat/finances-shared-krystal (Krystal cross-workspace finance sharing) is a separate unmerged branch, not part of this deploy.
Why: Supersedes the prior memory noting P0-P3 as "done, NOT deployed" — that reference file (reference_creatortrack_finance_fin_connect.md) is now stale and should be updated to reflect merged+deployed status.
How to apply: Do not re-propose merging/deploying this branch; it's live. If asked about finance connect status, point to the two remaining cleanup steps above instead of re-scoping the whole feature.
[auto-memory session 86183751-1c8f-47ba-bcc8-7ed0bdf2ed40, confidence 0.90, mode direct]
Auto-memory addendum 2026-07-07T19:28:01.775222¶
Multi-tenant FIN connect (per-workspace encrypted SimpleFIN access URL, self-serve bank connect, per-workspace sync fan-out) merged to main (df18ac6) and deployed to prod. Krystal finance co-ownership schema was already on main and shipped in the same deploy. Verified end-to-end on prod: fan-out sync ran real data, workspace #67 synced 28 accounts/28 balances/0 failures through the new per-workspace connection path. Justin's global SimpleFIN URL was adopted into a #67 connection so he uses the same path as any new user. Krystal's 3 email invites were seeded into finance.share_invites(67, ...) so whichever she signs up with auto-grants Finances-only co-ownership.
Also noted: Finances is now visible to every signed-in CreatorTrack user (each sees only their own workspace, empty until connected) — no invite-only gating by default. A one-line change in lib/finance-access.ts would restrict this if Justin wants it later.
Follow-up cleanup task in progress: removing the legacy global-secret SimpleFIN fallback and legacy connect passphrase/route/ConnectPanel now that the URL has been adopted per-workspace (branch off main, build validated before merge).
Why: supersedes the earlier 'P0-P3 done, NOT deployed' state recorded in project_creatortrack_fin_connect_p0_p3_done.md. How to apply: treat multi-tenant FIN connect as LIVE on prod; do not redo the deploy steps. If asked about finance connect status, this is current as of 2026-07-07.
[auto-memory session 86183751-1c8f-47ba-bcc8-7ed0bdf2ed40, confidence 0.90]