Accounting Sync: FreeAgent <-> Gmail <-> Paperless-ngx

This skill automates the workflow of matching bank transactions with their corresponding invoices and ensuring they are archived in Paperless-ngx and linked in FreeAgent.

Core Workflow

0. Mandatory Auth Preflight

Run this before any dry-run or real-mode work. If either Gmail or FreeAgent is not authenticated, stop and report the blocker. Do not continue to Gmail searches, FreeAgent reads, Paperless checks, or local file staging.

• gws auth status
  • Required: exit code 0, token_valid: true, and usable credential encryption.
  • If the sandbox cannot read keychain credentials but an escalated/keychain-capable check succeeds, note that future commands must use the same keychain-capable execution path.
• freeagent-cli auth status
  • Required: exit code 0 and expired=false.
  • If the CLI reports no tokens stored, stop and ask the user to reauthenticate FreeAgent.
• paperless status
  • Required for real mode.
  • In dry-run mode, a Paperless failure may be reported as a Paperless-only blocker, but do not upload or attach anything.