@hodeinavarro/odoo-rpc-ts 0.2.0

package/dist/records/typed.js

@@ -0,0 +1,65 @@
+/**
+ * `TypedRecordSet` — an immutable, decoded snapshot of rows bound to its
+ * `(rpc, model)` origin, with explicit, batched relation traversal — the
+ * CLASSIC tier of the records design (the classic `[id, name]`-pair protocol,
+ * works on 16+; the spec tier in `recordModel.ts` needs 17+). Traversal is always ONE `read` per relation per
+ * recordset — never per row — so the N+1 storm is structurally impossible: there
+ * is no per-record fetch API to misuse. The snapshot is never mutated; a fetch
+ * produces a fresh {@link RelatedMap}, and the caller joins explicitly.
+ */
+import { Effect, Schema } from "effect";
+import { SchemaDriftError } from "../errors/schema.js";
+import { collectRefIds, makeRelatedMap } from "./related.js";
+/** Boundary decode: a related-`read` payload that fails the caller schema is drift. */
+const decodeRows = (schema, context) => (raw) => Schema.decodeUnknownEffect(Schema.Array(schema))(raw).pipe(Effect.mapError((cause) => new SchemaDriftError({ context, payload: raw, cause })));
+/**
+ * Read a many2one field off a row as a traversable ref value, or fail the whole
+ * traversal as a defect. The type system already forbids non-ref fields; this
+ * guards the dynamic-misuse escape hatch (e.g. an `any`-typed field or a schema
+ * that decoded the wrong shape) — a `TypeError`-equivalent `Effect.die` with a
+ * precise locator, never a silent skip.
+ */
+const readRefField = (row, field, model) => {
+    const value = row[field];
+    if (value === null || value === undefined) {
+        return Effect.succeed(null);
+    }
+    if (typeof value === "object" && typeof value.id === "number") {
+        return Effect.succeed(value);
+    }
+    return Effect.die(`TypedRecordSet(${model}).fetchRelated: field ${String(field)} of record ${row.id} is not a ` +
+        `many2one reference ({ id, name } | null); got ${typeof value}. Declare it with ` +
+        `Many2OneRefOrNull so traversal is type-safe.`);
+};
+/**
+ * Construct a {@link TypedRecordSet} over already-decoded rows. Internal: the
+ * public entry point is `OdooClient.searchRecordsTyped`, which owns the initial
+ * `search_read` decode and passes the resulting rows here.
+ */
+export const make = (rpc, model, rows) => {
+    const ids = rows.map((row) => row.id);
+    const fetchRelated = (field, relatedModel, schema, fields) => 
+    // Validate every row's field up front (dynamic-misuse guard), then collect
+    // the distinct ids purely and issue AT MOST one read.
+    Effect.forEach(rows, (row) => readRefField(row, field, model)).pipe(Effect.flatMap((refs) => {
+        const relatedIds = collectRefIds(refs, (ref) => ref);
+        if (relatedIds.length === 0) {
+            // No referenced records → no round trip. Asserted in the tests.
+            return Effect.succeed(makeRelatedMap([]));
+        }
+        return rpc
+            .callKw(relatedModel, "read", [], fields === undefined ? {} : { fields }, { ids: relatedIds })
+            .pipe(Effect.flatMap(decodeRows(schema, `${relatedModel}.read`)), Effect.map((relatedRows) => makeRelatedMap(relatedRows)));
+    }));
+    const joinRelated = (field, relatedModel, schema, fields) => fetchRelated(field, relatedModel, schema, fields).pipe(Effect.map((related) => rows.map((row) => [row, related.get(row[field])])));
+    return {
+        model,
+        rows,
+        ids,
+        length: rows.length,
+        [Symbol.iterator]: () => rows[Symbol.iterator](),
+        fetchRelated,
+        joinRelated,
+    };
+};
+//# sourceMappingURL=typed.js.map

package/dist/records/typed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"typed.js","sourceRoot":"","sources":["../../src/records/typed.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAGvD,OAAO,EAAE,aAAa,EAAE,cAAc,EAAmB,MAAM,cAAc,CAAC;AAkE9E,uFAAuF;AACvF,MAAM,UAAU,GACd,CAAO,MAA0B,EAAE,OAAe,EAAE,EAAE,CACtD,CAAC,GAAY,EAAqD,EAAE,CAClE,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CACxD,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,gBAAgB,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CACnF,CAAC;AAEN;;;;;;GAMG;AACH,MAAM,YAAY,GAAG,CACnB,GAAQ,EACR,KAAkB,EAClB,KAAa,EAC2B,EAAE;IAC1C,MAAM,KAAK,GAAI,GAAoC,CAAC,KAAK,CAAC,CAAC;IAC3D,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAQ,KAA0B,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;QACpF,OAAO,MAAM,CAAC,OAAO,CAAC,KAAyB,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CACf,kBAAkB,KAAK,yBAAyB,MAAM,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,EAAE,YAAY;QAC3F,iDAAiD,OAAO,KAAK,oBAAoB;QACjF,8CAA8C,CACjD,CAAC;AACJ,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,CAClB,GAAY,EACZ,KAAa,EACb,IAAwB,EACH,EAAE;IACvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEtC,MAAM,YAAY,GAAG,CACnB,KAAQ,EACR,YAAoB,EACpB,MAA0B,EAC1B,MAA8B,EACoB,EAAE;IACpD,2EAA2E;IAC3E,sDAAsD;IACtD,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CACjE,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QACtB,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QACrD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,gEAAgE;YAChE,OAAO,MAAM,CAAC,OAAO,CAAC,cAAc,CAAI,EAAE,CAAC,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,GAAG;aACP,MAAM,CACL,YAAY,EACZ,MAAM,EACN,EAAE,EACF,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EACtC,EAAE,GAAG,EAAE,UAAU,EAAE,CACpB;aACA,IAAI,CACH,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,YAAY,OAAO,CAAC,CAAC,EAC1D,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,CACzD,CAAC;IACN,CAAC,CAAC,CACH,CAAC;IAEJ,MAAM,WAAW,GAAG,CAClB,KAAQ,EACR,YAAoB,EACpB,MAA0B,EAC1B,MAA8B,EAC8C,EAAE,CAC9E,YAAY,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,CACpD,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACrB,IAAI,CAAC,GAAG,CACN,CAAC,GAAG,EAAE,EAAE,CACN,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAE,GAAoC,CAAC,KAAK,CAAU,CAAC,CAAU,CACrF,CACF,CACF,CAAC;IAEJ,OAAO;QACL,KAAK;QACL,IAAI;QACJ,GAAG;QACH,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;QAChD,YAAY;QACZ,WAAW;KACZ,CAAC;AACJ,CAAC,CAAC"}

package/dist/rpc.d.ts

@@ -0,0 +1,90 @@
+import { Context, Effect, Layer } from "effect";
+import { Transport, type TransportCallError, type TransportDialect } from "./transport.js";
+/** An Odoo `context` dict: opaque keys, values we do not model. */
+export type OdooContext = Record<string, unknown>;
+declare const GlobalContext_base: Context.ServiceClass<GlobalContext, "odoo-rpc-ts/GlobalContext", OdooContext>;
+/**
+ * The session/base Odoo `context` — the innermost, lowest-precedence layer of
+ * the context merge (e.g. `uid`, `lang`, `tz` established at authentication).
+ *
+ * Provided by the auth/transport layer that owns the session; absent here it
+ * defaults to `{}`. It is read once, when the {@link Rpc} layer is built.
+ */
+export declare class GlobalContext extends GlobalContext_base {
+}
+declare const Rpc_base: Context.ServiceClass<Rpc, "odoo-rpc-ts/Rpc", {
+    /** The underlying transport's wire dialect, for ops that must branch on it. */
+    readonly dialect: TransportDialect;
+    /**
+     * Execute one `call_kw`, merging the effective `context` and forwarding to
+     * the {@link Transport}. Caller inputs are never mutated — `args`, `kwargs`,
+     * and every context object are treated as read-only and copied.
+     *
+     * Context precedence (lowest → highest, later wins):
+     *   session/base ({@link GlobalContext}) < layer overrides
+     *     < `kwargs.context` < `options.context`.
+     *
+     * A `context` key inside `kwargs` is treated as a caller-level context (the
+     * ergonomic form `callKw(m, meth, [], { context })`), merged just below
+     * `options.context` and then stripped from `kwargs` so it never wires twice.
+     * If it is present but not a plain object it is a caller defect and fails
+     * with `Effect.die`.
+     */
+    readonly callKw: (model: string, method: string, args: ReadonlyArray<unknown>, kwargs?: OdooContext, options?: {
+        readonly context?: OdooContext;
+        readonly ids?: ReadonlyArray<number>;
+    }) => Effect.Effect<unknown, TransportCallError>;
+}>;
+/**
+ * The `call_kw` choke point. Every high-level operation funnels through here so
+ * the Odoo `context` is merged in exactly one place, with a single, documented
+ * precedence (see {@link callKw}).
+ */
+export declare class Rpc extends Rpc_base {
+}
+/**
+ * The provider seam for a lazily-seeded session/base context.
+ *
+ * A `Layer` resolves eagerly at build time, but the base tier must be lazy and
+ * retryable-on-failure (a transport error resolving it must surface as the
+ * failing call's error, never be baked in). So instead of a value provider we
+ * take an `Effect` that yields the base context; {@link buildRpc} runs it behind
+ * a success-only single-flight on the FIRST `callKw` (and retries on failure).
+ *
+ * Merge position: below the layer overrides, above the static {@link GlobalContext}
+ * tag (which, when both are present, seeds the innermost defaults).
+ */
+export type GlobalContextProvider = Effect.Effect<OdooContext, TransportCallError>;
+/**
+ * Build the {@link Rpc} layer over a {@link Transport}, optionally baking in
+ * layer-level `globalContext` overrides that sit above the session/base context
+ * but below any per-call context, and/or a {@link GlobalContextProvider} that
+ * lazily seeds the base tier on the first call.
+ */
+export declare const layerWith: (config?: {
+    readonly globalContext?: OdooContext;
+    readonly globalContextProvider?: GlobalContextProvider;
+}) => Layer.Layer<Rpc, never, Transport>;
+/**
+ * The {@link Rpc} layer with the base tier seeded from the ambient
+ * {@link Transport}'s server-side user context.
+ *
+ * Resolves `res.users.context_get` (an `@api.model` method — kwargs-only, so it
+ * works identically over `execute_kw` and the JSON-2 by-name dialect) exactly
+ * once, lazily on the first `callKw`, behind a success-only single-flight. A
+ * transport/decoding failure while seeding is NOT swallowed: it surfaces as that
+ * first call's error and the seed is retried on the next call.
+ */
+export declare const layerSeeded: (config?: {
+    readonly globalContext?: OdooContext;
+}) => Layer.Layer<Rpc, never, Transport>;
+/**
+ * The default {@link Rpc} layer: base tier seeded from the server-side user
+ * context ({@link layerSeeded}), so translated fields (stage names, selection
+ * labels, …) come back in the user's language instead of the source terms —
+ * matching odoo-rpc-py's `seed_context=True` default. Opt out with
+ * {@link layerWith} (no provider) when calls must carry no ambient context.
+ */
+export declare const layer: Layer.Layer<Rpc, never, Transport>;
+export {};
+//# sourceMappingURL=rpc.d.ts.map

package/dist/rpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc.d.ts","sourceRoot":"","sources":["../src/rpc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAkB,MAAM,QAAQ,CAAC;AAGhE,OAAO,EAEL,SAAS,EACT,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACtB,MAAM,gBAAgB,CAAC;AAExB,mEAAmE;AACnE,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;;AAYlD;;;;;;GAMG;AACH,qBAAa,aAAc,SAAQ,kBAGH;CAAG;;IAU/B,+EAA+E;sBAC7D,gBAAgB;IAClC;;;;;;;;;;;;;;OAcG;qBACc,CACf,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,aAAa,CAAC,OAAO,CAAC,EAC5B,MAAM,CAAC,EAAE,WAAW,EACpB,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC;QAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;KAAE,KAC/E,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,kBAAkB,CAAC;;AA/BnD;;;;GAIG;AACH,qBAAa,GAAI,SAAQ,QA4BH;CAAG;AAEzB;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,qBAAqB,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;AAuFnF;;;;;GAKG;AACH,eAAO,MAAM,SAAS,YAAa;IACjC,QAAQ,CAAC,aAAa,CAAC,EAAE,WAAW,CAAC;IACrC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;CACxD,KAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,CAOlC,CAAC;AAEJ;;;;;;;;;GASG;AACH,eAAO,MAAM,WAAW,YAAa;IACnC,QAAQ,CAAC,aAAa,CAAC,EAAE,WAAW,CAAC;CACtC,KAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,CAUlC,CAAC;AAEJ;;;;;;GAMG;AACH,eAAO,MAAM,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,CAAiB,CAAC"}

package/dist/rpc.js

@@ -0,0 +1,113 @@
+import { Context, Effect, Layer, Option, Schema } from "effect";
+import { SchemaDriftError } from "./errors/schema.js";
+import * as SingleFlight from "./internal/singleFlight.js";
+import { Transport, } from "./transport.js";
+/** A plain object (a mergeable context), excluding arrays and `null`. */
+const isPlainObject = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+/** Copy `kwargs` without its `context` key (never mutates the caller's object). */
+const omitContext = (kwargs) => {
+    const { context: _context, ...rest } = kwargs;
+    return rest;
+};
+/**
+ * The session/base Odoo `context` — the innermost, lowest-precedence layer of
+ * the context merge (e.g. `uid`, `lang`, `tz` established at authentication).
+ *
+ * Provided by the auth/transport layer that owns the session; absent here it
+ * defaults to `{}`. It is read once, when the {@link Rpc} layer is built.
+ */
+export class GlobalContext extends Context.Service()("odoo-rpc-ts/GlobalContext") {
+}
+/**
+ * The `call_kw` choke point. Every high-level operation funnels through here so
+ * the Odoo `context` is merged in exactly one place, with a single, documented
+ * precedence (see {@link callKw}).
+ */
+export class Rpc extends Context.Service()("odoo-rpc-ts/Rpc") {
+}
+const ContextRecord = Schema.Record(Schema.String, Schema.Unknown);
+/**
+ * Decode a raw `res.users.context_get` result into an {@link OdooContext};
+ * drift (a non-object payload) fails as {@link SchemaDriftError}, which is part
+ * of {@link TransportCallError} and so propagates as the seeding call's error.
+ */
+const decodeContext = (raw) => Schema.decodeUnknownEffect(ContextRecord)(raw).pipe(Effect.mapError((cause) => new SchemaDriftError({ context: "res.users.context_get", payload: raw, cause })));
+/**
+ * The shared {@link Rpc} service constructor. `provider`, when given, seeds the
+ * base tier lazily (single-flight on first call). The static {@link GlobalContext}
+ * tag is always read (defaulting to `{}`) and sits at the very bottom.
+ */
+const buildRpc = (transport, config, provider) => Effect.gen(function* () {
+    const staticBase = Option.getOrElse(yield* Effect.serviceOption(GlobalContext), () => ({}));
+    const layerOverrides = config?.globalContext ?? {};
+    // No provider: the base tier is the static tag value (today's behavior,
+    // resolved once at build). With a provider: resolve it lazily behind a
+    // success-only single-flight and layer it over the static base.
+    const resolveBase = provider === undefined
+        ? Effect.succeed(staticBase)
+        : yield* SingleFlight.make(provider).pipe(Effect.map((sf) => sf.get.pipe(Effect.map((seeded) => ({ ...staticBase, ...seeded })))));
+    const callKw = (model, method, args, kwargs, options) => {
+        // Pull any caller-supplied `kwargs.context` out of the spread so it is
+        // merged at the caller tier (not silently clobbered) and never wired twice.
+        const hasKwargsContext = kwargs !== undefined && "context" in kwargs;
+        const kwargsContext = hasKwargsContext ? kwargs["context"] : undefined;
+        if (hasKwargsContext && !isPlainObject(kwargsContext)) {
+            return Effect.die(`Rpc.callKw: kwargs.context for "${model}.${method}" must be a plain object, ` +
+                `got ${typeof kwargsContext}.`);
+        }
+        const restKwargs = hasKwargsContext ? omitContext(kwargs) : (kwargs ?? {});
+        return resolveBase.pipe(Effect.flatMap((base) => {
+            const context = {
+                ...base,
+                ...layerOverrides,
+                ...kwargsContext,
+                ...options?.context,
+            };
+            const params = {
+                model,
+                method,
+                args,
+                kwargs: { ...restKwargs, context },
+                ...(options?.ids !== undefined ? { ids: options.ids } : {}),
+            };
+            return transport.callKw(params);
+        }));
+    };
+    return { dialect: transport.dialect, callKw };
+});
+/**
+ * Build the {@link Rpc} layer over a {@link Transport}, optionally baking in
+ * layer-level `globalContext` overrides that sit above the session/base context
+ * but below any per-call context, and/or a {@link GlobalContextProvider} that
+ * lazily seeds the base tier on the first call.
+ */
+export const layerWith = (config) => Layer.effect(Rpc, Effect.gen(function* () {
+    const transport = yield* Transport;
+    return yield* buildRpc(transport, config, config?.globalContextProvider);
+}));
+/**
+ * The {@link Rpc} layer with the base tier seeded from the ambient
+ * {@link Transport}'s server-side user context.
+ *
+ * Resolves `res.users.context_get` (an `@api.model` method — kwargs-only, so it
+ * works identically over `execute_kw` and the JSON-2 by-name dialect) exactly
+ * once, lazily on the first `callKw`, behind a success-only single-flight. A
+ * transport/decoding failure while seeding is NOT swallowed: it surfaces as that
+ * first call's error and the seed is retried on the next call.
+ */
+export const layerSeeded = (config) => Layer.effect(Rpc, Effect.gen(function* () {
+    const transport = yield* Transport;
+    const provider = transport
+        .callKw({ model: "res.users", method: "context_get", args: [], kwargs: {} })
+        .pipe(Effect.flatMap(decodeContext));
+    return yield* buildRpc(transport, config, provider);
+}));
+/**
+ * The default {@link Rpc} layer: base tier seeded from the server-side user
+ * context ({@link layerSeeded}), so translated fields (stage names, selection
+ * labels, …) come back in the user's language instead of the source terms —
+ * matching odoo-rpc-py's `seed_context=True` default. Opt out with
+ * {@link layerWith} (no provider) when calls must carry no ambient context.
+ */
+export const layer = layerSeeded();
+//# sourceMappingURL=rpc.js.map

package/dist/rpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc.js","sourceRoot":"","sources":["../src/rpc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,YAAY,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAEL,SAAS,GAGV,MAAM,gBAAgB,CAAC;AAKxB,yEAAyE;AACzE,MAAM,aAAa,GAAG,CAAC,KAAc,EAAwB,EAAE,CAC7D,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAEvE,mFAAmF;AACnF,MAAM,WAAW,GAAG,CAAC,MAAmB,EAAe,EAAE;IACvD,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;IAC9C,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,OAAO,aAAc,SAAQ,OAAO,CAAC,OAAO,EAG/C,CAAC,2BAA2B,CAAC;CAAG;AAEnC;;;;GAIG;AACH,MAAM,OAAO,GAAI,SAAQ,OAAO,CAAC,OAAO,EA4BrC,CAAC,iBAAiB,CAAC;CAAG;AAgBzB,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;AAEnE;;;;GAIG;AACH,MAAM,aAAa,GAAG,CAAC,GAAY,EAAgD,EAAE,CACnF,MAAM,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CACjD,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,gBAAgB,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAC3F,CACF,CAAC;AAEJ;;;;GAIG;AACH,MAAM,QAAQ,GAAG,CACf,SAAmC,EACnC,MAA4D,EAC5D,QAA2C,EACR,EAAE,CACrC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CACjC,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,EAC1C,GAAgB,EAAE,CAAC,CAAC,EAAE,CAAC,CACxB,CAAC;IACF,MAAM,cAAc,GAAG,MAAM,EAAE,aAAa,IAAI,EAAE,CAAC;IAEnD,wEAAwE;IACxE,uEAAuE;IACvE,gEAAgE;IAChE,MAAM,WAAW,GACf,QAAQ,KAAK,SAAS;QACpB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;QAC5B,CAAC,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CACrC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAChB,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAe,EAAE,CAAC,CAAC,EAAE,GAAG,UAAU,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CACjF,CACF,CAAC;IAER,MAAM,MAAM,GAAG,CACb,KAAa,EACb,MAAc,EACd,IAA4B,EAC5B,MAAoB,EACpB,OAAkF,EACtC,EAAE;QAC9C,uEAAuE;QACvE,4EAA4E;QAC5E,MAAM,gBAAgB,GAAG,MAAM,KAAK,SAAS,IAAI,SAAS,IAAI,MAAM,CAAC;QACrE,MAAM,aAAa,GAAG,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvE,IAAI,gBAAgB,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,EAAE,CAAC;YACtD,OAAO,MAAM,CAAC,GAAG,CACf,mCAAmC,KAAK,IAAI,MAAM,4BAA4B;gBAC5E,OAAO,OAAO,aAAa,GAAG,CACjC,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAE3E,OAAO,WAAW,CAAC,IAAI,CACrB,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YACtB,MAAM,OAAO,GAAgB;gBAC3B,GAAG,IAAI;gBACP,GAAG,cAAc;gBACjB,GAAI,aAAyC;gBAC7C,GAAG,OAAO,EAAE,OAAO;aACpB,CAAC;YACF,MAAM,MAAM,GAAiB;gBAC3B,KAAK;gBACL,MAAM;gBACN,IAAI;gBACJ,MAAM,EAAE,EAAE,GAAG,UAAU,EAAE,OAAO,EAAE;gBAClC,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5D,CAAC;YACF,OAAO,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC,CAAC,CACH,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;AAChD,CAAC,CAAC,CAAC;AAEL;;;;;GAKG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,MAGzB,EAAsC,EAAE,CACvC,KAAK,CAAC,MAAM,CACV,GAAG,EACH,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC;IACnC,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,qBAAqB,CAAC,CAAC;AAC3E,CAAC,CAAC,CACH,CAAC;AAEJ;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,MAE3B,EAAsC,EAAE,CACvC,KAAK,CAAC,MAAM,CACV,GAAG,EACH,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC;IACnC,MAAM,QAAQ,GAA0B,SAAS;SAC9C,MAAM,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;SAC3E,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;IACvC,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;AACtD,CAAC,CAAC,CACH,CAAC;AAEJ;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,KAAK,GAAuC,WAAW,EAAE,CAAC"}

package/dist/services/db.d.ts

@@ -0,0 +1,128 @@
+/**
+ * `DbService` — the master-password-gated database-management endpoints exposed
+ * by Odoo's `db` service over `POST /jsonrpc` (`exp_list`, `exp_db_exist`,
+ * `exp_create_database`, `exp_drop`, `exp_duplicate_database`, `exp_dump`,
+ * `exp_restore`, `exp_change_admin_password`).
+ *
+ * Unlike the model-level `Transport`, this service is **database-less and
+ * credential-less**: it authenticates nothing and speaks to no database. The
+ * only secret is the per-call master password (Odoo's `admin_passwd`), taken as
+ * a `Redacted<string>` and unwrapped solely at the point the request body is
+ * built. There is therefore no `Transport` tag, no uid, and no session — every
+ * function takes the server `url: URL` explicitly and requires only an abstract
+ * `HttpClient`.
+ *
+ * A wrong master password surfaces as `odoo.exceptions.AccessDenied`, which the
+ * shared JSON-RPC choke point ({@link mapJsonRpcError}) maps to
+ * {@link OdooAuthenticationError} — same as any other auth rejection.
+ *
+ * NODE ORIENTATION: {@link dump} and {@link restore} carry the whole backup in
+ * memory as a `Uint8Array`. This is inherent to the wire contract — Odoo's
+ * `exp_dump` returns the archive base64-encoded inside the JSON-RPC `result`,
+ * and `exp_restore` takes it back the same way — so there is no streaming path
+ * to preserve. Fine for the CI/ops-sized databases this is meant for; not a
+ * mechanism for multi-gigabyte production dumps.
+ *
+ * Wire arities verified against `odoo/service/db.py` on 16.0 and 19.0 (stable
+ * 16–19). `dispatch` strips the leading master password for every `exp_*`
+ * method except the four unauthenticated ones (`list`, `db_exist`, `list_lang`,
+ * `server_version`); `exp_restore` has NO `neutralize` parameter on any version.
+ */
+import { Effect, Redacted } from "effect";
+import { SchemaDriftError } from "../errors/schema.js";
+import type { OdooAuthenticationError } from "../errors/auth.js";
+import type { OdooServerFault } from "../errors/server.js";
+import type { SessionExpiredError } from "../errors/session.js";
+import { OdooTransportError } from "../errors/transport.js";
+import { HttpClient } from "../internal/platform.js";
+/** The failure channel a single `db` round trip can produce. */
+type DbCallError = OdooTransportError | SchemaDriftError | SessionExpiredError | OdooServerFault | OdooAuthenticationError;
+/**
+ * List the databases the server is willing to expose (honours `list_db` and any
+ * `dbfilter`). Unauthenticated — no master password required.
+ */
+export declare const listDatabases: (url: URL) => Effect.Effect<ReadonlyArray<string>, DbCallError, HttpClient.HttpClient>;
+/** Whether a database of the given name exists. Unauthenticated. */
+export declare const exists: (url: URL, name: string) => Effect.Effect<boolean, DbCallError, HttpClient.HttpClient>;
+/** Options for {@link create}. `master` and `adminPassword` are the two secrets. */
+export interface CreateOptions {
+    readonly master: Redacted.Redacted<string>;
+    readonly name: string;
+    /** Install demo data. Defaults to `false`. */
+    readonly demo?: boolean;
+    /** Load language / locale (e.g. `"en_US"`). Defaults to `"en_US"`. */
+    readonly lang?: string;
+    /** Login of the initial admin user. Defaults to `"admin"`. */
+    readonly adminLogin?: string;
+    /** Password of the initial admin user. */
+    readonly adminPassword: Redacted.Redacted<string>;
+    /** ISO country code to seed localization (e.g. `"US"`). */
+    readonly countryCode?: string;
+    /** Company phone to seed. */
+    readonly phone?: string;
+}
+/**
+ * Create a fresh database and its initial admin user.
+ *
+ * Wire (after `dispatch` strips the master): `exp_create_database(db_name,
+ * demo, lang, user_password='admin', login='admin', country_code=None,
+ * phone=None)`.
+ */
+export declare const create: (url: URL, options: CreateOptions) => Effect.Effect<void, DbCallError, HttpClient.HttpClient>;
+/**
+ * Drop a database. Resolves to `true` when a database was actually dropped,
+ * `false` when none of that name existed.
+ */
+export declare const drop: (url: URL, master: Redacted.Redacted<string>, name: string) => Effect.Effect<boolean, DbCallError, HttpClient.HttpClient>;
+/** Options for {@link duplicate}. */
+export interface DuplicateOptions {
+    /**
+     * Neutralize the copy (disable outgoing mail/crons/payment providers, …) so it
+     * is safe as a staging database. Maps to `neutralize_database`. Defaults to
+     * `false`.
+     */
+    readonly neutralize?: boolean;
+}
+/**
+ * Duplicate `source` into a new database `target`.
+ *
+ * Wire (after master strip): `exp_duplicate_database(db_original_name, db_name,
+ * neutralize_database=False)`.
+ */
+export declare const duplicate: (url: URL, master: Redacted.Redacted<string>, source: string, target: string, options?: DuplicateOptions) => Effect.Effect<void, DbCallError, HttpClient.HttpClient>;
+/**
+ * Dump a database into an in-memory archive.
+ *
+ * `format` is `"zip"` (default; includes the filestore) or `"dump"` (raw
+ * `pg_dump` custom format, database only). Odoo returns the archive
+ * base64-encoded inside the JSON-RPC `result`; we decode it to raw bytes.
+ */
+export declare const dump: (url: URL, master: Redacted.Redacted<string>, name: string, format?: "zip" | "dump") => Effect.Effect<Uint8Array, DbCallError, HttpClient.HttpClient>;
+/** Options for {@link restore}. */
+export interface RestoreOptions {
+    /**
+     * Restore as a *copy* — regenerate the database uuid and secret so it does not
+     * collide with the original in a mail/cron sense. Maps to `copy`. Defaults to
+     * `false`.
+     *
+     * NOTE: `exp_restore` has NO `neutralize` parameter on any supported version;
+     * there is deliberately no such option here.
+     */
+    readonly copy?: boolean;
+}
+/**
+ * Restore a previously {@link dump}ed archive under a new database `name`.
+ *
+ * The bytes are re-encoded to the base64 string `exp_restore` expects.
+ * Wire (after master strip): `exp_restore(db_name, data, copy=False)`.
+ */
+export declare const restore: (url: URL, master: Redacted.Redacted<string>, name: string, archive: Uint8Array, options?: RestoreOptions) => Effect.Effect<void, DbCallError, HttpClient.HttpClient>;
+/**
+ * Change the server master password (`admin_passwd`). `master` is the current
+ * password; `next` becomes the new one.
+ *
+ * Wire (after master strip): `exp_change_admin_password(new_password)`.
+ */
+export declare const changeMasterPassword: (url: URL, master: Redacted.Redacted<string>, next: Redacted.Redacted<string>) => Effect.Effect<void, DbCallError, HttpClient.HttpClient>;
+export {};
+//# sourceMappingURL=db.d.ts.map

package/dist/services/db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../src/services/db.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,MAAM,EAAY,QAAQ,EAAU,MAAM,QAAQ,CAAC;AAE5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAqB,MAAM,yBAAyB,CAAC;AAQxE,gEAAgE;AAChE,KAAK,WAAW,GACZ,kBAAkB,GAClB,gBAAgB,GAChB,mBAAmB,GACnB,eAAe,GACf,uBAAuB,CAAC;AA0D5B;;;GAGG;AACH,eAAO,MAAM,aAAa,QACnB,GAAG,KACP,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,UAAU,CAKvE,CAAC;AAEJ,oEAAoE;AACpE,eAAO,MAAM,MAAM,QACZ,GAAG,QACF,MAAM,KACX,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,UAAU,CAGzD,CAAC;AAEJ,oFAAoF;AACpF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,8CAA8C;IAC9C,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,sEAAsE;IACtE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,8DAA8D;IAC9D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,0CAA0C;IAC1C,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClD,2DAA2D;IAC3D,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,6BAA6B;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;GAMG;AACH,eAAO,MAAM,MAAM,QACZ,GAAG,WACC,aAAa,KACrB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,CAAC,UAAU,CAUjC,CAAC;AAEzB;;;GAGG;AACH,eAAO,MAAM,IAAI,QACV,GAAG,UACA,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,QAC3B,MAAM,KACX,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,UAAU,CAGzD,CAAC;AAEJ,qCAAqC;AACrC,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED;;;;;GAKG;AACH,eAAO,MAAM,SAAS,QACf,GAAG,UACA,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,UACzB,MAAM,UACN,MAAM,YACL,gBAAgB,KACxB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,CAAC,UAAU,CAMjC,CAAC;AAEzB;;;;;;GAMG;AACH,eAAO,MAAM,IAAI,QACV,GAAG,UACA,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,QAC3B,MAAM,WACJ,KAAK,GAAG,MAAM,KACrB,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,EAAE,UAAU,CAAC,UAAU,CAO5D,CAAC;AAEJ,mCAAmC;AACnC,MAAM,WAAW,cAAc;IAC7B;;;;;;;OAOG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;;GAKG;AACH,eAAO,MAAM,OAAO,QACb,GAAG,UACA,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,QAC3B,MAAM,WACH,UAAU,YACV,cAAc,KACtB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,CAAC,UAAU,CAMjC,CAAC;AAEzB;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,QAC1B,GAAG,UACA,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,QAC3B,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,KAC9B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,CAAC,UAAU,CAGtD,CAAC"}

package/dist/services/db.js

@@ -0,0 +1,132 @@
+/**
+ * `DbService` — the master-password-gated database-management endpoints exposed
+ * by Odoo's `db` service over `POST /jsonrpc` (`exp_list`, `exp_db_exist`,
+ * `exp_create_database`, `exp_drop`, `exp_duplicate_database`, `exp_dump`,
+ * `exp_restore`, `exp_change_admin_password`).
+ *
+ * Unlike the model-level `Transport`, this service is **database-less and
+ * credential-less**: it authenticates nothing and speaks to no database. The
+ * only secret is the per-call master password (Odoo's `admin_passwd`), taken as
+ * a `Redacted<string>` and unwrapped solely at the point the request body is
+ * built. There is therefore no `Transport` tag, no uid, and no session — every
+ * function takes the server `url: URL` explicitly and requires only an abstract
+ * `HttpClient`.
+ *
+ * A wrong master password surfaces as `odoo.exceptions.AccessDenied`, which the
+ * shared JSON-RPC choke point ({@link mapJsonRpcError}) maps to
+ * {@link OdooAuthenticationError} — same as any other auth rejection.
+ *
+ * NODE ORIENTATION: {@link dump} and {@link restore} carry the whole backup in
+ * memory as a `Uint8Array`. This is inherent to the wire contract — Odoo's
+ * `exp_dump` returns the archive base64-encoded inside the JSON-RPC `result`,
+ * and `exp_restore` takes it back the same way — so there is no streaming path
+ * to preserve. Fine for the CI/ops-sized databases this is meant for; not a
+ * mechanism for multi-gigabyte production dumps.
+ *
+ * Wire arities verified against `odoo/service/db.py` on 16.0 and 19.0 (stable
+ * 16–19). `dispatch` strips the leading master password for every `exp_*`
+ * method except the four unauthenticated ones (`list`, `db_exist`, `list_lang`,
+ * `server_version`); `exp_restore` has NO `neutralize` parameter on any version.
+ */
+import { Effect, Encoding, Redacted, Schema } from "effect";
+import { SchemaDriftError } from "../errors/schema.js";
+import { OdooTransportError } from "../errors/transport.js";
+import { HttpClient, HttpClientRequest } from "../internal/platform.js";
+import { buildRequest, JsonRpcResponse, mapJsonRpcError, nextRequestId, } from "../protocol/jsonrpc.js";
+/** Join the base URL with the `/jsonrpc` path, tolerating a trailing slash. */
+const jsonRpcEndpoint = (url) => `${url.href.replace(/\/+$/, "")}/jsonrpc`;
+/**
+ * One `db`-service round trip: build the `{service:"db", method, args}`
+ * envelope, POST it, decode the JSON-RPC response, and either return the raw
+ * `result` or map the fault through the shared choke point.
+ *
+ * GOTCHA: never record `args` on the span — the master password rides in
+ * position 0 for gated methods. Only the method name is safe.
+ */
+const dbCall = (url, method, args) => Effect.gen(function* () {
+    const client = yield* HttpClient.HttpClient;
+    const endpoint = jsonRpcEndpoint(url);
+    const id = nextRequestId();
+    const site = { method: `db.${method}` };
+    const request = HttpClientRequest.post(endpoint).pipe(HttpClientRequest.setHeader("Content-Type", "application/json"), HttpClientRequest.bodyJsonUnsafe(buildRequest({ service: "db", method, args }, id)));
+    const payload = yield* client.execute(request).pipe(Effect.flatMap((response) => response.json), Effect.mapError((cause) => OdooTransportError.fromHttpClientError({ method: "POST", url: endpoint }, cause)));
+    const decoded = yield* Schema.decodeUnknownEffect(JsonRpcResponse)(payload).pipe(Effect.mapError((cause) => new SchemaDriftError({ context: "odoo.db response", payload, cause })));
+    if ("error" in decoded) {
+        return yield* Effect.fail(mapJsonRpcError(decoded.error, site));
+    }
+    return decoded.result;
+}).pipe(Effect.withSpan("odoo.db", { attributes: { "odoo.db.method": method } }));
+/** Decode a `db` result through `schema`, raising {@link SchemaDriftError} on drift. */
+const decodeResult = (schema, context, result) => Schema.decodeUnknownEffect(schema)(result).pipe(Effect.mapError((cause) => new SchemaDriftError({ context, payload: result, cause })));
+/**
+ * List the databases the server is willing to expose (honours `list_db` and any
+ * `dbfilter`). Unauthenticated — no master password required.
+ */
+export const listDatabases = (url) => dbCall(url, "list", []).pipe(Effect.flatMap((result) => decodeResult(Schema.Array(Schema.String), "odoo.db exp_list", result)));
+/** Whether a database of the given name exists. Unauthenticated. */
+export const exists = (url, name) => dbCall(url, "db_exist", [name]).pipe(Effect.flatMap((result) => decodeResult(Schema.Boolean, "odoo.db exp_db_exist", result)));
+/**
+ * Create a fresh database and its initial admin user.
+ *
+ * Wire (after `dispatch` strips the master): `exp_create_database(db_name,
+ * demo, lang, user_password='admin', login='admin', country_code=None,
+ * phone=None)`.
+ */
+export const create = (url, options) => dbCall(url, "create_database", [
+    Redacted.value(options.master),
+    options.name,
+    options.demo ?? false,
+    options.lang ?? "en_US",
+    Redacted.value(options.adminPassword),
+    options.adminLogin ?? "admin",
+    options.countryCode ?? null,
+    options.phone ?? null,
+]).pipe(Effect.asVoid);
+/**
+ * Drop a database. Resolves to `true` when a database was actually dropped,
+ * `false` when none of that name existed.
+ */
+export const drop = (url, master, name) => dbCall(url, "drop", [Redacted.value(master), name]).pipe(Effect.flatMap((result) => decodeResult(Schema.Boolean, "odoo.db exp_drop", result)));
+/**
+ * Duplicate `source` into a new database `target`.
+ *
+ * Wire (after master strip): `exp_duplicate_database(db_original_name, db_name,
+ * neutralize_database=False)`.
+ */
+export const duplicate = (url, master, source, target, options = {}) => dbCall(url, "duplicate_database", [
+    Redacted.value(master),
+    source,
+    target,
+    options.neutralize ?? false,
+]).pipe(Effect.asVoid);
+/**
+ * Dump a database into an in-memory archive.
+ *
+ * `format` is `"zip"` (default; includes the filestore) or `"dump"` (raw
+ * `pg_dump` custom format, database only). Odoo returns the archive
+ * base64-encoded inside the JSON-RPC `result`; we decode it to raw bytes.
+ */
+export const dump = (url, master, name, format = "zip") => dbCall(url, "dump", [Redacted.value(master), name, format]).pipe(
+// Odoo returns the archive base64-encoded in `result`; decode to raw bytes,
+// any malformed base64 surfacing as SchemaDriftError like every other drift.
+Effect.flatMap((result) => decodeResult(Schema.Uint8ArrayFromBase64, "odoo.db exp_dump", result)));
+/**
+ * Restore a previously {@link dump}ed archive under a new database `name`.
+ *
+ * The bytes are re-encoded to the base64 string `exp_restore` expects.
+ * Wire (after master strip): `exp_restore(db_name, data, copy=False)`.
+ */
+export const restore = (url, master, name, archive, options = {}) => dbCall(url, "restore", [
+    Redacted.value(master),
+    name,
+    Encoding.encodeBase64(archive),
+    options.copy ?? false,
+]).pipe(Effect.asVoid);
+/**
+ * Change the server master password (`admin_passwd`). `master` is the current
+ * password; `next` becomes the new one.
+ *
+ * Wire (after master strip): `exp_change_admin_password(new_password)`.
+ */
+export const changeMasterPassword = (url, master, next) => dbCall(url, "change_admin_password", [Redacted.value(master), Redacted.value(next)]).pipe(Effect.asVoid);
+//# sourceMappingURL=db.js.map

package/dist/services/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../../src/services/db.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAIvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,EACL,YAAY,EACZ,eAAe,EACf,eAAe,EACf,aAAa,GACd,MAAM,wBAAwB,CAAC;AAUhC,+EAA+E;AAC/E,MAAM,eAAe,GAAG,CAAC,GAAQ,EAAU,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC;AAExF;;;;;;;GAOG;AACH,MAAM,MAAM,GAAG,CACb,GAAQ,EACR,MAAc,EACd,IAA4B,EACgC,EAAE,CAC9D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IAC5C,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,EAAE,GAAG,aAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAkB,EAAE,MAAM,EAAE,MAAM,MAAM,EAAE,EAAE,CAAC;IAEvD,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CACnD,iBAAiB,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,EAC/D,iBAAiB,CAAC,cAAc,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CACpF,CAAC;IAEF,MAAM,OAAO,GAAY,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAC1D,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAC3C,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,kBAAkB,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,CACjF,CACF,CAAC;IAEF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAC9E,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,gBAAgB,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CACjF,CACF,CAAC;IAEF,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC;AACxB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,UAAU,EAAE,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;AAEpF,wFAAwF;AACxF,MAAM,YAAY,GAAG,CACnB,MAA0B,EAC1B,OAAe,EACf,MAAe,EACqB,EAAE,CACtC,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAC7C,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,gBAAgB,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CACtF,CAAC;AAEJ;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,GAAQ,EACkE,EAAE,CAC5E,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,CAC1B,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACxB,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,kBAAkB,EAAE,MAAM,CAAC,CACtE,CACF,CAAC;AAEJ,oEAAoE;AACpE,MAAM,CAAC,MAAM,MAAM,GAAG,CACpB,GAAQ,EACR,IAAY,EACgD,EAAE,CAC9D,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAClC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,sBAAsB,EAAE,MAAM,CAAC,CAAC,CACzF,CAAC;AAoBJ;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,CACpB,GAAQ,EACR,OAAsB,EACmC,EAAE,CAC3D,MAAM,CAAC,GAAG,EAAE,iBAAiB,EAAE;IAC7B,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;IAC9B,OAAO,CAAC,IAAI;IACZ,OAAO,CAAC,IAAI,IAAI,KAAK;IACrB,OAAO,CAAC,IAAI,IAAI,OAAO;IACvB,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;IACrC,OAAO,CAAC,UAAU,IAAI,OAAO;IAC7B,OAAO,CAAC,WAAW,IAAI,IAAI;IAC3B,OAAO,CAAC,KAAK,IAAI,IAAI;CACtB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAEzB;;;GAGG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,CAClB,GAAQ,EACR,MAAiC,EACjC,IAAY,EACgD,EAAE,CAC9D,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CACtD,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,kBAAkB,EAAE,MAAM,CAAC,CAAC,CACrF,CAAC;AAYJ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CACvB,GAAQ,EACR,MAAiC,EACjC,MAAc,EACd,MAAc,EACd,OAAO,GAAqB,EAAE,EAC2B,EAAE,CAC3D,MAAM,CAAC,GAAG,EAAE,oBAAoB,EAAE;IAChC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;IACtB,MAAM;IACN,MAAM;IACN,OAAO,CAAC,UAAU,IAAI,KAAK;CAC5B,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAEzB;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,CAClB,GAAQ,EACR,MAAiC,EACjC,IAAY,EACZ,MAAM,GAAmB,KAAK,EACiC,EAAE,CACjE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI;AAC9D,4EAA4E;AAC5E,6EAA6E;AAC7E,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACxB,YAAY,CAAC,MAAM,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,CAAC,CACtE,CACF,CAAC;AAeJ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,CACrB,GAAQ,EACR,MAAiC,EACjC,IAAY,EACZ,OAAmB,EACnB,OAAO,GAAmB,EAAE,EAC6B,EAAE,CAC3D,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE;IACrB,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;IACtB,IAAI;IACJ,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC;IAC9B,OAAO,CAAC,IAAI,IAAI,KAAK;CACtB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAEzB;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,GAAQ,EACR,MAAiC,EACjC,IAA+B,EAC0B,EAAE,CAC3D,MAAM,CAAC,GAAG,EAAE,uBAAuB,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CACvF,MAAM,CAAC,MAAM,CACd,CAAC"}

package/dist/services/report.d.ts

@@ -0,0 +1,48 @@
+import { Effect } from "effect";
+import type { CookieLoginError, CookieSessionService } from "../session/cookie.js";
+/**
+ * A decoded `ir.actions.report` row. Field names are normalized to camelCase at
+ * the schema boundary so callers never touch Odoo's snake_case wire shape.
+ */
+export interface ReportAction {
+    readonly id: number;
+    readonly name: string;
+    readonly reportName: string;
+    readonly model: string;
+    readonly reportType: string;
+}
+/**
+ * List `ir.actions.report` definitions over a cookie session, optionally scoped
+ * to a single `model`. Self-contained: goes through the session's `json` hatch
+ * (`web/dataset/call_kw` → `search_read`) so it needs no `Transport`/`Rpc`
+ * wiring. Fails with the session's `CookieLoginError` union (login faults,
+ * server faults, or `SchemaDriftError` on a drifted row shape).
+ */
+export declare const list: (session: CookieSessionService, model?: string) => Effect.Effect<ReadonlyArray<ReportAction>, CookieLoginError>;
+/**
+ * Options for {@link download}. `converter` is the report renderer segment of
+ * the download URL (`pdf` by default; `html`, `text`, … are also valid).
+ */
+export interface DownloadOptions {
+    readonly reportName: string;
+    readonly ids: ReadonlyArray<number>;
+    readonly converter?: string;
+}
+/**
+ * Download a rendered report as raw bytes via `GET
+ * /report/<converter>/<reportName>/<ids.join(",")>` on the cookie-bound client
+ * (the route is identical and CSRF-free across Odoo 16–19).
+ *
+ * Status mapping: `404 → OdooMissingError`, `403 → OdooAccessError`, any other
+ * non-2xx (including the `500` Odoo raises for an unknown report name) →
+ * `OdooTransportError`. For `converter === "pdf"` the 2xx body is checked for
+ * the `%PDF` magic and fails as `SchemaDriftError` if the server handed back
+ * something else (e.g. an HTML error page with a 200).
+ */
+export declare const download: (session: CookieSessionService, options: DownloadOptions) => Effect.Effect<Uint8Array, CookieLoginError>;
+/** The report service, grouped for `ReportService.list` / `ReportService.download`. */
+export declare const ReportService: {
+    readonly list: typeof list;
+    readonly download: typeof download;
+};
+//# sourceMappingURL=report.d.ts.map

package/dist/services/report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../src/services/report.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAkB,MAAM,QAAQ,CAAC;AAIhD,OAAO,KAAK,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAEnF;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAuBD;;;;;;GAMG;AACH,eAAO,MAAM,IAAI,YACN,oBAAoB,UACrB,MAAM,KACb,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,gBAAgB,CAkB1D,CAAC;AAEL;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACpC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAQD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,QAAQ,YACV,oBAAoB,WACpB,eAAe,KACvB,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,gBAAgB,CA8DzC,CAAC;AAEL,uFAAuF;AACvF,eAAO,MAAM,aAAa;;;CAA8B,CAAC"}