@hodeinavarro/odoo-rpc-ts 0.2.0

package/dist/services/report.js

@@ -0,0 +1,103 @@
+import { Effect, Result, Schema } from "effect";
+import { OdooAccessError, OdooMissingError } from "../errors/server.js";
+import { SchemaDriftError } from "../errors/schema.js";
+import { OdooTransportError } from "../errors/transport.js";
+/**
+ * Lenient decoder for an `ir.actions.report` row. Only the columns we request
+ * are decoded; extra keys are tolerated. `report_name` is the identifier that
+ * feeds the `GET /report/<converter>/<report_name>/<ids>` download route.
+ */
+const ReportActionSchema = Schema.Struct({
+    id: Schema.Number,
+    name: Schema.String,
+    report_name: Schema.String,
+    model: Schema.String,
+    report_type: Schema.String,
+});
+const toReportAction = (row) => ({
+    id: row.id,
+    name: row.name,
+    reportName: row.report_name,
+    model: row.model,
+    reportType: row.report_type,
+});
+/**
+ * List `ir.actions.report` definitions over a cookie session, optionally scoped
+ * to a single `model`. Self-contained: goes through the session's `json` hatch
+ * (`web/dataset/call_kw` → `search_read`) so it needs no `Transport`/`Rpc`
+ * wiring. Fails with the session's `CookieLoginError` union (login faults,
+ * server faults, or `SchemaDriftError` on a drifted row shape).
+ */
+export const list = (session, model) => Effect.gen(function* () {
+    const domain = model === undefined ? [] : [["model", "=", model]];
+    const result = yield* session.json("web/dataset/call_kw", {
+        model: "ir.actions.report",
+        method: "search_read",
+        args: [domain, ["id", "name", "report_name", "model", "report_type"]],
+        kwargs: {},
+    });
+    const rows = yield* Schema.decodeUnknownEffect(Schema.Array(ReportActionSchema))(result).pipe(Effect.mapError((cause) => new SchemaDriftError({ context: "ir.actions.report rows", payload: result, cause })));
+    return rows.map(toReportAction);
+});
+/** The `%PDF` signature every well-formed PDF opens with. */
+const PDF_MAGIC = Uint8Array.of(0x25, 0x50, 0x44, 0x46);
+const hasPdfMagic = (bytes) => bytes.length >= PDF_MAGIC.length && PDF_MAGIC.every((byte, i) => bytes[i] === byte);
+/**
+ * Download a rendered report as raw bytes via `GET
+ * /report/<converter>/<reportName>/<ids.join(",")>` on the cookie-bound client
+ * (the route is identical and CSRF-free across Odoo 16–19).
+ *
+ * Status mapping: `404 → OdooMissingError`, `403 → OdooAccessError`, any other
+ * non-2xx (including the `500` Odoo raises for an unknown report name) →
+ * `OdooTransportError`. For `converter === "pdf"` the 2xx body is checked for
+ * the `%PDF` magic and fails as `SchemaDriftError` if the server handed back
+ * something else (e.g. an HTML error page with a 200).
+ */
+export const download = (session, options) => Effect.gen(function* () {
+    const converter = options.converter ?? "pdf";
+    const path = `report/${converter}/${options.reportName}/${options.ids.join(",")}`;
+    const response = yield* session.http({ path, method: "GET" });
+    const request = { method: "GET", url: response.request.url };
+    if (response.status === 404) {
+        return yield* Effect.fail(new OdooMissingError({
+            name: "werkzeug.exceptions.NotFound",
+            message: `Report ${options.reportName} not found (404) for ids ${options.ids.join(",")}.`,
+            arguments: [],
+            context: {},
+        }));
+    }
+    if (response.status === 403) {
+        return yield* Effect.fail(new OdooAccessError({
+            name: "werkzeug.exceptions.Forbidden",
+            message: `Access denied (403) downloading report ${options.reportName}.`,
+            arguments: [],
+            context: {},
+        }));
+    }
+    if (response.status < 200 || response.status >= 300) {
+        return yield* Effect.fail(new OdooTransportError({
+            request,
+            kind: "StatusCodeError",
+            status: response.status,
+        }));
+    }
+    const buffer = yield* response.arrayBuffer.pipe(Effect.mapError((cause) => OdooTransportError.fromHttpClientError(request, cause)));
+    const bytes = new Uint8Array(buffer);
+    if (converter === "pdf" && !hasPdfMagic(bytes)) {
+        // Manufacture a real ParseError so SchemaDriftError.cause is honest: a 2xx
+        // body that is not a PDF (e.g. an HTML error page served with status 200).
+        const header = new TextDecoder().decode(bytes.subarray(0, PDF_MAGIC.length));
+        const parsed = Schema.decodeUnknownResult(Schema.Literal("%PDF"))(header);
+        if (Result.isFailure(parsed)) {
+            return yield* Effect.fail(new SchemaDriftError({
+                context: `report/pdf/${options.reportName}`,
+                payload: `non-PDF body (${bytes.length} bytes, status ${response.status})`,
+                cause: parsed.failure,
+            }));
+        }
+    }
+    return bytes;
+});
+/** The report service, grouped for `ReportService.list` / `ReportService.download`. */
+export const ReportService = { list, download };
+//# sourceMappingURL=report.js.map

package/dist/services/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../../src/services/report.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAoB,MAAM,wBAAwB,CAAC;AAe9E;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,MAAM,CAAC,MAAM;IACjB,IAAI,EAAE,MAAM,CAAC,MAAM;IACnB,WAAW,EAAE,MAAM,CAAC,MAAM;IAC1B,KAAK,EAAE,MAAM,CAAC,MAAM;IACpB,WAAW,EAAE,MAAM,CAAC,MAAM;CAC3B,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,CAAC,GAAmC,EAAgB,EAAE,CAAC,CAAC;IAC7E,EAAE,EAAE,GAAG,CAAC,EAAE;IACV,IAAI,EAAE,GAAG,CAAC,IAAI;IACd,UAAU,EAAE,GAAG,CAAC,WAAW;IAC3B,KAAK,EAAE,GAAG,CAAC,KAAK;IAChB,UAAU,EAAE,GAAG,CAAC,WAAW;CAC5B,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,CAClB,OAA6B,EAC7B,KAAc,EACgD,EAAE,CAChE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,qBAAqB,EAAE;QACxD,KAAK,EAAE,mBAAmB;QAC1B,MAAM,EAAE,aAAa;QACrB,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;QACrE,MAAM,EAAE,EAAE;KACX,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAC3F,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,gBAAgB,CAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CACtF,CACF,CAAC;IAEF,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;AAClC,CAAC,CAAC,CAAC;AAYL,6DAA6D;AAC7D,MAAM,SAAS,GAAG,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAExD,MAAM,WAAW,GAAG,CAAC,KAAiB,EAAW,EAAE,CACjD,KAAK,CAAC,MAAM,IAAI,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AAEtF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CACtB,OAA6B,EAC7B,OAAwB,EACqB,EAAE,CAC/C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,MAAM,IAAI,GAAG,UAAU,SAAS,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAElF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAgB,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IAE1E,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,gBAAgB,CAAC;YACnB,IAAI,EAAE,8BAA8B;YACpC,OAAO,EAAE,UAAU,OAAO,CAAC,UAAU,4BAA4B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;YACzF,SAAS,EAAE,EAAE;YACb,OAAO,EAAE,EAAE;SACZ,CAAC,CACH,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,eAAe,CAAC;YAClB,IAAI,EAAE,+BAA+B;YACrC,OAAO,EAAE,0CAA0C,OAAO,CAAC,UAAU,GAAG;YACxE,SAAS,EAAE,EAAE;YACb,OAAO,EAAE,EAAE;SACZ,CAAC,CACH,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QACpD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,kBAAkB,CAAC;YACrB,OAAO;YACP,IAAI,EAAE,iBAAiB;YACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;SACxB,CAAC,CACH,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAC7C,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CACnF,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IAErC,IAAI,SAAS,KAAK,KAAK,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/C,2EAA2E;QAC3E,2EAA2E;QAC3E,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC1E,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,gBAAgB,CAAC;gBACnB,OAAO,EAAE,cAAc,OAAO,CAAC,UAAU,EAAE;gBAC3C,OAAO,EAAE,iBAAiB,KAAK,CAAC,MAAM,kBAAkB,QAAQ,CAAC,MAAM,GAAG;gBAC1E,KAAK,EAAE,MAAM,CAAC,OAAO;aACtB,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC,CAAC,CAAC;AAEL,uFAAuF;AACvF,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAW,CAAC"}

package/dist/session/cookie.d.ts

@@ -0,0 +1,114 @@
+import { type Config, Context, Effect, Layer, Option, Redacted, Ref } from "effect";
+import { OdooConfig } from "../config.js";
+import { OdooAuthenticationError } from "../errors/auth.js";
+import type { OdooServerFault } from "../errors/server.js";
+import { SchemaDriftError } from "../errors/schema.js";
+import { SessionExpiredError } from "../errors/session.js";
+import { OdooTransportError } from "../errors/transport.js";
+import { Cookies, HttpClient, HttpClientResponse } from "../internal/platform.js";
+/**
+ * Join a request path onto the configured base URL, preserving any base path
+ * (e.g. a server mounted under `/odoo`). Keeping this here means both the
+ * authenticate call and the `call_kw` transport derive endpoints identically.
+ */
+export declare const joinPath: (base: URL, path: string) => string;
+/** A live, authenticated web session. `uid` is always a real user id here. */
+export interface OdooSessionInfo {
+    readonly uid: number;
+    readonly userContext: Record<string, unknown>;
+    readonly serverVersionInfo: unknown;
+    /** The full, undecoded `session_info` result for downstream passthrough. */
+    readonly raw: Record<string, unknown>;
+}
+/**
+ * The typed failure channel of a login round trip. `SessionExpiredError` is in
+ * the union only because it flows through the shared `mapJsonRpcError`; a fresh
+ * authenticate should never actually produce it.
+ */
+export type CookieLoginError = OdooTransportError | SchemaDriftError | OdooAuthenticationError | OdooServerFault | SessionExpiredError;
+/**
+ * The cookie-session service. Owns the `session_id` cookie jar and a
+ * success-only single-flight around `/web/session/authenticate`.
+ *
+ * `client` is the HttpClient decorated with the shared cookie `Ref` — the web
+ * transport MUST reuse it so the login `Set-Cookie` (and any mid-session
+ * rotation) is carried on every subsequent `call_kw`.
+ */
+/**
+ * Options for {@link CookieSessionService.http}: a raw HTTP round trip on the
+ * cookie-bound client. `path` is joined onto the session's base url (a base
+ * mount like `/odoo` is preserved). `method` defaults to `GET`.
+ */
+export interface RawHttpOptions {
+    readonly path: string;
+    readonly method?: string;
+    readonly body?: Uint8Array;
+    readonly headers?: Record<string, string>;
+}
+export interface CookieSessionService {
+    /** Ensure a login has run and return the live session. Single-flight. */
+    readonly login: Effect.Effect<OdooSessionInfo, CookieLoginError>;
+    /**
+     * Raw JSON-RPC escape hatch: ensure login, then POST the shared JSON-RPC
+     * envelope (`{jsonrpc, method:"call", params, id}`) to an arbitrary `path`
+     * under the session's base url and return the raw `result` member. Server
+     * faults flow through the shared `mapJsonRpcError` choke point (code 100 →
+     * `SessionExpiredError`, etc.); a non-envelope body fails as `SchemaDriftError`.
+     * For calling models this is `web/dataset/call_kw` with the `{model, method,
+     * args, kwargs}` params shape.
+     */
+    readonly json: (path: string, params?: Record<string, unknown>) => Effect.Effect<unknown, CookieLoginError>;
+    /**
+     * Raw HTTP escape hatch: ensure login, then issue a raw request on the
+     * cookie-bound client and return the response UNTOUCHED. The caller owns the
+     * response fully, including any non-2xx status — this hatch never inspects it
+     * and only fails (`OdooTransportError`) on a wire-level error or a failed
+     * login. Used for binary endpoints like `GET /report/<converter>/...`.
+     */
+    readonly http: (options: RawHttpOptions) => Effect.Effect<HttpClientResponse.HttpClientResponse, CookieLoginError>;
+    /**
+     * Drop the cached session and the (now-dead) `session_id` cookie so the next
+     * `login` re-authenticates. Does NOT auto-relogin — that is the opt-in
+     * `retryOnSessionExpired` combinator's job.
+     */
+    readonly invalidate: Effect.Effect<void>;
+    /** The shared cookie jar. Exposed for the transport's `withCookiesRef`. */
+    readonly cookies: Ref.Ref<Cookies.Cookies>;
+    /** HttpClient bound to the shared cookie jar; the transport reuses this. */
+    readonly client: HttpClient.HttpClient;
+    /** Peek at the current session without triggering a login (observability). */
+    readonly peek: Effect.Effect<Option.Option<OdooSessionInfo>>;
+}
+declare const CookieSession_base: Context.ServiceClass<CookieSession, "odoo-rpc-ts/CookieSession", CookieSessionService>;
+export declare class CookieSession extends CookieSession_base {
+}
+export declare const make: (config: OdooConfig) => Effect.Effect<CookieSessionService, never, HttpClient.HttpClient>;
+/** Provide `CookieSession` from an already-resolved config. Requires `HttpClient`. */
+export declare const layer: (config: OdooConfig) => Layer.Layer<CookieSession, never, HttpClient.HttpClient>;
+/** Provide `CookieSession`, resolving `OdooConfig` from the environment. */
+export declare const layerConfig: Layer.Layer<CookieSession, Config.ConfigError, HttpClient.HttpClient>;
+/**
+ * Options for {@link fromExisting}: adopt a `session_id` cookie that was
+ * minted elsewhere (e.g. harvested from an embedded browser window after the
+ * user completed the real `/web/login` page — the only stock flow that works
+ * for TOTP/SSO accounts).
+ */
+export interface ExistingSessionOptions {
+    /** Base server URL (same shape as `OdooConfig.url`; TLS rules apply). */
+    readonly url: URL;
+    /** The harvested `session_id` cookie value. Redacted until the wire. */
+    readonly sessionId: Redacted.Redacted<string>;
+    /**
+     * Optional renewal hook: an Effect that yields a FRESH `session_id` (e.g.
+     * by driving a login window again). Runs inside the login single-flight
+     * after an `invalidate`, so concurrent callers trigger it at most once.
+     * Must be fully provided (`R = never`) and fail within `CookieLoginError` —
+     * map UI-level failures (window closed, …) into `OdooAuthenticationError`.
+     */
+    readonly renew?: Effect.Effect<Redacted.Redacted<string>, CookieLoginError>;
+}
+export declare const fromExisting: (options: ExistingSessionOptions) => Effect.Effect<CookieSessionService, never, HttpClient.HttpClient>;
+/** Provide `CookieSession` from a harvested cookie. See {@link fromExisting}. */
+export declare const layerFromExisting: (options: ExistingSessionOptions) => Layer.Layer<CookieSession, never, HttpClient.HttpClient>;
+export {};
+//# sourceMappingURL=cookie.d.ts.map

package/dist/session/cookie.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie.d.ts","sourceRoot":"","sources":["../../src/session/cookie.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAU,MAAM,QAAQ,CAAC;AAC5F,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAoB,MAAM,wBAAwB,CAAC;AAC9E,OAAO,EACL,OAAO,EACP,UAAU,EAEV,kBAAkB,EACnB,MAAM,yBAAyB,CAAC;AASjC;;;;GAIG;AACH,eAAO,MAAM,QAAQ,SAAU,GAAG,QAAQ,MAAM,KAAG,MAGlD,CAAC;AAaF,8EAA8E;AAC9E,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9C,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC,4EAA4E;IAC5E,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GACxB,kBAAkB,GAClB,gBAAgB,GAChB,uBAAuB,GACvB,eAAe,GACf,mBAAmB,CAAC;AAExB;;;;;;;GAOG;AACH;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,oBAAoB;IACnC,yEAAyE;IACzE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC;IACjE;;;;;;;;OAQG;IACH,QAAQ,CAAC,IAAI,EAAE,CACb,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC7B,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAC9C;;;;;;OAMG;IACH,QAAQ,CAAC,IAAI,EAAE,CACb,OAAO,EAAE,cAAc,KACpB,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,CAAC;IAC5E;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzC,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3C,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,UAAU,CAAC;IACvC,8EAA8E;IAC9E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;CAC9D;;AAED,qBAAa,aAAc,SAAQ,kBAGH;CAAG;AAgJnC,eAAO,MAAM,IAAI,WACP,UAAU,KACjB,MAAM,CAAC,MAAM,CAAC,oBAAoB,EAAE,KAAK,EAAE,UAAU,CAAC,UAAU,CA2C/D,CAAC;AAEL,sFAAsF;AACtF,eAAO,MAAM,KAAK,WACR,UAAU,KACjB,KAAK,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,EAAE,UAAU,CAAC,UAAU,CACf,CAAC;AAE5C,4EAA4E;AAC5E,eAAO,MAAM,WAAW,EAAE,KAAK,CAAC,KAAK,CACnC,aAAa,EACb,MAAM,CAAC,WAAW,EAClB,UAAU,CAAC,UAAU,CAC0C,CAAC;AAElE;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,yEAAyE;IACzE,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;IAClB,wEAAwE;IACxE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9C;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC,CAAC;CAC7E;AAsBD,eAAO,MAAM,YAAY,YACd,sBAAsB,KAC9B,MAAM,CAAC,MAAM,CAAC,oBAAoB,EAAE,KAAK,EAAE,UAAU,CAAC,UAAU,CAiF/D,CAAC;AAEL,iFAAiF;AACjF,eAAO,MAAM,iBAAiB,YACnB,sBAAsB,KAC9B,KAAK,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,EAAE,UAAU,CAAC,UAAU,CACN,CAAC"}

package/dist/session/cookie.js

@@ -0,0 +1,231 @@
+import { Context, Effect, Layer, Option, Redacted, Ref, Schema } from "effect";
+import { OdooConfig } from "../config.js";
+import { OdooAuthenticationError } from "../errors/auth.js";
+import { SchemaDriftError } from "../errors/schema.js";
+import { SessionExpiredError } from "../errors/session.js";
+import { OdooTransportError } from "../errors/transport.js";
+import { Cookies, HttpClient, HttpClientRequest, HttpClientResponse, } from "../internal/platform.js";
+import * as SingleFlight from "../internal/singleFlight.js";
+import { buildRequest, JsonRpcResponse, mapJsonRpcError, nextRequestId, } from "../protocol/jsonrpc.js";
+/**
+ * Join a request path onto the configured base URL, preserving any base path
+ * (e.g. a server mounted under `/odoo`). Keeping this here means both the
+ * authenticate call and the `call_kw` transport derive endpoints identically.
+ */
+export const joinPath = (base, path) => {
+    const href = base.href.endsWith("/") ? base.href : `${base.href}/`;
+    return new URL(path, href).href;
+};
+/**
+ * `session_info` as returned by `/web/session/authenticate`. Decoded leniently:
+ * `uid` is `null` while a second factor is still pending, extra keys are
+ * tolerated, and `server_version_info` passes through undecoded.
+ */
+const SessionInfoSchema = Schema.Struct({
+    uid: Schema.NullOr(Schema.Number),
+    user_context: Schema.optional(Schema.Record(Schema.String, Schema.Unknown)),
+    server_version_info: Schema.optional(Schema.Unknown),
+});
+export class CookieSession extends Context.Service()("odoo-rpc-ts/CookieSession") {
+}
+/**
+ * One session-info round trip: POST a JSON-RPC envelope, decode the response,
+ * map faults through the shared choke point (code 100 → `SessionExpiredError`),
+ * and validate the returned `session_info`. Shared by the credential login and
+ * the injected-cookie path so both decode — and fail — identically.
+ */
+const sessionInfoRoundTrip = (client, url, params, endpoint, method) => Effect.gen(function* () {
+    const request = { method: "POST", url };
+    const envelope = buildRequest(params, nextRequestId());
+    const response = yield* client
+        .execute(HttpClientRequest.bodyJsonUnsafe(HttpClientRequest.post(url), envelope))
+        .pipe(Effect.mapError((cause) => OdooTransportError.fromHttpClientError(request, cause)));
+    const body = yield* response.json.pipe(Effect.mapError((cause) => OdooTransportError.fromHttpClientError(request, cause)));
+    const decoded = yield* Schema.decodeUnknownEffect(JsonRpcResponse)(body).pipe(Effect.mapError((cause) => new SchemaDriftError({
+        context: `${endpoint} envelope`,
+        payload: body,
+        cause,
+    })));
+    if ("error" in decoded) {
+        return yield* Effect.fail(mapJsonRpcError(decoded.error, { method }));
+    }
+    const info = yield* Schema.decodeUnknownEffect(SessionInfoSchema)(decoded.result).pipe(Effect.mapError((cause) => new SchemaDriftError({
+        context: `${endpoint} session_info`,
+        payload: decoded.result,
+        cause,
+    })));
+    if (info.uid === null) {
+        return yield* Effect.fail(new OdooAuthenticationError({
+            reason: "mfa-pending",
+            message: "Login accepted but a second factor is required before a session exists.",
+        }));
+    }
+    const session = {
+        uid: info.uid,
+        userContext: info.user_context ?? {},
+        serverVersionInfo: info.server_version_info,
+        raw: typeof decoded.result === "object" && decoded.result !== null
+            ? decoded.result
+            : {},
+    };
+    return session;
+});
+/**
+ * Build the two raw escape hatches (`json`, `http`) shared by {@link make} and
+ * {@link fromExisting}. Both close over the SAME cookie-bound `client`, base
+ * `url`, and single-flight `login` the rest of the service uses, so a hatch
+ * request rides the live `session_id` cookie exactly like a `call_kw` does.
+ */
+const makeRawHatches = (client, baseUrl, login) => {
+    const json = (path, params = {}) => Effect.gen(function* () {
+        yield* login;
+        const url = joinPath(baseUrl, path);
+        const request = { method: "POST", url };
+        const envelope = buildRequest(params, nextRequestId());
+        const response = yield* client
+            .execute(HttpClientRequest.bodyJsonUnsafe(HttpClientRequest.post(url), envelope))
+            .pipe(Effect.mapError((cause) => OdooTransportError.fromHttpClientError(request, cause)));
+        const body = yield* response.json.pipe(Effect.mapError((cause) => OdooTransportError.fromHttpClientError(request, cause)));
+        const decoded = yield* Schema.decodeUnknownEffect(JsonRpcResponse)(body).pipe(Effect.mapError((cause) => new SchemaDriftError({ context: `${path} envelope`, payload: body, cause })));
+        if ("error" in decoded) {
+            return yield* Effect.fail(mapJsonRpcError(decoded.error, { method: path }));
+        }
+        return decoded.result;
+    });
+    const http = (options) => Effect.gen(function* () {
+        yield* login;
+        const url = joinPath(baseUrl, options.path);
+        const method = options.method ?? "GET";
+        const request = { method, url };
+        let req = HttpClientRequest.make(method)(url);
+        if (options.headers !== undefined) {
+            req = HttpClientRequest.setHeaders(req, options.headers);
+        }
+        if (options.body !== undefined) {
+            req = HttpClientRequest.bodyUint8Array(req, options.body);
+        }
+        // Response returned untouched — the caller owns any non-2xx status.
+        return yield* client
+            .execute(req)
+            .pipe(Effect.mapError((cause) => OdooTransportError.fromHttpClientError(request, cause)));
+    });
+    return { json, http };
+};
+export const make = (config) => Effect.gen(function* () {
+    const baseClient = yield* HttpClient.HttpClient;
+    const cookies = yield* Ref.make(Cookies.empty);
+    const client = HttpClient.withCookiesRef(baseClient, cookies);
+    const authUrl = joinPath(config.url, "web/session/authenticate");
+    const doLogin = Effect.suspend(() => {
+        // Redacted.value only at the wire boundary; for ApiKey creds the key is
+        // sent as the password (valid on all supported Odoo versions).
+        const password = config.credentials._tag === "ApiKey"
+            ? Redacted.value(config.credentials.apiKey)
+            : Redacted.value(config.credentials.password);
+        return sessionInfoRoundTrip(client, authUrl, { db: config.db, login: config.credentials.username, password }, "web/session/authenticate", "authenticate");
+    });
+    // The flight owns both caching and invalidation. Its generation counter
+    // guarantees a login already in flight when `invalidate` runs cannot
+    // resurrect the cache with a stale session (its caller still gets it).
+    const flight = yield* SingleFlight.make(doLogin);
+    const invalidate = Effect.gen(function* () {
+        yield* Ref.set(cookies, Cookies.empty);
+        yield* flight.invalidate;
+    });
+    return {
+        login: flight.get,
+        invalidate,
+        cookies,
+        client,
+        peek: flight.peek,
+        ...makeRawHatches(client, config.url, flight.get),
+    };
+});
+/** Provide `CookieSession` from an already-resolved config. Requires `HttpClient`. */
+export const layer = (config) => Layer.effect(CookieSession, make(config));
+/** Provide `CookieSession`, resolving `OdooConfig` from the environment. */
+export const layerConfig = Layer.effect(CookieSession, Effect.flatMap(OdooConfig, make));
+/**
+ * Build a `CookieSessionService` from an already-minted `session_id` cookie —
+ * no credentials are ever held. `login` seeds the cookie jar and validates the
+ * session via `POST /web/session/get_session_info` (verified 16–19: JSON-RPC
+ * envelope, `auth="user"`), so `OdooSessionInfo` (`uid`, context, version) is
+ * always real, never fabricated. Success-only single-flight, like {@link make}.
+ *
+ * Expired-session contract: this session cannot re-login by itself. When the
+ * server kills the session, calls fail with `SessionExpiredError`; after
+ * `invalidate`, a subsequent `login` fails FAST with `SessionExpiredError`
+ * (no network) unless a `renew` hook was provided. `retryOnSessionExpired`
+ * therefore performs exactly one relogin attempt and propagates the second
+ * `SessionExpiredError` — it can never spin. The consumer's shell is expected
+ * to catch it, re-run its login UI, and construct a fresh session (or supply
+ * `renew` to do the same in place).
+ */
+// RFC 6265 `cookie-octet`: the exact charset a cookie value may put on the
+// wire (excludes controls, whitespace, DQUOTE, comma, semicolon, backslash).
+const cookieOctets = /^[\u0021\u0023-\u002b\u002d-\u003a\u003c-\u005b\u005d-\u007e]+$/;
+export const fromExisting = (options) => Effect.gen(function* () {
+    const baseClient = yield* HttpClient.HttpClient;
+    const cookies = yield* Ref.make(Cookies.empty);
+    const client = HttpClient.withCookiesRef(baseClient, cookies);
+    const infoUrl = joinPath(options.url, "web/session/get_session_info");
+    // The cookie to seed on the next login. Starts as the harvested value;
+    // consumed once, and cleared by `invalidate` so a dead cookie is never
+    // re-seeded. After that only `renew` can produce another one.
+    const nextCookie = yield* Ref.make(Option.some(options.sessionId));
+    // Redacted.value only at the wire boundary (the cookie jar IS the wire
+    // buffer). Seeded via `fromSetCookie` so the raw value rides the wire
+    // untouched, exactly like a server-set cookie — `Cookies.makeCookie`
+    // would percent-encode it (corrupting `+`/`=`/`/`), and an unvalidated
+    // `fromSetCookie` would silently truncate at the first `;`.
+    const seed = (value) => {
+        const raw = Redacted.value(value);
+        if (raw === "" || !cookieOctets.test(raw)) {
+            return Effect.fail(new OdooAuthenticationError({
+                reason: "invalid-credentials",
+                message: "The provided session_id is not a valid cookie value (RFC 6265).",
+            }));
+        }
+        return Ref.update(cookies, (jar) => Cookies.merge(jar, Cookies.fromSetCookie(`session_id=${raw}; Path=/`)));
+    };
+    const doLogin = Effect.gen(function* () {
+        const jar = yield* Ref.get(cookies);
+        if (Option.isNone(Cookies.getValue(jar, "session_id"))) {
+            const pending = yield* Ref.getAndSet(nextCookie, Option.none());
+            if (Option.isSome(pending)) {
+                yield* seed(pending.value);
+            }
+            else if (options.renew !== undefined) {
+                yield* seed(yield* options.renew);
+            }
+            else {
+                // Fail FAST, without a round trip: this session holds no credentials
+                // and no renew hook, so re-login is structurally impossible.
+                return yield* Effect.fail(new SessionExpiredError({
+                    message: "The injected web session was invalidated and no renew hook was provided; " +
+                        "obtain a fresh session_id and construct a new session.",
+                }));
+            }
+        }
+        // Validate + hydrate: a dead cookie surfaces here as code 100 →
+        // SessionExpiredError via the shared choke point.
+        return yield* sessionInfoRoundTrip(client, infoUrl, {}, "web/session/get_session_info", "get_session_info");
+    });
+    const flight = yield* SingleFlight.make(doLogin);
+    const invalidate = Effect.gen(function* () {
+        yield* Ref.set(cookies, Cookies.empty);
+        yield* Ref.set(nextCookie, Option.none());
+        yield* flight.invalidate;
+    });
+    return {
+        login: flight.get,
+        invalidate,
+        cookies,
+        client,
+        peek: flight.peek,
+        ...makeRawHatches(client, options.url, flight.get),
+    };
+});
+/** Provide `CookieSession` from a harvested cookie. See {@link fromExisting}. */
+export const layerFromExisting = (options) => Layer.effect(CookieSession, fromExisting(options));
+//# sourceMappingURL=cookie.js.map

package/dist/session/cookie.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie.js","sourceRoot":"","sources":["../../src/session/cookie.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC5F,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAoB,MAAM,wBAAwB,CAAC;AAC9E,OAAO,EACL,OAAO,EACP,UAAU,EACV,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,YAAY,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EACL,YAAY,EACZ,eAAe,EACf,eAAe,EACf,aAAa,GACd,MAAM,wBAAwB,CAAC;AAEhC;;;;GAIG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,IAAS,EAAE,IAAY,EAAU,EAAE;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC;IACnE,OAAO,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC;AAClC,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC;IACtC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IACjC,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3E,mBAAmB,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;CACrD,CAAC,CAAC;AAmFH,MAAM,OAAO,aAAc,SAAQ,OAAO,CAAC,OAAO,EAG/C,CAAC,2BAA2B,CAAC;CAAG;AAEnC;;;;;GAKG;AACH,MAAM,oBAAoB,GAAG,CAC3B,MAA6B,EAC7B,GAAW,EACX,MAAe,EACf,QAAgB,EAChB,MAAc,EACoC,EAAE,CACpD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACrD,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IAEvD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM;SAC3B,OAAO,CAAC,iBAAiB,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;SAChF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAE5F,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CACpC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CACnF,CAAC;IAEF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAC3E,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,gBAAgB,CAAC;QACnB,OAAO,EAAE,GAAG,QAAQ,WAAW;QAC/B,OAAO,EAAE,IAAI;QACb,KAAK;KACN,CAAC,CACL,CACF,CAAC;IAEF,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CACpF,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,gBAAgB,CAAC;QACnB,OAAO,EAAE,GAAG,QAAQ,eAAe;QACnC,OAAO,EAAE,OAAO,CAAC,MAAM;QACvB,KAAK;KACN,CAAC,CACL,CACF,CAAC;IAEF,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,uBAAuB,CAAC;YAC1B,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE,yEAAyE;SACnF,CAAC,CACH,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAoB;QAC/B,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,WAAW,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE;QACpC,iBAAiB,EAAE,IAAI,CAAC,mBAAmB;QAC3C,GAAG,EACD,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI;YAC3D,CAAC,CAAE,OAAO,CAAC,MAAkC;YAC7C,CAAC,CAAC,EAAE;KACT,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC,CAAC;AAEL;;;;;GAKG;AACH,MAAM,cAAc,GAAG,CACrB,MAA6B,EAC7B,OAAY,EACZ,KAAuD,EACV,EAAE;IAC/C,MAAM,IAAI,GAAG,CACX,IAAY,EACZ,MAAM,GAA4B,EAAE,EACM,EAAE,CAC5C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,KAAK,CAAC,CAAC,KAAK,CAAC;QAEb,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACpC,MAAM,OAAO,GAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACrD,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;QAEvD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM;aAC3B,OAAO,CAAC,iBAAiB,CAAC,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;aAChF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QAE5F,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CACpC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CACnF,CAAC;QAEF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAC3E,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,gBAAgB,CAAC,EAAE,OAAO,EAAE,GAAG,IAAI,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CACvF,CACF,CAAC;QAEF,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9E,CAAC;QAED,OAAO,OAAO,CAAC,MAAM,CAAC;IACxB,CAAC,CAAC,CAAC;IAEL,MAAM,IAAI,GAAG,CACX,OAAuB,EACiD,EAAE,CAC1E,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,KAAK,CAAC,CAAC,KAAK,CAAC;QAEb,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC;QACvC,MAAM,OAAO,GAAgB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QAE7C,IAAI,GAAG,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAsD,CAAC,CAAC,GAAG,CAAC,CAAC;QAC9F,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAClC,GAAG,GAAG,iBAAiB,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,GAAG,GAAG,iBAAiB,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5D,CAAC;QAED,oEAAoE;QACpE,OAAO,KAAK,CAAC,CAAC,MAAM;aACjB,OAAO,CAAC,GAAG,CAAC;aACZ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;IAEL,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,IAAI,GAAG,CAClB,MAAkB,EACiD,EAAE,CACrE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,UAAU,CAAC,cAAc,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAE9D,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;IAEjE,MAAM,OAAO,GAAqD,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE;QACpF,wEAAwE;QACxE,+DAA+D;QAC/D,MAAM,QAAQ,GACZ,MAAM,CAAC,WAAW,CAAC,IAAI,KAAK,QAAQ;YAClC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC;YAC3C,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAElD,OAAO,oBAAoB,CACzB,MAAM,EACN,OAAO,EACP,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAC/D,0BAA0B,EAC1B,cAAc,CACf,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,wEAAwE;IACxE,qEAAqE;IACrE,uEAAuE;IACvE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAEjD,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACrC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACvC,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,GAAG;QACjB,UAAU;QACV,OAAO;QACP,MAAM;QACN,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,GAAG,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC;KAClD,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,sFAAsF;AACtF,MAAM,CAAC,MAAM,KAAK,GAAG,CACnB,MAAkB,EACwC,EAAE,CAC5D,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;AAE5C,4EAA4E;AAC5E,MAAM,CAAC,MAAM,WAAW,GAIpB,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;AAuBlE;;;;;;;;;;;;;;;GAeG;AACH,2EAA2E;AAC3E,6EAA6E;AAC7E,MAAM,YAAY,GAAG,iEAAiE,CAAC;AAEvF,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,OAA+B,EACoC,EAAE,CACrE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,UAAU,CAAC,cAAc,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAE9D,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,8BAA8B,CAAC,CAAC;IAEtE,uEAAuE;IACvE,uEAAuE;IACvE,8DAA8D;IAC9D,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAEnE,uEAAuE;IACvE,sEAAsE;IACtE,qEAAqE;IACrE,uEAAuE;IACvE,4DAA4D;IAC5D,MAAM,IAAI,GAAG,CAAC,KAAgC,EAAyC,EAAE;QACvF,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,GAAG,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,uBAAuB,CAAC;gBAC1B,MAAM,EAAE,qBAAqB;gBAC7B,OAAO,EAAE,iEAAiE;aAC3E,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CACjC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,aAAa,CAAC,cAAc,GAAG,UAAU,CAAC,CAAC,CACvE,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,OAAO,GAAqD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACpF,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC;YACvD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAChE,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;iBAAM,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBACvC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACpC,CAAC;iBAAM,CAAC;gBACN,qEAAqE;gBACrE,6DAA6D;gBAC7D,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,mBAAmB,CAAC;oBACtB,OAAO,EACL,2EAA2E;wBAC3E,wDAAwD;iBAC3D,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QAED,gEAAgE;QAChE,kDAAkD;QAClD,OAAO,KAAK,CAAC,CAAC,oBAAoB,CAChC,MAAM,EACN,OAAO,EACP,EAAE,EACF,8BAA8B,EAC9B,kBAAkB,CACnB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAEjD,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACrC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACvC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1C,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,GAAG;QACjB,UAAU;QACV,OAAO;QACP,MAAM;QACN,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,GAAG,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC;KACnD,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,iFAAiF;AACjF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,OAA+B,EAC2B,EAAE,CAC5D,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC"}

package/dist/testing/fakeTransport.d.ts

@@ -0,0 +1,40 @@
+import { Effect, Layer, Ref } from "effect";
+import { type CallKwParams, Transport, type TransportCallError, type TransportDialect } from "../transport.js";
+/**
+ * A single scripted method. Receives the full {@link CallKwParams} of the
+ * `call_kw` — `args`, `kwargs`, and the browse `ids` faithfully, because the
+ * seam is the contract, not a projection of it — and returns either a bare value
+ * (wrapped in `Effect.succeed`) or an `Effect`; the latter lets a handler script
+ * a typed transport failure.
+ */
+export type FakeHandler = (params: CallKwParams) => Effect.Effect<unknown, TransportCallError> | unknown;
+/**
+ * Scripted responses keyed by `model` then `method`. Anything not scripted is a
+ * test misconfiguration — see the dispatch note in {@link make}.
+ */
+export type FakeHandlers = {
+    readonly [model: string]: {
+        readonly [method: string]: FakeHandler;
+    };
+};
+/** A `FakeTransport` layer paired with the log of every call it received. */
+export interface FakeTransport {
+    readonly layer: Layer.Layer<Transport>;
+    /**
+     * Every `call_kw` this transport handled, in order, for assertions. Populated
+     * before the handler runs, so a failing handler still records its call.
+     */
+    readonly callLog: Ref.Ref<ReadonlyArray<CallKwParams>>;
+}
+/**
+ * Build a deterministic, network-free {@link Transport} from scripted handlers.
+ *
+ * GOTCHA: an unhandled model/method is a defect in the test, not a runtime
+ * condition the code under test could ever encounter — so it is an `Effect.die`
+ * (with a precise locator), never a value in the typed failure channel. Tests
+ * that mean to exercise a transport failure must script it explicitly.
+ */
+export declare const make: (handlers: FakeHandlers, options?: {
+    readonly dialect?: TransportDialect;
+}) => FakeTransport;
+//# sourceMappingURL=fakeTransport.d.ts.map

package/dist/testing/fakeTransport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fakeTransport.d.ts","sourceRoot":"","sources":["../../src/testing/fakeTransport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAC5C,OAAO,EACL,KAAK,YAAY,EACjB,SAAS,EACT,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACtB,MAAM,iBAAiB,CAAC;AAEzB;;;;;;GAMG;AACH,MAAM,MAAM,WAAW,GAAG,CACxB,MAAM,EAAE,YAAY,KACjB,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,kBAAkB,CAAC,GAAG,OAAO,CAAC;AAE1D;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG;QACxB,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAG,WAAW,CAAC;KACxC,CAAC;CACH,CAAC;AAEF,6EAA6E;AAC7E,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACvC;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC;CACxD;AAMD;;;;;;;GAOG;AACH,eAAO,MAAM,IAAI,aACL,YAAY,YACZ;IAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAA;CAAE,KAChD,aA6BF,CAAC"}

package/dist/testing/fakeTransport.js

@@ -0,0 +1,36 @@
+import { Effect, Layer, Ref } from "effect";
+import { Transport, } from "../transport.js";
+const isEffect = (value) => Effect.isEffect(value);
+/**
+ * Build a deterministic, network-free {@link Transport} from scripted handlers.
+ *
+ * GOTCHA: an unhandled model/method is a defect in the test, not a runtime
+ * condition the code under test could ever encounter — so it is an `Effect.die`
+ * (with a precise locator), never a value in the typed failure channel. Tests
+ * that mean to exercise a transport failure must script it explicitly.
+ */
+export const make = (handlers, options) => {
+    const callLog = Ref.makeUnsafe([]);
+    const layer = Layer.succeed(Transport, {
+        dialect: options?.dialect ?? "execute-kw",
+        callKw: (params) => Effect.gen(function* () {
+            const handler = handlers[params.model]?.[params.method];
+            if (handler === undefined) {
+                // Every real Odoo server answers the seeded default layer's
+                // res.users.context_get, so the fake does too — WITHOUT logging it
+                // (it is ambient plumbing, and logging it would shift positional
+                // log assertions). Script res.users.context_get to observe/override.
+                if (params.model === "res.users" && params.method === "context_get") {
+                    return {};
+                }
+                yield* Ref.update(callLog, (log) => [...log, params]);
+                return yield* Effect.die(`FakeTransport: no handler for ${params.model}.${params.method}`);
+            }
+            yield* Ref.update(callLog, (log) => [...log, params]);
+            const result = handler(params);
+            return isEffect(result) ? yield* result : result;
+        }),
+    });
+    return { layer, callLog };
+};
+//# sourceMappingURL=fakeTransport.js.map

package/dist/testing/fakeTransport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fakeTransport.js","sourceRoot":"","sources":["../../src/testing/fakeTransport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAC5C,OAAO,EAEL,SAAS,GAGV,MAAM,iBAAiB,CAAC;AAiCzB,MAAM,QAAQ,GAAG,CACf,KAA2D,EACN,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAEjF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,CAClB,QAAsB,EACtB,OAAiD,EAClC,EAAE;IACjB,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAA8B,EAAE,CAAC,CAAC;IAEhE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE;QACrC,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,YAAY;QACzC,MAAM,EAAE,CAAC,MAAoB,EAAE,EAAE,CAC/B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACxD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,4DAA4D;gBAC5D,mEAAmE;gBACnE,iEAAiE;gBACjE,qEAAqE;gBACrE,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,IAAI,MAAM,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;oBACpE,OAAO,EAAE,CAAC;gBACZ,CAAC;gBACD,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;gBACtD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACtB,iCAAiC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CACjE,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;YAEtD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/B,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QACnD,CAAC,CAAC;KACL,CAAC,CAAC;IAEH,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC5B,CAAC,CAAC"}

package/dist/testing/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @hodeinavarro/odoo-rpc-ts/testing — deterministic test doubles.
+ *
+ * `FakeTransport` is a scripted, network-free {@link Transport} implementation
+ * (AGENTS.md § Testing export). Compose its `.layer` under the service you want
+ * to exercise and assert against its `.callLog`.
+ */
+export { make, type FakeHandler, type FakeHandlers, type FakeTransport } from "./fakeTransport.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/testing/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/testing/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,EAAE,KAAK,WAAW,EAAE,KAAK,YAAY,EAAE,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/testing/index.js

@@ -0,0 +1,9 @@
+/**
+ * @hodeinavarro/odoo-rpc-ts/testing — deterministic test doubles.
+ *
+ * `FakeTransport` is a scripted, network-free {@link Transport} implementation
+ * (AGENTS.md § Testing export). Compose its `.layer` under the service you want
+ * to exercise and assert against its `.callLog`.
+ */
+export { make } from "./fakeTransport.js";
+//# sourceMappingURL=index.js.map

package/dist/testing/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/testing/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,EAA2D,MAAM,oBAAoB,CAAC"}