@netlinksinc/odoo-mcp 0.1.0

package/dist/tools/orm.js

@@ -0,0 +1,139 @@
+import { OdooError, sanitizeArgs } from '@netlinksinc/odoo-client';
+import { buildContext, validateCompanySubset } from '../context.js';
+import { formatMcpError } from '../errors.js';
+import { createSchema, readSchema, searchCountSchema, searchReadSchema, unlinkSchema, writeSchema, } from './schemas.js';
+/**
+ * Central handler for all ORM tool invocations.
+ *
+ * Sequence:
+ *  1. Parse/validate args with the schema (returns isError on failure).
+ *  2. Validate allowed_company_ids against session (returns isError on failure).
+ *  3. Build Odoo RPC context.
+ *  4. Execute the client method.
+ *  5. Return serialised result or formatted OdooError.
+ *
+ * The callback is registered with the 2-arg overload `server.tool(name, cb)` so
+ * that tests can drive it via a simple mock that stores and directly calls `cb`.
+ * Inside the callback we perform our own safeParse so validation failures produce
+ * `isError: true` (not a thrown McpError as the SDK's schema-overload would do).
+ */
+async function executeHandler(tool, args, schema, exec, logger, session) {
+    const t0 = Date.now();
+    try {
+        const parsed = schema.safeParse(args);
+        if (!parsed.success) {
+            const text = JSON.stringify({
+                error_type: 'InputValidationError',
+                message: parsed.error.message,
+            });
+            logger.toolCall({
+                tool,
+                args_sanitized: sanitizeArgs(tool, args),
+                latency_ms: Date.now() - t0,
+                status: 'error',
+                error: 'InputValidationError',
+            });
+            return { content: [{ type: 'text', text }], isError: true };
+        }
+        // Company-subset enforcement (US-7 AC-7).
+        const data = parsed.data;
+        if (data.allowed_company_ids) {
+            validateCompanySubset(data.allowed_company_ids, session.allowedCompanyIds);
+        }
+        const context = buildContext(session, {
+            allowed_company_ids: data.allowed_company_ids,
+            active_company_id: data.active_company_id,
+        });
+        const result = await exec(parsed.data, context);
+        logger.toolCall({
+            tool,
+            args_sanitized: sanitizeArgs(tool, args),
+            latency_ms: Date.now() - t0,
+            status: 'ok',
+        });
+        return { content: [{ type: 'text', text: JSON.stringify(result) }], isError: false };
+    }
+    catch (e) {
+        if (e instanceof OdooError) {
+            const formatted = formatMcpError(e);
+            logger.toolCall({
+                tool,
+                args_sanitized: sanitizeArgs(tool, args),
+                latency_ms: Date.now() - t0,
+                status: 'error',
+                error: formatted.error_type,
+            });
+            return { content: [{ type: 'text', text: JSON.stringify(formatted) }], isError: true };
+        }
+        // Non-OdooError — unexpected exception. Log + return as InternalError-shaped.
+        const message = e instanceof Error ? e.message : String(e);
+        logger.toolCall({
+            tool,
+            args_sanitized: sanitizeArgs(tool, args),
+            latency_ms: Date.now() - t0,
+            status: 'error',
+            error: 'InternalError',
+        });
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify({
+                        error_type: 'InternalError',
+                        message: 'unexpected error',
+                        detail: message,
+                    }),
+                },
+            ],
+            isError: true,
+        };
+    }
+}
+/**
+ * Register all 6 ORM tools on the MCP server.
+ *
+ * Tools registered: odoo_search_read, odoo_read, odoo_create, odoo_write,
+ * odoo_unlink, odoo_search_count.
+ *
+ * The server.tool(name, cb) 2-arg overload is used deliberately so that
+ * validation failures return `isError: true` rather than a thrown McpError.
+ * Tests drive the handlers via a lightweight mock that stores the callback.
+ */
+export function registerOrmTools(server, client, session, logger) {
+    // -------------------------------------------------------------------------
+    // odoo_search_read
+    // -------------------------------------------------------------------------
+    // biome-ignore lint/suspicious/noExplicitAny: MCP SDK no-schema tool() overload signature mismatch
+    server.tool('odoo_search_read', async (args) => executeHandler('odoo_search_read', args, searchReadSchema, (parsed, context) => client.searchRead(parsed.model, parsed.domain, parsed.fields, {
+        limit: parsed.limit,
+        offset: parsed.offset,
+        order: parsed.order,
+        context,
+    }), logger, session));
+    // -------------------------------------------------------------------------
+    // odoo_read
+    // -------------------------------------------------------------------------
+    // biome-ignore lint/suspicious/noExplicitAny: MCP SDK no-schema tool() overload signature mismatch
+    server.tool('odoo_read', async (args) => executeHandler('odoo_read', args, readSchema, (parsed, context) => client.read(parsed.model, parsed.ids, parsed.fields, context), logger, session));
+    // -------------------------------------------------------------------------
+    // odoo_create
+    // -------------------------------------------------------------------------
+    // biome-ignore lint/suspicious/noExplicitAny: MCP SDK no-schema tool() overload signature mismatch
+    server.tool('odoo_create', async (args) => executeHandler('odoo_create', args, createSchema, (parsed, context) => client.create(parsed.model, parsed.values, context), logger, session));
+    // -------------------------------------------------------------------------
+    // odoo_write
+    // -------------------------------------------------------------------------
+    // biome-ignore lint/suspicious/noExplicitAny: MCP SDK no-schema tool() overload signature mismatch
+    server.tool('odoo_write', async (args) => executeHandler('odoo_write', args, writeSchema, (parsed, context) => client.write(parsed.model, parsed.ids, parsed.values, context), logger, session));
+    // -------------------------------------------------------------------------
+    // odoo_unlink
+    // -------------------------------------------------------------------------
+    // biome-ignore lint/suspicious/noExplicitAny: MCP SDK no-schema tool() overload signature mismatch
+    server.tool('odoo_unlink', async (args) => executeHandler('odoo_unlink', args, unlinkSchema, (parsed, context) => client.unlink(parsed.model, parsed.ids, context), logger, session));
+    // -------------------------------------------------------------------------
+    // odoo_search_count
+    // -------------------------------------------------------------------------
+    // biome-ignore lint/suspicious/noExplicitAny: MCP SDK no-schema tool() overload signature mismatch
+    server.tool('odoo_search_count', async (args) => executeHandler('odoo_search_count', args, searchCountSchema, (parsed, context) => client.searchCount(parsed.model, parsed.domain, context), logger, session));
+}
+//# sourceMappingURL=orm.js.map

package/dist/tools/orm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orm.js","sourceRoot":"","sources":["../../src/tools/orm.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,SAAS,EAAoB,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAInG,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,OAAO,EACL,YAAY,EACZ,UAAU,EACV,iBAAiB,EACjB,gBAAgB,EAChB,YAAY,EACZ,WAAW,GACZ,MAAM,cAAc,CAAC;AAOtB;;;;;;;;;;;;;;GAcG;AACH,KAAK,UAAU,cAAc,CAC3B,IAAY,EACZ,IAAa,EACb,MAAsB,EACtB,IAAuD,EACvD,MAAc,EACd,OAAoB;IAEpB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC1B,UAAU,EAAE,sBAAsB;gBAClC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;aAC9B,CAAC,CAAC;YACH,MAAM,CAAC,QAAQ,CAAC;gBACd,IAAI;gBACJ,cAAc,EAAE,YAAY,CAAC,IAAI,EAAE,IAA+B,CAAC;gBACnE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;gBAC3B,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,sBAAsB;aAC9B,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC9D,CAAC;QAED,0CAA0C;QAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,IAGnB,CAAC;QACF,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC7B,qBAAqB,CAAC,IAAI,CAAC,mBAAmB,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE;YACpC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;YAC7C,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;SAC1C,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,CAAC,QAAQ,CAAC;YACd,IAAI;YACJ,cAAc,EAAE,YAAY,CAAC,IAAI,EAAE,IAA+B,CAAC;YACnE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;YAC3B,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACvF,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,SAAS,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;YACpC,MAAM,CAAC,QAAQ,CAAC;gBACd,IAAI;gBACJ,cAAc,EAAE,YAAY,CAAC,IAAI,EAAE,IAA+B,CAAC;gBACnE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;gBAC3B,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,SAAS,CAAC,UAAU;aAC5B,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACzF,CAAC;QACD,8EAA8E;QAC9E,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3D,MAAM,CAAC,QAAQ,CAAC;YACd,IAAI;YACJ,cAAc,EAAE,YAAY,CAAC,IAAI,EAAE,IAA+B,CAAC;YACnE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;YAC3B,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,eAAe;SACvB,CAAC,CAAC;QACH,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,UAAU,EAAE,eAAe;wBAC3B,OAAO,EAAE,kBAAkB;wBAC3B,MAAM,EAAE,OAAO;qBAChB,CAAC;iBACH;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAiB,EACjB,MAAkB,EAClB,OAAoB,EACpB,MAAc;IAEd,4EAA4E;IAC5E,mBAAmB;IACnB,4EAA4E;IAC5E,mGAAmG;IAClG,MAAM,CAAC,IAAY,CAClB,kBAAkB,EAClB,KAAK,EAAE,IAAa,EAAuB,EAAE,CAC3C,cAAc,CACZ,kBAAkB,EAClB,IAAI,EACJ,gBAAgB,EAChB,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAClB,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAiB,EAAE,MAAM,CAAC,MAAM,EAAE;QACvE,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,OAAO;KACR,CAAC,EACJ,MAAM,EACN,OAAO,CACR,CACJ,CAAC;IAEF,4EAA4E;IAC5E,YAAY;IACZ,4EAA4E;IAC5E,mGAAmG;IAClG,MAAM,CAAC,IAAY,CAClB,WAAW,EACX,KAAK,EAAE,IAAa,EAAuB,EAAE,CAC3C,cAAc,CACZ,WAAW,EACX,IAAI,EACJ,UAAU,EACV,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAClF,MAAM,EACN,OAAO,CACR,CACJ,CAAC;IAEF,4EAA4E;IAC5E,cAAc;IACd,4EAA4E;IAC5E,mGAAmG;IAClG,MAAM,CAAC,IAAY,CAClB,aAAa,EACb,KAAK,EAAE,IAAa,EAAuB,EAAE,CAC3C,cAAc,CACZ,aAAa,EACb,IAAI,EACJ,YAAY,EACZ,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAClB,MAAM,CAAC,MAAM,CACX,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,MAA6D,EACpE,OAAO,CACR,EACH,MAAM,EACN,OAAO,CACR,CACJ,CAAC;IAEF,4EAA4E;IAC5E,aAAa;IACb,4EAA4E;IAC5E,mGAAmG;IAClG,MAAM,CAAC,IAAY,CAClB,YAAY,EACZ,KAAK,EAAE,IAAa,EAAuB,EAAE,CAC3C,cAAc,CACZ,YAAY,EACZ,IAAI,EACJ,WAAW,EACX,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACnF,MAAM,EACN,OAAO,CACR,CACJ,CAAC;IAEF,4EAA4E;IAC5E,cAAc;IACd,4EAA4E;IAC5E,mGAAmG;IAClG,MAAM,CAAC,IAAY,CAClB,aAAa,EACb,KAAK,EAAE,IAAa,EAAuB,EAAE,CAC3C,cAAc,CACZ,aAAa,EACb,IAAI,EACJ,YAAY,EACZ,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,EACrE,MAAM,EACN,OAAO,CACR,CACJ,CAAC;IAEF,4EAA4E;IAC5E,oBAAoB;IACpB,4EAA4E;IAC5E,mGAAmG;IAClG,MAAM,CAAC,IAAY,CAClB,mBAAmB,EACnB,KAAK,EAAE,IAAa,EAAuB,EAAE,CAC3C,cAAc,CACZ,mBAAmB,EACnB,IAAI,EACJ,iBAAiB,EACjB,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAiB,EAAE,OAAO,CAAC,EACxF,MAAM,EACN,OAAO,CACR,CACJ,CAAC;AACJ,CAAC"}

package/dist/tools/report.d.ts

@@ -0,0 +1,6 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { type OdooSession } from '@netlinksinc/odoo-client';
+import type { OdooClient } from '@netlinksinc/odoo-client';
+import type { Logger } from '../logger.js';
+export declare function registerReportTool(server: McpServer, client: OdooClient, session: OdooSession, logger: Logger): void;
+//# sourceMappingURL=report.d.ts.map

package/dist/tools/report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../src/tools/report.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,EAA2B,KAAK,WAAW,EAAgB,MAAM,0BAA0B,CAAC;AACnG,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAI3D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAG3C,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,UAAU,EAClB,OAAO,EAAE,WAAW,EACpB,MAAM,EAAE,MAAM,GACb,IAAI,CA0GN"}

package/dist/tools/report.js

@@ -0,0 +1,99 @@
+import { OdooError, sanitizeArgs } from '@netlinksinc/odoo-client';
+import { buildContext, validateCompanySubset } from '../context.js';
+import { formatMcpError } from '../errors.js';
+import { runReportSchema } from './schemas.js';
+export function registerReportTool(server, client, session, logger) {
+    server.tool('odoo_run_report', async (args) => {
+        const t0 = Date.now();
+        const toolName = 'odoo_run_report';
+        const parsed = runReportSchema.safeParse(args);
+        if (!parsed.success) {
+            const errorPayload = {
+                error_type: 'InputValidationError',
+                message: parsed.error.message,
+            };
+            logger.toolCall({
+                tool: toolName,
+                args_sanitized: sanitizeArgs(toolName, args),
+                latency_ms: Date.now() - t0,
+                status: 'error',
+                error: 'InputValidationError',
+            });
+            return {
+                isError: true,
+                content: [{ type: 'text', text: JSON.stringify(errorPayload) }],
+            };
+        }
+        const data = parsed.data;
+        try {
+            if (data.allowed_company_ids !== undefined) {
+                validateCompanySubset(data.allowed_company_ids, session.allowedCompanyIds);
+            }
+            const context = buildContext(session, {
+                allowed_company_ids: data.allowed_company_ids,
+                active_company_id: data.active_company_id,
+            });
+            const { content, contentType } = await client.runReport(data.report_id, data.doc_ids, context);
+            const latency_ms = Date.now() - t0;
+            logger.toolCall({
+                tool: toolName,
+                args_sanitized: sanitizeArgs(toolName, args),
+                latency_ms,
+                status: 'ok',
+            });
+            return {
+                isError: false,
+                content: [
+                    {
+                        type: 'text',
+                        text: JSON.stringify({ content, contentType }),
+                    },
+                ],
+            };
+        }
+        catch (e) {
+            const latency_ms = Date.now() - t0;
+            if (e instanceof OdooError) {
+                logger.toolCall({
+                    tool: toolName,
+                    args_sanitized: sanitizeArgs(toolName, args),
+                    latency_ms,
+                    status: 'error',
+                    error: e.message,
+                });
+                return {
+                    isError: true,
+                    content: [
+                        {
+                            type: 'text',
+                            text: JSON.stringify(formatMcpError(e)),
+                        },
+                    ],
+                };
+            }
+            // Non-OdooError — unexpected exception. Log + return as InternalError-shaped.
+            const message = e instanceof Error ? e.message : String(e);
+            logger.toolCall({
+                tool: toolName,
+                args_sanitized: sanitizeArgs(toolName, args),
+                latency_ms,
+                status: 'error',
+                error: 'InternalError',
+            });
+            return {
+                isError: true,
+                content: [
+                    {
+                        type: 'text',
+                        text: JSON.stringify({
+                            error_type: 'InternalError',
+                            message: 'unexpected error',
+                            detail: message,
+                        }),
+                    },
+                ],
+            };
+        }
+    });
+}
+//# sourceMappingURL=report.js.map

package/dist/tools/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../../src/tools/report.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,SAAS,EAAoB,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAGnG,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,MAAM,UAAU,kBAAkB,CAChC,MAAiB,EACjB,MAAkB,EAClB,OAAoB,EACpB,MAAc;IAEd,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAC5C,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAG,iBAAiB,CAAC;QAEnC,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,YAAY,GAAG;gBACnB,UAAU,EAAE,sBAAsB;gBAClC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;aAC9B,CAAC;YACF,MAAM,CAAC,QAAQ,CAAC;gBACd,IAAI,EAAE,QAAQ;gBACd,cAAc,EAAE,YAAY,CAAC,QAAQ,EAAE,IAA+B,CAAC;gBACvE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;gBAC3B,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,sBAAsB;aAC9B,CAAC,CAAC;YACH,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;aACzE,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QAEzB,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;gBAC3C,qBAAqB,CAAC,IAAI,CAAC,mBAAmB,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;YAC7E,CAAC;YAED,MAAM,OAAO,GAAY,YAAY,CAAC,OAAO,EAAE;gBAC7C,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;gBAC7C,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;aAC1C,CAAC,CAAC;YAEH,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CACrD,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,OAAO,EACZ,OAAO,CACR,CAAC;YAEF,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;YACnC,MAAM,CAAC,QAAQ,CAAC;gBACd,IAAI,EAAE,QAAQ;gBACd,cAAc,EAAE,YAAY,CAAC,QAAQ,EAAE,IAA+B,CAAC;gBACvE,UAAU;gBACV,MAAM,EAAE,IAAI;aACb,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;qBAC/C;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;YAEnC,IAAI,CAAC,YAAY,SAAS,EAAE,CAAC;gBAC3B,MAAM,CAAC,QAAQ,CAAC;oBACd,IAAI,EAAE,QAAQ;oBACd,cAAc,EAAE,YAAY,CAAC,QAAQ,EAAE,IAA+B,CAAC;oBACvE,UAAU;oBACV,MAAM,EAAE,OAAO;oBACf,KAAK,EAAE,CAAC,CAAC,OAAO;iBACjB,CAAC,CAAC;gBAEH,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;yBACxC;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,8EAA8E;YAC9E,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC3D,MAAM,CAAC,QAAQ,CAAC;gBACd,IAAI,EAAE,QAAQ;gBACd,cAAc,EAAE,YAAY,CAAC,QAAQ,EAAE,IAA+B,CAAC;gBACvE,UAAU;gBACV,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,eAAe;aACvB,CAAC,CAAC;YACH,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACnB,UAAU,EAAE,eAAe;4BAC3B,OAAO,EAAE,kBAAkB;4BAC3B,MAAM,EAAE,OAAO;yBAChB,CAAC;qBACH;iBACF;aACF,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/schemas.d.ts

@@ -0,0 +1,202 @@
+import { z } from 'zod';
+export declare const searchReadSchema: z.ZodObject<{
+    allowed_company_ids: z.ZodOptional<z.ZodArray<z.ZodNumber, "many">>;
+    active_company_id: z.ZodOptional<z.ZodNumber>;
+    model: z.ZodString;
+    domain: z.ZodDefault<z.ZodArray<z.ZodUnknown, "many">>;
+    fields: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    limit: z.ZodDefault<z.ZodNumber>;
+    offset: z.ZodDefault<z.ZodNumber>;
+    order: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    limit: number;
+    model: string;
+    domain: unknown[];
+    fields: string[];
+    offset: number;
+    allowed_company_ids?: number[] | undefined;
+    order?: string | undefined;
+    active_company_id?: number | undefined;
+}, {
+    model: string;
+    limit?: number | undefined;
+    allowed_company_ids?: number[] | undefined;
+    domain?: unknown[] | undefined;
+    fields?: string[] | undefined;
+    offset?: number | undefined;
+    order?: string | undefined;
+    active_company_id?: number | undefined;
+}>;
+export type SearchReadInput = z.infer<typeof searchReadSchema>;
+export declare const readSchema: z.ZodObject<{
+    allowed_company_ids: z.ZodOptional<z.ZodArray<z.ZodNumber, "many">>;
+    active_company_id: z.ZodOptional<z.ZodNumber>;
+    model: z.ZodString;
+    ids: z.ZodArray<z.ZodNumber, "many">;
+    fields: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+}, "strip", z.ZodTypeAny, {
+    model: string;
+    fields: string[];
+    ids: number[];
+    allowed_company_ids?: number[] | undefined;
+    active_company_id?: number | undefined;
+}, {
+    model: string;
+    ids: number[];
+    allowed_company_ids?: number[] | undefined;
+    fields?: string[] | undefined;
+    active_company_id?: number | undefined;
+}>;
+export type ReadInput = z.infer<typeof readSchema>;
+export declare const createSchema: z.ZodObject<{
+    allowed_company_ids: z.ZodOptional<z.ZodArray<z.ZodNumber, "many">>;
+    active_company_id: z.ZodOptional<z.ZodNumber>;
+    model: z.ZodString;
+    values: z.ZodUnion<[z.ZodRecord<z.ZodString, z.ZodUnknown>, z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>, "many">]>;
+}, "strip", z.ZodTypeAny, {
+    values: Record<string, unknown> | Record<string, unknown>[];
+    model: string;
+    allowed_company_ids?: number[] | undefined;
+    active_company_id?: number | undefined;
+}, {
+    values: Record<string, unknown> | Record<string, unknown>[];
+    model: string;
+    allowed_company_ids?: number[] | undefined;
+    active_company_id?: number | undefined;
+}>;
+export type CreateInput = z.infer<typeof createSchema>;
+export declare const writeSchema: z.ZodObject<{
+    allowed_company_ids: z.ZodOptional<z.ZodArray<z.ZodNumber, "many">>;
+    active_company_id: z.ZodOptional<z.ZodNumber>;
+    model: z.ZodString;
+    ids: z.ZodArray<z.ZodNumber, "many">;
+    values: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+}, "strip", z.ZodTypeAny, {
+    values: Record<string, unknown>;
+    model: string;
+    ids: number[];
+    allowed_company_ids?: number[] | undefined;
+    active_company_id?: number | undefined;
+}, {
+    values: Record<string, unknown>;
+    model: string;
+    ids: number[];
+    allowed_company_ids?: number[] | undefined;
+    active_company_id?: number | undefined;
+}>;
+export type WriteInput = z.infer<typeof writeSchema>;
+export declare const unlinkSchema: z.ZodObject<{
+    allowed_company_ids: z.ZodOptional<z.ZodArray<z.ZodNumber, "many">>;
+    active_company_id: z.ZodOptional<z.ZodNumber>;
+    model: z.ZodString;
+    ids: z.ZodArray<z.ZodNumber, "many">;
+}, "strip", z.ZodTypeAny, {
+    model: string;
+    ids: number[];
+    allowed_company_ids?: number[] | undefined;
+    active_company_id?: number | undefined;
+}, {
+    model: string;
+    ids: number[];
+    allowed_company_ids?: number[] | undefined;
+    active_company_id?: number | undefined;
+}>;
+export type UnlinkInput = z.infer<typeof unlinkSchema>;
+export declare const searchCountSchema: z.ZodObject<{
+    allowed_company_ids: z.ZodOptional<z.ZodArray<z.ZodNumber, "many">>;
+    active_company_id: z.ZodOptional<z.ZodNumber>;
+    model: z.ZodString;
+    domain: z.ZodDefault<z.ZodArray<z.ZodUnknown, "many">>;
+}, "strip", z.ZodTypeAny, {
+    model: string;
+    domain: unknown[];
+    allowed_company_ids?: number[] | undefined;
+    active_company_id?: number | undefined;
+}, {
+    model: string;
+    allowed_company_ids?: number[] | undefined;
+    domain?: unknown[] | undefined;
+    active_company_id?: number | undefined;
+}>;
+export type SearchCountInput = z.infer<typeof searchCountSchema>;
+export declare const executeSchema: z.ZodObject<{
+    allowed_company_ids: z.ZodOptional<z.ZodArray<z.ZodNumber, "many">>;
+    active_company_id: z.ZodOptional<z.ZodNumber>;
+    model: z.ZodString;
+    method: z.ZodString;
+    args: z.ZodDefault<z.ZodArray<z.ZodUnknown, "many">>;
+    kwargs: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, "strip", z.ZodTypeAny, {
+    model: string;
+    method: string;
+    args: unknown[];
+    kwargs: Record<string, unknown>;
+    allowed_company_ids?: number[] | undefined;
+    active_company_id?: number | undefined;
+}, {
+    model: string;
+    method: string;
+    allowed_company_ids?: number[] | undefined;
+    active_company_id?: number | undefined;
+    args?: unknown[] | undefined;
+    kwargs?: Record<string, unknown> | undefined;
+}>;
+export type ExecuteInput = z.infer<typeof executeSchema>;
+export declare const runReportSchema: z.ZodObject<{
+    allowed_company_ids: z.ZodOptional<z.ZodArray<z.ZodNumber, "many">>;
+    active_company_id: z.ZodOptional<z.ZodNumber>;
+    report_id: z.ZodUnion<[z.ZodNumber, z.ZodString]>;
+    doc_ids: z.ZodArray<z.ZodNumber, "many">;
+}, "strip", z.ZodTypeAny, {
+    report_id: string | number;
+    doc_ids: number[];
+    allowed_company_ids?: number[] | undefined;
+    active_company_id?: number | undefined;
+}, {
+    report_id: string | number;
+    doc_ids: number[];
+    allowed_company_ids?: number[] | undefined;
+    active_company_id?: number | undefined;
+}>;
+export type RunReportInput = z.infer<typeof runReportSchema>;
+export declare const callActionSchema: z.ZodObject<{
+    allowed_company_ids: z.ZodOptional<z.ZodArray<z.ZodNumber, "many">>;
+    active_company_id: z.ZodOptional<z.ZodNumber>;
+    model: z.ZodString;
+    ids: z.ZodArray<z.ZodNumber, "many">;
+    action_name: z.ZodString;
+    context: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, "strip", z.ZodTypeAny, {
+    model: string;
+    ids: number[];
+    action_name: string;
+    allowed_company_ids?: number[] | undefined;
+    active_company_id?: number | undefined;
+    context?: Record<string, unknown> | undefined;
+}, {
+    model: string;
+    ids: number[];
+    action_name: string;
+    allowed_company_ids?: number[] | undefined;
+    active_company_id?: number | undefined;
+    context?: Record<string, unknown> | undefined;
+}>;
+export type CallActionInput = z.infer<typeof callActionSchema>;
+export declare const fieldsGetSchema: z.ZodObject<{
+    allowed_company_ids: z.ZodOptional<z.ZodArray<z.ZodNumber, "many">>;
+    active_company_id: z.ZodOptional<z.ZodNumber>;
+    model: z.ZodString;
+    attributes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, "strip", z.ZodTypeAny, {
+    model: string;
+    allowed_company_ids?: number[] | undefined;
+    active_company_id?: number | undefined;
+    attributes?: string[] | undefined;
+}, {
+    model: string;
+    allowed_company_ids?: number[] | undefined;
+    active_company_id?: number | undefined;
+    attributes?: string[] | undefined;
+}>;
+export type FieldsGetInput = z.infer<typeof fieldsGetSchema>;
+//# sourceMappingURL=schemas.d.ts.map

package/dist/tools/schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../src/tools/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAoBxB,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQ3B,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE/D,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;EAKrB,CAAC;AAEH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEnD,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;EAIvB,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAEvD,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;EAKtB,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAErD,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;EAIvB,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAEvD,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;EAI5B,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAEjE,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;EAMxB,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEzD,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;EAI1B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE7D,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;EAM3B,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE/D,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;EAI1B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC"}

package/dist/tools/schemas.js

@@ -0,0 +1,77 @@
+import { z } from 'zod';
+// Threat-model US-5 AC-9 (extended to all tools as defense-in-depth):
+// Reject model names with characters that could escape Odoo's expected dotted_snake_case.
+const MODEL_NAME = z
+    .string()
+    .min(1)
+    .regex(/^[a-z][a-z0-9_.]*$/, 'model must match /^[a-z][a-z0-9_.]*$/');
+// Reject method/action names with characters beyond safe snake_case identifiers.
+const METHOD_NAME = z
+    .string()
+    .min(1)
+    .regex(/^[a-z_][a-z0-9_]*$/, 'method must match /^[a-z_][a-z0-9_]*$/');
+const companyContext = {
+    allowed_company_ids: z.array(z.number().int().positive()).optional(),
+    active_company_id: z.number().int().positive().optional(),
+};
+export const searchReadSchema = z.object({
+    model: MODEL_NAME,
+    domain: z.array(z.unknown()).default([]),
+    fields: z.array(z.string()).default([]),
+    limit: z.number().int().positive().default(80),
+    offset: z.number().int().nonnegative().default(0),
+    order: z.string().optional(),
+    ...companyContext,
+});
+export const readSchema = z.object({
+    model: MODEL_NAME,
+    ids: z.array(z.number().int().positive()).min(1),
+    fields: z.array(z.string()).default([]),
+    ...companyContext,
+});
+export const createSchema = z.object({
+    model: MODEL_NAME,
+    values: z.union([z.record(z.unknown()), z.array(z.record(z.unknown()))]),
+    ...companyContext,
+});
+export const writeSchema = z.object({
+    model: MODEL_NAME,
+    ids: z.array(z.number().int().positive()).min(1),
+    values: z.record(z.unknown()),
+    ...companyContext,
+});
+export const unlinkSchema = z.object({
+    model: MODEL_NAME,
+    ids: z.array(z.number().int().positive()).min(1),
+    ...companyContext,
+});
+export const searchCountSchema = z.object({
+    model: MODEL_NAME,
+    domain: z.array(z.unknown()).default([]),
+    ...companyContext,
+});
+export const executeSchema = z.object({
+    model: MODEL_NAME,
+    method: METHOD_NAME,
+    args: z.array(z.unknown()).default([]),
+    kwargs: z.record(z.unknown()).default({}),
+    ...companyContext,
+});
+export const runReportSchema = z.object({
+    report_id: z.union([z.number().int().positive(), z.string().min(1)]),
+    doc_ids: z.array(z.number().int().positive()).min(1),
+    ...companyContext,
+});
+export const callActionSchema = z.object({
+    model: MODEL_NAME,
+    ids: z.array(z.number().int().positive()).min(1),
+    action_name: METHOD_NAME,
+    context: z.record(z.unknown()).optional(),
+    ...companyContext,
+});
+export const fieldsGetSchema = z.object({
+    model: MODEL_NAME,
+    attributes: z.array(z.string()).optional(),
+    ...companyContext,
+});
+//# sourceMappingURL=schemas.js.map

package/dist/tools/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../src/tools/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,sEAAsE;AACtE,0FAA0F;AAC1F,MAAM,UAAU,GAAG,CAAC;KACjB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,KAAK,CAAC,oBAAoB,EAAE,uCAAuC,CAAC,CAAC;AAExE,iFAAiF;AACjF,MAAM,WAAW,GAAG,CAAC;KAClB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,KAAK,CAAC,oBAAoB,EAAE,wCAAwC,CAAC,CAAC;AAEzE,MAAM,cAAc,GAAG;IACrB,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpE,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC1D,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,UAAU;IACjB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACjD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,GAAG,cAAc;CAClB,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,KAAK,EAAE,UAAU;IACjB,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACvC,GAAG,cAAc;CAClB,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,KAAK,EAAE,UAAU;IACjB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IACxE,GAAG,cAAc;CAClB,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,KAAK,EAAE,UAAU;IACjB,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC7B,GAAG,cAAc;CAClB,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,KAAK,EAAE,UAAU;IACjB,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,GAAG,cAAc;CAClB,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,KAAK,EAAE,UAAU;IACjB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC,GAAG,cAAc;CAClB,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,KAAK,EAAE,UAAU;IACjB,MAAM,EAAE,WAAW;IACnB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACtC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACzC,GAAG,cAAc;CAClB,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,GAAG,cAAc;CAClB,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,UAAU;IACjB,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,WAAW,EAAE,WAAW;IACxB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzC,GAAG,cAAc;CAClB,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,KAAK,EAAE,UAAU;IACjB,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1C,GAAG,cAAc;CAClB,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,56 @@
+{
+  "name": "@netlinksinc/odoo-mcp",
+  "version": "0.1.0",
+  "description": "MCP server exposing any Odoo 19 instance to Claude (Desktop, Code, Cowork) — generic-only tool surface, works on stock and customized Odoo",
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "claude",
+    "anthropic",
+    "odoo",
+    "odoo19",
+    "erp",
+    "ai",
+    "agent"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/farshidghyasi/odoo-mcp.git",
+    "directory": "packages/odoo-mcp"
+  },
+  "homepage": "https://github.com/farshidghyasi/odoo-mcp#readme",
+  "bugs": "https://github.com/farshidghyasi/odoo-mcp/issues",
+  "author": "NETLINKS Inc",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "bin": {
+    "odoo-mcp": "./dist/bin.js"
+  },
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "license": "MIT",
+  "engines": {
+    "node": ">=22"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1",
+    "zod": "^3",
+    "@netlinksinc/odoo-client": "0.1.0"
+  },
+  "devDependencies": {
+    "typescript": "^5.7",
+    "vitest": "^3"
+  },
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest run"
+  }
+}