odoo

# Odoo Financial Intelligence

**Read-only, Evidence-First, Ledger-Based Reports**

## Quick Reference: Common Odoo Models

| Model | What It Contains | Use For |
|-------|------------------|---------|
| `res.users` | Users/Salespeople | Find salesperson by name, get user_id |
| `sale.order` | Sales Orders | Revenue by salesperson, order counts, status |
| `account.move` | Invoices/Journal Entries | Invoice tracking, payments, P&L data |
| `res.partner` | Contacts/Customers | Customer info, top customers by revenue |
| `product.product` | Products | Product sales, inventory |
| `account.account` | Chart of Accounts | Financial reporting, balance sheet |
| `account.move.line` | Journal Lines | Detailed ledger entries |

## Security & Credentials

### Required Environment Variables

This skill requires Odoo connection credentials stored in `assets/autonomous-cfo/.env`:

| Variable | Description | Secret |
|----------|-------------|--------|
| `ODOO_URL` | Odoo instance URL (e.g., `https://your-odoo.com`) | No |
| `ODOO_DB` | Odoo database name | No |
| `ODOO_USER` | Odoo username/email | No |
| `ODOO_PASSWORD` | Odoo password or API key | **Yes** |

**Setup:**
```bash
cd skills/odoo/assets/autonomous-cfo
cp .env.example .env
# Edit .env with your actual credentials
nano .env
```

### Model Invocation Policy

**Model invocation is DISABLED** per `skill.json` policy. This skill handles sensitive financial data and external Odoo connections — it must be explicitly invoked by the user.

**Data Handling:** All queries are read-only. No data is modified or exfiltrated.

### Data Handling

- **Read-only:** All mutating methods (`create`, `write`, `unlink`, etc.) are blocked at the client level
- **No exfiltration:** Reports are generated locally in `assets/autonomous-cfo/output/`
- **Network endpoints:** Only connects to the Odoo URL specified in `.env`
- **Output formats:** PDF, Excel, and WhatsApp image cards (local files only)

### Installation

The skill requires a Pytho...