Odoo Financial Intelligence

Read-only, Evidence-First, Ledger-Based Reports

Quick Reference: Common Odoo Models

Model	What It Contains	Use For
INLINECODE0	Users/Salespeople	Find salesperson by name, get user_id
INLINECODE1

Sales Orders | Revenue by salesperson, order counts, status | | account.move | Invoices/Journal Entries | Invoice tracking, payments, P&L data | | res.partner | Contacts/Customers | Customer info, top customers by revenue | | product.product | Products | Product sales, inventory | | account.account | Chart of Accounts | Financial reporting, balance sheet | | account.move.line | Journal Lines | Detailed ledger entries |

Security & Credentials

Security Model

This skill implements a defense-in-depth security model:

1. 1. User Invocation Required: This skill CANNOT be invoked autonomously by AI models
2. Read-Only Enforcement: All data modifications are blocked at the code level
3. Credential Isolation: Credentials stored only in local .env file, never transmitted elsewhere
4. Network Boundaries: Only connects to user-specified Odoo URL, no external telemetry

Required Environment Variables

This skill REQUIRES Odoo connection credentials stored in assets/autonomous-cfo/.env:

Variable	Description	Secret	Required
INLINECODE9	Odoo instance URL (e.g., https://your-odoo.com)	No	Yes
INLINECODE11

Odoo database name | No | Yes |
| ODOO_USER | Odoo username/email | No | Yes |
| ODOO_PASSWORD | Odoo API key (recommended) or password | Yes | Yes |

⚠️ CRITICAL: These credentials are REQUIRED. The skill will not function without them.

Setup:
CODEBLOCK0

API Key vs Password

For production, use an Odoo API key:

1. 1. Log into Odoo → Settings → Account Security → API Keys
2. Generate a new key (e.g., "Financial Reports Skill")
3. Use this key as INLINECODE14

Why API keys?

• - Scoped permissions (can be read-only)
• Can be revoked independently
• Don't expose your main password
• Better audit trail in Odoo

Authentication Methods

XML-RPC (Legacy, default):

• - Password/API key sent in XML-RPC request body
• Supported by all Odoo versions

JSON-RPC (Odoo 19+):

• - API key sent as Authorization: Bearer <api_key> header
• More efficient for large datasets
• Use ODOO_RPC_BACKEND=json2 to enable

Model Invocation Policy

🚫 Model invocation is STRICTLY DISABLED.

Per skill.json:
CODEBLOCK1

This means:

• - AI models CANNOT invoke this skill automatically
• User MUST explicitly request Odoo operations
• Every invocation requires user intent

Read-Only Enforcement

⚠️ IMPORTANT: Client-Side Enforcement Limitation

The skill implements client-side read-only enforcement. This means:

• - Mutating methods are blocked in the Python code
• Blocked methods raise PermissionError if called
• However, a modified or compromised client could bypass this

For Production Security:

1. 1. Use a read-only Odoo user (recommended)
2. Don't give modify permissions to the API key's user
3. Review Odoo access logs regularly

Blocked Methods:

• - create, write, unlink (CRUD operations)
• INLINECODE22 (duplicate records)
• INLINECODE23, action_confirm, button_validate (workflow actions)

Allowed Methods (Read-Only):

• - search, search_read, read (data retrieval)
• INLINECODE29, fields_get (metadata)
• INLINECODE31, context_get, default_get (helpers)

Attempting to call blocked methods raises PermissionError.

Data Handling & Privacy

• - No Data Exfiltration: Reports generated locally in INLINECODE35
• No Telemetry: No usage data sent to external servers
• Network Isolation: Only connects to ODOO_URL specified in INLINECODE37
• Credential Security: Password/API key never logged or displayed
• Local Processing: All chart generation, PDF creation happens locally

Output Security

All outputs are local files only:

• - output/pdf_reports/ - PDF reports
• INLINECODE39 - PNG image cards
• INLINECODE40 - Chart images
• INLINECODE41 - Excel spreadsheets

No cloud upload, no external sharing, no data leaves your machine except to your specified Odoo instance.

Installation

The skill requires a Python virtual environment with specific packages:

CODEBLOCK2

Or manually:
CODEBLOCK3

Dependencies: requests, matplotlib, pillow, fpdf2, INLINECODE46

Critical Rules

1. 1. NEVER assume - Always ask clarifying questions before generating reports
2. Multi-company check - If multiple companies exist, ASK which one to use
3. Ledger-based - Use Chart of Accounts and journal entries (account.move.line), not just invoice summaries
4. Verify periods - Confirm date ranges with user before running
5. No silent defaults - Every assumption must be confirmed

Before Any Report, Ask:

1. 1. "Which company should I use?" (if multiple exist)
2. "What period? (from/to dates)"
3. "Which accounts or account types to include?"
4. "Any specific breakdown needed?" (by account, by partner, by journal, etc.)
5. "Output format preference?" (PDF, WhatsApp cards, or both)

Entrypoint

Uses the venv with fpdf2, matplotlib, pillow for proper PDF/chart generation:

CODEBLOCK4

Or from the skill directory:
CODEBLOCK5

Chart of Accounts Based Reporting

Reports should be built from:

• - account.account - Chart of Accounts structure (code, name, type, internalgroup)
• INLINECODE48 - Journal entry lines (debit, credit, accountid, date)
• INLINECODE49 - Source journals (type: sale, purchase, cash, bank, general)

Account Internal Groups

• - ASSET - Assets (current, non-current, cash, receivables)
• LIABILITY - Liabilities (payables, taxes, accrued)
• EQUITY - Owner's equity
• INCOME - Revenue accounts
• EXPENSE - Cost and expense accounts
• OFF_BALANCE - Off-balance sheet accounts

Common Account Types

• - asset_cash - Bank and cash accounts
• INLINECODE51 - Accounts receivable
• INLINECODE52 - Current assets
• INLINECODE53 - Accounts payable
• INLINECODE54 - Revenue
• INLINECODE55 - Expenses

Special Equity Types (Odoo-Specific)

• - equity - Standard equity accounts (share capital, retained earnings)
• INLINECODE57 - Suspense account for undistributed profits/losses (e.g., 999999)

CRITICAL for Balance Sheet:
Odoo's equity_unaffected is a SUSPENSE account. Do NOT use its ledger balance directly.

Correct Equity Calculation:

1. 1. Equity Proper (type: equity) - Use ledger balance (credit - debit)
2. Retained Earnings (prior years) - Ledger balance from INLINECODE60
3. Current Year Earnings - Compute real-time: Income - Expenses

CODEBLOCK6

Where Current Year Earnings = Σ(income credit-debit) - Σ(expense debit-credit)

Why this matters: Odoo computes Current Year Earnings in real-time on the Balance Sheet. Using only the equity_unaffected ledger balance will cause the balance sheet to NOT balance.

Automatic Reporting Standard Detection

The skill automatically detects the company's accounting standard based on country/jurisdiction and formats reports accordingly.

Supported Standards:

Standard	Jurisdiction	Notes
IFRS	International	Default for most countries
US GAAP

United States | SEC registrants |
| Ind-AS | India | Indian GAAP converged with IFRS |
| UK GAAP | United Kingdom | FRS 102 |
| SOCPA | Saudi Arabia | IFRS adopted |
| EU IFRS | European Union | IAS Regulation |
| CAS | China | Chinese Accounting Standards |
| JGAAP | Japan | Japanese GAAP |
| ASPE | Canada | Private enterprises |
| AASB | Australia | Australian standards |

Detection Logic:

1. 1. Query company's country from INLINECODE62
2. Map country code to reporting standard
3. Apply standard-specific formatting:

- Number format (1,234.56 vs 1.234,56)
- Negative display ((123) vs -123)
- Date format (DD/MM/YYYY vs MM/DD/YYYY)
- Statement titles (Balance Sheet vs Statement of Financial Position)
- Cash flow method (indirect vs direct)

Override:
CODEBLOCK7

Commands

Sales & CRM Queries

CODEBLOCK8

Pre-built Reports

CODEBLOCK9

Direct RPC Queries (Advanced)

For sales/CRM data not covered by pre-built commands, use direct RPC:

CODEBLOCK10

Ad-hoc Reports

CODEBLOCK11

Output Formats

CODEBLOCK12

Automatic Visualizations

Reports always include appropriate visualizations by default:

Report	Auto-Included Charts
Financial Health	Cash position, burn rate trend, runway
Revenue

MoM trend, top customers, growth KPI |
| AR/AP Aging | Aging buckets pie, overdue highlights |
| Expenses | Category breakdown, trend, top vendors |
| Executive | All KPI cards, summary charts |
| Balance Sheet | Asset/liability composition |
| P&L | Revenue vs expense, margin trend |
| Cash Flow | Operating breakdown, cash trend |

Rule: If visualization makes the report clearer, include it automatically. Never ask "do you want charts?" — just add them.

Interactive Param Collection

If required params are missing, the skill will ask:

1. 1. Company: "Which company?" (list available options)
2. Period: "What period? (e.g., 'last month', 'Q4 2024', custom dates)"
3. Accounts: "Which accounts or groups?" (e.g., 'all income', 'bank accounts only')
4. Breakdown: "Group by? (Month, Customer, Category, Account)"
5. Output: "Output format? (WhatsApp cards, PDF, Both)"

How to Use in Chat

Just ask naturally:

Sales & CRM:

• - "How is [name] salesperson performance?"
• "Show me top customers for [salesperson]"
• "Compare sales team performance"
• "Which salesperson has the most orders?"

Financial Reports:

• - "Give me a financial health report for last quarter"
• "Show revenue vs expenses for the past 6 months"
• "What's my AR aging?"
• "Generate an executive summary for this month"
• "Show me profit & loss statement based on chart of accounts"

General Queries:

• - "How many orders did we get this month?"
• "Who are the top 10 customers?"
• "Show invoice status for [customer name]"

The skill will:

1. 1. Check for multiple companies and ask which one
2. Parse your request
3. Ask for any missing info
4. Fetch data from Odoo using ledger entries or direct RPC
5. Generate charts + WhatsApp cards
6. Deliver via WhatsApp cards and/or PDF

Hard Rules

1. 1. Odoo RPC output is source of truth
2. Strict read-only (no create/write/unlink)
3. No proactive actions unless requested
4. Every number includes methodology note
5. Always verify with user before assuming
6. Always include visualizations - If a report benefits from charts/graphs, include them automatically without asking. Reports should be visually complete.

Diagnostics

CODEBLOCK13

Report Themes

• - WhatsApp Cards: "Midnight Ledger" — Navy-black (#0a0e1a), copper glow (#cd7f32)
• PDF Reports: Clean white, copper accents, professional layout