ivnvxd/mcp-server-odoo

Added

• Auth matrix integration tests: Comprehensive test suite (test_auth_matrix.py) covering all authentication scenarios — Standard mode (S1–S7), YOLO read (Y1–Y6), and YOLO full (F1–F6) with config validation, connect/read, write cycles, access control, and restricted operations
• Session cookie auth for AccessController: REST API calls to MCP endpoints now fall back to Odoo session cookie authentication when no API key is configured (S5/S6 scenarios)
• CI API key generation: Integration test jobs generate real Odoo API keys via passlib hash + direct PostgreSQL insert, enabling all API-key-based test scenarios (S1–S4, Y3–Y5, F3–F5)

Changed

• CI MCP module config: Model permissions now match the auth test matrix, ensuring restricted operations tests are honest
• CI MCP auth: Enabled use_api_keys=True so API key validation is real; MCP integration test failures are no longer suppressed

Fixed

• Multi-database routing: Standard mode MCP endpoints (/mcp/xmlrpc/*, /mcp/models) returned 404 when multiple databases existed in. PostgreSQL. Added X-Odoo-Database header injection via custom XML-RPC transport and AccessController REST calls
• Database auto-selection: Resolve target database before creating MCP XML-RPC proxies; always use server-wide /xmlrpc/db for database listing regardless of mode