{
  "schema_version": "1.0",
  "description": "Reference tool registry for depo packages. validate-depo.sh refuses agent cards that reference tools absent from this registry (principle of least privilege — targets grant exactly this surface).",
  "tools": {
    "odoo.search_records": "search + read fields (read)",
    "odoo.read_record": "read one record by id (read)",
    "odoo.read_records": "read multiple records (read)",
    "odoo.create_record": "create one record (write)",
    "odoo.write_record": "write values to one record (write)",
    "odoo.call_method": "call an arbitrary method on an Odoo model (runtime-gated)",
    "odoo.launch_campaign": "create + launch a hitridge.campaign (irreversible — campaign gate)",
    "file.read": "read a file from the package or target workspace",
    "file.write": "write a file in the package or target workspace",
    "file.overwrite": "overwrite an existing package file",
    "script.run": "run a package script — REQUIRES explicit per-package allowlist; refused by default",
    "memory.store": "brain.py store (namespace-scoped)",
    "memory.search": "brain.py search (namespace-scoped)",
    "memory.clear": "brain.py clear (namespace-scoped)"
  },
  "runtime_grants": {
    "note": "targets grant ONLY tools listed in each agent card, drawn from this registry. script.run is never granted implicitly."
  }
}