Geminoo

Chat with your Odoo — safely.

An in-Odoo AI assistant powered by the Google Gemini CLI. It answers questions, queries your data, and builds reports — running as the logged-in user, never as superuser, with a full audit trail.

Quick start · Security model · Configuration · Commercial support · Roadmap

---

Why Geminoo?

Most "AI for Odoo" add-ons either ship your data to a third-party prompt or hand the model a superuser connection and hope for the best. Geminoo is built the other way around — security first:

	Geminoo
🔒 Runs as the user	Every ORM action executes with su=False, so the user's ir.model.access rights and record rules are enforced automatically. The model can never see or do more than the person using it.
🧮 Read-only SQL, really	sql_select is double-guarded: a SELECT-only text validator (no stacked statements, row locks, or dangerous functions) and Postgres SET TRANSACTION READ ONLY + a statement timeout. Gated to a dedicated AI SQL Analyst group.
🧾 Full audit log	Every tool call — model, method, SQL, row counts, outcome, even denials — is written to an immutable log on a separate committed cursor, so it survives rollbacks.
🔑 Per-user credentials, no shared key	Each user connects Gemini with their own credentials — either by importing their Google OAuth login (oauth_creds.json, so their Google AI Ultra access applies) or a Gemini API key. Credentials are stored per user under a private .gemini dir, mode 0600, never in the database, never echoed back.
🚫 Sandboxed engine, no surprises	Gemini runs with its built-in shell/write/network tools withheld and tool calls auto-approved only for the gated Odoo MCP server, so the model cannot touch the shell, filesystem, or network on its own. The authoritative boundary is server-side: the model can affect Odoo only through a small set of tools over a loopback bridge that holds no database credentials.
⚡ Streaming UX	Replies and tool "chips" stream into the chat in real time over the Odoo bus.

If you sell or run Odoo for clients, the security posture is the feature: you can give business users a natural-language window into their ERP without widening anyone's access by a single record.

---

🏗 How it works

OWL chat UI ──/geminoo/send (auth=user)──► Odoo worker ──► daemon thread
   ▲ bus stream (deltas, tool chips)                          │ spawns
   │                  gemini --output-format stream-json --approval-mode yolo
   │                  tool surface = odoo MCP server ONLY
   │                                       │ stdio MCP
   │                                       ▼
   │               bridge/mcp_server.py  (no DB creds, loopback only)
   │                                       │ Bearer(session token)
   └──── bus.bus ◄── controllers/tools.py (auth='geminoo_bridge', runs AS the user) ──► Postgres

• Only Odoo touches the database. The CLI subprocess and the MCP forwarder hold no credentials — only a short-lived, session-scoped HMAC bearer token (passed via the process environment, never written to a file).
• The bridge is reachable on loopback only; the geminoo_bridge auth method rejects any non-local caller and rebinds the request to the session's user (su=False).
• Gemini is launched headless with its built-in tools restricted (file reads only, for attachments) and the odoo MCP server trusted, so its only path to your data is the gated Odoo tool surface.

---

🚀 Quick start

Requirements

• Odoo 18.0
• The Google Gemini CLI installed on the Odoo server (npm install -g @google/gemini-cli). Set its path via the geminoo.cli_path / geminoo.cli_glob system parameter; gemini on PATH is auto-detected.
• Per-user credentials: either an imported Google OAuth login (uses Google AI Ultra) or a Gemini API key.

Install

# Put the module folder (geminoo/) on your addons_path, then install it:
odoo-bin -c odoo.conf -d <your-db> -i geminoo --stop-after-init
# Restart your live server afterwards (Odoo does not re-import changed Python).

First run

1. Open the Geminoo app from the top menu.
2. Click Connect Gemini and either:
   • Google login (AI Ultra): run gemini and sign in with Google on any machine with a browser, then paste the contents of your ~/.gemini/oauth_creds.json; or
   • API key: paste a Gemini API key from Google AI Studio.
3. Ask away: "How many sale orders are still in draft this month?"

Grant the AI SQL Analyst group to users who should be able to run read-only SQL reports, and AI Assistant Manager to those who configure it and read the audit log.

---

🔐 Security model

Geminoo treats LLM output as untrusted and defends accordingly:

• Never superuser. Tool endpoints abort if request.env.su is true.
• ACLs + record rules apply to every read and write, because the call runs as the user.
• Writes are opt-in. Read tools are the default; each write tool (orm_create/write/unlink, orm_action, run_wizard, run_server_action) must be granted per user, and zero-trust mode strips them entirely.
• SQL can only read. See the guard above.
• Restricted engine. Gemini's built-in tool surface is locked to file reads (for attachments); the server-side bridge + per-user ACLs are the authoritative boundary. The bridge token is passed via the environment and never written to a file the model could open.
• Capability tokens expire, are session-scoped, single-jti, and HMAC-signed with the database secret.

See SECURITY.md for the full threat model and how to report a vulnerability.

---

⚙️ Configuration

Settings → Geminoo AI Assistant (or System Parameters geminoo.*):

Parameter	Purpose
cli_path / cli_glob	Path (or glob) to the Gemini CLI binary (auto-detected if blank)
model	Gemini model id (blank = your account's default model)
auth_mode	oauth_import (Google AI Ultra) or api_key
api_key	Optional shared Gemini API key fallback
cloud_project	Optional default GOOGLE_CLOUD_PROJECT
output_format	stream-json (real-time) or json (final only, more compatible)
max_turns, timeout_s	Per-turn limits
home_root, scratch_root	Per-user .gemini home and CLI scratch directories
base_url	Loopback URL the bridge calls back on
sql_enabled	Master switch for sql_select
zero_trust_default	Global default for read-only (zero-trust) mode
python_bin	Interpreter used to run the bundled bridge script (defaults to Odoo's)

Permissions / groups

• AI Assistant User — can use the chat (ORM reads).
• AI SQL Analyst — additionally may run sql_select.
• AI Assistant Manager — configuration + audit log; sees all sessions.

---

🧪 Tests

odoo-bin -c odoo.conf -d <db> -i geminoo --test-enable --test-tags geminoo --stop-after-init

Covers the SQL guard, bridge-token mint/verify, the tool-access policy, the geminoo_bridge auth method, the audit log, and the runner's argv/settings wiring.

---

💼 Commercial support

Geminoo is free and open source (LGPL-3.0) and always will be. It is built and maintained by CICDoo, who also offer:

• 🚀 Managed deployment & hosting — Geminoo running securely on your Odoo, you manage your business and we manage your infrastructure
• 🛟 Priority support & SLAs for production rollouts.
• 🧩 Custom tools & integrations — extend the safe tool surface to your models and workflows.
• 📜 Commercial license for organizations that cannot adopt LGPL terms — modify Geminoo and keep your changes private, embed it in a closed product, or get warranty/indemnification. See COMMERCIAL_LICENSE.md.
• 🎓 Training & security review for teams enabling AI access to their ERP.

👉 Get in touch: sam@cicdoo.com · cicdoo.com

If Geminoo saves your team time, consider sponsoring its development.

---

🗺 Roadmap

• Approval-gated orm_create/orm_write/orm_unlink with before→after diff cards
• An admin allow/deny policy model for tools and models
• A dedicated ai_sql_ro Postgres role + view scoping
• Tighter OS-level sandboxing of the CLI subprocess
• Per-session rate and tool budgets

Have an idea? Open a feature request or a PR — see CONTRIBUTING.md.

---

🙌 Acknowledgements

Geminoo wraps Google's Gemini CLI. "Gemini", "Google", and "Google AI Ultra" are trademarks of Google LLC. Geminoo is an independent, community project and is not affiliated with or endorsed by Google.

📄 License

Geminoo is dual-licensed — choose whichever fits you:

• 🆓 Open source: GNU LGPL-3.0-or-later. Free for any use, including on both Odoo Community and Enterprise; modifications to Geminoo's own files stay under the LGPL.
• 💼 Commercial: a proprietary-friendly license from CICDoo that lifts the LGPL obligations (keep modifications private, embed in closed products, warranty/SLA). See COMMERCIAL_LICENSE.md · license@cicdoo.com.

SPDX-License-Identifier: LGPL-3.0-or-later OR LicenseRef-Geminoo-Commercial

© 2026 CICDoo