v0.6.0 — Adoption + trust: framework adapters, audit trail, human-in-the-loop approval

Added

• Framework adapter examples (examples/) — copy-paste integrations for Cursor (.cursor/mcp.json + agent rules), Claude Code, Codex CLI, OpenAI Agents SDK (local MCPServerStreamableHttp + HostedMCPTool), LangGraph (langchain-mcp-adapters), CrewAI (native mcps=[...]), and an importable n8n workflow using the official MCP Client Tool node. Python adapters support any OpenAI-compatible provider via OPENAI_BASE_URL/OPENAI_MODEL, and were verified end-to-end against a live Odoo 19 stack (openai-agents 0.17.4, langchain 1.3.6, crewai 1.14.6, n8n 2.25.7).
• Audit logging trail — ODOO_MCP_AUDIT_LOG=<path> appends one JSONL line per write-path event (preview, validate, execute, elicit, chatter_post) with model, operation, record IDs, instance, outcome, and a token digest (never the token itself). Posture surfaced in health_check.
• Elicitation-based write approval — ODOO_MCP_ELICIT_WRITES=1 makes execute_approved_write ask the human through native MCP elicitation (confirm form with a diff summary) before executing; clients without elicitation support fall back to the unchanged token flow. Declines are audited.
• Side-effect policy file — reviewed execute_method side-effect methods can live in a version-controllable JSON file (ODOO_MCP_POLICY_FILE, default ./odoo_mcp_policy.json; see odoo_mcp_policy.json.example) with reviewer metadata, merged with the env allowlist. Broken policy files fail closed.
• Reliability hardening — read-only calls retry connection failures with exponential backoff (ODOO_MCP_RETRY_ATTEMPTS/ODOO_MCP_RETRY_BACKOFF; writes never retry); TTL + LRU bounded schema cache (ODOO_MCP_SCHEMA_CACHE_TTL/ODOO_MCP_SCHEMA_CACHE_MAX); health_check flags N+1 read_record loops.
• New guides — docs/troubleshooting.md (error-classifier categories → fixes), docs/multi-instance.md, docs/performance.md.

Compatibility

• No breaking changes. Tool count stays 26; elicitation, audit logging, and the policy file are opt-in; retry/caching defaults preserve existing behavior.