concinno-skills-knowledge

Knowledge-base agent skills for Concinno. Native Python API, no MCP required. MIT / Apache-2.0 / BSD licensed SDKs only — we deliberately keep the Concinno ecosystem permissive-licence-clean.

Status

MVP (0.1.0) — five one-shot tools covering Notion, Confluence, and local Obsidian vaults:

Dendron, Logseq, and Evernote are intentionally deferred until a maintained Python SDK with a permissive licence exists. Atlassian Server / Data Center is out of scope (Atlassian stopped selling it in 2024).

Install

pip install concinno-skills-knowledge

All three SDK dependencies are hard requirements and pulled in automatically. python-frontmatter is used by the Obsidian tools only; it is <50kB so we do not gate it behind an optional extra.

Credentials

All credentials live under well-known keys in the Concinno CredentialStore, which reads (in order):

1. Process runtime overrides via CredentialStore.set(...).
2. Env var CONCINNO_CRED_<UPPER_KEY>.
3. ~/.concinno/credentials.json.

Example ~/.concinno/credentials.json:

{
  "notion_token": "ntn_...",
  "confluence_url": "https://mycompany.atlassian.net",
  "confluence_email": "me@mycompany.com",
  "confluence_api_token": "atl-...",
  "obsidian_vault_path": "C:\\Users\\me\\Vault"
}

Obsidian has no server, but the vault root path lives in the same credential store for UX consistency — users configure everything in one place. Notion expects an integration token from https://www.notion.so/profile/integrations; Confluence expects an Atlassian API token from https://id.atlassian.com/manage-profile/security/api-tokens.

If any required credential is missing the tool returns {"error": "no <service> credentials — set via CredentialStore or env ..."} rather than crashing.

Usage via Concinno ToolRegistry

When the consumer sets CONCINNO_LOAD_PLUGINS=1, the default registry auto-mounts every knowledge tool:

import os
os.environ["CONCINNO_LOAD_PLUGINS"] = "1"

from concinno.tools.registry import get_default_registry

reg = get_default_registry()
expected = {
    "NotionPage",
    "NotionDatabase",
    "ConfluencePage",
    "ObsidianVault",
    "ObsidianDailyNote",
}
assert expected <= set(reg.list_deferred())

page = reg.get("NotionPage")
page.call(action="search", query="agent", limit=20)

Direct Python usage

from concinno_skills_knowledge import (
    NotionPage,
    NotionDatabase,
    ConfluencePage,
    ObsidianVault,
    ObsidianDailyNote,
)

# Notion
NotionPage().call(action="search", query="roadmap", limit=10)
NotionPage().call(action="get", page_id="...")
NotionDatabase().call(
    action="query",
    database_id="...",
    filter={"property": "Status", "status": {"equals": "Done"}},
)

# Confluence
ConfluencePage().call(action="search", query="platform", limit=30)
ConfluencePage().call(
    action="create",
    space="DOCS",
    title="Agent design",
    body="<p>draft</p>",
)

# Obsidian (local)
ObsidianVault().call(action="search", query="reranker")
ObsidianVault().call(
    action="write",
    path="notes/today.md",
    content="hello",
    frontmatter={"tags": ["agent"]},
)
ObsidianDailyNote().call(action="append", text="- shipped 0.1.0")
ObsidianDailyNote().call(action="read")  # today's note

All tools return {"ok": True, ...} on success or {"error": "..."} on failure — same shape as the other Concinno built-in tools. No exceptions escape the call() surface.

Safety

ObsidianVault and ObsidianDailyNote resolve every path argument through Path.is_relative_to(vault_root) after a canonical resolve, so ../ traversal or absolute paths escape the vault are rejected with {"error": "path escapes vault subtree: ..."}. Absolute paths are also rejected up-front.

NotionPage.search and NotionDatabase.query cap limit at 100 (the Notion API's own maximum); ConfluencePage.search caps at 100 as well. ObsidianVault.search defaults to 50 hits with a 500 hard cap and returns "truncated": true when the limit is reached.

Concurrency

All five tools set is_concurrency_safe = False. KB platforms either have strict rate limits (Notion 3 req/s, Confluence tighter) or open a session-per-call (Obsidian writes); the Concinno scheduler will honour this automatically.

License

Apache-2.0.