confluence-knowledge (local MCP service)
Local companion service for the confluence-knowledge Copilot agent.
See ../../docs/confluence-knowledge.md for the full guide.
- GET-only
ConfluenceClient— non-GET raisesSecurityExceptionpre-flight. - Recursive subtree crawl (Cloud v2 + Data Center), resumable.
- Local ONNX embeddings (
bge-m3, quantized) + sparse leg (Qdrant/bm25)- reranker (
bge-reranker-v2-m3, quantized) — MIT/Apache-2.0, pinned inmodels.lock.json, no torch, never a cloud embedding call.
- reranker (
- SQLite + FTS5 + vector-blob index under
.conf_knowledge_index/. - Credentials via OS keyring / env var / chmod-600
.conf_auth.json.
Dev
python3.11+ -m venv .venv && .venv/bin/pip install -e '.[dev]'
.venv/bin/python -m pytest # all offline — no network needed
.venv/bin/python -m ruff check src tests
Before every release, run the end-to-end smoke test. It spawns the real stdio server through the MCP client SDK and uses the real models against a fake Confluence on localhost, with simulated network latency:
.venv/bin/pip install -e '.[models]'
CONF_KNOWLEDGE_HOME=/tmp/ck/home .venv/bin/confluence-knowledge prepare-models
CONF_KNOWLEDGE_HOME=/tmp/ck/home .venv/bin/python scripts/e2e_smoke.py # ends with "E2E OK"
e2e_bootstrap.py goes further — it replays the agent's entire install flow
in a sandboxed $HOME (python discovery → venv → pip install from the
shipped dist/ bundle → models → credentials → register → the real server
over stdio → a full Q&A round-trip). Run it before every release:
CK_MODEL_CACHE=/tmp/ck/home/models .venv/bin/python scripts/e2e_bootstrap.py # "E2E BOOTSTRAP OK"
CLI
| Command | Purpose |
|---|---|
confluence-knowledge setup |
guided env/site/token setup (hidden input, keyring) |
confluence-knowledge prepare-models |
fetch pinned local models once |
confluence-knowledge doctor |
verify config + heartbeat + models |
confluence-knowledge serve |
run the stdio MCP server (what the IDE launches) |
confluence-knowledge clean |
delete the local index (~/.confluence-knowledge/work unless CONF_KNOWLEDGE_WORKDIR is set) |
Metadata
Release files for confluence-knowledge 0.5.2
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| confluence_knowledge-0.5.2.tar.gz | 50.8 kB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| confluence_knowledge-0.5.2-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 93.0 kB
Release files / confluence_knowledge-0.5.2.tar.gz
| Download URL | confluence_knowledge-0.5.2.tar.gz |
|---|---|
| Size | 50.8 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
9931d71f5597a6b2428ebef8afabbe8b70ee68faf0d546a0198048ef9ecb1a61
|
|
BLAKE2b-256 checksum How to use checksums |
bb8a351335ef7ed4f794b0215d46e196f3a26ea34111a8d4f61125db5c2814f5
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Release files / confluence_knowledge-0.5.2-py3-none-any.whl
| Download URL | confluence_knowledge-0.5.2-py3-none-any.whl |
|---|---|
| Size | 42.3 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
d1c8ea8dc4a89d611a5e2efcb0f4af293bc40bbf7aafbb23bc0dca945063a6a0
|
|
BLAKE2b-256 checksum How to use checksums |
6c726285bc43841d067fe7bf1fee005f0cde224f971971f2a2ce32ec37d33515
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Security for confluence-knowledge 0.5.2
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.