fix(search): read Confluence pages through the v2 API the Search grant allows

[waleedlatif1]

Summary

• Every live Confluence read failed ("Unable to complete this operation"): read_document called the v1 GET /wiki/rest/api/content/{id}?expand=body.view, which Atlassian denies for Search connections because their granular grant lacks read:content-details:confluence
• Reads now use the v2 page and blog post endpoints (/wiki/api/v2/pages/{id} / blogposts/{id} with body-format=view), which need only read:page:confluence / read:blogpost:confluence — both already granted
• Search results now record whether a hit is a page, blog post, or space (CQL can return spaces), so the read picks the right endpoint; a space reads as its homepage
• The member verifier for space-restricted policies had the same v1 dependency; it now resolves the space key through v2 (page → spaceId → space)
• Service-account verification (separate admin credential) is unchanged

Type of Change

• Bug fix

Testing

Response shapes checked against a public Confluence Cloud site's v2 API. New tests fail on the old code and pass on the new; live-search suite (237), lint, 51 audits and type-check pass

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
docs	Skipped		Sep 26, 2026 10:02am UTC

[cubic-dev-ai]

All reported issues were addressed across 6 files

<sub>Reply with feedback, questions, or to request a fix.

Fix all with cubic | Re-trigger cubic</sub>

[greptile-apps]

Confidence Score: 5/5

[High risk] Changes how Confluence pages are fetched from the API.

The PR appears safe to merge; no outstanding previous finding or new actionable issue remains.

Summary

The PR moves Confluence document and space-policy reads to v2 endpoints, records search-result kinds for page, blog-post, and space reads, and adds client-level coverage for HTTP status propagation.

• The change since the previous review adds a test for the 404 and 500 status mapping.

Diagram

%%{init: {'theme': 'neutral'}}%%
flowchart LR
  A[Confluence search result] --> B{Kind}
  B -->|Page| C[v2 pages read]
  B -->|Blog post| D[v2 blogposts read]
  B -->|Space| E[v2 space lookup]
  E --> C

Loading

_{Reviews (4) · Last reviewed commit: "test(search): check that provider failur..."}

[waleedlatif1]

@greptile

[waleedlatif1]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

[cubic-dev-ai]

No issues found across 6 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Re-trigger cubic}

[waleedlatif1]

@greptile

[waleedlatif1]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

[cubic-dev-ai]

No issues found across 7 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Re-trigger cubic}

[waleedlatif1]

@greptile

[waleedlatif1]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

[cubic-dev-ai]

No issues found across 8 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Re-trigger cubic}