Show token exchange error response body for debugging

Co-authored-by: Isaac

Author: shreyas-goenka

.github/workflows/claude-code.yml

@@ -44,15 +44,21 @@ jobs:
       - name: Get Databricks OAuth token
         id: oauth
         run: |
-          TOKEN_RESPONSE=$(curl -sfS -X POST \
+          HTTP_CODE=$(curl -s -o /tmp/token_response.json -w "%{http_code}" -X POST \
             "https://accounts.cloud.databricks.com/oidc/accounts/968367da-7edd-44f7-9dea-3e0b20b0ec97/v1/token" \
             -H "Content-Type: application/x-www-form-urlencoded" \
             -d "grant_type=urn:ietf:params:oauth:grant-type:token-exchange" \
             -d "subject_token=${SUBJECT_TOKEN}" \
             -d "subject_token_type=urn:ietf:params:oauth:token-type:jwt" \
             -d "client_id=b76b6808-9e10-43b3-be20-6b6d19ed1af0" \
             -d "scope=all-apis")
-          ACCESS_TOKEN=$(echo "$TOKEN_RESPONSE" | jq -r .access_token)
+          echo "Token exchange HTTP status: $HTTP_CODE"
+          if [ "$HTTP_CODE" != "200" ]; then
+            echo "::error::Token exchange failed with HTTP $HTTP_CODE"
+            cat /tmp/token_response.json
+            exit 1
+          fi
+          ACCESS_TOKEN=$(cat /tmp/token_response.json | jq -r .access_token)
           echo "::add-mask::${ACCESS_TOKEN}"
           echo "token=${ACCESS_TOKEN}" >> "$GITHUB_OUTPUT"
         env:
@@ -171,20 +177,59 @@ jobs:
       - name: Get Databricks OAuth token
         id: oauth
         run: |
-          TOKEN_RESPONSE=$(curl -sfS -X POST \
+          HTTP_CODE=$(curl -s -o /tmp/token_response.json -w "%{http_code}" -X POST \
             "https://accounts.cloud.databricks.com/oidc/accounts/968367da-7edd-44f7-9dea-3e0b20b0ec97/v1/token" \
             -H "Content-Type: application/x-www-form-urlencoded" \
             -d "grant_type=urn:ietf:params:oauth:grant-type:token-exchange" \
             -d "subject_token=${SUBJECT_TOKEN}" \
             -d "subject_token_type=urn:ietf:params:oauth:token-type:jwt" \
             -d "client_id=b76b6808-9e10-43b3-be20-6b6d19ed1af0" \
             -d "scope=all-apis")
-          ACCESS_TOKEN=$(echo "$TOKEN_RESPONSE" | jq -r .access_token)
+          echo "Token exchange HTTP status: $HTTP_CODE"
+          if [ "$HTTP_CODE" != "200" ]; then
+            echo "::error::Token exchange failed with HTTP $HTTP_CODE"
+            cat /tmp/token_response.json
+            exit 1
+          fi
+          ACCESS_TOKEN=$(cat /tmp/token_response.json | jq -r .access_token)
           echo "::add-mask::${ACCESS_TOKEN}"
           echo "token=${ACCESS_TOKEN}" >> "$GITHUB_OUTPUT"
         env:
           SUBJECT_TOKEN: ${{ steps.github-oidc.outputs.token }}
 
+      - name: Validate workspace connectivity
+        run: |
+          echo "=== Step 1: Simple workspace API call ==="
+          HTTP_CODE=$(curl -s -o /tmp/ws_response.json -w "%{http_code}" \
+            "https://dbc-1232e87d-9384.cloud.databricks.com/api/2.0/clusters/spark-versions" \
+            -H "Authorization: Bearer ${ACCESS_TOKEN}")
+          echo "Workspace API HTTP status: $HTTP_CODE"
+          if [ "$HTTP_CODE" != "200" ]; then
+            echo "::error::Workspace API call failed with HTTP $HTTP_CODE"
+            cat /tmp/ws_response.json
+            exit 1
+          fi
+          echo "Workspace API: OK"
+
+          echo ""
+          echo "=== Step 2: Model serving endpoint query ==="
+          HTTP_CODE=$(curl -s -o /tmp/ms_response.json -w "%{http_code}" \
+            "https://dbc-1232e87d-9384.cloud.databricks.com/serving-endpoints/anthropic/v1/messages" \
+            -H "Authorization: Bearer ${ACCESS_TOKEN}" \
+            -H "Content-Type: application/json" \
+            -d '{"model":"databricks-claude-opus-4-6","max_tokens":20,"messages":[{"role":"user","content":"Say OK"}]}')
+          echo "Model serving HTTP status: $HTTP_CODE"
+          if [ "$HTTP_CODE" != "200" ]; then
+            echo "::error::Model serving endpoint failed with HTTP $HTTP_CODE"
+            cat /tmp/ms_response.json
+            exit 1
+          fi
+          echo "Model serving response:"
+          cat /tmp/ms_response.json | jq -r '.content[0].text // "no text"'
+          echo "Model serving: OK"
+        env:
+          ACCESS_TOKEN: ${{ steps.oauth.outputs.token }}
+
       - name: Build settings
         id: config
         run: |