Capture error response body for AWS 401; quote pip extras

Author: theoddden

.github/workflows/drift.yml

@@ -24,7 +24,7 @@ jobs:
           python-version: "3.12"
 
       - name: Install Terradev CLI
-        run: pip install .[aws,gcp]
+        run: pip install ".[aws,gcp]"
 
       - name: Run canary drift checks
         env:

terradev_cli/drift_monitor/agent.py

@@ -266,6 +266,13 @@ def _check_endpoint(
                 result["drift_reasons"].append(
                     f"expected HTTP {expected_status}, got {response.status_code}"
                 )
+                # Include a short snapshot of the response body to diagnose auth failures.
+                try:
+                    err_text = response.text.strip()[:500]
+                    if err_text:
+                        result["error_body"] = err_text
+                except (ValueError, TypeError, AttributeError):
+                    pass
                 result["drift_summary"] = "; ".join(result["drift_reasons"])
                 return result