Skip to content

State inspection tools - #484

Open
danquack wants to merge 2 commits into
hashicorp:mainfrom
danquack:state-inspection-tools
Open

danquack wants to merge 2 commits into
hashicorp:mainfrom
danquack:state-inspection-tools

Conversation

@danquack

Copy link
Copy Markdown

Description

In #191 there was some work to review the state, but that was closed. Theres use cases to review state as documented in #437. This PR intends to solve the use cases:

  • "show me all my S3 buckets" (list_state_resources)
  • "what's in this workspace" (get_state_summary)
  • "Whats the config of aws_s3_bucket.assets (get_state_resource)
  • "which resources are tagged environment=prod" (search_state_attributes)

For security controls, sensitive_attributes should be replaced with [REDACTED - sensitive]. I was going back and forth if this should be the case, but figured passwords probably shouldn't be available to the LLM.

Closes #437

PCI review checklist

  • I have documented a clear reason for, and description of, the change I am making.

  • If applicable, I've documented a plan to revert these changes if they require more than reverting the pull request.

  • If applicable, I've documented the impact of any changes to security controls.

    Examples of changes to security controls include using new access control methods, adding or removing logging pipelines, etc.

@danquack
danquack requested a review from a team as a code owner August 19, 2026 15:00
# Conflicts:
#	pkg/tools/dynamic_tool.go
#	pkg/toolsets/mapping.go

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add State Version manipulation tools to avoid context window bloat

1 participant