@clawdreyhepburn/carapace 1.0.3 → 1.0.4

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "carapace",
   "name": "Carapace",
   "description": "Cedar policy enforcement for agent tool access via before_tool_call hook. Your agent's exoskeleton.",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "configSchema": {
     "type": "object",
     "additionalProperties": true,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clawdreyhepburn/carapace",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "description": "Cedar policy enforcement for agent tool access via OpenClaw's before_tool_call hook.",
   "license": "Apache-2.0",
   "type": "module",

package/src/cedar-engine-cedarling.ts

@@ -627,10 +627,21 @@ export class CedarlingEngine {
     let hasForbid = false;
     const reasons: string[] = [];
 
+    const principalId = request.principal;
+    const actionId = request.action;
+    const resourceId = request.resource;
+
     for (const [id, policy] of this.policies) {
-      // Simple: check if resource appears in the policy
-      const resourceId = request.resource.replace(/.*::"/g, "").replace(/"$/, "");
-      if (!policy.raw.includes(`"${resourceId}"`)) continue;
+      // Parse constraints from raw policy text
+      const hasPrincipalConstraint = /principal\s*==/.test(policy.raw);
+      const hasActionConstraint = /action\s*==/.test(policy.raw);
+      const hasResourceConstraint = /resource\s*==/.test(policy.raw);
+
+      // Check if this policy matches the request
+      // Unconstrained fields match everything (Cedar semantics)
+      if (hasPrincipalConstraint && !policy.raw.includes(principalId)) continue;
+      if (hasActionConstraint && !policy.raw.includes(actionId)) continue;
+      if (hasResourceConstraint && !policy.raw.includes(resourceId)) continue;
 
       if (policy.effect === "forbid") {
         hasForbid = true;