dashclaw 2.11.0 → 2.11.1

package/README.md

@@ -1,4 +1,4 @@
-# DashClaw SDK (v2.10.0)
+# DashClaw SDK (v2.11.1)
 
 **Minimal governance runtime for AI agents.**
 
@@ -98,7 +98,7 @@ See:
 
 ---
 
-## SDK Surface Area (v2.10.0)
+## SDK Surface Area (v2.11.1)
 
 The v2 SDK exposes the stable governance runtime plus promoted execution domains in the canonical Node client:
 

package/legacy/dashclaw-v1.js

@@ -263,11 +263,18 @@ class DashClaw {
       try { this.guardCallback(decision); } catch { /* ignore callback errors */ }
     }
 
-    const isBlocked = decision.decision === 'block' || decision.decision === 'require_approval';
+    // Only `block` is a hard stop. `require_approval` is the normal HITL path:
+    // the server will create the action with status='pending_approval' and the
+    // approval queue / waitForApproval handles the rest. Throwing here would
+    // prevent the POST to /api/actions and break the PWA approval surface.
+    const isBlocked = decision.decision === 'block';
 
     if (this.guardMode === 'warn' && isBlocked) {
+      const reasons = Array.isArray(decision.reasons)
+        ? decision.reasons.join('; ')
+        : (decision.reason || 'no reason');
       console.warn(
-        `[DashClaw] Guard ${decision.decision}: ${decision.reasons.join('; ') || 'no reason'}. Proceeding in warn mode.`
+        `[DashClaw] Guard ${decision.decision}: ${reasons}. Proceeding in warn mode.`
       );
       return;
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dashclaw",
-  "version": "2.11.0",
+  "version": "2.11.1",
   "description": "Minimal governance runtime for AI agents. Intercept, govern, and verify agent actions.",
   "type": "module",
   "publishConfig": {