Hey, thanks for the detailed repro. This is a great bug report.
As I understand it, there are two issues:
tool_call_updatereportsstatus: "completed"even when the tool call is rejected internally. It should be"failed".session/request_permissionis never sent to the ACP client, so there’s no way to show the permission request dialog.
I’ve shared this with the team.
I’ll post an update here if there’s any news.