fix: queue concurrent permission requests to prevent silent cancellations

When multiple permission requests arrived simultaneously, each showQuickPick
call would dismiss the previous one, silently returning 'cancelled'. This
caused allow_always selections to appear broken — the agent would keep
re-asking for permissions that the user had already approved.

Added a serial promise queue to PermissionHandler so concurrent requests
are shown one at a time.

Author: robertpyke

CHANGELOG.md

@@ -4,6 +4,11 @@ All notable changes to the "vscode-acp" extension will be documented in this fil
 
 Check [Keep a Changelog](http://keepachangelog.com/) for recommendations on how to structure this file.
 
+## [0.1.4]
+
+### Fixed
+- Queued concurrent permission requests so multiple prompts no longer clobber each other’s QuickPick dialogs, which was silently cancelling approvals and causing repeated trust prompts
+
 ## [0.1.3] - 2026-03-01
 
 ### Added

package-lock.json

@@ -2,7 +2,7 @@
   "name": "acp-client",
   "displayName": "ACP Client",
   "description": "Agent Client Protocol client for VS Code — connect to GitHub Copilot, Claude Code, Gemini CLI, Qwen Code, Codex CLI, OpenCode, OpenClaw, and any ACP-compatible AI coding agent",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "publisher": "formulahendry",
   "license": "MIT",
   "icon": "resources/icon.png",

package.json

@@ -14,11 +14,12 @@ export class PermissionHandler {
 
   async requestPermission(params: RequestPermissionRequest): Promise<RequestPermissionResponse> {
     const result = this.queue.then(() => this.handlePermission(params));
-    this.queue = result.then(
-      () => undefined,
-      () => undefined,
-    );
-    return result.catch(() => ({ outcome: { outcome: 'cancelled' as const } }));
+    this.queue = result.then(() => {}, () => {});
+    return result.catch((err) => {
+      log(`Permission request failed: ${err}`);
+      sendEvent('permission/responded', { permissionType: params.toolCall?.title || 'Permission Request', outcome: 'error' });
+      return { outcome: { outcome: 'cancelled' as const } };
+    });
   }
 
   private async handlePermission(params: RequestPermissionRequest): Promise<RequestPermissionResponse> {