feat(acp): enrich permission request cards

acp_adapter/permissions.py

@@ -23,11 +23,21 @@ _OPTION_ID_TO_HERMES = {
     "allow_session": "session",
     "allow_always": "always",
     "deny": "deny",
+    "deny_always": "deny",
 }
 
 _PERMISSION_REQUEST_IDS = count(1)
 
 
+def _permission_option_supports_kind(kind: str) -> bool:
+    """Return whether the installed ACP SDK accepts a permission option kind."""
+    try:
+        PermissionOption(option_id="__probe__", kind=kind, name="probe")
+    except Exception:
+        return False
+    return True
+
+
 def _build_permission_options(*, allow_permanent: bool) -> list[PermissionOption]:
     """Return ACP options that match Hermes approval semantics."""
     options = [
@@ -49,6 +59,14 @@ def _build_permission_options(*, allow_permanent: bool) -> list[PermissionOption
             ),
         )
     options.append(PermissionOption(option_id="deny", kind="reject_once", name="Deny"))
+    if _permission_option_supports_kind("reject_always"):
+        options.append(
+            PermissionOption(
+                option_id="deny_always",
+                kind="reject_always",
+                name="Deny always",
+            ),
+        )
     return options
 
 
@@ -62,12 +80,14 @@ def _build_permission_tool_call(command: str, description: str):
     import acp as _acp
 
     tool_call_id = f"perm-check-{next(_PERMISSION_REQUEST_IDS)}"
+    title = f"{description}: {command}" if description else command
+    content_text = f"{description}\n$ {command}" if description else f"$ {command}"
     return _acp.update_tool_call(
         tool_call_id,
-        title=description,
+        title=title,
         kind="execute",
         status="pending",
-        content=[_acp.tool_content(_acp.text_block(f"$ {command}"))],
+        content=[_acp.tool_content(_acp.text_block(content_text))],
         raw_input={"command": command, "description": description},
     )