I see several tactical/legal mistakes, but will address only the first one specifically mentioned in the timeline. The driver's left hand.
If the driver really did agree to the carjacker's demands, dropping the hand out of the carjacker's sight is what (I speculate) prompted the first shot.
Solution: Tell the guy with the gun what you intend to do - no surprises.
I am glad your client came out unharmed.