fix(confirmations): guarded-action handling across webchat and tui

src/daemon/index.ts

@@ -208,7 +208,7 @@ export async function startDaemon(config: Config, options?: StartDaemonOptions):
   const gateway = createGateway({
     config, configPath: options?.configPath, sessionManager, modelRouter, systemPrompt, toolRegistry, toolExecutor,
     channelRegistry, pairingManager, lifecycle, memoryStore,
-    getChannelAgents: () => channelAgents, commandRegistry, intentRegistry, routingPolicy,
+    getChannelAgents: () => channelAgents, commandRegistry, intentRegistry, routingPolicy, hookEngine,
   });
 
   const messageRouter = createMessageRouter({

src/daemon/services.ts

@@ -27,6 +27,7 @@ import type { MemoryStore } from '../memory/store.js';
 import type { CommandRegistry } from '../commands/index.js';
 import type { ComponentRegistry } from '../intents/index.js';
 import type { RoutingPolicy } from '../routing/index.js';
+import type { HookEngine } from '../hooks/index.js';
 
 // ── Skills ──────────────────────────────────────────────────────
 
@@ -294,6 +295,7 @@ export interface GatewayDeps {
   commandRegistry?: CommandRegistry;
   intentRegistry?: ComponentRegistry;
   routingPolicy?: RoutingPolicy;
+  hookEngine?: HookEngine;
 }
 
 export function createGateway(deps: GatewayDeps): GatewayServer {
@@ -375,6 +377,7 @@ export function createGateway(deps: GatewayDeps): GatewayServer {
     commandRegistry: deps.commandRegistry,
     intentRegistry: deps.intentRegistry,
     routingPolicy: deps.routingPolicy,
+    hookEngine: deps.hookEngine,
     uiDir: resolve(import.meta.dirname, '../gateway/ui'),
     config,
     persistConfig: configPath