feat: make container mode default (auto-detect Docker like herm)

Author: Patel230

cmd/container_boot.go

@@ -18,6 +18,19 @@ type containerStatusMsg struct {
 	sandbox *sandbox.ContainerSandbox
 }
 
+// shouldUseContainer determines if hawk should run in container mode.
+// Default: YES if Docker is available (like herm). User can override with --no-container.
+func shouldUseContainer() bool {
+	if noContainer {
+		return false
+	}
+	if containerMode {
+		return true
+	}
+	// Default: auto-detect. If Docker is running, use container mode.
+	return sandbox.DockerAvailable()
+}
+
 // bootContainerCmd starts the container in the background and sends status
 // updates to the TUI (herm-style async boot with progress feedback).
 func bootContainerCmd(projectDir string) tea.Cmd {

cmd/root.go

@@ -53,6 +53,7 @@ var (
 	teachDepth                 int
 	autoSkillFlag              bool
 	containerMode              bool
+	noContainer                bool
 )
 
 // SetVersion sets the version string from main.
@@ -163,7 +164,8 @@ func init() {
 	rootCmd.Flags().BoolVar(&teachMode, "teach", false, "explain reasoning as the agent works")
 	rootCmd.Flags().IntVar(&teachDepth, "teach-depth", 2, "explanation depth: 1=what, 2=why, 3=how")
 	rootCmd.Flags().BoolVar(&autoSkillFlag, "auto-skill", false, "auto-detect project and install matching skills")
-	rootCmd.Flags().BoolVar(&containerMode, "container", false, "run all commands inside a Docker container (hermetic mode — no permission prompts)")
+	rootCmd.Flags().BoolVar(&noContainer, "no-container", false, "disable container mode (run on host with permission prompts)")
+	rootCmd.Flags().BoolVar(&containerMode, "container", false, "force container mode even if auto-detection would skip it")
 	rootCmd.Flags().BoolVarP(&versionFlag, "version", "v", false, "output the version number")
 	rootCmd.AddCommand(versionCmd)
 	rootCmd.AddCommand(setupCmd)