trident-tui 0.8.3

package/README.md

@@ -0,0 +1,35 @@
+# trident-tui
+
+**Trident** — an AI penetration-testing agent you can run with one command, no source checkout required:
+
+```bash
+npx trident-tui
+```
+
+On first run it:
+
+1. installs [`uv`](https://docs.astral.sh/uv/) (a fast Python manager) if you don't have it,
+2. pulls the Docker sandbox image,
+3. opens a **Configure LLM** screen where you paste your model (e.g. `anthropic/claude-sonnet-4-6`) and **API key** — saved to `~/.strix/cli-config.json`, so you only do it once.
+
+Then scan something:
+
+```bash
+npx trident-tui --target https://example.com
+npx trident-tui --target ./my-project
+npx trident-tui --help
+```
+
+## Requirements
+
+- **Docker** (running) — the security tools execute inside a sandbox container. Install Docker Desktop: https://docs.docker.com/get-docker/
+- Node.js ≥ 16 (for the `npx` launcher)
+- Everything else (Python, dependencies) is handled automatically by `uv`.
+
+> Only test systems you own or are explicitly authorized to test.
+
+## How it works
+
+This package bundles Trident as a Python wheel (`vendor/*.whl`). The `npx` launcher
+boots it via `uv` and hands off to the `trident` CLI. No API keys are bundled — you
+provide your own on first run.

package/bin/cli.js

@@ -0,0 +1,136 @@
+#!/usr/bin/env node
+/*
+ * Trident launcher for `npx trident-pentest`.
+ *
+ * Trident itself is a Python tool. This Node launcher makes it runnable with a
+ * single `npx` command and NO source checkout:
+ *   1. ensures `uv` (a fast Python manager) is installed,
+ *   2. pre-pulls the Docker sandbox image (reliable, via the docker CLI),
+ *   3. runs Trident straight from the bundled wheel in ./vendor.
+ *
+ * On first run Trident opens a "Configure LLM" screen and asks for your model
+ * (e.g. anthropic/claude-sonnet-4-6) and API key. Settings are saved to
+ * ~/.strix/cli-config.json so you only enter them once.
+ *
+ * Docker is required (the security tools run inside a sandbox container).
+ */
+'use strict';
+
+const { spawnSync } = require('child_process');
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+
+const SANDBOX_IMAGE = 'ghcr.io/usestrix/strix-sandbox:0.1.13';
+const isWin = process.platform === 'win32';
+const HOME = os.homedir();
+const LOCAL_BIN = path.join(HOME, '.local', 'bin');
+
+function log(msg) {
+  process.stdout.write(msg + '\n');
+}
+
+// Resolve a command on PATH; returns its path or null.
+function commandPath(cmd) {
+  const finder = isWin ? 'where' : 'which';
+  const r = spawnSync(finder, [cmd], { encoding: 'utf8' });
+  if (r.status === 0 && r.stdout) {
+    return r.stdout.split(/\r?\n/)[0].trim();
+  }
+  return null;
+}
+
+function resolveUv() {
+  if (commandPath('uv')) return 'uv';
+  const local = path.join(LOCAL_BIN, isWin ? 'uv.exe' : 'uv');
+  if (fs.existsSync(local)) return local;
+  return null;
+}
+
+function installUv() {
+  log('Installing uv (one-time)...');
+  let r;
+  if (isWin) {
+    r = spawnSync(
+      'powershell',
+      ['-NoProfile', '-ExecutionPolicy', 'Bypass', '-Command', 'irm https://astral.sh/uv/install.ps1 | iex'],
+      { stdio: 'inherit' }
+    );
+  } else {
+    r = spawnSync('sh', ['-c', 'curl -LsSf https://astral.sh/uv/install.sh | sh'], { stdio: 'inherit' });
+  }
+  return r.status === 0;
+}
+
+function ensureUv() {
+  let uv = resolveUv();
+  if (uv) return uv;
+  if (!installUv()) return null;
+  // make the freshly-installed uv visible to this process
+  process.env.PATH = LOCAL_BIN + path.delimiter + (process.env.PATH || '');
+  return resolveUv();
+}
+
+function findWheel() {
+  const vendor = path.join(__dirname, '..', 'vendor');
+  let files = [];
+  try {
+    files = fs.readdirSync(vendor).filter((f) => f.endsWith('.whl'));
+  } catch (e) {
+    return null;
+  }
+  return files.length ? path.join(vendor, files[0]) : null;
+}
+
+// Pre-pull the sandbox image with the docker CLI. This is far more reliable
+// than letting the Python SDK stream the pull on first run (esp. on Windows).
+function prePullImage() {
+  if (!commandPath('docker')) {
+    log('');
+    log('[!] Docker not found — Trident runs every scan inside a Docker sandbox.');
+    log('    Install Docker Desktop, then run this again: https://docs.docker.com/get-docker/');
+    log('');
+    return;
+  }
+  if (spawnSync('docker', ['info'], { stdio: 'ignore' }).status !== 0) {
+    log('');
+    log('[!] Docker is installed but not running. Start Docker Desktop, then run this again.');
+    log('');
+    return;
+  }
+  if (spawnSync('docker', ['image', 'inspect', SANDBOX_IMAGE], { stdio: 'ignore' }).status === 0) {
+    log('[ok] Docker sandbox image already present.');
+    return;
+  }
+  log('Downloading the Docker sandbox image (one-time, a few GB)...');
+  const r = spawnSync('docker', ['pull', SANDBOX_IMAGE], { stdio: 'inherit' });
+  if (r.status === 0) log('[ok] Sandbox image downloaded.');
+  else log('[!] Could not pull the image now; Trident will retry on your first scan.');
+}
+
+function main() {
+  log('');
+  log('  Trident - AI penetration-testing agent');
+  log('');
+
+  const uv = ensureUv();
+  if (!uv) {
+    log('[x] Could not find or install uv. Install it manually: https://docs.astral.sh/uv/getting-started/installation/');
+    process.exit(1);
+  }
+
+  const wheel = findWheel();
+  if (!wheel) {
+    log('[x] Bundled Trident package (vendor/*.whl) is missing from this install.');
+    process.exit(1);
+  }
+
+  prePullImage();
+
+  // Hand off to the Python CLI. First run prompts for the model + API key.
+  const args = process.argv.slice(2);
+  const r = spawnSync(uv, ['tool', 'run', '--from', wheel, 'trident', ...args], { stdio: 'inherit' });
+  process.exit(r.status === null ? 1 : r.status);
+}
+
+main();

package/package.json

@@ -0,0 +1,33 @@
+{
+  "name": "trident-tui",
+  "version": "0.8.3",
+  "description": "Trident — AI penetration-testing agent. Run it with `npx trident-tui`; it bootstraps everything and prompts for your API key.",
+  "bin": {
+    "trident-tui": "bin/cli.js"
+  },
+  "files": [
+    "bin/",
+    "vendor/",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=16"
+  },
+  "keywords": [
+    "security",
+    "pentest",
+    "penetration-testing",
+    "vulnerability",
+    "scanner",
+    "ai",
+    "agent",
+    "cli",
+    "trident"
+  ],
+  "license": "Apache-2.0",
+  "preferGlobal": true,
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/esprit-labs/trident-web-pentesting.git"
+  }
+}