trident-tui 0.9.4 → 0.9.5

package/README.md

@@ -10,7 +10,7 @@ On first run it:
 
 1. installs [`uv`](https://docs.astral.sh/uv/) (a fast Python manager) if you don't have it,
 2. pulls the Docker sandbox image,
-3. opens a **Configure LLM** screen where you paste your model (e.g. `anthropic/claude-sonnet-4-6`) and **API key** — saved to `~/.strix/cli-config.json`, so you only do it once.
+3. opens a **Configure LLM** screen where you paste your model (e.g. `anthropic/claude-sonnet-4-6`) and **API key** — saved to `~/.trident/cli-config.json`, so you only do it once.
 
 Then scan something:
 
@@ -20,7 +20,7 @@ npx trident-tui --target ./my-project
 npx trident-tui --help
 ```
 
-> The first run also installs a global **`trident`** (and `strix`) command. Open a
+> The first run also installs a global **`trident`** (and `trident`) command. Open a
 > new terminal afterwards and you can just run `trident …` directly — no `npx`
 > needed.
 

package/bin/cli.js

@@ -10,7 +10,7 @@
  *
  * On first run Trident opens a "Configure LLM" screen and asks for your model
  * (e.g. anthropic/claude-sonnet-4-6) and API key. Settings are saved to
- * ~/.strix/cli-config.json so you only enter them once.
+ * ~/.trident/cli-config.json so you only enter them once.
  *
  * Docker is required (the security tools run inside a sandbox container).
  */
@@ -82,6 +82,19 @@ function findWheel() {
   return files.length ? path.join(vendor, files[0]) : null;
 }
 
+// Legacy sandbox image from the old build. Named here ONLY so we can delete it
+// from machines that upgraded — it is never pulled or shown to the user.
+const LEGACY_SANDBOX_IMAGE = 'ghcr.io/usestrix/strix-sandbox:0.1.13';
+
+// Best-effort: remove the old sandbox image once the new one is in place, to
+// reclaim disk on upgraded machines. Silent — failures are ignored.
+function removeLegacyImage() {
+  if (!commandPath('docker')) return;
+  if (spawnSync('docker', ['image', 'inspect', LEGACY_SANDBOX_IMAGE], { stdio: 'ignore' }).status === 0) {
+    spawnSync('docker', ['image', 'rm', '-f', LEGACY_SANDBOX_IMAGE], { stdio: 'ignore' });
+  }
+}
+
 // Pre-pull the sandbox image with the docker CLI. This is far more reliable
 // than letting the Python SDK stream the pull on first run (esp. on Windows).
 function prePullImage() {
@@ -100,12 +113,17 @@ function prePullImage() {
   }
   if (spawnSync('docker', ['image', 'inspect', SANDBOX_IMAGE], { stdio: 'ignore' }).status === 0) {
     log('[ok] Docker sandbox image already present.');
+    removeLegacyImage();
     return;
   }
   log('Downloading the Docker sandbox image (one-time, a few GB)...');
   const r = spawnSync('docker', ['pull', SANDBOX_IMAGE], { stdio: 'inherit' });
-  if (r.status === 0) log('[ok] Sandbox image downloaded.');
-  else log('[!] Could not pull the image now; Trident will retry on your first scan.');
+  if (r.status === 0) {
+    log('[ok] Sandbox image downloaded.');
+    removeLegacyImage();
+  } else {
+    log('[!] Could not pull the image now; Trident will retry on your first scan.');
+  }
 }
 
 function main() {
@@ -126,9 +144,9 @@ function main() {
   }
 
   // Version baked into the bundled wheel filename (matches both the legacy
-  // `strix_agent-` and the new `trident_agent-` naming).
+  // `trident_agent-` and the new `trident_agent-` naming).
   const wheelVer =
-    (path.basename(wheel).match(/(?:strix|trident)_agent-(\d+\.\d+\.\d+)/) || [])[1] || null;
+    (path.basename(wheel).match(/(?:trident|trident)_agent-(\d+\.\d+\.\d+)/) || [])[1] || null;
 
   // Return the working global `trident` version, or null if it is not installed
   // OR is installed-but-broken (a half-removed previous install throws
@@ -149,10 +167,10 @@ function main() {
     log('Installing the `trident` command (one-time)…');
     // Clear any previous (possibly broken or locked) install first, so a Windows
     // file lock on the old Scripts dir can't fail the --force reinstall. Both
-    // the legacy `strix-agent` and the current `trident-agent` tool names are
+    // the legacy `trident-agent` and the current `trident-agent` tool names are
     // cleared. Errors are ignored — the wheel fallback covers us regardless.
     spawnSync(uv, ['tool', 'uninstall', 'trident-agent'], { stdio: 'ignore' });
-    spawnSync(uv, ['tool', 'uninstall', 'strix-agent'], { stdio: 'ignore' });
+    spawnSync(uv, ['tool', 'uninstall', 'trident-agent'], { stdio: 'ignore' });
     const inst = spawnSync(uv, ['tool', 'install', '--force', wheel], { stdio: 'inherit' });
     if (inst.status === 0) {
       spawnSync(uv, ['tool', 'update-shell'], { stdio: 'ignore' });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trident-tui",
-  "version": "0.9.4",
+  "version": "0.9.5",
   "description": "Trident — AI penetration-testing agent. Run it with `npx trident-tui`; it bootstraps everything and prompts for your API key.",
   "bin": {
     "trident-tui": "bin/cli.js"