autoremediator 0.19.0 → 0.20.0

package/dist/cli/program.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"program.d.ts","sourceRoot":"","sources":["../../src/cli/program.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAuJpC,wBAAgB,aAAa,IAAI,OAAO,CA+TvC"}
+{"version":3,"file":"program.d.ts","sourceRoot":"","sources":["../../src/cli/program.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAkJpC,wBAAgB,aAAa,IAAI,OAAO,CA+TvC"}

package/dist/cli/runners.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runners.d.ts","sourceRoot":"","sources":["../../src/cli/runners.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,CAAC;AAGhC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAkFjD,wBAAsB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAkJrF;AAED,wBAAsB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CA+KzF;AAED,wBAAsB,cAAc,CAClC,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,KAAK,GAAG,YAAY,GAAG,cAAc,CAAC,GAChE,OAAO,CAAC,IAAI,CAAC,CA2Bf;AAED,wBAAsB,eAAe,CACnC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,KAAK,GAAG,YAAY,GAAG,cAAc,CAAC,GAChE,OAAO,CAAC,IAAI,CAAC,CA4Bf;AAED,wBAAsB,gBAAgB,CACpC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,KAAK,GAAG,YAAY,GAAG,gBAAgB,GAAG,cAAc,CAAC,GACnF,OAAO,CAAC,IAAI,CAAC,CAgCf;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CA+C3E;AAED,wBAAsB,YAAY,CAAC,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CA6F/F;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAC1C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBhB;AAED,wBAAsB,WAAW,CAC/B,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE;IACJ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GACA,OAAO,CAAC,IAAI,CAAC,CA6Bf;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE;IACvC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,EAAE,CAAC,EAAE,OAAO,CAAC;CACd,GAAG,OAAO,CAAC,IAAI,CAAC,CAiChB;AAED,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,IAAI,CACR,cAAc,EACd,KAAK,GAAG,YAAY,GAAG,gBAAgB,GAAG,UAAU,GAAG,cAAc,CACtE,GAAG;IACF,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,GACA,OAAO,CAAC,IAAI,CAAC,CA2Bf"}
+{"version":3,"file":"runners.d.ts","sourceRoot":"","sources":["../../src/cli/runners.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,CAAC;AAGhC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAkFjD,wBAAsB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAiJrF;AAED,wBAAsB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CA8KzF;AAED,wBAAsB,cAAc,CAClC,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,KAAK,GAAG,YAAY,GAAG,cAAc,CAAC,GAChE,OAAO,CAAC,IAAI,CAAC,CA2Bf;AAED,wBAAsB,eAAe,CACnC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,KAAK,GAAG,YAAY,GAAG,cAAc,CAAC,GAChE,OAAO,CAAC,IAAI,CAAC,CA4Bf;AAED,wBAAsB,gBAAgB,CACpC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,KAAK,GAAG,YAAY,GAAG,gBAAgB,GAAG,cAAc,CAAC,GACnF,OAAO,CAAC,IAAI,CAAC,CAgCf;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CA+C3E;AAED,wBAAsB,YAAY,CAAC,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CA6F/F;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAC1C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBhB;AAED,wBAAsB,WAAW,CAC/B,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE;IACJ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GACA,OAAO,CAAC,IAAI,CAAC,CA6Bf;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE;IACvC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,EAAE,CAAC,EAAE,OAAO,CAAC;CACd,GAAG,OAAO,CAAC,IAAI,CAAC,CAiChB;AAED,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,IAAI,CACR,cAAc,EACd,KAAK,GAAG,YAAY,GAAG,gBAAgB,GAAG,UAAU,GAAG,cAAc,CACtE,GAAG;IACF,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,GACA,OAAO,CAAC,IAAI,CAAC,CA2Bf"}

package/dist/cli/triage.d.ts

@@ -1,7 +1,15 @@
+import * as readline from "node:readline/promises";
 import type { CommandOptions } from "./types.js";
+export interface InteractiveTriageOptions extends Omit<Partial<CommandOptions>, "input"> {
+    input?: string | NodeJS.ReadableStream;
+    output?: NodeJS.WritableStream;
+    rl?: readline.Interface;
+    vexOut?: string;
+}
 /**
  * Interactive developer CLI triage workflow.
  * Prompts developer through security findings with actions to apply, skip, suppress, or quit.
+ * Persists suppression actions to .github/autoremediator.yml, suppressions file, or CycloneDX VEX document.
  */
-export declare function runInteractiveTriage(inputPathOrOpts: string | Partial<CommandOptions>, maybeOpts?: Partial<CommandOptions>): Promise<void>;
+export declare function runInteractiveTriage(inputPathOrOpts: string | Partial<InteractiveTriageOptions>, maybeOpts?: Partial<InteractiveTriageOptions>): Promise<void>;
 //# sourceMappingURL=triage.d.ts.map

package/dist/cli/triage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"triage.d.ts","sourceRoot":"","sources":["../../src/cli/triage.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,EACjD,SAAS,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAClC,OAAO,CAAC,IAAI,CAAC,CAyIf"}
+{"version":3,"file":"triage.d.ts","sourceRoot":"","sources":["../../src/cli/triage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,wBAAwB,CAAC;AAQnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD,MAAM,WAAW,wBAAyB,SAAQ,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IACtF,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IAC/B,EAAE,CAAC,EAAE,QAAQ,CAAC,SAAS,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,EAC3D,SAAS,CAAC,EAAE,OAAO,CAAC,wBAAwB,CAAC,GAC5C,OAAO,CAAC,IAAI,CAAC,CAgMf"}

package/dist/cli/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/cli/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,WAAW,GAAG,YAAY,GAAG,OAAO,CAAC;AACvE,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,eAAe,CAAC;AAEvE,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,cAAc,EAAE,OAAO,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,YAAY,EAAE,YAAY,CAAC;IAE3B,WAAW,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,YAAY,GAAG,WAAW,GAAG,UAAU,CAAC;IAC3D,qBAAqB,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC7C,2BAA2B,EAAE,OAAO,CAAC;IACrC,iBAAiB,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC;IACvC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,SAAS,GAAG,SAAS,CAAC;IACvD,sBAAsB,EAAE,OAAO,CAAC;IAChC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,UAAU,GAAG,gBAAgB,GAAG,eAAe,CAAC;IAC9D,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB,EAAE,EAAE,OAAO,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,qBAAqB,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC5C,qBAAqB,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,aAAa,CAAC;IAC1D,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAGD,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAI9C"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/cli/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,WAAW,GAAG,YAAY,GAAG,OAAO,CAAC;AACvE,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,eAAe,CAAC;AAEvE,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,cAAc,EAAE,OAAO,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,YAAY,EAAE,YAAY,CAAC;IAE3B,WAAW,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,YAAY,GAAG,WAAW,GAAG,UAAU,CAAC;IAC3D,qBAAqB,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC7C,2BAA2B,EAAE,OAAO,CAAC;IACrC,iBAAiB,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC;IACvC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,SAAS,GAAG,SAAS,CAAC;IACvD,sBAAsB,EAAE,OAAO,CAAC;IAChC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,UAAU,GAAG,gBAAgB,GAAG,eAAe,CAAC;IAC9D,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB,EAAE,EAAE,OAAO,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,qBAAqB,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC5C,qBAAqB,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,aAAa,CAAC;IAC1D,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAI9C"}

package/dist/cli.js

@@ -16,6 +16,9 @@ import {
   remediate,
   remediateFromScan,
   remediatePortfolio,
+  saveSuppressionToFile,
+  saveSuppressionToPolicy,
+  saveSuppressionToVexDocument,
   scanDelta,
   toCiSummary,
   toCycloneDxVex,
@@ -23,7 +26,7 @@ import {
   uniqueCveIds,
   updateOutdated,
   validatePatchArtifact
-} from "./chunk-7BORIBPY.js";
+} from "./chunk-ZGLGT4XQ.js";
 
 // src/cli/index.ts
 import { fileURLToPath } from "url";
@@ -34,15 +37,17 @@ import { existsSync } from "fs";
 
 // src/cli/triage.ts
 import * as readline from "readline/promises";
-import { stdin as input, stdout as output } from "process";
+import { stdin as defaultInput, stdout as defaultOutput } from "process";
 async function runInteractiveTriage(inputPathOrOpts, maybeOpts) {
-  const inputPath = typeof inputPathOrOpts === "string" ? inputPathOrOpts : inputPathOrOpts.input;
+  const inputPath = typeof inputPathOrOpts === "string" ? inputPathOrOpts : typeof inputPathOrOpts.input === "string" ? inputPathOrOpts.input : void 0;
   const opts = (typeof inputPathOrOpts === "object" ? inputPathOrOpts : maybeOpts) ?? {};
   const cwd = opts.cwd ?? process.cwd();
-  output.write("\n\u{1F50D} Scanning for security findings to triage...\n");
+  const outStream = opts.output ?? defaultOutput;
+  const inStream = opts.input && typeof opts.input !== "string" ? opts.input : defaultInput;
+  outStream.write("\n\u{1F50D} Scanning for security findings to triage...\n");
   let findings = [];
   try {
-    if (inputPath) {
+    if (inputPath && typeof inputPath === "string") {
       findings = parseScanInput(inputPath, opts.format ?? "auto");
     } else {
       findings = await parseScanInputFromAudit({
@@ -53,7 +58,7 @@ async function runInteractiveTriage(inputPathOrOpts, maybeOpts) {
       });
     }
   } catch (err) {
-    output.write(
+    outStream.write(
       `Failed to load scan findings: ${err instanceof Error ? err.message : String(err)}
 `
     );
@@ -61,12 +66,15 @@ async function runInteractiveTriage(inputPathOrOpts, maybeOpts) {
   }
   const cveIds = uniqueCveIds(findings);
   if (cveIds.length === 0) {
-    output.write("\u2728 No vulnerabilities found to triage!\n\n");
+    outStream.write("\u2728 No vulnerabilities found to triage!\n\n");
     return;
   }
-  output.write(`Found ${cveIds.length} unique vulnerability(ies) to triage.
+  outStream.write(`Found ${cveIds.length} unique vulnerability(ies) to triage.
 `);
-  const rl = readline.createInterface({ input, output });
+  const rl = opts.rl ?? readline.createInterface({
+    input: inStream,
+    output: outStream
+  });
   let remediatedCount = 0;
   let skippedCount = 0;
   let suppressedCount = 0;
@@ -90,18 +98,18 @@ async function runInteractiveTriage(inputPathOrOpts, maybeOpts) {
         } catch {
         }
       }
-      output.write("\n" + "=".repeat(60) + "\n");
-      output.write(`[${i + 1}/${cveIds.length}] Vulnerability: ${cveId}
+      outStream.write("\n" + "=".repeat(60) + "\n");
+      outStream.write(`[${i + 1}/${cveIds.length}] Vulnerability: ${cveId}
 `);
-      output.write(`  Package:  ${pkgName}
+      outStream.write(`  Package:  ${pkgName}
 `);
-      output.write(`  Severity: ${severity}
+      outStream.write(`  Severity: ${severity}
 `);
       if (safeVersion) {
-        output.write(`  Safe Upstream Version: ${safeVersion}
+        outStream.write(`  Safe Upstream Version: ${safeVersion}
 `);
       }
-      output.write("=".repeat(60) + "\n");
+      outStream.write("=".repeat(60) + "\n");
       let answered = false;
       while (!answered) {
         const answer = await rl.question(
@@ -109,7 +117,7 @@ async function runInteractiveTriage(inputPathOrOpts, maybeOpts) {
         );
         const choice = answer.trim().toLowerCase();
         if (choice === "a" || choice === "apply") {
-          output.write(`Applying remediation for ${cveId}...
+          outStream.write(`Applying remediation for ${cveId}...
 `);
           try {
             const report = await remediate(cveId, {
@@ -126,17 +134,17 @@ async function runInteractiveTriage(inputPathOrOpts, maybeOpts) {
             });
             const applied = report.results.some((r) => r.applied);
             if (applied) {
-              output.write(`\u2705 Successfully applied remediation for ${cveId}!
+              outStream.write(`\u2705 Successfully applied remediation for ${cveId}!
 `);
               remediatedCount++;
             } else {
               const reason = report.results[0]?.unresolvedReason ?? "unresolved";
-              output.write(`\u26A0\uFE0F Remediation could not be applied automatically (${reason}).
+              outStream.write(`\u26A0\uFE0F Remediation could not be applied automatically (${reason}).
 `);
               skippedCount++;
             }
           } catch (err) {
-            output.write(
+            outStream.write(
               `\u274C Error remediating ${cveId}: ${err instanceof Error ? err.message : String(err)}
 `
             );
@@ -144,33 +152,70 @@ async function runInteractiveTriage(inputPathOrOpts, maybeOpts) {
           }
           answered = true;
         } else if (choice === "s" || choice === "skip" || choice === "") {
-          output.write(`Skipped ${cveId}.
+          outStream.write(`Skipped ${cveId}.
 `);
           skippedCount++;
           answered = true;
         } else if (choice === "x" || choice === "suppress") {
-          output.write(`Marked ${cveId} as suppressed / VEX excluded.
+          outStream.write(`Configuring suppression / VEX record for ${cveId}...
+`);
+          const justAnswer = await rl.question(
+            "Justification: [1] not_affected (default), [2] mitigated, [3] under_investigation, [4] fixed: "
+          );
+          const justChoice = justAnswer.trim().toLowerCase();
+          let justification = "not_affected";
+          if (justChoice === "2" || justChoice === "mitigated") {
+            justification = "mitigated";
+          } else if (justChoice === "3" || justChoice === "under_investigation") {
+            justification = "under_investigation";
+          } else if (justChoice === "4" || justChoice === "fixed") {
+            justification = "fixed";
+          } else {
+            justification = "not_affected";
+          }
+          const notesAnswer = await rl.question(
+            "Notes/rationale for suppression (optional, press Enter to skip): "
+          );
+          const notes = notesAnswer.trim() || void 0;
+          const suppression = {
+            cveId,
+            justification,
+            notes
+          };
+          let persistedTarget = "";
+          if (opts.suppressionsFile) {
+            saveSuppressionToFile(opts.suppressionsFile, suppression);
+            persistedTarget = opts.suppressionsFile;
+          } else {
+            persistedTarget = saveSuppressionToPolicy(cwd, suppression, opts.policy);
+          }
+          if (opts.vexOut) {
+            saveSuppressionToVexDocument(opts.vexOut, suppression);
+            outStream.write(`  \u{1F4C4} Saved VEX statement to: ${opts.vexOut}
+`);
+          }
+          outStream.write(`\u2705 Persisted suppression for ${cveId} to ${persistedTarget}
 `);
           suppressedCount++;
           answered = true;
         } else if (choice === "q" || choice === "quit") {
-          output.write("Exiting triage session.\n");
+          outStream.write("Exiting triage session.\n");
           return;
         } else {
-          output.write("Invalid option. Please choose 'a', 's', 'x', or 'q'.\n");
+          outStream.write("Invalid option. Please choose 'a', 's', 'x', or 'q'.\n");
         }
       }
     }
   } finally {
     rl.close();
-    output.write("\n=== Triage Summary ===\n");
-    output.write(`Total evaluated: ${cveIds.length}
+    outStream.write("\n=== Triage Summary ===\n");
+    outStream.write(`Total evaluated: ${cveIds.length}
 `);
-    output.write(`Remediated:     ${remediatedCount}
+    outStream.write(`Remediated:     ${remediatedCount}
 `);
-    output.write(`Suppressed:     ${suppressedCount}
+    outStream.write(`Suppressed:     ${suppressedCount}
 `);
-    output.write(`Skipped:        ${skippedCount}
+    outStream.write(`Skipped:        ${skippedCount}
 
 `);
   }
@@ -984,11 +1029,7 @@ function addSharedOptions(program, includeInput = false, includeSimulationMode =
   ).option("--hold-for-transitive", OPTION_DESCRIPTIONS.dispositionPolicyHoldForTransitive, false).option("--escalate-on-kev", OPTION_DESCRIPTIONS.dispositionPolicyEscalateOnKev, false).option("--containment-mode", OPTION_DESCRIPTIONS.containmentMode, false).option("--campaign-mode", OPTION_DESCRIPTIONS.campaignMode, false).option("--offline", OPTION_DESCRIPTIONS.offlineIntelligence, false).option("--intelligence-snapshot <path>", OPTION_DESCRIPTIONS.intelligenceSnapshotPath).option("--create-change-request", OPTION_DESCRIPTIONS.createChangeRequest, false).option("--change-request-provider <provider>", OPTION_DESCRIPTIONS.changeRequestProvider).option("--change-request-grouping <grouping>", OPTION_DESCRIPTIONS.changeRequestGrouping).option("--change-request-repository <repository>", OPTION_DESCRIPTIONS.changeRequestRepository).option("--change-request-base-branch <branch>", OPTION_DESCRIPTIONS.changeRequestBaseBranch).option(
     "--change-request-branch-prefix <prefix>",
     OPTION_DESCRIPTIONS.changeRequestBranchPrefix
-  ).option("--change-request-title-prefix <prefix>", OPTION_DESCRIPTIONS.changeRequestTitlePrefix).option("--proof-of-fix", OPTION_DESCRIPTIONS.proofOfFix, false).option("--require-proof-of-fix", OPTION_DESCRIPTIONS.requireProofOfFix, false).option(
-    "--breaking-change-refactor",
-    OPTION_DESCRIPTIONS.breakingChangeRefactor,
-    false
-  );
+  ).option("--change-request-title-prefix <prefix>", OPTION_DESCRIPTIONS.changeRequestTitlePrefix).option("--proof-of-fix", OPTION_DESCRIPTIONS.proofOfFix, false).option("--require-proof-of-fix", OPTION_DESCRIPTIONS.requireProofOfFix, false).option("--breaking-change-refactor", OPTION_DESCRIPTIONS.breakingChangeRefactor, false);
   if (includeSimulationMode) {
     program.option("--simulation-mode", OPTION_DESCRIPTIONS.simulationMode, false);
   }