✨ Make SARIF diagnostics conversion asynchronous

Refactored SARIF conversion to async and optimized imports for clarity.

Author: pelikhan

.vscode/settings.json

@@ -19,6 +19,7 @@
         "blockslist",
         "cctx",
         "changeext",
+        "chattypes",
         "Chunker",
         "chunkers",
         "cmds",
@@ -133,13 +134,15 @@
         "promptdom",
         "promptfoo",
         "promptjson",
+        "promptrunner",
         "prompty",
         "pyodide",
         "quoteify",
         "qwen",
         "redteam",
         "RIPGREP",
         "RULEID",
+        "sarif",
         "SARIFF",
         "scriptid",
         "sglang",

packages/cli/src/run.ts

@@ -578,7 +578,7 @@ export async function runScriptInternal(
                     : /\.ya?ml$/i.test(outAnnotations)
                       ? YAMLStringify(result.annotations)
                       : /\.sarif$/i.test(outAnnotations)
-                        ? convertDiagnosticsToSARIF(script, result.annotations)
+                        ? await convertDiagnosticsToSARIF(script, result.annotations)
                         : JSON.stringify(result.annotations, null, 2)
             )
     }
@@ -644,7 +644,7 @@ export async function runScriptInternal(
     if (sariff)
         await writeText(
             sariff,
-            convertDiagnosticsToSARIF(script, result.annotations)
+            await convertDiagnosticsToSARIF(script, result.annotations)
         )
     if (changelogf && result.changelogs?.length)
         await writeText(changelogf, result.changelogs.join("\n"))

packages/cli/src/sarif.ts

@@ -1,9 +1,3 @@
-import {
-    SarifBuilder,
-    SarifRunBuilder,
-    SarifResultBuilder,
-    SarifRuleBuilder,
-} from "node-sarif-builder"
 import { relative } from "node:path"
 import {
     SARIFF_BUILDER_TOOL_DRIVER_NAME,
@@ -35,10 +29,17 @@ export function isSARIFFilename(f: string) {
  * @param issues - Array of diagnostic issues to convert. Each issue should include severity, message, filename, and range.
  * @returns A stringified SARIF JSON object representing the diagnostic issues, formatted with indentation for readability.
  */
-export function convertDiagnosticsToSARIF(
+export async function convertDiagnosticsToSARIF(
     template: PromptScript,
     issues: Diagnostic[]
 ) {
+    const {
+        SarifBuilder,
+        SarifRunBuilder,
+        SarifResultBuilder,
+        SarifRuleBuilder,
+    } = await import("node-sarif-builder")
+
     // Initialize a SARIF run with tool driver information
     const sarifRunBuilder = new SarifRunBuilder().initSimple({
         toolDriverName: SARIFF_BUILDER_TOOL_DRIVER_NAME,