package linthost

import (
  "strings"
  "testing"
)

// TestRuleCorpusNoUnsafeMemberAccess verifies a reduced trigger from the lint rule corpus
// fixture typescript-no-unsafe-member-access.ts under a real Program.
//
// `typescript/no-unsafe-member-access` is type-aware: it asks the Checker for the
// receiver's static type at each `PropertyAccessExpression` and
// `ElementAccessExpression` and flags access against an `any` value. A parser-only
// engine run skips the rule because Context.Checker is nil, so this Go scenario
// reuses the `seedLintProject` shape established by `no-floating-promises` and
// `no-for-in-array`: materialize a tsconfig project, run `ttsc lint check`, and
// assert on the rendered diagnostics.
//
// The corpus fixture packages/lint/test/testdata/corpus/typescript-no-unsafe-member-access.ts is run by TestLintFixtureCorpus; this Go scenario locks the minimum-viable
// trigger (`anyValue.foo`) so a future shim regression surfaces here without
// depending on the full fixture.
//
// 1. Seed a project that reads a property off an `any` receiver.
// 2. Run `check` with typescript/no-unsafe-member-access enabled.
// 3. Assert the command exits non-zero and stderr mentions the rule.
//
// @evidence contracts/testing.md#behavioral-verification Property access on an any receiver must report.
// @evidence contracts/testing.md#independent-expectations The original authored input fixes exactly one typescript/no-unsafe-member-access rendered error at line 2, code 2 and empty stdout; its independently authored typed counterpart requires code 0 and no rule errors.
// @evidence contracts/testing.md#distinguishing-cases A concrete object property stays clean.
// @evidence contracts/testing.md#execution-ownership TestRuleCorpusNoUnsafeMemberAccess invokes the in-process check command and shared typed semantic oracles over real Program/Checker instances; fixture configuration feeds that operation without a native build, child compiler or installed consumer.
func TestRuleCorpusNoUnsafeMemberAccess(t *testing.T) {
  root := seedLintProject(t, `declare const anyValue: any;
const prop = anyValue.foo;
JSON.stringify({ prop });
`)
  seedLintRules(t, root, map[string]string{"typescript/no-unsafe-member-access": "error"})

  code, stdout, stderr := captureCommandOutput(t, func() int {
    return run([]string{
      "check",
      "--cwd", root,
      "--plugins-json", lintManifest(t),
    })
  })
  if code != 2 || stdout != "" || !strings.Contains(stderr, "[typescript/no-unsafe-member-access]") {
    t.Fatalf("no-unsafe-member-access diagnostic mismatch: code=%d stdout=%q stderr=%q", code, stdout, stderr)
  }
  assertTypedRuleRenderedErrors(t, "typescript/no-unsafe-member-access", stderr, 2)
  assertTypedRuleCleanSource(t, "typescript/no-unsafe-member-access", "declare const value: { foo: number };\nconst prop = value.foo;\n")
}