test(bench): add JS fixture for bare-call class-scoped lookup regression guard (#1407)

Adds class-scope.js to the JS resolution benchmark. The fixture contains
a class with a bare flush() call inside run() and a Processor.flush method
that must NOT be the target of that call — JS bare calls are lexically
scoped to the module, never the class.

The 1.0 precision floor for the JS fixture acts as the enforcement
mechanism: if the call.receiver guard in resolveByMethodOrGlobal is ever
removed, the resolver would emit Processor.run → Processor.flush as a
false positive, immediately failing CI.

Closes #1407

Author: carlos-alm

tests/benchmarks/resolution/fixtures/javascript/class-scope.js

@@ -0,0 +1,21 @@
+// Regression guard: bare function calls in JS class methods must NOT resolve
+// to same-named class methods. In JS/TS, bare foo() is lexically scoped to
+// the module, not the class — there is no implicit this binding on bare calls.
+//
+// If the call.receiver guard in resolveByMethodOrGlobal (call-resolver.ts) is
+// ever removed, the resolver would incorrectly emit Processor.run → Processor.flush
+// (a false positive). The 1.0 precision floor on the JS fixture catches that
+// regression immediately.
+
+export function processData(x) {
+  return x * 2;
+}
+
+export class Processor {
+  run(x) {
+    processData(x); // same-file module-level function — resolves correctly
+    flush(); // bare call; no module-level 'flush' in scope — must NOT resolve to Processor.flush
+  }
+
+  flush() {} // Processor.flush exists; bare flush() in run() must not target it
+}

tests/benchmarks/resolution/fixtures/javascript/expected-edges.json

@@ -275,6 +275,13 @@
       "kind": "calls",
       "mode": "receiver-typed",
       "notes": "this.service.doB() — receiver-typed via ClassB.service = new ServiceB() (class-scoped typeMap key prevents collision with ClassA.service)"
+    },
+    {
+      "source": { "name": "Processor.run", "file": "class-scope.js" },
+      "target": { "name": "processData", "file": "class-scope.js" },
+      "kind": "calls",
+      "mode": "same-file",
+      "notes": "Bare call to same-file module-level function — regression guard: bare flush() in run() must NOT resolve to Processor.flush (class-scoped lookup must be receiver-gated)"
     }
   ]
 }

tests/benchmarks/resolution/resolution-benchmark.test.ts

@@ -125,7 +125,8 @@ const THRESHOLDS: Record<string, { precision: number; recall: number }> = {
   //   adds bind/call/apply resolution (3 new edges in bind-call-apply.js), total expected now 33.
   //   Phase 8.3f adds Object.defineProperty accessor this-dispatch (#1335): getter→baz in
   //   define-property.js and accessorGetter→accessorTarget.accessMethod in define-property-accessor.js,
-  //   total expected now 35.
+  //   total expected now 35. multi-class.js adds 4 class-scoped typeMap edges → 39.
+  //   #1407 adds class-scope.js (bare-call guard), +1 → total 40.
   javascript: { precision: 1.0, recall: 0.9 },
   // pts-javascript: hand-authored points-to JS fixture (for-of, Set, Array.from, spread) — patterns
   //   too broad for the main JS fixture. Patterns split per file to prevent intra-fixture FPs.