fix(javascript): invalidate Electron reads after direct eval (#7053)

src/domain/javascript/javascriptSemanticAnalysis.eval_effects.test.ts

@@ -1,6 +1,9 @@
 import { expect, it } from "vitest";
 import { analyzeJavaScriptSemantics } from "./javascriptSemanticAnalysis.js";
-import { onlyCallable } from "./javascriptSemanticAnalysis.fixture.js";
+import {
+  onlyBinding,
+  onlyCallable,
+} from "./javascriptSemanticAnalysis.fixture.js";
 const returned = (body: string) =>
   onlyCallable(analyzeJavaScriptSemantics(body), "run").returnSites[0]?.value;
 
@@ -20,6 +23,23 @@ it.each([
   expect(returned(source)).toMatchObject({ status: "unknown" });
 });
 
+it("retains uncertainty for outer function declarations across eval-bearing calls", () => {
+  const ir = analyzeJavaScriptSemantics(
+    'function value(){} function run(){const saved=value;eval("value=2");return saved;} run();run();',
+  );
+  expect(onlyBinding(ir, "saved").provenance.status).toBe("ambiguous");
+});
+
+it.each(["||=", "??="])(
+  "does not treat %s as a fresh reset before eval",
+  (operator) => {
+    const ir = analyzeJavaScriptSemantics(
+      `let value; function run(){value ${operator} 1;const saved=(0,value);eval('value=require("node:fs")');return saved;}run();run();`,
+    );
+    expect(onlyBinding(ir, "saved").provenance.status).toBe("ambiguous");
+  },
+);
+
 it.each([
   'eval("var value=2"); function run(){const value=1;return value;}',
   'export function run(){const value={n:1};const saved=value.n;eval("value.n=2");return saved;}',