[Firehed]

Problem

Code in a class body outside its methods sees variables from the code around the class:

class A {
    public function m(): object {
        $local = 1;
        return new class {
            public int $p = 1; // the scope here lists $local
        };
    }
}

$top = 1;
class B {
    public int $q = 1; // the scope here lists $top
}

PHP evaluates property defaults, constant values, and enum case values as constant expressions, which cannot read a variable, and a class body sees nothing of the code that declares the class.

Cause

Scope::at walks up from a position and keeps the first class-like and the first function-like it meets, without checking that the function-like is inside the class-like.
So a position in new class { … } inside a method pairs the anonymous class with the outer method, and takes that method's variables.
A class body with no function-like around it is read as the file's global scope, and takes the file's top-level variables.

Change

• Scope::at stops looking for a function-like once it has passed a class-like.
• A scope with a class-like and no function-like is a class body, and holds no statements that bind variables.

Behavior

At a position in a class body outside any method, no variable from around the class is visible, so variable completion offers none of them.
$this was already unbound in these positions, since its type came from the class's name, and that stays true.

This prepares for binding $this in an anonymous class's methods, which without it would also bind $this in that class's property defaults.
It is groundwork for #881.

Tests

VariableBindingsTest checks a property default in an anonymous class inside a method, and in a class after top-level code.

Known limits

Found during review, in code this pull request does not change:

• A position in a class body must not count as inside a call around the class #900: the walk that decides which call's arguments a position is in also does not stop at a class body.
• A function's header must not see its own parameters or $this #901: a function-like's header sees its own parameters and $this.

🤖 Generated with Claude Code

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 99.71%. Comparing base (44f6a1f) to head (a348eb4).
⚠️ Report is 1 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@            Coverage Diff            @@
##               main     #902   +/-   ##
=========================================
  Coverage     99.71%   99.71%           
- Complexity     1970     1973    +3     
=========================================
  Files           147      147           
  Lines          4488     4490    +2     
=========================================
+ Hits           4475     4477    +2     
  Misses           13       13           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.