[codex] keep scoped package references as text

[maxwellyoung]

Fixes #4142.

What changed

• keep common unquoted @scope/package references as plain composer text instead of file-mention pills
• preserve canonical autocomplete-generated file links, including paths under @scope/
• preserve explicit quoted path mentions for ambiguous paths
• add regression coverage at the shared tokenizer, web segmentation, and Lexical paste-command boundaries

Why

The shared inline-token grammar treated every whitespace-delimited @value as a file mention. The paste handler appends a virtual delimiter before parsing, so pasting a command such as yarn expo install @expo/ui immediately converted the package reference into a folder pill.

Scoped package syntax is ambiguous with a bare relative path. Current file autocomplete already serializes selected paths as canonical Markdown file links, so leaving the ambiguous bare form as package text fixes the paste behavior without weakening selected file mentions. The shared tokenizer is used by web and native mobile composers.

Verification

• vp check (passes with 10 existing warnings outside this diff)
• vp run typecheck
• focused tokenizer, segmentation, and paste tests: 32 passed
• vp test: 608 files and 4,829 tests passed; 2 files and 7 tests skipped by the existing suite
• git diff --check

Note

Skip scoped package references as mention tokens in composer inline parsing

• Adds SCOPED_PACKAGE_REFERENCE_REGEX in composerInlineTokens.ts to detect paths like @scope/pkg or @scope/pkg/sub/path.
• Unquoted @ mentions matching the scoped package pattern are now skipped by collectMentionTokens; quoted mentions (e.g. @"expo/ui") and canonical markdown file links (e.g. [sub](@scope/pkg/sub)) are still collected.
• Paste handling in the composer editor also falls back to plain text for scoped package strings, preventing accidental mention creation from pasted install commands or import statements.
• Behavioral Change: text like @expo/ui or @jane/foo.js that previously may have been treated as mentions will now remain plain text.

^{Macroscope summarized ef9d15a.}

---

Note

Low Risk
Composer mention parsing only, with broad test coverage and no auth or data-path changes; intentional behavior change for ambiguous @scope/pkg bare text.

Overview
Stops unquoted @scope/package text (e.g. in yarn expo install @expo/ui) from becoming file-mention pills by skipping those paths in the shared collectComposerInlineTokens grammar via SCOPED_PACKAGE_REFERENCE_REGEX.

Canonical markdown file links like [sub](@scope/pkg/sub) and quoted mentions like @"expo/ui" still resolve as mentions; bare @README.md-style paths are unchanged. Regression tests cover the shared tokenizer, web prompt segmentation, Lexical paste handling, and expanded/collapsed cursor mapping when package-like text sits next to real mentions.

^{Reviewed by Cursor Bugbot for commit ef9d15a. Bugbot is set up for automated code reviews on this repo. Configure here.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: 1fe23e02-f5dd-41c5-832c-5b186e7c3e6b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[macroscopeapp]

Approvability

Verdict: Approved

Straightforward bug fix that prevents scoped npm package references (e.g., @expo/ui) from being incorrectly parsed as file mentions. The code change is minimal (3 lines adding a regex check) with comprehensive test coverage across 4 test files.

^{You can customize Macroscope's approvability policy. Learn more.}

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit dd78482. Configure here.}