Add terminal quick fix for npm vulnerability warnings

[Copilot]

Adds terminal quick fix support for npm audit commands suggested in vulnerability warnings after npm install.

Changes

extensions/npm/package.json:

• New terminalQuickFixes entry matching output containing "vulnerabilities"
• Captures 2000 characters, 20 lines of context from terminal bottom

extensions/npm/src/npmMain.ts:

• Quick fix provider extracts npm audit commands line-by-line
• Regex /npm\s+audit(?:\s+[^\s]+)*/ captures all command variants including flags
• Deduplicates commands, removes backticks

Example

When npm outputs:

13 high severity vulnerabilities

To address issues that do not require attention, run:
  npm audit fix

To address all issues possible (including breaking changes), run:
  npm audit fix --force

Run `npm audit` for details.

Users now get clickable quick fixes for npm audit, npm audit fix, and npm audit fix --force.

Original prompt

---

This section details on the original issue you should resolve

<issue_title>Add quick fix for npm vulnerabilities</issue_title>
<issue_description>Suggestion from Brigit that we cover this type of output with a quick fix:

Currently npm quick fixes:

vscode/extensions/npm/src/npmMain.ts

Lines 74 to 96 in 45feb8c

	context.subscriptions.push(vscode.window.registerTerminalQuickFixProvider('ms-vscode.npm-command', {
	provideTerminalQuickFixes({ outputMatch }) {
	if (!outputMatch) {
	return;
	}
	const lines = outputMatch.regexMatch[1];
	const fixes: vscode.TerminalQuickFixTerminalCommand[] = [];
	for (const line of lines.split('\n')) {
	// search from the second char, since the lines might be prefixed with
	// "npm ERR!" which comes before the actual command suggestion.
	const begin = line.indexOf('npm', 1);
	if (begin === -1) {
	continue;
	}
	const end = line.lastIndexOf('#');
	fixes.push({ terminalCommand: line.slice(begin, end === -1 ? undefined : end - 1) });
	}
	return fixes;
	},
	}));

</issue_description>

Comments on the Issue (you are @copilot in this section)

• Fixes Add quick fix for npm vulnerabilities #225611

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.