feat: initial HyperAgent — sandboxed JS execution agent with plugin system

- Copilot SDK agent with Hyperlight micro-VM sandboxed JavaScript execution
- Plugin infrastructure with audit/approve/enable lifecycle
- Anti-prompt-injection sanitization for plugin audits (esbuild minify + string redaction)
- Static scanner for dangerous patterns (child_process, eval, fs, network access)
- Plugins: fetch (HTTP with domain allowlisting), fs-read, fs-write (jailed I/O)
- Session transcripts (.log with ANSI, .txt stripped clean)
- Command suggestions with fuzzy matching
- Resource stats in tool results (CPU/wall utilisation tracking)
- 629 tests, all green

Author: simongdavies

.gitignore

@@ -0,0 +1,14 @@
+# Dependencies
+node_modules/
+deps/
+
+# TypeScript build output
+dist/
+
+# Log files generated by --show-code / --show-timing
+hyperagent-code-*.log
+hyperagent-timing-*.jsonl
+
+# OS files
+.DS_Store
+Thumbs.db

Justfile

@@ -0,0 +1,85 @@
+# ── HyperAgent Justfile ───────────────────────────────────────────────
+#
+# Build, test, lint, and run the HyperAgent standalone project.
+#
+# Prerequisites:
+#   - Node.js >= 18
+#   - npm
+#   - Rust toolchain (for building the native hyperlight-js addon)
+#   - KVM support (for running the Hyperlight micro-VM)
+#
+# First-time setup:
+#   just setup       # clones + builds hyperlight-js, installs npm deps
+#
+# ─────────────────────────────────────────────────────────────────────
+
+# The hyperlight-js repo URL and ref to build against
+hyperlight-repo   := "git@github.com:deislabs/hyperlight-js.git"
+hyperlight-ref    := "copilot-sdk-example"
+hyperlight-dir    := justfile_dir() / "deps" / "hyperlight-js"
+
+# Clone (or update) the hyperlight-js dependency at the pinned ref
+[private]
+fetch-hyperlight:
+    #!/usr/bin/env bash
+    set -euo pipefail
+    if [ ! -d "{{hyperlight-dir}}" ]; then
+        echo "⬇  Cloning hyperlight-js ({{hyperlight-ref}})…"
+        git clone --branch "{{hyperlight-ref}}" --single-branch --depth 1 \
+            "{{hyperlight-repo}}" "{{hyperlight-dir}}"
+    else
+        echo "↻  Updating hyperlight-js to {{hyperlight-ref}}…"
+        cd "{{hyperlight-dir}}"
+        git fetch origin "{{hyperlight-ref}}" --depth 1
+        git checkout FETCH_HEAD
+    fi
+
+# Build the native hyperlight-js NAPI addon
+[private]
+build-hyperlight: fetch-hyperlight
+    cd "{{hyperlight-dir}}" && just build
+
+# Install npm deps (links hyperlight-js from deps/)
+[private]
+install: build-hyperlight
+    npm install
+
+# ── First-time setup ─────────────────────────────────────────────────
+
+# Clone hyperlight-js, build native addon, install npm deps
+setup: install
+    @echo "✅ Setup complete — run 'just start' to launch the agent"
+
+# ── Development ──────────────────────────────────────────────────────
+
+# Build/rebuild the native hyperlight-js addon and install deps
+build: install
+    @echo "✅ Build complete — run 'just start' to launch the agent"
+
+# Run the agent (tsx transpiles on the fly — no build step needed)
+start *ARGS: install
+    npx tsx agent.ts {{ARGS}}
+
+# Run tests
+test: install
+    npm test
+
+# Type-check (may have pre-existing SDK type drift errors)
+typecheck: install
+    npm run typecheck
+
+# Format code
+fmt: install
+    npm run fmt
+
+# Check formatting
+fmt-check: install
+    npm run fmt:check
+
+# Clean build artifacts (keeps deps/)
+clean:
+    rm -rf dist node_modules
+
+# Clean everything including the hyperlight-js clone
+clean-all: clean
+    rm -rf deps