feat(agent): CMP-1 add sandboxed builder and runner runtimes

[ripgrim]

Summary

Adds the Eve builder and runner runtimes, purpose-separated sessions, sandboxed subagents, scoped CRM tools, audit hooks, scheduling, evals, and runtime coverage.

Why

The durable domain needs a constrained execution layer that can build drafts and run deployed agents without leaking credentials or overreaching permissions.

Stack

Depends on trycompai/crm#59 — durable custom-agent domain.

1. trycompai/crm#59 — durable custom-agent domain
2. ripgrim/crm#2 — sandboxed builder and runner runtimes
3. ripgrim/crm#3 — CRM UI foundations
4. ripgrim/crm#4 — private agent-builder workspace
5. ripgrim/crm#5 — pre-deployment draft review
6. ripgrim/crm#6 — builder presentation
7. ripgrim/crm#7 — inline composer context

Verification

• Full typecheck passes
• Lint passes
• Database-backed suites require DATABASE_URL

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 4057e73b-d8e6-4a7e-bffd-3cc8f45e8625

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[ripgrim]

Superseded by trycompai#60.