An "agentic-first" CRM argues the agent should own the database, 8,281 stars in 12 days.

trycompai/crm launched July 31 with the inversion "the agent is not a feature of the CRM; the CRM is where the agent keeps its notes" (GitHub). Runs on eve, Vercel's filesystem-first durable-agent framework, with 18 authored tools, 4 skills as versioned markdown, and a resumable work queue using FOR UPDATE SKIP LOCKED so processing survives the browser closing. The design choices I like: no MCP server at all, and a sandbox with bash/grep/glob but deny-all egress and no database access. The README says tools report observations only and reject confidence scores outright. Refusing to let the model emit a made-up confidence number is a small decision that prevents a whole class of downstream nonsense.