feat: generate agent instructions

[Dakuan]

Description

Describe the problem or feature in addition to a link to the relevant github issues.

Addresses

• <Enter the Link to the issue(s) this PR addresses>
• ...more if required

App Export

• If possible, attach an app export file along with your request template to make QA testing easier, with minimal setup.

Screenshots

If a UI facing feature, a short video of the happy path, and some screenshots of the new functionality.

Launchcontrol

Add a small description in layman's terms of what this PR achieves. This will be used in the release notes.

[Dakuan]

@cubic-dev-ai

[cubic-dev-ai]

@cubic-dev-ai

@Dakuan I have started the AI code review. It will take a few minutes to complete.

[cubic-dev-ai]

2 issues found across 11 files

Confidence score: 2/5

• Merge risk is high because there are two high-confidence, user-impacting issues (sev 7/10 and 6/10), including one privacy/security concern.
• In packages/builder/src/pages/builder/workspace/[application]/agent/[agentId]/config.svelte, applying generated instructions does not trigger save, so users can lose newly generated prompt content.
• In packages/server/src/api/controllers/ai/agentInstructions.ts, logging raw request prompts can expose sensitive user data in server logs and should be removed or sanitized before merge.
• Pay close attention to packages/builder/src/pages/builder/workspace/[application]/agent/[agentId]/config.svelte, packages/server/src/api/controllers/ai/agentInstructions.ts - prevent prompt loss on apply and eliminate sensitive prompt logging.

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="packages/builder/src/pages/builder/workspace/[application]/agent/[agentId]/config.svelte">

<violation number="1" location="packages/builder/src/pages/builder/workspace/[application]/agent/[agentId]/config.svelte:662">
P1: Applying generated instructions does not trigger save, so the new prompt can be lost.</violation>
</file>

<file name="packages/server/src/api/controllers/ai/agentInstructions.ts">

<violation number="1" location="packages/server/src/api/controllers/ai/agentInstructions.ts:24">
P2: Do not log the raw prompt from request input; this can leak sensitive user data into server logs.</violation>
</file>

_{Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.}