fix(aws): auto-select server size by agent

[AhmedTMM]

Summary

• Auto-select AWS Lightsail bundle: 4GB (medium_3_0) for OpenClaw, 2GB (small_3_0) for all other agents
• Users are no longer prompted for instance size by default — matches DO and Hetzner behavior
• Override with SPAWN_CUSTOM=1 (interactive picker) or LIGHTSAIL_BUNDLE=<id> (explicit)
• Default bundle changed from nano (512MB/$3.50) to small (2GB/$10) since 512MB is too small for most agents

Test plan

• spawn openclaw aws → auto-selects medium_3_0 (4GB)
• spawn claude aws → auto-selects small_3_0 (2GB)
• spawn claude aws --custom → shows instance size picker
• LIGHTSAIL_BUNDLE=nano_3_0 spawn claude aws → uses nano override

🤖 Generated with Claude Code

[louisgv]

Security Review

Verdict: CHANGES REQUESTED
Commit: 7907c7d

Findings

• LOW packages/cli/src/aws/aws.ts:699 — New env var gate SPAWN_CUSTOM introduces additional control flow. No injection risk detected, but adds complexity to bundle selection logic.
• BLOCKER packages/cli/src/tests/aws.test.ts:173 — Test expects DEFAULT_BUNDLE.id to be "nano_3_0" but PR changed it to "small_3_0". Test must be updated to pass.

Tests

• bash -n: N/A (no .sh files changed)
• bun test: FAIL (1 test failure in aws.test.ts line 173)
• curl|bash: N/A
• macOS compat: N/A

Required Fix

Update the test expectation in packages/cli/src/__tests__/aws.test.ts:173:

it("is small_3_0", () => {
  expect(DEFAULT_BUNDLE.id).toBe("small_3_0");
});

---

-- security/pr-reviewer

[louisgv]

Security Review

Verdict: APPROVED
Commit: d16d340

Findings

No security issues found. Changes reviewed:

• DEFAULT_BUNDLE upgraded from nano_3_0 (512 MB) to small_3_0 (2 GB) — reasonable for modern agents
• Auto-select logic now requires explicit SPAWN_CUSTOM=1 to show interactive bundle picker
• No injection risks, credential leaks, or unsafe patterns introduced

Tests

• bash -n: N/A (no .sh files changed)
• bun test: PASS (1417/1417 tests passing)
• curl|bash: N/A
• macOS compat: N/A (TypeScript changes only)

Verdict

Clean security review. All tests pass. Ready to merge.

---

-- security/pr-reviewer

[louisgv]

Security Review

Verdict: APPROVED
Commit: 8715a187b5e7a77f5ca9a5b9af7bc2aaf8c9fd68

Findings

No security issues found. Changes reviewed:

• DEFAULT_BUNDLE upgraded from nano_3_0 (512 MB) to small_3_0 (2 GB) — reasonable for modern agents
• Auto-select logic now requires explicit SPAWN_CUSTOM=1 to show interactive bundle picker
• Version conflict with main resolved (bumped to 0.19.7)
• No injection risks, credential leaks, or unsafe patterns introduced

Tests

• bash -n: N/A (no .sh files changed)
• bun test: PASS (1417/1417 tests passing)
• curl|bash: N/A
• macOS compat: N/A (TypeScript changes only)

CI Status

All checks passing:

• ✓ ShellCheck: SUCCESS
• ✓ Biome Lint: SUCCESS
• ✓ Unit Tests: SUCCESS
• ✓ Mock Tests: SUCCESS
• ✓ macOS Compatibility: SUCCESS

Verdict

Clean security review. All tests and checks pass. Ready to merge.

---

-- security/pr-reviewer