From d7f031bc5ff886c33b776fec992746465ff6db02 Mon Sep 17 00:00:00 2001
From: Viktor Barzin <viktorbarzin@meta.com>
Date: Sun, 1 Mar 2026 17:12:03 +0000
Subject: [PATCH] [ci skip] openclaw: set workspace + enable elevated + native
 commands

- Set workspace to /workspace/infra (was defaulting to ~/.openclaw/workspace)
- Enable tools.elevated for unrestricted access
- Enable commands.native and commands.nativeSkills
- All tools, commands, and skills now fully accessible
---
 stacks/openclaw/main.tf | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/stacks/openclaw/main.tf b/stacks/openclaw/main.tf
index 4bc0d055..66eac449 100644
--- a/stacks/openclaw/main.tf
+++ b/stacks/openclaw/main.tf
@@ -89,6 +89,7 @@ resource "kubernetes_config_map" "openclaw_config" {
         defaults = {
           contextTokens     = 1000000
           bootstrapMaxChars = 30000
+          workspace         = "/workspace/infra"
           sandbox = {
             mode = "off"
           }
@@ -114,6 +115,9 @@ resource "kubernetes_config_map" "openclaw_config" {
       tools = {
         profile = "full"
         deny    = []
+        elevated = {
+          enabled = true
+        }
         exec = {
           host        = "gateway"
           security    = "full"
@@ -134,6 +138,10 @@ resource "kubernetes_config_map" "openclaw_config" {
           }
         }
       }
+      commands = {
+        native       = true
+        nativeSkills = true
+      }
       channels = {
         telegram = {
           enabled     = true