ofiere-openclaw-plugin 4.56.7 → 4.56.8

package/dist/src/tools.js

@@ -1143,7 +1143,7 @@ async function handleDeleteTask(supabase, userId, params) {
         if (!params.task_id)
             return err("Missing required field: task_id");
         const taskId = params.task_id;
-        await supabase.from("scheduler_events").delete().eq("task_id", taskId);
+        await supabase.from("scheduler_events").delete().eq("task_id", taskId).eq("user_id", userId);
         const { data: subtasks } = await supabase
             .from("tasks")
             .select("id")
@@ -1151,7 +1151,7 @@ async function handleDeleteTask(supabase, userId, params) {
             .eq("user_id", userId);
         if (subtasks && subtasks.length > 0) {
             for (const sub of subtasks) {
-                await supabase.from("scheduler_events").delete().eq("task_id", sub.id);
+                await supabase.from("scheduler_events").delete().eq("task_id", sub.id).eq("user_id", userId);
             }
             await supabase
                 .from("tasks")
@@ -1838,7 +1838,7 @@ function registerScheduleOps(api, supabase, userId) {
                     if (upd.status === "completed" || upd.status === "cancelled") {
                         upd.next_run_at = null;
                     }
-                    const { error } = await supabase.from("scheduler_events").update(upd).eq("id", params.id);
+                    const { error } = await supabase.from("scheduler_events").update(upd).eq("id", params.id).eq("user_id", userId);
                     if (error)
                         return err(error.message);
                     return ok({ message: "Event updated", ok: true });
@@ -1846,7 +1846,7 @@ function registerScheduleOps(api, supabase, userId) {
                 case "delete": {
                     if (!params.id)
                         return err("Missing required: id");
-                    const { error } = await supabase.from("scheduler_events").delete().eq("id", params.id);
+                    const { error } = await supabase.from("scheduler_events").delete().eq("id", params.id).eq("user_id", userId);
                     if (error)
                         return err(error.message);
                     return ok({ message: "Event deleted", ok: true });
@@ -1960,7 +1960,7 @@ function registerKnowledgeOps(api, supabase, userId) {
                             upd[k] = params[k];
                     if (Object.keys(upd).length === 0)
                         return err("No valid fields to update");
-                    const { error } = await supabase.from("knowledge_documents").update(upd).eq("id", params.id);
+                    const { error } = await supabase.from("knowledge_documents").update(upd).eq("id", params.id).eq("user_id", userId);
                     if (error)
                         return err(error.message);
                     return ok({ message: "Document updated", ok: true });
@@ -1968,7 +1968,7 @@ function registerKnowledgeOps(api, supabase, userId) {
                 case "delete": {
                     if (!params.id)
                         return err("Missing required: id");
-                    const { error } = await supabase.from("knowledge_documents").delete().eq("id", params.id);
+                    const { error } = await supabase.from("knowledge_documents").delete().eq("id", params.id).eq("user_id", userId);
                     if (error)
                         return err(error.message);
                     return ok({ message: "Document deleted", ok: true });
@@ -2670,13 +2670,13 @@ function registerNotifyOps(api, supabase, userId, resolveAgent) {
                 case "mark_read": {
                     if (!params.id)
                         return err("Missing required: id");
-                    const { error } = await supabase.from("notifications").update({ read: true }).eq("id", params.id);
+                    const { error } = await supabase.from("notifications").update({ read: true }).eq("id", params.id).eq("user_id", userId);
                     if (error)
                         return err(error.message);
                     return ok({ message: "Notification marked as read", ok: true });
                 }
                 case "mark_all_read": {
-                    const { error } = await supabase.from("notifications").update({ read: true }).eq("read", false);
+                    const { error } = await supabase.from("notifications").update({ read: true }).eq("read", false).eq("user_id", userId);
                     if (error)
                         return err(error.message);
                     return ok({ message: "All notifications marked as read", ok: true });
@@ -2684,7 +2684,7 @@ function registerNotifyOps(api, supabase, userId, resolveAgent) {
                 case "delete": {
                     if (!params.id)
                         return err("Missing required: id");
-                    const { error } = await supabase.from("notifications").delete().eq("id", params.id);
+                    const { error } = await supabase.from("notifications").delete().eq("id", params.id).eq("user_id", userId);
                     if (error)
                         return err(error.message);
                     return ok({ message: "Notification deleted", ok: true });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ofiere-openclaw-plugin",
-  "version": "4.56.7",
+  "version": "4.56.8",
   "type": "module",
   "description": "OpenClaw plugin for Ofiere PM - 18 meta-tools covering tasks, agents, projects, scheduling, knowledge, workflows, notifications, memory, prompts, constellation, space file management, execution plan builder, SOP management, agent brain, talent management, corporate frameworks, agent office canvas, and PM gate approvals",
   "keywords": [

package/src/tools.ts

@@ -1264,7 +1264,7 @@ async function handleDeleteTask(
     if (!params.task_id) return err("Missing required field: task_id");
     const taskId = params.task_id as string;
 
-    await supabase.from("scheduler_events").delete().eq("task_id", taskId);
+    await supabase.from("scheduler_events").delete().eq("task_id", taskId).eq("user_id", userId);
 
     const { data: subtasks } = await supabase
       .from("tasks")
@@ -1274,7 +1274,7 @@ async function handleDeleteTask(
 
     if (subtasks && subtasks.length > 0) {
       for (const sub of subtasks) {
-        await supabase.from("scheduler_events").delete().eq("task_id", sub.id);
+        await supabase.from("scheduler_events").delete().eq("task_id", sub.id).eq("user_id", userId);
       }
       await supabase
         .from("tasks")
@@ -1990,13 +1990,13 @@ function registerScheduleOps(
           if (upd.status === "completed" || upd.status === "cancelled") {
             upd.next_run_at = null;
           }
-          const { error } = await supabase.from("scheduler_events").update(upd).eq("id", params.id);
+          const { error } = await supabase.from("scheduler_events").update(upd).eq("id", params.id).eq("user_id", userId);
           if (error) return err(error.message);
           return ok({ message: "Event updated", ok: true });
         }
         case "delete": {
           if (!params.id) return err("Missing required: id");
-          const { error } = await supabase.from("scheduler_events").delete().eq("id", params.id);
+          const { error } = await supabase.from("scheduler_events").delete().eq("id", params.id).eq("user_id", userId);
           if (error) return err(error.message);
           return ok({ message: "Event deleted", ok: true });
         }
@@ -2107,13 +2107,13 @@ function registerKnowledgeOps(
           const upd: Record<string, any> = {};
           for (const k of allowed) if ((params as any)[k] !== undefined) upd[k] = (params as any)[k];
           if (Object.keys(upd).length === 0) return err("No valid fields to update");
-          const { error } = await supabase.from("knowledge_documents").update(upd).eq("id", params.id);
+          const { error } = await supabase.from("knowledge_documents").update(upd).eq("id", params.id).eq("user_id", userId);
           if (error) return err(error.message);
           return ok({ message: "Document updated", ok: true });
         }
         case "delete": {
           if (!params.id) return err("Missing required: id");
-          const { error } = await supabase.from("knowledge_documents").delete().eq("id", params.id);
+          const { error } = await supabase.from("knowledge_documents").delete().eq("id", params.id).eq("user_id", userId);
           if (error) return err(error.message);
           return ok({ message: "Document deleted", ok: true });
         }
@@ -2840,18 +2840,18 @@ function registerNotifyOps(
         }
         case "mark_read": {
           if (!params.id) return err("Missing required: id");
-          const { error } = await supabase.from("notifications").update({ read: true }).eq("id", params.id);
+          const { error } = await supabase.from("notifications").update({ read: true }).eq("id", params.id).eq("user_id", userId);
           if (error) return err(error.message);
           return ok({ message: "Notification marked as read", ok: true });
         }
         case "mark_all_read": {
-          const { error } = await supabase.from("notifications").update({ read: true }).eq("read", false);
+          const { error } = await supabase.from("notifications").update({ read: true }).eq("read", false).eq("user_id", userId);
           if (error) return err(error.message);
           return ok({ message: "All notifications marked as read", ok: true });
         }
         case "delete": {
           if (!params.id) return err("Missing required: id");
-          const { error } = await supabase.from("notifications").delete().eq("id", params.id);
+          const { error } = await supabase.from("notifications").delete().eq("id", params.id).eq("user_id", userId);
           if (error) return err(error.message);
           return ok({ message: "Notification deleted", ok: true });
         }