safeupdate

pig build pkg safeupdate;		# build deb

pig repo add pgdg -u    # add pgdg repo and update cache

pig install safeupdate;		# install via package name, for the active PG version

pig install safeupdate -v 18;   # install for PG 18
pig install safeupdate -v 17;   # install for PG 17
pig install safeupdate -v 16;   # install for PG 16
pig install safeupdate -v 15;   # install for PG 15
pig install safeupdate -v 14;   # install for PG 14

shared_preload_libraries = 'safeupdate';

-- Per-session
LOAD 'safeupdate';

-- Per-database (persistent)
ALTER DATABASE mydb SET session_preload_libraries = 'safeupdate';

-- Global (all databases, requires restart)
-- shared_preload_libraries = 'safeupdate'   -- in postgresql.conf

-- Blocked: UPDATE without WHERE
UPDATE rack SET fan_speed = 70;
-- ERROR: UPDATE requires a WHERE clause

-- Blocked: DELETE without WHERE
DELETE FROM rack;
-- ERROR: DELETE requires a WHERE clause

-- Allowed: with WHERE clause
UPDATE rack SET fan_speed = 90 WHERE fan_speed = 70;

-- Workaround: explicit always-true condition
UPDATE rack SET fan_speed = 90 WHERE 1 = 1;

-- Temporarily disable protection in current session
SET safeupdate.enabled = 0;