-- Copyright 2026 Manuel Reyes Bravo
-- SPDX-License-Identifier: Apache-2.0

-- pg_plan_guard 1.1.9 -> 1.1.10
--
-- watch() is revoked from PUBLIC, like every other entry point.
--
-- capture(), verify(), sync_stash(), advice_for(), plan_text_for() and query_id_for() were all
-- revoked from PUBLIC; watch() was left executable by it. It is harmless -- watch() calls
-- living_assertions.declare_unchanged(), which is itself not granted to PUBLIC, so a role that
-- cannot declare an assertion can do nothing with watch() either -- but an entry point its six
-- siblings do not share a grant with is a question a reader should not have to ask. This closes
-- it; the entry surface is uniform.

\echo Use "ALTER EXTENSION pg_plan_guard UPDATE TO '1.1.10'" to load this file. \quit

REVOKE ALL ON FUNCTION plan_guard.watch(text, text, text) FROM PUBLIC;