import { createClient } from '@supabase/supabase-js'
import type { Database } from '@/types/database'

/**
 * Admin client using the service role key.
 * This bypasses RLS - use only for trusted server-side operations.
 * NEVER expose this client to the browser.
 */
export function createAdminClient() {
  return createClient<Database>(
    process.env.NEXT_PUBLIC_SUPABASE_URL!,
    process.env.SUPABASE_SERVICE_ROLE_KEY!,
    {
      auth: {
        autoRefreshToken: false,
        persistSession: false,
      },
    }
  )
}