import { createClient as createSupabaseClient } from "@supabase/supabase-js";

export function createAdminClient() {
  const url = process.env.NEXT_PUBLIC_SUPABASE_URL;
  /* Sem fallback para NEXT_PUBLIC_*: aquele prefixo manda a variavel para o
     navegador, e a chave de servico ignora todo o RLS. Aceitar os dois nomes
     era o que mantinha o padrao errado vivo. */
  const serviceKey = process.env.SUPABASE_SERVICE_ROLE_KEY;

  if (!url || !serviceKey) {
    throw new Error("Supabase env vars are missing for admin client.");
  }

  const cleanKey = serviceKey.trim();

  return createSupabaseClient(url, cleanKey, {
    auth: { autoRefreshToken: false, persistSession: false },
  });
}