import { createClient } from '@supabase/supabase-js'
import type { SupabaseClient } from '@supabase/supabase-js'

let _client: SupabaseClient | null = null

/**
 * Cliente Supabase con service_role para uso fuera de event handlers (ej: worker plugin).
 * Bypasses RLS — usar solo en contextos server-side confiables.
 */
export function getSupabaseAdmin(): SupabaseClient {
  if (_client) return _client

  const url = process.env.SUPABASE_URL
  const key = process.env.SUPABASE_SERVICE_ROLE_KEY

  if (!url || !key) {
    throw new Error('SUPABASE_URL or SUPABASE_SERVICE_ROLE_KEY not configured')
  }

  _client = createClient(url, key, {
    auth: { autoRefreshToken: false, persistSession: false }
  })

  return _client
}