import { createBrowserClient } from "@supabase/ssr";

/**
 * Client-side Supabase client. Uses the anon key, which is safe to expose —
 * it can only do what RLS policies in supabase/schema.sql allow (public
 * read of published content, no writes).
 */
export function createClient() {
  return createBrowserClient(
    process.env.NEXT_PUBLIC_SUPABASE_URL!,
    process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY!
  );
}