The shape of ctx.postgres and ctx.postgresAdmin.
Both halves expose the same surface — they differ in what runs around the query, not in how you call it. withPostgresClient wraps every query in a transaction that injects the caller's claims and drops to their role; withPostgresAdminClient runs it as-is, as the connection-string role.