fix: disable asyncpg statement cache for postgres poolers

app/security/database.py

@@ -97,9 +97,15 @@ class SecurityDatabase:
         database_url = normalize_async_database_url(database_url)
         self.database_url = database_url
         self.auto_migrate = auto_migrate or database_url.startswith("sqlite")
+        # Disable asyncpg's prepared-statement cache for PostgreSQL poolers.
+        # Supabase/PgBouncer transaction pooling can otherwise reuse a server
+        # connection whose prepared-statement names were created by another
+        # client connection, raising DuplicatePreparedStatementError.
+        connect_args = {"statement_cache_size": 0} if database_url.startswith(("postgresql", "postgres")) else {}
         self.engine: AsyncEngine = create_async_engine(
             database_url,
             pool_pre_ping=True,
+            connect_args=connect_args,
         )
         if database_url.startswith("sqlite"):
             event.listen(self.engine.sync_engine, "connect", self._configure_sqlite)