From 34e87a0d7b2aa68e9240c2995eb7b6ebd05b9de2 Mon Sep 17 00:00:00 2001
From: Furkan Akbulutlar <f.akbulutlar@gmail.com>
Date: Wed, 17 Jun 2026 20:31:24 +0200
Subject: [PATCH 1/2] chore: rename remaining cloudflare identifiers to piyaz

---
 app/api/events/route.ts                   |   2 +-
 cloudflare-env.d.ts                       | 868 +++++++++++++++++++++-
 components/providers/RealtimeBridge.tsx   |   2 +-
 lib/auth/verified-oauth-clients.ts        |   4 +-
 lib/realtime/_broker.ts                   |   2 +-
 lib/realtime/_broker.workers.ts           |  36 +-
 lib/realtime/broker-auth.ts               |  14 +-
 lib/realtime/broker-do.ts                 |  10 +-
 lib/realtime/broker.ts                    |   2 +-
 open-next.config.ts                       |   4 +-
 scripts/assert-deploy-ready.ts            |   4 +-
 tests/auth/verified-oauth-clients.test.ts |   2 +-
 tests/realtime/broker-do.test.ts          |  20 +-
 worker-cf.ts                              |  14 +-
 wrangler.jsonc                            |  16 +-
 15 files changed, 912 insertions(+), 88 deletions(-)

diff --git a/app/api/events/route.ts b/app/api/events/route.ts
index d0fbd6ea..e352e588 100644
--- a/app/api/events/route.ts
+++ b/app/api/events/route.ts
@@ -25,7 +25,7 @@ const IS_CLOUDFLARE = process.env.DEPLOY_TARGET === "cloudflare";
  * On the Cloudflare deploy the browser opens a WebSocket, not this SSE
  * stream: the worker entry (`worker-cf.ts`) intercepts the `Upgrade:
  * websocket` request to `/api/events` ahead of OpenNext and terminates it
- * against the `MymirBroker` Durable Object (zero-cost while idle via the
+ * against the `PiyazBroker` Durable Object (zero-cost while idle via the
  * Hibernation API). This handler therefore only runs on Cloudflare for a
  * non-upgrade GET, where it short-circuits to 204 with `Retry-After` so a
  * stray `EventSource` cannot open a wall-clock-billed stream or
diff --git a/cloudflare-env.d.ts b/cloudflare-env.d.ts
index 9b3b85bf..e2d45150 100644
--- a/cloudflare-env.d.ts
+++ b/cloudflare-env.d.ts
@@ -1,6 +1,6 @@
 /* eslint-disable */
-// Generated by Wrangler by running `wrangler types --env production --env-interface CloudflareEnv cloudflare-env.d.ts` (hash: ec62f4356648f0d7c9399ef56c9a03f3)
-// Runtime types generated with workerd@1.20260515.1 2026-05-16 global_fetch_strictly_public,nodejs_compat
+// Generated by Wrangler by running `wrangler types --env production --env-interface CloudflareEnv cloudflare-env.d.ts` (hash: 68ff05b64056904d719ed8a7bab71076)
+// Runtime types generated with workerd@1.20260601.1 2026-05-16 nodejs_compat
 interface __BaseEnv_CloudflareEnv {
 	AUTH_KV: KVNamespace;
 	NEXT_INC_CACHE_R2_BUCKET: R2Bucket;
@@ -14,15 +14,14 @@ interface __BaseEnv_CloudflareEnv {
 	DATABASE_URL: string;
 	DATABASE_SERVICE_ROLE_URL: string;
 	DATABASE_AUTH_URL: string;
-	MYMIR_DB_DRIVER: string;
-	MYMIR_BROKER: DurableObjectNamespace<import("./worker-cf").MymirBroker>;
+	PIYAZ_BROKER: DurableObjectNamespace<import("./worker-cf").PiyazBroker>;
 	NEXT_CACHE_DO_QUEUE: DurableObjectNamespace<import("./worker-cf").DOQueueHandler>;
 	WORKER_SELF_REFERENCE: Service<typeof import("./worker-cf").default>;
 }
 declare namespace Cloudflare {
 	interface GlobalProps {
 		mainModule: typeof import("./worker-cf");
-		durableNamespaces: "MymirBroker" | "DOQueueHandler";
+		durableNamespaces: "PiyazBroker" | "DOQueueHandler";
 	}
 	interface Env extends __BaseEnv_CloudflareEnv {}
 }
@@ -31,7 +30,7 @@ type StringifyValues<EnvType extends Record<string, unknown>> = {
 	[Binding in keyof EnvType]: EnvType[Binding] extends string ? EnvType[Binding] : string;
 };
 declare namespace NodeJS {
-	interface ProcessEnv extends StringifyValues<Pick<Cloudflare.Env, "DEPLOY_TARGET" | "BETTER_AUTH_SECRET" | "BETTER_AUTH_URL" | "DATABASE_URL" | "DATABASE_SERVICE_ROLE_URL" | "DATABASE_AUTH_URL" | "MYMIR_DB_DRIVER">> {}
+	interface ProcessEnv extends StringifyValues<Pick<Cloudflare.Env, "DEPLOY_TARGET" | "BETTER_AUTH_SECRET" | "BETTER_AUTH_URL" | "DATABASE_URL" | "DATABASE_SERVICE_ROLE_URL" | "DATABASE_AUTH_URL">> {}
 }
 
 // Begin runtime types
@@ -3506,6 +3505,229 @@ declare abstract class Span {
     get isTraced(): boolean;
     setAttribute(key: string, value?: (boolean | number | string)): void;
 }
+// ============================================================================
+// Agent Memory
+//
+// Public type surface for user Workers binding to an Agent Memory namespace.
+// ============================================================================
+/** Memory type — every memory is classified into exactly one. */
+type AgentMemoryMemoryType = "fact" | "event" | "instruction" | "task";
+/** Search intensity for recall. */
+type AgentMemoryThinkingLevel = "low" | "medium" | "high";
+/** Response verbosity for recall. */
+type AgentMemoryResponseLength = "short" | "medium" | "long";
+/** A conversation message passed to ingest(). */
+interface AgentMemoryMessage {
+    role: "system" | "user" | "assistant";
+    content: string;
+    /** Optional message timestamp. */
+    timestamp?: Date;
+}
+/** Raw memory content passed to remember(). */
+interface AgentMemoryIncomingMemory {
+    /** Raw memory content. The service classifies and summarizes automatically. */
+    content: string;
+    /** Optional session identifier to associate with this memory. */
+    sessionId?: string | null | undefined;
+}
+/** A stored memory returned from remember(), get(), and delete(). */
+interface AgentMemoryMemory {
+    /** Memory ID. */
+    id: string;
+    /** Memory type. */
+    type: AgentMemoryMemoryType;
+    /** Text summary. */
+    summary: string;
+    /** Memory text. */
+    content: string;
+    /** Session that created this memory. */
+    sessionId: string | null;
+    /** Memory creation time. */
+    createdAt: Date;
+    /** Memory last-update time. */
+    updatedAt: Date;
+}
+/** Single entry in a list() response. Same shape as Memory minus full content. */
+type AgentMemoryMemoryListEntry = Omit<AgentMemoryMemory, "content">;
+/** A scored memory candidate in a recall result. */
+interface AgentMemoryScoredCandidate {
+    /** Candidate ID. */
+    id: string;
+    /** Text summary. */
+    summary: string;
+    /** Session that created this candidate, when known. */
+    sessionId: string | null;
+    /** Relevance score (higher is better). Comparable only within a single query. */
+    score: number;
+}
+/** Options for the ingest() method. */
+interface AgentMemoryIngestOptions {
+    /** Session identifier to associate with memories created during ingestion. */
+    sessionId?: string | null | undefined;
+}
+/** Options for the getSummary() method. */
+interface AgentMemoryGetSummaryOptions {
+    /** Session identifier to retrieve session summary for. */
+    sessionId?: string | null | undefined;
+}
+/** Response from the getSummary() method. */
+interface AgentMemoryGetSummaryResponse {
+    /** Markdown summary. */
+    summary: string;
+}
+/**
+ * Options for the recall() method.
+ *
+ * `referenceDate` accepts a Date object, an ISO-8601 date string
+ * (YYYY-MM-DD), or a full ISO-8601 datetime string. When provided, this
+ * date is used as "today" for resolving relative time references
+ * ("how many days ago", "last week") instead of the server's wall-clock time.
+ */
+interface AgentMemoryRecallOptions {
+    /** Recall intensity: "low" (default), "medium", or "high". */
+    thinkingLevel?: AgentMemoryThinkingLevel;
+    /** Response verbosity: "short", "medium" (default), or "long". */
+    responseLength?: AgentMemoryResponseLength;
+    /** Temporal anchor for date arithmetic. */
+    referenceDate?: Date | string;
+}
+/** Response from the recall() method. */
+interface AgentMemoryRecallResult {
+    /** Number of memories retrieved. */
+    count: number;
+    /** LLM-generated answer synthesizing the matching memories. */
+    answer: string;
+    /** Matching memories ranked by relevance. */
+    candidates: AgentMemoryScoredCandidate[];
+}
+/**
+ * Options for the list() method.
+ *
+ * `cursor` is the opaque continuation token returned by the previous page;
+ * pass it back unchanged to fetch the next page. `sessionId` and `type`
+ * are exact-match filters; combining them is allowed.
+ */
+interface AgentMemoryListMemoriesOptions {
+    /** Maximum number of memories to return. Default 20, max 500. */
+    limit?: number;
+    /** Opaque cursor from a previous page. */
+    cursor?: string;
+    /** Exact-match session filter. */
+    sessionId?: string;
+    /** Exact-match memory-type filter. */
+    type?: AgentMemoryMemoryType;
+}
+/** Response from the list() method. */
+interface AgentMemoryListMemoriesResult {
+    memories: AgentMemoryMemoryListEntry[];
+    /** Continuation cursor; absent when this page exhausted the result set. */
+    cursor?: string;
+}
+/**
+ * A single Agent Memory profile, scoped to a profile name.
+ *
+ * Returned by {@link AgentMemoryNamespace.getProfile}.
+ */
+declare abstract class AgentMemoryProfile {
+    /**
+     * Retrieve a memory by ID.
+     *
+     * @param memoryId - ULID of the memory to retrieve.
+     * @throws if the memory does not exist.
+     */
+    get(memoryId: string): Promise<AgentMemoryMemory>;
+    /**
+     * Delete a memory by ID.
+     *
+     * Removes the memory and any source messages linked by the memory's
+     * source message IDs.
+     *
+     * @param memoryId - ULID of the memory to delete.
+     * @throws if the memory does not exist.
+     */
+    delete(memoryId: string): Promise<AgentMemoryMemory>;
+    /**
+     * Store a memory in this profile. The content is automatically classified,
+     * summarized, and indexed.
+     *
+     * @param memory - Raw memory content to persist.
+     */
+    remember(memory: AgentMemoryIncomingMemory): Promise<AgentMemoryMemory>;
+    /**
+     * Extract memories from a conversation.
+     *
+     * @param messages - Conversation messages to extract memories from.
+     * @param options  - Optional ingest options.
+     */
+    ingest(messages: Iterable<AgentMemoryMessage>, options?: AgentMemoryIngestOptions): Promise<void>;
+    /**
+     * Get a profile summary.
+     *
+     * @param options - Optional getSummary options.
+     */
+    getSummary(options?: AgentMemoryGetSummaryOptions): Promise<AgentMemoryGetSummaryResponse>;
+    /**
+     * Recall memories in this profile.
+     *
+     * @param query   - Recall query matched against memory content and keywords.
+     * @param options - Optional recall parameters.
+     * @returns Matching memories with relevance scores and a synthesized answer.
+     */
+    recall(query: string, options?: AgentMemoryRecallOptions): Promise<AgentMemoryRecallResult>;
+    /**
+     * List active memories in this profile.
+     *
+     * Returns a paginated, filterable view of stored memories. Superseded
+     * versions are excluded. Use the returned `cursor` (when present) to
+     * fetch the next page.
+     *
+     * @param options - Optional pagination and filter options.
+     */
+    list(options?: AgentMemoryListMemoriesOptions): Promise<AgentMemoryListMemoriesResult>;
+    /**
+     * Soft-delete every memory and message in this profile that is tagged
+     * with `sessionId`.
+     *
+     * Idempotent: deleting a sessionId that has no rows is a no-op.
+     *
+     * @param sessionId - Session to delete.
+     */
+    deleteSession(sessionId: string): Promise<void>;
+}
+/**
+ * Namespace-level Agent Memory binding.
+ *
+ * Used as the type of an `env.MEMORY`-style binding backed by the Agent
+ * Memory product.
+ *
+ * @example
+ * ```ts
+ * export default {
+ *   async fetch(_request: Request, env: Env): Promise<Response> {
+ *     const profile = await env.MEMORY.getProfile("wrangler-e2e");
+ *     const summary = await profile.getSummary();
+ *     return Response.json(summary);
+ *   },
+ * };
+ * ```
+ */
+declare abstract class AgentMemoryNamespace {
+    /**
+     * Get a memory profile by name. Profiles are isolated by namespace and
+     * addressed by a compound key (namespaceId:profileName).
+     *
+     * @param profileName - Profile name (validated against naming rules).
+     * @returns RPC target for interacting with the profile.
+     */
+    getProfile(profileName: string): Promise<AgentMemoryProfile>;
+    /**
+     * Soft-delete a profile and schedule deferred purge. Marks all
+     * memories and messages as deleted.
+     *
+     * @param profileName - Name of the profile to delete.
+     */
+    deleteProfile(profileName: string): Promise<void>;
+}
 // ============ AI Search Error Interfaces ============
 interface AiSearchInternalError extends Error {
 }
@@ -4851,9 +5073,6 @@ type ChatCompletionChoice = {
     finish_reason: "stop" | "length" | "tool_calls" | "content_filter" | "function_call";
     logprobs: ChatCompletionLogprobs | null;
 };
-type ChatCompletionsPromptInput = {
-    prompt: string;
-} & ChatCompletionsCommonOptions;
 type ChatCompletionsMessagesInput = {
     messages: Array<ChatCompletionMessageParam>;
 } & ChatCompletionsCommonOptions;
@@ -8783,11 +9002,11 @@ declare abstract class Base_Ai_Cf_Pipecat_Ai_Smart_Turn_V2 {
     postProcessedOutputs: Ai_Cf_Pipecat_Ai_Smart_Turn_V2_Output;
 }
 declare abstract class Base_Ai_Cf_Openai_Gpt_Oss_120B {
-    inputs: XOR<ResponsesInput, ChatCompletionsInput>;
+    inputs: XOR<ResponsesInput, ChatCompletionsMessagesInput>;
     postProcessedOutputs: XOR<ResponsesOutput, ChatCompletionsOutput>;
 }
 declare abstract class Base_Ai_Cf_Openai_Gpt_Oss_20B {
-    inputs: XOR<ResponsesInput, ChatCompletionsInput>;
+    inputs: XOR<ResponsesInput, ChatCompletionsMessagesInput>;
     postProcessedOutputs: XOR<ResponsesOutput, ChatCompletionsOutput>;
 }
 interface Ai_Cf_Leonardo_Phoenix_1_0_Input {
@@ -9763,6 +9982,10 @@ declare abstract class Base_Ai_Cf_Moonshotai_Kimi_K2_5 {
     inputs: ChatCompletionsInput;
     postProcessedOutputs: ChatCompletionsOutput;
 }
+declare abstract class Base_Ai_Cf_Moonshotai_Kimi_K2_6 {
+    inputs: ChatCompletionsInput;
+    postProcessedOutputs: ChatCompletionsOutput;
+}
 declare abstract class Base_Ai_Cf_Nvidia_Nemotron_3_120B_A12B {
     inputs: ChatCompletionsInput;
     postProcessedOutputs: ChatCompletionsOutput;
@@ -9860,7 +10083,9 @@ interface AiModels {
     "@cf/black-forest-labs/flux-2-klein-9b": Base_Ai_Cf_Black_Forest_Labs_Flux_2_Klein_9B;
     "@cf/zai-org/glm-4.7-flash": Base_Ai_Cf_Zai_Org_Glm_4_7_Flash;
     "@cf/moonshotai/kimi-k2.5": Base_Ai_Cf_Moonshotai_Kimi_K2_5;
+    "@cf/moonshotai/kimi-k2.6": Base_Ai_Cf_Moonshotai_Kimi_K2_6;
     "@cf/nvidia/nemotron-3-120b-a12b": Base_Ai_Cf_Nvidia_Nemotron_3_120B_A12B;
+    "@cf/google/gemma-4-26b-a4b-it": Base_Ai_Cf_Google_Gemma_4_26B_A4B_IT;
 }
 type AiOptions = {
     /**
@@ -9913,10 +10138,8 @@ type AiModelsSearchObject = {
         value: string;
     }[];
 };
-type ChatCompletionsBase = XOR<ChatCompletionsPromptInput, ChatCompletionsMessagesInput>;
-type ChatCompletionsInput = XOR<ChatCompletionsBase, {
-    requests: ChatCompletionsBase[];
-}>;
+type ChatCompletionsBase = ChatCompletionsMessagesInput;
+type ChatCompletionsInput = ChatCompletionsMessagesInput;
 interface InferenceUpstreamError extends Error {
 }
 interface AiInternalError extends Error {
@@ -9961,8 +10184,15 @@ declare abstract class Ai<AiModelList extends AiModelListType = AiModels> {
     }, options?: AiOptions): Promise<ReadableStream>;
     // Normal (default) - known model
     run<Name extends keyof AiModelList>(model: Name, inputs: AiModelList[Name]['inputs'], options?: AiOptions): Promise<AiModelList[Name]['postProcessedOutputs']>;
-    // Unknown model (gateway fallback)
-    run(model: string & {}, inputs: Record<string, unknown>, options?: AiOptions): Promise<Record<string, unknown>>;
+    // Unknown model (fallback).
+    //
+    // The `Exclude<..., keyof AiModelList>` constraint forces TypeScript to
+    // route any model name that is a literal key of `AiModelList` to one of
+    // the known-model overloads above (so input/output mismatches surface as
+    // type errors rather than silently falling back to `Record<string, unknown>`).
+    // Names that aren't in `AiModelList` — e.g. third-party gateway models
+    // like `"google/nano-banana"` — still hit this overload.
+    run<Model extends string>(model: Model extends keyof AiModelList ? never : Model, inputs: Record<string, unknown>, options?: AiOptions): Promise<Record<string, unknown>>;
     models(params?: AiModelsSearchParams): Promise<AiModelsSearchObject[]>;
     toMarkdown(): ToMarkdownService;
     toMarkdown(files: MarkdownDocument[], options?: ConversionRequestOptions): Promise<ConversionResponse[]>;
@@ -10420,6 +10650,452 @@ declare abstract class AutoRAG {
      */
     aiSearch(params: AutoRagAiSearchRequest): Promise<AutoRagAiSearchResponse | Response>;
 }
+type BrowserRunLifecycleEvent = 'load' | 'domcontentloaded' | 'networkidle0' | 'networkidle2';
+type BrowserRunResourceType = 'document' | 'stylesheet' | 'image' | 'media' | 'font' | 'script' | 'texttrack' | 'xhr' | 'fetch' | 'prefetch' | 'eventsource' | 'websocket' | 'manifest' | 'signedexchange' | 'ping' | 'cspviolationreport' | 'preflight' | 'other';
+/** Options fields shared by all quick actions. */
+interface BrowserRunBaseOptions {
+    /** Adds `<script>` tags into the page with the desired URL or content.
+     * @see https://pptr.dev/api/puppeteer.frameaddscripttagoptions
+     */
+    addScriptTag?: Array<{
+        content?: string;
+        url?: string;
+        type?: string;
+        id?: string;
+    }>;
+    /** Adds `<link rel="stylesheet">` or `<style>` tags into the page.
+     * @see https://pptr.dev/api/puppeteer.frameaddstyletagoptions
+     */
+    addStyleTag?: Array<{
+        content?: string;
+        url?: string;
+    }>;
+    /** Provide credentials for HTTP authentication. @see https://pptr.dev/api/puppeteer.credentials */
+    authenticate?: {
+        username: string;
+        password: string;
+    };
+    /** Set cookies before navigating. @see https://pptr.dev/api/puppeteer.cookieparam */
+    cookies?: Array<{
+        name: string;
+        value: string;
+        url?: string;
+        domain?: string;
+        path?: string;
+        secure?: boolean;
+        httpOnly?: boolean;
+        sameSite?: 'Strict' | 'Lax' | 'None';
+        expires?: number;
+        priority?: 'Low' | 'Medium' | 'High';
+        sameParty?: boolean;
+        sourceScheme?: 'Unset' | 'NonSecure' | 'Secure';
+        sourcePort?: number;
+        partitionKey?: string;
+    }>;
+    /** Emulate a specific CSS media type (e.g. `"screen"`, `"print"`). */
+    emulateMediaType?: string;
+    /** Navigation options. @see https://pptr.dev/api/puppeteer.gotooptions */
+    gotoOptions?: {
+        /** Navigation timeout in milliseconds (max 60 000). @default 30000 */
+        timeout?: number;
+        /** When to consider navigation complete. @default "domcontentloaded" */
+        waitUntil?: BrowserRunLifecycleEvent | BrowserRunLifecycleEvent[];
+        referer?: string;
+        referrerPolicy?: string;
+    };
+    /** Block requests matching these regex patterns. Mutually exclusive with `allowRequestPattern`. */
+    rejectRequestPattern?: string[];
+    /** Only allow requests matching these regex patterns. Mutually exclusive with `rejectRequestPattern`. */
+    allowRequestPattern?: string[];
+    /** Block requests of these resource types. Mutually exclusive with `allowResourceTypes`. */
+    rejectResourceTypes?: BrowserRunResourceType[];
+    /** Only allow requests of these resource types. Mutually exclusive with `rejectResourceTypes`. */
+    allowResourceTypes?: BrowserRunResourceType[];
+    /** Additional HTTP headers sent with every request. */
+    setExtraHTTPHeaders?: Record<string, string>;
+    /** Whether JavaScript is enabled on the page. */
+    setJavaScriptEnabled?: boolean;
+    /** Override the default user agent string.
+     * @default "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
+     * */
+    userAgent?: string;
+    /** Set the browser viewport size.
+     * @see https://pptr.dev/api/puppeteer.viewport
+     * @default {width:1920,height:1080}
+     * */
+    viewport?: {
+        width: number;
+        height: number;
+        deviceScaleFactor?: number;
+        isMobile?: boolean;
+        isLandscape?: boolean;
+        hasTouch?: boolean;
+    };
+    /** Wait for a CSS selector to appear in the page before proceeding.
+     * @see https://pptr.dev/api/puppeteer.waitforselectoroptions
+     */
+    waitForSelector?: {
+        selector: string;
+        hidden?: true;
+        visible?: true;
+        /** Timeout in milliseconds. Max 120000 */
+        timeout?: number;
+    };
+    /** Wait for a fixed delay in milliseconds before proceeding. Max 120000 */
+    waitForTimeout?: number;
+    /** When true, continue on best-effort when awaited events fail or timeout. */
+    bestAttempt?: boolean;
+    /** Maximum duration in milliseconds for the browser action after page load. Max 120000 */
+    actionTimeout?: number;
+    /** Cache time to live in seconds (0-86400). Set to 0 to disable.
+     * @default 5
+     */
+    cacheTTL?: number;
+}
+/** Common options shared by all quick actions. Exactly one of `url` or `html` must be provided.*/
+type BrowserRunCommonOptions = (BrowserRunBaseOptions & {
+    /** URL to navigate to, e.g. `"https://example.com"`. */
+    url: string;
+}) | (BrowserRunBaseOptions & {
+    /** Set the HTML content of the page directly. */
+    html: string;
+});
+type BrowserRunPuppeteerScreenshotOptions = {
+    /** @default "png" */
+    type?: 'png' | 'jpeg' | 'webp';
+    /** @default "binary" */
+    encoding?: 'binary' | 'base64';
+    quality?: number;
+    fullPage?: boolean;
+    clip?: {
+        x: number;
+        y: number;
+        width: number;
+        height: number;
+        scale?: number;
+    };
+    omitBackground?: boolean;
+    optimizeForSpeed?: boolean;
+    captureBeyondViewport?: boolean;
+    fromSurface?: boolean;
+};
+type BrowserRunScreenshotOptions = BrowserRunCommonOptions & {
+    /** CSS selector of the element to screenshot. */
+    selector?: string;
+    /** When true, scroll the entire page before taking the screenshot. */
+    scrollPage?: boolean;
+    /** @see https://pptr.dev/api/puppeteer.screenshotoptions */
+    screenshotOptions?: BrowserRunPuppeteerScreenshotOptions;
+};
+type BrowserRunPDFOptions = BrowserRunCommonOptions & {
+    /** @see https://pptr.dev/api/puppeteer.pdfoptions */
+    pdfOptions?: {
+        /** @default 1 */
+        scale?: number;
+        /** @default false */
+        displayHeaderFooter?: boolean;
+        headerTemplate?: string;
+        footerTemplate?: string;
+        /** @default false */
+        printBackground?: boolean;
+        /** @default false */
+        landscape?: boolean;
+        pageRanges?: string;
+        /** @default "letter" */
+        format?: 'letter' | 'legal' | 'tabloid' | 'ledger' | 'a0' | 'a1' | 'a2' | 'a3' | 'a4' | 'a5' | 'a6';
+        width?: string | number;
+        height?: string | number;
+        /** @default false */
+        preferCSSPageSize?: boolean;
+        margin?: {
+            top?: string | number;
+            right?: string | number;
+            bottom?: string | number;
+            left?: string | number;
+        };
+        /** @default false */
+        omitBackground?: boolean;
+        /** @default true */
+        tagged?: boolean;
+        /** @default false */
+        outline?: boolean;
+        /** @default 30000 */
+        timeout?: number;
+    };
+};
+type BrowserRunScrapeOptions = BrowserRunCommonOptions & {
+    /** CSS selectors to scrape. At least one element is required. */
+    elements: Array<{
+        selector: string;
+    }>;
+};
+type BrowserRunLinksOptions = BrowserRunCommonOptions & {
+    /** When true, only return links that are visible on the page. @default false */
+    visibleLinksOnly?: boolean;
+    /** When true, exclude links pointing to external domains. @default false */
+    excludeExternalLinks?: boolean;
+};
+type BrowserRunSnapshotOptions = BrowserRunCommonOptions & {
+    /** @see https://pptr.dev/api/puppeteer.screenshotoptions */
+    screenshotOptions?: Omit<BrowserRunPuppeteerScreenshotOptions, 'encoding'>;
+};
+interface BrowserRunJsonBaseOptions {
+    /** Custom AI models to try in order. Max 3. Falls back to next on error. */
+    custom_ai?: Array<{
+        /** Model ID in `<provider>/<model_name>` format, e.g. `"workers-ai/@cf/meta/llama-3.3-70b-instruct-fp8-fast"`. */
+        model: string;
+        /** Bearer token. Not needed for workers-ai models. */
+        authorization?: string;
+    }>;
+}
+/**
+ * Options for the `json` quick action.
+ * At least one of `prompt` or `response_format` must be provided.
+ */
+type BrowserRunJsonOptions = BrowserRunCommonOptions & BrowserRunJsonBaseOptions & ({
+    /** Natural-language prompt describing what data to extract. */
+    prompt: string;
+    /** Structured output schema for the AI model. @see https://developers.cloudflare.com/workers-ai/json-mode/ */
+    response_format?: AiTextGenerationResponseFormat;
+} | {
+    /** Natural-language prompt describing what data to extract. */
+    prompt?: string;
+    /** Structured output schema for the AI model. @see https://developers.cloudflare.com/workers-ai/json-mode/ */
+    response_format: AiTextGenerationResponseFormat;
+});
+type BrowserRunContentOptions = BrowserRunCommonOptions;
+type BrowserRunMarkdownOptions = BrowserRunCommonOptions;
+type BrowserRunResponseMeta = {
+    /** HTTP status code of the rendered page */
+    status: number;
+    /** Page title */
+    title: string;
+};
+/** Success response for `content` action. */
+type BrowserRunContentSuccessResponse = {
+    success: true;
+    /** Extracted HTML content */
+    result: string;
+    meta: BrowserRunResponseMeta;
+};
+/** Success response for `links` action. */
+type BrowserRunLinksSuccessResponse = {
+    success: true;
+    /** Extracted links */
+    result: string[];
+};
+/** Success response for `scrape` action. */
+type BrowserRunScrapeSuccessResponse = {
+    success: true;
+    result: Array<{
+        /** The CSS selector used to find elements. */
+        selector: string;
+        /** Array of elements matching the selector. */
+        results: Array<{
+            /** Outer HTML of the element. */
+            html: string;
+            /** Text content of the element. */
+            text: string;
+            /** Width of the element in pixels. */
+            width: number;
+            /** Height of the element in pixels. */
+            height: number;
+            /** Top position of the element relative to the viewport in pixels. */
+            top: number;
+            /** Left position of the element relative to the viewport in pixels. */
+            left: number;
+            /** Array of HTML attributes on the element. */
+            attributes: Array<{
+                /** Attribute name. */
+                name: string;
+                /** Attribute value. */
+                value: string;
+            }>;
+        }>;
+    }>;
+};
+/** Success response for `snapshot` action. */
+type BrowserRunSnapshotSuccessResponse = {
+    success: true;
+    result: {
+        /** HTML content of the page. */
+        content: string;
+        /** Base64-encoded screenshot image. */
+        screenshot: string;
+    };
+    meta: BrowserRunResponseMeta;
+};
+/** Success response for `json` action. */
+type BrowserRunJsonSuccessResponse = {
+    success: true;
+    /** JSON data extracted from the page using an AI model */
+    result: Record<string, unknown>;
+};
+/** Success response for `markdown` action. */
+type BrowserRunMarkdownSuccessResponse = {
+    success: true;
+    /** Extracted markdown content */
+    result: string;
+};
+/** Error response for BrowserRun actions. */
+type BrowserRunErrorResponse = {
+    success: false;
+    errors: {
+        message: string;
+        code?: number;
+        detail?: string;
+        path?: string;
+    }[];
+};
+/** Error response for BrowserRun `json` action. */
+type BrowserRunJsonErrorResponse = BrowserRunErrorResponse & {
+    /** Raw AI response text for debugging */
+    rawAiResponse?: string;
+};
+/**
+ * Browser Run API binding for automating headless browsers.
+ * @see https://developers.cloudflare.com/browser-run/
+ */
+declare abstract class BrowserRun {
+    /**
+     * Send a raw HTTP request to the Browser Run API.
+     * Used by libraries like `@cloudflare/puppeteer` to acquire and connect to a browser instance.
+     * @see https://developers.cloudflare.com/browser-run/
+     */
+    fetch(input: RequestInfo | URL, init?: RequestInit): Promise<Response>;
+    /**
+     * Take a screenshot of a web page.
+     * @param action - Must be `'screenshot'`.
+     * @param options - Screenshot options including viewport, selectors, and image format.
+     * @returns A `Response` containing one of:
+     *
+     * **Success (HTTP 200):**
+     * - Binary image data with `Content-Type: image/png`, `image/jpeg`, or `image/webp` (when `encoding: 'binary'`, the default)
+     * - Data URI string with `Content-Type: text/plain` (when `encoding: 'base64'`)
+     *
+     * **Error:**
+     * - `BrowserRunErrorResponse` JSON with appropriate HTTP status code (400, 422, 429, 500, 503)
+     *
+     * **Headers:**
+     * - `X-Browser-Ms-Used`: Browser time consumed in milliseconds (set when status < 500)
+     */
+    quickAction(action: 'screenshot', options: BrowserRunScreenshotOptions): Promise<Response>;
+    /**
+     * Generate a PDF of a web page.
+     * @param action - Must be `'pdf'`.
+     * @param options - PDF generation options including page size, margins, and headers/footers.
+     * @returns A `Response` containing one of:
+     *
+     * **Success (HTTP 200):**
+     * - Binary PDF data with `Content-Type: application/pdf`
+     *
+     * **Error:**
+     * - `BrowserRunErrorResponse` JSON with appropriate HTTP status code (400, 422, 429, 500, 503)
+     *
+     * **Headers:**
+     * - `X-Browser-Ms-Used`: Browser time consumed in milliseconds (set when status < 500)
+     */
+    quickAction(action: 'pdf', options: BrowserRunPDFOptions): Promise<Response>;
+    /**
+     * Get the HTML content of a web page.
+     * @param action - Must be `'content'`.
+     * @param options - Navigation and page interaction options.
+     * @returns A `Response` containing one of:
+     *
+     * **Success (HTTP 200):**
+     * - `BrowserRunContentSuccessResponse` JSON with `Content-Type: application/json`
+     *
+     * **Error:**
+     * - `BrowserRunErrorResponse` JSON with appropriate HTTP status code (400, 422, 429, 500, 503)
+     *
+     * **Headers:**
+     * - `X-Browser-Ms-Used`: Browser time consumed in milliseconds (set when status < 500)
+     */
+    quickAction(action: 'content', options: BrowserRunContentOptions): Promise<Response>;
+    /**
+     * Scrape elements from a web page by CSS selector.
+     * @param action - Must be `'scrape'`.
+     * @param options - Scrape options with CSS selectors for elements to extract.
+     * @returns A `Response` containing one of:
+     *
+     * **Success (HTTP 200):**
+     * - `BrowserRunScrapeSuccessResponse` JSON with `Content-Type: application/json`
+     *
+     * **Error:**
+     * - `BrowserRunErrorResponse` JSON with appropriate HTTP status code (400, 422, 429, 500, 503)
+     *
+     * **Headers:**
+     * - `X-Browser-Ms-Used`: Browser time consumed in milliseconds (set when status < 500)
+     */
+    quickAction(action: 'scrape', options: BrowserRunScrapeOptions): Promise<Response>;
+    /**
+     * Extract all links from a web page.
+     * @param action - Must be `'links'`.
+     * @param options - Options to filter visible or internal links only.
+     * @returns A `Response` containing one of:
+     *
+     * **Success (HTTP 200):**
+     * - `BrowserRunLinksSuccessResponse` JSON with `Content-Type: application/json`
+     *
+     * **Error:**
+     * - `BrowserRunErrorResponse` JSON with appropriate HTTP status code (400, 422, 429, 500, 503)
+     *
+     * **Headers:**
+     * - `X-Browser-Ms-Used`: Browser time consumed in milliseconds (set when status < 500)
+     */
+    quickAction(action: 'links', options: BrowserRunLinksOptions): Promise<Response>;
+    /**
+     * Get both the HTML content and a base64-encoded screenshot of a web page.
+     * @param action - Must be `'snapshot'`.
+     * @param options - Snapshot options including screenshot settings (encoding is always base64).
+     * @returns A `Response` containing one of:
+     *
+     * **Success (HTTP 200):**
+     * - `BrowserRunSnapshotSuccessResponse` JSON with `Content-Type: application/json`
+     *
+     * **Error:**
+     * - `BrowserRunErrorResponse` JSON with appropriate HTTP status code (400, 422, 429, 500, 503)
+     *
+     * **Headers:**
+     * - `X-Browser-Ms-Used`: Browser time consumed in milliseconds (set when status < 500)
+     */
+    quickAction(action: 'snapshot', options: BrowserRunSnapshotOptions): Promise<Response>;
+    /**
+     * Extract structured JSON data from a web page using AI.
+     * @param action - Must be `'json'`.
+     * @param options - JSON extraction options with prompt or response_format schema.
+     * @returns A `Response` containing one of:
+     *
+     * **Success (HTTP 200):**
+     * - `BrowserRunJsonSuccessResponse` JSON with `Content-Type: application/json`
+     *
+     * **Error:**
+     * - `BrowserRunErrorResponse` JSON with appropriate HTTP status code (400, 422, 429, 500, 503)
+     * - HTTP 422 with code `2012` for HTML-to-markdown conversion failures
+     * - HTTP 422/500 for AI extraction failures (may include `rawAiResponse` field)
+     *
+     * **Headers:**
+     * - `X-Browser-Ms-Used`: Browser time consumed in milliseconds (set when status < 500)
+     */
+    quickAction(action: 'json', options: BrowserRunJsonOptions): Promise<Response>;
+    /**
+     * Convert a web page to Markdown.
+     * @param action - Must be `'markdown'`.
+     * @param options - Navigation and page interaction options.
+     * @returns A `Response` containing one of:
+     *
+     * **Success (HTTP 200):**
+     * - `BrowserRunMarkdownSuccessResponse` JSON with `Content-Type: application/json`
+     *
+     * **Error:**
+     * - `BrowserRunErrorResponse` JSON with appropriate HTTP status code (400, 422, 429, 500, 503)
+     * - HTTP 422 with code `2012` for HTML-to-markdown conversion failures
+     *
+     * **Headers:**
+     * - `X-Browser-Ms-Used`: Browser time consumed in milliseconds (set when status < 500)
+     */
+    quickAction(action: 'markdown', options: BrowserRunMarkdownOptions): Promise<Response>;
+}
 interface BasicImageTransformations {
     /**
      * Maximum width in image pixels. The value must be an integer.
@@ -10608,6 +11284,22 @@ interface RequestInitCfPropertiesImageDraw extends BasicImageTransformations {
      *   (form a line).
      */
     repeat?: true | "x" | "y";
+    /**
+     * How to combine the foreground and backdrop pixels to create the result
+     */
+    composite?: 
+    /** Foreground drawn on top of backdrop (default) */
+    'over'
+    /** Foreground shown only where backdrop is opaque */
+     | 'in'
+    /** Foreground drawn on top, but clipped to the backdrop's shape */
+     | 'atop'
+    /** Foreground shown only where backdrop is transparent */
+     | 'out'
+    /** Foreground and backdrop visible only where the other is not */
+     | 'xor'
+    /** Foreground and backdrop channels added (brightening) */
+     | 'lighter';
     /**
      * Position of the overlay image relative to a given edge. Each property is
      * an offset in pixels. 0 aligns exactly to the edge. For example, left: 10
@@ -11379,11 +12071,11 @@ interface SendEmail {
     send(message: EmailMessage): Promise<EmailSendResult>;
     send(builder: {
         from: string | EmailAddress;
-        to: string | string[];
+        to: string | EmailAddress | (string | EmailAddress)[];
         subject: string;
         replyTo?: string | EmailAddress;
-        cc?: string | string[];
-        bcc?: string | string[];
+        cc?: string | EmailAddress | (string | EmailAddress)[];
+        bcc?: string | EmailAddress | (string | EmailAddress)[];
         headers?: Record<string, string>;
         text?: string;
         html?: string;
@@ -11619,11 +12311,25 @@ type ImageTransform = {
 type ImageDrawOptions = {
     opacity?: number;
     repeat?: boolean | string;
+    composite?: ImageCompositeMode;
     top?: number;
     left?: number;
     bottom?: number;
     right?: number;
 };
+type ImageCompositeMode = 
+/** Foreground drawn on top of backdrop (default) */
+'over'
+/** Foreground shown only where backdrop is opaque */
+ | 'in'
+/** Foreground drawn on top, but clipped to the backdrop's shape */
+ | 'atop'
+/** Foreground shown only where backdrop is transparent */
+ | 'out'
+/** Foreground and backdrop visible only where the other is not */
+ | 'xor'
+/** Foreground and backdrop channels added (brightening) */
+ | 'lighter';
 type ImageInputOptions = {
     encoding?: 'base64';
 };
@@ -12199,6 +12905,7 @@ declare namespace CloudflareWorkersModule {
     export type WorkflowTimeoutDuration = WorkflowSleepDuration;
     export type WorkflowRetentionDuration = WorkflowSleepDuration;
     export type WorkflowBackoff = 'constant' | 'linear' | 'exponential';
+    export type WorkflowStepSensitivity = 'output';
     export type WorkflowStepConfig = {
         retries?: {
             limit: number;
@@ -12206,16 +12913,26 @@ declare namespace CloudflareWorkersModule {
             backoff?: WorkflowBackoff;
         };
         timeout?: WorkflowTimeoutDuration | number;
+        sensitive?: WorkflowStepSensitivity;
+    };
+    export type WorkflowCronSchedule = {
+        /** Cron expression that triggered this event. */
+        cron: string;
+        /** Timestamp of the scheduled trigger, in milliseconds since the Unix epoch. */
+        scheduledTime: number;
     };
     export type WorkflowEvent<T> = {
         payload: Readonly<T>;
         timestamp: Date;
         instanceId: string;
+        workflowName: string;
+        schedule?: WorkflowCronSchedule;
     };
     export type WorkflowStepEvent<T> = {
         payload: Readonly<T>;
         timestamp: Date;
         type: string;
+        sensitive?: WorkflowStepSensitivity;
     };
     export type WorkflowStepContext = {
         step: {
@@ -12225,9 +12942,19 @@ declare namespace CloudflareWorkersModule {
         attempt: number;
         config: WorkflowStepConfig;
     };
+    export type WorkflowRollbackContext<T = unknown> = {
+        error: Error;
+        output: T | undefined;
+        stepName: string;
+    };
+    export type WorkflowRollbackHandler<T = unknown> = (ctx: WorkflowRollbackContext<T>) => Promise<void>;
+    export type WorkflowStepRollbackOptions<T = unknown> = {
+        rollback?: WorkflowRollbackHandler<T>;
+        rollbackConfig?: WorkflowStepConfig;
+    };
     export abstract class WorkflowStep {
-        do<T extends Rpc.Serializable<T>>(name: string, callback: (ctx: WorkflowStepContext) => Promise<T>): Promise<T>;
-        do<T extends Rpc.Serializable<T>>(name: string, config: WorkflowStepConfig, callback: (ctx: WorkflowStepContext) => Promise<T>): Promise<T>;
+        do<T extends Rpc.Serializable<T>>(name: string, callback: (ctx: WorkflowStepContext) => Promise<T>, rollbackOptions?: WorkflowStepRollbackOptions<T>): Promise<T>;
+        do<T extends Rpc.Serializable<T>>(name: string, config: WorkflowStepConfig, callback: (ctx: WorkflowStepContext) => Promise<T>, rollbackOptions?: WorkflowStepRollbackOptions<T>): Promise<T>;
         sleep: (name: string, duration: WorkflowSleepDuration) => Promise<void>;
         sleepUntil: (name: string, timestamp: Date | number) => Promise<void>;
         waitForEvent<T extends Rpc.Serializable<T>>(name: string, options: {
@@ -13493,6 +14220,103 @@ type WorkerVersionMetadata = {
     /** The timestamp of when the Worker Version was uploaded */
     timestamp: string;
 };
+// ============ Web Search Request Types ============
+/**
+ * Options for a Web Search query.
+ */
+type WebSearchSearchOptions = {
+    /** The search query. */
+    query: string;
+    /**
+     * Maximum number of results to return. Defaults to 10, capped at 20.
+     * The actual count may be lower if fewer matches exist.
+     */
+    limit?: number;
+};
+// ============ Web Search Response Types ============
+/**
+ * A single Web Search result.
+ *
+ * Web Search is discovery-only -- results carry catalog metadata about a page
+ * but never the page body. To read a result's content the caller invokes the
+ * global `fetch()` API against the result's `url`, at which point the
+ * destination's own access controls apply (including Cloudflare Pay-per-Crawl).
+ */
+type WebSearchResult = {
+    /** Canonical URL. */
+    url: string;
+    /** Page title. */
+    title: string;
+    /** Page-level description. May be absent. */
+    description?: string;
+    /**
+     * Last-modified date for the page, when known. Naive (no timezone)
+     * ISO-8601 datetime, e.g. `"2025-11-30T04:39:48"`.
+     */
+    lastModifiedDate?: string;
+    /**
+     * Page meta image URL (typically the `og:image`). May be absent.
+     */
+    imageUrl?: string;
+    /** Optional favicon URL for UI hints. */
+    faviconUrl?: string;
+};
+/**
+ * Per-response metadata for a Web Search query. Carries operational
+ * fields useful for support and debugging.
+ */
+type WebSearchResponseMetadata = {
+    /** The query that was executed. */
+    query: string;
+    /** Opaque request identifier used for support and debugging. */
+    requestId: string;
+    /** End-to-end latency for this search request, in milliseconds. */
+    latencyMs: number;
+};
+/**
+ * Response from a Web Search query.
+ */
+type WebSearchSearchResponse = {
+    items: WebSearchResult[];
+    metadata: WebSearchResponseMetadata;
+};
+// ============ Web Search Binding Class ============
+/**
+ * Cloudflare Web Search binding.
+ *
+ * Discovery-only primitive for agents and Workers. Returns URLs and catalog
+ * metadata for a query; never returns page content or excerpts. To read a
+ * result's body, fetch the URL with the global `fetch()` API.
+ *
+ * Declared in wrangler with a single object (there is exactly one corpus, the
+ * public web, so there is no name, namespace, or instance to specify):
+ *
+ * ```jsonc
+ * { "web_search": { "binding": "WEBSEARCH" } }
+ * ```
+ *
+ * @example
+ * ```ts
+ * const { items, metadata } = await env.WEBSEARCH.search({
+ *   query: "Cloudflare Workers",
+ * });
+ *
+ * const top = items[0];
+ * console.log(top.url, top.title, metadata.latencyMs);
+ *
+ * // Read content yourself; pay-per-crawl and other publisher
+ * // controls apply at the fetch site, not at search time.
+ * const page = await fetch(top.url);
+ * ```
+ */
+declare abstract class WebSearch {
+    /**
+     * Run a Web Search query.
+     * @param options Search options. Only `query` is required.
+     * @returns The matching results plus per-response metadata.
+     */
+    search(options: WebSearchSearchOptions): Promise<WebSearchSearchResponse>;
+}
 interface DynamicDispatchLimits {
     /**
      * Limit CPU time in milliseconds.
diff --git a/components/providers/RealtimeBridge.tsx b/components/providers/RealtimeBridge.tsx
index 43749bfd..8347f229 100644
--- a/components/providers/RealtimeBridge.tsx
+++ b/components/providers/RealtimeBridge.tsx
@@ -14,7 +14,7 @@ const MAX_BACKOFF_MS = 30_000;
  * `EventSource` against the in-memory SSE broker (`_broker.node.ts`). On
  * Cloudflare Workers a long-lived SSE connection bills the wall-clock as
  * compute and isolates do not share broker state, so the client instead opens
- * a WebSocket to the hibernating `MymirBroker` Durable Object (zero compute
+ * a WebSocket to the hibernating `PiyazBroker` Durable Object (zero compute
  * while idle). Both transports feed the same invalidation switch
  * ({@link applyRealtimeEvent}); the DO sends SSE-framed payloads over the
  * socket so the wire shape matches the EventSource path.
diff --git a/lib/auth/verified-oauth-clients.ts b/lib/auth/verified-oauth-clients.ts
index 72528efd..b7657dcf 100644
--- a/lib/auth/verified-oauth-clients.ts
+++ b/lib/auth/verified-oauth-clients.ts
@@ -12,7 +12,7 @@ import "server-only";
  * not on the name. Clients not on this list render their raw registered name
  * verbatim so the user sees exactly what asked for access.
  *
- * Populated from `MYMIR_VERIFIED_OAUTH_CLIENT_IDS` (comma-separated client
+ * Populated from `PIYAZ_VERIFIED_OAUTH_CLIENT_IDS` (comma-separated client
  * ids). The parsed set is memoized keyed on the raw env string — env vars
  * are fixed per deploy on both Workers and self-host, so in practice the
  * parse runs once per process/isolate, and the re-key keeps the function
@@ -31,7 +31,7 @@ let verifiedClientIds: ReadonlySet<string> = new Set();
  * @returns True when the client is on the verified allowlist.
  */
 export function isVerifiedOAuthClient(clientId: string): boolean {
-  const raw = process.env.MYMIR_VERIFIED_OAUTH_CLIENT_IDS ?? "";
+  const raw = process.env.PIYAZ_VERIFIED_OAUTH_CLIENT_IDS ?? "";
   if (raw !== cachedRaw) {
     cachedRaw = raw;
     verifiedClientIds = new Set(
diff --git a/lib/realtime/_broker.ts b/lib/realtime/_broker.ts
index 57dfcdaf..a2541a7d 100644
--- a/lib/realtime/_broker.ts
+++ b/lib/realtime/_broker.ts
@@ -4,6 +4,6 @@
  * `next.config.ts`'s webpack alias rewrites this import to
  * `./_broker.workers` on Cloudflare builds and to `./_broker.node`
  * everywhere else. The Node variant is the existing in-memory broker;
- * the Workers variant proxies to the `MymirBroker` Durable Object.
+ * the Workers variant proxies to the `PiyazBroker` Durable Object.
  */
 export * from "./_broker.node";
diff --git a/lib/realtime/_broker.workers.ts b/lib/realtime/_broker.workers.ts
index 889e7e4b..fbe05df0 100644
--- a/lib/realtime/_broker.workers.ts
+++ b/lib/realtime/_broker.workers.ts
@@ -38,7 +38,7 @@ export {
 } from "./_broker.node";
 
 /** Stable name for the single broker DO that owns every user's subs. */
-const BROKER_DO_NAME = "mymir-broker-global";
+const BROKER_DO_NAME = "piyaz-broker-global";
 
 /** Canonical request URL the adapter targets — fixed so signatures match. */
 const BROKER_URL = "https://broker/";
@@ -80,7 +80,7 @@ function resolveBrokerSecret(): string | null {
  *
  * @param method - HTTP method (POST or GET).
  * @param body - Body bytes or `null` for upgrade.
- * @param userId - `X-Mymir-User-Id` value or empty string.
+ * @param userId - `X-Piyaz-User-Id` value or empty string.
  * @returns `RequestInit` with method, headers, and body populated.
  */
 async function signedRequestInit(
@@ -157,9 +157,9 @@ class WorkersBroker {
    * context is unavailable so misconfigured deploys are diagnosable
    * without spamming.
    *
-   * @param namespace - Explicit `MYMIR_BROKER` binding from the worker
+   * @param namespace - Explicit `PIYAZ_BROKER` binding from the worker
    *   entry's `env`; omit inside route handlers.
-   * @returns The DO stub, or `null` when `MYMIR_BROKER` is not bound.
+   * @returns The DO stub, or `null` when `PIYAZ_BROKER` is not bound.
    */
   private stub(namespace?: DurableObjectNamespace): DurableObjectStub | null {
     let resolved = namespace;
@@ -167,9 +167,9 @@ class WorkersBroker {
       try {
         resolved = (
           getCloudflareContext({ async: false }).env as {
-            MYMIR_BROKER?: DurableObjectNamespace;
+            PIYAZ_BROKER?: DurableObjectNamespace;
           }
-        ).MYMIR_BROKER;
+        ).PIYAZ_BROKER;
       } catch {
         resolved = undefined;
       }
@@ -177,7 +177,7 @@ class WorkersBroker {
     if (!resolved) {
       if (!warnedMissingBinding) {
         console.error(
-          "[realtime] MYMIR_BROKER binding missing — realtime fanout will silently no-op",
+          "[realtime] PIYAZ_BROKER binding missing — realtime fanout will silently no-op",
         );
         warnedMissingBinding = true;
       }
@@ -245,7 +245,7 @@ class WorkersBroker {
    *
    * @param userId - Caller user id.
    * @param keys - Resource keys to register (no TTL).
-   * @param namespace - Explicit `MYMIR_BROKER` binding from the worker
+   * @param namespace - Explicit `PIYAZ_BROKER` binding from the worker
    *   entry's `env`; omit inside route handlers.
    * @throws When the binding or signing secret is missing, or the DO
    *   fetch rejects.
@@ -258,7 +258,7 @@ class WorkersBroker {
     const stub = this.stub(namespace);
     if (!stub) {
       throw new Error(
-        "MymirBroker binding missing — cannot register subscriptions",
+        "PiyazBroker binding missing — cannot register subscriptions",
       );
     }
     const msg: BrokerMessage = {
@@ -339,7 +339,7 @@ class WorkersBroker {
    * incoming frames into the SSE response stream.
    *
    * @param userId - Caller user id; attached as the DO-side tag.
-   * @param namespace - Explicit `MYMIR_BROKER` binding from the worker
+   * @param namespace - Explicit `PIYAZ_BROKER` binding from the worker
    *   entry's `env`; omit inside route handlers.
    * @returns The client end of the WebSocket pair.
    * @throws When the binding is missing, the secret is missing, or the DO
@@ -352,7 +352,7 @@ class WorkersBroker {
     const stub = this.stub(namespace);
     if (!stub) {
       throw new Error(
-        "MymirBroker binding missing — cannot open WebSocket to DO",
+        "PiyazBroker binding missing — cannot open WebSocket to DO",
       );
     }
     const { init, secretPresent } = await signedRequestInit(
@@ -368,7 +368,7 @@ class WorkersBroker {
     }
     const resp = await stub.fetch(BROKER_URL, init);
     if (resp.status !== 101 || !resp.webSocket) {
-      throw new Error(`MymirBroker upgrade failed: status ${resp.status}`);
+      throw new Error(`PiyazBroker upgrade failed: status ${resp.status}`);
     }
     return resp.webSocket;
   }
@@ -381,7 +381,7 @@ class WorkersBroker {
    */
   attach(_userId: string, _conn: Connection): void {
     throw new Error(
-      "MymirBroker WorkersBroker: attach is not callable from Workers; use connect(userId) to obtain a WebSocket from the DO",
+      "PiyazBroker WorkersBroker: attach is not callable from Workers; use connect(userId) to obtain a WebSocket from the DO",
     );
   }
 
@@ -393,7 +393,7 @@ class WorkersBroker {
    */
   tryAttach(_userId: string, _conn: Connection): boolean {
     throw new Error(
-      "MymirBroker WorkersBroker: tryAttach is not callable from Workers; use connect(userId) to obtain a WebSocket from the DO",
+      "PiyazBroker WorkersBroker: tryAttach is not callable from Workers; use connect(userId) to obtain a WebSocket from the DO",
     );
   }
 
@@ -405,7 +405,7 @@ class WorkersBroker {
    */
   isAtConnectionLimit(_userId: string): boolean {
     throw new Error(
-      "MymirBroker WorkersBroker: isAtConnectionLimit is not callable from Workers; use connect(userId) to obtain a WebSocket from the DO",
+      "PiyazBroker WorkersBroker: isAtConnectionLimit is not callable from Workers; use connect(userId) to obtain a WebSocket from the DO",
     );
   }
 
@@ -432,7 +432,7 @@ class WorkersBroker {
    */
   *subscribers(_key: ResourceKey): Iterable<string> {
     throw new Error(
-      "MymirBroker WorkersBroker: subscribers is not callable from Workers; use connect(userId) to obtain a WebSocket from the DO",
+      "PiyazBroker WorkersBroker: subscribers is not callable from Workers; use connect(userId) to obtain a WebSocket from the DO",
     );
   }
 
@@ -444,7 +444,7 @@ class WorkersBroker {
    */
   pruneExpired(_userId: string): void {
     throw new Error(
-      "MymirBroker WorkersBroker: pruneExpired is not callable from Workers; use connect(userId) to obtain a WebSocket from the DO",
+      "PiyazBroker WorkersBroker: pruneExpired is not callable from Workers; use connect(userId) to obtain a WebSocket from the DO",
     );
   }
 
@@ -456,7 +456,7 @@ class WorkersBroker {
    */
   _resetForTests(): void {
     throw new Error(
-      "MymirBroker WorkersBroker: _resetForTests is not callable from Workers; use connect(userId) to obtain a WebSocket from the DO",
+      "PiyazBroker WorkersBroker: _resetForTests is not callable from Workers; use connect(userId) to obtain a WebSocket from the DO",
     );
   }
 }
diff --git a/lib/realtime/broker-auth.ts b/lib/realtime/broker-auth.ts
index eac6438d..f2f76f77 100644
--- a/lib/realtime/broker-auth.ts
+++ b/lib/realtime/broker-auth.ts
@@ -1,8 +1,8 @@
 /**
- * HMAC-SHA256 signing envelope for the `MymirBroker` Durable Object RPC
+ * HMAC-SHA256 signing envelope for the `PiyazBroker` Durable Object RPC
  * surface. Authenticates every fetch the Workers broker adapter sends to
  * the DO so callers cannot spoof a `userId` or fabricate dispatches even
- * if they obtain the `MYMIR_BROKER` binding through some other path.
+ * if they obtain the `PIYAZ_BROKER` binding through some other path.
  *
  * Signing inputs (canonical string):
  *
@@ -15,11 +15,11 @@
  *     60-second freshness window
  *   - `bodyHashHex` — SHA-256 hex digest of the raw request body bytes
  *     (`""` when there is no body)
- *   - `userId` — value of `X-Mymir-User-Id` when set (upgrade only),
+ *   - `userId` — value of `X-Piyaz-User-Id` when set (upgrade only),
  *     empty string otherwise; included so the user-id header cannot be
  *     swapped post-signing
  *
- * Header format: `X-Mymir-Broker-Sig: t=<ts>,n=<nonce>,v=<hex>`.
+ * Header format: `X-Piyaz-Broker-Sig: t=<ts>,n=<nonce>,v=<hex>`.
  *
  * Workers-only: this file is imported by `_broker.workers.ts` (adapter)
  * and `broker-do.ts` (DO). The self-host bundle ignores both, so this
@@ -30,10 +30,10 @@
 export const BROKER_SIG_MAX_SKEW_MS = 60_000;
 
 /** Header name carrying the signed envelope. */
-export const BROKER_SIG_HEADER = "X-Mymir-Broker-Sig";
+export const BROKER_SIG_HEADER = "X-Piyaz-Broker-Sig";
 
 /** Header name carrying the user id on the WS upgrade. */
-export const BROKER_USER_ID_HEADER = "X-Mymir-User-Id";
+export const BROKER_USER_ID_HEADER = "X-Piyaz-User-Id";
 
 /**
  * Parse a signed-envelope header into its three fields, or `null` when
@@ -114,7 +114,7 @@ export async function hmacSha256Hex(
  * @param ts - Unix milliseconds.
  * @param nonce - Random nonce hex.
  * @param bodyHashHex - SHA-256 hex of the body (or empty string).
- * @param userId - `X-Mymir-User-Id` header value, or empty string.
+ * @param userId - `X-Piyaz-User-Id` header value, or empty string.
  * @returns Canonical signing string.
  */
 export function buildSigningString(
diff --git a/lib/realtime/broker-do.ts b/lib/realtime/broker-do.ts
index cf956610..40adbf04 100644
--- a/lib/realtime/broker-do.ts
+++ b/lib/realtime/broker-do.ts
@@ -12,7 +12,7 @@ import {
 } from "./broker-auth";
 
 /**
- * Wire message sent to the `MymirBroker` Durable Object over the
+ * Wire message sent to the `PiyazBroker` Durable Object over the
  * `fetch(request)` boundary. The DO holds the single broker-global view of
  * every user's subscriptions and connected WebSockets.
  */
@@ -62,7 +62,7 @@ const MAX_CONNECTIONS_PER_USER = 20;
  * sockets. This is what keeps a hibernating socket (which, unlike SSE,
  * never reconnects to re-register) receiving events after an idle cycle.
  */
-export class MymirBroker extends DurableObject<BrokerEnv> {
+export class PiyazBroker extends DurableObject<BrokerEnv> {
   private subs = new Map<string, Map<ResourceKey, number | null>>();
 
   /** False until {@link ensureHydrated} rebuilds {@link subs} after a wake. */
@@ -73,7 +73,7 @@ export class MymirBroker extends DurableObject<BrokerEnv> {
    * HMAC envelope, then routes WebSocket upgrades to the hibernation
    * accept path and JSON RPCs to the subscription / dispatch handlers.
    *
-   * The DO is only reachable to Workers that hold the `MYMIR_BROKER`
+   * The DO is only reachable to Workers that hold the `PIYAZ_BROKER`
    * binding, but the binding alone is not authentication: any caller
    * with the binding could spoof `userId` or fabricate dispatches if the
    * envelope check were skipped. The check rejects every unsigned or
@@ -163,7 +163,7 @@ export class MymirBroker extends DurableObject<BrokerEnv> {
 
   /**
    * Accept a new WebSocket on behalf of the user named in
-   * `X-Mymir-User-Id`. Enforces the per-user cap before allocating the
+   * `X-Piyaz-User-Id`. Enforces the per-user cap before allocating the
    * socket pair so a saturated user is rejected without consuming resources.
    *
    * @param request - Upgrade request carrying the user id header.
@@ -173,7 +173,7 @@ export class MymirBroker extends DurableObject<BrokerEnv> {
   private handleUpgrade(request: Request): Response {
     const userId = request.headers.get(BROKER_USER_ID_HEADER);
     if (!userId) {
-      return new Response("Missing X-Mymir-User-Id", { status: 400 });
+      return new Response("Missing X-Piyaz-User-Id", { status: 400 });
     }
     if (this.ctx.getWebSockets(userId).length >= MAX_CONNECTIONS_PER_USER) {
       return new Response("Connection limit reached", { status: 429 });
diff --git a/lib/realtime/broker.ts b/lib/realtime/broker.ts
index 53470617..7c151942 100644
--- a/lib/realtime/broker.ts
+++ b/lib/realtime/broker.ts
@@ -4,7 +4,7 @@
  *
  *   - Self-host (default): in-memory `Broker` from `./_broker.node`.
  *   - Cloudflare Workers (`DEPLOY_TARGET=cloudflare`): Durable Object-backed
- *     adapter from `./_broker.workers` that proxies to `MymirBroker`.
+ *     adapter from `./_broker.workers` that proxies to `PiyazBroker`.
  *
  * Call sites import from this file so the alias swap is transparent.
  */
diff --git a/open-next.config.ts b/open-next.config.ts
index 86cf286f..5f2ff893 100644
--- a/open-next.config.ts
+++ b/open-next.config.ts
@@ -10,7 +10,7 @@ import doQueue from "@opennextjs/cloudflare/overrides/queue/do-queue";
  *     `NEXT_INC_CACHE_R2_BUCKET` R2 binding.
  *   - `queue: doQueue` — revalidation queue backed by OpenNext's built-in
  *     `DOQueueHandler` Durable Object (declared as `NEXT_CACHE_DO_QUEUE` in
- *     `wrangler.jsonc`; separate from `MymirBroker`).
+ *     `wrangler.jsonc`; separate from `PiyazBroker`).
  *   - `tagCache: d1NextTagCache` — tag-revalidation cache backed by the
  *     `NEXT_TAG_CACHE_D1` D1 database.
  *   - `enableCacheInterception: false` — matches the OpenNext default. The
@@ -18,7 +18,7 @@ import doQueue from "@opennextjs/cloudflare/overrides/queue/do-queue";
  *     PPR support is on the roadmap (see MYMR-167 follow-ups). Flip to
  *     `true` only after measuring the cache-hit win against the PPR loss.
  *
- * `MymirBroker` is injected into `.open-next/worker.js` by
+ * `PiyazBroker` is injected into `.open-next/worker.js` by
  * `scripts/postbuild-cf.ts`; re-exporting it here is dead code because the
  * OpenNext worker template does not consume user exports from this file.
  */
diff --git a/scripts/assert-deploy-ready.ts b/scripts/assert-deploy-ready.ts
index dc620efe..e2cac24e 100644
--- a/scripts/assert-deploy-ready.ts
+++ b/scripts/assert-deploy-ready.ts
@@ -11,7 +11,7 @@
  *   - `env.production` exists.
  *   - No KV namespace `id` in `env.production` is all zeros.
  *   - No D1 `database_id` in `env.production` is the zero UUID.
- *   - No R2 binding in `env.production` references a `mymir-placeholder-*` bucket.
+ *   - No R2 binding in `env.production` references a `piyaz-placeholder-*` bucket.
  *   - Every required production secret is registered in the production
  *     Wrangler env: BROKER_DO_SECRET (broker DO HMAC key), BETTER_AUTH_SECRET
  *     (Better-auth signing key), DATABASE_URL / DATABASE_SERVICE_ROLE_URL /
@@ -30,7 +30,7 @@ const WRANGLER_JSONC = path.join(ROOT, "wrangler.jsonc");
 
 const ZERO_KV_ID = "00000000000000000000000000000000";
 const ZERO_D1_ID = "00000000-0000-0000-0000-000000000000";
-const PLACEHOLDER_BUCKET_RE = /^mymir-placeholder-/i;
+const PLACEHOLDER_BUCKET_RE = /^piyaz-placeholder-/i;
 
 interface KvBinding {
   binding: string;
diff --git a/tests/auth/verified-oauth-clients.test.ts b/tests/auth/verified-oauth-clients.test.ts
index 725f08ec..9c79fd8e 100644
--- a/tests/auth/verified-oauth-clients.test.ts
+++ b/tests/auth/verified-oauth-clients.test.ts
@@ -1,7 +1,7 @@
 import { test, expect, afterEach } from "bun:test";
 import { isVerifiedOAuthClient } from "@/lib/auth/verified-oauth-clients";
 
-const ENV_KEY = "MYMIR_VERIFIED_OAUTH_CLIENT_IDS";
+const ENV_KEY = "PIYAZ_VERIFIED_OAUTH_CLIENT_IDS";
 const originalValue = process.env[ENV_KEY];
 
 afterEach(() => {
diff --git a/tests/realtime/broker-do.test.ts b/tests/realtime/broker-do.test.ts
index 2687e551..6cb89a71 100644
--- a/tests/realtime/broker-do.test.ts
+++ b/tests/realtime/broker-do.test.ts
@@ -35,7 +35,7 @@ mock.module("cloudflare:workers", () => ({
   1 = { __side: "server" } as unknown;
 };
 
-const { MymirBroker } = await import("@/lib/realtime/broker-do");
+const { PiyazBroker } = await import("@/lib/realtime/broker-do");
 
 const TEST_SECRET = "test-broker-secret";
 
@@ -76,14 +76,14 @@ function fakeSocket(): FakeSocket {
   };
 }
 
-/** Build a `MymirBroker` with our fake ctx and the test secret bound. */
+/** Build a `PiyazBroker` with our fake ctx and the test secret bound. */
 function makeBroker(
   env: { BROKER_DO_SECRET?: string } = {
     BROKER_DO_SECRET: TEST_SECRET,
   },
 ) {
   const ctx = fakeCtx();
-  const broker = new MymirBroker(ctx as never, env as never);
+  const broker = new PiyazBroker(ctx as never, env as never);
   return { ctx, broker };
 }
 
@@ -92,7 +92,7 @@ function makeBroker(
  * tests exercise the same code path the DO sees in workerd.
  */
 async function rpc(
-  broker: InstanceType<typeof MymirBroker>,
+  broker: InstanceType<typeof PiyazBroker>,
   body: unknown,
   opts?: { secret?: string; tsOverride?: number },
 ) {
@@ -124,11 +124,11 @@ async function rpc(
 
 /**
  * Sign and dispatch a WebSocket upgrade. Carries the userId header inside
- * the signing input so an unsigned `X-Mymir-User-Id` swap cannot reach the
+ * the signing input so an unsigned `X-Piyaz-User-Id` swap cannot reach the
  * DO.
  */
 async function upgrade(
-  broker: InstanceType<typeof MymirBroker>,
+  broker: InstanceType<typeof PiyazBroker>,
   userId: string,
   opts?: { secret?: string },
 ) {
@@ -286,7 +286,7 @@ test("TTL expiry — expired entries are cleaned and not delivered", async () =>
   expect(ws.send).not.toHaveBeenCalled();
 });
 
-test("WebSocket upgrade — missing X-Mymir-User-Id returns 400", async () => {
+test("WebSocket upgrade — missing X-Piyaz-User-Id returns 400", async () => {
   const { broker } = makeBroker();
   // Sign with userId="" so the envelope passes; the handler then sees the
   // missing header and answers 400.
@@ -529,7 +529,7 @@ test("hibernation rehydration — a woken DO rebuilds subs from storage", async
   ctx.data.set("subs:u1", [["project:p1", null]]);
   const ws = fakeSocket();
   ctx.acceptWebSocket(ws, ["u1"]);
-  const broker = new MymirBroker(
+  const broker = new PiyazBroker(
     ctx as never,
     {
       BROKER_DO_SECRET: TEST_SECRET,
@@ -550,7 +550,7 @@ test("hibernation rehydration — a woken DO rebuilds subs from storage", async
 test("register persists the user's sub set into storage", async () => {
   const ctx = fakeCtxWithStorage();
   ctx.acceptWebSocket(fakeSocket(), ["u1"]);
-  const broker = new MymirBroker(
+  const broker = new PiyazBroker(
     ctx as never,
     {
       BROKER_DO_SECRET: TEST_SECRET,
@@ -623,7 +623,7 @@ test("register without a live socket is dropped — mirrors self-host connected-
 
 test("register without a live socket does not persist to storage", async () => {
   const ctx = fakeCtxWithStorage();
-  const broker = new MymirBroker(
+  const broker = new PiyazBroker(
     ctx as never,
     { BROKER_DO_SECRET: TEST_SECRET } as never,
   );
diff --git a/worker-cf.ts b/worker-cf.ts
index a630793b..08235731 100644
--- a/worker-cf.ts
+++ b/worker-cf.ts
@@ -2,7 +2,7 @@
  * Cloudflare Workers entry point for Piyaz's OpenNext build.
  *
  * Re-exports the Durable Object classes wrangler instantiates at runtime
- * (`MymirBroker`, `DOQueueHandler`) and delegates `fetch` to the
+ * (`PiyazBroker`, `DOQueueHandler`) and delegates `fetch` to the
  * OpenNext-generated handler. Before the first delegation, registers the
  * Cloudflare rate-limit bindings against `lib/api/rate-limit.ts`'s singleton
  * slots so middleware throttling uses the per-POP CF binding instead of the
@@ -27,7 +27,7 @@ import {
   type DurableObjectNamespace,
   type ResourceKey,
 } from "./lib/realtime/_broker.workers";
-import { MymirBroker } from "./lib/realtime/broker-do";
+import { PiyazBroker } from "./lib/realtime/broker-do";
 
 // eslint-disable-next-line @typescript-eslint/ban-ts-comment -- generated entry; tsc resolves it but @ts-expect-error trips "unused directive".
 // @ts-ignore generated by `opennextjs-cloudflare build`; resolved at bundle time.
@@ -35,7 +35,7 @@ import { default as openNextHandler } from "./.open-next/worker.js";
 // eslint-disable-next-line @typescript-eslint/ban-ts-comment -- generated entry, see above.
 // @ts-ignore generated by `opennextjs-cloudflare build`.
 export { DOQueueHandler } from "./.open-next/worker.js";
-export { MymirBroker };
+export { PiyazBroker };
 
 /**
  * Subset of the auto-generated `CloudflareEnv` (`cloudflare-env.d.ts`) that
@@ -53,7 +53,7 @@ interface WorkerEnv {
   DATABASE_SERVICE_ROLE_URL?: string;
   RATE_LIMIT_API?: CloudflareRateLimitBinding;
   RATE_LIMIT_AUTH?: CloudflareRateLimitBinding;
-  MYMIR_BROKER?: DurableObjectNamespace;
+  PIYAZ_BROKER?: DurableObjectNamespace;
 }
 
 /**
@@ -152,7 +152,7 @@ function isRealtimeUpgrade(request: Request): boolean {
 }
 
 /**
- * Terminate the realtime WebSocket upgrade against the `MymirBroker` Durable
+ * Terminate the realtime WebSocket upgrade against the `PiyazBroker` Durable
  * Object. Authorization (session + accessible projects) runs through the
  * Next/webpack bundle via an internal sub-fetch to `/api/events/authorize`,
  * wrapped in a request DB frame that is torn down before the upgrade
@@ -213,8 +213,8 @@ async function handleRealtimeUpgrade(
       ...authorized.projectIds.map((id): ResourceKey => `project:${id}`),
       `project-list:${authorized.userId}`,
     ];
-    const client = await broker.connect(authorized.userId, env.MYMIR_BROKER);
-    await broker.registerMany(authorized.userId, keys, env.MYMIR_BROKER);
+    const client = await broker.connect(authorized.userId, env.PIYAZ_BROKER);
+    await broker.registerMany(authorized.userId, keys, env.PIYAZ_BROKER);
     return new Response(null, {
       status: 101,
       webSocket: client,
diff --git a/wrangler.jsonc b/wrangler.jsonc
index 88808d26..cd4f191e 100644
--- a/wrangler.jsonc
+++ b/wrangler.jsonc
@@ -1,7 +1,7 @@
 {
   "$schema": "node_modules/wrangler/config-schema.json",
   "main": "./worker-cf.ts",
-  "name": "mymir",
+  "name": "piyaz",
   "compatibility_date": "2026-05-16",
   "compatibility_flags": ["nodejs_compat"],
   "assets": {
@@ -16,13 +16,13 @@
   },
   "env": {
     "production": {
-      "name": "mymir-production",
+      "name": "piyaz-production",
       "assets": {
         "directory": ".open-next/assets",
         "binding": "ASSETS"
       },
       "services": [
-        { "binding": "WORKER_SELF_REFERENCE", "service": "mymir-production" }
+        { "binding": "WORKER_SELF_REFERENCE", "service": "piyaz-production" }
       ],
       "kv_namespaces": [
         { "binding": "AUTH_KV", "id": "839e8280f3bf47dd95c0a5c4c244033c" }
@@ -30,26 +30,26 @@
       "r2_buckets": [
         {
           "binding": "NEXT_INC_CACHE_R2_BUCKET",
-          "bucket_name": "mymir-isr-cache"
+          "bucket_name": "piyaz-isr-cache"
         }
       ],
       "d1_databases": [
         {
           "binding": "NEXT_TAG_CACHE_D1",
-          "database_id": "a4b3426f-ba2e-4358-936d-594697c16908",
-          "database_name": "mymir-tag-cache"
+          "database_id": "1a937bae-dcbf-4991-a607-ccda2a355ba0",
+          "database_name": "piyaz-tag-cache"
         }
       ],
       "durable_objects": {
         "bindings": [
-          { "name": "MYMIR_BROKER", "class_name": "MymirBroker" },
+          { "name": "PIYAZ_BROKER", "class_name": "PiyazBroker" },
           { "name": "NEXT_CACHE_DO_QUEUE", "class_name": "DOQueueHandler" }
         ]
       },
       "migrations": [
         {
           "tag": "v1",
-          "new_sqlite_classes": ["MymirBroker", "DOQueueHandler"]
+          "new_sqlite_classes": ["PiyazBroker", "DOQueueHandler"]
         }
       ],
       "ratelimits": [

From 0c1326a4afe91554776f826916a4029b7cf7d60e Mon Sep 17 00:00:00 2001
From: Furkan Akbulutlar <f.akbulutlar@gmail.com>
Date: Wed, 17 Jun 2026 23:00:14 +0200
Subject: [PATCH 2/2] chore: rename auth schema to piyaz_auth and bump postgres
 to 18

---
 .github/workflows/ci.yml                      |  2 +-
 docker-compose.test.yml                       |  4 +-
 docker-compose.yml                            |  4 +-
 docker/grants.sql                             | 38 +++++-----
 docker/init-auth.sql                          |  8 +--
 docker/init-pg-cron.sql                       |  4 +-
 docker/rls-functions.sql                      | 72 +++++++++----------
 drizzle/0000_goofy_the_enforcers.sql          | 10 +--
 drizzle/meta/0000_snapshot.json               | 10 +--
 lib/actions/team-invitations-map.ts           |  2 +-
 lib/actions/team-members-map.ts               |  4 +-
 lib/auth.ts                                   |  2 +-
 lib/auth/org-permissions.ts                   |  2 +-
 lib/data/access.ts                            |  4 +-
 lib/data/account.ts                           |  4 +-
 lib/data/invitation.ts                        |  2 +-
 lib/data/membership.ts                        |  2 +-
 lib/data/oauth-session.ts                     |  2 +-
 lib/data/task.ts                              |  2 +-
 lib/data/views.ts                             |  2 +-
 lib/db/_driver.node.ts                        |  4 +-
 lib/db/_driver.workers.ts                     |  4 +-
 lib/db/auth-schema.ts                         | 36 +++++-----
 lib/db/connection.ts                          |  2 +-
 lib/db/raw/fetch-assignees-by-project.ts      |  2 +-
 lib/db/raw/get-project-list-max-updated-at.ts |  2 +-
 lib/db/team-schema.ts                         | 10 +--
 migrations/001-oauth-tables.sql               |  4 +-
 tests/auth/change-password.test.ts            | 10 +--
 tests/data/account.test.ts                    | 24 +++----
 tests/data/membership.test.ts                 | 20 +++---
 tests/data/project.test.ts                    |  6 +-
 tests/data/rls-dataring.test.ts               |  2 +-
 tests/data/rls-team-invite-code.test.ts       | 20 +++---
 tests/data/rls.test.ts                        |  6 +-
 tests/data/task.test.ts                       |  6 +-
 tests/db/connection.test.ts                   |  2 +-
 tests/db/immutability.test.ts                 |  6 +-
 ...wn.test.ts => piyaz-auth-lockdown.test.ts} | 20 +++---
 tests/db/rls-functions.test.ts                | 10 +--
 tests/realtime/access.test.ts                 |  4 +-
 .../security/list-invitations-bypass.test.ts  | 12 ++--
 tests/setup/migrate.ts                        |  6 +-
 tests/setup/schema.ts                         | 24 +++----
 tests/setup/seed.ts                           |  6 +-
 45 files changed, 214 insertions(+), 214 deletions(-)
 rename tests/db/{neon-auth-lockdown.test.ts => piyaz-auth-lockdown.test.ts} (92%)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8e1e6047..a1e92ee2 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     services:
       postgres:
-        image: postgres:17.6
+        image: postgres:18
         env:
           POSTGRES_USER: piyaz
           POSTGRES_PASSWORD: piyaz
diff --git a/docker-compose.test.yml b/docker-compose.test.yml
index f43e0387..351c009e 100644
--- a/docker-compose.test.yml
+++ b/docker-compose.test.yml
@@ -9,7 +9,7 @@
 name: piyaz-test
 services:
   db-test:
-    image: postgres:17.10
+    image: postgres:18
     environment:
       POSTGRES_USER: piyaz
       POSTGRES_PASSWORD: piyaz
@@ -17,7 +17,7 @@ services:
     ports:
       - "5433:5432"
     tmpfs:
-      - /var/lib/postgresql/data
+      - /var/lib/postgresql
     healthcheck:
       test: ["CMD-SHELL", "pg_isready -U piyaz -d piyaz_test"]
       interval: 2s
diff --git a/docker-compose.yml b/docker-compose.yml
index a469857a..61b6b218 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,7 +1,7 @@
 name: piyaz
 services:
   db:
-    image: postgres:17.10
+    image: postgres:18
     restart: unless-stopped
     environment:
       POSTGRES_USER: piyaz
@@ -15,7 +15,7 @@ services:
     ports:
       - "5432:5432"
     volumes:
-      - pgdata:/var/lib/postgresql/data
+      - pgdata:/var/lib/postgresql
       - ./docker/init-auth.sql:/docker-entrypoint-initdb.d/01-auth.sql:ro
       - ./docker/init-rls.sh:/docker-entrypoint-initdb.d/02-rls.sh:ro
       - ./docker/grants.sql:/opt/postgres-init/grants.sql:ro
diff --git a/docker/grants.sql b/docker/grants.sql
index 9d8701b3..4e26c3b3 100644
--- a/docker/grants.sql
+++ b/docker/grants.sql
@@ -25,30 +25,30 @@ GRANT CREATE ON SCHEMA public TO service_role;
 GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA public TO app_user, service_role;
 GRANT USAGE, SELECT ON ALL SEQUENCES IN SCHEMA public TO app_user, service_role;
 
--- neon_auth: app_user reaches it only via SECURITY DEFINER functions.
+-- piyaz_auth: app_user reaches it only via SECURITY DEFINER functions.
 -- Explicit REVOKEs make re-runs idempotent on pre-lockdown installs.
-GRANT USAGE ON SCHEMA neon_auth TO service_role, auth_role;
-REVOKE ALL ON SCHEMA neon_auth FROM app_user;
-REVOKE ALL ON ALL TABLES IN SCHEMA neon_auth FROM app_user;
-REVOKE ALL ON ALL SEQUENCES IN SCHEMA neon_auth FROM app_user;
+GRANT USAGE ON SCHEMA piyaz_auth TO service_role, auth_role;
+REVOKE ALL ON SCHEMA piyaz_auth FROM app_user;
+REVOKE ALL ON ALL TABLES IN SCHEMA piyaz_auth FROM app_user;
+REVOKE ALL ON ALL SEQUENCES IN SCHEMA piyaz_auth FROM app_user;
 
--- service_role: minimal set on neon_auth — used by
+-- service_role: minimal set on piyaz_auth — used by
 -- clearOrgMembershipArtifacts and the OAuth-session settings UI.
-GRANT SELECT, REFERENCES ON neon_auth."member" TO service_role;
-GRANT SELECT, REFERENCES ON neon_auth.organization TO service_role;
-GRANT SELECT, REFERENCES ON neon_auth."user" TO service_role;
-GRANT SELECT, REFERENCES ON neon_auth.invitation TO service_role;
-GRANT SELECT, UPDATE ON neon_auth."session" TO service_role;
-GRANT SELECT, DELETE ON neon_auth."oauthAccessToken" TO service_role;
+GRANT SELECT, REFERENCES ON piyaz_auth."member" TO service_role;
+GRANT SELECT, REFERENCES ON piyaz_auth.organization TO service_role;
+GRANT SELECT, REFERENCES ON piyaz_auth."user" TO service_role;
+GRANT SELECT, REFERENCES ON piyaz_auth.invitation TO service_role;
+GRANT SELECT, UPDATE ON piyaz_auth."session" TO service_role;
+GRANT SELECT, DELETE ON piyaz_auth."oauthAccessToken" TO service_role;
 -- UPDATE: revokeOAuthSession soft-revokes (`revoked = now()`) before
 -- cascading the access-token delete in the same tx.
-GRANT SELECT, UPDATE, DELETE ON neon_auth."oauthRefreshToken" TO service_role;
-GRANT SELECT, DELETE ON neon_auth."oauthConsent" TO service_role;
+GRANT SELECT, UPDATE, DELETE ON piyaz_auth."oauthRefreshToken" TO service_role;
+GRANT SELECT, DELETE ON piyaz_auth."oauthConsent" TO service_role;
 -- SELECT only; writes go through auth_role.
-GRANT SELECT ON neon_auth."oauthClient" TO service_role;
+GRANT SELECT ON piyaz_auth."oauthClient" TO service_role;
 
--- auth_role: full DML on neon_auth, zero grants on public. No
+-- auth_role: full DML on piyaz_auth, zero grants on public. No
 -- ALTER DEFAULT PRIVILEGES — same RLS-race rationale as the public block.
--- New neon_auth tables need explicit grants in their migration.
-GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA neon_auth TO auth_role;
-GRANT USAGE, SELECT ON ALL SEQUENCES IN SCHEMA neon_auth TO auth_role;
+-- New piyaz_auth tables need explicit grants in their migration.
+GRANT SELECT, INSERT, UPDATE, DELETE ON ALL TABLES IN SCHEMA piyaz_auth TO auth_role;
+GRANT USAGE, SELECT ON ALL SEQUENCES IN SCHEMA piyaz_auth TO auth_role;
diff --git a/docker/init-auth.sql b/docker/init-auth.sql
index e9c451c6..aa9d36a1 100644
--- a/docker/init-auth.sql
+++ b/docker/init-auth.sql
@@ -1,9 +1,9 @@
--- Neon Auth schema for self-hosted Postgres.
--- Mirrors the tables Neon Auth provisions on hosted Neon projects.
+-- Self-managed piyaz_auth schema for Postgres (Better Auth tables).
+-- The project does not use Neon Auth Managed; this script owns the schema.
 -- Idempotent — safe to re-run on existing databases.
 
-CREATE SCHEMA IF NOT EXISTS neon_auth;
-SET search_path TO neon_auth;
+CREATE SCHEMA IF NOT EXISTS piyaz_auth;
+SET search_path TO piyaz_auth;
 
 CREATE TABLE IF NOT EXISTS "user" (
     "id"             uuid PRIMARY KEY DEFAULT gen_random_uuid(),
diff --git a/docker/init-pg-cron.sql b/docker/init-pg-cron.sql
index e8484a92..7df905de 100644
--- a/docker/init-pg-cron.sql
+++ b/docker/init-pg-cron.sql
@@ -14,9 +14,9 @@ SELECT cron.schedule(
   'purge-oauth-tokens',
   '0 3 * * *',
   $$
-  DELETE FROM neon_auth."oauthRefreshToken"
+  DELETE FROM piyaz_auth."oauthRefreshToken"
    WHERE revoked IS NOT NULL OR "expiresAt" < now();
-  DELETE FROM neon_auth."oauthAccessToken"
+  DELETE FROM piyaz_auth."oauthAccessToken"
    WHERE "expiresAt" < now();
   $$
 );
diff --git a/docker/rls-functions.sql b/docker/rls-functions.sql
index c643cfad..96f0f8c7 100644
--- a/docker/rls-functions.sql
+++ b/docker/rls-functions.sql
@@ -153,8 +153,8 @@ GRANT EXECUTE ON FUNCTION public.list_org_project_ids(uuid) TO service_role;
 
 
 -- ---------------------------------------------------------------------------
--- current_user_* helpers — app_user's only path to neon_auth.*.
--- STABLE plpgsql; pinned search_path defeats neon_auth.* shadowing.
+-- current_user_* helpers — app_user's only path to piyaz_auth.*.
+-- STABLE plpgsql; pinned search_path defeats piyaz_auth.* shadowing.
 -- ---------------------------------------------------------------------------
 
 CREATE OR REPLACE FUNCTION public.current_user_org_ids()
@@ -162,7 +162,7 @@ RETURNS uuid[]
 LANGUAGE plpgsql
 STABLE
 SECURITY DEFINER
-SET search_path = neon_auth, pg_catalog, pg_temp
+SET search_path = piyaz_auth, pg_catalog, pg_temp
 AS $$
 BEGIN
   RETURN (
@@ -170,7 +170,7 @@ BEGIN
       array_agg("organizationId") FILTER (WHERE "organizationId" IS NOT NULL),
       ARRAY[]::uuid[]
     )
-    FROM neon_auth."member"
+    FROM piyaz_auth."member"
     WHERE "userId" = NULLIF(current_setting('app.user_id', TRUE), '')::uuid
   );
 END;
@@ -183,13 +183,13 @@ RETURNS text
 LANGUAGE plpgsql
 STABLE
 SECURITY DEFINER
-SET search_path = neon_auth, pg_catalog, pg_temp
+SET search_path = piyaz_auth, pg_catalog, pg_temp
 AS $$
 DECLARE
   v_role text;
 BEGIN
   SELECT role INTO v_role
-  FROM neon_auth."member"
+  FROM piyaz_auth."member"
   WHERE "organizationId" = p_org_id
     AND "userId" = NULLIF(current_setting('app.user_id', TRUE), '')::uuid
   LIMIT 1;
@@ -214,7 +214,7 @@ RETURNS TABLE (
 LANGUAGE plpgsql
 STABLE
 SECURITY DEFINER
-SET search_path = neon_auth, pg_catalog, pg_temp
+SET search_path = piyaz_auth, pg_catalog, pg_temp
 AS $$
 BEGIN
   RETURN QUERY
@@ -223,11 +223,11 @@ BEGIN
     o.name,
     o.slug,
     m.role,
-    (SELECT count(*)::int FROM neon_auth."member" mc WHERE mc."organizationId" = o.id) AS member_count,
+    (SELECT count(*)::int FROM piyaz_auth."member" mc WHERE mc."organizationId" = o.id) AS member_count,
     m."createdAt",
     o."createdAt"
-  FROM neon_auth."member" m
-  INNER JOIN neon_auth."organization" o ON o.id = m."organizationId"
+  FROM piyaz_auth."member" m
+  INNER JOIN piyaz_auth."organization" o ON o.id = m."organizationId"
   WHERE m."userId" = NULLIF(current_setting('app.user_id', TRUE), '')::uuid
   ORDER BY m."createdAt" ASC, o.id ASC;
 END;
@@ -240,12 +240,12 @@ RETURNS boolean
 LANGUAGE plpgsql
 STABLE
 SECURITY DEFINER
-SET search_path = neon_auth, pg_catalog, pg_temp
+SET search_path = piyaz_auth, pg_catalog, pg_temp
 AS $$
 BEGIN
   RETURN EXISTS (
     SELECT 1
-    FROM neon_auth."member"
+    FROM piyaz_auth."member"
     WHERE "userId" = NULLIF(current_setting('app.user_id', TRUE), '')::uuid
   );
 END;
@@ -260,16 +260,16 @@ RETURNS TABLE (id uuid, role text, organization_id uuid)
 LANGUAGE plpgsql
 STABLE
 SECURITY DEFINER
-SET search_path = neon_auth, pg_catalog, pg_temp
+SET search_path = piyaz_auth, pg_catalog, pg_temp
 AS $$
 BEGIN
   RETURN QUERY
   SELECT m.id, m.role, m."organizationId"
-  FROM neon_auth."member" m
+  FROM piyaz_auth."member" m
   WHERE m.id = p_member_id
     AND EXISTS (
       SELECT 1
-      FROM neon_auth."member" caller
+      FROM piyaz_auth."member" caller
       WHERE caller."organizationId" = m."organizationId"
         AND caller."userId" = NULLIF(current_setting('app.user_id', TRUE), '')::uuid
     )
@@ -284,16 +284,16 @@ RETURNS TABLE (role text)
 LANGUAGE plpgsql
 STABLE
 SECURITY DEFINER
-SET search_path = neon_auth, pg_catalog, pg_temp
+SET search_path = piyaz_auth, pg_catalog, pg_temp
 AS $$
 BEGIN
   RETURN QUERY
   SELECT m.role
-  FROM neon_auth."member" m
+  FROM piyaz_auth."member" m
   WHERE m."organizationId" = p_org_id
     AND EXISTS (
       SELECT 1
-      FROM neon_auth."member" caller
+      FROM piyaz_auth."member" caller
       WHERE caller."organizationId" = p_org_id
         AND caller."userId" = NULLIF(current_setting('app.user_id', TRUE), '')::uuid
     );
@@ -317,7 +317,7 @@ RETURNS TABLE (id uuid, name text)
 LANGUAGE plpgsql
 STABLE
 SECURITY DEFINER
-SET search_path = neon_auth, pg_catalog, pg_temp
+SET search_path = piyaz_auth, pg_catalog, pg_temp
 AS $$
 BEGIN
   IF cardinality(p_user_ids) > 1000 THEN
@@ -326,12 +326,12 @@ BEGIN
   END IF;
   RETURN QUERY
   SELECT u.id, u.name
-  FROM neon_auth."user" u
+  FROM piyaz_auth."user" u
   WHERE u.id = ANY (p_user_ids)
     AND EXISTS (
       SELECT 1
-      FROM neon_auth."member" m1
-      INNER JOIN neon_auth."member" m2
+      FROM piyaz_auth."member" m1
+      INNER JOIN piyaz_auth."member" m2
         ON m2."organizationId" = m1."organizationId"
       WHERE m1."userId" = u.id
         AND m2."userId" = NULLIF(current_setting('app.user_id', TRUE), '')::uuid
@@ -353,19 +353,19 @@ RETURNS TABLE (user_id uuid, name text, email text)
 LANGUAGE plpgsql
 STABLE
 SECURITY DEFINER
-SET search_path = public, neon_auth, pg_catalog, pg_temp
+SET search_path = public, piyaz_auth, pg_catalog, pg_temp
 AS $$
 BEGIN
   RETURN QUERY
   SELECT ta.user_id, u.name, u.email
   FROM public.task_assignees ta
-  INNER JOIN neon_auth."user" u ON u.id = ta.user_id
+  INNER JOIN piyaz_auth."user" u ON u.id = ta.user_id
   WHERE ta.task_id = p_task_id
     AND EXISTS (
       SELECT 1
       FROM public.tasks t
       INNER JOIN public.projects pj ON pj.id = t.project_id
-      INNER JOIN neon_auth."member" caller
+      INNER JOIN piyaz_auth."member" caller
         ON caller."organizationId" = pj.organization_id
       WHERE t.id = p_task_id
         AND caller."userId" = NULLIF(current_setting('app.user_id', TRUE), '')::uuid
@@ -386,19 +386,19 @@ RETURNS TABLE (task_id uuid, user_id uuid, name text, email text)
 LANGUAGE plpgsql
 STABLE
 SECURITY DEFINER
-SET search_path = public, neon_auth, pg_catalog, pg_temp
+SET search_path = public, piyaz_auth, pg_catalog, pg_temp
 AS $$
 BEGIN
   RETURN QUERY
   SELECT ta.task_id, ta.user_id, u.name, u.email
   FROM public.tasks t
   INNER JOIN public.task_assignees ta ON ta.task_id = t.id
-  INNER JOIN neon_auth."user" u ON u.id = ta.user_id
+  INNER JOIN piyaz_auth."user" u ON u.id = ta.user_id
   WHERE t.project_id = p_project_id
     AND EXISTS (
       SELECT 1
       FROM public.projects pj
-      INNER JOIN neon_auth."member" caller
+      INNER JOIN piyaz_auth."member" caller
         ON caller."organizationId" = pj.organization_id
       WHERE pj.id = p_project_id
         AND caller."userId" = NULLIF(current_setting('app.user_id', TRUE), '')::uuid
@@ -422,17 +422,17 @@ RETURNS TABLE (user_id uuid)
 LANGUAGE plpgsql
 STABLE
 SECURITY DEFINER
-SET search_path = neon_auth, pg_catalog, pg_temp
+SET search_path = piyaz_auth, pg_catalog, pg_temp
 AS $$
 BEGIN
   RETURN QUERY
   SELECT m."userId"
-  FROM neon_auth."member" m
+  FROM piyaz_auth."member" m
   WHERE m."organizationId" = p_org_id
     AND m."userId" = ANY (p_user_ids)
     AND EXISTS (
       SELECT 1
-      FROM neon_auth."member" caller
+      FROM piyaz_auth."member" caller
       WHERE caller."organizationId" = p_org_id
         AND caller."userId" = NULLIF(current_setting('app.user_id', TRUE), '')::uuid
     );
@@ -454,13 +454,13 @@ CREATE OR REPLACE FUNCTION public.is_caller_in_invitation_org(
 LANGUAGE plpgsql
 STABLE
 SECURITY DEFINER
-SET search_path = neon_auth, pg_catalog, pg_temp
+SET search_path = piyaz_auth, pg_catalog, pg_temp
 AS $$
 BEGIN
   RETURN EXISTS (
     SELECT 1
-    FROM neon_auth.invitation i
-    INNER JOIN neon_auth."member" caller
+    FROM piyaz_auth.invitation i
+    INNER JOIN piyaz_auth."member" caller
       ON caller."organizationId" = i."organizationId"
     WHERE i.id = p_invitation_id
       AND i."organizationId" = p_expected_org_id
@@ -600,11 +600,11 @@ RETURNS TABLE (user_id uuid)
 LANGUAGE plpgsql
 STABLE
 SECURITY DEFINER
-SET search_path = neon_auth, pg_catalog, pg_temp
+SET search_path = piyaz_auth, pg_catalog, pg_temp
 AS $$
 BEGIN
   RETURN QUERY
-  SELECT m."userId" FROM neon_auth."member" m WHERE m."organizationId" = p_org_id;
+  SELECT m."userId" FROM piyaz_auth."member" m WHERE m."organizationId" = p_org_id;
 END;
 $$;
 REVOKE EXECUTE ON FUNCTION public.find_org_member_user_ids_as_admin(uuid) FROM public;
diff --git a/drizzle/0000_goofy_the_enforcers.sql b/drizzle/0000_goofy_the_enforcers.sql
index 57eb5c18..76deab0f 100644
--- a/drizzle/0000_goofy_the_enforcers.sql
+++ b/drizzle/0000_goofy_the_enforcers.sql
@@ -102,18 +102,18 @@ CREATE TABLE "team_invite_code" (
 	CONSTRAINT "team_invite_code_default_role_check" CHECK ("team_invite_code"."default_role" IN ('member', 'admin'))
 );
 --> statement-breakpoint
-ALTER TABLE "projects" ADD CONSTRAINT "projects_organization_id_organization_id_fk" FOREIGN KEY ("organization_id") REFERENCES "neon_auth"."organization"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "projects" ADD CONSTRAINT "projects_organization_id_organization_id_fk" FOREIGN KEY ("organization_id") REFERENCES "piyaz_auth"."organization"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
 ALTER TABLE "task_acceptance_criteria" ADD CONSTRAINT "task_acceptance_criteria_task_id_tasks_id_fk" FOREIGN KEY ("task_id") REFERENCES "public"."tasks"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
 ALTER TABLE "task_assignees" ADD CONSTRAINT "task_assignees_task_id_tasks_id_fk" FOREIGN KEY ("task_id") REFERENCES "public"."tasks"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "task_assignees" ADD CONSTRAINT "task_assignees_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "neon_auth"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "task_assignees" ADD CONSTRAINT "task_assignees_user_id_user_id_fk" FOREIGN KEY ("user_id") REFERENCES "piyaz_auth"."user"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
 ALTER TABLE "task_decisions" ADD CONSTRAINT "task_decisions_task_id_tasks_id_fk" FOREIGN KEY ("task_id") REFERENCES "public"."tasks"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
 ALTER TABLE "task_edges" ADD CONSTRAINT "task_edges_source_task_id_tasks_id_fk" FOREIGN KEY ("source_task_id") REFERENCES "public"."tasks"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
 ALTER TABLE "task_edges" ADD CONSTRAINT "task_edges_target_task_id_tasks_id_fk" FOREIGN KEY ("target_task_id") REFERENCES "public"."tasks"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
 ALTER TABLE "task_links" ADD CONSTRAINT "task_links_task_id_tasks_id_fk" FOREIGN KEY ("task_id") REFERENCES "public"."tasks"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "task_links" ADD CONSTRAINT "task_links_created_by_user_id_fk" FOREIGN KEY ("created_by") REFERENCES "neon_auth"."user"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "task_links" ADD CONSTRAINT "task_links_created_by_user_id_fk" FOREIGN KEY ("created_by") REFERENCES "piyaz_auth"."user"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
 ALTER TABLE "tasks" ADD CONSTRAINT "tasks_project_id_projects_id_fk" FOREIGN KEY ("project_id") REFERENCES "public"."projects"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "team_invite_code" ADD CONSTRAINT "team_invite_code_organization_id_organization_id_fk" FOREIGN KEY ("organization_id") REFERENCES "neon_auth"."organization"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
-ALTER TABLE "team_invite_code" ADD CONSTRAINT "team_invite_code_created_by_user_id_fk" FOREIGN KEY ("created_by") REFERENCES "neon_auth"."user"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "team_invite_code" ADD CONSTRAINT "team_invite_code_organization_id_organization_id_fk" FOREIGN KEY ("organization_id") REFERENCES "piyaz_auth"."organization"("id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "team_invite_code" ADD CONSTRAINT "team_invite_code_created_by_user_id_fk" FOREIGN KEY ("created_by") REFERENCES "piyaz_auth"."user"("id") ON DELETE set null ON UPDATE no action;--> statement-breakpoint
 CREATE INDEX "projects_organization_id_idx" ON "projects" USING btree ("organization_id");--> statement-breakpoint
 CREATE INDEX "task_acceptance_criteria_task_id_position_idx" ON "task_acceptance_criteria" USING btree ("task_id","position");--> statement-breakpoint
 CREATE INDEX "task_assignees_user_id_idx" ON "task_assignees" USING btree ("user_id");--> statement-breakpoint
diff --git a/drizzle/meta/0000_snapshot.json b/drizzle/meta/0000_snapshot.json
index b50ce07b..b9a6cc69 100644
--- a/drizzle/meta/0000_snapshot.json
+++ b/drizzle/meta/0000_snapshot.json
@@ -98,7 +98,7 @@
           "name": "projects_organization_id_organization_id_fk",
           "tableFrom": "projects",
           "tableTo": "organization",
-          "schemaTo": "neon_auth",
+          "schemaTo": "piyaz_auth",
           "columnsFrom": [
             "organization_id"
           ],
@@ -286,7 +286,7 @@
           "name": "task_assignees_user_id_user_id_fk",
           "tableFrom": "task_assignees",
           "tableTo": "user",
-          "schemaTo": "neon_auth",
+          "schemaTo": "piyaz_auth",
           "columnsFrom": [
             "user_id"
           ],
@@ -653,7 +653,7 @@
           "name": "task_links_created_by_user_id_fk",
           "tableFrom": "task_links",
           "tableTo": "user",
-          "schemaTo": "neon_auth",
+          "schemaTo": "piyaz_auth",
           "columnsFrom": [
             "created_by"
           ],
@@ -940,7 +940,7 @@
           "name": "team_invite_code_organization_id_organization_id_fk",
           "tableFrom": "team_invite_code",
           "tableTo": "organization",
-          "schemaTo": "neon_auth",
+          "schemaTo": "piyaz_auth",
           "columnsFrom": [
             "organization_id"
           ],
@@ -954,7 +954,7 @@
           "name": "team_invite_code_created_by_user_id_fk",
           "tableFrom": "team_invite_code",
           "tableTo": "user",
-          "schemaTo": "neon_auth",
+          "schemaTo": "piyaz_auth",
           "columnsFrom": [
             "created_by"
           ],
diff --git a/lib/actions/team-invitations-map.ts b/lib/actions/team-invitations-map.ts
index 231223e4..cc82bc28 100644
--- a/lib/actions/team-invitations-map.ts
+++ b/lib/actions/team-invitations-map.ts
@@ -12,7 +12,7 @@ export type InvitationView = {
   expiresAt: Date;
   /** When the invitation was issued. */
   createdAt: Date;
-  /** Inviter display name (joined from `neon_auth.user.name`). */
+  /** Inviter display name (joined from `piyaz_auth.user.name`). */
   inviterName: string;
 };
 
diff --git a/lib/actions/team-members-map.ts b/lib/actions/team-members-map.ts
index 3310d556..e3a909dc 100644
--- a/lib/actions/team-members-map.ts
+++ b/lib/actions/team-members-map.ts
@@ -7,9 +7,9 @@ export type MemberView = {
   id: string;
   /** User id behind the membership — drives gradient avatar and self-row checks. */
   userId: string;
-  /** Display name from `neon_auth.user.name`. */
+  /** Display name from `piyaz_auth.user.name`. */
   name: string;
-  /** Sign-in email from `neon_auth.user.email`. */
+  /** Sign-in email from `piyaz_auth.user.email`. */
   email: string;
   /** Raw `member.role` string (e.g. "owner", "admin", "member"). */
   role: string;
diff --git a/lib/auth.ts b/lib/auth.ts
index 1585c969..773b3513 100644
--- a/lib/auth.ts
+++ b/lib/auth.ts
@@ -39,7 +39,7 @@ if (IS_CLOUDFLARE && !process.env.BETTER_AUTH_URL) {
 
 /**
  * Better Auth server instance with email/password auth and
- * organization-based team management. Adapts the `neon_auth` schema via
+ * organization-based team management. Adapts the `piyaz_auth` schema via
  * drizzleAdapter.
  */
 export const auth = betterAuth({
diff --git a/lib/auth/org-permissions.ts b/lib/auth/org-permissions.ts
index 1e426570..c465e0af 100644
--- a/lib/auth/org-permissions.ts
+++ b/lib/auth/org-permissions.ts
@@ -6,7 +6,7 @@ import { auth } from "@/lib/auth";
 /**
  * Check whether the caller can administer the named team. Delegates to
  * Better Auth's `/organization/has-permission` API, which reads the
- * caller's role from `neon_auth.member` for the supplied `organizationId`
+ * caller's role from `piyaz_auth.member` for the supplied `organizationId`
  * and consults the active access-control policy. Returns `false` (never
  * throws) so callers can collapse the result into a typed `forbidden`
  * failure.
diff --git a/lib/data/access.ts b/lib/data/access.ts
index 619728b3..414b67d9 100644
--- a/lib/data/access.ts
+++ b/lib/data/access.ts
@@ -1,7 +1,7 @@
 /**
  * Membership-gated project + task lookups.
  *
- * RLS scopes every read here. `app_user` has no grants on `neon_auth.*`;
+ * RLS scopes every read here. `app_user` has no grants on `piyaz_auth.*`;
  * the org metadata join routes through `public.current_user_orgs()`
  * (SECURITY DEFINER). `*Tx` variants take a caller-supplied tx so the
  * access check and the protected work share one `withUserContext` frame.
@@ -111,7 +111,7 @@ export async function findProjectAccessTx(
 }
 
 /**
- * Membership-gated task lookup. RLS gates membership; no neon_auth JOIN.
+ * Membership-gated task lookup. RLS gates membership; no piyaz_auth JOIN.
  *
  * @param userId - Verified user id.
  * @param taskId - UUID of the task.
diff --git a/lib/data/account.ts b/lib/data/account.ts
index 75c51498..64866154 100644
--- a/lib/data/account.ts
+++ b/lib/data/account.ts
@@ -16,7 +16,7 @@ import { projects, tasks, taskAssignees } from "@/lib/db/schema";
  * changed. The row's `updatedAt` bumps on every password write, so it
  * doubles as "password last changed" for the settings UI.
  *
- * Reads through `authDb` (auth_role): `neon_auth.account` holds password
+ * Reads through `authDb` (auth_role): `piyaz_auth.account` holds password
  * hashes, so `docker/grants.sql` deliberately excludes it from
  * `service_role`'s table grants. Only the auth layer's role may touch it.
  *
@@ -104,7 +104,7 @@ export async function clearOrgMembershipArtifacts(
           eq(oauthConsent.referenceId, orgId),
         ),
       );
-    // `task_assignees` FK to `neon_auth.user` only cascades on full user
+    // `task_assignees` FK to `piyaz_auth.user` only cascades on full user
     // deletion, not on team-membership removal. A removed member would
     // otherwise keep appearing in `getTaskFull(...).assignees` for tasks
     // in the org they left. Scrub their junction rows scoped to tasks
diff --git a/lib/data/invitation.ts b/lib/data/invitation.ts
index 7835da97..df5ef8f2 100644
--- a/lib/data/invitation.ts
+++ b/lib/data/invitation.ts
@@ -8,7 +8,7 @@ import { withUserContext } from "@/lib/db/rls";
  * Boolean predicate: caller is a member of the invitation's org AND
  * the supplied `expectedOrgId` matches the invitation's own
  * `organizationId`. Routed through `is_caller_in_invitation_org` so
- * `app_user` can resolve `neon_auth.invitation` without disclosing the
+ * `app_user` can resolve `piyaz_auth.invitation` without disclosing the
  * invitation→org linkage to non-members.
  *
  * @param userId - Authenticated caller's user id (UUID).
diff --git a/lib/data/membership.ts b/lib/data/membership.ts
index bd96cf11..a229dc31 100644
--- a/lib/data/membership.ts
+++ b/lib/data/membership.ts
@@ -1,7 +1,7 @@
 /**
  * Membership helpers.
  *
- * `app_user` has no grants on `neon_auth.*`; every read here routes through
+ * `app_user` has no grants on `piyaz_auth.*`; every read here routes through
  * the `public.current_user_*` / `public.team_*_visible` SECURITY DEFINER
  * functions that read `app.user_id` from the GUC `withUserContext` sets.
  */
diff --git a/lib/data/oauth-session.ts b/lib/data/oauth-session.ts
index c1e8cd2d..638ebf64 100644
--- a/lib/data/oauth-session.ts
+++ b/lib/data/oauth-session.ts
@@ -1,7 +1,7 @@
 /**
  * OAuth session helpers.
  *
- * `app_user` has no grants on `neon_auth.oauth*`; every helper here goes
+ * `app_user` has no grants on `piyaz_auth.oauth*`; every helper here goes
  * through `serviceRoleDb` (BYPASSRLS). Callers must pass a `userId` that
  * `requireSession` verified — the WHERE clause is the effective scope.
  */
diff --git a/lib/data/task.ts b/lib/data/task.ts
index e7c8b92f..9ca0ea75 100644
--- a/lib/data/task.ts
+++ b/lib/data/task.ts
@@ -616,7 +616,7 @@ export async function getTaskFullWithEdges(
 /**
  * Fetch the assignee projection (userId + name + email) for a task,
  * routed through the `task_assignees_visible` SECURITY DEFINER function
- * so `app_user` can read `neon_auth.user` under the Option-B lockdown.
+ * so `app_user` can read `piyaz_auth.user` under the Option-B lockdown.
  *
  * UNCHECKED: the SDF itself re-checks caller membership of the task's
  * org, but the upstream `assertTaskAccess` is still the contract. The
diff --git a/lib/data/views.ts b/lib/data/views.ts
index 0ce4a2f2..2a7952b4 100644
--- a/lib/data/views.ts
+++ b/lib/data/views.ts
@@ -11,7 +11,7 @@ import type {
 /**
  * Lightweight assignee projection used by surfaces that render
  * the people assigned to a task. Source: `task_assignees` joined
- * to `neon_auth.user`.
+ * to `piyaz_auth.user`.
  */
 export type AssigneeRef = {
   userId: string;
diff --git a/lib/db/_driver.node.ts b/lib/db/_driver.node.ts
index 2427e016..d6811080 100644
--- a/lib/db/_driver.node.ts
+++ b/lib/db/_driver.node.ts
@@ -51,7 +51,7 @@ export function buildAppPool(): DbBundle<AppDb> {
 /**
  * Build the Better-auth Drizzle client backed by postgres-js.
  *
- * @returns Pool + Drizzle instance bound to the neon_auth schema.
+ * @returns Pool + Drizzle instance bound to the piyaz_auth schema.
  * @throws Error when `DATABASE_AUTH_URL` is unset.
  */
 export function buildAuthPool(): DbBundle<AuthDb> {
@@ -59,7 +59,7 @@ export function buildAuthPool(): DbBundle<AuthDb> {
   if (!url) {
     throw new Error(
       "DATABASE_AUTH_URL is required — Better Auth must connect via auth_role " +
-        "(DML on neon_auth.*, no public-schema access).",
+        "(DML on piyaz_auth.*, no public-schema access).",
     );
   }
   const pool = postgres(url, POSTGRES_OPTS);
diff --git a/lib/db/_driver.workers.ts b/lib/db/_driver.workers.ts
index 35772070..50ca86e5 100644
--- a/lib/db/_driver.workers.ts
+++ b/lib/db/_driver.workers.ts
@@ -47,7 +47,7 @@ const DB_URL_REQUIRED = {
   app: "DATABASE_URL is required for the app runtime connection (app_user role).",
   auth:
     "DATABASE_AUTH_URL is required — Better Auth must connect via auth_role " +
-    "(DML on neon_auth.*, no public-schema access).",
+    "(DML on piyaz_auth.*, no public-schema access).",
   service: "DATABASE_SERVICE_ROLE_URL is required for service-role data access",
 } as const;
 
@@ -132,7 +132,7 @@ export function buildAppPool(url = process.env.DATABASE_URL): DbBundle<AppDb> {
  * Fresh request-scoped Pool per call; see {@link buildAppPool}.
  *
  * @param url - Connection string, defaulting to `DATABASE_AUTH_URL`.
- * @returns Pool + Drizzle instance bound to the neon_auth schema.
+ * @returns Pool + Drizzle instance bound to the piyaz_auth schema.
  * @throws Error when `DATABASE_AUTH_URL` is unset.
  */
 export function buildAuthPool(
diff --git a/lib/db/auth-schema.ts b/lib/db/auth-schema.ts
index 176aabf2..56a5b02e 100644
--- a/lib/db/auth-schema.ts
+++ b/lib/db/auth-schema.ts
@@ -9,23 +9,23 @@ import {
 } from "drizzle-orm/pg-core";
 
 /**
- * Drizzle table definitions for the neon_auth schema.
- * Uses pgSchema("neon_auth") for fully-qualified table names
- * (e.g. "neon_auth"."user") so queries work with connection
+ * Drizzle table definitions for the piyaz_auth schema.
+ * Uses pgSchema("piyaz_auth") for fully-qualified table names
+ * (e.g. "piyaz_auth"."user") so queries work with connection
  * poolers (PgBouncer) that reset search_path.
  *
- * Matches Neon Auth's actual DB structure exactly:
+ * Self-managed schema (the project does not use Neon Auth Managed):
  * - uuid IDs with gen_random_uuid() default
  * - timestamptz for all date columns
  * - camelCase column names (PostgreSQL quoted identifiers)
  *
  * Used by drizzleAdapter to map Better Auth models to DB tables.
  * NOT managed by drizzle-kit — auth tables are created by
- * Neon Auth (hosted) or docker/init-auth.sql (self-hosted).
+ * docker/init-auth.sql.
  */
-const neonAuth = pgSchema("neon_auth");
+const piyazAuth = pgSchema("piyaz_auth");
 
-export const user = neonAuth.table("user", {
+export const user = piyazAuth.table("user", {
   id: uuid("id").primaryKey().defaultRandom(),
   name: text("name").notNull(),
   email: text("email").notNull().unique(),
@@ -43,7 +43,7 @@ export const user = neonAuth.table("user", {
   banExpires: timestamp("banExpires", { withTimezone: true }),
 });
 
-export const session = neonAuth.table(
+export const session = piyazAuth.table(
   "session",
   {
     id: uuid("id").primaryKey().defaultRandom(),
@@ -64,7 +64,7 @@ export const session = neonAuth.table(
   (table) => [index("session_userId_idx").on(table.userId)],
 );
 
-export const account = neonAuth.table(
+export const account = piyazAuth.table(
   "account",
   {
     id: uuid("id").primaryKey().defaultRandom(),
@@ -92,7 +92,7 @@ export const account = neonAuth.table(
   (table) => [index("account_userId_idx").on(table.userId)],
 );
 
-export const verification = neonAuth.table(
+export const verification = piyazAuth.table(
   "verification",
   {
     id: uuid("id").primaryKey().defaultRandom(),
@@ -109,7 +109,7 @@ export const verification = neonAuth.table(
   (table) => [index("verification_identifier_idx").on(table.identifier)],
 );
 
-export const organization = neonAuth.table(
+export const organization = piyazAuth.table(
   "organization",
   {
     id: uuid("id").primaryKey().defaultRandom(),
@@ -122,7 +122,7 @@ export const organization = neonAuth.table(
   (table) => [uniqueIndex("organization_slug_uidx").on(table.slug)],
 );
 
-export const member = neonAuth.table(
+export const member = piyazAuth.table(
   "member",
   {
     id: uuid("id").primaryKey().defaultRandom(),
@@ -141,7 +141,7 @@ export const member = neonAuth.table(
   ],
 );
 
-export const invitation = neonAuth.table(
+export const invitation = piyazAuth.table(
   "invitation",
   {
     id: uuid("id").primaryKey().defaultRandom(),
@@ -165,7 +165,7 @@ export const invitation = neonAuth.table(
   ],
 );
 
-export const jwks = neonAuth.table("jwks", {
+export const jwks = piyazAuth.table("jwks", {
   id: uuid("id").primaryKey().defaultRandom(),
   publicKey: text("publicKey").notNull(),
   privateKey: text("privateKey").notNull(),
@@ -179,7 +179,7 @@ export const jwks = neonAuth.table("jwks", {
  * and user consent records for the MCP auth flow.
  */
 
-export const oauthClient = neonAuth.table(
+export const oauthClient = piyazAuth.table(
   "oauthClient",
   {
     id: uuid("id").primaryKey().defaultRandom(),
@@ -223,7 +223,7 @@ export const oauthClient = neonAuth.table(
   ],
 );
 
-export const oauthAccessToken = neonAuth.table(
+export const oauthAccessToken = piyazAuth.table(
   "oauthAccessToken",
   {
     id: uuid("id").primaryKey().defaultRandom(),
@@ -245,7 +245,7 @@ export const oauthAccessToken = neonAuth.table(
   ],
 );
 
-export const oauthRefreshToken = neonAuth.table(
+export const oauthRefreshToken = piyazAuth.table(
   "oauthRefreshToken",
   {
     id: uuid("id").primaryKey().defaultRandom(),
@@ -270,7 +270,7 @@ export const oauthRefreshToken = neonAuth.table(
   ],
 );
 
-export const oauthConsent = neonAuth.table(
+export const oauthConsent = piyazAuth.table(
   "oauthConsent",
   {
     id: uuid("id").primaryKey().defaultRandom(),
diff --git a/lib/db/connection.ts b/lib/db/connection.ts
index 3e05cfe4..8635477e 100644
--- a/lib/db/connection.ts
+++ b/lib/db/connection.ts
@@ -142,7 +142,7 @@ export const appDb = new Proxy({} as AppUserConn, {
  * Lazily initialized Better-auth Drizzle client.
  *
  * Same driver-selection and caching semantics as {@link appDb} but bound
- * to the `neon_auth` schema used by `drizzleAdapter` in {@link auth}.
+ * to the `piyaz_auth` schema used by `drizzleAdapter` in {@link auth}.
  */
 export const authDb = new Proxy({} as AuthDb, {
   get(_target, prop, receiver) {
diff --git a/lib/db/raw/fetch-assignees-by-project.ts b/lib/db/raw/fetch-assignees-by-project.ts
index 5fb8696a..7f7c3324 100644
--- a/lib/db/raw/fetch-assignees-by-project.ts
+++ b/lib/db/raw/fetch-assignees-by-project.ts
@@ -13,7 +13,7 @@ export type AssigneeByProjectRow = {
 /**
  * Every visible task assignee in a project, as a lazy batch statement.
  * Routes through the `task_assignees_for_project_visible` SECURITY DEFINER
- * function so `app_user` can read `neon_auth.user` under the Option-B
+ * function so `app_user` can read `piyaz_auth.user` under the Option-B
  * lockdown. Normalize the batch result with
  * `normalizeExecuteResult<AssigneeByProjectRow>` and fold with
  * {@link mapAssigneesByProjectRows}.
diff --git a/lib/db/raw/get-project-list-max-updated-at.ts b/lib/db/raw/get-project-list-max-updated-at.ts
index fd8c1ac6..547b3220 100644
--- a/lib/db/raw/get-project-list-max-updated-at.ts
+++ b/lib/db/raw/get-project-list-max-updated-at.ts
@@ -13,7 +13,7 @@ import { executeRaw, type Conn } from "@/lib/db/raw";
  * membership-derived scope (`docker/rls-policies.sql`). The helper must
  * therefore run inside `withUserContext` so `app.user_id` is set.
  *
- * Three independent table aggregates — no `neon_auth.member` join
+ * Three independent table aggregates — no `piyaz_auth.member` join
  * (app_user has no grant there). Each `MAX(updated_at)` runs over the
  * RLS-filtered row set, so non-members see zero rows and GREATEST
  * collapses to epoch-0.
diff --git a/lib/db/team-schema.ts b/lib/db/team-schema.ts
index 45df2bf1..d650bb54 100644
--- a/lib/db/team-schema.ts
+++ b/lib/db/team-schema.ts
@@ -13,23 +13,23 @@ import { organization, user } from "@/lib/db/auth-schema";
 /**
  * Shareable team invite codes — one row per organization in v1.
  *
- * Lives in `public` (drizzle-managed) and references `neon_auth.organization`
- * + `neon_auth.user` via cross-schema FKs. Kept separate from `lib/db/schema.ts`
+ * Lives in `public` (drizzle-managed) and references `piyaz_auth.organization`
+ * + `piyaz_auth.user` via cross-schema FKs. Kept separate from `lib/db/schema.ts`
  * because it's a join concept between the auth and app schemas — same split
  * we already use for `auth-schema.ts` vs `schema.ts`.
  *
- * Distinct from `neon_auth.invitation`: that table is per-recipient-email and
+ * Distinct from `piyaz_auth.invitation`: that table is per-recipient-email and
  * Better Auth's `acceptInvitation` enforces `invitation.email === session.user.email`.
  * A team-wide code can't ride that flow without forging email, so we use
  * `auth.api.addMember` against this separate table instead.
  *
  * RLS is enabled here via `.enableRLS()`; the policy DDL itself lives in
- * `docker/rls-policies.sql` (1-hop membership through `neon_auth.member`,
+ * `docker/rls-policies.sql` (1-hop membership through `piyaz_auth.member`,
  * applied after `db:push`). The three join-path helpers in
  * `lib/data/team-invite-code.ts` (`reserveInviteCodeSlot`,
  * `releaseInviteCodeSlot`, `diagnoseTeamInviteCode`) call SECURITY DEFINER
  * SQL functions (see `docker/rls-functions.sql`) because the joining user
- * has no `neon_auth.member` row at the moment of lookup — the functions
+ * has no `piyaz_auth.member` row at the moment of lookup — the functions
  * run as their owner and have a narrow audited surface. The four admin
  * helpers (`findTeamInviteCode`, `createTeamInviteCode`,
  * `rotateTeamInviteCode`, `revokeTeamInviteCode`) run under
diff --git a/migrations/001-oauth-tables.sql b/migrations/001-oauth-tables.sql
index 4f25ee34..6bb007ae 100644
--- a/migrations/001-oauth-tables.sql
+++ b/migrations/001-oauth-tables.sql
@@ -1,8 +1,8 @@
 -- OAuth 2.1 Provider tables for @better-auth/oauth-provider.
--- Run once against the neon_auth schema on hosted Neon.
+-- Run once against the piyaz_auth schema on hosted Neon.
 -- Self-hosted path: these tables are in docker/init-auth.sql instead.
 
-SET search_path TO neon_auth;
+SET search_path TO piyaz_auth;
 
 CREATE TABLE "oauthClient" (
     "id"                        uuid PRIMARY KEY DEFAULT gen_random_uuid(),
diff --git a/tests/auth/change-password.test.ts b/tests/auth/change-password.test.ts
index e928b142..b4d0cc41 100644
--- a/tests/auth/change-password.test.ts
+++ b/tests/auth/change-password.test.ts
@@ -221,16 +221,16 @@ test("password change wipes the user's OAuth agent tokens (account.update.after
 
   const sql = superuserPool();
   const [{ id: userId }] = await sql<{ id: string }[]>`
-    SELECT id FROM neon_auth."user" WHERE email = ${email}
+    SELECT id FROM piyaz_auth."user" WHERE email = ${email}
   `;
   await sql`
-    INSERT INTO neon_auth."oauthAccessToken"
+    INSERT INTO piyaz_auth."oauthAccessToken"
       ("token", "clientId", "userId", "scopes", "expiresAt")
     VALUES ('test-access-token', 'test-client', ${userId}::uuid,
             '{openid}', now() + interval '1 hour')
   `;
   await sql`
-    INSERT INTO neon_auth."oauthRefreshToken"
+    INSERT INTO piyaz_auth."oauthRefreshToken"
       ("token", "clientId", "userId", "scopes", "expiresAt")
     VALUES ('test-refresh-token', 'test-client', ${userId}::uuid,
             '{openid}', now() + interval '7 days')
@@ -249,10 +249,10 @@ test("password change wipes the user's OAuth agent tokens (account.update.after
   expect(response.status).toBe(200);
 
   const accessRows = await sql`
-    SELECT id FROM neon_auth."oauthAccessToken" WHERE "userId" = ${userId}::uuid
+    SELECT id FROM piyaz_auth."oauthAccessToken" WHERE "userId" = ${userId}::uuid
   `;
   const refreshRows = await sql`
-    SELECT id FROM neon_auth."oauthRefreshToken" WHERE "userId" = ${userId}::uuid
+    SELECT id FROM piyaz_auth."oauthRefreshToken" WHERE "userId" = ${userId}::uuid
   `;
   expect(accessRows.length).toBe(0);
   expect(refreshRows.length).toBe(0);
diff --git a/tests/data/account.test.ts b/tests/data/account.test.ts
index 26818561..94be3f98 100644
--- a/tests/data/account.test.ts
+++ b/tests/data/account.test.ts
@@ -13,7 +13,7 @@ afterEach(async () => {
 
 describe("getPasswordUpdatedAt", () => {
   // Regression: the helper must read through authDb (auth_role).
-  // docker/grants.sql deliberately excludes neon_auth.account (password
+  // docker/grants.sql deliberately excludes piyaz_auth.account (password
   // hashes) from service_role's grants, so a serviceRoleDb read throws
   // "permission denied for table account" at runtime. These tests run
   // against the real role split and fail on any client downgrade.
@@ -21,7 +21,7 @@ describe("getPasswordUpdatedAt", () => {
     const f = await seedUserOrgProject("pw-updated-at");
     const sqlc = superuserPool();
     await sqlc`
-      INSERT INTO neon_auth."account"
+      INSERT INTO piyaz_auth."account"
         ("accountId", "providerId", "userId", "password", "updatedAt")
       VALUES (${f.userId}, 'credential', ${f.userId},
               'scrypt-hash-placeholder', '2026-03-01T12:00:00Z')
@@ -44,41 +44,41 @@ describe("clearOrgMembershipArtifacts", () => {
     const sqlc = superuserPool();
     try {
       await sqlc`
-        INSERT INTO neon_auth."session" ("expiresAt", "token", "updatedAt", "userId", "activeOrganizationId")
+        INSERT INTO piyaz_auth."session" ("expiresAt", "token", "updatedAt", "userId", "activeOrganizationId")
         VALUES (now() + interval '7 days', 'tok-' || gen_random_uuid()::text, now(), ${f.userId}, ${f.organizationId}::text)
       `;
       await sqlc`
-        INSERT INTO neon_auth."oauthAccessToken" ("token", "clientId", "userId", "referenceId", "scopes", "expiresAt")
+        INSERT INTO piyaz_auth."oauthAccessToken" ("token", "clientId", "userId", "referenceId", "scopes", "expiresAt")
         VALUES ('at-1', 'client-1', ${f.userId}, ${f.organizationId}, '{}', now() + interval '1 hour')
       `;
       await sqlc`
-        INSERT INTO neon_auth."oauthRefreshToken" ("token", "clientId", "userId", "referenceId", "scopes", "expiresAt")
+        INSERT INTO piyaz_auth."oauthRefreshToken" ("token", "clientId", "userId", "referenceId", "scopes", "expiresAt")
         VALUES ('rt-1', 'client-1', ${f.userId}, ${f.organizationId}, '{}', now() + interval '7 days')
       `;
       await sqlc`
-        INSERT INTO neon_auth."oauthConsent" ("clientId", "userId", "referenceId", "scopes")
+        INSERT INTO piyaz_auth."oauthConsent" ("clientId", "userId", "referenceId", "scopes")
         VALUES ('client-1', ${f.userId}, ${f.organizationId}, '{}')
       `;
 
       await clearOrgMembershipArtifacts(f.userId, f.organizationId);
 
       const [{ activePtr }] = await sqlc<{ activePtr: string | null }[]>`
-        SELECT "activeOrganizationId" AS "activePtr" FROM neon_auth."session"
+        SELECT "activeOrganizationId" AS "activePtr" FROM piyaz_auth."session"
         WHERE "userId" = ${f.userId}
         LIMIT 1
       `;
       expect(activePtr).toBeNull();
 
       const at =
-        await sqlc`SELECT id FROM neon_auth."oauthAccessToken" WHERE "userId" = ${f.userId}`;
+        await sqlc`SELECT id FROM piyaz_auth."oauthAccessToken" WHERE "userId" = ${f.userId}`;
       expect(at.length).toBe(0);
 
       const rt =
-        await sqlc`SELECT id FROM neon_auth."oauthRefreshToken" WHERE "userId" = ${f.userId}`;
+        await sqlc`SELECT id FROM piyaz_auth."oauthRefreshToken" WHERE "userId" = ${f.userId}`;
       expect(rt.length).toBe(0);
 
       const cs =
-        await sqlc`SELECT id FROM neon_auth."oauthConsent" WHERE "userId" = ${f.userId}`;
+        await sqlc`SELECT id FROM piyaz_auth."oauthConsent" WHERE "userId" = ${f.userId}`;
       expect(cs.length).toBe(0);
     } finally {
       await sqlc.end({ timeout: 5 });
@@ -92,7 +92,7 @@ describe("clearOrgMembershipArtifacts", () => {
     const sqlc = superuserPool();
     try {
       await sqlc`
-        INSERT INTO neon_auth."oauthAccessToken" ("token", "clientId", "userId", "referenceId", "scopes", "expiresAt")
+        INSERT INTO piyaz_auth."oauthAccessToken" ("token", "clientId", "userId", "referenceId", "scopes", "expiresAt")
         VALUES
           ('at-a-a', 'client-1', ${a.userId}, ${a.organizationId}, '{}', now() + interval '1 hour'),
           ('at-a-b', 'client-1', ${a.userId}, ${b.organizationId}, '{}', now() + interval '1 hour'),
@@ -103,7 +103,7 @@ describe("clearOrgMembershipArtifacts", () => {
       await clearOrgMembershipArtifacts(a.userId, a.organizationId);
 
       const remaining = await sqlc<{ token: string }[]>`
-        SELECT token FROM neon_auth."oauthAccessToken"
+        SELECT token FROM piyaz_auth."oauthAccessToken"
         ORDER BY token ASC
       `;
       const tokens = remaining.map((r) => r.token);
diff --git a/tests/data/membership.test.ts b/tests/data/membership.test.ts
index 2802c384..5802318e 100644
--- a/tests/data/membership.test.ts
+++ b/tests/data/membership.test.ts
@@ -19,12 +19,12 @@ test("listMembershipsWithCounts paginates by (createdAt, id) cursor", async () =
   try {
     for (let i = 0; i < 5; i++) {
       const [o] = await sqlc<{ id: string }[]>`
-        INSERT INTO neon_auth."organization" ("name", "slug", "createdAt")
+        INSERT INTO piyaz_auth."organization" ("name", "slug", "createdAt")
         VALUES (${"Extra " + i}, ${"extra-" + i}, ${new Date(Date.now() + (i + 1) * 1000)})
         RETURNING id
       `;
       await sqlc`
-        INSERT INTO neon_auth."member" ("organizationId", "userId", "role", "createdAt")
+        INSERT INTO piyaz_auth."member" ("organizationId", "userId", "role", "createdAt")
         VALUES (${o.id}, ${base.userId}, 'owner', now())
       `;
     }
@@ -56,12 +56,12 @@ describe("demoteMemberWithGuard", () => {
     let secondMemberId: string;
     try {
       const [u] = await sqlc<{ id: string }[]>`
-        INSERT INTO neon_auth."user" ("name", "email", "emailVerified", "updatedAt")
+        INSERT INTO piyaz_auth."user" ("name", "email", "emailVerified", "updatedAt")
         VALUES ('Second', 'second-demote-ok@test.local', true, now())
         RETURNING id
       `;
       const [m] = await sqlc<{ id: string }[]>`
-        INSERT INTO neon_auth."member" ("organizationId", "userId", "role", "createdAt")
+        INSERT INTO piyaz_auth."member" ("organizationId", "userId", "role", "createdAt")
         VALUES (${f.organizationId}, ${u.id}, 'admin', now())
         RETURNING id
       `;
@@ -117,7 +117,7 @@ describe("demoteMemberWithGuard", () => {
     let bMemberId: string;
     try {
       const [m] = await sqlc<{ id: string }[]>`
-        SELECT id FROM neon_auth."member"
+        SELECT id FROM piyaz_auth."member"
         WHERE "organizationId" = ${b.organizationId} AND "userId" = ${b.userId}
         LIMIT 1
       `;
@@ -155,7 +155,7 @@ describe("demoteMemberWithGuard", () => {
     let memberId: string;
     try {
       const [m] = await sqlc<{ id: string }[]>`
-        SELECT id FROM neon_auth."member"
+        SELECT id FROM piyaz_auth."member"
         WHERE "organizationId" = ${f.organizationId} AND "userId" = ${f.userId}
         LIMIT 1
       `;
@@ -191,19 +191,19 @@ describe("demoteMemberWithGuard", () => {
     let secondMemberId: string;
     try {
       const [m1] = await sqlc<{ id: string }[]>`
-        SELECT id FROM neon_auth."member"
+        SELECT id FROM piyaz_auth."member"
         WHERE "organizationId" = ${f.organizationId} AND "userId" = ${f.userId}
         LIMIT 1
       `;
       firstMemberId = m1.id;
 
       const [u] = await sqlc<{ id: string }[]>`
-        INSERT INTO neon_auth."user" ("name", "email", "emailVerified", "updatedAt")
+        INSERT INTO piyaz_auth."user" ("name", "email", "emailVerified", "updatedAt")
         VALUES ('Second Owner', 'second-owner-race@test.local', true, now())
         RETURNING id
       `;
       const [m2] = await sqlc<{ id: string }[]>`
-        INSERT INTO neon_auth."member" ("organizationId", "userId", "role", "createdAt")
+        INSERT INTO piyaz_auth."member" ("organizationId", "userId", "role", "createdAt")
         VALUES (${f.organizationId}, ${u.id}, 'owner', now())
         RETURNING id
       `;
@@ -216,7 +216,7 @@ describe("demoteMemberWithGuard", () => {
       const c = superuserPool();
       try {
         await c`
-          UPDATE neon_auth."member"
+          UPDATE piyaz_auth."member"
           SET role = 'member'
           WHERE id = ${memberId}
         `;
diff --git a/tests/data/project.test.ts b/tests/data/project.test.ts
index 02cbc8ff..18b846aa 100644
--- a/tests/data/project.test.ts
+++ b/tests/data/project.test.ts
@@ -257,7 +257,7 @@ test("getProjectMaxUpdatedAt returns the latest updated_at across project + task
 
 test("getProjectListMaxUpdatedAt returns the latest updated_at across the caller's accessible scope", async () => {
   // RLS scopes the row sets; the helper aggregates MAX(updated_at) with
-  // no neon_auth join (app_user has no grant there).
+  // no piyaz_auth join (app_user has no grant there).
   const f = await seedUserOrgProject("listmax");
   const ctx = makeAuthContext(f.userId);
 
@@ -530,12 +530,12 @@ test("listProjectsForMcp skips teams with zero projects", async () => {
   const sqlc = superuserPool();
   try {
     const [emptyOrg] = await sqlc<{ id: string }[]>`
-      INSERT INTO neon_auth."organization" ("name", "slug", "createdAt")
+      INSERT INTO piyaz_auth."organization" ("name", "slug", "createdAt")
       VALUES ('Empty Team Mcp', 'empty-team-mcp', now())
       RETURNING id
     `;
     await sqlc`
-      INSERT INTO neon_auth."member" ("organizationId", "userId", "role", "createdAt")
+      INSERT INTO piyaz_auth."member" ("organizationId", "userId", "role", "createdAt")
       VALUES (${emptyOrg.id}, ${f.userId}, 'owner', now())
     `;
   } finally {
diff --git a/tests/data/rls-dataring.test.ts b/tests/data/rls-dataring.test.ts
index 1c4b7e87..97adea84 100644
--- a/tests/data/rls-dataring.test.ts
+++ b/tests/data/rls-dataring.test.ts
@@ -72,7 +72,7 @@ describe("RLS data-ring discipline — withUserContext wrappers", () => {
     }
 
     // teamB's admin should NOT see teamA's invite-code row. The policy
-    // joins through neon_auth.member, which has no (teamA.org, teamB.user)
+    // joins through piyaz_auth.member, which has no (teamA.org, teamB.user)
     // pairing, so the USING predicate filters the row out.
     const leak = await findTeamInviteCode(
       makeAuthContext(teamB.userId),
diff --git a/tests/data/rls-team-invite-code.test.ts b/tests/data/rls-team-invite-code.test.ts
index 9c848356..fefa6804 100644
--- a/tests/data/rls-team-invite-code.test.ts
+++ b/tests/data/rls-team-invite-code.test.ts
@@ -20,7 +20,7 @@ import {
  * policy so the join flow still works for non-admin members.
  *
  * Membership-role changes use the testcontainer superuser (`getConnectionString`)
- * because `service_role` only has SELECT/REFERENCES on `neon_auth."member"`
+ * because `service_role` only has SELECT/REFERENCES on `piyaz_auth."member"`
  * by design (see `docker/grants.sql`).
  */
 
@@ -33,7 +33,7 @@ describe("team_invite_code RLS — admin-only writes", () => {
     const fx = await seedUserOrgProject("ic-member");
     const seed = superuserPool();
     try {
-      await seed`UPDATE neon_auth."member" SET "role" = 'member'
+      await seed`UPDATE piyaz_auth."member" SET "role" = 'member'
                  WHERE "userId" = ${fx.userId} AND "organizationId" = ${fx.organizationId}`;
     } finally {
       await seed.end({ timeout: 5 });
@@ -54,7 +54,7 @@ describe("team_invite_code RLS — admin-only writes", () => {
     const fx = await seedUserOrgProject("ic-admin");
     const seed = superuserPool();
     try {
-      await seed`UPDATE neon_auth."member" SET "role" = 'admin'
+      await seed`UPDATE piyaz_auth."member" SET "role" = 'admin'
                  WHERE "userId" = ${fx.userId} AND "organizationId" = ${fx.organizationId}`;
     } finally {
       await seed.end({ timeout: 5 });
@@ -193,7 +193,7 @@ describe("team_invite_code RLS — admin-only writes", () => {
     const fx = await seedUserOrgProject("tc3-member");
     const seed = superuserPool();
     try {
-      await seed`UPDATE neon_auth."member" SET "role" = 'member'
+      await seed`UPDATE piyaz_auth."member" SET "role" = 'member'
                  WHERE "userId" = ${fx.userId} AND "organizationId" = ${fx.organizationId}`;
       await seed`CREATE POLICY temp_member_can_write ON team_invite_code
                  AS PERMISSIVE FOR INSERT TO app_user WITH CHECK (true)`;
@@ -328,7 +328,7 @@ describe("team_invite_code RLS — admin-only writes", () => {
     try {
       await seed`INSERT INTO team_invite_code (organization_id, code, default_role)
                  VALUES (${fx.organizationId}, 'h1selmember', 'member')`;
-      await seed`UPDATE neon_auth."member" SET "role" = 'member'
+      await seed`UPDATE piyaz_auth."member" SET "role" = 'member'
                  WHERE "userId" = ${fx.userId} AND "organizationId" = ${fx.organizationId}`;
     } finally {
       await seed.end({ timeout: 5 });
@@ -353,7 +353,7 @@ describe("team_invite_code RLS — admin-only writes", () => {
     try {
       await seed`INSERT INTO team_invite_code (organization_id, code, default_role)
                  VALUES (${fx.organizationId}, 'h1seladmin', 'member')`;
-      await seed`UPDATE neon_auth."member" SET "role" = 'admin'
+      await seed`UPDATE piyaz_auth."member" SET "role" = 'admin'
                  WHERE "userId" = ${fx.userId} AND "organizationId" = ${fx.organizationId}`;
     } finally {
       await seed.end({ timeout: 5 });
@@ -379,7 +379,7 @@ describe("team_invite_code RLS — admin-only writes", () => {
     try {
       await seed`INSERT INTO team_invite_code (organization_id, code, default_role)
                  VALUES (${fx.organizationId}, 'h7updmember', 'member')`;
-      await seed`UPDATE neon_auth."member" SET "role" = 'member'
+      await seed`UPDATE piyaz_auth."member" SET "role" = 'member'
                  WHERE "userId" = ${fx.userId} AND "organizationId" = ${fx.organizationId}`;
     } finally {
       await seed.end({ timeout: 5 });
@@ -415,7 +415,7 @@ describe("team_invite_code RLS — admin-only writes", () => {
     try {
       await seed`INSERT INTO team_invite_code (organization_id, code, default_role)
                  VALUES (${fx.organizationId}, 'h7delmember', 'member')`;
-      await seed`UPDATE neon_auth."member" SET "role" = 'member'
+      await seed`UPDATE piyaz_auth."member" SET "role" = 'member'
                  WHERE "userId" = ${fx.userId} AND "organizationId" = ${fx.organizationId}`;
     } finally {
       await seed.end({ timeout: 5 });
@@ -450,7 +450,7 @@ describe("team_invite_code RLS — admin-only writes", () => {
     try {
       await seed`INSERT INTO team_invite_code (organization_id, code, default_role)
                  VALUES (${fx.organizationId}, 'h7updadmin', 'member')`;
-      await seed`UPDATE neon_auth."member" SET "role" = 'admin'
+      await seed`UPDATE piyaz_auth."member" SET "role" = 'admin'
                  WHERE "userId" = ${fx.userId} AND "organizationId" = ${fx.organizationId}`;
     } finally {
       await seed.end({ timeout: 5 });
@@ -477,7 +477,7 @@ describe("team_invite_code RLS — admin-only writes", () => {
     try {
       await seed`INSERT INTO team_invite_code (organization_id, code, default_role)
                  VALUES (${fx.organizationId}, 'h7deladmin', 'member')`;
-      await seed`UPDATE neon_auth."member" SET "role" = 'admin'
+      await seed`UPDATE piyaz_auth."member" SET "role" = 'admin'
                  WHERE "userId" = ${fx.userId} AND "organizationId" = ${fx.organizationId}`;
     } finally {
       await seed.end({ timeout: 5 });
diff --git a/tests/data/rls.test.ts b/tests/data/rls.test.ts
index cf2b0b25..0be0cb3c 100644
--- a/tests/data/rls.test.ts
+++ b/tests/data/rls.test.ts
@@ -582,7 +582,7 @@ describe("RLS — defense-in-depth on team isolation", () => {
     let taskBId: string;
     try {
       await su`
-        INSERT INTO neon_auth."member" ("organizationId", "userId", "role", "createdAt")
+        INSERT INTO piyaz_auth."member" ("organizationId", "userId", "role", "createdAt")
         VALUES (${teamB.organizationId}, ${teamA.userId}, 'member', now())
       `;
       const [a] = await su<{ id: string }[]>`
@@ -740,12 +740,12 @@ describe("RLS — defense-in-depth on team isolation", () => {
     const teamA = await seedUserOrgProject("rls-x-tic-floor-admin");
     const su = superuserPool();
     const [u] = await su<{ id: string }[]>`
-      INSERT INTO neon_auth."user" ("name", "email", "emailVerified", "updatedAt")
+      INSERT INTO piyaz_auth."user" ("name", "email", "emailVerified", "updatedAt")
       VALUES ('Regular Member', 'regular@test.local', true, now())
       RETURNING id
     `;
     await su`
-      INSERT INTO neon_auth."member" ("organizationId", "userId", "role", "createdAt")
+      INSERT INTO piyaz_auth."member" ("organizationId", "userId", "role", "createdAt")
       VALUES (${teamA.organizationId}, ${u.id}, 'member', now())
     `;
 
diff --git a/tests/data/task.test.ts b/tests/data/task.test.ts
index 591ce083..43b8f9bf 100644
--- a/tests/data/task.test.ts
+++ b/tests/data/task.test.ts
@@ -999,7 +999,7 @@ test("createTask with assigneeIds rejects non-team-member users", async () => {
   let strangerId: string;
   try {
     const [u] = await sqlc<{ id: string }[]>`
-      INSERT INTO neon_auth."user" ("name", "email", "emailVerified", "updatedAt")
+      INSERT INTO piyaz_auth."user" ("name", "email", "emailVerified", "updatedAt")
       VALUES ('Stranger', 'stranger@test.local', true, now())
       RETURNING id
     `;
@@ -1032,13 +1032,13 @@ test("updateTask appends assigneeIds by default and replaces with overwriteArray
   let secondId: string;
   try {
     const [u] = await sqlc<{ id: string }[]>`
-      INSERT INTO neon_auth."user" ("name", "email", "emailVerified", "updatedAt")
+      INSERT INTO piyaz_auth."user" ("name", "email", "emailVerified", "updatedAt")
       VALUES ('Second', 'second@test.local', true, now())
       RETURNING id
     `;
     secondId = u.id;
     await sqlc`
-      INSERT INTO neon_auth."member" ("organizationId", "userId", "role", "createdAt")
+      INSERT INTO piyaz_auth."member" ("organizationId", "userId", "role", "createdAt")
       VALUES (${f.organizationId}, ${secondId}, 'member', now())
     `;
   } finally {
diff --git a/tests/db/connection.test.ts b/tests/db/connection.test.ts
index 6ebe5ed3..11ce7516 100644
--- a/tests/db/connection.test.ts
+++ b/tests/db/connection.test.ts
@@ -14,7 +14,7 @@ test("container is reachable and migrations applied", async () => {
   try {
     const rows = await sql<{ name: string }[]>`
       SELECT table_name AS name FROM information_schema.tables
-      WHERE table_schema IN ('public', 'neon_auth')
+      WHERE table_schema IN ('public', 'piyaz_auth')
       ORDER BY table_name
     `;
     const names = rows.map((r) => r.name);
diff --git a/tests/db/immutability.test.ts b/tests/db/immutability.test.ts
index 9e8da1aa..0096e593 100644
--- a/tests/db/immutability.test.ts
+++ b/tests/db/immutability.test.ts
@@ -120,7 +120,7 @@ describe("dual-org member cannot reparent rows under app_user", () => {
     const su = superuserPool();
     try {
       await su`
-        INSERT INTO neon_auth."member" ("organizationId", "userId", "role", "createdAt")
+        INSERT INTO piyaz_auth."member" ("organizationId", "userId", "role", "createdAt")
         VALUES (${b.organizationId}::uuid, ${a.userId}::uuid, 'member', now())
       `;
     } finally {
@@ -144,7 +144,7 @@ describe("dual-org member cannot reparent rows under app_user", () => {
     let taskId: string;
     try {
       await su`
-        INSERT INTO neon_auth."member" ("organizationId", "userId", "role", "createdAt")
+        INSERT INTO piyaz_auth."member" ("organizationId", "userId", "role", "createdAt")
         VALUES (${b.organizationId}::uuid, ${a.userId}::uuid, 'member', now())
       `;
       const [t] = await su<{ id: string }[]>`
@@ -173,7 +173,7 @@ describe("dual-org member cannot reparent rows under app_user", () => {
     let codeId: string;
     try {
       await su`
-        INSERT INTO neon_auth."member" ("organizationId", "userId", "role", "createdAt")
+        INSERT INTO piyaz_auth."member" ("organizationId", "userId", "role", "createdAt")
         VALUES (${b.organizationId}::uuid, ${a.userId}::uuid, 'admin', now())
       `;
       const [row] = await su<{ id: string }[]>`
diff --git a/tests/db/neon-auth-lockdown.test.ts b/tests/db/piyaz-auth-lockdown.test.ts
similarity index 92%
rename from tests/db/neon-auth-lockdown.test.ts
rename to tests/db/piyaz-auth-lockdown.test.ts
index 26fbf6bc..eeb636ce 100644
--- a/tests/db/neon-auth-lockdown.test.ts
+++ b/tests/db/piyaz-auth-lockdown.test.ts
@@ -9,7 +9,7 @@ afterEach(async () => {
   await truncateAll();
 });
 
-describe("app_user neon_auth lockdown", () => {
+describe("app_user piyaz_auth lockdown", () => {
   const tables = [
     "user",
     "session",
@@ -26,10 +26,10 @@ describe("app_user neon_auth lockdown", () => {
   ];
 
   for (const t of tables) {
-    test(`app_user cannot SELECT from neon_auth.${t}`, async () => {
+    test(`app_user cannot SELECT from piyaz_auth.${t}`, async () => {
       const c = appUserConnect();
       await expectQueryRejects(
-        c.unsafe(`SELECT 1 FROM neon_auth."${t}" LIMIT 1`),
+        c.unsafe(`SELECT 1 FROM piyaz_auth."${t}" LIMIT 1`),
         /permission denied/i,
       );
     });
@@ -96,7 +96,7 @@ describe("app_user neon_auth lockdown", () => {
     }
   });
 
-  test("app_user has zero rows in information_schema.table_privileges for schema neon_auth", async () => {
+  test("app_user has zero rows in information_schema.table_privileges for schema piyaz_auth", async () => {
     // The runtime SELECT-deny probes above prove the surface is
     // unreachable, but a catalog assertion is the static-shape backup —
     // a future docker/grants.sql edit that accidentally added a grant
@@ -109,12 +109,12 @@ describe("app_user neon_auth lockdown", () => {
         SELECT grantee, table_name, privilege_type
         FROM information_schema.table_privileges
         WHERE grantee = 'app_user'
-          AND table_schema = 'neon_auth'
+          AND table_schema = 'piyaz_auth'
       `;
       const found = rows.map((r) => `${r.table_name}.${r.privilege_type}`);
       expect(
         found,
-        `app_user must have zero table privileges in neon_auth (found: ${found.join(", ")})`,
+        `app_user must have zero table privileges in piyaz_auth (found: ${found.join(", ")})`,
       ).toEqual([]);
     } finally {
       await su.end({ timeout: 5 });
@@ -202,7 +202,7 @@ describe("auth_role public.* lockdown", () => {
   });
 });
 
-describe("service_role neon_auth grants pin the call-site contract", () => {
+describe("service_role piyaz_auth grants pin the call-site contract", () => {
   // The data-layer call sites in lib/data/oauth-session.ts and
   // lib/data/account.ts rely on a documented, MINIMAL set of grants. If
   // grants.sql ever loses one of these, the affected UI surface dies
@@ -232,20 +232,20 @@ describe("service_role neon_auth grants pin the call-site contract", () => {
   }
 
   for (const { table, needs } of requiredGrants) {
-    test(`service_role has the documented grants on neon_auth.${table}`, async () => {
+    test(`service_role has the documented grants on piyaz_auth.${table}`, async () => {
       const c = serviceRolePool();
       try {
         for (const priv of needs) {
           const [row] = await c<Array<{ has: boolean }>>`
             SELECT has_table_privilege(
               'service_role',
-              ${'neon_auth."' + table + '"'},
+              ${'piyaz_auth."' + table + '"'},
               ${priv}
             ) AS has
           `;
           expect(
             row.has,
-            `service_role must have ${priv} on neon_auth.${table}`,
+            `service_role must have ${priv} on piyaz_auth.${table}`,
           ).toBe(true);
         }
       } finally {
diff --git a/tests/db/rls-functions.test.ts b/tests/db/rls-functions.test.ts
index 8af2bd72..da83a41d 100644
--- a/tests/db/rls-functions.test.ts
+++ b/tests/db/rls-functions.test.ts
@@ -633,12 +633,12 @@ describe("is_caller_in_invitation_org SECURITY DEFINER", () => {
   ): Promise<{ id: string }> {
     const su = superuserPool();
     const [row] = await su<{ id: string }[]>`
-      INSERT INTO neon_auth."invitation"
+      INSERT INTO piyaz_auth."invitation"
         ("organizationId", "email", "role", "status", "expiresAt", "inviterId")
       VALUES (
         ${orgId}, ${email}, 'member', 'pending',
         ${new Date(Date.now() + 7 * 86400_000)},
-        (SELECT "userId" FROM neon_auth."member" WHERE "organizationId" = ${orgId} LIMIT 1)
+        (SELECT "userId" FROM piyaz_auth."member" WHERE "organizationId" = ${orgId} LIMIT 1)
       )
       RETURNING id
     `;
@@ -673,7 +673,7 @@ describe("is_caller_in_invitation_org SECURITY DEFINER", () => {
     const fxB = await seedUserOrgProject("inv-bind-b");
     const su = superuserPool();
     await su`
-      INSERT INTO neon_auth."member" ("organizationId", "userId", "role", "createdAt")
+      INSERT INTO piyaz_auth."member" ("organizationId", "userId", "role", "createdAt")
       VALUES (${fxB.organizationId}, ${fxA.userId}, 'member', now())
     `;
     const inv = await seedInvitation(fxA.organizationId, "bind@test.local");
@@ -773,7 +773,7 @@ describe("SECURITY DEFINER catalog invariants", () => {
 
 /**
  * Every `*_visible` SECURITY DEFINER below carries an inline
- * `EXISTS (SELECT 1 FROM neon_auth."member" caller WHERE …)` guard on
+ * `EXISTS (SELECT 1 FROM piyaz_auth."member" caller WHERE …)` guard on
  * the caller's GUC-supplied user_id. If a future regression drops that
  * guard, an app_user session in team B could read team A's data
  * through the SDF — the brand types and the EXECUTE grant matrix would
@@ -872,7 +872,7 @@ describe("SECURITY DEFINER — cross-team caller-membership re-checks", () => {
     const teamB = await seedUserOrgProject("sdf-cuvm-b");
     const su = superuserPool();
     const [member] = await su<{ id: string }[]>`
-      SELECT id FROM neon_auth."member"
+      SELECT id FROM piyaz_auth."member"
       WHERE "organizationId" = ${teamA.organizationId} AND "userId" = ${teamA.userId}
     `;
     const c = appUserConnect();
diff --git a/tests/realtime/access.test.ts b/tests/realtime/access.test.ts
index 23fdf43f..19defeb9 100644
--- a/tests/realtime/access.test.ts
+++ b/tests/realtime/access.test.ts
@@ -155,7 +155,7 @@ test("revokeOrgAccess enumerates and unregisters subs for every project in the o
   // RLS predicate. revokeOrgAccess must instead route through an admin path
   // so the project enumeration still works after membership is gone.
   const f = await seedUserOrgProject("revoke-rt-no-membership");
-  // Use the testcontainer superuser for DELETE on neon_auth.member — neither
+  // Use the testcontainer superuser for DELETE on piyaz_auth.member — neither
   // app_user nor service_role have DELETE on that table; only auth_role does
   // and it has no public-schema access, so the simplest path is the same
   // superuser the seed helper uses.
@@ -167,7 +167,7 @@ test("revokeOrgAccess enumerates and unregisters subs for every project in the o
       VALUES (${f.organizationId}, 'Second project', 'PRJ2')
       RETURNING id`;
     project2Id = p2.id;
-    await su`DELETE FROM neon_auth."member"
+    await su`DELETE FROM piyaz_auth."member"
              WHERE "userId" = ${f.userId}
                AND "organizationId" = ${f.organizationId}`;
   } finally {
diff --git a/tests/security/list-invitations-bypass.test.ts b/tests/security/list-invitations-bypass.test.ts
index 63306038..4f8c3abc 100644
--- a/tests/security/list-invitations-bypass.test.ts
+++ b/tests/security/list-invitations-bypass.test.ts
@@ -101,7 +101,7 @@ afterEach(async () => {
  * `expiresAt` is +24h from now, well outside any plausible test runtime.
  *
  * @param orgId - Organization that owns the invitation.
- * @param inviterId - User who issued the invitation (FK into `neon_auth.user`).
+ * @param inviterId - User who issued the invitation (FK into `piyaz_auth.user`).
  * @param email - Invitee email.
  * @returns The inserted row id.
  */
@@ -113,7 +113,7 @@ async function seedInvitation(
   const su = superuserPool();
   const expiresAt = new Date(Date.now() + 1000 * 60 * 60 * 24);
   const [row] = await su<{ id: string }[]>`
-    INSERT INTO neon_auth."invitation"
+    INSERT INTO piyaz_auth."invitation"
       ("organizationId", "email", "role", "status", "expiresAt", "inviterId")
     VALUES
       (${orgId}, ${email}, 'member', 'pending', ${expiresAt}, ${inviterId})
@@ -207,10 +207,10 @@ describe("catch-all HTTP allowlist (MYMR-155)", () => {
     });
     const su = superuserPool();
     const [attacker] = await su<{ id: string }[]>`
-      SELECT id FROM neon_auth."user" WHERE email = ${attackerEmail}
+      SELECT id FROM piyaz_auth."user" WHERE email = ${attackerEmail}
     `;
     await su`
-      INSERT INTO neon_auth."member"
+      INSERT INTO piyaz_auth."member"
         ("organizationId", "userId", "role", "createdAt")
       VALUES
         (${targetOrg.organizationId}, ${attacker.id}, 'member', now())
@@ -271,7 +271,7 @@ describe("listPendingInvitationsAction (MYMR-155)", () => {
     const targetOrg = await seedUserOrgProject("mymr155-target-action");
     const su = superuserPool();
     const [member] = await su<{ id: string }[]>`
-      INSERT INTO neon_auth."user" ("name", "email", "emailVerified", "updatedAt")
+      INSERT INTO piyaz_auth."user" ("name", "email", "emailVerified", "updatedAt")
       VALUES (
         'MYMR-155 Non-admin Member',
         'mymr155-nonadmin-member-action@test.local',
@@ -281,7 +281,7 @@ describe("listPendingInvitationsAction (MYMR-155)", () => {
       RETURNING id
     `;
     await su`
-      INSERT INTO neon_auth."member"
+      INSERT INTO piyaz_auth."member"
         ("organizationId", "userId", "role", "createdAt")
       VALUES
         (${targetOrg.organizationId}, ${member.id}, 'member', now())
diff --git a/tests/setup/migrate.ts b/tests/setup/migrate.ts
index 3a3d06fb..e23f592a 100644
--- a/tests/setup/migrate.ts
+++ b/tests/setup/migrate.ts
@@ -109,7 +109,7 @@ async function applyRlsFunctions(
 }
 
 /**
- * Apply `docker/init-auth.sql` (the neon_auth schema for self-hosted
+ * Apply `docker/init-auth.sql` (the piyaz_auth schema for self-hosted
  * Postgres), provision the RLS role split (`app_user` + `service_role`),
  * run `drizzle-kit push` to create the public schema, then apply
  * `docker/rls-policies.sql` so RLS policies land. Run once per container
@@ -133,10 +133,10 @@ export async function applyMigrations(url: string): Promise<void> {
       "utf8",
     );
     await sql.unsafe(initAuth);
-    // `init-auth.sql` calls `SET search_path TO neon_auth` for the duration
+    // `init-auth.sql` calls `SET search_path TO piyaz_auth` for the duration
     // of its CREATE TABLEs. The setting persists on the pooled connection;
     // reset it so subsequent statements land in the `public` schema.
-    await sql.unsafe("SET search_path TO public, neon_auth");
+    await sql.unsafe("SET search_path TO public, piyaz_auth");
     await provisionRoles(sql);
   } finally {
     await sql.end({ timeout: 5 });
diff --git a/tests/setup/schema.ts b/tests/setup/schema.ts
index 0b14fa68..6608c1d0 100644
--- a/tests/setup/schema.ts
+++ b/tests/setup/schema.ts
@@ -13,18 +13,18 @@ const TRUNCATE_TABLES = [
   "tasks",
   "team_invite_code",
   "projects",
-  '"neon_auth"."oauthAccessToken"',
-  '"neon_auth"."oauthRefreshToken"',
-  '"neon_auth"."oauthConsent"',
-  '"neon_auth"."oauthClient"',
-  '"neon_auth"."invitation"',
-  '"neon_auth"."member"',
-  '"neon_auth"."session"',
-  '"neon_auth"."account"',
-  '"neon_auth"."organization"',
-  '"neon_auth"."user"',
-  '"neon_auth"."verification"',
-  '"neon_auth"."jwks"',
+  '"piyaz_auth"."oauthAccessToken"',
+  '"piyaz_auth"."oauthRefreshToken"',
+  '"piyaz_auth"."oauthConsent"',
+  '"piyaz_auth"."oauthClient"',
+  '"piyaz_auth"."invitation"',
+  '"piyaz_auth"."member"',
+  '"piyaz_auth"."session"',
+  '"piyaz_auth"."account"',
+  '"piyaz_auth"."organization"',
+  '"piyaz_auth"."user"',
+  '"piyaz_auth"."verification"',
+  '"piyaz_auth"."jwks"',
 ];
 
 /**
diff --git a/tests/setup/seed.ts b/tests/setup/seed.ts
index 78ec5b4d..ff80ca75 100644
--- a/tests/setup/seed.ts
+++ b/tests/setup/seed.ts
@@ -41,17 +41,17 @@ export type Fixture = {
 export async function seedUserOrgProject(suffix = "1"): Promise<Fixture> {
   const sql = superuserPool();
   const [u] = await sql<{ id: string }[]>`
-    INSERT INTO neon_auth."user" ("name", "email", "emailVerified", "updatedAt")
+    INSERT INTO piyaz_auth."user" ("name", "email", "emailVerified", "updatedAt")
     VALUES (${"User " + suffix}, ${"user" + suffix + "@test.local"}, true, now())
     RETURNING id
   `;
   const [o] = await sql<{ id: string }[]>`
-    INSERT INTO neon_auth."organization" ("name", "slug", "createdAt")
+    INSERT INTO piyaz_auth."organization" ("name", "slug", "createdAt")
     VALUES (${"Team " + suffix}, ${"team-" + suffix}, now())
     RETURNING id
   `;
   await sql`
-    INSERT INTO neon_auth."member" ("organizationId", "userId", "role", "createdAt")
+    INSERT INTO piyaz_auth."member" ("organizationId", "userId", "role", "createdAt")
     VALUES (${o.id}, ${u.id}, 'owner', now())
   `;
   const [p] = await sql<{ id: string }[]>`