feat(db): activate personal preference RLS

[tiankaima]

Part of #550

Summary

• enable and force owner RLS for DashboardLinkClick, DashboardLinkPin, and BusUserPreference after refactor(db): route personal preferences through RLS context #599 deployed their transaction-local context plumbing
• extend the dedicated runtime-role job with explicit per-table grants instead of broad schema DML
• prove default-deny reads/writes, concurrent A/B isolation, and forged-owner rejection for all three tables
• run Todo and personal-preference RLS suites in separate Vitest processes so Prisma disconnect/lifecycle cannot race across files

This still does not close #550. Upload/UploadPending and HomeworkCompletion require the public-read policy decisions documented in the issue before activation.

Verification

• fresh migration applied locally
• Todo RLS runtime-role suite: 3/3 passed
• personal-preference runtime-role suite: 3/3 passed
• role tested locally after revoking all schema-wide table/sequence privileges and granting only the workflow permissions
• workflow run block passes bash -n; touched test passes Biome

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	life-ustc	1f8f6e1	Commit Preview URL Branch Preview URL	Jul 22 2026, 11:03 AM

[Copilot]

Pull request overview

This PR activates PostgreSQL Row Level Security (RLS) for personal-preference tables and extends CI coverage so the runtime-role job exercises the new RLS behavior under least-privilege grants, aligning with the ongoing RLS rollout in #550 after the context plumbing from #599.

Changes:

• Enable + FORCE RLS and add owner-isolation policies for DashboardLinkClick, DashboardLinkPin, and BusUserPreference.
• Add an integration test suite that validates default-deny, concurrent owner isolation, and forged-owner rejection for the three tables.
• Update the DB-backed CI job to grant runtime-role permissions for the new tables and run the RLS integration suites in separate Vitest processes.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 3 comments.

File	Description
tests/integration/personal-preferences-rls.test.ts	Adds integration coverage for personal-preference RLS (default-deny, isolation, forged-owner rejection).
prisma/migrations/20260722174500_personal_preferences_rls/migration.sql	Activates RLS + FORCE RLS and defines owner isolation policies for three personal-preference tables.
.github/workflows/db-backed-bun-job.yml	Extends runtime-role grants and runs Todo + personal-preference RLS suites in separate Vitest runs.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.

[github-actions]

E2E HTML report is ready: https://life-ustc.github.io/e2e-snapshot-artifacts/reports/29914165691/index.html
All reports: https://life-ustc.github.io/e2e-snapshot-artifacts/

[Copilot]

Pull request overview

Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.

[Copilot]

Pull request overview

Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.

[Copilot]

Pull request overview

Copilot reviewed 4 out of 4 changed files in this pull request and generated no new comments.

[github-actions]

🎉 This PR is included in version 1.77.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀