§4 settings-save backend (no schema change; User already has phone/avatar_url):
- me/ now GET+PATCH (update name/phone/email)
- POST me/password/ — verify old password, set new (>=8), reissue token
- POST me/avatar/ — multipart -> TOS upload -> presigned avatar_url
Verified: profile PATCH 200, password change round-trip 200, original login restored.
Note: notification/theme prefs have no User storage field -> will persist client-side (no migrate per rules).
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
- seed_demo.py: ORM-only demo data for airshelf team — 2 products (w/ images+selling points),
11 assets referencing real TOS objects (thumbnails resolve to real images), one COMPLETED
project with full pipeline graph (script/base_assets/storyboard/video_segments/timeline) so
pipeline stage2-5 has real data to render. Idempotent (skips if demo product exists). No schema changes.
- shot-data.mjs: capture dashboard/products/library with seeded data via 127.0.0.1:5180
- verified: products page shows real cover images via TOS preview_url
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
AssetFile.preview_url was stored blank on upload, so all thumbnails fell back to placeholders.
Make preview_url a SerializerMethodField that signs a TOS GET URL from object_key on read
(falls back to stored value, or "" when TOS unconfigured / no key). Verified: presigned URL
for an existing object returns HTTP 200 image/png.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
