Error
Account
Sign an avatar upload
Returns a presigned PUT. The browser uploads straight to the bucket — bytes never pass through this server — and then saves the returned public_url with PATCH /v1/account. Content type and size are part of the signature, so the bucket enforces them.
POST
Error
Authorizations
A staff session token, uk_st_…. Minted by sign-up, sign-in or the two-factor exchange.
Body
application/json
Response
The presigned upload.
Everything the browser needs to PUT the file straight into the bucket, and everything the caller needs to reference it afterwards.