POST /v2/social-media

Uploads one binary JPEG, PNG, still WebP or GIF, at most 15 MiB. The server validates and normalizes decoded content, strips metadata and approves every rendered GIF frame before storing it privately. Processing permits at most 16 million decoded pixels across at most 60 GIF frames. Scope is immutable; message uploads require the exact chat_id and current membership. An optional canonical Tenor URL is attribution only for GIFs and is never fetched. A 201 response contains approved metadata without an ordinal; use its id in media_ids on a supported parent write within 24 hours. Uploads remain disabled until the runtime write gate and storage/moderation providers are ready. No multipart, base64 JSON, remote URL ingestion, public URL or CDN access is supported. When CDN delivery is enabled, approved upload metadata can include short-lived viewer-specific delivery URLs and a WebP thumbnail. These capabilities are optional; access_path remains the authenticated fallback.