Upload or replace a contact's avatar

POST 
/api/contacts/:contactId/avatar

Multipart upload of a single avatar image for a contact, stored on the tenant-scoped avatar disk (the same scheme as the staff /me/avatar upload). The MIME is validated against the detected type, not the client content-type. Gated by the contact update ability (agent+). Returns the contact with the new avatar_url.

Request

Responses

200

The updated contact.

401

Not authenticated. code: account_disabled means the member's seat was deactivated in this workspace: the session is over even though the token was not revoked (clients sign out and clean up).

403

Authenticated but not allowed.

404

Resource not found (or not visible to the current tenant).

422

The request failed validation.