Since v1.0.0Updated v1.174.0 Kinds: `image` / `video` (tracked via `media_assets` row), `voice` (Supabase `media` bucket — a VOICE MESSAGE, tracked as a `media_assets` row with kind='audio'; mig 0450), `avatar` (Supabase `avatars` bucket), `banner` (Supabase `avatars` bucket — the wide ~3:1 profile cover image, mig 0421), `sail` (Supabase `sails` bucket — holds the sail clip + poster; video OR image MIME), `story` (Supabase `stories` bucket — media + poster; image OR video MIME), `resume` (PRIVATE Supabase `resumes` bucket — PDF/DOC/DOCX; no publicUrl is returned), `listing-cover` (PUBLIC Supabase `listing-covers` bucket, owner folder — PNG/JPEG/WebP, max 5 MB, since v1.247.0; mig 0685). THE COVER COLUMNS SHIPPED WITHOUT A WAY TO FILL THEM over the API: eleven tables gained `coverUrl`, every write path validates it against OUR bucket, and the only thing that could PRODUCE such a URL was a cookie server action. So a bearer caller could read the field, send the field, and never satisfy it. Pass the returned `publicUrl` as `coverUrl` on any listing create/patch. The image is used at 1200x630 (1.91:1) on cards, hover previews and og:image - upload it pre-cropped; the server does not resize. `kyc-document` (PRIVATE Supabase `kyc-documents` bucket — JPG/PNG/WebP/PDF; no publicUrl is returned), `bundle-mcp|bundle-skill|bundle-agent|bundle-hook|bundle-plugin` (Supabase `marketplace-bundles` bucket; the last two added v1.248.0 - hooks and plugins have delivered an ARCHIVE since migs 0605/0607 and BundleKind carried both, but this enum did not, so a bearer caller had to pick a neighbouring kind and the ZIP filed itself under the wrong type. The kind is a PATH SEGMENT of the storage key, so send the one that matches the listing). For `sail`/`story` pass the returned `providerAssetId` as `mediaPath`/`posterPath` to POST /sails or /me/stories; for `resume` pass it as `resumePath` to POST /jobs/{id}/apply; for `kyc-document` pass it as a document `objectPath` to POST /me/kyc; for `course-resource` (PRIVATE `course-resources` bucket — pdf/office/zip/image/txt/csv, ≤50 MB, no publicUrl) pass it as `storagePath` to POST /courses/{slug}/lessons/{lessonId}/resources. v1.18.0 added the sail (then `reel`)/story/resume kinds; v1.23.0 renamed `reel`→`sail`; v1.40.0 added the `kyc-document` kind; v1.110.0 added the `course-resource` kind; v1.161.0 added the `banner` kind. v1.174.0 added the `voice` kind. v1.5.1 — `kind=image` now also returns `publicUrl` (the public CDN URL of the just-uploaded object), matching the existing avatar / bundle response shape. **kind=voice** (mig 0450): POST the RAW `MediaRecorder` output in whatever container the browser produced — `audio/webm`, `audio/ogg`, `audio/mp4`, `audio/mpeg`, `audio/aac`, `audio/wav`, `audio/flac` (codec parameters such as `;codecs=opus` are accepted and ignored). ≤16 MB. No single audio format is both universally recordable and universally playable, so POST /media/finalize transcodes the upload to BOTH webm/opus and mp4/aac and the player picks via `` fallback. Pass the returned `mediaId` in a DM's `mediaIds` to send it as a voice message. Distinct from `channel-locked` AUDIO, which is a PAID product on a private bucket. **kind=dm-view-once** (mig 0453, v1.176.0): VIEW-ONCE DM media — image/video/audio into the PRIVATE bucket under a dedicated namespace, never the public CDN (a public URL would outlive the 'once' forever). Row is ready immediately (NO finalize call); pass the returned `mediaId` as the SINGLE `mediaIds` entry of a DM/group send with `viewOnce: true`. DM size caps apply (image 10 MB / video 50 MB / audio 16 MB); each upload is single-use.