GPT Image 2.5 Flare

curl -X POST https://api.ezflows.io/v1/models/gpt-image-2.5-flare \
  -H "Authorization: Bearer $EZFLOWS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "prompt": "A photoreal product photograph of a frosted glass bottle of artisanal hot sauce standing on a weathered wooden market stall, with three fresh red habanero peppers and a halved lime beside it. The wraparound kraft-paper label reads, in bold condensed serif lettering: '\''EMBER & ASH'\'' across the top, '\''Smoked Habanero Hot Sauce'\'' as the tagline beneath it, a small legible line '\''habanero · smoked paprika · lime · sea salt'\'', and '\''148 ml'\'' in the lower corner. Condensation beads on the glass, a red wax-sealed cork, visible paper grain on the label, bright even daylight.",
    "size": "1024x1536"
  }'

# 202 Accepted, at once — it never waits for the model:
# {"request_id": "req_8f2a41c9b70e4d15", "status": "queued",
#  "poll_url": "https://api.ezflows.io/v1/requests/req_8f2a41c9b70e4d15"}

REQUEST_ID=req_8f2a41c9b70e4d15   # from the POST

while :; do
  BODY=$(curl -s https://api.ezflows.io/v1/requests/$REQUEST_ID \
    -H "Authorization: Bearer $EZFLOWS_API_KEY")
  STATUS=$(echo "$BODY" | jq -r .data.status)
  case "$STATUS" in succeeded|failed|cancelled) break ;; esac
  sleep 3
done

echo "$BODY" | jq -r '.data.output.artifacts[].url'   # media.ezflows.io, kept 90 days

{
  "data": {
    "id": "req_8f2a41c9b70e4d15",
    "model_slug": "gpt-image-2.5-flare",
    "status": "succeeded",
    "http_status": 200,
    "cost": 0.05291,
    "auth_method": "api_key",
    "error": null,
    "submitted_at": "2026-09-12T18:07:21.114Z",
    "queue_started_at": "2026-09-12T18:07:21.402Z",
    "execution_started_at": "2026-09-12T18:07:22.010Z",
    "first_byte_at": "2026-09-12T18:07:52.871Z",
    "finished_at": "2026-09-12T18:07:55.203Z",
    "io_deleted_at": null,
    "canvas_id": null,
    "canvas_node_id": null,
    "client_attempt_id": null,
    "idempotency_key": null,
    "input": {
      "prompt": "A photoreal product photograph of a frosted glass bottle of artisanal hot sauce standing on a weathered wooden market stall, with three fresh red habanero peppers and a halved lime beside it. The wraparound kraft-paper label reads, in bold condensed serif lettering: 'EMBER & ASH' across the top, 'Smoked Habanero Hot Sauce' as the tagline beneath it, a small legible line 'habanero · smoked paprika · lime · sea salt', and '148 ml' in the lower corner. Condensation beads on the glass, a red wax-sealed cork, visible paper grain on the label, bright even daylight.",
      "size": "1024x1536"
    },
    "output": {
      "artifacts": [
        {
          "index": 0,
          "kind": "image",
          "contentType": "image/png",
          "url": "https://media.ezflows.io/outputs/<account>/req_8f2a41c9b70e4d15/0.png"
        }
      ]
    }
  }
}

{
  "id": "82cf46a4-841e-41d6-b3c7-facc937d3252",
  "type": "request.succeeded",
  "created_at": "2026-09-12T18:07:55Z",
  "data": {
    "id": "req_8f2a41c9b70e4d15",
    "model_slug": "gpt-image-2.5-flare",
    "status": "succeeded",
    "cost": 0.05291,
    "output": {
      "artifacts": [
        {
          "url": "https://media.ezflows.io/…/0.png"
        }
      ]
    }
  }
}

# Create the endpoint under Webhooks in the dashboard; the signing secret is shown once.
# ezflows-signature: t=<ts>,v1=<hex HMAC-SHA256 of "<ts>.<raw body>">
# body.json = the exact bytes received. Reject anything older than five minutes.
EXPECTED=$({ printf '%s.' "$TS"; cat body.json; } \
  | openssl dgst -sha256 -hmac "$EZFLOWS_WEBHOOK_SECRET" -r | cut -d' ' -f1)

[ "$EXPECTED" = "$V1" ] && echo "valid" || echo "reject"