Run Studio·876 from your own code

Authorization: Bearer s876_…

export S876_KEY=s876_…   # Settings → Developer API

# 1 · Who am I, and what's my balance?
curl https://app.thestudio876.com/api/v1/me -H "Authorization: Bearer $S876_KEY"

# 2 · Pick a character, price a run, start it
curl https://app.thestudio876.com/api/v1/characters -H "Authorization: Bearer $S876_KEY"
curl https://app.thestudio876.com/api/v1/quote -H "Authorization: Bearer $S876_KEY" \
  -d '{"kind":"generate_image","preset":"balanced","takes":2}'
curl https://app.thestudio876.com/api/v1/jobs -H "Authorization: Bearer $S876_KEY" \
  -d '{"kind":"generate_image","preset":"balanced",
       "input":{"character_id":"<id>","scene":"A Kingston street at dusk, neon","takes":2}}'
# → 202 {"data":{"id":"<job id>","status":"queued","credits_reserved":16,…}}

# 3 · Wait (or use a webhook), then download
curl https://app.thestudio876.com/api/v1/jobs/<job id> -H "Authorization: Bearer $S876_KEY"
# → {"data":{"status":"succeeded","output":{"assets":[{"id":"<asset id>","rank":1,"score":0.93},…]}}}
curl https://app.thestudio876.com/api/v1/assets/<asset id> -H "Authorization: Bearer $S876_KEY"
# → {"data":{…,"url":"https://…","url_expires_in":3600}}

# A reference image → a locked character
curl https://app.thestudio876.com/api/v1/uploads -H "Authorization: Bearer $S876_KEY" -d '{"mime":"image/png"}'
# → 201 {"data":{"path":"acct/…/refs/api-….png","upload_url":"https://…","method":"PUT",…}}
curl -X PUT "<upload_url>" -H "Content-Type: image/png" --data-binary @portrait.png
curl https://app.thestudio876.com/api/v1/jobs -H "Authorization: Bearer $S876_KEY" \
  -d '{"kind":"extract_dna","input":{"reference_path":"<path>","consent":true}}'

POST /your/endpoint
Content-Type: application/json
Studio876-Event: job.succeeded
Studio876-Delivery: 7b0c…
Studio876-Signature: t=1793770000,v1=5f2a…

{"id":"7b0c…","type":"job.succeeded","created":1793770000,
 "data":{"job":{"id":"…","kind":"generate_image","status":"succeeded","project_id":"…",
   "output":{"assets":[{"id":"…","rank":1,"score":0.93}]},"credits_charged":16,"via_api":true,…}}}

import crypto from "node:crypto";

// rawBody: the exact request body string (before JSON.parse).
export function verifyStudio876(secret, rawBody, header, toleranceSeconds = 300) {
  const parts = Object.fromEntries(header.split(",").map((p) => p.split("=", 2)));
  const t = Number(parts.t);
  if (!t || Math.abs(Date.now() / 1000 - t) > toleranceSeconds || !parts.v1) return false;
  const want = Buffer.from(crypto.createHmac("sha256", secret).update(`${t}.${rawBody}`).digest("hex"));
  const got = Buffer.from(parts.v1);
  return want.length === got.length && crypto.timingSafeEqual(want, got);
}

import hashlib, hmac, time

def verify_studio876(secret: str, raw_body: bytes, header: str, tolerance: int = 300) -> bool:
    parts = dict(p.split("=", 1) for p in header.split(",") if "=" in p)
    try:
        t = int(parts["t"])
    except (KeyError, ValueError):
        return False
    if abs(time.time() - t) > tolerance or "v1" not in parts:
        return False
    want = hmac.new(secret.encode(), f"{t}.".encode() + raw_body, hashlib.sha256).hexdigest()
    return hmac.compare_digest(want, parts["v1"])