feat(video): expose Seedance reference media and output controls

.gitattributes

@@ -0,0 +1,19 @@
+# Normalize line endings in the repository. Without this the working tree's
+# native endings leak into commits: 3 files were converted CRLF->LF inside an
+# unrelated behavioural fix, inflating that diff from 51 real lines to 1045 and
+# burying the change under formatting noise. 14 other tracked files were still
+# CRLF, so the next contributor would have regenerated it.
+* text=auto
+
+# Binary formats git must not touch.
+*.png binary
+*.jpg binary
+*.jpeg binary
+*.gif binary
+*.ico binary
+*.pdf binary
+*.woff binary
+*.woff2 binary
+*.mp3 binary
+*.mp4 binary
+*.wav binary

.github/workflows/brand-sync.yml

@@ -0,0 +1,51 @@
+# Vendored into every repo listed in blockrun's brand/consumers.json — the
+# fan-out half of the brand-numbers system. The vendored sync script keeps PR
+# CI deterministic and offline (--check never fetches); THIS workflow is where
+# freshness comes from: it re-fetches the canonical artifact weekly and lands
+# the marker rewrites, so numbers can't silently rot behind green CI again
+# (they did: 14 of 15 consumers sat stale, one 70→71 sweep touched 8 files in
+# this repo alone).
+#
+# Direct push to the default branch on purpose: these are docs/marker rewrites
+# generated from blockrun.ai/brand/numbers.json by the audited script in
+# scripts/. A PR queue nobody tends is how the staleness happened. If the
+# branch is protected the push fails and the fallback opens a PR instead.
+# No third-party actions beyond actions/checkout — supply-chain surface stays
+# at one GitHub-owned action.
+name: brand-sync
+on:
+  schedule:
+    - cron: "17 6 * * 1" # Mondays 06:17 UTC, offset from the top-of-hour crunch
+  workflow_dispatch:
+permissions:
+  contents: write
+  pull-requests: write
+jobs:
+  sync:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Refresh brand numbers from the canonical artifact
+        run: node scripts/sync-brand-numbers.mjs --refresh
+      - name: Land the rewrite
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          if git diff --quiet; then
+            echo "already in sync"
+            exit 0
+          fi
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git add -A
+          git commit -m "chore: sync brand numbers from blockrun.ai/brand/numbers.json"
+          if git push origin "HEAD:${GITHUB_REF_NAME}"; then
+            echo "pushed to ${GITHUB_REF_NAME}"
+          else
+            BR="brand-sync/$(date +%Y%m%d)"
+            git push -f origin "HEAD:${BR}"
+            gh pr create --head "$BR" \
+              --title "chore: sync brand numbers" \
+              --body "Automated marker refresh from https://blockrun.ai/brand/numbers.json (scripts/sync-brand-numbers.mjs --refresh). Opened as a PR because the default branch is protected." \
+              || echo "PR creation unavailable — branch ${BR} pushed, needs manual PR"
+          fi

.github/workflows/ci.yml

@@ -0,0 +1,58 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+  workflow_dispatch:
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ['3.9', '3.11', '3.12']
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Install dependencies
+        run: |
+          if python3 -c "import sys; exit(0 if sys.version_info >= (3, 10) else 1)"; then
+            pip install -e ".[dev,solana,anthropic]"
+          else
+            pip install -e ".[dev,anthropic]"
+          fi
+
+      - name: Check formatting
+        run: black --check .
+
+      - name: Lint
+        run: ruff check .
+
+      - name: Run unit tests
+        run: |
+          if python3 -c "import sys; exit(0 if sys.version_info >= (3, 10) else 1)"; then
+            pytest tests/unit
+          else
+            pytest tests/unit --ignore=tests/unit/test_solana_client.py --ignore=tests/unit/test_solana_wallet.py -k "not SolanaX402"
+          fi
+
+  # Fails when a number in the docs disagrees with brand-numbers.json.
+  # Offline by design: it reads the committed snapshot and never fetches, so a
+  # blockrun.ai deploy in progress cannot fail this repo's CI. Its own job
+  # rather than a step, so it does not run three times across the Python matrix.
+  brand-numbers:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+      - run: node scripts/sync-brand-numbers.mjs --check

.github/workflows/publish.yml

@@ -0,0 +1,76 @@
+name: Publish to PyPI
+
+on:
+  release:
+    types: [published]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.11'
+
+      # 1.8.1 shipped with VERSION and __init__.py still reading 1.8.0. The
+      # guard test caught it, but only on the push-triggered CI run, after the
+      # release had been cut and published. PyPI does not allow overwriting a
+      # published file, so that artifact is permanently wrong.
+      #
+      # These steps run ci.yml's checks on the 3.11 leg only — black, ruff and
+      # the unit suite. They are NOT full CI: the 3.9 and 3.12 legs still run
+      # only on push, so version-incompatible syntax is caught there, not here.
+      # Extras match the 3.11 CI job so the gate covers the Solana paths; with
+      # the plain extra those tests importorskip and pass silently.
+      - name: Install package and test deps
+        run: pip install -e ".[dev,solana]" build
+
+      # A release tag that disagrees with the package version means the wrong
+      # tree is being published. PyPI would reject a duplicate version, but
+      # only after the release is cut; fail here instead.
+      - name: Verify the release tag matches VERSION
+        run: |
+          tag="${{ github.event.release.tag_name }}"
+          declared="v$(tr -d '[:space:]' < VERSION)"
+          if [ "$tag" != "$declared" ]; then
+            echo "Release tag $tag does not match VERSION ($declared)." >&2
+            exit 1
+          fi
+          echo "Release tag $tag matches VERSION."
+
+      - name: Check formatting
+        run: black --check blockrun_llm/ tests/
+
+      - name: Lint
+        run: ruff check blockrun_llm/ tests/
+
+      - name: Verify the release is publishable
+        run: pytest tests/unit -q
+
+      - name: Build package
+        run: python -m build
+
+      - name: Upload artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+  publish:
+    needs: build
+    runs-on: ubuntu-latest
+    environment: pypi
+    permissions:
+      id-token: write
+    steps:
+      - name: Download artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1

.gitignore

@@ -1,56 +1,66 @@
-# Byte-compiled / optimized / DLL files
-__pycache__/
-*.py[cod]
-*$py.class
-
-# Distribution / packaging
-.Python
-build/
-develop-eggs/
-dist/
-downloads/
-eggs/
-.eggs/
-lib/
-lib64/
-parts/
-sdist/
-var/
-wheels/
-*.egg-info/
-.installed.cfg
-*.egg
-
-# Virtual environments
-venv/
-env/
-.venv/
-.env/
-
-# Environment files
-.env
-.env.local
-.env.*.local
-
-# IDE
-.vscode/
-.idea/
-*.swp
-*.swo
-
-# OS
-.DS_Store
-Thumbs.db
-
-# Test / coverage
-.coverage
-.pytest_cache/
-htmlcov/
-.tox/
-.nox/
-
-# mypy
-.mypy_cache/
-
-# Jupyter
-.ipynb_checkpoints/
+# Byte-compiled / optimized / DLL files
+__pycache__/
+*.py[cod]
+*$py.class
+
+# Distribution / packaging
+.Python
+build/
+develop-eggs/
+dist/
+downloads/
+eggs/
+.eggs/
+lib/
+lib64/
+parts/
+sdist/
+var/
+wheels/
+*.egg-info/
+.installed.cfg
+*.egg
+
+# Virtual environments
+venv/
+env/
+.venv/
+.env/
+
+# Environment files
+.env
+.env.local
+.env.*.local
+
+# IDE
+.vscode/
+.idea/
+*.swp
+*.swo
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Test / coverage
+.coverage
+.pytest_cache/
+htmlcov/
+.tox/
+.nox/
+
+# mypy
+.mypy_cache/
+
+# Jupyter
+.ipynb_checkpoints/
+
+# Local Claude Code config (machine-specific allowlists)
+.claude/settings.local.json
+
+# Sweep / test-run artifacts
+sweep-*.json
+sweep-*.log
+
+# Ruff cache
+.ruff_cache/