chore: import upstream snapshot with attribution

.github/workflows/test_python.yml

@@ -0,0 +1,208 @@
+name: Test (Python)
+
+permissions:
+  contents: read
+
+"on":
+  push:
+    branches: [main]
+    paths:
+      - python/**
+      - examples/python/**
+      - integ/**
+      - .github/workflows/test_python.yml
+  pull_request:
+    branches: [main]
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  changes:
+    runs-on: ubuntu-latest
+    if: github.event_name == 'pull_request'
+    permissions:
+      pull-requests: read
+    outputs:
+      hit: ${{ steps.filter.outputs.hit }}
+    steps:
+      - uses: dorny/paths-filter@v4
+        id: filter
+        with:
+          filters: |
+            hit:
+              - 'python/**'
+              - 'examples/python/**'
+              - 'integ/**'
+              - '.github/workflows/test_python.yml'
+
+  test:
+    needs: changes
+    if: ${{ !cancelled() && (github.event_name != 'pull_request' || needs.changes.outputs.hit == 'true') }}
+    runs-on: ubuntu-latest
+    services:
+      redis:
+        image: redis:7
+        ports:
+          - 6379:6379
+        options: >-
+          --health-cmd "redis-cli ping"
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+      mongodb:
+        image: mongo:8
+        ports:
+          - 27017:27017
+        options: >-
+          --health-cmd "mongosh --quiet --eval 'db.runCommand({ping:1}).ok'"
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 10
+
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: Set up Python
+        uses: actions/setup-python@v6
+        with:
+          python-version: "3.12"
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v7
+        with:
+          enable-cache: true
+
+      - name: Install Python dependencies
+        working-directory: python
+        run: uv sync --all-extras --no-extra camel
+
+      - name: Install package
+        working-directory: python
+        run: uv pip install .
+
+      - name: Run pytest (main suite, camel excluded)
+        working-directory: python
+        env:
+          REDIS_URL: redis://localhost:6379/0
+          MONGODB_URI: mongodb://localhost:27017
+        run: uv run pytest --ignore=tests/agents/camel
+
+      - name: Examples (output checked against integ/ truth files)
+        env:
+          REDIS_URL: redis://localhost:6379/0
+        run: |
+          run() { echo "## $1"; ./python/.venv/bin/python "$1" 2>&1 | bash integ/check_lines.sh "$2"; }
+          run examples/python/ram/ram.py integ/truth/python/ram.txt
+          run examples/python/ram/ram_vfs.py integ/truth/python/ram_vfs.txt
+          run examples/python/ram/ram_python.py integ/truth/python/ram_python.txt
+          run examples/python/disk/disk.py integ/truth/python/disk.txt
+          run examples/python/disk/disk_vfs.py integ/truth/python/disk_vfs.txt
+          run examples/python/other/custom_command.py integ/truth/python/custom_command.txt
+          run examples/python/redis_resource/example_redis.py integ/truth/python/redis.txt
+          run examples/python/redis_resource/example_redis_index.py integ/truth/python/redis_index.txt
+          run examples/python/redis_resource/example_redis_cache.py integ/truth/python/redis_cache.txt
+          run examples/python/redis_resource/example_redis_vfs.py integ/truth/python/redis_vfs.txt
+          run examples/python/version/branching.py integ/truth/version_branching.txt
+
+      - name: Sync Python dependencies for camel
+        working-directory: python
+        run: uv sync --extra camel
+
+      - name: Run pytest (camel toolkit tests)
+        working-directory: python
+        run: uv run pytest tests/agents/camel
+
+  import-isolation:
+    needs: changes
+    if: ${{ !cancelled() && (github.event_name != 'pull_request' || needs.changes.outputs.hit == 'true') }}
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - extra: pydantic-ai
+            module: mirage.agents.pydantic_ai
+            blocked: deepagents
+          - extra: openai
+            module: mirage.agents.openai_agents
+            blocked: deepagents
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: Set up Python
+        uses: actions/setup-python@v6
+        with:
+          python-version: "3.12"
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v7
+        with:
+          enable-cache: true
+
+      - name: Create venv and install only the target extra
+        working-directory: python
+        run: |
+          uv venv .venv-iso
+          uv pip install --python .venv-iso/bin/python ".[${{ matrix.extra }}]"
+
+      - name: Verify blocked package is not installed
+        working-directory: python
+        run: |
+          if .venv-iso/bin/python -c "import ${{ matrix.blocked }}" 2>/dev/null; then
+            echo "FAIL: ${{ matrix.blocked }} should not be installed for extra=${{ matrix.extra }}"
+            exit 1
+          fi
+          echo "OK: ${{ matrix.blocked }} is absent"
+
+      - name: Import agent package and prompt without blocked dep
+        working-directory: python
+        run: |
+          .venv-iso/bin/python - <<'PY'
+          import importlib, sys
+          mod = importlib.import_module("${{ matrix.module }}")
+          prompt = importlib.import_module("${{ matrix.module }}.prompt")
+          assert isinstance(prompt.MIRAGE_SYSTEM_PROMPT, str)
+          assert callable(prompt.build_system_prompt)
+          assert "${{ matrix.blocked }}" not in sys.modules, \
+              f"${{ matrix.blocked }} got imported transitively"
+          print(f"OK: imported ${{ matrix.module }} cleanly without ${{ matrix.blocked }}")
+          PY
+
+  audit:
+    needs: changes
+    if: ${{ !cancelled() && (github.event_name != 'pull_request' || needs.changes.outputs.hit == 'true') }}
+    runs-on: ubuntu-latest
+    continue-on-error: true
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: Set up Python
+        uses: actions/setup-python@v6
+        with:
+          python-version: "3.12"
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v7
+        with:
+          enable-cache: true
+
+      - name: Audit dependencies for known vulnerabilities (informational)
+        working-directory: python
+        run: uv audit --preview-features audit --no-extra camel
+
+  gate:
+    name: test-python-gate
+    runs-on: ubuntu-latest
+    needs: [changes, test, import-isolation]
+    if: always()
+    steps:
+      - name: Check required jobs
+        run: |
+          results="${{ join(needs.*.result, ' ') }}"
+          echo "$results"
+          case "$results" in
+            *failure*|*cancelled*) exit 1 ;;
+          esac