chore(deps): bump agents from 0.6.0 to 0.7.2

[dependabot]

Bumps agents from 0.6.0 to 0.7.2.

Release notes

Sourced from agents's releases.

agents@0.7.2

Patch Changes

• #1050 6157741 Thanks @​ask-bonk! - Fix Agent alarm() bypassing PartyServer's initialization

  The Agent class defined alarm as a public readonly arrow function property, which completely shadowed PartyServer's alarm() prototype method. This meant #ensureInitialized() was never called when a Durable Object woke via alarm (e.g. from scheduleEvery), causing this.name to throw and onStart to never run.

  Converted alarm from an arrow function property to a regular async method that calls super.alarm() before processing scheduled tasks. Also added an onAlarm() no-op override to suppress PartyServer's default warning log.

• #1052 f1e2bfa Thanks @​ask-bonk! - Make scheduleEvery() idempotent

  scheduleEvery() now deduplicates by the combination of callback name, interval, and payload: calling it multiple times with the same arguments returns the existing schedule instead of creating a duplicate. A different interval or payload creates a separate, independent schedule.

  This fixes the common pattern of calling scheduleEvery() inside onStart(), which runs on every Durable Object wake. Previously each wake created a new interval schedule, leading to a thundering herd of duplicate executions.

agents@0.7.1

Patch Changes

• #1046 2cde136 Thanks @​threepointone! - Add agent and name fields to observability events, identifying which agent class and instance emitted each event.

  New events: disconnect (WebSocket close), email:receive, email:reply, queue:create, and a new agents:email channel.

  Make _emit protected so subclasses can use it. Update AIChatAgent to use _emit so message/tool events carry agent identity.

agents@0.7.0

Minor Changes

• #1024 e9ae070 Thanks @​threepointone! - Overhaul observability: diagnostics_channel, leaner events, error tracking.

  Breaking changes to agents/observability types

  • BaseEvent: Removed id and displayMessage fields. Events now contain only type, payload, and timestamp. The payload type is now strict — accessing undeclared fields is a type error. Narrow on event.type before accessing payload properties.
  • Observability.emit(): Removed the optional ctx second parameter.
  • AgentObservabilityEvent: Split combined union types so each event has its own discriminant (enables proper Extract-based type narrowing). Added new error event types.

  If you have a custom Observability implementation, update your emit signature to emit(event: ObservabilityEvent): void.

  diagnostics_channel replaces console.log

  The default genericObservability implementation no longer logs every event to the console. Instead, events are published to named diagnostics channels using the Node.js diagnostics_channel API. Publishing to a channel with no subscribers is a no-op, eliminating logspam.

  Seven named channels, one per event domain:

  • agents:state — state sync events
  • agents:rpc — RPC method calls and errors
  • agents:message — message request/response/clear/cancel/error + tool result/approval
  • agents:schedule — schedule and queue create/execute/cancel/retry/error events
  • agents:lifecycle — connection and destroy events
  • agents:workflow — workflow start/event/approve/reject/terminate/pause/resume/restart
  • agents:mcp — MCP client connect/authorize/discover events

... (truncated)

Changelog

Sourced from agents's changelog.

0.7.2

Patch Changes

• #1050 6157741 Thanks @​ask-bonk! - Fix Agent alarm() bypassing PartyServer's initialization

  The Agent class defined alarm as a public readonly arrow function property, which completely shadowed PartyServer's alarm() prototype method. This meant #ensureInitialized() was never called when a Durable Object woke via alarm (e.g. from scheduleEvery), causing this.name to throw and onStart to never run.

  Converted alarm from an arrow function property to a regular async method that calls super.alarm() before processing scheduled tasks. Also added an onAlarm() no-op override to suppress PartyServer's default warning log.

• #1052 f1e2bfa Thanks @​ask-bonk! - Make scheduleEvery() idempotent

  scheduleEvery() now deduplicates by the combination of callback name, interval, and payload: calling it multiple times with the same arguments returns the existing schedule instead of creating a duplicate. A different interval or payload creates a separate, independent schedule.

  This fixes the common pattern of calling scheduleEvery() inside onStart(), which runs on every Durable Object wake. Previously each wake created a new interval schedule, leading to a thundering herd of duplicate executions.

0.7.1

Patch Changes

• #1046 2cde136 Thanks @​threepointone! - Add agent and name fields to observability events, identifying which agent class and instance emitted each event.

  New events: disconnect (WebSocket close), email:receive, email:reply, queue:create, and a new agents:email channel.

  Make _emit protected so subclasses can use it. Update AIChatAgent to use _emit so message/tool events carry agent identity.

0.7.0

Minor Changes

• #1024 e9ae070 Thanks @​threepointone! - Overhaul observability: diagnostics_channel, leaner events, error tracking.

  Breaking changes to agents/observability types

  • BaseEvent: Removed id and displayMessage fields. Events now contain only type, payload, and timestamp. The payload type is now strict — accessing undeclared fields is a type error. Narrow on event.type before accessing payload properties.
  • Observability.emit(): Removed the optional ctx second parameter.
  • AgentObservabilityEvent: Split combined union types so each event has its own discriminant (enables proper Extract-based type narrowing). Added new error event types.

  If you have a custom Observability implementation, update your emit signature to emit(event: ObservabilityEvent): void.

  diagnostics_channel replaces console.log

  The default genericObservability implementation no longer logs every event to the console. Instead, events are published to named diagnostics channels using the Node.js diagnostics_channel API. Publishing to a channel with no subscribers is a no-op, eliminating logspam.

  Seven named channels, one per event domain:

  • agents:state — state sync events
  • agents:rpc — RPC method calls and errors
  • agents:message — message request/response/clear/cancel/error + tool result/approval
  • agents:schedule — schedule and queue create/execute/cancel/retry/error events
  • agents:lifecycle — connection and destroy events
  • agents:workflow — workflow start/event/approve/reject/terminate/pause/resume/restart

... (truncated)

Commits

• 03fada6 Version Packages (#1051)
• f1e2bfa Make scheduleEvery() idempotent (#1052)
• 6157741 Fix alarm() to call super for init (#1050)
• 477d338 Version Packages (#1047)
• 2cde136 Observability: include agent identity & events (#1046)
• 64d9ad6 Version Packages (#995)
• 766f20b docs: update ai-chat docs for post-0.6.0 changes (#1040)
• 00d5a31 Reduce test noise: mock MCP connections and add ai-chat DO cleanup (#1037)
• ec9a4b7 Reduce Durable Object test noise (#1036)
• 24cf279 fix: cleaner tests, better error handling, and protocol improvements (#1035)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	memory-graph-mcp	e5afecd	Mar 04 2026, 09:58 AM

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	memory-graph-mcp	e5afecd	Mar 04 2026, 09:58 AM

[github-actions]

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 1 package(s) with unknown licenses.

See the Details below.

License Issues

package-lock.json

Package	Version	License	Issue Type
partyserver	0.3.3	Null	Unknown License

Denied Licenses:

GPL-3.0, AGPL-3.0

OpenSSF Scorecard

Package	Version	Score	Details
npm/agents	0.7.2	Unknown	Unknown
npm/partyserver	0.3.3	Unknown	Unknown
npm/partysocket	1.1.16	Unknown	Unknown

Scanned Files

• package-lock.json

[github-actions]

This PR has been inactive for 30 days. It will be closed in 14 days if there is no further activity.

[github-actions]

This PR has been marked as stale because it has had no activity for 45 days. It will be closed in 15 days if no further activity occurs.

[github-actions]

This PR has been marked as stale because it has had no activity for 45 days. It will be closed in 15 days if no further activity occurs.

[github-actions]

This PR has been inactive for 30 days. It will be closed in 14 days if there is no further activity.