David Leung

Make client-initiated direct state change opt-in

5

Currently (as at e2d7b5c1cf08927aa0549445c15e30bb14d2dc9f), `Agent` and by extension `AIChatAgent` have the convenient but insecure default of allowing WebSocket clients to send `𝚌𝚏_𝚊𝚐𝚎𝚗𝚝_𝚜𝚝𝚊𝚝𝚎` messages to mutate internal agent state. https://github.com/cloudflare/agents/blob/e2d7b5c1cf08927aa0549445c15e30bb14d2dc9f/packages/agents/src/index.ts#L341-L344 This...