Give the Pydantic example a key, a free port, and the shipped model default

The endpoint read no header, which is the one thing an example must not
teach now that the server sends a Bot's key on every run: it takes a run
from anyone who can reach the port. Guarded by REQUIRE_KEY, the same
optional guard the LangGraph example carries.

4202 sits in the band the in-box agents use, 4200 and 4201. The examples
step by a hundred, 4300 and 4400, and 4500 is the supervisor, so 4600.

gpt-4.1 is not what this deployment ships; gpt-5.5 is the default
everywhere else. Also record that Pydantic AI calls /responses rather
than /v1/chat/completions, which decides whether a given gateway can
serve this at all, and ignore the egg-info that the README's own install
step leaves behind.

Author: davidmckayv

examples/pydantic-ai-bot/.gitignore

@@ -1,3 +1,4 @@
 __pycache__/
 *.pyc
 .venv/
+*.egg-info/

examples/pydantic-ai-bot/README.md

@@ -28,16 +28,21 @@ pip install -e .
 OPENAI_API_KEY=... python src/app.py
 ```
 
-It listens on `http://localhost:4202/ag-ui` (`PORT` to change) and answers `GET /health`.
+It listens on `http://localhost:4600/ag-ui` (`PORT` to change) and answers `GET /health`.
 
 | Variable         | Default   | Meaning                                              |
 | ---------------- | --------- | ---------------------------------------------------- |
 | `OPENAI_API_KEY` | required  | Read by Pydantic AI's OpenAI provider.               |
-| `BOT_MODEL`      | `gpt-4.1` | Model the agent runs. Any tool-calling model.        |
-| `PORT`           | `4202`    | Port the AG-UI endpoint listens on.                  |
+| `BOT_MODEL`      | `gpt-5.5` | Model the agent runs. Any tool-calling model.        |
+| `PORT`           | `4600`    | Port the AG-UI endpoint listens on.                  |
+| `REQUIRE_KEY`    | unset     | When set, `/ag-ui` refuses a run whose `authorization` header does not match. |
 
 `OPENAI_BASE_URL` points the OpenAI provider at a compatible gateway, the same way the rest of the
-deployment is configured (see [docs/configuration.md](../../docs/configuration.md)).
+deployment is configured (see [docs/configuration.md](../../docs/configuration.md)). Note which API
+that gateway has to serve: Pydantic AI calls `/responses`, not `/v1/chat/completions`. A gateway
+offering only chat completions will not answer this example, and the reverse of the constraint the
+two TypeScript Bots carry, which is that they speak chat completions and so cannot use the models
+that require Responses.
 
 ## Register it
 
@@ -51,7 +56,7 @@ agents:
     title: Research
     role_description: Research on a governed computer, written in Pydantic AI.
     type: remote-ag-ui
-    endpoint: ${PYDANTIC_BOT_AG_UI_URL:-http://localhost:4202/ag-ui}
+    endpoint: ${PYDANTIC_BOT_AG_UI_URL:-http://localhost:4600/ag-ui}
 ```
 
 ## Notes

examples/pydantic-ai-bot/src/app.py

@@ -20,7 +20,7 @@
 from starlette.responses import JSONResponse, Response
 from starlette.routing import Route
 
-MODEL = os.environ.get("BOT_MODEL", "gpt-4.1")
+MODEL = os.environ.get("BOT_MODEL", "gpt-5.5")
 
 # A real Pydantic AI agent with its own model client. It defines no tools of its own: the tools it
 # may call arrive per run from the surface (see below), so this file never names `computer_navigate`
@@ -42,12 +42,21 @@
 async def ag_ui(request: Request) -> Response:
     """One POST carrying a ``RunAgentInput``, a stream of AG-UI events back.
 
+    Guarded by ``REQUIRE_KEY`` when it is set, the same as the LangGraph example: OpenBot sends the
+    Bot's key on every run, and an endpoint that never reads the header accepts a run from anyone who
+    can reach the port. Optional because a developer running this by hand has no key to send, and
+    refusing them would teach nothing.
+
     ``AGUIAdapter.dispatch_request`` reads the run input, exposes ``input.tools`` to the model as
     external (frontend) tools, runs the agent, and returns a streaming AG-UI Server-Sent-Events
     response. The tool loop stays on the client, exactly as it does for the Bot in the box: a tool
     call is emitted, this run ends, and OpenBot executes it through the policy gateway before starting
     the next run with the result. That is why this file can drive a browser it has no access to.
     """
+    required_key = os.environ.get("REQUIRE_KEY")
+    if required_key and request.headers.get("authorization") != required_key:
+        print("refused a run: wrong or missing key")
+        return JSONResponse({"error": "Unauthorized"}, status_code=401)
     return await AGUIAdapter.dispatch_request(request, agent=agent)
 
 
@@ -66,6 +75,6 @@ async def health(_: Request) -> Response:
 if __name__ == "__main__":
     import uvicorn
 
-    port = int(os.environ.get("PORT", "4202"))
+    port = int(os.environ.get("PORT", "4600"))
     print(f"pydantic-ai-bot listening on http://localhost:{port}/ag-ui (model {MODEL})")
     uvicorn.run(app, host="0.0.0.0", port=port)