An agent request without start_cooking in its mandate is refused

# Scenario 097: An agent request without start_cooking in its mandate is refused
# Core rule 6.5: an agent's request carries an AgentMandate and the executor refuses what is outside it (mandate_scope). Start shakshuka twice with the recipe's real hash: once with a planning-only mandate, once with start_cooking, then stop the accepted run.
# Run a hub first: python hub/cookwala_hub.py --recipes examples
import json, os
from cookwala.client import CookwalaClient, CookwalaProblem

def load(path):
    with open(path, encoding="utf-8") as f:
        return json.load(f)

def pick(obj, path):
    for part in path.replace("]", "").replace("[", ".").split("."):
        obj = obj[int(part)] if part.isdigit() else (len(obj) if part == "length" else obj.get(part))
    return obj

c = CookwalaClient(os.environ.get("COOKWALA_HUB", "http://localhost:7878"))


# Step 1: Fetch shakshuka; its id is example-shakshuka and the hub addresses it as cw:cookwala.ai:example-shakshuka.
recipe = c.get_recipe("shakshuka")
assert pick(recipe, "id") == "example-shakshuka", pick(recipe, "id")
print("ok", "id", "=", "example-shakshuka")

# Step 2: The request must carry the recipe hash; a wrong one is refused as recipe_hash_mismatch before the mandate is even read.
h = c.hash(recipe)
assert pick(h, "hash") == "sha256:2ea6fab93cc673fc6784f9bc9fe401d2387bb7779dc537df97286b73807c8841", pick(h, "hash")
print("ok", "hash", "=", "sha256:2ea6fab93cc673fc6784f9bc9fe401d2387bb7779dc537df97286b73807c8841")

# Step 3: An agent with scopes plan_meals and search_recipes asks the device to cook: refused, reason mandate_scope. The refusal is a result with HTTP 202, not an error.
try:
    refused = c.start_execution({"core": "0.2.0", "kind": "ExecuteRequest", "id": "ex-097-planning-only", "recipe": "cw:cookwala.ai:example-shakshuka", "recipeHash": "sha256:2ea6fab93cc673fc6784f9bc9fe401d2387bb7779dc537df97286b73807c8841", "requestedBy": "agent:planner-example", "idempotencyKey": "scenario-097-planning-only", "mandate": {"principal": "person-1", "agent": "agent:planner-example", "scopes": ["plan_meals", "search_recipes"], "expires": "2027-01-01T00:00:00Z"}}, "scenario-097-planning-only", True)
except CookwalaProblem as p:
    refused = p.body  # a refusal is a result, not a crash
    print("refused:", p.refusal)
assert pick(refused, "state") == "refused", pick(refused, "state")
print("ok", "state", "=", "refused")
assert pick(refused, "refusal.reason") == "mandate_scope", pick(refused, "refusal.reason")
print("ok", "refusal.reason", "=", "mandate_scope")

# Step 4: The same request under a mandate that includes start_cooking is accepted; the device still runs its own dry run and limits first.
try:
    accepted = c.start_execution({"core": "0.2.0", "kind": "ExecuteRequest", "id": "ex-097-with-scope", "recipe": "cw:cookwala.ai:example-shakshuka", "recipeHash": "sha256:2ea6fab93cc673fc6784f9bc9fe401d2387bb7779dc537df97286b73807c8841", "requestedBy": "agent:planner-example", "idempotencyKey": "scenario-097-with-scope", "mandate": {"principal": "person-1", "agent": "agent:planner-example", "scopes": ["plan_meals", "start_cooking"], "confirmBefore": ["any_payment"], "expires": "2027-01-01T00:00:00Z"}}, "scenario-097-with-scope", True)
except CookwalaProblem as p:
    accepted = p.body  # a refusal is a result, not a crash
    print("refused:", p.refusal)
assert pick(accepted, "state") == "accepted", pick(accepted, "state")
print("ok", "state", "=", "accepted")
assert pick(accepted, "id") == "ex-097-with-scope", pick(accepted, "id")
print("ok", "id", "=", "ex-097-with-scope")

# Step 5: Stop it: a stop is never refused for authorization once the caller can reach the executor (Core rule 6.2).
try:
    stopped = c.stop_execution("ex-097-with-scope", "requested")
except CookwalaProblem as p:
    stopped = p.body  # a refusal is a result, not a crash
    print("refused:", p.refusal)
assert pick(stopped, "state") == "stopping", pick(stopped, "state")
print("ok", "state", "=", "stopping")

print("scenario complete")