An agent whose mandate lacks the start_cooking scope is refused

# Scenario 048: An agent whose mandate lacks the start_cooking scope is refused
# Agents act under a mandate from a person. A request that carries a mandate without the start_cooking scope is refused with mandate_scope; the same request with the scope is accepted.
# Run a hub first: python hub/cookwala_hub.py --recipes examples
import json, os
from cookwala.client import CookwalaClient, CookwalaProblem

def load(path):
    with open(path, encoding="utf-8") as f:
        return json.load(f)

def pick(obj, path):
    for part in path.replace("]", "").replace("[", ".").split("."):
        obj = obj[int(part)] if part.isdigit() else (len(obj) if part == "length" else obj.get(part))
    return obj

c = CookwalaClient(os.environ.get("COOKWALA_HUB", "http://localhost:7878"))


# Step 1: Send a request whose mandate allows planning meals and ordering groceries only.
try:
    refused = c.start_execution({"core": "0.2.0", "kind": "ExecuteRequest", "id": "ex-048-mandate", "recipe": "cw:cookwala.ai:example-shakshuka", "recipeHash": "sha256:2ea6fab93cc673fc6784f9bc9fe401d2387bb7779dc537df97286b73807c8841", "servings": 4, "requestedBy": "agent:planner-1", "idempotencyKey": "ex-048-mandate-a", "mandate": {"principal": "household:h-42/person:p-1", "agent": "agent:planner-1", "scopes": ["plan_meals", "order_groceries"], "confirmBefore": ["irreversible", "safety_override"], "expires": "2026-10-04T23:59:00+03:00"}}, "ex-048-mandate-key", True)
except CookwalaProblem as p:
    refused = p.body  # a refusal is a result, not a crash
    print("refused:", p.refusal)
assert pick(refused, "state") == "refused", pick(refused, "state")
print("ok", "state", "=", "refused")
assert pick(refused, "refusal.reason") == "mandate_scope", pick(refused, "refusal.reason")
print("ok", "refusal.reason", "=", "mandate_scope")
assert pick(refused, "refusal.detail") == "the agent mandate lacks start_cooking", pick(refused, "refusal.detail")
print("ok", "refusal.detail", "=", "the agent mandate lacks start_cooking")

# Step 2: The same request with start_cooking in the scopes is accepted.
try:
    accepted = c.start_execution({"core": "0.2.0", "kind": "ExecuteRequest", "id": "ex-048-ok", "recipe": "cw:cookwala.ai:example-shakshuka", "recipeHash": "sha256:2ea6fab93cc673fc6784f9bc9fe401d2387bb7779dc537df97286b73807c8841", "servings": 4, "requestedBy": "agent:planner-1", "idempotencyKey": "ex-048-ok-a", "mandate": {"principal": "household:h-42/person:p-1", "agent": "agent:planner-1", "scopes": ["plan_meals", "start_cooking", "stop_cooking"], "confirmBefore": ["irreversible", "safety_override"], "expires": "2026-10-04T23:59:00+03:00"}}, "ex-048-ok-key", True)
except CookwalaProblem as p:
    accepted = p.body  # a refusal is a result, not a crash
    print("refused:", p.refusal)
assert pick(accepted, "state") == "accepted", pick(accepted, "state")
print("ok", "state", "=", "accepted")

print("scenario complete")