Read or refresh the canonical semantic device inventory.

Read the shared, non-authoritative commissioning report for future battery and EV bindings.

Read bounded semantic state snapshots for selected devices.

Read a complete canonical energy context for one requested horizon.

Validate one semantic command without invoking an adapter.

Validate a semantic plan and return its policy decisions and digest.

Issue a server-authoritative approval grant for a plan requiring confirmation. A trusted host may inject an authenticated operator principal. The optional operator_token exists only for explicitly enabled local/dev compatibility mode; the caller never supplies the recorded operator identity. The returned approval_id is single-use and bound to the plan's current validation digest.

Execute a previously validated plan after runtime safety checks.

Schedule a previously validated/approved plan to execute at a future time, instead of immediately. The plan still goes through every existing safety check when its time arrives.

Commit one validated bundle through the runtime-owned physical execution and scheduling boundary.

Cancel a pending scheduled plan before it executes.

Request a temporal revision for a pending plan. The legacy generic mutation is fail-closed; a changed time must be validated and approved again before admission.

List plans currently pending their scheduled execution time.

Schedule a plan's commands to run repeatedly at a fixed local time, optionally restricted to specific weekdays. Creating a standing automation is its own authority act, distinct from running the commands once: if the template plan currently requires confirmation, an approval_id from request_approval is required to create the schedule at all. Every occurrence is still independently revalidated against live state before it executes; an occurrence requiring confirmation at run time is skipped and audited, never auto-approved, and recurrence continues to its next scheduled time. An optional expires_at bounds how long the automation stays active.

Cancel a recurring schedule; stops all future occurrences.

List active recurring schedules and their next occurrence.

Query the bounded, filterable audit trail of runtime decisions.

Validate an optimization scenario against canonical devices and capabilities.

Compute a deterministic proposal without executing physical commands.

Explain a typed optimization result without changing runtime state.