Install. Select the admitted lane. Find the exact command.

Install, verify, then invoke the right surface

Motion v0.2.65 ships as source. Build in the checkout, run doctor before work, and use the workspace CLI prefix there. Dotted motion.* names are Debug API / MCP ids, not shell commands.

1. Build: pnpm install, then pnpm build.
2. Verify: pnpm --filter @shellx-motion/cli run cli -- doctor.
3. From this checkout, invoke CLI commands through pnpm --filter @shellx-motion/cli run cli -- <command>.

NoteThe short shellx-motion <command> form belongs to a separately installed CLI package, not this workspace.

Author a package and keep timeline ownership explicit

Use typed layer, keyframe, curve, caption, transition and timeline commands to make a copy-on-write revision. Groups are bounded local timelines: ownership is acyclic, nesting is at most four levels, and a group has 1–256 direct children.

1. Inspect the current package before an edit; select the typed timeline operation rather than changing a renderer-private file.
2. Read the resulting revision receipt before treating a package change as complete.

NoteStructural edits refuse ambiguous ownership, cycles, opaque external references, and operations that would flatten local time.

Choose the frame lane from the composition, not a preference

Browser is the rich HTML/CSS and typography lane. Native is a narrow deterministic frame lane. GPU is a strict hardware-WebGPU lane: choose it with preview --lane gpu for a PNG preview or render --lane ffmpeg --frame-lane gpu for admitted final video.

1. Preview accepts --lane native|browser|gpu.
2. For render, --lane native writes one native PNG still; --lane ffmpeg delivers media with --frame-lane browser|native|gpu.
3. Treat GPU admission as capability-dependent: it needs a trusted browser, hardware adapter, bounded resources, and supported scene features.

NoteGPU never substitutes browser or CPU pixels. Unsupported content, software/missing adapters, device loss, timeout, cancellation, and resource limits are typed refusals.

Apply typed template values or expand declared data rows

Use the template plan and its declared controls before applying values. Package-local data/ rows can expand into one concrete package and one render per row, with batch evidence.

1. Read motion.template.plan or motion.template.controls before motion.template.apply.
2. Use motion.render.batch for the admitted row expansion route; inspect the render.batch receipt rather than assuming every row rendered.

NoteUnknown, invalid, or unbound declared row values refuse before package copy or render. Media is copied into package-local assets and hash-bound in the receipt.

Treat rich capability families as bounded contracts

Tracking, keying, roto, compositing graphs, particles, points, fixed 3D and procedural bindings are typed feature families with explicit shape, resource, and renderer limits. Capability matching decides whether a revision reaches a lane.

1. Read the generated command arguments and the capability result before scheduling final output.
2. Use doctor or platform requirements to learn the current host readiness; source documentation is not a hardware receipt.

NoteA route that is outside the admitted subset refuses before launch or allocation; Motion does not drop points, turn off an effect, or silently widen a limit to make a render appear successful.

Import and interchange inside the admitted file envelope

Host interchange and archives are bounded inputs, not arbitrary local files. The shared envelope caps host interchange at 16 MiB per file, 256 files, 16 path components, and 64 MiB aggregate; each route then applies its own structural budget.

1. Use the generated import, archive, or connector command record to see its exact arguments and required tier.
2. OTIO, Lottie/dotLottie, HTML/CSS, Canvas and scripted-video all enforce additional parser, object, layer, duration and diagnostic caps before lowering.
3. P2B Script-to-Cut applies a 1 MiB pre-parse file limit and retains only closed plain JSON data; template variables have fixed size/depth/node limits and accessors are refused without being invoked.
4. Read the returned receipt or lowering diagnostics after a successful conversion or handoff.

NoteOversized, unsafe, symlinked, structurally over-limit or out-of-envelope inputs refuse before package publication. A successful import is not a claim that its content is lossless or renderer-supported.

Read live jobs and durable receipts as different evidence

motion.job.* reports a submitted request while it is pending, running, or ended. A receipt attests one operation. A warned receipt still maps to a succeeded job; a file path alone never proves success.

1. For live submitted work, query motion.job.get, .list, or .events as the owning caller.
2. For CLI-owned durable jobs, use the same stable --caller-id; direct hosts configure caller identity and MCP/WebSocket connections use a server-minted principal.
3. For delivered output, verify the receipt identity, input hashes, output hash, renderer, encoder, and warnings.

Notemotion.render.status and .queue are Linux-only receipt-derived finished-work views, not live process controls. Their status, cancel and retry paths are caller-principal-scoped. Never describe their annotations as stopping or restarting a running producer.

Hand work to Cut or Design Studio through the negotiated mode

Design Studio is the precision authoring host; Cut is the editorial and linked-media host. A Cut request may choose rendered media, editable lowering, or live overlay only through the connector contract.

1. Inspect motion.connector.catalog before selecting a connector workflow.
2. P2B Script-to-Cut is Linux-only, no-clobber Browser-to-FFmpeg H.264 rendered_media: it returns a package, preview, media artifact handle, receipts and Cut plan, but never mutates Cut.
3. Use rendered media when receiver-exact editable lowering is not admitted; verify the artifact handle and connector receipts before host application.

NoteP2B accepts only bounded closed data and its rendered_media mode; an explicit editable request that cannot be receiver-exact fails with per-layer reasons instead of producing an approximation. A connector plan is not proof that Cut applied anything.

What ShellX Motion is

A local-first motion-graphics and video rendering engine built to be driven by an AI agent. Every capability is a typed, discoverable command with a declared permission tier and explicit receipt behavior. Rendering and file operations are local; agent-assisted authoring can send prompts and permitted context to the external provider CLI you configure, under that provider's terms.

1. Motion runs on your hardware. Footage and brand assets stay in host-approved local roots unless you explicitly supply them to an external tool or network-enabled package surface.
2. The same typed contracts serve the CLI, the local Workbench, connected agents, ShellX Cut and Design Studio.
3. A Motion project is a package: a folder holding motion.json, manifest.json, assets/, data/ and receipts/.

NoteMotion provides no hosted render service. Its server binds loopback only and remote publishing is not enabled.

It ships as a source release

You get the repository tree, build it, and run it from there. There is no npm install step and no prebuilt binary for this source release.

1. Clone or download the repository.
2. Run pnpm install at the repository root.
3. Run pnpm build.

Notepnpm install must run esbuild's postinstall script. The repository declares that in pnpm-workspace.yaml; an ERR_PNPM_IGNORED_BUILDS error means your pnpm is not reading the declaration.

Start Motion (the normal entry point)

pnpm start creates one private per-user access key, starts Motion with local create/edit/render access, publishes the live loopback port for agent bridges, and opens an already-unlocked Workbench in your browser.

1. Run pnpm start from the repository root.
2. The Workbench opens already authenticated; the first tab receives the key through a one-use launch exchange.
3. Open the Workbench Connections page to add Motion to an agent, or to copy the MCP command for another client.

NoteStart Motion grants write_local and does not enable remote publishing.

The two CLI invocation forms

Which form is correct depends only on where you are. In this source checkout every command takes the pnpm --filter @shellx-motion/cli run cli -- prefix. From an installed build of the packed @shellx-motion/cli package the same command is shellx-motion <command>.

1. Source checkout: pnpm --filter @shellx-motion/cli run cli -- doctor
2. Installed build: shellx-motion doctor
3. Nothing puts shellx-motion on your PATH inside the workspace, and running packages/cli/dist/main.js directly fails as well.

NoteThere is no motion binary in either form. Dotted names such as motion.render.final are Debug API / MCP command ids, not shell commands.

Verify the install

Two commands prove the toolchain is sound: doctor prints per-operation readiness, and validate on the bundled fixture should answer "ok": true.

1. pnpm --filter @shellx-motion/cli run cli -- doctor
2. pnpm --filter @shellx-motion/cli run cli -- validate fixtures/packages/lower-third
3. A true answer from validate means the engine can read a package.

Notevalidate retains a package.validate receipt only with an explicit governed --receipts-root outside the package. Otherwise it returns identity, layer count, hosts and lanes in the JSON envelope only and creates no receipts/ directory.

Verify the installed (packed) form

pnpm run build:verify is the only check that exercises what an npm consumer would actually receive. It packs every package, installs the CLI tarball into a throwaway project, and runs shellx-motion there through both the npm and pnpm bin shims.

1. Run pnpm run build:verify from the repository root.
2. It covers publishConfig exports, the bin shebang, the files allowlist and workspace:* version rewriting.

NoteThis cannot be exercised from inside the workspace, because the workspace exports deliberately point at TypeScript source.

Discover before you mutate

Action discovery answers "what can I do about this?" with a callable plan, so an agent never has to guess a command or a mutation sequence.

1. actions find "add a cinematic snow environment" returns a matching action id.
2. actions guide motion.timeline.layer.rich.set returns the workflow for one action.
3. actions plan "change snow intensity and preview it" returns each planned step with its arguments, required set and allowed values.

Node.js >=24.0.0

The engine declares engines.node = >=24.0.0 and CI runs Node 24. The README records the tested runtimes as 24.14 on Linux and 24.15 on Windows.

pnpm >=10.6.0

The engine declares engines.pnpm = >=10.6.0. Below 10.6 the workspace build-script declaration is not read, so esbuild's postinstall is skipped and the TypeScript runner has no platform binary.

Notepnpm 11.x is compatible.

The reproducible pnpm identity is pnpm 10.33.0

packageManager names the pnpm 10.33.0 identity that the lockfile and every green gate were actually produced with, as opposed to what engines.pnpm merely permits. CI does not repeat the number — pnpm/action-setup reads this field.

Notepnpm-lock.yaml is lockfileVersion 9.0. Use pnpm install --frozen-lockfile to resolve the same tree.

FFmpeg — required for video render

FFmpeg encodes final media: MP4, WebM, GIF, stills and image sequences. It does not ship with Motion. The README records testing on 6.1.1 and 8.1.2.

1. Motion resolves ffmpeg from PATH by default.
2. Point at an explicit executable with the SHELLX_MOTION_FFMPEG environment variable.
3. Validation, inspection and still previews work without it.

NoteMotion invokes FFmpeg with shell:false through argument arrays and validates input/output roots and preset extensions.

FFprobe — required for quality-check

FFprobe reads encoded media back for quality checks and media evidence. Encoding works without it; quality-check does not.

1. Motion resolves ffprobe from PATH by default.
2. Point at an explicit executable with the SHELLX_MOTION_FFPROBE environment variable.

Chrome or Chromium — the default frame lane

render rasterizes frames in a real browser by default (render --frame-lane browser), and preview --lane browser does the same. Any current Chrome or Chromium build works; npx playwright-core install chromium gets one.

1. Motion resolves a browser from PATH by default.
2. Pin an explicit binary with the SHELLX_MOTION_BROWSER environment variable.
3. preview defaults to --lane native and needs no browser.

Noteplaywright-core ships no browser of its own. An explicit SHELLX_MOTION_BROWSER pin that names a missing path fails closed rather than silently falling back.

Rendering without a browser: the native frame lane

render --frame-lane native encodes from natively drawn frames instead of browser frames. The lane is narrow on purpose: it has no font rasterizer, so it refuses to deliver any package whose text is lowercase or names a font family.

NoteSuited to text-free packages, not a general substitute for the browser lane.

doctor reports what this machine can actually do

One call answers it: motion.platform.requirements, or doctor on the CLI. It reports per-tool readiness and distinguishes "cannot do this at all" from "cannot do it the default way, and here is the flag".

1. Read satisfied as "runs the way you are about to invoke it".
2. Read possible as "runs at all".
3. When the two differ, alternative names the flag that would work.

NoteThe Workbench About page, the render dialog, the CLI and any MCP client all read the same answer — this is the readiness-parity invariant.

Ports, loopback and the access key

The debug, SDK and MCP server binds 127.0.0.1 only; direct non-loopback binding is disabled. Everything except GET /health and the static Workbench shell requires a capability token.

1. HTTP callers send Authorization: Bearer <token>; WebSocket callers use the authenticated subprotocol.
2. Start Motion creates one private per-user key, reuses it across restarts, and stores it outside project directories with user-only permissions.
3. An advanced direct launch stores an ephemeral key file instead, or reads SHELLX_MOTION_DEBUG_TOKEN.
4. The startup manifest prints url, workbenchUrl, the granted tier, the transports and auth.tokenFile.

NoteNever place the key in project files, shell history, logs or URLs. The server also rejects forged Host and unapproved Origin values and bounds request and WebSocket size and concurrency.

Transports an agent can use

The same command contracts are reachable over four transports plus the CLI.

1. POST /debug — native {command, args, requestedTier?} dispatch.
2. POST /rpc — JSON-RPC discovery and MCP tool dispatch.
3. WS /ws — authenticated persistent JSON-RPC.
4. POST /sdk — typed local SDK operation dispatch for trusted hosts.
5. GET /debug/contracts — the authenticated command/domain/tier/mutation registry.

NoteMCP supports two protocol eras: modern 2026-07-28 clients call server/discover without initialize; legacy 2025-06-18 clients keep initialize/list/call. Both enforce the same server grant.

Native file pickers per platform

The Workbench Browse buttons open the operating system's own chooser through the server, because a browser page cannot hand a real filesystem path to a local engine.

1. Windows and macOS use the operating-system picker (macOS through osascript).
2. Linux uses zenity, and falls back to kdialog.
3. If neither is installed, Motion reports that no supported Linux file chooser is available.

NoteNative pickers need a desktop session. A headless server has no picker.

The per-job memory ceiling

A browser render reuses one Chromium session for the whole sequence, so peak resident memory grows with frame count, and effects.motionBlur.samples multiplies it. The governor resolves an adaptive per-job ceiling from host memory, current free memory and job concurrency; 6 GiB is only its fallback without host facts. It aborts a job that crosses the resolved ceiling with job_rss_limit_exceeded.

1. Run doctor or motion.platform.requirements to read the resolved ceiling for this host.
2. Measured: 450 frames at 1080p30 with two environment layers and 3-sample blur peaked at 5.07 GiB.
3. The ceiling is configurable through SHELLX_MOTION_MAX_JOB_RSS_BYTES.
4. Budget the piece before authoring it.

NoteThe CLI writes a structured JSON failure envelope to stdout (ok: false, error.code: job_rss_limit_exceeded) and exits non-zero.

The update channel

The standalone CLI checks the configured GitHub release channel at startup and every 30 minutes. The About page reads that cached result, Check now refreshes it, and MCP/JSON-RPC discovery reports the same checkedAt, latestVersion and updateAvailable fields to agents.

1. The check sends only the release-feed request: no project content, prompts, receipts, usage data or telemetry.
2. A host can disable or override the channel; a disabled channel returns an explicit "not configured" state.
3. A network or parse failure returns an honest error, never a fabricated "up to date".

NoteApplying an update reports the truthful install state. A source checkout is updated through git; there is no signed in-place binary channel yet, so the server will not download and run unverified release bytes.

Claiming a platform requires running the ladder on it

Motion publishes a reusable platform-verification ladder. A source build, or a result from another host, is not substitute evidence for a platform claim.

1. Run the required command list on every operating system and architecture the release will claim.
2. The runner records host identity, command plan, outcomes and artifact paths in one receipt.
3. pnpm run platform:verify drives it.

The six permission tiers, in order

read_motion < draft_motion < render_motion < edit_motion < write_local < push_remote. The tier the server is launched with is a ceiling: a request may ask for a lower or equal tier, never a higher one, and package data or prompts cannot elevate themselves.

NoteThe per-command tier is contract data, not prose. schemas/debug.json carries the permission of every command.

write_local ranks ABOVE edit_motion

The intuitive reading is the wrong one and it costs a session. edit_motion mutates a package that already exists. write_local creates files outside an existing package — so making a NEW package needs write_local.

1. motion.package.create needs write_local, together with every importer, exporter, connector and archive command.
2. Starting the server at --tier edit_motion and then calling motion.package.create is refused, correctly.
3. Start at --tier write_local if the agent has to create packages.

Anything above read_motion needs --trusted-local-tier

read_motion is the default for a direct server launch. Raising the grant is deliberate: the launch must also pass --trusted-local-tier, so a higher grant is never something a caller can drift into.

1. pnpm --filter @shellx-motion/debug-server run serve -- --tier render_motion --trusted-local-tier
2. The startup manifest prints the tier it actually granted.
3. pnpm start is the normal human path and grants write_local with this flag already applied.

push_remote is reserved and never automatic

It is the top tier and it exists so a future hosted or repository-handoff surface can refuse it explicitly without inventing a new gate. The server requires a separate --allow-push-remote opt-in on top of a push_remote grant.

1. Motion never infers permission for remote publish or hosted rendering.
2. Today a request that would push remote is refused by design.
3. No shipped command declares push_remote: all 300 carry a lower tier.

NoteMotion keeps all execution local.

Tier 1 of 6: read_motion

Read-only. The default grant for a direct server launch, and the only tier that needs no --trusted-local-tier. 75 of the 300 shipped Debug API commands declare read_motion as their required tier.

1. Example commands: motion.state, motion.open, motion.select, motion.highlight.

Tier 2 of 6: draft_motion

Draft-level agent work: queueing, cancelling and retrying prompt jobs. 6 of the 300 shipped Debug API commands declare draft_motion as their required tier.

1. Example commands: motion.prompt.cancel, motion.prompt.retry, motion.prompt.run, motion.timeline.playhead.set.

Tier 3 of 6: render_motion

Producing evidence: preview frames, final media, quality checks and batch renders. 17 of the 300 shipped Debug API commands declare render_motion as their required tier.

1. Example commands: motion.preview.frame, motion.preview.playhead, motion.preview.strip, motion.render.final.

Tier 4 of 6: edit_motion

Mutating a package that already exists — layers, keyframes, curves, tracks, captions. 155 of the 300 shipped Debug API commands declare edit_motion as their required tier.

1. Example commands: motion.package.asset.import, motion.audio.master.set, motion.audio.crossfade.set, motion.analysis.tracking.apply.

Tier 5 of 6: write_local

Creating files outside an existing package: motion.package.create, every importer, exporter, connector and archive command. 47 of the 300 shipped Debug API commands declare write_local as their required tier.

1. Example commands: motion.package.create, motion.agent.revision.plan, motion.script.compile, motion.package.script.author.

Tier 6 of 6: push_remote

Reserved. Requires a separate --allow-push-remote opt-in and is never inferred. 0 of the 300 shipped Debug API commands declare push_remote as their required tier.

Engine Room: five pages, one engine

Motion is not headless. Its debug server serves a local browser UI over the same Debug API contracts the agents use — Inspector, History, Connections, Docs and About — reached from one persistent navigation strip.

1. /workbench — Inspector: open a package, scrub it, preview a frame, render final media.
2. /workbench/history — receipts history.
3. /workbench/connections — add Motion to an agent, or copy the local addresses and key.
4. /workbench/docs — the shipped documentation set, read in place.
5. /workbench/about — engine identity, external-tool readiness and update status.

NoteThe Workbench does not maintain a second project model. There is no template gallery page: the 12 template families are reference material for agents and hosts through the CLI, SDK and MCP.

Connect and the local access key

Start Motion authenticates the first tab automatically. Any other tab, or a manual Debug API session, connects by pasting the same local access key into the Connect dialog.

1. Click Connect to open the dialog.
2. Paste the local access key (minimum 32 characters).
3. The key is kept in that browser tab's sessionStorage and nowhere else.

NoteThe same private key protects the Workbench, MCP and the Debug API. A rejected key reports an error in the dialog rather than failing silently.

Session state and granted tier

The header shows the live connection state, and every page except Inspector also shows a tier chip naming the access the server granted this session.

NoteThe tier shown is the server's ceiling, not a request. It cannot be raised from the page.

Document identity

The header names the open package and its canvas and frame rate, so a render is never started against a package you thought you had closed.

Choosing a package with Browse

The Motion package field takes a real filesystem path. Browse opens the operating system's native folder chooser through the server rather than a browser upload dialog.

1. Click Browse and pick the package root folder.
2. Motion loads the package, lists it, and renders a first preview frame.
3. Refresh package state re-reads it from disk.

NoteBrowse needs a desktop session. On Linux it needs zenity or kdialog.

The package list

Every package the Workbench has loaded appears in the rail with its layer count and duration. Clicking a row reloads that package.

The preview stage

Preview frames render on this machine and are served back through the authenticated artifact route. The stage switches between a black and a neutral background so alpha and light work can be judged honestly.

1. Use Black or Neutral to change the stage background.
2. Refresh frame re-renders the current playhead position.
3. The frame size is shown next to the background switch.

NoteThe default preview lane is native. A browser-lane preview needs Chromium.

Transport and playhead

Play, the timecode readout and the scrubber move the playhead. Moving it re-renders the preview at the new timestamp.

1. Play or pause with the transport button.
2. Drag the scrubber to a timestamp; the preview refreshes when it settles.
3. The right-hand timecode is the package duration.

The timeline

Layer timing is drawn as rows with a ruler and a playhead. Clicking a layer label or clip selects that layer and fills the Inspector panel.

1. Click a label or a clip to select the layer.
2. Zoom in and out with the timeline zoom control.
3. The toolbar summarises layer count and duration.

Inspector, Queue and Receipts tabs

The right rail carries three panels: Inspector for the current selection, Queue for receipt-backed render jobs, and Receipts for the receipts under a chosen location.

1. Inspector shows the selection's package id, motion id, canvas, duration, frame rate, layer, scene and safe-area counts.
2. Queue lists receipt-backed render jobs and refreshes on demand.
3. Receipts takes a receipt location through Browse and summarises what it found.

NoteQueue is derived from receipt files on disk. It does not see work in flight — use motion.job.get for that.

Diagnostics

The Inspector panel ends with diagnostics from the last operation — for example a note that the browser renderer used a font fallback for a text layer.

NoteA diagnostic is evidence, not decoration. A font fallback changes the delivered pixels.

The render dialog

Render… opens a dialog that collects the output path, the export preset, an optional quality manifest and the motion gate, then reports readiness BEFORE submitting rather than an FFmpeg error afterwards.

1. Choose the output destination with Browse; the extension follows the preset.
2. Pick a preset: MP4 H.264, WebM VP9, animated GIF or a PNG still frame.
3. Optionally attach a quality manifest and require frame-to-frame motion.
4. Start render. Closing the progress view does not cancel it — the render continues in the background under the shown job id.

NoteThe readiness line is filled from motion.platform.requirements — the same answer doctor gives.

The status bar

The status bar is the honest running commentary: what the engine last did, and the standing reminder that project content stays on this machine.

Receipts history

History reads durable receipts that commands persisted to a chosen receipt root. It is the regression trail for that retained evidence: what ran, when, who or what triggered it, whether the quality gates passed, and where the output artifacts landed on disk.

NoteReceipts are not cryptographically signed — the hashes prove an artifact still matches what the operation recorded, not who wrote the file.

Choosing a receipt location

History reads a receipt root from disk. Browse picks it with the native chooser; Load receipts reads it.

1. Browse to the receipts root (the default is .scratch/receipts).
2. Click Load receipts.
3. The status bar reports how many receipts were loaded.

NoteHistory is read-only.

Filtering the receipt timeline

Filter by package, by operation, and by result — passed, warning, failed or not run — with a live shown-of-total count.

Reading a receipt card

A card names the operation, the package, the actor that triggered it, the renderer and encoder actually used, and the output artifact with its dimensions and duration.

1. Check the actor badge: it distinguishes a human, a local integration and an agent.
2. Check the renderer and encoder chips against what you asked for — a software fallback is recorded, not hidden.
3. Open the containing folder from the output row.
4. Details opens the full receipt, with a raw JSON toggle.

NotePassed with warnings is not a pass. Inspect the named gate before treating the artifact as approved.

Adding Motion to an agent

Choose the agent you use and click Configure; Motion adds itself. The setup command stays visible so you can review or copy it instead.

1. supported local agent, supported local agent Code and supported local agent have one-click Configure buttons.
2. Any other MCP client copies the local stdio command.
3. Open a new agent session after configuring.

NoteMotion must be running while the agent uses its tools. Agent setup uses Motion's local bridge, so the key is not written into agent configuration.

MCP and Debug API addresses

The connection details panel shows the live loopback MCP address, the Debug API address, and the single local access key, each with a copy button.

1. Copy the MCP address for a client that speaks JSON-RPC over HTTP.
2. Copy the Debug API address for direct POST /debug calls.
3. Reveal shows the access key; Copy puts it on the clipboard.

NoteThe same private key protects the Workbench, MCP and the Debug API. Treat it like any other local secret — theft by another local process would grant that process Motion's filesystem and render authority.

The Docs page

Motion serves its own shipped documentation set from the running engine, so the pages you read always match the build you are running.

1. Start here: Quickstart and Connect an agent.
2. Using ShellX Motion: Agent integration, Rendering lanes, Cut and Design Studio, Host integration.
3. Trust and security: Receipts and trust, Security model, Binary asset provenance.

Engine identity

About states which Motion this is: the running version, the access the session was granted, that processing happens on this machine, and that results are receipt-backed.

External tool readiness

Identity alone answers "which Motion is this", never "can it encode". The readiness block reads motion.platform.requirements and reports FFmpeg, FFprobe and Chromium, so a missing tool is visible before a render fails instead of after.

NoteThe block always renders. An absent block would read as a healthy machine.

Software update

About reads the shared cached update status — the same result startup checks, periodic checks and connected agents see. Check now refreshes it immediately.

1. The badge states whether an update is available.
2. View release notes opens the release page.
3. Update options reports the truthful install state for this installation.

NoteMotion checks the official release channel at startup and every 30 minutes. No project content or telemetry is sent.

Most of a package is data and cannot run

Shapes, text, keyframes, environments, particles and fixed 3D scenes declare what to draw. They cannot execute arbitrary source code, fetch remote assets implicitly, or raise host resource limits.

1. Shaders are a validated GLSL-ES subset with no loops, branches, helper functions, samplers or network access.
2. 3D scenes are Motion-owned primitives with bounded counts.
3. Environments run fixed, package-code-free host shaders.

NoteA construct the contract does not allow is refused. That is never a reason to hand-inject code or URLs into package JSON.

web, html and canvas layers DO execute JavaScript

This is the one deliberate exception, and it is the part worth knowing before you render something a stranger gave you. A web, html or canvas layer names an HTML file inside the package, and Motion loads it into Chromium WITH JAVASCRIPT ENABLED. Rendering such a package runs that script.

1. The execution is fenced: network denied by default, service workers blocked, secondary pages refused, file reads confined to the package root.
2. The fence bounds what the code can reach, not whether it runs.
3. Treat a package from a source you do not trust as a script from that source.

NoteEarlier Motion documentation said a package "cannot execute arbitrary code" without this qualification. That was wrong for this layer family and is corrected here.

The importer strips scripts; the render path does not

Foreign HTML brought in through motion.html.snippet.import is stripped of <script> and reported as lossy, so the import path is the safe one for markup you did not write.

1. The bounded importer reads declared layer metadata and a small inline CSS subset without executing scripts, handlers or stylesheets.
2. Image and video src values must be supported package-relative paths beside the source HTML.
3. Imported assets are copied into the new package, hashed in the receipt, bounded by per-file and total limits, and checked against traversal, symlink escape and executable or external SVG syntax.

NoteAgent-authored scripts inside a package are allowed. External script import is not enabled.

Imports and adapters have fixed refusal budgets

The shared host-interchange envelope allows at most 16 MiB per file, 256 files, 16 relative path components and 64 MiB in aggregate. Each importer applies a second structural budget before it parses or publishes a package.

1. OTIO is bounded before parsing and lowering; Lottie JSON is limited to 16 MiB and dotLottie ZIPs to 32 MiB compressed / 64 MiB expanded.
2. HTML/CSS lowering accepts at most 8 MiB of markup; Canvas selection accepts at most 128 frames and 4,096 total layers; scripted-video accepts at most 120 frames and 600,000 ms total duration.
3. P2B Script-to-Cut limits file-backed JSON to 1 MiB before parsing. Retained scripted-video strings are capped at 16 KiB, and template.variables is copied as plain JSON data only: 64 KiB, eight levels, 64 entries per array/object and 512 values; accessors are refused without invocation.
4. Read the generated command record and lowering diagnostics for the exact route. Inputs over any cap refuse before package publication rather than being partly lowered.

NoteThese are fixed admission limits, not agent-configurable capacity knobs, and a successful import does not claim lossless or renderer-supported content.

Caller and executable identity are bound by the host

A batch resume can reopen retained output only with exclusive retained-output authority and the same authenticated caller recorded in its prior receipt. Generic connector references remain opaque until a trusted resolver receives that host-authenticated caller principal for the exact resolution.

1. A missing or unverifiable batch owner fails with capability_unavailable; another caller receives job_not_visible; either refusal leaves the retained output unchanged.
2. The immutable connector binding retains its owner, so an explicit retry reuses that owner rather than a caller-nominated substitute.
3. Receipt-derived render status, queue, cancel and retry apply the same owner boundary. New receipts retain their logical owner; legacy ownerless receipts fail closed unless an operator host explicitly grants cross-caller scope.
4. On Windows, agent execution resolves a canonical regular .exe, .com, .cmd, .bat or .ps1 target from an absolute target or PATH entry and revalidates it immediately before launch.

NoteFor connector and batch protocol calls, caller identity is trusted host context, never a request field that the caller can nominate. An actor label is attribution, never an owner principal; Cut explicitly configures its workspace identity.

Two native parsers consume untrusted bytes

Chromium and FFmpeg run with your OS privileges and parse whatever a package contains. Motion bounds them rather than pretending they are inert.

1. Chromium runs in a bounded render session with service workers, WebSockets, WebRTC, external files and undeclared origins blocked; package-local file URLs and data/blob URLs are allowed.
2. FFmpeg and FFprobe are invoked with shell:false through argument arrays, with validated input/output roots and preset extensions and bounded diagnostic output.
3. Render and agent subprocesses are contained in process groups (Unix) or Job Objects (Windows), so a deadline or cancellation terminates the whole tree.

NoteWhere Motion cannot prove kernel-level sandbox enforcement, its receipts say so (status: requested) rather than claiming a guarantee it has not verified.

Network access is denied by default

Motion does not reach the network as a side effect of rendering. A package's allowedOrigins entries are requests, not authority — the host must separately approve an exact origin.

1. When network access is deliberately used, every hostname is resolved first and private or reserved addresses are rejected.
2. One public address is pinned into the connection, redirects are revalidated and HTTPS downgrade is refused.
3. Response bytes, content types, time and concurrency are bounded.

Receipt persistence depends on the command

Receipts attest rendered, previewed, imported, exported, package-producing and batch work, but each command owns where—or whether—it persists one. validate stays package-read-only and is envelope-only unless an explicit governed receipt root is supplied.

1. Read the command's destination contract before looking for a receipt file.
2. To retain package.validate, pass --receipts-root <host-store> outside the package; without it, inspect the envelope.
3. When an output-producing command does persist a receipt, match its package, inputs, output hash and named gates before delivery.

NoteA receipt is not cryptographically signed. Its hashes prove an attested artifact still matches what that operation recorded, not who wrote the file.

Reporting something this model says cannot happen

If you find behaviour the security model says is impossible, that is a vulnerability report. SECURITY.md at the repository root states how to send it privately, what is in scope, and what to expect back.

NoteSame-user malware with arbitrary file read or process inspection is treated as an OS-account compromise, which is outside what Motion can defend.

Start here references

4 items from the released documentation index.

• Quickstart quickstart.md
• Capabilities FEATURES.md
• Connect an agent connections.md
• Validate a Motion document MOTION_VALIDATION.md

NoteThe command schema remains the authority for callable arguments and permissions.

Authoring and rendering references

12 items from the released documentation index.

• Rendering lanes rendering.md
• Shape geometry shape-geometry.md
• Groups and local timelines groups-and-local-timelines.md
• Path reveals path-reveals.md
• Particles and point trails trails.md
• Cutout-rigging cutout-rigging.md
• Transition presets transition-presets.md
• Template design matrix TEMPLATE_DESIGN_MATRIX.md
• Template quality bar TEMPLATE_QUALITY_BAR.md
• Agent template reference agent templates.md
• Rendering samples agent RENDERING_SAMPLES.md
• Agent-authored procedural scripts agent agent-authored-scripts.md

NoteThe command schema remains the authority for callable arguments and permissions.

Integration references

8 items from the released documentation index.

• Agent integration agent-integration.md
• Debug API DEBUG_API.md
• Debug API command reference DEBUG_API_COMMANDS.md
• Job status JOB_STATUS.md
• Host integration host-integration.md
• Cut job integration cut-job-integration-spec.md
• Cut and Design Studio cut-and-design-studio.md
• Interchange and archive limits interchange-limits.md

NoteThe command schema remains the authority for callable arguments and permissions.

Trust and security references

5 items from the released documentation index.

• Receipts and trust receipts-and-trust.md
• Platform verification PLATFORM_VERIFICATION.md
• Security model security-model.md
• Binary asset provenance BINARY_ASSETS.md
• Software bill of materials SBOM.md

NoteThe command schema remains the authority for callable arguments and permissions.

The contract, counted

Motion 0.2.65 ships 300 typed Debug API commands across 7 domains. 174 of them are also discoverable actions in schemas/actions.json, each with natural-language aliases; the remaining 126 are callable but carry no action entry. 224 commands are classified as mutations.

1. GET /debug/contracts returns the same registry at runtime.
2. motion.actions.find, .guide and .plan return the callable plan for a described intent.
3. If prose and a schema differ, the schema wins — repair the drift before mutating.

NoteA command that renders or writes a derived artifact is classified as a mutation even when the source package itself is unchanged.

motion.audio.master.set

Tier edit_motion. Mutates. Discoverable as an action on the timeline, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 6

Discovery phrases: set document audio master, set final mix loudness target, set master gain and fade, clear document audio master, verify final program loudness

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. The edit receipt records the prior and persisted bounded master. A final-video receipt records the exact master controls, single-pass loudnorm realization when requested, and delivered-program loudness readback; a target miss writes a failed nonconforming-artifact receipt, never a successful delivery. Absent resolved audio is refused.

motion.audio.crossfade.set

Tier edit_motion. Mutates. Discoverable as an action on the timeline, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 8

Discovery phrases: crossfade two audio clips, equal power crossfade, match outgoing and incoming audio fades, set layer audio crossfade

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. The receipt records both layer ids, duration, curve, and changed paths. The command refuses non-overlapping, locked, or non-audio layer pairs and never shifts layer timing.

motion.timeline.panel

Tier read_motion. Read-only. Discoverable as an action on the timeline, prompt surfaces.

• tier read_motion
• domain timeline
• mutates no
• arguments 1

Discovery phrases: show timeline panel, timeline panel, open timeline panel, show scene layer timeline, show scene and layer timeline, show timeline layers

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline panel returns playhead controls, scene and layer rows, markers, tracks, and suggested actions.

motion.timeline.inspect

Tier read_motion. Read-only. Discoverable as an action on the timeline, prompt surfaces.

• tier read_motion
• domain timeline
• mutates no
• arguments 1

Discovery phrases: inspect scenes tracks and timeline markers, inspect timeline, show timeline tracks, show timeline markers, list scenes and tracks, timeline metadata

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline inspect result includes scenes, tracks, markers, and layer track refs.

motion.timeline.playhead.set

Tier draft_motion. Mutates. Discoverable as an action on the timeline, receipts, prompt surfaces.

• tier draft_motion
• domain timeline
• mutates yes
• arguments 4

Discovery phrases: set timeline playhead to 2 seconds, set timeline playhead, move timeline playhead, scrub timeline playhead, jump playhead, set playhead, move playhead, scrub to timestamp

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline playhead receipt includes old/new playhead, state path, duration guard, and host receipt evidence.

motion.timeline.range.select

Tier draft_motion. Mutates. Discoverable as an action on the timeline, receipts, prompt surfaces.

• tier draft_motion
• domain timeline
• mutates yes
• arguments 4

Discovery phrases: select timeline range, set timeline range selection, select range on timeline, mark timeline range, set in and out points, select in out range, choose timeline segment

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline range receipt includes selected start/end, previous range, state path, and duration guard.

motion.timeline.viewport.set

Tier draft_motion. Mutates. Discoverable as an action on the timeline, receipts, prompt surfaces.

• tier draft_motion
• domain timeline
• mutates yes
• arguments 6

Discovery phrases: zoom timeline viewport, set timeline viewport, change timeline zoom, zoom timeline, pan timeline viewport, fit timeline range, set timeline pixels per second

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline viewport receipt includes start/end, zoom, pixels-per-second, previous viewport, and state path.

motion.timeline.duration.policy

Tier read_motion. Read-only. Discoverable as an action on the timeline, prompt surfaces.

• tier read_motion
• domain timeline
• mutates no
• arguments 1

Discovery phrases: show protected intro outro regions, show duration policy, inspect duration policy, read duration policy, show protected regions, list protected timeline regions, show intro outro locks, inspect protected duration regions

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Duration policy read returns min/max duration, resize mode, protected regions, and package duration.

motion.timeline.duration.policy.set

Tier edit_motion. Mutates. Discoverable as an action on the timeline, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 5

Discovery phrases: set protected intro outro duration policy, set duration policy, edit duration policy, set protected regions, protect intro outro regions, protect intro and outro, lock intro and outro duration, set timeline protected duration regions, set intro outro locks

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Duration policy receipt includes protected regions, min/max duration, resize mode, changed path, and validation result.

motion.timeline.scene.create

Tier edit_motion. Mutates. Discoverable as an action on the timeline, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 15

Discovery phrases: add storyboard scene, add timeline scene, add scene, create timeline scene, create scene, insert storyboard scene, insert timeline scene, new storyboard section, new scene, add outro scene

3 further optional arguments: receiptsRoot, trackId, trackIds. The complete contract, including descriptions and allowed values, is schemas/debug.json.

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline scene create receipt includes scene id, timing, optional layer/track/marker refs, changed paths, scene counts, duration evidence, and validation result.

motion.timeline.scene.delete

Tier edit_motion. Mutates. Discoverable as an action on the timeline, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 5

Discovery phrases: delete storyboard scene, delete timeline scene, delete scene, remove storyboard scene, remove timeline scene, remove scene, drop storyboard scene, drop timeline scene, clear storyboard section, remove outro scene

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline scene delete receipt includes scene id, removed scene, changed paths, scene counts, non-destructive duration evidence, and validation result.

motion.timeline.scene.reorder

Tier edit_motion. Mutates. Discoverable as an action on the timeline, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 6

Discovery phrases: reorder storyboard scene, reorder timeline scene, reorder scene, move storyboard scene, move timeline scene, move scene row, move scene in storyboard, move outro scene before intro, send scene to top, move scene order

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline scene reorder receipt includes scene id, old/new index, old/new scene order, changed paths, non-destructive duration evidence, and validation result.

motion.timeline.scene.resize

Tier edit_motion. Mutates. Discoverable as an action on the timeline, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 7

Discovery phrases: resize intro scene duration with ripple, resize scene duration, set scene duration, change scene duration, extend scene with ripple, shorten scene with ripple, ripple scene duration, retime scene

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline scene resize receipt includes scene id, old/new duration, ripple flag, shifted scenes/layers/markers, changed paths, and validation result.

motion.timeline.scene.name.set

Tier edit_motion. Mutates. Discoverable as an action on the timeline, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 6

Discovery phrases: rename selected scene, rename scene, rename timeline scene, set scene name, set selected scene name, change scene name, change selected scene name, edit scene name, label selected scene, set scene display name

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline scene name receipt includes scene id, old/new display name, changed paths, action, and validation result.

motion.timeline.marker.upsert

Tier edit_motion. Mutates. Discoverable as an action on the timeline, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 11

Discovery phrases: add timeline marker at playhead, add timeline marker, set timeline marker, update timeline marker, change timeline marker, edit timeline marker, move timeline marker, modify timeline marker, add marker, set marker, update marker, change marker, edit marker, move marker, modify marker, update marker label, edit marker label, add beat marker, add cue marker, attach marker to scene

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline marker receipt includes marker id, timestamp, changed paths, scene ref updates, and validation result.

motion.timeline.marker.delete

Tier edit_motion. Mutates. Discoverable as an action on the timeline, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 5

Discovery phrases: delete timeline marker at playhead, delete timeline marker, remove timeline marker, delete marker, remove marker, clear marker, delete beat marker, delete cue marker

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline marker delete receipt includes marker id, removed marker, changed paths, removed scene refs, and validation result.

motion.timeline.keyframe.upsert

Tier edit_motion. Mutates. Discoverable as an action on the timeline, preview, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 9

Discovery phrases: add opacity keyframe with ease out, add timeline keyframe, set keyframe, update keyframe, change easing, add transform keyframe, keyframe opacity, keyframe position, animate title color keyframes, animate text color, keyframe fill color, keyframe style color, animate blur effect, keyframe visual effect, animate brightness, keyframe playback rate, animate mask crop keyframes, animate image crop keyframes, animate video crop keyframes, keyframe image crop, keyframe video crop, keyframe source crop, keyframe mask inset, animate crop reveal, keyframe clip mask, add spring keyframe, keyframe with spring easing, animate with spring physics

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline keyframe receipt includes layer id, target, timestamp, easing, changed path, target-specific value validation, and validation result.
2. Preview receipt includes output frame hash after the timeline edit.

Named value sets used here: easing, keyframeTarget. Every allowed-value list is enforced on the wire, not merely advertised.

motion.timeline.keyframe.delete

Tier edit_motion. Mutates. Discoverable as an action on the timeline, preview, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 7

Discovery phrases: delete opacity keyframe at playhead, delete timeline keyframe, remove keyframe, remove opacity keyframe, delete transform keyframe, clear keyframe

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline keyframe delete receipt includes layer id, target, timestamp, removed value, changed path, and validation result.
2. Preview receipt includes output frame hash after the timeline edit.

Named value sets used here: keyframeTarget. Every allowed-value list is enforced on the wire, not merely advertised.

motion.timeline.keyframe.range.delete

Tier edit_motion. Mutates. Discoverable as an action on the timeline, preview, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 8

Discovery phrases: delete selected keyframes, remove selected keyframes, delete keyframe range, remove keyframe range, clear selected keyframes, clear keyframe range, delete opacity keyframes

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline keyframe range delete receipt includes layer id, target, affected timestamp range, removed keyframes, changed paths, remaining count, and validation result.
2. Preview receipt includes output frame hash after the timeline edit.

Named value sets used here: keyframeTarget. Every allowed-value list is enforced on the wire, not merely advertised.

motion.timeline.keyframe.move

Tier edit_motion. Mutates. Discoverable as an action on the timeline, preview, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 8

Discovery phrases: move opacity keyframe, move timeline keyframe, move keyframe, retime keyframe, shift keyframe, nudge keyframe, change keyframe time, move transform keyframe

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline keyframe move receipt includes layer id, target, old/new timestamps, moved keyframe value/easing, changed paths, and validation result.
2. Preview receipt includes output frame hash after the timeline edit.

Named value sets used here: keyframeTarget. Every allowed-value list is enforced on the wire, not merely advertised.

motion.timeline.keyframe.easing.apply

Tier edit_motion. Mutates. Discoverable as an action on the timeline, preview, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 10

Discovery phrases: apply ease in out to selected keyframes, apply easing to selected keyframes, apply easing preset to keyframes, set selected keyframe easing, change selected keyframe easing, set keyframe easing range, apply cubic bezier to keyframes, apply spring easing to keyframes, make selected keyframes bouncy

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline keyframe easing apply receipt includes layer id, target, easing preset, affected timestamp range, changed paths, updated count, and validation result.
2. Preview receipt includes output frame hash after the timeline edit.

Named value sets used here: easing, keyframeTarget. Every allowed-value list is enforced on the wire, not merely advertised.

motion.timeline.keyframe.shift

Tier edit_motion. Mutates. Discoverable as an action on the timeline, preview, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 9

Discovery phrases: nudge selected keyframes, shift selected keyframes, shift keyframe range, move keyframe range, nudge keyframe range, slide keyframes, offset selected keyframes, shift opacity keyframes

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline keyframe shift receipt includes layer id, target, delta, affected timestamp range, shifted keyframes, changed paths, and validation result.
2. Preview receipt includes output frame hash after the timeline edit.

Named value sets used here: keyframeTarget. Every allowed-value list is enforced on the wire, not merely advertised.

motion.timeline.keyframe.scale

Tier edit_motion. Mutates. Discoverable as an action on the timeline, preview, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 10

Discovery phrases: stretch selected keyframes, scale selected keyframes, compress selected keyframes, stretch keyframe range, scale keyframe range, retime selected keyframes, change selected keyframe timing, spread keyframes around playhead

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline keyframe scale receipt includes layer id, target, scale factor, origin, affected timestamp range, scaled keyframes, changed paths, and validation result.
2. Preview receipt includes output frame hash after the timeline edit.

Named value sets used here: keyframeTarget. Every allowed-value list is enforced on the wire, not merely advertised.

motion.timeline.keyframe.duplicate

Tier edit_motion. Mutates. Discoverable as an action on the timeline, preview, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 9

Discovery phrases: duplicate selected keyframes, copy selected keyframes, duplicate keyframe range, copy keyframe range, repeat selected keyframes, repeat keyframe animation, paste keyframes later, copy opacity keyframes

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline keyframe duplicate receipt includes layer id, target, delta, affected timestamp range, duplicated keyframes, changed paths, and validation result.
2. Preview receipt includes output frame hash after the timeline edit.

Named value sets used here: keyframeTarget. Every allowed-value list is enforced on the wire, not merely advertised.

motion.timeline.keyframe.distribute

Tier edit_motion. Mutates. Discoverable as an action on the timeline, preview, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 8

Discovery phrases: distribute selected keyframes, distribute keyframes evenly, evenly space selected keyframes, space keyframes evenly, equalize keyframe spacing, distribute opacity keyframes

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline keyframe distribute receipt includes layer id, target, affected timestamp range, spacing, distributed keyframes, changed paths, and validation result.
2. Preview receipt includes output frame hash after the timeline edit.

Named value sets used here: keyframeTarget. Every allowed-value list is enforced on the wire, not merely advertised.

motion.timeline.keyframe.reverse

Tier edit_motion. Mutates. Discoverable as an action on the timeline, preview, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 8

Discovery phrases: reverse selected keyframes, reverse keyframe range, mirror selected keyframes, mirror keyframe range, flip keyframe timing, reverse opacity keyframes

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline keyframe reverse receipt includes layer id, target, affected timestamp range, reversed keyframes, changed paths, and validation result.
2. Preview receipt includes output frame hash after the timeline edit.

Named value sets used here: keyframeTarget. Every allowed-value list is enforced on the wire, not merely advertised.

motion.timeline.keyframe.snap

Tier edit_motion. Mutates. Discoverable as an action on the timeline, preview, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 10

Discovery phrases: snap selected keyframes to frames, snap keyframes to frame grid, align selected keyframes to frames, frame snap keyframes, snap opacity keyframes to frames, align keyframe timing to frame grid

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline keyframe snap receipt includes layer id, target, fps, snap mode, affected timestamp range, snapped keyframes, changed paths, and validation result.
2. Preview receipt includes output frame hash after the timeline edit.

Named value sets used here: keyframeSnapMode, keyframeTarget. Every allowed-value list is enforced on the wire, not merely advertised.

motion.timeline.spatial.position.upsert

Tier edit_motion. Mutates. No action entry — call it directly.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 10
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

Named value sets used here: easing. Every allowed-value list is enforced on the wire, not merely advertised.

motion.timeline.spatial.position.move

Tier edit_motion. Mutates. No action entry — call it directly.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 7
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.spatial.position.delete

Tier edit_motion. Mutates. No action entry — call it directly.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 6
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.revision.transaction.plan

Tier read_motion. Read-only. Discoverable as an action on the timeline surface.

• tier read_motion
• domain timeline
• mutates no
• arguments 3

Discovery phrases: plan atomic revision, preview atomic timeline revision, validate several timeline edits, plan transactional timeline revision

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Read-only plan binds the exact base, canonical normalized transaction hash, each typed step hash and changed path, predicted final authored-document hash, and compact passed validation without writing a receipt or package.

motion.revision.transaction

Tier edit_motion. Mutates. Discoverable as an action on the timeline, preview, receipts surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 5

Discovery phrases: apply atomic revision, apply multiple timeline edits atomically, one revision for several edits, transactional timeline revision

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. One aggregate revision.transaction receipt binds the exact base identity, source/final authored-document hashes, canonical transaction hash, every typed step hash and changed path, and validation result.

motion.timeline.keyframes.panel

Tier read_motion. Read-only. Discoverable as an action on the timeline, prompt surfaces.

• tier read_motion
• domain timeline
• mutates no
• arguments 4

Discovery phrases: show keyframe panel, keyframe panel, show keyframes panel, timeline keyframes panel, inspect keyframe panel, show animated keyframes, inspect timeline keyframes, show easing keyframes

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Keyframe panel returns animated layers, target ranges, easing usage, preset counts, and suggested keyframe actions.

Named value sets used here: keyframeTarget. Every allowed-value list is enforced on the wire, not merely advertised.

motion.timeline.transitions.panel

Tier read_motion. Read-only. Discoverable as an action on the timeline, prompt surfaces.

• tier read_motion
• domain timeline
• mutates no
• arguments 4

Discovery phrases: show timeline transition panel, timeline transition panel, show transition panel, transition panel, show transitions panel, timeline transitions panel, inspect transition panel, show enter exit transitions, inspect timeline transitions, show transition easing

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Transition panel returns layers with enter/exit transitions, timing windows, easing usage, type counts, and suggested transition actions.

motion.timeline.easing.panel

Tier read_motion. Read-only. Discoverable as an action on the timeline, prompt surfaces.

• tier read_motion
• domain timeline
• mutates no
• arguments 2

Discovery phrases: show easing panel, show timeline easing panel, show timeline easing curves, inspect easing curves, inspect animation curves, show keyframe easing usage, show transition easing usage, review easing usage

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Easing panel returns sampled curves, keyframe and transition usage, custom easing detection, and suggested animation actions.

motion.timeline.easing.presets

Tier read_motion. Read-only. Discoverable as an action on the timeline, prompt surfaces.

• tier read_motion
• domain timeline
• mutates no
• arguments 0

Discovery phrases: show easing presets, list easing presets, easing preset discovery, show animation easing presets, what easing presets are available, list spring easing presets, show spring presets

Takes no arguments.

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Easing preset response includes named and cubic-bezier presets usable by keyframes and transitions.
2. Easing preset response includes spring presets (spring-gentle, spring-snappy, spring-bouncy) resolving to damped-spring param sets.

motion.timeline.animation.presets

Tier read_motion. Read-only. Discoverable as an action on the timeline, prompt surfaces.

• tier read_motion
• domain timeline
• mutates no
• arguments 0

Discovery phrases: show animation presets, list animation presets, animation preset discovery, show motion animation presets, what animation presets are available, list entrance and exit animations

Takes no arguments.

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Animation preset response includes entrance and exit presets with target keyframe coverage.

motion.timeline.animation.preset.apply

Tier edit_motion. Mutates. Discoverable as an action on the timeline, preview, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 12

Discovery phrases: apply lower third entrance animation, apply lower third animation, apply animation preset, add entrance animation, add exit animation, animate layer in, animate layer out, animate title entrance, apply fade in preset, apply fade out preset, apply slide up entrance, apply lower third in, make the title slide in, make title slide in, slide the title in, slide title in, title entrance animation, give the title an entrance, give title an entrance, stagger title and subtitle entrance animation, staggered layer entrance animation, animate multiple layers in sequence, apply animation preset to multiple layers

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Animation preset apply receipt includes layer id or layer ids, preset id, timing or staggered per-layer timings, affected targets, changed paths, validation result, and preview evidence.
2. Preview receipt includes output frame hash after the timeline edit.

Named value sets used here: animationPreset, easing. Every allowed-value list is enforced on the wire, not merely advertised.

motion.timeline.transition.presets

Tier read_motion. Read-only. Discoverable as an action on the timeline, prompt surfaces.

• tier read_motion
• domain timeline
• mutates no
• arguments 0

Discovery phrases: show transition presets, list transition presets, transition library, reveal and card transition presets, what transitions are available

Takes no arguments.

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Transition preset response includes stable ids, compatible lanes, ShellX surfaces, default duration, and best-for guidance.

motion.timeline.transition.preset.apply

Tier edit_motion. Mutates. Discoverable as an action on the timeline, preview, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 10

Discovery phrases: apply transition preset, apply card stack transition, apply push zoom, apply scan sweep, apply split reveal, add polished transition

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Transition preset receipt includes the layer, preset id, resolved transitions, changed paths, validation result, and preview evidence.

Named value sets used here: easing, transitionDirection, transitionPreset. Every allowed-value list is enforced on the wire, not merely advertised.

motion.timeline.layer.create

Tier edit_motion. Mutates. Discoverable as an action on the timeline, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 23

Discovery phrases: add a text layer to the timeline, add text layer, create text layer, add shape layer, create shape layer, add environment layer, create environment layer, add points layer, create points layer, create a bounded point cloud, add a drone swarm layer, add a particle trail, add a point trail, add a spark trail, add a drone trail, add rain environment layer, create rain environment, add water environment layer, create water environment, add snow environment layer, create snow environment, add a cinematic snow environment, insert timeline layer, create timeline layer, new timeline layer, add layer

11 further optional arguments: layerId, receiptsRoot, shape, source, src, startMs, text, trackId, trackIndex, type, width. The complete contract, including descriptions and allowed values, is schemas/debug.json.

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline layer create receipt includes layer id, stack index, optional track ref, changed paths, inserted track refs, and validation result.

motion.timeline.layer.trim

Tier edit_motion. Mutates. Discoverable as an action on the timeline, preview, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 9

Discovery phrases: trim selected layer duration, trim layer, move layer timing, retime layer, set layer start and duration, change clip trim, adjust layer timing

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline layer trim receipt includes layer id, old timing, new timing, changed paths, and validation result.
2. Preview receipt includes output frame hash after the timeline edit.

motion.timeline.layer.split

Tier edit_motion. Mutates. Discoverable as an action on the timeline, preview, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 7

Discovery phrases: split clip at playhead, split selected layer at playhead, split timeline layer, split layer, cut layer at playhead, cut clip at playhead, razor clip, razor layer

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline layer split receipt includes original layer id, new layer id, split timestamp, segment timings, changed paths, track order updates, and validation result.
2. Preview receipt includes output frame hash after the timeline edit.

motion.timeline.layer.text.set

Tier edit_motion. Mutates. Discoverable as an action on the timeline, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 6

Discovery phrases: change title text, update title text, edit title text, set layer text, change layer text, edit text layer, update text layer, set timeline layer text

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline layer text receipt includes layer id, old/new text, changed paths, action, and validation result.

motion.timeline.layer.style.set

Tier edit_motion. Mutates. Discoverable as an action on the timeline, preview, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 7

Discovery phrases: make title blue, make the title blue, make the title blue and preview it, change title color, set title color, set layer color, change layer style, set layer style, set title font size, change font size, set layer font size

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline layer style receipt includes layer id, property, old/new values, changed paths, action, and validation result.

motion.timeline.layer.transform.set

Tier edit_motion. Mutates. Discoverable as an action on the timeline, preview, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 7

Discovery phrases: move layer, move title layer, set layer position, set layer x, set layer y, resize layer, set layer width, set layer height, scale layer, rotate layer, set layer opacity

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline layer transform receipt includes layer id, property, old/new values, changed paths, action, and validation result.

motion.timeline.layer.effect.set

Tier edit_motion. Mutates. Discoverable as an action on the timeline, preview, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 7

Discovery phrases: blur layer, blur title layer, soften layer, set layer blur, change layer effect, set layer effect, set layer brightness, adjust layer brightness, set layer contrast, adjust layer contrast, set layer saturate, desaturate layer, set layer grayscale

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline layer effect receipt includes layer id, property, old/new values, changed paths, action, and validation result.

motion.timeline.layer.rich.set

Tier edit_motion. Mutates. Discoverable as an action on the timeline, preview, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 7

Discovery phrases: set rich motion control, change rich motion control, set rich layer parameter, set environment intensity, change environment intensity, set rain intensity, change rain intensity, set snow intensity, change snow intensity, set water wave amplitude, change water wave amplitude, set snow turbulence, set rain wetness, set water caustics, set shader uniform, change shader uniform, set particle emitter parameter, change 3d scene parameter, set camera depth control, set motion blur shutter, set film grain control, draw path, reveal line, set laser trail, set particle trail duration, set point trail duration, set spark trail samples, set drone trail samples, engrave path, grow path

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline rich-control receipt includes layer id, allow-listed control path, old/new values, changed paths, action, validation result, and preview evidence.

motion.timeline.layer.blend.set

Tier edit_motion. Mutates. Discoverable as an action on the timeline, preview, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 6

Discovery phrases: set layer blend mode, change layer blend mode, set blend mode, change blend mode, set layer multiply, set layer screen, make layer multiply, make layer screen, set compositor blend mode, change compositor blend

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline layer blend receipt includes layer id, old/new blend mode, changed paths, action, and validation result.

Named value sets used here: blendMode. Every allowed-value list is enforced on the wire, not merely advertised.

motion.timeline.layer.crop.set

Tier edit_motion. Mutates. Discoverable as an action on the timeline, preview, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 10

Discovery phrases: crop image layer, crop video layer, crop media layer, crop layer, set layer crop, set image crop, set video crop, set source crop, change source crop, adjust media crop

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline layer crop receipt includes layer id, old/new crop rectangles, changed paths, action, and validation result.

motion.timeline.layer.mask.set

Tier edit_motion. Mutates. Discoverable as an action on the timeline, preview, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 12

Discovery phrases: mask layer, set layer mask, set rectangular mask, set rounded mask, round layer mask, clip layer mask, set mask inset, change layer mask, adjust layer mask, mask visual layer

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline layer mask receipt includes layer id, old/new mask shapes, changed paths, action, and validation result.

motion.timeline.layer.fit.set

Tier edit_motion. Mutates. Discoverable as an action on the timeline, preview, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 6

Discovery phrases: fit image layer, fit video layer, set media fit, set image fit, set video fit, set object fit, change media fit, set layer fit, contain image layer, cover image layer

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline layer fit receipt includes layer id, old/new media fit, changed paths, action, and validation result.

Named value sets used here: mediaFit. Every allowed-value list is enforced on the wire, not merely advertised.

motion.timeline.layer.media.set

Tier edit_motion. Mutates. Discoverable as an action on the timeline, preview, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 6

Discovery phrases: set layer media source, set image media source, set video media source, set audio media source, change layer media source, set layer source, change layer source, replace layer media, swap layer media, replace timeline layer source

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline layer media receipt includes layer id, old/new source refs, changed paths, action, and validation result.

motion.timeline.layer.name.set

Tier edit_motion. Mutates. Discoverable as an action on the timeline, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 6

Discovery phrases: rename selected layer, rename layer, rename timeline layer, set layer name, set selected layer name, change layer name, change selected layer name, edit layer name, label selected layer, set layer display name

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline layer name receipt includes layer id, old/new display name, changed paths, action, and validation result.

motion.timeline.layer.visibility.set

Tier edit_motion. Mutates. Discoverable as an action on the timeline, preview, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 6

Discovery phrases: hide layer, show layer, hide timeline layer, show timeline layer, set layer visibility, toggle layer visibility, hide selected layer, show selected layer, hide product layer, show product layer

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline layer visibility receipt includes layer id, old/new visibility, changed paths, action, and validation result.

motion.timeline.layer.lock

Tier edit_motion. Mutates. Discoverable as an action on the timeline, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 6

Discovery phrases: lock layer, unlock layer, lock selected layer, unlock selected layer, lock timeline layer, unlock timeline layer, set layer lock, set layer locked, protect layer, unprotect layer

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline layer lock receipt includes layer id, old/new lock state, changed paths, action, and validation result.

motion.timeline.layer.delete

Tier edit_motion. Mutates. Discoverable as an action on the timeline, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 5

Discovery phrases: delete selected layer from timeline, delete timeline layer, remove timeline layer, delete selected layer, remove selected layer, delete layer, remove layer, clear layer

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline layer delete receipt includes layer id, removed layer, changed paths, removed track refs, remaining count, and validation result.

motion.timeline.layer.duplicate

Tier edit_motion. Mutates. Discoverable as an action on the timeline, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 7

Discovery phrases: duplicate selected layer on timeline, duplicate selected layer, duplicate timeline layer, clone selected layer, copy selected layer, duplicate layer, clone layer, copy layer

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline layer duplicate receipt includes source layer id, new layer id, offset, changed paths, inserted track refs, and validation result.

motion.timeline.layer.reorder

Tier edit_motion. Mutates. Discoverable as an action on the timeline, receipts, prompt surfaces.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 6

Discovery phrases: bring selected layer forward, send selected layer backward, move selected layer forward, move selected layer backward, move layer forward, move layer backward, move layer to front, send layer to back, reorder layer, change layer stack order, layer z order, move selected layer in stack

Any other argument is rejected: the call fails with invalid_args and the command does not run.

1. Timeline layer reorder receipt includes layer id, old/new stack indexes, changed paths, reordered track refs, and validation result.

motion.timeline.checkpoint-storyboard.create

Tier write_local. Mutates. No action entry — call it directly.

• tier write_local
• domain timeline
• mutates yes
• arguments 1
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.checkpoint-storyboard.inspect

Tier read_motion. Read-only. No action entry — call it directly.

• tier read_motion
• domain timeline
• mutates no
• arguments 1
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.checkpoint-storyboard.revise

Tier write_local. Mutates. No action entry — call it directly.

• tier write_local
• domain timeline
• mutates yes
• arguments 2
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.checkpoint-storyboard.remove

Tier write_local. Mutates. No action entry — call it directly.

• tier write_local
• domain timeline
• mutates yes
• arguments 1
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.checkpoint-storyboard.archive

Tier write_local. Mutates. No action entry — call it directly.

• tier write_local
• domain timeline
• mutates yes
• arguments 1
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.checkpoint-storyboard.materialize

Tier write_local. Mutates. No action entry — call it directly.

• tier write_local
• domain timeline
• mutates yes
• arguments 1
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.checkpoint-storyboard.detach

Tier write_local. Mutates. No action entry — call it directly.

• tier write_local
• domain timeline
• mutates yes
• arguments 1
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.checkpoint-storyboard.behavior.resolve

Tier write_local. Mutates. No action entry — call it directly.

• tier write_local
• domain timeline
• mutates yes
• arguments 1
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.checkpoint-storyboard.behavior.detach

Tier write_local. Mutates. No action entry — call it directly.

• tier write_local
• domain timeline
• mutates yes
• arguments 1
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.checkpoint-storyboard.relation.resolve

Tier write_local. Mutates. No action entry — call it directly.

• tier write_local
• domain timeline
• mutates yes
• arguments 1
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.checkpoint-storyboard.relation.detach

Tier write_local. Mutates. No action entry — call it directly.

• tier write_local
• domain timeline
• mutates yes
• arguments 1
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.checkpoint-storyboard.relation-action.resolve

Tier write_local. Mutates. No action entry — call it directly.

• tier write_local
• domain timeline
• mutates yes
• arguments 1
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.checkpoint-storyboard.relation-action.detach

Tier write_local. Mutates. No action entry — call it directly.

• tier write_local
• domain timeline
• mutates yes
• arguments 1
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.checkpoint-storyboard.lifecycle.resolve

Tier write_local. Mutates. No action entry — call it directly.

• tier write_local
• domain timeline
• mutates yes
• arguments 1
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.checkpoint-storyboard.lifecycle.detach

Tier write_local. Mutates. No action entry — call it directly.

• tier write_local
• domain timeline
• mutates yes
• arguments 1
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.checkpoint-storyboard.geometry-morph.resolve

Tier write_local. Mutates. No action entry — call it directly.

• tier write_local
• domain timeline
• mutates yes
• arguments 1
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.checkpoint-storyboard.geometry-morph.detach

Tier write_local. Mutates. No action entry — call it directly.

• tier write_local
• domain timeline
• mutates yes
• arguments 1
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.checkpoint-storyboard.retained-trace.resolve

Tier write_local. Mutates. No action entry — call it directly.

• tier write_local
• domain timeline
• mutates yes
• arguments 1
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.checkpoint-storyboard.retained-trace.detach

Tier write_local. Mutates. No action entry — call it directly.

• tier write_local
• domain timeline
• mutates yes
• arguments 1
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.checkpoint-storyboard.retained-trace.preview

Tier render_motion. Mutates. No action entry — call it directly.

• tier render_motion
• domain timeline
• mutates yes
• arguments 2
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.checkpoint-storyboard.retained-trace.review.bind

Tier write_local. Mutates. No action entry — call it directly.

• tier write_local
• domain timeline
• mutates yes
• arguments 3
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.checkpoint-storyboard.preview

Tier render_motion. Mutates. No action entry — call it directly.

• tier render_motion
• domain timeline
• mutates yes
• arguments 2
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.checkpoint-storyboard.creative-review.bind

Tier write_local. Mutates. No action entry — call it directly.

• tier write_local
• domain timeline
• mutates yes
• arguments 3
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.checkpoint-storyboard.preview-quality.review

Tier write_local. Mutates. No action entry — call it directly.

• tier write_local
• domain timeline
• mutates yes
• arguments 3
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.relations.inspect

Tier read_motion. Read-only. No action entry — call it directly.

• tier read_motion
• domain timeline
• mutates no
• arguments 2
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.relations.upsert

Tier edit_motion. Mutates. No action entry — call it directly.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 4
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.relations.enabled.set

Tier edit_motion. Mutates. No action entry — call it directly.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 5
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.relations.remove

Tier edit_motion. Mutates. No action entry — call it directly.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 4
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.relations.detach

Tier edit_motion. Mutates. No action entry — call it directly.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 4
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.relations.bake

Tier edit_motion. Mutates. No action entry — call it directly.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 5
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.relation-actions.inspect

Tier read_motion. Read-only. No action entry — call it directly.

• tier read_motion
• domain timeline
• mutates no
• arguments 1
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.relation-actions.upsert

Tier edit_motion. Mutates. No action entry — call it directly.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 4
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.relation-actions.remove

Tier edit_motion. Mutates. No action entry — call it directly.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 4
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.relation-actions.apply

Tier edit_motion. Mutates. No action entry — call it directly.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 6
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.scene3d-animation.inspect

Tier read_motion. Read-only. No action entry — call it directly.

• tier read_motion
• domain timeline
• mutates no
• arguments 1
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.scene3d-animation.track.upsert

Tier edit_motion. Mutates. No action entry — call it directly.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 4
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.scene3d-animation.track.remove

Tier edit_motion. Mutates. No action entry — call it directly.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 4
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.scene3d-animation.keyframe.upsert

Tier edit_motion. Mutates. No action entry — call it directly.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 5
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.scene3d-animation.keyframe.delete

Tier edit_motion. Mutates. No action entry — call it directly.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 5
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.scene3d-animation.keyframe.move

Tier edit_motion. Mutates. No action entry — call it directly.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 6
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.layout-gap-animation.inspect

Tier read_motion. Read-only. No action entry — call it directly.

• tier read_motion
• domain timeline
• mutates no
• arguments 1
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.layout-gap-animation.track.upsert

Tier edit_motion. Mutates. No action entry — call it directly.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 4
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.layout-gap-animation.track.remove

Tier edit_motion. Mutates. No action entry — call it directly.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 4
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.layout-gap-animation.keyframe.upsert

Tier edit_motion. Mutates. No action entry — call it directly.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 5
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.layout-gap-animation.keyframe.delete

Tier edit_motion. Mutates. No action entry — call it directly.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 5
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.layout-gap-animation.keyframe.move

Tier edit_motion. Mutates. No action entry — call it directly.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 6
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.behaviors.inspect

Tier read_motion. Read-only. No action entry — call it directly.

• tier read_motion
• domain timeline
• mutates no
• arguments 1
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.behaviors.upsert

Tier edit_motion. Mutates. No action entry — call it directly.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 4
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.behaviors.remove

Tier edit_motion. Mutates. No action entry — call it directly.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 4
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.layer.text-runs.inspect

Tier read_motion. Read-only. No action entry — call it directly.

• tier read_motion
• domain timeline
• mutates no
• arguments 2
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.layer.text-runs.replace

Tier edit_motion. Mutates. No action entry — call it directly.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 6
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.layer.text-runs.remove

Tier edit_motion. Mutates. No action entry — call it directly.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 6
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.group.create

Tier edit_motion. Mutates. No action entry — call it directly.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 9
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.group.child.add

Tier edit_motion. Mutates. No action entry — call it directly.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 7
• action entry none

Any other argument is rejected: the call fails with invalid_args and the command does not run.

motion.timeline.group.child.remove

Tier edit_motion. Mutates. No action entry — call it directly.

• tier edit_motion
• domain timeline
• mutates yes
• arguments 6
• action entry none