refactor(studio): update layout, config, and remove agent activity tracking

[miguel-heygen]

Summary

• NLELayout: Add toolbar slot, composition breadcrumb navigation, improved responsive layout
• Vite config: Add full project API (preview, thumbnail, render, file CRUD) for standalone dev mode
• Remove AgentActivityTrack component (replaced by timeline clips)
• Add HTML editor utilities for composition source editing
• Guard setInterval cleanup to dev-only to prevent vite build from hanging in CI

🤖 Generated with Claude Code

[miguel-heygen]

• refactor(studio): wire vite.config.ts to shared studio API module #115
• refactor(core): extract shared studio API module #113
• fix(core): strip template wrapper before linting composition files #111
• fix(cli): align render output naming and add WebM support to studioServer #109
• feat(studio): render queue, layout restructure, home page, hover preview #95
• feat(studio): add left sidebar with Compositions and Assets tabs #94
• feat(studio): add Edit Range toolbar with Copy to Agent #65
• refactor(studio): update layout, config, and remove agent activity tracking #64 👈 (View in Graphite)
• refactor(studio): improve Timeline, PlayerControls, and player hook #63
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[vanceingalls]

Review: PR #64 — Layout, Config, Agent Activity Removal

Good cleanup. htmlEditor.ts XSS issues from PR #56 resolved by removing splitElement/deleteElement entirely.

Issues

[Important] `NLELayout` performs side effects during render. The project-switch detection (`prevProjectIdRef`) and `activeCompositionPath` handling execute state updates during the render phase. These should be in `useEffect` hooks for concurrent-mode safety.

[Important] PUT endpoint still has no body size limit (carried from PR #56 review). Dev-only, but worth adding.

[Important] Puppeteer browser singleton still never closes on server shutdown. Add:
```ts
server.httpServer?.on('close', async () => {
if (_browser) await _browser.close().catch(() => {});
});
```

[Important] Render job TTL still parses timestamps from key strings. `parseInt(key.split("-").pop())` breaks if project ID contains hyphens. Store `createdAt` in the job object.

**[Suggestion] `htmlEditor.ts` `findElementBlock` only matches double-quoted `id` attributes. Single-quoted `id='foo'` returns null.

**[Suggestion] `htmlEditor.ts` still has no unit tests — functions are pure string→string, ideal for testing.

What's well done

• XSS surface eliminated by removing `patchAttrInTag`, `splitElement`, `deleteElement`
• `findElementBlock` uses proper quote-aware scanning and depth-counted tag matching
• `isSafePath` consistently applied on all file endpoints
• Clean AgentActivityTrack removal completing the cleanup from PR refactor(studio): improve player store with zoom and element updates #61
• Exports are well-organized with proper type exports

[miguel-heygen]

Thanks for the thorough review!

Addressed:

• ✅ findElementBlock now supports both single-quoted and double-quoted id attributes
• ✅ Removed composition drill-down on file tree click (clicking a composition file no longer switches the preview)

Not addressed (tracked for follow-up):

• NLELayout side effects during render — will move to useEffect hooks
• PUT endpoint body size limit — dev-only but worth adding
• Puppeteer browser singleton cleanup on server shutdown
• Render job TTL timestamp parsing from key strings — will store createdAt in job object
• htmlEditor.ts unit tests — functions are pure string→string, good candidate for testing

[miguel-heygen]

Merge activity

• Mar 28, 7:59 AM UTC: A user started a stack merge that includes this pull request via Graphite.
• Mar 28, 8:00 AM UTC: Graphite couldn't merge this pull request because a downstack PR feat(studio): add TimelineClip and thumbnail components #62 failed to merge.
• Mar 28, 5:19 PM UTC: A user started a stack merge that includes this pull request via Graphite.
• Mar 28, 5:40 PM UTC: The Graphite merge of this pull request was cancelled.
• Mar 28, 7:45 PM UTC: @miguel-heygen merged this pull request with Graphite.