Sandbox · No.01Suncoast Venture Studio

Drop the files.
Watch it run.
Send the link.

Artifacts is a focused workbench for HTML, CSS, JS, and JSX prototypes. Drop in files, watch them run inside a sandboxed iframe, and share the exact working version with a single link.

Sandboxed iframePrivate by defaultOne-click public link
artifact · App.jsxlive

Capabilities / 01

A tiny IDE. Real outputs. Share-ready.

Four pieces that turn a folder of loose files into a working, shareable prototype.

01

Bring real files

Drag in HTML, CSS, JS, JSX, or TSX — multiple files per artifact, keep your structure intact.

02

Sandboxed preview

The iframe refreshes as you work, with Babel-standalone transforming JSX at runtime.

03

Private by default

Row-level security means each artifact belongs to your account until you flip sharing on.

04

One public link

Toggle sharing and copy a clean URL. Edit or unshare — caches invalidate immediately.

Workflow / 02

From loose files to a shareable prototype.

01

Upload or paste

Drop your files, or paste raw code. Set an entry file when needed; everything else is referenced relatively.

HTML · CSS · JS · JSX · TSX
02

Render in the sandbox

The server bundles your files into one HTML document piped into an iframe via srcDoc. The sandbox attribute blocks the iframe from reaching the parent app.

sandbox="allow-scripts allow-forms allow-popups"
03

Send the link

Toggle the share switch on, copy the public URL, send it to anyone. They get the running version — no login required.

public/<shareId>

Trust / 03

Code you don't own runs inside an iron box.

Every artifact renders inside a sandboxed iframe with explicit permissions. It cannot reach the parent page, your cookies, or your storage. Share pages cache for one hour and invalidate the instant you edit or unshare.

  • Account-scoped storage via Postgres row-level security.
  • Sharing is a deliberate toggle — nothing is public by default.
  • Cache invalidates immediately on edit or unshare.
renderer.ts · iframe sandbox
<iframe
  srcDoc={document}
  sandbox="allow-scripts
           allow-forms
           allow-popups
           allow-modals"
  referrerPolicy="no-referrer"
  loading="lazy"
/>
Sandboxed
iframe
Private
default
Share cache
1h
Invalidation
instant

Build / 04

Ship the next prototype in one tab.

Create an artifact, verify it inside the sandbox, share the exact running version. No deploy step. No build pipeline.