Studio

Hosting on Studio.

Studio is the hosted workspace for workbooks. It adds a library, group-level access control, identity, and a managed viewer at workbooks.sh/w/<id>. Everything described here is optional — the file format works without Studio.

Concepts

Workspace. Your account's top-level container. One workspace per organisation. Holds groups, members, billing.

Group. A library of workbooks with its own contributor list and access policy. Workbooks live inside groups, not at the workspace root.

Workbook. A published artifact. Has an ID, an owner, a visibility setting (public / workspace / private), and a version history.

Publishing

Use workbook publish from the CLI. The first time you publish, the CLI opens a browser to authorize with your Studio account; the resulting token is stored in your OS keychain.

workbook publish --group pricing-research --visibility workspace

Subsequent runs re-publish to the same workbook ID. Pass --new to mint a fresh ID if you want a separate artifact rather than a new version.

Visibility

Public — anyone with the URL can run it. The artifact is served from the broker without auth.
Workspace — anyone signed into the workspace can run it. Default for new publishes.
Private — explicit grant list. Recipients sign in via the hosted viewer; the broker checks the grant before streaming the artifact.

Access & revocation

The broker checks access on every fetch — there is no caching-by-token. To kill access immediately, change visibility to private and clear the grant list, or revoke from the workbook page in Studio. The artifact bytes also rotate so any cached copies on the recipient side stop working.

Workbooks are still untrusted code. Studio is a hosting layer; it does not vouch for the contents of a workbook. The runtime sandbox (cross-origin iframe + CSP) applies regardless of where the file came from. See the security model.

Runtime configuration

Some workbooks need environment values (API keys, dataset URLs, feature flags). Studio stores these per-workbook and injects them into the runtime as WB_ENV at fetch time, so they never live in the artifact bytes you ship. Manage them from the workbook's Settings → Runtime tab.

Pricing

Free during private beta. Pay-as-you-go pricing after GA: per-seat for Studio, per-GB-served for the viewer/broker. No markup on pass-through infra. Full pricing will land here when GA ships.