Apps built as Claude Artifacts now have the ability to run prompts of their own, billed to the current user of the app, not the app author
I reverse engineered the tool instructions from the system prompt to see how it works - notes here: https://simonwillison.net/2025/Jun/25/ai-powered-apps-with-claude/