A full dev environment per run,with the app running where you can see it.
Each Starko AI run and session works in its own isolated cloud sandbox with your repository checked out, your services running and a real browser. Starko prepares that environment itself, asks you only for the secrets it cannot know, and destroys the sandbox when the run ends.
✓ tests/invoices/pdf-vat.test.ts (3) Test Files 12 passed (12) Tests 48 passed (48)
exit 0
country | vat_id ---------+-------- DE |
exit 0
▲ Next.js 16.0.1 - Local: http://localhost:3000 ✓ Ready in 2.1s
Cloud sandboxes in short.
- One sandbox per run
- Every fix run, session and setup run gets its own. None is shared, and none outlives its run.
- Machine
- 4 vCPU, 8 GB memory and 10 GB disk.
- Toolchain
- Node 24 with npm, pnpm and yarn, Docker with Compose, Playwright with Chromium, and the GitHub CLI.
- Setup
- Set up the sandbox takes about four minutes and saves the commands it chose to the project.
- Secrets
- Stored encrypted and injected at launch. The agent is told the names, never the values.
- Warm snapshot
- Runs boot with dependencies installed. Rebuilt when setup or a dependency file changes, and after a week.
- Preview
- A signed link to the app's port inside the sandbox, valid for an hour and dead when the run ends.
- Hard stop
- Fix runs stop after about 45 minutes, sessions after 2 hours. Each sandbox also deletes itself on its own timer.
Starko sets up its own sandbox, and asks you only for what it cannot derive.
- Install: dependencies with the project's own package manager.
- Backend: Compose services and databases, if the app needs them. Docker and Compose are built into the sandbox.
- Start the app: in the background, until its URL answers.
- Prove it with a screenshot: opens the app with the preview login and captures the page a user sees.
- Tests: a quick test run, when the project has one. Then the commands and URL are saved to the project and a warm snapshot is built.
- Prefer to do it yourself? Fill in by hand, and every line stays editable in the project's Starko AI settings.
What Starko needs from you
northwind/web · the manifests name 2 secrets only you can give. The rest it sets up itself.
Cookies from a signed-in dev session, so screenshots show the app a user sees. You can add it later.
Starko will handle the rest
pnpm install · docker compose up for postgres, redis · start the app and find its URL · keep a warm snapshot
Takes about four minutes. This page follows the run; you can leave and come back.
What Starko needs from you
northwind/web · the manifests name 2 secrets only you can give. The rest it sets up itself.
Cookies from a signed-in dev session, so screenshots show the app a user sees. You can add it later.
Starko will handle the rest
pnpm install · docker compose up for postgres, redis · start the app and find its URL · keep a warm snapshot
Takes about four minutes. This page follows the run; you can leave and come back.
Starko can run northwind/web
Installed, started and seen. Runs on this project start from here.
Install
pnpm install --frozen-lockfile · 812 packages in 41s
Backend
Compose services and databases, if the app needs them.
Start the app
pnpm dev · http://localhost:3000 answered after 9s
Prove it with a screenshot
Opened /invoices with the preview login.
Tests
pnpm test · 212 passed
Save the environment
Install: pnpm install --frozen-lockfile · App: pnpm dev → http://localhost:3000 · warm snapshot ready
Everything the agent runs with, on one tab per project.
- Sandbox environment variables are entered as
KEY=valueor by importing a.envfile. They are stored encrypted, never shown again and never placed in a prompt. - Preview login: paste a Cookie header, a cookie export or a Playwright storage state, so screenshots and the agent's own checks see the signed-in app instead of the login form.
- Without an app command and URL, screenshots and browser checks are off. Without a test command, Starko cannot run its own check after the agent.
- Editing the environment needs an owner or admin.
Starko AI
How the agent works in northwind/web.
Starko can run this app
Set up by Starko 3 days ago · 5 of 5 ready · Ready · 9f2c4e1 · built 2 days ago
Warm sandbox
A snapshot of this repository with dependencies already installed. Runs boot from it, fetch the latest commits, and re-run setup only when a dependency manifest changed.
Ready · 9f2c4e1 · built 2 days ago
Runs boot from a snapshot with dependencies already installed.
package.json, requirements, a Dockerfile. Without a snapshot, every run installs from scratch.- The snapshot rebuilds on its own when the setup command or a dependency file on the default branch changes, and after a week.
- If a re-run of setup takes longer than four minutes, the run falls back to a fresh install instead of hanging.
- Prepare sandbox and Rebuild are on the Environment tab, with the commit the snapshot was built from.
- The ledger on Settings, Starko AI shows median run duration for warm and cold starts side by side.
A map of the repository, written before the agent changes anything.
- The summary is one paragraph, up to 1,500 characters. Sections are markdown that cite file paths.
- Edit any section yourself. Saving creates a new version; rules for the agent belong in the agent instructions instead.
- Each version records the commit it was learned from. A map more than a month old suggests a refresh.
- Research runs and setup runs do not get your team's skills, so the map describes the repository and nothing else.
Open the running app and a shared terminal while the agent works.
- The preview uses the project's App URL, or port 3000 when none is set. If nothing listens yet, it says so and retries on its own.
- Preview links are signed, expire after an hour and stop working when the sandbox is destroyed.
- The console has Run project and Run tests buttons from the project's commands. The working directory persists between commands, and Ctrl+C stops the running one.
- The console is shared with everyone on the ticket. Every command, who ran it and its output are recorded on the run.
- Neither the console nor steering extends a run's time limit.
Every sandbox has a hard stop, and none outlives its run.
- Each sandbox also carries its own auto-delete timer, so it dies even if the run that started it does not finish cleanly.
- A sweeper finalizes runs that stall, so no sandbox is left waiting on a run that will never report back.
- The GitHub token inside is scoped to the one repository, with contents and pull request access, and refreshed before it expires. Tokens are scrubbed from transcripts before they are shown or stored.
- Evidence files live outside the repository checkout, so nothing the agent collects ends up in a commit.
- Continue session boots a new sandbox on the same branch with the earlier conversation as context.
FAQAbout Cloud sandboxes.
Connect a channel and a repository. Turn the support queue into a build queue.
Feedback starts flowing in minutes. The first recommendation shows up as soon as a pattern repeats, and the first pull request as soon as you accept one.