Sandbox

Sandbox sessions (per-prompt worktrees)

The left sidebar → Sandbox Sessions panel and the Pipeline “Run in:” selector. Run prompts in isolated git worktrees, then Promote (merge to the default branch via a throwaway temp worktree), Discard, or View Cumulative Diff. Multiple escape hatches exit a frozen sandbox — titlebar button, banner, Ctrl+Shift+X, and auto-exit after three failed starts. AI clients can list stored sandbox sessions and route a queued prompt directly to a healthy one; invalid or non-runnable session ids fail instead of falling back to the live queue.

MCP tools: orbit_list_sandbox_sessions, orbit_queue_prompt with sandbox_session_id. Deep dive: context/sandbox-architecture-v2.md, context/sandbox-mode.md.

Server Sandbox sidecar + Sandbox Pipeline

The Sandbox Sessions drawer (a green status panel plus an amber Sandbox Pipeline). A full second Orbit server child bound to ~/.orbit-sandbox/ on port 4856 with its own queue; the New Prompt modal’s “Run In: Live | Sandbox” routes prompts to it for risk-free experiments.

REST: /api/sandbox-server/*. Deep dive: context/sandbox-architecture-v2.md.

Sandbox cleanup

Settings → Queue & Sessions → Sandbox. Background detection of orphaned sandbox worktrees, branches, and session rows, with per-card Clean Up or Ignore.