diff --git a/packages/cli/src/utils/sandbox-macos-minimal.sb b/packages/cli/src/utils/sandbox-macos-minimal.sb
index 5fef79bb..552efcd4 100644
--- a/packages/cli/src/utils/sandbox-macos-minimal.sb
+++ b/packages/cli/src/utils/sandbox-macos-minimal.sb
@@ -8,6 +8,7 @@
 (allow file-write*
     (subpath (param "TARGET_DIR"))
     (subpath (param "TMP_DIR"))
+    (subpath (param "CACHE_DIR"))
     (subpath (string-append (param "HOME_DIR") "/.gemini"))
     (subpath (string-append (param "HOME_DIR") "/.npm"))
     (subpath (string-append (param "HOME_DIR") "/.cache"))
diff --git a/packages/cli/src/utils/sandbox-macos-strict.sb b/packages/cli/src/utils/sandbox-macos-strict.sb
index a5631392..010fee00 100644
--- a/packages/cli/src/utils/sandbox-macos-strict.sb
+++ b/packages/cli/src/utils/sandbox-macos-strict.sb
@@ -66,6 +66,7 @@
 (allow file-write*
     (subpath (param "TARGET_DIR"))
     (subpath (param "TMP_DIR"))
+    (subpath (param "CACHE_DIR"))
     (subpath (string-append (param "HOME_DIR") "/.gemini"))
     (subpath (string-append (param "HOME_DIR") "/.npm"))
     (subpath (string-append (param "HOME_DIR") "/.cache"))
diff --git a/packages/cli/src/utils/sandbox.ts b/packages/cli/src/utils/sandbox.ts
index 51499f2b..583c3ca8 100644
--- a/packages/cli/src/utils/sandbox.ts
+++ b/packages/cli/src/utils/sandbox.ts
@@ -236,6 +236,8 @@ export async function start_sandbox(sandbox: string) {
       `TMP_DIR=${fs.realpathSync(os.tmpdir())}`,
       '-D',
       `HOME_DIR=${fs.realpathSync(os.homedir())}`,
+      '-D',
+      `CACHE_DIR=${fs.realpathSync(execSync(`getconf DARWIN_USER_CACHE_DIR`).toString().trim())}`,
       '-f',
       profileFile,
       'bash',