@google/gemini-cli 0.52.0 → 0.53.0-preview.0

package/bundle/gemini.js

@@ -4,10 +4,10 @@ import {
   RELAUNCH_EXIT_CODE,
   getScriptArgs,
   getSpawnConfig
-} from "./chunk-FBGJOW3X.js";
-import "./chunk-ZLL3UXFN.js";
-import "./chunk-Y5NBDPUP.js";
-import "./chunk-7LQRUKPT.js";
+} from "./chunk-PLMRBJEA.js";
+import "./chunk-BRZT2CQU.js";
+import "./chunk-BX6DTJOD.js";
+import "./chunk-5RDOS7UZ.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";
@@ -115,9 +115,9 @@ ${error instanceof Error ? error.stack ?? error.message : String(error)}
       }
     }
   } else {
-    const { main } = await import("./gemini-6K6USV55.js");
-    const { FatalError, writeToStderr } = await import("./dist-WD2ZO2DC.js");
-    const { runExitCleanup } = await import("./cleanup-X3KOZTUK.js");
+    const { main } = await import("./gemini-LA6TNI44.js");
+    const { FatalError, writeToStderr } = await import("./dist-PRJQFPSQ.js");
+    const { runExitCleanup } = await import("./cleanup-ZR34H2GU.js");
     main().catch(async (error) => {
       const cleanupTimeout = setTimeout(() => {
         writeToStderr("Cleanup timed out, forcing exit...\n");

package/bundle/{interactiveCli-NNJDT7RS.js → interactiveCli-ADLAWPXN.js}

@@ -157,10 +157,10 @@ import {
   widestLineFromStyledChars,
   wordBreakStyledChars,
   wrapStyledChars
-} from "./chunk-SNUSRD5O.js";
+} from "./chunk-WVDR5L2V.js";
 import {
   require_source
-} from "./chunk-THWSXFSH.js";
+} from "./chunk-SLQKIE73.js";
 import {
   appEvents
 } from "./chunk-5PS3AYFU.js";
@@ -214,24 +214,24 @@ import {
   stripAnsi,
   stripUnsafeCharacters,
   toCodePoints
-} from "./chunk-P4IYYRKC.js";
+} from "./chunk-6AD4A2WF.js";
 import {
   handleAutoUpdate,
   isDevelopment,
   relaunchApp,
   setUpdateHandler
-} from "./chunk-B54TROKV.js";
+} from "./chunk-CTNBR234.js";
 import {
   isTodoList,
   mapCoreStatusToDisplayStatus,
   require_react
-} from "./chunk-UB6EWNWI.js";
+} from "./chunk-GHVD6PXK.js";
 import {
   registerCleanup,
   removeCleanup,
   runExitCleanup,
   setupTtyCheck
-} from "./chunk-OFOMMM4A.js";
+} from "./chunk-PVCJCQWY.js";
 import {
   ACTIVATE_SKILL_TOOL_NAME,
   AGENT_TOOL_NAME,
@@ -412,7 +412,7 @@ import {
   validatePlanContent,
   validatePlanPath,
   writeToStdout
-} from "./chunk-BG2B4WV5.js";
+} from "./chunk-HF533LET.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";
@@ -33778,7 +33778,7 @@ ${queuedText}` : queuedText;
       if (keyMatchers["app.showErrorDetails" /* SHOW_ERROR_DETAILS */](key)) {
         if (settings.merged.general.devtools) {
           void (async () => {
-            const { toggleDevToolsPanel } = await import("./devtoolsService-NFNYJGMS.js");
+            const { toggleDevToolsPanel } = await import("./devtoolsService-IVPTF5ZJ.js");
             await toggleDevToolsPanel(
               config,
               showErrorDetails,

package/bundle/{interactiveCli-3B23G3WW.js → interactiveCli-FS3OVPXQ.js}

@@ -157,10 +157,10 @@ import {
   widestLineFromStyledChars,
   wordBreakStyledChars,
   wrapStyledChars
-} from "./chunk-ZNHHIFQN.js";
+} from "./chunk-QSTUV3QH.js";
 import {
   require_source
-} from "./chunk-RHQ5RWRW.js";
+} from "./chunk-4OVORMGE.js";
 import {
   appEvents
 } from "./chunk-5PS3AYFU.js";
@@ -214,24 +214,24 @@ import {
   stripAnsi,
   stripUnsafeCharacters,
   toCodePoints
-} from "./chunk-SZMWXEEI.js";
+} from "./chunk-IODN6H35.js";
 import {
   handleAutoUpdate,
   isDevelopment,
   relaunchApp,
   setUpdateHandler
-} from "./chunk-ALVMXQYL.js";
+} from "./chunk-XH7QC2TB.js";
 import {
   isTodoList,
   mapCoreStatusToDisplayStatus,
   require_react
-} from "./chunk-F7WLNK6O.js";
+} from "./chunk-BDSSP5BZ.js";
 import {
   registerCleanup,
   removeCleanup,
   runExitCleanup,
   setupTtyCheck
-} from "./chunk-JB342GRK.js";
+} from "./chunk-PKFZO3SN.js";
 import {
   ACTIVATE_SKILL_TOOL_NAME,
   AGENT_TOOL_NAME,
@@ -412,7 +412,7 @@ import {
   validatePlanContent,
   validatePlanPath,
   writeToStdout
-} from "./chunk-IQDAUFS5.js";
+} from "./chunk-27C6XFMY.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";
@@ -33778,7 +33778,7 @@ ${queuedText}` : queuedText;
       if (keyMatchers["app.showErrorDetails" /* SHOW_ERROR_DETAILS */](key)) {
         if (settings.merged.general.devtools) {
           void (async () => {
-            const { toggleDevToolsPanel } = await import("./devtoolsService-KJJEIBQ2.js");
+            const { toggleDevToolsPanel } = await import("./devtoolsService-QYDPHHFN.js");
             await toggleDevToolsPanel(
               config,
               showErrorDetails,

package/bundle/{interactiveCli-3XBP73G4.js → interactiveCli-OD2LO24X.js}

@@ -157,10 +157,10 @@ import {
   widestLineFromStyledChars,
   wordBreakStyledChars,
   wrapStyledChars
-} from "./chunk-SDT3SMSX.js";
+} from "./chunk-SXKIOLLX.js";
 import {
   require_source
-} from "./chunk-24R3JJRB.js";
+} from "./chunk-UJVAPQ7V.js";
 import {
   appEvents
 } from "./chunk-5PS3AYFU.js";
@@ -214,24 +214,24 @@ import {
   stripAnsi,
   stripUnsafeCharacters,
   toCodePoints
-} from "./chunk-ZINRZXUN.js";
+} from "./chunk-LUM47MYE.js";
 import {
   handleAutoUpdate,
   isDevelopment,
   relaunchApp,
   setUpdateHandler
-} from "./chunk-FBGJOW3X.js";
+} from "./chunk-PLMRBJEA.js";
 import {
   isTodoList,
   mapCoreStatusToDisplayStatus,
   require_react
-} from "./chunk-ZLL3UXFN.js";
+} from "./chunk-BRZT2CQU.js";
 import {
   registerCleanup,
   removeCleanup,
   runExitCleanup,
   setupTtyCheck
-} from "./chunk-Y5NBDPUP.js";
+} from "./chunk-BX6DTJOD.js";
 import {
   ACTIVATE_SKILL_TOOL_NAME,
   AGENT_TOOL_NAME,
@@ -431,7 +431,7 @@ import {
   validatePlanContent,
   validatePlanPath,
   writeToStdout
-} from "./chunk-7LQRUKPT.js";
+} from "./chunk-5RDOS7UZ.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";
@@ -33797,7 +33797,7 @@ ${queuedText}` : queuedText;
       if (keyMatchers["app.showErrorDetails" /* SHOW_ERROR_DETAILS */](key)) {
         if (settings.merged.general.devtools) {
           void (async () => {
-            const { toggleDevToolsPanel } = await import("./devtoolsService-UB2E5377.js");
+            const { toggleDevToolsPanel } = await import("./devtoolsService-OUX7PWP3.js");
             await toggleDevToolsPanel(
               config,
               showErrorDetails,

package/bundle/{liteRtServerManager-MQS4LI5P.js → liteRtServerManager-3SKK7MNE.js}

@@ -3,11 +3,11 @@ import {
   DEFAULT_PORT,
   getBinaryPath,
   isServerRunning
-} from "./chunk-P4IYYRKC.js";
-import "./chunk-UB6EWNWI.js";
+} from "./chunk-LUM47MYE.js";
+import "./chunk-BRZT2CQU.js";
 import {
   debugLogger
-} from "./chunk-BG2B4WV5.js";
+} from "./chunk-5RDOS7UZ.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";
@@ -41,7 +41,7 @@ var LiteRtServerManager = class {
       `[LiteRtServerManager] Auto-starting LiteRT server on port ${port}...`
     );
     try {
-      const { startServer } = await import("./start-SV5TPWOH.js");
+      const { startServer } = await import("./start-3FPYJBRX.js");
       const started = await startServer(binaryPath, port);
       if (started) {
         debugLogger.log(`[LiteRtServerManager] Server started on port ${port}`);

package/bundle/{liteRtServerManager-PYCXZRAL.js → liteRtServerManager-O7PFOUFD.js}

@@ -3,11 +3,11 @@ import {
   DEFAULT_PORT,
   getBinaryPath,
   isServerRunning
-} from "./chunk-SZMWXEEI.js";
-import "./chunk-F7WLNK6O.js";
+} from "./chunk-6AD4A2WF.js";
+import "./chunk-GHVD6PXK.js";
 import {
   debugLogger
-} from "./chunk-IQDAUFS5.js";
+} from "./chunk-HF533LET.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";
@@ -41,7 +41,7 @@ var LiteRtServerManager = class {
       `[LiteRtServerManager] Auto-starting LiteRT server on port ${port}...`
     );
     try {
-      const { startServer } = await import("./start-YON746V5.js");
+      const { startServer } = await import("./start-XMJ23QZN.js");
       const started = await startServer(binaryPath, port);
       if (started) {
         debugLogger.log(`[LiteRtServerManager] Server started on port ${port}`);

package/bundle/{liteRtServerManager-A77B57ZY.js → liteRtServerManager-T2Z3RLS3.js}

@@ -3,11 +3,11 @@ import {
   DEFAULT_PORT,
   getBinaryPath,
   isServerRunning
-} from "./chunk-ZINRZXUN.js";
-import "./chunk-ZLL3UXFN.js";
+} from "./chunk-IODN6H35.js";
+import "./chunk-BDSSP5BZ.js";
 import {
   debugLogger
-} from "./chunk-7LQRUKPT.js";
+} from "./chunk-27C6XFMY.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";
@@ -41,7 +41,7 @@ var LiteRtServerManager = class {
       `[LiteRtServerManager] Auto-starting LiteRT server on port ${port}...`
     );
     try {
-      const { startServer } = await import("./start-K5QQG7K4.js");
+      const { startServer } = await import("./start-5G2UDZZ6.js");
       const started = await startServer(binaryPath, port);
       if (started) {
         debugLogger.log(`[LiteRtServerManager] Server started on port ${port}`);

package/bundle/{oauth2-provider-6EE3JV6M.js → oauth2-provider-DFVE3NYF.js}

@@ -16,7 +16,7 @@ import {
   openBrowserSecurely,
   refreshAccessToken,
   startCallbackServer
-} from "./chunk-IQDAUFS5.js";
+} from "./chunk-27C6XFMY.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";

package/bundle/{oauth2-provider-5JL2PKRR.js → oauth2-provider-E3S5DGLL.js}

@@ -16,7 +16,7 @@ import {
   openBrowserSecurely,
   refreshAccessToken,
   startCallbackServer
-} from "./chunk-7LQRUKPT.js";
+} from "./chunk-5RDOS7UZ.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";

package/bundle/{oauth2-provider-THDZ27ZX.js → oauth2-provider-Q433RA6I.js}

@@ -16,7 +16,7 @@ import {
   openBrowserSecurely,
   refreshAccessToken,
   startCallbackServer
-} from "./chunk-BG2B4WV5.js";
+} from "./chunk-HF533LET.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";

package/bundle/sandbox-macos-permissive-open.sb

@@ -1,10 +1,74 @@
 (version 1)
 
-;; allow everything by default
-(allow default)
+;; permissive-open: uses (deny default) and explicitly allows the operations the
+;; CLI needs, matching the restrictive-* / strict-* profiles. Keep the allow-list
+;; minimal and reviewed; do not switch to (allow default).
+;;
+;; Keep the non-network rules in sync with sandbox-macos-permissive-proxied.sb:
+;; the two profiles are intentionally identical except for their network rules
+;; ("open" allows broad outbound; "proxied" routes outbound through the proxy).
+(deny default)
 
-;; deny all writes EXCEPT under specific paths
-(deny file-write*)
+;; allow reading files from anywhere on host
+(allow file-read*)
+
+;; allow exec/fork (children inherit this policy, so they stay sandboxed)
+(allow process-exec)
+(allow process-fork)
+
+;; allow signals to self, e.g. SIGPIPE on write to closed pipe
+(allow signal (target self))
+
+;; allow read access to specific information about system
+;; from https://source.chromium.org/chromium/chromium/src/+/main:sandbox/policy/mac/common.sb;l=273-319;drc=7b3962fe2e5fc9e2ee58000dc8fbf3429d84d3bd
+(allow sysctl-read
+    (sysctl-name "hw.activecpu")
+    (sysctl-name "hw.busfrequency_compat")
+    (sysctl-name "hw.byteorder")
+    (sysctl-name "hw.cacheconfig")
+    (sysctl-name "hw.cachelinesize_compat")
+    (sysctl-name "hw.cpufamily")
+    (sysctl-name "hw.cpufrequency_compat")
+    (sysctl-name "hw.cputype")
+    (sysctl-name "hw.l1dcachesize_compat")
+    (sysctl-name "hw.l1icachesize_compat")
+    (sysctl-name "hw.l2cachesize_compat")
+    (sysctl-name "hw.l3cachesize_compat")
+    (sysctl-name "hw.logicalcpu_max")
+    (sysctl-name "hw.machine")
+    (sysctl-name "hw.ncpu")
+    (sysctl-name "hw.nperflevels")
+    (sysctl-name "hw.optional.arm.FEAT_BF16")
+    (sysctl-name "hw.optional.arm.FEAT_DotProd")
+    (sysctl-name "hw.optional.arm.FEAT_FCMA")
+    (sysctl-name "hw.optional.arm.FEAT_FHM")
+    (sysctl-name "hw.optional.arm.FEAT_FP16")
+    (sysctl-name "hw.optional.arm.FEAT_I8MM")
+    (sysctl-name "hw.optional.arm.FEAT_JSCVT")
+    (sysctl-name "hw.optional.arm.FEAT_LSE")
+    (sysctl-name "hw.optional.arm.FEAT_RDM")
+    (sysctl-name "hw.optional.arm.FEAT_SHA512")
+    (sysctl-name "hw.optional.armv8_2_sha512")
+    (sysctl-name "hw.packages")
+    (sysctl-name "hw.pagesize_compat")
+    (sysctl-name "hw.physicalcpu_max")
+    (sysctl-name "hw.tbfrequency_compat")
+    (sysctl-name "hw.vectorunit")
+    (sysctl-name "kern.hostname")
+    (sysctl-name "kern.maxfilesperproc")
+    (sysctl-name "kern.osproductversion")
+    (sysctl-name "kern.osrelease")
+    (sysctl-name "kern.ostype")
+    (sysctl-name "kern.osvariant_status")
+    (sysctl-name "kern.osversion")
+    (sysctl-name "kern.secure_kernel")
+    (sysctl-name "kern.usrstack64")
+    (sysctl-name "kern.version")
+    (sysctl-name "sysctl.proc_cputype")
+    (sysctl-name-prefix "hw.perflevel")
+)
+
+;; allow writes only to specific paths (deny default already blocks the rest)
 (allow file-write*
     (subpath (param "TARGET_DIR"))
     (subpath (param "TMP_DIR"))
@@ -24,3 +88,48 @@
     (literal "/dev/ptmx")
     (regex #"^/dev/ttys[0-9]*$")
 )
+
+;; allow the mach services normal workflows need under deny-default: sysmond for
+;; process listing (pgrep), plus DNS resolution (mDNSResponder), directory
+;; services (opendirectoryd), and certificate validation (trustd/ocspd).
+;; This set mirrors the deny-default profile in
+;; packages/core/src/sandbox/macos/baseProfile.ts (its NETWORK_SEATBELT_PROFILE),
+;; which restrictive-open reaches only implicitly via (allow network-outbound).
+;; Keep this allow-list minimal and reviewed.
+(allow mach-lookup
+    (global-name "com.apple.sysmond")
+    (global-name "com.apple.system.opendirectoryd.libinfo")
+    (global-name "com.apple.system.opendirectoryd.membership")
+    (global-name "com.apple.bsd.dirhelper")
+    (global-name "com.apple.SecurityServer")
+    (global-name "com.apple.networkd")
+    (global-name "com.apple.ocspd")
+    (global-name "com.apple.trustd")
+    (global-name "com.apple.trustd.agent")
+    (global-name "com.apple.mDNSResponder")
+    (global-name "com.apple.mDNSResponderHelper")
+    (global-name "com.apple.SystemConfiguration.DNSConfiguration")
+    (global-name "com.apple.SystemConfiguration.configd")
+)
+
+;; AF_SYSTEM socket used by the network stack (from baseProfile.ts)
+(allow system-socket
+    (require-all
+        (socket-domain AF_SYSTEM)
+        (socket-protocol 2)
+    )
+)
+
+;; enable terminal access required by ink
+;; fixes setRawMode EPERM failure (at node:tty:81:24)
+(allow file-ioctl (regex #"^/dev/tty.*"))
+
+;; allow inbound network traffic (local dev/test servers, the debugger on :9229,
+;; OAuth localhost callbacks)
+(allow network-inbound (local ip "*:*"))
+
+;; allow binding local ports (dev/test servers, OAuth localhost listeners)
+(allow network-bind (local ip "*:*"))
+
+;; allow all outbound network traffic
+(allow network-outbound)

package/bundle/sandbox-macos-permissive-proxied.sb

@@ -1,10 +1,76 @@
 (version 1)
 
-;; allow everything by default
-(allow default)
+;; permissive-proxied: uses (deny default) and explicitly allows the operations
+;; the CLI needs, matching the restrictive-* / strict-* profiles. Keep the
+;; allow-list minimal and reviewed; do not switch to (allow default).
+;;
+;; Keep the non-network rules in sync with sandbox-macos-permissive-open.sb:
+;; the two profiles are intentionally identical except for their network rules
+;; ("open" allows broad outbound; "proxied" routes outbound through the proxy).
+(deny default)
 
-;; deny all writes EXCEPT under specific paths
-(deny file-write*)
+;; allow reading files from anywhere on host
+(allow file-read*)
+
+;; allow exec/fork (children inherit this policy, so they stay sandboxed)
+(allow process-exec)
+(allow process-fork)
+
+;; allow signals to self, e.g. SIGPIPE on write to closed pipe
+(allow signal (target self))
+
+;; allow read access to specific information about system
+;; from https://source.chromium.org/chromium/chromium/src/+/main:sandbox/policy/mac/common.sb;l=273-319;drc=7b3962fe2e5fc9e2ee58000dc8fbf3429d84d3bd
+(allow sysctl-read
+    (sysctl-name "hw.activecpu")
+    (sysctl-name "hw.busfrequency_compat")
+    (sysctl-name "hw.byteorder")
+    (sysctl-name "hw.cacheconfig")
+    (sysctl-name "hw.cachelinesize_compat")
+    (sysctl-name "hw.cpufamily")
+    (sysctl-name "hw.cpufrequency_compat")
+    (sysctl-name "hw.cputype")
+    (sysctl-name "hw.l1dcachesize_compat")
+    (sysctl-name "hw.l1icachesize_compat")
+    (sysctl-name "hw.l2cachesize_compat")
+    (sysctl-name "hw.l3cachesize_compat")
+    (sysctl-name "hw.logicalcpu_max")
+    (sysctl-name "hw.machine")
+    (sysctl-name "hw.ncpu")
+    (sysctl-name "hw.nperflevels")
+    (sysctl-name "hw.optional.arm.FEAT_BF16")
+    (sysctl-name "hw.optional.arm.FEAT_DotProd")
+    (sysctl-name "hw.optional.arm.FEAT_FCMA")
+    (sysctl-name "hw.optional.arm.FEAT_FHM")
+    (sysctl-name "hw.optional.arm.FEAT_FP16")
+    (sysctl-name "hw.optional.arm.FEAT_I8MM")
+    (sysctl-name "hw.optional.arm.FEAT_JSCVT")
+    (sysctl-name "hw.optional.arm.FEAT_LSE")
+    (sysctl-name "hw.optional.arm.FEAT_RDM")
+    (sysctl-name "hw.optional.arm.FEAT_SHA512")
+    (sysctl-name "hw.optional.armv8_2_sha512")
+    (sysctl-name "hw.packages")
+    (sysctl-name "hw.pagesize_compat")
+    (sysctl-name "hw.physicalcpu_max")
+    (sysctl-name "hw.tbfrequency_compat")
+    (sysctl-name "hw.vectorunit")
+    (sysctl-name "kern.hostname")
+    (sysctl-name "kern.maxfilesperproc")
+    (sysctl-name "kern.osproductversion")
+    (sysctl-name "kern.osrelease")
+    (sysctl-name "kern.ostype")
+    (sysctl-name "kern.osvariant_status")
+    (sysctl-name "kern.osversion")
+    (sysctl-name "kern.secure_kernel")
+    (sysctl-name "kern.usrstack64")
+    (sysctl-name "kern.version")
+    (sysctl-name "sysctl.proc_cputype")
+    (sysctl-name-prefix "hw.perflevel")
+)
+
+;; allow writes only to specific paths (deny default already blocks the rest).
+;; Mirrors permissive-open, including /dev/ptmx and the /dev/ttys regex needed
+;; for PTY support under deny default.
 (allow file-write*
     (subpath (param "TARGET_DIR"))
     (subpath (param "TMP_DIR"))
@@ -21,16 +87,52 @@
     (literal "/dev/stdout")
     (literal "/dev/stderr")
     (literal "/dev/null")
+    (literal "/dev/ptmx")
+    (regex #"^/dev/ttys[0-9]*$")
+)
+
+;; allow the mach services normal workflows need under deny-default: sysmond for
+;; process listing (pgrep), plus DNS resolution (mDNSResponder), directory
+;; services (opendirectoryd), and certificate validation (trustd/ocspd).
+;; This set mirrors the deny-default profile in
+;; packages/core/src/sandbox/macos/baseProfile.ts (its NETWORK_SEATBELT_PROFILE),
+;; which restrictive-proxied reaches only implicitly via (allow network-outbound).
+;; Keep this allow-list minimal and reviewed.
+(allow mach-lookup
+    (global-name "com.apple.sysmond")
+    (global-name "com.apple.system.opendirectoryd.libinfo")
+    (global-name "com.apple.system.opendirectoryd.membership")
+    (global-name "com.apple.bsd.dirhelper")
+    (global-name "com.apple.SecurityServer")
+    (global-name "com.apple.networkd")
+    (global-name "com.apple.ocspd")
+    (global-name "com.apple.trustd")
+    (global-name "com.apple.trustd.agent")
+    (global-name "com.apple.mDNSResponder")
+    (global-name "com.apple.mDNSResponderHelper")
+    (global-name "com.apple.SystemConfiguration.DNSConfiguration")
+    (global-name "com.apple.SystemConfiguration.configd")
 )
 
-;; deny all inbound network traffic EXCEPT on debugger port
-(deny network-inbound)
+;; AF_SYSTEM socket used by the network stack (from baseProfile.ts)
+(allow system-socket
+    (require-all
+        (socket-domain AF_SYSTEM)
+        (socket-protocol 2)
+    )
+)
+
+;; enable terminal access required by ink
+;; fixes setRawMode EPERM failure (at node:tty:81:24)
+(allow file-ioctl (regex #"^/dev/tty.*"))
+
+;; allow inbound network traffic on debugger port
 (allow network-inbound (local ip "localhost:9229"))
 
+;; allow binding local ports (dev/test servers, OAuth localhost listeners)
+(allow network-bind (local ip "*:*"))
+
 ;; deny all outbound network traffic EXCEPT through proxy on localhost:8877
 ;; set `GEMINI_SANDBOX_PROXY_COMMAND=<command>` to run proxy alongside sandbox
 ;; proxy must listen on :::8877 (see docs/examples/proxy-script.md)
-(deny network-outbound)
 (allow network-outbound (remote tcp "localhost:8877"))
-
-(allow network-bind (local ip "*:*"))

package/bundle/{start-SV5TPWOH.js → start-3FPYJBRX.js}

@@ -2,12 +2,12 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   startCommand,
   startServer
-} from "./chunk-PTIIH33O.js";
-import "./chunk-THWSXFSH.js";
-import "./chunk-P4IYYRKC.js";
-import "./chunk-UB6EWNWI.js";
-import "./chunk-OFOMMM4A.js";
-import "./chunk-BG2B4WV5.js";
+} from "./chunk-7VUO7T2C.js";
+import "./chunk-UJVAPQ7V.js";
+import "./chunk-LUM47MYE.js";
+import "./chunk-BRZT2CQU.js";
+import "./chunk-BX6DTJOD.js";
+import "./chunk-5RDOS7UZ.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";

package/bundle/{start-YON746V5.js → start-5G2UDZZ6.js}

@@ -2,12 +2,12 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   startCommand,
   startServer
-} from "./chunk-ILANJJAD.js";
-import "./chunk-RHQ5RWRW.js";
-import "./chunk-SZMWXEEI.js";
-import "./chunk-F7WLNK6O.js";
-import "./chunk-JB342GRK.js";
-import "./chunk-IQDAUFS5.js";
+} from "./chunk-UEI42N7R.js";
+import "./chunk-4OVORMGE.js";
+import "./chunk-IODN6H35.js";
+import "./chunk-BDSSP5BZ.js";
+import "./chunk-PKFZO3SN.js";
+import "./chunk-27C6XFMY.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";

package/bundle/{start-K5QQG7K4.js → start-XMJ23QZN.js}

@@ -2,12 +2,12 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   startCommand,
   startServer
-} from "./chunk-6Z2GQGII.js";
-import "./chunk-24R3JJRB.js";
-import "./chunk-ZINRZXUN.js";
-import "./chunk-ZLL3UXFN.js";
-import "./chunk-Y5NBDPUP.js";
-import "./chunk-7LQRUKPT.js";
+} from "./chunk-HVYOZEAP.js";
+import "./chunk-SLQKIE73.js";
+import "./chunk-6AD4A2WF.js";
+import "./chunk-GHVD6PXK.js";
+import "./chunk-PVCJCQWY.js";
+import "./chunk-HF533LET.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@google/gemini-cli",
-  "version": "0.52.0",
+  "version": "0.53.0-preview.0",
   "description": "Gemini CLI",
   "license": "Apache-2.0",
   "repository": {