Search results for

“Xcode”

93,867 results found

Post

Replies

Boosts

Views

Activity

Reply to How to manually/offline install Claude Agent for Xcode?
@shenbj Thanks for this great post! I think the Claude Agent for Xcode requires an active internet connection to communicate with Anthropic's servers and is not designed for native offline operations at this time. However I think you should file an enhancement request for this. If you'd like us to consider adding the necessary functionality, please file an enhancement request using Feedback Assistant. Once you file the request, please post the FB number here. If you're not familiar with how to file enhancement requests, take a look at Bug Reporting: How and Why? Resources: https://developer.apple.com/documentation/Xcode/setting-up-coding-intelligence Albert Pascual
  Worldwide Developer Relations.
1w
How to write a persistent token to unlock FileVault with a smart card?
I want to write a CryptoTokenKit plugin to be used to unlock FileVault. I understand macOS already provides such a plugin for a PIV smart card https://support.apple.com/en-mz/guide/deployment/dep806850525/web Perfect. I want to do the same for a non-PIV smart card. So I have to provide my own CryptoTokenKit plugin. I already implemented a smart card plugin TKSmartCardToken. I can use it so pair the user with the smart card and use the smart card to login (except for the 1st login when the disk is still encrypted). As far as I understand for preboot I need to provide a persistent token https://support.apple.com/en-mz/guide/deployment/dep4e2622249/web From Xcode I created an empty application, and added a Persistent Token Extension (instead of a Smart Card Token Extension). After built I can see my new token in the output of pluginkit -m -p com.apple.ctk-tokens. My questions: how and when is my plugin loaded? I added calls to os_log_error() in all the empty methods created by the Xcode templat
2
0
73
1w
Reply to Unable to download iOS simulator runtime 26.x on Xcode
@garysmckiernan You are the MAN. I have been stuck on iOS 18.2 sim for over 6 months. Tried everything including upgrading to Tahoe, and next step would have been reinstalling macOS. How did you know to delete the Xcode defaults preferences? How were you able to diagnose and come up with this fix? I couldn't figure out how to diagnose it or locations to reset to try and fix it.
1w
How to manually/offline install Claude Agent for Xcode?
Hi everyone, I'm working in a strictly offline (intranet) environment and cannot use the standard online installation process to download and install the Claude Agent for Xcode. What I've tried: I manually copied the Agent binary/folder from an online machine to the following path: ~/Library/Developer/Xcode/CodingAssistant/Agents/Versions/26.3/claude The Issue: Even though the files are in the correct directory, Xcode fails to recognize the agent. It doesn't appear in the settings, and the Coding Assistant remains unavailable. Questions: Is there a specific metadata file (e.g., a .plist or .json index) that needs to be updated for Xcode to see the manually added agent? Are there any code signing or quarantine issues (like xattr) that need to be addressed when moving the agent between machines? Does anyone know if there are other dependencies or cache folders (besides ~/Library/Developer/Xcode/CodingAssistant/) that need to be synchronized? Environment: macOS: 26.3
1
0
54
1w
Reply to sysextd: "no policy, cannot allow apps outside /Applications" - NEFilterDataProvider system extension on macOS 26
Update: After inspecting all provisioning profiles on our system, we found that: Profiles generated for development and Developer ID distribution contain content-filter-provider Profiles generated via Direct Distribution contain only packet-tunnel-provider-systemextension and app-proxy-provider-systemextension No profile contains content-filter-provider-systemextension When we set content-filter-provider-systemextension in the entitlements file (matching Little Snitch's configuration), Xcode rejects all available profiles with a mismatch error. This means the Developer Portal does not appear to generate provisioning profiles with content-filter-provider-systemextension for content filter system extensions. Is this a portal issue, or is there a different provisioning mechanism required?
1w
Reply to Explicit dynamic loading of a framework in macOS - recommended approach?
I want to be clear about terminology here: A load-time import is one that’s statically declared in the binary via the LC_LOAD_DYLIB load command. A run-time import is one that you do from code, using dlopen or some API layered on top of that. Beyond that, I’m going to use the terms from an An Apple Library Primer, and you should read before continuing. [quote='820251021, vd02, /thread/820251, /profile/vd02'] What is the recommended approach on macOS for this kind of explicit dynamic loading … ? [/quote] My recommendation is that you not do this. Apple platforms generally prefer load-time imports because it enables optimisations in the dynamic linker. Specifically, the dynamic linker can build and cache a closure for an app, reusing that closure the next time the app launches. Note We discussed this in detail in WWDC 2017 Session 413 App Startup Time: Past, Present, and Future. Sadly, it’s no longer available from Apple, but the core info is still available from third-party sources. I don’t think this closure
Topic: App & System Services SubTopic: Core OS Tags:
1w
sysextd: "no policy, cannot allow apps outside /Applications" - NEFilterDataProvider system extension on macOS 26
I'm developing a macOS security tool using NEFilterDataProvider as a system extension. On macOS 26 beta (25E241), sysextd consistently rejects my extension with: sysextd: no policy, cannot allow apps outside /Applications Configuration: App installed in /Applications/ Signed with Developer ID Application (693DSH8GN5) Entitlement: com.apple.developer.networking.networkextension = content-filter-provider com.apple.developer.system-extension.install = true Developer Mode enabled on test machine Comparison with Little Snitch: Little Snitch runs correctly on the same machine. Key differences I found: Little Snitch uses content-filter-provider-systemextension instead of content-filter-provider Little Snitch has com.apple.security.app-sandbox = false Both signed with Developer ID Application When I switch to content-filter-provider-systemextension, Xcode rejects every provisioning profile because none match that entitlement value, and the Developer Portal doesn't expose fine-grained control over the Network
2
0
55
1w
Kernel panic when using fclonefileat from ES
Hi, I am developing instant snapshot backup solution for macOS using Endpoint Security. We have stumbled upon a Kernel Panic when using fclonefileat API. We are catching a kernel panic on customer machines when attempting to clone the file during ES sync callback: panic(cpu 0 caller 0xfffffe002c495508): apfs_io_lock_exclusive : Recursive exclusive lock attempt @fs_utils.c:435 I have symbolized the backtrace to know it is related to clone operation with the following backtrace: apfs_io_lock_exclusive apfs_clone_internal apfs_vnop_clonefile I made a minimal repro that boils down to the following operations: apfs_crash_stress - launch thread to do rsrc writes static void *rsrc_write_worker(void *arg) { int id = (int)(long)arg; char buf[8192]; long n = 0; fill_pattern(buf, sizeof(buf), 'W' + id); while (n < ITERATION_LIMIT) { int file_idx = n % NUM_SOURCE_FILES; int fd = open(g_src_rsrc[file_idx], O_WRONLY | O_CREAT, 0644); if (fd >= 0) { off_t off = ((n * 4096) % RSRC_DATA_SIZE); pwrite(fd, buf, sizeof(buf
3
0
99
1w
Rejected a couple of time for 5.1.1/5.1.2 - AI consent screen not seen by reviewers despite being first screen on launch
I've been rejected a couple of times for Guidelines 5.1.1(i) and 5.1.2(i) regarding third-party AI data sharing consent. Each time, the reviewer states they cannot see the consent prompt, even though it is the first screen displayed on every app launch. My app (GymFusion) uses Anthropic's Claude AI for features like meal scanning, body composition analysis, and workout coaching. Here is exactly what I've implemented: IN-APP CONSENT (embedded in view hierarchy, not a sheet/popup): In my RootView.swift, the consent is a conditional view that blocks the entire app: } else if !consentManager.hasConsented && !consentManager.hasSeenConsent { AIConsentView() } else if auth.isAuthenticated { MainTabView() } The hasSeenConsent flag is reset to false on every app launch in the App's init(), so the consent screen appears on every launch until the user accepts: init() { UserDefaults.standard.set(false, forKey: user_ai_consent_seen) AIConsentManager.shared.hasSeenConsent = false FirebaseApp.configure() } THE CONSE
4
0
182
1w
App Store Connect API returning 403 from perfPowerMetrics using Admin / Dev role keys
I'm unexpectedly getting 403 status codes when calling the perfPowerMetrics APIs for any arbitrary app on my account. This worked last week, it is not working now. I have since revoked keys and recreated admin and developer keys--no luck, still getting 403. I've been working with the analytics APIs lately so I don't know exactly when the power and performance API stopped working. I've narrowed it down to something related to the token scope. When I have a scope on this endpoint of GET /v1/apps/1234567890/perfPowerMetrics it is rejected -- but the docs say I can create a token and reduce its scope like this. When I remove the scope and let the token be unbounded, the API call returns a valid response. FB22313063 - App Store Connect API: Fetching xcode metrics with an admin key generated token results in a 403 unexpectedly
1
0
76
1w
The Xcode 26.3 project build failed
0 0x1001bd52c __assert_rtn + 252 1 0x100132054 void std::__1::__introsort(ld::Atom const**, ld::Atom const**, ld::AliasAddressOrderer&, std::__1::iterator_traits::difference_type, bool) + 0 2 0x1001319a4 ld::LayoutLinkedImage::assignAtomOffsetsInSection(ld::SectionLayout&, unsigned int, bool) + 680 3 0x100136724 void dispatchForEach(std::__1::span, unsigned long, ld::LayoutLinkedImage::sortAtomsWithinSections()::$_0)::'lambda'(unsigned long)::operator()(unsigned long) const + 7852 4 0x19dca8aec _dispatch_client_callout2 + 16 5 0x19dca37f8 _dispatch_apply_invoke3 + 336 6 0x19dca8ad4 _dispatch_client_callout + 16 7 0x19dc91a60 _dispatch_once_callout + 32 8 0x19dca2938 _dispatch_apply_invoke + 252 9 0x19dca8ad4 _dispatch_client_callout + 16 10 0x19dcc59dc _dispatch_channel_invoke.cold.5 + 32 11 0x19dca113c _dispatch_root_queue_drain + 736 12 0x19dca1784 _dispatch_worker_thread2 + 180 13 0x19de47e10 _pthread_wqthread + 232 ld snapshot written at /tmp/****app.debug.dylib-2026-03-24-092748.ld-snapshot ld: A
0
0
81
1w
Reply to How to manually/offline install Claude Agent for Xcode?
@shenbj Thanks for this great post! I think the Claude Agent for Xcode requires an active internet connection to communicate with Anthropic's servers and is not designed for native offline operations at this time. However I think you should file an enhancement request for this. If you'd like us to consider adding the necessary functionality, please file an enhancement request using Feedback Assistant. Once you file the request, please post the FB number here. If you're not familiar with how to file enhancement requests, take a look at Bug Reporting: How and Why? Resources: https://developer.apple.com/documentation/Xcode/setting-up-coding-intelligence Albert Pascual
  Worldwide Developer Relations.
Replies
Boosts
Views
Activity
1w
How to write a persistent token to unlock FileVault with a smart card?
I want to write a CryptoTokenKit plugin to be used to unlock FileVault. I understand macOS already provides such a plugin for a PIV smart card https://support.apple.com/en-mz/guide/deployment/dep806850525/web Perfect. I want to do the same for a non-PIV smart card. So I have to provide my own CryptoTokenKit plugin. I already implemented a smart card plugin TKSmartCardToken. I can use it so pair the user with the smart card and use the smart card to login (except for the 1st login when the disk is still encrypted). As far as I understand for preboot I need to provide a persistent token https://support.apple.com/en-mz/guide/deployment/dep4e2622249/web From Xcode I created an empty application, and added a Persistent Token Extension (instead of a Smart Card Token Extension). After built I can see my new token in the output of pluginkit -m -p com.apple.ctk-tokens. My questions: how and when is my plugin loaded? I added calls to os_log_error() in all the empty methods created by the Xcode templat
Replies
2
Boosts
0
Views
73
Activity
1w
Reply to Unable to download iOS simulator runtime 26.x on Xcode
@garysmckiernan You are the MAN. I have been stuck on iOS 18.2 sim for over 6 months. Tried everything including upgrading to Tahoe, and next step would have been reinstalling macOS. How did you know to delete the Xcode defaults preferences? How were you able to diagnose and come up with this fix? I couldn't figure out how to diagnose it or locations to reset to try and fix it.
Replies
Boosts
Views
Activity
1w
Reply to swift: Calling "/usr/bin/defaults" returns no data
Strange: In my test application I removed Apple Sandbox and now it works here. Using the same settings it does not work in my real app. I guess there is a wrong Xcode setting for my target. Need to investigate…
Topic: App & System Services SubTopic: General Tags:
Replies
Boosts
Views
Activity
1w
How to manually/offline install Claude Agent for Xcode?
Hi everyone, I'm working in a strictly offline (intranet) environment and cannot use the standard online installation process to download and install the Claude Agent for Xcode. What I've tried: I manually copied the Agent binary/folder from an online machine to the following path: ~/Library/Developer/Xcode/CodingAssistant/Agents/Versions/26.3/claude The Issue: Even though the files are in the correct directory, Xcode fails to recognize the agent. It doesn't appear in the settings, and the Coding Assistant remains unavailable. Questions: Is there a specific metadata file (e.g., a .plist or .json index) that needs to be updated for Xcode to see the manually added agent? Are there any code signing or quarantine issues (like xattr) that need to be addressed when moving the agent between machines? Does anyone know if there are other dependencies or cache folders (besides ~/Library/Developer/Xcode/CodingAssistant/) that need to be synchronized? Environment: macOS: 26.3
Replies
1
Boosts
0
Views
54
Activity
1w
Reply to .xcstrings catalog creates a massive git diff upon the slightest change
actually i would like to delete this post. turns out xcode always generates the file with the column before the : but a script of mine that pulls translations regenerates the file without the spaces before the : and then when i make a change in xcode, this dif happens. Im sorry for the confusion.
Replies
Boosts
Views
Activity
1w
Reply to sysextd: "no policy, cannot allow apps outside /Applications" - NEFilterDataProvider system extension on macOS 26
Update: After inspecting all provisioning profiles on our system, we found that: Profiles generated for development and Developer ID distribution contain content-filter-provider Profiles generated via Direct Distribution contain only packet-tunnel-provider-systemextension and app-proxy-provider-systemextension No profile contains content-filter-provider-systemextension When we set content-filter-provider-systemextension in the entitlements file (matching Little Snitch's configuration), Xcode rejects all available profiles with a mismatch error. This means the Developer Portal does not appear to generate provisioning profiles with content-filter-provider-systemextension for content filter system extensions. Is this a portal issue, or is there a different provisioning mechanism required?
Replies
Boosts
Views
Activity
1w
Reply to Explicit dynamic loading of a framework in macOS - recommended approach?
I want to be clear about terminology here: A load-time import is one that’s statically declared in the binary via the LC_LOAD_DYLIB load command. A run-time import is one that you do from code, using dlopen or some API layered on top of that. Beyond that, I’m going to use the terms from an An Apple Library Primer, and you should read before continuing. [quote='820251021, vd02, /thread/820251, /profile/vd02'] What is the recommended approach on macOS for this kind of explicit dynamic loading … ? [/quote] My recommendation is that you not do this. Apple platforms generally prefer load-time imports because it enables optimisations in the dynamic linker. Specifically, the dynamic linker can build and cache a closure for an app, reusing that closure the next time the app launches. Note We discussed this in detail in WWDC 2017 Session 413 App Startup Time: Past, Present, and Future. Sadly, it’s no longer available from Apple, but the core info is still available from third-party sources. I don’t think this closure
Topic: App & System Services SubTopic: Core OS Tags:
Replies
Boosts
Views
Activity
1w
Reply to Grant Access - Register GitLab Application - 504 Client Timeout
Dear DTS Engineer Your suggestion worked on our gitlab proxy settings, so Xcode cloud is working again. Thank You
Replies
Boosts
Views
Activity
1w
sysextd: "no policy, cannot allow apps outside /Applications" - NEFilterDataProvider system extension on macOS 26
I'm developing a macOS security tool using NEFilterDataProvider as a system extension. On macOS 26 beta (25E241), sysextd consistently rejects my extension with: sysextd: no policy, cannot allow apps outside /Applications Configuration: App installed in /Applications/ Signed with Developer ID Application (693DSH8GN5) Entitlement: com.apple.developer.networking.networkextension = content-filter-provider com.apple.developer.system-extension.install = true Developer Mode enabled on test machine Comparison with Little Snitch: Little Snitch runs correctly on the same machine. Key differences I found: Little Snitch uses content-filter-provider-systemextension instead of content-filter-provider Little Snitch has com.apple.security.app-sandbox = false Both signed with Developer ID Application When I switch to content-filter-provider-systemextension, Xcode rejects every provisioning profile because none match that entitlement value, and the Developer Portal doesn't expose fine-grained control over the Network
Replies
2
Boosts
0
Views
55
Activity
1w
Reply to Inquiry regarding Local Push Connectivity Entitlement
Hi Quinn, Thank you for your excellent advice! I followed your guidance, specifically by enabling Automatically manage signing in Xcode's Signing & Capabilities settings and conducting an overall review of my Xcode configuration. I'm pleased to report that I've now successfully built the application. Your assistance was greatly appreciated.
Topic: App & System Services SubTopic: General Tags:
Replies
Boosts
Views
Activity
1w
Kernel panic when using fclonefileat from ES
Hi, I am developing instant snapshot backup solution for macOS using Endpoint Security. We have stumbled upon a Kernel Panic when using fclonefileat API. We are catching a kernel panic on customer machines when attempting to clone the file during ES sync callback: panic(cpu 0 caller 0xfffffe002c495508): apfs_io_lock_exclusive : Recursive exclusive lock attempt @fs_utils.c:435 I have symbolized the backtrace to know it is related to clone operation with the following backtrace: apfs_io_lock_exclusive apfs_clone_internal apfs_vnop_clonefile I made a minimal repro that boils down to the following operations: apfs_crash_stress - launch thread to do rsrc writes static void *rsrc_write_worker(void *arg) { int id = (int)(long)arg; char buf[8192]; long n = 0; fill_pattern(buf, sizeof(buf), 'W' + id); while (n < ITERATION_LIMIT) { int file_idx = n % NUM_SOURCE_FILES; int fd = open(g_src_rsrc[file_idx], O_WRONLY | O_CREAT, 0644); if (fd >= 0) { off_t off = ((n * 4096) % RSRC_DATA_SIZE); pwrite(fd, buf, sizeof(buf
Replies
3
Boosts
0
Views
99
Activity
1w
Rejected a couple of time for 5.1.1/5.1.2 - AI consent screen not seen by reviewers despite being first screen on launch
I've been rejected a couple of times for Guidelines 5.1.1(i) and 5.1.2(i) regarding third-party AI data sharing consent. Each time, the reviewer states they cannot see the consent prompt, even though it is the first screen displayed on every app launch. My app (GymFusion) uses Anthropic's Claude AI for features like meal scanning, body composition analysis, and workout coaching. Here is exactly what I've implemented: IN-APP CONSENT (embedded in view hierarchy, not a sheet/popup): In my RootView.swift, the consent is a conditional view that blocks the entire app: } else if !consentManager.hasConsented && !consentManager.hasSeenConsent { AIConsentView() } else if auth.isAuthenticated { MainTabView() } The hasSeenConsent flag is reset to false on every app launch in the App's init(), so the consent screen appears on every launch until the user accepts: init() { UserDefaults.standard.set(false, forKey: user_ai_consent_seen) AIConsentManager.shared.hasSeenConsent = false FirebaseApp.configure() } THE CONSE
Replies
4
Boosts
0
Views
182
Activity
1w
App Store Connect API returning 403 from perfPowerMetrics using Admin / Dev role keys
I'm unexpectedly getting 403 status codes when calling the perfPowerMetrics APIs for any arbitrary app on my account. This worked last week, it is not working now. I have since revoked keys and recreated admin and developer keys--no luck, still getting 403. I've been working with the analytics APIs lately so I don't know exactly when the power and performance API stopped working. I've narrowed it down to something related to the token scope. When I have a scope on this endpoint of GET /v1/apps/1234567890/perfPowerMetrics it is rejected -- but the docs say I can create a token and reduce its scope like this. When I remove the scope and let the token be unbounded, the API call returns a valid response. FB22313063 - App Store Connect API: Fetching xcode metrics with an admin key generated token results in a 403 unexpectedly
Replies
1
Boosts
0
Views
76
Activity
1w
The Xcode 26.3 project build failed
0 0x1001bd52c __assert_rtn + 252 1 0x100132054 void std::__1::__introsort(ld::Atom const**, ld::Atom const**, ld::AliasAddressOrderer&, std::__1::iterator_traits::difference_type, bool) + 0 2 0x1001319a4 ld::LayoutLinkedImage::assignAtomOffsetsInSection(ld::SectionLayout&, unsigned int, bool) + 680 3 0x100136724 void dispatchForEach(std::__1::span, unsigned long, ld::LayoutLinkedImage::sortAtomsWithinSections()::$_0)::'lambda'(unsigned long)::operator()(unsigned long) const + 7852 4 0x19dca8aec _dispatch_client_callout2 + 16 5 0x19dca37f8 _dispatch_apply_invoke3 + 336 6 0x19dca8ad4 _dispatch_client_callout + 16 7 0x19dc91a60 _dispatch_once_callout + 32 8 0x19dca2938 _dispatch_apply_invoke + 252 9 0x19dca8ad4 _dispatch_client_callout + 16 10 0x19dcc59dc _dispatch_channel_invoke.cold.5 + 32 11 0x19dca113c _dispatch_root_queue_drain + 736 12 0x19dca1784 _dispatch_worker_thread2 + 180 13 0x19de47e10 _pthread_wqthread + 232 ld snapshot written at /tmp/****app.debug.dylib-2026-03-24-092748.ld-snapshot ld: A
Replies
0
Boosts
0
Views
81
Activity
1w