@sagentlab/navarch-runtime 0.1.37 → 0.1.38

package/README.md

@@ -364,8 +364,10 @@ as an explicit read-only mount.
   On macOS the profile also grants read access to `/Library/Developer` and
   `/Applications` (Xcode and CoreSimulator, which `xcrun simctl` and
   `xcodebuild` load) and write access to `~/Library/Developer` (simulator
-  devices and DerivedData); the Claude hook gets the same write root. Without
-  these, iOS builds and simulator tests fail under the sandbox with
+  devices and DerivedData) and `~/Library/Caches/org.swift.swiftpm` (SwiftPM
+  repository, artifact, metadata, and manifest caches); the Claude hook gets
+  the same write roots. Without these, iOS builds and simulator tests fail
+  under the sandbox with
   `access to /Library/Developer/PrivateFrameworks/CoreSimulator.framework is blocked`.
 - **Gemini:** the runtime uses Gemini CLI's native sandbox with only the
   current worktree, shared gitdir, session `gh` config, and approved extra

package/dist/worktree-guard.cjs

@@ -79,7 +79,7 @@ async function prepareWorktreeGuard(options) {
     const allowedRoots = [
         options.worktreePath,
         options.repositoryPath,
-        // Xcode's per-user simulator/DerivedData state; see macosDeveloperWriteRoots.
+        // Xcode and SwiftPM's per-user build state; see macosDeveloperWriteRoots.
         ...macosDeveloperWriteRoots().filter((root) => !isPathInside(node_path_1.default.resolve(root), workspaceRoot)),
         ...(options.extraRoots ?? []),
     ];
@@ -143,17 +143,23 @@ function codexToolReadRoots(env = process.env, platform = process.platform) {
  */
 const MACOS_TOOLCHAIN_READ_ROOTS = ["/Library/Developer", "/Applications"];
 /**
- * Per-user macOS developer state that Xcode writes during a build or test
- * run: simulator devices under `~/Library/Developer/CoreSimulator` and
- * DerivedData under `~/Library/Developer/Xcode`. Shared between sessions on
- * one machine (that is inherent to Xcode), but nothing under it is Navarch
- * session state or credentials. Empty off macOS.
+ * Per-user macOS build state that Xcode and SwiftPM write during a build or
+ * test run: simulator devices and DerivedData under `~/Library/Developer`,
+ * plus SwiftPM's repository, artifact, package-metadata, and manifest caches
+ * under `~/Library/Caches/org.swift.swiftpm`. Shared between sessions on one
+ * machine (that is inherent to these tools), but nothing under these cache
+ * roots is Navarch session state or credentials. Deliberately do not grant
+ * `~/Library/org.swift.swiftpm` or `~/.swiftpm`, which may contain registry or
+ * security configuration. Empty off macOS.
  */
 function macosDeveloperWriteRoots(env = process.env, platform = process.platform) {
     if (platform !== "darwin")
         return [];
     const homeDir = env.HOME?.trim() || node_os_1.default.homedir();
-    return [node_path_1.default.join(homeDir, "Library", "Developer")];
+    return [
+        node_path_1.default.join(homeDir, "Library", "Developer"),
+        node_path_1.default.join(homeDir, "Library", "Caches", "org.swift.swiftpm"),
+    ];
 }
 /**
  * Isolated gh configuration root for one coding-agent session.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sagentlab/navarch-runtime",
-  "version": "0.1.37",
+  "version": "0.1.38",
   "description": "Navarch machine-side session manager: claims delivery tasks and runs them through Claude Code, Codex, Gemini, or OpenCode.",
   "type": "commonjs",
   "license": "MIT",