Imported from DerrickLegacy/kenvmart_oxen (.kiro/steering/skills/write-swift/SKILL.md). Install upstream with npx skills add DerrickLegacy/kenvmart_oxen --skill write-swift. Copyright stays with the author.

Write Swift

How to write Swift the way the language wants to be written, current through Swift 6.4.

Toolchain baseline: Swift 6.3 (current release as of August 2026). Everything here compiles on 6.3 unless marked ⚠, which flags unreleased Swift 6.4 features. Concurrency guidance assumes the Swift 6.2 model — if the project is on 6.1 or earlier, §3's rules about async and @concurrent do not apply.

The through-line: Swift is a progressive-disclosure language. Start with the simplest, most static, most single-threaded thing that works, and buy dynamism — concurrency, reference semantics, existentials, unsafe pointers — only where you can point at the reason. Every rule below is an application of that.

Model this hierarchy of defaults. Move down a level only with a reason you can state:

1. Model data with value types

Value types are the default in Swift, not a special case.

• Default to struct and enum. Use class only for identity, shared mutable state, inheritance, or resource lifetime. A window, a database connection, an entity stored in a rendering engine — those have identity. A Point, a Drink, a Material does not.
• let by default; var only when you mutate. This is the same discipline as some before any and value before reference: start narrow, widen with cause.
• A struct with a mutable reference-type property is neither a value nor a reference. Copies share the object; mutations leak across copies. Either keep the referenced type immutable, expose only computed properties that forward to it, or make it a private stored property behind copy-on-write.
• Copy-on-write is how you get out-of-line storage and value semantics. Wrap a final class in a struct and check isKnownUniquelyReferenced(&storage) before mutating; copy first if it isn't. This is exactly how Array, String, and Dictionary work.
• Enums are the tool for "a fixed set of things" and for mutually exclusive state. Replacing a pile of optional stored properties (isSharing, selectedRows, shareTarget) with one enum State makes invalid combinations unrepresentable and makes state change atomic instead of a sequence of property writes you can forget to finish.
• Composing values yields a value. A struct whose stored properties are all value types has value semantics for free — which is what makes undo, diffing, and state restoration a single code path instead of one per property.

struct Material {                       // value semantics preserved
  var roughness: Double
  private var _texture: Texture         // a class

  var color: Color {
    get { _texture.color }
    set {
      if !isKnownUniquelyReferenced(&_texture) { _texture = Texture(copying: _texture) }
      _texture.color = newValue
    }
  }
}

Noncopyable types (~Copyable) express unique ownership: a file descriptor, a bank transfer, an open resource. Suppressing the copy turns "you must not run this twice" from an assertion into a compile error, and makes deinit on a struct meaningful. Mark the finishing method consuming so the compiler proves it's the last use. Parameter ownership becomes explicit: borrowing (read-only, the default), consuming (takes it away), inout/mutating (temporary write access).

2. Errors and optionals — make the failure paths visible

Swift error handling rests on three points: sources of error are marked so they can't surprise you; errors carry enough context to act on; and recoverable errors are different from programmer mistakes.

• Recoverable → throw. Programmer mistake → precondition/fatalError. A failed network call keeps the program running. An out-of-bounds index means the code is wrong and must halt before the bug becomes a security issue.
• Enums with associated values make the best error types. case duplicateFriend(String) beats case duplicateFriend — the context is the whole point.
• guard for error conditions, because it forces the exit path. if let for the ordinary unwrap.
• Typed throws (throws(MyError)) are for internal functions, error-forwarding generic code, and constrained environments where boxing any Error is too costly. For public API, untyped throws preserves your freedom to change the error type later. Note the unification: throws is throws(any Error), and non-throwing is throws(Never) — which is what lets map abstract over both.
• Force-unwrap only where you can state the invariant, and prefer a failing #require/precondition with a message over a bare !.

3. Concurrency: stay single-threaded until profiling says otherwise

This is the section agents get wrong most often, because the model changed in Swift 6.2.

Start every app entirely on the main thread. Single-threaded code goes a long way, and most apps never need to leave it.

The progression, in order. Do not skip steps.

1. Single-threaded on the main actor. No concurrency at all. Fine for most apps.
2. async/await to hide latency (network, disk). Still no concurrency of your own — SDK APIs like URLSession.data(from:) offload on your behalf.
3. @concurrent to move your expensive work off the main thread — only after Instruments shows a hang.
4. actor to move state off the main actor — only when too much main-actor state is forcing tasks to hop back constantly.

Turn on the right build settings first. Enable Approachable Concurrency in every project. For app modules and UI-facing modules, also set Default Actor Isolation to MainActor — it's the default for new app projects in Xcode 26, and it deletes most of your @MainActor annotations. In a package: swiftSettings: [.defaultIsolation(MainActor.self)]. Do not set main-actor-by-default for a general-purpose library — libraries should ship nonisolated APIs and let clients decide where work runs.

The rule that changed

In Swift 6.2, marking a function async does not move it off the current actor. It runs where it was called from. This is what makes "the most natural code to write" data-race free by default.

• @concurrent — always switches to the concurrent thread pool. Use it on your CPU-heavy work.
• nonisolated — runs wherever it's called from. This is the right default for library APIs, because the caller decides. nonisolated on a type makes all its members nonisolated (Swift 6.1+).
• Neither one — stays on the caller's actor.

nonisolated struct PhotoProcessor {          // decoupled from the main actor
  @concurrent                                // guaranteed to run in the background
  func process(_ data: Data) async -> ProcessedPhoto {
    async let sticker = extractSticker(data)  // two independent jobs, in parallel
    async let colors  = extractColors(data)
    return await ProcessedPhoto(sticker: sticker, colors: colors)
  }
}

• Profile before you offload. Use Instruments (Time Profiler, hangs). If the code can be made faster without concurrency, always do that first. Concurrency has real cost — task allocation, scheduling, and reasoning.
• Don't spawn a task for trivial work. A child task to read a UserDefaults value costs more than it saves.
• One task per end-to-end operation. Work that must happen in order goes in one task; independent operations get separate tasks so the runtime can interleave them.
• await is a suspension point, and it breaks atomicity. State can change while you're suspended, and you may resume on a different thread. Re-check assumptions after every await. Never hold a lock across one. Never rely on thread-local storage across one.

Actor reentrancy

Actors guarantee mutual exclusion, not transactions. Between two awaits on the same actor, other work runs.

• Mutate actor state in synchronous methods. Synchronous code on an actor runs to completion uninterrupted — that's your transaction boundary.
• Keep async actor methods thin, composed of synchronous transactional operations, and leave the actor in a consistent state at every await.
• The classic bug: check cache → await download → write cache. Two tasks both miss, both download, the second clobbers the first. Re-check after the await, or dedupe the in-flight work.
• Actors are not FIFO. They run highest-priority work first, precisely to avoid priority inversion. If you need ordering, use a task (which runs start to finish) or an AsyncStream, not an actor.

4. Sendable and sharing data

Sendable marks a type safe to share across isolation domains. The compiler checks it at every task and actor boundary.

• Value types are Sendable when their storage is — inferred automatically for non-public types. Public types never get inferred sendability: marking a public type Sendable is a promise to your clients, so Swift makes you write it.
• Actors and @MainActor classes are implicitly Sendable, because their state is isolated.
• Most model classes should be neither @MainActor nor Sendable. Keep them non-Sendable on purpose — it prevents half the model being mutated on the main thread while the other half is mutated in the background. If they need to leave the main actor, make them nonisolated, not Sendable.
• You can still send a non-Sendable object between domains as long as the sender stops using it. Make all your mutations before handing it off; touching it afterward is the error.
• Closures capture state too. Only mark a function type @Sendable if it genuinely crosses domains.
• @unchecked Sendable is a promise the compiler can't check. Reserve it for types with real internal synchronization (a Mutex, a lock). Same for nonisolated(unsafe) on a global — last resort, not a warning silencer.

When you hit a data-race error, work down this list:

1. Don't share it. Move the shared object into a local so each concurrent job gets its own instance. (This is the fix for the overwhelming majority of real errors.)
2. Make it a Sendable value type, so "sharing" is really copying.
3. Isolate it to an actor — the main actor, or your own.
4. Only then reach for Mutex/Atomic from the Synchronization module (store them in let properties), or @unchecked Sendable.

Global and static variables are the most common source of errors. In order of preference: make it a let; put it on @MainActor; wrap it in a Mutex; nonisolated(unsafe). Note globals in Swift are initialized lazily and atomically — unlike C.

Bridging old callback APIs: annotate delegate protocols with @MainActor if you own them. If you don't, mark the method nonisolated and use MainActor.assumeIsolated { } — it asserts rather than hopping, so it traps loudly instead of racing silently. @preconcurrency on the conformance is the shorthand for the same thing. Use @preconcurrency import to temporarily silence sendability warnings from a module that hasn't migrated; the warnings come back — correctly — once it does.

5. Structured concurrency

Always prefer structured tasks.

Structured tasks (async let, task groups) are scoped like local variables: they can't outlive the block, they're awaited automatically, and they inherit cancellation, priority, and task-local values through the task tree. Unstructured tasks (Task { }, Task.detached) give you none of that automatically.

• async let for a fixed, statically known number of concurrent children.
• withTaskGroup when the number is dynamic. Task groups conform to AsyncSequence — iterate results as they land. Use withDiscardingTaskGroup when children return nothing: it frees each child's resources immediately and cancels siblings on the first error.
• Task { } only when the work's lifetime doesn't fit a scope — reacting to a delegate callback, a button tap, a view appearing. It inherits actor isolation and priority; you must manage cancellation yourself.
• Task.detached almost never. It inherits nothing — not isolation, not priority, not task-locals. If you need a detached root, put a task group inside it rather than detaching repeatedly.

Cancellation is cooperative. Cancelling sets a flag; it stops nothing. Check Task.isCancelled or try Task.checkCancellation() before starting expensive work, and in synchronous helpers too. For work that's suspended rather than running (an AsyncSequence's next()), use withTaskCancellationHandler — and remember the handler runs immediately and concurrently with the body, so the state it touches needs real synchronization (an atomic or a lock, not an actor — you can't guarantee ordering on an actor).

Bound your concurrency. Don't fan out one child per item over an unbounded list. Start N children, then add a new one each time one finishes.

Task-local values (@TaskLocal) propagate context — a request ID, a trace span — down the task tree without threading a parameter through every signature. Make them optional so unbound reads have a sensible default.

Bridging callbacks: withCheckedContinuation / withCheckedThrowingContinuation. The contract is resume exactly once on every path — never resuming hangs the caller forever; resuming twice is a fatal error. For delegate APIs that fire later, store the continuation and nil it out when you resume. (Swift 6.4 — unreleased — adds a Continuation type that checks single-resumption at compile time.)

AsyncSequence: iterate with for await / for try await. Adapt an existing handler- or delegate-based API with AsyncStream / AsyncThrowingStream — construct the source inside the closure, yield from the handler, and clean up in onTermination.

6. Concurrency in SwiftUI

• View is @MainActor-isolated, and so is everything it contains, including your @State. You almost never need to write @MainActor on a view or a view model — and with main-actor-by-default you can delete the ones you have.
• SwiftUI deliberately runs some of your code off the main thread to keep frames cheap. The signal is @Sendable in the API's signature: visualEffect, Shape.path(in:), Layout requirements, onGeometryChange. When you hit an isolation error inside one of those closures, don't send self — copy the one value you need into the closure's capture list.

.visualEffect { [pulse] effect, proxy in    // copy the Bool, don't capture self
  effect.blur(radius: pulse ? 2 : 0)
}

• SwiftUI's action callbacks are synchronous on purpose. Time-sensitive UI updates — starting an animation in response to a gesture or a scroll event — must happen on the same frame as the event. Put the withAnimation state change in the synchronous callback; open a Task only for the long-running work that follows.
• Put a piece of state on the seam between UI and async work. The view kicks off a task; the async layer does a synchronous mutation when it finishes; the UI reacts. That keeps view logic synchronous and makes the async logic testable without importing SwiftUI.

7. Protocols and generics

Don't start with a class. Don't start with a protocol either.

The workflow: write concrete types → notice repeated code across them → factor the shared capability into a protocol → write generic code against it. Overloads with near-identical bodies are the signal that it's time to generalize.

• A protocol with no per-type customization is a wasted protocol. If every conformance would use the same default implementation, write a constrained extension on an existing protocol instead. Elaborate protocol hierarchies ("type zoology") cost compile time and binary size and buy nothing.
• Prefer has-a to is-a. If only some of a protocol's operations make sense for your type, don't refine it — wrap it in a generic struct and expose exactly the API you mean. (GeometricVector<Storage: SIMD> rather than GeometricVector: SIMD.)
• A protocol requirement is a customization point — it's dynamically dispatched, and a conforming type's implementation wins everywhere. A method only in an extension is statically dispatched, so a conformer's version shadows rather than overrides it, and code that only knows any P calls the extension's. If a type should be able to customize something, make it a requirement.
• Composition over inheritance. Class inheritance is monolithic (one superclass), intrusive (you inherit stored properties and initializer complexity), and leaves unwritten contracts about what may be overridden and when to call super. Compose small values instead.
• A forced downcast is a code smell — it usually means a type relationship was lost to a class hierarchy or an existential.

some vs any

• Write some P by default. Change to any P when you need to store arbitrary types. Same discipline as let before var.
• some P — one fixed underlying type per scope. You keep every type relationship, including associated types, and the compiler can specialize.
• any P — type-erased box, dynamic type varies at runtime. Needed for heterogeneous collections, for optionality of the underlying type, and to hide the abstraction entirely. You pay for it: associated-type relationships are erased to their upper bounds, and calls are opaque to the optimizer.
• You cannot call a method that takes an associated type on an any P. Erasure works in producing position (the result is erased to its upper bound) but not consuming position. The fix is to pass the existential into a function taking some P — the compiler unboxes it, and inside that scope the type is fixed again.
• Constrained existentials and opaque types — some Collection<Element>, any Collection<any Animal> — let you hide LazyFilterSequence<[Animal]> while still exposing the element type. Declare primary associated types on your own protocols (protocol Container<Item>) for the type callers actually supply, not for implementation details like Iterator.
• Same-type requirements in where clauses are how you pin down relationships across protocols (where Self.CropType.FeedType == Self). Without them, "grow then harvest" doesn't typecheck, and wrong conformances compile.

8. API design — clarity at the point of use

Clarity at the point of use is the goal that outranks every other one here.

• No type prefixes in Swift-only APIs. Modules disambiguate. Keep prefixes only where the API mirrors an Objective-C one. But avoid very general names from specific frameworks — they read badly out of context and force manual disambiguation.
• Drop leading get from async alternatives and from anything that returns its result directly. persistentPosts, not getPersistentPosts.
• Access control is documentation. private (file), internal (module, and the default), package, public. Being explicit at the boundary is what forces the sendability and API-evolution decisions above.
• Design the model so illegal states can't be spelled. Private setters plus a validating mutating method; enums for closed sets; a strongly typed UUID instead of a String.
• Property wrappers factor out an access policy (@Argument, @Published, defensive copying, lazy, thread-local) so the declaration site states the policy in one word. Combine with @dynamicMemberLookup on a key path to project through a wrapper (that's how $binding.title works).
• Result builders for declarative DSLs. Macros when the boilerplate is code the compiler could have written (§12).

9. Performance — measure, then choose

Low-level Swift performance is dominated by four costs. Know which one you're paying.

1. Function calls — argument copies, static vs dynamic dispatch, call-frame allocation, and blocked optimization.
2. Memory layout — inline vs out-of-line storage; dynamically sized types.
3. Allocation — global (free), stack (cheap: one subtraction), heap (expensive: search plus locking).
4. Copies — retains/releases and recursive struct copies.

But do the algorithmic work first. Every time you write a loop, try replacing it with a call to an algorithm. The largest wins are almost never micro-optimizations:

• Know the complexity of what you call. Array.remove(at:) is O(n); calling it in a loop is O(n²). removeAll(where:) is O(n) total. Building a Data by re-slicing per byte is O(n²); popFirst() is O(1). Both of these were 100×+ regressions hiding behind clean-looking code.
• Chained map/flatMap/filter allocate an array per stage. Elegant ≠ fast. If a pipeline runs per-pixel or per-element in a hot loop, size the output once and write into it.
• Then profile. Instruments' Time Profiler and Allocations, run against a test (secondary-click the test's run button → Profile) so you're measuring exactly the code you care about. platform_memmove dominating a flame graph means accidental copying; a million transient allocations means intermediate arrays; swift_beginAccess means runtime exclusivity checks; swift_retain/swift_release means reference-counting traffic.

Concrete levers, roughly in order of what they buy:

• final on classes you don't intend to subclass turns dynamic dispatch static and unlocks inlining. Whole-module optimization lets the compiler prove this for you in many cases — and enables generic specialization, which is where generics stop costing anything.
• Struct storage is inline; class storage is out-of-line. Small structs are free; a large struct with three reference-typed fields costs three retains per copy, versus one for a class. If you copy it a lot, use copy-on-write.
• An any P existential has a 3-word inline buffer. Values that fit live inline; larger ones get heap-allocated per copy. Same technique applies: give the large type indirect storage with copy-on-write and it fits in the buffer again.
• Homogeneous [MyModel] beats [any Model] — densely packed, type info passed once, specializable. [any Model] is the flexible-but-opaque option; take it when you need it.
• Constraining a generic parameter to a class (T: AnyObject) gives the compiler a known representation even without specialization.
• InlineArray<N, T> (Swift 6.2) for fixed-size storage: elements stored inline, size in the type via value generics, no heap allocation, no reference counting, no uniqueness or exclusivity checks. Wrong choice if it gets copied or shared.
• Span / RawSpan / OutputSpan (Swift 6.2) replace withUnsafeBufferPointer for direct access to contiguous storage. They're non-escapable, so the compiler ties their lifetime to the container — you get pointer performance with no lifetime bugs, and the retains/releases disappear.
• Moving stored properties out of a nested class into the parent struct removes runtime exclusivity checks.
• Shipped in Swift 6.3, when you've measured the need: @inline(always) (pair with final on methods) and @specialized(where T == ...) (SE-0460) to pre-specialize a generic for hot concrete types.
• Landing in Swift 6.4 (unreleased — see the note below §15): borrow/mutate accessors instead of get/set for large stored values, UniqueArray/UniqueBox, and Ref/MutableRef to hoist a repeated lookup out of a loop.

Async functions keep their state on a per-task slab allocator rather than the C stack, and split into partial functions at each suspension point. The cost profile is similar to sync functions with slightly higher call overhead — which is another reason not to make something async that has nothing to await.

Hops to and from the main actor cost a real context switch. Batch: push the loop into loadArticles/updateUI so they take arrays, rather than hopping twice per iteration.

10. ARC and object lifetime

• An object's guaranteed lifetime ends at its last use, not at the closing brace. Observed lifetimes are an emergent property of the optimizer and will change. Code that depends on when a deinit runs is a latent bug.
• weak/unowned are for breaking reference cycles — nothing else. Reading a weak reference after the strong owner's last use may legitimately give nil. Optional binding there is worse than force-unwrap: it turns a loud crash into a silent wrong answer.
• Better than weak: don't build the cycle. Factor the shared data into a third type both sides reference, turning the cycle into a tree.
• Next best: redesign the API so the object is only reachable through a strong reference. withExtendedLifetime works but shifts correctness onto you and spreads through a codebase — treat it as a patch, not a design.
• Keep deinit side effects local. Publishing metrics or firing a global effect from deinit sequences against optimizer decisions. Use defer at the call site instead, and leave deinit for verification.
• Xcode's Optimize Object Lifetimes build setting shortens observed lifetimes toward the guaranteed minimum, and will surface exactly these bugs.

11. Testing — Swift Testing by default

Use Swift Testing for new tests. XCTest remains required for exactly three things: UI automation (XCUIApplication), performance metrics (XCTMetric), and tests that must be written in Objective-C or that catch Objective-C exceptions.

• @Test on any function — global, static, or instance; async, throws, and global-actor-isolated all work.
• #expect(...) takes ordinary expressions. No family of XCTAssertEqual-style functions to memorize — #expect(a == b), #expect(list.isEmpty), #expect(!x.contains(y)) all capture and display subexpression values on failure.
• try #require(...) to stop the test on failure, and to unwrap an optional safely. This replaces continueAfterFailure = false and lets you choose per-expectation.
• Suites are structs. A fresh instance is created per test function, so state can't leak between tests. Use init for setup; only use a class/actor when you need deinit for teardown. Nest suites to group.
• Parameterize instead of copy-pasting or looping. @Test(arguments: [...]) runs each case independently, in parallel, individually re-runnable, with the failing argument named in the results. Two argument collections produce the full cross product — use zip() when you want matched pairs instead.
• Traits carry intent: .enabled(if:) / .disabled("reason") for conditions (never comment a test out — a disabled test still compiles), .bug(url) for tracking, .tags(...) to relate tests across files and targets, .timeLimit, .serialized when a test genuinely can't run in parallel. Use @available rather than a runtime #available check so the testing library knows.
• withKnownIssue { } for a test failing on something outside your control — it keeps compiling and running and tells you when the issue is fixed, unlike .disabled.
• confirmation for callbacks that fire N times; withCheckedContinuation for one-shot callbacks with no async overload.
• Tests run in parallel by default, in randomized order. That's a feature: it surfaces hidden inter-test dependencies. Refactor rather than reaching for .serialized.
• Exit tests — #expect(processExitsWith: .failure) { ... } — cover precondition/fatalError paths in an isolated child process. macOS, Linux, FreeBSD, Windows only.
• Migrating: both frameworks coexist in one target, so migrate incrementally and write new tests in Swift Testing today. Test framework interoperability (swift-testing ST-0021; check your Xcode version for availability) lets helpers that wrap XCTFail be called from Swift Testing tests and vice versa; set the mode to complete or strict (not limited, and never none) so cross-framework issues stay errors and point you at the Issue.record replacement.

12. Macros

Reach for a macro when you're writing code the compiler could derive — and only then.

• Macros are type-checked before expansion. Arguments are checked against the macro's declared signature, so misuse is a clean error at the call site, not a mess inside generated code.
• Freestanding (#foo) produce an expression or declaration. Attached (@Foo) augment a declaration in one of five roles: member, peer, accessor, member-attribute, conformance. Roles compose — @Observable is member + member-attribute + conformance.
• Test macros as pure syntax-tree transforms with assertMacroExpansion. It's the fastest loop, and it's how you avoid bugs in code nobody reads. Set a breakpoint in expansion and po the syntax node to learn its shape.
• Emit real diagnostics when the macro doesn't apply. Throw an error, or use context.addDiagnostic for warnings and fix-its at a specific location. Never let a macro silently generate code that won't compile.
• Expanded code is ordinary Swift: inspectable ("Expand Macro"), debuggable, steppable.

13. Logging and debugging

• Logger from os, not print. Create one per subsystem and category. Messages are stored in an optimized form and only rendered when displayed, so logging is cheap enough to leave in.
• Non-numeric interpolations are redacted by default. Opt in per value with privacy: .public only for data that is genuinely not personal. Use .private(mask: .hash) when you need to correlate values without exposing them.
• Levels control persistence and cost: debug (never persisted, fastest — the message construction is optimized away entirely when not streaming), info, notice (default), error, fault (most persistent, slowest). Log at error/fault for the things you'll want in a bug report.
• Log a correlation ID (a task or request UUID) and you can filter a whole failure's history out of a device log archive without reproducing it. log collect --device --start ..., then filter by subsystem in Console.
• format: and align: are free — use them so logs are readable and column-selectable.
• LLDB understands Swift tasks: it steps through await across threads, swift task info shows priority and children, and named tasks show up in both the debugger and Instruments' Swift Concurrency template.

14. Unsafe code and interop

• "Unsafe" means the API cannot fully validate its input, so violating its preconditions is undefined behavior — not that it crashes. Safe APIs do trap deliberately; a clean fatal error is the safe outcome.
• Prefer Span over Unsafe*Pointer. Since Swift 6.2 there is a safe, non-escaping, equally fast way to get at contiguous storage. Reserve raw pointers for C interop.
• If you must use pointers: keep the unsafe region as small as possible, use buffer pointers (address + count) rather than bare pointers so bounds are tracked, never let a pointer escape the closure that vends it, and run the Address Sanitizer.
• Enable strict memory safety in security-critical modules — it forces every unsafe use to be acknowledged in source, which is what makes an audit possible. Swift 6.4's @diagnose attribute (unreleased) lets you turn it on for individual functions.
• Interop is bidirectional and incremental. C, Objective-C, and C++ types map into Swift directly (including C++ value semantics, containers as Swift collections, and move-only types as ~Copyable). Swift 6.3's @c attribute exposes Swift functions back to C (with @implementation when the declaration already exists in a header). Adopt Swift one file at a time; don't rewrite.

15. Modern syntax you should be using

Agents routinely write the older, longer form of all of these.

Rows marked ⚠ are Swift 6.4, which has not shipped. The current release is 6.3.x. Their proposals are accepted and implemented in main, so they are safe to plan around and unsafe to write today — check the project's toolchain before using one, and prefer the older form if it targets 6.3 or earlier.

Also worth knowing: Swift Regex parsers compose with Foundation's real parsers (.date(...), .currency(...)) — never hand-roll date or number parsing inside a regex. Make the locale explicit rather than inheriting the system's. And use NegativeLookahead or Local (atomic groups) to stop a pattern backtracking across a whole input.

16. Migrating an existing codebase to Swift 6

The order matters, and mixing steps is how migrations stall.

1. Build with the new compiler first. Source compatibility means this should just work, in Swift 5 mode.
2. Per target, enable complete concurrency checking (Swift 5 mode + all Swift 6 warnings). Start with the UI/app layer, not the frameworks below it — much of it is already main-actor-annotated by the SDK, so the fix rate is high.
3. Fix the warnings, cheapest first. Expect hundreds of warnings from a handful of root causes: var globals that should be let, free functions that belong on @MainActor, one public struct that needs : Sendable. A single line can clear dozens.
4. Flip the target to the Swift 6 language mode to lock the work in.
5. Move to the next target and repeat.
6. Refactor afterwards, separately. Never combine a significant refactor with enabling data-race safety — you'll have to back out both.

You can turn strict checking back off and ship; every fix you made is a genuine improvement that survives. Enable Approachable Concurrency and, for app modules, main-actor-by-default before you start — both dramatically reduce the number of errors you'll see, and Xcode ships migration tooling that applies many of the changes for you (swift.org/migration).

Quick Reference