Yet another one then: intent builder reimplemented https://github.com/NixOS/nixpkgs/pull/509997
(I'm still waiting on security to fix their alerts, so can't test it end to end with your PR, but individually it all works - may just need some PATH fun if it gets called with xcrun)