Update SDK to ab1d63f (3.0.0-7852-b904fe4)

[bw-ghapp]

Updates the SDK from b7e7be7e7f5adde3cafcb27d79fac80a53c5c3c8 to ab1d63fefae22cf056e5ad6759dd41f20539bea5

What's Changed

• fix: add key id to masterpasswordunlockdata sdk-internal#1391
• [PM-40985] Introduce managed settings crates sdk-internal#1403
• [PM-34718] Implement bw receive / bw send receive sdk-internal#1317
• [PM-40994] Add and generate wasm and uniffi bindings for managed settings sdk-internal#1404
• [PM-35785] Strongly typed policy enforcement sdk-internal#1364
• [deps]: Update actions/checkout action to v7 sdk-internal#1341
• [PM-40237] Stop emitting placeholder name for blob ciphers sdk-internal#1408
• refactor(shared-unlock): simplify shared unlock sdk-internal#1397
• deps: bump h2 to 0.4.16 (RUSTSEC-2026-0258) sdk-internal#1415
• Update API bindings to fc5ea9ab05bf7a1679163fc13ec351ff96363000 sdk-internal#1402
• [PM-41798] 1Password access module sdk-internal#1371
• [PM-41447] Add destination filtering to shared unlock sdk-internal#1413
• Ensure no commercial crates are part of the OSS builds sdk-internal#1248
• [deps] Platform (cargo): Update Rust crate uniffi to v0.32.0 sdk-internal#1325
• [deps]: Update Rust crate rusqlite to >=0.37.0, <0.41 sdk-internal#1171
• [PM-38816] New crypto lib in new importers crate for Keeper DI sdk-internal#1182
• Fix ThreadBoundRunner Clone Comment sdk-internal#1420
• Update API bindings to e607c3f43ebcbf6feb2aa6768c80bc9ddd5f4460 sdk-internal#1416

Raw changelog

- fix: add key id to masterpasswordunlockdata (#1391)
- [PM-40985] Introduce managed settings crates (#1403)
- [PM-34718] Implement bw receive / bw send receive (#1317)
- [PM-40994] Add and generate wasm and uniffi bindings for managed settings (#1404)
- [PM-35785] Strongly typed policy enforcement (#1364)
- [deps]: Update actions/checkout action to v7 (#1341)
- [PM-40237] Stop emitting placeholder name for blob ciphers (#1408)
- refactor(shared-unlock): simplify shared unlock (#1397)
- deps: bump h2 to 0.4.16 (RUSTSEC-2026-0258) (#1415)
- Update API bindings to fc5ea9ab05bf7a1679163fc13ec351ff96363000 (#1402)
- [PM-41798] 1Password access module (#1371)
- [PM-41447] Add destination filtering to shared unlock (#1413)
- Ensure no commercial crates are part of the OSS builds (#1248)
- [deps] Platform (cargo): Update Rust crate uniffi to v0.32.0 (#1325)
- [deps]: Update Rust crate rusqlite to >=0.37.0, <0.41 (#1171)
- [PM-38816] New crypto lib in new importers crate for Keeper DI (#1182)
- Fix ThreadBoundRunner Clone Comment (#1420)
- Update API bindings to e607c3f43ebcbf6feb2aa6768c80bc9ddd5f4460 (#1416)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 79.50%. Comparing base (c419835) to head (969c4b4).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #2989      +/-   ##
==========================================
- Coverage   79.53%   79.50%   -0.03%     
==========================================
  Files        1169     1169              
  Lines       75095    75101       +6     
==========================================
- Hits        59724    59712      -12     
- Misses      15371    15389      +18     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[claude]

Claude finished @bw-ghapp[bot]'s task in 6m 5s —— View job

---

SDK bump evaluated

• Revision: b7e7be7e7f5adde3cafcb27d79fac80a53c5c3c8 → ab1d63fefae22cf056e5ad6759dd41f20539bea5
• Version: 3.0.0-7742-9794da5 → 3.0.0-7852-b904fe4
• Commits in range: 18 sdk-swift commits (base sdk-internal 9794da5 → b904fe4)

Note: the PR title/body still describe fd64458 (3.0.0-7851-db45e84), but the branch head pins ab1d63f (3.0.0-7852-b904fe4) — one commit further (bitwarden/sdk-internal#1416, API bindings refresh). The evaluation below covers the full range to the pin actually in project-common.yml.

Compile-time breaks

Verifying build passed — build-for-testing for both Bitwarden and Authenticator schemes exited 0, with BitwardenSdkMocks and all test targets compiled.

Two real breaks are in range, and both are already fixed by earlier commits on this branch:

1. Send.data / SendView.data — new non-defaulted initializer parameter ([PM-34718] Implement bw receive / bw send receive sdk-internal#1317, bw receive)
   public let data: SendItem? / SendItemView? was inserted into both memberwise initializers between text: and maxAccessCount:. Every iOS construction site was updated to pass data: nil:

   • BitwardenKit/Core/Vault/Services/Mocks/BitwardenSdk+VaultMocking.swift:480,527
   • BitwardenShared/Core/Tools/Extensions/BitwardenSdk+Tools.swift:92
   • BitwardenShared/Core/Tools/Extensions/TestHelpers/BitwardenSdk+ToolsFixtures.swift:41
   • BitwardenShared/UI/Tools/PreviewContent/SendView+Fixtures.swift:39
   • BitwardenShared/UI/Tools/Send/Send/SendList/Fixtures/SendListState+Fixtures.swift (9 sites)
   • BitwardenShared/UI/Tools/Send/SendItem/AddEditSendItem/AddEditSendItemState.swift:266

2. MasterPasswordUnlockData.containedKeyId — new field (fix: add key id to masterpasswordunlockdata sdk-internal#1391)
   public let containedKeyId: KeyId? added to the record and its initializer. Threaded through at BitwardenShared/Core/Auth/Models/Request/MasterPasswordUnlockDataRequestModel.swift:10,31, with coverage added in UpdateKdfRequestTests.swift:60.

No unfixed compile break remains.

Not a break — a codegen formatting artifact worth naming

The surface diff reports 104 "removed" error enums (ApiError, CipherError, Fido2CallbackError, CryptoError, …). This is a false positive from the uniffi 0.32 bump (bitwarden/sdk-internal#1325), which now emits the access modifier on its own line:

public
enum Fido2CallbackError: Swift.Error, ... {

All 104 names were verified present and still public at the new revision (0 bare enum decls at OLD, 105 at NEW — the 104 plus the genuinely new ManagedSettingsError). Nothing was removed or de-publiced. Flagging for whoever runs this next, since the same false positive will recur on every bump until sdk-surface-diff.sh tolerates the split modifier.

Runtime considerations

None require a change now, but each is a real behavioral delta:

1. String decoding across the FFI changed (uniffi 0.32, every binding file). FfiConverterString.lift/read moved from Foundation's String(bytes:encoding:.utf8)! to String(decoding:as: UTF8.self). Two consequences: a leading U+FEFF BOM is no longer silently stripped (so a decrypted value or import that begins with a BOM now retains it, and could render as a leading invisible character or break an exact string comparison), and invalid UTF-8 now substitutes U+FFFD instead of trapping on the force-unwrap. The second is strictly a robustness win.

2. Timestamp precision changed (uniffi 0.32). FfiConverterTimestamp.read now builds Date(timeIntervalSince1970: seconds).addingTimeInterval(nanos / 1e9) rather than summing into one Double, gaining mantissa bits. DateTime values from the SDK (revisionDate, deletionDate, expirationDate) may differ by sub-microsecond amounts from before — harmless for display, but a candidate cause if an exact-equality date assertion ever goes flaky.

3. Send v2 payloads are dropped on the inbound mapping path. BitwardenSdk+Tools.swift:92 hardcodes data: nil because the API response model has no v2 field. Correct today — the app only supports v1 sends — but if the server begins returning v2 sends before iOS adds support, the item payload is silently discarded rather than surfaced as unsupported. Worth a ticket when Send v2 lands client-side.

4. containedKeyId is now serialized into the /accounts/kdf request body. Encoded only when non-nil (JSONEncoder omits nil optionals), so the existing wire format is unchanged for users whose key carries no ID — confirmed by the unchanged test_body expectation alongside the new test_body_containedKeyId.

5. Blob ciphers no longer send a placeholder Name ([PM-40237] Stop emitting placeholder name for blob ciphers sdk-internal#1408). Gated on the server change deploying first. iOS has no blob-cipher call sites (git grep for blobCipher/encryptBlob/decryptBlob is empty), so no client impact.

Everything else in range — confirmed safe

• [PM-40985] Introduce managed settings crates sdk-internal#1403, [PM-18417] refactor: Reorganize MainActor annotations #1404 — new managed-settings crates and bindings. Adds ManagedSettingsBindingClient, ManagedSettingsBindingClientProtocol, ManagementProfile, ManagedSettingsError. Entirely new surface; git grep finds no iOS references and no name collision with an existing iOS type.
• [PM-35785] Strongly typed policy enforcement sdk-internal#1364 — strongly typed policy enforcement. Adds PolicyDataType and EnforcedPolicyErased; retypes PolicyView.organizationId and OrganizationUserPolicyContext.id from Uuid to OrganizationId. public typealias OrganizationId = Uuid (BitwardenCore.swift:8047), so the two iOS consumers (PolicyService+SdkMapping.swift, PolicyService.swift:255) are unaffected.
• refactor(shared-unlock): simplify shared unlock sdk-internal#1397, Auto delete spaces in security key #1413 — shared unlock simplification and destination filtering. No change to the generated Swift surface in BitwardenUnlock.swift beyond shared boilerplate; not yet exposed to iOS.
• [PM-41798] 1Password access module sdk-internal#1371 — 1Password access module. No iOS-visible binding surface.
• [PM-38816] New crypto lib in new importers crate for Keeper DI sdk-internal#1182 — Keeper DI importer crypto. Adds case KeeperCrypto(message:) to ImportError; no iOS reference to ImportError.
• fix: add key id to masterpasswordunlockdata sdk-internal#1391 also adds case KeyIdMalformed(message:) to MasterPasswordError; no iOS reference to MasterPasswordError.
• [PM-34718] Implement bw receive / bw send receive sdk-internal#1317 — adds SendItem, SendItemView, SendEncryptionType (case v1 = 1). New types, no iOS collision.
• Update API bindings to fc5ea9ab05bf7a1679163fc13ec351ff96363000 sdk-internal#1402, Feature Request: Ability to Import #1416 — API binding refreshes. No breaking surface delta.
• Ensure no commercial crates are part of the OSS builds sdk-internal#1248, PM-17859: Update vault add/edit item authenticator field #1341, QR code scanning not an option for IPhone SE3 #1415, Vault tab navigation bar title display mode is always large even when scrolling #1171, Import of Raivo JSON in Tresorit via iOS Files app fails #1420 — OSS build hygiene, CI action bump, h2 security bump (RUSTSEC-2026-0258), rusqlite range widening, comment fix. No binding surface impact.
• Codable / serialization gate: the only uniffi.toml added in range is bitwarden-managed-settings-types, a brand-new crate with no iOS consumers. No existing type moved out of bitwarden-core or bitwarden-crypto, so nothing iOS uses lost its Codable conformance.
• Protocol gate: no requirement was added to any existing protocol. The only new protocol is ManagedSettingsBindingClientProtocol, which iOS does not consume, so BitwardenSdkMocks/BitwardenSdkMocks.swift needs no new entry. The four hand-written with_foreign conformers (Fido2CredentialStore, ClientManagedTokens, ServerCommunicationConfigRepository, Fido2UserInterface) are unchanged.
• Version-string gate: 3.0.0-7852-b904fe4 matches the SDKVersionInfoTests regex — no leading v.

Commit

No commit — nothing needed fixing. The two compile breaks in range were already resolved by earlier commits on sdlc/sdk-update, and both schemes build clean at the pinned revision.
• sdlc/sdk-update