Update SDK to 2e1da48 (3.0.0-7965-9f33ab5) - #2989

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 39.72%. Comparing base (c419835) to head (e94e701).
⚠️ Report is 8 commits behind head on main.

❗ There is a different number of reports uploaded between BASE (c419835) and HEAD (e94e701). Click for more details.

HEAD has 1 upload less than BASE

Flag	BASE (c419835)	HEAD (e94e701)
	2	1

@@             Coverage Diff             @@
##             main    #2989       +/-   ##
===========================================
- Coverage   79.53%   39.72%   -39.82%     
===========================================
  Files        1169      362      -807     
  Lines       75095    16971    -58124     
===========================================
- Hits        59724     6741    -52983     
+ Misses      15371    10230     -5141     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

Claude finished @bw-ghapp[bot]'s task in 6m 18s —— View job

SDK bump evaluated

bitwarden/sdk-swift b7e7be7 → 2e1da48 — version 3.0.0-7742-9794da5 → 3.0.0-7965-9f33ab5, 32 commits in range (sdk-internal 9794da5..9f33ab5).

Version comment matches the SDKVersionInfoTests format (^\d+\.\d+\.\d+-\d+-[a-f0-9]+$), and Package.resolved / project-common.yml agree on 2e1da48. Surface diff: 0 REMOVED, 0 MUTATED, 22 ADDED; no protocol requirement added to any pre-existing protocol, and no enum case removed anywhere in the range.

Compile-time breaks

Build passed — build-for-testing for both Bitwarden and Authenticator exited 0 with no error:, Undefined symbols or ld: output.

Two breaks landed inside this range and were already fixed by earlier commits on the branch, so nothing was left to fix:

BitwardenSdkMocks/BitwardenSdkMocks.swift needs no change: the two new client protocols (ManagedSettingsBindingClientProtocol, SendSyncHandlerClientProtocol) have no iOS consumer (git grep finds nothing), and every protocol already listed there still exists.

Runtime considerations

• v2 Sends stay unsupported. Send.data / SendView.data are passed nil everywhere (bitwarden/sdk-internal#1317). Correct for now — the app has no v2 send support and nothing on the wire or in the add/edit form produces a SendItem payload — but it is the point where v2 send support will have to be wired in. SendItem also carries a new encryptionVersion: SendEncryptionType (.v1 = 1 only).
• OrganizationUserPolicyContext.id retyped Uuid → OrganizationId (bitwarden/sdk-internal#1364), same for PolicyView.organizationId. OrganizationId = Uuid = String, so PolicyService+SdkMapping.swift:53 and PolicyService.swift:263 are unaffected — no wire-format change.
• New error cases on pre-existing enums: MasterPasswordError.KeyIdMalformed, BitwardenError.CollectionDecrypt / .CollectionEncrypt. iOS only pattern-matches specific cases (VaultClientService.swift:85, SSOCookieVendorResponseHandler.swift:49) and never switches exhaustively, so these are purely additive — but they are new failure modes that will now surface as generic errors.
• Blob ciphers no longer get a placeholder name (bitwarden/sdk-internal#1408). No iOS impact today — nothing in the codebase handles the blob cipher type — but a decrypted blob cipher will now have an empty name rather than a filled-in one.
• Serialization intact. No type lost Codable: the only uniffi.toml added in range is the new bitwarden-managed-settings-types crate, and no existing crate dropped generate_codable_conformance. (The uniffi 0.32 upgrade reformats public enum X onto two lines across the whole tree — a cosmetic diff, not a conformance change.)

Everything else in range — confirmed safe

• New, unconsumed surface — #1403 / #1404 managed settings (ManagedSettingsBindingClient, ManagementProfile, ManagedSettingsError, isManaged, updateProfile), #1317 send sync (SendSyncHandlerClient, FetchSendError, SendSyncError, sendSyncHandler, onSync), #1364 EnforcedPolicyErased / PolicyDataType, #1380 CollectionEncryptError. Additive types with no iOS call site.
• Behavioral fixes in the SDK, no API change — #1265 key rotation no longer corrupts attachments/fido2 credentials, #1417 V2→V1 downgrade prevention, #1397 + #1413 shared unlock simplification and destination filtering (not on the iOS-visible surface).
• Non-iOS platforms / infrastructure — #1371, #1418, #1432 1Password access module; #1182 Keeper importers crypto; #1409 IPC RPC topics; #1248 OSS build crate split; #1436 JNI/rustls (Android).
• Generated-binding refreshes — #1402, #1416, #1431, #1435. No net surface change.
• Dependency and toolchain bumps — #1341, #1415, #1325 (uniffi 0.32 — source of the tree-wide reformat), #1171, #1422, #1428, #1429, #1423.
• Docs / internal only — #1420, #1382.

Commit

No commit — nothing needed fixing. The two compile breaks in this range were already resolved by 06f6312e4 and 30dc11ffd on this branch, and the build is green for both schemes.
• branch sdlc/sdk-update