[PM-16231] Improved SDK referencing

[coroiu]

🎟️ Tracking

https://bitwarden.atlassian.net/browse/PM-16231

📔 Objective

Currently the DefaultSdkService forcibly clears all sdk instances when creating new ones. This can lead to a situation where a downstream observable is still using the older instances when it gets cleared. This introduces a wrapper class around the instance which will wait for the instance to no longer be in use before clearing it

📸 Screenshots

⏰ Reminders before review

• Contributor guidelines followed
• All formatters and local linters executed and passed
• Written new unit and / or integration tests where applicable
• Protected functional changes with optionality (feature flags)
• Used internationalization (i18n) for all UI strings
• CI builds passed
• Communicated to DevOps any deployment requirements
• Updated any necessary documentation (Confluence, contributing docs) or informed the documentation team

🦮 Reviewer guidelines

• 👍 (:+1:) or similar for great changes
• 📝 (:memo:) or ℹ️ (:information_source:) for notes or general info
• ❓ (:question:) for questions
• 🤔 (:thinking:) or 💭 (:thought_balloon:) for more open inquiry that's not quite a confirmed issue and could potentially benefit from discussion
• 🎨 (:art:) for suggestions / improvements
• ❌ (:x:) or ⚠️ (:warning:) for more significant problems or concerns needing attention
• 🌱 (:seedling:) or ♻️ (:recycle:) for future improvements or indications of technical debt
• ⛏ (:pick:) for minor or nitpick changes

[github-actions]

Checkmarx One – Scan Summary & Details – 45b91ed5-327e-44c7-a3c5-b4fd7f8d2e59

New Issues (4)

Checkmarx found the following issues in this Pull Request

Severity	Issue	Source File / Package	Checkmarx Insight
	CVE-2025-0762	Npm-electron-34.0.0	Vulnerable Package
	Client_Privacy_Violation	/bitwarden_license/bit-web/src/app/tools/access-intelligence/org-at-risk-apps-dialog.component.html: 15	details Method at line 15 of /bitwarden_license/bit-web/src/app/tools/access-intelligence/org-at-risk-apps-dialog.component.html sends user information ou... Attack Vector
	Client_Privacy_Violation	/bitwarden_license/bit-web/src/app/tools/access-intelligence/org-at-risk-members-dialog.component.html: 15	details Method at line 15 of /bitwarden_license/bit-web/src/app/tools/access-intelligence/org-at-risk-members-dialog.component.html sends user information... Attack Vector
	Missing_HSTS_Header	/libs/common/src/services/api.service.ts: 243	details The web-application does not define an HSTS header, leaving it vulnerable to attack. Attack Vector

Fixed Issues (8)

Great job! The following issues were fixed in this Pull Request

Severity	Issue	Source File / Package
	Angular_Improper_Type_Pipe_Usage	/apps/browser/src/autofill/popup/fido2/fido2-use-browser-link.component.html: 1
	Client_Privacy_Violation	/libs/tools/generator/components/src/username-generator.component.html: 3
	Client_Privacy_Violation	/libs/vault/src/components/totp-countdown/totp-countdown.component.ts: 17
	Client_Privacy_Violation	/libs/vault/src/components/totp-countdown/totp-countdown.component.ts: 16
	Client_DOM_Open_Redirect	/apps/web/src/app/billing/shared/payment-method.component.ts: 155
	Client_DOM_Open_Redirect	/apps/web/src/app/billing/organizations/payment-method/organization-payment-method.component.ts: 187
	Client_DOM_Open_Redirect	/apps/web/src/app/billing/organizations/payment-method/organization-payment-method.component.ts: 155
	Client_DOM_Open_Redirect	/apps/web/src/app/billing/shared/payment-method.component.ts: 183

[codecov]

Codecov Report

Attention: Patch coverage is 96.00000% with 1 line in your changes missing coverage. Please review.

Project coverage is 35.32%. Comparing base (70ea75d) to head (0754748).
Report is 5 commits behind head on main.

✅ All tests successful. No failed tests found.

Files with missing lines	Patch %	Lines
...n/src/platform/services/sdk/default-sdk.service.ts	85.71%	0 Missing and 1 partial ⚠️

Additional details and impacted files

@@           Coverage Diff           @@
##             main   #12475   +/-   ##
=======================================
  Coverage   35.32%   35.32%           
=======================================
  Files        2998     2997    -1     
  Lines       90922    90975   +53     
  Branches    16979    16983    +4     
=======================================
+ Hits        32114    32141   +27     
- Misses      56316    56342   +26     
  Partials     2492     2492           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.