feat: Web SDK update for version 29.0.0

[ChiragAgg5k]

This PR contains updates to the Web SDK for version 29.0.0.

[hansi-codes]

🟢 Tier S · Ready to merge

This release updates the Web SDK to version 29.0.0 and targets Appwrite 2.4, adding passkey APIs and response-model defaults alongside OAuth, team, and analytics updates. It also adds passkey examples and updates the SDK and server-version documentation.

11 of 37 changed files were too large to include in full.

Verdict	New comments	Fixed	Still open
💬 Commented	0	0	0

Note

Part of the diff was too large to review, so Hansi did not approve.

📂 Walkthrough · 7

File	Change
CHANGELOG.md, README.md, package.json, package-lock.json	Publish version 29.0.0, document Appwrite 2.4 compatibility, and summarize the release APIs.
src/client.ts	Add a response helper to populate missing model fields and update SDK response headers.
src/models.ts, src/services/account.ts	Add passkey models and account endpoints, and apply defaults to account responses.
src/services/apps.ts, src/services/databases.ts, src/services/documents-db.ts, src/services/functions.ts, src/services/locale.ts, src/services/messaging.ts, src/services/oauth-2.ts, src/services/organization.ts, src/services/presences.ts, src/services/storage.ts, src/services/tables-db.ts, src/services/teams.ts, src/services/vectors-db.ts	Update generated service response handling and API contracts for Appwrite 2.4.
src/services/analytics-tracking.ts, src/services/analytics.ts	Include viewport width in tracked events and update the Analytics property-ID description.
docs/examples/account/*.md	Add examples for the passkey account endpoints.
docs/examples/oauth2/*.md, docs/examples/teams/create-membership.md	Update OAuth resource examples and show the optional membership ID.

🔇 Filtered out · 1

Findings Hansi considered but did not post.

Finding

Why

Default passkey options to an object shape

Verifier: The fallback does not replace actual WebAuthn options: fillDefaults spreads the response over the defaults (src/client.ts:83), so a returned publicKey is preserved. The finding depends on a successful challenge response omitting its required options, for which no reachable case is shown. Moreover, changing [] to {} would still fail both WebAuthn parsers because required fields such as challenge (and registration fields) are missing; the array shape is not the cause of that failure. API errors already reject before defaults are applied.

---

_{Reviewed 4601664 · Details · Comment @hansi-codes review to re-run, or mention @hansi-codes with a question.}

[hansi-codes]

🟢 Tier S · Looks good to merge. Summary

[ChiragAgg5k]

Superseded: replaced by a passkeys-only minor release.