feat: SDK update for version 18.4.0

[ChiragAgg5k]

This PR contains updates to the SDK for version 18.4.0.

What's Changed

• Added: account passkey methods listPasskeys, createPasskey, getPasskey, updatePasskey, deletePasskey and updatePasskeyVerification
• Added: account.createPasskeyToken and account.updatePasskeyToken for passkey sign-in
• Added: users.listPasskeys, users.getPasskey, users.updatePasskey and users.deletePasskey
• Added: project.updatePasskeyPolicy to configure passkey sign-in
• Added: Passkey, PasskeyList, PasskeyChallenge and TokenSecret models

Passkeys only, patched onto main: the diff of the SDK generated with and without the passkey methods, three-way merged onto the release. Everything else on the release is unchanged, including its X-Appwrite-Response-Format.

[hansi-codes]

🔵 Tier A · Mergeable after minor fixes

The two findings are minor documentation issues: the WebAuthn instructions omit the required parsing of JSON options.

Adds passkey registration, sign-in, management, and project-policy methods, along with the associated response models. Updates the SDK version metadata and changelog and adds examples for the new APIs.

Verdict	New comments	Fixed	Still open
✅ Approved	2	0	0

	Finding	Where
🟡	Document parsing the registration options before WebAuthn	src/services/account.ts:2798
🟡	Document parsing the sign-in options before WebAuthn	src/services/account.ts:5669

Fix with agent prompt

### Issue 1
src/services/account.ts:2798
**Document parsing the registration options before WebAuthn**

The returned `publicKey` is JSON-form WebAuthn options, so its encoded challenge and user ID must be converted with `PublicKeyCredential.parseCreationOptionsFromJSON()` before calling `navigator.credentials.create()`; passing the raw values will fail. The model documentation already describes this conversion, but this method's guidance omits it.

### Issue 2
src/services/account.ts:5669
**Document parsing the sign-in options before WebAuthn**

The returned `publicKey` is JSON-form WebAuthn options, so its encoded challenge must be converted with `PublicKeyCredential.parseRequestOptionsFromJSON()` before calling `navigator.credentials.get()`; passing the raw values will fail. Please include that step in the sign-in instructions.

---

For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.

📂 Walkthrough · 11

File	Change
CHANGELOG.md	Documents the 18.4.0 passkey additions.
README.md	Updates the CDN example to version 18.4.0.
docs/examples/account/*.md	Adds examples for account passkey registration, management, and token flows.
docs/examples/users/*.md	Adds examples for user passkey management.
docs/examples/project/update-passkey-policy.md	Adds an example for configuring the passkey relying-party ID.
package.json, package-lock.json	Bumps the package version to 18.4.0.
src/client.ts	Updates the SDK version request header.
src/models.ts	Adds passkey challenge, passkey list, passkey, and token secret models.
src/services/account.ts	Adds account passkey management and passkey sign-in methods.
src/services/project.ts	Adds the passkey policy update method.
src/services/users.ts	Adds user passkey listing and management methods.

---

_{Reviewed 26dd7ee · Details · Comment @hansi-codes review to re-run, or mention @hansi-codes with a question.}

[hansi-codes]

🔵 Tier A · Looks good to merge. Summary

[hansi-codes]

Document parsing the registration options before WebAuthn

The returned publicKey is JSON-form WebAuthn options, so its encoded challenge and user ID must be converted with PublicKeyCredential.parseCreationOptionsFromJSON() before calling navigator.credentials.create(); passing the raw values will fail. The model documentation already describes this conversion, but this method's guidance omits it.

Prompt To Fix With AI

This is a comment left during a code review.
Path: src/services/account.ts
Line: 2798

Comment:
**Document parsing the registration options before WebAuthn**

The returned `publicKey` is JSON-form WebAuthn options, so its encoded challenge and user ID must be converted with `PublicKeyCredential.parseCreationOptionsFromJSON()` before calling `navigator.credentials.create()`; passing the raw values will fail. The model documentation already describes this conversion, but this method's guidance omits it.

---

For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.

_{🟡 Minor · documentation · Reply if this doesn't apply.}

[hansi-codes]

Document parsing the sign-in options before WebAuthn

The returned publicKey is JSON-form WebAuthn options, so its encoded challenge must be converted with PublicKeyCredential.parseRequestOptionsFromJSON() before calling navigator.credentials.get(); passing the raw values will fail. Please include that step in the sign-in instructions.

Prompt To Fix With AI

This is a comment left during a code review.
Path: src/services/account.ts
Line: 5669

Comment:
**Document parsing the sign-in options before WebAuthn**

The returned `publicKey` is JSON-form WebAuthn options, so its encoded challenge must be converted with `PublicKeyCredential.parseRequestOptionsFromJSON()` before calling `navigator.credentials.get()`; passing the raw values will fail. Please include that step in the sign-in instructions.

---

For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.

_{🟡 Minor · documentation · Reply if this doesn't apply.}