How do I initialize the Passkeys WebAuthn + Hardened Auth Reference (TypeScript) kit?

Clone the repository with `git clone https://github.com/Umar-444/Techtalks-stack-kits.git`, navigate to `kits/security-passkeys-auth/`, and hand the bootstrap prompt to your AI coding agent.

Which AI agents support Passkeys WebAuthn + Hardened Auth Reference (TypeScript)?

The kit's rules are automatically transpiled into 6 native formats: Cursor (.cursor/rules/*.mdc), Claude Code (CLAUDE.md), GitHub Copilot (.github/copilot-instructions.md), Cline (.clinerules), OpenAI Codex (CODEX.md), and Antigravity (.agents/rules/*.md).

What security invariants are enforced in Passkeys WebAuthn + Hardened Auth Reference (TypeScript)?

The kit enforces zero plaintext credentials via Gitleaks, parameterized queries, and resource-level authorization policies.

Architectural Blueprint: This kit is currently a planned architectural blueprint. The specifications, threat model, and rules below describe the planned implementation. Starter source containers and automated test suites are in active development.

Blueprint Specification v1.0.0

Passkeys WebAuthn + Hardened Auth Reference (TypeScript) (Blueprint)

Verified passwordless FIDO2 / WebAuthn Passkeys authentication implementation in TypeScript: SimpleWebAuthn ceremonies, OAuth fallback, HttpOnly signed session cookies, and strict session fixation defenses.

{'name': 'TypeScript', 'version': '5.6+', 'registry': 'npm'} {'name': 'Hono', 'version': '4.6+', 'registry': 'npm'}

Agent Bootstrapping

Pre-Wired Rules

Single-source rules compiled to 6 native agent dialects. Transpiled deterministically from rules/source/.

• .cursor/rules/*.mdc

• CLAUDE.md

• .agents/rules/*.md

• .clinerules & CODEX.md

Security Guardrails

Automated Scanners

Invariants asserted in CI before merge. Scanned by Gitleaks and Semgrep AST checkers.

Planned: Standard Security Scan Protocol Enabled

Docker Scaffolding

Turnkey Containers

Runnable containers with pre-wired environment variables, healthchecks, and dependency locks.

docker compose up -d

Agent Bootstrap Prompt

Feed this exact prompt into Claude Code, Cursor, Copilot, or Antigravity to anchor the agent:

You are building with the Passkeys WebAuthn + Hardened Auth Reference (TypeScript) kit. Follow rules in AGENTS.md, DESIGN.md tokens, and steps/agent-build-steps.md.