Expose `StateSchema` / `interfaces` via a side-effect-free subpath export

WORKOS_COOKIE_PASSWORD doc inconsistency

TS2883: inferred return types from withAuth() / refreshSession() are non-portable when consumer pins a different @workos-inc/node version

Clarify landing path for PEAA-13 SQL verification evidence (PR #413 closed)

Dashboard impersonation broken with v3 PKCE/CSRF verification

Feature request: use PKCE always

`npm audit` complains about a low severity vulnerability in a transitive dependency

Clarify how to use AuthKit with a custom Organization selection flow

Need official pattern to compose AuthKit with other middleware that forwards request headers (e.g., next-intl)

withAuth Errors Out Claiming Route Not Covered by Middleware Despite Matcher Including It