feat(story-2.1): re-export Middleware and Next at httpware package root

Adds Middleware and Next to httpware/__init__.py imports and __all__
so consumers can `from httpware import Middleware, Next` in addition
to the subpackage path. Matches the existing Request/Response/Transport
re-export pattern. CHANGELOG records the Story 2.1 surface.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: lesnik512

CHANGELOG.md

@@ -19,5 +19,6 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 - Status-keyed exception hierarchy with plain typed fields: `ClientError`, `TransportError`, `TimeoutError`, `StatusError`, `ClientStatusError`/`ServerStatusError` bases, 9 leaf classes (`BadRequestError` … `ServiceUnavailableError`), `STATUS_TO_EXCEPTION` lookup dict (Story 1.3). `StatusError` is picklable and deep-copyable via custom `__reduce__`; `__repr__` and the summary message strip `user:pass@` userinfo from the request URL; `headers` is stored as a read-only `MappingProxyType` so caller mutations after `raise` do not bleed into the exception. `TimeoutError` multi-inherits from `builtins.TimeoutError` (revisits architecture Decision 3) so `except builtins.TimeoutError` (the form `asyncio.wait_for` raises) also catches httpware-raised timeouts.
 - `Transport` protocol (`@runtime_checkable`) and default `Httpx2Transport` adapter; `StreamResponse` placeholder for Story 4.1 protocol typing; the wire `method` is uppercased at the seam and `httpx2` exceptions (`TimeoutException`, `HTTPError`, `InvalidURL`, `CookieConflict`, and the closed-client `RuntimeError`) are mapped to `httpware.TimeoutError` / `httpware.TransportError` (with the original exception's message preserved on the mapped instance) so no `httpx2` exception escapes the library; lazy `httpx2.AsyncClient` construction is guarded by an `asyncio.Lock` so concurrent first-calls share one client; `httpx2` is confined to `src/httpware/transports/httpx2.py` (Story 1.4).
 - `ResponseDecoder` protocol (`@runtime_checkable`) and default `PydanticDecoder` adapter — single-parse-pass JSON decoding via `pydantic.TypeAdapter.validate_json(bytes)`; a module-level `@functools.lru_cache(maxsize=None)` factory (`_get_adapter`) memoizes one `TypeAdapter` per `response_model` across the process so warm-path requests pay zero adapter-construction cost; `pydantic.ValidationError` surfaces unchanged to the caller (Story 1.5).
+- `Middleware` protocol (`@runtime_checkable`) and `Next` callable type alias (`Callable[[Request], Awaitable[Response]]`); private `compose(middlewares, transport)` chain composer at `httpware._internal.chain` using a recursive closure fold with `transport.__call__` as the bottom of the chain. No exception handling inside `compose`, so `asyncio.CancelledError` and user-raised exceptions propagate untouched (Story 2.1).
 
 [Unreleased]: https://github.com/modern-python/httpware/commits/main

src/httpware/__init__.py

@@ -21,6 +21,7 @@
     UnauthorizedError,
     UnprocessableEntityError,
 )
+from httpware.middleware import Middleware, Next
 from httpware.request import Request
 from httpware.response import Response, StreamResponse
 from httpware.transports import Transport
@@ -38,6 +39,8 @@
     "Httpx2Transport",
     "InternalServerError",
     "Limits",
+    "Middleware",
+    "Next",
     "NotFoundError",
     "PydanticDecoder",
     "RateLimitedError",

tests/test_middleware.py

@@ -263,3 +263,13 @@ async def __call__(self, request: Request, next: Next) -> Response:  # noqa: A00
         assert response.status == 200  # noqa: PLR2004
 
     assert count == 3  # noqa: PLR2004
+
+
+def test_middleware_and_next_are_reexported_at_package_root() -> None:
+    """`from httpware import Middleware, Next` works in addition to the subpackage path."""
+    import httpware  # noqa: PLC0415
+
+    assert httpware.Middleware is Middleware
+    assert httpware.Next is Next
+    assert "Middleware" in httpware.__all__
+    assert "Next" in httpware.__all__