v2.13.0

[nicknisi]

Summary

This minor release adds composable middleware helpers and improved error handling for token refresh failures.

New Features

• Middleware helpers: New exports for composable proxy/middleware patterns
  • handleAuthkitHeaders, applyResponseHeaders, partitionAuthkitHeaders
  • isAuthkitRequestHeader, AUTHKIT_REQUEST_HEADERS
  • Types: AuthkitHeadersResult, AuthkitRedirectStatus, AuthkitRequestHeader, HandleAuthkitHeadersOptions
• Error classes: AuthKitError base class and TokenRefreshError with userId/sessionId context for debugging

Bug Fixes

• Fix: avoid calling headers() in middleware context (fix: avoid calling headers() in middleware context #354)

Internal

• Test improvements (fix(tests): move window.location patching and restoration to beforeEach/afterEach #350, fix(test): restore document.querySelector mock in afterEach #356, fix(test): restore process.env after each test #357)
• Node 24 for npm 11 Trusted Publishers (feat: enable npm Trusted Publishers #346)

Semver

MINOR - All changes are additive, no breaking changes to public API.