0.10.0

0.10.0 (2026-10-02)

• feat!: add machine clients to the fake tenant (#60) (5c01bfe)

BREAKING CHANGES

• the fake tenant's introspection endpoint answers { active: false } to a public client, and to a confidential client asking
  about a token issued to another client. A client_credentials request
  from a client registered without a secret answers 401 invalid_client.
  Fixtures passed to runTenantContractTests must implement
  TenantContractFixture.addMachineClient, which registers a
  client_credentials application with a scopes allowlist,
  administrator-assigned permissions and an optional confidential flag.
  It returns the application's id and, when confidential, its secret;
  TenantContractClient.secret is optional.