UsefulSoftwareCo · RhysSullivan · Aug 5, 2026 · Aug 5, 2026 · Aug 5, 2026 · Aug 5, 2026
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,16 +1,22 @@
 # Changelog
 
-## 0.13.8
+## 0.13.9
 
 <!-- release:start -->
 
 ### New Features
 
-- **WorkOS organization domains** — the WorkOS emulator now persists organization domains statefully: `POST /organization_domains` creates a pending domain with a DNS verification token, `GET /organization_domains/:id` returns its current state, `POST /organization_domains/:id/verify` performs the real SDK verification transition, and `DELETE /organization_domains/:id` removes it. Deleting an organization cascades to its domains, and a test-only `POST /_emulate/organization_domains/:id/verify` hook flips a pending domain to verified out of band. Domains are globally unique across organizations with WorkOS-shaped conflict errors.
-- **Stripe OpenAPI discovery in YAML** — the Stripe emulator serves `GET /openapi.yaml` alongside `GET /openapi.json`, derived from the same OpenAPI document. Form-encoded deep-object metadata (`metadata[foo]=bar`) is modeled in the spec's request encodings, and the customers API projects nested metadata in responses, matching Stripe's wire behavior. The request ledger records the parsed deep-object bodies.
+- **WorkOS organization-owned API keys** — the WorkOS emulator now serves the SDK's organization API key surface: `GET /organizations/:id/api_keys` lists an organization's own keys (organization-owned only — members' personal keys never share the listing) and `POST /organizations/:id/api_keys` mints one. An organization-owned key carries the real wire owner shape (`owner: { type: "organization", id }`, no member field), round-trips through `POST /api_keys/validations` with that shape, and deletes through the shared `DELETE /api_keys/:id`. Unknown organizations 404.
 
 <!-- release:end -->
 
+## 0.13.8
+
+### New Features
+
+- **WorkOS organization domains** — the WorkOS emulator now persists organization domains statefully: `POST /organization_domains` creates a pending domain with a DNS verification token, `GET /organization_domains/:id` returns its current state, `POST /organization_domains/:id/verify` performs the real SDK verification transition, and `DELETE /organization_domains/:id` removes it. Deleting an organization cascades to its domains, and a test-only `POST /_emulate/organization_domains/:id/verify` hook flips a pending domain to verified out of band. Domains are globally unique across organizations with WorkOS-shaped conflict errors.
+- **Stripe OpenAPI discovery in YAML** — the Stripe emulator serves `GET /openapi.yaml` alongside `GET /openapi.json`, derived from the same OpenAPI document. Form-encoded deep-object metadata (`metadata[foo]=bar`) is modeled in the spec's request encodings, and the customers API projects nested metadata in responses, matching Stripe's wire behavior. The request ledger records the parsed deep-object bodies.
+
 ## 0.13.7
 
 ### New Features

diff --git a/packages/@emulators/adapter-next/package.json b/packages/@emulators/adapter-next/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@emulators/adapter-next",
-  "version": "0.13.8",
+  "version": "0.13.9",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",

diff --git a/packages/@emulators/apple/package.json b/packages/@emulators/apple/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@emulators/apple",
-  "version": "0.13.8",
+  "version": "0.13.9",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",

diff --git a/packages/@emulators/autumn/package.json b/packages/@emulators/autumn/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@emulators/autumn",
-  "version": "0.13.8",
+  "version": "0.13.9",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",

diff --git a/packages/@emulators/aws/package.json b/packages/@emulators/aws/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@emulators/aws",
-  "version": "0.13.8",
+  "version": "0.13.9",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",

diff --git a/packages/@emulators/clerk/package.json b/packages/@emulators/clerk/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@emulators/clerk",
-  "version": "0.13.8",
+  "version": "0.13.9",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",

diff --git a/packages/@emulators/cloudflare/package.json b/packages/@emulators/cloudflare/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@emulators/cloudflare",
-  "version": "0.13.8",
+  "version": "0.13.9",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",

diff --git a/packages/@emulators/core/package.json b/packages/@emulators/core/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@emulators/core",
-  "version": "0.13.8",
+  "version": "0.13.9",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",

diff --git a/packages/@emulators/github/package.json b/packages/@emulators/github/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@emulators/github",
-  "version": "0.13.8",
+  "version": "0.13.9",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",

diff --git a/packages/@emulators/gitlab/package.json b/packages/@emulators/gitlab/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@emulators/gitlab",
-  "version": "0.13.8",
+  "version": "0.13.9",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",

diff --git a/packages/@emulators/google/package.json b/packages/@emulators/google/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@emulators/google",
-  "version": "0.13.8",
+  "version": "0.13.9",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",

diff --git a/packages/@emulators/mcp/package.json b/packages/@emulators/mcp/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@emulators/mcp",
-  "version": "0.13.8",
+  "version": "0.13.9",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",

diff --git a/packages/@emulators/microsoft/package.json b/packages/@emulators/microsoft/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@emulators/microsoft",
-  "version": "0.13.8",
+  "version": "0.13.9",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",

diff --git a/packages/@emulators/mongoatlas/package.json b/packages/@emulators/mongoatlas/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@emulators/mongoatlas",
-  "version": "0.13.8",
+  "version": "0.13.9",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",

diff --git a/packages/@emulators/okta/package.json b/packages/@emulators/okta/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@emulators/okta",
-  "version": "0.13.8",
+  "version": "0.13.9",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",

diff --git a/packages/@emulators/posthog/package.json b/packages/@emulators/posthog/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@emulators/posthog",
-  "version": "0.13.8",
+  "version": "0.13.9",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",

diff --git a/packages/@emulators/resend/package.json b/packages/@emulators/resend/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@emulators/resend",
-  "version": "0.13.8",
+  "version": "0.13.9",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",

diff --git a/packages/@emulators/slack/package.json b/packages/@emulators/slack/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@emulators/slack",
-  "version": "0.13.8",
+  "version": "0.13.9",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",

diff --git a/packages/@emulators/spotify/package.json b/packages/@emulators/spotify/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@emulators/spotify",
-  "version": "0.13.8",
+  "version": "0.13.9",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",

diff --git a/packages/@emulators/stripe/package.json b/packages/@emulators/stripe/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@emulators/stripe",
-  "version": "0.13.8",
+  "version": "0.13.9",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",

diff --git a/packages/@emulators/vercel/package.json b/packages/@emulators/vercel/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@emulators/vercel",
-  "version": "0.13.8",
+  "version": "0.13.9",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",

diff --git a/packages/@emulators/workos/package.json b/packages/@emulators/workos/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@emulators/workos",
-  "version": "0.13.8",
+  "version": "0.13.9",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",

diff --git a/packages/@emulators/workos/src/__tests__/workos.test.ts b/packages/@emulators/workos/src/__tests__/workos.test.ts
@@ -383,9 +383,7 @@ describe("workos emulator with the real @workos-inc/node SDK", () => {
     expect(afterDelete.data).toEqual([]);
 
     // An unknown org 404s rather than answering an empty list.
-    await expect(
-      workos.organizations.listOrganizationApiKeys({ organizationId: "org_missing" }),
-    ).rejects.toThrow();
+    await expect(workos.organizations.listOrganizationApiKeys({ organizationId: "org_missing" })).rejects.toThrow();
   });
 
   it("serves JWKS on both surfaces and OAuth AS metadata", async () => {

diff --git a/packages/@emulators/workos/src/store.ts b/packages/@emulators/workos/src/store.ts
@@ -46,12 +46,7 @@ export function getWorkosStore(store: Store): WorkosStore {
       "organization_id",
       "token",
     ]),
-    apiKeys: store.collection<WorkosApiKey>("workos.api_keys", [
-      "workos_id",
-      "value",
-      "user_id",
-      "organization_id",
-    ]),
+    apiKeys: store.collection<WorkosApiKey>("workos.api_keys", ["workos_id", "value", "user_id", "organization_id"]),
     authCodes: store.collection<WorkosAuthCode>("workos.auth_codes", ["code"]),
     sessions: store.collection<WorkosSession>("workos.sessions", ["refresh_token", "workos_id"]),
     vaultObjects: store.collection<WorkosVaultObject>("workos.vault_objects", ["workos_id", "name"]),

diff --git a/packages/@emulators/x/package.json b/packages/@emulators/x/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@emulators/x",
-  "version": "0.13.8",
+  "version": "0.13.9",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",

diff --git a/packages/emulate/package.json b/packages/emulate/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/emulate",
-  "version": "0.13.8",
+  "version": "0.13.9",
   "description": "Local drop-in replacement services for CI and no-network sandboxes",
   "license": "Apache-2.0",
   "type": "module",