# Change history: Apps and publishing

[← Changelog](/docs/changelog). Entries: 64.

- 2026-10-01 [BC-1001-20: keys issued by a Cowork/Code seat are no wider than the seat mode](/docs/changelog/2026-10-01#bc-1001-20-keys-issued-by-a-cowork-code-seat-are-no-wider-than-the-seat-mode)
- 2026-10-01 [FIX-1001-22: an application and an empty-slot key are issued in the caller's mode instead of 403](/docs/changelog/2026-10-01#fix-1001-22-an-application-and-an-empty-slot-key-are-issued-in-the-caller-s-mode-instead-of-403)
- 2026-09-23 [NEW-0923-13: app active-servers refusal now names the server owner](/docs/changelog/2026-09-23#new-0923-13-app-active-servers-refusal-now-names-the-server-owner)
- 2026-09-22 [FIX-0922-6: deleting an app releases the authorization key held by its card](/docs/changelog/2026-09-22#fix-0922-6-deleting-an-app-releases-the-authorization-key-held-by-its-card)
- 2026-09-17 [FIX-0917-15: apps with an interface are no longer created in API-only mode](/docs/changelog/2026-09-17#fix-0917-15-apps-with-an-interface-are-no-longer-created-in-api-only-mode)
- 2026-09-17 [BC-0917-20: key mode errors point to an available switch](/docs/changelog/2026-09-17#bc-0917-20-key-mode-errors-point-to-an-available-switch)
- 2026-09-16 [BC-0916-20: a whitespace-only application name is rejected on every write path](/docs/changelog/2026-09-16#bc-0916-20-a-whitespace-only-application-name-is-rejected-on-every-write-path)
- 2026-09-15 [BC-0915-11: application publication no longer hides a rejected placement bind](/docs/changelog/2026-09-15#bc-0915-11-application-publication-no-longer-hides-a-rejected-placement-bind)
- 2026-09-15 [BC-0915-15: a read-only key can deploy an application to its own server again](/docs/changelog/2026-09-15#bc-0915-15-a-read-only-key-can-deploy-an-application-to-its-own-server-again)
- 2026-09-13 [FIX-0913-4: the account freeze is checked for an application key even without a user session](/docs/changelog/2026-09-13#fix-0913-4-the-account-freeze-is-checked-for-an-application-key-even-without-a-user-session)
- 2026-09-11 [FIX-0911-1: the OpenAPI spec's scope slice no longer pulls in unrelated hand-written sections](/docs/changelog/2026-09-11#fix-0911-1-the-openapi-spec-s-scope-slice-no-longer-pulls-in-unrelated-hand-written-sections)
- 2026-09-07 [NEW-0907-7: Bitrix24 employee id of the app author in /v1/apps responses](/docs/changelog/2026-09-07#new-0907-7-bitrix24-employee-id-of-the-app-author-in-v1-apps-responses)
- 2026-09-04 [NEW-0904-2: the Supports BitrixMobile flag at application registration](/docs/changelog/2026-09-04#new-0904-2-the-supports-bitrixmobile-flag-at-application-registration)
- 2026-09-02 [FIX-0902-13: the Bitrix24 plan refusal on key issuance and app installation now states its cause](/docs/changelog/2026-09-02#fix-0902-13-the-bitrix24-plan-refusal-on-key-issuance-and-app-installation-now-states-its-cause)
- 2026-08-30 [BC-0830-2: an application rename no longer reports success without confirmation from Bitrix24](/docs/changelog/2026-08-30#bc-0830-2-an-application-rename-no-longer-reports-success-without-confirmation-from-bitrix24)
- 2026-08-28 [FIX-0828-15: a pending-deletion owner's key no longer calls Bitrix24 methods through V1](/docs/changelog/2026-08-28#fix-0828-15-a-pending-deletion-owner-s-key-no-longer-calls-bitrix24-methods-through-v1)
- 2026-08-26 [NEW-0826-7: an app is no longer granted the `vibe:infra` scope on accounts with infrastructure disabled](/docs/changelog/2026-08-26#new-0826-7-an-app-is-no-longer-granted-the-vibe-infra-scope-on-accounts-with-infrastructure-disabled)
- 2026-08-26 [NEW-0826-8: the `vibe:infra` scope can no longer be added to an app by editing its scopes](/docs/changelog/2026-08-26#new-0826-8-the-vibe-infra-scope-can-no-longer-be-added-to-an-app-by-editing-its-scopes)
- 2026-08-25 [BC-0825-2: a read-only key no longer writes on platform endpoints](/docs/changelog/2026-08-25#bc-0825-2-a-read-only-key-no-longer-writes-on-platform-endpoints)
- 2026-08-25 [FIX-0825-3: /v1/me no longer reports app creation as unavailable to a read-only key](/docs/changelog/2026-08-25#fix-0825-3-v1-me-no-longer-reports-app-creation-as-unavailable-to-a-read-only-key)
- 2026-08-25 [BC-0825-4: a Cowork desktop key can no longer change OAuth application registrations](/docs/changelog/2026-08-25#bc-0825-4-a-cowork-desktop-key-can-no-longer-change-oauth-application-registrations)
- 2026-08-25 [BC-0825-12: POST /v1/apps now honours the Bitrix24 account policy for who may create apps](/docs/changelog/2026-08-25#bc-0825-12-post-v1-apps-now-honours-the-bitrix24-account-policy-for-who-may-create-apps)
- 2026-08-24 [FIX-0824-2: paid accounts no longer receive an error asking them to pay again](/docs/changelog/2026-08-24#fix-0824-2-paid-accounts-no-longer-receive-an-error-asking-them-to-pay-again)
- 2026-08-19 [FIX-0819-3: clarified personal-key embedding and handled OAuth without state](/docs/changelog/2026-08-19#fix-0819-3-clarified-personal-key-embedding-and-handled-oauth-without-state)
- 2026-08-19 [BC-0819-5: the freshnessWindowMinutes field is no longer returned](/docs/changelog/2026-08-19#bc-0819-5-the-freshnesswindowminutes-field-is-no-longer-returned)
- 2026-08-19 [BC-0819-6: publication refuses when the files of the saved source version are gone](/docs/changelog/2026-08-19#bc-0819-6-publication-refuses-when-the-files-of-the-saved-source-version-are-gone)
- 2026-08-19 [FIX-0819-7: app publication no longer refuses because the saved sources are old](/docs/changelog/2026-08-19#fix-0819-7-app-publication-no-longer-refuses-because-the-saved-sources-are-old)
- 2026-08-19 [BC-0819-11: an unbind the platform could not confirm no longer looks like success](/docs/changelog/2026-08-19#bc-0819-11-an-unbind-the-platform-could-not-confirm-no-longer-looks-like-success)
- 2026-08-18 [NEW-0818-10: applications catalog in the API: list and card](/docs/changelog/2026-08-18#new-0818-10-applications-catalog-in-the-api-list-and-card)
- 2026-08-14 [NEW-0814-14: a write with a lossy-charset value now reports it](/docs/changelog/2026-08-14#new-0814-14-a-write-with-a-lossy-charset-value-now-reports-it)
- 2026-08-12 [NEW-0812-5: app publication accepts sources from a named server](/docs/changelog/2026-08-12#new-0812-5-app-publication-accepts-sources-from-a-named-server)
- 2026-08-12 [NEW-0812-7: the machine schema now describes the live app, AI and telephony methods](/docs/changelog/2026-08-12#new-0812-7-the-machine-schema-now-describes-the-live-app-ai-and-telephony-methods)
- 2026-08-12 [FIX-0812-11: a dedicated-machine deploy keeps the build's internal links and checks the application root](/docs/changelog/2026-08-12#fix-0812-11-a-dedicated-machine-deploy-keeps-the-build-s-internal-links-and-checks-the-application-root)
- 2026-08-10 [FIX-0810-18: a transient database transaction failure no longer returns 500 with an internal engine code](/docs/changelog/2026-08-10#fix-0810-18-a-transient-database-transaction-failure-no-longer-returns-500-with-an-internal-engine-code)
- 2026-08-06 [FIX-0806-5: a catalog application card opens its subpath instead of the server root](/docs/changelog/2026-08-06#fix-0806-5-a-catalog-application-card-opens-its-subpath-instead-of-the-server-root)
- 2026-08-06 [NEW-0806-13: the key-limit refusal now states the numbers](/docs/changelog/2026-08-06#new-0806-13-the-key-limit-refusal-now-states-the-numbers)
- 2026-08-06 [FIX-0806-18: issuance refusals now name a service problem instead of an access one](/docs/changelog/2026-08-06#fix-0806-18-issuance-refusals-now-name-a-service-problem-instead-of-an-access-one)
- 2026-08-06 [FIX-0806-23: key issuance now checks platform access](/docs/changelog/2026-08-06#fix-0806-23-key-issuance-now-checks-platform-access)
- 2026-08-05 [NEW-0805-6: deploy warns when the verified app path disagrees with the address Bitrix24 opens](/docs/changelog/2026-08-05#new-0805-6-deploy-warns-when-the-verified-app-path-disagrees-with-the-address-bitrix24-opens)
- 2026-08-05 [FIX-0805-15: on a self-hosted account a module refusal ends the issuance again](/docs/changelog/2026-08-05#fix-0805-15-on-a-self-hosted-account-a-module-refusal-ends-the-issuance-again)
- 2026-08-05 [FIX-0805-22: placement binding: when Bitrix24 names the reason, so do we](/docs/changelog/2026-08-05#fix-0805-22-placement-binding-when-bitrix24-names-the-reason-so-do-we)
- 2026-08-04 [FIX-0804-9: deleting an application now completes its removal from the account](/docs/changelog/2026-08-04#fix-0804-9-deleting-an-application-now-completes-its-removal-from-the-account)
- 2026-08-01 [BC-0801-3: publication checks application authorization before snapshot freshness](/docs/changelog/2026-08-01#bc-0801-3-publication-checks-application-authorization-before-snapshot-freshness)
- 2026-08-01 [NEW-0801-4: hints in publication responses: hint on NO_USER_TOKEN and presentedAt on SNAPSHOT_REQUIRED](/docs/changelog/2026-08-01#new-0801-4-hints-in-publication-responses-hint-on-no_user_token-and-presentedat-on-snapshot_required)
- 2026-08-01 [FIX-0801-5: re-saving the same sources unblocks publication](/docs/changelog/2026-08-01#fix-0801-5-re-saving-the-same-sources-unblocks-publication)
- 2026-07-31 [NEW-0731-4: an app now decides for itself whether the placement iframe auto-height is on](/docs/changelog/2026-07-31#new-0731-4-an-app-now-decides-for-itself-whether-the-placement-iframe-auto-height-is-on)
- 2026-07-30 [FIX-0730-7: POST /v1/apps reports the plan requirement clearly on a self-hosted portal](/docs/changelog/2026-07-30#fix-0730-7-post-v1-apps-reports-the-plan-requirement-clearly-on-a-self-hosted-portal)
- 2026-07-27 [FIX-0727-13: Apps: a derived key and app-scope sync grant no more than the calling key holds](/docs/changelog/2026-07-27#fix-0727-13-apps-a-derived-key-and-app-scope-sync-grant-no-more-than-the-calling-key-holds)
- 2026-07-23 [BC-0723-9: POST /v1/apps no longer returns the prefix and suffix fields in the create response](/docs/changelog/2026-07-23#bc-0723-9-post-v1-apps-no-longer-returns-the-prefix-and-suffix-fields-in-the-create-response)
- 2026-07-23 [FIX-0723-12: POST /v1/apps reports the plan requirement clearly on the cloud-shared path](/docs/changelog/2026-07-23#fix-0723-12-post-v1-apps-reports-the-plan-requirement-clearly-on-the-cloud-shared-path)
- 2026-07-20 [NEW-0720-1: Application responses now return the publication status](/docs/changelog/2026-07-20#new-0720-1-application-responses-now-return-the-publication-status)
- 2026-07-18 [NEW-0718-3: connector app-install error codes are now also possible on cloud portals (phased rollout)](/docs/changelog/2026-07-18#new-0718-3-connector-app-install-error-codes-are-now-also-possible-on-cloud-portals-phased-rollout)
- 2026-07-14 [FIX-0714-22: app deletion is no longer blocked by a galaxy host on its key](/docs/changelog/2026-07-14#fix-0714-22-app-deletion-is-no-longer-blocked-by-a-galaxy-host-on-its-key)
- 2026-07-14 [BC-0714-30: renaming a catalog app reaches Bitrix24, publish loses menuTitle](/docs/changelog/2026-07-14#bc-0714-30-renaming-a-catalog-app-reaches-bitrix24-publish-loses-menutitle)
- 2026-07-13 [FIX-0713-1: OAuth application key platform scopes now sync on create and edit](/docs/changelog/2026-07-13#fix-0713-1-oauth-application-key-platform-scopes-now-sync-on-create-and-edit)
- 2026-07-11 [NEW-0711-2: distinct error code when the Vibecode Connector module is not installed in the Bitrix24 account](/docs/changelog/2026-07-11#new-0711-2-distinct-error-code-when-the-vibecode-connector-module-is-not-installed-in-the-bitrix24-account)
- 2026-07-10 [FIX-0710-23: app publish recovers from a placement drift](/docs/changelog/2026-07-10#fix-0710-23-app-publish-recovers-from-a-placement-drift)
- 2026-07-09 [FIX-0709-9: unpublishing removes the tab across all of the app's handlers](/docs/changelog/2026-07-09#fix-0709-9-unpublishing-removes-the-tab-across-all-of-the-app-s-handlers)
- 2026-07-03 [FIX-0703-5: Apps created via the API now open correctly as placements](/docs/changelog/2026-07-03#fix-0703-5-apps-created-via-the-api-now-open-correctly-as-placements)
- 2026-06-30 [FIX-0630-4: PATCH on an OAuth application key's scopes: honest rejection instead of false access](/docs/changelog/2026-06-30#fix-0630-4-patch-on-an-oauth-application-key-s-scopes-honest-rejection-instead-of-false-access)
- 2026-06-30 [NEW-0630-8: Relink an app's OAuth credentials without deleting it](/docs/changelog/2026-06-30#new-0630-8-relink-an-app-s-oauth-credentials-without-deleting-it)
- 2026-06-29 [FIX-0629-7: app install via /v1/apps returns a precise error code instead of the generic BOX_APP_INSTALL_FAILED](/docs/changelog/2026-06-29#fix-0629-7-app-install-via-v1-apps-returns-a-precise-error-code-instead-of-the-generic-box_app_install_failed)
- 2026-06-29 [NEW-0629-9: New error code CONNECTOR_APP_INSTALL_FORBIDDEN on app install](/docs/changelog/2026-06-29#new-0629-9-new-error-code-connector_app_install_forbidden-on-app-install)
- 2026-06-23 [NEW-0623-10: push-delivery setup hint in event-subscription errors](/docs/changelog/2026-06-23#new-0623-10-push-delivery-setup-hint-in-event-subscription-errors)