Skip to main content

Changelog

This changelog combines integrator-relevant changes for the HTTP API (api.neuroon.ai) and the widget (cdn.neuroon.ai/widget/widget.js).

Format: widget versions follow SemVer. The HTTP API has no URL versioning; breaking changes are announced explicitly here with the BREAKING marker.

2026-05-06 — Documentation​

  • Correction: rate limits are per endpoint (not per plan). Documentation updated with exact backend values.
  • Correction: the actual WordPress plugin is neuroon-search v0.8.4 (older docs claimed v1.0.6).
  • Correction: the API does not emit the X-RateLimit-Reset header. Only X-RateLimit-Limit, X-RateLimit-Remaining and Retry-After (on 429) are set.
  • Correction: the 429 error body is shaped { error, message, retryAfter, limit, remaining, timestamp }, not the standard envelope { timestamp, status, error, message, path }.
  • Addition: documented the trusted-domain list (localhost, 127.0.0.1, neuroon.ai with suffix-based matching) and clarified that it only applies to the widget token, not the Shop API Key.
  • Addition: clarified the difference between rate limit (per-endpoint throttling) and plan quotas (maxProducts, maxSearchesPerMonth returned by GET /api/plugin/shops/me).
  • The separate neuroon-agentic-commerce v0.1.0 plugin (UCP / AI agents, agent-driven checkout) will get its own section in a later iteration.

Documentation rewrite — May 6, 2026​

Full rewrite of docs.neuroon.ai. This is the first version of the documentation verified statement by statement against the source code.

  • Inaccurate claims inherited from the previous documentation removed. See Migration from the old docs.
  • New section What is not supported listing capabilities that are not implemented, to avoid confusion.
  • New stack-specific Recipes: your stack.

Widget​

0.9.10 — current​

  • Current version deployed at https://cdn.neuroon.ai/widget@0.9.10/widget.js.
  • Preact + isolated Shadow DOM.
  • 9 languages: es, en eager; fr, de, it, pt, ca, eu, gl lazy.
  • 30+ --nrn-* CSS variables in RGB-triplet format (--nrn-primary: 6 182 212).
  • CustomEvents: emits neuroon-theme-change; listens to neuroon:cart-update.
  • postMessage: receives neuroon:setStyles and neuroon:setTheme from the embedding frame.
  • Configuration is exclusively via data-* attributes (data-token, data-container, data-theme, data-locale, data-api-url).

Version confirmed.

HTTP API​

Current state — first rigorous documentation pass​

This is the first time we document the API with the right level of rigor. The API was already in production; what changes is the documentation. Stable endpoints we cover:

  • /api/widget/* — X-Widget-Token auth. Search (GET and POST), audio search, visual search, suggestions, suggest, trending, compare, cart cross-sell, click tracking, conversion tracking, individual analytics events and batch.
  • /api/plugin/shops/* — X-Shop-API-Key auth with Origin validation. Product sync (INCREMENTAL/FULL, max 500 per batch), product CRUD, domain verification, conversion tracking, shop info.

Conventions​

  • No URL versioning (/v1/).
  • Errors with unified envelope { timestamp, status, error, message, path }.
  • Rate limit headers X-RateLimit-Limit, X-RateLimit-Remaining, Retry-After (the latter only on 429).
  • Eventual consistency on sync: 2–5 seconds between 200 OK and the search engine availability.

Change policy​

  • Breaking changes to the HTTP API are announced here with at least 30 days of notice, except critical security fixes.
  • Minor changes (new optional fields, new headers, error message improvements) are additive and do not require integrator action.
  • Widget versions follow strict SemVer. Published versions always have their SRI hash in the CDN manifest.

How to track changes​

  • Subscribe to the notifications channel in the Dashboard.
  • Follow status.neuroon.ai for incidents.
  • For urgent changes we contact active integrators directly by email.

Further reading​

Last updated on