Agentic Commerce — Revenue per AI (ChatGPT, Claude, Perplexity, Copilot)

• New: the catalog over MCP as well. /ucp/mcp offers the same search and lookup as MCP tools (catalog_search, catalog_lookup) — the protocol the large assistants speak natively. Same source as the REST endpoints, no second truth; the UCP profile advertises the transport while it is switched on
• New: "The shop as a whole" in the AI readiness report. Above the product list it now says how the shop stands towards an agent: which of the eight agent endpoints answer, whether the seller is identifiable (legal name, VAT ID, tax number, address), and how the catalogue is doing (products scored, average, how many at 75 or above and how many below 50). The grouping follows the categories of Shopware's Agentic Readiness Scanner, so two checklists do not run side by side
• Only what the plugin can determine itself is reported. Reachability, bot protection and content quality stay with the scanner
• PLUGIN_VERSION constant set to 1.67.67

• The feed query in /AGENTS.md and in the API catalog sat in a loop header. It ran once per request in practice, but Shopware's code review reads it as one query per iteration (shopware.noEntityRepositoryInLoop). It now searches once and iterates afterwards
• PLUGIN_VERSION constant set to 1.67.66

• New: Universal Commerce Protocol. The business profile sits at /.well-known/ucp per the 2026-04-08 specification: version, the dev.ucp.shopping service over REST and A2A, and the two catalog capabilities search and lookup. Behind it three real endpoints answer — POST /ucp/catalog/search, /ucp/catalog/lookup and /ucp/catalog/product — from the sales channel's products, with price in minor units plus currency, availability, GTIN, manufacturer number, brand and cover image, cursor pagination and 10 results per page
• Only what answers is advertised. Cart, checkout, order and payment handlers are deliberately absent from the profile: an advertised capability without an endpoint behind it sends an agent into an error instead of an order. Ordering stays in the storefront checkout
• New: A2A agent card at /.well-known/agent-card.json, published together with the endpoint it names: POST /a2a/v1/message:send answers product questions from the same catalog service. The card lists exactly one skill — product search — and that skill works
• AGENTS.md and the API catalog link the new addresses, but only while their switches are on
• Both can be switched off per sales channel. Only data that is public on the product pages anyway is served, and a request returns at most 50 products
• PLUGIN_VERSION constant set to 1.67.65

• The query for the five weakest products on the dashboard sat in a loop header. It ran only once in practice, but Shopware's code review reads it as one query per iteration (shopware.noEntityRepositoryInLoop). It now searches once and iterates afterwards
• PLUGIN_VERSION constant set to 1.67.62

• The "Missing fields" column of the AI readiness report lists the labels as a running enumeration again instead of boxes side by side — easier to read in a list. The hint with the path to the field stays: it appears when hovering a label
• PLUGIN_VERSION constant set to 1.67.61

• The AI readiness alt-text criterion could not pass on any product. It reads the alt text through the association from the product image to the media entity, and that association was not loaded during a rescore — so nothing was ever found, no matter whether alt texts are maintained. Every product with images lost 10 points. Measured on products with alt texts in place: 0 of 2 before, 2 of 2 now
• Variants are now scored with the data they inherit from their parent. Cover image, gallery, properties, EAN, manufacturer number, manufacturer, description and meta description are inherited in Shopware; the rescore read them without inheritance and therefore saw an empty product, while the storefront shows the parent's image to the customer. A variant without own fields scored 0. Measured on the same variant: 0 before, 65 now
• "Missing fields" now names fields a merchant can find. The column printed the scorer's internal keys ("coverImage", "description100") — names that exist nowhere in the admin. Every gap is now named after the field it means and carries the path to it as a tooltip, in all eight languages of the plugin. "description100" and "description300" are one single field, the product description, at 100 and at 300 characters
• "Second product image" now really asks for a second image. The criterion promised one gallery image besides the cover but counted the cover itself, so a product with a single picture passed. The criterion is stricter now: products with only one image lose 10 points
• A rescore no longer stops after 5000 products; the limit follows the number of products to score
• The AI readiness average on the dashboard divided the sum of at most 5000 loaded rows by the total of all rows and was too low from 5000 scored products on. Average and distribution now come from database aggregations, and the five weakest products are sorted by the database
• The English hint texts for the criteria are no longer stored per product — they were never displayed; the explanation is now in the list, translated
• PLUGIN_VERSION constant set to 1.67.60

• Minimum Shopware version raised to 6.7.9 (Composer constraint ~6.7.9, before ~6.7.0). Shops on 6.7.0 to 6.7.8 no longer receive this update. The FAQ already named 6.7.9.0 as the minimum; the cookie registration now relies solely on CookieGroupCollectEvent, and the deprecated CookieProviderInterface decorator was removed
• No repository calls inside loops any more: the support bundle counts the five plugin tables with five separate queries; the tracking cleanup and the readiness rescore command process each batch with one search and one write
• Static analysis: deprecated EntitySearchResult::first() replaced, checks that could never fail removed, unused code removed; PHPStan reports no findings
• Perplexity feed provider no longer receives an unused configuration service
• PLUGIN_VERSION constant set to 1.67.59

• Request paths (controllers, subscribers, Markdown renderer) no longer create a fallback context; the context comes from the request, the event or the caller
• Plain SQL replaced by the DAL in the dashboard, the admin tools, the feed skip log and the tracking cleanup; the AI revenue tile is aggregated by the database without a row limit and converted at the order's currency factor
• Existing product export templates are no longer rewritten: the automatic template update on save and the two template migrations were removed, so merchant changes to body_template stay as they are. To use the current template, select it again in the product comparison sales channel
• robots.txt: the plugin no longer registers its own /robots.txt route; Shopware's robots.txt stays in charge and the plugin only replaces its content while the robots.txt option is switched on
• Migrations: nine migrations with hand-set timestamps are replaced by one idempotent migration; on existing installations it finds all tables and columns in place and changes nothing
• Uninstall no longer deletes configuration values itself (Shopware does that); FAQ CMS slots are removed through the DAL
• Dashboard: no inline scripts or styles any more; the page uses the shop's storefront layout and a storefront JS plugin. Dates and numbers follow the shop language and the visitor's time zone instead of fixed de-DE / Europe/Berlin
• Dashboard password is stored as a hash only. Plain-text passwords from earlier versions are hashed on update and keep working; after the update the dashboard asks for the password once more
• The attribution cookie is still set only with consent to the statistics cookie group; responses that set or clear it are now marked private/no-store so the HTTP cache cannot replay them to visitors without consent
• Administration: module, components, CSS classes and snippet keys carry the great-agentic- prefix; HTTP calls go through an ApiService; snippets are autoloaded; no native DOM calls; all notifications, table headers and labels come from snippets in eight languages; errors are shown as notifications
• Error handling narrowed: no catch-all blocks; tracking write failures are logged
• Code comments in English; the package no longer contains docs/, tests and development files; privacy notes moved into README.md / LIESMICH.md
• Dashboard IP whitelist now reads the maintenance mode allowlist of the sales channel (the configuration key used before does not exist, so with the option on every IP was refused) and accepts exact addresses and CIDR ranges, IPv4 and IPv6; the dashboard tool endpoints check it too
• Admin notifications show the real number (feed preview showed "0 products")
• PLUGIN_VERSION constant set to 1.67.58

• The dashboard is now a regular storefront page. Please compile the theme again after the update.
• The dashboard shows dates and numbers in the shop language and the browser time zone.
• The dashboard password is now stored encrypted. Existing passwords are converted automatically during the update.
• The AI attribution cookie is only set after the visitor accepts the statistics cookie group.
• robots.txt now uses Shopware's own robots.txt page. The content from the plugin settings is shown there.
• Existing product exports are no longer changed by the plugin. To get a newer AI feed template, select it again in the sales channel.
• The AI tools in the administration were reworked. All texts are now translated.
• Technical improvements for better stability and compatibility with Shopware 6.7.

• AI Readiness list now shows a clear empty state with icon and text when no scores exist yet, instead of an empty grid
• Product column no longer shows "(unknown)" for variants or bulk-imported products: falls back to the parent product's name, and finally to the product number if no name is available
• Feed Preview: the "Preview + Validate" button now stays on the same row as the provider dropdown at any card width
• Re-score progress bar now uses Shopware's brand blue while running and Shopware's success green when done, matching the rest of the admin

• Removed the statement that switched the database's foreign-key checks off during uninstall. Shopware's code review forbids it outright, and it was never needed: a foreign key only blocks dropping the table it points AT, and the drop order already puts the dependent table first. The full cycle was re-run afterwards — uninstall still clears all five tables and every configuration value
• The QR-code renderer now also probes for the encoding class before instantiating it. That closes the last static-analysis warning and is the better behaviour anyway: a missing class would previously have surfaced only at the point of use

• Shopware's code review stopped with a severe error while analysing QrCodeRenderer: it could not resolve the optional QR-code library. Declaring the library as a hard require fixes the review but blocks installation — measured against 6.7.13: "Required plugin/package endroid/qr-code ^6.0 is missing or not installed". The class now names the library through string constants and dynamic instantiation instead of ::class expressions, so static analysis has no symbol to resolve while the runtime behaviour is unchanged: library present, QR codes render; library absent, a placeholder appears

• Removed the OpenAI configuration card, the enableOpenAi switch and the four openAi* fields. The switch had no read site anywhere in the code since v1.4.5 — it looked like a setting and was decoration — and the detail fields only fed the plugin's own OpenAI provider, which is gone now that Shopware's Core serves the open-ai technical name itself. A migration removes the leftover rows on update. The OpenAI feed template in the product export is untouched and still ships
• Fixed every product-export feed crashing with a TypeError as soon as a merchant configured one. The plugin tagged its five providers with Shopware's shopware.product_export.provider; once Core started consuming that tag in 6.7.13, its registry received objects that do not extend the class its return type demands, and the Core subscriber runs on every render. Reproduced with a real Perplexity export — the advertised default feed — and fixed by moving the providers onto the plugin's own tag and its own subscriber, exactly as the abstract provider's own docblock has described since 1.0. It never showed in development because the container had no product export at all
• Removed the compiler pass that deleted Shopware's own OpenAI product-export provider from the container. Its docblock claimed it was inert on 6.7.x; measured on 6.7.13 it fired in every shop, including shops that never wanted an OpenAI feed. With the providers on their own tag there is nothing left to resolve, and Core's provider is back
• Fixed the AI revenue figure silently stopping at 500 attributed orders. It loaded at most 500 rows, newest first, and added them up in PHP — a shop with more orders in the selected window saw a number that looked complete and was not, on the very figure the plugin advertises. The database now does the grouping and the currency conversion, with no row limit. Measured: 601 attributed orders are counted as 601
• Fixed the plugin taking over /robots.txt and answering 404 while its robots manager was switched off, which is the factory state. Any shop that installed the plugin and never opened that setting lost its robots.txt entirely, because the route shadows Shopware's own. The request is now handed back to Shopware Core instead
• Fixed the three-dot button on every row of the AI Readiness list opening an empty menu. It now offers "Open product" and jumps straight to the product that lost the points
• Column headings in the AI Readiness list now fall back to English in administration languages the plugin does not ship, instead of showing the raw snippet key
• Removed the two demo-traffic buttons from the AI Tools screen. The generators behind them were deliberately taken out in 1.67.23 because their rows could not be told apart from real tracking data, but the buttons stayed and called routes that no longer exist. The screen now shows the GPTBot crawl simulation it actually performs
• Fixed JSON-LD and Open Graph publishing every price as euro regardless of the sales channel currency. Search engines and AI agents were served CHF or GBP amounts labelled EUR
• Admin requests now carry their access token from the start. Every click previously went out unauthenticated first, earned a 401 and was only rescued by a retry — 36 avoidable failed requests for a single re-scoring run
• Store description and FAQ no longer advertise a demo traffic generator or a data reset that the plugin does not contain
• Removed eight snippet-registration classes that implemented SnippetFileInterface, a Shopware interface that no longer exists in 6.7.13. They had no effect — storefront snippets load from the JSON files by convention, verified before and after removal — but they would have broken any classmap-based autoloading
• Store description and features now list the JSON-LD types the plugin actually emits (measured on a rendered product page) instead of a shorter, outdated selection

Initial Store Upload 

First release in the store