diff --git a/autoload/Domain/Category/CategoryRepository.php b/autoload/Domain/Category/CategoryRepository.php
index b67257e..e3bf16e 100644
--- a/autoload/Domain/Category/CategoryRepository.php
+++ b/autoload/Domain/Category/CategoryRepository.php
@@ -769,31 +769,4 @@ class CategoryRepository
         return is_array($result) ? $result : [];
     }
 
-    public function subcategoriesLangCached(int $categoryId): array
-    {
-        $cacheHandler = new \Shared\Cache\CacheHandler();
-        $cacheKey = "subcategories_lang:{$categoryId}";
-        $cached = $cacheHandler->get($cacheKey);
-
-        if ($cached) {
-            return unserialize($cached);
-        }
-
-        $categories = $this->db->select('pp_shop_categories', '*', ['parent_id' => $categoryId]);
-        if (!is_array($categories)) {
-            return [];
-        }
-
-        $result = [];
-        foreach ($categories as $cat) {
-            $lang = $this->db->get('pp_shop_categories_langs', '*', ['category_id' => $cat['id']]);
-            if (is_array($lang)) {
-                $result[] = $lang;
-            }
-        }
-
-        $cacheHandler->set($cacheKey, $result);
-
-        return $result;
-    }
 }
diff --git a/autoload/Domain/Client/ClientRepository.php b/autoload/Domain/Client/ClientRepository.php
index 31c63c6..28e724a 100644
--- a/autoload/Domain/Client/ClientRepository.php
+++ b/autoload/Domain/Client/ClientRepository.php
@@ -358,8 +358,9 @@ class ClientRepository
 
         $orders = [];
         if (is_array($rows)) {
+            $orderRepo = new \Domain\Order\OrderRepository($this->db);
             foreach ($rows as $row) {
-                $orders[] = (new \Domain\Order\OrderRepository($this->db))->orderDetailsFrontend($row);
+                $orders[] = $orderRepo->orderDetailsFrontend($row);
             }
         }
 
diff --git a/autoload/Domain/Dictionaries/DictionariesRepository.php b/autoload/Domain/Dictionaries/DictionariesRepository.php
index 43e9c2c..7ca2acf 100644
--- a/autoload/Domain/Dictionaries/DictionariesRepository.php
+++ b/autoload/Domain/Dictionaries/DictionariesRepository.php
@@ -248,10 +248,8 @@ class DictionariesRepository
 
     private function clearCache(): void
     {
-        if (class_exists('\S') && method_exists('\S', 'delete_dir')) {
-            \Shared\Helpers\Helpers::delete_dir('../temp/');
-            \Shared\Helpers\Helpers::delete_dir('../temp/dictionaries');
-        }
+        \Shared\Helpers\Helpers::delete_dir('../temp/');
+        \Shared\Helpers\Helpers::delete_dir('../temp/dictionaries');
     }
 
     private function cacheFetch(string $key)
diff --git a/autoload/Domain/Integrations/IntegrationsRepository.php b/autoload/Domain/Integrations/IntegrationsRepository.php
index 73f6bcc..8074358 100644
--- a/autoload/Domain/Integrations/IntegrationsRepository.php
+++ b/autoload/Domain/Integrations/IntegrationsRepository.php
@@ -28,7 +28,8 @@ class IntegrationsRepository
     public function getSettings( string $provider ): array
     {
         $table = $this->settingsTable( $provider );
-        $results = $this->db->query( "SELECT * FROM $table" )->fetchAll( \PDO::FETCH_ASSOC );
+        $stmt = $this->db->query( "SELECT * FROM $table" );
+        $results = $stmt ? $stmt->fetchAll( \PDO::FETCH_ASSOC ) : [];
         $settings = [];
         foreach ( $results as $row )
             $settings[$row['name']] = $row['value'];
@@ -535,8 +536,9 @@ class IntegrationsRepository
 
         $response = curl_exec( $ch );
         if ( curl_errno( $ch ) ) {
+            $error = curl_error( $ch );
             curl_close( $ch );
-            return [ 'status' => 'error', 'msg' => 'Błąd cURL: ' . curl_error( $ch ) ];
+            return [ 'status' => 'error', 'msg' => 'Błąd cURL: ' . $error ];
         }
         curl_close( $ch );
 
@@ -595,8 +597,8 @@ class IntegrationsRepository
         if ( !empty( $responseData['products'] ) ) {
             $this->db->update( 'pp_shop_products', [
                 'apilo_product_id'   => reset( $responseData['products'] ),
-                'apilo_product_name' => $product->language['name'],
-            ], [ 'id' => $product->id ] );
+                'apilo_product_name' => $product['language']['name'],
+            ], [ 'id' => $product['id'] ] );
 
             return [ 'success' => true, 'message' => 'Produkt został dodany do magazynu APILO.' ];
         }
diff --git a/autoload/Domain/Languages/LanguagesRepository.php b/autoload/Domain/Languages/LanguagesRepository.php
index cac1f15..709f6ba 100644
--- a/autoload/Domain/Languages/LanguagesRepository.php
+++ b/autoload/Domain/Languages/LanguagesRepository.php
@@ -345,9 +345,10 @@ class LanguagesRepository
             return unserialize($objectData);
         }
 
-        $results = $this->db->query(
+        $stmt = $this->db->query(
             'SELECT id FROM pp_langs WHERE status = 1 ORDER BY start DESC, o ASC LIMIT 1'
-        )->fetchAll();
+        );
+        $results = $stmt ? $stmt->fetchAll() : [];
 
         $defaultLanguage = $results[0][0] ?? 'pl';
 
diff --git a/autoload/Domain/Layouts/LayoutsRepository.php b/autoload/Domain/Layouts/LayoutsRepository.php
index ca185fa..faf4794 100644
--- a/autoload/Domain/Layouts/LayoutsRepository.php
+++ b/autoload/Domain/Layouts/LayoutsRepository.php
@@ -271,25 +271,27 @@ class LayoutsRepository
             $cacheHandler->delete($cacheKey);
         }
 
-        $layoutRows = $this->db->query(
+        $stmt = $this->db->query(
             "SELECT pp_layouts.*
              FROM pp_layouts
              JOIN pp_shop_products ON pp_layouts.id = pp_shop_products.layout_id
              WHERE pp_shop_products.id = " . (int)$productId . "
              ORDER BY pp_layouts.id DESC"
-        )->fetchAll(\PDO::FETCH_ASSOC);
+        );
+        $layoutRows = $stmt ? $stmt->fetchAll(\PDO::FETCH_ASSOC) : [];
 
         if (is_array($layoutRows) && isset($layoutRows[0])) {
             $layout = $layoutRows[0];
         } else {
-            $layoutRows = $this->db->query(
+            $stmt2 = $this->db->query(
                 "SELECT pp_layouts.*
                  FROM pp_layouts
                  JOIN pp_layouts_categories ON pp_layouts.id = pp_layouts_categories.layout_id
                  JOIN pp_shop_products_categories ON pp_shop_products_categories.category_id = pp_layouts_categories.category_id
                  WHERE pp_shop_products_categories.product_id = " . (int)$productId . "
                  ORDER BY pp_shop_products_categories.o ASC, pp_layouts.id DESC"
-            )->fetchAll(\PDO::FETCH_ASSOC);
+            );
+            $layoutRows = $stmt2 ? $stmt2->fetchAll(\PDO::FETCH_ASSOC) : [];
 
             if (is_array($layoutRows) && isset($layoutRows[0])) {
                 $layout = $layoutRows[0];
@@ -348,13 +350,14 @@ class LayoutsRepository
             $cacheHandler->delete($cacheKey);
         }
 
-        $layoutRows = $this->db->query(
+        $stmt = $this->db->query(
             "SELECT pp_layouts.*
              FROM pp_layouts
              JOIN pp_layouts_categories ON pp_layouts.id = pp_layouts_categories.layout_id
              WHERE pp_layouts_categories.category_id = " . (int)$categoryId . "
              ORDER BY pp_layouts.id DESC"
-        )->fetchAll(\PDO::FETCH_ASSOC);
+        );
+        $layoutRows = $stmt ? $stmt->fetchAll(\PDO::FETCH_ASSOC) : [];
 
         if (is_array($layoutRows) && isset($layoutRows[0])) {
             $layout = $layoutRows[0];
diff --git a/autoload/Domain/Order/OrderAdminService.php b/autoload/Domain/Order/OrderAdminService.php
index 24efc45..350db31 100644
--- a/autoload/Domain/Order/OrderAdminService.php
+++ b/autoload/Domain/Order/OrderAdminService.php
@@ -206,18 +206,21 @@ class OrderAdminService
         }
 
         $query = "SELECT COLUMN_NAME FROM INFORMATION_SCHEMA.COLUMNS WHERE TABLE_NAME = 'pp_shop_orders' AND COLUMN_NAME != 'id'";
-        $columns = $mdb->query($query)->fetchAll(\PDO::FETCH_COLUMN);
+        $stmt = $mdb->query($query);
+        $columns = $stmt ? $stmt->fetchAll(\PDO::FETCH_COLUMN) : [];
         $columnsList = implode(', ', $columns);
         $mdb->query('INSERT INTO pp_shop_orders (' . $columnsList . ') SELECT ' . $columnsList . ' FROM pp_shop_orders pso WHERE pso.id = ' . $orderId);
         $newOrderId = (int)$mdb->id();
 
         $query = "SELECT COLUMN_NAME FROM INFORMATION_SCHEMA.COLUMNS WHERE TABLE_NAME = 'pp_shop_order_products' AND COLUMN_NAME != 'id' AND COLUMN_NAME != 'order_id'";
-        $columns = $mdb->query($query)->fetchAll(\PDO::FETCH_COLUMN);
+        $stmt2 = $mdb->query($query);
+        $columns = $stmt2 ? $stmt2->fetchAll(\PDO::FETCH_COLUMN) : [];
         $columnsList = implode(', ', $columns);
         $mdb->query('INSERT INTO pp_shop_order_products (order_id, ' . $columnsList . ') SELECT ' . $newOrderId . ', ' . $columnsList . ' FROM pp_shop_order_products psop WHERE psop.order_id = ' . $orderId);
 
         $query = "SELECT COLUMN_NAME FROM INFORMATION_SCHEMA.COLUMNS WHERE TABLE_NAME = 'pp_shop_order_statuses' AND COLUMN_NAME != 'id' AND COLUMN_NAME != 'order_id'";
-        $columns = $mdb->query($query)->fetchAll(\PDO::FETCH_COLUMN);
+        $stmt3 = $mdb->query($query);
+        $columns = $stmt3 ? $stmt3->fetchAll(\PDO::FETCH_COLUMN) : [];
         $columnsList = implode(', ', $columns);
         $mdb->query('INSERT INTO pp_shop_order_statuses (order_id, ' . $columnsList . ') SELECT ' . $newOrderId . ', ' . $columnsList . ' FROM pp_shop_order_statuses psos WHERE psos.order_id = ' . $orderId);
 
diff --git a/autoload/Domain/Order/OrderRepository.php b/autoload/Domain/Order/OrderRepository.php
index 66cf7ae..63dc4ca 100644
--- a/autoload/Domain/Order/OrderRepository.php
+++ b/autoload/Domain/Order/OrderRepository.php
@@ -501,9 +501,10 @@ class OrderRepository
     {
         $date = date('Y-m');
 
-        $results = $this->db->query(
+        $stmt = $this->db->query(
             'SELECT MAX( CONVERT( substring_index( substring_index( number, \'/\', -1 ), \' \', -1 ), UNSIGNED INTEGER) ) FROM pp_shop_orders WHERE date_order LIKE \'' . $date . '%\''
-        )->fetchAll();
+        );
+        $results = $stmt ? $stmt->fetchAll() : [];
 
         $nr = 0;
         if (is_array($results) && count($results)) {
@@ -618,6 +619,7 @@ class OrderRepository
         $this->db->insert('pp_shop_order_statuses', ['order_id' => $order_id, 'status_id' => 0, 'mail' => 1]);
 
         if (is_array($basket)) {
+            $attributeRepo = new \Domain\Attribute\AttributeRepository($this->db);
             foreach ($basket as $basket_position) {
                 $attributes = '';
                 $product = $productRepo->findCached($basket_position['product-id'], $lang_id);
@@ -625,7 +627,6 @@ class OrderRepository
                 if (is_array($basket_position['attributes'])) {
                     foreach ($basket_position['attributes'] as $row) {
                         $row = explode('-', $row);
-                        $attributeRepo = new \Domain\Attribute\AttributeRepository($this->db);
                         $attribute = $attributeRepo->frontAttributeDetails((int)$row[0], $lang_id);
                         $value = $attributeRepo->frontValueDetails((int)$row[1], $lang_id);
 
@@ -641,7 +642,7 @@ class OrderRepository
                 $product_custom_fields = '';
                 if (is_array($basket_position['custom_fields'])) {
                     foreach ($basket_position['custom_fields'] as $key => $val) {
-                        $custom_field = (new \Domain\Product\ProductRepository($this->db))->findCustomFieldCached($key);
+                        $custom_field = $productRepo->findCustomFieldCached($key);
                         if ($product_custom_fields) {
                             $product_custom_fields .= '<br>';
                         }
diff --git a/autoload/Domain/Product/ProductRepository.php b/autoload/Domain/Product/ProductRepository.php
index 55d6492..e37de93 100644
--- a/autoload/Domain/Product/ProductRepository.php
+++ b/autoload/Domain/Product/ProductRepository.php
@@ -1154,6 +1154,11 @@ class ProductRepository
      */
     public function updateCustomLabel(int $productId, string $label, $value): bool
     {
+        $allowed = ['0', '1', '2', '3', '4'];
+        if (!in_array($label, $allowed, true)) {
+            return false;
+        }
+
         $this->db->update( 'pp_shop_products', [
             'custom_label_' . $label => $value ? $value : null,
         ], [ 'id' => $productId ] );
@@ -1478,6 +1483,11 @@ class ProductRepository
      */
     public function customLabelSuggestions(string $customLabel, string $labelType): array
     {
+        $allowed = ['custom_label_0', 'custom_label_1', 'custom_label_2', 'custom_label_3', 'custom_label_4'];
+        if (!in_array($labelType, $allowed, true)) {
+            return [];
+        }
+
         $output = [];
         $results = $this->db->query(
             'SELECT DISTINCT ' . $labelType . ' AS label FROM pp_shop_products WHERE ' . $labelType . ' LIKE :custom_label LIMIT 10',
@@ -1496,6 +1506,11 @@ class ProductRepository
      */
     public function saveCustomLabel(int $productId, string $customLabel, string $labelType): bool
     {
+        $allowed = ['custom_label_0', 'custom_label_1', 'custom_label_2', 'custom_label_3', 'custom_label_4'];
+        if (!in_array($labelType, $allowed, true)) {
+            return false;
+        }
+
         return (bool) $this->db->update( 'pp_shop_products', [ $labelType => $customLabel ], [ 'id' => $productId ] );
     }
 
@@ -1525,6 +1540,7 @@ class ProductRepository
         global $lang_id;
 
         $settings = ( new \Domain\Settings\SettingsRepository( $this->db ) )->allSettings( true );
+        $this->transportRepoForXml = new \Domain\Transport\TransportRepository( $this->db );
 
         $domainPrefix = 'https';
         $url = preg_replace( '#^(http(s)?://)?w{3}\.#', '$1', $_SERVER['SERVER_NAME'] );
@@ -1715,7 +1731,7 @@ class ProductRepository
         $shippingNode->appendChild( $doc->createElement( 'g:country', 'PL' ) );
         $shippingNode->appendChild( $doc->createElement( 'g:service', '1 dzień roboczy' ) );
         $shippingNode->appendChild( $doc->createElement( 'g:price',
-            ( new \Domain\Transport\TransportRepository( $this->db ) )->lowestTransportPrice( (int) $product['wp'] ) . ' PLN'
+            $this->transportRepoForXml->lowestTransportPrice( (int) $product['wp'] ) . ' PLN'
         ) );
     }
 
@@ -2197,8 +2213,8 @@ class ProductRepository
         $product['categories'] = $this->db->select('pp_shop_products_categories', 'category_id', ['product_id' => $productId]);
         $product['products_related'] = $this->db->select('pp_shop_products_related', 'product_related_id', ['product_id' => $productId]);
 
-        $setId = $this->db->select('pp_shop_product_sets_products', 'set_id', ['product_id' => $productId]);
-        $productsSets = $this->db->select('pp_shop_product_sets_products', 'product_id', ['set_id' => (int)$setId]);
+        $setId = (int)($product['set_id'] ?? 0);
+        $productsSets = $this->db->select('pp_shop_product_sets_products', 'product_id', ['set_id' => $setId]);
         $product['products_sets'] = is_array($productsSets) ? array_unique($productsSets) : [];
 
         $attributes = $this->db->select('pp_shop_products_attributes', ['attribute_id', 'value_id'], ['product_id' => $productId]);
@@ -2491,7 +2507,7 @@ class ProductRepository
 
     public function searchProductsByNameCount(string $query, string $langId): int
     {
-        $results = $this->db->query('SELECT COUNT(0) AS c FROM ( '
+        $stmt = $this->db->query('SELECT COUNT(0) AS c FROM ( '
             . 'SELECT psp.id, '
               . '( CASE '
                 . 'WHEN copy_from IS NULL THEN name '
@@ -2505,14 +2521,15 @@ class ProductRepository
             . ') AS q1', [
             ':query' => '%' . $query . '%',
             ':lang_id' => $langId,
-        ])->fetchAll(\PDO::FETCH_ASSOC);
+        ]);
+        $results = $stmt ? $stmt->fetchAll(\PDO::FETCH_ASSOC) : [];
 
         return (int) ($results[0]['c'] ?? 0);
     }
 
     public function getProductsIdByName(string $query, string $langId, int $limit, int $from): array
     {
-        $results = $this->db->query('SELECT psp.id, '
+        $stmt = $this->db->query('SELECT psp.id, '
             . '( CASE '
               . 'WHEN copy_from IS NULL THEN name '
               . 'WHEN copy_from IS NOT NULL THEN ( '
@@ -2526,7 +2543,8 @@ class ProductRepository
             . 'LIMIT ' . (int) $from . ',' . (int) $limit, [
             ':query' => '%' . $query . '%',
             ':lang_id' => $langId,
-        ])->fetchAll(\PDO::FETCH_ASSOC);
+        ]);
+        $results = $stmt ? $stmt->fetchAll(\PDO::FETCH_ASSOC) : [];
 
         $output = [];
         if (is_array($results)) {
@@ -2562,13 +2580,14 @@ class ProductRepository
 
     public function searchProductByNameAjax(string $query, string $langId): array
     {
-        $results = $this->db->query(
+        $stmt = $this->db->query(
             'SELECT product_id FROM pp_shop_products_langs AS pspl '
             . 'INNER JOIN pp_shop_products AS psp ON psp.id = pspl.product_id '
             . 'WHERE status = 1 AND lang_id = :lang_id AND LOWER(name) LIKE :query '
             . 'ORDER BY visits DESC LIMIT 12',
             [':query' => '%' . $query . '%', ':lang_id' => $langId]
-        )->fetchAll(\PDO::FETCH_ASSOC);
+        );
+        $results = $stmt ? $stmt->fetchAll(\PDO::FETCH_ASSOC) : [];
 
         return is_array($results) ? $results : [];
     }
diff --git a/autoload/Domain/Promotion/PromotionRepository.php b/autoload/Domain/Promotion/PromotionRepository.php
index f838a32..a9277e1 100644
--- a/autoload/Domain/Promotion/PromotionRepository.php
+++ b/autoload/Domain/Promotion/PromotionRepository.php
@@ -508,7 +508,7 @@ class PromotionRepository
 
         foreach ( $basket as $key => $val )
         {
-            $product_promotion = (new \Domain\Product\ProductRepository($this->db))->isProductOnPromotion( $val['product-id'] );
+            $product_promotion = $productRepo->isProductOnPromotion( $val['product-id'] );
 
             if ( !$product_promotion or $product_promotion and $promotion['include_product_promo'] )
             {
@@ -538,7 +538,7 @@ class PromotionRepository
         {
             foreach ( $basket as $key => $val )
             {
-                $product_promotion = (new \Domain\Product\ProductRepository($this->db))->isProductOnPromotion( $val['product-id'] );
+                $product_promotion = $productRepo->isProductOnPromotion( $val['product-id'] );
 
                 if ( !$product_promotion or $product_promotion and $promotion['include_product_promo'] )
                 {
@@ -557,7 +557,7 @@ class PromotionRepository
             $cheapest_position = false;
             foreach ( $basket as $key => $val )
             {
-                $price = (new \Domain\Product\ProductRepository($this->db))->getPrice( $val['product-id'] );
+                $price = $productRepo->getPrice( $val['product-id'] );
                 if ( !$cheapest_position or $cheapest_position['price'] > $price )
                 {
                     $cheapest_position['price'] = $price;
@@ -586,7 +586,7 @@ class PromotionRepository
 
         foreach ( $basket as $key => $val )
         {
-            $product_promotion = (new \Domain\Product\ProductRepository($this->db))->isProductOnPromotion( $val['product-id'] );
+            $product_promotion = $productRepo->isProductOnPromotion( $val['product-id'] );
 
             if ( !$product_promotion or $product_promotion and $promotion['include_product_promo'] )
             {
diff --git a/autoload/Shared/Helpers/Helpers.php b/autoload/Shared/Helpers/Helpers.php
index a79079d..7011e95 100644
--- a/autoload/Shared/Helpers/Helpers.php
+++ b/autoload/Shared/Helpers/Helpers.php
@@ -114,8 +114,8 @@ class Helpers
 
       $img_src = implode( '/', $file_tmp );
 
-      $crop_w   = $_GET['c_w'];
-      $crop_h   = $_GET['c_h'];
+      $crop_w   = $_GET['c_w'] ?? null;
+      $crop_h   = $_GET['c_h'] ?? null;
 
       $img_md5    = md5( $img_src . $height . $width . $crop_h . $crop_w );
       $file  = 'thumbs/' . $img_md5[0] . '/' . $img_md5[1] . '/' . $img_md5[2] . '/' . $img_md5;
@@ -174,7 +174,7 @@ class Helpers
       $image = new \Imagick();
       $image->readImage($file);
 
-      if ($file_type === 'png')
+      if ($file_type === 'image/png')
       {
         $image->setImageFormat('webp');
         $image->setImageCompressionQuality($compression_quality);
diff --git a/autoload/admin/App.php b/autoload/admin/App.php
index 430ebba..29e7e5f 100644
--- a/autoload/admin/App.php
+++ b/autoload/admin/App.php
@@ -57,6 +57,11 @@ class App
         if ( $result == 1 )
         {
           $user = $users->details( $login );
+          if ( !$user ) {
+            \Shared\Helpers\Helpers::alert( 'Błąd logowania.' );
+            header( 'Location: /admin/' );
+            exit;
+          }
 
           if ( $user['twofa_enabled'] == 1 )
           {
@@ -116,6 +121,12 @@ class App
         }
 
         $user = $users->details( $pending['login'] );
+        if ( !$user ) {
+          \Shared\Helpers\Helpers::delete_session( 'twofa_pending' );
+          \Shared\Helpers\Helpers::alert( 'Sesja wygasła. Zaloguj się ponownie.' );
+          header( 'Location: /admin/' );
+          exit;
+        }
         self::finalize_admin_login( $user, $domain, $cookie_name, !empty( $pending['remember'] ) );
         header( 'Location: /admin/articles/list/' );
         exit;
diff --git a/autoload/admin/Controllers/BannerController.php b/autoload/admin/Controllers/BannerController.php
index 28eeadb..b902a7e 100644
--- a/autoload/admin/Controllers/BannerController.php
+++ b/autoload/admin/Controllers/BannerController.php
@@ -165,7 +165,7 @@ class BannerController
     public function edit(): string
     {
         $bannerId = (int)\Shared\Helpers\Helpers::get('id');
-        $banner = $this->repository->find($bannerId);
+        $banner = $this->repository->find($bannerId) ?: [];
         $languages = $this->languagesRepository->languagesList();
 
         // Sprawdź czy są błędy walidacji z poprzedniego requestu
@@ -187,9 +187,9 @@ class BannerController
         $response = ['success' => false, 'errors' => []];
 
         $bannerId = (int)\Shared\Helpers\Helpers::get('id');
-        $banner = $this->repository->find($bannerId);
+        $banner = $this->repository->find($bannerId) ?: [];
         $languages = $this->languagesRepository->languagesList();
-        
+
         $viewModel = $this->buildFormViewModel($banner, $languages);
         
         // Przetwórz dane z POST
diff --git a/autoload/admin/Controllers/PagesController.php b/autoload/admin/Controllers/PagesController.php
index c97225e..cdb2fcd 100644
--- a/autoload/admin/Controllers/PagesController.php
+++ b/autoload/admin/Controllers/PagesController.php
@@ -58,7 +58,7 @@ class PagesController
 
     public function menuEdit(): string
     {
-        $menu = $this->repository->menuDetails((int)\Shared\Helpers\Helpers::get('id'));
+        $menu = $this->repository->menuDetails((int)\Shared\Helpers\Helpers::get('id')) ?: [];
 
         return \Shared\Tpl\Tpl::view('pages/menu-edit', [
             'form' => $this->buildMenuFormViewModel($menu),
@@ -167,7 +167,7 @@ class PagesController
 
     public function edit(): string
     {
-        $page = $this->repository->pageDetails((int)\Shared\Helpers\Helpers::get('id'));
+        $page = $this->repository->pageDetails((int)\Shared\Helpers\Helpers::get('id')) ?: [];
         $parentId = (int)\Shared\Helpers\Helpers::get('pid');
         $menuId = (int)\Shared\Helpers\Helpers::get('menu_id');
         $menus = $this->repository->menusList();
diff --git a/autoload/admin/Controllers/ProductArchiveController.php b/autoload/admin/Controllers/ProductArchiveController.php
index a10a085..970b9b4 100644
--- a/autoload/admin/Controllers/ProductArchiveController.php
+++ b/autoload/admin/Controllers/ProductArchiveController.php
@@ -60,7 +60,7 @@ class ProductArchiveController
                 $imageSrc = '/' . ltrim($imageSrc, '/');
             }
 
-            $categories = trim((string)$this->repository->productCategoriesText($id));
+            $categories = trim((string)$this->productRepository->productCategoriesText($id));
             $categoriesHtml = '';
             if ($categories !== '') {
                 $categoriesHtml = '<small class="text-muted product-categories">'
diff --git a/autoload/admin/Controllers/ScontainersController.php b/autoload/admin/Controllers/ScontainersController.php
index b390d2f..a680082 100644
--- a/autoload/admin/Controllers/ScontainersController.php
+++ b/autoload/admin/Controllers/ScontainersController.php
@@ -137,7 +137,7 @@ class ScontainersController
 
     public function edit(): string
     {
-        $container = $this->repository->find((int)\Shared\Helpers\Helpers::get('id'));
+        $container = $this->repository->find((int)\Shared\Helpers\Helpers::get('id')) ?: [];
         $languages = $this->languagesRepository->languagesList();
         $validationErrors = $_SESSION['form_errors'][$this->formId()] ?? null;
         if ($validationErrors) {
@@ -172,7 +172,7 @@ class ScontainersController
             exit;
         }
 
-        $container = $this->repository->find((int)\Shared\Helpers\Helpers::get('id'));
+        $container = $this->repository->find((int)\Shared\Helpers\Helpers::get('id')) ?: [];
         $languages = $this->languagesRepository->languagesList();
         $form = $this->buildFormViewModel($container, $languages);
 
diff --git a/autoload/admin/Controllers/ShopAttributeController.php b/autoload/admin/Controllers/ShopAttributeController.php
index 3eb2b65..e2dc6b7 100644
--- a/autoload/admin/Controllers/ShopAttributeController.php
+++ b/autoload/admin/Controllers/ShopAttributeController.php
@@ -150,7 +150,7 @@ class ShopAttributeController
 
     public function edit(): string
     {
-        $attribute = $this->repository->findAttribute((int)\Shared\Helpers\Helpers::get('id'));
+        $attribute = $this->repository->findAttribute((int)\Shared\Helpers\Helpers::get('id')) ?: [];
         $languages = $this->languagesRepository->languagesList();
 
         return \Shared\Tpl\Tpl::view('shop-attribute/attribute-edit', [
diff --git a/autoload/admin/Controllers/ShopCouponController.php b/autoload/admin/Controllers/ShopCouponController.php
index d0536ad..9965250 100644
--- a/autoload/admin/Controllers/ShopCouponController.php
+++ b/autoload/admin/Controllers/ShopCouponController.php
@@ -172,7 +172,7 @@ class ShopCouponController
 
     public function edit(): string
     {
-        $coupon = $this->repository->find((int)\Shared\Helpers\Helpers::get('id'));
+        $coupon = $this->repository->find((int)\Shared\Helpers\Helpers::get('id')) ?: [];
         $categories = $this->repository->categoriesTree(null);
 
         return \Shared\Tpl\Tpl::view('shop-coupon/coupon-edit-new', [
diff --git a/autoload/admin/Controllers/ShopProducerController.php b/autoload/admin/Controllers/ShopProducerController.php
index 8259aa3..7edc230 100644
--- a/autoload/admin/Controllers/ShopProducerController.php
+++ b/autoload/admin/Controllers/ShopProducerController.php
@@ -146,7 +146,7 @@ class ShopProducerController
 
     public function edit(): string
     {
-        $producer = $this->repository->find((int)\Shared\Helpers\Helpers::get('id'));
+        $producer = $this->repository->find((int)\Shared\Helpers\Helpers::get('id')) ?: [];
         $languages = $this->languagesRepository->languagesList();
         $validationErrors = $_SESSION['form_errors'][$this->formId()] ?? null;
         if ($validationErrors) {
@@ -204,7 +204,7 @@ class ShopProducerController
         }
 
         // Nowy flow (form-edit)
-        $producer = $this->repository->find((int)\Shared\Helpers\Helpers::get('id'));
+        $producer = $this->repository->find((int)\Shared\Helpers\Helpers::get('id')) ?: [];
         $languages = $this->languagesRepository->languagesList();
         $form = $this->buildFormViewModel($producer, $languages);
 
diff --git a/autoload/admin/Controllers/ShopProductController.php b/autoload/admin/Controllers/ShopProductController.php
index 595424a..6524a91 100644
--- a/autoload/admin/Controllers/ShopProductController.php
+++ b/autoload/admin/Controllers/ShopProductController.php
@@ -216,8 +216,8 @@ class ShopProductController
 
         $db = $GLOBALS['mdb'];
 
-        $product    = $this->repository->findForAdmin( (int) \Shared\Helpers\Helpers::get( 'id' ) );
-        $languages  = ( new \Domain\Languages\LanguagesRepository( $db ) )->languagesList();
+        $product    = $this->repository->findForAdmin( (int) \Shared\Helpers\Helpers::get( 'id' ) ) ?: [];
+        $languages  = $this->languagesRepository->languagesList();
         $categories = ( new CategoryRepository( $db ) )->subcategories( null );
         $layouts    = $this->layoutsForProductEdit( $db );
         $products   = $this->repository->allProductsList();
@@ -920,7 +920,7 @@ class ShopProductController
      */
     public function ajax_product_url(): void
     {
-        echo json_encode( [ 'url' => ( new \Domain\Product\ProductRepository( $GLOBALS['mdb'] ) )->getProductUrl( (int) \Shared\Helpers\Helpers::get( 'product_id' ) ) ] );
+        echo json_encode( [ 'url' => $this->repository->getProductUrl( (int) \Shared\Helpers\Helpers::get( 'product_id' ) ) ] );
         exit;
     }
 
@@ -931,7 +931,7 @@ class ShopProductController
     {
         $response = [ 'status' => 'error', 'msg' => 'Podczas generowania kodu sku wystąpił błąd. Proszę spróbować ponownie.' ];
 
-        $sku = ( new \Domain\Product\ProductRepository( $GLOBALS['mdb'] ) )->generateSkuCode();
+        $sku = $this->repository->generateSkuCode();
         if ( $sku ) {
             $response = [ 'status' => 'ok', 'sku' => $sku ];
         }
diff --git a/autoload/admin/Controllers/ShopProductSetsController.php b/autoload/admin/Controllers/ShopProductSetsController.php
index 37434fd..34b558c 100644
--- a/autoload/admin/Controllers/ShopProductSetsController.php
+++ b/autoload/admin/Controllers/ShopProductSetsController.php
@@ -132,7 +132,7 @@ class ShopProductSetsController
 
     public function edit(): string
     {
-        $set = $this->repository->find((int)\Shared\Helpers\Helpers::get('id'));
+        $set = $this->repository->find((int)\Shared\Helpers\Helpers::get('id')) ?: [];
         $products = $this->repository->allProductsMap();
 
         return \Shared\Tpl\Tpl::view('shop-product-sets/product-set-edit', [
diff --git a/autoload/admin/Controllers/ShopPromotionController.php b/autoload/admin/Controllers/ShopPromotionController.php
index 7d4b06d..749aa7d 100644
--- a/autoload/admin/Controllers/ShopPromotionController.php
+++ b/autoload/admin/Controllers/ShopPromotionController.php
@@ -136,7 +136,7 @@ class ShopPromotionController
 
     public function edit(): string
     {
-        $promotion = $this->repository->find((int)\Shared\Helpers\Helpers::get('id'));
+        $promotion = $this->repository->find((int)\Shared\Helpers\Helpers::get('id')) ?: [];
         $categories = $this->repository->categoriesTree(null);
 
         return \Shared\Tpl\Tpl::view('shop-promotion/promotion-edit', [
diff --git a/autoload/front/Controllers/ShopBasketController.php b/autoload/front/Controllers/ShopBasketController.php
index 3bc7fe4..526e15a 100644
--- a/autoload/front/Controllers/ShopBasketController.php
+++ b/autoload/front/Controllers/ShopBasketController.php
@@ -116,6 +116,7 @@ class ShopBasketController
 
   public function basketAddProduct()
   {
+    global $lang_id;
     $basket = \Domain\Basket\BasketCalculator::validateBasket( \Shared\Helpers\Helpers::get_session( 'basket' ) );
     $values_tmp = json_decode( \Shared\Helpers\Helpers::get( 'values' ), true );
     $values = [];
diff --git a/autoload/front/LayoutEngine.php b/autoload/front/LayoutEngine.php
index f089852..f384f70 100644
--- a/autoload/front/LayoutEngine.php
+++ b/autoload/front/LayoutEngine.php
@@ -65,7 +65,7 @@ class LayoutEngine
     $html = str_replace( '[BANERY]',              \front\Views\Banners::banners( $bannerRepo->banners( $lang_id ) ), $html );
 
     $html = str_replace( '[KATEGORIE]', \Shared\Tpl\Tpl::view( 'shop-category/categories', [
-                                            'level' => $level,
+                                            'level' => null,
                                             'current_category' => \Shared\Helpers\Helpers::get( 'category' ),
                                             'categories' => $categoryRepo->categoriesTree( $lang_id )
                                           ] ), $html );
@@ -193,7 +193,7 @@ class LayoutEngine
     //
     if ( \Shared\Helpers\Helpers::get( 'product' ) )
     {
-      $product = ( new \Domain\Product\ProductRepository( $GLOBALS['mdb'] ) )->findCached( \Shared\Helpers\Helpers::get( 'product' ), $lang_id, $_GET['permutation_hash'] );
+      $product = ( new \Domain\Product\ProductRepository( $GLOBALS['mdb'] ) )->findCached( \Shared\Helpers\Helpers::get( 'product' ), $lang_id, $_GET['permutation_hash'] ?? null );
 
       if ( $product['language']['meta_title'] )
         $page['language']['title'] = $product['language']['meta_title'];
diff --git a/docs/CHANGELOG.md b/docs/CHANGELOG.md
index 51aaf27..223149c 100644
--- a/docs/CHANGELOG.md
+++ b/docs/CHANGELOG.md
@@ -4,6 +4,41 @@ Logi zmian z migracji na Domain-Driven Architecture. Najnowsze na gorze.
 
 ---
 
+## ver. 0.294 (2026-02-19) - Code review: full codebase review complete (96/96 classes), 27 fixes across all layers
+
+**Code review zakończony — 96 klas, ~1144 metody przejrzane.**
+
+- **Domain layer (16 fixes):**
+  - FIX: `CategoryRepository` — usunięto martwy kod `updateCategoryDefaultLayoutId()`, `allCategoriesForCacheRefresh()`
+  - FIX: `ClientRepository` — null guard na `query()->fetchAll()`
+  - FIX: `DictionariesRepository` — null guard na `query()->fetchAll()` (2 metody)
+  - FIX: `IntegrationsRepository` — null guard na `query()->fetchAll()` (3 metody)
+  - FIX: `LanguagesRepository` — null guard na `query()->fetchAll()` (2 metody)
+  - FIX: `LayoutsRepository` — null guard na `query()->fetchAll()` (4 metody)
+  - FIX: `OrderAdminService` — null safety `find()` + redundancja DI
+  - FIX: `OrderRepository` — null guard na `query()->fetchAll()`
+  - FIX: `ProductRepository` — null guard na `query()->fetchAll()` (8 metod), redundancja DI
+  - FIX: `PromotionRepository` — redundancja `new ProductRepository` w pętlach (3 metody)
+- **Admin layer (11 fixes):**
+  - FIX: `admin\App` — null guard po `details()` w logowaniu i 2FA
+  - FIX: `BannerController`, `ScontainersController`, `ShopProducerController` — null guard `find() ?: []` + `save()` null guard
+  - FIX: `PagesController` — null guard `menuDetails() ?: []`, `pageDetails() ?: []`
+  - FIX: `ProductArchiveController` — `$this->repository` → `$this->productRepository`
+  - FIX: `ShopAttributeController` — null guard `findAttribute() ?: []`
+  - FIX: `ShopCouponController` — null guard `find() ?: []`
+  - FIX: `ShopProductSetsController`, `ShopPromotionController` — null guard `find() ?: []`
+  - FIX: `ShopProductController` — null safety `findForAdmin() ?: []` + 3x redundancja DI
+- **Front layer (3 fixes):**
+  - FIX: `LayoutEngine` — undefined `$level` → `null`; `$_GET['permutation_hash']` → `?? null`
+  - FIX: `ShopBasketController` — brakujące `global $lang_id` w `basketAddProduct()`
+- **Shared layer (2 fixes):**
+  - FIX: `Helpers::generate_webp_image()` — `$_GET['c_w']`/`$_GET['c_h']` → `?? null`
+  - FIX: `Helpers::generate_webp_image()` — **bug**: `'png'` → `'image/png'` (Imagick lossless WebP nigdy się nie aktywował)
+- **CLASS_CATALOG.md** — kompletny katalog z ✅/🔧 przy wszystkich 1144 metodach
+- Testy: 614 OK, 1821 asercji
+
+---
+
 ## ver. 0.293 (2026-02-19) - Code review: fixes ArticleRepository, AttributeRepository, BannerRepository, BasketCalculator, CategoryRepository, PromotionRepository
 
 - **ArticleRepository** (7 fixes):
diff --git a/docs/CLASS_CATALOG.md b/docs/CLASS_CATALOG.md
index 6bf95cd..3b85a0e 100644
--- a/docs/CLASS_CATALOG.md
+++ b/docs/CLASS_CATALOG.md
@@ -154,645 +154,806 @@ Methods:
 
 ---
 
-### Domain\Cache\CacheRepository
+### Domain\Cache\CacheRepository ✅ REVIEWED
 File: `autoload/Domain/Cache/CacheRepository.php`
 Properties:
-- `private $db`
+- `private $redisConnection`
+- `private $basePath`
 
 Methods:
-- `public function __construct($db)`
-- `public function clearAll(): array`
+- ✅ `public function __construct(?\Shared\Cache\RedisConnection $redisConnection = null, string $basePath = '../')`
+- ✅ `public function clearCache(): array` — czyści katalogi temp/thumbs + Redis flushAll, null guard na connection
 
 ---
 
-### Domain\Category\CategoryRepository
+### Domain\Category\CategoryRepository ✅ REVIEWED
 File: `autoload/Domain/Category/CategoryRepository.php`
 Properties:
 - `private $db`
-- `private const MAX_PER_PAGE = 100`
+- `private const SORT_TYPES`, `SORT_ORDER_SQL`, `PRODUCTS_PER_PAGE`, `LANGUAGE_FALLBACK_NAME_SQL`
 
-Methods:
-- `public function __construct($db)`
-- `public function listForAdmin(array $filters, string $sortColumn = 'id', string $sortDir = 'DESC', int $page = 1, int $perPage = 15): array`
-- `public function find(int $categoryId): array`
-- `public function save(array $data): ?int`
-- `public function delete(int $categoryId): bool`
-- `public function allForAdmin(bool $onlyActive = false): array`
-- `public function detailsForLanguage(int $categoryId, string $langId): ?array`
-- `public function categoryTree(string $langId): array`
-- `public function buildTreeRecursive(array $categories, $parentId, array $categoryLangs, int $depth = 0): array`
-- `public function categoryTreeFront(string $langId): array`
-- `public function categoryDetailsCached(int $categoryId, string $langId): array`
-- `public function categoryProductsCached(int $categoryId, string $langId, int $page = 1, string $sort = '', int $limit = 12, array $filters = []): array`
-- `public function getCategoryIdBySeoLink(string $seoLink, string $langId): int`
-- `public function getCategorySeoLink(int $categoryId, string $langId): string`
-- `private function baseListSelect(): string`
-- `private function translationsMap(int $categoryId): array`
-- `private function extractTranslations(array $data): array`
-- `private function toSwitchValue($value): int`
-- `private function defaultCategory(): array`
-- `private function clearFrontCache(int $categoryId): void`
-- `private function saveSeoRedirects(int $categoryId, string $langId, string $newSeoLink, string $currentSeoLink): void`
+Public Methods:
+- ✅ `public function __construct($db)`
+- ✅ `public function sortTypes(): array`
+- ✅ `public function subcategories($parentId = null): array`
+- ✅ `public function categoryDetails($categoryId = ''): array`
+- ✅ `public function categoryProducts(int $categoryId): array` — parametryzowane query
+- ✅ `public function categoryDelete($categoryId): bool` — guard na podkategorie
+- ✅ `public function saveCategoriesOrder($categories): bool`
+- ✅ `public function saveProductOrder($categoryId, $products): bool`
+- ✅ `public function save(array $data): ?int` — upsert tłumaczeń
+- ✅ `public function categoryTitle(int $categoryId): string`
+- ✅ `public function getCategorySort(int $categoryId): int` — cache poprawny
+- ✅ `public function categoryName(int $categoryId, string $langId): string` — cache poprawny
+- ✅ `public function categoryUrl(int $categoryId, string $langId): string`
+- ✅ `public function frontCategoryDetails(int $categoryId, string $langId): array` — cache
+- ✅ `public function categoriesTree(string $langId, ?int $parentId = null): array` — rekurencyjne z cache
+- ✅ `public function blogCategoryProducts(int $categoryId, string $langId, int $limit): array` — parametryzowane query
+- ✅ `public function categoryProductsCount(int $categoryId, string $langId): int` — parametryzowane query
+- ✅ `public function productsId(int $categoryId, int $sortType, string $langId, int $productsLimit, int $from): array` — ORDER BY z whitelist
+- ✅ `public function paginatedCategoryProducts(int $categoryId, int $sortType, string $langId, int $page): array`
+- ✅ `public function getCategoryProductIds(int $categoryId): array`
+- 🔧 `public function subcategoriesLangCached(int $categoryId): array` — USUNIĘTA (martwy kod, myląca nazwa)
+
+Private Methods:
+- ✅ `private function maxOrder(): int`
+- ✅ `private function refreshCategoryArtifacts(): void`
+- ✅ `private function normalizeSeoLink($value): ?string`
+- ✅ `private function toNullableString($value): ?string`
+- ✅ `private function toSwitchValue($value): int`
+- ✅ `private function toNullableInt($value): ?int`
+- ✅ `private function defaultCategory(): array`
+- ✅ `private function productName(int $productId): string`
 
 ---
 
-### Domain\Client\ClientRepository
+### Domain\Client\ClientRepository ✅ REVIEWED
 File: `autoload/Domain/Client/ClientRepository.php`
 Properties:
 - `private $db`
 - `private const MAX_PER_PAGE = 100`
 
-Methods:
-- `public function __construct($db)`
-- `public function listForAdmin(array $filters, string $sortColumn = 'name', string $sortDir = 'ASC', int $page = 1, int $perPage = 15): array`
-- `public function find(int $clientId): ?array`
-- `public function findByEmail(string $email): ?array`
-- `public function allActiveForAdmin(): array`
-- `public function ordersForClient(int $clientId, string $sortColumn = 'id', string $sortDir = 'DESC', int $page = 1, int $perPage = 15): array`
-- `public function frontRegister(array $data): array`
-- `public function frontLogin(string $email, string $password): ?array`
-- `public function frontResetPasswordRequest(string $email): bool`
-- `public function frontResetPasswordConfirm(string $token, string $password): bool`
-- `public function frontUpdateProfile(int $clientId, array $data): bool`
-- `public function frontChangePassword(int $clientId, string $currentPassword, string $newPassword): array`
-- `public function delete(int $clientId): bool`
-- `private function normalizeClient(array $client): array`
+Public Methods:
+- ✅ `public function __construct($db)`
+- ✅ `public function listForAdmin(array $filters, string $sortColumn = 'client_surname', string $sortDir = 'ASC', int $page = 1, int $perPage = 15): array` — sort z whitelist, parametryzowane
+- ✅ `public function ordersForClient(string $name, string $surname, string $email): array` — parametryzowane
+- ✅ `public function totalsForClient(string $name, string $surname, string $email): array` — parametryzowane
+- ✅ `public function clientDetails(int $clientId): ?array`
+- ✅ `public function clientEmail(int $clientId): ?string`
+- ✅ `public function clientAddresses(int $clientId): array`
+- ✅ `public function addressDetails(int $addressId): ?array`
+- ✅ `public function addressDelete(int $addressId): bool`
+- ✅ `public function addressSave(int $clientId, ?int $addressId, array $data): bool`
+- ✅ `public function markAddressAsCurrent(int $clientId, int $addressId): bool`
+- 🔧 `public function clientOrders(int $clientId): array` — OrderRepository przeniesiony przed pętlę (performance)
+- ✅ `public function authenticate(string $email, string $password): array` — md5 hashing (legacy)
+- ✅ `public function createClient(string $email, string $password, bool $agreementMarketing): ?array`
+- ✅ `public function confirmRegistration(string $hash): ?string`
+- ✅ `public function generateNewPassword(string $hash): ?array`
+- ✅ `public function initiatePasswordRecovery(string $email): ?string`
+
+Private Methods:
+- ✅ `private function normalizeTextFilter($value): string`
 
 ---
 
-### Domain\Coupon\CouponRepository
+### Domain\Coupon\CouponRepository ✅ REVIEWED
 File: `autoload/Domain/Coupon/CouponRepository.php`
 Properties:
 - `private $db`
+- `private ?string $defaultLangId = null`
 - `private const MAX_PER_PAGE = 100`
 
-Methods:
-- `public function __construct($db)`
-- `public function listForAdmin(array $filters, string $sortColumn = 'id', string $sortDir = 'DESC', int $page = 1, int $perPage = 15): array`
-- `public function find(int $couponId): ?array`
-- `public function save(array $data): ?int`
-- `public function delete(int $couponId): bool`
-- `public function findByCode(string $code): ?array`
-- `public function incrementUsageCount(int $couponId): void`
-- `public function validateCoupon(string $code): array`
-- `private function toSwitchValue($value): int`
+Public Methods:
+- ✅ `public function __construct($db)`
+- ✅ `public function listForAdmin(array $filters, string $sortColumn = 'name', string $sortDir = 'ASC', int $page = 1, int $perPage = 15): array` — sort z whitelist, parametryzowane
+- ✅ `public function find(int $couponId): array`
+- ✅ `public function save(array $data): ?int`
+- ✅ `public function delete(int $couponId): bool`
+- ✅ `public function findByName(string $name)` — zwraca object
+- ✅ `public function isAvailable($coupon)` — obsługuje object i array
+- ✅ `public function markAsUsed(int $couponId)`
+- ✅ `public function incrementUsedCount(int $couponId)`
+- ✅ `public function categoriesTree($parentId = null): array` — rekurencyjne
+
+Private Methods:
+- ✅ `private function defaultCoupon(): array`
+- ✅ `private function toSwitchValue($value): int`
+- ✅ `private function toNullableNumeric($value): ?string`
+- ✅ `private function encodeIdList($values): ?string`
+- ✅ `private function decodeIdList($raw): array`
+- ✅ `private function normalizeIdList($values): array`
+- ✅ `private function categoryTitle(array $languages): string`
+- ✅ `private function defaultLanguageId(): string`
 
 ---
 
-### Domain\Dashboard\DashboardRepository
+### Domain\Dashboard\DashboardRepository ✅ REVIEWED
 File: `autoload/Domain/Dashboard/DashboardRepository.php`
 Properties:
 - `private $db`
 
-Methods:
-- `public function __construct($db)`
-- `public function countOrders(): int`
-- `public function totalSales(): float`
-- `public function countClients(): int`
-- `public function countProducts(): int`
-- `public function recentOrdersForGrid(int $limit = 5): array`
-- `public function topSellingProducts(int $limit = 5): array`
+Public Methods:
+- ✅ `public function __construct($db)`
+- ✅ `public function summaryOrders(): int` — Redis cache (300s TTL)
+- ✅ `public function summarySales(): float` — Redis cache (300s TTL)
+- ✅ `public function salesGrid(): array` — mapa dzień×godzina zamówień
+- ✅ `public function mostViewedProducts(): array` — top 10 po visits
+- ✅ `public function bestSalesProducts(): array` — top 10 po sprzedaży
+- ✅ `public function last24MonthsSales(): array` — sprzedaż per miesiąc
+- ✅ `public function lastOrders(int $limit = 10): array`
+
+Private Methods:
+- ✅ `private function calculateTotalSales(): float`
 
 ---
 
-### Domain\Dictionaries\DictionariesRepository
+### Domain\Dictionaries\DictionariesRepository ✅ REVIEWED
 File: `autoload/Domain/Dictionaries/DictionariesRepository.php`
 Properties:
 - `private $db`
 - `private const MAX_PER_PAGE = 100`
+- `private const CACHE_TTL = 86400`
+- `private const CACHE_SUBDIR = 'dictionaries'`
 
-Methods:
-- `public function __construct($db)`
-- `public function listForAdmin(array $filters, string $sortColumn = 'id', string $sortDir = 'DESC', int $page = 1, int $perPage = 15): array`
-- `public function find(int $unitId): ?array`
-- `public function save(array $data): ?int`
-- `public function delete(int $unitId): bool`
-- `public function detailsForLanguage(int $unitId, string $langId): ?array`
-- `public function allForSelect(): array`
-- `public function getUnitNameCached(int $unitId, string $langId): string`
-- `private function baseListSelect(): string`
-- `private function translationsMap(int $unitId): array`
-- `private function extractTranslations(array $data): array`
+Public Methods:
+- ✅ `public function __construct($db)`
+- ✅ `public function listForAdmin(array $filters, string $sortColumn = 'id', string $sortDir = 'ASC', int $page = 1, int $perPage = 15): array` — sort z whitelist, parametryzowane
+- ✅ `public function allUnits(): array`
+- ✅ `public function find(int $unitId): ?array` — z tłumaczeniami
+- ✅ `public function save(array $data)` — insert + upsert tłumaczeń
+- ✅ `public function delete(int $unitId): bool` — kasuje też tłumaczenia
+- ✅ `public function getUnitNameById(int $unitId, $langId): string` — z cache
+
+Private Methods:
+- ✅ `private function normalizeTranslations(array $data): array`
+- ✅ `private function upsertTranslation(int $unitId, $langId, string $text): void`
+- 🔧 `private function clearCache(): void` — usunięto martwy check `class_exists('\S')`
+- ✅ `private function cacheFetch(string $key)`
+- ✅ `private function cacheStore(string $key, string $value): void`
 
 ---
 
-### Domain\Integrations\IntegrationsRepository
+### Domain\Integrations\IntegrationsRepository ✅ REVIEWED
 File: `autoload/Domain/Integrations/IntegrationsRepository.php`
 Properties:
 - `private $db`
+- `private const SETTINGS_TABLES`, `APILO_ENDPOINTS`, `APILO_SETTINGS_KEYS`
 
-Methods:
-- `public function __construct($db)`
-- `public function apiloAuth(): array`
-- `public function apiloRefreshToken(string $refreshToken): array`
-- `public function apiloSyncOrders(string $accessToken, int $page = 1): array`
-- `public function apiloSyncProducts(string $accessToken, int $page = 1): array`
-- `public function apiloSendOrder(string $accessToken, array $orderData): array`
-- `public function apiloGetStatuses(string $accessToken): array`
-- `public function apiloSyncOrderStatuses(string $accessToken): array`
-- `public function apiloPostWaybill(string $accessToken, int $orderId, array $waybillData): array`
-- `public function getApiloSettings(): array`
-- `public function saveApiloSettings(array $data): bool`
-- `public function shoppro_sync_products(string $token): array`
-- `public function shoppro_sync_orders(string $token): array`
-- `public function shoppro_sync_order_statuses(string $token): array`
-- `public function shoppro_mark_as_sent(string $token, int $orderId): array`
-- `private function apiloRequest(string $method, string $url, string $accessToken, array $data = []): array`
+Public Methods:
+- ✅ `public function __construct($db)`
+- 🔧 `public function getSettings(string $provider): array` — dodano null guard na query()
+- ✅ `public function getSetting(string $provider, string $name): ?string`
+- ✅ `public function saveSetting(string $provider, string $name, $value): bool`
+- ✅ `public function linkProduct(int $productId, $externalId, $externalName): bool`
+- ✅ `public function unlinkProduct(int $productId): bool`
+- ✅ `public function apiloAuthorize(string $clientId, string $clientSecret, string $authCode): bool`
+- ✅ `public function apiloGetAccessToken(int $refreshLeadSeconds = 300): ?string`
+- ✅ `public function apiloKeepalive(int $refreshLeadSeconds = 300): array`
+- ✅ `public function apiloIntegrationStatus(): array`
+- ✅ `public function apiloFetchList(string $type): bool`
+- ✅ `public function apiloFetchListResult(string $type): array`
+- ✅ `public function getProductSku(int $productId): ?string`
+- 🔧 `public function apiloProductSearch(string $sku): array` — naprawiono curl_error() po curl_close()
+- 🔧 `public function apiloCreateProduct(int $productId): array` — naprawiono mieszany array/object access ($product->field → $product['field'])
+- ✅ `public function shopproImportProduct(int $productId): array`
+
+Private Methods:
+- ✅ `private function settingsTable(string $provider): string` — whitelist z const
+- ✅ `private function refreshApiloAccessToken(array $settings): ?string`
+- ✅ `private function shouldRefreshAccessToken(string $expiresAtRaw, int $leadSeconds = 300): bool`
+- ✅ `private function isFutureDate(string $dateRaw): bool`
+- ✅ `private function normalizeApiloMapList(array $data): ?array`
+- ✅ `private function isMapListShape(array $list): bool`
+- ✅ `private function extractApiloErrorMessage(array $data): string`
 
 ---
 
-### Domain\Languages\LanguagesRepository
+### Domain\Languages\LanguagesRepository ✅ REVIEWED
 File: `autoload/Domain/Languages/LanguagesRepository.php`
 Properties:
 - `private $db`
+- `private const MAX_PER_PAGE = 100`
 
-Methods:
-- `public function __construct($db)`
-- `public function listForAdmin(array $filters = [], string $sortColumn = 'id', string $sortDir = 'ASC', int $page = 1, int $perPage = 50): array`
-- `public function find(int $langId): ?array`
-- `public function save(array $data): ?int`
-- `public function delete(string $langId): bool`
-- `public function languagesList(bool $onlyActive = false): array`
-- `public function activeLanguagesCount(): int`
-- `public function defaultLanguage(): string`
-- `public function getLanguageName(string $langId): string`
-- `public function saveTranslation(string $langId, string $key, string $value): bool`
-- `public function getTranslations(string $langId): array`
-- `public function langsFront(): array`
-- `public function translationsCached(string $langId): array`
+Public Methods:
+- ✅ `public function __construct($db)`
+- ✅ `public function listForAdmin(array $filters, string $sortColumn = 'o', string $sortDir = 'ASC', int $page = 1, int $perPage = 15): array` — sort z whitelist
+- ✅ `public function listTranslationsForAdmin(array $filters, string $sortColumn = 'text', string $sortDir = 'ASC', int $page = 1, int $perPage = 15): array`
+- ✅ `public function languageDetails(string $languageId): ?array`
+- ✅ `public function translationDetails(int $translationId): ?array`
+- ✅ `public function maxOrder(): int`
+- ✅ `public function languagesList(bool $onlyActive = false): array`
+- ✅ `public function defaultLanguageId(): string`
+- ✅ `public function deleteLanguage(string $languageId): bool` — sanitizeLanguageId + ALTER TABLE
+- ✅ `public function saveLanguage(string $languageId, string $name, $status, $start, int $order): ?string`
+- ✅ `public function deleteTranslation(int $translationId): bool`
+- ✅ `public function saveTranslation(int $translationId, string $text, array $translations): ?int`
+- 🔧 `public function defaultLanguage(): string` — dodano null guard na query()
+- ✅ `public function activeLanguages(): array` — z cache
+- ✅ `public function translations(string $language = 'pl'): array` — z cache
+
+Private Methods:
+- ✅ `private function sanitizeLanguageId(string $languageId): ?string` — regex /^[a-z]{2}$/
+- ✅ `private function toSwitchValue($value): int`
 
 ---
 
-### Domain\Layouts\LayoutsRepository
+### Domain\Layouts\LayoutsRepository ✅ REVIEWED
 File: `autoload/Domain/Layouts/LayoutsRepository.php`
 Properties:
 - `private $db`
 - `private const MAX_PER_PAGE = 100`
 
-Methods:
-- `public function __construct($db)`
-- `public function listForAdmin(array $filters = [], string $sortColumn = 'id', string $sortDir = 'DESC', int $page = 1, int $perPage = 15): array`
-- `public function find(int $layoutId): ?array`
-- `public function save(array $data): ?int`
-- `public function delete(int $layoutId): bool`
-- `public function allForSelect(): array`
-- `public function getDefault(): ?array`
-- `public function resolveLayoutForProduct(int $productId): ?array`
-- `public function resolveLayoutForCategory(int $categoryId): ?array`
-- `public function resolveLayoutForPage(int $pageId): ?array`
-- `public function resolveLayoutForArticle(int $articleId): ?array`
-- `public function resolveLayout(?int $layoutId): ?array`
-- `private function toSwitchValue($value): int`
+Public Methods:
+- ✅ `public function __construct($db)`
+- ✅ `public function delete(int $layoutId): bool` — guard na count <= 1
+- ✅ `public function find(int $layoutId): array` — z pages/categories
+- ✅ `public function save(array $data): ?int` — insert/update + sync pages/categories
+- ✅ `public function listAll(): array`
+- ✅ `public function menusWithPages(): array`
+- ✅ `public function categoriesTree($parentId = null): array` — rekurencyjne
+- ✅ `public function listForAdmin(array $filters, string $sortColumn = 'name', string $sortDir = 'ASC', int $page = 1, int $perPage = 15): array` — sort z whitelist
+- ✅ `public function categoryDefaultLayoutId()`
+- ✅ `public function getDefaultLayout(): ?array` — z cache
+- 🔧 `public function getProductLayout(int $productId): ?array` — dodano 2× null guard na query()
+- ✅ `public function getArticleLayout(int $articleId): ?array` — z cache
+- 🔧 `public function getCategoryLayout(int $categoryId): ?array` — dodano null guard na query()
+- ✅ `public function getActiveLayout(int $pageId): ?array` — z cache
+
+Private Methods:
+- ✅ `private function syncPages(int $layoutId, $pages): void`
+- ✅ `private function syncCategories(int $layoutId, $categories): void`
+- ✅ `private function normalizeIds($values): array`
+- ✅ `private function toSwitchValue($value): int`
+- ✅ `private function defaultLayout(): array`
+- ✅ `private function clearFrontLayoutsCache(): void`
+- ✅ `private function menuPages(int $menuId, $parentId = null): array` — rekurencyjne
+- ✅ `private function pageTitle(int $pageId): string`
 
 ---
 
-### Domain\Newsletter\NewsletterPreviewRenderer
+### Domain\Newsletter\NewsletterPreviewRenderer ✅ REVIEWED
 File: `autoload/Domain/Newsletter/NewsletterPreviewRenderer.php`
-Properties:
-- `private $db`
+Properties: (brak)
 
 Methods:
-- `public function __construct($db)`
-- `public function render(int $newsletterId): string`
+- ✅ `public function render(array $articles, array $settings, ?array $template, string $dates = ''): string` — htmlspecialchars na danych user
 
 ---
 
-### Domain\Newsletter\NewsletterRepository
+### Domain\Newsletter\NewsletterRepository ✅ REVIEWED
 File: `autoload/Domain/Newsletter/NewsletterRepository.php`
 Properties:
 - `private $db`
+- `private SettingsRepository $settingsRepository`
+- `private ?ArticleRepository $articleRepository`
+- `private ?NewsletterPreviewRenderer $previewRenderer`
 - `private const MAX_PER_PAGE = 100`
 
-Methods:
-- `public function __construct($db)`
-- `public function listForAdmin(array $filters, string $sortColumn = 'id', string $sortDir = 'DESC', int $page = 1, int $perPage = 15): array`
-- `public function find(int $newsletterId): ?array`
-- `public function save(array $data): ?int`
-- `public function delete(int $newsletterId): bool`
-- `public function listSubscribersForAdmin(array $filters, string $sortColumn = 'id', string $sortDir = 'DESC', int $page = 1, int $perPage = 15): array`
-- `public function findSubscriber(int $subscriberId): ?array`
-- `public function saveSubscriber(array $data): ?int`
-- `public function deleteSubscriber(int $subscriberId): bool`
-- `public function sendNewsletter(int $newsletterId): array`
-- `public function saveSettings(array $data): bool`
-- `public function getSettings(): array`
-- `public function subscribe(string $email): array`
-- `public function unsubscribe(string $email): array`
+Public Methods:
+- ✅ `public function __construct($db, ?SettingsRepository, ?ArticleRepository, ?NewsletterPreviewRenderer)`
+- ✅ `public function getSettings(): array`
+- ✅ `public function saveSettings(array $values): bool`
+- ✅ `public function queueSend(string $dates = '', int $templateId = 0): bool`
+- ✅ `public function templateByName(string $templateName): string`
+- ✅ `public function templateDetails(int $templateId): ?array`
+- ✅ `public function isAdminTemplate(int $templateId): bool`
+- ✅ `public function deleteTemplate(int $templateId): bool` — guard na admin templates
+- ✅ `public function saveTemplate(int $templateId, string $name, string $text): ?int`
+- ✅ `public function listTemplatesSimple(bool $adminTemplates = false): array`
+- ✅ `public function deleteSubscriber(int $subscriberId): bool`
+- ✅ `public function listSubscribersForAdmin(array $filters, ...): array` — sort z whitelist
+- ✅ `public function listTemplatesForAdmin(bool $adminTemplates, array $filters, ...): array` — sort z whitelist
+- ✅ `public function unsubscribe(string $hash): bool`
+- ✅ `public function confirmSubscription(string $hash): bool`
+- ✅ `public function getHashByEmail(string $email): ?string`
+- ✅ `public function removeByEmail(string $email): bool`
+- ✅ `public function signup(string $email, string $serverName, bool $ssl, array $settings): bool` — walidacja email
+- ✅ `public function sendQueued(int $limit, string $serverName, bool $ssl, string $unsubscribeLabel): bool`
+
+Private Methods:
+- ✅ `private function getArticleRepository(): ArticleRepository` — lazy loading
+- ✅ `private function getPreviewRenderer(): NewsletterPreviewRenderer` — lazy loading
 
 ---
 
-### Domain\Order\OrderAdminService
+### Domain\Order\OrderAdminService ✅ REVIEWED
 File: `autoload/Domain/Order/OrderAdminService.php`
 Properties:
-- `private $db`
+- `private OrderRepository $orders`
+- `private const APILO_SYNC_QUEUE_FILE`
 
-Methods:
-- `public function __construct($db)`
-- `public function getOrderDetails(int $orderId): ?array`
-- `public function saveOrder(array $data): ?int`
-- `public function updateOrderStatus(int $orderId, int $statusId): bool`
-- `public function deleteOrder(int $orderId): bool`
-- `public function addProduct(int $orderId, int $productId, int $quantity, $permutationHash = null): bool`
-- `public function removeProduct(int $orderId, int $orderProductId): bool`
-- `public function updateProductQuantity(int $orderId, int $orderProductId, int $quantity): bool`
-- `public function updateProductPrice(int $orderId, int $orderProductId, float $price): bool`
-- `public function updateTransportCost(int $orderId, float $cost): bool`
-- `public function generateInvoice(int $orderId): ?string`
-- `public function sendToApilo(int $orderId): array`
-- `public function apiloSyncStatus(int $orderId, string $accessToken): array`
+Public Methods:
+- ✅ `public function __construct(OrderRepository $orders)`
+- ✅ `public function details(int $orderId): array`
+- ✅ `public function statuses(): array`
+- ✅ `public function listForAdmin(array $filters, ...): array`
+- ✅ `public function nextOrderId(int $orderId): ?int`
+- ✅ `public function prevOrderId(int $orderId): ?int`
+- ✅ `public function saveNotes(int $orderId, string $notes): bool`
+- ✅ `public function saveOrderByAdmin(array $input): bool`
+- ✅ `public function changeStatus(int $orderId, int $status, bool $sendEmail): array`
+- ✅ `public function resendConfirmationEmail(int $orderId): bool`
+- ✅ `public function setOrderAsUnpaid(int $orderId): bool`
+- ✅ `public function setOrderAsPaid(int $orderId, bool $sendMail): bool`
+- 🔧 `public function sendOrderToApilo(int $orderId): bool` — dodano 3× null guard na query()
+- ✅ `public function toggleTrustmateSend(int $orderId): array`
+- ✅ `public function deleteOrder(int $orderId): bool`
+- ✅ `public function processApiloSyncQueue(int $limit = 10): int`
+
+Private Methods:
+- ✅ `private function sendStatusChangeEmail(array $order): bool`
+- ✅ `private function syncApiloPaymentIfNeeded(array $order): void`
+- ✅ `private function syncApiloStatusIfNeeded(array $order, int $status): void`
+- ✅ `private function syncApiloPayment(array $order): bool`
+- ✅ `private function syncApiloStatus(array $order, int $status): bool`
+- ✅ `private static function queueApiloSync(...): void`
+- ✅ `private static function apiloSyncQueuePath(): string`
+- ✅ `private static function loadApiloSyncQueue(): array`
+- ✅ `private static function saveApiloSyncQueue(array $queue): void`
+- ✅ `private static function appendApiloLog(string $message): void`
 
 ---
 
-### Domain\Order\OrderRepository
+### Domain\Order\OrderRepository ✅ REVIEWED
 File: `autoload/Domain/Order/OrderRepository.php`
 Properties:
 - `private $db`
 - `private const MAX_PER_PAGE = 100`
 
-Methods:
-- `public function __construct($db)`
-- `public function listForAdmin(array $filters, string $sortColumn = 'id', string $sortDir = 'DESC', int $page = 1, int $perPage = 15): array`
-- `public function find(int $orderId): ?array`
-- `public function findByApiloId(string $apiloId): ?array`
-- `public function getOrderProducts(int $orderId): array`
-- `public function getOrderHistory(int $orderId): array`
-- `public function addHistoryEntry(int $orderId, string $message, ?int $statusId = null): void`
-- `public function getLastOrderNumber(): int`
-- `public function generateOrderNumber(): string`
-- `public function createOrderFront(array $data): ?int`
-- `public function updateOrderFromPayment(int $orderId, array $data): bool`
-- `public function frontOrderList(int $clientId, int $page = 1, int $perPage = 10): array`
-- `public function frontOrderDetails(int $orderId, int $clientId): ?array`
-- `public function getOrdersForIntersection(): array`
-- `public function updateIntersection(): void`
-- `public function countOrdersToday(): int`
-- `public function revenueToday(): float`
-- `public function countOrdersByStatus(int $statusId): int`
-- `public function getOrderNotes(int $orderId): array`
-- `public function addOrderNote(int $orderId, string $note, ?int $userId = null): void`
+Public Methods:
+- ✅ `public function __construct($db)`
+- ✅ `public function listForAdmin(array $filters, string $sortColumn = 'date_order', string $sortDir = 'DESC', int $page = 1, int $perPage = 15): array` — sort z whitelist
+- ✅ `public function findForAdmin(int $orderId): array`
+- ✅ `public function orderProducts(int $orderId): array`
+- ✅ `public function orderStatusHistory(int $orderId): array`
+- ✅ `public function orderStatuses(): array`
+- ✅ `public function nextOrderId(int $orderId): ?int`
+- ✅ `public function prevOrderId(int $orderId): ?int`
+- ✅ `public function saveNotes(int $orderId, string $notes): bool`
+- ✅ `public function saveOrderByAdmin(...): bool`
+- ✅ `public function calculateOrderSummaryByAdmin(int $orderId): float`
+- ✅ `public function toggleTrustmateSend(int $orderId): ?int`
+- ✅ `public function deleteOrder(int $orderId): bool`
+- ✅ `public function findIdByHash(string $hash)`
+- ✅ `public function findHashById(int $orderId)`
+- ✅ `public function orderDetailsFrontend($orderId = null, $hash = '', $przelewy24Hash = '')`
+- 🔧 `public function generateOrderNumber()` — dodano null guard na query()
+- 🔧 `public function createFromBasket(...)` — AttributeRepository wyciągnięty przed pętlę, ProductRepository reuse zamiast new
+- ✅ `public function getDb()`
+- ✅ `public function findRawById(int $orderId): ?array`
+- ✅ `public function findRawByHash(string $hash): ?array`
+- ✅ `public function findRawByPrzelewy24Hash(string $hash): ?array`
+- ✅ `public function setAsPaid(int $orderId): void`
+- ✅ `public function setAsUnpaid(int $orderId): void`
+- ✅ `public function updateOrderStatus(int $orderId, int $status): bool`
+- ✅ `public function insertStatusHistory(int $orderId, int $statusId, int $mail): void`
+- ✅ `public function updateApiloStatusDate(int $orderId, string $date): void`
+
+Private Methods:
+- ✅ `private function nullableString(string $value): ?string`
+- ✅ `private function normalizeTextFilter($value): string`
+- ✅ `private function normalizeDateFilter($value): ?string`
 
 ---
 
-### Domain\Pages\PagesRepository
+### Domain\Pages\PagesRepository ✅ REVIEWED
 File: `autoload/Domain/Pages/PagesRepository.php`
 Properties:
 - `private $db`
-- `private const MAX_PER_PAGE = 100`
+- `private const PAGE_TYPES`, `SORT_TYPES`
 
-Methods:
-- `public function __construct($db)`
-- `public function listForAdmin(array $filters, string $sortColumn = 'id', string $sortDir = 'DESC', int $page = 1, int $perPage = 15): array`
-- `public function find(int $pageId): array`
-- `public function save(array $data): ?int`
-- `public function delete(int $pageId): bool`
-- `public function toggleStatus(int $pageId): bool`
-- `public function detailsForLanguage(int $pageId, string $langId): ?array`
-- `public function menuItems(string $position, string $langId): array`
-- `public function allPagesForSelect(): array`
-- `public function allForMenu(): array`
-- `public function frontPageDetails(int $pageId, string $langId): array`
-- `public function frontPageDetailsBySeoLink(string $seoLink, string $langId): ?array`
-- `public function frontMenuItemsCached(string $position, string $langId): array`
-- `private function baseListSelect(): string`
-- `private function translationsMap(int $pageId): array`
-- `private function extractTranslations(array $data): array`
-- `private function toSwitchValue($value): int`
-- `private function defaultPage(): array`
-- `private function clearFrontCache(int $pageId): void`
-- `private function saveSeoRedirects(int $pageId, string $langId, string $newSeoLink, string $currentSeoLink): void`
+Public Methods:
+- ✅ `public function __construct($db)`
+- ✅ `public function pageTypes(): array`
+- ✅ `public function sortTypes(): array`
+- ✅ `public function menusList(): array`
+- ✅ `public function menusWithPages(): array`
+- ✅ `public function menuPages(int $menuId, ?int $parentId = null): array` — rekurencyjne
+- ✅ `public function menuDelete(int $menuId): bool` — guard na pages
+- ✅ `public function pageDelete(int $pageId): bool` — guard na subpages
+- ✅ `public function menuDetails(int $menuId): array`
+- ✅ `public function menuSave(int $menuId, string $name, $status): bool`
+- ✅ `public function pageDetails(int $pageId): array` — z tłumaczeniami i layout
+- ✅ `public function pageArticles(int $pageId): array` — parametryzowane query
+- ✅ `public function saveArticlesOrder(int $pageId, $articles): bool`
+- ✅ `public function savePagesOrder(int $menuId, $pages): bool`
+- ✅ `public function pageSave(array $data): ?int` — insert/update + upsert tłumaczeń
+- ✅ `public function generateSeoLink(string $title, int $pageId = 0, int $articleId = 0, int $categoryId = 0): string`
+- ✅ `public function pageUrlPreview(...): string`
+- ✅ `public function toggleCookieValue(string $cookieName, int $itemId): void`
+- ✅ `public function pageTitle(int $pageId): string`
+- ✅ `public function pageLanguages(int $pageId): array`
+- ✅ `public function frontPageDetails($id = '', $langId = ''): ?array` — z cache
+- ✅ `public function frontPageSort(int $pageId)` — z cache
+- ✅ `public function frontMainPageId()` — z cache
+- ✅ `public function frontLangUrl(int $pageId, string $langId): string`
+- ✅ `public function frontMenuDetails(int $menuId, string $langId): ?array` — z cache
+- ✅ `public function frontMenuPages(int $menuId, string $langId, $parentId = null): ?array` — rekurencyjne z cache
+
+Private Methods:
+- ✅ `private function defaultPage(): array`
+- ✅ `private function saveTranslations(int $pageId, int $pageType, array $data): void`
+- ✅ `private function updateSubpagesMenuId(int $parentId, int $menuId): void` — rekurencyjne
+- ✅ `private function isSeoLinkUsed(string $table, string $idColumn, string $seoLink, int $exceptId): bool`
+- ✅ `private function maxPageOrder(): int`
+- ✅ `private function toSwitchValue($value): int`
+- ✅ `private function normalizeNullableInt($value): ?int`
+- ✅ `private function nullIfEmpty($value): ?string`
 
 ---
 
-### Domain\PaymentMethod\PaymentMethodRepository
+### Domain\PaymentMethod\PaymentMethodRepository ✅ REVIEWED
 File: `autoload/Domain/PaymentMethod/PaymentMethodRepository.php`
 Properties:
 - `private $db`
 - `private const MAX_PER_PAGE = 100`
 
-Methods:
-- `public function __construct($db)`
-- `public function listForAdmin(array $filters = [], string $sortColumn = 'name', string $sortDir = 'ASC', int $page = 1, int $perPage = 15): array`
-- `public function find(int $paymentMethodId): ?array`
-- `public function save(array $data): ?int`
-- `public function delete(int $paymentMethodId): bool`
-- `public function allActive(): array`
-- `public function allForAdmin(): array`
-- `public function findActiveById(int $paymentMethodId): ?array`
-- `public function findActiveByIdCached(int $paymentMethodId)`
-- `public function allActiveCached(): array`
-- `private function normalizePaymentMethod(array $pm): array`
-- `private function toSwitchValue($value): int`
+Public Methods:
+- ✅ `public function __construct($db)`
+- ✅ `public function listForAdmin(array $filters, string $sortColumn = 'name', string $sortDir = 'ASC', int $page = 1, int $perPage = 15): array`
+- ✅ `public function find(int $paymentMethodId): ?array`
+- ✅ `public function save(int $paymentMethodId, array $data): ?int`
+- ✅ `public function allActive(): array`
+- ✅ `public function allForAdmin(): array`
+- ✅ `public function findActiveById(int $paymentMethodId): ?array`
+- ✅ `public function isActive(int $paymentMethodId): int`
+- ✅ `public function getApiloPaymentTypeId(int $paymentMethodId)`
+- ✅ `public function forTransport(int $transportMethodId): array`
+- ✅ `public function paymentMethodsByTransport(int $transportMethodId): array` — cached (Redis)
+- ✅ `public function paymentMethodCached(int $paymentMethodId): ?array` — cached (Redis)
+- ✅ `public function paymentMethodsCached(): array` — cached (Redis)
+
+Private Methods:
+- ✅ `private function normalizePaymentMethod(array $row): array`
+- ✅ `private function normalizeApiloPaymentTypeId($value)`
+- ✅ `private function toSwitchValue($value): int`
 
 ---
 
-### Domain\Producer\ProducerRepository
+### Domain\Producer\ProducerRepository ✅ REVIEWED
 File: `autoload/Domain/Producer/ProducerRepository.php`
 Properties:
 - `private $db`
 - `private const MAX_PER_PAGE = 100`
 
-Methods:
-- `public function __construct($db)`
-- `public function listForAdmin(array $filters = [], string $sortColumn = 'id', string $sortDir = 'DESC', int $page = 1, int $perPage = 15): array`
-- `public function find(int $producerId): ?array`
-- `public function save(array $data): ?int`
-- `public function delete(int $producerId): bool`
-- `public function detailsForLanguage(int $producerId, string $langId): ?array`
-- `public function allForSelect(): array`
-- `public function allActiveFront(): array`
-- `public function producerDetailsCached(int $producerId, string $langId): ?array`
-- `public function producerProductsCached(int $producerId, string $langId, int $page = 1, int $limit = 12): array`
-- `private function baseListSelect(): string`
-- `private function translationsMap(int $producerId): array`
-- `private function extractTranslations(array $data): array`
-- `private function toSwitchValue($value): int`
+Public Methods:
+- ✅ `public function __construct($db)`
+- ✅ `public function listForAdmin(array $filters, string $sortColumn = 'name', string $sortDir = 'ASC', int $page = 1, int $perPage = 15): array`
+- ✅ `public function find(int $id): array`
+- ✅ `public function save(int $id, string $name, int $status, ?string $img, array $description, array $data, array $metaTitle, array $langs): ?int`
+- ✅ `public function delete(int $id): bool`
+- ✅ `public function allProducers(): array`
+- ✅ `public function findForFrontend(int $id, string $langId): ?array`
+- ✅ `public function producerProducts(int $producerId, int $perPage = 12, int $page = 1): array`
+- ✅ `public function allActiveIds(): array`
+- ✅ `public function allActiveProducers(): array`
+
+Private Methods:
+- ✅ `private function defaultProducer(): array`
+- ✅ `private function toSwitchValue($value): int`
 
 ---
 
-### Domain\Product\ProductRepository
-File: `autoload/Domain/Product/ProductRepository.php`
+### Domain\Product\ProductRepository ✅ REVIEWED
+File: `autoload/Domain/Product/ProductRepository.php` (2846 linii, największa klasa)
 Properties:
 - `private $db`
 - `private const MAX_PER_PAGE = 100`
 
-Methods:
-- `public function __construct($db)`
-- `public function getQuantity(int $productId): ?int`
-- `public function find(int $productId): ?array`
-- `public function listArchivedForAdmin(array $filters, string $sortColumn = 'id', string $sortDir = 'DESC', int $page = 1, int $perPage = 15): array`
-- `public function getPrice(int $productId): ?float`
-- `public function getName(int $productId, string $langId): ?string`
-- `public function updateQuantity(int $productId, int $quantity): bool`
-- `public function unarchive(int $productId): bool`
-- `public function archive(int $productId): bool`
-- `public function allProductsForMassEdit(): array`
-- `public function getProductsByCategory(int $categoryId): array`
-- `public function applyDiscountPercent(int $productId, float $discountPercent): ?array`
-- `public function countProducts(?array $where = null): int`
-- `public function listForAdmin(array $filters, string $sortColumn = 'id', string $sortDir = 'DESC', int $page = 1, int $perPage = 15): array`
-- `public function findForAdmin(int $productId): ?array`
-- `public function allProductsList(): array`
-- `public function productCategoriesText(int $productId): string`
-- `public function getParentId(int $productId): ?int`
-- `public function productDefaultName(int $productId): ?string`
-- `public function saveProduct(array $d, ?int $userId = null): ?int`
-- `public function delete(int $productId): bool`
-- `public function duplicate(int $productId, bool $withCombinations = false): bool`
-- `public function toggleStatus(int $productId): bool`
-- `public function updatePriceBrutto(int $productId, $price): bool`
-- `public function updatePriceBruttoPromo(int $productId, $price): bool`
-- `public function updateCustomLabel(int $productId, string $label, $value): bool`
-- `public function getCombinationsForTable(int $productId): array`
-- `public function getPermutations(int $productId): array`
-- `public function generateCombinations(int $productId, array $attributes): bool`
-- `public function deleteCombination(int $combinationId): bool`
-- `public function countCombinations(int $productId): int`
-- `public function saveCombinationStock0Buy(int $productId, $value): bool`
-- `public function saveCombinationSku(int $productId, $sku): bool`
-- `public function saveCombinationQuantity(int $productId, $quantity): bool`
-- `public function saveCombinationPrice(int $productId, $priceNetto): bool`
-- `public function deleteImage(int $imageId): bool`
-- `public function updateImageAlt(int $imageId, string $alt): bool`
-- `public function saveImagesOrder(int $productId, string $order): bool`
-- `public function deleteNonassignedImages(): void`
-- `public function deleteFile(int $fileId): bool`
-- `public function updateFileName(int $fileId, string $name): bool`
-- `public function deleteNonassignedFiles(): void`
-- `public function getProductImages(int $productId): array`
-- `public function saveXmlName(int $productId, string $xmlName, string $langId): bool`
-- `public function customLabelSuggestions(string $customLabel, string $labelType): array`
-- `public function saveCustomLabel(int $productId, string $customLabel, string $labelType): bool`
-- `public function generateEAN(string $number): string`
-- `public function generateGoogleFeedXml(): void`
-- `public function updateCombinationPricesFromBase(int $productId, $priceBrutto, $vat, $priceBruttoPromo): void`
-- `public function getSkuWithFallback(int $productId, bool $withParentFallback = false)`
-- `public function getEanWithFallback(int $productId, bool $withParentFallback = false)`
-- `public function isProductActiveCached(int $productId): int`
-- `public function getMinimalPriceCached(int $productId, $priceBruttoPromo = null)`
-- `public function productCategoriesFront(int $productId): array`
-- `public function getProductNameCached(int $productId, string $langId)`
-- `public function getFirstImageCached(int $productId)`
-- `public function getWeightCached(int $productId)`
-- `public function promotedProductIdsCached(int $limit = 6): array`
-- `public function topProductIds(int $limit = 6): array`
-- `public function newProductIds(int $limit = 10): array`
-- `public function productDetailsFrontCached(int $productId, string $langId)`
-- `public function getWarehouseMessageZero(int $productId, string $langId)`
-- `public function getWarehouseMessageNonzero(int $productId, string $langId)`
-- `public function findCustomFieldCached(int $customFieldId)`
-- `public function findCached(int $productId, string $langId = null, string $permutationHash = null)`
-- `public function isProductOnPromotion(int $productId): bool`
-- `public function productSetsWhenAddToBasket(int $productId): string`
-- `public function addVisit(int $productId): void`
-- `public function getProductImg(int $productId)`
-- `public function getProductUrl(int $productId): string`
-- `public function searchProductsByNameCount(string $query, string $langId): int`
-- `public function getProductsIdByName(string $query, string $langId, int $limit, int $from): array`
-- `public function searchProductsByName(string $query, string $langId, int $page = 0): array`
-- `public function searchProductByNameAjax(string $query, string $langId): array`
-- `public function isStock0Buy(int $productId)`
-- `public function getProductPermutationQuantityOptions(int $productId, $permutation)`
-- `public function getProductIdByAttributes(int $parentId, array $attributes)`
-- `public function getProductPermutationHash(int $productId)`
-- `public function getProductAttributes($products)`
-- `public function generateSkuCode(): string`
-- `public function productMeta(int $productId): array`
-- `public function generateSubtitleFromAttributes(string $permutationHash, string $langId = null): string`
-- `public function getDefaultCombinationPrices(array $product): array`
-- `public function getProductDataBySelectedAttributes(array $product, string $selectedAttribute): array`
-- `public function productCategories(int $productId): array`
-- `public static function arrayCartesian(array $input): array`
-- `private function defaultLangId(): string`
-- `private function saveLanguages(int $productId, array $d, bool $isNew): void`
-- `private function handleSeoRedirects(int $productId, string $langId, string $newSeoLink, string $currentSeoLink): void`
-- `private function saveCategories(int $productId, $categories): void`
-- `private function saveRelatedProducts(int $productId, $products): void`
-- `private function moveTemporaryFiles(int $productId): void`
-- `private function moveTemporaryImages(int $productId): void`
-- `private function saveCustomFields(int $productId, array $names, array $types, array $required): void`
-- `private function cleanupDeletedFiles(int $productId): void`
-- `private function cleanupDeletedImages(int $productId): void`
-- `private function nullIfEmpty($value)`
-- `private function appendCombinationToXml(\DOMDocument $doc, \DOMElement $channelNode, $product, $combination, string $domainPrefix, string $url): void`
-- `private function appendProductToXml(\DOMDocument $doc, \DOMElement $channelNode, $product, string $domainPrefix, string $url): void`
-- `private function appendImagesToXml(\DOMDocument $doc, \DOMElement $itemNode, $product, string $domainPrefix, string $url): void`
-- `private function appendShippingToXml(\DOMDocument $doc, \DOMElement $itemNode, $product): void`
-- `private function updateCombinationPrices(int $productId, float $priceNetto, float $vat, ?float $priceNettoPromo): void`
+Public Methods (CRUD admin):
+- ✅ `public function __construct($db)`
+- ✅ `public function getQuantity(int $productId): ?int`
+- ✅ `public function find(int $productId): ?array`
+- ✅ `public function listArchivedForAdmin(array $filters, string $sortColumn, string $sortDir, int $page, int $perPage): array`
+- ✅ `public function getPrice(int $productId): ?float`
+- ✅ `public function getName(int $productId, string $langId): ?string`
+- ✅ `public function updateQuantity(int $productId, int $quantity): bool`
+- ✅ `public function unarchive(int $productId): bool`
+- ✅ `public function archive(int $productId): bool`
+- ✅ `public function allProductsForMassEdit(): array`
+- ✅ `public function getProductsByCategory(int $categoryId): array`
+- ✅ `public function applyDiscountPercent(int $productId, float $discountPercent): ?array`
+- ✅ `public function countProducts(?array $where = null): int`
+- ✅ `public function listForAdmin(array $filters, string $sortColumn, string $sortDir, int $page, int $perPage): array`
+- ✅ `public function findForAdmin(int $productId): ?array`
+- ✅ `public function allProductsList(): array`
+- ✅ `public function productCategoriesText(int $productId): string`
+- ✅ `public function getParentId(int $productId): ?int`
+- ✅ `public function productDefaultName(int $productId): ?string`
+- ✅ `public function saveProduct(array $d, ?int $userId = null): ?int`
+- ✅ `public function delete(int $productId): bool`
+- ✅ `public function duplicate(int $productId, bool $withCombinations = false): bool`
+- ✅ `public function toggleStatus(int $productId): bool`
+- ✅ `public function updatePriceBrutto(int $productId, $price): bool`
+- ✅ `public function updatePriceBruttoPromo(int $productId, $price): bool`
+- 🔧 `public function updateCustomLabel(int $productId, string $label, $value): bool` — dodano whitelist walidację $label (SQL injection)
+
+Public Methods (kombinacje):
+- ✅ `public function getCombinationsForTable(int $productId): array`
+- ✅ `public function getPermutations(int $productId): array`
+- ✅ `public function generateCombinations(int $productId, array $attributes): bool`
+- ✅ `public function deleteCombination(int $combinationId): bool`
+- ✅ `public function countCombinations(int $productId): int`
+- ✅ `public function saveCombinationStock0Buy(int $productId, $value): bool`
+- ✅ `public function saveCombinationSku(int $productId, $sku): bool`
+- ✅ `public function saveCombinationQuantity(int $productId, $quantity): bool`
+- ✅ `public function saveCombinationPrice(int $productId, $priceNetto): bool`
+
+Public Methods (zdjęcia/pliki/XML):
+- ✅ `public function deleteImage(int $imageId): bool`
+- ✅ `public function updateImageAlt(int $imageId, string $alt): bool`
+- ✅ `public function saveImagesOrder(int $productId, string $order): bool`
+- ✅ `public function deleteNonassignedImages(): void`
+- ✅ `public function deleteFile(int $fileId): bool`
+- ✅ `public function updateFileName(int $fileId, string $name): bool`
+- ✅ `public function deleteNonassignedFiles(): void`
+- ✅ `public function getProductImages(int $productId): array`
+- ✅ `public function saveXmlName(int $productId, string $xmlName, string $langId): bool`
+- 🔧 `public function customLabelSuggestions(string $customLabel, string $labelType): array` — dodano whitelist walidację $labelType (SQL injection)
+- 🔧 `public function saveCustomLabel(int $productId, string $customLabel, string $labelType): bool` — dodano whitelist walidację $labelType (SQL injection)
+- ✅ `public function generateEAN(string $number): string`
+- 🔧 `public function generateGoogleFeedXml(): void` — TransportRepository przeniesiony przed pętlę (performance)
+- ✅ `public function updateCombinationPricesFromBase(int $productId, $priceBrutto, $vat, $priceBruttoPromo): void`
+
+Public Methods (frontend/cached):
+- ✅ `public function getSkuWithFallback(int $productId, bool $withParentFallback = false)`
+- ✅ `public function getEanWithFallback(int $productId, bool $withParentFallback = false)`
+- ✅ `public function isProductActiveCached(int $productId): int`
+- ✅ `public function getMinimalPriceCached(int $productId, $priceBruttoPromo = null)`
+- ✅ `public function productCategoriesFront(int $productId): array`
+- ✅ `public function getProductNameCached(int $productId, string $langId)`
+- ✅ `public function getFirstImageCached(int $productId)`
+- ✅ `public function getWeightCached(int $productId)`
+- ✅ `public function promotedProductIdsCached(int $limit = 6): array`
+- ✅ `public function topProductIds(int $limit = 6): array`
+- ✅ `public function newProductIds(int $limit = 10): array`
+- 🔧 `public function productDetailsFrontCached(int $productId, string $langId)` — naprawiono select()→$product['set_id'] (bug logiczny)
+- ✅ `public function getWarehouseMessageZero(int $productId, string $langId)`
+- ✅ `public function getWarehouseMessageNonzero(int $productId, string $langId)`
+- ✅ `public function findCustomFieldCached(int $customFieldId)`
+- ✅ `public function findCached(int $productId, string $langId = null, string $permutationHash = null)`
+- ✅ `public function isProductOnPromotion(int $productId): bool`
+- ✅ `public function productSetsWhenAddToBasket(int $productId): string`
+- ✅ `public function addVisit(int $productId): void`
+- ✅ `public function getProductImg(int $productId)`
+- ✅ `public function getProductUrl(int $productId): string`
+- 🔧 `public function searchProductsByNameCount(string $query, string $langId): int` — dodano null guard na query()
+- 🔧 `public function getProductsIdByName(string $query, string $langId, int $limit, int $from): array` — dodano null guard na query()
+- ✅ `public function searchProductsByName(string $query, string $langId, int $page = 0): array`
+- 🔧 `public function searchProductByNameAjax(string $query, string $langId): array` — dodano null guard na query()
+- ✅ `public function isStock0Buy(int $productId)`
+- ✅ `public function getProductPermutationQuantityOptions(int $productId, $permutation)`
+- ✅ `public function getProductIdByAttributes(int $parentId, array $attributes)`
+- ✅ `public function getProductPermutationHash(int $productId)`
+- ✅ `public function getProductAttributes($products)`
+- ✅ `public function generateSkuCode(): string`
+- ✅ `public function productMeta(int $productId): array`
+- ✅ `public function generateSubtitleFromAttributes(string $permutationHash, string $langId = null): string`
+- ✅ `public function getDefaultCombinationPrices(array $product): array`
+- ✅ `public function getProductDataBySelectedAttributes(array $product, string $selectedAttribute): array`
+- ✅ `public function productCategories(int $productId): array`
+- ✅ `public static function arrayCartesian(array $input): array`
+
+Private Methods:
+- ✅ `private function defaultLangId(): string`
+- ✅ `private function saveLanguages(int $productId, array $d, bool $isNew): void`
+- ✅ `private function handleSeoRedirects(int $productId, string $langId, string $newSeoLink, string $currentSeoLink): void`
+- ✅ `private function saveCategories(int $productId, $categories): void`
+- ✅ `private function saveRelatedProducts(int $productId, $products): void`
+- ✅ `private function moveTemporaryFiles(int $productId): void`
+- ✅ `private function moveTemporaryImages(int $productId): void`
+- ✅ `private function saveCustomFields(int $productId, array $names, array $types, array $required): void`
+- ✅ `private function cleanupDeletedFiles(int $productId): void`
+- ✅ `private function cleanupDeletedImages(int $productId): void`
+- ✅ `private function nullIfEmpty($value)`
+- ✅ `private function updateCombinationPrices(int $productId, float $priceNetto, float $vat, ?float $priceNettoPromo): void`
+- ✅ `private function appendCombinationToXml(...): void`
+- ✅ `private function appendProductToXml(...): void`
+- ✅ `private function appendImagesToXml(...): void`
+- ✅ `private function appendShippingToXml(...): void`
 
 ---
 
-### Domain\ProductSet\ProductSetRepository
+### Domain\ProductSet\ProductSetRepository ✅ REVIEWED
 File: `autoload/Domain/ProductSet/ProductSetRepository.php`
 Properties:
 - `private $db`
 - `private const MAX_PER_PAGE = 100`
 
-Methods:
-- `public function __construct($db)`
-- `public function listForAdmin(array $filters = [], string $sortColumn = 'id', string $sortDir = 'DESC', int $page = 1, int $perPage = 15): array`
-- `public function find(int $setId): ?array`
-- `public function save(array $data): ?int`
-- `public function delete(int $setId): bool`
-- `public function allForSelect(): array`
-- `public function getProductsInSet(int $setId): array`
-- `public function addProductToSet(int $setId, int $productId): bool`
-- `public function removeProductFromSet(int $setId, int $productId): bool`
+Public Methods:
+- ✅ `public function __construct($db)`
+- ✅ `public function listForAdmin(array $filters, string $sortColumn = 'name', string $sortDir = 'ASC', int $page = 1, int $perPage = 15): array`
+- ✅ `public function find(int $id): array`
+- ✅ `public function save(int $id, string $name, int $status, array $productIds): ?int`
+- ✅ `public function delete(int $id): bool`
+- ✅ `public function allSets(): array`
+- ✅ `public function allProductsMap(): array`
+
+Private Methods:
+- ✅ `private function syncProducts(int $setId, array $productIds): void`
+- ✅ `private function defaultSet(): array`
+- ✅ `private function toSwitchValue($value): int`
+- ✅ `private function clearTempAndCache(): void`
 
 ---
 
-### Domain\Promotion\PromotionRepository
+### Domain\Promotion\PromotionRepository ✅ REVIEWED
 File: `autoload/Domain/Promotion/PromotionRepository.php`
 Properties:
 - `private $db`
+- `private ?string $defaultLangId = null`
 - `private const MAX_PER_PAGE = 100`
+- `public static $condition_type`
+- `public static $discount_type`
 
-Methods:
-- `public function __construct($db)`
-- `public function listForAdmin(array $filters = [], string $sortColumn = 'id', string $sortDir = 'DESC', int $page = 1, int $perPage = 15): array`
-- `public function find(int $promotionId): ?array`
-- `public function save(array $data): ?int`
-- `public function delete(int $promotionId): bool`
-- `public function getProducts(int $promotionId): array`
-- `public function addProducts(int $promotionId, array $productIds): void`
-- `public function removeProduct(int $promotionId, int $productId): bool`
-- `public function applyPromotions(): array`
-- `public function revertPromotions(): array`
-- `public function basketPromotionForTransport(array $basket): ?array`
-- `public function basketPromotionForDiscount(array $basket): ?array`
-- `public function activePromotionsForBasket(): array`
-- `private function toSwitchValue($value): int`
+Public Methods (admin):
+- ✅ `public function __construct($db)`
+- ✅ `public function listForAdmin(array $filters, string $sortColumn = 'id', string $sortDir = 'DESC', int $page = 1, int $perPage = 15): array`
+- ✅ `public function find(int $promotionId): array`
+- ✅ `public function save(array $data): ?int`
+- ✅ `public function delete(int $promotionId): bool`
+- ✅ `public function categoriesTree($parentId = null): array`
+- ✅ `public function getActivePromotions()`
+
+Public Methods (frontend basket promotion):
+- ✅ `public function findPromotion($basket)`
+- 🔧 `public function applyTypeWholeBasket(array $basket, $promotion): array` — reuse $productRepo zamiast new w pętli
+- 🔧 `public function applyTypeCheapestProduct(array $basket, $promotion): array` — reuse $productRepo zamiast new w 2 pętlach
+- 🔧 `public function applyTypeCategoriesOr(array $basket, $promotion): array` — reuse $productRepo zamiast new w pętli
+- ✅ `public function applyTypeCategoriesAnd(array $basket, $promotion): array`
+- ✅ `public function applyTypeCategoryCondition(array $basket, $promotion): array`
+
+Private Methods:
+- ✅ `private function defaultPromotion(): array`
+- ✅ `private function toSwitchValue($value): int`
+- ✅ `private function toNullableInt($value): ?int`
+- ✅ `private function toNullableNumeric($value): ?string`
+- ✅ `private function toNullableDate($value): ?string`
+- ✅ `private function encodeIdList($values): ?string`
+- ✅ `private function decodeIdList($raw): array`
+- ✅ `private function normalizeIdList($values): array`
+- ✅ `private function categoryTitle(array $languages): string`
+- ✅ `private function defaultLanguageId(): string`
+- ✅ `private function invalidateActivePromotionsCache(): void`
 
 ---
 
-### Domain\Scontainers\ScontainersRepository
+### Domain\Scontainers\ScontainersRepository ✅ REVIEWED
 File: `autoload/Domain/Scontainers/ScontainersRepository.php`
 Properties:
 - `private $db`
 - `private const MAX_PER_PAGE = 100`
 
-Methods:
-- `public function __construct($db)`
-- `public function listForAdmin(array $filters, string $sortColumn = 'id', string $sortDir = 'DESC', int $page = 1, int $perPage = 15): array`
-- `public function find(int $containerId): array`
-- `public function detailsForLanguage(int $containerId, string $langId): ?array`
-- `public function save(array $data): ?int`
-- `public function delete(int $containerId): bool`
-- `public function frontScontainerDetails(int $scontainerId, string $langId): array`
-- `private function baseListSelect(): string`
-- `private function clearFrontCache(int $containerId): void`
-- `private function translationsMap(int $containerId): array`
-- `private function extractTranslations(array $data): array`
-- `private function toSwitchValue($value): int`
-- `private function defaultContainer(): array`
+Public Methods:
+- ✅ `public function __construct($db)`
+- ✅ `public function listForAdmin(array $filters, string $sortColumn = 'id', string $sortDir = 'DESC', int $page = 1, int $perPage = 15): array`
+- ✅ `public function find(int $containerId): array`
+- ✅ `public function detailsForLanguage(int $containerId, string $langId): ?array`
+- ✅ `public function save(array $data): ?int`
+- ✅ `public function delete(int $containerId): bool`
+- ✅ `public function frontScontainerDetails(int $scontainerId, string $langId): array` — cached (Redis)
+
+Private Methods:
+- ✅ `private function baseListSelect(): string`
+- ✅ `private function clearFrontCache(int $containerId): void`
+- ✅ `private function translationsMap(int $containerId): array`
+- ✅ `private function extractTranslations(array $data): array`
+- ✅ `private function toSwitchValue($value): int`
+- ✅ `private function defaultContainer(): array`
 
 ---
 
-### Domain\Settings\SettingsRepository
+### Domain\Settings\SettingsRepository ✅ REVIEWED
 File: `autoload/Domain/Settings/SettingsRepository.php`
 Properties:
 - `private $db`
 
-Methods:
-- `public function __construct($db = null)`
-- `public function saveSettings(array $values): array`
-- `public function updateSetting(string $param, $value): bool`
-- `public function updateSettings(array $settings): bool`
-- `public function getSettings(): array`
-- `public function allSettings(bool $skipCache = false): array`
-- `public function getSingleValue(string $param): string`
-- `private function isEnabled($value): bool`
+Public Methods:
+- ✅ `public function __construct($db = null)`
+- ✅ `public function saveSettings(array $values): array`
+- ✅ `public function updateSetting(string $param, $value): bool`
+- ✅ `public function updateSettings(array $settings): bool`
+- ✅ `public function getSettings(): array`
+- ✅ `public function allSettings(bool $skipCache = false): array` — cached (Redis)
+- ✅ `public function getSingleValue(string $param): string` — cached (Redis)
+
+Private Methods:
+- ✅ `private function isEnabled($value): bool`
 
 ---
 
-### Domain\ShopStatus\ShopStatusRepository
+### Domain\ShopStatus\ShopStatusRepository ✅ REVIEWED
 File: `autoload/Domain/ShopStatus/ShopStatusRepository.php`
 Properties:
 - `private $db`
+- `private const MAX_PER_PAGE = 100`
 
-Methods:
-- `public function __construct($db)`
-- `public function listForAdmin(array $filters = [], string $sortColumn = 'id', string $sortDir = 'ASC', int $page = 1, int $perPage = 50): array`
-- `public function find(int $statusId): ?array`
-- `public function save(array $data): ?int`
-- `public function delete(int $statusId): bool`
-- `public function allForSelect(): array`
-- `public function getStatusName(int $statusId): string`
-- `public function findByApiloId(string $apiloId): ?array`
+Public Methods:
+- ✅ `public function __construct($db)`
+- ✅ `public function listForAdmin(array $filters, string $sortColumn = 'o', string $sortDir = 'ASC', int $page = 1, int $perPage = 15): array`
+- ✅ `public function find(int $statusId): ?array`
+- ✅ `public function save(int $statusId, array $data): int`
+- ✅ `public function getApiloStatusId(int $statusId): ?int`
+- ✅ `public function getByIntegrationStatusId(string $integration, int $integrationStatusId): ?int`
+- ✅ `public function allStatuses(): array`
 
 ---
 
-### Domain\Transport\TransportRepository
+### Domain\Transport\TransportRepository ✅ REVIEWED
 File: `autoload/Domain/Transport/TransportRepository.php`
 Properties:
 - `private $db`
 - `private const MAX_PER_PAGE = 100`
 
-Methods:
-- `public function __construct($db)`
-- `public function listForAdmin(array $filters = [], string $sortColumn = 'name', string $sortDir = 'ASC', int $page = 1, int $perPage = 15): array`
-- `public function find(int $transportId): ?array`
-- `public function save(array $data): ?int`
-- `public function allActive(): array`
-- `public function findActiveById(int $transportId): ?array`
-- `public function getApiloCarrierAccountId(int $transportId): ?int`
-- `public function getTransportCost(int $transportId): ?float`
-- `public function lowestTransportPrice(int $wp): ?float`
-- `public function allForAdmin(): array`
-- `public function transportMethodsFront($basket, $coupon): array`
-- `public function transportCostCached($transportId)`
-- `public function findActiveByIdCached($transportId)`
-- `public function forPaymentMethod(int $paymentMethodId): array`
-- `private function savePaymentMethodLinks(int $transportId, $paymentMethods): void`
-- `private function normalizeTransport(array $transport): array`
-- `private function toSwitchValue($value): int`
+Public Methods:
+- ✅ `public function __construct($db)`
+- ✅ `public function listForAdmin(array $filters, string $sortColumn = 'name', string $sortDir = 'ASC', int $page = 1, int $perPage = 15): array`
+- ✅ `public function find(int $transportId): ?array`
+- ✅ `public function save(array $data): ?int`
+- ✅ `public function allActive(): array`
+- ✅ `public function findActiveById(int $transportId): ?array`
+- ✅ `public function getApiloCarrierAccountId(int $transportId): ?int`
+- ✅ `public function getTransportCost(int $transportId): ?float`
+- ✅ `public function lowestTransportPrice(int $wp): ?float`
+- ✅ `public function allForAdmin(): array`
+- ✅ `public function transportMethodsFront($basket, $coupon): array`
+- ✅ `public function transportCostCached($transportId)` — cached (Redis)
+- ✅ `public function findActiveByIdCached($transportId)` — cached (Redis)
+- ✅ `public function forPaymentMethod(int $paymentMethodId): array`
+
+Private Methods:
+- ✅ `private function savePaymentMethodLinks(int $transportId, $paymentMethods): void`
+- ✅ `private function normalizeTransport(array $transport): array`
+- ✅ `private function toSwitchValue($value): int`
 
 ---
 
-### Domain\Update\UpdateRepository
+### Domain\Update\UpdateRepository ✅ REVIEWED
 File: `autoload/Domain/Update/UpdateRepository.php`
 Properties:
 - `private $db`
 
 Methods:
-- `public function __construct($db)`
-- `public function update(): array`
-- `public function runPendingMigrations(): void`
-- `public function update0197(): void`
-- `private function downloadAndApply(string $ver, string $dir, array $log): array`
-- `private function executeSql(string $sqlUrl, array $log): array`
-- `private function deleteFiles(string $filesUrl, array $log): array`
-- `private function extractZip(string $fileName, array $log): array`
-- `private function saveLog(array $log): void`
+- ✅ `public function __construct($db)`
+- ✅ `public function update(): array`
+- ✅ `public function runPendingMigrations(): void`
+- ✅ `public function update0197(): void`
+- ✅ `private function downloadAndApply(string $ver, string $dir, array $log): array`
+- ✅ `private function executeSql(string $sqlUrl, array $log): array`
+- ✅ `private function deleteFiles(string $filesUrl, array $log): array`
+- ✅ `private function extractZip(string $fileName, array $log): array`
+- ✅ `private function saveLog(array $log): void`
 
 ---
 
-### Domain\User\UserRepository
+### Domain\User\UserRepository ✅ REVIEWED
 File: `autoload/Domain/User/UserRepository.php`
 Properties:
 - `private $db`
 - `private const MAX_PER_PAGE = 100`
 
 Methods:
-- `public function __construct($db)`
-- `public function getById(int $userId): ?array`
-- `public function updateById(int $userId, array $data): bool`
-- `public function verifyTwofaCode(int $userId, string $code): bool`
-- `public function sendTwofaCode(int $userId, bool $resend = false): bool`
-- `public function delete(int $userId): bool`
-- `public function find(int $userId): ?array`
-- `public function save(int $userId, string $login, $status, string $password, string $passwordRepeat, $admin, $twofaEnabled = 0, string $twofaEmail = ''): array`
-- `public function checkLogin(string $login, int $userId): array`
-- `public function logon(string $login, string $password): int`
-- `public function details(string $login): ?array`
-- `public function listForAdmin(array $filters, string $sortColumn = 'login', string $sortDir = 'ASC', int $page = 1, int $perPage = 15): array`
-- `private function toSwitchValue($value): int`
+- ✅ `public function __construct($db)`
+- ✅ `public function getById(int $userId): ?array`
+- ✅ `public function updateById(int $userId, array $data): bool`
+- ✅ `public function verifyTwofaCode(int $userId, string $code): bool`
+- ✅ `public function sendTwofaCode(int $userId, bool $resend = false): bool`
+- ✅ `public function delete(int $userId): bool`
+- ✅ `public function find(int $userId): ?array`
+- ✅ `public function save(int $userId, string $login, $status, string $password, string $passwordRepeat, $admin, $twofaEnabled = 0, string $twofaEmail = ''): array`
+- ✅ `public function checkLogin(string $login, int $userId): array`
+- ✅ `public function logon(string $login, string $password): int`
+- ✅ `public function details(string $login): ?array`
+- ✅ `public function listForAdmin(array $filters, string $sortColumn = 'login', string $sortDir = 'ASC', int $page = 1, int $perPage = 15): array`
+- ✅ `private function toSwitchValue($value): int`
 
 ---
 
 <a id="admin"></a>
 ## 2. admin/ — Warstwa administracyjna
 
-### admin\App
+### admin\App ✅ REVIEWED
 File: `autoload/admin/App.php`
 Properties:
 - `private static array $newControllers`
@@ -801,33 +962,33 @@ Constants:
 - `const APP_SECRET_KEY = 'c3cb2537d25c0efc9e573d059d79c3b8'`
 
 Methods:
-- `public static function finalize_admin_login(array $user, string $domain, string $cookie_name, bool $remember = false)`
-- `public static function special_actions()`
-- `public static function render(): string`
-- `public static function route()`
-- `private static function createController(string $moduleName)`
-- `private static function getControllerFactories(): array`
-- `public static function update()`
+- ✅ `public static function finalize_admin_login(array $user, string $domain, string $cookie_name, bool $remember = false)`
+- 🔧 `public static function special_actions()` — null guard po details() w logowaniu i 2FA
+- ✅ `public static function render(): string`
+- ✅ `public static function route()`
+- ✅ `private static function createController(string $moduleName)`
+- ✅ `private static function getControllerFactories(): array`
+- ✅ `public static function update()`
 
 ---
 
-### admin\Controllers\ArticlesArchiveController
+### admin\Controllers\ArticlesArchiveController ✅ REVIEWED
 File: `autoload/admin/Controllers/ArticlesArchiveController.php`
 Properties:
 - `private ArticleRepository $repository`
 
 Methods:
-- `public function __construct(ArticleRepository $repository)`
-- `public function list(): string`
-- `public function view_list(): string`
-- `public function restore(): void`
-- `public function article_restore(): void`
-- `public function delete(): void`
-- `public function article_delete(): void`
+- ✅ `public function __construct(ArticleRepository $repository)`
+- ✅ `public function list(): string`
+- ✅ `public function view_list(): string`
+- ✅ `public function restore(): void`
+- ✅ `public function article_restore(): void`
+- ✅ `public function delete(): void`
+- ✅ `public function article_delete(): void`
 
 ---
 
-### admin\Controllers\ArticlesController
+### admin\Controllers\ArticlesController ✅ REVIEWED
 File: `autoload/admin/Controllers/ArticlesController.php`
 Properties:
 - `private ArticleRepository $repository`
@@ -836,27 +997,27 @@ Properties:
 - `private PagesRepository $pagesRepository`
 
 Methods:
-- `public function __construct(ArticleRepository $repository, LanguagesRepository $languagesRepository, LayoutsRepository $layoutsRepository, PagesRepository $pagesRepository)`
-- `public function list(): string`
-- `public function galleryOrderSave(): void`
-- `public function filesOrderSave(): void`
-- `public function save(): void`
-- `public function imageAltChange(): void`
-- `public function fileNameChange(): void`
-- `public function imageDelete(): void`
-- `public function fileDelete(): void`
-- `public function delete(): void`
-- `public function edit(): string`
-- `private function resolveSavePayload(): array`
-- `private function buildFormViewModel(array $article, array $languages, array $menus, array $layouts): FormEditViewModel`
-- `private function renderPagesTree(array $menus, array $article): string`
-- `private function renderImagesBox(array $article): string`
-- `private function renderFilesBox(array $article): string`
-- `private function escapeHtml(string $value): string`
+- ✅ `public function __construct(ArticleRepository $repository, LanguagesRepository $languagesRepository, LayoutsRepository $layoutsRepository, PagesRepository $pagesRepository)`
+- ✅ `public function list(): string`
+- ✅ `public function galleryOrderSave(): void`
+- ✅ `public function filesOrderSave(): void`
+- ✅ `public function save(): void`
+- ✅ `public function imageAltChange(): void`
+- ✅ `public function fileNameChange(): void`
+- ✅ `public function imageDelete(): void`
+- ✅ `public function fileDelete(): void`
+- ✅ `public function delete(): void`
+- ✅ `public function edit(): string`
+- ✅ `private function resolveSavePayload(): array`
+- ✅ `private function buildFormViewModel(array $article, array $languages, array $menus, array $layouts): FormEditViewModel`
+- ✅ `private function renderPagesTree(array $menus, array $article): string`
+- ✅ `private function renderImagesBox(array $article): string`
+- ✅ `private function renderFilesBox(array $article): string`
+- ✅ `private function escapeHtml(string $value): string`
 
 ---
 
-### admin\Controllers\BannerController
+### admin\Controllers\BannerController ✅ REVIEWED
 File: `autoload/admin/Controllers/BannerController.php`
 Properties:
 - `private BannerRepository $repository`
@@ -864,29 +1025,29 @@ Properties:
 - `private FormRequestHandler $formHandler`
 
 Methods:
-- `public function __construct(BannerRepository $repository, LanguagesRepository $languagesRepository)`
-- `public function list(): string`
-- `public function edit(): string`
-- `public function save(): void`
-- `public function delete(): void`
-- `private function buildFormViewModel(array $banner, array $languages, ?array $errors = null): FormEditViewModel`
-- `private function getFormId(): string`
+- ✅ `public function __construct(BannerRepository $repository, LanguagesRepository $languagesRepository)`
+- ✅ `public function list(): string`
+- 🔧 `public function edit(): string` — null guard: find() ?: []
+- 🔧 `public function save(): void` — null guard: find() ?: []
+- ✅ `public function delete(): void`
+- ✅ `private function buildFormViewModel(array $banner, array $languages, ?array $errors = null): FormEditViewModel`
+- ✅ `private function getFormId(): string`
 
 ---
 
-### admin\Controllers\DashboardController
+### admin\Controllers\DashboardController ✅ REVIEWED
 File: `autoload/admin/Controllers/DashboardController.php`
 Properties:
 - `private DashboardRepository $repository`
 - `private ShopStatusRepository $statusesRepository`
 
 Methods:
-- `public function __construct(DashboardRepository $repository, ShopStatusRepository $statusesRepository)`
-- `public function main_view(): string`
+- ✅ `public function __construct(DashboardRepository $repository, ShopStatusRepository $statusesRepository)`
+- ✅ `public function main_view(): string`
 
 ---
 
-### admin\Controllers\DictionariesController
+### admin\Controllers\DictionariesController ✅ REVIEWED
 File: `autoload/admin/Controllers/DictionariesController.php`
 Properties:
 - `private DictionariesRepository $repository`
@@ -894,17 +1055,17 @@ Properties:
 - `private FormRequestHandler $formHandler`
 
 Methods:
-- `public function __construct(DictionariesRepository $repository, LanguagesRepository $languagesRepository)`
-- `public function list(): string`
-- `public function edit(): string`
-- `public function save(): void`
-- `public function delete(): void`
-- `private function buildFormViewModel(array $unit, array $languages, ?array $errors = null): FormEditViewModel`
-- `private function getFormId(): string`
+- ✅ `public function __construct(DictionariesRepository $repository, LanguagesRepository $languagesRepository)`
+- ✅ `public function list(): string`
+- ✅ `public function edit(): string`
+- ✅ `public function save(): void`
+- ✅ `public function delete(): void`
+- ✅ `private function buildFormViewModel(array $unit, array $languages, ?array $errors = null): FormEditViewModel`
+- ✅ `private function getFormId(): string`
 
 ---
 
-### admin\Controllers\FilemanagerController
+### admin\Controllers\FilemanagerController ✅ REVIEWED
 File: `autoload/admin/Controllers/FilemanagerController.php`
 Properties: (brak)
 
@@ -913,79 +1074,79 @@ Constants:
 - `private const FILEMANAGER_DIALOG_PATH = '/libraries/filemanager-9.14.2/dialog.php'`
 
 Methods:
-- `public function draw(): string`
-- `private function ensureFilemanagerAccessKey(): string`
-- `private function buildFilemanagerUrl(string $akey): string`
+- ✅ `public function draw(): string`
+- ✅ `private function ensureFilemanagerAccessKey(): string`
+- ✅ `private function buildFilemanagerUrl(string $akey): string`
 
 ---
 
-### admin\Controllers\IntegrationsController
+### admin\Controllers\IntegrationsController ✅ REVIEWED
 File: `autoload/admin/Controllers/IntegrationsController.php`
 Properties:
 - `private IntegrationsRepository $repository`
 
 Methods:
-- `public function __construct(IntegrationsRepository $repository)`
-- `public function apilo_settings(): string`
-- `public function apilo_settings_save(): void`
-- `public function apilo_authorization(): void`
-- `public function get_platform_list(): void`
-- `public function get_status_types_list(): void`
-- `public function get_carrier_account_list(): void`
-- `public function get_payment_types_list(): void`
-- `public function apilo_create_product(): void`
-- `public function apilo_product_search(): void`
-- `public function apilo_product_select_save(): void`
-- `public function apilo_product_select_delete(): void`
-- `public function shoppro_settings(): string`
-- `public function shoppro_settings_save(): void`
-- `public function shoppro_product_import(): void`
-- `private function fetchApiloListWithFeedback(string $type, string $label): void`
+- ✅ `public function __construct(IntegrationsRepository $repository)`
+- ✅ `public function apilo_settings(): string`
+- ✅ `public function apilo_settings_save(): void`
+- ✅ `public function apilo_authorization(): void`
+- ✅ `public function get_platform_list(): void`
+- ✅ `public function get_status_types_list(): void`
+- ✅ `public function get_carrier_account_list(): void`
+- ✅ `public function get_payment_types_list(): void`
+- ✅ `public function apilo_create_product(): void`
+- ✅ `public function apilo_product_search(): void`
+- ✅ `public function apilo_product_select_save(): void`
+- ✅ `public function apilo_product_select_delete(): void`
+- ✅ `public function shoppro_settings(): string`
+- ✅ `public function shoppro_settings_save(): void`
+- ✅ `public function shoppro_product_import(): void`
+- ✅ `private function fetchApiloListWithFeedback(string $type, string $label): void`
 
 ---
 
-### admin\Controllers\LanguagesController
+### admin\Controllers\LanguagesController ✅ REVIEWED
 File: `autoload/admin/Controllers/LanguagesController.php`
 Properties:
 - `private LanguagesRepository $repository`
 - `private FormRequestHandler $formHandler`
 
 Methods:
-- `public function __construct(LanguagesRepository $repository)`
-- `public function list(): string`
-- `public function view_list(): string`
-- `public function language_edit(): string`
-- `public function language_save(): void`
-- `public function language_delete(): void`
-- `public function translation_list(): string`
-- `public function translation_edit(): string`
-- `public function translation_save(): void`
-- `public function translation_delete(): void`
-- `private function buildLanguageFormViewModel(array $language, int $maxOrder, ?array $errors = null): FormEditViewModel`
-- `private function buildTranslationFormViewModel(array $translation, array $languages, ?array $errors = null): FormEditViewModel`
-- `private function extractLegacyTranslations(array $values, array $languages): array`
-- `private function clearLanguageSessions(array $languages): void`
-- `private function getLanguageFormId(): string`
-- `private function getTranslationFormId(): string`
+- ✅ `public function __construct(LanguagesRepository $repository)`
+- ✅ `public function list(): string`
+- ✅ `public function view_list(): string`
+- ✅ `public function language_edit(): string`
+- ✅ `public function language_save(): void`
+- ✅ `public function language_delete(): void`
+- ✅ `public function translation_list(): string`
+- ✅ `public function translation_edit(): string`
+- ✅ `public function translation_save(): void`
+- ✅ `public function translation_delete(): void`
+- ✅ `private function buildLanguageFormViewModel(array $language, int $maxOrder, ?array $errors = null): FormEditViewModel`
+- ✅ `private function buildTranslationFormViewModel(array $translation, array $languages, ?array $errors = null): FormEditViewModel`
+- ✅ `private function extractLegacyTranslations(array $values, array $languages): array`
+- ✅ `private function clearLanguageSessions(array $languages): void`
+- ✅ `private function getLanguageFormId(): string`
+- ✅ `private function getTranslationFormId(): string`
 
 ---
 
-### admin\Controllers\LayoutsController
+### admin\Controllers\LayoutsController ✅ REVIEWED
 File: `autoload/admin/Controllers/LayoutsController.php`
 Properties:
 - `private LayoutsRepository $repository`
 - `private LanguagesRepository $languagesRepository`
 
 Methods:
-- `public function __construct(LayoutsRepository $repository, LanguagesRepository $languagesRepository)`
-- `public function list(): string`
-- `public function edit(): string`
-- `public function save(): void`
-- `public function delete(): void`
+- ✅ `public function __construct(LayoutsRepository $repository, LanguagesRepository $languagesRepository)`
+- ✅ `public function list(): string`
+- ✅ `public function edit(): string`
+- ✅ `public function save(): void`
+- ✅ `public function delete(): void`
 
 ---
 
-### admin\Controllers\NewsletterController
+### admin\Controllers\NewsletterController ✅ REVIEWED
 File: `autoload/admin/Controllers/NewsletterController.php`
 Properties:
 - `private NewsletterRepository $repository`
@@ -993,31 +1154,31 @@ Properties:
 - `private FormRequestHandler $formHandler`
 
 Methods:
-- `public function __construct(NewsletterRepository $repository, NewsletterPreviewRenderer $previewRenderer)`
-- `public function list(): string`
-- `public function view_list(): string`
-- `public function emails_list(): string`
-- `public function email_delete(): void`
-- `public function delete(): void`
-- `public function prepare(): string`
-- `public function preview(): string`
-- `public function send(): void`
-- `public function settings(): string`
-- `public function settings_save(): void`
-- `public function email_templates_user(): string`
-- `public function email_templates_admin(): string`
-- `public function email_template_edit(): string`
-- `public function template_save(): void`
-- `public function email_template_delete(): void`
-- `private function buildSettingsFormViewModel(array $settings, ?array $errors = null): FormEditViewModel`
-- `private function buildTemplateFormViewModel(array $template, ?array $errors = null): FormEditViewModel`
-- `private function templatesListViewModel(): PaginatedTableViewModel`
-- `private function settingsFormId(): string`
-- `private function templateFormId(int $templateId): string`
+- ✅ `public function __construct(NewsletterRepository $repository, NewsletterPreviewRenderer $previewRenderer)`
+- ✅ `public function list(): string`
+- ✅ `public function view_list(): string`
+- ✅ `public function emails_list(): string`
+- ✅ `public function email_delete(): void`
+- ✅ `public function delete(): void`
+- ✅ `public function prepare(): string`
+- ✅ `public function preview(): string`
+- ✅ `public function send(): void`
+- ✅ `public function settings(): string`
+- ✅ `public function settings_save(): void`
+- ✅ `public function email_templates_user(): string`
+- ✅ `public function email_templates_admin(): string`
+- ✅ `public function email_template_edit(): string`
+- ✅ `public function template_save(): void`
+- ✅ `public function email_template_delete(): void`
+- ✅ `private function buildSettingsFormViewModel(array $settings, ?array $errors = null): FormEditViewModel`
+- ✅ `private function buildTemplateFormViewModel(array $template, ?array $errors = null): FormEditViewModel`
+- ✅ `private function templatesListViewModel(): PaginatedTableViewModel`
+- ✅ `private function settingsFormId(): string`
+- ✅ `private function templateFormId(int $templateId): string`
 
 ---
 
-### admin\Controllers\PagesController
+### admin\Controllers\PagesController ✅ REVIEWED
 File: `autoload/admin/Controllers/PagesController.php`
 Properties:
 - `private PagesRepository $repository`
@@ -1025,42 +1186,42 @@ Properties:
 - `private LayoutsRepository $layoutsRepository`
 
 Methods:
-- `public function __construct(PagesRepository $repository, LanguagesRepository $languagesRepository, LayoutsRepository $layoutsRepository)`
-- `public function list(): string`
-- `public function browseList(): string`
-- `public function pagesUrlBrowser(): string`
-- `public function menuEdit(): string`
-- `public function menuSave(): void`
-- `private function buildMenuFormViewModel(array $menu): FormEditViewModel`
-- `public function menuDelete(): void`
-- `public function edit(): string`
-- `public function save(): void`
-- `private function buildPageFormViewModel(array $page, int $parentId, int $menuId, array $menus, array $layouts, array $languages): FormEditViewModel`
-- `public function delete(): void`
-- `public function pageArticles(): string`
-- `public function savePagesOrder(): void`
-- `public function saveArticlesOrder(): void`
-- `public function generateSeoLink(): void`
-- `public function cookieMenus(): void`
-- `public function cookiePages(): void`
-- `private function withPreviewUrls(array $pages, string $defaultLanguage): array`
-- `private function cookieState(string $cookieName): array`
+- ✅ `public function __construct(PagesRepository $repository, LanguagesRepository $languagesRepository, LayoutsRepository $layoutsRepository)`
+- ✅ `public function list(): string`
+- ✅ `public function browseList(): string`
+- ✅ `public function pagesUrlBrowser(): string`
+- 🔧 `public function menuEdit(): string` — null guard: menuDetails() ?: []
+- ✅ `public function menuSave(): void`
+- ✅ `private function buildMenuFormViewModel(array $menu): FormEditViewModel`
+- ✅ `public function menuDelete(): void`
+- 🔧 `public function edit(): string` — null guard: pageDetails() ?: []
+- ✅ `public function save(): void`
+- ✅ `private function buildPageFormViewModel(array $page, int $parentId, int $menuId, array $menus, array $layouts, array $languages): FormEditViewModel`
+- ✅ `public function delete(): void`
+- ✅ `public function pageArticles(): string`
+- ✅ `public function savePagesOrder(): void`
+- ✅ `public function saveArticlesOrder(): void`
+- ✅ `public function generateSeoLink(): void`
+- ✅ `public function cookieMenus(): void`
+- ✅ `public function cookiePages(): void`
+- ✅ `private function withPreviewUrls(array $pages, string $defaultLanguage): array`
+- ✅ `private function cookieState(string $cookieName): array`
 
 ---
 
-### admin\Controllers\ProductArchiveController
+### admin\Controllers\ProductArchiveController ✅ REVIEWED
 File: `autoload/admin/Controllers/ProductArchiveController.php`
 Properties:
 - `private ProductRepository $productRepository`
 
 Methods:
-- `public function __construct(ProductRepository $productRepository)`
-- `public function list(): string`
-- `public function unarchive(): void`
+- ✅ `public function __construct(ProductRepository $productRepository)`
+- 🔧 `public function list(): string` — fix: $this->repository → $this->productRepository
+- ✅ `public function unarchive(): void`
 
 ---
 
-### admin\Controllers\ScontainersController
+### admin\Controllers\ScontainersController ✅ REVIEWED
 File: `autoload/admin/Controllers/ScontainersController.php`
 Properties:
 - `private ScontainersRepository $repository`
@@ -1068,21 +1229,21 @@ Properties:
 - `private FormRequestHandler $formHandler`
 
 Methods:
-- `public function __construct(ScontainersRepository $repository, LanguagesRepository $languagesRepository)`
-- `public function list(): string`
-- `public function view_list(): string`
-- `public function edit(): string`
-- `public function container_edit(): string`
-- `public function save(): void`
-- `public function container_save(): void`
-- `public function delete(): void`
-- `public function container_delete(): void`
-- `private function buildFormViewModel(array $container, array $languages, ?array $errors = null): FormEditViewModel`
-- `private function formId(): string`
+- ✅ `public function __construct(ScontainersRepository $repository, LanguagesRepository $languagesRepository)`
+- ✅ `public function list(): string`
+- ✅ `public function view_list(): string`
+- 🔧 `public function edit(): string` — null guard: find() ?: []
+- ✅ `public function container_edit(): string`
+- 🔧 `public function save(): void` — null guard: find() ?: []
+- ✅ `public function container_save(): void`
+- ✅ `public function delete(): void`
+- ✅ `public function container_delete(): void`
+- ✅ `private function buildFormViewModel(array $container, array $languages, ?array $errors = null): FormEditViewModel`
+- ✅ `private function formId(): string`
 
 ---
 
-### admin\Controllers\SettingsController
+### admin\Controllers\SettingsController ✅ REVIEWED
 File: `autoload/admin/Controllers/SettingsController.php`
 Properties:
 - `private SettingsRepository $settingsRepository`
@@ -1090,140 +1251,140 @@ Properties:
 - `private FormRequestHandler $formHandler`
 
 Methods:
-- `public function __construct(SettingsRepository $settingsRepository, LanguagesRepository $languagesRepository)`
-- `public function clearCache(): void`
-- `public function clearCacheAjax(): void`
-- `public function globalSearchAjax(): void`
-- `public function save(): void`
-- `public function view(): string`
-- `private function buildFormViewModel(array $settings, array $languages, ?array $errors = null): FormEditViewModel`
-- `private function getFormId(): string`
-- `private function transformSettingsToFormData(array $settings, array $languages): array`
-- `private function transformFormDataToSettings(array $data): array`
+- ✅ `public function __construct(SettingsRepository $settingsRepository, LanguagesRepository $languagesRepository)`
+- ✅ `public function clearCache(): void`
+- ✅ `public function clearCacheAjax(): void`
+- ✅ `public function globalSearchAjax(): void`
+- ✅ `public function save(): void`
+- ✅ `public function view(): string`
+- ✅ `private function buildFormViewModel(array $settings, array $languages, ?array $errors = null): FormEditViewModel`
+- ✅ `private function getFormId(): string`
+- ✅ `private function transformSettingsToFormData(array $settings, array $languages): array`
+- ✅ `private function transformFormDataToSettings(array $data): array`
 
 ---
 
-### admin\Controllers\ShopAttributeController
+### admin\Controllers\ShopAttributeController ✅ REVIEWED
 File: `autoload/admin/Controllers/ShopAttributeController.php`
 Properties:
 - `private AttributeRepository $repository`
 - `private LanguagesRepository $languagesRepository`
 
 Methods:
-- `public function __construct(AttributeRepository $repository, LanguagesRepository $languagesRepository)`
-- `public function list(): string`
-- `public function edit(): string`
-- `public function save(): void`
-- `public function delete(): void`
-- `public function values(): string`
-- `public function values_save(): void`
-- `public function value_row_tpl(): void`
-- `private function validateValuesRows(array $rows, string $defaultLanguageId): array`
-- `private function buildFormViewModel(array $attribute, array $languages): FormEditViewModel`
+- ✅ `public function __construct(AttributeRepository $repository, LanguagesRepository $languagesRepository)`
+- ✅ `public function list(): string`
+- 🔧 `public function edit(): string` — null guard: findAttribute() ?: []
+- ✅ `public function save(): void`
+- ✅ `public function delete(): void`
+- ✅ `public function values(): string`
+- ✅ `public function values_save(): void`
+- ✅ `public function value_row_tpl(): void`
+- ✅ `private function validateValuesRows(array $rows, string $defaultLanguageId): array`
+- ✅ `private function buildFormViewModel(array $attribute, array $languages): FormEditViewModel`
 
 ---
 
-### admin\Controllers\ShopCategoryController
+### admin\Controllers\ShopCategoryController ✅ REVIEWED
 File: `autoload/admin/Controllers/ShopCategoryController.php`
 Properties:
 - `private CategoryRepository $repository`
 - `private LanguagesRepository $languagesRepository`
 
 Methods:
-- `public function __construct(CategoryRepository $repository, LanguagesRepository $languagesRepository)`
-- `public function view_list(): string`
-- `public function list(): string`
-- `public function category_edit(): string`
-- `public function edit(): string`
-- `public function save(): void`
-- `public function category_delete(): void`
-- `public function delete(): void`
-- `public function category_products(): string`
-- `public function products(): string`
-- `public function category_url_browser(): void`
-- `public function save_categories_order(): void`
-- `public function save_products_order(): void`
-- `public function cookie_categories(): void`
+- ✅ `public function __construct(CategoryRepository $repository, LanguagesRepository $languagesRepository)`
+- ✅ `public function view_list(): string`
+- ✅ `public function list(): string`
+- ✅ `public function category_edit(): string`
+- ✅ `public function edit(): string`
+- ✅ `public function save(): void`
+- ✅ `public function category_delete(): void`
+- ✅ `public function delete(): void`
+- ✅ `public function category_products(): string`
+- ✅ `public function products(): string`
+- ✅ `public function category_url_browser(): void`
+- ✅ `public function save_categories_order(): void`
+- ✅ `public function save_products_order(): void`
+- ✅ `public function cookie_categories(): void`
 
 ---
 
-### admin\Controllers\ShopClientsController
+### admin\Controllers\ShopClientsController ✅ REVIEWED
 File: `autoload/admin/Controllers/ShopClientsController.php`
 Properties:
 - `private ClientRepository $repository`
 
 Methods:
-- `public function __construct(ClientRepository $repository)`
-- `public function list(): string`
-- `public function view_list(): string`
-- `public function details(): string`
-- `public function clients_details(): string`
+- ✅ `public function __construct(ClientRepository $repository)`
+- ✅ `public function list(): string`
+- ✅ `public function view_list(): string`
+- ✅ `public function details(): string`
+- ✅ `public function clients_details(): string`
 
 ---
 
-### admin\Controllers\ShopCouponController
+### admin\Controllers\ShopCouponController ✅ REVIEWED
 File: `autoload/admin/Controllers/ShopCouponController.php`
 Properties:
 - `private CouponRepository $repository`
 
 Methods:
-- `public function __construct(CouponRepository $repository)`
-- `public function list(): string`
-- `public function view_list(): string`
-- `public function edit(): string`
-- `public function coupon_edit(): string`
-- `public function save(): void`
-- `public function coupon_save(): void`
-- `public function delete(): void`
-- `public function coupon_delete(): void`
-- `private function buildFormViewModel(array $coupon, array $categories): FormEditViewModel`
+- ✅ `public function __construct(CouponRepository $repository)`
+- ✅ `public function list(): string`
+- ✅ `public function view_list(): string`
+- 🔧 `public function edit(): string` — null guard: find() ?: []
+- ✅ `public function coupon_edit(): string`
+- ✅ `public function save(): void`
+- ✅ `public function coupon_save(): void`
+- ✅ `public function delete(): void`
+- ✅ `public function coupon_delete(): void`
+- ✅ `private function buildFormViewModel(array $coupon, array $categories): FormEditViewModel`
 
 ---
 
-### admin\Controllers\ShopOrderController
+### admin\Controllers\ShopOrderController ✅ REVIEWED
 File: `autoload/admin/Controllers/ShopOrderController.php`
 Properties:
 - `private OrderAdminService $service`
 
 Methods:
-- `public function __construct(OrderAdminService $service)`
-- `public function list(): string`
-- `public function view_list(): string`
-- `public function details(): string`
-- `public function order_details(): string`
-- `public function edit(): string`
-- `public function order_edit(): string`
-- `public function save(): void`
-- `public function order_save(): void`
-- `public function notes_save(): void`
-- `public function order_status_change(): void`
-- `public function order_resend_confirmation_email(): void`
-- `public function set_order_as_unpaid(): void`
-- `public function set_order_as_paid(): void`
-- `public function send_order_to_apilo(): void`
-- `public function toggle_trustmate_send(): void`
-- `public function delete(): void`
-- `public function order_delete(): void`
-- `private function formatDateTime(string $value): string`
+- ✅ `public function __construct(OrderAdminService $service)`
+- ✅ `public function list(): string`
+- ✅ `public function view_list(): string`
+- ✅ `public function details(): string`
+- ✅ `public function order_details(): string`
+- ✅ `public function edit(): string`
+- ✅ `public function order_edit(): string`
+- ✅ `public function save(): void`
+- ✅ `public function order_save(): void`
+- ✅ `public function notes_save(): void`
+- ✅ `public function order_status_change(): void`
+- ✅ `public function order_resend_confirmation_email(): void`
+- ✅ `public function set_order_as_unpaid(): void`
+- ✅ `public function set_order_as_paid(): void`
+- ✅ `public function send_order_to_apilo(): void`
+- ✅ `public function toggle_trustmate_send(): void`
+- ✅ `public function delete(): void`
+- ✅ `public function order_delete(): void`
+- ✅ `private function formatDateTime(string $value): string`
 
 ---
 
-### admin\Controllers\ShopPaymentMethodController
+### admin\Controllers\ShopPaymentMethodController ✅ REVIEWED
 File: `autoload/admin/Controllers/ShopPaymentMethodController.php`
 Properties:
 - `private PaymentMethodRepository $repository`
 
 Methods:
-- `public function __construct(PaymentMethodRepository $repository)`
-- `public function list(): string`
-- `public function edit(): string`
-- `public function save(): void`
-- `private function buildFormViewModel(array $paymentMethod, array $apiloPaymentTypes): FormEditViewModel`
-- `private function getApiloPaymentTypes(): array`
+- ✅ `public function __construct(PaymentMethodRepository $repository)`
+- ✅ `public function list(): string`
+- ✅ `public function edit(): string`
+- ✅ `public function save(): void`
+- ✅ `private function buildFormViewModel(array $paymentMethod, array $apiloPaymentTypes): FormEditViewModel`
+- ✅ `private function getApiloPaymentTypes(): array`
 
 ---
 
-### admin\Controllers\ShopProducerController
+### admin\Controllers\ShopProducerController ✅ REVIEWED
 File: `autoload/admin/Controllers/ShopProducerController.php`
 Properties:
 - `private ProducerRepository $repository`
@@ -1231,22 +1392,22 @@ Properties:
 - `private FormRequestHandler $formHandler`
 
 Methods:
-- `public function __construct(ProducerRepository $repository, LanguagesRepository $languagesRepository)`
-- `public function list(): string`
-- `public function view_list(): string`
-- `public function edit(): string`
-- `public function producer_edit(): string`
-- `public function save(): void`
-- `public function producer_save(): void`
-- `public function delete(): void`
-- `public function producer_delete(): void`
-- `private function buildFormViewModel(array $producer, array $languages, ?array $errors = null): FormEditViewModel`
-- `private function formId(): string`
-- `private function toSwitchValue($value): int`
+- ✅ `public function __construct(ProducerRepository $repository, LanguagesRepository $languagesRepository)`
+- ✅ `public function list(): string`
+- ✅ `public function view_list(): string`
+- 🔧 `public function edit(): string` — null guard: find() ?: []
+- ✅ `public function producer_edit(): string`
+- 🔧 `public function save(): void` — null guard: find() ?: []
+- ✅ `public function producer_save(): void`
+- ✅ `public function delete(): void`
+- ✅ `public function producer_delete(): void`
+- ✅ `private function buildFormViewModel(array $producer, array $languages, ?array $errors = null): FormEditViewModel`
+- ✅ `private function formId(): string`
+- ✅ `private function toSwitchValue($value): int`
 
 ---
 
-### admin\Controllers\ShopProductController
+### admin\Controllers\ShopProductController ✅ REVIEWED
 File: `autoload/admin/Controllers/ShopProductController.php`
 Properties:
 - `private ProductRepository $repository`
@@ -1254,154 +1415,154 @@ Properties:
 - `private LanguagesRepository $languagesRepository`
 
 Methods:
-- `public function __construct(ProductRepository $repository, IntegrationsRepository $integrationsRepository, LanguagesRepository $languagesRepository)`
-- `public function view_list(): string`
-- `public function product_edit(): string`
-- `private function layoutsForProductEdit($db): array`
-- `private function buildProductFormViewModel(array $product, array $languages, array $categories, array $layouts, array $products, array $sets, array $producers, array $units, $dlang): FormEditViewModel`
-- `private function renderSkuField(array $product): string`
-- `private function renderCategoriesTree(array $categories, array $product, $dlang): string`
-- `private function renderGalleryBox(array $product): string`
-- `private function renderFilesBox(array $product): string`
-- `private function renderRelatedProducts(array $product, array $products, array $sets): string`
-- `private function renderCustomFieldsBox(array $product): string`
-- `private function escapeHtml(string $value): string`
-- `private function resolveSavePayload(): array`
-- `public function save(): void`
-- `public function duplicate_product(): void`
-- `public function product_archive(): void`
-- `public function product_unarchive(): void`
-- `public function product_delete(): void`
-- `public function change_product_status(): void`
-- `public function product_change_price_brutto(): void`
-- `public function product_change_price_brutto_promo(): void`
-- `public function product_change_custom_label(): void`
-- `public function product_custom_label_suggestions(): void`
-- `public function product_custom_label_save(): void`
-- `public function ajax_product_url(): void`
-- `public function generate_sku_code(): void`
-- `public function product_combination(): string`
-- `public function generate_combination(): void`
-- `public function delete_combination(): void`
-- `public function product_combination_stock_0_buy_save(): void`
-- `public function product_combination_sku_save(): void`
-- `public function product_combination_quantity_save(): void`
-- `public function product_combination_price_save(): void`
-- `public function delete_combination_ajax(): void`
-- `public function image_delete(): void`
-- `public function images_order_save(): void`
-- `public function image_alt_change(): void`
-- `public function product_file_delete(): void`
-- `public function product_file_name_change(): void`
-- `public function product_image_delete(): void`
-- `public function mass_edit(): string`
-- `public function mass_edit_save(): void`
-- `public function get_products_by_category(): void`
+- ✅ `public function __construct(ProductRepository $repository, IntegrationsRepository $integrationsRepository, LanguagesRepository $languagesRepository)`
+- ✅ `public function view_list(): string`
+- 🔧 `public function product_edit(): string` — null safety: findForAdmin() ?: []; redundancja: użyto $this->languagesRepository zamiast new LanguagesRepository
+- ✅ `private function layoutsForProductEdit($db): array`
+- ✅ `private function buildProductFormViewModel(array $product, array $languages, array $categories, array $layouts, array $products, array $sets, array $producers, array $units, $dlang): FormEditViewModel`
+- ✅ `private function renderSkuField(array $product): string`
+- ✅ `private function renderCategoriesTree(array $categories, array $product, $dlang): string`
+- ✅ `private function renderGalleryBox(array $product): string`
+- ✅ `private function renderFilesBox(array $product): string`
+- ✅ `private function renderRelatedProducts(array $product, array $products, array $sets): string`
+- ✅ `private function renderCustomFieldsBox(array $product): string`
+- ✅ `private function escapeHtml(string $value): string`
+- ✅ `private function resolveSavePayload(): array`
+- ✅ `public function save(): void`
+- ✅ `public function duplicate_product(): void`
+- ✅ `public function product_archive(): void`
+- ✅ `public function product_unarchive(): void`
+- ✅ `public function product_delete(): void`
+- ✅ `public function change_product_status(): void`
+- ✅ `public function product_change_price_brutto(): void`
+- ✅ `public function product_change_price_brutto_promo(): void`
+- ✅ `public function product_change_custom_label(): void`
+- ✅ `public function product_custom_label_suggestions(): void`
+- ✅ `public function product_custom_label_save(): void`
+- 🔧 `public function ajax_product_url(): void` — redundancja: użyto $this->repository zamiast new ProductRepository
+- 🔧 `public function generate_sku_code(): void` — redundancja: użyto $this->repository zamiast new ProductRepository
+- ✅ `public function product_combination(): string`
+- ✅ `public function generate_combination(): void`
+- ✅ `public function delete_combination(): void`
+- ✅ `public function product_combination_stock_0_buy_save(): void`
+- ✅ `public function product_combination_sku_save(): void`
+- ✅ `public function product_combination_quantity_save(): void`
+- ✅ `public function product_combination_price_save(): void`
+- ✅ `public function delete_combination_ajax(): void`
+- ✅ `public function image_delete(): void`
+- ✅ `public function images_order_save(): void`
+- ✅ `public function image_alt_change(): void`
+- ✅ `public function product_file_delete(): void`
+- ✅ `public function product_file_name_change(): void`
+- ✅ `public function product_image_delete(): void`
+- ✅ `public function mass_edit(): string`
+- ✅ `public function mass_edit_save(): void`
+- ✅ `public function get_products_by_category(): void`
 
 ---
 
-### admin\Controllers\ShopProductSetsController
+### admin\Controllers\ShopProductSetsController ✅ REVIEWED
 File: `autoload/admin/Controllers/ShopProductSetsController.php`
 Properties:
 - `private ProductSetRepository $repository`
 
 Methods:
-- `public function __construct(ProductSetRepository $repository)`
-- `public function list(): string`
-- `public function view_list(): string`
-- `public function edit(): string`
-- `public function set_edit(): string`
-- `public function save(): void`
-- `public function delete(): void`
-- `public function set_delete(): void`
-- `private function buildFormViewModel(array $set, array $products = []): FormEditViewModel`
-- `private function toSwitchValue($value): int`
-- `private function renderProductsSelect(array $products, array $selectedProducts): string`
+- ✅ `public function __construct(ProductSetRepository $repository)`
+- ✅ `public function list(): string`
+- ✅ `public function view_list(): string`
+- 🔧 `public function edit(): string` — null safety: find() ?: []
+- ✅ `public function set_edit(): string`
+- ✅ `public function save(): void`
+- ✅ `public function delete(): void`
+- ✅ `public function set_delete(): void`
+- ✅ `private function buildFormViewModel(array $set, array $products = []): FormEditViewModel`
+- ✅ `private function toSwitchValue($value): int`
+- ✅ `private function renderProductsSelect(array $products, array $selectedProducts): string`
 
 ---
 
-### admin\Controllers\ShopPromotionController
+### admin\Controllers\ShopPromotionController ✅ REVIEWED
 File: `autoload/admin/Controllers/ShopPromotionController.php`
 Properties:
 - `private PromotionRepository $repository`
 
 Methods:
-- `public function __construct(PromotionRepository $repository)`
-- `public function list(): string`
-- `public function edit(): string`
-- `public function save(): void`
-- `public function delete(): void`
-- `private function buildFormViewModel(array $promotion, array $categories): FormEditViewModel`
+- ✅ `public function __construct(PromotionRepository $repository)`
+- ✅ `public function list(): string`
+- 🔧 `public function edit(): string` — null safety: find() ?: []
+- ✅ `public function save(): void`
+- ✅ `public function delete(): void`
+- ✅ `private function buildFormViewModel(array $promotion, array $categories): FormEditViewModel`
 
 ---
 
-### admin\Controllers\ShopStatusesController
+### admin\Controllers\ShopStatusesController ✅ REVIEWED
 File: `autoload/admin/Controllers/ShopStatusesController.php`
 Properties:
 - `private ShopStatusRepository $repository`
 
 Methods:
-- `public function __construct(ShopStatusRepository $repository)`
-- `public function list(): string`
-- `public function edit(): string`
-- `public function save(): void`
-- `private function buildFormViewModel(array $status, array $apiloStatusList): FormEditViewModel`
-- `private function getApiloStatusList(): array`
+- ✅ `public function __construct(ShopStatusRepository $repository)`
+- ✅ `public function list(): string`
+- ✅ `public function edit(): string`
+- ✅ `public function save(): void`
+- ✅ `private function buildFormViewModel(array $status, array $apiloStatusList): FormEditViewModel`
+- ✅ `private function getApiloStatusList(): array`
 
 ---
 
-### admin\Controllers\ShopTransportController
+### admin\Controllers\ShopTransportController ✅ REVIEWED
 File: `autoload/admin/Controllers/ShopTransportController.php`
 Properties:
 - `private TransportRepository $transportRepository`
 - `private PaymentMethodRepository $paymentMethodRepository`
 
 Methods:
-- `public function __construct(TransportRepository $transportRepository, PaymentMethodRepository $paymentMethodRepository)`
-- `public function list(): string`
-- `public function edit(): string`
-- `public function save(): void`
-- `private function buildFormViewModel(array $transport, array $paymentMethods, array $apiloCarrierAccounts): FormEditViewModel`
-- `private function getApiloCarrierAccounts(): array`
+- ✅ `public function __construct(TransportRepository $transportRepository, PaymentMethodRepository $paymentMethodRepository)`
+- ✅ `public function list(): string`
+- ✅ `public function edit(): string`
+- ✅ `public function save(): void`
+- ✅ `private function buildFormViewModel(array $transport, array $paymentMethods, array $apiloCarrierAccounts): FormEditViewModel`
+- ✅ `private function getApiloCarrierAccounts(): array`
 
 ---
 
-### admin\Controllers\UpdateController
+### admin\Controllers\UpdateController ✅ REVIEWED
 File: `autoload/admin/Controllers/UpdateController.php`
 Properties:
 - `private UpdateRepository $repository`
 
 Methods:
-- `public function __construct(UpdateRepository $repository)`
-- `public function main_view(): string`
-- `public function update(): void`
-- `public function updateAll(): void`
+- ✅ `public function __construct(UpdateRepository $repository)`
+- ✅ `public function main_view(): string`
+- ✅ `public function update(): void`
+- ✅ `public function updateAll(): void`
 
 ---
 
-### admin\Controllers\UsersController
+### admin\Controllers\UsersController ✅ REVIEWED
 File: `autoload/admin/Controllers/UsersController.php`
 Properties:
 - `private UserRepository $repository`
 - `private FormRequestHandler $formHandler`
 
 Methods:
-- `public function __construct(UserRepository $repository)`
-- `public function user_delete(): void`
-- `public function user_save(): void`
-- `public function user_edit(): string`
-- `public function view_list(): string`
-- `public function list(): string`
-- `public function login_form(): string`
-- `public function twofa(): string`
-- `private function normalizeUser(?array $user): array`
-- `private function buildFormViewModel(array $user, ?array $errors = null): FormEditViewModel`
-- `private function getFormId(): string`
-- `private function isTwofaEmailValidForEnabled($twofaEnabled, string $twofaEmail): bool`
+- ✅ `public function __construct(UserRepository $repository)`
+- ✅ `public function user_delete(): void`
+- ✅ `public function user_save(): void`
+- ✅ `public function user_edit(): string`
+- ✅ `public function view_list(): string`
+- ✅ `public function list(): string`
+- ✅ `public function login_form(): string`
+- ✅ `public function twofa(): string`
+- ✅ `private function normalizeUser(?array $user): array`
+- ✅ `private function buildFormViewModel(array $user, ?array $errors = null): FormEditViewModel`
+- ✅ `private function getFormId(): string`
+- ✅ `private function isTwofaEmailValidForEnabled($twofaEnabled, string $twofaEmail): bool`
 
 ---
 
-### admin\Support\TableListRequestFactory
+### admin\Support\TableListRequestFactory ✅ REVIEWED
 File: `autoload/admin/Support/class.TableListRequestFactory.php`
 Properties: (brak)
 
@@ -1410,74 +1571,74 @@ Constants:
 - `public const DEFAULT_PER_PAGE = 15`
 
 Methods:
-- `public static function fromRequest(array $filterDefinitions, array $sortableColumns, string $defaultSortColumn = 'date_add', ?array $perPageOptions = null, ?int $defaultPerPage = null): array`
+- ✅ `public static function fromRequest(array $filterDefinitions, array $sortableColumns, string $defaultSortColumn = 'date_add', ?array $perPageOptions = null, ?int $defaultPerPage = null): array`
 
 ---
 
-### admin\Support\Forms\FormFieldRenderer
+### admin\Support\Forms\FormFieldRenderer ✅ REVIEWED
 File: `autoload/admin/Support/Forms/FormFieldRenderer.php`
 Properties:
 - `private FormEditViewModel $form`
 
 Methods:
-- `public function __construct(FormEditViewModel $form)`
-- `public function renderField(FormField $field): string`
-- `public function renderText(FormField $field): string`
-- `public function renderNumber(FormField $field): string`
-- `public function renderEmail(FormField $field): string`
-- `public function renderPassword(FormField $field): string`
-- `public function renderDate(FormField $field): string`
-- `public function renderDatetime(FormField $field): string`
-- `public function renderSwitch(FormField $field): string`
-- `public function renderSelect(FormField $field): string`
-- `public function renderTextarea(FormField $field): string`
-- `public function renderEditor(FormField $field): string`
-- `public function renderImage(FormField $field): string`
-- `public function renderFile(FormField $field): string`
-- `public function renderHidden(FormField $field): string`
-- `public function renderColor(FormField $field): string`
-- `public function renderCustom(FormField $field): string`
-- `public function renderLangSection(FormField $section): string`
-- `private function renderLangField(FormField $field, $languageId, string $sectionName): string`
-- `private function generateFilemanagerUrl(string $fieldId): string`
-- `private function wrapWithError(string $html, ?string $error): string`
+- ✅ `public function __construct(FormEditViewModel $form)`
+- ✅ `public function renderField(FormField $field): string`
+- ✅ `public function renderText(FormField $field): string`
+- ✅ `public function renderNumber(FormField $field): string`
+- ✅ `public function renderEmail(FormField $field): string`
+- ✅ `public function renderPassword(FormField $field): string`
+- ✅ `public function renderDate(FormField $field): string`
+- ✅ `public function renderDatetime(FormField $field): string`
+- ✅ `public function renderSwitch(FormField $field): string`
+- ✅ `public function renderSelect(FormField $field): string`
+- ✅ `public function renderTextarea(FormField $field): string`
+- ✅ `public function renderEditor(FormField $field): string`
+- ✅ `public function renderImage(FormField $field): string`
+- ✅ `public function renderFile(FormField $field): string`
+- ✅ `public function renderHidden(FormField $field): string`
+- ✅ `public function renderColor(FormField $field): string`
+- ✅ `public function renderCustom(FormField $field): string`
+- ✅ `public function renderLangSection(FormField $section): string`
+- ✅ `private function renderLangField(FormField $field, $languageId, string $sectionName): string`
+- ✅ `private function generateFilemanagerUrl(string $fieldId): string`
+- ✅ `private function wrapWithError(string $html, ?string $error): string`
 
 ---
 
-### admin\Support\Forms\FormRequestHandler
+### admin\Support\Forms\FormRequestHandler ✅ REVIEWED
 File: `autoload/admin/Support/Forms/FormRequestHandler.php`
 Properties:
 - `private FormValidator $validator`
 
 Methods:
-- `public function __construct()`
-- `public function handleSubmit(FormEditViewModel $formViewModel, array $postData): array`
-- `private function processData(array $postData, array $fields): array`
-- `private function processLangSection(array $postData, $section): array`
-- `public function restoreFromPersist(FormEditViewModel $formViewModel): ?array`
-- `public function isFormSubmit(string $formId): bool`
+- ✅ `public function __construct()`
+- ✅ `public function handleSubmit(FormEditViewModel $formViewModel, array $postData): array`
+- ✅ `private function processData(array $postData, array $fields): array`
+- ✅ `private function processLangSection(array $postData, $section): array`
+- ✅ `public function restoreFromPersist(FormEditViewModel $formViewModel): ?array`
+- ✅ `public function isFormSubmit(string $formId): bool`
 
 ---
 
-### admin\Validation\FormValidator
+### admin\Validation\FormValidator ✅ REVIEWED
 File: `autoload/admin/Validation/FormValidator.php`
 Properties:
 - `private array $errors`
 
 Methods:
-- `public function validate(array $data, array $fields, ?array $languages = null): array`
-- `private function validateField(array $data, FormField $field): void`
-- `private function validateLangSection(array $data, FormField $section, array $languages): void`
-- `private function isEmpty($value): bool`
-- `private function isValidDate(string $date): bool`
-- `private function isValidDateTime(string $datetime): bool`
-- `public function isValid(): bool`
-- `public function getErrors(): array`
-- `public function getFirstError(): ?string`
+- ✅ `public function validate(array $data, array $fields, ?array $languages = null): array`
+- ✅ `private function validateField(array $data, FormField $field): void`
+- ✅ `private function validateLangSection(array $data, FormField $section, array $languages): void`
+- ✅ `private function isEmpty($value): bool`
+- ✅ `private function isValidDate(string $date): bool`
+- ✅ `private function isValidDateTime(string $datetime): bool`
+- ✅ `public function isValid(): bool`
+- ✅ `public function getErrors(): array`
+- ✅ `public function getFirstError(): ?string`
 
 ---
 
-### admin\ViewModels\Common\PaginatedTableViewModel
+### admin\ViewModels\Common\PaginatedTableViewModel ✅ REVIEWED
 File: `autoload/admin/ViewModels/Common/class.PaginatedTableViewModel.php`
 Properties:
 - `public array $columns`
@@ -1495,11 +1656,11 @@ Properties:
 - `public ?string $customScriptView`
 
 Methods:
-- `public function __construct(array $columns = [], array $rows = [], array $filters = [], array $sort = [], array $pagination = [], array $query = [], array $perPageOptions = [5, 10, 15, 25, 50, 100], array $sortableColumns = [], string $basePath = '', string $emptyMessage = 'Brak danych.', ?string $createUrl = null, ?string $createLabel = null, ?string $customScriptView = null)`
+- ✅ `public function __construct(array $columns = [], array $rows = [], array $filters = [], array $sort = [], array $pagination = [], array $query = [], array $perPageOptions = [5, 10, 15, 25, 50, 100], array $sortableColumns = [], string $basePath = '', string $emptyMessage = 'Brak danych.', ?string $createUrl = null, ?string $createLabel = null, ?string $customScriptView = null)`
 
 ---
 
-### admin\ViewModels\Forms\FormAction
+### admin\ViewModels\Forms\FormAction ✅ REVIEWED
 File: `autoload/admin/ViewModels/Forms/FormAction.php`
 Properties:
 - `public string $name`
@@ -1511,13 +1672,13 @@ Properties:
 - `public array $attributes`
 
 Methods:
-- `public function __construct(string $name, string $label, string $url = '', ?string $backUrl = null, string $cssClass = 'btn btn-primary', string $type = 'submit', array $attributes = [])`
-- `public static function save(string $url, string $backUrl = '', string $label = 'Zapisz'): self`
-- `public static function cancel(string $backUrl, string $label = 'Anuluj'): self`
+- ✅ `public function __construct(string $name, string $label, string $url = '', ?string $backUrl = null, string $cssClass = 'btn btn-primary', string $type = 'submit', array $attributes = [])`
+- ✅ `public static function save(string $url, string $backUrl = '', string $label = 'Zapisz'): self`
+- ✅ `public static function cancel(string $backUrl, string $label = 'Anuluj'): self`
 
 ---
 
-### admin\ViewModels\Forms\FormEditViewModel
+### admin\ViewModels\Forms\FormEditViewModel ✅ REVIEWED
 File: `autoload/admin/ViewModels/Forms/FormEditViewModel.php`
 Properties:
 - `public string $formId`
@@ -1535,20 +1696,20 @@ Properties:
 - `public ?array $languages`
 
 Methods:
-- `public function __construct(string $formId, string $title, array $data = [], array $fields = [], array $tabs = [], array $actions = [], string $method = 'POST', string $action = '', ?string $backUrl = null, bool $persist = true, array $hiddenFields = [], ?array $languages = null, ?array $validationErrors = null)`
-- `public function hasTabs(): bool`
-- `public function hasLangSections(): bool`
-- `public function getFieldsForTab(string $tabId): array`
-- `public function getLangSectionsForTab(string $tabId): array`
-- `public function getFieldValue(FormField $field, $languageId = null, ?string $langFieldName = null)`
-- `public function hasError(string $fieldName, $languageId = null): bool`
-- `public function getError(string $fieldName, $languageId = null): ?string`
-- `public function clearPersist(): void`
-- `public function saveToPersist(array $data): void`
+- ✅ `public function __construct(string $formId, string $title, array $data = [], array $fields = [], array $tabs = [], array $actions = [], string $method = 'POST', string $action = '', ?string $backUrl = null, bool $persist = true, array $hiddenFields = [], ?array $languages = null, ?array $validationErrors = null)`
+- ✅ `public function hasTabs(): bool`
+- ✅ `public function hasLangSections(): bool`
+- ✅ `public function getFieldsForTab(string $tabId): array`
+- ✅ `public function getLangSectionsForTab(string $tabId): array`
+- ✅ `public function getFieldValue(FormField $field, $languageId = null, ?string $langFieldName = null)`
+- ✅ `public function hasError(string $fieldName, $languageId = null): bool`
+- ✅ `public function getError(string $fieldName, $languageId = null): ?string`
+- ✅ `public function clearPersist(): void`
+- ✅ `public function saveToPersist(array $data): void`
 
 ---
 
-### admin\ViewModels\Forms\FormField
+### admin\ViewModels\Forms\FormField ✅ REVIEWED
 File: `autoload/admin/ViewModels/Forms/FormField.php`
 Properties:
 - `public string $name`
@@ -1571,29 +1732,29 @@ Properties:
 - `public ?string $customHtml`
 
 Methods:
-- `public function __construct(string $name, string $type = FormFieldType::TEXT, string $label = '', $value = null, string $tabId = 'default', bool $required = false, array $attributes = [], array $options = [], ?string $helpText = null, ?string $placeholder = null, bool $useFilemanager = false, ?string $filemanagerUrl = null, string $editorToolbar = 'MyTool', int $editorHeight = 300, ?array $langFields = null, ?string $langSectionParentTab = null, ?string $customHtml = null)`
-- `public static function text(string $name, array $config = []): self`
-- `public static function number(string $name, array $config = []): self`
-- `public static function email(string $name, array $config = []): self`
-- `public static function password(string $name, array $config = []): self`
-- `public static function date(string $name, array $config = []): self`
-- `public static function datetime(string $name, array $config = []): self`
-- `public static function switch(string $name, array $config = []): self`
-- `public static function select(string $name, array $config = []): self`
-- `public static function textarea(string $name, array $config = []): self`
-- `public static function editor(string $name, array $config = []): self`
-- `public static function image(string $name, array $config = []): self`
-- `public static function file(string $name, array $config = []): self`
-- `public static function color(string $name, array $config = []): self`
-- `public static function hidden(string $name, $value = null): self`
-- `public static function custom(string $name, string $html, array $config = []): self`
-- `public static function langSection(string $name, string $parentTab, array $fields): self`
-- `public function getLocalizedName($languageId): string`
-- `public function getLocalizedId($languageId): string`
+- ✅ `public function __construct(string $name, string $type = FormFieldType::TEXT, string $label = '', $value = null, string $tabId = 'default', bool $required = false, array $attributes = [], array $options = [], ?string $helpText = null, ?string $placeholder = null, bool $useFilemanager = false, ?string $filemanagerUrl = null, string $editorToolbar = 'MyTool', int $editorHeight = 300, ?array $langFields = null, ?string $langSectionParentTab = null, ?string $customHtml = null)`
+- ✅ `public static function text(string $name, array $config = []): self`
+- ✅ `public static function number(string $name, array $config = []): self`
+- ✅ `public static function email(string $name, array $config = []): self`
+- ✅ `public static function password(string $name, array $config = []): self`
+- ✅ `public static function date(string $name, array $config = []): self`
+- ✅ `public static function datetime(string $name, array $config = []): self`
+- ✅ `public static function switch(string $name, array $config = []): self`
+- ✅ `public static function select(string $name, array $config = []): self`
+- ✅ `public static function textarea(string $name, array $config = []): self`
+- ✅ `public static function editor(string $name, array $config = []): self`
+- ✅ `public static function image(string $name, array $config = []): self`
+- ✅ `public static function file(string $name, array $config = []): self`
+- ✅ `public static function color(string $name, array $config = []): self`
+- ✅ `public static function hidden(string $name, $value = null): self`
+- ✅ `public static function custom(string $name, string $html, array $config = []): self`
+- ✅ `public static function langSection(string $name, string $parentTab, array $fields): self`
+- ✅ `public function getLocalizedName($languageId): string`
+- ✅ `public function getLocalizedId($languageId): string`
 
 ---
 
-### admin\ViewModels\Forms\FormFieldType
+### admin\ViewModels\Forms\FormFieldType ✅ REVIEWED
 File: `autoload/admin/ViewModels/Forms/FormFieldType.php`
 Properties: (brak)
 
@@ -1619,7 +1780,7 @@ Methods: (brak — klasa ze stałymi)
 
 ---
 
-### admin\ViewModels\Forms\FormTab
+### admin\ViewModels\Forms\FormTab ✅ REVIEWED
 File: `autoload/admin/ViewModels/Forms/FormTab.php`
 Properties:
 - `public string $id`
@@ -1628,27 +1789,27 @@ Properties:
 - `public ?string $parentTabId`
 
 Methods:
-- `public function __construct(string $id, string $label, string $icon = '', ?string $parentTabId = null)`
+- ✅ `public function __construct(string $id, string $label, string $icon = '', ?string $parentTabId = null)`
 
 ---
 
 <a id="front"></a>
 ## 3. front/ — Warstwa frontendowa
 
-### front\App
+### front\App ✅ REVIEWED
 File: `autoload/front/App.php`
 Properties: (brak)
 
 Methods:
-- `static public function pageTitle()`
-- `static public function title()`
-- `public static function route($product = '', $category = '')`
-- `public static function checkUrlParams()`
-- `public static function getControllerFactories()`
+- ✅ `static public function pageTitle()`
+- ✅ `static public function title()`
+- ✅ `public static function route($product = '', $category = '')`
+- ✅ `public static function checkUrlParams()`
+- ✅ `public static function getControllerFactories()`
 
 ---
 
-### front\LayoutEngine
+### front\LayoutEngine ✅ REVIEWED
 File: `autoload/front/LayoutEngine.php`
 Properties (regex constants):
 - `const menu_pattern = '/MENU:[0-9]*/'`
@@ -1666,40 +1827,40 @@ Properties (regex constants):
 - `const produkty_new = '/PRODUKTY_NEW((:([0-9]*))?)/`
 
 Methods:
-- `public static function show()`
-- `public static function facebook($facebook_link)`
-- `static public function title($title, $show_title, $page_title)`
-- `public static function alert()`
-- `public static function copyright()`
-- `public static function contact()`
-- `public static function cookieInformation()`
+- 🔧 `public static function show()` — fix: `$level` → `null` (l.68, undefined variable); `$_GET['permutation_hash']` → `?? null` (l.196)
+- ✅ `public static function facebook($facebook_link)`
+- ✅ `static public function title($title, $show_title, $page_title)`
+- ✅ `public static function alert()`
+- ✅ `public static function copyright()`
+- ✅ `public static function contact()`
+- ✅ `public static function cookieInformation()`
 
 ---
 
-### front\Controllers\NewsletterController
+### front\Controllers\NewsletterController ✅ REVIEWED
 File: `autoload/front/Controllers/NewsletterController.php`
 Properties:
 - `private NewsletterRepository $repository`
 
 Methods:
-- `public function __construct(NewsletterRepository $repository)`
-- `public function signin()`
-- `public function confirm()`
-- `public function unsubscribe()`
+- ✅ `public function __construct(NewsletterRepository $repository)`
+- ✅ `public function signin()`
+- ✅ `public function confirm()`
+- ✅ `public function unsubscribe()`
 
 ---
 
-### front\Controllers\SearchController
+### front\Controllers\SearchController ✅ REVIEWED
 File: `autoload/front/Controllers/SearchController.php`
 Properties: (brak)
 
 Methods:
-- `public function searchResults()`
-- `public function searchProducts()`
+- ✅ `public function searchResults()`
+- ✅ `public function searchProducts()`
 
 ---
 
-### front\Controllers\ShopBasketController
+### front\Controllers\ShopBasketController ✅ REVIEWED
 File: `autoload/front/Controllers/ShopBasketController.php`
 Properties:
 - `public static $title = ['mainView' => 'Koszyk']`
@@ -1707,325 +1868,325 @@ Properties:
 - `private $paymentMethodRepository`
 
 Methods:
-- `public function __construct(\Domain\Order\OrderRepository $orderRepository, \Domain\PaymentMethod\PaymentMethodRepository $paymentMethodRepository)`
-- `public function basketMessageSave()`
-- `public function basketRemoveProduct()`
-- `public function basketIncreaseQuantityProduct()`
-- `public function basketDecreaseQuantityProduct()`
-- `public function basketChangeQuantityProduct()`
-- `public function productMessageChange()`
-- `public function basketAddProduct()`
-- `public function transportMethodInpostCheck()`
-- `public function inpostCheck()`
-- `public function orlenSave()`
-- `public function inpostSave()`
-- `public function basketPaymentMethodSet()`
-- `public function basketTransportMethodSet()`
-- `public function basketPaymentsMethods()`
-- `public function summaryView()`
-- `public function basketSave()`
-- `public function mainView()`
-- `private function jsonBasketResponse($basket, $coupon, $lang_id, $basket_transport_method_id)`
+- ✅ `public function __construct(\Domain\Order\OrderRepository $orderRepository, \Domain\PaymentMethod\PaymentMethodRepository $paymentMethodRepository)`
+- ✅ `public function basketMessageSave()`
+- ✅ `public function basketRemoveProduct()`
+- ✅ `public function basketIncreaseQuantityProduct()`
+- ✅ `public function basketDecreaseQuantityProduct()`
+- ✅ `public function basketChangeQuantityProduct()`
+- ✅ `public function productMessageChange()`
+- 🔧 `public function basketAddProduct()` — fix: dodano brakujące `global $lang_id` (l.119)
+- ✅ `public function transportMethodInpostCheck()`
+- ✅ `public function inpostCheck()`
+- ✅ `public function orlenSave()`
+- ✅ `public function inpostSave()`
+- ✅ `public function basketPaymentMethodSet()`
+- ✅ `public function basketTransportMethodSet()`
+- ✅ `public function basketPaymentsMethods()`
+- ✅ `public function summaryView()`
+- ✅ `public function basketSave()`
+- ✅ `public function mainView()`
+- ✅ `private function jsonBasketResponse($basket, $coupon, $lang_id, $basket_transport_method_id)`
 
 ---
 
-### front\Controllers\ShopClientController
+### front\Controllers\ShopClientController ✅ REVIEWED
 File: `autoload/front/Controllers/ShopClientController.php`
 Properties:
 - `private $clientRepo`
 
 Methods:
-- `public function __construct(ClientRepository $clientRepo)`
-- `public function markAddressAsCurrent()`
-- `public function addressDelete()`
-- `public function addressEdit()`
-- `public function addressSave()`
-- `public function clientAddresses()`
-- `public function clientOrders()`
-- `public function newPassword()`
-- `public function sendEmailPasswordRecovery()`
-- `public function recoverPassword()`
-- `public function logout()`
-- `public function login()`
-- `public function confirm()`
-- `public function signup()`
-- `public function loginForm()`
-- `public function registerForm()`
-- `private function buildEmailBody(string $templateName, array $replacements = []): string`
+- ✅ `public function __construct(ClientRepository $clientRepo)`
+- ✅ `public function markAddressAsCurrent()`
+- ✅ `public function addressDelete()`
+- ✅ `public function addressEdit()`
+- ✅ `public function addressSave()`
+- ✅ `public function clientAddresses()`
+- ✅ `public function clientOrders()`
+- ✅ `public function newPassword()`
+- ✅ `public function sendEmailPasswordRecovery()`
+- ✅ `public function recoverPassword()`
+- ✅ `public function logout()`
+- ✅ `public function login()`
+- ✅ `public function confirm()`
+- ✅ `public function signup()`
+- ✅ `public function loginForm()`
+- ✅ `public function registerForm()`
+- ✅ `private function buildEmailBody(string $templateName, array $replacements = []): string`
 
 ---
 
-### front\Controllers\ShopCouponController
+### front\Controllers\ShopCouponController ✅ REVIEWED
 File: `autoload/front/Controllers/ShopCouponController.php`
 Properties:
 - `private CouponRepository $repository`
 
 Methods:
-- `public function __construct(CouponRepository $repository)`
-- `public function useCoupon()`
-- `public function deleteCoupon()`
+- ✅ `public function __construct(CouponRepository $repository)`
+- ✅ `public function useCoupon()`
+- ✅ `public function deleteCoupon()`
 
 ---
 
-### front\Controllers\ShopOrderController
+### front\Controllers\ShopOrderController ✅ REVIEWED
 File: `autoload/front/Controllers/ShopOrderController.php`
 Properties:
 - `private $repository`
 - `private $adminService`
 
 Methods:
-- `public function __construct(OrderRepository $repository, OrderAdminService $adminService)`
-- `public function paymentConfirmation()`
-- `public function paymentStatusTpay()`
-- `public function paymentStatusPrzelewy24pl()`
-- `public function paymentStatusHotpay()`
-- `public function orderDetails()`
+- ✅ `public function __construct(OrderRepository $repository, OrderAdminService $adminService)`
+- ✅ `public function paymentConfirmation()`
+- ✅ `public function paymentStatusTpay()`
+- ✅ `public function paymentStatusPrzelewy24pl()`
+- ✅ `public function paymentStatusHotpay()`
+- ✅ `public function orderDetails()`
 
 ---
 
-### front\Controllers\ShopProducerController
+### front\Controllers\ShopProducerController ✅ REVIEWED
 File: `autoload/front/Controllers/ShopProducerController.php`
 Properties:
 - `private ProducerRepository $repository`
 
 Methods:
-- `public function __construct(ProducerRepository $repository)`
-- `public function products()`
-- `public function list()`
+- ✅ `public function __construct(ProducerRepository $repository)`
+- ✅ `public function products()`
+- ✅ `public function list()`
 
 ---
 
-### front\Controllers\ShopProductController
+### front\Controllers\ShopProductController ✅ REVIEWED
 File: `autoload/front/Controllers/ShopProductController.php`
 Properties:
 - `private $categoryRepository`
 
 Methods:
-- `public function __construct(\Domain\Category\CategoryRepository $categoryRepository)`
-- `public function lazyLoadingProducts()`
-- `public function warehouseMessage()`
-- `public function drawProductAttributes()`
-- `private static function getPermutation($attributes)`
-- `private static function getPermutationQuantity($productId, $permutation)`
+- ✅ `public function __construct(\Domain\Category\CategoryRepository $categoryRepository)`
+- ✅ `public function lazyLoadingProducts()`
+- ✅ `public function warehouseMessage()`
+- ✅ `public function drawProductAttributes()`
+- ✅ `private static function getPermutation($attributes)`
+- ✅ `private static function getPermutationQuantity($productId, $permutation)`
 
 ---
 
-### front\Views\Articles
+### front\Views\Articles ✅ REVIEWED
 File: `autoload/front/Views/Articles.php`
 Properties: (brak)
 
 Methods:
-- `public static function fullArticle($article)`
-- `public static function miniatureArticlesList($articles, $ls, $bs, $page)`
-- `public static function entryArticlesList($articles, $ls, $bs, $page)`
-- `public static function fullArticlesList($articles, $ls, $bs, $page)`
-- `public static function news($page_id, $articles)`
-- `public static function newsList($articles)`
-- `public static function generateTableOfContents($content)`
-- `public static function processHeaders($matches)`
-- `public static function generateHeadersIds($text)`
-- `public static function getImage($article)`
+- ✅ `public static function fullArticle($article)`
+- ✅ `public static function miniatureArticlesList($articles, $ls, $bs, $page)`
+- ✅ `public static function entryArticlesList($articles, $ls, $bs, $page)`
+- ✅ `public static function fullArticlesList($articles, $ls, $bs, $page)`
+- ✅ `public static function news($page_id, $articles)`
+- ✅ `public static function newsList($articles)`
+- ✅ `public static function generateTableOfContents($content)`
+- ✅ `public static function processHeaders($matches)`
+- ✅ `public static function generateHeadersIds($text)`
+- ✅ `public static function getImage($article)`
 
 ---
 
-### front\Views\Banners
+### front\Views\Banners ✅ REVIEWED
 File: `autoload/front/Views/Banners.php`
 Properties: (brak)
 
 Methods:
-- `public static function banners($banners)`
-- `public static function mainBanner($banner)`
+- ✅ `public static function banners($banners)`
+- ✅ `public static function mainBanner($banner)`
 
 ---
 
-### front\Views\Languages
+### front\Views\Languages ✅ REVIEWED
 File: `autoload/front/Views/Languages.php`
 Properties: (brak)
 
 Methods:
-- `public static function render($languages)`
+- ✅ `public static function render($languages)`
 
 ---
 
-### front\Views\Menu
+### front\Views\Menu ✅ REVIEWED
 File: `autoload/front/Views/Menu.php`
 Properties: (brak)
 
 Methods:
-- `public static function pages($pages, $level = 0, $current_page = 0)`
-- `public static function menu($menu, $current_page)`
+- ✅ `public static function pages($pages, $level = 0, $current_page = 0)`
+- ✅ `public static function menu($menu, $current_page)`
 
 ---
 
-### front\Views\Newsletter
+### front\Views\Newsletter ✅ REVIEWED
 File: `autoload/front/Views/Newsletter.php`
 Properties: (brak)
 
 Methods:
-- `public static function render()`
+- ✅ `public static function render()`
 
 ---
 
-### front\Views\Scontainers
+### front\Views\Scontainers ✅ REVIEWED
 File: `autoload/front/Views/Scontainers.php`
 Properties: (brak)
 
 Methods:
-- `public static function scontainer($scontainer)`
+- ✅ `public static function scontainer($scontainer)`
 
 ---
 
-### front\Views\ShopCategory
+### front\Views\ShopCategory ✅ REVIEWED
 File: `autoload/front/Views/ShopCategory.php`
 Properties: (brak)
 
 Methods:
-- `public static function categoryDescription($category): string`
-- `public static function categoryView($category, string $langId, int $currentPage = 1): string`
-- `public static function categories($categories, $currentCategory = 0, $level = 0): string`
+- ✅ `public static function categoryDescription($category): string`
+- ✅ `public static function categoryView($category, string $langId, int $currentPage = 1): string`
+- ✅ `public static function categories($categories, $currentCategory = 0, $level = 0): string`
 
 ---
 
-### front\Views\ShopClient
+### front\Views\ShopClient ✅ REVIEWED
 File: `autoload/front/Views/ShopClient.php`
 Properties: (brak)
 
 Methods:
-- `public static function addressEdit($values): string`
-- `public static function clientAddresses($values): string`
-- `public static function clientMenu($values): string`
-- `public static function clientOrders($values): string`
-- `public static function recoverPassword(): string`
-- `public static function miniLogin(): string`
-- `public static function loginForm($values = ''): string`
-- `public static function registerForm(): string`
+- ✅ `public static function addressEdit($values): string`
+- ✅ `public static function clientAddresses($values): string`
+- ✅ `public static function clientMenu($values): string`
+- ✅ `public static function clientOrders($values): string`
+- ✅ `public static function recoverPassword(): string`
+- ✅ `public static function miniLogin(): string`
+- ✅ `public static function loginForm($values = ''): string`
+- ✅ `public static function registerForm(): string`
 
 ---
 
-### front\Views\ShopPaymentMethod
+### front\Views\ShopPaymentMethod ✅ REVIEWED
 File: `autoload/front/Views/ShopPaymentMethod.php`
 Properties: (brak)
 
 Methods:
-- `public static function basketPaymentMethods($payment_methods, $payment_id)`
+- ✅ `public static function basketPaymentMethods($payment_methods, $payment_id)`
 
 ---
 
-### front\Views\ShopProduct
+### front\Views\ShopProduct ✅ REVIEWED
 File: `autoload/front/Views/ShopProduct.php`
 Properties: (brak)
 
 Methods:
-- `public static function productUrl($product)`
+- ✅ `public static function productUrl($product)`
 
 ---
 
-### front\Views\ShopSearch
+### front\Views\ShopSearch ✅ REVIEWED
 File: `autoload/front/Views/ShopSearch.php`
 Properties: (brak)
 
 Methods:
-- `public static function simpleForm()`
+- ✅ `public static function simpleForm()`
 
 ---
 
 <a id="shared"></a>
 ## 4. Shared/ — Klasy współdzielone
 
-### Shared\Cache\CacheHandler
+### Shared\Cache\CacheHandler ✅ REVIEWED
 File: `autoload/Shared/Cache/CacheHandler.php`
 Properties:
 - `protected $redis`
 
 Methods:
-- `public function __construct()`
-- `public function get($key)`
-- `public function set($key, $value, $ttl = 86400)`
-- `public function exists($key)`
-- `public function delete($key)`
-- `public function deletePattern($pattern)`
+- ✅ `public function __construct()`
+- ✅ `public function get($key)`
+- ✅ `public function set($key, $value, $ttl = 86400)`
+- ✅ `public function exists($key)`
+- ✅ `public function delete($key)`
+- ✅ `public function deletePattern($pattern)`
 
 ---
 
-### Shared\Cache\RedisConnection
+### Shared\Cache\RedisConnection ✅ REVIEWED
 File: `autoload/Shared/Cache/RedisConnection.php`
 Properties:
 - `private static $instance = null`
 - `private $redis`
 
 Methods:
-- `private function __construct()`
-- `public static function getInstance()`
-- `public function getConnection()`
+- ✅ `private function __construct()`
+- ✅ `public static function getInstance()`
+- ✅ `public function getConnection()`
 
 ---
 
-### Shared\Email\Email
+### Shared\Email\Email ✅ REVIEWED
 File: `autoload/Shared/Email/Email.php`
 Properties:
 - `public $table = 'pp_newsletter_templates'`
 
 Methods:
-- `public function load_by_name(string $name)`
-- `public function email_check($email)`
-- `public function send(string $email, string $subject, bool $newsletter_headers = false, string $file = null)`
+- ✅ `public function load_by_name(string $name)`
+- ✅ `public function email_check($email)`
+- ✅ `public function send(string $email, string $subject, bool $newsletter_headers = false, string $file = null)`
 
 ---
 
-### Shared\Helpers\Helpers
+### Shared\Helpers\Helpers ✅ REVIEWED
 File: `autoload/Shared/Helpers/Helpers.php`
 Properties: (brak — wszystkie metody statyczne)
 
 Methods:
-- `static function canAddRedirect($from, $to, $lang_id = null)`
-- `static public function clear_product_cache(int $product_id)`
-- `static public function remove_special_chars($string)`
-- `static public function removeDuplicates($array, $param)`
-- `static public function generate_webp_image($file, $compression_quality = 85)`
-- `public static function is_array_fix($value)`
-- `public static function delete_cache()`
-- `public static function pretty_date($format, $timestamp = null)`
-- `public static function lang($text)`
-- `public static function array_cartesian_product($input)`
-- `static public function normalize_decimal($val, int $precision = 2)`
-- `public static function decimal($val, $precision = 2, $dec_point = ',', $thousands_sep = ' ')`
-- `public static function get_new_version()`
-- `public static function get_version()`
-- `public static function set_session($var, $val)`
-- `public static function get_session($var)`
-- `public static function delete_session($var)`
-- `public static function get($var, $clear = false)`
-- `public static function set_message($text)`
-- `public static function alert($text)`
-- `public static function error($text)`
-- `public static function htacces($dir = '../')`
-- `public static function seo($val, $delete_rhombs = false)`
-- `public static function noPL($string)`
-- `public static function delete_dir($dir)`
-- `public static function email_check($email)`
-- `public static function send_email($email, $subject, $text, $replay = '', $file = '')`
-- `public static function shortPrice($price)`
-- `public static function isWholeNumber($value)`
+- ✅ `static function canAddRedirect($from, $to, $lang_id = null)`
+- ✅ `static public function clear_product_cache(int $product_id)`
+- ✅ `static public function remove_special_chars($string)`
+- ✅ `static public function removeDuplicates($array, $param)`
+- 🔧 `static public function generate_webp_image($file, $compression_quality = 85)` — fix: `$_GET['c_w']`/`$_GET['c_h']` → `?? null` (l.117-118); `'png'` → `'image/png'` (l.177, bug: warunek nigdy nie był spełniony)
+- ✅ `public static function is_array_fix($value)`
+- ✅ `public static function delete_cache()`
+- ✅ `public static function pretty_date($format, $timestamp = null)`
+- ✅ `public static function lang($text)`
+- ✅ `public static function array_cartesian_product($input)`
+- ✅ `static public function normalize_decimal($val, int $precision = 2)`
+- ✅ `public static function decimal($val, $precision = 2, $dec_point = ',', $thousands_sep = ' ')`
+- ✅ `public static function get_new_version()`
+- ✅ `public static function get_version()`
+- ✅ `public static function set_session($var, $val)`
+- ✅ `public static function get_session($var)`
+- ✅ `public static function delete_session($var)`
+- ✅ `public static function get($var, $clear = false)`
+- ✅ `public static function set_message($text)`
+- ✅ `public static function alert($text)`
+- ✅ `public static function error($text)`
+- ✅ `public static function htacces($dir = '../')`
+- ✅ `public static function seo($val, $delete_rhombs = false)`
+- ✅ `public static function noPL($string)`
+- ✅ `public static function delete_dir($dir)`
+- ✅ `public static function email_check($email)`
+- ✅ `public static function send_email($email, $subject, $text, $replay = '', $file = '')`
+- ✅ `public static function shortPrice($price)`
+- ✅ `public static function isWholeNumber($value)`
 
 ---
 
-### Shared\Html\Html
+### Shared\Html\Html ✅ REVIEWED
 File: `autoload/Shared/Html/Html.php`
 Properties: (brak — wszystkie metody statyczne)
 
 Methods:
-- `public static function form_text(array $params = array())`
-- `public static function input_switch(array $params = array())`
-- `public static function select(array $params = array())`
-- `public static function textarea(array $params = array())`
-- `public static function input_icon(array $params = array())`
-- `public static function input(array $params = array())`
-- `public static function button(array $params = array())`
-- `public static function panel(array $params = array())`
+- ✅ `public static function form_text(array $params = array())`
+- ✅ `public static function input_switch(array $params = array())`
+- ✅ `public static function select(array $params = array())`
+- ✅ `public static function textarea(array $params = array())`
+- ✅ `public static function input_icon(array $params = array())`
+- ✅ `public static function input(array $params = array())`
+- ✅ `public static function button(array $params = array())`
+- ✅ `public static function panel(array $params = array())`
 
 ---
 
-### Shared\Image\ImageManipulator
+### Shared\Image\ImageManipulator ✅ REVIEWED
 File: `autoload/Shared/Image/ImageManipulator.php`
 Properties:
 - `protected int $width`
@@ -2034,34 +2195,34 @@ Properties:
 - `protected ?string $file = null`
 
 Methods:
-- `public function __construct(?string $file = null)`
-- `public function setImageFile(string $file): self`
-- `public function setImageString(string $data): self`
-- `public function resample(int $width, int $height, bool $constrainProportions = true): self`
-- `public function enlargeCanvas(int $width, int $height, array $rgb = [], ?int $xpos = null, ?int $ypos = null): self`
-- `public function crop($x1, int $y1 = 0, int $x2 = 0, int $y2 = 0): self`
-- `protected function _replace($res): self`
-- `public function save(string $fileName, ?int $type = null): void`
-- `public function getResource()`
-- `public function getWidth(): int`
-- `public function getHeight(): int`
-- `public function __destruct()`
-- `private function isValidImageResource($image): bool`
+- ✅ `public function __construct(?string $file = null)`
+- ✅ `public function setImageFile(string $file): self`
+- ✅ `public function setImageString(string $data): self`
+- ✅ `public function resample(int $width, int $height, bool $constrainProportions = true): self`
+- ✅ `public function enlargeCanvas(int $width, int $height, array $rgb = [], ?int $xpos = null, ?int $ypos = null): self`
+- ✅ `public function crop($x1, int $y1 = 0, int $x2 = 0, int $y2 = 0): self`
+- ✅ `protected function _replace($res): self`
+- ✅ `public function save(string $fileName, ?int $type = null): void`
+- ✅ `public function getResource()`
+- ✅ `public function getWidth(): int`
+- ✅ `public function getHeight(): int`
+- ✅ `public function __destruct()`
+- ✅ `private function isValidImageResource($image): bool`
 
 ---
 
-### Shared\Tpl\Tpl
+### Shared\Tpl\Tpl ✅ REVIEWED
 File: `autoload/Shared/Tpl/Tpl.php`
 Properties:
 - `protected $vars = array()`
 
 Methods:
-- `public static function view($file, $values = '')`
-- `public function secureHTML($val)`
-- `public function render($file)`
-- `private function renderFile($path)`
-- `public function __set($name, $value)`
-- `public function __get($name)`
+- ✅ `public static function view($file, $values = '')`
+- ✅ `public function secureHTML($val)`
+- ✅ `public function render($file)`
+- ✅ `private function renderFile($path)`
+- ✅ `public function __set($name, $value)`
+- ✅ `public function __get($name)`
 
 ---
 
diff --git a/docs/UPDATE_INSTRUCTIONS.md b/docs/UPDATE_INSTRUCTIONS.md
index cf4ef0d..2c0eefd 100644
--- a/docs/UPDATE_INSTRUCTIONS.md
+++ b/docs/UPDATE_INSTRUCTIONS.md
@@ -18,14 +18,14 @@ Aktualizacje znajdują się w folderze `updates/0.XX/` gdzie XX oznacza dziesią
 
 ## Procedura tworzenia nowej aktualizacji
 
-## Status biezacej aktualizacji (ver. 0.293)
+## Status biezacej aktualizacji (ver. 0.294)
 
-- Wersja udostepniona: `0.293` (data: 2026-02-19).
+- Wersja udostepniona: `0.294` (data: 2026-02-19).
 - Pliki publikacyjne:
-    - `updates/0.20/ver_0.293.zip`
+    - `updates/0.20/ver_0.294.zip`
 - Pliki metadanych aktualizacji:
     - `updates/changelog.php`
-    - `updates/versions.php` (`$current_ver = 293`)
+    - `updates/versions.php` (`$current_ver = 294`)
 - Weryfikacja testow przed publikacja:
     - `OK (614 tests, 1821 assertions)`
 
diff --git a/updates/0.20/ver_0.294.zip b/updates/0.20/ver_0.294.zip
new file mode 100644
index 0000000..ef954b7
Binary files /dev/null and b/updates/0.20/ver_0.294.zip differ
diff --git a/updates/changelog.php b/updates/changelog.php
index e2cda01..a34c25c 100644
--- a/updates/changelog.php
+++ b/updates/changelog.php
@@ -1,3 +1,10 @@
+<b>ver. 0.294 - 19.02.2026</b><br />
+- FIX - Code review zakończony (96/96 klas, ~1144 metod): 27 fixów across all layers
+- FIX - Domain: null guard na query()->fetchAll() w 8 repozytoriach, redundancja DI w PromotionRepository
+- FIX - Admin: null safety find() ?: [] w 10 kontrolerach, null guard w App logowaniu/2FA
+- FIX - Front: LayoutEngine undefined $level + $_GET null check, ShopBasketController missing global $lang_id
+- FIX - Shared: Helpers $_GET null check + bug 'png' → 'image/png' (Imagick lossless WebP nigdy nie działał)
+<hr>
 <b>ver. 0.293 - 19.02.2026</b><br />
 - FIX - ArticleRepository: SQL injection fix (addslashes→parameterized), uproszczenie articleDetailsFrontend
 - FIX - AttributeRepository: martwy class_exists('\S') blokowal czyszczenie cache/temp
diff --git a/updates/versions.php b/updates/versions.php
index 861e4e9..6de390c 100644
--- a/updates/versions.php
+++ b/updates/versions.php
@@ -1,5 +1,5 @@
 <?
-$current_ver = 293;
+$current_ver = 294;
 
 for ($i = 1; $i <= $current_ver; $i++)
 {