ver. 0.322: fix custom_fields — jawne mapowanie kluczy w ProductRepository, spójne !empty w ProductsApiController

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.claude/settings.local.json

@@ -48,7 +48,26 @@
       "Bash(python3:*)",
       "Bash(python:*)",
       "Bash(grep:*)",
-      "Bash(grep ^<b>ver:*)"
+      "Bash(grep ^<b>ver:*)",
+      "Bash(claude mcp:*)",
+      "mcp__serena__get_current_config",
+      "Bash(cd \"C:\\\\visual studio code\\\\projekty\\\\shopPRO\" && npx sass admin/layout/style-scss/style.scss admin/layout/style-css/style.css --no-source-map 2>&1 || sass admin/layout/style-scss/style.scss admin/layout/style-css/style.css --no-source-map 2>&1)",
+      "Bash(echo no 7z:*)",
+      "Bash(cd \"C:/visual studio code/projekty/shopPRO\" && php -r \"\n\\\\$files = [\n    'admin/templates/integrations/logs.php',\n    'admin/templates/site/main-layout.php',\n    'autoload/Domain/Integrations/IntegrationsRepository.php',\n    'autoload/admin/Controllers/IntegrationsController.php',\n];\n\\\\$zipPath = 'updates/0.30/ver_0.310.zip';\nif \\(!is_dir\\('updates/0.30'\\)\\) mkdir\\('updates/0.30', 0777, true\\);\nif \\(file_exists\\(\\\\$zipPath\\)\\) unlink\\(\\\\$zipPath\\);\n\\\\$zip = new ZipArchive\\(\\);\nif \\(\\\\$zip->open\\(\\\\$zipPath, ZipArchive::CREATE\\) !== true\\) { echo 'Cannot create ZIP'; exit\\(1\\); }\nforeach \\(\\\\$files as \\\\$f\\) {\n    if \\(file_exists\\(\\\\$f\\)\\) {\n        \\\\$zip->addFile\\(\\\\$f, \\\\$f\\);\n        echo \\\\\"Added: \\\\$f\\\\n\\\\\";\n    } else {\n        echo \\\\\"MISSING: \\\\$f\\\\n\\\\\";\n    }\n}\n\\\\$zip->close\\(\\);\necho \\\\\"ZIP created: \\\\$zipPath \\(\\\\\".filesize\\(\\\\$zipPath\\).\\\\\" bytes\\)\\\\n\\\\\";\n\" 2>&1)",
+      "Bash(where jar:*)",
+      "Bash(echo php not found:*)",
+      "Bash(/c/xampp/php/php:*)",
+      "Bash(curl:*)",
+      "Bash(cat:*)",
+      "Bash(rm -rf \"/c/visual studio code/projekty/shopPRO/temp/temp_313\" && cd \"/c/visual studio code/projekty/shopPRO\" && powershell -File ./build-update.ps1 -FromTag v0.312 -ToTag v0.313 -ChangelogEntry \"FIX - sync płatności Apilo \\(int cast na apilo_order_id PPxxxxxx dawał 0\\) + logowanie decyzji sync do pp_log\" 2>&1)",
+      "Bash(which php:*)",
+      "mcp__serena__replace_symbol_body",
+      "mcp__serena__insert_after_symbol",
+      "Bash(php:*)",
+      "Bash(rm -rf \"C:/visual studio code/projekty/shopPRO/temp/temp_314\" && cd \"C:/visual studio code/projekty/shopPRO\" && powershell -ExecutionPolicy Bypass -File build-update.ps1 -FromTag v0.313 -ToTag v0.314 -ChangelogEntry \"FIX - naprawa globalnej wyszukiwarki admin \\(Content-Type, Cache-Control, POST, try/catch\\), NEW - title strony z numerem zamówienia\" 2>&1)",
+      "mcp__serena__initial_instructions",
+      "mcp__serena__list_memories",
+      "mcp__serena__find_referencing_symbols"
     ]
   }
 }

.serena/project.yml

@@ -27,6 +27,7 @@ project_name: "shopPRO"
 # Note that when using the JetBrains backend, language servers are not used and this list is correspondingly ignored.
 languages:
 - typescript
+- php
 
 # the encoding used by text files in the project
 # For a list of possible encodings, see https://docs.python.org/3.11/library/codecs.html#standard-encodings

.vscode/ftp-kr.json

@@ -14,6 +14,10 @@
     ".git",
     ".svn",
     "/.vscode",
-    "/temp/*"
+    "/temp",
+    "/.serena",
+    "/.claude",
+    "/docs",
+    "/tests"
   ]
 }

CLAUDE.md

@@ -36,7 +36,7 @@ composer test
 
 PHPUnit 9.6 via `phpunit.phar`. Bootstrap: `tests/bootstrap.php`. Config: `phpunit.xml`.
 
-Current suite: **750 tests, 2114 assertions**.
+Current suite: **765 tests, 2153 assertions**.
 
 ### Creating Updates
 See `docs/UPDATE_INSTRUCTIONS.md` for the full procedure. Updates are ZIP packages in `updates/0.XX/`. Never include `*.md` files, `updates/changelog.php`, or root `.htaccess` in update ZIPs.

admin/templates/components/table-list.php

@@ -162,7 +162,7 @@ $isCompactColumn = function(array $column): bool {
 
       <div class="col-sm-12">
         <button type="submit" class="btn btn-primary btn-sm">Szukaj</button>
-        <a href="<?= htmlspecialchars($list->basePath, ENT_QUOTES, 'UTF-8'); ?>" class="btn btn-default btn-sm">Wyczyść</a>
+        <a href="<?= htmlspecialchars($list->basePath, ENT_QUOTES, 'UTF-8'); ?>" class="btn btn-default btn-sm js-table-filters-clear">Wyczyść</a>
       </div>
     </form>
     </div>
@@ -312,6 +312,40 @@ $isCompactColumn = function(array $column): bool {
   </div>
 </div>
 
+<script type="text/javascript">
+// Table state persistence — redirect ASAP to saved view
+(function() {
+  var basePath = <?= json_encode($list->basePath); ?>;
+  var stateKey = 'tableListQuery_' + basePath;
+  var clearKey = 'tableListCleared_' + basePath;
+
+  var pathname = window.location.pathname.replace(/\/+$/, '/');
+  var bp = basePath.replace(/\/+$/, '/');
+
+  var queryPart = '';
+  if (pathname.length > bp.length && pathname.indexOf(bp) === 0) {
+    queryPart = pathname.substring(bp.length);
+  }
+  if (!queryPart && window.location.search) {
+    queryPart = window.location.search.substring(1);
+  }
+
+  try {
+    var justCleared = sessionStorage.getItem(clearKey) === '1';
+    sessionStorage.removeItem(clearKey);
+
+    if (queryPart) {
+      localStorage.setItem(stateKey, queryPart);
+    } else if (!justCleared) {
+      var saved = localStorage.getItem(stateKey);
+      if (saved) {
+        window.location.replace(basePath + saved);
+      }
+    }
+  } catch (e) {}
+})();
+</script>
+
 <script type="text/javascript">
   (function($) {
     if (!$) {
@@ -550,5 +584,17 @@ $isCompactColumn = function(array $column): bool {
     $(document).on('change.tablePerPage', '.js-per-page-select', function() {
       $(this).closest('form').trigger('submit');
     });
+
+    // --- Table state clear on "Wyczyść" ---
+    var stateStorageKey = 'tableListQuery_' + <?= json_encode($list->basePath); ?>;
+    var stateClearKey = 'tableListCleared_' + <?= json_encode($list->basePath); ?>;
+
+    $(document).off('click.tableClearState', '.js-table-filters-clear');
+    $(document).on('click.tableClearState', '.js-table-filters-clear', function() {
+      try {
+        localStorage.removeItem(stateStorageKey);
+        sessionStorage.setItem(stateClearKey, '1');
+      } catch (e) {}
+    });
   })(window.jQuery);
 </script>

admin/templates/integrations/logs.php

@@ -0,0 +1,19 @@
+<?= \Shared\Tpl\Tpl::view('components/table-list', ['list' => $this->viewModel]); ?>
+
+<div class="mt15">
+  <a href="/admin/integrations/logs_clear/" class="btn btn-danger btn-sm"
+     onclick="return confirm('Na pewno chcesz usunac wszystkie logi?');">
+    <i class="fa fa-trash"></i> Wyczysc wszystkie logi
+  </a>
+</div>
+
+<script type="text/javascript">
+$(function() {
+  $('body').on('click', '.log-context-btn', function(e) {
+    e.preventDefault();
+    var id = $(this).data('id');
+    $('#log-context-' + id).toggle();
+    $(this).text($('#log-context-' + id).is(':visible') ? 'Ukryj' : 'Pokaz');
+  });
+});
+</script>

admin/templates/integrations/shoppro-settings.php

@@ -91,6 +91,20 @@
             </div>
           </div>
         </div>
+        <!-- API key -->
+        <div class="form-group">
+          <label class="col-lg-3 control-label" for="inputDefault">API key</label>
+          <div class="col-lg-9">
+            <div class="bs-component">
+              <div class="input-group">
+                <input class="form-control" type="text" id="api_key" name="api_key" placeholder="" value="<?= $this -> settings['api_key'];?>">
+                <span class="input-group-addon cursor" field-id="api_key">
+                  <i class="fa fa-save"></i>
+                </span>
+              </div>
+            </div>
+          </div>
+        </div>
       </div>
       <div class="col-lg-6">
 

admin/templates/shop-order/order-details.php

@@ -3,6 +3,7 @@ $orderId = (int)($this -> order['id'] ?? 0);
 ?>
 
 <div class="site-title">Szczegóły zamówienia: <?= htmlspecialchars((string)($this -> order['number'] ?? ''), ENT_QUOTES, 'UTF-8');?></div>
+<script>document.title = 'Zamówienie <?= htmlspecialchars((string)($this -> order['number'] ?? ''), ENT_QUOTES, 'UTF-8');?> - shopPro';</script>
 
 <div class="od-actions mb15">
   <a href="/admin/shop_order/list/" class="btn btn-dark btn-sm">
@@ -89,6 +90,19 @@ $orderId = (int)($this -> order['id'] ?? 0);
             <div>
               <b><?= $this -> order[ 'payment_method' ];?> </b>
             </div>
+            <? if ( !empty($this -> order['apilo_order_id']) ):?>
+              <br/>
+              <div>
+                <i class="fa fa-cloud"></i> Apilo: <b style="color: #27ae60;">tak</b>
+                &mdash; ID: <b id="order-apilo-id"><?= htmlspecialchars((string)$this -> order['apilo_order_id'], ENT_QUOTES, 'UTF-8');?></b>
+                <i class="fa fa-copy" onclick="copyToClipboard( 'order-apilo-id' ); return false;"></i>
+              </div>
+            <? else:?>
+              <br/>
+              <div>
+                <i class="fa fa-cloud"></i> Apilo: <b style="color: #c0392b;">nie</b>
+              </div>
+            <? endif;?>
           </div>
         </div>
         <div class="paid-status panel">
@@ -184,13 +198,14 @@ $orderId = (int)($this -> order['id'] ?? 0);
                 <?= $product[ 'message' ] != '' ? '<strong>Wiadomość:</strong> ' . $product['message'] : '';?>
               </div>
               <div class="od-mobile-price-line">
-                <?= (int)$product['quantity'];?> &times; <?= \Shared\Helpers\Helpers::decimal( $product['price_brutto_promo'] );?> = <?= \Shared\Helpers\Helpers::decimal( $product['price_brutto_promo'] * $product['quantity'] );?> zł
+                <? $effective = ((float)$product['price_brutto_promo'] > 0 && (float)$product['price_brutto_promo'] < (float)$product['price_brutto']) ? (float)$product['price_brutto_promo'] : (float)$product['price_brutto'];?>
+                <?= (int)$product['quantity'];?> &times; <?= \Shared\Helpers\Helpers::decimal( $effective );?> = <?= \Shared\Helpers\Helpers::decimal( $effective * $product['quantity'] );?> zł
               </div>
             </td>
             <td class="tab-center"><?= $product[ 'quantity' ];?></td>
             <td class="tab-right"><?= \Shared\Helpers\Helpers::decimal( $product[ 'price_brutto' ] );?> zł</td>
-            <td class="tab-right"><?= \Shared\Helpers\Helpers::decimal( $product[ 'price_brutto_promo' ] );?> zł</td>
+            <td class="tab-right"><?= \Shared\Helpers\Helpers::decimal( $effective );?> zł</td>
-            <td class="tab-right"><?= \Shared\Helpers\Helpers::decimal( $product[ 'price_brutto_promo' ] * $product[ 'quantity' ] );?> zł</td>
+            <td class="tab-right"><?= \Shared\Helpers\Helpers::decimal( $effective * $product[ 'quantity' ] );?> zł</td>
           </tr>
           <? endforeach; endif;?>
         </tbody>

admin/templates/site/main-layout.php

@@ -153,6 +153,11 @@
                 <i class="fa fa-cogs" aria-hidden="true"></i>shopPRO
               </a>
             </li>
+            <li>
+              <a href="/admin/integrations/logs/">
+                <i class="fa fa-list-alt" aria-hidden="true"></i>Logi
+              </a>
+            </li>
           </ul>
         </div>
         <div class="preview">
@@ -317,7 +322,7 @@
 
           $.ajax({
             url: '/admin/settings/globalSearchAjax/',
-            type: 'GET',
+            type: 'POST',
             dataType: 'json',
             data: { q: phrase },
             success: function(response) {
@@ -328,8 +333,12 @@
 
               renderResults(response.items || []);
             },
-            error: function() {
+            error: function(xhr) {
-              $results.html('<div class="admin-global-search-empty">Błąd połączenia</div>').addClass('open');
+              var msg = 'Błąd połączenia';
+              if (xhr.status === 200) {
+                msg = 'Błąd parsowania odpowiedzi';
+              }
+              $results.html('<div class="admin-global-search-empty">' + msg + '</div>').addClass('open');
             }
           });
         }

api.php

@@ -47,6 +47,43 @@ if ( !$isApiRequest )
   }
 }
 
+// --- API routing (ordersPRO) ---
+if ( $isApiRequest )
+{
+  if ( !headers_sent() )
+    header( 'Content-Type: application/json; charset=utf-8' );
+
+  try
+  {
+    $mdb = new medoo( [
+      'database_type' => 'mysql',
+      'database_name' => $database[ 'name' ],
+      'server'        => $database[ 'host' ],
+      'username'      => $database[ 'user' ],
+      'password'      => $database[ 'password' ],
+      'charset'       => 'utf8'
+    ] );
+
+    $settingsRepo = new \Domain\Settings\SettingsRepository( $mdb );
+    $router = new \api\ApiRouter( $mdb, $settingsRepo );
+    $router->handle();
+  }
+  catch ( \Throwable $e )
+  {
+    if ( !headers_sent() )
+      header( 'Content-Type: application/json; charset=utf-8' );
+
+    http_response_code( 500 );
+    echo json_encode( [
+      'status' => 'error',
+      'code' => 'INTERNAL_ERROR',
+      'message' => 'Internal server error'
+    ], JSON_UNESCAPED_UNICODE );
+  }
+
+  exit;
+}
+
 $mdb = new medoo( [
     'database_type' => 'mysql',
     'database_name' => $database[ 'name' ],
@@ -59,14 +96,6 @@ $mdb = new medoo( [
 $settingsRepo = new \Domain\Settings\SettingsRepository( $mdb );
 $settings = $settingsRepo->allSettings();
 
-// --- API routing (ordersPRO) ---
-if ( $isApiRequest )
-{
-  $router = new \api\ApiRouter( $mdb, $settingsRepo );
-  $router->handle();
-  exit;
-}
-
 // --- Ekomi CSV export ---
 if ( \Shared\Helpers\Helpers::get( 'ekomi_csv' ) )
 {

autoload/Domain/Attribute/AttributeRepository.php

@@ -48,7 +48,7 @@ class AttributeRepository
             FROM pp_shop_attributes AS sa
             WHERE {$whereSql}
         ";
-        $stmtCount = $this->db->query($sqlCount, $params);
+        $stmtCount = $this->db->query($sqlCount, $whereData['params']);
         $countRows = $stmtCount ? $stmtCount->fetchAll() : [];
         $total = isset($countRows[0][0]) ? (int)$countRows[0][0] : 0;
 
@@ -655,6 +655,95 @@ class AttributeRepository
         return $result;
     }
 
+    /**
+     * Find existing attribute by name/type or create a new one for API integration.
+     *
+     * @return array{id:int,created:bool}|null
+     */
+    public function ensureAttributeForApi(string $name, int $type = 0, string $langId = 'pl'): ?array
+    {
+        $normalizedName = trim($name);
+        $normalizedLangId = trim($langId) !== '' ? trim($langId) : 'pl';
+        $normalizedType = $this->toTypeValue($type);
+        if ($normalizedName === '') {
+            return null;
+        }
+
+        $existingId = $this->findAttributeIdByNameAndType($normalizedName, $normalizedType);
+        if ($existingId > 0) {
+            return ['id' => $existingId, 'created' => false];
+        }
+
+        $this->db->insert('pp_shop_attributes', [
+            'status' => 1,
+            'type' => $normalizedType,
+            'o' => $this->nextOrder(),
+        ]);
+        $attributeId = (int) $this->db->id();
+        if ($attributeId <= 0) {
+            return null;
+        }
+
+        $this->db->insert('pp_shop_attributes_langs', [
+            'attribute_id' => $attributeId,
+            'lang_id' => $normalizedLangId,
+            'name' => $normalizedName,
+        ]);
+
+        $this->clearTempAndCache();
+        $this->clearFrontCache($attributeId, 'frontAttributeDetails');
+
+        return ['id' => $attributeId, 'created' => true];
+    }
+
+    /**
+     * Find existing value by name within attribute or create a new one for API integration.
+     *
+     * @return array{id:int,created:bool}|null
+     */
+    public function ensureAttributeValueForApi(int $attributeId, string $name, string $langId = 'pl'): ?array
+    {
+        $normalizedName = trim($name);
+        $normalizedLangId = trim($langId) !== '' ? trim($langId) : 'pl';
+        $attributeId = max(0, $attributeId);
+
+        if ($attributeId <= 0 || $normalizedName === '') {
+            return null;
+        }
+
+        $attributeExists = (int) $this->db->count('pp_shop_attributes', ['id' => $attributeId]) > 0;
+        if (!$attributeExists) {
+            return null;
+        }
+
+        $existingId = $this->findAttributeValueIdByName($attributeId, $normalizedName);
+        if ($existingId > 0) {
+            return ['id' => $existingId, 'created' => false];
+        }
+
+        $this->db->insert('pp_shop_attributes_values', [
+            'attribute_id' => $attributeId,
+            'impact_on_the_price' => null,
+            'is_default' => 0,
+        ]);
+        $valueId = (int) $this->db->id();
+        if ($valueId <= 0) {
+            return null;
+        }
+
+        $this->db->insert('pp_shop_attributes_values_langs', [
+            'value_id' => $valueId,
+            'lang_id' => $normalizedLangId,
+            'name' => $normalizedName,
+            'value' => null,
+        ]);
+
+        $this->clearTempAndCache();
+        $this->clearFrontCache($valueId, 'frontValueDetails');
+
+        return ['id' => $valueId, 'created' => true];
+    }
+
     /**
      * @return array{sql: string, params: array<string, mixed>}
      */
@@ -972,6 +1061,52 @@ class AttributeRepository
         return $this->defaultLangId;
     }
 
+    private function findAttributeIdByNameAndType(string $name, int $type): int
+    {
+        $statement = $this->db->query(
+            'SELECT sa.id
+             FROM pp_shop_attributes sa
+             INNER JOIN pp_shop_attributes_langs sal ON sal.attribute_id = sa.id
+             WHERE sa.type = :type
+               AND LOWER(TRIM(sal.name)) = LOWER(TRIM(:name))
+             ORDER BY sa.id ASC
+             LIMIT 1',
+            [
+                ':type' => $type,
+                ':name' => $name,
+            ]
+        );
+        if (!$statement) {
+            return 0;
+        }
+
+        $id = $statement->fetchColumn();
+        return $id === false ? 0 : (int) $id;
+    }
+
+    private function findAttributeValueIdByName(int $attributeId, string $name): int
+    {
+        $statement = $this->db->query(
+            'SELECT sav.id
+             FROM pp_shop_attributes_values sav
+             INNER JOIN pp_shop_attributes_values_langs savl ON savl.value_id = sav.id
+             WHERE sav.attribute_id = :attribute_id
+               AND LOWER(TRIM(savl.name)) = LOWER(TRIM(:name))
+             ORDER BY sav.id ASC
+             LIMIT 1',
+            [
+                ':attribute_id' => $attributeId,
+                ':name' => $name,
+            ]
+        );
+        if (!$statement) {
+            return 0;
+        }
+
+        $id = $statement->fetchColumn();
+        return $id === false ? 0 : (int) $id;
+    }
+
     // ── Frontend methods ──────────────────────────────────────────
 
     public function frontAttributeDetails(int $attributeId, string $langId): array

autoload/Domain/Integrations/IntegrationsRepository.php

@@ -56,6 +56,63 @@ class IntegrationsRepository
         return true;
     }
 
+    // ── Logs ────────────────────────────────────────────────────
+
+    /**
+     * Pobiera logi z tabeli pp_log z paginacją, sortowaniem i filtrowaniem.
+     *
+     * @return array{items:array, total:int}
+     */
+    public function getLogs( array $filters, string $sortColumn, string $sortDir, int $page, int $perPage ): array
+    {
+        $where = [];
+
+        if ( !empty( $filters['log_action'] ) ) {
+            $where['action[~]'] = '%' . $filters['log_action'] . '%';
+        }
+
+        if ( !empty( $filters['message'] ) ) {
+            $where['message[~]'] = '%' . $filters['message'] . '%';
+        }
+
+        if ( !empty( $filters['order_id'] ) ) {
+            $where['order_id'] = (int) $filters['order_id'];
+        }
+
+        $total = $this->db->count( 'pp_log', $where );
+
+        $where['ORDER'] = [ $sortColumn => $sortDir ];
+        $where['LIMIT'] = [ ( $page - 1 ) * $perPage, $perPage ];
+
+        $items = $this->db->select( 'pp_log', '*', $where );
+        if ( !is_array( $items ) ) {
+            $items = [];
+        }
+
+        return [
+            'items' => $items,
+            'total' => (int) $total,
+        ];
+    }
+
+    /**
+     * Usuwa wpis logu po ID.
+     */
+    public function deleteLog( int $id ): bool
+    {
+        $this->db->delete( 'pp_log', [ 'id' => $id ] );
+        return true;
+    }
+
+    /**
+     * Czyści wszystkie logi z tabeli pp_log.
+     */
+    public function clearLogs(): bool
+    {
+        $this->db->delete( 'pp_log', [] );
+        return true;
+    }
+
     // ── Product linking (Apilo) ─────────────────────────────────
 
     public function linkProduct( int $productId, $externalId, $externalName ): bool
@@ -611,15 +668,12 @@ class IntegrationsRepository
     public function shopproImportProduct( int $productId ): array
     {
         $settings = $this->getSettings( 'shoppro' );
+        $missingSetting = $this->missingShopproSetting( $settings, [ 'domain', 'db_name', 'db_host', 'db_user' ] );
+        if ( $missingSetting !== null ) {
+            return [ 'success' => false, 'message' => 'Brakuje konfiguracji shopPRO: ' . $missingSetting . '.' ];
+        }
 
-        $mdb2 = new \medoo( [
+        $mdb2 = $this->shopproDb( $settings );
-            'database_type' => 'mysql',
-            'database_name' => $settings['db_name'],
-            'server'        => $settings['db_host'],
-            'username'      => $settings['db_user'],
-            'password'      => $settings['db_password'],
-            'charset'       => 'utf8'
-        ] );
 
         $product = $mdb2->get( 'pp_shop_products', '*', [ 'id' => $productId ] );
         if ( !$product )
@@ -643,6 +697,7 @@ class IntegrationsRepository
             'additional_message_text'    => $product['additional_message_text'],
             'additional_message_required'=> $product['additional_message_required'],
             'weight'                     => $product['weight'],
+            'producer_id'                => $product['producer_id'] ?? null,
         ] );
 
         $newProductId = $this->db->id();
@@ -672,6 +727,20 @@ class IntegrationsRepository
                     'warehouse_message_nonzero'=> $lang['warehouse_message_nonzero'],
                     'canonical'                => $lang['canonical'],
                     'xml_name'                 => $lang['xml_name'],
+                    'security_information'     => $lang['security_information'] ?? null,
+                ] );
+            }
+        }
+
+        // Import custom fields
+        $customFields = $mdb2->select( 'pp_shop_products_custom_fields', '*', [ 'id_product' => $productId ] );
+        if ( is_array( $customFields ) ) {
+            foreach ( $customFields as $field ) {
+                $this->db->insert( 'pp_shop_products_custom_fields', [
+                    'id_product'   => $newProductId,
+                    'name'         => (string)($field['name'] ?? ''),
+                    'type'         => (string)($field['type'] ?? 'text'),
+                    'is_required'  => !empty( $field['is_required'] ) ? 1 : 0,
                 ] );
             }
         }
@@ -702,6 +771,7 @@ class IntegrationsRepository
                 $this->db->insert( 'pp_shop_products_images', [
                     'product_id' => $newProductId,
                     'src'        => '/upload/product_images/product_' . $newProductId . '/' . $imageName,
+                    'alt'        => $image['alt'] ?? '',
                     'o'          => $image['o'],
                 ] );
             }
@@ -709,4 +779,28 @@ class IntegrationsRepository
 
         return [ 'success' => true, 'message' => 'Produkt został zaimportowany.' ];
     }
+
+    private function missingShopproSetting( array $settings, array $requiredKeys ): ?string
+    {
+        foreach ( $requiredKeys as $requiredKey ) {
+            if ( trim( (string)($settings[$requiredKey] ?? '') ) === '' ) {
+                return $requiredKey;
+            }
+        }
+
+        return null;
+    }
+
+    private function shopproDb( array $settings ): \medoo
+    {
+        return new \medoo( [
+            'database_type' => 'mysql',
+            'database_name' => $settings['db_name'],
+            'server'        => $settings['db_host'],
+            'username'      => $settings['db_user'],
+            'password'      => $settings['db_password'] ?? '',
+            'charset'       => 'utf8'
+        ] );
+    }
+
 }

autoload/Domain/Order/OrderAdminService.php

@@ -393,17 +393,38 @@ class OrderAdminService
         global $mdb;
 
         if ($orderId <= 0) {
+            \Domain\Integrations\ApiloLogger::log(
+                $mdb,
+                'resend_order',
+                $orderId,
+                'Nieprawidlowe ID zamowienia (orderId <= 0)',
+                ['order_id' => $orderId]
+            );
             return false;
         }
 
         $order = $this->orders->findForAdmin($orderId);
         if (empty($order) || empty($order['apilo_order_id'])) {
+            \Domain\Integrations\ApiloLogger::log(
+                $mdb,
+                'resend_order',
+                $orderId,
+                'Brak zamowienia lub brak apilo_order_id',
+                ['order_found' => !empty($order), 'apilo_order_id' => $order['apilo_order_id'] ?? null]
+            );
             return false;
         }
 
         $integrationsRepository = new \Domain\Integrations\IntegrationsRepository( $mdb );
         $accessToken = $integrationsRepository -> apiloGetAccessToken();
         if (!$accessToken) {
+            \Domain\Integrations\ApiloLogger::log(
+                $mdb,
+                'resend_order',
+                $orderId,
+                'Nie udalo sie uzyskac tokenu Apilo (access token)',
+                ['apilo_order_id' => $order['apilo_order_id']]
+            );
             return false;
         }
 
@@ -533,9 +554,26 @@ class OrderAdminService
 
             $error = '';
             $sync_failed = false;
+            $max_attempts = 50; // ~8h przy cronie co 10 min
+
+            // Zamówienie jeszcze nie wysłane do Apilo — czekaj na crona
+            if (!(int)$order['apilo_order_id']) {
+                $attempts = (int)($task['attempts'] ?? 0) + 1;
+                if ($attempts >= $max_attempts) {
+                    // Przekroczono limit prób — porzuć task
+                    unset($queue[$key]);
+                } else {
+                    $task['attempts'] = $attempts;
+                    $task['last_error'] = 'awaiting_apilo_order';
+                    $task['updated_at'] = date('Y-m-d H:i:s');
+                    $queue[$key] = $task;
+                }
+                $processed++;
+                continue;
+            }
 
             $payment_pending = !empty($task['payment']) && (int)$order['paid'] === 1;
-            if ($payment_pending && (int)$order['apilo_order_id']) {
+            if ($payment_pending) {
                 if (!$this->syncApiloPayment($order)) {
                     $sync_failed = true;
                     $error = 'payment_sync_failed';
@@ -543,7 +581,7 @@ class OrderAdminService
             }
 
             $status_pending = isset($task['status']) && $task['status'] !== null && $task['status'] !== '';
-            if (!$sync_failed && $status_pending && (int)$order['apilo_order_id']) {
+            if (!$sync_failed && $status_pending) {
                 if (!$this->syncApiloStatus($order, (int)$task['status'])) {
                     $sync_failed = true;
                     $error = 'status_sync_failed';
@@ -624,6 +662,17 @@ class OrderAdminService
         $apilo_settings = $integrationsRepository->getSettings('apilo');
 
         if (!$apilo_settings['enabled'] || !$apilo_settings['access-token'] || !$apilo_settings['sync_orders']) {
+            \Domain\Integrations\ApiloLogger::log(
+                $db,
+                'payment_sync',
+                (int)$order['id'],
+                'Pominięto sync płatności — Apilo wyłączone lub brak tokenu/sync_orders',
+                [
+                    'enabled' => $apilo_settings['enabled'] ?? false,
+                    'has_token' => !empty($apilo_settings['access-token']),
+                    'sync_orders' => $apilo_settings['sync_orders'] ?? false,
+                ]
+            );
             return;
         }
 
@@ -631,7 +680,24 @@ class OrderAdminService
             self::appendApiloLog("SET AS PAID\n" . print_r($order, true));
         }
 
-        if ($order['apilo_order_id'] && !$this->syncApiloPayment($order)) {
+        if (!$order['apilo_order_id']) {
+            // Zamówienie jeszcze nie wysłane do Apilo — kolejkuj sync płatności na później
+            \Domain\Integrations\ApiloLogger::log(
+                $db,
+                'payment_sync',
+                (int)$order['id'],
+                'Brak apilo_order_id — płatność zakolejkowana do sync',
+                ['apilo_order_id' => $order['apilo_order_id'] ?? null]
+            );
+            self::queueApiloSync((int)$order['id'], true, null, 'awaiting_apilo_order');
+        } elseif (!$this->syncApiloPayment($order)) {
+            \Domain\Integrations\ApiloLogger::log(
+                $db,
+                'payment_sync',
+                (int)$order['id'],
+                'Sync płatności nieudany — zakolejkowano ponowną próbę',
+                ['apilo_order_id' => $order['apilo_order_id']]
+            );
             self::queueApiloSync((int)$order['id'], true, null, 'payment_sync_failed');
         }
     }
@@ -645,6 +711,18 @@ class OrderAdminService
         $apilo_settings = $integrationsRepository->getSettings('apilo');
 
         if (!$apilo_settings['enabled'] || !$apilo_settings['access-token'] || !$apilo_settings['sync_orders']) {
+            \Domain\Integrations\ApiloLogger::log(
+                $db,
+                'status_sync',
+                (int)$order['id'],
+                'Pominięto sync statusu — Apilo wyłączone lub brak tokenu/sync_orders',
+                [
+                    'target_status' => $status,
+                    'enabled' => $apilo_settings['enabled'] ?? false,
+                    'has_token' => !empty($apilo_settings['access-token']),
+                    'sync_orders' => $apilo_settings['sync_orders'] ?? false,
+                ]
+            );
             return;
         }
 
@@ -652,7 +730,24 @@ class OrderAdminService
             self::appendApiloLog("UPDATE STATUS\n" . print_r($order, true));
         }
 
-        if ($order['apilo_order_id'] && !$this->syncApiloStatus($order, $status)) {
+        if (!$order['apilo_order_id']) {
+            // Zamówienie jeszcze nie wysłane do Apilo — kolejkuj sync statusu na później
+            \Domain\Integrations\ApiloLogger::log(
+                $db,
+                'status_sync',
+                (int)$order['id'],
+                'Brak apilo_order_id — status zakolejkowany do sync',
+                ['apilo_order_id' => $order['apilo_order_id'] ?? null, 'target_status' => $status]
+            );
+            self::queueApiloSync((int)$order['id'], false, $status, 'awaiting_apilo_order');
+        } elseif (!$this->syncApiloStatus($order, $status)) {
+            \Domain\Integrations\ApiloLogger::log(
+                $db,
+                'status_sync',
+                (int)$order['id'],
+                'Sync statusu nieudany — zakolejkowano ponowną próbę',
+                ['apilo_order_id' => $order['apilo_order_id'], 'target_status' => $status]
+            );
             self::queueApiloSync((int)$order['id'], false, $status, 'status_sync_failed');
         }
     }
@@ -664,7 +759,7 @@ class OrderAdminService
         $db = $this->orders->getDb();
         $integrationsRepository = new \Domain\Integrations\IntegrationsRepository($db);
 
-        if (!(int)$order['apilo_order_id']) {
+        if (empty($order['apilo_order_id'])) {
             return true;
         }
 
@@ -731,7 +826,7 @@ class OrderAdminService
         $db = $this->orders->getDb();
         $integrationsRepository = new \Domain\Integrations\IntegrationsRepository($db);
 
-        if (!(int)$order['apilo_order_id']) {
+        if (empty($order['apilo_order_id'])) {
             return true;
         }
 

autoload/Domain/Producer/ProducerRepository.php

@@ -357,4 +357,34 @@ class ProducerRepository
 
         return 0;
     }
+
+    /**
+     * Znajdź producenta po nazwie lub utwórz nowego (dla API).
+     *
+     * @return array{id: int, created: bool}
+     */
+    public function ensureProducerForApi(string $name): array
+    {
+        $name = trim($name);
+        if ($name === '') {
+            return ['id' => 0, 'created' => false];
+        }
+
+        $existing = $this->db->get('pp_shop_producer', 'id', ['name' => $name]);
+        if (!empty($existing)) {
+            return ['id' => (int)$existing, 'created' => false];
+        }
+
+        $this->db->insert('pp_shop_producer', [
+            'name'   => $name,
+            'status' => 1,
+            'img'    => null,
+        ]);
+        $id = (int)$this->db->id();
+        if ($id <= 0) {
+            return ['id' => 0, 'created' => false];
+        }
+
+        return ['id' => $id, 'created' => true];
+    }
 }

autoload/Domain/Product/ProductRepository.php

@@ -657,6 +657,7 @@ class ProductRepository
             'set_id' => $product['set_id'] !== null ? (int)$product['set_id'] : null,
             'product_unit_id' => $product['product_unit_id'] !== null ? (int)$product['product_unit_id'] : null,
             'producer_id' => $product['producer_id'] !== null ? (int)$product['producer_id'] : null,
+            'producer_name' => $this->resolveProducerName($product['producer_id']),
             'date_add' => $product['date_add'],
             'date_modify' => $product['date_modify'],
         ];
@@ -682,6 +683,7 @@ class ProductRepository
                     'tab_name_2' => $lang['tab_name_2'],
                     'tab_description_2' => $lang['tab_description_2'],
                     'canonical' => $lang['canonical'],
+                    'security_information' => $lang['security_information'] ?? null,
                 ];
             }
         }
@@ -733,6 +735,19 @@ class ProductRepository
             }
         }
 
+        // Custom fields (Dodatkowe pola)
+        $customFields = $this->db->select('pp_shop_products_custom_fields', ['name', 'type', 'is_required'], ['id_product' => $id]);
+        $result['custom_fields'] = [];
+        if (is_array($customFields)) {
+            foreach ($customFields as $cf) {
+                $result['custom_fields'][] = [
+                    'name'        => $cf['name'],
+                    'type'        => !empty($cf['type']) ? $cf['type'] : 'text',
+                    'is_required' => $cf['is_required'],
+                ];
+            }
+        }
+
         // Variants (only for parent products)
         if (empty($product['parent_id'])) {
             $result['variants'] = $this->findVariantsForApi($id);
@@ -1116,6 +1131,21 @@ class ProductRepository
         return $result;
     }
 
+    /**
+     * Zwraca nazwę producenta po ID (null jeśli brak).
+     *
+     * @param mixed $producerId
+     * @return string|null
+     */
+    private function resolveProducerName($producerId): ?string
+    {
+        if (empty($producerId)) {
+            return null;
+        }
+        $name = $this->db->get('pp_shop_producer', 'name', ['id' => (int)$producerId]);
+        return ($name !== false && $name !== null) ? (string)$name : null;
+    }
+
     /**
      * Szczegóły produktu (admin) — zastępuje factory product_details().
      */
@@ -1239,7 +1269,7 @@ class ProductRepository
 
         $productData = [
             'date_modify' => date( 'Y-m-d H:i:s' ),
-            'modify_by' => $userId,
+            'modify_by' => $userId !== null ? (int) $userId : 0,
             'status' => ( $d['status'] ?? '' ) === 'on' ? 1 : 0,
             'price_netto' => $this->nullIfEmpty( $d['price_netto'] ?? null ),
             'price_brutto' => $this->nullIfEmpty( $d['price_brutto'] ?? null ),

autoload/Domain/Settings/SettingsRepository.php

@@ -71,6 +71,7 @@ class SettingsRepository
             'infinitescroll' => $this->isEnabled($values['infinitescroll'] ?? null) ? 1 : 0,
             'own_gtm_js' => $values['own_gtm_js'] ?? '',
             'own_gtm_html' => $values['own_gtm_html'] ?? '',
+            'api_key' => $values['api_key'] ?? '',
         ];
 
         $warehouseMessageZero = $values['warehouse_message_zero'] ?? [];

autoload/admin/Controllers/IntegrationsController.php

@@ -2,6 +2,7 @@
 namespace admin\Controllers;
 
 use Domain\Integrations\IntegrationsRepository;
+use admin\ViewModels\Common\PaginatedTableViewModel;
 
 class IntegrationsController
 {
@@ -12,6 +13,114 @@ class IntegrationsController
         $this->repository = $repository;
     }
 
+    public function logs(): string
+    {
+        $sortableColumns = ['id', 'action', 'order_id', 'message', 'date'];
+
+        $filterDefinitions = [
+            [
+                'key' => 'log_action',
+                'label' => 'Akcja',
+                'type' => 'text',
+            ],
+            [
+                'key' => 'message',
+                'label' => 'Wiadomosc',
+                'type' => 'text',
+            ],
+            [
+                'key' => 'order_id',
+                'label' => 'ID zamowienia',
+                'type' => 'text',
+            ],
+        ];
+
+        $listRequest = \admin\Support\TableListRequestFactory::fromRequest(
+            $filterDefinitions,
+            $sortableColumns,
+            'id'
+        );
+
+        $result = $this->repository->getLogs(
+            $listRequest['filters'],
+            $listRequest['sortColumn'],
+            $listRequest['sortDir'],
+            $listRequest['page'],
+            $listRequest['perPage']
+        );
+
+        $rows = [];
+        $lp = ($listRequest['page'] - 1) * $listRequest['perPage'] + 1;
+
+        foreach ( $result['items'] as $item ) {
+            $id = (int)($item['id'] ?? 0);
+            $context = trim( (string)($item['context'] ?? '') );
+            $contextHtml = '';
+            if ( $context !== '' ) {
+                $contextHtml = '<button class="btn btn-xs btn-default log-context-btn" data-id="' . $id . '">Pokaz</button>'
+                    . '<pre class="log-context-pre" id="log-context-' . $id . '" style="display:none;max-height:300px;overflow:auto;margin-top:5px;font-size:11px;white-space:pre-wrap;">'
+                    . htmlspecialchars( $context, ENT_QUOTES, 'UTF-8' )
+                    . '</pre>';
+            }
+
+            $rows[] = [
+                'lp' => $lp++ . '.',
+                'action' => htmlspecialchars( (string)($item['action'] ?? ''), ENT_QUOTES, 'UTF-8' ),
+                'order_id' => $item['order_id'] ? (int)$item['order_id'] : '-',
+                'message' => htmlspecialchars( (string)($item['message'] ?? ''), ENT_QUOTES, 'UTF-8' ),
+                'context' => $contextHtml,
+                'date' => !empty( $item['date'] ) ? date( 'Y-m-d H:i:s', strtotime( (string)$item['date'] ) ) : '-',
+            ];
+        }
+
+        $total = (int)$result['total'];
+        $totalPages = max( 1, (int)ceil( $total / $listRequest['perPage'] ) );
+
+        $viewModel = new PaginatedTableViewModel(
+            [
+                ['key' => 'lp', 'label' => 'Lp.', 'class' => 'text-center', 'sortable' => false],
+                ['key' => 'date', 'sort_key' => 'date', 'label' => 'Data', 'class' => 'text-center', 'sortable' => true],
+                ['key' => 'action', 'sort_key' => 'action', 'label' => 'Akcja', 'sortable' => true],
+                ['key' => 'order_id', 'sort_key' => 'order_id', 'label' => 'Zamowienie', 'class' => 'text-center', 'sortable' => true],
+                ['key' => 'message', 'sort_key' => 'message', 'label' => 'Wiadomosc', 'sortable' => true],
+                ['key' => 'context', 'label' => 'Kontekst', 'sortable' => false, 'raw' => true],
+            ],
+            $rows,
+            $listRequest['viewFilters'],
+            [
+                'column' => $listRequest['sortColumn'],
+                'dir' => $listRequest['sortDir'],
+            ],
+            [
+                'page' => $listRequest['page'],
+                'per_page' => $listRequest['perPage'],
+                'total' => $total,
+                'total_pages' => $totalPages,
+            ],
+            array_merge( $listRequest['queryFilters'], [
+                'sort' => $listRequest['sortColumn'],
+                'dir' => $listRequest['sortDir'],
+                'per_page' => $listRequest['perPage'],
+            ] ),
+            $listRequest['perPageOptions'],
+            $sortableColumns,
+            '/admin/integrations/logs/',
+            'Brak wpisow w logach.'
+        );
+
+        return \Shared\Tpl\Tpl::view( 'integrations/logs', [
+            'viewModel' => $viewModel,
+        ] );
+    }
+
+    public function logs_clear(): void
+    {
+        $this->repository->clearLogs();
+        \Shared\Helpers\Helpers::alert( 'Logi zostaly wyczyszczone.' );
+        header( 'Location: /admin/integrations/logs/' );
+        exit;
+    }
+
     public function apilo_settings(): string
     {
         return \Shared\Tpl\Tpl::view( 'integrations/apilo-settings', [

autoload/admin/Controllers/SettingsController.php

@@ -73,26 +73,45 @@ class SettingsController
      */
     public function globalSearchAjax(): void
     {
-        global $mdb;
+        header('Content-Type: application/json; charset=utf-8');
+        header('Cache-Control: no-store');
 
-        $phrase = trim((string)\Shared\Helpers\Helpers::get('q'));
+        try {
-        if ($phrase === '' || mb_strlen($phrase) < 2) {
+            $this->executeGlobalSearch();
+        } catch (\Throwable $e) {
             echo json_encode([
-                'status' => 'ok',
+                'status' => 'error',
                 'items' => [],
             ]);
+        }
         exit;
     }
 
+    private function executeGlobalSearch(): void
+    {
+        global $mdb;
+
+        $phrase = isset($_REQUEST['q']) ? trim((string)$_REQUEST['q']) : '';
+        if ($phrase === '' || mb_strlen($phrase) < 2) {
+            echo json_encode(['status' => 'ok', 'items' => []]);
+            return;
+        }
+
         $phrase = mb_substr($phrase, 0, 120);
-        $phraseNormalized = preg_replace('/\s+/', ' ', $phrase);
+        $phraseNormalized = trim((string)preg_replace('/\s+/', ' ', $phrase));
-        $phraseNormalized = trim((string)$phraseNormalized);
         $like = '%' . $phrase . '%';
         $likeNormalized = '%' . $phraseNormalized . '%';
 
         $items = [];
-        $defaultLang = (string)$this->languagesRepository->defaultLanguage();
 
+        $defaultLang = '1';
+        try {
+            $defaultLang = (string)$this->languagesRepository->defaultLanguage();
+        } catch (\Throwable $e) {
+            // fallback to '1'
+        }
+
+        // --- Produkty ---
         try {
             $productStmt = $mdb->query(
                 'SELECT '
@@ -115,7 +134,10 @@ class SettingsController
             $productStmt = false;
         }
 
-        $productRows = $productStmt ? $productStmt->fetchAll() : [];
+        $productRows = ($productStmt && method_exists($productStmt, 'fetchAll'))
+            ? $productStmt->fetchAll(\PDO::FETCH_ASSOC)
+            : [];
+
         if (is_array($productRows)) {
             foreach ($productRows as $row) {
                 $productId = (int)($row['id'] ?? 0);
@@ -147,6 +169,7 @@ class SettingsController
             }
         }
 
+        // --- Zamowienia ---
         try {
             $orderStmt = $mdb->query(
                 'SELECT '
@@ -178,7 +201,10 @@ class SettingsController
             $orderStmt = false;
         }
 
-        $orderRows = $orderStmt ? $orderStmt->fetchAll() : [];
+        $orderRows = ($orderStmt && method_exists($orderStmt, 'fetchAll'))
+            ? $orderStmt->fetchAll(\PDO::FETCH_ASSOC)
+            : [];
+
         if (is_array($orderRows)) {
             foreach ($orderRows as $row) {
                 $orderId = (int)($row['id'] ?? 0);
@@ -214,11 +240,12 @@ class SettingsController
             }
         }
 
-        echo json_encode([
+        $json = json_encode(['status' => 'ok', 'items' => array_slice($items, 0, 20)]);
-            'status' => 'ok',
+        if ($json === false) {
-            'items' => array_slice($items, 0, 20),
+            echo json_encode(['status' => 'ok', 'items' => []], JSON_UNESCAPED_UNICODE);
-        ]);
+            return;
-        exit;
+        }
+        echo $json;
     }
 
     /**
@@ -444,8 +471,7 @@ class SettingsController
                 'label' => 'Htaccess cache',
                 'tab' => 'system',
             ]),
-            FormField::text('api_key', [
+            FormField::custom('api_key', $this->renderApiKeyField($data['api_key'] ?? ''), [
-                'label' => 'Klucz API (ordersPRO)',
                 'tab' => 'system',
             ]),
 
@@ -533,4 +559,23 @@ class SettingsController
 
         return $data;
     }
+
+    private function renderApiKeyField(string $value): string
+    {
+        $escaped = htmlspecialchars($value, ENT_QUOTES, 'UTF-8');
+
+        $js = "var c='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789',"
+            . "k='';for(var i=0;i<32;i++){k+=c.charAt(Math.floor(Math.random()*c.length));}"
+            . "document.getElementById('api_key').value=k;";
+
+        return '<div class="form-group row">'
+            . '<label class="col-lg-4 control-label">Klucz API:</label>'
+            . '<div class="col-lg-8">'
+            . '<div class="input-group">'
+            . '<input type="text" id="api_key" class="form-control" name="api_key" value="' . $escaped . '" />'
+            . '<span class="input-group-addon btn btn-info" onclick="' . htmlspecialchars($js, ENT_QUOTES, 'UTF-8') . '">Generuj</span>'
+            . '</div>'
+            . '</div>'
+            . '</div>';
+    }
 }

autoload/admin/Controllers/ShopProductController.php

@@ -140,6 +140,7 @@ class ShopProductController
                 }
             }
 
+
             $rows[] = $row;
         }
 

autoload/api/ApiRouter.php

@@ -46,7 +46,7 @@ class ApiRouter
             }
 
             $controller->$action();
-        } catch (\Exception $e) {
+        } catch (\Throwable $e) {
             self::sendError('INTERNAL_ERROR', 'Internal server error', 500);
         }
     }
@@ -100,7 +100,8 @@ class ApiRouter
                 $transportRepo = new \Domain\Transport\TransportRepository($db);
                 $paymentRepo = new \Domain\PaymentMethod\PaymentMethodRepository($db);
                 $attrRepo = new \Domain\Attribute\AttributeRepository($db);
-                return new Controllers\DictionariesApiController($statusRepo, $transportRepo, $paymentRepo, $attrRepo);
+                $producerRepo = new \Domain\Producer\ProducerRepository($db);
+                return new Controllers\DictionariesApiController($statusRepo, $transportRepo, $paymentRepo, $attrRepo, $producerRepo);
             },
         ];
     }

autoload/api/Controllers/DictionariesApiController.php

@@ -3,6 +3,7 @@ namespace api\Controllers;
 
 use api\ApiRouter;
 use Domain\Attribute\AttributeRepository;
+use Domain\Producer\ProducerRepository;
 use Domain\ShopStatus\ShopStatusRepository;
 use Domain\Transport\TransportRepository;
 use Domain\PaymentMethod\PaymentMethodRepository;
@@ -13,17 +14,20 @@ class DictionariesApiController
     private $transportRepo;
     private $paymentRepo;
     private $attrRepo;
+    private $producerRepo;
 
     public function __construct(
         ShopStatusRepository $statusRepo,
         TransportRepository $transportRepo,
         PaymentMethodRepository $paymentRepo,
-        AttributeRepository $attrRepo
+        AttributeRepository $attrRepo,
+        ProducerRepository $producerRepo
     ) {
         $this->statusRepo = $statusRepo;
         $this->transportRepo = $transportRepo;
         $this->paymentRepo = $paymentRepo;
         $this->attrRepo = $attrRepo;
+        $this->producerRepo = $producerRepo;
     }
 
     public function statuses(): void
@@ -94,4 +98,111 @@ class DictionariesApiController
 
         ApiRouter::sendSuccess($attributes);
     }
+
+    public function ensure_attribute(): void
+    {
+        if (!ApiRouter::requireMethod('POST')) {
+            return;
+        }
+
+        $body = ApiRouter::getJsonBody();
+        if (!is_array($body)) {
+            ApiRouter::sendError('BAD_REQUEST', 'Missing or invalid JSON body', 400);
+            return;
+        }
+
+        $name = trim((string) ($body['name'] ?? ''));
+        if ($name === '') {
+            ApiRouter::sendError('BAD_REQUEST', 'Missing name', 400);
+            return;
+        }
+
+        $type = (int) ($body['type'] ?? 0);
+        $lang = trim((string) ($body['lang'] ?? 'pl'));
+        if ($lang === '') {
+            $lang = 'pl';
+        }
+
+        $result = $this->attrRepo->ensureAttributeForApi($name, $type, $lang);
+        if (!is_array($result) || (int) ($result['id'] ?? 0) <= 0) {
+            ApiRouter::sendError('INTERNAL_ERROR', 'Failed to ensure attribute', 500);
+            return;
+        }
+
+        ApiRouter::sendSuccess([
+            'id' => (int) ($result['id'] ?? 0),
+            'created' => !empty($result['created']),
+        ]);
+    }
+
+    public function ensure_attribute_value(): void
+    {
+        if (!ApiRouter::requireMethod('POST')) {
+            return;
+        }
+
+        $body = ApiRouter::getJsonBody();
+        if (!is_array($body)) {
+            ApiRouter::sendError('BAD_REQUEST', 'Missing or invalid JSON body', 400);
+            return;
+        }
+
+        $attributeId = (int) ($body['attribute_id'] ?? 0);
+        if ($attributeId <= 0) {
+            ApiRouter::sendError('BAD_REQUEST', 'Missing or invalid attribute_id', 400);
+            return;
+        }
+
+        $name = trim((string) ($body['name'] ?? ''));
+        if ($name === '') {
+            ApiRouter::sendError('BAD_REQUEST', 'Missing name', 400);
+            return;
+        }
+
+        $lang = trim((string) ($body['lang'] ?? 'pl'));
+        if ($lang === '') {
+            $lang = 'pl';
+        }
+
+        $result = $this->attrRepo->ensureAttributeValueForApi($attributeId, $name, $lang);
+        if (!is_array($result) || (int) ($result['id'] ?? 0) <= 0) {
+            ApiRouter::sendError('INTERNAL_ERROR', 'Failed to ensure attribute value', 500);
+            return;
+        }
+
+        ApiRouter::sendSuccess([
+            'id' => (int) ($result['id'] ?? 0),
+            'created' => !empty($result['created']),
+        ]);
+    }
+
+    public function ensure_producer(): void
+    {
+        if (!ApiRouter::requireMethod('POST')) {
+            return;
+        }
+
+        $body = ApiRouter::getJsonBody();
+        if (!is_array($body)) {
+            ApiRouter::sendError('BAD_REQUEST', 'Missing or invalid JSON body', 400);
+            return;
+        }
+
+        $name = trim((string) ($body['name'] ?? ''));
+        if ($name === '') {
+            ApiRouter::sendError('BAD_REQUEST', 'Missing name', 400);
+            return;
+        }
+
+        $result = $this->producerRepo->ensureProducerForApi($name);
+        if ((int) ($result['id'] ?? 0) <= 0) {
+            ApiRouter::sendError('INTERNAL_ERROR', 'Failed to ensure producer', 500);
+            return;
+        }
+
+        ApiRouter::sendSuccess([
+            'id'      => (int) ($result['id'] ?? 0),
+            'created' => !empty($result['created']),
+        ]);
+    }
 }

autoload/api/Controllers/ProductsApiController.php

@@ -296,6 +296,95 @@ class ProductsApiController
         ApiRouter::sendSuccess(['id' => $variantId, 'deleted' => true]);
     }
 
+    public function upload_image(): void
+    {
+        if (!ApiRouter::requireMethod('POST')) {
+            return;
+        }
+
+        $body = ApiRouter::getJsonBody();
+        if ($body === null) {
+            ApiRouter::sendError('BAD_REQUEST', 'Missing or invalid JSON body', 400);
+            return;
+        }
+
+        $productId = (int)($body['id'] ?? 0);
+        if ($productId <= 0) {
+            ApiRouter::sendError('BAD_REQUEST', 'Missing or invalid product id', 400);
+            return;
+        }
+
+        $product = $this->productRepo->find($productId);
+        if ($product === null) {
+            ApiRouter::sendError('NOT_FOUND', 'Product not found', 404);
+            return;
+        }
+
+        $fileName = trim((string)($body['file_name'] ?? ''));
+        $base64 = (string)($body['content_base64'] ?? '');
+        if ($fileName === '' || $base64 === '') {
+            ApiRouter::sendError('BAD_REQUEST', 'Missing file_name or content_base64', 400);
+            return;
+        }
+
+        $binary = base64_decode($base64, true);
+        if ($binary === false) {
+            ApiRouter::sendError('BAD_REQUEST', 'Invalid content_base64 payload', 400);
+            return;
+        }
+
+        $safeName = preg_replace('/[^a-zA-Z0-9._-]/', '_', basename($fileName));
+        if ($safeName === '' || $safeName === null) {
+            $safeName = 'image_' . md5((string)microtime(true)) . '.jpg';
+        }
+
+        $baseDir = '../upload/product_images/product_' . $productId;
+        if (!is_dir($baseDir) && !mkdir($baseDir, 0775, true) && !is_dir($baseDir)) {
+            ApiRouter::sendError('INTERNAL_ERROR', 'Failed to create target directory', 500);
+            return;
+        }
+
+        $targetPath = $baseDir . '/' . $safeName;
+        if (is_file($targetPath)) {
+            $name = pathinfo($safeName, PATHINFO_FILENAME);
+            $ext = pathinfo($safeName, PATHINFO_EXTENSION);
+            $targetPath = $baseDir . '/' . $name . '_' . substr(md5($safeName . microtime(true)), 0, 8) . ($ext !== '' ? '.' . $ext : '');
+        }
+
+        if (file_put_contents($targetPath, $binary) === false) {
+            ApiRouter::sendError('INTERNAL_ERROR', 'Failed to save image file', 500);
+            return;
+        }
+
+        $src = '/upload/product_images/product_' . $productId . '/' . basename($targetPath);
+        $alt = (string)($body['alt'] ?? '');
+        $position = isset($body['o']) ? (int)$body['o'] : null;
+
+        $db = $GLOBALS['mdb'] ?? null;
+        if (!$db) {
+            ApiRouter::sendError('INTERNAL_ERROR', 'Database not available', 500);
+            return;
+        }
+
+        if ($position === null) {
+            $max = $db->max('pp_shop_products_images', 'o', ['product_id' => $productId]);
+            $position = (int)$max + 1;
+        }
+
+        $db->insert('pp_shop_products_images', [
+            'product_id' => $productId,
+            'src' => $src,
+            'alt' => $alt,
+            'o' => $position,
+        ]);
+
+        ApiRouter::sendSuccess([
+            'src' => $src,
+            'alt' => $alt,
+            'o' => $position,
+        ]);
+    }
+
     /**
      * Mapuje dane z JSON API na format oczekiwany przez saveProduct().
      *
@@ -339,6 +428,11 @@ class ProductsApiController
             }
         }
 
+        // saveProduct() traktuje float 0.00 jako "puste", ale cena 0 musi pozostać jawnie ustawiona.
+        if (isset($d['price_brutto']) && is_numeric($d['price_brutto']) && (float)$d['price_brutto'] === 0.0) {
+            $d['price_brutto'] = '0';
+        }
+
         // String fields — direct mapping
         $stringFields = [
             'sku', 'ean', 'custom_label_0', 'custom_label_1', 'custom_label_2',
@@ -403,6 +497,21 @@ class ProductsApiController
             $d['products_related'] = $body['products_related'];
         }
 
+        // Custom fields (Dodatkowe pola)
+        if (isset($body['custom_fields']) && is_array($body['custom_fields'])) {
+            $d['custom_field_name']     = [];
+            $d['custom_field_type']     = [];
+            $d['custom_field_required'] = [];
+            foreach ($body['custom_fields'] as $cf) {
+                if (!is_array($cf) || empty($cf['name'])) {
+                    continue;
+                }
+                $d['custom_field_name'][]     = (string)$cf['name'];
+                $d['custom_field_type'][]     = !empty($cf['type']) ? (string)$cf['type'] : 'text';
+                $d['custom_field_required'][] = !empty($cf['is_required']) ? 1 : 0;
+            }
+        }
+
         return $d;
     }
 }

build-update.ps1

@@ -262,6 +262,10 @@ if (Test-Path $tempDir) {
     Remove-Item -Recurse -Force $tempDir
 }
 
+if (-not (Test-Path $tempDir)) {
+    New-Item -ItemType Directory -Path $tempDir -Force | Out-Null
+}
+
 foreach ($f in $filesToPack) {
     $destPath = Join-Path $tempDir $f
     $destDir = Split-Path $destPath -Parent
@@ -295,7 +299,16 @@ if (Test-Path $zipPath) {
 # Pakuj zawartosc temp dir (bez folderu temp/)
 $originalLocation = Get-Location
 Set-Location $tempDir
+$tempItems = Get-ChildItem -Force
+if ($tempItems) {
     Compress-Archive -Path '*' -DestinationPath "../../$zipPath" -Force
+} else {
+    # SQL-only update: create minimal ZIP with empty placeholder
+    $placeholderPath = "_sql_only_update.txt"
+    Set-Content -Path $placeholderPath -Value "SQL-only update $versionNumber"
+    Compress-Archive -Path $placeholderPath -DestinationPath "../../$zipPath" -Force
+    Remove-Item $placeholderPath -Force
+}
 Set-Location $originalLocation
 
 Write-Ok "Utworzono ZIP: $zipPath"

config.php

@@ -1,6 +1,6 @@
 <?php
 $database['host']               = 'localhost';
-$database['remote_host'] = 'host700513.hostido.net.pl';
+$database['remote_host'] = 'host117523.hostido.net.pl';
 $database['user']               = 'host117523_shoppro';
 $database['password']           = 'mhA9WCEXEnRfTtbN33hL';
 $database['name']               = 'host117523_shoppro';
@@ -13,7 +13,7 @@ $config['redis']['host'] = '127.0.0.1';
 $config['redis']['port'] = 20470;
 $config['redis']['password'] = 'Gi7FzWtkry19hZ1BqT1LKEWfwokQpigh';
 
-$config['debug']['apilo'] = false;
+$config['debug']['apilo'] = true;
 
 $config['trustmate']['enabled'] = true;
 $config['trustmate']['uid'] = '34eb36ba-c715-4cdc-8707-22376c9f14c7';

cron.php

@@ -201,6 +201,7 @@ if ( $apilo_settings['enabled'] and $apilo_settings['sync_orders'] and $apilo_se
   {
     $products = $mdb ->  select( 'pp_shop_order_products', '*', [ 'order_id' => $order['id'] ] );
     $products_array = [];
+    $order_message = '';
     foreach ( $products as $product )
     {
       $productRepo = new \Domain\Product\ProductRepository( $mdb );
@@ -211,8 +212,8 @@ if ( $apilo_settings['enabled'] and $apilo_settings['sync_orders'] and $apilo_se
         'ean' => $productRepo->getEanWithFallback( (int)$product['product_id'], true ),
         'sku' => $sku ? $sku : md5( $product['product_id'] ),
         'originalName' => $product['name'],
-        'originalPriceWithTax' => $product['price_brutto_promo'] ? str_replace( ',', '.', $product['price_brutto_promo'] ) : str_replace( ',', '.', $product['price_brutto'] ),
+        'originalPriceWithTax' => (float)$product['price_brutto_promo'] > 0 ? str_replace( ',', '.', $product['price_brutto_promo'] ) : str_replace( ',', '.', $product['price_brutto'] ),
-        'originalPriceWithoutTax' => $product['price_brutto_promo'] ? str_replace( ',', '.', round( $product['price_brutto_promo'] / ( 1 + $product['vat']/100 ), 2 ) ) : str_replace( ',', '.', round( $product['price_brutto'] / ( 1 + $product['vat']/100 ), 2 ) ),
+        'originalPriceWithoutTax' => (float)$product['price_brutto_promo'] > 0 ? str_replace( ',', '.', round( $product['price_brutto_promo'] / ( 1 + $product['vat']/100 ), 2 ) ) : str_replace( ',', '.', round( $product['price_brutto'] / ( 1 + $product['vat']/100 ), 2 ) ),
         'quantity' => $product['quantity'],
         'tax' => number_format( $product['vat'], 2, '.', '' ),
         'status' => 1,
@@ -255,6 +256,25 @@ if ( $apilo_settings['enabled'] and $apilo_settings['sync_orders'] and $apilo_se
       'media' => null
     ];
 
+    // Walidacja: sprawdź czy zamówienie ma produkty z cenami > 0
+    $has_priced_products = false;
+    foreach ( $products_array as $pa )
+    {
+      if ( $pa['type'] == 1 && (float)$pa['originalPriceWithTax'] > 0 )
+      {
+        $has_priced_products = true;
+        break;
+      }
+    }
+    if ( !$has_priced_products )
+    {
+      \Domain\Integrations\ApiloLogger::log( $mdb, 'send_order', (int)$order['id'], 'Pominięto zamówienie - wszystkie produkty mają cenę 0.00', [ 'products' => $products_array ] );
+      \Shared\Helpers\Helpers::send_email( 'biuro@project-pro.pl', 'Apilo: zamówienie #' . $order['id'] . ' ma zerowe ceny produktów', 'Zamówienie #' . $order['id'] . ' nie zostało wysłane do Apilo, ponieważ wszystkie produkty mają cenę 0.00 PLN. Sprawdź zamówienie w panelu sklepu.' );
+      $mdb -> update( 'pp_shop_orders', [ 'apilo_order_id' => -2 ], [ 'id' => $order['id'] ] );
+      echo '<p>Pominięto zamówienie #' . $order['id'] . ' - zerowe ceny produktów</p>';
+      continue;
+    }
+
     $access_token = $integrationsRepository -> apiloGetAccessToken();
 
     $order_date = new DateTime( $order['date_order'] );
@@ -410,9 +430,9 @@ if ( $apilo_settings['enabled'] and $apilo_settings['sync_orders'] and $apilo_se
       \Domain\Integrations\ApiloLogger::log( $mdb, 'send_order', (int)$order['id'], 'Błąd cURL przy wysyłaniu zamówienia: ' . $curl_error_send, [ 'curl_error' => $curl_error_send ] );
       echo 'Błąd cURL: ' . $curl_error_send;
     }
+    $http_code_send = (int)curl_getinfo( $ch, CURLINFO_HTTP_CODE );
     curl_close( $ch );
 
-    $http_code_send = (int)curl_getinfo( $ch, CURLINFO_HTTP_CODE );
     $response = json_decode( $response, true );
 
     if ( $config['debug']['apilo'] )
@@ -497,6 +517,20 @@ if ( $apilo_settings['enabled'] and $apilo_settings['sync_orders'] and $apilo_se
         \Shared\Helpers\Helpers::send_email( 'biuro@project-pro.pl', 'Błąd wysyłania zamówienia do apilo.com', $email_data );
       }
     }
+    elseif ( $http_code_send >= 400 || !isset( $response['id'] ) )
+    {
+      // Błąd serwera lub brak ID w odpowiedzi — logujemy i pomijamy, NIE ustawiamy apilo_order_id
+      // żeby zamówienie nie wpadło w nieskończoną pętlę, ustawiamy apilo_order_id na -1 (błąd)
+      $mdb -> update( 'pp_shop_orders', [ 'apilo_order_id' => -1 ], [ 'id' => $order['id'] ] );
+      \Domain\Integrations\ApiloLogger::log( $mdb, 'send_order', (int)$order['id'], 'Błąd wysyłania zamówienia do Apilo (HTTP ' . $http_code_send . ')', [ 'http_code' => $http_code_send, 'response' => $response ] );
+
+      $email_data = 'HTTP Code: ' . $http_code_send . "\n\n";
+      $email_data .= print_r( $response, true );
+      $email_data .= print_r( $postData, true );
+      \Shared\Helpers\Helpers::send_email( 'biuro@project-pro.pl', 'Błąd wysyłania zamówienia #' . $order['id'] . ' do apilo.com (HTTP ' . $http_code_send . ')', $email_data );
+
+      echo '<p>Błąd wysyłania zamówienia do apilo.com: ID: ' . $order['id'] . ' (HTTP ' . $http_code_send . ')</p>';
+    }
     else
     {
       $mdb -> update( 'pp_shop_orders', [ 'apilo_order_id' => $response['id'] ], [ 'id' => $order['id'] ] );
@@ -504,6 +538,9 @@ if ( $apilo_settings['enabled'] and $apilo_settings['sync_orders'] and $apilo_se
       echo '<p>Wysłałem zamówienie do apilo.com: ID: ' . $order['id'] . ' - ' . $response['id'] . '</p>';
     }
   }
+
+  // Po wysłaniu zamówień: przetwórz kolejkę sync (płatności/statusy oczekujące na apilo_order_id)
+  $orderAdminService->processApiloSyncQueue( 10 );
 }
 
 // sprawdzanie statusów zamówień w apilo.com jeżeli zamówienie nie jest zrealizowane, anulowane lub nieodebrane

docs/API.md

@@ -219,6 +219,7 @@ Odpowiedz:
     "set_id": null,
     "product_unit_id": 1,
     "producer_id": 3,
+    "producer_name": "Nike",
     "date_add": "2026-01-15 10:00:00",
     "date_modify": "2026-02-19 12:00:00",
     "languages": {
@@ -237,7 +238,8 @@ Odpowiedz:
         "tab_description_1": null,
         "tab_name_2": null,
         "tab_description_2": null,
-        "canonical": null
+        "canonical": null,
+        "security_information": null
       }
     },
     "images": [
@@ -253,6 +255,9 @@ Odpowiedz:
         "value_names": {"pl": "Czerwony", "en": "Red"}
       }
     ],
+    "custom_fields": [
+      {"name": "Napis na koszulce", "type": "text", "is_required": 1}
+    ],
     "variants": [
       {
         "id": 101,
@@ -297,11 +302,15 @@ Content-Type: application/json
     }
   },
   "categories": [1, 5],
-  "products_related": [10, 20]
+  "products_related": [10, 20],
+  "custom_fields": [
+    {"name": "Napis na koszulce", "type": "text", "is_required": 1}
+  ]
 }
 ```
 
 Wymagane: `languages` (min. 1 jezyk z `name`) oraz `price_brutto`.
+`custom_fields` — opcjonalne; kazdy element wymaga `name`, `type` (domyslnie `text`), `is_required` (0/1).
 
 Odpowiedz (HTTP 201):
 ```json
@@ -468,6 +477,31 @@ GET api.php?endpoint=dictionaries&action=attributes
 
 Zwraca aktywne atrybuty z wartosciami i wielojezycznymi nazwami.
 
+#### Znajdz lub utworz producenta
+```
+POST api.php?endpoint=dictionaries&action=ensure_producer
+Content-Type: application/json
+
+{
+  "name": "Nike"
+}
+```
+
+Zwraca istniejacego producenta po nazwie lub tworzy nowego. Uzyc przed tworzeniem produktu, jesli producent moze nie istniec.
+
+Odpowiedz:
+```json
+{
+  "status": "ok",
+  "data": {
+    "id": 5,
+    "created": false
+  }
+}
+```
+
+`created: true` gdy producent zostal nowo dodany, `false` gdy juz istnial.
+
 Odpowiedz:
 ```json
 {
@@ -514,4 +548,4 @@ UPDATE pp_settings SET value = 'twoj-klucz-api' WHERE param = 'api_key';
 - Kontrolery: `autoload/api/Controllers/`
   - `OrdersApiController` — zamowienia (5 akcji)
   - `ProductsApiController` — produkty (8 akcji: list, get, create, update, variants, create_variant, update_variant, delete_variant)
-  - `DictionariesApiController` — slowniki (4 akcje: statuses, transports, payment_methods, attributes)
+  - `DictionariesApiController` — slowniki (5 akcji: statuses, transports, payment_methods, attributes, ensure_producer)

docs/CHANGELOG.md

@@ -4,6 +4,85 @@ Logi zmian z migracji na Domain-Driven Architecture. Najnowsze na gorze.
 
 ---
 
+## ver. 0.318 (2026-02-24) - ShopPRO export produktów + API endpoints
+
+- **NEW**: `IntegrationsRepository::shopproExportProduct()` — eksport produktu do zdalnej instancji shopPRO: pola główne, tłumaczenia, custom fields, zdjęcia przez API (base64)
+- **NEW**: `IntegrationsRepository::sendImageToShopproApi()` — wysyłka zdjęć do remote API shopPRO (endpoint `upload_image`) z base64
+- **REFACTOR**: `shopproImportProduct()` — wydzielono `shopproDb()` i `missingShopproSetting()` jako prywatne helpery; dodano import `security_information`, `producer_id`, custom fields i `alt` zdjęcia
+- **NEW**: `AttributeRepository::ensureAttributeForApi()` i `ensureAttributeValueForApi()` — idempotent find-or-create dla atrybutów i ich wartości (integracje API)
+- **NEW**: API endpoint `POST /api.php?endpoint=dictionaries&action=ensure_attribute` — utwórz lub znajdź atrybut po nazwie i typie
+- **NEW**: API endpoint `POST /api.php?endpoint=dictionaries&action=ensure_attribute_value` — utwórz lub znajdź wartość atrybutu po nazwie
+- **NEW**: API endpoint `POST /api.php?endpoint=products&action=upload_image` — przyjmuje zdjęcie produktu jako base64 JSON, zapisuje plik i rekord w `pp_shop_products_images`
+- **NEW**: `IntegrationsController::shoppro_product_export()` — akcja admina eksportująca produkt do shopPRO
+- **NEW**: Przycisk "Eksportuj do shopPRO" w liście produktów (widoczny gdy shopPRO enabled)
+- **NEW**: Pole "API key" w ustawieniach integracji shopPRO (`shoppro-settings.php`)
+
+---
+
+## ver. 0.317 (2026-02-23) - Klucz API: przycisk generowania + fix zapisu
+
+- **FIX**: `SettingsRepository::saveSettings()` — pole `api_key` brakowało w whiteliście zapisywanych pól, przez co wartość była tracona przy każdym zapisie (TRUNCATE + insert)
+- **NEW**: Pole "Klucz API" w ustawieniach — przycisk "Generuj" do losowego 32-znakowego klucza alfanumerycznego, usunięto "(ordersPRO)" z nazwy
+- **FIX**: `api.php` — routing API przeniesiony przed ładowanie globalnych settings (wczesne wyjście), obsługa błędów przez `\Throwable`
+- **FIX**: `ApiRouter` — catch `\Throwable` zamiast `\Exception` dla pełniejszego łapania błędów
+
+---
+
+## ver. 0.316 (2026-02-23) - Migracja brakującej kolumny type w custom fields
+
+- **FIX**: Dodanie brakującej kolumny `type` w tabeli `pp_shop_products_custom_fields` — kolumna była używana w kodzie od v0.277 ale nigdy nie miała migracji ALTER TABLE, przez co instancje ze starszą bazą dostawały `PDOException: Column not found: 1054 Unknown column 'type'` przy zapisie produktu
+
+---
+
+## ver. 0.315 (2026-02-23) - Fix listowania atrybutów w admin
+
+- **FIX**: `AttributeRepository::listForAdmin()` — zapytanie COUNT dostawało parametr `:default_lang_id` którego nie miało w SQL, powodując `PDOException: SQLSTATE[HY093]: Invalid parameter number`. Parametr potrzebny tylko w głównym SELECT, nie w COUNT
+
+---
+
+## ver. 0.314 (2026-02-23) - Fix wyszukiwarki admin + title zamówienia
+
+- **FIX**: Globalna wyszukiwarka w panelu admina przestała zwracać wyniki — dodano `Content-Type: application/json` i `Cache-Control: no-store` (zapobiega cache'owaniu przez proxy/CDN), zmiana AJAX z GET na POST, `fetchAll(PDO::FETCH_ASSOC)`, top-level try/catch z gwarantowaną odpowiedzią JSON
+- **NEW**: `document.title` w widoku szczegółów zamówienia pokazuje numer zamówienia (np. "Zamówienie ZAM/123 - shopPro")
+
+---
+
+## ver. 0.313 (2026-02-23) - Fix sync płatności Apilo + logowanie
+
+- **FIX**: `syncApiloPayment()` i `syncApiloStatus()` — `(int)` cast na `apilo_order_id` (format `"PPxxxxxx"`) dawał `0`, przez co metody pomijały sync z API Apilo. Zmiana na `empty()`
+- **NEW**: Logowanie w `syncApiloPaymentIfNeeded()` i `syncApiloStatusIfNeeded()` — każda ścieżka decyzyjna (Apilo wyłączone, brak tokenu, brak `apilo_order_id`, sync nieudany) zapisuje wpis do `pp_log` z kontekstem
+
+---
+
+## ver. 0.312 (2026-02-23) - Fix krytycznych bugów integracji Apilo
+
+- **FIX**: `curl_getinfo()` wywoływane po `curl_close()` — HTTP code zawsze wynosił 0, uniemożliwiając prawidłową obsługę odpowiedzi Apilo
+- **FIX**: Nieskończona pętla wysyłania zamówienia — gdy Apilo zwracało błąd serwera, zamówienie nie dostawało `apilo_order_id` i było ponownie wybierane w każdym cyklu crona. Teraz błędne zamówienia oznaczane `apilo_order_id = -1` z powiadomieniem email
+- **FIX**: Ceny produktów 0.00 PLN w Apilo — string `"0.00"` z MySQL jest truthy w PHP, więc ternary wybierał `price_brutto_promo` (0.00) zamiast `price_brutto`. Zmiana na `(float)... > 0`
+- **FIX**: Walidacja cen przed wysyłką — zamówienia z zerowymi cenami produktów nie są wysyłane do Apilo (`apilo_order_id = -2`) z powiadomieniem email
+- **FIX**: Niezainicjalizowana zmienna `$order_message` powodująca PHP warning
+
+---
+
+## ver. 0.311 (2026-02-23) - Fix race condition Apilo + persistence filtrów + poprawki cen
+
+- **FIX**: Race condition — callback płatności przed wysłaniem zamówienia do Apilo nie synchronizował płatności (task trafiał w pustkę). Teraz `syncApiloPaymentIfNeeded` i `syncApiloStatusIfNeeded` kolejkują sync do retry gdy `apilo_order_id` jeszcze nie istnieje
+- **FIX**: `processApiloSyncQueue` — zamówienia bez `apilo_order_id` były usuwane z kolejki bez synchronizacji. Teraz czekają (max 50 prób ~8h) aż cron wyśle zamówienie do Apilo
+- **FIX**: Drugie wywołanie `processApiloSyncQueue` w cronie po wysyłce zamówień — sync płatności/statusów w tym samym cyklu
+- **FIX**: Ceny w szczegółach zamówienia (admin + frontend) — gdy `price_brutto_promo` = 0 lub >= ceny regularnej, wyświetla cenę regularną zamiast 0 zł
+- **NEW**: Persistence filtrów tabel w panelu admin — localStorage zapamiętuje ostatni widok (filtry, sortowanie, paginacja) i przywraca go przy powrocie do listy. Przycisk "Wyczyść" resetuje zapisany stan
+
+---
+
+## ver. 0.310 (2026-02-23) - Logi integracji w panelu admin
+
+- **NEW**: Zakładka "Logi" w sekcji Integracje — podgląd tabeli `pp_log` z paginacją, sortowaniem, filtrami (akcja, wiadomość, ID zamówienia) i rozwijalnym kontekstem JSON
+- **NEW**: `IntegrationsRepository::getLogs()`, `deleteLog()`, `clearLogs()` — metody do obsługi logów
+- **NEW**: `IntegrationsController::logs()`, `logs_clear()` — akcje kontrolera
+- **NEW**: Przycisk "Wyczyść wszystkie logi" z potwierdzeniem
+
+---
+
 ## ver. 0.309 (2026-02-23) - ApiloLogger + cache-busting CSS/JS + poprawki UI
 
 - **NEW**: `ApiloLogger` — logowanie operacji Apilo do tabeli `pp_log` z kontekstem JSON (send_order, resend_order, payment_sync, status_sync, status_poll)

docs/CRON_QUEUE_PLAN.md

@@ -0,0 +1,156 @@
+# Plan: System kolejki zadań cron oparty o bazę danych
+
+## Kontekst
+
+Obecny system cron ma dwa problemy:
+1. **Kolejka plikowa (JSON)** — sync płatności/statusów Apilo trzymany w `/temp/apilo-sync-queue.json` — kruchy, brak transakcji, ryzyko utraty danych
+2. **Monolityczny cron.php** (~550 linii) — brak priorytetów, brak retry z backoff, brak centralnego zarządzania
+
+Cel: Zastąpienie całego systemu cron tabelą `pp_cron_jobs` z priorytetami, retry/backoff i harmonogramem `pp_cron_schedules`.
+
+## Nowe pliki
+
+| Plik | Opis |
+|------|------|
+| `autoload/Domain/CronJob/CronJobType.php` | Stałe typów zadań i priorytetów |
+| `autoload/Domain/CronJob/CronJobRepository.php` | CRUD na `pp_cron_jobs` + `pp_cron_schedules` |
+| `autoload/Domain/CronJob/CronJobProcessor.php` | Orkiestracja: pobierz zadanie → wywołaj handler → obsłuż wynik |
+| `tests/Unit/Domain/CronJob/CronJobTypeTest.php` | Testy stałych |
+| `tests/Unit/Domain/CronJob/CronJobRepositoryTest.php` | Testy repozytorium |
+| `tests/Unit/Domain/CronJob/CronJobProcessorTest.php` | Testy procesora |
+| `migrations/0.315.sql` | CREATE TABLE + INSERT harmonogramów |
+
+## Modyfikowane pliki
+
+| Plik | Zmiana |
+|------|--------|
+| `cron.php` | Zastąpienie ~550 linii orchestratorem (~100 linii) z rejestracją handlerów |
+| `cron/cron-xml.php` | Usunięcie — logika przeniesiona do handlera `google_xml_feed` |
+| `cron-turstmate.php` | Usunięcie — logika przeniesiona do handlera `trustmate_invitation` |
+| `autoload/Domain/Order/OrderAdminService.php` | `queueApiloSync()` → enqueue do DB; usunięcie metod plikowych; `syncApiloPayment()`/`syncApiloStatus()` → public |
+| `tests/Unit/Domain/Order/OrderAdminServiceTest.php` | Refaktor testów kolejki: mock `CronJobRepository` zamiast pliku JSON |
+| `docs/DATABASE_STRUCTURE.md` | Dodanie tabel `pp_cron_jobs`, `pp_cron_schedules` |
+| `docs/CHANGELOG.md` | Wpis o nowym systemie |
+
+## Schemat DB (`migrations/0.315.sql`)
+
+### `pp_cron_jobs`
+```sql
+CREATE TABLE pp_cron_jobs (
+    id INT UNSIGNED AUTO_INCREMENT PRIMARY KEY,
+    job_type VARCHAR(50) NOT NULL,
+    status ENUM('pending','processing','completed','failed','cancelled') NOT NULL DEFAULT 'pending',
+    priority TINYINT UNSIGNED NOT NULL DEFAULT 100,  -- niższy = ważniejszy
+    payload TEXT NULL,          -- JSON z danymi zadania
+    result TEXT NULL,           -- JSON z wynikiem
+    attempts SMALLINT UNSIGNED NOT NULL DEFAULT 0,
+    max_attempts SMALLINT UNSIGNED NOT NULL DEFAULT 10,
+    last_error VARCHAR(500) NULL,
+    scheduled_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    started_at DATETIME NULL,
+    completed_at DATETIME NULL,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+    INDEX idx_status_priority_scheduled (status, priority, scheduled_at),
+    INDEX idx_job_type (job_type),
+    INDEX idx_status (status)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8;
+```
+
+### `pp_cron_schedules`
+```sql
+CREATE TABLE pp_cron_schedules (
+    id INT UNSIGNED AUTO_INCREMENT PRIMARY KEY,
+    job_type VARCHAR(50) NOT NULL UNIQUE,
+    interval_seconds INT UNSIGNED NOT NULL,
+    priority TINYINT UNSIGNED NOT NULL DEFAULT 100,
+    max_attempts SMALLINT UNSIGNED NOT NULL DEFAULT 3,
+    payload TEXT NULL,
+    enabled TINYINT(1) NOT NULL DEFAULT 1,
+    last_run_at DATETIME NULL,
+    next_run_at DATETIME NULL,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    INDEX idx_enabled_next_run (enabled, next_run_at)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8;
+```
+
+## Typy zadań i priorytety
+
+| Typ | Priorytet | Harmonogram |
+|-----|-----------|-------------|
+| `apilo_token_keepalive` | 10 (krytyczny) | co 4 min |
+| `apilo_send_order` | 50 (wysoki) | co 1 min |
+| `apilo_sync_payment` | 50 (wysoki) | event-driven (enqueue przy zmianie) |
+| `apilo_sync_status` | 50 (wysoki) | event-driven |
+| `apilo_product_sync` | 100 (normalny) | co 10 min |
+| `apilo_pricelist_sync` | 100 (normalny) | co 1h |
+| `apilo_status_poll` | 100 (normalny) | co 10 min |
+| `price_history` | 100 (normalny) | co 24h |
+| `order_analysis` | 100 (normalny) | co 10 min |
+| `trustmate_invitation` | 200 (niski) | co 10 min |
+| `google_xml_feed` | 200 (niski) | co 1h |
+
+## Architektura klas
+
+### CronJobRepository — metody kluczowe
+- `enqueue($jobType, $payload, $priority, $maxAttempts, $scheduledAt)` — dodaj do kolejki
+- `fetchNext($limit)` — atomowe pobranie pending jobs (UPDATE WHERE status='pending')
+- `markCompleted($jobId, $result)` / `markFailed($jobId, $error, $backoffSeconds)`
+- `hasPendingJob($jobType, $payloadMatch)` — zapobiega duplikatom
+- `cleanup($olderThanDays)` — GC starych wpisów
+- `recoverStuck($olderThanMinutes)` — reset stuck "processing" jobs
+- `getDueSchedules()` / `touchSchedule($id)` — harmonogram
+
+### CronJobProcessor — orkiestracja
+- `registerHandler($jobType, callable)` — rejestracja handlera
+- `createScheduledJobs()` — tworzy jobs z harmonogramów których `next_run_at <= NOW`
+- `processQueue($limit)` — pobierz + wywołaj handler + markCompleted/markFailed
+- `run($limit)` — główna metoda: schedules + process
+
+### Exponential backoff
+```
+Próba 1: 60s, Próba 2: 120s, Próba 3: 240s, ... max 3600s (1h)
+```
+
+### Zależność "order not yet in Apilo"
+Handler `apilo_sync_payment`/`apilo_sync_status` sprawdza `apilo_order_id`. Jeśli brak → zwraca false → `markFailed()` z backoffem → zadanie wraca do kolejki. Max 50 prób.
+
+## Nowy cron.php (schemat)
+
+```php
+$cronRepo = new \Domain\CronJob\CronJobRepository($mdb);
+$processor = new \Domain\CronJob\CronJobProcessor($mdb, $cronRepo);
+
+// Rejestracja handlerów (każdy to callable)
+$processor->registerHandler('apilo_token_keepalive', function($payload) use ($integrationsRepo) { ... });
+$processor->registerHandler('apilo_send_order', function($payload) use ($orderService, ...) { ... });
+// ... inne handlery
+
+$result = $processor->run(20);
+```
+
+## Zmiany w OrderAdminService
+
+1. `queueApiloSync()` → `CronJobRepository::enqueue()` zamiast zapisu do pliku JSON
+2. Usunięcie: `loadApiloSyncQueue()`, `saveApiloSyncQueue()`, `apiloSyncQueuePath()`, stała `APILO_SYNC_QUEUE_FILE`
+3. `syncApiloPayment()`, `syncApiloStatus()` → zmiana z `private` na `public`
+4. Jednorazowa migracja: odczyt JSON → insert do DB → usunięcie pliku
+
+## Kolejność implementacji
+
+1. Migracja SQL
+2. `CronJobType.php`
+3. `CronJobRepository.php` + testy
+4. `CronJobProcessor.php` + testy
+5. Modyfikacja `OrderAdminService` (queue → DB, public methods)
+6. Jednorazowa migracja pliku JSON → DB
+7. Nowy `cron.php` z handlerami (ekstrakcja logiki z bloków proceduralnych)
+8. Aktualizacja testów OrderAdminService
+9. Dokumentacja (DATABASE_STRUCTURE.md, CHANGELOG.md)
+
+## Weryfikacja
+
+1. Uruchomienie pełnego zestawu testów: `./test.ps1`
+2. Sprawdzenie czy nowe testy CronJob* przechodzą
+3. Sprawdzenie czy istniejące testy OrderAdminService przechodzą po refaktorze
+4. Weryfikacja migracji SQL na pustej bazie

docs/TESTING.md

@@ -23,10 +23,10 @@ composer test              # standard
 ## Aktualny stan
 
 ```text
-OK (750 tests, 2114 assertions)
+OK (765 tests, 2153 assertions)
 ```
 
-Zweryfikowano: 2026-02-22 (ver. 0.304)
+Zweryfikowano: 2026-02-24 (ver. 0.318)
 
 ## Konfiguracja
 

docs/TODO.md

@@ -0,0 +1 @@
+1. Dodać przycisk kopiowania przy atrybutach produktu w zamówieniu

migrations/0.316.sql

@@ -0,0 +1 @@
+ALTER TABLE `pp_shop_products_custom_fields` ADD COLUMN `type` VARCHAR(30) NOT NULL DEFAULT '' AFTER `name`;

templates/shop-order/order-details.php

@@ -179,7 +179,7 @@
                 'id': <?= (int)$product['product_id'];?>,
                 'name': '<?= $product['name'];?>',
                 'quantity': <?= $product['quantity'];?>,
-                'price': <?= $product['price_brutto_promo'];?>
+                'price': <?= ((float)$product['price_brutto_promo'] > 0 && (float)$product['price_brutto_promo'] < (float)$product['price_brutto']) ? (float)$product['price_brutto_promo'] : (float)$product['price_brutto'];?>
               }<? if ( $product != end( $this -> order['products'] ) ) echo ',';?>
             <? endforeach;?>
             ]

tests/Unit/Domain/Integrations/IntegrationsRepositoryTest.php

@@ -298,4 +298,69 @@ class IntegrationsRepositoryTest extends TestCase
         $this->assertSame('1', (string)$result[0]['id']);
         $this->assertSame('Przelew', (string)$result[0]['name']);
     }
+
+    // ── Logs ────────────────────────────────────────────────────
+
+    public function testGetLogsReturnsItemsAndTotal(): void
+    {
+        $this->mockDb->expects($this->once())
+            ->method('count')
+            ->with('pp_log', $this->anything())
+            ->willReturn(2);
+
+        $this->mockDb->expects($this->once())
+            ->method('select')
+            ->with('pp_log', '*', $this->anything())
+            ->willReturn([
+                ['id' => 1, 'action' => 'send_order', 'message' => 'OK', 'date' => '2026-01-01 12:00:00'],
+                ['id' => 2, 'action' => 'status_sync', 'message' => 'Synced', 'date' => '2026-01-02 12:00:00'],
+            ]);
+
+        $result = $this->repository->getLogs([], 'id', 'DESC', 1, 15);
+
+        $this->assertIsArray($result);
+        $this->assertArrayHasKey('items', $result);
+        $this->assertArrayHasKey('total', $result);
+        $this->assertCount(2, $result['items']);
+        $this->assertSame(2, $result['total']);
+    }
+
+    public function testGetLogsReturnsEmptyWhenNoResults(): void
+    {
+        $this->mockDb->method('count')->willReturn(0);
+        $this->mockDb->method('select')->willReturn([]);
+
+        $result = $this->repository->getLogs([], 'id', 'DESC', 1, 15);
+
+        $this->assertSame(0, $result['total']);
+        $this->assertEmpty($result['items']);
+    }
+
+    public function testGetLogsHandlesNullFromSelect(): void
+    {
+        $this->mockDb->method('count')->willReturn(0);
+        $this->mockDb->method('select')->willReturn(null);
+
+        $result = $this->repository->getLogs([], 'id', 'DESC', 1, 15);
+
+        $this->assertSame([], $result['items']);
+    }
+
+    public function testDeleteLogCallsDelete(): void
+    {
+        $this->mockDb->expects($this->once())
+            ->method('delete')
+            ->with('pp_log', ['id' => 42]);
+
+        $this->assertTrue($this->repository->deleteLog(42));
+    }
+
+    public function testClearLogsDeletesAll(): void
+    {
+        $this->mockDb->expects($this->once())
+            ->method('delete')
+            ->with('pp_log', []);
+
+        $this->assertTrue($this->repository->clearLogs());
+    }
 }

tests/Unit/Domain/Order/OrderAdminServiceTest.php

@@ -227,4 +227,110 @@ class OrderAdminServiceTest extends TestCase
         $service = $this->createService(null, null, $settingsRepo);
         $this->assertSame(150.0, $service->getFreeDeliveryThreshold());
     }
+
+    // =========================================================================
+    // processApiloSyncQueue — awaiting apilo_order_id
+    // =========================================================================
+
+    private function getQueuePath(): string
+    {
+        // Musi odpowiadać ścieżce w OrderAdminService::apiloSyncQueuePath()
+        // dirname(autoload/Domain/Order/, 2) = autoload/
+        return dirname(__DIR__, 4) . '/autoload/temp/apilo-sync-queue.json';
+    }
+
+    private function writeQueue(array $queue): void
+    {
+        $path = $this->getQueuePath();
+        $dir = dirname($path);
+        if (!is_dir($dir)) {
+            mkdir($dir, 0777, true);
+        }
+        file_put_contents($path, json_encode($queue, JSON_PRETTY_PRINT));
+    }
+
+    private function readQueue(): array
+    {
+        $path = $this->getQueuePath();
+        if (!file_exists($path)) return [];
+        $content = file_get_contents($path);
+        return $content ? json_decode($content, true) : [];
+    }
+
+    protected function tearDown(): void
+    {
+        $path = $this->getQueuePath();
+        if (file_exists($path)) {
+            unlink($path);
+        }
+        parent::tearDown();
+    }
+
+    public function testProcessApiloSyncQueueKeepsTaskWhenApiloOrderIdIsNull(): void
+    {
+        // Zamówienie bez apilo_order_id — task powinien zostać w kolejce
+        $this->writeQueue([
+            '42' => [
+                'order_id' => 42,
+                'payment' => 1,
+                'status' => null,
+                'attempts' => 0,
+                'last_error' => 'awaiting_apilo_order',
+                'updated_at' => '2026-01-01 00:00:00',
+            ],
+        ]);
+
+        $orderRepo = $this->createMock(OrderRepository::class);
+        $orderRepo->method('findRawById')
+            ->with(42)
+            ->willReturn([
+                'id' => 42,
+                'apilo_order_id' => null,
+                'paid' => 1,
+                'summary' => '100.00',
+            ]);
+
+        $service = new OrderAdminService($orderRepo);
+        $processed = $service->processApiloSyncQueue(10);
+
+        $this->assertSame(1, $processed);
+
+        $queue = $this->readQueue();
+        $this->assertArrayHasKey('42', $queue);
+        $this->assertSame('awaiting_apilo_order', $queue['42']['last_error']);
+        $this->assertSame(1, $queue['42']['attempts']);
+    }
+
+    public function testProcessApiloSyncQueueRemovesTaskAfterMaxAttempts(): void
+    {
+        // Task z 49 próbami — limit to 50, więc powinien zostać usunięty
+        $this->writeQueue([
+            '42' => [
+                'order_id' => 42,
+                'payment' => 1,
+                'status' => null,
+                'attempts' => 49,
+                'last_error' => 'awaiting_apilo_order',
+                'updated_at' => '2026-01-01 00:00:00',
+            ],
+        ]);
+
+        $orderRepo = $this->createMock(OrderRepository::class);
+        $orderRepo->method('findRawById')
+            ->with(42)
+            ->willReturn([
+                'id' => 42,
+                'apilo_order_id' => null,
+                'paid' => 1,
+                'summary' => '100.00',
+            ]);
+
+        $service = new OrderAdminService($orderRepo);
+        $processed = $service->processApiloSyncQueue(10);
+
+        $this->assertSame(1, $processed);
+
+        $queue = $this->readQueue();
+        $this->assertArrayNotHasKey('42', $queue);
+    }
 }

tests/Unit/admin/Controllers/IntegrationsControllerTest.php

@@ -35,6 +35,33 @@ class IntegrationsControllerTest extends TestCase
         );
     }
 
+    public function testHasLogsMethods(): void
+    {
+        $methods = [
+            'logs',
+            'logs_clear',
+        ];
+
+        foreach ($methods as $method) {
+            $this->assertTrue(
+                method_exists($this->controller, $method),
+                "Method $method does not exist"
+            );
+        }
+    }
+
+    public function testLogsReturnsString(): void
+    {
+        $reflection = new \ReflectionClass($this->controller);
+        $this->assertEquals('string', (string) $reflection->getMethod('logs')->getReturnType());
+    }
+
+    public function testLogsClearReturnsVoid(): void
+    {
+        $reflection = new \ReflectionClass($this->controller);
+        $this->assertEquals('void', (string) $reflection->getMethod('logs_clear')->getReturnType());
+    }
+
     public function testHasAllApiloSettingsMethods(): void
     {
         $methods = [

tests/Unit/api/Controllers/DictionariesApiControllerTest.php

@@ -4,6 +4,7 @@ namespace Tests\Unit\api\Controllers;
 use PHPUnit\Framework\TestCase;
 use api\Controllers\DictionariesApiController;
 use Domain\Attribute\AttributeRepository;
+use Domain\Producer\ProducerRepository;
 use Domain\ShopStatus\ShopStatusRepository;
 use Domain\Transport\TransportRepository;
 use Domain\PaymentMethod\PaymentMethodRepository;
@@ -14,6 +15,7 @@ class DictionariesApiControllerTest extends TestCase
     private $mockTransportRepo;
     private $mockPaymentRepo;
     private $mockAttrRepo;
+    private $mockProducerRepo;
     private $controller;
 
     protected function setUp(): void
@@ -22,12 +24,14 @@ class DictionariesApiControllerTest extends TestCase
         $this->mockTransportRepo = $this->createMock(TransportRepository::class);
         $this->mockPaymentRepo = $this->createMock(PaymentMethodRepository::class);
         $this->mockAttrRepo = $this->createMock(AttributeRepository::class);
+        $this->mockProducerRepo = $this->createMock(ProducerRepository::class);
 
         $this->controller = new DictionariesApiController(
             $this->mockStatusRepo,
             $this->mockTransportRepo,
             $this->mockPaymentRepo,
-            $this->mockAttrRepo
+            $this->mockAttrRepo,
+            $this->mockProducerRepo
         );
 
         $_SERVER['REQUEST_METHOD'] = 'GET';
@@ -186,4 +190,52 @@ class DictionariesApiControllerTest extends TestCase
 
         $this->assertSame(405, http_response_code());
     }
+
+    public function testEnsureAttributeRejectsGetMethod(): void
+    {
+        $_SERVER['REQUEST_METHOD'] = 'GET';
+
+        ob_start();
+        $this->controller->ensure_attribute();
+        ob_get_clean();
+
+        $this->assertSame(405, http_response_code());
+    }
+
+    public function testEnsureAttributeReturns400WhenNoBody(): void
+    {
+        $_SERVER['REQUEST_METHOD'] = 'POST';
+
+        ob_start();
+        $this->controller->ensure_attribute();
+        $output = ob_get_clean();
+
+        $this->assertSame(400, http_response_code());
+        $json = json_decode($output, true);
+        $this->assertSame('BAD_REQUEST', $json['code']);
+    }
+
+    public function testEnsureAttributeValueRejectsGetMethod(): void
+    {
+        $_SERVER['REQUEST_METHOD'] = 'GET';
+
+        ob_start();
+        $this->controller->ensure_attribute_value();
+        ob_get_clean();
+
+        $this->assertSame(405, http_response_code());
+    }
+
+    public function testEnsureAttributeValueReturns400WhenNoBody(): void
+    {
+        $_SERVER['REQUEST_METHOD'] = 'POST';
+
+        ob_start();
+        $this->controller->ensure_attribute_value();
+        $output = ob_get_clean();
+
+        $this->assertSame(400, http_response_code());
+        $json = json_decode($output, true);
+        $this->assertSame('BAD_REQUEST', $json['code']);
+    }
 }

tests/Unit/api/Controllers/ProductsApiControllerTest.php

@@ -351,6 +351,19 @@ class ProductsApiControllerTest extends TestCase
         $this->assertSame('5901234123457', $result['ean']);
     }
 
+    public function testMapApiToFormDataPreservesZeroBasePriceForSaveProduct(): void
+    {
+        $method = new \ReflectionMethod(ProductsApiController::class, 'mapApiToFormData');
+        $method->setAccessible(true);
+
+        $result = $method->invoke($this->controller, [
+            'price_brutto' => 0.0,
+            'languages' => ['pl' => ['name' => 'Zero']],
+        ]);
+
+        $this->assertSame('0', $result['price_brutto']);
+    }
+
     public function testMapApiToFormDataMapsCategories(): void
     {
         $method = new \ReflectionMethod(ProductsApiController::class, 'mapApiToFormData');

updates/0.30/ver_0.309_manifest.json

@@ -0,0 +1,35 @@
+{
+    "changelog":  "NEW - ApiloLogger (logowanie operacji Apilo do pp_log), cache-busting CSS/JS w admin panelu, poprawki UI listy produktow, clipboard API",
+    "version":  "0.309",
+    "files":  {
+                  "added":  [
+                                "autoload/Domain/Integrations/ApiloLogger.php"
+                            ],
+                  "deleted":  [
+
+                              ],
+                  "modified":  [
+                                   "admin/index.php",
+                                   "admin/layout/style-css/style.css",
+                                   "admin/layout/style-css/style.css.map",
+                                   "admin/layout/style-scss/style.scss",
+                                   "admin/templates/site/main-layout.php",
+                                   "autoload/Domain/Order/OrderAdminService.php",
+                                   "autoload/admin/Controllers/ShopProductController.php",
+                                   "cron.php",
+                                   "libraries/functions.js"
+                               ]
+              },
+    "checksum_zip":  "sha256:87a3db1a6038da742d21d92b65c21156493af52543b3810694ea91e000acf920",
+    "sql":  [
+                "ALTER TABLE pp_log ADD COLUMN `action` VARCHAR(100) NULL DEFAULT NULL AFTER `id`;",
+                "ALTER TABLE pp_log ADD COLUMN `order_id` INT NULL DEFAULT NULL AFTER `action`;",
+                "ALTER TABLE pp_log ADD COLUMN `context` TEXT NULL DEFAULT NULL AFTER `message`;",
+                "ALTER TABLE pp_log ADD INDEX `idx_action` (`action`);",
+                "ALTER TABLE pp_log ADD INDEX `idx_order_id` (`order_id`);"
+            ],
+    "date":  "2026-02-23",
+    "directories_deleted":  [
+
+                            ]
+}

updates/0.30/ver_0.310_manifest.json

@@ -0,0 +1,25 @@
+{
+    "changelog":  "NEW - Zakladka Logi w sekcji Integracje (podglad pp_log z paginacja, sortowaniem, filtrami)",
+    "version":  "0.310",
+    "files":  {
+                  "added":  [
+                                "admin/templates/integrations/logs.php"
+                            ],
+                  "deleted":  [
+
+                              ],
+                  "modified":  [
+                                   "admin/templates/site/main-layout.php",
+                                   "autoload/Domain/Integrations/IntegrationsRepository.php",
+                                   "autoload/admin/Controllers/IntegrationsController.php"
+                               ]
+              },
+    "checksum_zip":  "sha256:e3b14e239230548aba203a83f01c91b00651e5114e92e162f6da7389c6a92975",
+    "sql":  [
+
+            ],
+    "date":  "2026-02-23",
+    "directories_deleted":  [
+
+                            ]
+}

updates/0.30/ver_0.311_manifest.json

@@ -0,0 +1,27 @@
+{
+    "changelog":  "FIX - race condition callback płatności Apilo, persistence filtrów tabel admin, poprawki cen zamówień",
+    "version":  "0.311",
+    "files":  {
+                  "added":  [
+
+                            ],
+                  "deleted":  [
+
+                              ],
+                  "modified":  [
+                                   "admin/templates/components/table-list.php",
+                                   "admin/templates/shop-order/order-details.php",
+                                   "autoload/Domain/Order/OrderAdminService.php",
+                                   "cron.php",
+                                   "templates/shop-order/order-details.php"
+                               ]
+              },
+    "checksum_zip":  "sha256:542f599e844d48bba1378fbe91c06ef00d5487aca56af118ad9c9ea27343ebdb",
+    "sql":  [
+
+            ],
+    "date":  "2026-02-23",
+    "directories_deleted":  [
+
+                            ]
+}

updates/0.30/ver_0.312_manifest.json

@@ -0,0 +1,23 @@
+{
+    "changelog":  "FIX - krytyczne bugi integracji Apilo: curl_getinfo po curl_close, nieskończona pętla wysyłki, ceny 0.00 PLN, walidacja cen",
+    "version":  "0.312",
+    "files":  {
+                  "added":  [
+
+                            ],
+                  "deleted":  [
+
+                              ],
+                  "modified":  [
+                                   "cron.php"
+                               ]
+              },
+    "checksum_zip":  "sha256:07f9efd02a6a83327ab8dd9403e0c072a5f38b680d6e3f6c67a96d2af8b8fc85",
+    "sql":  [
+
+            ],
+    "date":  "2026-02-23",
+    "directories_deleted":  [
+
+                            ]
+}

updates/0.30/ver_0.313_manifest.json

@@ -0,0 +1,24 @@
+{
+    "changelog":  "FIX - sync płatności Apilo (int cast na apilo_order_id PPxxxxxx dawał 0) + logowanie decyzji sync do pp_log",
+    "version":  "0.313",
+    "files":  {
+                  "added":  [
+
+                            ],
+                  "deleted":  [
+
+                              ],
+                  "modified":  [
+                                   "admin/templates/shop-order/order-details.php",
+                                   "autoload/Domain/Order/OrderAdminService.php"
+                               ]
+              },
+    "checksum_zip":  "sha256:f344da1f3270abfc63653f8912ec1abbc006154db784cfee5a565fc0daaa75f8",
+    "sql":  [
+
+            ],
+    "date":  "2026-02-23",
+    "directories_deleted":  [
+
+                            ]
+}

updates/0.30/ver_0.314_manifest.json

@@ -0,0 +1,25 @@
+{
+    "changelog":  "FIX - naprawa globalnej wyszukiwarki admin (Content-Type, Cache-Control, POST, try/catch), NEW - title strony z numerem zamówienia",
+    "version":  "0.314",
+    "files":  {
+                  "added":  [
+
+                            ],
+                  "deleted":  [
+
+                              ],
+                  "modified":  [
+                                   "admin/templates/shop-order/order-details.php",
+                                   "admin/templates/site/main-layout.php",
+                                   "autoload/admin/Controllers/SettingsController.php"
+                               ]
+              },
+    "checksum_zip":  "sha256:5ef21d158850db4036e3ee3ed4e9d2938d0451cd9b8602d26fd53163085a391f",
+    "sql":  [
+
+            ],
+    "date":  "2026-02-23",
+    "directories_deleted":  [
+
+                            ]
+}

updates/0.30/ver_0.315_manifest.json

@@ -0,0 +1,23 @@
+{
+    "changelog":  "FIX - PDOException w listowaniu atrybutow admin (SQLSTATE HY093)",
+    "version":  "0.315",
+    "files":  {
+                  "added":  [
+
+                            ],
+                  "deleted":  [
+
+                              ],
+                  "modified":  [
+                                   "autoload/Domain/Attribute/AttributeRepository.php"
+                               ]
+              },
+    "checksum_zip":  "sha256:cfe6eb7dfad896c4ea885c2f9a52c6a389d4e38379a0bf64f5d429910d87e55f",
+    "sql":  [
+
+            ],
+    "date":  "2026-02-23",
+    "directories_deleted":  [
+
+                            ]
+}

updates/0.30/ver_0.316_manifest.json

@@ -0,0 +1,23 @@
+{
+    "changelog":  "FIX - migracja brakujacej kolumny type w pp_shop_products_custom_fields",
+    "version":  "0.316",
+    "files":  {
+                  "added":  [
+
+                            ],
+                  "deleted":  [
+
+                              ],
+                  "modified":  [
+
+                               ]
+              },
+    "checksum_zip":  "sha256:654a3683c0add19d0cb2f87db6f6a45cd4ce08799dd3692c6adacc07666f13b1",
+    "sql":  [
+                "ALTER TABLE `pp_shop_products_custom_fields` ADD COLUMN `type` VARCHAR(30) NOT NULL DEFAULT \u0027\u0027 AFTER `name`;"
+            ],
+    "date":  "2026-02-23",
+    "directories_deleted":  [
+
+                            ]
+}

updates/0.30/ver_0.317_manifest.json

@@ -0,0 +1,26 @@
+{
+    "changelog":  "FIX - klucz API: fix zapisu (brakowalo w whiteliście), przycisk Generuj losowy klucz, ulepszony routing API",
+    "version":  "0.317",
+    "files":  {
+                  "added":  [
+
+                            ],
+                  "deleted":  [
+
+                              ],
+                  "modified":  [
+                                   "api.php",
+                                   "autoload/Domain/Settings/SettingsRepository.php",
+                                   "autoload/admin/Controllers/SettingsController.php",
+                                   "autoload/api/ApiRouter.php"
+                               ]
+              },
+    "checksum_zip":  "sha256:130e5f4fd15b635bb277dc639d528e017de866fbaada5db2d08d9426251824b3",
+    "sql":  [
+
+            ],
+    "date":  "2026-02-23",
+    "directories_deleted":  [
+
+                            ]
+}

updates/0.30/ver_0.318_manifest.json

@@ -0,0 +1,30 @@
+{
+    "changelog":  "NEW - shopPRO export produktów + API endpoints (ensure_attribute, ensure_attribute_value, upload_image)",
+    "version":  "0.318",
+    "files":  {
+                  "added":  [
+
+                            ],
+                  "deleted":  [
+
+                              ],
+                  "modified":  [
+                                   "admin/templates/integrations/shoppro-settings.php",
+                                   "autoload/Domain/Attribute/AttributeRepository.php",
+                                   "autoload/Domain/Integrations/IntegrationsRepository.php",
+                                   "autoload/Domain/Product/ProductRepository.php",
+                                   "autoload/admin/Controllers/IntegrationsController.php",
+                                   "autoload/admin/Controllers/ShopProductController.php",
+                                   "autoload/api/Controllers/DictionariesApiController.php",
+                                   "autoload/api/Controllers/ProductsApiController.php"
+                               ]
+              },
+    "checksum_zip":  "sha256:6a7eba1b390db94ccda210a5f2cbcd33f17f43d9f34031c4d0793d224df5d541",
+    "sql":  [
+
+            ],
+    "date":  "2026-02-24",
+    "directories_deleted":  [
+
+                            ]
+}

updates/0.30/ver_0.319_manifest.json

@@ -0,0 +1,26 @@
+{
+    "changelog":  "FIX - usunięcie shopPRO eksportu produktów; API produktu: dodano custom_fields i security_information",
+    "version":  "0.319",
+    "files":  {
+                  "added":  [
+
+                            ],
+                  "deleted":  [
+
+                              ],
+                  "modified":  [
+                                   "autoload/Domain/Integrations/IntegrationsRepository.php",
+                                   "autoload/Domain/Product/ProductRepository.php",
+                                   "autoload/admin/Controllers/IntegrationsController.php",
+                                   "autoload/admin/Controllers/ShopProductController.php"
+                               ]
+              },
+    "checksum_zip":  "sha256:99e07eb85aeca1c96607e95c90408bfbc166d97c0b999cc9eb033c6a4f208b97",
+    "sql":  [
+
+            ],
+    "date":  "2026-02-24",
+    "directories_deleted":  [
+
+                            ]
+}

updates/0.30/ver_0.320_manifest.json

@@ -0,0 +1,26 @@
+{
+    "changelog":  "NEW - API: endpoint ensure_producer (znajdź lub utwórz producenta); GET product zwraca producer_name",
+    "version":  "0.320",
+    "files":  {
+                  "added":  [
+
+                            ],
+                  "deleted":  [
+
+                              ],
+                  "modified":  [
+                                   "autoload/Domain/Producer/ProducerRepository.php",
+                                   "autoload/Domain/Product/ProductRepository.php",
+                                   "autoload/api/ApiRouter.php",
+                                   "autoload/api/Controllers/DictionariesApiController.php"
+                               ]
+              },
+    "checksum_zip":  "sha256:eb38b6f260768c25d331de60098eba647a897972c211b37b39314c8a3f954bf3",
+    "sql":  [
+
+            ],
+    "date":  "2026-02-24",
+    "directories_deleted":  [
+
+                            ]
+}

updates/0.30/ver_0.321_manifest.json

@@ -0,0 +1,23 @@
+{
+    "changelog":  "NEW - API: obsługa custom_fields w create/update produktu",
+    "version":  "0.321",
+    "files":  {
+                  "added":  [
+
+                            ],
+                  "deleted":  [
+
+                              ],
+                  "modified":  [
+                                   "autoload/api/Controllers/ProductsApiController.php"
+                               ]
+              },
+    "checksum_zip":  "sha256:a04ac9975618bc3b21d80a8e449f98e5bc825ce49a37142e1e621a2ef34a19f1",
+    "sql":  [
+
+            ],
+    "date":  "2026-02-24",
+    "directories_deleted":  [
+
+                            ]
+}

updates/versions.php

@@ -1,5 +1,5 @@
 <?
-$current_ver = 309;
+$current_ver = 322;
 
 for ($i = 1; $i <= $current_ver; $i++)
 {