Changeset 3652650

Timestamp:

08/18/2026 11:15:54 AM (2 months ago)

Author:

llmaffiliate01

Message:

Release version 1.0.11

Location:

llmaffiliate-ai-traffic-monetizer/trunk

Files:

• index.php (modified) (1 diff)
• llm-interceptor.php (modified) (115 diffs)
• readme.txt (modified) (10 diffs)

llmaffiliate-ai-traffic-monetizer/trunk/index.php

@@ -1 +1 @@
 <?php
-// Silence is golden.
+if ( ! defined( 'ABSPATH' ) ) {
+        exit;
+}

llmaffiliate-ai-traffic-monetizer/trunk/llm-interceptor.php

@@ -3 +3 @@
  * Plugin Name: LLMAffiliate AI Traffic Monetizer
  * Description: Detects LLM user agents, enforces Google parity, and serves enhanced content from a remote service.
- * Version: 1.0.10
+ * Version: 1.0.11
  * Requires at least: 6.0
  * Requires PHP: 7.4
@@ -16 +16 @@
 }
 
-define( 'LLMAFFTM_VERSION', '1.0.10' );
-
-/**
- * Copy options from legacy llm_interceptor_* keys to llmafftm_* (one-time).
- */
+define( 'LLMAFFTM_VERSION', '1.0.11' );
+
+
+function llmafftm_get_client_ip() {
+    $ip_keys = array(
+        'HTTP_CF_CONNECTING_IP',
+        'HTTP_X_REAL_IP',
+        'HTTP_X_FORWARDED_FOR',
+        'HTTP_CLIENT_IP',
+        'REMOTE_ADDR',
+    );
+
+    foreach ( $ip_keys as $key ) {
+        if ( ! empty( $_SERVER[ $key ] ) ) {
+            $ip = sanitize_text_field( wp_unslash( $_SERVER[ $key ] ) );
+            if ( strpos( $ip, ',' ) !== false ) {
+                $ips = explode( ',', $ip );
+                $ip  = trim( $ips[0] );
+            }
+            if ( filter_var( $ip, FILTER_VALIDATE_IP ) ) {
+                return $ip;
+            }
+        }
+    }
+
+    return sanitize_text_field( wp_unslash( $_SERVER['REMOTE_ADDR'] ?? '0.0.0.0' ) );
+}
+
+function llmafftm_get_current_url() {
+    $scheme = is_ssl() ? 'https' : 'http';
+    $host   = sanitize_text_field( wp_unslash( $_SERVER['HTTP_HOST'] ?? '' ) );
+    $uri    = sanitize_text_field( wp_unslash( $_SERVER['REQUEST_URI'] ?? '/' ) );
+    return $scheme . '://' . $host . $uri;
+}
+
+
 function llmafftm_migrate_legacy_options() {
     if ( get_option( 'llmafftm_legacy_options_migrated', '' ) === '1' ) {
@@ -47 +78 @@
 }
 
-// Check minimum PHP version
-if (version_compare(PHP_VERSION, '7.4', '<')) {
-    add_action('admin_notices', function() {
-        echo '<div class="notice notice-error"><p><strong>LLMAffiliate AI Traffic Monetizer:</strong> Requires PHP 7.4 or higher. Current version: ' . esc_html( PHP_VERSION ) . '</p></div>';
-    });
-    return;
-}
-
-// Check if WordPress is loaded
-if (! function_exists('add_action')) {
-    return;
-}
-
-/**
- * Advanced LLM Detection Class
- * 
- * Calculates an LLM score based on multiple signals:
- * - HTTP Headers (User-Agent, Accept-Language, sec-ch-ua, etc.)
- * - Cookie presence (especially human_token from JavaScript verification)
- * - Request behavior patterns
- * - IP-based rate limiting
- */
 class LLMAFFTM_Detector {
-    
-    private $threshold = 0.6; // Default threshold (0.0 to 1.0)
-    private $rate_limit_window = 60; // seconds
-    private $rate_limit_max_requests = 30; // max requests per window
-    
-    /**
-     * Calculate LLM score for current request
-     * 
-     * @return array ['score' => float, 'signals' => array, 'is_llm_like' => bool]
-     */
+
+    private $threshold = 0.6;
+    private $rate_limit_window = 60;
+    private $rate_limit_max_requests = 30;
+
     public function calculate_llm_score() {
         $signals = array();
         $total_weight = 0;
         $weighted_score = 0;
-        
-        // Signal 1: User-Agent analysis (weight: 0.30)
+
         $ua_score = $this->analyze_user_agent();
         $signals['user_agent'] = $ua_score;
@@ -91 +94 @@
         $weighted_score += $ua_score * $weight;
         $total_weight += $weight;
-        
-        // Signal 2: Browser headers presence (weight: 0.25)
+
         $headers_score = $this->analyze_browser_headers();
         $signals['browser_headers'] = $headers_score;
@@ -98 +100 @@
         $weighted_score += $headers_score * $weight;
         $total_weight += $weight;
-        
-        // Signal 3: Cookie and session analysis (weight: 0.20)
+
         $cookie_score = $this->analyze_cookies();
         $signals['cookies'] = $cookie_score;
@@ -105 +106 @@
         $weighted_score += $cookie_score * $weight;
         $total_weight += $weight;
-        
-        // Signal 4: Request behavior patterns (weight: 0.15)
+
         $behavior_score = $this->analyze_behavior();
         $signals['behavior'] = $behavior_score;
@@ -112 +112 @@
         $weighted_score += $behavior_score * $weight;
         $total_weight += $weight;
-        
-        // Signal 5: Referer and navigation patterns (weight: 0.10)
+
         $referer_score = $this->analyze_referer();
         $signals['referer'] = $referer_score;
@@ -119 +118 @@
         $weighted_score += $referer_score * $weight;
         $total_weight += $weight;
-        
-        // Normalize score
+
         $final_score = $total_weight > 0 ? ($weighted_score / $total_weight) : 0.5;
-        $final_score = max(0.0, min(1.0, $final_score)); // Clamp between 0 and 1
+        $final_score = max(0.0, min(1.0, $final_score));
 
         $is_llm_like = $final_score >= $this->threshold;
         $reasons     = array();
 
-        // Soft escalation (refined from CF_worker.js `datacenter_cold_fetch`):
-        // a request originating from a known cloud / datacenter IP range
-        // that arrives with NO cookies AND NO referer is suspicious — but
-        // not enough on its own to justify a hard "force enhanced" override,
-        // because legitimate humans behind corporate VPNs, NAT exits, or
-        // cloud-hosted privacy proxies can also match this pattern.
-        //
-        // Instead we combine the network signal with the existing per-signal
-        // scores:
-        //   * If at least one of the other detectors is already strongly
-        //     bot-leaning (programmatic UA, missing browser headers, or no
-        //     cookies at all), we DO mark the request as LLM-like and raise
-        //     the effective score to >= 0.9. This catches DeepSeek-style
-        //     fetchers reliably (programmatic UA + datacenter cold fetch).
-        //   * Otherwise we only nudge the score up to 0.65 — slightly above
-        //     the default 0.6 threshold. The configured threshold and the
-        //     other signals still get the final say, which lets site owners
-        //     tune sensitivity by adjusting the threshold rather than fight
-        //     a hardcoded override.
         $network = $this->classify_network_origin();
         $signals['network_datacenter'] = $network['is_datacenter'] ? 1.0 : 0.0;
@@ -155 +134 @@
             $reasons[] = 'datacenter_cold_fetch';
 
-            // curl/wget from a cloud VM is normal dev traffic — do not apply the cold-fetch
-            // score bump used for opaque LLM fetchers (fixes false positives at threshold 0.5–0.6).
             $ua_cf           = sanitize_text_field( wp_unslash( $_SERVER['HTTP_USER_AGENT'] ?? '' ) );
             $is_cli_http_tool = (bool) preg_match( '/^\s*(?:curl|wget)\/\d/i', $ua_cf );
@@ -183 +160 @@
         );
     }
-    
-    /**
-     * Analyze User-Agent string
-     * Returns: 0.0 (human-like) to 1.0 (bot-like)
-     */
+
     private function analyze_user_agent() {
         $user_agent = sanitize_text_field( wp_unslash( $_SERVER['HTTP_USER_AGENT'] ?? '' ) );
-        
+
         if (empty($user_agent)) {
-            return 0.9; // No UA is very suspicious
-        }
-
-        // Command-line HTTP clients: not LLM-specific; keep UA signal moderate so scoring
-        // can stay below typical thresholds while explicit UA patterns still win.
+            return 0.9;
+        }
+
         if ( preg_match( '/^\s*(?:curl|wget)\/\d/i', $user_agent ) ) {
             return 0.42;
         }
 
-        // Known LLM/bot patterns (high score).
-        //
-        // Note on DeepSeek-style fetchers: DeepSeek and similar LLM agents
-        // frequently use generic browser-like or generic programmatic UAs
-        // (python, Go-http-client, httpx, aiohttp, etc.) without a
-        // fixed, stable signature. We therefore do NOT hardcode a "DeepSeek"
-        // user-agent. Instead, classification relies on the combination of:
-        //   - this UA pattern list (programmatic clients)
-        //   - HTTP header fingerprint (analyze_browser_headers)
-        //   - cookie state, behavior, referer (other analyze_* signals)
-        //   - and the datacenter-cold-fetch hard escalation in
-        //     calculate_llm_score().
         $bot_patterns = array(
             '/GPTBot/i', '/OAI-SearchBot/i', '/ChatGPT/i', '/OpenAI/i',
@@ -220 +179 @@
             '/Mistral/i', '/MistralBot/i',
             '/LLMBot/i', '/AIBot/i', '/ChatBot/i',
-            // Programmatic HTTP clients commonly used by LLM-side fetchers
-            // (DeepSeek, research crawlers, language-model evaluation tools).
+
             '/python(?:-requests|-urllib)?/i',
             '/httpx/i', '/aiohttp/i',
@@ -228 +186 @@
             '/\bruby\b/i', '/node-fetch/i', '/axios/i',
             '/scrapy/i', '/phantomjs/i', '/headlesschrome/i',
-            // Generic fallbacks.
+
             '/bot/i', '/crawler/i', '/spider/i',
         );
-        
+
         foreach ($bot_patterns as $pattern) {
             if (preg_match($pattern, $user_agent)) {
-                return 0.95; // Strong bot signal
-            }
-        }
-        
-        // Real browser patterns (low score)
+                return 0.95;
+            }
+        }
+
         $browser_patterns = array(
             '/Mozilla\/5\.0.*Chrome/i',
@@ -245 +202 @@
             '/Mozilla\/5\.0.*Edge/i'
         );
-        
+
         $has_browser_pattern = false;
         foreach ($browser_patterns as $pattern) {
@@ -253 +210 @@
             }
         }
-        
-        // Check for browser version numbers (indicates real browser)
+
         if ($has_browser_pattern && preg_match('/Version\/[\d.]+|Chrome\/[\d.]+|Firefox\/[\d.]+/', $user_agent)) {
-            return 0.1; // Very human-like
-        }
-        
-        // Generic or suspicious UA
+            return 0.1;
+        }
+
         if (strlen($user_agent) < 20) {
-            return 0.7; // Too short, suspicious
-        }
-        
-        return 0.3; // Neutral
-    }
-    
-    /**
-     * Analyze browser-specific headers
-     * Returns: 0.0 (human-like) to 1.0 (bot-like)
-     */
+            return 0.7;
+        }
+
+        return 0.3;
+    }
+
     private function analyze_browser_headers() {
         $score = 0.0;
         $signals = 0;
-        
-        // sec-ch-ua headers (modern browsers send these)
+
         $has_sec_ch_ua = ! empty( sanitize_text_field( wp_unslash( $_SERVER['HTTP_SEC_CH_UA'] ?? '' ) ) );
         $has_sec_ch_ua_mobile = ! empty( sanitize_text_field( wp_unslash( $_SERVER['HTTP_SEC_CH_UA_MOBILE'] ?? '' ) ) );
         $has_sec_ch_ua_platform = ! empty( sanitize_text_field( wp_unslash( $_SERVER['HTTP_SEC_CH_UA_PLATFORM'] ?? '' ) ) );
-        
+
         if ($has_sec_ch_ua && $has_sec_ch_ua_mobile && $has_sec_ch_ua_platform) {
-            $score += 0.1; // Strong human signal
+            $score += 0.1;
             $signals++;
         } elseif (!$has_sec_ch_ua && !$has_sec_ch_ua_mobile && !$has_sec_ch_ua_platform) {
-            $score += 0.6; // Missing modern browser headers
+            $score += 0.6;
             $signals++;
         }
-        
-        // Accept-Language header
+
         $accept_language = sanitize_text_field( wp_unslash( $_SERVER['HTTP_ACCEPT_LANGUAGE'] ?? '' ) );
         if (!empty($accept_language)) {
-            // Real browsers usually send language preferences
+
             if (preg_match('/^[a-z]{2}(-[A-Z]{2})?(,\s*[a-z]{2}(-[A-Z]{2})?)*(;q=\d\.\d+)?/i', $accept_language)) {
-                $score += 0.1; // Proper language format
+                $score += 0.1;
             } else {
-                $score += 0.4; // Suspicious format
+                $score += 0.4;
             }
             $signals++;
         } else {
-            $score += 0.7; // Missing Accept-Language
+            $score += 0.7;
             $signals++;
         }
-        
-        // Accept header
+
         $accept = sanitize_text_field( wp_unslash( $_SERVER['HTTP_ACCEPT'] ?? '' ) );
         if (!empty($accept) && preg_match('/text\/html|application\/xhtml\+xml/i', $accept)) {
-            $score += 0.1; // Proper Accept header
+            $score += 0.1;
             $signals++;
         } else {
-            $score += 0.5; // Missing or suspicious Accept
+            $score += 0.5;
             $signals++;
         }
-        
-        // DNT (Do Not Track) - real browsers may send this
+
         if ( ! empty( sanitize_text_field( wp_unslash( $_SERVER['HTTP_DNT'] ?? '' ) ) ) ) {
-            $score += 0.1; // Human signal
+            $score += 0.1;
             $signals++;
         }
-        
+
         return $signals > 0 ? ($score / $signals) : 0.5;
     }
-    
-    /**
-     * Analyze cookies and session
-     * Returns: 0.0 (human-like) to 1.0 (bot-like)
-     */
+
     private function analyze_cookies() {
         $cookies = $_COOKIE ?? array();
-        
-        // Check for human_token (set by JavaScript verification)
-        if (isset($cookies['llmafftm_human_token']) && !empty($cookies['llmafftm_human_token'])) {
-            // Verify token is valid (simple check - can be enhanced)
-            $token = sanitize_text_field($cookies['llmafftm_human_token']);
-            if (strlen($token) >= 16 && ctype_alnum($token)) {
-                return 0.0; // Strong human signal - has verified token
-            }
-        }
-        
-        // No cookies at all is suspicious
+
         if (empty($cookies)) {
-            return 0.8; // Very suspicious
-        }
-        
-        // WordPress session cookies (wp-settings, etc.)
+            return 0.8;
+        }
+
         $has_wp_cookies = false;
         foreach (array_keys($cookies) as $name) {
@@ -351 +283 @@
             }
         }
-        
+
         if ($has_wp_cookies) {
-            return 0.2; // Has WordPress cookies, likely human
-        }
-        
-        // Some cookies but not WordPress ones
-        return 0.5; // Neutral
-    }
-    
-    /**
-     * Analyze request behavior patterns
-     * Returns: 0.0 (human-like) to 1.0 (bot-like)
-     */
+            return 0.2;
+        }
+
+        return 0.5;
+    }
+
     private function analyze_behavior() {
-        $client_ip = $this->get_client_ip();
-        $current_url = $this->get_current_url();
-        
-        // Check rate limiting (basic implementation)
+        $client_ip = llmafftm_get_client_ip();
+        $current_url = llmafftm_get_current_url();
+
         $rate_score = $this->check_rate_limit($client_ip);
-        
-        // Check if accessing robots.txt (common bot behavior)
+
         $is_robots = (strpos($current_url, '/robots.txt') !== false);
         if ($is_robots) {
-            return 0.9; // Very bot-like
-        }
-        
-        // Check request timing (if we have previous request data)
-        // This would require storing request timestamps (not implemented here for simplicity)
-        
+            return 0.9;
+        }
+
         return $rate_score;
     }
-    
-    /**
-     * Check rate limiting for IP
-     */
+
     private function check_rate_limit($ip) {
         $transient_key = 'llmafftm_rate_' . md5($ip);
         $requests = get_transient($transient_key);
-        
+
         if ($requests === false) {
-            // First request in window
+
             set_transient($transient_key, 1, $this->rate_limit_window);
-            return 0.2; // Normal
-        }
-        
+            return 0.2;
+        }
+
         $request_count = (int) $requests;
         $request_count++;
-        
+
         if ($request_count > $this->rate_limit_max_requests) {
             set_transient($transient_key, $request_count, $this->rate_limit_window);
-            return 0.95; // Rate limit exceeded - very bot-like
-        }
-        
+            return 0.95;
+        }
+
         set_transient($transient_key, $request_count, $this->rate_limit_window);
-        
-        // Calculate score based on request frequency
-        $frequency = $request_count / $this->rate_limit_window; // requests per second
+
+        $frequency = $request_count / $this->rate_limit_window;
         if ($frequency > 0.5) {
-            return 0.8; // Too fast
+            return 0.8;
         } elseif ($frequency > 0.2) {
-            return 0.5; // Moderate
-        }
-        
-        return 0.2; // Normal
-    }
-    
-    /**
-     * Analyze Referer header
-     * Returns: 0.0 (human-like) to 1.0 (bot-like)
-     */
+            return 0.5;
+        }
+
+        return 0.2;
+    }
+
     private function analyze_referer() {
         $referer = sanitize_text_field( wp_unslash( $_SERVER['HTTP_REFERER'] ?? '' ) );
-        
-        // No referer on direct access is normal
+
         if (empty($referer)) {
-            return 0.3; // Neutral (could be direct access or bot)
-        }
-        
-        // Referer from same domain is normal (navigation)
+            return 0.3;
+        }
+
         $current_host = sanitize_text_field( wp_unslash( $_SERVER['HTTP_HOST'] ?? '' ) );
         if (!empty($current_host) && strpos($referer, $current_host) !== false) {
-            return 0.1; // Internal navigation - human-like
-        }
-        
-        // Referer from search engines is normal
+            return 0.1;
+        }
+
         $search_engines = array('google.com', 'bing.com', 'yahoo.com', 'duckduckgo.com');
         foreach ($search_engines as $engine) {
             if (strpos($referer, $engine) !== false) {
-                return 0.1; // From search - human-like
-            }
-        }
-        
-        // Suspicious referer patterns
+                return 0.1;
+            }
+        }
+
         if (preg_match('/bot|crawler|spider|scraper/i', $referer)) {
-            return 0.9; // Bot-like referer
-        }
-        
-        return 0.4; // Neutral
-    }
-    
-    /**
-     * Get client IP address
-     */
-    private function get_client_ip() {
-        $ip_keys = array(
-            'HTTP_CF_CONNECTING_IP', // Cloudflare
-            'HTTP_X_REAL_IP',
-            'HTTP_X_FORWARDED_FOR',
-            'HTTP_CLIENT_IP',
-            'REMOTE_ADDR'
-        );
-        
-        foreach ($ip_keys as $key) {
-            if (!empty($_SERVER[$key])) {
-                $ip = sanitize_text_field( wp_unslash( $_SERVER[$key] ) );
-                // Handle comma-separated IPs (X-Forwarded-For)
-                if (strpos($ip, ',') !== false) {
-                    $ips = explode(',', $ip);
-                    $ip = trim($ips[0]);
-                }
-                if (filter_var($ip, FILTER_VALIDATE_IP)) {
-                    return $ip;
-                }
-            }
-        }
-        
-        return sanitize_text_field( wp_unslash( $_SERVER['REMOTE_ADDR'] ?? '0.0.0.0' ) );
-    }
-    
-    /**
-     * Get current URL
-     */
-    private function get_current_url() {
-        $scheme = is_ssl() ? 'https' : 'http';
-        $host = sanitize_text_field( wp_unslash( $_SERVER['HTTP_HOST'] ?? '' ) );
-        $uri = sanitize_text_field( wp_unslash( $_SERVER['REQUEST_URI'] ?? '/' ) );
-        return $scheme . '://' . $host . $uri;
-    }
-
-    /**
-     * Default list of datacenter / cloud IP CIDR ranges used by LLM-side
-     * fetchers (DeepSeek, research crawlers, eval pipelines, proxies).
-     *
-     * This is intentionally a small, curated subset — not an exhaustive ASN
-     * dump — so the in-memory cost is negligible and the false-positive rate
-     * stays low. Real end users almost never browse product pages from these
-     * ranges; LLM fetchers very often do.
-     *
-     * The list is exposed through the 'llmafftm_datacenter_cidrs' filter so
-     * site owners can add or remove ranges without editing this file. Example:
-     *
-     *     add_filter( 'llmafftm_datacenter_cidrs', function( $cidrs ) {
-     *         $cidrs[] = '203.0.113.0/24';
-     *         return $cidrs;
-     *     } );
-     *
-     * @return string[] List of CIDR strings (IPv4 only — IPv6 ranges can be
-     *                  added through the filter if needed).
-     */
+            return 0.9;
+        }
+
+        return 0.4;
+    }
+
     private function get_datacenter_cidrs() {
         $defaults = array(
-            // Huawei Cloud (incl. HK region — frequently observed in
-            // DeepSeek-side fetches).
+
             '114.119.128.0/17',
             '119.8.0.0/16',
@@ -519 +369 @@
             '139.9.0.0/16',
             '159.138.0.0/16',
-            // Alibaba Cloud / Aliyun (publicly published ranges).
+
             '47.74.0.0/15',
             '47.88.0.0/14',
             '47.244.0.0/15',
             '8.208.0.0/12',
-            // Tencent Cloud.
+
             '49.51.0.0/16',
             '170.106.0.0/16',
-            // AWS (a representative subset; AWS publishes the full list at
-            // https://ip-ranges.amazonaws.com/ip-ranges.json — operators who
-            // need full coverage can add ranges via the filter above).
+
             '3.0.0.0/15',
             '13.32.0.0/15',
@@ -535 +383 @@
             '52.0.0.0/8',
             '54.0.0.0/8',
-            // Google Cloud.
+
             '34.64.0.0/10',
             '35.184.0.0/13',
@@ -546 +394 @@
             '35.224.0.0/12',
             '35.240.0.0/13',
-            // Microsoft / Azure.
+
             '13.64.0.0/11',
             '20.0.0.0/8',
@@ -552 +400 @@
             '52.224.0.0/11',
             '104.40.0.0/13',
-            // DigitalOcean.
+
             '64.225.0.0/16',
             '67.207.64.0/19',
@@ -565 +413 @@
             '167.99.0.0/16',
             '178.62.0.0/16',
-            // Linode / Akamai.
+
             '45.33.0.0/16',
             '45.56.64.0/18',
@@ -575 +423 @@
             '173.255.192.0/18',
             '192.46.208.0/20',
-            // OVH.
+
             '51.38.0.0/16',
             '51.68.0.0/16',
@@ -591 +439 @@
             '167.114.0.0/16',
             '198.27.64.0/18',
-            // Hetzner.
+
             '5.9.0.0/16',
             '78.46.0.0/15',
@@ -609 +457 @@
             '195.201.0.0/16',
             '213.133.96.0/19',
-            // Vultr / Choopa.
+
             '45.32.0.0/16',
             '45.63.0.0/16',
@@ -625 +473 @@
             '207.148.0.0/16',
             '208.85.16.0/20',
-            // Scaleway.
+
             '51.15.0.0/16',
             '51.158.0.0/15',
@@ -632 +480 @@
             '212.47.224.0/19',
             '212.83.128.0/19',
-            // Contabo.
+
             '109.123.224.0/19',
             '161.97.128.0/17',
             '173.212.192.0/18',
             '207.180.192.0/18',
-            // IBM Cloud / SoftLayer.
+
             '50.22.0.0/16',
             '50.23.0.0/16',
@@ -650 +498 @@
         );
 
-        /**
-         * Filters the list of datacenter / cloud IP CIDR ranges used to detect
-         * LLM-side fetchers that arrive without a recognizable user-agent.
-         *
-         * @param string[] $cidrs Array of CIDR strings (IPv4 today; IPv6 may be added).
-         */
         $filtered = apply_filters( 'llmafftm_datacenter_cidrs', $defaults );
 
@@ -661 +503 @@
     }
 
-    /**
-     * Check whether the given IPv4 address falls inside any of the configured
-     * datacenter CIDR ranges.
-     *
-     * @param string $ip IPv4 address.
-     * @return bool
-     */
     private function ip_in_datacenter_range( $ip ) {
         if ( ! is_string( $ip ) || $ip === '' ) {
@@ -674 +509 @@
 
         if ( ! filter_var( $ip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4 ) ) {
-            // IPv6 ranges are not in the default list; opt-in via filter.
+
             return false;
         }
@@ -703 +538 @@
     }
 
-    /**
-     * Returns true when the current request looks like a "cold" LLM-side
-     * datacenter fetch — i.e. the client IP belongs to a known cloud /
-     * datacenter range AND the request has no cookies AND no referer.
-     *
-     * Mirrors the worker's `datacenter_cold_fetch` hard-escalation rule.
-     * Real human visitors browsing a product page from Huawei Cloud / AWS /
-     * GCP / etc. with zero cookies and zero referer are exceedingly rare;
-     * LLM fetchers (DeepSeek-style) match this pattern routinely.
-     *
-     * @return array{is_datacenter:bool,is_cold:bool,client_ip:string}
-     */
     private function classify_network_origin() {
-        $client_ip   = $this->get_client_ip();
+        $client_ip   = llmafftm_get_client_ip();
         $is_dc       = $this->ip_in_datacenter_range( $client_ip );
         $cookie_hdr  = sanitize_text_field( wp_unslash( $_SERVER['HTTP_COOKIE'] ?? '' ) );
@@ -728 +551 @@
     }
 
-    /**
-     * Set detection threshold
-     */
     public function set_threshold($threshold) {
         $this->threshold = max(0.0, min(1.0, (float) $threshold));
     }
-    
-    /**
-     * Log suspicious event for analysis
-     */
-    public function log_suspicious_event($detection_result, $context = array()) {
-        $log_data = array(
-            'timestamp' => current_time('mysql'),
-            'ip' => $this->get_client_ip(),
-            'user_agent' => sanitize_text_field( wp_unslash( $_SERVER['HTTP_USER_AGENT'] ?? '' ) ),
-            'url' => $this->get_current_url(),
-            'score' => $detection_result['score'],
-            'is_llm_like' => $detection_result['is_llm_like'],
-            'signals' => $detection_result['signals'],
-            'context' => $context
-        );
-        
-        // Store in WordPress options (last 100 events)
-        $events = get_option('llmafftm_suspicious_events', array());
-        $events[] = $log_data;
-        
-        // Keep only last 100 events
-        if (count($events) > 100) {
-            $events = array_slice($events, -100);
-        }
-        
-        update_option('llmafftm_suspicious_events', $events);
-        
-        if ( defined( 'WP_DEBUG' ) && WP_DEBUG ) {
-            // phpcs:ignore WordPress.PHP.DevelopmentFunctions.error_log_error_log -- Debug logging for suspicious events.
-            error_log('[LLMAFFTM] Suspicious event: ' . wp_json_encode($log_data));
-        }
-    }
+
 }
 
-// Basic functional plugin
 class LLMAFFTM_Plugin {
-    
+
     private $option_name = 'llmafftm_token';
     private $option_site_id = 'llmafftm_site_id';
@@ -776 +564 @@
     private $option_request_logs = 'llmafftm_request_logs';
     private $option_enable_logging = 'llmafftm_enable_logging';
-    /**
-     * Optional Google Search Console meta "content" value (saved from plugin settings).
-     *
-     * @var string
-     */
+
     private $option_gsc_verification = 'llmafftm_gsc_verification_token';
     private $detector;
-    
+
     public function __construct() {
         $this->detector = new LLMAFFTM_Detector();
-        
-        // Load threshold from options
+
         $threshold = get_option('llmafftm_threshold', 0.6);
         $this->detector->set_threshold($threshold);
 
         add_action( 'init', array( $this, 'maybe_serve_plugin_sitemap' ), 0 );
+        add_action( 'init', array( $this, 'maybe_serve_plugin_robots' ), 0 );
         add_action( 'init', array( $this, 'maybe_serve_llms_txt' ), 0 );
         add_action( 'init', array( $this, 'maybe_serve_llms_full_txt' ), 0 );
@@ -807 +591 @@
         add_filter('robots_txt', array($this, 'filter_robots_txt'), 10, 2);
 
-        // Add JavaScript to set human_token cookie (footer via in_footer registration).
-        add_action( 'wp_enqueue_scripts', array( $this, 'enqueue_human_verification_script' ) );
-
-        // Inject Google Search Console site-verification meta tag on the
-        // public frontend. The default token is filterable via
-        // 'llmafftm_google_site_verification' so site owners can override
-        // (or disable, by returning ''') without editing this file.
         add_action( 'wp_head', array( $this, 'output_google_site_verification_meta' ), 1 );
     }
-    
+
     public function init() {
-        // Generate site ID if not exists (but NOT token - user must generate it manually)
         if (!get_option($this->option_site_id)) {
             $this->generate_site_id();
         }
 
-        // Reconcile existing/migrated state: token + site_id but onboarding not completed yet.
         $this->maybe_reconcile_onboarding();
     }
 
-    /**
-     * Serve /sitemap.xml from the public LLMAffiliate API (host query only).
-     *
-     * @return void
-     */
     public function maybe_serve_plugin_sitemap() {
-        if ( strtoupper( sanitize_text_field( wp_unslash( $_SERVER['REQUEST_METHOD'] ?? 'GET' ) ) ) !== 'GET' ) {
-            return;
-        }
-
-        if ( is_admin() || wp_doing_ajax() || ( defined( 'REST_REQUEST' ) && REST_REQUEST ) ) {
+        if ( ! $this->is_public_get_request() ) {
             return;
         }
 
         $norm = $this->get_normalized_request_path();
-        if ( ! $this->is_plugin_sitemap_path( $norm ) ) {
+        if ( ! $this->is_home_relative_path( $norm, '/sitemap.xml' ) ) {
             return;
         }
@@ -852 +618 @@
         echo '<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">' . "\n";
 
-        $host = wp_parse_url( home_url(), PHP_URL_HOST );
+        list( $host, $items ) = $this->fetch_public_user_sitemaps( 15 );
         if ( ! is_string( $host ) || $host === '' ) {
             echo '</urlset>';
@@ -858 +624 @@
         }
 
+        foreach ( $items as $row ) {
+            if ( ! is_array( $row ) || empty( $row['site_url'] ) ) {
+                continue;
+            }
+
+            $site_url = $row['site_url'];
+            if ( ! is_string( $site_url ) || esc_url( $site_url ) === '' ) {
+                continue;
+            }
+
+            $lastmod_raw = isset( $row['last_modified'] ) && is_string( $row['last_modified'] ) ? $row['last_modified'] : '';
+            $lastmod     = $this->format_sitemap_lastmod_w3c( $lastmod_raw );
+
+            $pc = isset( $row['products_count'] ) ? (int) $row['products_count'] : 0;
+            $tt = isset( $row['total_traffic'] ) ? (int) $row['total_traffic'] : 0;
+
+            $priority   = $this->compute_sitemap_priority( $pc, $tt );
+            $changefreq = $this->compute_sitemap_changefreq( $pc );
+
+            echo "\t<url>\n";
+            echo "\t\t<loc>" . esc_url( $site_url ) . "</loc>\n";
+            if ( $lastmod !== '' ) {
+                echo "\t\t<lastmod>" . esc_html( $lastmod ) . "</lastmod>\n";
+            }
+            echo "\t\t<changefreq>" . esc_html( $changefreq ) . "</changefreq>\n";
+            echo "\t\t<priority>" . esc_html( $priority ) . "</priority>\n";
+            echo "\t</url>\n";
+        }
+
+        echo '</urlset>';
+        exit;
+    }
+
+    public function maybe_serve_plugin_robots() {
+        if ( ! $this->is_public_get_request() ) {
+            return;
+        }
+
+        $norm = $this->get_normalized_request_path();
+        if ( ! $this->is_home_relative_path( $norm, '/robots.txt' ) ) {
+            return;
+        }
+
+        if ( (string) get_option( 'blog_public' ) === '0' ) {
+            return;
+        }
+
+        nocache_headers();
+        header( 'Content-Type: text/plain; charset=UTF-8', true );
+        header( 'X-LLMAFFTM-Interceptor: robots-txt', true );
+        header( 'Cache-Control: public, max-age=3600', true );
+
+        // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- plain-text robots.txt from trusted internal data.
+        echo $this->build_robots_txt();
+        exit;
+    }
+
+    private function fetch_public_user_sitemaps( $timeout ) {
+        $host = wp_parse_url( home_url(), PHP_URL_HOST );
+        if ( ! is_string( $host ) || $host === '' ) {
+            return array( '', array() );
+        }
+
         $api_url  = 'https://api.llmaffiliate.com/api/v1/enhanced-content/public/user-sitemaps?host=' . rawurlencode( $host );
-        $response = wp_remote_get( $api_url, array( 'timeout' => 15 ) );
+        $response = wp_remote_get( $api_url, array( 'timeout' => $timeout ) );
 
         $items = array();
@@ -869 +698 @@
         }
 
-        foreach ( $items as $row ) {
-            if ( ! is_array( $row ) || empty( $row['site_url'] ) ) {
-                continue;
-            }
-
-            $site_url = $row['site_url'];
-            if ( ! is_string( $site_url ) || esc_url( $site_url ) === '' ) {
-                continue;
-            }
-
-            $lastmod_raw = isset( $row['last_modified'] ) && is_string( $row['last_modified'] ) ? $row['last_modified'] : '';
-            $lastmod     = $this->format_sitemap_lastmod_w3c( $lastmod_raw );
-
-            $pc = isset( $row['products_count'] ) ? (int) $row['products_count'] : 0;
-            $tt = isset( $row['total_traffic'] ) ? (int) $row['total_traffic'] : 0;
-
-            $priority   = $this->compute_sitemap_priority( $pc, $tt );
-            $changefreq = $this->compute_sitemap_changefreq( $pc );
-
-            echo "\t<url>\n";
-            echo "\t\t<loc>" . esc_url( $site_url ) . "</loc>\n";
-            if ( $lastmod !== '' ) {
-                echo "\t\t<lastmod>" . esc_html( $lastmod ) . "</lastmod>\n";
-            }
-            echo "\t\t<changefreq>" . esc_html( $changefreq ) . "</changefreq>\n";
-            echo "\t\t<priority>" . esc_html( $priority ) . "</priority>\n";
-            echo "\t</url>\n";
-        }
-
-        echo '</urlset>';
-        exit;
-    }
-
-    /**
-     * Normalize lastmod to W3C dateTime in UTC (Google): YYYY-MM-DDTHH:MM:SS.mmmZ.
-     *
-     * @param string $raw From API (ISO-like string; may lack timezone or use microsecond precision).
-     * @return string Empty string if unparseable.
-     */
+        return array( $host, $items );
+    }
+
     private function format_sitemap_lastmod_w3c( $raw ) {
         if ( ! is_string( $raw ) || trim( $raw ) === '' ) {
@@ -940 +733 @@
     }
 
-    /**
-     * Derive sitemap priority from product count and traffic volume.
-     *
-     * @param int $products_count Number of products on this page.
-     * @param int $total_traffic  Total LLM traffic hits.
-     * @return string Priority value for the sitemap entry.
-     */
     private function compute_sitemap_priority( $products_count, $total_traffic ) {
         if ( $products_count >= 20 || $total_traffic >= 100 ) {
@@ -963 +749 @@
     }
 
-    /**
-     * Derive sitemap changefreq from product count.
-     *
-     * @param int $products_count Number of products on this page.
-     * @return string Change frequency for the sitemap entry.
-     */
     private function compute_sitemap_changefreq( $products_count ) {
         if ( $products_count >= 5 ) {
@@ -979 +759 @@
     }
 
-    /**
-     * @return string
-     */
+    private function is_public_get_request() {
+        if ( strtoupper( sanitize_text_field( wp_unslash( $_SERVER['REQUEST_METHOD'] ?? 'GET' ) ) ) !== 'GET' ) {
+            return false;
+        }
+        if ( is_admin() || wp_doing_ajax() || ( defined( 'REST_REQUEST' ) && REST_REQUEST ) ) {
+            return false;
+        }
+        return true;
+    }
+
     private function get_normalized_request_path() {
-        $current_url = $this->get_current_url();
+        $current_url = llmafftm_get_current_url();
         $parsed_path = wp_parse_url( $current_url, PHP_URL_PATH );
         $normalized_path = is_string( $parsed_path ) && $parsed_path !== ''
@@ -996 +783 @@
     }
 
-    /**
-     * @param string $normalized_path From get_normalized_request_path().
-     * @return bool
-     */
-    private function is_plugin_sitemap_path( $normalized_path ) {
-        $expected = wp_parse_url( home_url( '/sitemap.xml' ), PHP_URL_PATH );
+    private function is_home_relative_path( $normalized_path, $relative ) {
+        $expected = wp_parse_url( home_url( $relative ), PHP_URL_PATH );
         if ( ! is_string( $expected ) || $expected === '' ) {
             return false;
         }
-
         return untrailingslashit( $normalized_path ) === untrailingslashit( $expected );
     }
 
-    /**
-     * Check whether the request path matches /llms.txt.
-     *
-     * @param string $normalized_path From get_normalized_request_path().
-     * @return bool
-     */
-    private function is_llms_txt_path( $normalized_path ) {
-        $expected = wp_parse_url( home_url( '/llms.txt' ), PHP_URL_PATH );
-        if ( ! is_string( $expected ) || $expected === '' ) {
-            return false;
-        }
-        return untrailingslashit( $normalized_path ) === untrailingslashit( $expected );
-    }
-
-    /**
-     * Check whether the request path matches /llms-full.txt.
-     *
-     * @param string $normalized_path From get_normalized_request_path().
-     * @return bool
-     */
-    private function is_llms_full_txt_path( $normalized_path ) {
-        $expected = wp_parse_url( home_url( '/llms-full.txt' ), PHP_URL_PATH );
-        if ( ! is_string( $expected ) || $expected === '' ) {
-            return false;
-        }
-        return untrailingslashit( $normalized_path ) === untrailingslashit( $expected );
-    }
-
-    /**
-     * Extract an Amazon ASIN from a same-domain /buy/{asin} request path.
-     *
-     * Mirrors CF_worker.js matchBuyRedirectPath(): /buy/{asin} with optional trailing slash.
-     * Uses home_url() so subdirectory WordPress installs resolve correctly.
-     *
-     * @param string $normalized_path From get_normalized_request_path().
-     * @return string Uppercase ASIN, or empty string when the path is not a buy link.
-     */
+
     private function match_buy_redirect_asin( $normalized_path ) {
         if ( ! is_string( $normalized_path ) || $normalized_path === '' ) {
@@ -1066 +812 @@
     }
 
-    /**
-     * Resolve /buy/{asin} to the real merchant URL via the LLMAffiliate API.
-     *
-     * Purchase clicks bypass LLM detection (same as CF_worker.js serveBuyRedirect).
-     * Falls back to amazon.com/dp/{asin} when the API is unreachable.
-     *
-     * @return void
-     */
     public function maybe_serve_buy_redirect() {
-        if ( strtoupper( sanitize_text_field( wp_unslash( $_SERVER['REQUEST_METHOD'] ?? 'GET' ) ) ) !== 'GET' ) {
-            return;
-        }
-
-        if ( is_admin() || wp_doing_ajax() || ( defined( 'REST_REQUEST' ) && REST_REQUEST ) ) {
+        if ( ! $this->is_public_get_request() ) {
             return;
         }
@@ -1130 +864 @@
     }
 
-    /**
-     * @param string $location Absolute redirect target URL.
-     * @param string $interceptor_header Value for X-LLMAFFTM-Interceptor.
-     * @return void
-     */
     private function redirect_buy_target( $location, $interceptor_header ) {
         nocache_headers();
@@ -1143 +872 @@
     }
 
-    /**
-     * @param string $asin Normalized ASIN.
-     * @param string $interceptor_header Value for X-LLMAFFTM-Interceptor.
-     * @return void
-     */
     private function redirect_buy_fallback( $asin, $interceptor_header ) {
         $fallback = 'https://www.amazon.com/dp/' . rawurlencode( $asin );
@@ -1153 +877 @@
     }
 
-    /**
-     * Serve /llms.txt from the internal LLMAffiliate API.
-     *
-     * @return void
-     */
     public function maybe_serve_llms_txt() {
-        if ( strtoupper( sanitize_text_field( wp_unslash( $_SERVER['REQUEST_METHOD'] ?? 'GET' ) ) ) !== 'GET' ) {
-            return;
-        }
-
-        if ( is_admin() || wp_doing_ajax() || ( defined( 'REST_REQUEST' ) && REST_REQUEST ) ) {
+        $this->maybe_serve_llms_document(
+            '/llms.txt',
+            'https://api.llmaffiliate.com/api/v1/enhanced-content/internal/llms-txt',
+            'llms-txt',
+            array( $this, 'serve_llms_txt_fallback' )
+        );
+    }
+
+    public function maybe_serve_llms_full_txt() {
+        $this->maybe_serve_llms_document(
+            '/llms-full.txt',
+            'https://api.llmaffiliate.com/api/v1/enhanced-content/internal/llms-full-txt',
+            'llms-full-txt',
+            array( $this, 'serve_llms_full_txt_fallback' )
+        );
+    }
+
+    private function maybe_serve_llms_document( $relative_path, $api_url_base, $interceptor, $fallback ) {
+        if ( ! $this->is_public_get_request() ) {
             return;
         }
 
         $norm = $this->get_normalized_request_path();
-        if ( ! $this->is_llms_txt_path( $norm ) ) {
+        if ( ! $this->is_home_relative_path( $norm, $relative_path ) ) {
             return;
         }
@@ -1174 +907 @@
         $host = wp_parse_url( home_url(), PHP_URL_HOST );
         if ( ! is_string( $host ) || $host === '' ) {
-            $this->serve_llms_txt_fallback();
-            return;
-        }
-
-        $api_url  = 'https://api.llmaffiliate.com/api/v1/enhanced-content/internal/llms-txt?host=' . rawurlencode( $host );
+            call_user_func( $fallback );
+            return;
+        }
+
+        $api_url  = $api_url_base . '?host=' . rawurlencode( $host );
         $response = wp_remote_get( $api_url, array( 'timeout' => 15 ) );
 
@@ -1187 +920 @@
 
         if ( $text === '' ) {
-            $this->serve_llms_txt_fallback();
+            call_user_func( $fallback );
             return;
         }
@@ -1193 +926 @@
         nocache_headers();
         header( 'Content-Type: text/plain; charset=UTF-8', true );
-        header( 'X-LLMAFFTM-Interceptor: llms-txt', true );
+        header( 'X-LLMAFFTM-Interceptor: ' . $interceptor, true );
         header( 'Cache-Control: public, max-age=300', true );
 
@@ -1201 +934 @@
     }
 
-    /**
-     * Fallback llms.txt when the API is unreachable.
-     *
-     * @return void
-     */
     private function serve_llms_txt_fallback() {
         $host     = wp_parse_url( home_url(), PHP_URL_HOST );
@@ -1223 +951 @@
     }
 
-    /**
-     * Serve /llms-full.txt from the internal LLMAffiliate API.
-     *
-     * @return void
-     */
-    public function maybe_serve_llms_full_txt() {
-        if ( strtoupper( sanitize_text_field( wp_unslash( $_SERVER['REQUEST_METHOD'] ?? 'GET' ) ) ) !== 'GET' ) {
-            return;
-        }
-
-        if ( is_admin() || wp_doing_ajax() || ( defined( 'REST_REQUEST' ) && REST_REQUEST ) ) {
-            return;
-        }
-
-        $norm = $this->get_normalized_request_path();
-        if ( ! $this->is_llms_full_txt_path( $norm ) ) {
-            return;
-        }
-
-        $host = wp_parse_url( home_url(), PHP_URL_HOST );
-        if ( ! is_string( $host ) || $host === '' ) {
-            $this->serve_llms_full_txt_fallback();
-            return;
-        }
-
-        $api_url  = 'https://api.llmaffiliate.com/api/v1/enhanced-content/internal/llms-full-txt?host=' . rawurlencode( $host );
-        $response = wp_remote_get( $api_url, array( 'timeout' => 15 ) );
-
-        $text = '';
-        if ( ! is_wp_error( $response ) && (int) wp_remote_retrieve_response_code( $response ) === 200 ) {
-            $text = wp_remote_retrieve_body( $response );
-        }
-
-        if ( $text === '' ) {
-            $this->serve_llms_full_txt_fallback();
-            return;
-        }
-
-        nocache_headers();
-        header( 'Content-Type: text/plain; charset=UTF-8', true );
-        header( 'X-LLMAFFTM-Interceptor: llms-full-txt', true );
-        header( 'Cache-Control: public, max-age=300', true );
-
-        // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- plain-text Markdown from trusted internal API.
-        echo $text;
-        exit;
-    }
-
-    /**
-     * Fallback llms-full.txt when the API is unreachable.
-     *
-     * @return void
-     */
     private function serve_llms_full_txt_fallback() {
         $host     = wp_parse_url( home_url(), PHP_URL_HOST );
@@ -1292 +967 @@
     }
 
-    /**
-     * Sitemap and favicon: no LLM detection, no request logging.
-     *
-     * @param string $normalized_path From get_normalized_request_path().
-     * @return bool
-     */
     private function should_bypass_llm_interception( $normalized_path ) {
-        if ( $this->is_plugin_sitemap_path( $normalized_path ) ) {
+        if ( $this->is_home_relative_path( $normalized_path, '/robots.txt' ) ) {
             return true;
         }
-        if ( $this->is_llms_txt_path( $normalized_path ) || $this->is_llms_full_txt_path( $normalized_path ) ) {
+        if ( $this->is_home_relative_path( $normalized_path, '/sitemap.xml' ) ) {
+            return true;
+        }
+        if ( $this->is_home_relative_path( $normalized_path, '/llms.txt' ) || $this->is_home_relative_path( $normalized_path, '/llms-full.txt' ) ) {
             return true;
         }
@@ -1320 +992 @@
         }
 
-        $admin_style_handle = 'llmafftm-admin';
-        wp_register_style( $admin_style_handle, false, array(), LLMAFFTM_VERSION );
-        wp_enqueue_style( $admin_style_handle );
-        wp_add_inline_style( $admin_style_handle, $this->get_admin_styles() );
-
-        $admin_script_handle = 'llmafftm-admin';
-        wp_register_script(
-            $admin_script_handle,
-            '',
+        wp_enqueue_style(
+            'llmafftm-admin',
+            plugins_url( 'assets/admin.css', __FILE__ ),
+            array(),
+            LLMAFFTM_VERSION
+        );
+        wp_enqueue_script(
+            'llmafftm-admin',
+            plugins_url( 'assets/admin.js', __FILE__ ),
             array( 'jquery' ),
             LLMAFFTM_VERSION,
             true
         );
-        wp_enqueue_script( $admin_script_handle );
         wp_localize_script(
-            $admin_script_handle,
+            'llmafftm-admin',
             'llmafftmAdmin',
             array(
                 'nonces' => array(
-                    'threshold'         => wp_create_nonce( 'llmafftm_save_threshold' ),
-                    'logging'           => wp_create_nonce( 'llmafftm_save_logging' ),
-                    'clearEvents'       => wp_create_nonce( 'llmafftm_clear_events' ),
-                    'gscVerification'   => wp_create_nonce( 'llmafftm_save_gsc_verification' ),
+                    'threshold'       => wp_create_nonce( 'llmafftm_save_threshold' ),
+                    'logging'         => wp_create_nonce( 'llmafftm_save_logging' ),
+                    'clearEvents'     => wp_create_nonce( 'llmafftm_clear_events' ),
+                    'gscVerification' => wp_create_nonce( 'llmafftm_save_gsc_verification' ),
+                ),
+                'i18n' => array(
+                    'generating'             => __( 'Generating...', 'llmaffiliate-ai-traffic-monetizer' ),
+                    'regenerating'           => __( 'Regenerating...', 'llmaffiliate-ai-traffic-monetizer' ),
+                    'saving'                 => __( 'Saving...', 'llmaffiliate-ai-traffic-monetizer' ),
+                    'clearing'               => __( 'Clearing...', 'llmaffiliate-ai-traffic-monetizer' ),
+                    'copied'                 => __( 'Copied!', 'llmaffiliate-ai-traffic-monetizer' ),
+                    'copy'                   => __( 'Copy', 'llmaffiliate-ai-traffic-monetizer' ),
+                    'errorPrefix'            => __( 'Error:', 'llmaffiliate-ai-traffic-monetizer' ),
+                    'tokenGenerated'         => __( 'Token generated successfully. The token has been sent to the onboarding endpoint.', 'llmaffiliate-ai-traffic-monetizer' ),
+                    'tokenGenerateFailed'    => __( 'Failed to generate token', 'llmaffiliate-ai-traffic-monetizer' ),
+                    'tokenGenerateRetry'     => __( 'Failed to generate token. Please try again.', 'llmaffiliate-ai-traffic-monetizer' ),
+                    'confirmRegenerate'      => __( 'Are you sure you want to regenerate the token? The old token will no longer work and you will need to update it on llmaffiliate.com.', 'llmaffiliate-ai-traffic-monetizer' ),
+                    'tokenRegenerated'       => __( 'Token regenerated successfully. Update the new token on llmaffiliate.com in your site integration settings.', 'llmaffiliate-ai-traffic-monetizer' ),
+                    'tokenRegenerateFailed'  => __( 'Failed to regenerate token', 'llmaffiliate-ai-traffic-monetizer' ),
+                    'tokenRegenerateRetry'   => __( 'Failed to regenerate token. Please try again.', 'llmaffiliate-ai-traffic-monetizer' ),
+                    'thresholdSaved'         => __( 'Threshold saved successfully.', 'llmaffiliate-ai-traffic-monetizer' ),
+                    'thresholdSaveFailed'    => __( 'Failed to save threshold', 'llmaffiliate-ai-traffic-monetizer' ),
+                    'thresholdSaveRetry'     => __( 'Failed to save threshold. Please try again.', 'llmaffiliate-ai-traffic-monetizer' ),
+                    'loggingSaved'           => __( 'Logging preference saved.', 'llmaffiliate-ai-traffic-monetizer' ),
+                    'saveFailed'             => __( 'Failed to save', 'llmaffiliate-ai-traffic-monetizer' ),
+                    'loggingSaveFailed'      => __( 'Failed to save logging preference.', 'llmaffiliate-ai-traffic-monetizer' ),
+                    'confirmClearLogs'       => __( 'Are you sure you want to clear all request decision logs? This cannot be undone.', 'llmaffiliate-ai-traffic-monetizer' ),
+                    'logsCleared'            => __( 'All events cleared successfully.', 'llmaffiliate-ai-traffic-monetizer' ),
+                    'clearFailed'            => __( 'Failed to clear events', 'llmaffiliate-ai-traffic-monetizer' ),
+                    'clearRetry'             => __( 'Failed to clear events. Please try again.', 'llmaffiliate-ai-traffic-monetizer' ),
+                    'saved'                  => __( 'Saved.', 'llmaffiliate-ai-traffic-monetizer' ),
+                    'saveError'              => __( 'Error saving.', 'llmaffiliate-ai-traffic-monetizer' ),
+                    'gscInactive'            => __( 'Status: Not configured — no verification meta tag is output.', 'llmaffiliate-ai-traffic-monetizer' ),
+                    'gscActive'              => __( 'Status: Active — meta tag is output in the public HTML head.', 'llmaffiliate-ai-traffic-monetizer' ),
+                    'gscSaveFailed'          => __( 'Error saving Search Console token.', 'llmaffiliate-ai-traffic-monetizer' ),
+                    'confirmClearGsc'        => __( 'Remove Search Console verification from this site?', 'llmaffiliate-ai-traffic-monetizer' ),
                 ),
             )
         );
-        wp_add_inline_script( $admin_script_handle, $this->get_admin_scripts(), 'after' );
-        wp_add_inline_script( $admin_script_handle, $this->get_admin_settings_inline_script(), 'after' );
-    }
-    
+    }
+
     private function generate_token($force_onboarding = false) {
         $token = 'llmafftm_' . bin2hex(random_bytes(32));
         update_option($this->option_name, $token);
-        
-        // Reset onboarding success state when token is regenerated
+
         if ($force_onboarding) {
             delete_option($this->option_onboarding_success);
         }
-        
-        // Send to onboarding endpoint (only if not already successful or forced)
+
         $this->send_to_onboarding($token, $this->get_site_id(), home_url(), $force_onboarding);
-        
+
         return $token;
     }
-    
+
     private function generate_site_id() {
         $site_id = 'site_' . bin2hex(random_bytes(16));
@@ -1370 +1069 @@
         return $site_id;
     }
-    
+
     private function get_token() {
         $token = get_option($this->option_name);
         return $token ? $token : null;
     }
-    
+
     private function get_site_id() {
         $site_id = get_option($this->option_site_id);
@@ -1384 +1083 @@
     }
 
-    /**
-     * Self-heal onboarding when local token/site_id exist but backend onboarding was never completed.
-     */
     private function maybe_reconcile_onboarding() {
         if ( get_option($this->option_onboarding_success) === 'yes' ) {
@@ -1402 +1098 @@
         }
 
-        // Reuse send_to_onboarding guard logic; do not force duplicate calls.
         $this->send_to_onboarding($token, $site_id, home_url(), false);
     }
 
-    /**
-     * Whether request and suspicious-event logging is enabled.
-     *
-     * @return bool
-     */
     private function is_logging_enabled() {
         return (bool) get_option($this->option_enable_logging, true);
@@ -1444 +1134 @@
     }
 
-    private function get_client_ip() {
-        $ip_keys = array(
-            'HTTP_CF_CONNECTING_IP',
-            'HTTP_X_REAL_IP',
-            'HTTP_X_FORWARDED_FOR',
-            'HTTP_CLIENT_IP',
-            'REMOTE_ADDR'
-        );
-
-        foreach ($ip_keys as $key) {
-            if (!empty($_SERVER[$key])) {
-                $ip = sanitize_text_field( wp_unslash( $_SERVER[$key] ) );
-                if (strpos($ip, ',') !== false) {
-                    $ips = explode(',', $ip);
-                    $ip = trim($ips[0]);
-                }
-
-                if (filter_var($ip, FILTER_VALIDATE_IP)) {
-                    return $ip;
-                }
-            }
-        }
-
-        return sanitize_text_field( wp_unslash( $_SERVER['REMOTE_ADDR'] ?? '0.0.0' ) );
-    }
-
     private function log_request_decision($data = array()) {
-        $current_url = $this->get_current_url();
+        $current_url = llmafftm_get_current_url();
         $parsed_path = wp_parse_url($current_url, PHP_URL_PATH);
-        $normalized_path = is_string($parsed_path) && $parsed_path !== ''
-            ? untrailingslashit($parsed_path)
-            : '/';
-
-        if ($normalized_path === '') {
-            $normalized_path = '/';
-        }
+        $normalized_path = $this->get_normalized_request_path();
 
         $entry = array_merge(
             array(
                 'timestamp' => current_time('mysql'),
-                'ip' => $this->truncate_log_text($this->get_client_ip(), 64),
+                'ip' => $this->truncate_log_text(llmafftm_get_client_ip(), 64),
                 'url' => $this->truncate_log_text($current_url, 500),
                 'method' => $this->truncate_log_text(strtoupper( sanitize_text_field( wp_unslash( $_SERVER['REQUEST_METHOD'] ?? 'GET' ) ) ), 16),
@@ -1509 +1167 @@
                 'sec_ch_ua' => $this->truncate_log_text( sanitize_text_field( wp_unslash( $_SERVER['HTTP_SEC_CH_UA'] ?? '' ) ), 300),
                 'sec_ch_ua_platform' => $this->truncate_log_text( sanitize_text_field( wp_unslash( $_SERVER['HTTP_SEC_CH_UA_PLATFORM'] ?? '' ) ), 120),
-                'has_human_cookie' => isset($_COOKIE['llmafftm_human_token']) && !empty($_COOKIE['llmafftm_human_token']),
                 'signals' => array(),
             ),
@@ -1546 +1203 @@
         );
     }
-    
+
     private function send_to_onboarding($token, $site_id, $host, $force = false) {
-        // Check if already successfully sent (unless forced)
+
         if (!$force && get_option($this->option_onboarding_success) === 'yes') {
             if ( defined( 'WP_DEBUG' ) && WP_DEBUG ) {
@@ -1556 +1213 @@
             return true;
         }
-        
+
         $onboarding_url = 'https://api.llmaffiliate.com/api/v1/enhanced-content/onboarding/';
-        
+
         try {
             $response = wp_remote_post($onboarding_url, array(
@@ -1571 +1228 @@
                 )),
             ));
-            
+
             if (is_wp_error($response)) {
                 $error_message = $response->get_error_message();
@@ -1580 +1237 @@
                 return false;
             }
-            
+
             $status_code = wp_remote_retrieve_response_code($response);
-            
+
             if ($status_code >= 200 && $status_code < 300) {
-                // Mark as successful
+
                 update_option($this->option_onboarding_success, 'yes');
                 if ( defined( 'WP_DEBUG' ) && WP_DEBUG ) {
@@ -1599 +1256 @@
                 return false;
             }
-            
+
         } catch (Exception $e) {
             if ( defined( 'WP_DEBUG' ) && WP_DEBUG ) {
@@ -1614 +1271 @@
         }
     }
-    
+
     private function is_onboarding_successful() {
         return get_option($this->option_onboarding_success) === 'yes';
     }
-    
+
     public function ajax_generate_token() {
         check_ajax_referer('llmafftm_generate_token', 'nonce');
-        
+
         if (!current_user_can('manage_options')) {
-            wp_send_json_error(array('message' => 'Unauthorized'));
-        }
-        
+            wp_send_json_error(array('message' => __( 'Unauthorized', 'llmaffiliate-ai-traffic-monetizer' )));
+        }
+
         try {
-            // Check if token already exists
+
             if (get_option($this->option_name)) {
-                wp_send_json_error(array('message' => 'Token already exists. Use regenerate instead.'));
+                wp_send_json_error(array('message' => __( 'Token already exists. Use regenerate instead.', 'llmaffiliate-ai-traffic-monetizer' )));
                 return;
             }
-            
-            // Generate new token and force onboarding for first-time token creation.
+
             $new_token = $this->generate_token(true);
-            
+
             wp_send_json_success(array(
                 'token' => $new_token,
-                'message' => 'Token generated and sent to onboarding endpoint'
+                'message' => __( 'Token generated and sent to onboarding endpoint', 'llmaffiliate-ai-traffic-monetizer' )
             ));
         } catch (Exception $e) {
@@ -1645 +1301 @@
                 error_log('[LLMAFFTM] Generate token error: ' . $e->getMessage());
             }
-            wp_send_json_error(array('message' => 'Failed to generate token: ' . $e->getMessage()));
+            wp_send_json_error(array('message' => sprintf( /* translators: %s: error message */ __( 'Failed to generate token: %s', 'llmaffiliate-ai-traffic-monetizer' ), $e->getMessage() )));
         } catch (Error $e) {
             if ( defined( 'WP_DEBUG' ) && WP_DEBUG ) {
@@ -1651 +1307 @@
                 error_log('[LLMAFFTM] Generate token fatal error: ' . $e->getMessage());
             }
-            wp_send_json_error(array('message' => 'Fatal error generating token'));
-        }
-    }
-    
+            wp_send_json_error(array('message' => __( 'Fatal error generating token', 'llmaffiliate-ai-traffic-monetizer' )));
+        }
+    }
+
     public function ajax_regenerate_token() {
         check_ajax_referer('llmafftm_regenerate_token', 'nonce');
-        
+
         if (!current_user_can('manage_options')) {
-            wp_send_json_error(array('message' => 'Unauthorized'));
-        }
-        
+            wp_send_json_error(array('message' => __( 'Unauthorized', 'llmaffiliate-ai-traffic-monetizer' )));
+        }
+
         try {
-            // Force onboarding when regenerating token
+
             $new_token = $this->generate_token(true);
-            
+
             wp_send_json_success(array(
                 'token' => $new_token,
-                'message' => 'Token regenerated and sent to onboarding endpoint'
+                'message' => __( 'Token regenerated and sent to onboarding endpoint', 'llmaffiliate-ai-traffic-monetizer' )
             ));
         } catch (Exception $e) {
@@ -1675 +1331 @@
                 error_log('[LLMAFFTM] Regenerate token error: ' . $e->getMessage());
             }
-            wp_send_json_error(array('message' => 'Failed to regenerate token: ' . $e->getMessage()));
+            wp_send_json_error(array('message' => sprintf( /* translators: %s: error message */ __( 'Failed to regenerate token: %s', 'llmaffiliate-ai-traffic-monetizer' ), $e->getMessage() )));
         } catch (Error $e) {
             if ( defined( 'WP_DEBUG' ) && WP_DEBUG ) {
@@ -1681 +1337 @@
                 error_log('[LLMAFFTM] Regenerate token fatal error: ' . $e->getMessage());
             }
-            wp_send_json_error(array('message' => 'Fatal error regenerating token'));
-        }
-    }
-    
+            wp_send_json_error(array('message' => __( 'Fatal error regenerating token', 'llmaffiliate-ai-traffic-monetizer' )));
+        }
+    }
+
     public function ajax_save_threshold() {
         check_ajax_referer('llmafftm_save_threshold', 'nonce');
-        
+
         if (!current_user_can('manage_options')) {
-            wp_send_json_error(array('message' => 'Unauthorized'));
-        }
-        
-        $threshold = isset($_POST['threshold']) ? floatval($_POST['threshold']) : 0.6;
-        $threshold = max(0.0, min(1.0, $threshold)); // Clamp between 0 and 1
-        
+            wp_send_json_error(array('message' => __( 'Unauthorized', 'llmaffiliate-ai-traffic-monetizer' )));
+        }
+
+        $threshold = isset($_POST['threshold']) ? floatval( wp_unslash( $_POST['threshold'] ) ) : 0.6;
+        $threshold = max(0.0, min(1.0, $threshold));
+
         update_option('llmafftm_threshold', $threshold);
-        
-        // Update detector instance
+
         $this->detector->set_threshold($threshold);
-        
+
         wp_send_json_success(array(
             'threshold' => $threshold,
-            'message' => 'Threshold saved successfully'
+            'message' => __( 'Threshold saved successfully', 'llmaffiliate-ai-traffic-monetizer' )
         ));
     }
-    
+
     public function ajax_save_logging() {
         check_ajax_referer('llmafftm_save_logging', 'nonce');
         if ( ! current_user_can('manage_options') ) {
-            wp_send_json_error(array('message' => 'Unauthorized'));
-        }
-        $enabled = isset($_POST['enable_logging']) && $_POST['enable_logging'] === '1';
+            wp_send_json_error(array('message' => __( 'Unauthorized', 'llmaffiliate-ai-traffic-monetizer' )));
+        }
+        $enabled = isset($_POST['enable_logging']) && sanitize_text_field( wp_unslash( $_POST['enable_logging'] ) ) === '1';
         update_option($this->option_enable_logging, $enabled ? '1' : '0');
         wp_send_json_success(array(
-            'message' => $enabled ? 'Logging enabled.' : 'Logging disabled.',
+            'message' => $enabled ? __( 'Logging enabled.', 'llmaffiliate-ai-traffic-monetizer' ) : __( 'Logging disabled.', 'llmaffiliate-ai-traffic-monetizer' ),
             'enable_logging' => $enabled
         ));
     }
 
-    /**
-     * Save or clear the Google Search Console verification token from plugin settings.
-     *
-     * @return void
-     */
     public function ajax_save_gsc_verification() {
         check_ajax_referer( 'llmafftm_save_gsc_verification', 'nonce' );
 
         if ( ! current_user_can( 'manage_options' ) ) {
-            wp_send_json_error( array( 'message' => 'Unauthorized' ) );
+            wp_send_json_error( array( 'message' => __( 'Unauthorized', 'llmaffiliate-ai-traffic-monetizer' ) ) );
         }
 
@@ -1763 +1413 @@
     public function ajax_clear_events() {
         check_ajax_referer('llmafftm_clear_events', 'nonce');
-        
+
         if (!current_user_can('manage_options')) {
-            wp_send_json_error(array('message' => 'Unauthorized'));
-        }
-        
+            wp_send_json_error(array('message' => __( 'Unauthorized', 'llmaffiliate-ai-traffic-monetizer' )));
+        }
+
         delete_option('llmafftm_suspicious_events');
         delete_option($this->option_request_logs);
-        
+
         wp_send_json_success(array(
-            'message' => 'All logs cleared successfully'
+            'message' => __( 'All logs cleared successfully', 'llmaffiliate-ai-traffic-monetizer' )
         ));
     }
-    
+
     public function add_admin_menu() {
         add_options_page(
-            'LLMAffiliate AI Traffic Monetizer',
-            'LLMAffiliate AI Traffic',
+            __( 'LLMAffiliate AI Traffic Monetizer', 'llmaffiliate-ai-traffic-monetizer' ),
+            __( 'LLMAffiliate AI Traffic', 'llmaffiliate-ai-traffic-monetizer' ),
             'manage_options',
             'llmaffiliate-ai-traffic-monetizer',
@@ -1785 +1435 @@
         );
     }
-    
+
     public function admin_page() {
         $token = $this->get_token();
@@ -1794 +1444 @@
         $onboarding_success = $this->is_onboarding_successful();
         $has_token = !empty($token);
-        
-        // Load threshold into detector
+
         $threshold = get_option('llmafftm_threshold', 0.6);
         $this->detector->set_threshold($threshold);
@@ -1803 +1452 @@
                 <h1 class="llmafftm-title">
                     <span class="llmafftm-icon">🤖</span>
-                    LLMAffiliate AI Traffic Monetizer
+                    <?php esc_html_e( 'LLMAffiliate AI Traffic Monetizer', 'llmaffiliate-ai-traffic-monetizer' ); ?>
                 </h1>
-                <p class="llmafftm-subtitle">Enhanced Content Delivery for AI Assistants</p>
+                <p class="llmafftm-subtitle"><?php esc_html_e( 'Enhanced Content Delivery for AI Assistants', 'llmaffiliate-ai-traffic-monetizer' ); ?></p>
             </div>
-            
+
             <div class="llmafftm-status-card">
                 <div class="llmafftm-status-indicator">
                     <span class="llmafftm-status-dot active"></span>
-                    <span class="llmafftm-status-text">Plugin Active</span>
+                    <span class="llmafftm-status-text"><?php esc_html_e( 'Plugin Active', 'llmaffiliate-ai-traffic-monetizer' ); ?></span>
                 </div>
                 <div class="llmafftm-service-info">
-                    <strong>Content Service:</strong> 
+                    <strong><?php esc_html_e( 'Content Service:', 'llmaffiliate-ai-traffic-monetizer' ); ?></strong>
                     <code>https://api.llmaffiliate.com</code>
                 </div>
                 <div class="llmafftm-onboarding-status">
-                    <strong>Onboarding:</strong>
+                    <strong><?php esc_html_e( 'Onboarding:', 'llmaffiliate-ai-traffic-monetizer' ); ?></strong>
                     <?php if ($onboarding_success): ?>
-                        <span style="color: green;">✅ Registered</span>
+                        <span style="color: green;">✅ <?php esc_html_e( 'Registered', 'llmaffiliate-ai-traffic-monetizer' ); ?></span>
                     <?php else: ?>
-                        <span style="color: orange;">⏳ Pending</span>
+                        <span style="color: orange;">⏳ <?php esc_html_e( 'Pending', 'llmaffiliate-ai-traffic-monetizer' ); ?></span>
                     <?php endif; ?>
                 </div>
@@ -1880 +1529 @@
                 </div>
             </div>
-            
+
             <div class="llmafftm-token-section">
                 <div class="llmafftm-card">
                     <div class="llmafftm-card-header">
-                        <h2>🔑 API Token</h2>
-                        <p class="llmafftm-card-description">Your unique authentication token for the LLM Affiliate API</p>
+                        <h2>🔑 <?php esc_html_e( 'API Token', 'llmaffiliate-ai-traffic-monetizer' ); ?></h2>
+                        <p class="llmafftm-card-description"><?php esc_html_e( 'Your unique authentication token for the LLM Affiliate API', 'llmaffiliate-ai-traffic-monetizer' ); ?></p>
         </div>
-                    
+
                     <?php if ($has_token): ?>
                         <div class="llmafftm-token-display">
                             <div class="llmafftm-token-wrapper">
-                                <input 
-                                    type="text" 
-                                    id="llmafftm-token-input" 
-                                    class="llmafftm-token-input" 
-                                    value="<?php echo esc_attr($token); ?>" 
+                                <input
+                                    type="text"
+                                    id="llmafftm-token-input"
+                                    class="llmafftm-token-input"
+                                    value="<?php echo esc_attr($token); ?>"
                                     readonly
                                 >
-                                <button 
-                                    type="button" 
-                                    class="llmafftm-copy-btn" 
+                                <button
+                                    type="button"
+                                    class="llmafftm-copy-btn"
                                     data-copy-target="llmafftm-token-input"
-                                    title="Copy to clipboard"
+                                    title="<?php echo esc_attr__( 'Copy to clipboard', 'llmaffiliate-ai-traffic-monetizer' ); ?>"
                                 >
                                     <span class="llmafftm-copy-icon">📋</span>
-                                    <span class="llmafftm-copy-text">Copy</span>
+                                    <span class="llmafftm-copy-text"><?php esc_html_e( 'Copy', 'llmaffiliate-ai-traffic-monetizer' ); ?></span>
                                 </button>
                             </div>
                             <div class="llmafftm-token-actions">
-                                <button 
-                                    type="button" 
+                                <button
+                                    type="button"
                                     class="llmafftm-regenerate-btn button button-secondary"
                                     data-nonce="<?php echo esc_attr($regenerate_nonce); ?>"
                                 >
-                                    🔄 Regenerate Token
+                                    🔄 <?php esc_html_e( 'Regenerate Token', 'llmaffiliate-ai-traffic-monetizer' ); ?>
                                 </button>
                             </div>
                         </div>
-                        
+
                         <div class="llmafftm-token-info">
-                            <p><strong>⚠️ Important:</strong> Keep this token secure. Use it to authenticate API requests.</p>
+                            <p><strong>⚠️ <?php esc_html_e( 'Important:', 'llmaffiliate-ai-traffic-monetizer' ); ?></strong> <?php esc_html_e( 'Keep this token secure. Use it to authenticate API requests.', 'llmaffiliate-ai-traffic-monetizer' ); ?></p>
                         </div>
                     <?php else: ?>
                         <div class="llmafftm-no-token">
                             <div class="llmafftm-no-token-icon">🔑</div>
-                            <h3>No Token Generated Yet</h3>
-                            <p>You need to generate a token to connect your WordPress site to LLM Affiliate.</p>
-                            <button 
-                                type="button" 
+                            <h3><?php esc_html_e( 'No Token Generated Yet', 'llmaffiliate-ai-traffic-monetizer' ); ?></h3>
+                            <p><?php esc_html_e( 'You need to generate a token to connect your WordPress site to LLM Affiliate.', 'llmaffiliate-ai-traffic-monetizer' ); ?></p>
+                            <button
+                                type="button"
                                 class="llmafftm-generate-btn button button-primary button-large"
                                 data-nonce="<?php echo esc_attr($generate_nonce); ?>"
                             >
-                                ✨ Generate Token
+                                ✨ <?php esc_html_e( 'Generate Token', 'llmaffiliate-ai-traffic-monetizer' ); ?>
                             </button>
-                            <p class="llmafftm-generate-note">Click the button above to generate your unique API token. It will be automatically sent to the onboarding endpoint.</p>
+                            <p class="llmafftm-generate-note"><?php esc_html_e( 'Click the button above to generate your unique API token. It will be automatically sent to the onboarding endpoint.', 'llmaffiliate-ai-traffic-monetizer' ); ?></p>
                         </div>
                     <?php endif; ?>
                 </div>
             </div>
-            
+
             <div class="llmafftm-site-info-section">
                 <div class="llmafftm-card">
                     <div class="llmafftm-card-header">
-                        <h2>🌐 Site Information</h2>
+                        <h2>🌐 <?php esc_html_e( 'Site Information', 'llmaffiliate-ai-traffic-monetizer' ); ?></h2>
                     </div>
                     <div class="llmafftm-info-grid">
                         <div class="llmafftm-info-item">
-                            <label>Site ID:</label>
+                            <label><?php esc_html_e( 'Site ID:', 'llmaffiliate-ai-traffic-monetizer' ); ?></label>
                             <code class="llmafftm-code-block"><?php echo esc_html($site_id); ?></code>
                         </div>
                         <div class="llmafftm-info-item">
-                            <label>Site URL:</label>
+                            <label><?php esc_html_e( 'Site URL:', 'llmaffiliate-ai-traffic-monetizer' ); ?></label>
                             <code class="llmafftm-code-block"><?php echo esc_html($site_url); ?></code>
                         </div>
@@ -1957 +1606 @@
                 </div>
             </div>
-            
+
             <div class="llmafftm-setup-section">
                 <div class="llmafftm-card">
                     <div class="llmafftm-card-header">
-                        <h2>🚀 Setup Instructions</h2>
-                        <p class="llmafftm-card-description">Follow these steps to connect your WordPress site to LLM Affiliate</p>
+                        <h2>🚀 <?php esc_html_e( 'Setup Instructions', 'llmaffiliate-ai-traffic-monetizer' ); ?></h2>
+                        <p class="llmafftm-card-description"><?php esc_html_e( 'Follow these steps to connect your WordPress site to LLM Affiliate', 'llmaffiliate-ai-traffic-monetizer' ); ?></p>
                     </div>
-                    
+
                     <div class="llmafftm-steps">
                         <div class="llmafftm-step">
                             <div class="llmafftm-step-number">1</div>
                             <div class="llmafftm-step-content">
-                                <h3>Create Account on LLM Affiliate</h3>
-                                <p>Visit <a href="<?php echo esc_url( 'https://llmaffiliate.com' ); ?>" target="_blank" rel="noopener noreferrer" class="llmafftm-link">llmaffiliate.com</a> and create your account if you don't have one yet.</p>
-                                <p class="llmafftm-step-note">You'll need an account to integrate your WordPress site.</p>
+                                <h3><?php esc_html_e( 'Create Account on LLM Affiliate', 'llmaffiliate-ai-traffic-monetizer' ); ?></h3>
+                                <p><?php
+                                echo wp_kses_post(
+                                    sprintf(
+                                        /* translators: %s: LLMAffiliate homepage URL */
+                                        __( 'Visit <a href="%s" target="_blank" rel="noopener noreferrer">llmaffiliate.com</a> and create your account if you do not have one yet.', 'llmaffiliate-ai-traffic-monetizer' ),
+                                        esc_url( 'https://llmaffiliate.com' )
+                                    )
+                                );
+                                ?></p>
+                                <p class="llmafftm-step-note"><?php esc_html_e( 'You will need an account to integrate your WordPress site.', 'llmaffiliate-ai-traffic-monetizer' ); ?></p>
                             </div>
                         </div>
-                        
+
                         <div class="llmafftm-step">
                             <div class="llmafftm-step-number">2</div>
                             <div class="llmafftm-step-content">
-                                <h3>Add Your Site Integration</h3>
-                                <p>After logging in, go to your dashboard and click on <strong>"Add New Integration"</strong> or <strong>"Integrate Site"</strong>.</p>
+                                <h3><?php esc_html_e( 'Add Your Site Integration', 'llmaffiliate-ai-traffic-monetizer' ); ?></h3>
+                                <p><?php echo wp_kses_post( __( 'After logging in, go to your dashboard and click on <strong>"Add New Integration"</strong> or <strong>"Integrate Site"</strong>.', 'llmaffiliate-ai-traffic-monetizer' ) ); ?></p>
                             </div>
                         </div>
-                        
+
                         <div class="llmafftm-step">
                             <div class="llmafftm-step-number">3</div>
                             <div class="llmafftm-step-content">
-                                <h3>Enter Your Credentials</h3>
-                                <p>When prompted, enter the following information:</p>
+                                <h3><?php esc_html_e( 'Enter Your Credentials', 'llmaffiliate-ai-traffic-monetizer' ); ?></h3>
+                                <p><?php esc_html_e( 'When prompted, enter the following information:', 'llmaffiliate-ai-traffic-monetizer' ); ?></p>
                                 <?php if ($has_token): ?>
                                     <div class="llmafftm-credentials-box">
                                         <div class="llmafftm-credential-item">
-                                            <label>🔑 API Token:</label>
+                                            <label>🔑 <?php esc_html_e( 'API Token:', 'llmaffiliate-ai-traffic-monetizer' ); ?></label>
                                             <code class="llmafftm-credential-value"><?php echo esc_html($token); ?></code>
-                                            <button 
-                                                type="button" 
-                                                class="llmafftm-copy-small-btn" 
+                                            <button
+                                                type="button"
+                                                class="llmafftm-copy-small-btn"
                                                 data-copy-text="<?php echo esc_attr($token); ?>"
-                                                title="Copy token"
+                                                title="<?php echo esc_attr__( 'Copy token', 'llmaffiliate-ai-traffic-monetizer' ); ?>"
                                             >
                                                 📋
@@ -2003 +1660 @@
                                         </div>
                                         <div class="llmafftm-credential-item">
-                                            <label>🌐 Site ID:</label>
+                                            <label>🌐 <?php esc_html_e( 'Site ID:', 'llmaffiliate-ai-traffic-monetizer' ); ?></label>
                                             <code class="llmafftm-credential-value"><?php echo esc_html($site_id); ?></code>
-                                            <button 
-                                                type="button" 
-                                                class="llmafftm-copy-small-btn" 
+                                            <button
+                                                type="button"
+                                                class="llmafftm-copy-small-btn"
                                                 data-copy-text="<?php echo esc_attr($site_id); ?>"
-                                                title="Copy Site ID"
+                                                title="<?php echo esc_attr__( 'Copy Site ID', 'llmaffiliate-ai-traffic-monetizer' ); ?>"
                                             >
                                                 📋
@@ -2015 +1672 @@
                                         </div>
                                         <div class="llmafftm-credential-item">
-                                            <label>🔗 Site URL:</label>
+                                            <label>🔗 <?php esc_html_e( 'Site URL:', 'llmaffiliate-ai-traffic-monetizer' ); ?></label>
                                             <code class="llmafftm-credential-value"><?php echo esc_html($site_url); ?></code>
-                                            <button 
-                                                type="button" 
-                                                class="llmafftm-copy-small-btn" 
+                                            <button
+                                                type="button"
+                                                class="llmafftm-copy-small-btn"
                                                 data-copy-text="<?php echo esc_attr($site_url); ?>"
-                                                title="Copy URL"
+                                                title="<?php echo esc_attr__( 'Copy URL', 'llmaffiliate-ai-traffic-monetizer' ); ?>"
                                             >
                                                 📋
@@ -2030 +1687 @@
                                     <div class="llmafftm-credentials-box">
                                         <div class="llmafftm-credential-item">
-                                            <label>🔑 API Token:</label>
-                                            <code class="llmafftm-credential-value" style="color: #999; font-style: italic;">Generate token first</code>
+                                            <label>🔑 <?php esc_html_e( 'API Token:', 'llmaffiliate-ai-traffic-monetizer' ); ?></label>
+                                            <code class="llmafftm-credential-value" style="color: #999; font-style: italic;"><?php esc_html_e( 'Generate token first', 'llmaffiliate-ai-traffic-monetizer' ); ?></code>
                                         </div>
                                         <div class="llmafftm-credential-item">
-                                            <label>🌐 Site ID:</label>
+                                            <label>🌐 <?php esc_html_e( 'Site ID:', 'llmaffiliate-ai-traffic-monetizer' ); ?></label>
                                             <code class="llmafftm-credential-value"><?php echo esc_html($site_id); ?></code>
-                                            <button 
-                                                type="button" 
-                                                class="llmafftm-copy-small-btn" 
+                                            <button
+                                                type="button"
+                                                class="llmafftm-copy-small-btn"
                                                 data-copy-text="<?php echo esc_attr($site_id); ?>"
-                                                title="Copy Site ID"
+                                                title="<?php echo esc_attr__( 'Copy Site ID', 'llmaffiliate-ai-traffic-monetizer' ); ?>"
                                             >
                                                 📋
@@ -2046 +1703 @@
                                         </div>
                                         <div class="llmafftm-credential-item">
-                                            <label>🔗 Site URL:</label>
+                                            <label>🔗 <?php esc_html_e( 'Site URL:', 'llmaffiliate-ai-traffic-monetizer' ); ?></label>
                                             <code class="llmafftm-credential-value"><?php echo esc_html($site_url); ?></code>
-                                            <button 
-                                                type="button" 
-                                                class="llmafftm-copy-small-btn" 
+                                            <button
+                                                type="button"
+                                                class="llmafftm-copy-small-btn"
                                                 data-copy-text="<?php echo esc_attr($site_url); ?>"
-                                                title="Copy URL"
+                                                title="<?php echo esc_attr__( 'Copy URL', 'llmaffiliate-ai-traffic-monetizer' ); ?>"
                                             >
                                                 📋
@@ -2061 +1718 @@
                             </div>
                         </div>
-                        
+
                         <div class="llmafftm-step">
                             <div class="llmafftm-step-number">4</div>
                             <div class="llmafftm-step-content">
-                                <h3>Complete Integration</h3>
-                                <p>Click <strong>"Save"</strong> or <strong>"Integrate"</strong> to complete the setup. Your WordPress site will now be connected to LLM Affiliate!</p>
-                                <p class="llmafftm-step-note">✅ Once integrated, the plugin will automatically serve enhanced content to LLM visitors.</p>
+                                <h3><?php esc_html_e( 'Complete Integration', 'llmaffiliate-ai-traffic-monetizer' ); ?></h3>
+                                <p><?php echo wp_kses_post( __( 'Click <strong>"Save"</strong> or <strong>"Integrate"</strong> to complete the setup. Your WordPress site will now be connected to LLM Affiliate.', 'llmaffiliate-ai-traffic-monetizer' ) ); ?></p>
+                                <p class="llmafftm-step-note"><?php esc_html_e( 'Once integrated, the plugin will automatically serve enhanced content to LLM visitors.', 'llmaffiliate-ai-traffic-monetizer' ); ?></p>
                             </div>
                         </div>
                     </div>
-                    
+
                     <div class="llmafftm-help-box">
-                        <h4>💡 Need Help?</h4>
-                        <p>If you encounter any issues during setup, check our <a href="<?php echo esc_url( 'https://llmaffiliate.com/docs' ); ?>" target="_blank" rel="noopener noreferrer" class="llmafftm-link">documentation</a> or contact support.</p>
+                        <h4>💡 <?php esc_html_e( 'Need Help?', 'llmaffiliate-ai-traffic-monetizer' ); ?></h4>
+                        <p><?php
+                        echo wp_kses_post(
+                            sprintf(
+                                /* translators: %s: documentation URL */
+                                __( 'If you encounter any issues during setup, check our <a href="%s" target="_blank" rel="noopener noreferrer">documentation</a> or contact support.', 'llmaffiliate-ai-traffic-monetizer' ),
+                                esc_url( 'https://llmaffiliate.com/docs' )
+                            )
+                        );
+                        ?></p>
                     </div>
                 </div>
             </div>
-            
+
             <div class="llmafftm-detection-section">
                 <div class="llmafftm-card">
                     <div class="llmafftm-card-header">
-                        <h2>🔍 Advanced Detection Settings</h2>
-                        <p class="llmafftm-card-description">Configure the LLM detection threshold and view suspicious events</p>
+                        <h2>🔍 <?php esc_html_e( 'Advanced Detection Settings', 'llmaffiliate-ai-traffic-monetizer' ); ?></h2>
+                        <p class="llmafftm-card-description"><?php esc_html_e( 'Configure the LLM detection threshold and view request decision logs', 'llmaffiliate-ai-traffic-monetizer' ); ?></p>
                     </div>
-                    
+
         <?php
                     $current_threshold = get_option('llmafftm_threshold', 0.6);
                     $enable_logging = (bool) get_option('llmafftm_enable_logging', true);
-                    $suspicious_events = get_option('llmafftm_suspicious_events', array());
-                    $events_count = count($suspicious_events);
                     $request_logs = get_option($this->option_request_logs, array());
                     $request_logs_count = count($request_logs);
+                    delete_option( 'llmafftm_suspicious_events' );
                     ?>
-                    
+
                     <div class="llmafftm-logging-setting" style="margin-bottom: 24px; padding: 12px; background: #f9f9f9; border-radius: 6px;">
                         <label>
                             <input type="checkbox" id="llmafftm-enable-logging" <?php checked( $enable_logging, true ); ?>>
-                            <strong>Enable request and suspicious-event logging</strong>
+                            <strong><?php esc_html_e( 'Enable request decision logging', 'llmaffiliate-ai-traffic-monetizer' ); ?></strong>
                         </label>
                         <p class="description" style="margin: 8px 0 0 24px; color: #646970;">
-                            When enabled, the plugin stores request decisions and suspicious-event logs in the database for debugging and analysis. Disable to reduce stored data.
+                            <?php esc_html_e( 'When enabled, the plugin stores request decision logs in the database for debugging and analysis. Disable to reduce stored data.', 'llmaffiliate-ai-traffic-monetizer' ); ?>
                         </p>
-                        <button type="button" class="button button-secondary" id="llmafftm-save-logging" style="margin-top: 8px;">Save Logging Preference</button>
+                        <button type="button" class="button button-secondary" id="llmafftm-save-logging" style="margin-top: 8px;"><?php esc_html_e( 'Save Logging Preference', 'llmaffiliate-ai-traffic-monetizer' ); ?></button>
                     </div>
-                    
+
                     <div class="llmafftm-threshold-setting">
                         <label for="llmafftm-threshold">
-                            <strong>Detection Threshold:</strong> 
+                            <strong><?php esc_html_e( 'Detection Threshold:', 'llmaffiliate-ai-traffic-monetizer' ); ?></strong>
                             <span id="llmafftm-threshold-value"><?php echo esc_html($current_threshold); ?></span>
                         </label>
                         <p class="llmafftm-threshold-description">
-                            Requests with a score above this threshold (0.0-1.0) will be treated as LLM-like.
-                            Lower values = more sensitive (catches more bots). Higher values = more strict.
+                            <?php esc_html_e( 'Requests with a score above this threshold (0.0-1.0) will be treated as LLM-like. Lower values = more sensitive (catches more bots). Higher values = more strict.', 'llmaffiliate-ai-traffic-monetizer' ); ?>
                         </p>
-                        <input 
-                            type="range" 
-                            id="llmafftm-threshold" 
-                            min="0" 
-                            max="1" 
-                            step="0.05" 
+                        <input
+                            type="range"
+                            id="llmafftm-threshold"
+                            min="0"
+                            max="1"
+                            step="0.05"
                             value="<?php echo esc_attr($current_threshold); ?>"
                             style="width: 100%; margin: 10px 0;"
                         >
-                        <button 
-                            type="button" 
-                            class="button button-primary" 
+                        <button
+                            type="button"
+                            class="button button-primary"
                             id="llmafftm-save-threshold"
                         >
-                            Save Threshold
+                            <?php esc_html_e( 'Save Threshold', 'llmaffiliate-ai-traffic-monetizer' ); ?>
                         </button>
                     </div>
-                    
+
                     <div class="llmafftm-events-section">
-                        <h3>Request Decision Logs (Last 100)</h3>
-                        <p>Total request decisions logged: <strong><?php echo esc_html($request_logs_count); ?></strong></p>
-                        
+                        <h3><?php esc_html_e( 'Request Decision Logs (Last 100)', 'llmaffiliate-ai-traffic-monetizer' ); ?></h3>
+                        <p><?php esc_html_e( 'Total request decisions logged:', 'llmaffiliate-ai-traffic-monetizer' ); ?> <strong><?php echo esc_html( (string) $request_logs_count ); ?></strong></p>
+
                         <?php if ($request_logs_count > 0): ?>
                             <div class="llmafftm-events-table-wrapper">
@@ -2142 +1805 @@
                                     <thead>
                                         <tr>
-                                            <th>Time</th>
-                                            <th>Decision</th>
-                                            <th>Reason</th>
-                                            <th>Host</th>
-                                            <th>Method</th>
-                                            <th>Path</th>
-                                            <th>Profile</th>
-                                            <th>Score</th>
-                                            <th>Pattern</th>
-                                            <th>User-Agent</th>
-                                            <th>URL</th>
+                                            <th><?php esc_html_e( 'Time', 'llmaffiliate-ai-traffic-monetizer' ); ?></th>
+                                            <th><?php esc_html_e( 'Decision', 'llmaffiliate-ai-traffic-monetizer' ); ?></th>
+                                            <th><?php esc_html_e( 'Reason', 'llmaffiliate-ai-traffic-monetizer' ); ?></th>
+                                            <th><?php esc_html_e( 'Host', 'llmaffiliate-ai-traffic-monetizer' ); ?></th>
+                                            <th><?php esc_html_e( 'Method', 'llmaffiliate-ai-traffic-monetizer' ); ?></th>
+                                            <th><?php esc_html_e( 'Path', 'llmaffiliate-ai-traffic-monetizer' ); ?></th>
+                                            <th><?php esc_html_e( 'Profile', 'llmaffiliate-ai-traffic-monetizer' ); ?></th>
+                                            <th><?php esc_html_e( 'Score', 'llmaffiliate-ai-traffic-monetizer' ); ?></th>
+                                            <th><?php esc_html_e( 'Pattern', 'llmaffiliate-ai-traffic-monetizer' ); ?></th>
+                                            <th><?php esc_html_e( 'User-Agent', 'llmaffiliate-ai-traffic-monetizer' ); ?></th>
+                                            <th><?php esc_html_e( 'URL', 'llmaffiliate-ai-traffic-monetizer' ); ?></th>
                                         </tr>
                                     </thead>
                                     <tbody>
-                                        <?php 
+                                        <?php
                                         $recent_request_logs = array_slice(array_reverse($request_logs), 0, 100);
-                                        foreach ($recent_request_logs as $event): 
+                                        foreach ($recent_request_logs as $event):
                                         ?>
                                             <tr>
@@ -2211 +1874 @@
                                 </table>
                             </div>
-                            <button 
-                                type="button" 
-                                class="button button-secondary" 
+                            <button
+                                type="button"
+                                class="button button-secondary"
                                 id="llmafftm-clear-events"
                             >
-                                Clear All Logs
+                                <?php esc_html_e( 'Clear All Logs', 'llmaffiliate-ai-traffic-monetizer' ); ?>
                             </button>
                         <?php else: ?>
-                            <p class="llmafftm-events-empty-message">No request decision logs yet.</p>
-                        <?php endif; ?>
-                    </div>
-
-                    <div class="llmafftm-events-section">
-                        <h3>Suspicious Events (Last 100)</h3>
-                        <p>Total suspicious events logged: <strong><?php echo esc_html($events_count); ?></strong></p>
-
-                        <?php if ($events_count > 0): ?>
-                            <div class="llmafftm-events-table-wrapper">
-                                <table class="llmafftm-events-table">
-                                    <thead>
-                                        <tr>
-                                            <th>Time</th>
-                                            <th>IP</th>
-                                            <th>Score</th>
-                                            <th>LLM-Like</th>
-                                            <th>User-Agent</th>
-                                            <th>URL</th>
-                                        </tr>
-                                    </thead>
-                                    <tbody>
-                                        <?php 
-                                        $recent_events = array_slice(array_reverse($suspicious_events), 0, 100);
-                                        foreach ($recent_events as $event): 
-                                        ?>
-                                            <tr>
-                                                <td><?php echo esc_html($event['timestamp']); ?></td>
-                                                <td><code><?php echo esc_html($event['ip']); ?></code></td>
-                                                <td>
-                                                    <strong style="color: <?php echo esc_attr( $event['score'] >= 0.7 ? '#dc3545' : ( $event['score'] >= 0.4 ? '#ffc107' : '#28a745' ) ); ?>">
-                                                        <?php echo esc_html($event['score']); ?>
-                                                    </strong>
-                                                </td>
-                                                <td>
-                                                    <?php if ($event['is_llm_like']): ?>
-                                                        <span style="color: #dc3545;">✓ Yes</span>
-                                                    <?php else: ?>
-                                                        <span style="color: #6c757d;">✗ No</span>
-                                                    <?php endif; ?>
-                                                </td>
-                                                <td class="llmafftm-cell-wrap llmafftm-cell-ua">
-                                                    <code style="font-size: 11px;" title="<?php echo esc_attr( $event['user_agent'] ); ?>">
-                                                        <?php echo esc_html( (string) $event['user_agent'] ); ?>
-                                                    </code>
-                                                </td>
-                                                <td class="llmafftm-cell-wrap llmafftm-cell-url">
-                                                    <code style="font-size: 11px;" title="<?php echo esc_attr( $event['url'] ); ?>">
-                                                        <?php echo esc_html( (string) $event['url'] ); ?>
-                                                    </code>
-                                                </td>
-                                            </tr>
-                                        <?php endforeach; ?>
-                                    </tbody>
-                                </table>
-                            </div>
-                        <?php else: ?>
-                            <p class="llmafftm-events-empty-message">No suspicious events logged yet.</p>
+                            <p class="llmafftm-events-empty-message"><?php esc_html_e( 'No request decision logs yet.', 'llmaffiliate-ai-traffic-monetizer' ); ?></p>
                         <?php endif; ?>
                     </div>
                 </div>
             </div>
-            
+
             <div class="llmafftm-footer">
-                <p class="llmafftm-version">Version <?php echo esc_html( LLMAFFTM_VERSION ); ?> | <a href="<?php echo esc_url( 'https://llmaffiliate.com/docs' ); ?>" target="_blank" rel="noopener noreferrer">Documentation</a></p>
+                <p class="llmafftm-version"><?php esc_html_e( 'Version', 'llmaffiliate-ai-traffic-monetizer' ); ?> <?php echo esc_html( LLMAFFTM_VERSION ); ?> | <a href="<?php echo esc_url( 'https://llmaffiliate.com/docs' ); ?>" target="_blank" rel="noopener noreferrer"><?php esc_html_e( 'Documentation', 'llmaffiliate-ai-traffic-monetizer' ); ?></a></p>
             </div>
         </div>
@@ -2289 +1895 @@
     }
 
-    /**
-     * Admin settings UI behaviors (threshold, logging, clear events). Loaded via wp_add_inline_script().
-     *
-     * @return string
-     */
-    private function get_admin_settings_inline_script() {
-        ob_start();
-        ?>
-jQuery(document).ready(function($) {
-    var thresholdSlider = $('#llmafftm-threshold');
-    var thresholdValue = $('#llmafftm-threshold-value');
-    var saveThresholdBtn = $('#llmafftm-save-threshold');
-    var saveLoggingBtn = $('#llmafftm-save-logging');
-    var clearEventsBtn = $('#llmafftm-clear-events');
-
-    thresholdSlider.on('input', function() {
-        thresholdValue.text($(this).val());
-    });
-
-    saveThresholdBtn.on('click', function() {
-        var $btn = $(this);
-        var originalHtml = $btn.html();
-        $btn.prop('disabled', true).html('⏳ Saving...');
-
-        $.ajax({
-            url: ajaxurl,
-            type: 'POST',
-            data: {
-                action: 'llmafftm_save_threshold',
-                nonce: llmafftmAdmin.nonces.threshold,
-                threshold: thresholdSlider.val()
-            },
-            success: function(response) {
-                if (response.success) {
-                    alert('✅ Threshold saved successfully!');
-                } else {
-                    alert('❌ Error: ' + (response.data.message || 'Failed to save threshold'));
-                }
-                $btn.prop('disabled', false).html(originalHtml);
-            },
-            error: function() {
-                alert('❌ Error: Failed to save threshold. Please try again.');
-                $btn.prop('disabled', false).html(originalHtml);
-            }
-        });
-    });
-
-    saveLoggingBtn.on('click', function() {
-        var $btn = $(this);
-        var originalHtml = $btn.html();
-        var enabled = $('#llmafftm-enable-logging').is(':checked') ? '1' : '0';
-        $btn.prop('disabled', true).html('⏳ Saving...');
-        $.ajax({
-            url: ajaxurl,
-            type: 'POST',
-            data: {
-                action: 'llmafftm_save_logging',
-                nonce: llmafftmAdmin.nonces.logging,
-                enable_logging: enabled
-            },
-            success: function(response) {
-                if (response.success) {
-                    alert('✅ ' + (response.data.message || 'Logging preference saved.'));
-                } else {
-                    alert('❌ Error: ' + (response.data.message || 'Failed to save'));
-                }
-                $btn.prop('disabled', false).html(originalHtml);
-            },
-            error: function() {
-                alert('❌ Error: Failed to save logging preference.');
-                $btn.prop('disabled', false).html(originalHtml);
-            }
-        });
-    });
-
-    clearEventsBtn.on('click', function() {
-        if (!confirm('Are you sure you want to clear all suspicious events? This cannot be undone.')) {
-            return;
-        }
-
-        var $btn = $(this);
-        var originalHtml = $btn.html();
-        $btn.prop('disabled', true).html('⏳ Clearing...');
-
-        $.ajax({
-            url: ajaxurl,
-            type: 'POST',
-            data: {
-                action: 'llmafftm_clear_events',
-                nonce: llmafftmAdmin.nonces.clearEvents
-            },
-            success: function(response) {
-                if (response.success) {
-                    alert('✅ All events cleared successfully!');
-                    location.reload();
-                } else {
-                    alert('❌ Error: ' + (response.data.message || 'Failed to clear events'));
-                    $btn.prop('disabled', false).html(originalHtml);
-                }
-            },
-            error: function() {
-                alert('❌ Error: Failed to clear events. Please try again.');
-                $btn.prop('disabled', false).html(originalHtml);
-            }
-        });
-    });
-
-    $('#llmafftm-save-gsc-verification').on('click', function() {
-        var $btn = $(this);
-        var $status = $('#llmafftm-gsc-status');
-        var val = $('#llmafftm-gsc-token-input').val();
-        $btn.prop('disabled', true);
-        $.ajax({
-            url: ajaxurl,
-            type: 'POST',
-            data: {
-                action: 'llmafftm_save_gsc_verification',
-                nonce: llmafftmAdmin.nonces.gscVerification,
-                gsc_token: val
-            },
-            success: function(response) {
-                if (response.success) {
-                    alert(response.data.message || 'Saved.');
-                    if (!val || val.trim() === '') {
-                        $status.text('Status: Not configured — no verification meta tag is output.');
-                    } else {
-                        $status.text('Status: Active — meta tag is output in the public HTML head.');
-                    }
-                } else {
-                    alert((response.data && response.data.message) ? response.data.message : 'Error saving.');
-                }
-                $btn.prop('disabled', false);
-            },
-            error: function() {
-                alert('Error saving Search Console token.');
-                $btn.prop('disabled', false);
-            }
-        });
-    });
-
-    $('#llmafftm-clear-gsc-verification').on('click', function() {
-        if (!confirm('Remove Search Console verification from this site?')) {
-            return;
-        }
-        $('#llmafftm-gsc-token-input').val('');
-        $('#llmafftm-save-gsc-verification').trigger('click');
-    });
-});
-<?php
-        return trim(ob_get_clean());
-    }
-    
-    private function get_admin_styles() {
-        return '
-        .llmafftm-admin-wrap {
-            max-width: 1200px;
-            margin: 20px auto;
-        }
-        .llmafftm-header {
-            background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
-            color: white;
-            padding: 30px;
-            border-radius: 8px;
-            margin-bottom: 30px;
-            box-shadow: 0 4px 6px rgba(0,0,0,0.1);
-        }
-        .llmafftm-title {
-            margin: 0 0 10px 0;
-            font-size: 32px;
-            font-weight: 600;
-            display: flex;
-            align-items: center;
-            gap: 15px;
-        }
-        .llmafftm-icon {
-            font-size: 40px;
-        }
-        .llmafftm-subtitle {
-            margin: 0;
-            font-size: 16px;
-            opacity: 0.9;
-        }
-        .llmafftm-status-card {
-            background: #f8f9fa;
-            border: 1px solid #dee2e6;
-            border-radius: 8px;
-            padding: 20px;
-            margin-bottom: 30px;
-            display: flex;
-            justify-content: space-between;
-            align-items: center;
-            flex-wrap: wrap;
-            gap: 20px;
-        }
-        .llmafftm-status-indicator {
-            display: flex;
-            align-items: center;
-            gap: 10px;
-        }
-        .llmafftm-status-dot {
-            width: 12px;
-            height: 12px;
-            border-radius: 50%;
-            background: #dc3545;
-        }
-        .llmafftm-status-dot.active {
-            background: #28a745;
-            animation: pulse 2s infinite;
-        }
-        @keyframes pulse {
-            0%, 100% { opacity: 1; }
-            50% { opacity: 0.5; }
-        }
-        .llmafftm-status-text {
-            font-weight: 600;
-            color: #495057;
-        }
-        .llmafftm-service-info, .llmafftm-onboarding-status {
-            color: #6c757d;
-        }
-        .llmafftm-gsc-prominent {
-            margin-bottom: 30px;
-            border: 3px solid #2271b1;
-            border-radius: 8px;
-            background: linear-gradient(180deg, #f0f6fc 0%, #ffffff 55%);
-            box-shadow: 0 4px 14px rgba(34, 113, 177, 0.12);
-        }
-        .llmafftm-gsc-prominent-inner {
-            padding: 28px 32px;
-        }
-        .llmafftm-gsc-title {
-            margin: 0 0 12px 0;
-            font-size: 1.35rem;
-            line-height: 1.35;
-            color: #1d2327;
-            max-width: 960px;
-        }
-        .llmafftm-gsc-lead {
-            margin: 0 0 20px 0;
-            font-size: 16px;
-            line-height: 1.55;
-            color: #2c3338;
-            max-width: 720px;
-        }
-        .llmafftm-gsc-lead a {
-            font-weight: 600;
-        }
-        .llmafftm-gsc-token-input {
-            width: 100%;
-            max-width: 680px;
-            font-size: 16px;
-            padding: 12px 14px;
-            margin-bottom: 12px;
-            border-radius: 4px;
-            border: 1px solid #8c8f94;
-        }
-        .llmafftm-gsc-status {
-            margin: 0 0 16px 0;
-            font-weight: 600;
-            color: #1d2327;
-        }
-        .llmafftm-gsc-buttons {
-            display: flex;
-            flex-wrap: wrap;
-            gap: 16px;
-            align-items: center;
-        }
-        .llmafftm-gsc-btn-save {
-            min-height: 44px !important;
-            padding: 0 28px !important;
-            font-size: 15px !important;
-            font-weight: 600 !important;
-            line-height: 42px !important;
-            border-radius: 4px !important;
-            box-shadow: 0 2px 8px rgba(34, 113, 177, 0.35) !important;
-        }
-        .llmafftm-gsc-btn-save:hover,
-        .llmafftm-gsc-btn-save:focus {
-            box-shadow: 0 2px 10px rgba(34, 113, 177, 0.45) !important;
-        }
-        .llmafftm-gsc-btn-clear {
-            min-height: 44px !important;
-            padding: 0 22px !important;
-            font-size: 14px !important;
-            font-weight: 500 !important;
-            line-height: 40px !important;
-            border-radius: 4px !important;
-            background: #fff !important;
-            color: #50575e !important;
-            border: 2px solid #c3c4c7 !important;
-            box-shadow: none !important;
-        }
-        .llmafftm-gsc-btn-clear:hover,
-        .llmafftm-gsc-btn-clear:focus {
-            background: #f6f7f7 !important;
-            color: #1d2327 !important;
-            border-color: #8c8f94 !important;
-            box-shadow: none !important;
-        }
-        .llmafftm-card {
-            background: white;
-            border: 1px solid #dee2e6;
-            border-radius: 8px;
-            padding: 30px;
-            margin-bottom: 30px;
-            box-shadow: 0 2px 4px rgba(0,0,0,0.05);
-        }
-        .llmafftm-card-header h2 {
-            margin: 0 0 10px 0;
-            font-size: 24px;
-            color: #212529;
-        }
-        .llmafftm-card-description {
-            margin: 0 0 20px 0;
-            color: #6c757d;
-            font-size: 14px;
-        }
-        .llmafftm-token-display {
-            margin: 20px 0;
-        }
-        .llmafftm-token-wrapper {
-            display: flex;
-            gap: 10px;
-            margin-bottom: 15px;
-        }
-        .llmafftm-token-input {
-            flex: 1;
-            padding: 12px 15px;
-            font-family: "Courier New", monospace;
-            font-size: 14px;
-            border: 2px solid #dee2e6;
-            border-radius: 6px;
-            background: #f8f9fa;
-            color: #495057;
-            letter-spacing: 0.5px;
-        }
-        .llmafftm-token-input:focus {
-            outline: none;
-            border-color: #667eea;
-            background: white;
-        }
-        .llmafftm-copy-btn {
-            padding: 12px 20px;
-            background: #667eea;
-            color: white;
-            border: none;
-            border-radius: 6px;
-            cursor: pointer;
-            font-weight: 600;
-            display: flex;
-            align-items: center;
-            gap: 8px;
-            transition: all 0.3s;
-        }
-        .llmafftm-copy-btn:hover {
-            background: #5568d3;
-            transform: translateY(-2px);
-            box-shadow: 0 4px 8px rgba(102, 126, 234, 0.3);
-        }
-        .llmafftm-copy-btn.copied {
-            background: #28a745;
-        }
-        .llmafftm-copy-icon {
-            font-size: 16px;
-        }
-        .llmafftm-token-actions {
-            display: flex;
-            gap: 10px;
-        }
-        .llmafftm-regenerate-btn {
-            padding: 10px 20px;
-            border-radius: 6px;
-            font-weight: 600;
-        }
-        .llmafftm-token-info {
-            background: #fff3cd;
-            border-left: 4px solid #ffc107;
-            padding: 15px;
-            border-radius: 4px;
-            margin-top: 20px;
-        }
-        .llmafftm-token-info p {
-            margin: 0;
-            color: #856404;
-        }
-        .llmafftm-info-grid {
-            display: grid;
-            grid-template-columns: repeat(auto-fit, minmax(300px, 1fr));
-            gap: 20px;
-            margin-top: 20px;
-        }
-        .llmafftm-info-item {
-            display: flex;
-            flex-direction: column;
-            gap: 8px;
-        }
-        .llmafftm-info-item label {
-            font-weight: 600;
-            color: #495057;
-            font-size: 14px;
-        }
-        .llmafftm-code-block {
-            display: block;
-            padding: 10px 15px;
-            background: #f8f9fa;
-            border: 1px solid #dee2e6;
-            border-radius: 4px;
-            font-family: "Courier New", monospace;
-            font-size: 13px;
-            color: #495057;
-            word-break: break-all;
-        }
-        .llmafftm-steps {
-            margin: 30px 0;
-        }
-        .llmafftm-step {
-            display: flex;
-            gap: 20px;
-            margin-bottom: 30px;
-            padding: 20px;
-            background: #f8f9fa;
-            border-radius: 8px;
-            border-left: 4px solid #667eea;
-        }
-        .llmafftm-step-number {
-            width: 40px;
-            height: 40px;
-            background: #667eea;
-            color: white;
-            border-radius: 50%;
-            display: flex;
-            align-items: center;
-            justify-content: center;
-            font-weight: 700;
-            font-size: 18px;
-            flex-shrink: 0;
-        }
-        .llmafftm-step-content {
-            flex: 1;
-        }
-        .llmafftm-step-content h3 {
-            margin: 0 0 10px 0;
-            color: #212529;
-            font-size: 18px;
-        }
-        .llmafftm-step-content p {
-            margin: 8px 0;
-            color: #495057;
-            line-height: 1.6;
-        }
-        .llmafftm-step-note {
-            background: #e7f3ff;
-            border-left: 3px solid #2196F3;
-            padding: 10px 15px;
-            border-radius: 4px;
-            margin-top: 10px;
-            color: #0d47a1;
-            font-size: 14px;
-        }
-        .llmafftm-credentials-box {
-            background: white;
-            border: 2px solid #dee2e6;
-            border-radius: 8px;
-            padding: 20px;
-            margin: 20px 0;
-        }
-        .llmafftm-credential-item {
-            display: flex;
-            align-items: center;
-            gap: 15px;
-            margin-bottom: 15px;
-            padding: 12px;
-            background: #f8f9fa;
-            border-radius: 6px;
-        }
-        .llmafftm-credential-item:last-child {
-            margin-bottom: 0;
-        }
-        .llmafftm-credential-item label {
-            min-width: 100px;
-            font-weight: 600;
-            color: #495057;
-            font-size: 14px;
-        }
-        .llmafftm-credential-value {
-            flex: 1;
-            padding: 8px 12px;
-            background: white;
-            border: 1px solid #dee2e6;
-            border-radius: 4px;
-            font-family: "Courier New", monospace;
-            font-size: 13px;
-            color: #495057;
-            word-break: break-all;
-        }
-        .llmafftm-copy-small-btn {
-            padding: 8px 12px;
-            background: #667eea;
-            color: white;
-            border: none;
-            border-radius: 4px;
-            cursor: pointer;
-            font-size: 14px;
-            transition: all 0.3s;
-            flex-shrink: 0;
-        }
-        .llmafftm-copy-small-btn:hover {
-            background: #5568d3;
-            transform: scale(1.05);
-        }
-        .llmafftm-copy-small-btn.copied {
-            background: #28a745;
-        }
-        .llmafftm-link {
-            color: #667eea;
-            text-decoration: none;
-            font-weight: 600;
-        }
-        .llmafftm-link:hover {
-            text-decoration: underline;
-        }
-        .llmafftm-help-box {
-            background: #e7f3ff;
-            border-left: 4px solid #2196F3;
-            padding: 20px;
-            border-radius: 6px;
-            margin-top: 30px;
-        }
-        .llmafftm-help-box h4 {
-            margin: 0 0 10px 0;
-            color: #0d47a1;
-            font-size: 16px;
-        }
-        .llmafftm-help-box p {
-            margin: 0;
-            color: #1565c0;
-        }
-        .llmafftm-footer {
-            text-align: center;
-            padding: 20px;
-            color: #6c757d;
-            border-top: 1px solid #dee2e6;
-            margin-top: 40px;
-        }
-        .llmafftm-footer a {
-            color: #667eea;
-            text-decoration: none;
-        }
-        .llmafftm-footer a:hover {
-            text-decoration: underline;
-        }
-        .llmafftm-no-token {
-            text-align: center;
-            padding: 40px 20px;
-        }
-        .llmafftm-no-token-icon {
-            font-size: 64px;
-            margin-bottom: 20px;
-        }
-        .llmafftm-no-token h3 {
-            margin: 0 0 10px 0;
-            color: #212529;
-            font-size: 24px;
-        }
-        .llmafftm-no-token p {
-            margin: 10px 0;
-            color: #6c757d;
-            font-size: 16px;
-        }
-        .llmafftm-generate-btn {
-            margin: 20px 0;
-            padding: 15px 30px;
-            font-size: 16px;
-            font-weight: 600;
-        }
-        .llmafftm-generate-note {
-            margin-top: 15px;
-            font-size: 14px;
-            color: #6c757d;
-            font-style: italic;
-        }
-        .llmafftm-threshold-setting {
-            margin: 20px 0;
-            padding: 20px;
-            background: #f8f9fa;
-            border-radius: 6px;
-        }
-        .llmafftm-threshold-description {
-            margin: 10px 0;
-            color: #6c757d;
-            font-size: 14px;
-        }
-        .llmafftm-events-section {
-            margin-top: 30px;
-        }
-        .llmafftm-events-empty-message {
-            color: #6c757d;
-            font-style: italic;
-        }
-        .llmafftm-events-table-wrapper {
-            max-height: 500px;
-            overflow-y: auto;
-            margin: 20px 0;
-            border: 1px solid #dee2e6;
-            border-radius: 6px;
-        }
-        .llmafftm-events-table {
-            width: 100%;
-            border-collapse: collapse;
-            font-size: 13px;
-        }
-        .llmafftm-events-table thead {
-            background: #f8f9fa;
-            position: sticky;
-            top: 0;
-            z-index: 10;
-        }
-        .llmafftm-events-table th {
-            padding: 12px;
-            text-align: left;
-            font-weight: 600;
-            border-bottom: 2px solid #dee2e6;
-        }
-        .llmafftm-events-table td {
-            padding: 10px 12px;
-            border-bottom: 1px solid #dee2e6;
-        }
-        .llmafftm-events-table tbody tr:hover {
-            background: #f8f9fa;
-        }
-        .llmafftm-events-table code {
-            background: #e9ecef;
-            padding: 2px 6px;
-            border-radius: 3px;
-        }
-        /* Allow long log values (User-Agent, URL, Reason, Pattern, Host, Path)
-           to wrap inside their cell instead of being silently truncated, while
-           still bounding the per-cell width so the table layout stays readable. */
-        .llmafftm-events-table .llmafftm-cell-wrap {
-            max-width: 280px;
-            white-space: normal;
-            word-break: break-word;
-            overflow-wrap: anywhere;
-            vertical-align: top;
-        }
-        .llmafftm-events-table .llmafftm-cell-wrap code {
-            display: inline-block;
-            max-width: 100%;
-            white-space: pre-wrap;
-            word-break: break-word;
-            overflow-wrap: anywhere;
-            line-height: 1.4;
-        }
-        /* The User-Agent string is the longest field in practice, so give it
-           a bit more room and show it in a slightly tighter font. */
-        .llmafftm-events-table .llmafftm-cell-ua {
-            max-width: 360px;
-            min-width: 220px;
-        }
-        .llmafftm-events-table .llmafftm-cell-ua code {
-            font-size: 11px;
-            line-height: 1.45;
-        }
-        /* URL column: full URL is informative for debugging, so allow a
-           similar width and break long path/query segments cleanly. */
-        .llmafftm-events-table .llmafftm-cell-url {
-            max-width: 320px;
-            min-width: 200px;
-        }
-        .llmafftm-events-table .llmafftm-cell-url code {
-            font-size: 11px;
-        }
-        ';
-    }
-    
-    private function get_admin_scripts() {
-        return "
-        jQuery(document).ready(function($) {
-            // Generate token functionality
-            $('.llmafftm-generate-btn').on('click', function() {
-                var \$btn = $(this);
-                var originalHtml = \$btn.html();
-                \$btn.prop('disabled', true).html('⏳ Generating...');
-                
-                $.ajax({
-                    url: ajaxurl,
-                    type: 'POST',
-                    data: {
-                        action: 'llmafftm_generate_token',
-                        nonce: \$btn.data('nonce')
-                    },
-                    success: function(response) {
-                        if (response.success) {
-                            alert('✅ Token generated successfully!\\n\\nThe token has been sent to the onboarding endpoint.');
-                            location.reload();
-                        } else {
-                            alert('❌ Error: ' + (response.data.message || 'Failed to generate token'));
-                            \$btn.prop('disabled', false).html(originalHtml);
-                        }
-                    },
-                    error: function() {
-                        alert('❌ Error: Failed to generate token. Please try again.');
-                        \$btn.prop('disabled', false).html(originalHtml);
-                    }
-                });
-            });
-            
-            // Copy token functionality
-            $('.llmafftm-copy-btn').on('click', function() {
-                var \$btn = $(this);
-                var \$input = $('#' + \$btn.data('copy-target'));
-                var \$icon = \$btn.find('.llmafftm-copy-icon');
-                var \$text = \$btn.find('.llmafftm-copy-text');
-                
-                // Select and copy
-                \$input.select();
-                document.execCommand('copy');
-                
-                // Visual feedback
-                \$btn.addClass('copied');
-                \$icon.text('✓');
-                \$text.text('Copied!');
-                
-                setTimeout(function() {
-                    \$btn.removeClass('copied');
-                    \$icon.text('📋');
-                    \$text.text('Copy');
-                }, 2000);
-            });
-            
-            // Regenerate token
-            $('.llmafftm-regenerate-btn').on('click', function() {
-                if (!confirm('Are you sure you want to regenerate the token? The old token will no longer work and you will need to update it on llmaffiliate.com.')) {
-                    return;
-                }
-                
-                var \$btn = $(this);
-                var originalHtml = \$btn.html();
-                \$btn.prop('disabled', true).html('⏳ Regenerating...');
-                
-                $.ajax({
-                    url: ajaxurl,
-                    type: 'POST',
-                    data: {
-                        action: 'llmafftm_regenerate_token',
-                        nonce: \$btn.data('nonce')
-                    },
-                    success: function(response) {
-                        if (response.success) {
-                            $('#llmafftm-token-input').val(response.data.token);
-                            
-                            // Update all token references in the page
-                            $('.llmafftm-credential-value').first().text(response.data.token);
-                            $('.llmafftm-copy-small-btn').first().data('copy-text', response.data.token);
-                            
-                            alert('✅ Token regenerated successfully!\\n\\n⚠️ Important: Update the new token on llmaffiliate.com in your site integration settings.');
-                            
-                            // Reset button
-                            \$btn.prop('disabled', false).html(originalHtml);
-                        } else {
-                            alert('❌ Error: ' + (response.data.message || 'Failed to regenerate token'));
-                            \$btn.prop('disabled', false).html(originalHtml);
-                        }
-                    },
-                    error: function() {
-                        alert('❌ Error: Failed to regenerate token. Please try again.');
-                        \$btn.prop('disabled', false).html(originalHtml);
-                    }
-                });
-            });
-            
-            // Copy small buttons (for credentials)
-            $('.llmafftm-copy-small-btn').on('click', function() {
-                var \$btn = $(this);
-                var textToCopy = \$btn.data('copy-text');
-                
-                // Create temporary input
-                var \$temp = $('<input>');
-                $('body').append(\$temp);
-                \$temp.val(textToCopy).select();
-                document.execCommand('copy');
-                \$temp.remove();
-                
-                // Visual feedback
-                var originalText = \$btn.text();
-                \$btn.addClass('copied').text('✓');
-                
-                setTimeout(function() {
-                    \$btn.removeClass('copied').text(originalText);
-                }, 2000);
-            });
-        });
-        ";
-    }
-    
     public function maybe_intercept_request() {
-        $current_url = $this->get_current_url();
+        $current_url = llmafftm_get_current_url();
         $parsed_path = wp_parse_url($current_url, PHP_URL_PATH);
-        $normalized_path = is_string($parsed_path) && $parsed_path !== ''
-            ? untrailingslashit($parsed_path)
-            : '/';
-
-        if ($normalized_path === '') {
-            $normalized_path = '/';
-        }
+        $normalized_path = $this->get_normalized_request_path();
 
         if ( $this->should_bypass_llm_interception( $normalized_path ) ) {
@@ -3108 +1913 @@
         );
 
-        // Check if it's admin or API
         if (is_admin() || wp_doing_ajax() || (defined('REST_REQUEST') && REST_REQUEST)) {
             $this->log_request_decision(array_merge($base_log_context, array(
@@ -3116 +1920 @@
             return;
         }
-        
-        // Check method
+
         $method = strtoupper( sanitize_text_field( wp_unslash( $_SERVER['REQUEST_METHOD'] ?? 'GET' ) ) );
         if ($method !== 'GET') {
@@ -3127 +1930 @@
         }
 
-        // Always serve /ai-terms page to both humans and LLMs (highest priority)
         if (strpos($current_url, '/ai-terms') !== false) {
             $this->log_request_decision(array_merge($base_log_context, array(
@@ -3136 +1938 @@
             return;
         }
-        
+
         $user_agent = sanitize_text_field( wp_unslash( $_SERVER['HTTP_USER_AGENT'] ?? '' ) );
 
@@ -3148 +1950 @@
         }
 
-        // Explicit User-Agent whitelist (GPTBot, bare "Google"/Gemini, etc.): bypass the
-        // numeric threshold entirely so Gemini-style UAs stay enhanced at 0.6+ tuning.
         $match_details = $this->detect_llm_details($user_agent);
         $llm_profile   = $match_details['profile'];
@@ -3172 +1972 @@
         }
 
-        // Advanced detection: weighted score path (threshold applies only here).
         $detection_result = $this->detector->calculate_llm_score();
-        
-        // Log suspicious events (high score but not clearly LLM)
-        if ( $this->is_logging_enabled() && $detection_result['score'] >= 0.7 && ! $detection_result['is_llm_like'] ) {
-            $this->detector->log_suspicious_event($detection_result, array(
-                'reason' => 'high_score_below_threshold'
-            ));
-        }
-        
-        // Decision logic (score-based only; explicit UA already handled above):
-        // 1. LLM-like score (above threshold) -> serve enhanced
-        // 2. Otherwise -> serve normal content
-        
+
         $should_serve_enhanced = false;
         $confidence = 0.5;
-        
+
         if ($detection_result['is_llm_like']) {
-            // Detected as LLM-like via scoring
+
             $should_serve_enhanced = true;
             $confidence = $detection_result['score'];
-            
-            // Log the detection
-            if ( $this->is_logging_enabled() ) {
-                $this->detector->log_suspicious_event($detection_result, array(
-                    'action' => 'serving_enhanced_content',
-                    'confidence' => $confidence
-                ));
-            }
-        }
-        
+        }
+
         $detection_reasons = isset( $detection_result['reasons'] ) && is_array( $detection_result['reasons'] )
             ? $detection_result['reasons']
@@ -3208 +1988 @@
 
         if ($should_serve_enhanced) {
-            // Use detected profile or fallback to generic-llm
+
             $final_profile = $llm_profile ?: 'generic-llm';
             $score_reason = in_array( 'datacenter_cold_fetch', $detection_reasons, true )
@@ -3248 +2028 @@
         }
     }
-    
-    /**
-     * Register JavaScript to set human verification token (helps distinguish real browsers from bots).
-     */
-    public function enqueue_human_verification_script() {
-        if ( is_admin() || wp_doing_ajax() ) {
-            return;
-        }
-
-        $handle = 'llmafftm-human-token';
-        wp_register_script(
-            $handle,
-            '',
-            array(),
-            LLMAFFTM_VERSION,
-            true
-        );
-        wp_enqueue_script( $handle );
-        wp_add_inline_script(
-            $handle,
-            "(function() {\n\tvar token = 'human_' + Math.random().toString(36).substring(2, 15) + Math.random().toString(36).substring(2, 15);\n\tvar expires = new Date();\n\texpires.setTime(expires.getTime() + (24 * 60 * 60 * 1000));\n\tdocument.cookie = 'llmafftm_human_token=' + token + ';expires=' + expires.toUTCString() + ';path=/;SameSite=Lax';\n})();",
-            'after'
-        );
-    }
-    
+
     private function detect_llm_details($user_agent) {
-        // Gemini citation fetches sometimes send bare "Google" as User-Agent (any case).
+
         if ( preg_match( '/^\s*Google\s*$/i', $user_agent ) ) {
             return array(
@@ -3305 +2061 @@
             ],
             'perplexity' => [
-                // Order matters: more specific user-agent strings come first
-                // so the matched_pattern column in the admin logs UI shows
-                // the most informative pattern (e.g. "Perplexity-User" rather
-                // than the generic "Perplexity" substring).
+
                 '/Perplexity-User\/(\d+\.\d+)/i', '/Perplexity-User/i',
                 '/PerplexityBot\/(\d+\.\d+)/i', '/PerplexityBot/i',
@@ -3325 +2078 @@
             ],
         ];
-        
+
         foreach ($llm_patterns as $profile => $patterns) {
             foreach ($patterns as $pattern) {
@@ -3337 +2090 @@
             }
         }
-        
+
         return array(
             'profile' => false,
@@ -3345 +2098 @@
     }
 
-    private function detect_llm($user_agent) {
-        $details = $this->detect_llm_details($user_agent);
-        return $details['profile'];
-    }
-    
     private function map_llm_profile($detected_profile) {
-        // Mapear perfis detectados para os aceitos pelo content service
-        $profile_mapping = [
-            'openai' => 'openai',      // ChatGPT, OpenAI
-            'anthropic' => 'anthropic', // Claude
-            'google' => 'google',        // Gemini
-            'perplexity' => 'perplexity', // Perplexity
-            'mistral' => 'mistral',     // Mistral
-            'generic-llm' => 'generic-llm', // Pi, Llama, Grok, Cohere
-        ];
-        
-        return $profile_mapping[$detected_profile] ?? 'generic-llm';
-    }
-    
+        $allowed = array( 'openai', 'anthropic', 'google', 'perplexity', 'mistral', 'generic-llm' );
+        return in_array( $detected_profile, $allowed, true ) ? $detected_profile : 'generic-llm';
+    }
+
     private function detect_google_bot($user_agent) {
         $google_patterns = [
@@ -3380 +2119 @@
             '/mozilla.*googlebot/i',
         ];
-        
+
         foreach ($google_patterns as $pattern) {
             if (preg_match($pattern, $user_agent)) {
@@ -3386 +2125 @@
             }
         }
-        
+
         return false;
     }
-    
+
     private function serve_enhanced_content($user_agent, $llm_profile, $confidence = 0.85, $log_context = array()) {
-        $url = $this->get_current_url();
-        
-        // Mapear perfil para o formato aceito pelo content service
+        $url = llmafftm_get_current_url();
+
         $mapped_profile = $this->map_llm_profile($llm_profile);
-        
+
         $response = null;
         foreach ( $this->integration_url_lookup_candidates( $url ) as $candidate_url ) {
@@ -3419 +2157 @@
             }
         }
-        
+
         if (!is_wp_error($response) && wp_remote_retrieve_response_code($response) == 200) {
             $body = wp_remote_retrieve_body($response);
@@ -3430 +2168 @@
             )));
 
-            // Strip robots noindex/nofollow <meta> tags from the body so they
-            // never leak into the enhanced page that we serve to the visiting
-            // LLM client. (Mirrors stripRobotsNoindexDirectives() in CF_worker.js.)
             $body = $this->strip_robots_noindex_directives_from_html( $body );
 
-            // Clear any potentially-leaked compression/length headers BEFORE we
-            // emit our own. wp_remote_retrieve_body() has already decompressed
-            // the upstream payload, but a Content-Encoding / Content-Length /
-            // Transfer-Encoding header from the *compressed* upstream response
-            // can still end up on our outgoing response if any layer
-            // (mod_php / FastCGI / a caching plugin / the web server) decided
-            // to forward it. Forwarding them as-is causes some LLM-side
-            // fetchers — most notably Perplexity — to try to gunzip a
-            // plain-text body and fail with TLS-like / "request failed in this
-            // environment" errors.
             if ( ! headers_sent() ) {
                 header_remove( 'Content-Encoding' );
@@ -3450 +2175 @@
                 header_remove( 'Transfer-Encoding' );
 
-                // Drop any outgoing X-Robots-Tag that contains noindex/nofollow.
-                // SEO plugins or the origin server may have already added one;
-                // we do not want it on the enhanced page.
                 if ( function_exists( 'headers_list' ) ) {
                     foreach ( headers_list() as $sent_header ) {
@@ -3464 +2186 @@
             }
 
-            // Headers for enhanced content. Vary on every detection-affecting
-            // request header so an intermediary / CDN does not serve enhanced
-            // HTML to a human visitor and vice-versa.
             header( 'Content-Type: text/html; charset=UTF-8' );
             header( 'X-LLMAFFTM-Interceptor: enhanced' );
@@ -3473 +2192 @@
             header( 'Vary: User-Agent, Accept, Accept-Language, Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Mobile, Sec-Fetch-Site, Sec-Fetch-Mode, Sec-Fetch-Dest' );
 
-            // Escape late: run the proxied HTML document through wp_kses() with a
-            // full-document allow-list. This is a complete HTML page from our
-            // trusted HTTPS content API, so wp_kses_post() is not appropriate
-            // (it strips <html>/<head>/<meta>/<link>/<body>/<title>).
             echo wp_kses( $body, $this->get_allowed_full_html() );
             exit;
         } else {
-            // Log error for debugging
+
             $error_message = '';
             $status_code = null;
@@ -3510 +2225 @@
                 'service_error' => $error_message,
             )));
-            
-            // Fallback - add fallback header
+
             header('X-LLMAFFTM-Interceptor: fallback');
         }
     }
-    
-    /**
-     * Serve the AI Terms of Use page
-     * This page is always served to both humans and LLMs
-     */
+
     private function serve_ai_terms_page() {
-        // Include the AI terms page template
-        $plugin_dir = dirname(__FILE__);
-        $ai_terms_file = $plugin_dir . '/ai-terms-page.php';
-        
+
+        $ai_terms_file = plugin_dir_path( __FILE__ ) . 'ai-terms-page.php';
+
         if (file_exists($ai_terms_file)) {
             require_once $ai_terms_file;
-            
-            // Get the HTML content
+
             $html = llmafftm_get_ai_terms_html(home_url());
-            
-            // Set appropriate headers
+
             header('Content-Type: text/html; charset=UTF-8');
             header('X-LLMAFFTM-Interceptor: ai-terms-page');
             header('Cache-Control: public, max-age=3600');
             header('Vary: User-Agent');
-            
-            // Escape late: every variable inside the template is already
-            // escaped per-context via esc_html/esc_url/esc_attr, but we still
-            // run the final document through wp_kses() with a full-document
-            // allow-list so the output is sanitized by core before echoing.
+
             echo wp_kses( $html, $this->get_allowed_full_html() );
             exit;
         } else {
             if ( defined( 'WP_DEBUG' ) && WP_DEBUG ) {
-                // This error_log() call is gated behind WP_DEBUG so it only runs on developer
-                // environments; it reports a missing bundled template file (ai-terms-page.php)
-                // which would only happen if the plugin install was corrupted. There is no
-                // "safe" WordPress equivalent for writing a developer-only diagnostic line to
-                // the PHP error log, which is why WordPress.PHP.DevelopmentFunctions.error_log_error_log
-                // is suppressed here with an explicit justification.
-                // phpcs:ignore WordPress.PHP.DevelopmentFunctions.error_log_error_log
+                // phpcs:ignore WordPress.PHP.DevelopmentFunctions.error_log_error_log -- Debug logging for missing bundled template.
                 error_log( '[LLMAFFTM] AI Terms page file not found: ' . $ai_terms_file );
             }
@@ -3561 +2258 @@
     }
 
-    /**
-     * Allow-list of HTML tags/attributes for wp_kses() when rendering full
-     * HTML documents (the proxied enhanced-content response and our own
-     * standalone /ai-terms page). This is intentionally broad because we are
-     * serving complete HTML pages, not post content; wp_kses_post() would
-     * strip document-level tags such as <html>, <head>, <meta>, <link>,
-     * <title>, <body>, and <script>.
-     *
-     * The returned array is passed through the 'llmafftm_allowed_full_html'
-     * filter so site owners, extensions, or future plugin versions can extend
-     * it (for example, if the enhanced-content service starts emitting new
-     * tags or attributes) without editing this file. Example:
-     *
-     *     add_filter( 'llmafftm_allowed_full_html', function( $tags ) {
-     *         $tags['dialog']   = array( 'open' => true, 'class' => true );
-     *         $tags['template'] = array( 'id' => true );
-     *         return $tags;
-     *     } );
-     *
-     * @return array<string, array<string, bool>>
-     */
-    /**
-     * Strip robots noindex / nofollow <meta> tags from an HTML document.
-     *
-     * Mirrors stripRobotsNoindexDirectives() in CF_worker.js. Used on the
-     * enhanced-content body returned by the LLMAffiliate render API before
-     * we forward it to the visiting LLM client, so any upstream noindex /
-     * nofollow directives (e.g. injected by an SEO plugin or CDN edge layer
-     * on the origin response) do not leak into the enhanced page.
-     *
-     * The regex tolerates either order of `name="robots"` and `content="..."`
-     * attribute pairs and handles single OR double quotes around values.
-     *
-     * @param string $html HTML document to clean.
-     * @return string HTML with robots-noindex/nofollow <meta> tags removed.
-     */
     private function strip_robots_noindex_directives_from_html( $html ) {
         if ( ! is_string( $html ) || $html === '' ) {
@@ -3602 +2263 @@
         }
 
-        // Match "<meta name='robots' content='...noindex|nofollow...'>".
         $pattern_name_first = '#<meta\s+[^>]*\bname\s*=\s*["\']robots["\'][^>]*\bcontent\s*=\s*["\'][^"\']*(?:noindex|nofollow)[^"\']*["\'][^>]*>\s*#i';
         $cleaned = preg_replace( $pattern_name_first, '', $html );
@@ -3609 +2269 @@
         }
 
-        // Match the reversed-attribute variant: "<meta content='...' name='robots'>".
         $pattern_content_first = '#<meta\s+[^>]*\bcontent\s*=\s*["\'][^"\']*(?:noindex|nofollow)[^"\']*["\'][^>]*\bname\s*=\s*["\']robots["\'][^>]*>\s*#i';
         $cleaned_again = preg_replace( $pattern_content_first, '', $cleaned );
@@ -3712 +2371 @@
         );
 
-        /**
-         * Filters the allow-list of tags/attributes used by wp_kses() when rendering
-         * full HTML documents (the proxied enhanced-content response and the
-         * standalone /ai-terms page).
-         *
-         * @param array<string, array<string, bool>> $allowed Associative map of tag names to allowed attributes.
-         */
         return apply_filters( 'llmafftm_allowed_full_html', $allowed );
     }
-    
-    /**
-     * URLs to try when calling the render API (with/without trailing slash).
-     *
-     * @param string $url Absolute page URL.
-     * @return string[]
-     */
+
     private function integration_url_lookup_candidates( $url ) {
         $url = trim( (string) $url );
@@ -3743 +2389 @@
     }
 
-    /**
-     * Return the same absolute URL with its path trailing slash toggled.
-     *
-     * @param string $url Absolute URL.
-     * @return string Empty string when the URL cannot be parsed.
-     */
     private function toggle_url_trailing_slash( $url ) {
         $parts = wp_parse_url( $url );
@@ -3776 +2416 @@
     }
 
-    private function get_current_url() {
-        $scheme = is_ssl() ? 'https' : 'http';
-        $host = sanitize_text_field( wp_unslash( $_SERVER['HTTP_HOST'] ?? '' ) );
-        $uri = sanitize_text_field( wp_unslash( $_SERVER['REQUEST_URI'] ?? '/' ) );
-        return $scheme . '://' . $host . $uri;
-    }
-
-    /**
-     * Output the Google Search Console site-verification <meta> tag on
-     * public frontend page renders. Skipped for admin / AJAX / REST / feed
-     * responses so the token only appears where Search Console actually
-     * looks for it.
-     *
-     * Stored value comes from **Settings → LLMAffiliate AI Traffic** (optional field).
-     * Developers may still override with the same filter.
-     *
-     *     // Override with a different token:
-     *     add_filter( 'llmafftm_google_site_verification', function ( $stored ) {
-     *         return 'CUSTOM_TOKEN';
-     *     } );
-     *
-     *     // Disable the meta tag entirely:
-     *     add_filter( 'llmafftm_google_site_verification', '__return_empty_string' );
-     *
-     * @return void
-     */
     public function output_google_site_verification_meta() {
         if ( is_admin() || wp_doing_ajax() || is_feed() || ( defined( 'REST_REQUEST' ) && REST_REQUEST ) ) {
@@ -3807 +2421 @@
         }
 
-        /**
-         * Value saved in plugin settings (optional), then passed through this filter
-         * so themes or must-use plugins can override or clear it.
-         *
-         * @param string $token Verification meta content, or empty string if unset.
-         */
         $stored = get_option( $this->option_gsc_verification, '' );
         $stored = is_string( $stored ) ? trim( $stored ) : '';
@@ -3825 +2433 @@
     }
 
-    /**
-     * Paths under the site root for monetized pages (from public user-sitemaps API).
-     * Cached briefly to avoid calling the API on every robots.txt request.
-     *
-     * @return string[] Sorted unique paths like `/laptops`.
-     */
     private function get_monetized_paths_for_robots_txt() {
         $host = wp_parse_url( home_url(), PHP_URL_HOST );
@@ -3843 +2445 @@
         }
 
-        $api_url  = 'https://api.llmaffiliate.com/api/v1/enhanced-content/public/user-sitemaps?host=' . rawurlencode( $host );
-        $response = wp_remote_get( $api_url, array( 'timeout' => 10 ) );
+        list( , $items ) = $this->fetch_public_user_sitemaps( 10 );
 
         $seen = array();
-        if ( ! is_wp_error( $response ) && (int) wp_remote_retrieve_response_code( $response ) === 200 ) {
-            $data = json_decode( wp_remote_retrieve_body( $response ), true );
-            if ( is_array( $data ) && ! empty( $data['sitemaps'] ) && is_array( $data['sitemaps'] ) ) {
-                foreach ( $data['sitemaps'] as $row ) {
-                    if ( ! is_array( $row ) || empty( $row['site_url'] ) ) {
-                        continue;
-                    }
-                    $path = wp_parse_url( (string) $row['site_url'], PHP_URL_PATH );
-                    if ( ! is_string( $path ) || $path === '' || $path === '/' ) {
-                        continue;
-                    }
-                    $path = '/' . trim( untrailingslashit( $path ), '/' );
-                    if ( $path !== '/' ) {
-                        $seen[ $path ] = true;
-                    }
-                }
+        foreach ( $items as $row ) {
+            if ( ! is_array( $row ) || empty( $row['site_url'] ) ) {
+                continue;
+            }
+            $path = wp_parse_url( (string) $row['site_url'], PHP_URL_PATH );
+            if ( ! is_string( $path ) || $path === '' || $path === '/' ) {
+                continue;
+            }
+            $path = '/' . trim( untrailingslashit( $path ), '/' );
+            if ( $path !== '/' ) {
+                $seen[ $path ] = true;
             }
         }
@@ -3874 +2470 @@
     }
 
-    /**
-     * Emit LLMAFFTM robots.txt: WordPress-style `User-agent: *` (wp-admin rules +
-     * monetized paths), per-bot Allow blocks, Host, and plugin sitemap lines only.
-     *
-     * Core `Sitemap: …/wp-sitemap.xml` is omitted; use LLMAFFTM `/sitemap.xml` instead.
-     *
-     * Crawler list is filterable via `llmafftm_robots_allowed_user_agents` (should not
-     * include `*`; the default `*` block is always emitted first).
-     *
-     * @param string $output Existing robots.txt output (discarded when public).
-     * @param bool   $public Whether the site is public.
-     * @return string Modified robots.txt output.
-     */
     public function filter_robots_txt( $output, $public ) {
         if ( ! $public ) {
@@ -3892 +2475 @@
         }
 
+        return $this->build_robots_txt();
+    }
+
+    private function build_robots_txt() {
         $paths = $this->get_monetized_paths_for_robots_txt();
 
         $default_user_agents = array(
             '*',
-            // OpenAI.
+
             'GPTBot',
             'OAI-SearchBot',
             'ChatGPT-User',
-            // Anthropic.
+
             'ClaudeBot',
             'anthropic-ai',
-            // Google.
+
             'Googlebot',
             'Google-Extended',
@@ -3911 +2498 @@
             'GoogleOther-Image',
             'GoogleOther-Video',
-            // Perplexity.
+
             'PerplexityBot',
             'Perplexity-User',
-            // Microsoft / Bing.
+
             'Bingbot',
             'msnbot',
-            // Apple.
+
             'Applebot',
             'Applebot-Extended',
-            // Meta.
+
             'Meta-ExternalAgent',
             'FacebookBot',
-            // Amazon.
+
             'Amazonbot',
-            // Other AI crawlers.
+
             'cohere-ai',
             'Bytespider',
@@ -3933 +2520 @@
         );
 
-        /**
-         * Filters user-agent names after the default `*` block (order preserved; `*` ignored here).
-         *
-         * @param string[] $user_agents Crawler user-agent strings.
-         */
         $user_agents = apply_filters( 'llmafftm_robots_allowed_user_agents', $default_user_agents );
         if ( ! is_array( $user_agents ) ) {
@@ -3979 +2561 @@
 }
 
-/**
- * Cleanup plugin options on uninstall (true delete from Plugins screen).
- */
 function llmafftm_uninstall_plugin() {
     $option_keys = array(
@@ -3993 +2572 @@
         'llmafftm_gsc_verification_token',
         'llmafftm_legacy_options_migrated',
-        // Legacy keys for cleanup parity.
+
         'llm_interceptor_token',
         'llm_interceptor_site_id',
@@ -4009 +2588 @@
 register_uninstall_hook(__FILE__, 'llmafftm_uninstall_plugin');
 
-// Initialize plugin
 llmafftm_migrate_legacy_options();
 new LLMAFFTM_Plugin();

llmaffiliate-ai-traffic-monetizer/trunk/readme.txt

@@ -3 +3 @@
 Tags: ai, llm, chatbot, crawler, content delivery
 Requires at least: 6.0
-Tested up to: 7.0
+Tested up to: 7.1
 Requires PHP: 7.4
-Stable tag: 1.0.10
+Stable tag: 1.0.11
 License: GPL-2.0-or-later
 License URI: https://www.gnu.org/licenses/gpl-2.0.html
@@ -23 +23 @@
 - Serves enhanced HTML responses via a remote content service.
 - Automatically falls back to native WordPress rendering if the external service fails.
-- Adds cache-control, licensing, and optional Text and Data Mining headers.
-- Supports secure QA overrides using HMAC-signed query parameters.
+- Adds cache-control and interceptor diagnostic headers.
 
 = HOW IT WORKS =
@@ -48 +47 @@
 = OPERATIONAL LOGGING & PRIVACY =
 
-An in-plugin setting (**Settings → LLMAffiliate AI Traffic → Advanced Detection Settings**) allows you to disable request and suspicious-event logging. When disabled, no logs are stored. When enabled (default), the plugin may store operational or security logs. These may include:
+An in-plugin setting (**Settings → LLMAffiliate AI Traffic → Advanced Detection Settings**) allows you to disable request decision logging. When disabled, no logs are stored. When enabled (default), the plugin may store operational logs. These may include:
 * IP address
 * User agent
@@ -55 +54 @@
 * Selected HTTP headers
 * Detection and decision metadata
-* Suspicious-event or request logs
+* Request decision logs
 
 This logging is used for debugging, security analysis, and request classification. Data is stored within your WordPress database. Configure and retain logs in accordance with your privacy policy and applicable regulations.
@@ -82 +81 @@
 
     * **Purpose:** Registers your WordPress site with the LLM Affiliate backend so the site can receive enhanced content. Think of it as a one-time (idempotent) handshake.
-    * **When it is sent:** Only when you click **Generate Token** in the plugin admin screen (Settings → LLMAffiliate AI Traffic). It is also re-sent if you regenerate/rotate the token. It is **not** sent on every page load.
+    * **When it is sent:** When an administrator clicks **Generate Token** or **Regenerate Token** in Settings → LLMAffiliate AI Traffic. If a token already exists but onboarding has not yet succeeded, the plugin also retries this request from WordPress `init` until a successful response is stored. After onboarding succeeds, it is not sent again on later page loads.
     * **Data sent (JSON body):**
         * `token` – the authentication token generated by the plugin
@@ -97 +96 @@
         * `llm_profile` – the detected LLM profile name (e.g., `chatgpt`, `claude`, `gemini`)
         * `User-Agent` header – forwarded from the visiting LLM client
-        * `Accept-Language` header – forwarded from the visiting LLM client
         * `X-LLM-Profile` header – the plugin's detected profile
         * `X-LLM-Confidence` header – a numeric confidence score (0–1) from the local detector
@@ -105 +103 @@
 
     * **Purpose:** Returns JSON listing LLM-optimized sitemap URLs for the given site hostname so this plugin can serve `/sitemap.xml` (or the configured sitemap path) as a simple URL index for search engines.
-    * **When it is sent:** Only on GET requests that match the plugin’s dedicated sitemap path (not on normal page views). The `host` query parameter is your site’s hostname from WordPress `home_url()` (no path, no user input from forms).
+    * **When it is sent:** On GET requests that match the plugin’s dedicated sitemap path, and when the plugin builds `robots.txt` additions so it can list monetized paths. It is not sent on normal page views. The `host` query parameter is your site’s hostname from WordPress `home_url()` (no path, no user input from forms).
     * **Data sent:** `host` only, in the query string. Each item in the JSON `sitemaps` array includes `site_url`, `last_modified`, `products_count`, and `total_traffic`. Non-200 responses result in an empty `<urlset>` (no URLs listed).
 
@@ -162 +160 @@
 The plugin logs the failure (if enabled), adds an `X-LLMAFFTM-Interceptor: fallback` header, and allows WordPress to render normally.
 
-= How do signed overrides work? =
-Enable “Allow Signed Override” and configure an HMAC secret.
-
-Then append:
-`?llm_profile=<profile>&llm_sig=<signature>`
-
-Signature format:
-`hash_hmac('sha256', "<path>|<profile>", <secret>)`
-
 = Is this plugin safe for SEO? =
 Yes. Googlebot and other search crawlers always receive original content, ensuring compliance with search engine guidelines.
@@ -181 +170 @@
 
 == Changelog ==
+
+= 1.0.11 =
+* Settings: Advanced Detection Settings now shows request decision logs only; suspicious-event logging and its admin table were removed.
+* Compatibility: tested with WordPress 7.1.
+* Assets: admin page CSS and JavaScript moved out of inline output into `assets/admin.css` and `assets/admin.js`, registered and enqueued through the WordPress asset API.
+* Internationalization: admin screen labels and AJAX response messages are now translatable, with JavaScript strings passed through `wp_localize_script()`.
+* Hardening: `ABSPATH` guards added to every PHP file; `$_POST` values are run through `wp_unslash()` before sanitizing.
+* Housekeeping: removed dead code and the unused client-side human-token script; consolidated duplicated client-IP, current-URL, request-path, and llms document helpers.
 
 = 1.0.10 =
@@ -222 +219 @@
 * Replaced `urlencode()` in the enhanced-content URL builder with `rawurlencode()` so query-string values are encoded per RFC 3986, as recommended by the WordPress Plugin Review Team and `WordPress.PHP.DiscouragedPHPFunctions.urlencode_urlencode`.
 * Verified publicly reachable Terms of Service (`https://llmaffiliate.com/terms`) and Privacy Policy (`https://llmaffiliate.com/privacy`) URLs referenced from the `== External services ==` section of this readme.
-
 = 1.0.6 =
 * Readme: document the `public/user-sitemaps` external API used when serving the plugin sitemap URL.